background image

Security recommendations 

 

 

 

SIMATIC RF166C 

14

 

Operating Instructions, 12/2019, C79000-G8976-C578-01 

Summary of Contents for SIMATIC RF166C

Page 1: ...Introduction 1 Security recommendations 2 Description 3 Mounting 4 Connecting 5 Configuring 6 Configuration using the WBM 7 Programming via SIMATIC controller 8 Programming via OPC UA 9 Service and maintenance 10 Technical specifications 11 Dimensional drawings 12 Appendix A Syslog messages B Service Support C ...

Page 2: ...onnel qualified for the specific task in accordance with the relevant documentation in particular its warning notices and safety instructions Qualified personnel are those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the following WARNING Siemens products may o...

Page 3: ...to functional ground 34 5 3 2 Mounting the CM on a conductive base 34 5 3 3 Mounting the CM on a non conductive base 36 5 4 Connecting the communications module 38 5 5 Loop through of the supply voltage and PROFIBUS 43 5 6 Effect of cable length on the supply voltage 44 5 7 Setting the PROFIBUS DP address 45 6 Configuring 49 6 1 Assigning IP address via DHCP 49 6 2 Configuration via PROFIBUS 51 6 ...

Page 4: ...ceEvent 117 9 3 3 RfidLastAccessEvent 117 9 3 4 AutoIdLastLogEntryEvent 122 10 Service and maintenance 123 10 1 Diagnostics 123 10 1 1 Diagnostics via the LED display 124 10 1 2 Diagnostics via SNMP 127 10 1 3 Diagnostics using the WBM 127 10 1 4 Diagnostics using the TIA Portal STEP 7 Basic Professional 128 10 1 5 Diagnostics over OPC UA 130 10 1 6 Parameterization of the diagnostics 131 10 1 7 D...

Page 5: ...echnical specifications 157 12 Dimensional drawings 159 A Appendix 161 A 1 System planning 161 A 2 Connecting cables 162 A 2 1 Standard cables 162 A 2 2 Custom assembled cables 163 A 3 Ordering data 164 A 4 Certificates approvals 167 B Syslog messages 169 B 1 Structure of the Syslog messages 169 B 2 Variables in Syslog messages 170 B 3 List of Syslog messages 171 C Service Support 175 ...

Page 6: ...Table of contents SIMATIC RF166C 6 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 7: ...arks of Siemens AG SIMATIC SIMATIC RF MOBY RF MANAGER SIMATIC Sensors Orientation in the documentation In addition to these operating instructions you require the operating instructions for the S7 300 S7 400 S7 1200 or S7 1500 controller used When using an S7 controller you can find information on programming the module and a complete error description in the description of the Ident profile and I...

Page 8: ...M Recycling and disposal The products are low in harmful substances can be recycled and meet the requirements of the Directive 2012 19 EU for disposal of waste electrical and electronic equipment WEEE Do not dispose of the products at public disposal sites For environmentally compliant recycling and disposal of your electronic waste please contact a company certified for the disposal of electronic...

Page 9: ... access to the device to qualified personnel Lock unused physical ports e g Ethernet ports on the device Unused ports can be used to access the system without authorization Software security functions Keep the software up to date Keep yourself informed regularly about safety updates for the product You can find information about this at Link http www siemens com industrialsecurity Activate only pr...

Page 10: ...ty keys and certificates that you need to set up SSL We urgently recommend creating your own SSL certificates and making them available Preset certificates and keys are present in the device The preset and automatically created SSL certificates are self signed We recommend using certificates signed either by a reliable external certification authority or an internal certification authority The dev...

Page 11: ... itself is signed and encrypted This ensures that only authentic firmware can be downloaded to the device Secure non secure protocols Check whether it is necessary to use SNMPv1 SNMPv1 is classified as non secure Make use of the possibility to prevent write access The product offers corresponding settings for this If SNMP is activated change the community names If unrestricted access is not necess...

Page 12: ... number Preset port status Port configura ble Port number configurable Authentication Encryption DHCP UDP 68 Open No No HTTP TCP 80 Open No No HTTPS TCP 443 Open Yes Yes NTP UDP 123 Closed No No SNMP UDP 161 Closed No No OPC UA TCP 4840 Open Yes simple when config ured Yes when configured Syslog UDP 514 Open No No Explanation of the table Authentication Specifies whether authentication of the comm...

Page 13: ... only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures e g firewalls and or network segmentation are in place For additional information on industrial security measures that may be implemented please visit Link https www siemens com industrialsecurity Siemens products and solutions undergo continuo...

Page 14: ...Security recommendations SIMATIC RF166C 14 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 15: ...directly near the RFID read points The small mounting surface of the communication module facilitates installation in confined spaces Two connections each for PROFIBUS DP and power supply enable configuration in a line structure The L coded M12 connectors for the power supply allow a high feed through current in a line structure In addition to the familiar configuration types via TIA Portal and GS...

Page 16: ...S7 1200 S7 1500 Supported third party controllers Source code of the Ident profile available All controllers with PROFIBUS and IEC61131 programming are supported 3 2 User specific procedure As described in the previous section the communication modules are designed for different environments and requirements If you operate the communication modules in an automation environment they are configured ...

Page 17: ...on on this in the section Programming via SIMATIC controller Page 97 Procedure as an OPC UA user 1 Connect the hardware You can find information on this in the section Connecting Page 27 2 IP address You can find information on this in the section Assigning IP address via DHCP Page 49 3 Configure the communication module You can find information on this in the section Configuration using the WBM P...

Page 18: ...ign of the RF166C Status LEDs PROFIBUS LED Reader interfaces M12 8 pin A coded 2x interface for the power supply M12 4 pin L coded Reader LEDs 2x interface for PROFIBUS M12 5 pin B coded Ethernet interface M12 4 pin D coded PROFIBUS address adjuster Ethernet LED Mounting holes and functional ground Figure 3 2 Design of the communication module ...

Page 19: ...rofessional V16 the RF166C communication module is integrated in the TIA Portal Integration into older STEP 7 versions and into 3rd party systems is performed via a GSD file The communication module can then be configured via the TIA Portal or another engineering system The GSD file is stored on the communication module and can be downloaded from it using a Web browser You can also find the GSD fi...

Page 20: ...Description 3 3 Design SIMATIC RF166C 20 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 21: ...ation and wind 4 1 Installation dimensions and position The RF166C communication modules have the following installation dimensions W H D 60 165 45 mm You can mount the communication modules in any mounting position Minimum clearances When installing the communication modules keep a minimum distance of 1 cm from an adjacent device or another device Mounting rules Note Mounting the communication mo...

Page 22: ...ablishes a reliable grounding connection This eliminates the need for a separate ground conductor If you use the fixing screw as grounding connection the thread of the fixing screw or the contact facing of the fastening nut on the base must be unpainted This ensures a low resistance connection Requirements The following table shows and explains the types of screws you need to mount the modules Tab...

Page 23: ... Instructions 12 2019 C79000 G8976 C578 01 23 Procedure Fasten the communication module with the screws on a solid level surface The device must be screwed 1 2 Nm onto the panel at both fastening points front top and bottom Figure 4 1 Installing RF166C communication module ...

