Applications & Tools. Mobile Panel 277F IWLAN V2 -Upgrading to Roaming- WinCC flexible 2008 SP2 + HSP. Application description February 2011

Transcription

1 Cover -Upgrading to Roaming- WinCC flexible 2008 SP2 + HSP Application description February 2011 Applications & Tools Answers for industry.

2 Industry Automation and Drives Technologies Service & Support Portal This article is taken from the Service Portal of Siemens AG, Industry Automation and Drives Technologies. The following link takes you directly to the download page of this document. If you have any questions about this document, please contact us at the following address: 2 Version 1.0, Entry D:

3 s Automation Task 1 Automation Solution 2 Basics 3 SIMATIC Roaming Configuration Process 4 Configuration Process 5 Links & Literature 6 History 7 Version 1.0, Entry D:

4 Warranty and Liability Warranty and Liability Note The application examples are not binding and do not claim to be complete regarding configuration, equipment and any eventuality. The application examples do not represent customer-specific solutions. They are only intended to provide support for typical applications. You are responsible for ensuring that the described products are used correctly. These application examples do not relieve you of the responsibility to use sound practices in application, installation, operation and maintenance. When using these Application Examples, you recognize that we cannot be made liable for any damage/claims beyond the liability clause described. We reserve the right to make changes to these Application Examples at any time without prior notice. If there are any deviations between the recommendations provided in this application example and other Siemens publications e.g. Catalogs the contents of the other documents have priority. We accept no liability for information contained in this document. Any claims against us based on whatever legal reason resulting from the use of the examples, information, programs, engineering and performance data etc., described in this Application Example shall be excluded. Such an exclusion shall not apply in the case of mandatory liability, e.g. under the German Product Liability Act ( Produkthaftungsgesetz ), in case of intent, gross negligence, or injury of life, body or health, guarantee for the quality of a product, fraudulent concealment of a deficiency or breach of a condition which goes to the root of the contract ( wesentliche Vertragspflichten ). However, claims arising from a breach of a condition which goes to the root of the contract shall be limited to the foreseeable damage which is intrinsic to the contract, unless caused by intent or gross negligence or based on mandatory liability for injury of life, body or health. The above provisions do not imply a change in the burden of proof to your detriment. It is not permissible to transfer or copy these Application Examples or excerpts thereof without express authorization from Siemens Industry Sector. 4 Version 1.0, Entry D:

5 Table of contents Table of contents Warranty and Liability Automation Task Introduction Overview of the automation task Description of the automation task Requirements Automation Solution Overview of the overall solution Description of the core functionality Hardware and software components used Basics ipcf-mc concept Applicable WLAN standards for the mobile panel Configuration Process Preparatory measures for the configuration IP addresses SCALANCE W788-2RR configuration Assigning the IP address for the SCALANCE W788-2RR Configuring the SCALANCE W788-2RR via the WEB Backing up data the SCALANCE W788-2RR Adjusting other access points Configuring the mobile panel Hardware settings WLAN configuration Startup of the Application Links & Literature History Version 1.0, Entry D:

6 1 Automation Task- 1.1 Introduction 1 Automation Task 1.1 Introduction The application is based on the Configuration and Use of the Mobile Panel 277F IWLAN application description. This is where you have already been introduced to the individual configuration steps for creating a Mobile Panel 277F IWLAN project. It is the aim of this application to get familiar with the Roaming function and its application. Note Whenever the mobile panel is mentioned in this document it relates to the Mobile Panel 277F IWLAN V Overview of the automation task The figure below provides an overview of the automation task. The figure below shows Plant section 1 of a packing station. Figure 1-1 Conveyor belt 2 of 3 Converyor belt 1 of 3 Conveyor belt 3 of 3 6 Version 1.0, Entry D:

7 1 Automation Task 1.3 Description of the automation task 1.3 Description of the automation task A plant section (packing station) consists of several stations (conveyor belts 1 to 3), that are spatially far apart. Via a Mobile Panel 277F IWLAN all stations are to be operated and monitored. Smooth and secure operation of the individual stations through the Mobile Panel 277F IWLAN has to be guaranteed. 1.4 Requirements Requirements of the automation task Standard communication PROFIsafe communication via WLAN Uninterrupted roaming to other access points (ipcf-mc) Requirements for the HMI: the complete operation of the plant is performed via the HMI operator panel. Requirements for the communication: communication via WLAN uninterrupted roaming to other access points (ipcf-mc) Version 1.0, Entry D:

