Siemens SIMATIC ET 200AL, System Manual

Page: 1548 / 2255

Industrial Ethernet Security with CP 1543-1
15.2 Logging
Communication
Function Manual, 05/2021, A5E03735815-AJ
427
15.2 Logging
Functionality
For test and monitoring purposes, the security module has diagnostics and logging functions.
•
Diagnostics functions
These include various system and status functions that you can use in online mode.
• Logging functions
This involves the recording of system and security events. Depending on the event type,
the recording is made in volatile or non-volatile local buffer areas of the CP 1543-1. As an
alternative, it is also possible to record on a network server.
The parameter assignment and evaluation of these functions is only possible with a
network connection.
Recording events with logging functions
You specify which events should be recorded with the log settings. Here you can configure
the following recording variants:
•
Local logging
With this variant, you record the events in local buffers of the CP 1543-1. In the online
dialog of the Security Configuration Tool, you can then access these recordings, visualize
them and archive them on the service station.
• Network Syslog
With the network Syslog, you use a Syslog server in the network. This records the events
according to the configuration in the log settings.
15.3 NTP client
Functionality
To check the time validity of a certificate and the time stamp of log entries, the date and time
are maintained on the CP 1543-1 as on the CPU. This time can be synchronized with NTP. The
CP 1543-1 forwards the synchronized time to the CPU via the backplane bus of the
automation system. This way the CPU also receives a synchronized time for the time events in
program execution.
The automatic setting and periodic synchronization of the time takes place either via a secure
or non-secure NTP server. You can assign a maximum of 4 NTP servers to the CP 1543-1. A
mixed configuration of non-secure and secure NTP servers is not possible.