Page 24: ...cified ambient temperature Table 4 2 Restrictions of the maximum specified ambient temperature with regard to the altitude Altitude Derating factor 1 000 to 2 000 m 1 0 2 000 to 3 000 m 0 9 3 000 to 4 000 m 0 8 4 000 to 5 000 m 0 7 The basic value for application of the derating factor is the maximum permissible ambient temperature up to 55 C for altitudes up to 2 000 m For altitudes 2 000 m you m...

Page 25: ...ronic components so called Soft Error Rate In rare cases this may result in the module entering the safe state this is especially true for safety modules However the functional safety of the module remains completely unaffected Currently valid markings and approvals Note Information on the nameplate You will find the currently valid markings and approvals on the nameplate of the communication modu...

Page 26: ...Mounting 4 3 Use at altitudes over 2 000 m SIMATIC RF166C 26 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 27: ...xtra low voltage SELV PELV according to EN 61140 CAUTION Damage to the device due to overvoltage The connection of the external power supply is not protected against strong electromagnetic pulses which can occur for example due to lightning or the switching of large loads One of the tests used to attest the immunity of the communication module to electromagnetic interference was the surge immunity...

Page 28: ...the supply voltage and PROFIBUS Page 43 Figure 5 1 Configuration graphic of a line topology Reader connector system One reader always occupies one M12 connection socket on the RF166C You can connect the reader to the communications module using a preassembled cable The connection cable is available in lengths of 2 5 10 20 and 50 m as standard If necessary these can be extended Figure 5 2 Overview ...

Page 29: ...supply 2L Load voltage Note that the power supply 1L supplies the communications module and the readers with power Load voltage 2L has no direct effect on the communications module This voltage is looped through to further consumers via the plug in connectors Safe electrical isolation SELV PELV according to IEC 60364 4 41 Power supply units power supply modules with safe electrical isolation are r...

Page 30: ...configuration The following figure shows the communications module in its overall electrical design Main switch Short circuit and overvoltage protection Fuses for line protection automatic circuit breaker for 16 A When setting up the communications module with ungrounded reference potential there is no connection between 1M 2M and FE Figure 5 3 Electrical design ...

Page 31: ...figure and compares the IEC regulations Table 5 1 Components of the electrical design Screen num ber Components IEC 60364 IEC 60204 Disconnecting device for controller sensors and actuators Main switch Disconnector Short circuit and overload protection Single pole protection of circuits Protect all power supply lines with a 24 V DC 16 A circuit breaker Single pole protection must be used for a gro...

Page 32: ...ectrical design of the communications module electrical isolation is provided between Load voltage 2L and all other circuit components Communication interfaces PROFIBUS of the communication module and all other circuit components The following figure shows the potential relationships of the communication modules Figure 5 4 Potential relationships of the communication modules ...

Page 33: ...L load voltage Another power supply may be required in order to supply all communications modules of an assembly with the required voltage Another voltage supply of 1L and 2L may be needed to form different potential groups or because the voltage is insufficient for all communications modules due to the voltage drop Create a power budget for the selection of the supply point of the voltage Note Sw...

Page 34: ...ainst external electrical influences Below is a description of what you must pay attention to in terms of protection against electrical impacts and or faults In all plants or systems in which the communication module is installed you must ensure that the plant or the system for dissipating electromagnetic interference is connected to functional ground For supply signal and bus lines you must ensur...

Page 35: ...her with the M4 fastening screws with a torque of 1 2 Nm NOTICE Grounding with a conductive mounting base If you fasten the communications module to a conductive grounded base the lower fastening screw provides a conductive connection to the ground potential Ensure there is a low impedance connection between the communications module and the conductive base and between the conductive base and func...

Page 36: ... mounting the module Required tools You need the following tools to connect to the functional ground Screwdriver Stripping tool Crimp tool Accessories required To connect to functional ground with a non conductive mounting base you can need the following accessories Fastening screw M4 and washer Cable lug suitable for M4 screws Ground conductor cable copper braid with a minimum cross section of 4 ...

Page 37: ...unting holes with a distance of 155 6 mm 2 Insulate the ground conductor 3 Attach the cable lug to the ground conductor 4 Screw the module and the cable lug together with the M4 fastening screws with a torque of 1 2 Nm NOTICE Grounding with non conductive mounting base Ensure a low impedance connection between the communications module and functional ground Figure 5 7 Mounting the CM on a non cond...

Page 38: ... the power supply X80 X81 M12 4 pin L coded Reader LEDs 2x interface for PROFIBUS DP1 DP2 M12 5 pin B coded Ethernet interface X2 LINK M12 4 pin D coded PROFIBUS address adjuster Ethernet LED Mounting holes and functional ground Figure 5 8 Design of the communication module You can loop the supply voltages and PROFIBUS via the M12 round sockets The pin assignments of the various interfaces are las...

Page 39: ... 4 x 1 5 mm2 preassembled If you want to make the cable yourself ensure that the cable has a conductor cross section of 1 5 mm2 and matches the connector you are using When using cables that are not preassembled you need the tool for the specific cable connector for example an insulation stripper screwdriver or Allen wrench Accessories required You need the following accessories For the reader con...

Page 40: ...es connectors Table 5 2 Pin assignment reader interface M12 socket 8 pin A coded Pin Assignment View of M12 socket 8 pin RS422 RS232 1 24 V 24 V 2 RxD 3 0 V 0 V 4 RxD RxD 5 TxD 5 V 6 TxD 7 TxD 8 Functional ground shielding Functional ground shielding Table 5 3 Pin assignment Ethernet M12 socket 4 pin D coded Pin Assignment View of M12 socket 4 pin 1 Data line TxP 2 Data line RxP 3 Data line TxN 4 ...

Page 41: ... 2 N2 0 V load supply white 3 N1 0 V blue 4 L2 24 V black Table 5 5 Pin assignment PROFIBUS interface M12 socket 5 pin A coded Pin Assignment View of M12 socket 5 pin 1 Plug Socket Power supply P5V 2 Data line A 3 Data reference potential M5 1 4 Data line B 5 Functional earth FE 1 The voltage may be used exclusively to supply the external terminating resistor Looping the volt age through to the ne...

Page 42: ...y tightening the knurled locking ring To guarantee the degree of protection you must fasten all connectors with 1 0 Nm NOTICE Ensuring the degree of protection You need to close all unused sockets with M12 sealing caps to ensure IP65 or IP67 degree of protection You can find the order data of the sealing caps in the section Ordering data Page 164 Connector for the reader connection M12 8 pin A cod...

Page 43: ...supply voltage to the RF166C The maximum supply current of the communication module is 16 A at 1L and 2L for a maximum ambient temperature of 40 C At ambient temperatures of 40 C to 55 C the maximum supply current is 12 A These values must not be exceeded Take note of the derating factor when operating at elevations above 2000 m Page 24 Adhere to the current carrying capacity of the connected cabl...

Page 44: ...opper cable with 1 5 mm2 A simple copper line is used as an example Depending on the design the power supply line and the ground line must be taken into account Figure 5 11 Voltage drop with a copper cables with a cross section of 1 5 mm2 To estimate the voltage drop in your communication module you must add the voltage drops of the cables Example With 16 A the voltage drop via the two L coded M12...