8 2 Automation Solution- 2.1 Overview of the overall solution 2 Automation Solution 2.1 Overview of the overall solution Schematic layout The figure schematically shows the most important components of the solution: Figure 2-1 Access Point 1 Access Point 2 Industrial Wireless LAN W788-2RR )))))) SCALANCE Switch X208 IM151-3 mit with Peripherie I/O Safety Schutztür door Emergency Not-Halt position Positionsschalter switch stop W788-2RR )))))) )))))) Industrial Ethenet S7-CPU 317F Part of the "Configuration and Use of Mobile Panel 277F IWLAN" application The figure shows the arrangement of the most important components in the direct industrial environment. Figure 2-2 SCALANCE W788-2RR )))))) 8 Version 1.0, Entry D:

9 2 Automation Solution 2.2 Description of the core functionality Classification For better overview, the application will only give information necessary for the reproduction of this application. Where necessary, the document provides references to related links and manuals. This application does not include information on the following topics: Safety Notices and Standards Directives and Approvals Operational Safety, etc. For these topics, please refer to the Operating Manual for the Mobile Panel 277F IWLAN V2. This application does not include a description of the SIMATIC WinCC flexible engineering tool. It only describes the settings of the used hardware and software components that are necessary for the application. (SCALANCE W788-2RR and ) Basic knowledge of the above-listed topics is assumed. For detailed information, please refer to the associated manuals. Required knowledge The basic knowledge of the Configuration and Use of the Mobile Panel 277F IWLAN application description is assumed. 2.2 Description of the core functionality The core functionality is the communication between the mobile panel and several access points that are in a network. It is possible to change from one access point to another access point without previous logoff or new logon. The mobile panel communicates is expanded by ipcf-mc (industrial Point Coordination Function with Management Channel) WLAN access procedure also called Rapid Roaming. Rapid Roaming is used for interruption-free transfer of radio signals and provides rapid transfer of radio signals between the access points and the mobile panel a basic requirement for mobile solutions for operating and monitoring in safetyrelevant areas where enabling and emergency stop buttons are used. Version 1.0, Entry D:

10 2 Automation Solution- 2.3 Hardware and software components used 2.3 Hardware and software components used Hardware components Table 2-1 The application was created with the following components: Component Qty. MLFB/order number Note SCALANCE W788-2RR 2 6GK AA60-6AA0 Alternatively, other versions of the SCALANCE W 2RR access points can be used. Mobile Panel 277F IWLAN V2 1 6AV6645-0EC01-0AX1 Alternatively, other versions of the Mobile Panel 277F IWLAN V2 can also be used. Standard software components Table 2-2 Component Qty. MLFB/order number Note WinCC flexible 2008 standard WinCC flexible 2008 SP2 WinCC flexible 2008 SP2 HSP 1 6AV6612-0AA51-3CA5 Alternatively, WinCC flexible 2008 Advanced can also be used. 1 See Customer Support pages 1 See Customer Support pages SP2 is available for download. HSP is available for download. Sample files and projects The following list contains all files and projects used in this example. Table 2-3 Component _Standard_Project_V2_Roaming.zip _MobilePanel277F_IWLAN_V2_Roaming_de.doc.pdf Note Standard configuration (STEP7 and WinCC flexible) This document 10 Version 1.0, Entry D:

11 3 Basics 3 Basics 3.1 ipcf-mc concept This chapter contains information regarding Roaming with ipcf-mc and applicable WLAN standards. 3.1 ipcf-mc concept For failsafe applications the mobile panel communicates through the expanded WLAN access procedure ipcf-mc (industrial Point Coordination Function with Management Channel). The data communication is performed on the so called data channel (in PCF method). The coordination of the communication is performed on the so called management channel. The figures below are to illustrate the ipcf-mc concept. Figure 3-1 Each access point has a different "Data Channel" Industrial Ethernet/PROFINET AP1 W788-2RR AP3 W788-2RR 48 AP2 W788-2RR AP: Access Point Each access point has the same "Management Channel" (here channel 48) There are as many data channels (here 36; 40; 44) as there are access points and one joint management channel (here 48). Each access point (AP) sends so called beacons (approx. every 5ms) to the management channel. The clients (in this application the mobile panel) receive information regarding the reception quality and the number of the data channel to all the access points of the network in reach within a very short time. Version 1.0, Entry D:

12 3 Basics- 3.1 ipcf-mc concept ipcf-mc, data channel Figure 3-2 Industrial Ethernet/PROFINET 36 Data transfer AP1 W78x-2RR AP3 W78x-2RR AP2 W78x-2RR Mobile Panel AP: Access Point The data transfer takes places through cyclic polling (just like ipcf). Each mobile panel has a reserved data transfer window. ipcf-mc, management channel Figure 3-3 AP1 W78x-2RR 48 Industrial Ethernet/PROFINET AP3 W78x-2RR AP2 W78x-2RR Mobile Panel AP: Access Point An access point (AP) sends a beacon at regular intervals. This beacon contains information regarding the signal strength, SSID of the access point and the channel settings of the data channel. These beacons are evaluated by the mobile panel. 12 Version 1.0, Entry D:

13 3 Basics 3.1 ipcf-mc concept Roaming with ipcf-mc, sequence description The mobile panel regularly changes from the data channel to the management channel and evaluates the received beacons. In this case the beacon of access point 1 (AP1) is the strongest => no roaming. Figure 3-4 Industrial Ethernet/PROFINET AP1 W78x-2RR AP3 W78x-2RR AP2 W78x-2RR 36 AP: Access Point The mobile panel is now closer to access point 2 (AP2). With the next change to the management channel the beacon of access point 2 is stronger. => roaming on access point 2. Figure 3-5 Industrial Ethernet/PROFINET AP1 W78x-2RR 48 AP3 W78x-2RR AP2 W78x-2RR AP: Access Point Version 1.0, Entry D:

14 3 Basics- 3.1 ipcf-mc concept ipcf-mc general conditions For the operation of ipcf-mc the following general conditions are required: at least three unused non-overlapping channels are required the management channel must not be operated on h (radar detection!) management channel and data channel must be precisely overlapped: both must either be in 2.4 GHz band or in 5 GHz band with the access point, WLAN1 and WLAN2 have to be equipped with the same antennas Channel assignment for extensive plants When configuring the data channel, ensure that the addresses of neighboring data channels do not overlap. Figure 3-6 Same address possible Industrial Ethernet/PROFINET AP1 W78x-2RR AP2 W78x-2RR 48 AP3 W78x-2RR 48 AP: Access Point AP4 W78x-2RR Version 1.0, Entry D:

15 3 Basics 3.2 Applicable WLAN standards for the mobile panel 3.2 Applicable WLAN standards for the mobile panel Table 3-1 Mobile Panel 277 IWLAN Mobile Panel 277F IWLAN Mobile Panel 277F RFID *) IEEE a 5 GHz Yes Yes Yes IEEE b 2.4 GHz Yes Only, if no zone No Yes configured IEEE g 2.4 GHz Yes Only, if no zone No Yes configured IEEE h 5 GHz Yes Yes Yes *) Only Supported protocols: DCF (standard WLAN without roaming) ipcf (only without roaming) ipcf-mc (only ) Version 1.0, Entry D:

16 4 Configuration Process- 4.1 Preparatory measures for the configuration 4 Configuration Process The chapters that follow describe the required settings and configurations for the communication between the access points and the mobile panel. 4.1 Preparatory measures for the configuration Before you start with the configuration, determine the addresses of the individual hardware components IP addresses Define the IP addresses of the individual Ethernet nodes. The following table lists the IP addresses and the MAC addresses used for the application. Table 4-1 IP Address Mac Address Device name Mobile Panel 277F IWLAN a-bc Mobile277fiwlan SCALANCE 788W-2RR E-8C-D3-1E-43 CS3-Network-011 SCALANCE 788W-2RR E-8C-D3-1D-3B CS3-Network SCALANCE W788-2RR configuration Note The settings are necessary for each configuration. Only the respective addresses have to be adjusted (see chapter 4.2.4). Please note that the SCALANCE W788-2RR has numerous parameter and setting options. This document describes only the points that are necessary for this application. For detailed information on the individual parameters, please refer to the SCALANCE W78-2RR configuration manual, under entry ID: Version 1.0, Entry D:

17 4 Configuration Process 4.2 SCALANCE W788-2RR configuration Assigning the IP address for the SCALANCE W788-2RR Table 4-2 If you have not yet assigned an IP address to the SCALANCE W788-2RR, follow the instructions listed in the table below. No. Action Additional information 1. Use an Ethernet cable to connect the SCALANCE W788-2RR to your PC. 2. Open the SIMATIC Manager. 3. Setting the PG/PC interface: Select the Options > Set PG/PC Interface menu command and set the PG/PC interface to Ethernet. 4. Editing the Ethernet node: Select the PLC > Edit Ethernet Node... menu command. The Edit Ethernet Node dialog box opens. 5. Select the Browse button. The Browse Network dialog box opens. Now all available nodes on the Ethernet network are displayed. 6. Select the MAC address of your SCALANCE W788-2RR and confirm it by selecting OK. 7. Select the MAC address of your SCALANCE W788-2RR and confirm it by selecting OK. 8. In Set IP Configuration, you can now specify the IP address and the subnet mask. 9. Then click on the Assign IP Configuration button. 10. In Assign Device Name, you can specify a device name. The Browse Network dialog box closes and the Edit Ethernet Node dialog box opens. In this example The data is transferred. In this example "CS3-Network-011" 11. Then click on the Assign name button. The data is transferred. Note Instead of the SIMATIC Manager, you can also use PST (Primary Setup Tool). Detailed information on PST is available on the Customer Support pages, ID number: Version 1.0, Entry D:

18 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration Configuring the SCALANCE W788-2RR via the WEB Once you have assigned an IP address to the SCALANCE W788-2RR, you can access the home page of the W788-2RR (Web Based Management) using a web browser and perform the parameterization. If you do not know the username or the current password, it is recommended that the SCALANCE W788-2RR is initially reset to factory settings. For this reset, please note the information in the SCALANCE W788-2RR (Link) configuration manual. Note The configuration of the individual access points are essentially the same. What parameters have to be adjusted accordingly can be found under the following Link. Logon via Web Based Management Table In the address bar of the web browser, enter the IP address or the URL of the SCALANCE W788-2RR. Once a connection to the SCALANCE W788-2RR has been established, the logon screen of Web Based Management is displayed. IP address: Note: if you have already configured the security settings with the aid of the Wizard, enter this IP address in the address bar of the web browser: 2. In the User name drop-down list, select Admin (read and write access). 3. Enter your password. If you have not yet defined a password, the default passwords apply. Enter admin. 4. Click on the Log On button to start the logon. 18 Version 1.0, Entry D:

19 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 5. After successful logon, an explorer view is displayed that shows the different subfolders for parameterizing the SCALANCE W788-2RR. Configuring the basic functionality with the aid of the wizard Table The Web based management offers several wizards. First, use the Basic Wizard. (Wizard for general settings to ensure the basic functionality of the device). Then use the Security Wizard. (The wizard supports you when setting failsafe parameters). 2. Basic Wizard, IP Settings: on this page, enter the IP address and the subnet mask. Make sure that the address is unique within your network. Specified IP address: selected IP address: Subnet: Version 1.0, Entry D:

20 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration 3. Basic Wizard, System Name: The system name (device name) identifies a node. System name: CS3-Network Basic Wizard, Country code: Select the country code from the drop-down list. Country code: GERMANY 5. Basic Wizard, Wireless Settings for WLAN 1: The configuration of the WLAN 1 (1) network is defined on this page. This includes network name and transmission mode. SSID: CS3_Mobile_Panel Wireless mode: 5 GHz 54Mbps (802.11a) 1 2 Notes: SSID name: When starting the mobile panel, the mobile panel attempts to connect to this wireless network. The Wireless Mode assigned here, should match the Wireless Mode for WLAN 2 (Link). The same is the case for the mobile panel (Link). Wireless Mode b or g only for Mobile Panel 277F IWLAN (RFID) Mobile Panel 277 IWLAN (without safety), if no transponders are used. 20 Version 1.0, Entry D:

21 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 6. Basic Wizard, Channel Settings for WLAN 1: For the communication, an access point uses a specific channel of a frequency band. When assigning the Radio channel, ensure that the neighboring channels are not overlapped by the access points (Link). Auto channel select: disabled Radio channel: 36 (5180MHz) Antenna Type: ANT795-4MR Antenna cable length (in meters): 0 7. Basic Wizard, Wireless Settings for WLAN 2: The configuration of the WLAN 2 (1) network is defined on this page. This includes network name and transmission mode. SSID: Mobile_Panel_MC *) Wireless Mode: 5 GHz 54Mbps (802.11a) *) The SSID name between WLAN 1 and WLAN 2 must be different. Note: No h for Management Channel (Radar) Wireless Mode b or g only for Mobile Panel 277F IWLAN (RFID) Mobile Panel 277 IWLAN (without safety), if no transponders are used. 1 2 Version 1.0, Entry D:

22 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration 8. Basic Wizard, Channel Settings for WLAN 2: For the communication, an access point uses a specific channel of a frequency band. When assigning the Radio channel, ensure that the neighboring channels are not overlapped by the access points (Link). Outdoor AP mode: not selelected Radio channel: 48 (5240MHz) Antenna Type: ANT795-4MR Antenna cable length (in meters): 0 9. Basic wizard, Summary Basic Wizard: After you have made all settings for the basic configuration, this page displays your selected parameters. Select the Finish button to exit the Basic Wizard. 10. Wizards, Status: After clicking the Finish button, you get back to the Start page. First of all, carry out a restart and continue the settings with the Security Wizard. 22 Version 1.0, Entry D:

23 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 11. System Restart: After completing the Wizard, perform a restart. The changes you have made become effective after restarting the SCALANCE. In the System > Restart folder, you can use the Restart button to restart the system. Configuring the security settings with the aid of the wizard Table The security wizard enables a specification of the safety-relevant parameters. Note: for the use of PROFIsafe via WLAN, it is mandatory that specific security settings are made. 2. Security wizard, Security Settings: The password must comprise at least 20 characters and consist of upper and lower case letters, digits and special characters. Current Admin Password: admin New Password: MobilePanel277F_IWLAN Version 1.0, Entry D:

24 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration 3. Security wizard, Security Settings for Management Interfaces: Security Settings for Management Interfaces. On this page, you define the protocols via which you access the configuration of the IWLAN device, for example, to be able to make parameter changes. All protocols whose the checkbox was ticked can be used for the configuration. Select only protocols that you actually use. the Allow management only from wired interface option must be selected. All other options can be selected. 4. Security wizard, Security Settings for SNMP Protocol: On this page you can apply the standard settings. SNMPv1/v2 read only:: selected 24 Version 1.0, Entry D:

25 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 5. Security wizard, Security Settings for WLAN 1: Specifying access rights for WLAN 1 SSID: CS3_Mobile_Panel Enable Suppress SSID broadcasting feature for WLAN 1 disabled Enable Inter SSID communication for WLAN 1: selected Enable Intracell communication : Allowed Note: the SSID name will be stored in the configuration and for the mobile panel. When starting the mobile panel, the mobile panel attempts to connect to this wireless network. 6. Security wizard, Security Settings for WLAN 1: Authentication and encryption to secure a network for WLAN 2. Security level for WLAN 1: None (open System) Note: the encryption is configured later (Link). 7. Security wizard, Security Settings for WLAN 2: Specifying access rights for WLAN 2 SSID: Mobile_Panel_MC Enable Suppress SSID broadcasting feature for WLAN 2 selected Enable Inter SSID communication for WLAN 2: selected Enable Intracell communication : Allowed Version 1.0, Entry D:

26 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration 8. Security wizard, Security Settings for WLAN 2: Authentication and encryption to secure a network for WLAN 2. Security level for WLAN 2: None (open System) Note: the encryption is configured later (Link). 9. Security wizard, Summary I: Once you have made all settings for the security wizard, this page displays your selected parameters. 10. Security wizard, Summary II: You have completed the first part of the safety settings. Select the Finish button to exit the security wizard. 11. Wizards, Status: After clicking the Finish button, you get back to the Start page. First of all, carry out a restart and continue the settings with the second part of the security settings. 26 Version 1.0, Entry D:

27 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 12. System Restart: After completing the Wizard, perform a restart. The changes you have made become effective after restarting the SCALANCE. In the System > Restart folder, you can use the Restart button to restart the system. 13. Other necessary settings: The following menu options are not triggered through the WIZARD and must be selected through the menu tree. 14. Services menu option: In the System > Services menu tree, call the Services menu. Select the HTTPS only option. The other options can be used. Then click on the Set Values button. Once you have made the settings, the SCALANCE W788-2RR has to be restarted. Note: After the restart you have to enter instead of to call the Homepage of SCALANCE. 15. Security settings for ipcf-mc, Key table for Wireless Interface 1: Security > Keys > WLAN1 Enter a key for Data Channel. The key has to be made up of 16 ASCII characters. Public key 1: PROFISAFE_Mobile Then click on the Set Values button. Version 1.0, Entry D:

28 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration 16. Security settings for ipcf-mc, Key table for Wireless Interface 2: Security > Keys > WLAN2 Enter a key for Management Channel. The key has to be made up of 16 ASCII characters. Public key 1: PROFISAFE_Mobile Then click on the Set Values button. 17. Security settings for ipcf-mc Wireless Interface 1 Security Properties: Security > Basic WLAN > WLAN1 Authentication type: Open System Encryption: selected Default WEP key: Select your key through the dropdown list. In this case: Key 1 - PROFISAFE_Mobile Suppress SSID broadcasting: deselected Inter SSID communication: selected Enable Intracell communication : Allowed Then click on the Set Values button. 18. Security settings for ipcf-mc Wireless Interface 2 Security Properties: Security > Basic WLAN > WLAN2 Authentication type: Open System Encryption: selected Default WEP key: Select your key through the dropdown list. In this case: Key 1 - PROFISAFE_Mobile Suppress SSID broadcasting: deselected Inter SSID communication: selected Enable Intracell communication : Allowed Then click on the Set Values button. 28 Version 1.0, Entry D:

29 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 19. ipcf-mc I-Features > ipcf-mc" Enable ipcf-mc and assign which channel is intended for the Data Channel or Management Channel. ipcf-mc enabled: Strong AES-CCM encryption: PNIO update time: Data Channel: Management Channel: selected selected 32ms WLAN1 WLAN2 Then click on the Set Values button. 20. The settings for the first access point (SCALANCE W788-2RR) are now complete. 21. System Restart: after completing the settings, perform a restart. The changes you have made become effective after restarting the SCALANCE. In the System > Restart folder, you can use the Restart button to restart the system. 22. Now configure the other access points. The majority of parameters can be accepted from the first access point. Chapter lists the parameters you need to adjust individually for each access point. Version 1.0, Entry D:

30 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration Backing up data the SCALANCE W788-2RR Table 4-6 It is recommended to create a data backup of each access point. If a device is replaced, you can therefore quickly load the configuration to the new device. 1. Saving or loading the configuration: in the System > Load&Save > HTTP folder, you can save the configuration on your PC at any time or load a previously saved setting back to the PC. For this purpose, select the location and then use the Save or Load buttons. Note: alternatively use the TFTP. 30 Version 1.0, Entry D:

31 4 Configuration Process 4.2 SCALANCE W788-2RR configuration Adjusting other access points Repeat the steps, described in chapter Alternatively, you can create a data backup from an already configured access point and upload it to another access point. You only have to check or adjust the steps listed below. Configuring further access points You can use the Basic wizard again for the settings. Table IP Settings: Assign an individual IP address for each access point. IP address: Subnet mask: System Name: assign an individual device name for each access point. System name: CS3-Network Wireless Settings for WLAN 1: in the application, WLAN 1 is used for the Data Channel. Make sure that for all respective access points, the WLAN 1 is also configured as data channel (Link). SSID: CS3_Mobile_Panel Wireless mode: 5 GHz 54Mbps (802.11a) Version 1.0, Entry D:

32 4 Configuration Process- 4.2 SCALANCE W788-2RR configuration 4. Channel Settings for WLAN 1: when assigning the Radio channel, ensure that the neighboring channels are not overlapped by the access points (Link). Radio channel: 40 (5200MHz) Antenna Type: ANT795-4MR Antenna cable length (in meters): 0 5. Wireless Settings for WLAN 2: In the application WLAN 2 is used for the management channel. Make sure that WLAN 2 is also configured as management channel (Link) for all respective access points. Wireless mode: 5 GHz 54Mbps (802.11a) Note: the SSID box can not be selected due to the already enabled ipcf-mc enabled parameter under I-Features > ipcf-mc. (The SSID name is displayed by WLAN 1). 6. Channel Settings for WLAN 2: in the application, WLAN 2 is used for the management channel. Ensure that all respective access points at the radio channel are set to the same channel (Link). Radio channel: 48 (5240MHz) Antenna Type: ANT795-4MR Antenna cable length (in meters): 0 32 Version 1.0, Entry D:

33 4 Configuration Process 4.2 SCALANCE W788-2RR configuration 7. Summary Basic Wizard: this page displays the parameters you have selected under the Basic Wizard. Press the Finish button and then perform a restart. The settings for the second access point are complete. No changes have to be made on the Security settings. Note: the security settings correspond to those of the first access point. 8. ipcf-mc I-Features > ipcf-mc" Check the assignment of the data channel and the management channel. ipcf-mc enabled: Strong AES-CCM encryption: PNIO update time: Data Channel: Management Channel: selected selected 32ms WLAN1 WLAN2 Then click the Set Value button (once you have performed the changes). Version 1.0, Entry D:

34 4 Configuration Process- 4.3 Configuring the mobile panel 4.3 Configuring the mobile panel Hardware settings Network and dial-up connections In Network and Dial-up Connections, you can change the network settings of the WLAN connections. The connection to the PLC and possible other WLAN components is established via the network parameters. Table Call the control panel of the mobile panel. 2. Click on the Network and Dial-up Connections icon. A new page opens on which you can make the WLAN settings. Click on the WLAN icon. A dialog box opens in which you can set the connection parameters. Select the Specify an IP address option and enter the IP address and subnet mask. Confirm the entries with OK and close the window using the File > Close menu bar. IP address: Subnet Mask: Version 1.0, Entry D:

35 4 Configuration Process 4.3 Configuring the mobile panel PROFINET setting In PROFINET, you can specify the communication channel and the device name. Table Call the control panel of the mobile panel. 2. Click on the PROFINET icon. A dialog box opens. Select the following options: PROFINET IO enabled: selected Device name: Mobile277FIWLAN Confirm the entries with OK. Note: in the STEP 7 hardware manager, an IO device has been configured for the mobile panel. In the object properties of this IO device, a device name is entered in General. This name must be applied here. Please note that the name is case sensitive. Version 1.0, Entry D:

36 4 Configuration Process- 4.3 Configuring the mobile panel PROFIsafe setting In PROFIsafe, you set the PROFIsafe address. Table Call the control panel of the mobile panel. 4. Click on the PROFIsafe icon. A dialog box opens. In this dialog box, enter the PROFIsafe address. Address: 300 Note: in the STEP 7 hardware manager, an IO device has been configured for the mobile panel. Use the PROFIsafe > F_Dest_Add menu command to access an address in the object properties of the Mobile277Failsafe_IO module. This address must be applied here. 36 Version 1.0, Entry D:

37 4 Configuration Process 4.3 Configuring the mobile panel Selecting frequency range for the transponder In the control panel under the OP Properties dialog, Transponder tab, you can specify through which channel (frequency range) the operator panel communicates with the transponders. Table Call the control panel of the mobile panel. 2. Click on the OP icon. The OP Properties dialog box opens. Select the Transponder tab. Select the required WLAN channel through the dropdown list. The following options are available: Auto (all channels): the frequency hopping method searches an unused frequency range within the 2.4 GHz band. A free channel is selected automatically. List with several frequency ranges within the 2.4 GHz band: you can select a discrete frequency range from this list. This enables you to determine what channel is used, and not the operator panel. The entry is saved by clicking the OK button and the dialog is closed. Note: setting the channel ensures the coexistence with other radio system. A possible error of other networks can therefore be prevented. Version 1.0, Entry D:

38 4 Configuration Process- 4.3 Configuring the mobile panel WLAN configuration Table 4-12 A software assistant for the WLAN configuration is available via web interface. The settings below ensure secure data exchange between the SCALANCE W788-2RR and the mobile panel. The settings are always necessary for each configuration. 1. Call the control panel of the mobile panel. 2. Click on the WLAN V2 Config icon. The following context menu opens. 3. In the User name drop-down list, select Admin (read and write access). 4. Enter your password. If you have not yet defined a password, the default passwords apply. Enter admin. 5. Click on the Log On button to start the logon. 6. Note: if you do not know the password, the system has to be bootstrapped (reset the operating system to the factory settings). How to bootstrap can be found under entry ID: After successful logon, a start page with various subfolders for the configuration of the WLAN configuration appears. 38 Version 1.0, Entry D:

39 Configuring the basic functionality with the aid of the wizard Table The Web based management offers several wizards. Basic Security ipcf In the status overview you can see which wizards you have already completed. First of all, start with the Basic Wizard. 2. Basic Wizard, Country code: Select the country code from the drop-down list. 4 Configuration Process 4.3 Configuring the mobile panel Country code: GERMANY 3. Basic Wizard, Wireless Settings: The configuration of the wireless network is defined on this page. This includes network name and transmission mode. Connect to ANY SSID: disabled SSID: CS3_Mobile_Panel Wireless mode: 5 GHz 54Mbps (802.11a) Notes: the SSID name will also be stored in the configuration of the mobile panel. When starting the mobile panel, the mobile panel attempts to connect to this wireless network. the selected wireless mode should match the selected wireless mode of SCALANCE W788-2RR (Link). Version 1.0, Entry D:

40 4 Configuration Process- 4.3 Configuring the mobile panel 4. Basic Wizard, Channel Settings: due to the previously selected settings under Wireless Mode you cannot make any settings on this page. (In any case, the setting would not be necessary). 5. Basic Wizard, Summary Basic Wizard: after you have made all settings for the basic configuration, this page displays your selected parameters. Select the Finish button to exit the Basic Wizard. 6. Wizards, Status: After clicking the Finish button, you get back to the start page. First of all, carry out a restart and continue the settings with the Security Wizard. 7. System Restart: In the System > Restart folder, you can use the Restart WLAN button to restart the system. The changes you have made become effective after a restart. 40 Version 1.0, Entry D:

41 Configuring the security settings with the aid of the wizard Table The security wizard enables a specification of the safety-relevant parameters. Note: for the use of PROFIsafe via WLAN, it is mandatory that specific security settings are made. 4 Configuration Process 4.3 Configuring the mobile panel 2. Security wizard, Security Settings: the password must comprise at least 20 characters and consist of upper and lower case letters, digits and special characters. Current Admin Password: admin New Password: MobilePanel277F_IWLAN 3. Security wizard, Security Settings for WLAN: authentication and encryption. Security level: None (Open System) 4. Security wizard, Summary I: You cannot make any settings on this page. (Due to the previously selected setting under Security level ). Version 1.0, Entry D:

42 4 Configuration Process- 4.3 Configuring the mobile panel 5. Security wizard, Summary II: The security settings through the Security Wizard are complete. Select the Finish button to exit the security wizard. 6. ipcf-mc settings, Key table for Wireless Interface: Security > Keys A key has to be entered in the key table, so that the encryption is enabled during the Open System authentication method. The key has to be made up of 16 ASCII characters. Public key 1: PROFISAFE_Mobile Click the Set Values button. 7. ipcf-mc Settings, Wireless Security Properties: Security > Basic WLAN Enable encryption Encryption: Default WEP key: selected Select the previously stored key from the drop-down list. In this case: PROFISAFE_Mobile Click the Set Values button. 8. ipcf-mc settings, ipcf-mc: I-Features > ipcf-mc" ipcf-mc enabled: selected Strong AES-CCM encryption: selected Background scan interval: 1 Click the Set Values button. 42 Version 1.0, Entry D:

43 4 Configuration Process 4.3 Configuring the mobile panel 9. System Restart: In the System > Restart folder, you can use the Restart WLAN button to restart the system. The changes you have made become effective after a restart. The WLAN configuration of the mobile panel 277F IWLAN V2 is complete. 10. Saving or loading the configuration: In the System > Load&Save > HTTP folder, you can save the configuration on your mobile panel or on a USB stick at any time or load a previously saved setting back. For this purpose, select the location and then use the Save or Load buttons. What USB storage media are released can be found in the following entry ID: Version 1.0, Entry D:

44 5 Startup of the Application- 4.3 Configuring the mobile panel 5 Startup of the Application Commissioning Table Make sure that all access points (SCALANCE W788-2RR) have been configured. 2. Make sure that the WLAN configuration of the mobile panel 277F IWLAN is complete. 3. Check the LEDs on the mobile panel. Once all WLAN settings are ok, the COM LED on the mobile panel has to light up permanently. If this is not the case, check the WLAN settings on the SCALANCE W788-2RR or the mobile panel. 4. Make sure that the STEP 7 configuration (standard and F program) was transferred and the PLC is in RUN mode. 5. The SAFE LED lights up when the mobile panel is integrated in the safety program of the F-CPU. Continue with the operation of the mobile panel. 44 Version 1.0, Entry D:

45 6 Links & Literature 6 Links & Literature Internet links The following list is by no means complete and only provides a selection of appropriate sources. Table 6-1 Topic Title /1/ STEP 7 Automating with STEP 7 in STL and SCL Hans Berger Wiley VCH ISBN-10: ISBN-13: /2/ Operating instructions Operator Panel /3/ Safety: S7fcotia.xls spreadsheet /4/ IWLAN Execution times of the F blocks for the Mobile Panel 277F IWLAN /5/ IWLAN Setup of an Industrial Wireless LAN /6/ Configuration Manual /7/ Configuration Manual SCALANCE W S7 Distributed Safety, configuring and programming History Table 7-1 Version Date Changes V First issue Version 1.0, Entry D: