Wireless Communication of S7-300 Stations with TeleControl Server Basic V3

Application Example 05/2015 Wireless Communication of S7-300 Stations with TeleControl Server Basic V3 TCSB V3, MD720, CP 340/341/ V1.0 https://support.industry.siemens.com/cs/ww/de/view/109475770

Warranty and Liability Warranty and Liability Note The application examples are not binding and do not claim to be complete with regard to configuration, equipment or any contingencies. The application examples do not represent customer-specific solutions. They are only intended to provide support for typical applications. You are responsible for the correct operation of the described products. These application examples do not relieve you of the responsibility of safely and professionally using, installing, operating and servicing equipment. When using these application examples, you recognize that we cannot be made liable for any damage/claims beyond the liability clause described. We reserve the right to make changes to these application examples at any time and without prior notice. If there are any deviations between the recommendations provided in this application example and other Siemens publications e.g. Catalogs the contents of the other documents shall have priority. We do not accept any liability for the information contained in this document. Any claims against us based on whatever legal reason resulting from the use of the examples, information, programs, engineering and performance data etc., described in this Application Example shall be excluded. Such an exclusion shall not apply in the case of mandatory liability, e.g. under the German Product Liability Act ( Produkthaftungsgesetz ), in case of intent, gross negligence, or injury of life, body or health, guarantee for the quality of a product, fraudulent concealment of a deficiency or breach of fundamental contractual obligations ( wesentliche Vertragspflichten ). The compensation for damages due to a breach of a fundamental contractual obligation is, however, limited to the foreseeable damage, typical for the type of contract, except in the event of intent or gross negligence or injury to life, body or health. The above provisions do not imply a change in the burden of proof to your disadvantage. Any form of duplication or distribution of these application examples or excerpts hereof is prohibited without the expressed consent of Siemens Industry Sector. Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates. For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. For more information about industrial security, visit http://www.siemens.com/industrialsecurity. To stay informed about product updates as they occur, sign up for a productspecific newsletter. For more information, visit http://support.automation.siemens.com. Entry ID: 109475770, V1.0, 05/2015 2

Table of Contents Table of Contents Warranty and Liability... 2 1 Task... 5 2 Solution... 6 2.1 Overview... 6 2.2 Description of the core functionality... 7 2.2.1 Realized functions... 7 2.3 Overview and description of the user interface... 8 2.4 Hardware and software components... 11 2.4.1 Validity... 11 2.4.2 Components used... 11 3 Mode of Operation... 13 3.1 General overview... 13 3.1.1 Program overview Inspection Shaft / Stormwater Overflow... 15 3.1.2 UDT_WDC_PARAM (UDT91)... 16 3.1.3 Global data blocks Inspection Shaft... 17 3.1.4 Global data blocks Stormwater Overflow... 20 3.1.5 Data traffic between the connection partners... 22 3.2 Functionality Inspection Shaft... 23 3.2.1 Program details for FB WDC_Example (FB94)... 23 3.2.2 Call FB WDC_Example (FB94) in OB1... 24 3.3 Functionality Stormwater Overflow... 25 3.3.1 Program details for FB WDC_Example (FB94)... 25 3.3.2 Call FB WDC_Example (FB94) in OB1... 26 3.4 Error and status display... 27 4 Configuration and Settings... 28 4.1 Configuration of TeleControl Server Basic (TCSB)... 28 4.2 Configuring OPC Scout V10... 31 5 Installation and Commissioning... 33 5.1 Hardware installation... 33 5.2 Installing the software... 34 5.3 Installation of the application software... 35 5.4 Commissioning... 35 5.4.1 Setting the IP addresses... 35 5.4.2 Changing the IP addresses of the PC/PG... 35 5.4.3 Change the IP address of the CPU... 36 5.4.4 Configuring the DSL router... 36 5.4.5 Setting the transmission speed of the MD720... 37 5.4.6 Configuring the serial CPs (CP 340 and CP 341)... 38 5.4.7 Including the backup copy of database "109475770_TCSB_V3.bak" into TCSBV3... 39 5.4.8 Configuring IP address and ports of TeleControl Server Basic V3... 39 5.4.9 Opening the OPC Scout configuration file 109475770_OPC_TCSB.opf... 41 5.4.10 Loading the STEP 7 V5.5 project 109475770_MSC300_Application_PR_V10.zip... 42 6 Operating the Application... 43 6.1 Overview... 43 6.1.1 Menu navigation of the HMI... 43 6.1.2 Watch table of the Inspection Shaft station... 44 Entry ID: 109475770, V1.0, 05/2015 3

Table of Contents 6.1.3 Watch table of the Stormwater Overflow station... 44 6.2 Initializing the stations Inspection Shaft and Stormwater Overflow... 45 6.3 Inspection Shaft requests data cyclically from Stormwater Overflow (polling)... 47 6.4 Stormwater Overflow sends data to Inspection Shaft... 49 6.5 Inspection Shaft sends data to the central station... 51 6.6 Stormwater Overflow sends data to the central station... 53 7 References... 55 8 History... 55 Entry ID: 109475770, V1.0, 05/2015 4

1 Task 2.1 Overview 1 Task Introduction The infrastructure of a discharge treatment plant comprises the two S7-300 substations Inspection Shaft and Stormwater Overflow. Both stations shall communicate with a central station cost-efficiently, as well as exchange data. TeleControl Server Basic V3 is installed on the central station PC. The internet based GPRS service should be used as a data transfer medium. Overview of the automation task The figure below provides an overview of the automation task. Figure 1-1 Central station TeleControl Server Basic INTERNET GPRS?? Inspection shaft Stormwater overflow Problem description This application example should meet the following requirements: Remote station 1 (inspection shaft) requests data cyclically from radio station 2 (stormwater overflow). Remote station 2 sends event-triggered data to remote station 1. Remote station 1 and 2 send important process variables cyclically to the central station. The central station monitors the status of the connected remote stations. Using visualization software, the simulated process shall be operated and controlled in the remote stations. Entry ID: 109475770, V1.0, 05/2015 5

2 Solution 2.1 Overview 2 Solution 2.1 Overview Display The figure below shows a schematic overview of the most important components of the solution: Figure 2-1 Central station 1 TCSB DSL router INTERNET MSC300_ Library MSC300_ Library 2 3 Inspection shaft Stormwater overflow Setup The core of this application example is the TeleControl Server Basic V3 (TCSB) in the central station. The TCSB enables a direct connection as well as crosscommunication between the S7-300 controllers. The counterpart to the TCSB is the MD720 modem which is contained in each remote station. Table 2-1 No. Module Explanation 1. Central station The central station consists of a standard Windows PC/PG with integrated Ethernet interfaces. The PC is connected with a DSL router via the Ethernet interface. Installed on the PG/PC are STEP 7 V5.5, TeleControl Server Basic V3, OPC Scout V10, and WinCC flexible. 2. Inspection Shaft station Remote station Inspection Shaft consists of an S7-300 station (CPU 315-2 PN/DP and CP 340) and an MD720 modem. CP 340 and MD720 are interconnected via the serial RS232C interfaces. Entry ID: 109475770, V1.0, 05/2015 6

2 Solution 2.2 Description of the core functionality No. Module Explanation 3. Stormwater Overflow station Remote station Stormwater Overflow consists of an S7-300 station (CPU 317-2 PN/DP and CP 341) and an MD720 modem. CP 341 and MD720 are interconnected via the serial RS232C interfaces. Advantages The solution presented here, offers you the following advantages TeleControl Server Basic V3 enables economic data communication between all remote stations, or between remote and central station respectively. S7-300 stations can be integrated into the TCSB environment. The core application areas are industrial applications where data shall be sent in a cost-efficient way, such as in waste water treatment plants, for water purification, or in pump stations. The OPC interfaces of TCSB provide the data of the connected stations to one or several connected OPC clients. GPRS and INTERNET secure short transmission times. Optimized energy demand and minimized data volume. Delimitation This application example does not contain a description of: SIMATIC NET MODEM MD720. Please refer to document \4\. SIMATIC NET TeleControl server Basic. Please refer to document \3\. SIMATIC HMI operator panels the LAD/ FBD/ STL/ SCL programming languages. Basic knowledge of these topics is assumed. Note The MSC300_Library library can only be used for S7-300 controllers. Cross-communication with stations that do not use a WDC protocol (for example, S7-1200 stations) is not possible. 2.2 Description of the core functionality 2.2.1 Realized functions The following core functions have been realized in the application example: MODEM MD720 is initialized and the GPRS connection between remote station and central station is established. Station Inspection Shaft requests data from the Stormwater Overflow station in a fixed time interval (polling). The Stormwater Overflow station responds with the requested data. Station Inspection Shaft sends data to TeleControl Server Basic in the central station in a fixed time interval. Entry ID: 109475770, V1.0, 05/2015 7

2 Solution 2.3 Overview and description of the user interface Station Stormwater Overflow sends data to the TeleControl server in the central station in a fixed time interval. The Stormwater Overflow station sends data to the Inspection Shaft station (event-triggered). The central station monitors the status of the connected remote stations. Note For a more detailed description of these functions, please refer to Chapter 3 and the following chapters. 2.3 Overview and description of the user interface The visualization of the application example is realized with WinCC flexible via two configured HMI screens TCSB Communication and Waste Water Application. TCSB Communication screen The TCSB Communication screen shows the connection with both substations. Furthermore, information on the data traffic is also given. Figure 2-2 1 4 2 5 3 6 7 Table 2-2 No. Element Note 1. Inspection Shaft Communication Status Inspection Shaft communication status information. The values are determined by TCSB itself. 2. Inspection Shaft Buffer Data received from Inspection Shaft. Maximum filling level, current filling level and Entry ID: 109475770, V1.0, 05/2015 8

2 Solution 2.3 Overview and description of the user interface No. Element Note current date 3. Initialization Inspection Shaft Clicking the buttons triggers the initialization of the inspection shaft. 4. Stormwater Overflow Communication Status Stormwater overflow communication status information. The values are determined by TCSB itself. 5. Stormwater Overflow Buffer Data received from the stormwater overflow. Maximum filling level, current filling level and current date 6. Initialization Stormwater Overflow Clicking the buttons triggers the initialization of the stormwater overflow. 7. Picture change Clicking the buttons navigates to the respective screens. Waste Water Application screen The Waste Water Application screen visualizes the processes of Inspection Shaft and Stormwater Overflow. Figure 2-3 1 6 2 7 3 8 4 5 9 Table 2-3 No. Element Note 1. Initiated This element shows whether the Inspection Shaft station has been initialized: green: initialized white: not initialized blinking green: initialization process active 2. Filling Level Filling level of the inspection shaft. The value is transferred from the Inspection Shaft station Entry ID: 109475770, V1.0, 05/2015 9

2 Solution 2.3 Overview and description of the user interface No. Element Note 3. Polling SO/ Polling Data of SO to the server. In certain time-intervals, data is requested from Stormwater Overflow. 4. Send Data to TCSB In certain time-intervals, data is transferred from Inspection Shaft to the server. 5. Warning SO Display of the filling level that exceeds the maximum value, and of the current date from Stormwater Overflow. 6. Initiated This element shows whether the Stormwater Overflow station has been initialized: green: initialized white: not initialized blinking green: initialization process active 7. Filling Level Filling level of the stormwater overflow. This value is transferred from the Stormwater Overflow station to the server and the inspection shaft. 8. Send Data to TCSB In certain time-intervals, data is transferred from Stormwater Overflow to the server. 9. Picture change Clicking the buttons navigates to the respective screens. Entry ID: 109475770, V1.0, 05/2015 10

2 Solution 2.4 Hardware and software components 2.4 Hardware and software components 2.4.1 Validity This application example is valid for TCSB V3 SP1 STEP 7 as of V5.5+ SP3 S7-300 CPUs MODEM MD720/ MD720-3 2.4.2 Components used The application was created with the following components: Hardware components Inspection Shaft Table 2-4 Component Qty Article number Note PS307 24 V/5 A 1 6ES7307-1EA00-0AA0 SIMATIC S7-300 CPU 315-2 PN/DP 1 6ES7315-2EH14-0AB0 As an alternative, a different S7-300 CPU may also be used. CP 340 1 6ES7340-1AH02-0AE0 As an alternative, a CP 341 may also be used for this purpose. MODEM MD720 1 6NH9720-3AA01-0XX0 As an alternative, an MD720-3 may also be used. Hardware components Stormwater Overflow Table 2-5 Component Qty Article number Note PS307 24 V/5 A 1 6ES7307-1EA00-0AA0 SIMATIC S7-300 CPU 317-2 PN/DP 1 6ES7317-2EK14-0AB0 As an alternative, a different S7-300 CPU may also be used. CP 341 1 6ES7341-1AH01-0AE0 As an alternative, a CP 340 may also be used for this purpose. MODEM MD720 1 6NH9720-3AA01-0XX0 As an alternative, an MD720-3 may also be used. Accessorial equipment Table 2-6 Component Qty Article number Note Cable for point-to-point connection 2 6NH7701-5AN or alternatively 6ES7902-1AB00-0AA0 1:1 cable (no null modem cable) Entry ID: 109475770, V1.0, 05/2015 11

2 Solution 2.4 Hardware and software components Component Qty Article number Note ANTENNE ANT794-4MR 2 6NH9860-1AA00 GSM Quadband and UMTS SIM card 2 Available from your cellphone provider MMC card 2 6ES7953-8LF20-0AA0 At least 64 kbytes DSL router + modem 1 Specialist retailers with port forwarding Fixed IP address for DSL (broadband) connection 1 Can be ordered at your provider Software components Table 2-7 Component Qty Article number Note STEP 7 V5.5 SP3 1 6ES7810-4CC10-0YA5 Software TCSB 8 V3 1 6NH9910-0AA21-0AA0 Number of connectable stations: 8. The product is available in further stages of development and licenses, see document \3\. Configuration package for point-to-point communication WinCC flexible 2008 + SP3 Upd1 Runtime&Configuration 1 This CD is delivered with the serial CP and contains entries for the hardware configuration of STEP 7 as well as manuals. 1 6AV6613-0AA51-3CA5 Example files and projects The following table includes all files and projects that are used in this example. Table 2-8 Component 109475770_MSC300_Application_CODE_V10.zip 109475770_MSC300_Application_DOC_V10_en.pdf Note This zip-file includes: the STEP 7/ WinCC flexible project the TCSB configuration file the OPC Scout configuration file This document. Entry ID: 109475770, V1.0, 05/2015 12

3 Mode of Operation 3.1 General overview 3 Mode of Operation 3.1 General overview The following scenarios are realized in this application example: initialization of the Inspection Shaft / Stormwater Overflow stations Inspection Shaft requests data cyclically from Stormwater Overflow Stormwater Overflow sends event-triggered data to Inspection Shaft Inspection Shaft sends data cyclically to the central station Stormwater Overflow sends data cyclically to the central station Figure 3-1 Inspection shaft Stormwater overflow 1 Init 1 Init 2 WDC_S7_300_ CP340 2 WDC_S7_300_ CP341 3 Modem initialized 3 Modem initialized 4 Send cyclic filling level request to stormwater overflow Send data (filling level, date) to TCSB Send data (filling level date) to TCSB 4 FillLevel > Max Timer Polling 5 Timer Send TCSB Timer Send TCSB 5 Send filling level to inspection shaft 6 WDC_S7_300_ CP340 6 WDC_S7_300_ CP341 7 TCSB V3 OPC Scout V10 Central station Entry ID: 109475770, V1.0, 05/2015 13

3 Mode of Operation 3.1 General overview Table 3-1 No. Inspection shaft Stormwater overflow tank 1. Modem initialization is started via the Initialization Inspection Shaft button of the TCSB Communication of the SIMATIC panel (HMI). This function can also be started via a watch table. 2. Library block WDC_S7_300_CP340 starts the modem initialization. 3. Modem initialization completed successfully. Connection with TCSB has been established. 4. A new job is triggered: send cyclic filling level request to Stormwater Overflow and / or sending the current filling level of the inspection shaft and the date cyclically to the TCSB 5. Cyclic trigger by means of timer for requesting the filling level of the stormwater overflow transferring the current filling level to the central station 6. Central library block WDC_S7_300_CP340 coordinates all send and receive jobs Modem initialization is started via the Initialization Stormwater Overflow button of the TCSB Communication of the SIMATIC panel (HMI). This function can also be started via a watch table. Library block WDC_S7_300_CP341 starts the modem initialization. Modem initialization completed successfully. Connection with TCSB has been established. A new job is triggered: sending the current filling level of the stormwater overflow and the date cyclically to the TCSB and / or comparing the current filling level with the limit value. Cyclic trigger by means of timer for transferring the current filling level to the central station Event-triggered: in the case of the filling level of the stormwater overflow exceeding the limit value, this filling level is sent to Inspection Shaft. Central library block WDC_S7_300_CP340 coordinates all send and receive jobs. 7. Data exchange between the remote stations is always performed via the central station (cross-communication). Entry ID: 109475770, V1.0, 05/2015 14

3 Mode of Operation 3.1 General overview 3.1.1 Program overview Inspection Shaft / Stormwater Overflow The program structure for both stations Inspection Shaft and Stormwater Overflow is identical. The figure below shows the most important elements. Figure 3-2 Main WDC_ Example WDC_S7_ 300_CPxx WDC_ PARAM P_RCV/ P_RCV_RK WDC_ DATA P_SEND/ P_SND_RK SFB TON User program Library block Data blocks Standard library blocks Program blocks Inspection Shaft / Stormwater Overflow Table 3-2 Element Symbolic name Description OB1 Main Cyclic OB: Calling the user program FB94 WDC_Example FB WDC_Example contains the described functions (Chapter 3.1), fully implemented already. In this block, the blocks from library MSC300_Library and the TON monitoring function are called. FB92 WDC_S7_300_CPxx Central library block of the MSC300_Library Block for communication with the TCSB and for data transfer. DB91 WDC_PARAM Global data block with the parameters for connecting to TCSB or S7-300, as well as for modem initialization (UDT_WDC_PARAM). DB2 WDC_DATA Global data block for saving the data FB2/ FB7 P_RCV/ P_RCV_RK Blocks for receiving the data from a communication partner FB3/ FB8 P_SEND/ P_SND_RK Blocks for sending a total section or subsection of a DB to a communication partner via the CPs Note A detailed description of library block WDC_S7_300_CPxx (FB92) is available in the library description. See document \5\. Entry ID: 109475770, V1.0, 05/2015 15

3 Mode of Operation 3.1 General overview 3.1.2 UDT_WDC_PARAM (UDT91) UDT91 UDT_WDC_PARAM contains all parameters which the modem requires for logging on to the GSM radio network, as well as for connecting to the TCSB. These parameters are transmitted to the modem during the initialization using the WDC_S7_300_CPxxx (FB92) block. Figure 3-3 Table 3-3 Parameter Meaning Remarks STATION_NUMBER Logic station address Defined during the configuration of the TCSB server IP_ADDRESS_CS IP address of the access point to the TCSB Fixed IP address of the router DEST_PORT_CS TCP port of the TCSB Important for port forwarding in the router MODEM_NAME MODEM_PASSWORD PIN Login name of the GPRS modem at the TCSB Login password for the GPRS modem at the TCSB PIN of the SIM card modem Defined during the configuration of the TCSB Defined during the configuration of the TCSB APN Name of the access point Depending on provider AP_USER AP_PASSWORD DNS CLIP Username to log into the internet User password to log into the internet IP address of Domain Name server Permitted phone numbers for GSM service calls Depending on provider Depending on provider Depending on provider Number intervals not admissible. Entry ID: 109475770, V1.0, 05/2015 16

3 Mode of Operation 3.1 General overview 3.1.3 Global data blocks Inspection Shaft WDC_PARAM (DB91) DB91 WDC_PARAM contains all required parameters for connecting the modem to the TCSB as well as for the control of function block FB94 WDC_Example. Figure 3-4 Table 3-4 Name Data type Description Param UDT_WDC_PARAM Data structure with information for the connection to TCSB or S7-300, as well as for modem initialization. Explanations for the parameters are available in Chapter UDT_WDC_PARAM (UDT91) Init BOOL Initialization triggered at positive edge. Polling BOOL True: starts the polling process False: terminates the polling process TimerPolling TIME Time interval of polling timer TON in minutes SendData BOOL True: starts the send process False: terminates the send process TimerSend TIME Time interval of send timer TON in minutes LAddr INT Address of the communication interface (CP340/ 341) in the station, see HW Config. Entry ID: 109475770, V1.0, 05/2015 17

3 Mode of Operation 3.1 General overview Name Data type Description Remaddr INT Logic address of the communication partner, to which the data shall be sent or received from: 0 addresses the telecontrol server. 1..8000 addresses a SIMATIC station. The logic address in TCSB is configured as parameter "station number" and must be unique. DB_No_Snd INT DB number as source for the send data to the stormwater overflow. Dat_Start_Snd INT Start index of the data received. The start index given on the page of the active connection partner applies (see Figure 3-8). Dat_Len_Snd BYTE Length of the send data to the stormwater overflow DB_No_Rec INT DB number as destination for the received data from the stormwater overflow DB_No_Centr INT DB number as source for the send data to the central station. Dat_Start_Centr INT Start index of the data received. The start index given on the page of the active connection partner (central station) applies. Dat_Len_Centr BYTE Length of the send data to the central station FillLevelMax REAL Maximum filling level of the inspection shaft Initiated BOOL Modem initialized successfully. Busy BOOL Displayed job processing for the block True: block active False: block passive Done BOOL Indicates whether the job processing was performed without any errors (for one cycle only) Error BOOL An error has occurred while processing the block (for one cycle only). Status DWORD Display of error number Both of the first bytes of the double-word are reserved. In the last byte, error information is output in the case of an error (ERROR = 1) (for one cycle only). Entry ID: 109475770, V1.0, 05/2015 18

3 Mode of Operation 3.1 General overview WDC_DATA (DB2) DB2 WDC_DATA contains the data received from the stormwater overflow as well as the send data to the TCSB. Figure 3-5 Table 3-5 Name Data type Description FillLevel_SO REAL Received filling level of the stormwater overflow OverLimitLevel REAL Received filling level of the stormwater overflow that exceeds the maximum filling level value CurrentDateTime_SO DATE_AND_TIME Current time stamp of the received filling level of the stormwater overflow CurrentDate_SO DATE Current date of the received filling level of the stormwater overflow CurrentTime_SO TIME_OF_DAY Time stamp of the received filling level of the stormwater overflow WarningDate DATE Current date of the received filling level of the stormwater overflow that exceeds the maximum filling level value WarningTime TIME_OF_DAY Time-stamp of the received filling level of the stormwater overflow that exceeds the maximum filling level value FillLevel_IS REAL Filling level of the inspection shaft CurrentDateTime_SO DATE_AND_TIME Current time stamp of the filling level of the inspection shaft to be sent CurrentDate_SO DATE Current date of the filling level of the inspection shaft to be sent CurrentTime_SO TIME_OF_DAY Current time of the filling level of the inspection shaft to be sent Entry ID: 109475770, V1.0, 05/2015 19

3 Mode of Operation 3.1 General overview 3.1.4 Global data blocks Stormwater Overflow WDC_PARAM (DB91) DB91 WDC_PARAM contains all required parameters for connecting the modem to the TCSB as well as for the control of function block FB94 WDC_Example. Figure 3-6 Table 3-6 Name Data type Description Param UDT_WDC_PARAM Data structure with information for the connection to TCSB, as well as for modem initialization. Explanations for the parameters are available in Chapter UDT_WDC_PARAM (UDT91) Init BOOL Initialization triggered at positive edge. snddatatcsb BOOL True: starts the send process False: terminates the send process TimerSend TIME Time interval of send timer TON LAddr INT Address of the communication interface (CP 340, CP 341) in the station, see HW Config. Remaddr INT Logic address of the communication partner, to which the data shall be sent or read from: 0 addresses the telecontrol server. 1..8000 addresses a SIMATIC station. The logic address in TCSB is configured as parameter "station number" and must be unique. DB_No_Snd INT DB number as source for the send data to Inspection Shaft. Entry ID: 109475770, V1.0, 05/2015 20

3 Mode of Operation 3.1 General overview Name Data type Description Dat_Start_Snd INT Start index of the data received. The start index given on the page of the active connection partner applies (see Figure 3-8). Dat_Len_Snd BYTE DB number as source for the send data to Inspection Shaft. DB_No_SndCentr INT DB number as source for the send data to the central station. Dat_Start_SndCentr INT Start index of the data received. The start index given on the page of the active connection partner (central station) applies. Dat_Len_SndCentr BYTE Length of the send data to the central station FillLevelMax REAL Maximal filling level of the stormwater overflow Initiated BOOL Modem initialized successfully. Busy BOOL Displayed job processing for the block True: block active False: block passive Done BOOL Indicates whether the job processing was performed without any errors (for one cycle only) Error BOOL An error has occurred while processing the block (for one cycle only). Status DWORD Display of the error number (for one cycle only) Both of the first bytes of the double-word are reserved. In the last byte, error information is output in the case of an error (ERROR = 1) (for one cycle only). Entry ID: 109475770, V1.0, 05/2015 21

3 Mode of Operation 3.1 General overview WDC_DATA (DB2) DB2 WDC_DATA contains the send data to the TCSB and to the inspection shaft. Figure 3-7 Table 3-7 Name Data type Description FillLevel REAL Filling level of the stormwater overflow FillLevellimit REAL Filling level of the stormwater overflow that exceeds the maximum filling level value. CurrentDateTime_SO DATE_AND_TIME Current time stamp of the filling level of the stormwater overflow to be sent 3.1.5 Data traffic between the connection partners The following figure shows the behavior for a send job. Figure 3-8 Sender (active connection partner) Receiver (passive connection partner) WDC_PARAM DB2 WDC_DATA DB2 WDC_DATA WDC_PARAM DB_No: 2 DB_Start: 0 DB_LEN: 8 Source 0.0 FillLevel Destination 0.0 FillLevel DB_No: 2 4.0 MaxFillLevel 4.0 MaxFillLevel Entry ID: 109475770, V1.0, 05/2015 22

3 Mode of Operation 3.2 Functionality Inspection Shaft 3.2 Functionality Inspection Shaft 3.2.1 Program details for FB WDC_Example (FB94) The following figure and table show the call interface of user block FB WDC_Example (FB94). Figure 3-9 Input Output Table 3-8 Name Data type Description init BOOL Initialization triggered at positive edge. polling BOOL True: starts the polling process False: terminates the polling process timerpolling TIME Time interval of polling timer TON in minutes snddatatcsb BOOL True: starts the send process False: terminates the send process timersend TIME Time interval of send timer TON Entry ID: 109475770, V1.0, 05/2015 23

3 Mode of Operation 3.2 Functionality Inspection Shaft Name Data type Description initiated BOOL Modem initialized successfully. busy BOOL Displayed job processing for the block True: block active False: block passive done BOOL Indicates whether the job processing was performed without any errors (for one cycle only) error BOOL An error has occurred while processing the block (for one cycle only). status DWORD Display of the error number (for one cycle only) Both of the first bytes of the double-word are reserved. In the last byte, error information is output in the case of an error (ERROR = 1). 3.2.2 Call FB WDC_Example (FB94) in OB1 FB WDC_Example (FB94) is called cyclically in OB1. The figure below shows the call. The input and output parameters are stored in global data block WDC_PARAM. Figure 3-10 Entry ID: 109475770, V1.0, 05/2015 24

3 Mode of Operation 3.3 Functionality Stormwater Overflow 3.3 Functionality Stormwater Overflow 3.3.1 Program details for FB WDC_Example (FB94) Figure 3-11 Input Output Table 3-9 Name Data type Description init BOOL Initialization triggered at positive edge. snddatatcsb BOOL True: starts the send process False: terminates the send process timersend TIME Time interval of send timer TON initiated BOOL Modem initialized successfully. busy BOOL Displayed job processing for the block True: block active False: block passive done BOOL Indicates whether the job processing was performed without any errors (for one cycle only) error BOOL An error has occurred while processing the block (for one cycle only). Entry ID: 109475770, V1.0, 05/2015 25

3 Mode of Operation 3.3 Functionality Stormwater Overflow Name Data type Description status DWORD Display of the error number (for one cycle only) Both of the first bytes of the double-word are reserved. In the last byte, error information is output in the case of an error (ERROR = 1). 3.3.2 Call FB WDC_Example (FB94) in OB1 FB WDC_Example (FB94) is called cyclically in OB1. The figure below shows the call. The input and output parameters are stored in global data block WDC_PARAM. Figure 3-12 Entry ID: 109475770, V1.0, 05/2015 26

3 Mode of Operation 3.4 Error and status display 3.4 Error and status display For error diagnostics, function block WDC_Example (FB94) has a STATUS output. By reading the STATUS output of the function block you receive information on: Error messages of function block WDC_Example (FB94) Error messages of the function block of library WDC_S7_300_CPxxx (FB92). See document \5\. Error messages of the user program The following table shows the error messages of function block WDC_Example. Word 1111 is reserved for function block WDC_Example. The second word gives the concrete error message. All further error messages are error messages of the function block of the library. Table 3-10 STATUS Description Remedy 16#11118101 The modem is not initialized Start initialization of the modem (Init) Entry ID: 109475770, V1.0, 05/2015 27

4 Configuration and Settings 4.1 Configuration of TeleControl Server Basic (TCSB) 4 Configuration and Settings 4.1 Configuration of TeleControl Server Basic (TCSB) Note The configuration of the TeleControl Server Basic is fully implemented in the project. This chapter is for information purposes only. Table 4-1 No. Action 1. Start the configuration and monitoring user interface of TCSB (CMT). Windows Start menu > All Programs > Siemens Automation > SIMATIC > TCS Basic > Config and Monitoring Tool. 2. After program start, the login window of the CMT opens. Enter a configured user name or keep the default user name. Assign the respective password. Enter the IP address or the telecontrol server name resolved by DNS. computer name or IP address (default IP address: 127.0.0.1) First logon: user name and password The factory settings for the user data are: User name: administrator Password: 0000 3. Create a new project: In the navigation area you select the entry "Projects". In the commands bar you click on the "Add" button. The new project appears in the navigation pane and in the object area. 4. Configure the new project: Select the project in navigation pane or object area and click on the "Settings" tab Entry ID: 109475770, V1.0, 05/2015 28

4 Configuration and Settings 4.1 Configuration of TeleControl Server Basic (TCSB) No. 5. Fill in the parameters "Project name", "Project number", Server password of the project. Action 6. Save and activate the configuration for the configuration data to become effective for establishing the connection. 7. Create a new connection: In the navigation pane you select a project for which a new connection shall be established. In the commands bar you select the connection type from the "Connection type" drop-down list. In the object area of the commands bar you click on the "Add" button. The new connection appears in the object area. 8. Save the changes and activate the project. 9. Configure the new connection: select the connection in the object area you select the Connections tab. In the parameter area various parameter groups are displayed for these connections. Entry ID: 109475770, V1.0, 05/2015 29

4 Configuration and Settings 4.1 Configuration of TeleControl Server Basic (TCSB) No. Action 10. In parameter group General you enter the following parameters: Station name Station number Telecontrol password Note: The parameters assigned here must be identical with the parameters in the STEP 7 project. 11. Configure the IP address and the ports of the telecontrol server: TCSB system > "TCM" tab > General > Address TCM 1. 12. Save the changes and activate the project. Note When creating a new TCSB project for this application example, you need to adjust the respective HMI variables in the visualization software. Entry ID: 109475770, V1.0, 05/2015 30

4 Configuration and Settings 4.2 Configuring OPC Scout V10 4.2 Configuring OPC Scout V10 The OPC server of the TCSB enables OPC clients (OPC Scout) to access the process variables of the connected stations and status information of the individual GPRS connections. The OPC server of TCSB is displayed with the name "OPC.SimaticNET.TCSB". For monitoring the OPC items, an existing connection with TCSB is assumed. Note The configuration of the OPC Scout is fully implemented in the project. This chapter is for information purposes only. Table 4-2 No. Action 13. Open the OPC Scout Windows Start menu > All Programs > Siemens Automation > SIMATIC > SIMATIC NET > OPC Scout. 14. Open the "OPC.SimaticNET.TCSB" server. 15. Open the directory DB1 of your TeleControl project OPC.SimaticNET.TCSB > Telecontrol project > Process stations > Station x > Objects > DB > DB1 16. Move any OPC items into the view area via drag & drop. Entry ID: 109475770, V1.0, 05/2015 31

4 Configuration and Settings 4.2 Configuring OPC Scout V10 No. Action 17. Define the addresses of the variables. e. g.: Address in the PLC Address for the OPC item DB2.DBB50 TCS:[Telecontrol project.station x]db1,b50 Note When creating a new OPC Scout project for this application example, you need to adjust the respective HMI variables in the visualization software. Entry ID: 109475770, V1.0, 05/2015 32

5 Installation and Commissioning 5.1 Hardware installation 5 Installation and Commissioning This chapter describes the steps necessary to install and start up the example using the hardware list and the code from the download. 5.1 Hardware installation The required hardware components are listed from Chapter 2.4 onward. Note Always follow the installation guidelines for all components. NOTICE Before you switch on the power supply, complete and check the installation! Hardware configuration Inspection Shaft / Stormwater Overflow The figure below shows the hardware configuration of the S7-300 stations Inspection Shaft / Stormwater Overflow. Figure 5-1 PS307 CPU 315/ 317-2 PN/DP CP 340/ CP 341 MD720 Engineering Station 24 V PROFINET IE Table 5-1 No. Action 1. Connect the individual modules to a suitable module rack. 2. Use a backplane bus connector to connect CPU and CP. 3. Connect the serial cable to the CP. 4. Connect the serial cable to the interface at the MD720. 5. Connect the engineering PG to the PROFINET interface of the S7-CPU. 6. Connect all respective components to a 24 V direct current source (PS307). 7. Connect the PS307 to the power grid (220 / 230 V AC). Take note of correct polarity. Entry ID: 109475770, V1.0, 05/2015 33

5 Installation and Commissioning 5.2 Installing the software Note Further information on commissioning the MD720 is available in the manual of device \4\. Hardware central station The figure below shows the hardware configuration of the central station. Figure 5-2 PG / PC DSL Router TCSB TeleControl Server Basic V3 Internet (DSL line) Table 5-2 No. Industrial Ethernet Action 1. Connect your PC on which TeleControl Server Basic runs to the router via Ethernet. 2. If the DSL (broadband) modem has not been integrated in the router, connect the router at the DSL modem. 5.2 Installing the software Engineering PC/ PG Table 5-3 No. Action Remarks 1. Install STEP 7 V5.5 + SP3 Follow the instructions of the installation 2. Install WinCC flexible 2008 + SP3 program. Upd1 3. Install the configuration package for point-to-point communication This CD is included in the delivery of the serial CPs and contains entries for the STEP 7 hardware configuration and manuals. PC/ PG as central station Table 5-4 No. Action Remarks 1. Install TeleControl Server Basic V3 SP1 2. Install OPC Scout V10 Follow the instructions of the installation program. Entry ID: 109475770, V1.0, 05/2015 34

5 Installation and Commissioning 5.3 Installation of the application software 5.3 Installation of the application software Unzip the file 109475770_MSC300_Application_CODE_V10.zip. This folder contains: Archived STEP 7 project 109475770_MSC300_Application_PR_V10.zip : inspection shaft project Inspection_Shaft stormwater overflow project Stormwater_Overflow WinCC flexible project Waste Water Application TCSB configuration file "109475770_TCSB_V3.bak" OPC Scout configuration file 109475770_OPC_TCSB.opf 5.4 Commissioning 5.4.1 Setting the IP addresses NOTICE When assigning the IP addresses of your devices please ensure that they are all located in the same subnet and each IP is only assigned once across the subnets. The following table shows the configured IP addresses: Table 5-5 Module IP address CPU 315-2 PN/DP 192.168.0.1 CPU 317-2 PN/DP 192.168.0.2 Engineering PG/PC 192.168.0.5 SIMATIC Basic Panel KTP1000 192.168.0.3 PC/ PG central station 172.16.41.100 5.4.2 Changing the IP addresses of the PC/PG The table below shows the network setting to which you have to change the PC/PG: Table 5-6 No. Action 1. Open the Internet Protocol (TCP/IP) Properties by selecting Start > Settings > Network Connections > Local Connections Start > Settings > Network Connection >Local Connections. 2. In the open window, select Internet Protocol (TCP/IP) and open Properties. Entry ID: 109475770, V1.0, 05/2015 35

5 Installation and Commissioning 5.4 Commissioning No. Action 3. Select the option box Use following IP address and fill in the box as shown in the picture. Close the dialog boxes with OK. 4. If your PG has an IWLAN interface, switch it off. 5.4.3 Change the IP address of the CPU Before you can load the STEP 7 projects, the IP addresses of the S7-300 CPUs used for loading the projects into the CPUs must be changed. Note The IP addresses configured for the S7-300 CPUs in STEP 7 V5.5 must be located in the same subnet as the IP address set in Windows. Options for assigning IP addresses Apart from the known address assignment via the "General" and "Parameter" tabs of the PN-IO interface, there are three further options for assigning IP addresses Assignment via the user program. Assignment via the menu command: PLC > Ethernet > Edit Ethernet Node. Assignment when downloading the configuration into the destination PLC via the "Select Node Address" dialog. 5.4.4 Configuring the DSL router Table 5-7 For the configuration, no specific router is discussed as the screen forms differ from router to router. Most routers have a Web page for the configuration. For the configuration of the router you must assign an IP address to your PG/PC which is located in the same network as your router. No. Action Remarks / Notes 1. Open the configuration user interface of the router. 2. Enter the connection data for your Internet connection. This can be additional software, Telnet or a Web page. Login, password, etc. you received from your provider. 3. Switch off the DynDNS server. Your internet access has a fixed IP address. 4. Enter your DNS server. You will receive the address together with your access data. Entry ID: 109475770, V1.0, 05/2015 36

5 Installation and Commissioning 5.4 Commissioning 5.4.5 Setting the transmission speed of the MD720 In this project, the transmission speed on the CPs is always set to 9600 bits/s. CP and MD720 must support the same transmission speed. The speed at the MD720 is modified using a terminal program. Table 5-8 No. Action 1. Connect a PC to the serial interface of the MD720. 2. Start a terminal program, for example HyperTerminal. 3. Select the appropriate COM interface. 4. Set the character format and baud rate to the same values as the serial interface of the MD720. The factory settings of the MD720 are as follows: Baud rate: 19200 bits/s Character format: 8N1. The baud rate is changed via AT command AT+IPR=<baud rate>. Enter this command in the terminal program and press the return key. Note The modem is only accessed by AT commands when it is in the command phase. If this is not the case, the modem must be reset to factory settings \4\. Entry ID: 109475770, V1.0, 05/2015 37

5 Installation and Commissioning 5.4 Commissioning 5.4.6 Configuring the serial CPs (CP 340 and CP 341) In this example, the serial CP uses the ASCII driver for the interface. This allows sending or receiving AT commands and mere text code to or from a communications partner via the interface. The properties of the ASCII driver are to be as follows: Transmission speed 9600 bits/s Data bits: 8 Stop bits: 1 No parity check (none) Table 5-9 No. 1. In the hardware configuration, doubleclick on the CP. The Properties dialog box of the module opens. Action Press the Parameter button in this dialog box. 2. In this dialog box, you can define the protocol of the CP. In the drop-down list, select ASCII. Then double-click on the Protocol envelope to define the properties for the selected protocol. 3. The properties of the ASCII driver are to be as follows: Transmission rate Transmission speed 9600 bits/s Data bits 8 Stop bits 1 No parity check (none) 4. Confirm all dialog boxes with OK. Then recompile the hardware configuration. Station > Save and Compile Entry ID: 109475770, V1.0, 05/2015 38

5 Installation and Commissioning 5.4 Commissioning 5.4.7 Including the backup copy of database "109475770_TCSB_V3.bak" into TCSBV3 Table 5-10 No. Action 1. Save and activate all projects in the CMT and close the CMT. 2. Start SQL Server Management Studio as administrator: "Start > All Programs > Microsoft SQL Server 2008 R2 > SQL Server Management Studio". The "Connect to server" dialog opens with the following settings: Server type: Database Engine Server name: <PC name>\tcsb Authentication: Windows Authentication 3. Keep all settings and click on "Connect". The SQL Server Management Studio opens with the object navigation of the database. 4. Select the "Databases" entry. 5. Select the context menu (right mouse button) "Restore Databases...". The "Restore Database - TCSB" dialog opens. 6. In the "Destination for restore" field you select database ("To database") "TCSB". 7. In the "Source for restore" field you activate the option ("From device") and open the "Specify Backup" dialog via the "..." button. 8. Select backup copy "109475770_TCSB_V3.bak" by first opening file browser via the "Add" button. 9. In the "Restore Database - TCSB" dialog you select the selected backup set in the "Restore" column and click on "OK". 10. Close Management Studio via "OK". 11. Restart the computer. 5.4.8 Configuring IP address and ports of TeleControl Server Basic V3 Table 5-11 No. Action 1. Start the configuration and monitoring user interface of TCSB (CMT) Windows Start menu > All Programs > Siemens Automation > SIMATIC > TCS Basic > Config and Monitoring Tool. 2. After program start, the login window of the CMT opens. Entry ID: 109475770, V1.0, 05/2015 39

5 Installation and Commissioning 5.4 Commissioning No. Action User name: administrator Password: administrator Enter the IP address or the telecontrol server name resolved by DNS. computer name or IP address (default IP address: 127.0.0.1) 3. Configure the IP address and the ports of the telecontrol server: TCSB system > "TCM" tab > General > Address TCM 1. 4. Save the changes and activate the project. Note It is recommended to activate station monitoring for each station in order to check the accessibility. "CMT > Station > Configure connection> Cyclic services" Cycle time: 15 min Activate Station data and time-of-day synchronization. Activating the synchronization may produce additional costs. Entry ID: 109475770, V1.0, 05/2015 40

5 Installation and Commissioning 5.4 Commissioning 5.4.9 Opening the OPC Scout configuration file 109475770_OPC_TCSB.opf To monitor the process data at the central station you need to open the OPC Scout configuration file 109475770_OPC_TCSB.opf included in the project. Table 5-12 No. Action 1. Open the OPC Scout Windows Start menu > All Programs > Siemens Automation > SIMATIC > SIMATIC NET > OPC Scout. 2. Open the 109475770_OPC_TCSB.opf file File > Open 3. Open the "OPC.SimaticNET.TCSB" server. Entry ID: 109475770, V1.0, 05/2015 41

5 Installation and Commissioning 5.4 Commissioning 5.4.10 Loading the STEP 7 V5.5 project 109475770_MSC300_Application_PR_V10.zip Requirements An existing connection between your PG and the CPU of the destination PLC (for example, via the PROFINET interface). Access to the destination PLC is possible. The CPU must be in an operating state that allows loading (STOP or RUNP). Prior to loading the user program, a general reset of the CPU should be performed to ensure that none of the "old" blocks still exist on the CPU. Table 5-13 No. Action 1. Open the SIMATIC MANAGER and retrieve the STEP 7 project 109475770_MSC300_Application_PR_V10.zip File > Retrieve... 2. The project is now available in User projects. 3. Then select the S7 station and load the entire project into your CPU. PLC > Download or Entry ID: 109475770, V1.0, 05/2015 42

6 Operating the Application 6.1 Overview 6 Operating the Application 6.1 Overview 6.1.1 Menu navigation of the HMI The visualization of the application is realized with WinCC flexible via two configured HMI screens TCSB Communication and Waste Water Application. Figure 6-1 Main menu Main menu TCSB Communication Waste Water Application The application example can be opened via the main menu and toggled between TCSB Communication and Waste Water Application. TCSB Communication screen The TCSB Communication screen shows the status of the connection with the remote stations. Furthermore, information on the data traffic is also given. Toggling between main menu and Waste Water Application is possible. Waste Water Application screen The Waste Water Application screen visualizes the processes of Inspection Shaft and Stormwater Overflow. Toggling between main menu and TCSB Communication is possible. Entry ID: 109475770, V1.0, 05/2015 43

6 Operating the Application 6.1 Overview 6.1.2 Watch table of the Inspection Shaft station As an alternative to the HMI, the "VAT_WDC" table can be used for monitoring or controlling the variables of DB WDC_DATA (DB2) and DB WDC_PARAM (DB91). Figure 6-2 6.1.3 Watch table of the Stormwater Overflow station As an alternative to the HMI, the "VAT_WDC" table can be used for monitoring or controlling the variables of DB WDC_DATA (DB2) and DB WDC_PARAM (DB91). Figure 6-3 Entry ID: 109475770, V1.0, 05/2015 44

6 Operating the Application 6.2 Initializing the stations Inspection Shaft and Stormwater Overflow 6.2 Initializing the stations Inspection Shaft and Stormwater Overflow An instruction for initializing the modem of each station is available in the following table. The TCSB Communication screen is used here. Table 6-1 No. Action 1. In the SIMATIC MANAGER you open DB WDC_PARAM (DB91) of station Inspection_Shaft, or Stormwater _Overflow respectively. 2. Open the data view of DB WDC_PARAM. 3. Enter the parameters most important for the initialization. The parameters Param.APN_USER and Param.APN_PASSWORD must not be empty strings. Entry ID: 109475770, V1.0, 05/2015 45

6 Operating the Application 6.2 Initializing the stations Inspection Shaft and Stormwater Overflow No. Action 4. Start the WinCC flexible simulation. 5. Open the TCSB Communication screen 6. Click on the button Initialization Inspection Shaft, or Initialization Stormwater Overflow respectively. 7. A completed initialization is indicated by the green signal at Initiated on the Waste Water Application screen. Entry ID: 109475770, V1.0, 05/2015 46

6 Operating the Application 6.3 Inspection Shaft requests data cyclically from Stormwater Overflow (polling) 6.3 Inspection Shaft requests data cyclically from Stormwater Overflow (polling) The Inspection Shaft station sends filling level requests cyclically (polling) to Stormwater Overflow. An instruction for polling is given in the following table. The Waste Water Application screen is used here. Note The MODEM must be initialized and a GPRS connection be established between remote station and central station (see Chapter 6.2). Only then can you start with this scenario. Table 6-2 No. Action 1. Open the Waste Water Application screen. 2. Enter a filling level value in Stormwater Overflow. Entry ID: 109475770, V1.0, 05/2015 47

6 Operating the Application 6.3 Inspection Shaft requests data cyclically from Stormwater Overflow (polling) No. Action 3. Enter the time interval for polling into the Timer input fields. 4. Click on the Activate Polling button 5. After a minute, the data (filling level and current date) is saved in the Inspection Shaft buffer. Entry ID: 109475770, V1.0, 05/2015 48

6 Operating the Application 6.4 Stormwater Overflow sends data to Inspection Shaft 6.4 Stormwater Overflow sends data to Inspection Shaft If the filling level of the stormwater overflow exceeds a maximum value, filling level and current date are sent to Inspection Shaft. An instruction for this job is given in the following table. The Waste Water Application screen is used here. Table 6-3 No. Action 1. Open the Waste Water Application screen. 2. Enter a filling level value in Stormwater Overflow which exceeds the maximal value. Entry ID: 109475770, V1.0, 05/2015 49

6 Operating the Application 6.4 Stormwater Overflow sends data to Inspection Shaft No. Action Note: In this application the maximal value is 25% (see HMI screen TCSB Communication ). These values can be changed as desired. 3. Filling level and current date are sent to Inspection Shaft and saved in the Warning buffer. Entry ID: 109475770, V1.0, 05/2015 50

6 Operating the Application 6.5 Inspection Shaft sends data to the central station 6.5 Inspection Shaft sends data to the central station An instruction for this job is given in the following table. The Waste Water Application screen is used here. Table 6-4 No. Action 1. Open the Waste Water Application screen. 2. Enter a filling level value in Inspection Shaft. Entry ID: 109475770, V1.0, 05/2015 51

6 Operating the Application 6.5 Inspection Shaft sends data to the central station No. Action 3. In the Timer input fields you enter the time interval for sending to the TCSB. 4. Click on the Activate Send button 5. Go the TCSB Communication screen. After a minute, the data (filling level and current date) are saved in the TCSB. The data can also be monitored with OPC Scout V10 via Monitoring ON. Entry ID: 109475770, V1.0, 05/2015 52

6 Operating the Application 6.6 Stormwater Overflow sends data to the central station 6.6 Stormwater Overflow sends data to the central station An instruction for this job is given in the following table. The Waste Water Application screen is used here. Table 6-5 No. Action 1. Open the Waste Water Application screen. 2. Enter a filling level value in Stormwater Overflow. Entry ID: 109475770, V1.0, 05/2015 53

6 Operating the Application 6.6 Stormwater Overflow sends data to the central station No. Action 3. In the Timer input fields you enter the time interval for sending to the TCSB. 4. Click on the Activate Send button 5. Go the TCSB Communication screen. After a minute, the data (filling level and current date) are saved in the TCSB. The data can also be monitored with OPC Scout V10 via Monitoring ON. Entry ID: 109475770, V1.0, 05/2015 54