Page 45: ...on software A change of the PROFIBUS address is only valid after a supply voltage off on on the CM Required tools The following tools are required to set the PROFIBUS address Socket wrench 14 mm Screwdriver 2 5 mm Setting the PROFIBUS address Permitted PROFIBUS addresses are 01 to 99 Proceed as follows to set the PROFIBUS address 1 Remove the two M12 seal caps from the rotary coding switches if ne...

Page 46: ...ROFIBUS address Rotary coding switch for setting the PROFIBUS DP address 10th position Rotary coding switch for setting the PROFIBUS DP address 1st position Figure 5 12 PROFIBUS address adjuster on the RF166C The following table below shows the setting for PROFIBUS address 26 as an example Table 5 6 Setting example of the PROFIBUS address 10th position Position 2 1st position Position 6 ...

Page 47: ... DP segment with its characteristic impedance at its two ends i e at the first and at the last station of the segment A terminating resistor is available for this purpose It can be screwed onto the unused PROFIBUS interface of the CM The following figure shows a typical application for a terminating resistor PROFIBUS connection Terminating resistor Figure 5 13 Terminating resistor on RF166C ...

Page 48: ...Connecting 5 7 Setting the PROFIBUS DP address SIMATIC RF166C 48 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 49: ...ted and running You can find the Primary Setup Tool on the pages of Siemens Industry Online Support https support industry siemens com cs ww en view 19440762 Procedure Proceed as follows to assign a new unique IP address and a unique device name to the communication module 1 Open the Primary Setup Tool with Start All Programs Siemens Automation SIMATIC Primary Setup Tool 2 In the menu bar under Se...

Page 50: ... IP address for the communication module in the IP address input box 7 Enter the subnet mask of your network in the Subnet mask input box 8 Click on Assign Name to assign a unique device name to the communication module 9 Click the Load icon to transfer the settings to the communication module 10 Confirm the next dialog box with Yes Note Waiting time Wait until the IP address the device name has b...

Page 51: ...e connection is made via PROFIBUS the configuration via the TIA Portal and operation of the communication module via the Ident blocks of the TIA Portal You can further configure the communication module using WBM The GSD file corresponding to the communication module is stored on the communication module and can be downloaded from it using the WBM You can also find the GSD file at the website of S...

Page 52: ...arameter group Table 6 1 Parameters of the Web Based Management parameter group Parameter Description IP address Enter the IP address of the communication module in this input box This is required to start the Web Based Management of the communication module Web Based Manage ment Start Web Based Management of the communication module Web Based Management WBM offers extensive functions for configur...

Page 53: ...he con troller FB 45 Single tag mode FB 45 is used in the con troller MOBY mode RF200 RF300 RF600 MV400 MV500 MOBY U D normal addr RF200 RF300 RF60 0 MV400 MV500 MOBY U D normal addr With this parameter you set the mode of the communication module RF200 RF300 RF600 MV400 500 MOBY U D normal addr Normal addressing The transponder is ad dressed with physical addresses Transmission speed 19 2 kBd 57 ...

Page 54: ...ock manuals FB 45 for RF200 RF300 RFID standard profile standard function for RFID systems Ident profile and Ident blocks standard function for Ident systems 6 3 Configuration via OPC UA This section is intended only for OPC UA users You can read diagnostic data from the communication modules via OPC UA You can find detailed information on the OPC output voltage functions in the section Programmin...

Page 55: ...the configuration to the communication module In the following the term WBM is used to represent the WBM interface displayed in the Web browser Figure 7 1 Design and function of the WBM 7 1 Starting WBM Requirement The communication module is connected turned on and ready for operation RUN LED is lit or flashing green and the relevant communication module has been assigned an IP address To achieve...

Page 56: ...ed as follows to start the WBM 1 Start your Web browser 2 Enter the IP address of the communication module in the address field of your browser 3 Confirm your entry by pressing the Enter key Result WBM of the communication module opens Alternatively you can also open the WBM from the TIA Portal Figure 7 2 The start page of the WBM ...

Page 57: ...ement After starting the WBM the first time no user management is enabled To make sure that no unauthorized persons can access the communication module settings we recommend that you enable the user management and create new user profiles after the first login Note that user administration can only be enabled by an administrator During your first login as administrator User admin password admin yo...

Page 58: ...8 01 Layout of the WBM Once the connection to the communication module has been successfully established the WBM start window appears The WBM start window is divided into the following areas Toolbar status bar and log on Menu tree Main window Message area Information bar Figure 7 3 Start window of the WBM ...

Page 59: ...from PC With this button you can load the configuration data stored on the PC in the WBM Remember that this data is only loaded in the WBM To transfer the data to the com munication module you also need to click the Transfer configuration to communica tion module button Key combination Ctrl O Note Transferring a configuration Please note that transferring a configuration can disrupt running user a...

Page 60: ...function Log Overview of log entries Service log Information for service cases Syslog log Overview of Syslog messages Edit transponder Reading out and writing transponder data User management Enabling disabling user management Creating and deleting user profiles Changing passwords System System settings Performing a firmware update for the communication module Restoring the factory settings for th...

Page 61: ...all WBM related error messages and warnings e g transfer errors Information bar The information bar displays deviations between the settings in the user interface of the WBM and the configuration stored on the connected communication module Minor deviations are designated by a yellow symbol Changes that lead to a restart of the communication module are designated by an orange symbol While you are ...

Page 62: ...rmware link you jump to the System menu item in which you can update firmware The Configuration ID box contains a unique identifier for the configuration that was last activated on the communication module or loaded into the communication module Click the Default configuration button to reset the parameters shown in the user interface to the default values When you restore the default configuratio...

Page 63: ... address Device clock With the Synchronize with PC button you can synchronize the device clock with the time in your operating system Note The device time always corresponds to UTC time Note that the time of the device clock corresponds to UTC time and cannot be adjusted to time zones Clicking the button transfers the local time stored in your operating system to the communication module Because t...

Page 64: ... more quickly which can have a negative effect on the performance of the device Table 7 3 Description of the parameters of the log Parameter Description General COMMON Messages relating to general events e g reader startup login to the WBM ERRORS Errors and alarm messages of the communications module EVENTS Recording of all tag events COMMANDS Commands of the user application Additional informatio...

Page 65: ...ettings for the selected reader interface Table 7 4 Description of the basic parameters Parameter Parameter value Default value Description Ident system category Standard device RF300 fast protocol RF600 Reader Freeport Standard device Selection of the Ident system category The various Ident system categories differ in the communication protocols they use Depending on the selection made different ...

Page 66: ...Welding robot 21 Note that the name is required for addressing the reader via OPC UA Transmission speed 19 2 kBd 57 6 kBd 115 2 kBd 921 6 kBd 115 2 kBd 921 6 kBd Selection depends on the Ident device system being used With this parameter you set the data transmission speed between the commu nication module and reader User mode Ident profile RFID stand ard profile FB 45 Ident profile RFID standard ...

Page 67: ...antenna on the reader is nevertheless turned on as long as it has not been turned off by a command Off RF field off the antenna is turned on only when a command is sent and it then turns itself off again HF power 1 0 50 5 00 1 00 1 25 Setting for the output power of the reader Reset error LED On Off On On The flashing of the error LED on the read er is reset by each reset and by a new OPC command ...

Page 68: ... select the appropriate parameter value Transponder type 1 1 Selection of the transponder types used 1 You can find a detailed description of these parameters in the following paragraphs The Transponder type parameter Selection of the transponders used The selection depends on the value specified in the parameter Ident device system The following transponder types can be selected Reader parameter ...

Page 69: ...interfaces OPC UA In the Network interfaces tab you can enable disable the network ports SNMP and NTP protocols You can disable STEP 7 access in the PLC tab In the OPC UA tab you can enable and edit the OPC UA server function of the communication module The Network interfaces tab The Network interfaces tab is divided into the following areas Network ports SNMP NTP Syslog messages Figure 7 7 The Se...

Page 70: ... write access to SNMP varia bles In this box changes can only be made if write access was permitted Write access is only possible for the SNMP variables sysName sys Location and sysContact of the system group of MIB 2 Allow write access Check box to enable disable write protection for SNMP variables NTP In the NTP area you can enable the network protocol NTP is a protocol for synchronizing the tim...

Page 71: ...e saved in a log file and output in the The Diagnostics Syslog logbook menu item Page 86 menu The log file is set up as a circulating buffer If all the entries in the log file are occupied the next new entry deletes the oldest entry When supplied from the factory this setting is disabled and it may have to be enabled here Table 7 8 Description of the Syslog properties Property Description IP addre...

Page 72: ...TIC RF166C 72 Operating Instructions 12 2019 C79000 G8976 C578 01 The OPC UA tab The OPC UA tab is divided into the following areas Basic settings Diagnostic settings Security settings OPC UA certificates Figure 7 8 The Settings Communication menu item OPC UA tab ...

Page 73: ...P port for the OPC UA binary protocol Minimum supported publishing interval Minimum publishing interval supported by the server application at which the process data is published for logged on OPC UA clients Lower values set by an OPC UA client are not taken into account Range of values 10 65535 ms Default setting 50 ms Diagnostic settings In the Diagnostic settings area you can define which diagn...

Page 74: ...igning with the hash algorithm SHA 256 and if configured 256 bit encryption It is recommended that you use the highest security level Basic 256 SHA 256 1 The security levels Basic 128 and Basic 256 should only be used if no other security profile can be used due to compatibility reasons Security method Specifying the security method of the server Sign or sign and encrypt Depending on the settings ...

Page 75: ...ot identical to the IP address in its certificate Note The OPC UA server does not check the IP address of its communi cation partner client If no blacklist is stored on the communication module for the CA of the partner certificate Regardless of these exceptions to establish a connection at least the follow ing requirements must be met If the partner certificate is not trustworthy the communicatio...

Page 76: ...ates for network participants This means the CA certificates are root certificates for the client certificates Client certificates for which a valid CA certificate exists are automatically accepted during connection setup Issuer certificates Root certificates from certification authorities Unlike CA certificates client certificates derived from issuer certificates must still be accepted and per mi...

Page 77: ...e key file are stored in a single file This file is usually protected by a password Enter the password in the text box at the bottom Note that this format can only be used for server certificates cer crt der pem Binary or text coded file format in which the certificate file and the certifi cate key file are stored in separate files Note that the server certificates necessarily require a separate c...

Page 78: ...A 256 and disable anonymous access 7 3 5 The menu command Diagnostics Hardware diagnostics In Diagnostics Hardware diagnostics you can display the status parameters of the selected reader and of the transponder currently in the antenna field The menu command Diagnostics Hardware diagnostics is divided into the following sections Basic settings Monitoring status Status Error counter Figure 7 9 The ...

Page 79: ...ader status area Displayed parameters Description Hardware type Hardware type of the reader Hardware version Hardware version of the reader Bootloader version Bootloader version of the reader Firmware version Firmware version of the reader Driver type Driver type of the serial interface of the reader Driver version Driver version of the serial interface of the reader Interface Used serial interfac...

Page 80: ...e Table 7 14 Displayed parameters of the Transponder status area Displayed parameters Description UID Unique identifier of the transponder Transponder type Transponder type vendor identification Version Version of the transponder chip Lock status of the OTP area Disabled blocks of the OTP area on the chip Size of the user memory Memory size of the user memory in bytes Size of a memory block Size o...

Page 81: ... interface that caused com munication to be disturbed SFZ Signature error counter Counter for failed signature encryptions of written blocks of data Only rele vant for the transponder type RF300 CRCFZ CRC error counter Counter for failed CRC checks ASMFZ Error counter for problems on the interface to the host CM PC Counter for errors on the serial interface Signal strength AMLI AM power indicator ...

Page 82: ...tings area This menu item documents the actions performed by the communications module The entries contain the following properties Table 7 16 Displayed properties of the log messages Property Description Date time Time stamp when the entry was made by the communications module Note that the time stamp is generated by the device clock UTC time This time is compared with the time zone set on the PC...

Page 83: ...ns module is saved as a csv file on the PC Reset The log is deleted in the communications module With a large number of log entries in the history it may take several minutes before these are displayed 7 3 7 The Diagnostics Service Log menu item The service log of the communication module is displayed in the Diagnostics Service Log menu item The log records internal processes of the communication ...

Page 84: ...ypes that should be entered in the log Table 7 17 Description of service log parameters Parameter Description Communication channels CMD_PLC Internal frames on the PLC interface CMD_WEB Internal frames between Web server and reader CM_DEVICE01 Frames on reader interface 1 X21 CM_DEVICE02 Frames on reader interface 2 X22 Detailed information Performance monitoring Recording heartbeat telegrams in t...

Page 85: ...pe Type of message Which message types are signaled depends on the check boxes enabled in the menu item Settings General in the Log settings area Entry Text of the message With the Update Save as and Reset buttons you can control the entries Update The log is read in again by the communication module and the list is updated The log entries displayed include the most current data 200 KB Save The lo...

Page 86: ...rs with administrator rights Figure 7 12 The Diagnostics Syslog logbook menu item All Syslog messages are displayed in the Syslog logbook menu item This menu item documents all safety related accesses to the communication module and actions performed You can find detailed information on the Syslog messages their structure and contents in the section Syslog messages Page 169 With the Update button ...

Page 87: ...The Edit transponder menu item You can read out and write transponder data with the Edit transponder menu item This page is divided into 2 areas Basic settings Read write Figure 7 13 The Edit transponder menu item Basic settings This area enables you to select the reader or reader interface with which transponders are to be processed ...

Page 88: ...h in the HEX format or in the ASCII format You can choose between the two input modes Overwrite and Insert Initialize data Show hide the view for initializing the data Using the initialization function you can preset the data fields Next to the list of tag fields the data of the selected memory area is displayed in HEX view With the Read button the data is read from the transponder The data read f...

Page 89: ... WBM via HTTPS Note that user administration can only be enabled by an administrator During the first login as administrator you must change the password for security reasons The communication modules are delivered with the following user profile pre installed at the factory User name admin Password admin Using the admin user profile you can create new user profiles and delete existing profiles NO...

Page 90: ...your password in the Password input box 3 Click the Log in button Result You are logged onto the WBM and can now set communication module parameters The User management menu item In the User management menu item you can create delete and edit user profiles and change passwords This page is divided into the following areas User profiles User properties Password Roles User management on off Figure 7...

Page 91: ...r profile in the Password and Repeat password input boxes You require the user name and the password to log in to the WBM User passwords can be changed by the users themselves or an administrator If you lose your administrator password you must reset the communication module to the factory settings as described in the section Restoring the factory settings manually Page 151 Roles In the Roles area...

Page 92: ...reset Syslog log The page is not displayed Edit transponder No operator control is possible in the Run device status User management Restricted Only the user s own password can be changed System No operator control is possible in the Run device status In addition changes cannot be transferred to the communication module using the Transfer configuration to communication module button User managemen...

Page 93: ... the Reset area you can reset the communication module to the factory settings When you reset the communication module all set configuration data settings of the user management and address information are lost To reset the communication module to the factory settings click the Reset button After the reset the communication module is automatically restarted Note that after this you need to assign ...

Page 94: ... device to authenticate a service or to encrypt files You can create your own certificates or use official certificates created by a certification authority You can import certificates that contain a certificate as well as a private key PKCS 12 When you import certificates and the associated private keys in separate files then both files must be coded either in ASN 1 or Base64 You can use the Crea...

Page 95: ... which a firmware update is to be performed Depending on the connected reader you can select the desired reading point Firmware update In the Firmware update area you can update the firmware of the selected reader For a detailed description of firmware updates refer to the section Firmware update Page 145 7 3 13 The Help menu item Service and Support The Help Service and Support menu item includes...

Page 96: ...Configuration using the WBM 7 3 The menu items of the WBM SIMATIC RF166C 96 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 97: ... Ident instructions via a SIMATIC controller To configure Ident systems using STEP 7 Basic Professional TIA Portal you need appropriate Ident instructions The Ident profile and the Ident blocks are integrated in STEP 7 as of version V13 1 You can find a detailed description of the Ident profile and the Ident blocks in the Ident profile and Ident blocks https support industry siemens com cs ww en p...

Page 98: ...Programming via SIMATIC controller SIMATIC RF166C 98 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 99: ...lls are known as OPC UA clients Knowledge of fundamental OPC mechanisms as well as programming know how are indispensable for understanding the following section and implementing your own OPC UA client for use with the communication modules The OPC UA standard specifications will help you here The standard OPC Unified Architecture for AutoID Companion Specification was defined by the organizations...

Page 100: ...sed in a sensible manner e g antenna power An XML device description file for connection of the communication module via OPC UA is stored on the communication module and can be downloaded via the WBM System Device description file 9 1 Supported methods functions Parallel to regular operation via a SIMATIC controller you can read out the results of the SIMATIC commands and diagnostic information vi...

Page 101: ...e This means that each communication module supports as many read points as the number of devices that can be connected On an communication module an OPC UA client can be connected as a second application to a PROFIBUS main application For an OPC UA client to also be able to connect the Parallel parameter must be selected in the WBM in the Communication OPC UA menu This case is intended purely for...

Page 102: ...r AutoID for each read point Table 9 2 RFID specific methods functions OPC UA methods Scan Synchronous execution of inventories The detected transponders are directly returned ScanStart ScanStop Trigger the read points to start inventories The detected transponders are delivered by means of events Rfid ScanEventType KillTag Destroy transponders This function is only supported by UHF readers LockTa...

Page 103: ...on module Refer to the OPC Unified Architecture for AutoID specification for a more detailed description of the methods functions You can refer to the XML device description file SimaticIdent RFxxxx xml supplied with each communication module for the IDs of the nodes described here An XML device description file is stored on the communication module and can be downloaded via the WBM System Device ...

Page 104: ...lace Command Command that was executed during the last transponder access operation Identifier Transponder which was accessed with the last command Timestamp Time of the last transponder access RWData Read written data of the last command Only possible with commands for reading writing the transponder memory Antenna Antenna via which the transponder was accessed with the last command CurrentPowerL...

Page 105: ...s values can be overwritten before the query by an OPC UA client This problem is worsened by the use of logically related variables If it is not possible to determine in time that related variables can be queried completely by the client before variables are written with new values again from the process usage is not possible If a client supports events make sure that these are used The effects de...

Page 106: ...les Table 9 6 CodeTypes Path Root Objects DeviceSet Read_point_x RuntimeParameters Com monSettings CodeTypes Data type UInt32 Access R W Description Definition of the data type for all AutoID identifiers in AutoID Standard The setting has an effect specifically on the data type of the LastScanData variable the Identifier diagnostics variable and the ScanData union used for the Identifier in method...

Page 107: ...Path Root Objects DeviceSet Read_point_x RuntimeParameters Com monSettings DeviceClock Data type UtcTime Access R W Description The internal device clock of the communication module The communication module loses the time when it is switched off The time can be applied after switch on by this variable via the application Possible values Example 2018 05 29T08 29 15 812Z 9 2 5 RfidSettings You can m...

Page 108: ... R W Description Radiated power of the antenna Possible values 0 127 The special features of the different reader types are described below With RF380R 2 0 5 W 3 0 75 W 4 1 0 W 5 1 25 W 6 1 5 W 7 1 75 W 8 2 0 W Settings outside the specified values mean that the default value of 1 25 W is used For UHF readers Radiated power of the antenna in dB 0 5 33 Settings outside of the specified values are s...

Page 109: ...antenna field 1 Exact number of transponders if supported by the read er Diagnostics LastAccess These variables supply various information on the last successful transponder access or command Please note that these variables supply logically related information With successful transponder access the contents of the Time stamp will be written last all other supported LastAccess variables are filled...

Page 110: ...e WBM Possible values PB Access via PROFIBUS EIP Access via EtherNet IP OPCUA Access via OPC UA WBM Access via WBM Table 9 13 Command Path Root Objects DeviceSet Readpoint_x RuntimeParameters Diagn osis LastAccess Command Data type String Access R Description Diagnostics on the last transponder access Outputs the command executed during the last transponder access operation The prerequisite is tha...

Page 111: ... The types String ByteString and ScanDa taEpc are supported Access R Description Diagnostics on the last transponder access Outputs the UID or EPC of the transponder that was accessed with the last command The prerequisite is that the Parallel or Diagnostics option is set in the WBM Possible values Example RF300 reader data type string 000000005575B67D Table 9 15 Timestamp Path Root Objects Device...

Page 112: ... reading writing the transponder memory The prerequisite is that the Parallel or Diagnostics option is set in the WBM Possible values Example RF300 reader data type string 0011223344556677 Table 9 17 Antenna Path Root Objects DeviceSet Read_point_x RuntimeParameters Diag nosis LastAccess Rfid Antenna Data type Int32 Access R Description Diagnostics on the last transponder access Indicates the ante...

Page 113: ...ariable is only supported by UHF readers The prerequisite is that the Parallel or Diagnostics option is set in the WBM Possible values Decimal number for the power in dB Increment 0 25 dB 0 5 00 33 00 Table 9 19 PC Path Root Objects DeviceSet Read_point_x RuntimeParameters Diag nosis LastAccess Rfid PC Data type UInt16 Access R Description Diagnostics on the last transponder access Outputs the pro...

Page 114: ...variable is only supported by UHF readers The prerequisite is that the Parallel or Diagnostics option is set in the WBM Possible values Default Circular Linear_vertical Linear_horizontal Table 9 21 Strength Path Root Objects DeviceSet Read_point_x RuntimeParameters Diag nosis LastAccess Rfid Strength Data type Int32 Access R Description Diagnostics on the last transponder access Outputs the RSSI v...

Page 115: ...l or Diagnostics option is set in the WBM Possible values Example 2018 05 30T13 14 43 546 00 00 COMMANDS readTagIDs CMD 0 Readpoint_11 000000005575B67D PC 0000 RSSI 0 Pwr 0 Table 9 23 LogColumns Path Root Objects DeviceSet Read_point_x RuntimeParameters Diag nosis Logbook LogColumns Data type String Access R Description Log diagnostics The headers column of the communication modules log is output ...

Page 116: ...rred and been completed Overwriting the related information is excluded With events in contrast to variables with their simple data types OPC UA clients require the possibility to handle more complex data types such as structures and unions in addition The integrated OPC UA servers of the communication modules offer the following three additional events as a supplement to the AutoID standard AutoI...

Page 117: ... inherited from AutoIdDiagnosisEvent The BrowseName of the read point is supplied via the standard prop erty SourceName of BaseEvent Possible values Example Readpoint_11 Table 9 25 Presence Data type UInt16 Description Shows the presence of transponders Possible values 0 There is no transponder in the antenna field 1 There is at least one transponder in the antenna field 1 Exact number of transpon...

Page 118: ...11 Table 9 27 Client Data type String Description Client interface via which the last transponder access or the last command on this read point took place Possible values PB Access via PROFIBUS EIP Access via EtherNet IP OPCUA Access via OPC UA WBM Access via WBM Table 9 28 Command Data type String Description Command that was executed during the last transponder access operation Possible values D...

Page 119: ...accessed by the command the field has multiple entries RfidLastAccessResult The RfidLastAccessResult structure is derived from the LastAccessResult structure and has the following components including the derived elements Identifier CodeType Timestamp RWData CodeTypeRWData Antenna CurrentPowerLevel PC Polarization Strength Table 9 29 Identifier Data type ScanData This is a union with the possible ...

Page 120: ...08 29 15 812Z Table 9 32 RWData Data type ScanData This is a union with the possible types for RWData The types String ByteString and ScanDataEpc are supported The used data type is defined or set via the CommonSettings Co deTypesRWData variable Description Read written data of the last command Only possible with commands for reading writing the transponder memory Possible values Example RF300 rea...

Page 121: ...werLevel Data type Int32 Description Power with which the last command was executed on the tran sponder This variable is only supported by UHF readers Possible values Decimal number for the power in dB Increment 0 25 dB 0 5 00 33 00 Table 9 36 PC Data type UInt16 Description Protocol Control Word of the transponder that was accessed last This variable is only supported by UHF readers Possible valu...

Page 122: ...e communication module The OPC UA read points only serve as transmitters of events to OPC UA clients This has the consequence that every read point transmits all LastLogEntryEvents even those that relate to other read points In the WBM you can define the read points via which the LastLogEntryEvents should be transmitted In addition to the inherited properties of BaseEvent a LastLogEntryEvent also ...

Page 123: ...nd maintenance 10 10 1 Diagnostics The following diagnostic options are available for the communication modules Via the LED displays of the communication modules Via SNMP Using WBM Via the TIA Portal STEP 7 Basic Professional Via OPC UA These alternative methods are described below ...

Page 124: ...curred MAINTENANCE MAINT Shows whether the communication module needs mainte nance Reader LED display PRESENCE PRE Indicates whether there are one or multiple transponders in the antenna field ERROR ER Indicates whether communication with the reader is taking place and whether a reader error has occurred Ethernet LED display LINK Shows whether an Ethernet connection is present PROFIBUS LED display...

Page 125: ...lace The CM has re ceived and executed a user command A firmware update is in progress The voltage at the CM is too low The flash test is performed for reader identification At the same time the LEDs of the reader PROFIBUS and Ethernet LED display also flash The firmware is defective There is an error You can find more information on error messages in the section Error messages Page 134 Reader LED...

Page 126: ...ssages in the section Error messages Page 134 PROFIBUS LED display The states of the PROFIBUS connection are shown by the DP LED The LED can adopt the colors green red or yellow and the states off on flashing Table 10 3 Display of the PROFIBUS states via the PROFIBUS LED display DP Meaning No connection is available No cable has been connected LED test while the CM is starting up A connection is a...

Page 127: ...port industry siemens com cs ww en view 103949062 The communication modules support the SNMPv1 protocol SNMP is activated at the factory You can find information on SNMP in the section The Settings Communication menu item Page 69 You can find detailed information on using SNMP and in particular on the structure of the automation mib in the diagnostics manual PROFIBUS User Organization https www pr...

Page 128: ...ted to the controller or PC via Industrial Ethernet or PROFIBUS and has been powered up Definition If error states occur e g termination of a connection they are indicated in the online device view by a red tool symbol in front of the relevant module Note that error states of the reader are only displayed if you have activated the diagnostic interrupt messages of the relevant reader To obtain more...

Page 129: ...lick on the desired communication module and click on Online Diagnostics in the shortcut menu 3 Select the Diagnostics parameter group The diagnostics window provides you with the following options for diagnostics of the communication module General information such as the identifier and the article number of the communication module is displayed under the General entry Under the Diagnostic status...

Page 130: ...cle number of the reader is displayed under the General entry Under the Diagnostic status entry you can see current status information and the diagnostic interrupt messages of the reader The error messages are stored in the CPU diagnostics buffer as plain text You can further process these messages with the appropriate function blocks e g so that they are forwarded to an HMI Diagnostics using the ...

Page 131: ...nterrupts are reported Fault in power supply Hardware fault Firmware error Diagnostic messages reader diagnostics The following settings of the diagnostic messages are available to you None No further diagnostic data is reported Hard errors Critical hardware errors faults are reported by the S7 diagnostics Extended diagnostic messages are generated in the case of the following events Hardware faul...

Page 132: ...The structure complies with the PROFIBUS Profile Guideline PROFIBUS Proxy Guideline Identification Systems Proxy Ident Function Block for identification systems Table 10 5 Structure of the diagnostics frame Byte Name Description PROFIBUS Profile Guideline for Identification Systems 6 sign_len Bit 7 6 0x00 Identifier for device related diagnostics Bit 5 0 0x12 Length of the extension including head...

Page 133: ...s alarms byte 19 of the diagnostics frame Table 10 6 Error codes of the diagnostics text messages of the communication module Error code hex Error description 0x0F Communication module started up 0x03 Connection error to the reader 0x11 Short circuit on the reader 0x12 Error in the firmware 0x14 Fatal error 0x20 Hardware fault 0x21 Loader error 0x81 Download active 0x82 Download done 0x83 Download...

Page 134: ...respective reader interface always flashes if error messages occur You can read the error via the error codes or alternatively via the WBM log The following table lists the error codes Table 10 7 Features of the communication modules ER LED Block hex Error description 4x 0xE1FE0100 Cannot write to the memory of the transponder Possible causes Transponder memory is defective EEPROM transponder was ...

Page 135: ...s lost the contents of its memory due to battery failure Possible causes action to be taken Replace the transponder if the battery bit is set Re initialize the transponder 4x 0xE1FE0700 ECC error 4x 0xE1FE0800 The transponder in the antenna field does not have the expected UID EPC ID or has no UID EPC ID 4x 0xE1FE0900 The command is not supported by the transponder 4x 0xE1FE0A00 The transponder is...

Page 136: ...ipt of acknowledgment from transponder cause as for field interference on the reader When formatting the transponder must be in the transmission window of the reader other wise a timeout error will occur in other words The transponder is located exactly in the limit range of the transmission window The transponder is defective and consumes too much power The EEPROM transponder was incorrectly conf...

Page 137: ... the command tempo rarily 4x 0xE4FE0500 The buffer on the communication module or reader is not adequate to store the data temporarily 4x 0xE4FE0600 The command is not permitted in this status or is not supported Possible causes The INIT command has been concatenated Command repetition was started without Presence mode 1x 0xE4FE0700 Startup message from reader communication module The reader or co...

Page 138: ...ve been re configured e g with HW Config or TIA Portal 0xE4FE8D00 Firmware error Possible causes The firmware update was not run completely Internal communication error of the communication module reader Possible causes action to be taken Connector contact problem on the communication module reader Hardware of the communication module reader has a defect Send in communication module reader for rep...

Page 139: ... the communication module runs a hardware reset INIT_ACTIVE set to 1 The Ident profile expects an INIT bit 15 in the cyclic control word 0xE5FE0A00 The CMD command code and the relevant acknowledgment do not match This can be a soft ware error or synchronization error that cannot occur in normal operation 0xE5FE0B00 Incorrect sequence of acknowledgement frames TDB DBN 0xE5FE0C00 Synchronization er...

Page 140: ...ith length 0 Check AdvancedCmd or IID_CMD_STRUCT and execute an INIT The hardware of the reader communication module is defective The reader or communi cation module receives bad data with an INIT Inconsistent length specifications in the command The wrong reset block was selected Possible causes action to be taken Regardless of the selected reader system use the Reset_Reader function block 4x 0xE...

Page 141: ...d data buffer TXBUF is too small the buffer created at TXBUF RXBUF does not have the correct data type or the parameter LEN_DATA has a negative value Possible cause action to be taken Check whether the buffers TXBUF RXBUF are at least as large as specified in LEN_DATA With S7 1200 1500 In the Ident profile only an Array of Byte may be created for TXBUF and RXBUF In the Reader_Status block only an ...

Page 142: ...RROR_ TOTAL General error 1 good MISC_ERROR_ TOTAL Firmware error Possible cause The firmware update was not run complete ly Internal communications error of the communications mod ule reader Connector contact problem on the communications module reader Hardware of the communications module reader has a defect Send in communications module reader for re pair Start INIT after correcting the error I...

Page 143: ...all in the antenna field 9 good MULTIPLE_ IDENTIFIERS More transponders are located in the transmission window than can be processed at the same time by the reader 9 good MULTIPLE_ IDENTIFIERS There is more than one transponder in the transmission win dow 10 good READ_ ERROR Read access to the transponder has failed 14 good WRITE_ ERROR Write access to the transponder has failed 14 good WRITE_ ERR...

Page 144: ...to the reader the reader is not an swering in PROFIBUS operation The cable between the communications module and reader is wired incorrectly or there is a cable break The 24 V supply voltage is not connected or is turned off or has failed briefly Automatic fuse on the communications module has blown Hardware defective Another reader is in the vicinity and is active There is a reflecting metal surf...

Page 145: ...1 Updating the firmware via WBM Requirements The communication module is connected to the PC via Industrial Ethernet The communications module has been disconnected from active operation All user applications are closed The required update file is stored locally Procedure Proceed as follows to run a firmware update using the WBM 1 Start your Web browser 2 Enter the IP address of the communications...

Page 146: ...nts The communication module is connected to the controller or PC via Industrial Ethernet The IP address of the communication module is stored in the module parameters Web Based Management parameter group The required update files were stored locally Procedure Proceed as follows to perform a firmware update of the communication module via STEP 7 Basic Professional TIA Portal 1 Start the TIA Portal...

Page 147: ... Start your Web browser 2 Enter the IP address of the communications module in the address field of your browser 3 If not logged in log in to the WBM Note that you as User can only perform a firmware update if the communications module has the Idle status 4 Click on the System Reader firmware menu item 5 In the Basic settings area select the reader interface and if necessary the read point to whic...

Page 148: ...ing Requirements The communication module is connected to the controller via PROFIBUS Readers are connected to the communication module The communication module has been separated from running operation All user applications are closed The required update file is stored locally Procedure Proceed as follows to perform a firmware update of the reader via STEP 7 Basic Professional TIA Portal 1 Start ...

Page 149: ... Firmware update of the reader 8 In the Firmware loader area click Browse and select the update file upd 9 Select the Enable firmware after update check box Note If the check box is not selected the new firmware is only activated on the next startup of the communication module 10 Click the Start upgrade button Result The firmware is updated The update process is displayed ...

Page 150: ...Assigning IP address via DHCP Page 49 Procedure Proceed as follows to reset all settings to the factory settings using the WBM 1 Start your Web browser 2 Enter the IP address of the communication module in the address field of your browser 3 If not logged in log in to the WBM 4 Click on the System menu item 5 In the Reset area click on the Reset button Result The communication module is reset to i...

Page 151: ...5 Pins of the X21 reader interface to be connected 3 Connect the communications module to the power supply 4 Wait until all LEDs flash for a few seconds briefly light up continuously and then flash again 5 Remove the jumpers 6 Wait until the RUN LED is continuously lit in green Result The communications module is reset to its original factory settings Note that restoring to factory settings assign...

Page 152: ...annot use the configuration file to transfer user profiles and passwords to other communications modules After loading the configuration file into a new communications module you may need to enable user management and create new user profiles and passwords The following options are available for saving the current configuration of the communications module and restoring it to the newly connected c...

Page 153: ... copy additional communication modules of the same type Older configuration versions can be saved versioning The updating and versioning of the configuration versions needs to be started and managed manually by you yourself Backup on the controller Using the Config_Upload and Config_Download blocks you can read Config_Upload or write Config_Download the configuration of the communication module CM...

Page 154: ...ons module is connected and has started up Before replacing a module WARNING Read the manual of the SIMATIC controller you using Prior to installation connecting up and commissioning read the relevant sections in the manual of the SIMATIC controller you are using When installing and connecting up keep to the procedures described in the manual NOTICE Backing up the configuration Before replacing a ...

Page 155: ...e 4 Install the new communications module 5 Set the PROFIBUS address on the communication module 6 Connect the communication module to the PC or the SIMATIC controller using the available Ethernet PROFIBUS cable 7 If necessary connect the communications module to one or more readers 8 Connect the communications module to the power supply using the connecting cable Wait until the communications mod...

Page 156: ...Service and maintenance 10 5 Module replacement SIMATIC RF166C 156 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 157: ... Ethernet interface Connection type Ethernet OPC UA Physical medium Ethernet over 4 wire cable Operating mode 100BaseX full duplex Transmission speed 100 Mbps Connector 1x M12 interface 4 pin D coded Max cable length 100 m Cable type STP Cat 5 Autonegotation Yes Autocrossing Yes Switch function No Reader interface Connector M12 coupler plugs 8 pin A coded Connectable readers 2 x reader Transmissio...

Page 158: ...age 40 70 C Degree of protection IP67 Oscillation vibration in operation according to IEC 60068 2 27 0 75 mm 10 58 Hz 4 g 58 150 Hz Shock resistance shock in operation according to IEC 60068 2 6 30 g MTBF at 40 C 70 years Approvals CE cULus file E85972 FCC Code of Federal Regulations CFR 47 Part 15 Sections 15 107 and 15 109 Class A PNO PROFIBUS 1 Depending on the connected reader 2 All supply and...

Page 159: ...SIMATIC RF166C Operating Instructions 12 2019 C79000 G8976 C578 01 159 Dimensional drawings 12 Figure 12 1 Dimension drawing on an RF166C communication module all dimensions in mm ...

Page 160: ...Dimensional drawings SIMATIC RF166C 160 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Page 161: ...Tool https w3 siemens com mcms topics en simatic tia selection tool Pages tab aspx SIMATIC Ident Configuration Guide https support industry siemens com cs ww en view 67384964 TIA Selection Tool The TIA Selection Tool offers you a free configuration wizard with which you can easily and quickly assemble all relevant automation products into a complete system The TIA Selection Tool can create a compl...

Page 162: ...reader configuration with the maximum cable length of 50 m In some situations longer connecting cables up to 1000 m are possible Please note that a transfer speed of 115 2 Kbaud can only be guaranteed for a max cable length of 700 m and a transmission speed of 921 6 Kbaud only for a max cable length of 100 m The current consumption of the connected reader must however be taken into account You wil...

Page 163: ...SIMATIC Ident Configuration Guide Requirements for cables and connectors You need cables of the following specifications for a custom assembled cable 6 x 0 25 mm2 LiYC11Y 7 x 0 25 You can use the following connectors CM sided M12 8 pin male 6GT2090 0BE00 Reader sided M12 8 pin female 6GT2090 0BD00 Pin assignment The pin assignment is listed in the following table Table A 2 Pin assignment M12 conne...

Page 164: ... Connecting cable for RF200 RF300 RF600 MV440 M12 180 M12 90 2 m 6GT2891 4JH20 5 m 6GT2891 4JH50 10 m 6GT2891 4JN10 Connecting cable without plug 6 adrig for RF200 RF300 RF600 MV440 50 m 6GT2090 4AN50 120 m 6GT2090 4AT12 800 m 6GT2090 4AT80 Field fabrication for connecting cable 5 units M12 180 8 pin female 6GT2090 0BD00 Field fabrication for connecting cable 5 units M12 180 8 pin male 6GT2090 0BE...

Page 165: ...3DH10 1 5 m 6XV1830 3DH15 2 0 m 6XV1830 3DH20 3 0 m 6XV1830 3DH30 5 0 m 6XV1830 3DH50 10 m 6XV1830 3DN10 15 m 6XV1830 3DN15 PROFIBUS FC Standard Cable without Plug 2 wire 20 1000 m 6XV1830 0EH10 PROFIBUS FC Robust Cable without plug 2 wire 20 1000 m 6XV1830 0JH10 PROFIBUS FC Flexible Cable without Plug 2 wire 20 1000 m 6XV1831 2K PROFIBUS FC Trailing Cable without Plug 2 wire 20 1000 m 6XV1830 3EH...

Page 166: ...m 6XV1871 5TH30 5 0 m 6XV1871 5TH50 10 m 6XV1871 5TN10 15 m 6XV1871 5TN15 Connection cable for wide range power supply L coded 4 pin A coded 4 pin M12 180 M12 180 5 m 6GT2091 0PH50 Terminating resistor for PROFIBUS interface M12 6GK1905 0EC00 M12 sealing caps for unused connections 10 units Usable as of product version 02 3RX9802 0AA00 DVD RFID Systems Software Documentation 6GT2080 2AA20 ...

Page 167: ...rent approvals https support industry siemens com cs ww en ps 15666 Go to the relevant product there and select the Certificates entry type from the Entry list tab Overview of the approvals and standards The RF166C communication module has the following approvals and meets the following standards EC directives and standards EU directive 2014 30 EU Electromagnetic Compatibility EMC directive accord...

Page 168: ...ellschaft Process Industries and Drives Process Automation D 76181 Karlsruhe Germany You will find the CE Declaration of Conformity for this product on the Internet at the following address CE declaration of conformity https support industry siemens com cs ww en ps 15105 cert Country specific approvals Safety If the device has one of the following markings the corresponding approval has been obtai...

Page 169: ...ent for daylight saving time standard time if necessary HOSTNAME References the source computer with its name or IP address IPv4 address according to RFC1035 Bytes in decimal form XXX XXX XXX XXX If there is no information is output APP NAME Device or application from which the message originates This parameter is not used by the device and is always output PROCID The process ID is used to clearly...

Page 170: ...iption Format Possible values or exam ple Ip address IPv4 address to RFC1035 d d d d XXX XXX XXX XXX 192 168 1 105 Protocol Layer 4 protocol used or service that has generated the event s TCP WBM PNIO PB OPC EIP User name Character string without spaces that identifies the authenticated user based on the name s name Action user name or Destination user name Identifies the user based on his her nam...

Page 171: ... 0 1 Explanation Incorrect user name or incorrect password specified during logon Severity Error Facility local0 Standard IEC 62443 3 3 Reference SR 1 1 Message text protocol User user name logged out from ip address Example WBM User admin logged out from 192 168 0 1 Explanation User session completed logged out Severity Info Facility local0 Standard IEC 62443 3 3 Reference SR 1 1 Message text pro...

Page 172: ...er user Severity Notice Facility local0 Standard IEC 62443 3 3 Reference SR 1 3 Message text Protocol User User name created user account Destination user name with role Role Example WBM User admin created user account admin2 with role Administrator Explanation The administrator has created an account Severity Notice Facility local0 Standard IEC 62443 3 3 Reference SR 1 3 Message text Protocol Use...

Page 173: ...ctivity Severity Warning Facility local0 Standard IEC 62443 3 3 Reference SR 2 5 Limiting the number of simultaneous sessions Message text Protocol The maximum number of Max sessions concurrent login session exceeded Example WBM The maximum number of 10 concurrent login sessions exceeded Explanation The maximum number of simultaneous sessions has been exceeded Severity Warning Facility local0 Stan...

Page 174: ...integrity verification failed Severity Error Facility local0 Standard IEC 62443 3 3 Reference SR 3 4 Session integrity Message text Protocol Session ID verification failed Example WBM Session ID verification failed Explanation Session ID is invalid Severity Error Facility local0 Standard IEC 62443 3 3 Reference SR 3 8 Restoration of the automation system Message text Protocol Firmware Version was ...

Page 175: ...ough to maintenance and modernization You will find contact data on the Internet at the following address Link https www automation siemens com aspa_app ci yes lang en RFID homepage For general information about our identification systems visit RFID home page https w3 siemens com mcms identification systems Online catalog and ordering system The online catalog and the online ordering system can al...

Page 176: ...Service Support SIMATIC RF166C 176 Operating Instructions 12 2019 C79000 G8976 C578 01 ...

Reviews: