To Next Page

To Previous Page

Industrial cybersecurity

4.10 Secure operation of I/O modules

S7-1500R/H redundant system

62 System Manual, 01/2024, A5E41814787-AF

4.10 Secure operation of I/O modules

Device-specific security information and instructions for I/O modules can be found in the

respective Equipment Manual.

4.11 Secure operation of the power supply modules

Device-specific security information and instructions for the power supply modules can be

found in the respective Equipment Manual.

Table of Contents4
Introduction12
S7-1500R/H Documentation Guide14
Information Classes S7-1500R/H14
SIMATIC Technical Documentation15
Safety Information18
Warnings in this Document18
Safety-Related Symbols18
Devices Without Explosion Protection18
Devices with Explosion Protection19
Intended Use20
Changes to the Device and Spare Parts20
Target Group and Personnel Qualifications21
Personal Protective Equipment21
Open Source Software22
Safe Working23
Working on Electrical Parts23
Residual Risks23
Live Parts23
Conductive Pollution24
Laser Radiation24
Overheating25
Unsafe Operating States25
Behavior in Case of Emergency26
Material Damage26
Transport and Storage26
Installation and Connection26
New Properties/Functions27
Industrial Cybersecurity36
Cybersecurity Information36
Security Update Notification37
Basic Information on Industrial Cybersecurity37
Definition of Industrial Cybersecurity37
Objectives of Industrial Cybersecurity38
Integrated Security Concept and Security Strategies38
Comprehensive Security Concept "Defense in Depth38
Security Management39
Operational Application Environment and Security Assumptions41
Intended Use41
Requirements for the Operational Application Environment and Security Assumptions42
Security Properties of the Devices43
Secure Operation of the System43
Hardening Measures43
Secure Configuration44
Access Control44
Handling of Sensitive Data44
Regular Firmware Updates45
Notifications about Security Vulnerabilities (Siemens Security Advisories)45
Data Backup46
Security Checks46
Secure Decommissioning46
Securely Removing Data47
Recycling and Disposal48
Secure Operation of the Engineering Software49
Secure Operation of Cpus49
Secure Configuration49
User Management and Access Control49
Administration of User Accounts49
Assigning Secure Passwords50
Password Management50
Setting Protection Levels51
Certificate Management51
Protection Functions51
Web API of the Web Server51
Secure Communication/Opc UA52
Sensitive Data52
Backups and Data Backups52
Additional Protective Measures for Network Security53
Remote Access to CPU53
Using a Web Server53
Recording Security Events53
Syslog Messages54
Transfer the Syslog Messages to a Syslog Server57
Structure of the Syslog Messages60
Secure Operation of I/O Modules63
Secure Operation of the Power Supply Modules63
System Overview64
What Is the S7-1500R/H Redundant System64
Areas of Application65
Operating Principle of the S7-1500R/H Redundant System69
Plant Components and Automation Levels80
Scalability81
Overview of Features85
Configuration86
Structure of the S7-1500R Redundant System86
Structure of the S7-1500H Redundant System87
Configuration of a Fail-Safe System with SIMATIC S7-1500HF88
Configuration with Communications Processors90
Configuration with PROFIBUS DP Connection93
Components94
S7-1500 R/H-Cpus96
Overview of the CPU Technical Specifications97
Redundancy98
Safety107
Security110
Diagnostics112
Trace114
PID Control116
Communication119
System and Device IP Addresses119
Integrated Interfaces for Communication122
HMI Devices123
Communications Processor CP1543-1123
Ie/Pb Link Ha124
Power Supply125
Software127
TIA Portal127
Sinetplan128
Proneta128
SIMATIC Automation Tool128
Application Planning130
Requirements130
Restrictions Compared to the S7-1500 Automation System133
Configuration Versions135
S7-1500R/H Configuration with IO Devices in the PROFINET Ring136
Configuration of S7-1500R/H with Switches and Additional Line Topology137
Configuration with Communications Processors on Industrial Ethernet140
Configuration with Communications Processors on Redundant Industrial Ethernet142
Configuration with Communications Processors and System Power/Load Current Supply145
Configuration with IE/PB LINK HA148
Specific Configuration Variants for S7-1500H151
Configuration of Line Topology with S2 Devices and Switch151
Configuration of PROFINET Rings with R1 Devices153
Configuration of PROFINET Rings with R1 Devices and Switches with MRP Interconnection157
Configuration of PROFINET Rings with R1 Devices and Y-Switch with S2 Devices159
Configuration of Line Topology with R1 Devices162
Line Topology Configuration with R1 Devices and Switches164
Line Topology Configuration with R1 Devices and Y-Switch with S2 Devices166
Configuration of Combined Topology with S2 Devices169
Configuration of Combined Topology with R1 Devices170
Configuration Without Additional Devices172
Redundancy Scenarios173
Introduction173
Failure of the Primary CPU174
Failure of the Backup CPU176
Failure of the PROFINET Cable in the PROFINET Ring178
Failure of the Primary CPU with Communications Processor180
Specific Redundancy Scenarios for S7-1500R181
Failure of a Communications Processor at the Primary CPU181
Specific Redundancy Scenarios for S7-1500H182
Failure of a Redundancy Connection in S7-1500H182
Failure of both Redundancy Connections in S7-1500H > 55 Ms Apart184
Failure of both Redundancy Connections and the PROFINET Cable in the PROFINET Ring186
Failure of the Two PROFINET Cables in the PROFINET Ring on the Backup CPU189
Failure of an Interface Module in an R1 Device in a PROFINET Ring191
Failure of the Two PROFINET Lines in PROFINET Ring 1 at the Primary CPU with R1 Devices193
Failure of both PROFINET Lines between Two R1 Devices in a Line Topology195
Failure of a PROFINET Line between Two S2 Devices in a Line Topology197
Failure of a Communications Processor at the Primary CPU198
Failure Scenarios199
Failure of an IO Device in the PROFINET Ring200
Failure of a Switch (with Additional Line Topology) in the PROFINET Ring201
Specific Failure Scenarios with S7-1500R203
Two Cable Interruptions in the PROFINET Ring in S7-1500R > 1500 Ms Apart203
Two Cable Interruptions in the PROFINET Ring in S7-1500R Within ≤ 1500 Ms205
Failure of the Primary CPU When IO Devices Have Failed in the PROFINET Ring207
Failure of the Backup CPU and Failure of the CP Communications Processor at the Primary CPU209
Specific Failure Scenarios with S7-1500H211
Failure of both Redundancy Connections in S7-1500H ≤ 55 Ms Apart211
Failure of One Redundancy Connection and the Primary CPU in S7-1500H214
Failure of the Two PROFINET Cables in the PROFINET Ring at the Primary CPU215
Failure of the Redundant System through Safe State of the HF-Cpus217
Failure of an Interface Module in an R1 Device and of the PROFINET Lines in Two Places of a PROFINET Ring219
Failure of the Primary CPU in PROFINET Rings with R1, S2 and S1 Devices221
Failure of PROFINET Lines in Two Places in a Line Topology with S2 Devices223
Failure of the Communications Processor at the Primary CPU with Failure of the Backup CPU225
Hardware Configuration227
Using HMI Devices229
System Power Supply232
Use of System Power Supplies232
Power Balance Calculation235
Installation239
Basics239
Installing the Mounting Rail241
Installing the Active Backplane Bus245
Installing the Standard Rail Adapter245
Installing a System Power Supply251
Installing a Load Current Supply253
Installing R/H-Cpus254
Installing a Communications Processor256
Wiring259
Rules and Regulations for Operation259
Operation on Grounded Infeed261
Electrical Configuration265
Wiring Rules266
Connecting the Supply Voltage267
Connecting the System Power/Load Current Supply269
Connecting the CPU to the Load Power Supply270
Connecting Interfaces for Communication with S7-1500R272
Connecting the PROFINET Ring to S7-1500272
Connecting Interfaces for Communication with S7-1500H274
Connecting Redundancy Connections (Fiber-Optic Cables)275
Synchronization Modules for S7-1500H275
Selecting Fiber-Optic Cables275
Installing Fiber-Optic Cables278
Connecting Redundancy Connections (Fiber-Optic Cables) to S7-1500H280
Connecting the PROFINET Ring to S7-1500H284
Connecting Line Topology to S7-1500H287
Connecting a Communications Processor289
Configuration290
Requirements290
Configuring R/H Cpus290
Basic Procedure for Configuring the IO Devices and the MRP Roles294
Configuring H-Cpus with PROFINET Rings and R1 Devices298
Configuring Additional Topologies303
Configuring R-Cpus with Communications Processors305
Configuring the System Power Supply307
Configuring the IE/PB LINK HA309
Display of the IO Device Assignments in STEP 7311
Project Tree314
Parameters315
Process Images and Process Image Partitions315
Process Image - Overview315
Updating Process Image Partitions in the User Program316
Basics of Program Execution318
Programming the S7-1500R/H318
Restrictions322
Events and Obs324
Special Instructions for S7-1500R/H Redundant Systems330
Disabling/Enabling SYNCUP with the RH_CTRL Instruction330
Determining the Primary CPU with "Rh_Getprimaryid333
Asynchronous Instructions334
Protection342
Overview of the Protection Functions342
Protection of Confidential Configuration Data342
Local User Management343
Useful Information on the Local User Administration and Access Control343
Advantages of the Local User Administration and Access Control346
From the Access Level to the Function Right of Users348
Information about Compatibility351
Configuring Access Protection for the CPU351
Using the Display to Set Additional Password Protection355
Using the User Program to Set Additional Access Protection355
Know-How Protection356
Protection by Locking the CPU360
Commissioning361
Overview361
12.2 Check before Powering on for the First Time362
Commissioning Procedure363
Removing/Plugging in SIMATIC Memory Cards364
First Power-On of the Cpus367
CPU Pairing367
Redundancy Ids369
Downloading Projects to the Cpus373
Operating and System States381
Overview381
STARTUP Operating State384
STOP Operating State387
SYNCUP Operating State388
RUN Operating States388
SYNCUP System State389
System and Operating State Transitions401
Loss of Redundancy CPU412
Displaying and Changing the System State416
CPU Memory Reset418
Automatic Memory Reset419
Manual Memory Reset420
Backing up and Restoring the CPU Configuration422
Time Synchronization426
Example: Configuring the NTP Server427
Identification and Maintenance Data428
Reading out and Entering I&M Data428
Record Structure for I&M Data430
Example: Read out Firmware Version of the CPU with Get_Im_Data432
Display435
CPU Display435
Maintenance444
Replacing Components of the S7-1500R/H Redundant System444
Checking before Replacing Components444
Replacing Defective R/H-Cpus447
Replacing Defective Redundancy Connections448
Replacing Two Defective PROFINET Cables with S7-1500R449
Replacing a Defective Redundancy Connection with S7-1500H450
Replacing Defective Synchronization Module with S7-1500H451
Replacing both Defective Redundancy Connections with S7-1500H451
Replacing Defective PROFINET Cables452
Replacing a Defective SIMATIC Memory Card453
Replacing a Defective System Power/Load Current Supply454
Replacing a Defective Communications Processor455
Replacing Defective IO Devices/Switches456
Replacing the Display457
Replacing the Coding Element at the Power Connector of the System Power/Load Current Supply460
Firmware Update462
Resetting Cpus to Factory Settings467
Maintenance and Repair471
Test and Service Functions472
Test Functions472
Reading Out/Saving Service Data478
Technical Specifications480
Standards and Approvals480
Electromagnetic Compatibility488
Shipping and Storage Conditions491
Mechanical and Climatic Ambient Conditions491
Information on Insulation Tests, Protection Class, Degree of Protection and Rated Voltage493
Use of S7-1500R/H in Zone 2 Hazardous Area494
Dimension Drawings495
Accessories/Spare Parts498
Use over 2 000 M above Sea Level and Extended Temperature Range500
Ambient Temperature and Installation Altitude500
Cpus500
Restrictions502
Glossary504
Index518

Brand	Siemens
Model	SIMATIC S7-1500T
Category	Controller
Language	English

Siemens SIMATIC S7-1500T System Manual

Table of Contents

Other manuals for Siemens SIMATIC S7-1500T

Questions and Answers:

Siemens SIMATIC S7-1500T Specifications

Related product manuals