WAGO 2789-9023 Скачать руководство пользователя страница 68

Страница: 68 / 94

2789-9023

Appendix

Product manual | Version: 1.0.0
EtherNet/IP Communication Module

11.1.1 Creating and Replacing Certificates

The following table lists the available cipher suites

Table 56: Available Cipher Suites

IANA No.

Cipher Suite

TLS1.3

0x13, 0x01

TLS_AES_128_GCM_SHA256

0x13, 0x02

TLS_AES_256_GCM_SHA384

0x13, 0x04

TLS_AES_128_CCM_SHA256

0x13, 0x05

TLS_AES_128_CCM_8_SHA256

TLS1.2

0xC0, 0xAC

TLS_ECDHE_ECDSA_WITH_AES_128_CCM

0xC0, 0xAE

TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8

0xC0, 0xAF

TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8

0xC0, 0x09

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

0xC0, 0x0A

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

0xC0, 0x2B

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

0xC0, 0x2C

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

0xC0, 0x23

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

0xC0, 0x24

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

1) A standardized set of algorithms to ensure a secure network connection.

11.1.2 Creating a Template for Certificates

1. Open the XCA software and select the

New Database

submenu under the

File

menu.

2. Select a storage location and an appropriate name for the database.

3. Enter a password to protect the database.

The newly created database opens.

Содержание 2789-9023

Страница 1: ...Product manual Version 1 0 0 Communication Modules EtherNet IP Communication Module 2789 9023...

Страница 2: ...ure the accuracy and completeness of this documentation However as errors can never be fully excluded we always appreci ate any information or suggestions for improving the documentation E Mail docume...

Страница 3: ...c Information 14 3 5 Connections 15 3 5 1 RJ 45 Interfaces 15 3 6 Indicators 16 3 7 Control Elements 16 3 8 Technical data 16 3 8 1 Product 16 3 8 2 Power Loss 17 3 8 3 Communication 17 3 8 4 Environm...

Страница 4: ...s 41 4 3 2 Data Exchange 41 4 3 3 Application Examples 44 5 Transport and Storage 45 6 Installation and Removal 46 7 Commissioning 48 7 1 Setting an IP address 48 7 1 1 Assigning an IP Address Using D...

Страница 5: ...Communication Module 11 1 5 Exporting WBM Certificates 80 11 1 6 Exporting MQTT Certificates 82 11 1 7 Installing WBM Certificates on the Client and Product 85 11 1 8 Installing MQTT Certificates on...

Страница 6: ...cial area as well as small business if the product used complies with the required emis sions of interference emission limits Operation of the product in other application areas is only permitted when...

Страница 7: ...s must be followed In addition the installment require ments for approval must be met In the event of non compliance operation of product within the scope of the approval is not permitted In addition...

Страница 8: ...which if not avoided will result in death or serious injury Action step to reduce risk WARNING Type and source of hazard Indicates a potentially hazardous situation which if not avoided could result...

Страница 9: ...hird party trademarks are referred to in the product documentation The and TM symbols are omitted hereinafter The trademarks are listed in the Appendix 8 Protected Rights 87 Subject to Change The inst...

Страница 10: ...ing This reduces elec tromagnetic interference and increases signal quality Measurement errors data trans mission errors and interference due to excessive voltage can be prevented Maintain spacing bet...

Страница 11: ...erature permitted for the mounted product Cooling of the product must not be impaired Ensure air can flow freely and that the minimum clearances from adjacent products areas are maintained 2 5 Indirec...

Страница 12: ...ndustrial Protocol BootP pending DHCP SNTP HTTP S MQTT The integrated switch with two external RJ45 ports makes it possible to set up a line topology without additional infrastructure elements such as...

Страница 13: ...ins the following information 1 2 3 4 5 6 7 8 Position Comment Details 1 Company logo and address 2 Item number 3 Product name 4 Warning notice symbols 8 Safety 10 5 QR link with link to website 6 Ref...

Страница 14: ...ey number Fixed information 37S 3 ID number per D U N S Fixed information WAGO Minden 4 WAGO item number or internal SAP number Product specific 5 Consecutive number Product specific 6 Production date...

Страница 15: ...Mbit s trans mission speeds as well as full and half duplex transmission modes for each port The RJ45 sockets are wired in accordance with the specifications for 100BASE TX The ETHERNET standard stip...

Страница 16: ...Flashing 16 Hz IP address is being assigned via DHCP LNK ACT1 Port 1 connection activity Off No connection present On Connection present but no activity Flashing Connection and activity present SPEED1...

Страница 17: ...ble 6 Technical Data Environmental Conditions Property Value Test voltage fieldbus 0 775 kVAC 50 Hz 1 min Type of insulation Functional insulation Ambient temperature operation1 40 55 C Ambient temper...

Страница 18: ...t Table 7 Approvals Logo Certification Body Standard Underwriters Laboratories Inc Ordinary Locations UL 61010 1 Underwriters Laboratories Inc Ordinary Locations UL 61010 2 201 Underwriters Laboratori...

Страница 19: ...ty for industrial environments EN 61000 4 2 Part 4 2 Testing and measurement techniques Electrostatic discharge im munity test EN 61000 4 3 Part 4 3 Testing and measurement techniques Radiated radio f...

Страница 20: ...viceNet Therefore transferring an application to one of these systems is very feasible and easy The data exchange is based on an object model ControlNet DeviceNet and EtherNet IP all have the same ap...

Страница 21: ...escription Attribute ID Integer value assigned to the respective attribute Access Set The attribute can be accessed using the Set_Attribute service writing modifying the attribute value If an attribut...

Страница 22: ...1 Table 16 Identity Object Instance 1 Attribute ID Access Name Data type Description Factory setting 1 Get Vendor ID UINT16 Manufacturer identi fier 40 2 Get Device Type UINT16 General type designa ti...

Страница 23: ...ieldbus Description Product manual Version 1 0 0 23 EtherNet IP Communication Module Attribute ID Access Name Data type Description Factory setting 7 Get Product Name CHAR Product name WAGO Communicat...

Страница 24: ...No Yes Get_Attribute_Single Returns the content of the respective attribute 4 2 2 Assembly Object The Assembly object class 0x04 binds attributes of different objects so that data can be sent to or r...

Страница 25: ...utput current limit exceeded Bit 4 Adjustable operating hours limit exceeded Bit 5 TopBoost supplied Bit 6 PowerBoost supplied Bit 7 High device temperature Bits 8 15 Reserved 6 Get Error UINT16 Bit 0...

Страница 26: ...en Uncon nected_Send and Forward_Close No class and instance attributes are visible 4 2 5 TCP IP Interface Object The TCP IP Interface object Class 0xF5 provides for the configuration of the TCP IP ne...

Страница 27: ...the product cou pler arrives at its TCP IP configu ration after the first restart 0x00000002 4 Get Physical Link Ob ject STRUCT of Path Size UINT16 Number of 16 bit words in the subsequent path 0x000...

Страница 28: ...ttribute 0x10 No Yes Set_Attribute_Single Modifies an attribute value 4 2 6 Ethernet Link Object The Ethernet Link Object Class 0xF6 contains link specific counter and status informa tion for an Ether...

Страница 29: ...0x0001 Bit 0 Automatic detection Bit 1 Specification of duplex mode Bits 2 15 Reserved Forced In terface Speed UINT16 Interface speed specified for the interface 0x000A or 0x0064 7 Get Interface Type...

Страница 30: ...0x0001 Bit 0 Automatic detection Bit 1 Specification of duplex mode Bits 2 15 Reserved Forced In terface Speed UINT16 Interface speed specified for the interface 0x000A or 0x0064 7 Get Interface Type...

Страница 31: ...t The Device Parameter object class 0x82 provides access to the parameters and infor mation of a lower level device Only instance ID 1 is implemented for this object 4 2 7 1 General Device Parameters...

Страница 32: ...word levels Password level 0 value 0 No parameters are password protected Password level 1 value 1 All parameters are write protected Password level 2 value 2 All parameters are read and write protect...

Страница 33: ...15200 baud 230400 230400 baud 560800 560800 baud 126 Get Set UINT16 Data bits The options are as follows Value Data Bit 0 7 1 8 127 Get Set UINT16 Stop bits The options are as follows Value Stop Bit 0...

Страница 34: ...d 139 Get Set UINT16 Switch on delay unit ms 1 At least one bit must be set and the bits are mutually locked Electronic Circuit Breaker Mode Table 32 Parameters Electronic Circuit Breaker Mode Attribu...

Страница 35: ...s state restored Bit 11 Behavior when power applied DC output remains switched off Bit 21 Behavior when power applied DC output switched on Bit 3 Switch on delay enabled Bits 4 5 Reserved Bit 6 Enable...

Страница 36: ...ame 71 Get Set CHAR 34 Customer information General ETHERNET Settings Table 38 Internal Module Parameters General ETHERNET Settings Attribute ID Access Data type Description Value Limits Factory setti...

Страница 37: ...f 1 on 1 0 1 249 Get Set UINT16 Forces 100 MB connection 0 off 1 on 1 0 1 250 Get Set UINT16 Forces full duplex connection 0 off 1 on 1 0 1 252 Get Set UINT16 Enables BroadcastStormProtection 0 off 1...

Страница 38: ...s Table 43 Common Services Service Code Service Available Service Name Description Class Instance 0x0E Yes Yes Get_Attribute_Single Returns the content of the respective attribute 0x10 No Yes Set_Attr...

Страница 39: ...s and Measured Values Warnings Attribute ID Access Data type Description 3 Get UINT16 Bit 0 Undervoltage at out put Bit 1 Overvoltage at out put Bit 2 Overload Bit 3 Configurable over load threshold e...

Страница 40: ...er unit W 8 Get UINT32 Output level of previous second unit Ws 10 Get UINT32 Output level of previous minute unit Ws 12 Get UINT32 Output level of previous hour unit Wh 4 2 9 2 General Services This o...

Страница 41: ...ificate found No certificate found for encrypted communication Encrypted communication is started even though no certificate has been uploaded Certificate verification failed Certificate verification...

Страница 42: ...le operating hour limit exceeded value Top boost supplied value Power Boost supplied value High device temperature value Digital input active value 6 Errors Errors Overheating device switched off valu...

Страница 43: ...Bit 1 Overvoltage at output Bit 2 Overload Bit 3 Configurable overload threshold exceeded Bit 4 Configurable operating hours reached Bit 5 TopBoost output Bit 6 PowerBoost output Bit 7 Higher device...

Страница 44: ...MQTT client A WAGO PFC200 e g item no 750 8212 serves as an MQTT client for integrating the communication modules into CODESYS or e COCKPIT Any computer e g a Raspberry Pi with a Mosquitto MQTT broker...

Страница 45: ...optimal protection during transport and storage Store the product in suitable packaging preferably the original packaging Only transport the product in suitable containers packaging Make sure the pro...

Страница 46: ...n openings b facing upwards and down wards Mounting B A Figure 7 Mounting Install the product by snapping it onto the WAGO Power Supply Pro 2 see figure Instal lation 1 Remove the cap from the communi...

Страница 47: ...d off D C Figure 8 Removal 1 Press the top locking tab a of the product C 2 Pivot the product to remove it from the WAGO Power Supply Pro 2 D NOTICE Avoid electrostatic discharge The products are equi...

Страница 48: ...DHCP server for example via the output of Open DHCP Configuration type static IP address IP address 192 168 1 17 Gateway address 192 168 1 1 Note Two DHCP servers in one network can cause total networ...

Страница 49: ...Setting the IP address via the Modbus command Setting the IP Address via the WBM 1 Open the WBM Web Based Management of the communication module in a browser 2 Switch to the Module Settings Network pa...

Страница 50: ...he network settings with the reset button on the module 1 Hold the reset button down for eight seconds until the COM OK LED lights up briefly 2 Release the reset button The product reboots and the fol...

Страница 51: ...product The following settings options are available Table 55 Using the Reset Button Settings Options Description Signaling via Visual Status Display Hold reset button down for eight seconds Disables...

Страница 52: ...s appears depending on the password level Figure 11 Login with Read Write Protection Figure 12 Login with Read Protection If the lower level device is read and write protected it must always be unlock...

Страница 53: ...ttings Module Information Device Settings Device Information Device Measurements 9 1 3 Module Settings System Figure 14 Module Settings System Date Time Here you can set the module s date and time Man...

Страница 54: ...mware loader in brackets on the WBM page Firmware update e g v 1 1 2 Note Notes on updating the firmware Please note that the module firmware can only be updated via the HTTP protocol For this purpose...

Страница 55: ...the communication module to receive messages from the broker Publish topic topic for which the communication module will send messages to the broker Publish interval interval at which the communicatio...

Страница 56: ...e HTTP and HTTPS protocols on or off Note Re enabling Webserver access Disabling the Webserver closes ports 80 and 443 the module is then no longer accessi ble via Web browser To re enable access via...

Страница 57: ...r ca pabilities with each other over the link Force 100 Mbits forces connection via 100 Mbit Force Full Duplex forces connection using full duplex Enable Broadcast Storm Protection This option can be...

Страница 58: ...disrupted Customer Users can enter system and location information here Figure 21 Module Information Customer 9 1 5 Device Settings The individual menu pages of the Device Settings are shown below For...

Страница 59: ...tput On the current output voltage is also displayed Overload Behavior Here you can specify how the product should behave in case of overload Signalization Note Navigation is valid from firmware versi...

Страница 60: ...tal Input Here you can switch the power supply on and off and make additional settings Digital Output This contains various setting options for the digital output Digital Out put On and Inversion are...

Страница 61: ...m the PC used Customer Information Individual customer information can be entered in the freely editable input fields Factory Reboot The device can be reset to the factory settings Password Figure 25...

Страница 62: ...can set specific parameters for the communication module See also 2 Device Parameter Object 31 9 1 6 Device Information Here you can see the information on the lower level device Figure 27 Device Info...

Страница 63: ...The communication between the communication module and a broker can be configured via the WBM Web Based Management under Module Settings MQTT see 8 Mod ule Settings 53 Establishing the MQTT connection...

Страница 64: ...L option to connect to the broker Figure 32 Enabling without TLS SSL The current status of the connection is shown under MQTT Connection Status Figure 33 Connection Status Establishing an Encrypted Co...

Страница 65: ...ate time see 8 Module Settings 53 5 In the Broker Settings Certificate Upload area upload the CA file that has been created Figure 36 Selecting the Certificate File 6 In the Client Settings MQTT Conne...

Страница 66: ...nd packaging Clear any data stored on electrical and electronic equipment Remove lithium ion batteries lead acid batteries or memory cards that are added to the electrical and electronic equipment Wea...

Страница 67: ...Figure 39 Browser warning message due to self signed certificate Certificates you create yourself must be signed by a certificate authority the so called root CA The root certificate forms the shared...

Страница 68: ...0xAF TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 0xC0 0x09 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 0xC0 0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 0xC0 0x2B TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 0xC0 0x2C TLS_E...

Страница 69: ...dule Figure 40 XCA Database 4 On the Templates tab click the New Template button 5 Select the Default Blank Template setting in the Preset Template Values dialog that opens 6 Click OK to confirm the s...

Страница 70: ...e e g NRW for North Rhine Westphalia localityName Place where certificate was issued organizationName Name of the organization that issued the certificate organizationUnitName Department identifier co...

Страница 71: ...1 0 0 71 EtherNet IP Communication Module Figure 42 Creating a Template 11 1 3 Creating the Root CA Certificate 1 Switch to the Certificates tab to create the Root CA certificate Click the New Cer tif...

Страница 72: ...cting a Template 2 Select your created template from the Template for the New Certificate selection field 3 Click the Apply Subject button 4 Select the Default CA template from the Template for the Ne...

Страница 73: ...ix Product manual Version 1 0 0 73 EtherNet IP Communication Module Figure 44 Creating a Certificate Entering a Name 7 Enter an identifier in the CommonName input field e g Root_CA 8 Click the Create...

Страница 74: ...t The assignment depends on whether the key is generated for the root CA or for the module The prime256r1 curve according to BSI TR 02102 2 named prime256v1 in the XCA is supported Note No RSA keys ar...

Страница 75: ...1 0 0 75 EtherNet IP Communication Module Figure 46 New Certificate Created 11 1 4 Creating the Device Certificate 1 Go to the Certificates tab to create the device certificate 2 Click the New Certif...

Страница 76: ...ct the template you created from the Template for the New Certificate selec tion field 6 Click the Apply Subject button 7 From the Template for the New Certificate selection field select the Default T...

Страница 77: ...al Version 1 0 0 77 EtherNet IP Communication Module Figure 48 Creating a New Key 12 Change the key type to elliptic curve and select the prime256v1 curve 13 Click the Create button to create the key...

Страница 78: ...ject Alternative Name in put field Note The value in the X509v3 Subject Alternative Name input field must be identical to server address Browsers use the IP address host name to determine the identity...

Страница 79: ...t manual Version 1 0 0 79 EtherNet IP Communication Module Figure 50 New Certificate Request Client Key Use 19 Click OK to confirm the entries The new certificate is shown below the root CA certificat...

Страница 80: ...ation Module Figure 51 Device Certificate Created 11 1 5 Exporting WBM Certificates 1 In the main window switch to the Certificates tab and expand the tree structure fully 2 Select your root CA certif...

Страница 81: ...0 0 81 EtherNet IP Communication Module Figure 52 Exporting Root CA Certificate 1 Figure 53 Exporting Root CA Certificate 2 4 Select the storage location by clicking the button 5 From the Export Form...

Страница 82: ...ure 54 Exporting the Device Certificate 9 Select a storage location by clicking the button 10 From the Export Format selection list select the PEM with Key entry 11 Click OK to confirm 11 1 6 Exportin...

Страница 83: ...1 0 0 83 EtherNet IP Communication Module Figure 55 Exporting Root CA Certificate 1 Figure 56 Exporting Root CA Certificate 2 4 Click the button to select the storage location 5 From the Export Forma...

Страница 84: ...orage location by clicking the button 10 In the Export Format selection list select the PEM without Key item 11 Click OK to confirm 12 In the main window switch to the Private Key tab 13 Select your d...

Страница 85: ...owser used 2 Transfer your device certificate to the product via the WBM On the Module Set tings Network page under TLS Certificates click Choose File Figure 59 Importing the Device Certificate 3 Sele...

Страница 86: ...d with the correct IP address or host name see 8 Creating the Device Certificate 75 1 Transfer your root CA certificate to the product via the WBM On the Module Set tings MQTT page under Certificate U...

Страница 87: ...s for field assembly 750 975 ETHERNET connector RJ 45 Cat 6A straight Code T568A AWG 22 750 977 000 011 ETHERNET connector RJ 45 Cat 6A straight Code T568A AWG 22 Strain relief 750 978 000 011 ETHERNE...

Страница 88: ...he Open DeviceNet Vendor Association Inc ODVA EnOcean is a registered trademark of EnOcean GmbH Google PlayTM is a registered trademark of Google Inc IO Link is a registered trademark of PROFIBUS Nutz...

Страница 89: ...ject Instance 0 22 Table 16 Identity Object Instance 1 22 Table 17 Common Services 24 Table 18 Assembly Object Instance 101 Attribute ID 3 25 Table 19 Assembly Object Instance 102 25 Table 20 Common S...

Страница 90: ...mmon Services 38 Table 44 Events and Measured Values Process Input Data 38 Table 45 Events and Measured Values Status Messages 39 Table 46 Events and Measured Values Warnings 39 Table 47 Events and Me...

Страница 91: ...16 Module Settings EtherNet IP 55 Figure 17 Module Settings Network 56 Figure 18 Module Settings Parameter Management 57 Figure 19 Module Settings Switch settings 57 Figure 20 Module Information Gene...

Страница 92: ...Figure 46 New Certificate Created 75 Figure 47 Creating a New Device Certificate 76 Figure 48 Creating a New Key 77 Figure 49 Extensions Tab 78 Figure 50 New Certificate Request Client Key Use 79 Figu...

Страница 93: ...2789 9023 List of Figures Product manual Version 1 0 0 93 EtherNet IP Communication Module...

Страница 94: ...gs videos and other WAGO media are subject to copyright Distri bution or modification of the contents of these pages and videos is prohibited Furthermore the content may neither be copied nor made ava...

Результаты поиска

Содержание 2789-9023

Отзывы:

Похожие инструкции для 2789-9023

Бренды по названию

Популярные бренды

WAGO 2789-9023, Руководство пользователя

Результаты поиска

Содержание 2789-9023

Отзывы:

Похожие инструкции для 2789-9023

Бренды по названию

Популярные бренды