Siemens SIMATIC TIM 3V-IE DNP3 System Manual Download Page 214

Page: 214 / 354

The SINAUT Configuration Tool

6.6 TD7onTIM

TIM DNP3

214

System Manual, 12/2015, C79000-G8976-C253-04

The configured number of values specifies how many DNP3 indexes are occupied

consecutively by the object starting with the specified start index. The following assignment

between the data type used and the DNP3 indexes used applies:

Data type

Range of values

Number of DNP3 indexes

occupied

BYTE

0 .. 255

4 ... 48

CHAR

Printable ASCII characters

4 ... 48

WORD

0 .. 65 535

2 ... 24

INT

-32 768 .. 32 767

2 ... 24

DINT

-2 147 483 648 .. 2 147 483 647

1 ... 12

DWORD

0 .. 4 294 967 295

1 ... 12

REAL

≈

-3,4 * 10

.. 3,4 * 10

1 ... 12

You will find the DNP3 object groups compatible with the individual data types in the section

Objects of TD7onTIM (Page 177).

Note
Reducing message length
By reducing the maximum size (parameter “Number”), the message length can be reduced

to the actually required length if the entire data range of the object is not required. This saves

transmission time.

Cnt01D_S / Cnt04D_S

Note
Configuring counted values as an event
For reliable transfer, counted values should always be assigned to an event class, for

example, event class 3. If counted values are transferred only as static unacknowledged

DNP3 data, there is a danger that these are not sent consecutively to the DNP3 master

station if there are disruptions in communication.

Channel "Counter_x"
Channel type: Counted value send
The object always occupies 1 or 4 indexes (1 index per activated channel).
Cnt01D_S sends 1 counted value, Cnt04D_S sends 4 counted values to a DNP3 master

station.
The objects can only be used in the station.
As the data source, an S7 word variable with a range of validity of 0 to 65535 is specified for

each active channel. The value transferred by the S7 CPU is added up in the DNP3 TIM and

transferred as a 16-bit counted value to the DNP3 master station. When the CPU or DNP3

TIM is restarted and if there is overflow of the counted value, the corresponding flag (restart /

discontinuity) of the counter is set.

Summary of Contents for SIMATIC TIM 3V-IE DNP3

Page 1: ..._________ SIMATIC NET Industrial Remote Communication Telecontrol TIM DNP3 System Manual TIM 3V IE DNP3 TIM 4R IE DNP3 12 2015 C79000 G8976 C253 04 Preface Uses and properties of the TIM 1 Network structures and configurations 2 LEDs and connectors 3 Installation and commissioning 4 Configuration in STEP 7 5 The SINAUT Configuration Tool 6 Diagnostics and upkeep 7 Technical specifications 8 Approv...

Page 2: ...e operated only by personnel qualified for the specific task in accordance with the relevant documentation in particular its warning notices and safety instructions Qualified personnel are those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the following WARNING...

Page 3: ...or the SIMATIC 300 400 for DNP3 communication via classic WAN networks via serial interface and IP based LAN WAN networks via RJ 45 interface Product names and abbreviations The following short forms of product names are often used in this manual TIM DNP3 TIM Simplified names of the two TIM modules named above if the property being described in the particular context applies equally to both module...

Page 4: ...the SINAUT engineering software for configuration of the new functions Editorial revision Replaced documentation This manual replaces the manual release 06 2014 Current manual release on the Internet You will also find the current version of this manual on the Internet pages of Siemens Industry Online Support under at the following address 49109245 https support industry siemens com cs ww en ps 15...

Page 5: ...e Updates Manuals FAQs etc SIMATIC NET glossary Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary You will find the SIMATIC NET glossary here SIMATIC NET Manual Collection or product DVD The DVD ships with certain SIMATIC NET products On the Internet under the following address Link https support industry siemens com cs ww en view 5030...

Page 6: ...5 C79000 G8976 C253 04 Trademarks The following and possibly other names not identified by the registered trademark sign are registered trademarks of Siemens AG TIM 3V IE DNP3 TIM 4R IE DNP3 SINAUT SCALANCE MODEM MD720 Modem MD2 MD3 MD4 LTOP ...

Page 7: ...nstalling the TIM 3V IE DNP3 in an S7 300 33 1 12 2 2 CPUs for installing the TIM 4R IE DNP3 in an S7 300 34 1 12 2 3 CPUs for a standalone TIM 4R IE DNP3 with S7 400 or S7 400H 35 1 12 3 Software 36 1 12 3 1 Required software components 36 1 12 3 2 Software versions 36 1 12 3 3 The SINAUT engineering software 37 1 12 3 4 Compatibility of the versions of the SINAUT configuration tool 39 2 Network ...

Page 8: ... IECEx 65 4 2 1 3 Notices on use in hazardous areas according to UL HazLoc 66 4 2 2 Installing the TIM modules 66 4 2 3 Installing a TIM module as CP 67 4 2 4 Installing a TIM 4R IE DNP3 as a standalone device 67 4 2 5 Connecting the TIM to the power supply 68 4 3 Commissioning the TIM 70 4 3 1 Steps in commissioning 70 4 3 2 Startup activities of the TIM 3V IE DNP3 70 4 3 3 Startup activities of ...

Page 9: ... 1 Installing uninstalling 139 6 1 1 Installation of the SINAUT standard software package 139 6 1 2 Uninstalling SINAUT software packages 140 6 2 Version information and link to Internet pages 140 6 3 Startup and operation 140 6 4 The connection configuration 142 6 4 1 Configuring the connections 142 6 4 2 Invalid Connections 147 6 4 3 Recovering lost connections 148 6 5 The Subscriber Administrat...

Page 10: ...6 6 8 Changing the configuration 237 6 9 Downloading 239 6 9 1 Downloading data blocks to the CPU 239 6 9 2 Downloading system data blocks to the TIM 239 6 9 3 Uploading stations with the Upload Station to PG function 240 6 9 4 Changing the MPI address of the CPU 240 7 Diagnostics and upkeep 241 7 1 Diagnostics options 241 7 2 Updating firmware 241 7 3 SINAUT diagnostics and service tool 242 7 3 1...

Page 11: ...ing cables 320 A 3 1 Standard connecting cable for the DNP3 TIMs 321 A 3 2 Connecting cables for WAN attachment with LTOP 325 A 4 Antennas 326 A 5 LTOP overvoltage protection modules 327 A 5 1 Variants and overview of the LTOP overvoltage protection modules 327 A 5 2 LTOP line transformer with overvoltage protection 328 A 5 3 Technical specifications of the LTOP overvoltage protection module 330 B...

Page 12: ...Table of contents TIM DNP3 12 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 13: ...hernet With the TIM modules communication can be established between DNP3 master stations and SIMATIC S7 stations via a WAN Wide Area Network or Ethernet TCP IP Connecting the SIMATIC S7 to DNP3 master stations S7 stations with a DNP3 TIM can be connected to DNP3 control systems from Siemens or other vendors A DNP3 master station can be a TIM or a control system In the SIMATIC world PCS 7 single o...

Page 14: ... TIM 3V IE DNP3 The classic WAN network can be combined with Ethernet networks This allows redundant paths to be established with the two interfaces of the TIM 3V IE DNP3 Redundant paths with TIM 4R IE DNP3 With the 4 interfaces of the TIM 4R IE DNP3 there are further options for establishing redundant transmission paths Interface combinations for redundant paths according to SIMATIC families S7 3...

Page 15: ...TIM 3V IE DNP3 TIM without integrated modem single width For installation as a communications processor CP in an S7 300 It has two interfaces RJ 45 interface for attachment to Ethernet Allows DNP3 communication via IP based networks LAN or WAN RS 232 interface Allows the connection of a modem for DNP3 communication classic WAN or connection of a MODBUS slave Both interfaces can be used simultaneou...

Page 16: ...n single standard width of the SM modules of the SIMATIC S7 300 9 pin D sub male connector with an RS 232 interface for connecting a modem RJ 45 jack for connection to Ethernet industrial design with additional collar for inserting the IE FC RJ 45 Plug 180 2 pin plug in terminal block for connecting the external supply voltage of 24 V DC Front LEDs for display of Ethernet and WAN communication Eas...

Page 17: ... standalone device combined with an S7 400 or S7 400H via the Ethernet interface It has four interfaces 2 x RJ 45 interface for attachment to Ethernet Allows DNP3 communication via IP based networks LAN or WAN 2 x combined RS 232 RS 485 interface Allows DNP3 communication with a modem connected classic WAN or the connection of MODBUS slaves The interface standard RS 232 RS 485 is specified in the ...

Page 18: ...f the CPU Optional Battery for backup of the stored data messages and the hardware clock Design of the TIM 4R IE DNP3 The TIM 4R IE DNP3 has all the advantages of the SIMATIC S7 300 system design Compact design double standard width of the SM modules of the SIMATIC S7 300 Two 9 pin D sub male connector with a combined RS 232 RS 485 interface for connecting a modem Two RJ 45 jacks for connection to...

Page 19: ...f these objects is designated 5 To ensure that the communications functions are possible during operation the implementation level of every DNP3 subscriber in the project is specified in the TD7onTIM configuration S7 communication The TIM supports S7 communication and PG OP communication with the following functions PG functions Operator control and monitoring functions HMI PUT GET TIM 4R IE only ...

Page 20: ...in this manual As a lower level system the DNP3 station sends process data measured values statuses to the DNP3 master station and receives switching or setpoint commands from the DNP3 master station DNP3 subscriber types supported by the TIM The following DNP3 subscriber types are supported by the TIM modules DNP3 master station Master in the sense of the DNP3 specification The DNP3 master statio...

Page 21: ...he setting of the station function on an interface has the effect that the TIM functions as a DNP3 station on this interface Node station function The two interfaces with the Node station setting must therefore be connected once to the master station and once to the lower level DNP3 network You make the settings for the DNP3 functions of the interfaces in the STEP 7 configuration of the TIM refer ...

Page 22: ...nputs Is supported 232 Max index of the analog inputs According to the configuration 233 Number of analog inputs Max index 1 234 Support of double bit inputs Not supported negative acknowledgment 235 Max index of double bit inputs 0 236 Number of double bit inputs 0 237 Support of event messages with binary inputs Is supported 238 Max index of the binary inputs According to the configuration 239 N...

Page 23: ...port under the following entry IDs TIM 3V IE DNP3 Link https support industry siemens com cs ww en view 103655295 TIM 4R IE DNP3 Link https support industry siemens com cs ww en view 103655863 1 6 Other properties of the TIM Compatible SIMATIC families The following table shows the SIMATIC families in which the two TIM variants can be used Can be used in SIMATIC family S7 300 S7 400 TIM 3V IE DNP3...

Page 24: ...e receive objects must be configured on the TIM of the master or node station In a second step the data must then be read out of the CPU by send objects and forwarded to the destination station Remote programming Diagnostics and programming functions provided by SIMATIC and SIMATIC NET Telecontrol for station automation and telecontrol communication can be used via Ethernet while process data tran...

Page 25: ...Change driven transmission Cyclic transmission Time driven transmission The configuration is described in the following section Data objects Memory area and triggers of the channels Page 200 Connection establishment Master station connections The initiative for connection establishment depends on the transmission type configured for a data point Static data points The current values of all data po...

Page 26: ...3 200 000 events If you use a backup battery in the TIM 4R IE DNP3 events are retained even if there is a power outage On return of power the connected DNP3 master stations can read these events If there are several DNP3 master stations connected the available message memory of a station is divided up according to the number of master stations 1 9 Time synchronization Options for time of day synch...

Page 27: ...y synchronization the TIM sets the corresponding IIN1 4 bit after a configurable time has elapsed since the last time of day synchronization The synchronization cycles are specified in the configuration Time of day synchronization with NTP The time of day synchronization using NTP is only supported by the TIM 4R IE DNP3 It is intended for the TIM as DNP3 master station The following use of the two...

Page 28: ...th station function Max 16 Pro RS 232 interface Configured with master station function Max 32 Configured with station function Max 16 TIM 3V IE DNP3 Number in total Max 8 of which Via the Ethernet interface Max 8 Via the RS 232 interface Max 8 TIM configured as DNP3 station TIM 4R IE DNP3 Number in total Max 32 of which Per Ethernet interface Max 16 Per RS 232 interface Max 16 TIM 3V IE DNP3 Numb...

Page 29: ...ernet 1 TCP 16 Ethernet 2 TCP 16 RS232 no 1 Dedicated line 16 Dial up network 16 RS232 no 2 Dedicated line 16 Dial up network 16 TIM 3V IE DNP3 Master station node station 8 Ethernet TCP 8 RS232 Dedicated line 8 Dial up network 8 Station 8 Ethernet TCP 8 RS232 Dedicated line 8 Dial up network 8 The total number of 128 also applies to the TIM 4R IE DNP3 as a node station The maximum number per inte...

Page 30: ...ion The maximum number of MODBUS slaves that can be connected to the serial interface of a TIM depends on the configured interface standard RS 232 Maximum of 1 MODBUS slave RS 485 Maximum of 8 MODBUS slaves 1 11 Scope of delivery In addition to the TIM module the following components ship with the product Bus module connector Both TIM modules are supplied with a bus module connector allowing the T...

Page 31: ...ts CPU power supply and I O modules as well as rails enclosures cabling and other accessories are not taken into account DNP3 master station An S7 station with DNP3 TIM or a PC with SIMATIC PCS 7 TeleControl is required as the DNP3 master station For communication via the Internet a router is required for example SCALANCE M816 Communication using mobile wireless With connection to the Ethernet int...

Page 32: ...uter e g SCALANCE M87x Connection to Ethernet interface MODEM MD720 see below in terminal mode CSD For communication via classic WAN the TIM requires a suitable modem DNP3 dedicated line Dedicated line modem MD2 Optional LTOP overvoltage protection modules for the dedicated line attachment Analog dial up network Analog dial up modem MD3 Alternative Third party modem with RS 232 interface and suppo...

Page 33: ... PN DP ab 6ES7 315 2EH14 0AB0 CPU 315T 2 DP ab 6ES7 315 6TH13 0AB0 CPU 315F 2 DP ab 6ES7 315 6FF04 0AB0 CPU 315F 2 PN DP ab 6ES7 315 2FJ14 0AB0 CPU 317 2 DP ab 6ES7 317 2AJ10 0AB0 CPU 317 2 PN DP ab 6ES7 317 2EK14 0AB0 CPU 317T 2 DP ab 6ES7 317 6TK13 0AB0 CPU 317F 2 DP ab 6ES7 317 6FF03 0AB0 CPU 317F 2 PN DP ab 6ES7 317 2FK14 0AB0 CPU 319F 3 PN DP ab 6ES7 318 2FL01 0AB0 CPU 319 3 PN DP ab 6ES7 318...

Page 34: ...B0 CPU 315T 2 DP ab 6ES7 315 6TH13 0AB0 CPU 315F 2 DP ab 6ES7 315 6FF04 0AB0 CPU 315F 2 PN DP ab 6ES7 315 2FJ14 0AB0 CPU 317 2 DP ab 6ES7 317 2AJ10 0AB0 CPU 317 2 PN DP ab 6ES7 317 2EK14 0AB0 CPU 317T 2 DP ab 6ES7 317 6TK13 0AB0 CPU 317F 2 DP ab 6ES7 317 6FF03 0AB0 CPU 317F 2 PN DP ab 6ES7 317 2FK14 0AB0 CPU 319F 3 PN DP ab 6ES7 318 2FL01 0AB0 CPU 319 3 PN DP ab 6ES7 318 3EL01 0AB0 Compact CPU mod...

Page 35: ...PU 412 1 ab 6ES7 412 1XJ05 0AB0 Version 02 CPU 412 2 ab 6ES7 412 2XJ05 0AB0 Version 01 CPU 412 2 PN DP ab 6ES7 412 2EK06 0AB0 Version 01 CPU 414 2 ab 6ES7 414 2XK05 0AB0 Version 01 CPU 414 3 ab 6ES7 414 3XM05 0AB0 Version 01 CPU 414 3 PN DP ab 6ES7 414 3EM06 0AB0 Version 01 CPU 414F 3 PN DP ab 6ES7 414 3FM06 0AB0 Version 01 CPU 416 2 ab 6ES7 416 2XN05 0AB0 Version 01 CPU 416 3 ab 6ES7 416 3XR05 0A...

Page 36: ...ersions Required software This manual applies to the following configuration software versions SINAUT engineering software Required version V5 5 SP1 Order number 6NH7997 0CA54 0AA0 An already installed full version V5 x can upgraded to the current version with an upgrade package You will find the upgrade package under the following article number 6NH7997 0CA54 0GA0 Information on the upgrade packa...

Page 37: ...atible with the following process control system versions SIMATIC PCS 7 V7 1 SP2 basic system for the DNP3 master station SIMATIC PCS 7 TeleControl Server V7 1 SP2 add on for telecontrol functions 1 12 3 3 The SINAUT engineering software Components of the SINAUT engineering software and how it is supplied The SINAUT ST7 Engineering Software is made up of two parts The SINAUT configuration and diag...

Page 38: ... management The SINAUT diagnostics and service tool Apart from the diagnostics functions of STEP 7 the diagnostics and service tool can be used for example to load new firmware on a TIM Expansions in STEP 7 HW Config The catalog in STEP 7 HW Config is expanded by the SINAUT folder in the SIMATIC 300 directory This lists all available TIM modules You can select the required TIM module from the SINA...

Page 39: ...tion provides a list with all subscribers Where necessary you can make subscriber specific adaptations for example changing the SINAUT subscriber number of the individual devices The TD7 software is also configured in the subscriber administration TD7onTIM in other words the configuration of the data messages to be sent and received Based on the configuration data the software generates the system...

Page 40: ...Uses and properties of the TIM 1 12 Requirements for operation necessary components and services TIM DNP3 40 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 41: ...be covered or also In conjunction with transmission systems such as PCM30 or OTN Classic WAN Dedicated lines Dedicated lines private or leased copper cable or fiber optic cable can be used as classic WANs for the data transmission A suitable dedicated line modem is required for data transmission for example the dedicated line modem MD2 Dial up networks The following networks can be used for data t...

Page 42: ...aster station Communication relations that are not supported Communication between master station and master station is not supported 2 3 Communication with MODBUS slaves Connecting MODBUS slaves Devices that communicate using the MODBUS RTU protocol can be connected as MODBUS slaves to a SIMATIC S7 station with a DNP3 TIM The S7 station operates as MODBUS master The communication is handled in th...

Page 43: ... Redundant connection of a station via 2 Ethernet networks Image 2 1 Configurations with S7 300 2 4 2 Configurations with S7 400 Possible configurations The following configuration options are possible with DNP3 TIMs in the S7 400 You will find the numbering of the station connectors in the following figure 1 Single connection of a station via 1 Ethernet network 2 Single connection of a station vi...

Page 44: ...t network are not DNP3 connections The connections are configured as S7 connections Access to the CPU data of the DNP3 station is configured using the TD7onTIM objects of the TIM Data is exchanged using the PUT GET services The connection mode of the Ethernet interface of the TIM in DNP3 station 3 must be set to Neutral Note Max 1 CPU connected to stand alone TIM A maximum of one CPU can be connec...

Page 45: ... or dial up network and 1 Ethernet network 4 Redundant connection of a station via 2 DNP3 dedicated line or dial up networks or mixed 5 Connections between the stations themselves via a local Ethernet network are not DNP3 connections The connections are configured as S7 connections Access to the CPU data of the DNP3 station is configured using the TD7onTIM objects of the TIM Data is exchanged usin...

Page 46: ...tion variants with IP based WAN Hierarchical networks with node stations The two following examples illustrate configurations in a star or ring topology You will find hierarchical network structures with node stations in the following section Configuration variants with classic and IP based WAN Page 48 The hierarchical setup with node stations shown there also applies to IP based networks ...

Page 47: ...ants with IP based WAN TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 47 IP based optical network linking via switches in a ring topology Image 2 4 IP based network linking via switches IP based communication via DSL Image 2 5 IP based communication via DSL ...

Page 48: ...onfiguration variants with classic and IP based WAN TIM DNP3 48 System Manual 12 2015 C79000 G8976 C253 04 2 6 Configuration variants with classic and IP based WAN Dedicated line configurations Image 2 6 Examples of dedicated line configurations ...

Page 49: ...es and configurations 2 6 Configuration variants with classic and IP based WAN TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 49 Dial up network configurations Image 2 7 Examples of dial up network configurations ...

Page 50: ...ures and configurations 2 6 Configuration variants with classic and IP based WAN TIM DNP3 50 System Manual 12 2015 C79000 G8976 C253 04 Various redundant configurations Image 2 8 Examples of redundant configurations ...

Page 51: ...M DNP3 System Manual 12 2015 C79000 G8976 C253 04 51 LEDs and connectors 3 3 1 TIM 3V IE DNP3 3 1 1 Display elements connectors and buttons Image 3 1 Front view of a TIM 3V IE DNP3 with closed front panel ...

Page 52: ...tivities of the TIM 3V IE DNP3 Page 70 3 1 2 LEDs of the TIM 3V IE DNP3 The following table summarizes the meaning of the nine LEDs during normal operation The display during startup is explained in the section Startup activities of the TIM 3V IE DNP3 Page 70 Table 3 1 Meaning of the LEDs on the front panel of the TIM 3V IE DNP3 LED no Labeling Relevant TIM port Description 1 SF All Group error In...

Page 53: ...the module is switched to STOP mode by the PG 6 STOP Module in STOP LED is lit when the module is switched to STOP mode by the PG LED is off when the module is switched to RUN mode by the PG Table 3 2 Meaning of the LEDs behind the front panel of the TIM 3V IE DNP3 LED no Labeling Relevant TIM port Type of WAN driver Description 7 KBus MPI K bus Data flow over MPI backplane bus The display state c...

Page 54: ...ector Table 3 3 Pinout of the RS 232 port connector for connecting an external modem Illustration Pin no Signal name Signal direction Remark 1 DCD Input 2 RXD Input 3 TXD Output 4 DTR Output 5 GND 6 7 RTS Output 8 CTS Input 9 Ethernet interface The connector of the Ethernet port is designed as an 8 pin RJ 45 Western jack The pinout is shown in the following table Table 3 4 Pinout of the RJ 45 West...

Page 55: ...00 G8976 C253 04 55 3 2 TIM 4R IE DNP3 3 2 1 Display elements connectors and buttons Image 3 3 Front view of the TIM 4R IE DNP3 with closed front panel For information on the RESET button refer to Default startup in the section Startup activities of the TIM 4R IE DNP3 Page 73 ...

Page 56: ...an opening for the optional C PLUG The configuration data of the TIM 4R IE DNP3 can be stored on the C PLUG If service is required a standalone TIM can be replaced without needing a PG 3 2 2 LEDs of the TIM 4R IE DNP3 The following table summarizes the meaning of the LEDs during normal operation The display during startup is explained in the section Startup activities of the TIM 4R IE DNP3 Page 73...

Page 57: ...is being sent TXD 6 RXD2 RS 232 interface 2 Dedicated line Receive data As long as receive level DCD is detected the LED is lit and goes off while a message is being received RXD Table 3 6 Meaning of the LEDs on the right of the front panel of the TIM 4R IE DNP3 LED no Labeling Relevant TIM port Description 7 SF All Group error Indicates missing or bad parameter settings and RAM errors 8 9 P 1 Eth...

Page 58: ...set in the STEP 7 configuration and is therefore part of the configuration data of the TIM 4R IE DNP3 Table 3 7 Pinout of the connector of the combined RS 232 RS 485 port Illustration Pin no Signal name Signal direction Remark 1 DCD Input 2 RXD Input Switching over to RS 485 in the configuration 3 TXD Output Switching over to RS 485 in the configuration 4 DTR Output 5 GND 6 7 RTS Output 8 CTS Inpu...

Page 59: ...already integrated in the C7 device With the C7 635 and C7 636 devices this is also possible without the IM 361 if no more than four modules including the TIM are connected externally For all S7 300 racks the following applies All slots designed for SM FM or CP can also be used for the TIM A bus module connector ships with every TIM The TIM is connected to the module to its left by the bus module ...

Page 60: ...r example wireless devices S7 300 with attachment to Ethernet Image 4 2 SIMATIC S7 300 with TIM 3VIE DNP3 with 1 access to the Ethernet network A module is required on the Ethernet interface RJ 45 of the TIM to link the TIM to an IP based WAN The following are for example possible SCALANCE X switches for twisted pair or FO cable SCALANCE W wireless devices for data transmission over IWLAN Other wi...

Page 61: ... TIM 3V IE DNP3 1 GPRS access via SCALANCE M875 4 1 3 Installation of a stand alone TIM 4R IE DNP3 Installation When installed separately the TIM is normally installed on a separate S7 300 standard rail when necessary along with a power supply module to supply the TIM with 24 V The bus module connector that ships with each TIM is not required here because the TIM and modem are only connected toget...

Page 62: ...to IP based WAN or LAN 2 connections to classic WAN for example via MDx modems Instead of the MDx modem other modems with an RS 232 or RS 485 interface can also be used for example wireless devices A 3G UMTS router SCALANCE M875 for IP based communication via a GSM network can for example be connected to the second Ethernet interface of the TIM Per TIM one 1 S7 400 or S7 400H cab be connected An H...

Page 63: ...IM 4R IE DNP3 80 mm 125 mm 120 mm or 180 mm with open front panel S7 rail 4 1 6 Permitted ambient temperatures with horizontal and vertical installation Horizontal and vertical installation You can operate the DNP3 components both in horizontally and in vertically installed racks Permitted ambient temperature The DNP3 components can be operated in the same temperature range specified for the S7 30...

Page 64: ...installation The devices are open equipment according to the standard IEC 61010 2 201or UL 508 CSA C22 2 No 142 To fulfill requirements for safe operation with regard to mechanical stability flame retardation stability and protection against contact the following alternative types of installation are specified Installation in a suitable cabinet Installation in a suitable enclosure Installation in ...

Page 65: ...Electrical Code r ANSI NFPA 70 WARNING EXPLOSION HAZARD DO NOT CONNECT OR DISCONNECT EQUIPMENT WHEN A FLAMMABLE OR COMBUSTIBLE ATMOSPHERE IS PRESENT WARNING EXPLOSION HAZARD SUBSTITUTION OF COMPONENTS MAY IMPAIR SUITABILITY FOR CLASS I DIVISION 2 OR ZONE 2 WARNING When used in hazardous environments corresponding to Class I Division 2 or Class I Zone 2 the device must be installed in a cabinet or ...

Page 66: ...e in hazardous areas according to UL HazLoc WARNING EXPLOSION HAZARD DO NOT DISCONNECT WHILE CIRCUIT IS LIVE UNLESS AREA IS KNOWN TO BE NON HAZARDOUS This equipment is suitable for use in Class I Division 2 Groups A B C and D or non hazardous locations only This equipment is suitable for use in Class I Zone 2 Group IIC or non hazardous locations only 4 2 2 Installing the TIM modules Both DNP3 TIM ...

Page 67: ...9 pin D sub connector of the modem connecting cable into the X1 or X2 connector of the TIM and screw it tight 8 Turn on the power supply The TIM starts up The LEDs indicate the current start up activities see separate section Start up activities 9 Once it has started up the TIM can be supplied with its parameters SDBs using the SINAUT diagnostics and service tool With the TIM 3V IE DNP3 and the TI...

Page 68: ...h the TIM 3V IE DNP3 and the TIM 4R IE DNP3 the SDBs can also be loaded on the memory card of the S7 300 CPU with the TIM 4R IE DNP3 you can also use the optional C PLUG of this module for storage The TIM receives then its configuration data from the CPU during startup or takes it from the inserted C PLUG 4 2 5 Connecting the TIM to the power supply WARNING Connecting up only with power off Connec...

Page 69: ...le to the TIM M and L 3 Close the front panels Note To avoid ground loops do not connect the shielding of the TIM Wiring diagram The following figure shows how to connect up the TIM 3V IE DNP3 and the TIM 4R IE DNP3 Image 4 6 Connecting the TIM 3V IE DNP3 and the TIM 4R IE DNP3 to the power supply If one or more TIMs are installed as a CP in an S7 300 device the CPU and TIMs must be connected to t...

Page 70: ...sioning involves the following steps 1 Turn on the common power supply of the fully wired S7 station The LED display during startup is described in the two following sections 2 Download the configuration data to the station Downloading the configuration data is described in the following section Downloading Page 239 4 3 2 Startup activities of the TIM 3V IE DNP3 Introduction During startup the LED...

Page 71: ...s On On On Off 9 Loading and starting subscriber man agement MesA Off Flashes On Off Off On 10 Loading and starting time of day driver Off Flashes On On Off On 11 Loading and starting the TD7 software of the TIM TD7onTIM on the TIM Off Flashes On Off On On 12 Loading and starting WAN driver Off Flashes On On On On 13a Startup completed without error Off On Off X 1 X 1 X 1 13b Startup completed wit...

Page 72: ... TIM can be returned to a defined state using the default startup Following the default startup the TIM can have new parameters set both over the MPI interface of the CPU and over its own Ethernet interface To force a default startup follow the steps outlined below 1 Turn off the power for the TIM 2 Press the reset button accessible from the front turn on the power while holding down the reset but...

Page 73: ... 3 Starting VxWorks operating sys tem Off Off On On On On On On 4 Loading and starting TIM firmware Off Off Off On On On On On 5 Initializing flash file system and starting the start manager Off Flash es On Off Off Off Off Off 6 Loading and starting P bus driver Off Flash es On On Off Off Off Off 7 Loading and starting subscriber management SubA Off Flash es On Off On Off Off Off 8 Loading and sta...

Page 74: ...age Note After transferring the SDBs to the TIM the group error LED flashes for approximately 10 seconds This indicates that the TIM has registered the transfer and will automatically start a reset after a further 10 seconds and the parameter assignment from the newly transferred SDBs will be adopted The TIM then behaves the same as following power ON Default startup If the situation arises that t...

Page 75: ...s of messages stored on the TIM in the event of a power outage You will find the order number of the backup battery in the catalog Storage CAUTION Batteries can ignite or explode There is serious risk of burns if the batteries are heated or damaged Store the battery in a dry and cool location below 30 C and not in the vicinity of heating appliances Protect the device with a battery inserted from d...

Page 76: ...hium The internal components of the battery must not be allowed to pollute the environment Do not dispose of the battery in the domestic refuse Make sure that you observe the waste disposal regulations in your country Please ask your regional contact concerning the procedure for exchanging old batteries You will find additional information in the Internet at Partner http www automation siemens com...

Page 77: ...elecontrol systems With this software the user can implement and set the parameters for the telecontrol components in a STEP 7 project The following figure shows where the SINAUT configuration software fits into the overall system of the SIMATIC world The areas with the cloud behind them are covered by the SINAUT configuration software Image 5 1 The SINAUT configuration software within the overall...

Page 78: ...s 5 1 2 Sequence of configuration of a telecontrol system The configuration of a telecontrol system is shown below step by step The dialogs of the SINAUT configuration tool are also explained Image 5 2 Sequence of configuration of a telecontrol system When configuring a telecontrol system the SINAUT configuration tool must be started after the network has been configured to allow configuration of ...

Page 79: ...ry of configuration and parameter assignment and explain which data generated during commissioning needs to be loaded on the TIM to make it operational The individual steps are described in detail in the sections that follow Configuration in STEP 7 V5 5 As with all other S7 modules the configuration of the TIM is performed in the STEP 7 HW Config program The various TIM modules can be found there ...

Page 80: ... Image 5 3 S7 300 station with installed TIM and TIM parameter assignment dialog Setting parameters for networks and network nodes The next step is to connect the various stations in a WAN This part of the configuration is done with the NetPro STEP 7 program If you are using an IP based WAN take a normal Industrial Ethernet from the NetPro catalog The classic WAN DNP3 dedicated line can also be ta...

Page 81: ...k and network nodes opened The properties of classic WANs are specified in a parameter assignment dialog The relevant dialog can be opened by double clicking on the corresponding network To set the parameters for the various network nodes you also double click on the connecting line between the network and the node to open the relevant parameter assignment dialog ...

Page 82: ...configuration tool Here the connections that are possible from the PC of the control center to the CPU are identified and made available for selection Select the required connections from the right hand pane of the connection configuration and drag them to the left hand pane Configuring the subscribers After saving the selected connections you then open Subscriber administration Here the connectio...

Page 83: ...mware TD7onTIM handles the sending and receiving of process data for the local CPU Data that the CPU sends is read from the CPU via the backplane bus by the TIM using TD7onTIM Received data is written to the CPU by the TIM using TD7onTIM The communications partners of the CPU general communications parameters and the data and address parameters are configured in TD7onTIM You create the configurati...

Page 84: ...n in the section Commissioning the TIM Page 70 5 2 Creating a project in the SIMATIC Manager The first step in configuring a new installation is to create a new project in the STEP 7 SIMATIC Manager This project serves as a directory for all the configuration data of the installation You create the project in the SIMATIC Manager by selecting the File New menu and entering the name of the project 5...

Page 85: ...wing objects must be selected for these subscribers For a PC based DNP3 master station Other station This third party station is simply used as a placeholder for the network configuration A hardware configuration for a third party station of the type DNP3 master station is not possible since its content is unknown to STEP 7 Modbus slave To connect a Modbus slave to the serial interface of the DNP3...

Page 86: ...allation rules include for example S7 300 S7 400 S7 400H Power supply permitted only in slot 1 S7 300 CPU permitted only in slot 2 S7 300 IM module permitted only in slot 3 S7 300 Function modules CPs I O FMs TIMs permitted in slots 4 11 S7 300 There must be no gaps between the modules inserted in slots 4 11 The installation rules for function modules are different in the expansion racks depending...

Page 87: ...Configuration in STEP 7 5 5 Configuring stations in STEP 7 HW Config TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 87 Image 5 7 The module catalog in the hardware configuration ...

Page 88: ...tion with one SIMATIC 300 rack and various modules Racks are either created by double clicking on a rack entry in the catalog or by dragging the rack entry for example a standard rail for S7 300 to the station window Since the system type SIMATIC 300 or SIMATIC 400 is already specified by the selection of the station only suitable racks can be installed Modules are installed in the rack in one of ...

Page 89: ... a module Here you can adapt the properties of the particular object precisely to its requirements The content of the Properties dialog depends on the module type Only practical parameters for this type are displayed Since each module has a set of default parameters it is not absolutely necessary to set parameters at this point As an alternative you can also open the same Properties dialog in NetP...

Page 90: ...ork nodes If you double click on a network or network node icon or select the Object Properties menu in the shortcut menu right mouse button the Properties dialog opens to allow you to set parameters Here you can connect modules with networking capability with the networks and adapt the properties of the relevant object to your requirements All parameters have default settings that simplify parame...

Page 91: ...ager and in the network configuration S7 subnet ID The S7 subnet ID is made up of two numbers one for the project and one for the subnet separated by a dash If you want to go online with a PG without a consistent project you must know the subnet ID The subnet ID is also printed out when you print the network configuration The project path is displayed The storage location of the project is display...

Page 92: ...es are only available for dial up networks Mode Operating mode For DNP3 dedicated lines the Polling mode is preset and cannot be changed Polling In polling mode that is used with dedicated lines the data exchange is controlled by the master TIM This polls the connected stations and node stations one after the other Stations with data to transmit send it as soon as they are polled Stations that do ...

Page 93: ...out Message format For DNP3 dedicated lines this parameter has the default setting FT3 and this cannot be changed FT3 is recommended in the DNP3 specification For dial up networks the following values can be configured FT1 2 8E1 Character format 8 data bits even parity 1 start bit 1 stop bit Modem setting Data format 11 bits FT2 8N1 Character format 8 data bits no parity 1 start bit 1 stop bit Mod...

Page 94: ...tworks the following values can be configured 40 240 Default setting 240 For DNP3 networks the parameter has no significance except that with values 240 PG routing does not work It is recommended that you use the default value of 240 Connection In the Connection box you can set the following parameters Connection type Range of values Half duplex duplex Default Duplex Note Half duplex must not be c...

Page 95: ... the calls failed n times in a row regardless of whether a connection could be established at all or whether no data could be transferred if a connection was established Redialing attempts This is the number of attempted calls without successful connection establishment to the communications partner following which a fault is assumed on the CPU Range of values 1 127 Default 3 Identification Custom...

Page 96: ... Configuring TIM modules Page 114 Image 5 11 Time Service tab You can set the following options for the Synchronization cycle parameter No synchronization There is no time synchronization on the relevant network Hour scheme The number of hours between synchronization activities can be set in the Hour scheme drop down list Start time If the cycle for time synchronization is longer than 1 hour you c...

Page 97: ...tion in the Time of day drop down list box for example 01 00 On dedicated lines a synchronization cycle of 1 hour is recommended On the DNP3 WAN the DNP3 master station is the synchronization master Node List tab The node list displays all the communications subscribers connected to the current network in other words TIM modules It also lists the station name the WAN address and the configured nod...

Page 98: ...s the default name of the network You can change this to suit your purposes A new modified name appears in the SIMATIC Manager and in the network configuration S7 subnet ID The subnet ID is made up of two numbers separated by a dash The number for the project The number for the subnet If you want to go online with a PG without a consistent project you must know the subnet ID The subnet ID is also ...

Page 99: ...colors according to the network type Image 5 14 Station with two network nodes one of which is networked Note After changing connections even if these are re established again later the SINAUT configuration tool with the connection configuration and thesubscriber administration must be called Printing network information The project can be printed and documented as a graphic or as text using the N...

Page 100: ... nodes AT Initialization tab for configuring initialization strings for the dialing mode AT mode General tab Image 5 15 Properties DNP3 Dedicated Line TIM dialog General tab The following parameters are available in the General tab The Name box displays the name of the module in SIMATIC stations You can only change the default interface name in SIMATIC PC stations and other stations A new modified...

Page 101: ...5 16 Properties DNP3 Dedicated Line TIM dialog Network Connection tab The parameters here are Node type The node type is selected in the drop down list The master station is the highest hierarchic level in the network It generally collects information from the underlying network nodes and specifies settings for the nodes in the field A station is at a level close to the field and hierarchically be...

Page 102: ...n existing connection can be deleted with the Delete button Basic Param tab The Basic Param tab contains the communications parameters for the selected DNP3 network node Image 5 17 Properties DNP3 Dedicated Line TIM dialog Basic Param tab The parameters shown in the following tab cannot be modified for the TIM 3V IE DNP3 and only partly modified for the TIM 4R IE DNP3 Interface This parameter cann...

Page 103: ...annot be set for DNP3 and has no significance Number of spontaneous messages This parameter cannot be configured for DNP3 and has no significance Limit for locked messages This parameter cannot be configured for DNP3 and has no significance Dedicated Line tab The Dedicated Line tab contains special parameters required only when using dedicated lines Image 5 18 Properties DNP3 Dedicated Line TIM di...

Page 104: ...diagnostics buffer and if configured sets the relevant bit in the PartnerStatus system object to zero The configured value is transferred to the connected DNP3 master stations When the monitoring time has elapsed the master station must send a Daily Measurement message to the station that must be acknowledged by the station If the station does not reply to the message it is classified as being unr...

Page 105: ... dial up networks Image 5 19 Properties DNP3 Dial up Network TIM dialog Dial up Network tab The dial up network parameters include Transmission criteria The transfer criterion for connection establishment to transfer unsolicited messages events is only relevant for stations and node stations and as the default standard conditions is set for the DNP3 dedicated line which cannot be changed Standard ...

Page 106: ...e station If the station does not reply to the message it is classified as being unreachable by the master station Range of values 0 65 535 Default 0 no monitoring Note This mechanism can also be used for monitoring passive redundant paths Max connection duration s Here the maximum connection duration for dial up connections can be set A dial up connection will be terminated at the latest when the...

Page 107: ...meters specific to call numbers Image 5 20 Properties DNP3 Dial up Network TIM dialog Dialing Param tab The parameters here are Configured modem The modem specified in the hardware configuration is displayed Dialing mode Type of activation of the modem Note that only the AT mode can be used on the internal interface of the TIM Note If two MD3 modems communicate with each other they must not be ope...

Page 108: ... only to the dialing phase The data format in the data phase is set with switch 5 on the MD3 modem It is only necessary to set the dialing format on older modems that do not support Autoband With Autoband the modem can determine the character and data format in the dialing phase automatically based on the first AT string Dialing command This is the dialing command for the local modem The following...

Page 109: ...n the Own tel number box without area code and to specify the area code in Dialing prefix PIN number For a GSM module the 4 to 8 digit PIN number must be entered here so that this can be transferred from the TIM module to the module If you have a contract without a PIN leave the box empty Note If an incorrect PIN is entered the SIM card in the module might be disabled If the fault LED lights up du...

Page 110: ... is taken from the database User defined This option allows the manual entry of AT Initialization strings for the basic settings of the modem Type of string The content of the current string is shown in this output box Special features of the MD4 modem is no longer available On the MD4 modem the standard string is ATS45 83 P1 N0 W M n The part string P1 defines the V 110 mode at a transmission spe...

Page 111: ... tab The General tab informs you about general parameters of the Ethernet interface Name The Name box displays the name of the module The project path is displayed The storage location of the project is displayed In the Author input box you can enter the person who created the configuration The date created is displayed The date of the last modification is displayed In the Comment input box you ca...

Page 112: ...es Ethernet interface dialog Parameters tab The Parameters tab provides the following parameters Set MAC address use ISO protocol Since an Ethernet TIM does not use the ISO protocol but TCP IP this option remains disabled The IP address This has a default entry and cannot be changed here The Subnet mask This has the default value 255 255 255 0 and can be changed restricted ...

Page 113: ...enu The following is reported Subscribers not connected to a any subnet Subnets with only one subscriber Inconsistent connections for example due to the wrong WAN protocol The following is also checked for telecontrol networks Compatibility of the connected modem types with each other Compatibility of the connected modem types with the network parameters The following is checked for dedicated line...

Page 114: ...r modifying the module name or adding comments Addresses tab with information on I O address areas of the CPU Time Service tab for setting the parameters for time of day synchronization of a TIM module Interfaces tab for configuring the Ethernet and WAN interface s Options tab with parameter assignment options for the message memory Note Communication specific parameters are entered in the Propert...

Page 115: ...signment options Short Designation output box the module type and a brief description are displayed The Order No output box displays the article number of the module The Name input box allows you to change the name of the module In the Comment input box comments for example relating to the use of the module can be entered The subscriber number DPN3 address of the TIM module that can be generated a...

Page 116: ...the date and time of day by the TIM In this case the TIM supplies the time data to the inputs specified here This is described in detail elsewhere refer to the section Synchronization of the CPU time with TD7onTIM Page 135 The start address and length of the address ranges are assigned by the system As an alternative you can change the inputs and outputs by disabling the system selection option an...

Page 117: ...de in this tab because the hierarchical distribution of the time is specified automatically during parameter assignment master station station If the TIM is connected to a network on which the DNP3 master station is located the PC in this network is always time master and the TIM always time slave In the Time Service tab of a TIM module you decide how the TIM will react to time synchronization on ...

Page 118: ...rs If a specific time is selected a tolerance of 2 5 hours is allowed before an error is signaled Parameter settings for time synchronization You can set the following options for the Synchronization cycle parameter No synchronization There is no time synchronization on the relevant network Hour scheme The number of hours between synchronization activities can be set in the Hour scheme drop down l...

Page 119: ...6 C253 04 119 5 7 4 Interfaces tab Interfaces tab The Interfaces tab displays a list of interfaces of the TIM module Image 5 27 Properties TIM dialog Interfaces tab for an Ethernet TIM If you click on an interface the parameter box for the relevant interface is displayed below the interface list ...

Page 120: ...2 DP Ethernet 1 2 If an Ethernet interface is selected the parameters of the interface become visible Ethernet 1 corresponds to interface X3 Ethernet 2 corresponds to interface X4 In the list box for the static Ethernet interface Ethernet 1 or Ethernet 2 is selected as default You set the IP parameters of the Ethernet interface by clicking the Properties button see Configuring Ethernet nodes Page ...

Page 121: ...nostics buffer If the value is set to 0 the default value 1 second is used on the TIM In mobile wireless networks a message is normally acknowledged within a few seconds This may take longer depending on the load on the network Experience has shown that an Ethernet timeout of 10 seconds is practical in wireless networks Note For the influence of the Master station monitoring time parameter on the ...

Page 122: ...dundant paths DNP3 parameters Clicking the DNP3 parameters button opens the DNP3 parameters dialog see section DNP3 parameters dialog Page 123 WAN 1 2 If a WAN interface is selected the parameters of the interface become visible WAN 1 corresponds to interface X1 WAN 2 corresponds to interface X2 Behind each interface that is to be connected with a network there must be a network node of the corres...

Page 123: ...m on the interface must be configured using the list box The modem type is checked during the plausibility checks to establish whether or not it is compatible with the current network parameters 5 7 5 DNP3 parameters dialog DNP3 parameters dialog This section describes the tabs of the DNP3 parameters dialog that is opened from the Interfaces tab Image 5 28 The DNP3 parameters dialog The tabs diffe...

Page 124: ... station is not permitted and the station TIM saves the events without sending them To achieve a consistent configuration you should select the same setting for the communicating interfaces of the station TIM and master station TIM Note If the TIM interface is connected to a serial DNP3 dedicated line with the type of connection half duplex you will need to set the Unsolicited transfer parameter t...

Page 125: ... the order in which the DNP3 events are transmitted to the DNP3 master station Possible values Type specific This is the bundled transfer of events according to data types typical for DNP3 First the existing binary events are sent then all analog values and finally all counted value changes This makes the messages somewhat more compact and transmission more efficient Chronological In this mode eve...

Page 126: ...knowledgments are requested Always Acknowledgments are always requested When segmented Acknowledgements are only requested with data messages that are segmented due to their length Default When segmented Acknowledgment monitoring time ms This value specifies how long an acknowledgement may take on the data link layer before a message is entered in the diagnostics buffer of the TIM The default valu...

Page 127: ...on settings parameter box Possible values 0 65535 Default 0 DNP3 station parameters tab This tab is shown only for interfaces with the connection mode DNP3 station or node station Polling parameters box Event polling interval Specifies the number of basic intervals after which events in the station should be polled by the DNP3 master For the basic interval refer to the DNP3 master station paramete...

Page 128: ...interval parameter Only after startup The stations are polled only after the first startup of the TIM and after the station restarts CPU status box Signal CPU STOP with bit IIN1 6 If the CPU changes to STOP and if the option is enabled this leads to the following reactions A diagnostics message is entered in the diagnostics buffer of the station TIM The CPU STOP is signaled to the partner To do th...

Page 129: ...olled by the DNP3 master station If you enter 0 zero the function is turned off no limitation Possible values 0 65535 Default 0 Connection monitoring time application layer s Time within which a sign of life is expected from the station If the configured time is exceeded the DNP3 master station sends a message to the station on the application layer If this message is not acknowledged by the stati...

Page 130: ...ber of stored DNP3 events is displayed in the diagnostics dialog of message management Example If 10 kB 10240 bytes of global message memory are used with 2 configured DNP3 master stations this results in 10240 40 256 events This means that 128 events can be stored per master station If the value zero is configured for the global message memory the message memory will be created with the maximum p...

Page 131: ... TIM using a PG The Tim module receives its SDBs during startup from its local CPU If the TIM is configured as a stand alone without a CPU in the rack this function is not available Note If there is no C PLUG inserted in a TIM 4R IE DNP3 the configuration data is stored in flash memory If there is a C PLUG inserted in the TIM 4R IE DNP3 the configuration data is stored automatically on the C PLUG ...

Page 132: ... has the following effects When the SDBs are stored on the CPU the TIM checks the origin of new SDBs If SDBs are to be loaded on the TIM from a PG the TIM rejects loading of the SDBs The deleting of SDBs from a PG is also blocked Resetting the TIM from a PG is blocked Updating the firmware of the TIM is blocked 5 7 7 NTP tab NTP tab Here you make the settings for a TIM 4R IE DNP3 in a master stati...

Page 133: ... the key Possible values 0 65535 Key name Here enter the key name that helps you to identify the key with the key ID entered above Range of values 5 11 ASCII characters IP address of the server If you want to use the NTP server first select the enable check box Then enter the IP address of the NTP server in decimal numbers 5 8 Consistency check and saving Saving and consistency check Once you have...

Page 134: ...onization You configure time of day synchronization in STEP 7 Note Avoiding time of day inconsistencies Note the following points relating to time of day synchronization Make sure that only one subscriber ever operates as the time of day master in a DNP3 network Make sure that only one of the methods of time of day synchronization listed below is used Initially specify 1 time master in the network...

Page 135: ...perties dialog of the WAN network section Configuring WAN network nodes Page 99 You configure the time of day synchronization of the TIM modules in the properties dialog of the TIM Time Service tab Page 117 The station TIM makes the time of day available to the local CPU in its I O addresses This makes the time of day available to the assigned S7 CPU You will find details in the section Time of da...

Page 136: ... following table shows the assignment of the 8 bytes of time information Time of day format Table 5 1 Format of the time information in the inputs of the I O addresses of the TIM Byte No Offset bytes Meaning High nibble Low nibble Value Range of val ues decimal Value Range of val ues decimal 1 8 Year tens 0 9 ones 0 9 2 9 Month tens 0 9 ones 0 9 3 10 Tag tens 0 9 ones 0 9 4 11 Hour tens 0 9 ones 0...

Page 137: ...ime master in the DNP3 network or by the PG Note If the time on the TIM was set from a PG this is always indicated as standard time status bit 1 has the value 0 5 9 3 Time of day synchronization of an S7 400 CPU Time information provided by the TIM 4R IE DNP3 If a TIM 4R IE DPN3 in stand alone mode is connected to a master station via Ethernet and an S7 400 CPU is connected to the second Ethernet ...

Page 138: ...the properties dialog of the CPU 4 Open the properties dialog of the TIM with the Time Service tab 5 Select the backplane bus and set the synchronization cycle to the same setting as configured on the CPU 6 Close the dialog and save Time of day synchronization of the TIM by the 400 CPU 1 In the properties dialog of the CPU open the Diagnostics Clock tab 2 In the Clock box select the option As mast...

Page 139: ...version SINAUT TD7 Library Select the components you want to install you can select several packages at once using shift click and start the installation by clicking the Install button To configure DNP3 systems the TD7 Library component does not necessarily need to be installed During installation the setup program will prompt you for or display any further information necessary The installation p...

Page 140: ... Automation SIMATIC SINAUT ST7 SINAUT ST7 Information Version information of the engineering tool and link to telecontrol Internet pages To display program version information call up the About dialog of the SINAUT configuration tool with the Help About menu Using the Internet address www sinaut de http www sinaut de at the top right of the About dialog you open the telecontrol homepage of the Sie...

Page 141: ...owing function keys F3 for Connection Configuration F4 for Subscriber Administration Operator input The SINAUT configuration software fits into the familiar Windows sequences Functions such as window technology menu bar toolbar or the online help for the dialogs correspond to the Windows or STEP 7 standard Select a graphic object by clicking it once with the left mouse button Further functions for...

Page 142: ...How to work with the functions of the individual configuration tools Connection Configuration Subscriber Administration and TD7onTIM is explained in the following sections 6 4 The connection configuration 6 4 1 Configuring the connections The DNP3 connections In DNP3 systems connections are always configured between the following subscribers Between the CPU of a station and the CPU of the DNP3 mas...

Page 143: ... information can be set View of the Connection Configuration window Open the connection configuration only after the configuration in STEP 7 NetPro has been completed After opening the connection configuration the configuration window opens Image 6 3 The Connection configuration window of the SINAUT configuration tool In the right half of the window the possible connections are listed in a tree st...

Page 144: ...t subscriber with Subscriber number Station name Module Interface Example 5 Station 3 CPU 312 MPI 2 The representation can be set to meet individual requirements using the Extras Options menu Rules for connection configuration DNP3 For each path physical network only one connection can be configured Between a DNP3 master station and a DNP3 station a maximum of 2 paths can be configured Exception a...

Page 145: ...ation of the type other station was configured in NetPro connections from the stations to stations of the type DNP3 PG PC or a PCS 7 control center are not displayed This does not however mean that these connections do not exist These connections are in fact displayed in the opposite direction this means for example from a DNP3 station to a station of the type other station As a general rule a con...

Page 146: ... connections that do not conform Saving the connection configuration Once any invalid connections have been checked and removed and all required connections configured so that they appear in the left hand window the connection configuration must be saved with the SINAUT Save menu or the Save button in the toolbar Saving is necessary to store the connections permanently If a message is displayed du...

Page 147: ...cluded in the list of possible connections If there is a large number of invalid connections memory space does not always allow all invalid connections to be displayed The Invalid Connections dialog is displayed using the SINAUT Show Invalid Connections menu or the Show Invalid Connections button in the toolbar Image 6 4 Invalid Connections dialog If you expand a connection structure in the list o...

Page 148: ...ions button on the right of the toolbar If changes to the connection configuration previously existing connections were modified and either linked to other objects or completely deleted connection configuration has algorithms with which to find these lost connections in the project Deleted connections are displayed in red in the left hand part of the Recover lost connections window Connections tha...

Page 149: ...an for objects is stored for example the DB configuration for the CPU modules After starting subscriber administration first the previously known data of the subscribers is loaded from the data management and then updated The following data is updated Subscriber information Which subscribers exist Networking information Who communicates with whom over which connections DB configuration information...

Page 150: ...ction in the directory tree a selection of subscriber types is displayed in the subscriber list When using DNP3 the following subscriber types are not relevant SMS master stations SINAUT ST1 subscribers redundant ST7cc ST7sc subscribers The lowest directory TIMs with TD7onTIM is used to configure the TD7 software for the TIM modules You will find the description of the TD7onTIM configuration in th...

Page 151: ...er numbers of the two partners in the appropriate input field for the numbers or in the Properties CPU redundant dialog You can open this dialog by expanding the Redundant H CPUs directory in the directory tree selecting the H CPU below it and then selecting Properties in the shortcut menu right mouse button In this dialog you can also change the primary CPU Subscriber no of red Partner The Subscr...

Page 152: ...ies menu the Properties of subscriber dialog is displayed The content and number of the tabs of the Properties of subscriber dialog depend on the subscriber type Table 6 2 Overview of the Properties dialog tabs according to subscriber type Tab CPU TIM Other station SIMATIC S5 PC station PG Names of follow up dialogs Note Info yes yes yes Partner yes yes DNP3 master station Connections yes yes Prop...

Page 153: ...ame of the module or the name assigned in network configuration Station displays the set network node type The subscriber number is displayed Status from displays the date of the last configuration The date created is displayed Basic type displays the network object type from the network configuration Extended type displays the extended network object type adopted in the NetPro for example DNP3 CP...

Page 154: ...H connections local Connection to the local partner S7 400H CPU or TIM DNP3 connections Connection to the remote destination partner DNP3 master station Note If during the analysis of the subscriber data the configuration software recognizes that processing a DNP3 connection requires STEP 7 homogeneous connections then these are created automatically The prerequisite is that the connection mode of...

Page 155: ...g communications block connections bytes This parameter cannot be set for a DNP3 CPU The length of the CPU send buffer for any existing communications function block connections of a CPU This is the same for all communications function block connections of the current CPU Range of values 202 65208 bytes Default 2020 bytes By double clicking on a subscriber row in the local connections output box y...

Page 156: ... Connection dialog TIM For the local connection of the TIM module you can set the following here Send Keepalives for this connection If this option is enabled keepalive messages are sent on this connection at the intervals set in the network configuration for the TIM Queue entries number Range of values 10 256 Default 64 The number of queue entries is the number of messages that the TIM module can...

Page 157: ...bytes for these connections Range of values 76 65382 bytes Default 760 bytes This parameter is not relevant for PBC connections This parameter cannot be set for a DNP3 CPU The Connection monitoring time s in other words the time that must elapse before dummy messages are sent to check the connection Range of values 1 32 s Default 5 s This parameter cannot be set for a DNP3 CPU CPU modules with PBC...

Page 158: ...ions The telecontrol communication of the CPU of an S7 station is handled by a DNP3 TIM The TIM supports communication with the following partners Communication of the local CPU with DNP3 control centers Communication of the local CPU with MODBUS slaves The organization of telecontrol communication is handled by the SINAUT TD7 software package When using the DNP3 protocol the TD7 software is avail...

Page 159: ...orresponds to a binary or analog process input or output or a calculated value Point Index The index is used for the unique identification of a data point Index The index is adopted in TD7onTIM Note Refer to the information in the section Configuring the index Page 160 Object Coded representation of data point or another data unit for transmission Data object The data points are also configured in...

Page 160: ...exes In the configuration the index band of an object is specified using the start index You specify the start index manually If objects have several data points the index is assigned by the system continuously starting from the start index This means that data points within a data object are numbered through with ascending indexes refer to the next example You will find an overview of the number ...

Page 161: ...P3 master station can request any number of individual values that are addressed using the object group and the DNP3 index Here the DNP3 master station can specify the variation in which the data is to be sent by the station Sending following a general request by the DNP3 master station All configured values can be transmitted in a general request Here the station selects the default variation of ...

Page 162: ...xample based on technological aspects You specify the event class for each object in TD7onTIM refer to the section Data objects Partner and send parameters Page 194 Note Changing the event class for node stations The classification of events of class 2 and 3 in substations is set uniformly to class 1 in the node station when sending via a node station Note No spontaneous sending on half duplex con...

Page 163: ... 2 Binary output status with flags Station Bin08X_S BOOL Cmd01B_R BYTE Master sta tion Bin08X_R BOOL Cmd01B_R BYTE 11 2 Binary output event with time Station Bin08X_S BOOL As of DNP3 level 4 Master sta tion Bin08X_R 12 1 Binary command control relay output block Station Bin04B_R BYTE Bin08X_R BOOL Cmd01B_R BYTE DNP3_Cmd01X_R BOOL Master sta tion Bin04B_S BYTE Bin08X_S BOOL Cmd01B_S BYTE 20 2 Count...

Page 164: ...bit float with flag Station Dat12D_S REAL DNP3 level 5 only Master sta tion Dat12D_R 32 1 Analog input event 32 bit Station Dat12D_S DINT DNP3 level 1 to 3 Master sta tion Dat12D_R 2 Analog input event 16 bit Station Ana04W_S WORD DNP3 level 1 to 3 Mean04W_S WORD Dat12D_S BYTE INT WORD Master sta tion Ana04W_R WORD Mean04W_R WORD Dat12D_R BYTE INT WORD 3 Analog input event 32 bit with time Station...

Page 165: ...01W_S WORD Dat12D_S BYTE INT WORD 3 Analog output 32 bit float Station Dat12D_R REAL DNP3 level 5 only Master sta tion Dat12D_S 42 3 Analog output event 32 bit with time Station Par12D_R DINT As of DNP3 level 4 Master sta tion Par12D_S 4 Analog output event 16 bit with time Station Set01W_R WORD Master sta tion Set01W_S 110 1 255 Octet string Station master sta tion Dat12D_R Dat12D_S CHAR 111 1 25...

Page 166: ...tion tool in the following steps 1 Parameter assignment configuration of the basic settings for each TIM with TD7onTIM 2 Specifying the parameters specific to the destination subscribers 3 Adding objects The objects are grouped together in the TD7onTIM library that is called from the subscriber administration System objects Using the system objects system information is displayed and communication...

Page 167: ...objects provide information for the CPU user program relating to communication Data objects The sending and receiving of process data is configured with the aid of standardized data objects The data objects are available in a standard library and are inserted from the library into the TD7onTIM configuration An example of a data object is Ana04W_S that organizes the transmission of 4 analog values ...

Page 168: ...ded into three areas in subscriber administration Directory tree in the left hand part of subscriber administration Subscriber list top right Parameter area below the subscriber list Image 6 10 Subscriber administration of the SINAUT Configuration Tool The TIMs with TD7onTIM directory is selected in the directory tree The subscriber list shows the subscribers with TD7onTIM The parameter area for t...

Page 169: ... top right of the subscriber administration there is a subscriber list that lists certain subscriber types objects or send receive channels depending on what is selected in the directory tree By successively expanding the TIMs with TD7onTIM directory the subscriber list displays the following content TD7 compliant TIMs of the project Destination subscribers with which the TD7 compliant TIMs can co...

Page 170: ...directory or a subdirectory is selected Depending on the selection in the navigation pane or node list the following parameters are displayed in the parameter area Basic parameters of a TD7 compliant TIM Parameters of a destination subscriber Parameters of a system or data object Parameters of a send or receive channel If a subscriber with TD7onTIM is selected in the directory tree the parameters ...

Page 171: ... option Exiting the input box with the mouse or tab key The entries are applied permanently using the Save function 6 6 5 Basic settings for subscribers with TD7onTIM To make the basic settings for the TD7 software of the individual TIM subscribers you first select the TIMs with TD7onTIM directory in the directory tree The subscriber list then displays all the TD7 compliant TIM modules of the proj...

Page 172: ...cle If no objects were configured for the fast cycle this read procedure is omitted in the basic cycle 3 Read data from some of the send objects that were assigned to the normal cycle How many objects per basic cycle will be read can be set by the user Refer to the Max read parameter below 4 Write data of some of the currently pending receive objects How many objects this can be as a maximum per b...

Page 173: ... read from the CPU per basic cycle As information above the input field beside Number of configured send ob jects you can see how many send objects the user configured for the TIM in the normal cycle and in the fast cycle Name Cycle pause Range of val ues 0 32000 ms Default 1 Explanation This parameter specifies the duration of an optional pause between 2 basic cycles A pause may be necessary if c...

Page 174: ...he parameters in this box are relevant only if the TIM uses MODBUS communication Name S7 CPU polling pause Range of val ues 0 to 65535 ms Default 200 Explanation The parameter specifies the duration of the pause on the TIM between two CPU polls Name MODBUS polling pause Range of val ues 0 to 65535 ms Default 200 Explanation The parameter specifies the duration of the pause on the TIM between two M...

Page 175: ... apply to data traffic between the TD7onTIM of a project and this subscriber To set the parameters specific to destination subscribers open the TD7 on TIM directory and select the All Destination Subscribers directory The list displays all potential destination subscribers of the TD7 compliant TIM modules Destination subscribers are SIMATIC S7 CPU modules SIMATIC PCS 7 control centers DNP3 master ...

Page 176: ...es the support of the following objects data types object group variation Frozen counter with time of day in 16 bit format 21 6 Counter event with time of day in 16 bit format 22 6 Analog input floating point 32 bit format 30 5 Analog input event floating point with time 32 bit format 32 7 Analog output status floating point 32 bit format 40 3 Analog output floating point 32 bit format 41 3 Name T...

Page 177: ...ol direction out Station receives message from master station Use in the station type master station for the monitoring direction in Master station receives message from station Overview of the TD7onTIM objects Table 6 5 System objects of TD7onTIM System object Function General system objects WatchDog Monitoring of the CPU TIM connection Indicates to the CPU whether the communication between CPU a...

Page 178: ...DNP3 object group vari ation S7 data type DNP3 level Use in stations type Message binary objects Bin04B_S Binary value object for send direction Send 4 bytes of binary infor mation 32 4 x 8 1 2 BOOL 2 2 BOOL 12 1 BYTE 1 5 S S M Bin04B_R Binary value object for receive direction Receive 4 bytes of binary in formation 32 4 x 8 1 2 BOOL 2 2 BOOL 12 1 BYTE 1 5 M M S Bin08X_S Binary value object for se...

Page 179: ... WORD 21 2 WORD 21 6 WORD 22 2 WORD 22 6 WORD 23 2 WORD 1 5 1 4 5 1 4 5 1 5 S Cnt01D_R Counted value object for re ceive direction Receive 1 counted value 1 20 2 WORD 22 2 WORD 22 6 WORD 1 5 1 4 5 M Cnt04D_S Counted value object for send direction Send 4 x 1 counted value 4 20 2 WORD 21 2 WORD 21 6 WORD 22 2 WORD 22 6 WORD 1 5 1 4 5 1 4 5 S Cnt04D_R Counted value object for re ceive direction Rece...

Page 180: ...t Function Setpoint input Channel type Setpoint send 1 41 2 WORD 1 5 Set01W_R Setpoint object for receive direction Receive 1 setpoint 16 bits object with 3 channels Local not used LocalSetpointInput Function Local setpoint Channel type Data send 1 40 2 WORD 42 4 WORD 1 5 4 5 S SetpointOutput Function Setpoint output Channel type Setpoint re ceive 1 41 2 WORD 1 5 Par12D_S Parameter object for send...

Page 181: ...n Local parameters Channel type Data send 1 12 40 1 DINT 42 3 DINT 1 5 4 5 S ParameterOutput Function Parameter output Channel type Setpoint re ceive 1 12 41 1 DINT 1 5 Universal data objects Dat12D_S Data object for send direction Send max 12 double words at least 1 double word with any information 1 12 30 1 DINT 30 5 REAL 32 1 DINT 32 3 DINT 32 7 REAL 41 1 DINT 41 3 REAL 1 5 5 1 3 4 5 5 1 5 5 S ...

Page 182: ...5 1 5 1 5 1 5 M M M S S M S M Objects for data exchange with MODBUS slaves only in station ModbusWrite Write data from the station CPU to the MODBUS slave ModbusRead Read data from the MODBUS slave to the station CPU Data objects not supported Par12x1D_R Cannot be used for the DNP3 protocol DNP3 implementation level that must be supported by the communications partner Station type M master station...

Page 183: ...nt Parameter objects Par12D_S Par12D_R object groups 40 42 Parameter settings with mirror back functionality are sent by the master to a station using the Par12D_S object The station receives the data via the Par12D_R object The receive object _R of the station mirrors the current or if applicable locally entered value back to the master station using the channel type LocalParameterInput To receiv...

Page 184: ..._S without configured event class basic settings of the object This corresponds to the DNP3 object group 10 variation 2 The new value is transferred only when polled by the DNP3 master station As event Example Bin08X_S with configured event class basic settings of the object This corresponds to the DNP3 object group 11 variation 2 For the transfer of the new value to the DNP3 master station one of...

Page 185: ... want to configure the objects 2 Open the TD7onTIM library see above The library is opened in a separate window The objects are listed with the object name and a brief object description 3 Select an object with the mouse in the window of the library To insert several objects at the same time select an object and move up or down using the arrow keys while holding down the Shift key or select severa...

Page 186: ...required for other TIM modules you can also transfer the entire objects to a different TIM Follow the steps outlined below 1 Select a TIM in the TIMs with TD7onTIM directory 2 Select the Copy shortcut menu 3 Select another TIM in the TIMs with TD7onTIM directory 4 Add all objects to the other TIM with Paste in the shortcut menu Overview of the channel types Each data object has a defined number of...

Page 187: ...These are special parameters for some channel classes Not all channel classes have specific parameters To set the parameters for the channels you select the data object of a TIM with TD7onTIM in the directory tree The list box displays the channels of this object with the channel name and channel type If channels have already had parameters set the input or output address is displayed in the list ...

Page 188: ...use button select the Copy menu or use the key combination Ctrl C 3 Select a different channel of the same object or the channel of another data object of the same type 4 Insert the channel after parameter assignment using the shortcut menu right mouse button Insert or use the key combination Ctrl V The selected channel is overwritten by the copied channel and its parameters Note You will find a p...

Page 189: ...s still reading from and writing to the memory areas of the CPU As long as communication is functioning correctly a selectable output bit changes state at 5 second intervals The constant status change can be evaluated by the CPU user program Parameters in the Output Bit box Name Output bit Memory area The following options are available DB Data block Memory bit Memory bit area Output Process outpu...

Page 190: ...re than once Image 6 16 Parameter assignment dialog of the PartnerStatus system object Name Status output byte Memory area The following options are available DB Data block Memory bit Memory bit area Output Process output image PIQ DB No Specifies the DB number in the CPU if the data block memory area DB was selected Address byte Input box for the byte number in the selected memory area Name Partn...

Page 191: ...essed for the minimum time Accidental activation of a button does not then lead to unwanted command setpoint or parameter transfer When the minimum input time has elapsed and the button can be released OpInputMonitor indicates this with its status byte for operator input in the Input OK bit Apart from the minimum duration the maximum input time can also be set for digital inputs This allows a butt...

Page 192: ...al is automatically reset to zero by TD7onTIM If however a 1 out of n error is detected the bit is not automatically reset You then need to reset the input bit manually or have it reset by the user program Image 6 17 Parameter assignment dialog of the OpInputMonitor system object Status byte for operator input box Name Status byte for operator input Memory area The following options are available ...

Page 193: ... byte for operator input Fur ther hardware entries are not processed as long as the input error bit is set The max input time is specified in seconds A time of at least 30 seconds is recommended entry 30 0 zero can be entered if the parameter is not required Name Min Input Time Range of val ues Enter value x 0 1 s 10 corresponds to 1 second Default 0 Explanation Delay time for commands entered ove...

Page 194: ...x of the object Object number Send parameters 2 Configuring the channels Here you specify the properties of the individual channels of an object Memory area of the CPU Send trigger for send channels Specific properties of the individual object types Configuration of the objects partner start index object number send parameters Follow the steps outlined below 1 Select a TIM with TD7onTIM in the dir...

Page 195: ... system object ModbusGateway in the object list in the column Partner no with the Modbus objects the gateway number is displayed preceded by G Parameters in the Object box Name Object no Range of val ues 1 32000 Explanation The object number is assigned consecutively and uniquely by the configura tion tool As long as this uniqueness is retained you can change the value as necessary This value serv...

Page 196: ...a node station In this case the node station must be selected as the partner After being saved in the CPU of the node station the data is forwarded to the destination subscriber by a second object in the node station In other words the actual destination partner is configured in the node station Direct node station Ethernet dial up networks With direct communication between stations in Ethernet ne...

Page 197: ...than one channel a channel that is configured as being inactive also occupies one or more indexes Example With a data object with 3 channels each with 1 byte the following indexes are occupied Channel 1 Start index up to start index 7 Channel 2 inactive Channel 3 Start index 16 up to start index 23 Addressing the bits in a channel The least significant bit of the first channel bit 0 is always addr...

Page 198: ...not specify an event class there is no change monitoring of the process values of the data object and changes are not reported to the mas ter station as an event class 0 poll Command direction Range of val ues IN OUT Default TIM with master station function ON cannot be changed TIM with station node station function OUT Explanation The parameter specifies whether an object is sent with the master ...

Page 199: ...ation inter station communication the TIM has the master function and the parameter must be enabled Name Read cycle Range of val ues Normal cycle Fast cycle Default Normal cycle Explanation Each data object that sends data must be assigned to one of the two read cycles The normal cycle is the most suitable selection for most process da ta Data that must be acquired quickly such as alarms and pulse...

Page 200: ...osing the parameters that have been entered If you do not require certain channels of a data object ignore them and leave them without a parameter assignment Memory area and triggers With the two channel classes send channel and receive channel apart from the object specific parameters the following information is always configured For send channels Input address Here you specify the source addres...

Page 201: ...NP3 System Manual 12 2015 C79000 G8976 C253 04 201 Image 6 19 Parameter assignment dialog of a send channel based on the example of Counted value send Image 6 20 Parameter assignment dialog of a receive channel based on the example of Binary receive ...

Page 202: ...W must be mapped to the bit memory or data block area by the user program Data type Apart from the objects Dat12D_S Dat12D_R Par12D_S Part12D_R the box shows the default data type for the particular channel Binary send receive BYTE Analog send receive WORD Mean value send receive WORD Counted value send WORD Counted value receive DWORD Command send receive BYTE DNP command received DNP command ret...

Page 203: ...ta of all channels when the send trigger of only one channel fires Note the following for objects with multiple channels of the same type The send trigger can be configured individually for each channel Note that if the send trigger of an individual channel fires all channels of the object are transferred Since the various options of the send trigger must be activated alternatively or additionally...

Page 204: ...ntegration threshold value calculation it is not the absolute deviation of the process value from the last transferred value that is evaluated but rather the integrated value of the integrated deviation Calculation cycle The integration threshold value calculation works with a cyclic comparison of the integrated current value with the last stored value The calculation cycle in which the two values...

Page 205: ... value of 36 is entered in the send buffer Time trigger The Time trigger is activated with the Active option A combination of the two alternatives Time of day and Time scheme is not possible If the Time trigger is for example initially set to Time of day and then changed to Time scheme the previously set time of day is deleted Name Time of day Range of val ues Time of day hour and minute Default F...

Page 206: ...set after it has been read The reset can if required be evaluated by the user program 6 6 13 Data objects Specific channel parameters Note Assignment of DNP3 index and start index With the data objects described here you should take special care with the assignment of the DNP3 start index and the occupation of the indexes by the various channels The indexes used by the individual data objects and ...

Page 207: ...me Alarm mask Range of val ues Mask in hexadecimal format Default 00 hex Explanation This alarm mask is not relevant for DNP3 Name Send buffer principle mask Range of val ues Mask in hexadecimal format Default 00 hex Explanation Changes in masked bits in the byte of the Binary send channel cause a message transmission according to the send buffer principle Changes from 0 to 1 and from 1 to 0 are e...

Page 208: ...e To receive binary information the Bin08X_R object is therefore recommended Taking control codes into account Note Interlock function LATCH_ON for receiving only 1 bit With control codes sent from a master station in a message DNP3 object group 12 variation 1 Bin04B_R only takes into account the interlock function LATCH_ON If more than 1 bit is set at the same time in the entire object LATCH_ON o...

Page 209: ...ch index is written with a separate message The messages are sent independently of other As the data source an S7 word variable with a range of validity of 0 to 32766 is specified for each active channel With variable value less than zero zero is transferred Values greater than 32766 7FFEH are not transferred For other ranges of validity the data object Dat12D_S is available Analog value preproces...

Page 210: ...vated Default Function active Explanation If the function is activated negative analog values are corrected to the value zero The error ID 8000H 32768 that is displayed for example if there is a wire break in life zero inputs is nevertheless transmitted Name Smoothing factor Range of val ues 1 none 4 weak 32 medium 64 strong Default 1 Explanation Using the smoothing factor quickly fluctuating anal...

Page 211: ... return the specified values for the overflow or underflow range for all input ranges also for life zero inputs When the user provides specific values fault suppression is only possible if these also adopt the values 7FFFH or 8000H when the permitted ranges are exceeded If this is not the case the parameter does not need to have a value entered Ana04W_R Channel AnalogOutput_x Channel type Analog r...

Page 212: ...s 1 index per activated channel As the data destination an S7 word variable is specified for each active channel When receiving values in the range from 0 to 65535 are accepted If values outside the range of validity are received in the case of a station the value is not transferred to the S7 CPU The DNP3 master station receives a negative acknowledgment for such a command For other ranges of vali...

Page 213: ...find the DNP3 object groups compatible with the individual data types in the section Objects of TD7onTIM Page 177 Note Reducing network load By reducing the maximum size parameter Number the message length can be reduced to the actually required length if the entire data range of the object is not required This saves transmission time Dat12D_R Channel DataOutput Channel type Data receive Dat12D_R ...

Page 214: ... object is not required This saves transmission time Cnt01D_S Cnt04D_S Note Configuring counted values as an event For reliable transfer counted values should always be assigned to an event class for example event class 3 If counted values are transferred only as static unacknowledged DNP3 data there is a danger that these are not sent consecutively to the DNP3 master station if there are disrupti...

Page 215: ... station When the CPU or DNP3 TIM is restarted and if there is overflow of the counted value the corresponding flag restart discontinuity of the counter is set The master station can freeze counted values with a Freeze command and then read them as a Frozen counter Counted values that are assigned to an event class are stored in the event memory as a Frozen counter event when the Freeze command is...

Page 216: ...e 1 are masked in other words bits no 0 1 5 and 7 are ignored in command acquisition Byte assignment Bit no 7 6 5 4 3 2 1 0 Masked 1 0 1 0 0 0 1 1 Hexadecimal mask A 3 Cmd01B_R Channel CommandOutputByte Channel type Command receive The object occupies 1 index Cmd01B_R it is intended for the station and is pointless for a master station Cmd01B_R allows receipt of a binary command Only the least sig...

Page 217: ...n Pulse duration equivalent time and Number ofpulses see below The data object supports the following control codes id the object is suitably configured and the necessary information is received from the master Table 6 8 Functions of the data object Receipt of Reaction of the object depends on the configuration Control Code TCC Op Type Output mode Pulse on Output mode Latch on off 0x01 NUL PULSE_O...

Page 218: ...isabled Name Pulse duration equivalent time Range of val ues 0 2147483647 Default 0 Explanation Replacement value for the pulse duration If the pulse duration received from the master exceeds the value configured in Max pulse duration The pa rameter is only used when Max pulse duration is configured If the value is 0 zero no replacement value is used Name Number of pulses Range of val ues 0 255 De...

Page 219: ...d setpoint if the LocalSetpointInput channel parameter is set see Set01W_R This mirrored back value is displayed here at the ReturnedSetpoint output If you do not require the parameter leave it disabled Channel SetpointInput Channel type Setpoint send Function Setpoint input The entered setpoint is sent to the partner object via this channel This channel of the object corresponds to the DNP3 objec...

Page 220: ... the entries are rejected A new setpoint or parameter is processed only when previously no entry was acquired in one fast cycle The error status is indicated in the output byte of the OpInputMonitor system object using the 1 out of n error bit refer to the section System objects Configuration Page 188 Checking the input time If a parameter entry is transmitted as a result of the Trigger signal sen...

Page 221: ...function code The number of required elements in other words the size of the data field is configured in the Number address input box The configured number of values specifies how many DNP3 indexes are occupied consecutively by the object starting with the specified start index The following assignment between the data type used and the index used applies Data type Range of values Number of DNP3 i...

Page 222: ...tner object or entered locally at LocalParameterInput are output at ParameterOutput The number of required elements in other words the size of the data field is configured in the Number address input box The configured number of values specifies how many DNP3 indexes are occupied consecutively by the object starting with the specified start index The following assignment between the data type used...

Page 223: ...specific objects The following MODBUS specific objects are inserted from the TD7onTIM library for a TIM with TD7onTIM System object ModbusGateway The use of the MODBUS protocol for the serial interface of the DNP3 TIM is specified using the ModbusGateway object The interface and parameters of the connection to the MODBUS slaves are configured with this object System object ModbusPartnerStatus The ...

Page 224: ...ock Memory bit Memory bit area Output Process output image PIQ DB No Specifies the DB number in the CPU if the data block memory area DB was selected Address byte Input box for the byte number in the selected memory area Name MODBUS slaves Explanation In the 8 input boxes the MODBUS slaves to be monitored are assigned to the 8 status bits of the output byte The MODBUS address is specified for each...

Page 225: ...not as bus terminator RS 485 terminated TIM as bus terminator Name Transmission speed Explanation Transmission speed on the serial interface bps Range of val ues 300 600 1200 2400 4800 9600 Name Retry factor Explanation This value decides how often a message that has not been acknowledged positively is repeated before an error is signaled Range of val ues 0 255 Default 3 Name Send timeout Explanat...

Page 226: ...gnal has been received from the modem if it exists and no time was set for the RTS CTS delay time As soon as the CTS signal is received from the modem the send delay time is started The transfer of the data starts only after the time has elapsed Range of val ues 0 to 65535 ms Default 0 0 no send delay time Name Data format Explanation Format with which individual characters are transferred Range o...

Page 227: ...u specify the data type with which the data is transferred from the S7 CPU to the MODBUS slaves The drop down list offers the following data types for the three memory areas BOOL BYTE CHAR WORD DWORD INT DINT REAL Number Number of double words included in the array maximum 100 DB No Specifies the DB number in the CPU if the data block memory area DB was selected Address Byte Input field for the by...

Page 228: ...er the function codes Multiple Coils Single Coil If you select the number 1 you can switch over between single coil and multiple coils by changing the data type from BYTE to BOOL and vice versa Multiple Registers Single Register If you select the data type WORD and the number 1 you can change over between single register and multiple registers With the other constellations for changing over the MO...

Page 229: ...d with error 0x8001 Illegal Function After this error occurs the S7 address of this write job is no longer read until the next restart on the TIM 0x8002 Illegal Data Address 0x8003 Illegal Data Value 0x8004 Slave Device Failure 0x8005 Message transferred but slave device busy with a different process Acknowledge 0x8006 Slave Device Busy with other process 0x8008 Memory Parity Error 0x800C Wrong CR...

Page 230: ...alue 1 bit Read discrete inputs read multiple input values 1 bit Read holding register read 1 parameter 16 bits Read input register read multiple values 16 bits Note Changing the MODBUS input The function codes are interlocked with certain data types and their number in the S7 CPU output address Note the following conditions when switching over the function codes Coils Discrete Inputs Holding Regi...

Page 231: ...or the three memory areas BOOL BYTE CHAR WORD DWORD INT DINT REAL DB No Specifies the DB number in the CPU if the data block memory area DB was selected Address Byte Input field for the byte number in the selected memory area For data types involving more than 1 byte WORD DWORD the least significant byte number must be entered as in STEP 7 Number Number of double words included in the array maximu...

Page 232: ... Slave Device Failure 0x8005 Message transferred but slave device busy with a different process Acknowledge 0x8006 Slave Device Busy with other process The query should be repeated by the mas ter 0x8008 Memory Parity Error 0x800C Wrong CRC check value in the response message of the slave 0x800D Wrong net data in the response message of the slave 0x800E Wrong slave address in the response message o...

Page 233: ...in the toolbar or with the SINAUT Save menu The Options dialog opens in which you specify the scope of the system data to be saved processed and prepared Image 6 23 The Options dialog after selecting the Save function The Options dialog provides the following convenient functions in the Generation Compilation options area Generate System data blocks for TIMs and CPUs Generate SINAUT TD7 source fil...

Page 234: ...ribers in other words to subscribers involved in at least one telecontrol connection Regardless of the selected generation options the internal data is saved and a consistent version is always available later After saving the internal data a consistency check determines whether the user data is free of errors If this is the case the required functions are executed If problems are detected during t...

Page 235: ...he SINAUT diagnostics and service tool 6 7 3 Creating subscriber numbers as comments To make the subscriber numbers that are important for communication visible in the SIMATIC Manager or in the hardware configuration subscriber administration allows you to enter the subscriber number of networked components in the comment field of the properties The function is activated by selecting the option Su...

Page 236: ...ated error will still be reported 6 7 5 Generating system data after changing the configuration of an existing system Generating system data after changing the configuration of an existing system Changes to an existing system made in NetPro or in HW Config are stored there The new system data blocks on the other hand can be generated in various configuration tools In the following situations after...

Page 237: ...e regenerated in the subscriber administra tion for this TIM Exception If parameters are changed in the WAN Access tab this has effects on all telecontrol connections running via the modified WAN driver TIM module Deleting a TIM module All telecontrol connections running via this module are then invalid and are removed the next time you open the connection configuration When necessary these must b...

Page 238: ...moved the next time you open the con nection configuration When necessary these must be replaced by alternative connections The SDBs or DBs of all modules that were involved in these deleted connections must be regenerat ed in the subscriber administration Telecontrol connection Adding a telecontrol connec tion The SDBs or DBs of all subscribers over which this connection runs must be regenerated ...

Page 239: ...gnostics and service tool Note When downloading system data blocks in hardware configuration make sure that no connection SDBs SDB7xx are downloaded If SDBs of this type need to be downloaded to the TIM module you must use the SIMATIC Manager or the SINAUT diagnostics and service tool SDBs can also be downloaded in network configuration Creating SDBs during network configuration is a different pro...

Page 240: ...00 CPU in the rack the configuration can be uploaded but the TIM module shown afterwards in the rack is not fully initialized and not suitable for further configuration It must be replaced by a new module from the catalog in HW Config If you continue configuration with TIM modules uploaded in this way then problems particularly in communication and in handling the module can occur 6 9 4 Changing t...

Page 241: ...will find this on the Internet pages of Siemens Industry Online Support under the following ID 89372872 http support automation siemens com WW view en 89372872 On the Internet page select the Entry list tab and the Download entry type The firmware of the TIM is in 2 parts 1 Firmware driver package You load the driver package using the SINAUT diagnostics and service tool You will find the descripti...

Page 242: ...s are lit press the RESET button again until the RUN LED starts to flash As soon as the RUN LED flashes you can release the button The TIM is in a loadable status 5 Now start the loading of the firmware basic package using the NCM S7 firmware loader You will find detailed information on this topic in the online help of the firmware loader When loading begins the STOP LED of the TIM starts to flash...

Page 243: ...net of the local MPI bus to which the PG is connected Access using Accessible Nodes To access the diagnostic data using Accessible Nodes follow the steps outlined below 1 Click on the Accessible Nodes button or click on the Project Accessible Nodes menu The Accessible Nodes dialog opens 2 In the Selectable Nodes dialog select the required subscriber from the list of MPI addresses by clicking on it...

Page 244: ...splayed in the Path field of the diagnostics dialog however the diagnostic data is that of the locally connected subscriber The SINAUT subscriber list displays the following entries for each subscriber Subscriber no The subscriber number of the SINAUT subscriber that is unique throughout the project Red Subscriber no The redundant subscriber number parameter is used only when there is a redundant ...

Page 245: ...a in a subordinate subnet after activating PG Routing remember that you can only access subordinate subnets and not subnets higher in the network hierarchy The prerequisites functions and activation of PG routing are described in a separate chapter The PG Routing function is possible only when using the SINAUT subscriber list PG Routing is not possible when using Accessible Nodes 7 3 1 2 Access to...

Page 246: ...lude the buttons Print Starts a printout of the currently open dialog Update Updates the content of the dialog with the current diagnostic data of the selected subscriber Save Saves the content of the open dialog in a file You can select any directory and file name in the Save dialog Load Loads the diagnostic data relevant to the current dialog content from a previously saved file into the open di...

Page 247: ...INAUT subscriber list of a STEP 7 project is greater than when using accessible nodes Table 7 1 Overview of the diagnostic and service functions of the SINAUT diagnostics and service tool Function group diagnostic function remarks Subscriber type relevant for diag nostics Called in menu Access over STEP 7 project Access us ing Accessi ble Nodes STEP 7 diagnostics STEP 7 diagnostics CPU messages CP...

Page 248: ...nostics in the SINAUT diagnostics and service tool provides information not only on the CPU modules but also information on the TIM modules of a project The functions in the SINAUT diagnostics and service tool that are implemented on the TIM module CPU messages Module information Operating mode Setting the time 7 3 2 1 CPU messages Description of the functions The CPU messages function is used to ...

Page 249: ...ges function is called Operator activities 1 Select a subscriber by clicking on it in the SINAUT subscriber list of the open project or in Accessible Nodes 2 Open the CPU Messages dialog by selecting the STEP 7 Diagnostics CPU Messages menu 3 To register the PG PC for the CPU Messages function select the module in the W column of the module list at the top of the dialog After the registration the ...

Page 250: ...mponents with their versions and information on the status of the CPU module Diagnostic Buffer tab List of diagnostic messages Memory tab Information on the utilization of the load and work memory Time System tab Information on the data time time system and time synchronization as well as on the operating hours counter of CPU modules Performance Data tab Lists of the organization blocks system blo...

Page 251: ...atest message is at the top For the TIM the last 200 entries of the diagnostic buffer are displayed for a CPU normally the last 10 diagnostic messages For TIMs or diagnostic messages are displayed in plain language For CPUs the system diagnostic messages are displayed as plain language and the TD7 diagnostic messages in other words the messages created by the SINAUT user program are displayed in h...

Page 252: ...es information on the time system of the module in three boxes The current state and time of the module its resolution and the existence of a real time clock Time of day synchronization CPU only Run time meter CPU only Performance Data tab The Performance Data tab does not contain any diagnostic information relevant to TIM modules For CPU modules information is displayed on organization blocks OB ...

Page 253: ...icates the transmission speed and duplexity on Ethernet Note With a TIM 4R IE DNP3 only information on the first Ethernet port P1 is displayed For an overview of the status and parameters of both Ethernet ports of the module refer to SINAUT Diagnostics IP Parameters tab Statistics tab The Statistics tab contains transmission statistics for the Ethernet ports The number of transferred data packets ...

Page 254: ...ftware clock in the operating system of the module Operator activities 1 Select a subscriber in the SINAUT subscriber list of the open project or in Accessible Nodes 2 Open the dialog by selecting the STEP 7 Diagnostics Set Time of Day menu 3 To set the module time manually click in the date or time display with the mouse change the data and or time using the keyboard and confirm by clicking the A...

Page 255: ...t of the two tabs In the Communication tab Select an interface in the Communication drivers list box In the Time Synchronization tab Select an interface in the Communication interfaces for time synchronization list box Memory tab The Memory tab displays current diagnostic data on the memory configuration on the TIM In the Memory configuration field Static flash EPROM Dynamic flash EPROM RAM Availa...

Page 256: ...blocks Free area of the message buffer The value indicates the number of free memory blocks Free Free area of the message buffer as a percentage Image blocks Number of events stored in the message memory of the TIM The Buffers box shows the currently stored events for the various communication partners with the following information from DNP3 subscriber number of the TIM module to Subscriber numbe...

Page 257: ...ion tab displays information on the status of communication of the TIM with information on interfaces drivers available not available and baud rate The data is displayed in the lower part of the dialog when you select one of the communication interfaces Time Synchronization tab The Time Synchronization tab displays information on the time synchronization on the various interfaces of the TIM with i...

Page 258: ...nected TIM module allowing the information to be displayed in the tabs on the right The known subscribers are listed with their subscriber number and subscriber type if accessed over a STEP 7 project the name and station is also displayed Status tab Information on the availability of the partners on connections or connection disruptions and data communication Partner tab Displays the known partner...

Page 259: ... information on the subscriber selected on the left in the list of known subscribers from the perspective of the connected TIM module In the General field Availability of the known subscriber Entries indicating problems are highlighted Any connection disruptions Information on gateways to the known subscriber subscriber local remote In the Connection field Interface of the connection Type of conne...

Page 260: ...ostic messages can be selected for various firmware components and some functions diagnostic areas Operator activities 1 Select a subscriber in the SINAUT subscriber list of the open project 2 First open the Module Information Diagnostic Buffer tab by selecting the STEP 7 Diagnostics Module Information Diagnostic Buffer tab and click on theSettings button 3 Make sure that the Update display during...

Page 261: ...sage monitoring of a selected TIM and starts the monitoring In TIM message monitoring the messages received and sent by the TIM are recorded As soon as the monitoring function is activated copies of every message are stored in a buffer created specifically for this function The messages are read out of the buffer of the TIM and saved in a monitoring file To start to message monitoring you must set...

Page 262: ...lapsed and remaining time The amount of data read and data remaining is also displayed 6 Click on the End Monitor button in the TIM Message Monitor dialog to stop monitoring manually 7 In the next dialog decide whether you want to read the monitored messages immediately the TIM Message protocol window opens or whether you want to read the monitored messages at a later point in time you return to t...

Page 263: ...e directory tree Parameter name Value Comment The Parameter name column lists the individual parameters with colored symbols indicating the following status Blue symbols Configured data Red symbols Online data The cycle time is displayed in the TD7onTIM Configuration box below the last data object This is the current time of a sampling cycle in which TD7onTIM samples the work memory of its local C...

Page 264: ... always displayed in hexadecimal and the corresponding button cannot be deactivated here When accessing the subscriber using the SINAUT subscriber list you have the option of displaying the system data blocks from the module online or from the project offline There may be differences between online and offline access The content of all system data blocks can be saved as a text file Operator activi...

Page 265: ...cs and service tool 7 3 4 1 TIM message protocol Description of the functions The recording of the TIM messages is started with the TIM Message Monitor of the SINAUT diagnostics and service tool The messages received and sent by the routing server of the TIM are recorded The TIM message protocol function is used only to open a TIM message protocol for subsequent evaluation Operator activities 1 Op...

Page 266: ...following information on every message A symbol for incoming and outgoing messages Message number Source number of the open message protocols in ascending order msec No entry for DNP3 Block Number of the message block Subscriber number of message source and destination Object number no entry for DNP3 Index no no entry for DNP3 Organizational information no entry for DNP3 User data The net data is ...

Page 267: ...log Presentation of the messages Add new columns With this function you can add extra columns in the TIM message list with further message information After starting the Add New Columns function the Add Column dialog opens in which you can select the properties with the mouse The selected message properties are displayed as additional columns in the message list Delete additional columns This func...

Page 268: ...lowing data from the message header of the selected message Variable name or short name of the message Value of the individual variables Variable name Image 7 4 Details dialog Message Header tab The Net Data tab shows the net data of the message With the message type 0 and 1 organizational messages the data is displayed as plain text with message type 2 and 3 data messages the values are displayed...

Page 269: ...Diagnostics and upkeep 7 3 SINAUT diagnostics and service tool TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 269 Image 7 5 Details dialog Net Data tab ...

Page 270: ...C253 04 The TIM Routing Infos tab shows the following At the top in the Message area the internal task ID the complete message length bytes Below in the Address infos area the device ID as a number and in plain text for example MPI bus the CN ID the station address Image 7 6 Details dialog TIM Routing Infos tab ...

Page 271: ...gth etc In the net data box only the net data of the message The 1st block of numbers in each line is the byte number and the net data begins with the second block of numbers Image 7 7 Details dialog Hex tab The Source Destination Time stamp tab provides information in its three boxes on the source and destination and time stamp of the message The fields provide the following information Source In...

Page 272: ...ation of the entire message protocol in terms of numbers types and throughput of messages of the subscribers involved are sorted according to All messages Data messages Organizational messages With the aid of the statistics you can for example recognize particular concentrations of certain message types with individual subscribers allowing you to decide whether normal or acceptable message traffic...

Page 273: ...provides information on the amount of message traffic per minute It shows the total number of messages and the number of different sent and received message types per minute The Subscriber tab displays a table with the number of different message types per subscriber With the list box at the top right you can sort the messages according to subscriber number or message type With message types only ...

Page 274: ... currently open list with all data of the current list view in a CSV file The CSV file can then be read in MS EXCEL If you activate the function an input box opens in which you have the option of entering a comment on the protocol you are saving This comment is then included in the top rows of the CS the saved file You then specify the directory and file name of the CSV file Export complete list T...

Page 275: ...ints Before you transfer the SDBs you should give the TIM the opportunity of transferring any messages stored on it After restarting the TIM the SINAUT connections are established again automatically the connection between the PG and the TIM must however be activated by the user on the PG if it is required For more detailed information refer to section Configuration in STEP 7 Page 77 Operator acti...

Page 276: ...ion on your computer After loading the TIM is automatically reset to activate the new firmware The configuration data of the TIM is not affected by loading firmware Note Loading the firmware on the TIM can take several minutes Loading the firmware driver package You can load a new firmware driver package on the TIM module as follows Via the MPI interface of the CPU On your PG set the S7 ONLINE int...

Page 277: ...e Update details button if you require a detailed information on the firmware update The Update details dialog opens 4 Click on the Update button in the Firmware Update dialog to start the firmware update The following dialog Loading informs you of the current progress of the update 5 On completion of the firmware update a dialog appears with a message to this effect Confirm the message with OK Up...

Page 278: ...etails dialog of the Firmware Update function 7 3 5 3 Repair Description of the functions The Repair function allows you to restore TIM modules with a defective flash disk The Firmware Update function is available for loading firmware on a functioning TIM module The Repair function runs a completely new installation of the firmware on a TIM module Note The Repair function should not be used withou...

Page 279: ...n with its full functionality Note You can download the new firmware via Ethernet or the MPI interface If you download the firmware using the MPI interface TIM as a CP in the S7 300 then during the new installation of the firmware the TIM module uses MPI address 3 Make sure that this address is free on the MPI bus to which the TIM module is connected Operator activities Note Make sure that you sel...

Page 280: ... on the PG are shown and you can also see whether the component will be copied replaced ignored or deleted during the repair The various actions have the following significance copy The file is copied from the PG to the TIM module replace The file on the TIM module is replaced by the file on the PG ignore The file is not affected by the repair delete There is no newer version for the file The exis...

Page 281: ...g on the message there may be additional information under Additional info 1 2 3 or Additional info 4 5 The diagnostic messages of the TIM in hexadecimal and plain text format The following table lists all the TIM diagnostic messages in ascending order of the detailed event in hexadecimal format To complete the picture the corresponding event ID is also listed The event ID is used only to classify...

Page 282: ...B does not start with the TIM parameter block F560 0078 Not enough memory available F560 0079 Error creating the global message memory F560 007A Error sending the load job for the routing program F560 007B Error loading the basic task of the routing program F560 007C Error creating the basic task of the routing program F560 007D Error receiving the task ID of the routing program F560 007E Error cr...

Page 283: ...OK F560 010D Entering state LAN communication Threat of send queue overflow for a connection F460 Exiting state LAN communication Threatening send queue overflow for a connection elimi nated F560 010E Entering state LAN communication Send queue overflow for a connection F460 Exiting state LAN communication Send queue overflow for a connection eliminated F560 010F Entering state Disruption of MPI p...

Page 284: ... message from routing task F360 0304 Entering state Internal external WAN interface Send buffer changed over to image F260 Exiting state Internal external WAN interface Send buffer changed back from image F360 0305 Entering state Internal external WAN interface Send buffer overflow occurred F260 Exiting state Internal external WAN interface Send buffer overflow eliminated F960 0306 Bad message max...

Page 285: ...with clock driver OK F560 031B Entering state Internal external WAN interface Communication with routing task disrupted F460 Exiting state Internal external WAN interface Communication with routing task OK F560 031C Internal external WAN interface Modem command invalid F560 031D Internal external WAN interface Invalid dialing string or bad call number transferred to mo dem when calling a subscribe...

Page 286: ...0337 Internal external WAN interface Supervision time exceeded No repetition F360 0338 Internal external WAN interface Send buffer was deleted F360 0339 Internal external WAN interface Image memory and send buffer were deleted F360 033A Internal external WAN interface No telephone number in modem memory F960 033B Internal external WAN interface PDU received with unknown STA number F360 033C Enteri...

Page 287: ...nal strength is xx dBm F360 0359 Subscribers cannot be blocked F360 035A Internal external WAN interface GSM module detects wrong service ID F360 035B Internal external WAN interface GSM module ready to receive F360 035C Internal external WAN interface The switchover to the image method for blocked messages was forced F360 035D Internal external WAN interface Threat of forced switchover to image m...

Page 288: ...ror releasing memory F560 0519 Error in the MesA memory management F560 051A Entering state MesA Start of indication of a message memory overflow F460 Exiting state MesA End of indication of a message memory overflow F560 051B Entering state MesA Start of indication of a message memory overflow F460 Exiting state MesA End of indication of a message memory overflow F560 051C Message memory overflow...

Page 289: ...t time F360 062D Entering state Changeover to daylight saving time F260 Exiting state Changeover to standard time F360 062E Entering state Notification hour for daylight saving standard time changeover active F260 Exiting state Notification hour for daylight saving standard time changeover completed F360 0630 Change in synchronization mode F360 0631 Daylight saving standard time changeover perform...

Page 290: ...stem status list query F560 066D Wrong firmware Messages from P bus server F560 06B0 Installation of P bus server aborted F360 06B1 Unknown message received from task F560 06B2 Error occurred receiving a message F360 06B3 Entering state Power outage on P bus F260 Exiting state Power supply on P bus OK F360 06B4 Entering state I O disabled by CPU F260 Exiting state I O enabled by CPU F560 06B5 Modu...

Page 291: ... be found F560 0707 The TD7 SDB could not be opened F560 0708 Header with incorrect length of block ID F560 0709 TD7 SDB No TD7 parameters found F560 070A TD7 SDB Block not found F560 070B TD7 SDB T4T_MAINHDR has incorrect length F560 070C TD7 SDB T4T_SUBDATA has incorrect length F560 070E TD7 SDB Unknown format in a destination subscriber block F560 0711 TD7 SDB Number of partner blocks incorrect...

Page 292: ...An invalid address was reported for object X in channel Y F560 0752 TD7 SDB Number of subscriber blocks does not match main header entry F560 0755 Unknown channel type F560 0759 Not enough memory to create the TD7onTIM send job list F560 0760 Initialization of TD7onTIM for source subscriber complete F560 0761 The general request of a subscriber is incomplete F560 0762 Timeout in the general reques...

Page 293: ... 0500 0620 RAM error 0085 0086 7 3 6 3 DNP3 specific diagnostics messages of the TIM Diagnostic messages Below you will find a list of the DNP3 specific diagnostics messages sorted according to the detailed event Event ID hex Detailed event hex Status message Meaning F560 0400 No TD7onTIM configuration exists TD7onTIM configuration data was not transferred to the module F560 0401 Memory error The ...

Page 294: ...ystem time F560 0410 Unsolicited event transmission activated or deactivated Request to activate of deactivate unsolicited messages F560 0411 IP connection established Connection to DNP3 master station was established F360 0411 IP connection terminated Connection to DNP3 master station was terminated F560 0412 Inconsistent routing table Inconsistent configuration F360 0413 DNP3 connection disrupte...

Page 295: ...ritten to the send buffer but to the image If the status remains the firm ware nevertheless attempts to enter intermediate values of the data points configured as an event in the send buffer With an outgoing message There is a changeover back to the send buffer method 7 3 6 4 MODBUS specific diagnostics messages of the TIM Diagnostics messages Below you will find a list of the MODBUS specific diag...

Page 296: ...e error class ERRCLS and byte 7 codes the error code ERRCOD For the meaning of ERRCLS and ERRCOD see Meaning of ERRCLS and ERRCOD Page 296 F560 080D Negative S7 access result received message only incoming Bytes 6 and 7 of the message code the access result hex with the following meaning FF success 01 hardware error 02 temporary lack of resources 03 object access not permitted 05 invalid address 0...

Page 297: ...rated when a read or write job is transferred by TD7onTIM to the LAN COM and there is no connection CR connection to the local CPU The job is returned with a negative acknowledgement to TD7onTIM by the LAN COM 81 04 Context is not supported Errors in the PDU structure or Service unknown 83 01 No memory can be reserved to forward the received message The message is acknowl edged negatively to the s...

Page 298: ...Diagnostics and upkeep 7 3 SINAUT diagnostics and service tool TIM DNP3 298 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 299: ...10 m Transmission speed 10 100 Mbps Permitted cable lengths Ethernet Alternative combinations per length range 0 55 m Max 55 m IE TP Torsion Cable with IE FC RJ45 Plug 180 Max 45 m IE TP Torsion Cable with IE FC RJ45 10 m TP Cord via IE FC RJ45 Outlet 0 85 m Max 85 m IE FC TP Marine Trailing Flexible FRNC Festoon Food Cable with IE FC RJ45 Plug 180 Max 75 m IE FC TP Marine Trailing Flexible FRNC F...

Page 300: ...eight 250 g Dimensions W x H x D 40 x 125 x 120 mm Installation options Installation on a DIN rail Installation on an S7 300 standard rail Wall mounting Mounting in a 19 rack Switch panel Product functions Configuration Software for PG SINAUT configuration software for PG Storage of TIM configuration data on internal TIM flash memory on MMC of the S7 300 CPU TIM can be operated in the role Station...

Page 301: ...be changed in the configuration RS 232 RS 485 Maximum permitted cable length RS 232 RS 485 6 m 30 m Transmission speed 9 600 115 200 bps Connection to LAN or IP based WAN Industrial Ethernet Number 2 Execution RJ 45 jack Properties 10 100BASE T IEEE 802 half duplex full duplex autocrossover autonegotiation autosensing Maximum permitted cable length 10 m Permitted cable lengths Ethernet Alternative...

Page 302: ...cell type AA Capacitance 2 3 Ah Voltage nominal 3 6 V Current consumption during backup typically 100 μA max 160 μA Leakage current typically 15 μA Clock Hardware clock real time clock Backup Deviation per day yes yes with backup battery optional max 4 s Permitted ambient conditions Ambient temperature During operation with the rack in stalled horizontally 0 to 60 During operation with the rack in...

Page 303: ... communication Via Ethernet interface With CPUs PCs and further TIMs Possible using S7 communication for PCS 7 and TIMs Via backplane bus With local CPU With further local TIMs Possible using TD7onTIM Not possible When used in an S7 300 controller Via backplane bus with the S7 300 CPU Possible using TD7onTIM Via backplane bus with other TIMs in the rack Possible Via MPI interface of the S7 300 CPU...

Page 304: ...mple to configure the cabinet for a DNP3 station Current consumption and power loss The following table lists the current consumption and power loss of the DNP3 components TIM and modem Table 8 3 Current consumption and power loss of the SINAUT DNP3 TIM and modem components Short module name Module order no Current consumption from backplane bus max Current consumption from 24 V load power supply ...

Page 305: ...l 410 mA 1570 mA 42 6 W Result The following results can be derived from the table above 1 Current consumption from the S7 300 backplane bus The current consumption of the signal and TIM modules from the backplane bus amounts to a total 410 mA It does not therefore exceed the 1 2 A that the CPU 314 can supply to the backplane bus 2 Current consumption from the 24 V load power supply The current co...

Page 306: ...Technical specifications 8 3 Current consumption and power loss TIM DNP3 306 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 307: ...Parliament and the Council of 23 March 1994 on the approximation of the laws of the Member States concerning equipment and protective systems intended for use in potentially explosive atmospheres 2004 108 EC EMC EMC directive of the European Parliament and of the Council of December 15 2004 on the approximation of the laws of the member states relating to electromagnetic compatibility 2011 65 EU R...

Page 308: ...t Use of subassemblies modules in a Zone 2 Hazardous Area that you will find on the Internet at the following address Link https support industry siemens com cs ww en view 78381013 ATEX The device meets the requirements of the EC directive 94 9 EC Equipment and Protective Devices for Use in Potentially Explosive Atmospheres Applied standards EN 60079 0 Hazardous areas Part 0 Equipment General requ...

Page 309: ...l and electronic equipment Applied standard EN 50581 2012 c UL us Applied standards Underwriters Laboratories Inc UL 508 Listed Industrial Control Equipment Canadian Standards Association CSA C22 2 No 142 Process Control Equipment Report UL file E85972 NRAG NRAG7 cULus Hazardous Classified Locations Underwriters Laboratories Inc CULUS Listed 7RA9 IND CONT EQ FOR HAZ LOC Approval for the device App...

Page 310: ...S49 S7400CP A급 기기 업무용 방송통신기자재 이 기기는 업무용 A급 전자파 적합기기로서 판매자 또는 사용자는 이 점을 주의하시기 바라며 가정 외의 지역에서 사용하는것을 목적으로 합니다 Current approvals SIMATIC NET products are regularly submitted to the relevant authorities and approval centers for approvals relating to specific markets and applications If you require a list of the current approvals for individual devices consult your Siemens contact or check the Internet...

Page 311: ...Approvals TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 311 ...

Page 312: ......

Page 313: ... SCALANCE M816 ADSL router for wired IP communication via the Internet 1 RJ 45 Ethernet interface with 4 port switch 1 digital input 1 digital output ADSL2T or ADSL security functions SCALANCE M875 UMTS router for wireless IP communication using UMTS mobile wireless HSDPA and HSUPA 1 RJ 45 Ethernet interface 1 mobile wireless interface 1 digital input 1 digital output security functions Informatio...

Page 314: ...max 64000 bps no longer available Information on the devices can be found on the Internet pages of Siemens Industry Online Support under the following entry ID 89330308 http support automation siemens com WW view en 89330308 These modems can be connected to the serial modem interface of the TIM Due to the design the modems can be installed on an S7 300 standard rail just like the TIM modules As an...

Page 315: ...Accessories A 2 Modems TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 315 Image A 1 Connectors of a SINAUT ST7 modem Image A 2 Classic SINAUT MD modem ...

Page 316: ... Relative humidity 0 C through 60 C 40 C through 70 C Max 95 at 25 C Construction Module format Dimensions W x H x D in mm Weight Compact module for S7 300 double width 80 x 125 x 120 Approx 300 g Degree of protection IP 20 Transmission path 2 wire 2 x 2 wire or 4 wire twisted pair without loading coils or with few loading coils Type of modulation Frequency shift keying FSK Transmission speeds 120...

Page 317: ...utput Max connected voltage Max permitted permanent current Max Ron 60 V AC DC 400 mA 3 ohms Surge withstand capability U1 2 50 to DIN VDE 0804 between supply circuit and FSK remote line circuits Optical relay output 2 5 kV 2 5 kV Compatible with SINAUT modems MD100 MD124 At 1200 bps At 1200 2400 and 19 200 bps Certifications and approvals EU approval CE 0682 X Technical specifications of the MD3 ...

Page 318: ...ithout load ing coils Available ITU transmission standards in the analog telephone network V 22 1200 bps duplex V 22bis 2400 bps duplex V 32bis 4800 bps duplex V 32bis 9600 bps duplex V 32bis 14 400 bps duplex V 34bis 19200 bps duplex V 34bis 33 600 bps duplex Error correction V 42 and MNP4 Data compression V 42bis and MNP5 Modem control AT commands V 25bis commands Metering pulse filter can be ad...

Page 319: ... 1200 bps duplex V 22bis 2400 bps duplex V 32bis 4800 bps duplex V 32bis 9600 bps duplex V 32bis 14 400 bps duplex Certifications and approvals Europe USA Canada Recommended line quality for telephone company leased lines M1020 M1025 Technical specifications of the MD4 ISDN dial up modem MD4 Interfaces Attachment to ISDN dial up network or ISDN dedicated line RS 232 attachment to DTE RS 485 attach...

Page 320: ...asedLink SFV Digital 64S LeasedLink SFV Digital 64S2 LeasedLink SFV Digital TS02 Available standard transmission standards V 110 1200 bps duplex V 110 2400 bps duplex V 110 9600 bps duplex V 110 19 200 bps duplex X 75 1200 bps duplex X 75 2400 bps duplex X 75 19200 bps duplex X 75 38 400 bps duplex Modem control AT commands V 25bis commands Asynchronous character format 10 or 11 bits Certification...

Page 321: ...701 4AL Connecting cable for connecting the serial interface of a DNP3 TIM to one of the SINAUT modems MD2 or MD3 RS 232 Also suitable for linking the modems to a SIMATIC point to point CP such as the CP 340 CP 341 or CP 441 with RS 232 interface Cable length 1 5 m 6NH7701 5AN Cable for connecting the TIM RS 232 to third party mo dems or wireless devices with standard RS 232 Cable length 2 5 m 6NH...

Page 322: ... IE DNP3 Order no Description Illustration 6NH7701 4DL Cable for connecting a TIM 4R IE DNP3 RS 485 with multiple SINAUT DNP3 dedicated line modems of the type MD2 or MD3 RS 485 connected in parallel Cable length 1 5 m Structure of the connecting cables for WAN attachment The following figures show the assembly of the connecting cables Image A 3 Assembly of the standard connecting cable 6NH7701 4A...

Page 323: ...ies A 3 Connecting cables TIM DNP3 System Manual 12 2015 C79000 G8976 C253 04 323 Image A 4 Assembly of the standard connecting cable 6NH7701 4DL Image A 5 Assembly of the standard connecting cable 6NH7701 5AN ...

Page 324: ...n use the suitable Ethernet connecting cables for example IE TP Cord from the SIMATIC NET product range catalog IK PI If a DNP3 TIM is connected to a hub switch or router it is advisable to use fully shielded straight through patch cables with RJ 45 connectors and 1 1 pin assignment The cable must be suitable for the 10Base TX or 100Base TX specification Two DNP3 TIMs can also be connected over Et...

Page 325: ...he modem to the relevant WAN network Table A 2 WAN connecting cables Order no Description Illustration 6NH7700 2AR60 Connecting cable with 2 x RJ 12 plugs for connection to an MD2 modem RJ 12 with an LTOP overvoltage protection module RJ 12 Cable length 6 m 6NH7700 3BR60 Connecting cable with 2 x RJ 12 Western plug and snap on TAE6N plug to connect an MD3 modem RJ 12 to a telephone jack TAE6N or a...

Page 326: ...entry ID 16518558 http support automation siemens com WW view en 16518558 Image A 9 ANT794 4MR GSM GPRS antenna Short name Order no Explanation ANT794 4MR 6NH9 860 1AA00 Quadband antenna 900 1800 1900 MHz UMTS weatherproof for indoor and outdoor areas 5 m connecting cable connected permanently to the antenna SMA connector including installation bracket screws wall plugs Flat antenna ANT794 3M Imag...

Page 327: ...ment in private dedicated line networks Image A 11 LTOP2 overvoltage protection module The LTOP overvoltage protection module is available in two variants LTOP 1 Overvoltage protection module for use at the start or end of a 2 wire dedicated line LTOP2 Overvoltage protection module for use at the start or end of a 4 wire dedicated line or in a 2 wire tapping point In a 4 wire tapping point two LTO...

Page 328: ...d overvoltages to a non critical level The floating transformer also provides electrical isolation preventing coupling of voltages into other cable sections The protection concept The protection concept involves a combination of components whose functions supplement each other Overvoltage suppressors filled with inert gas providing protection against high voltage G1 G2 Inductors that limit the ris...

Page 329: ... frequent thunderstorms this period should be reduced to approximately 6 months Structure of the LTOP variants The housing contains either one LTOP unit LTOP 1 or two LTOP units LTOP 2 The following figures show the design of both LTOP variants with their connectors and configuration switches View from above Schematic X1 Dedicated line screw terminals 1 2 5 6 Chassis screw terminals 3 4 X2 Modem a...

Page 330: ... Hz Transmission speed bps MD100 MD124 0 2 1300 3300 1200 1200 2400 0 8 5200 8400 4800 0 9 10400 16800 9600 1 0 20800 30600 19200 Insulation resistance 2000 Mohms Test voltage 4 kV 50 Hz 10 s Surge withstand capability 6 kV 2 J to EN 60 099 1 Normal discharge current isn 8 20 µs 5 kA Output voltage limitation at isn Approx 15 V Telecontrol connector Screw terminals Cross section 0 2 4 mm2 with rig...

Page 331: ...Permitted ambient conditions Operating temperature Transport storage temperature Relative humidity 0 C through 60 C 40 C through 70 C Max 95 at 25 C Construction Dimensions W x H x D in mm Weight 90 x 75 x 110 mm LTOP1 300 g LTOP2 320 g OPM 10 g Degree of protection IP 20 Installation DIN rail TS35 35 mm EN 50 022 ...

Page 332: ...Accessories A 5 LTOP overvoltage protection modules TIM DNP3 332 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 333: ...g blocks online monitoring editing and overwriting or changing the operating mode mode of modules SIMATIC PG routing SIMATIC PG routing is possible only over network types such as MPI PROFIBUS and Ethernet SIMATIC PG routing was released with STEP 7 V5 0 SINAUT PG routing Expanding SIMATIC PG routing SINAUT PG routing also works over SINAUT networks in other words in WANs In terms of functionality...

Page 334: ...configuration of PG routing B 1 3 Range of functions of PG routing Range of functions of PG routing In SINAUT DNP3 PG routing via an Ethernet network is supported Access to remote TIM and CPU modules is from the PG PC in the master station to the station Table B 1 Communication path of PG routing Starting point Target PG PC on Ethernet Station TIM or station CPU For the routing function a spontane...

Page 335: ...IC Manager with PG routing Display Accessible Nodes function The display accessible nodes function is available only for subscribers connected to the local MPI bus This restriction applies to SIMATIC PG routing and therefore also to SINAUT PG routing Hardware Diagnostics function The hardware diagnostics function is available only for subscribers connected to the local MPI bus This restriction app...

Page 336: ...parations for PG routing B 3 1 Setting the PG PC interface and assignment Before you perform PG routing over the SINAUT telecontrol network with your PG of PC you must first adapt the properties of the PG PC interface and set the assignment of the PG PC in the SINAUT network B 3 2 Properties of the PG PC interface Adapting the PG PC interface 1 Open the Control Panel window by clicking on the Star...

Page 337: ...ed in a project and then needs to be used at a different location for example locally connected directly to a CPU or TIM the assignment must first be canceled Follow the steps outlined below 1 Right click on the PG PC that is still assigned in the project you have opened in NetPro 2 In the context menu that opens select Cancel PG PC Assignment 3 Acknowledge the warning dialog with OK The PG PC ass...

Page 338: ... a PG PC to the network window from the NetPro catalog directory Stations and place it at a suitable position 3 Right click on the PG PC you have just installed A context menu opens 4 In the context menu click on the Assign PG PC option The Properties dialog opens 5 Select the Ethernet network to which the configured PG PC is connected in the Configured interface box of the Properties dialog Image...

Page 339: ...ave your PG PC connected to the point in the network as you assigned it in NetPro you do not need to cancel the assignment Not even if you want to turn off the PG PC Each time you turn on the PG PC and open the project you can use PG routing again immediately You do not need to make settings or assignments again If on the other hand your PG PC is not always at the same location or if you change to...

Page 340: ...PG routing via WAN B 3 Preparations for PG routing TIM DNP3 340 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 341: ...oint or a switching command from the DNP3 master station It is sent to a station Configuration During configuration communication and connection specific system settings are made for each device Counted value A counted value for example amount of flow is acquired via a digital input as a pulse train and totaled to produce a binary coded value A counted value is 2 words between TIM and CPU 28 bits ...

Page 342: ... range of functions simple sensors field devices complex controllers The SIMATIC NET modules TIM 3V IE DNP3 and TIM 4R IE DNP3 were certified with this test procedure according to DNP level 2 outstation DNP3 TIM TIM Ethernet Industrial Ethernet Industrial Ethernet is a powerful communications network complying with the international standard IEEE802 3 Ethernet that was optimized to meet the requir...

Page 343: ...he image memory principle only a reference to the location of the message in the message image memory is entered If the TIM has not yet been able to transmit the message when the same message is transferred to it again the message is not entered in the send buffer a second time but rather the image is simply updated At the time of transmission the message is sent with its up to date content from t...

Page 344: ...via the node station Depending on the connected network type inter station communication or direct data exchange between lower level stations is possible Node station TIM Interface of a TIM in a node station set to the node station function On a TIM used in a node station one interface is set to node station for connection to the higher level master station and one or more interfaces are set to ma...

Page 345: ...used to execute organizational system functions These include for example General requests Time synchronization Counted value storage Coordinated connection establishment and termination in a dial up network Message indicating station startup and station failure Requests for and transmission of subscriber records Parameter assignment Configuration PG Programming device Allows access by the STEP 7 ...

Page 346: ... is a standard for serial i e bit by bit data transmission with 12 V and 12 V signals RS 232 is a Recommended Standard of the Electronic Industries Association For the RS 232 interface 9 pin and 25 pin connections with D sub connectors are normal These are sub miniature connectors with a D shaped face RS 485 RS 485 is a standard for data transmission with 5 V differential signals The RS 485 interf...

Page 347: ...ommand input are interlocked for safety reasons in other words a setpoint input cannot be made at the same time as a command input In this case the acquisition program recognizes an error Neither the setpoint nor the command are transmitted SIMATIC S7 Siemens automation system SINAUT SIemens Network AUTomation Telecontrol system based on SIMATIC S7 SINAUT configuration software SINAUT engineering ...

Page 348: ...n the telecontrol world the term station includes the entire hardware components of a SIMATIC station required for detection processing and communication with other stations or a master station A station can for example consist of a modem a TIM and a programmable controller in turn consisting of a CPU and I O modules Station TIM WAN interface of a TIM set to the station function Use in stations St...

Page 349: ...r S7 400 TD7 software TD7 library TD7onTIM TD7 library TIM Telecontrol Interface Module The TIM transmission processor is a communications module and in the SIMATIC S7 300 400 family it provides all data transfer functions in telecontrol networks and handles them independently Depending on the type the TIM has one or two WAN interfaces an MPI interface or one or two Ethernet interfaces Depending o...

Page 350: ...Glossary TIM DNP3 350 System Manual 12 2015 C79000 G8976 C253 04 ...

Page 351: ... Message repetitions 124 Connection monitoring 104 106 122 Connection resources max number 28 Connections invalid 147 Consistency check 113 234 236 Control code 208 Copying projects 84 Current information 5 Cycle monitoring time CPU 89 D Data object 159 Data point definition 159 DCP 131 Definition of terms 20 Definitions 20 Device attributes DNP3 21 Diagnostic messages of the TIM 281 Diagnostics a...

Page 352: ...tation interface configuration 21 Node station process image 128 NTP 27 NTP secure 27 O Object group 159 Objects max number 29 Ordering data LTOP 327 Outstation 20 P Par12x1D_R 166 Path redundancy Monitoring 104 106 122 Path redundancy preferred path substitute path 145 PCS 7 13 Power supply 68 Printing module information 134 Process image node station 128 R Receive channels 160 Redundancy Interfa...

Page 353: ...al 248 Module information 250 Operating mode 253 Setting the time 254 Structure LTOP 328 TIM 4R IE DNP3 55 Subscriber number 159 Subscriber number change 150 Switch function 120 System data blocks Generation of 233 T Technical specifications LTOP 330 MD3 modem 317 MD4 modem 319 Modem MD2 316 Telecontrol Internet pages 140 TIM abbreviation 3 Time synchronization 134 in SINAUT networks 96 on the Eth...

Page 354: ...Index TIM DNP3 354 System Manual 12 2015 C79000 G8976 C253 04 ...

Search results

Summary of Contents for SIMATIC TIM 3V-IE DNP3

Reviews:

Brands by name

Popular brands

Siemens SIMATIC TIM 3V-IE DNP3, System Manual

Search results

Summary of Contents for SIMATIC TIM 3V-IE DNP3

Reviews:

Brands by name

Popular brands