TS Gateway ___________________ Preface 1 ___________________ Application and properties SIMATIC NET Industrial Remote Communication TeleService TS Gateway Operating Instructions Version V3 09/2014 C79000-G8976-C380-01 Installation, commissioning 2 ___________________ and operation 3 ___________________ Configuration Examples of the configuration data of SMS gateway providers A ___________ B ___________________ Documentation references Legal information Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger. DANGER indicates that death or severe personal injury will result if proper precautions are not taken. WARNING indicates that death or severe personal injury may result if proper precautions are not taken. CAUTION indicates that minor personal injury can result if proper precautions are not taken. NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage. Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems. Proper use of Siemens products Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed. Trademarks All names identified by (R) are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner. Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions. Siemens AG Industry Sector Postfach 48 48 90026 NURNBERG GERMANY C79000-G8976-C380-01 09/2014 Subject to change Copyright (c) Siemens AG 2014. All rights reserved Preface Purpose of the manual This manual supports you during the configuration, installation, commissioning and operation of the TS Gateway application. Validity of this manual This manual applies to the following software versions: TS Gateway - Version V3.0 Abbreviations/acronyms Mobile wireless CP CPs to connect the S7-1200 to a mobile wireless network, for example CP 1242-7 TCSB TeleControl Server Basic as of Version V3 CMT Configuration and Monitoring Tool: Program user interface of TS Gateway New in this release First issue TS Gateway (version V3) is the successor to TS Gateway (version V2). TS Gateway V3 supports 2 connection resources to a TeleService server at the same time per station. In an existing TeleService session, a second connection resource of the engineering station is used to load the project data. You will find detailed information about the functions in the section Application and properties (Page 9). Replaced documentation None Required experience To be able to configure and operate the system described in this document, you require experience of the following products, systems and technologies: SIMATIC S7 SIMATIC NET / TeleControl TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 3 Preface STEP 7 Basic / Professional IP-based communication You will find further reading in the References in this manual. Further information on the Internet You will find further information on the Siemens telecontrol products such as the latest information, manuals, FAQs or software updates on the Internet on the pages of Siemens Industry Online Support under the following entry ID: 89330723 (http://support.automation.siemens.com/WW/view/en/89330723) There select the required information under "Entry type" (for example "Updates", "Manuals", "FAQs" etc.) TeleService example of an application on the Internet An example of an application for TeleService access from an engineering station via the Internet to an S7 station with a mobile wireless CP can be found on the Internet on the pages of Siemens Automation Customer Support under the following entry ID: 56720905 (http://support.automation.siemens.com/WW/view/en/56720905) License conditions Note Open source software Read the license conditions for open source software carefully before using the product. You will find license conditions in the following documents on the supplied data medium: DOC_OSS-S7CMCP_74.pdf DOC_OSS-TSGW-V3_76.pdf SIMATIC NET glossary Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary. You will find the SIMATIC NET glossary here: SIMATIC NET Manual Collection or product DVD The DVD ships with certain SIMATIC NET products. On the Internet under the following entry ID: 50305045 (http://support.automation.siemens.com/WW/view/en/50305045) TS Gateway 4 Operating Instructions, 09/2014, C79000-G8976-C380-01 Preface Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates. For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. For more information about industrial security, visit http://www.siemens.com/industrialsecurity. To stay informed about product updates as they occur, sign up for a product-specific newsletter. For more information, visit http://support.automation.siemens.com. Training, Service & Support You will find information on Training, Service & Support in the multi--language document "DC_support_99.pdf" on the data medium supplied with the documentation. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 5 Preface TS Gateway 6 Operating Instructions, 09/2014, C79000-G8976-C380-01 Table of contents Preface................................................................................................................................... 3 1 2 3 Application and properties.......................................................................................................... 9 1.1 Properties............................................................................................................................ 9 1.2 Subcomponents of TS Gateway ........................................................................................ 12 1.3 Configuration examples ..................................................................................................... 12 Installation, commissioning and operation....................................................................................15 2.1 Compatible operating systems for the application .............................................................. 15 2.2 Installation of the software ................................................................................................. 15 2.3 Changing port and network settings ................................................................................... 18 2.4 Installation of two TeleService gateways............................................................................ 19 2.5 Wake-up SMS for the CP 1242-7 (firmware V1.x) .............................................................. 19 2.6 Overview of the passwords ................................................................................................ 20 Configuration ..........................................................................................................................21 3.1 The Configuration and Monitoring Tool (CMT) ................................................................... 21 3.2 3.2.1 3.2.2 3.2.3 3.2.4 3.2.5 Windows and buttons of the CMT ...................................................................................... 22 Window layout and Editing................................................................................................. 22 The buttons of the CMT ..................................................................................................... 24 Menu bar........................................................................................................................... 25 Individual adaptation of the window ................................................................................... 25 Online help ........................................................................................................................ 26 3.3 Starting CMT - changing passwords .................................................................................. 26 3.4 Creating and configuring projects ...................................................................................... 29 3.5 Setting up an administrator ................................................................................................ 32 3.6 TCSB system .................................................................................................................... 33 3.7 Changing port settings....................................................................................................... 37 3.8 Configuring SMS gateway providers .................................................................................. 37 3.9 SMTP server ..................................................................................................................... 40 A Examples of the configuration data of SMS gateway providers ........................................................41 B Documentation references ........................................................................................................43 B.1 /1/...................................................................................................................................... 43 B.2 /2/...................................................................................................................................... 44 B.3 /3/...................................................................................................................................... 44 Index .....................................................................................................................................45 TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 7 Table of contents TS Gateway 8 Operating Instructions, 09/2014, C79000-G8976-C380-01 Application and properties 1.1 1 Properties Use of TS Gateway TS Gateway is an application used for TeleService connections via the mobile wireless network with remote SIMATIC stations of the type S7-1200 with a mobile wireless CP. What is a TeleService gateway? A TeleService gateway is a PC on which the "TS Gateway" software is installed. The TeleService gateway is not configured in STEP 7. What functions does the TeleService gateway provide? The TeleService gateway has the following functions: Switching station The TeleService gateway is a PC in the network that serves as the intermediary between the engineering station and remote S7 station. Since a firewall is normally closed for connection requests from the outside, a switching station between the remote station and the engineering station is required. This switching station can be a telecontrol server or, if there is no telecontrol server in the configuration, a TeleService gateway. The switching station directs the messages via a tunnel through the firewall. This allows access by the engineering station connected to a LAN to the S71200 via a router and via the APN of the network provider. Configuration of the SMS gateway provider With the help of TS Gateway, SMS gateway providers are configured that are necessary for the sending of an SMS message to the remote S7 stations. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 9 Application and properties 1.1 Properties Configuration with TeleService gateway A TeleService gateway is intended for the following telecontrol systems in which TeleService is used via a mobile wireless network: Configurations without a telecontrol server In configurations without a telecontrol server, a TeleService gateway is required for TeleService via the mobile wireless network. Configurations with telecontrol server In configurations in which a second path needs to be established for TeleService via the mobile wireless network alongside the telecontrol server, a TeleService gateway can be used. This can, for example, be the case when certain people, groups or companies should not operate TeleService via the telecontrol server or when access to the stations for TeleService needs to be set up independent of the telecontrol server. Range of performance of a TS Gateway Number of simultaneous TeleService connections in total: 1 Note TS Gateway only for TeleService TS Gateway is used only for the "TeleService" function via the mobile wireless network. No connections to the remote stations can be monitored and no process data can be transferred. First and second TeleService gateway If the requirements for availability are higher, you can install TS Gateway on two independent computers. If the connection cannot be established via the first gateway, you can establish the TeleService connection via the second TeleService gateway. The two systems are independent of each other and in terms of the range of functions identical. TS Gateway 10 Operating Instructions, 09/2014, C79000-G8976-C380-01 Application and properties 1.1 Properties Requirements for TeleService with the TeleService gateway The following requirements must be met for TeleService via a TeleService gateway: Engineering station connected to a LAN or with Internet access TeleService using the mobile wireless network is possible on an engineering station with the STEP 7 project that contains the remote station with the mobile wireless CP. STEP 7 version required for TeleService via the mobile wireless network: V13.x PC for the TeleService gateway with: - DVD drive - Connection to LAN or Internet access for connecting to the engineering station - Internet access for connecting to the remote S7 station - Installation of the "TS Gateway" application The software ships with the mobile wireless CP (see product DVD). TeleService for S7-1200 with mobile wireless CP The TeleService functions for the mobile wireless CP are described in the manual of the CP, refer to /2/ (Page 44), and in the online help of STEP 7. TCSB or a TeleService gateway automatically makes 1 access point available for TeleService per project. This means that up to 1 TeleService user can access the stations of a project. An engineering station is required for each TeleService connection. Per station, 1 TeleService session is possible. In an existing TeleService session, a second connection resource of the engineering station is used to load the project data. Monitoring times when establishing TeleService connections When a TeleService connection is established, the following monitoring times are used: Establish TeleService connection but no online connection: An interrupted connection is detected after 1 minute. Disconnection of a TeleService connection: - Follow-up time of approx. 5 minutes Within the follow-up time, the connection between the telecontrol server / TeleService gateway and CP is maintained. If a new TeleService connection is established during the follow-up time, no new wake-up SMS is sent to the station. If a TeleService connection aborts, a new TeleService connection is not established automatically. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 11 Application and properties 1.2 Subcomponents of TS Gateway 1.2 Subcomponents of TS Gateway Main components of the application TS Gateway is made up of the following main components: Telecontrol Manager (TCM) The Telecontrol Manager manages the connections with communications partners. This is the communications center of all connected software components in the PC side and the process side. It controls the frames between the sender and destination address and has the logical connection information and configuration information. The Telecontrol Manager is not visible to the user. The configuration of the access data is created using the CMT (see below). Database The database stores the configuration data and system messages. The database is not visible to the user. The user interface to the database is CMT (see below). The database has separate areas for the offline configuration data and for the online configuration data of the runtime system. With the Enable function in CMT, the configuration data is shifted from the offline to the online area of the runtime system. Configuration and Monitoring Tool (CMT) The CMT is the program user interface for setting up and configuring the system. 1.3 Configuration examples With an S7-1200 with a mobile wireless CP, a TeleService connection runs via the Internet and the mobile wireless network. The following figures show the typical configurations for the use of the TeleService gateway. TS Gateway 12 Operating Instructions, 09/2014, C79000-G8976-C380-01 Application and properties 1.3 Configuration examples Installation of TS Gateway on the computer of the engineering station Figure 1-1 Installation of TS Gateway on the computer of the engineering station In this case, the "TS Gateway" application is installed on the engineering Station. Installation of TS Gateway on a separate computer Figure 1-2 Installation of TS Gateway on a separate computer TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 13 Application and properties 1.3 Configuration examples In this case, the "TS Gateway" application is not installed on the engineering Station but on a separate computer. The engineering station and TeleService gateway are connected via an Intranet. TeleService via a local or a remote engineering station Figure 1-3 TeleService via a local or a remote engineering station As an alternative, TeleService can be operated from two engineering stations: A central engineering station connected to the TeleService gateway via an intranet. The connection between the engineering station and S7 station is via the TeleService gateway, the Internet and the mobile wireless network. A remote engineering station connected to the TeleService gateway via the Internet. The connection between the engineering station and S7 station is via the Internet to the TeleService gateway and from there further via the Internet and the mobile wireless network. Simultaneous access by both engineering stations to the same mobile wireless CP is not possible. TS Gateway 14 Operating Instructions, 09/2014, C79000-G8976-C380-01 Installation, commissioning and operation 2.1 2 Compatible operating systems for the application Compatible operating systems the application can run on a PC with one of the following operating systems: Single installation Microsoft Windows 7 Professional 32/64-bit + Service Pack 1 Microsoft Windows 7 Enterprise 32/64-bit + Service Pack 1 Microsoft Windows Embedded 7 32-bit Microsoft Windows Server 2008 32-bit + Service Pack 2 For this operating system, you require Windows PowerShell. Microsoft Windows Server 2008 R2 64-bit + Service Pack 1 2.2 Installation of the software Firewall settings (ports) Just as with any computer connected to the Internet or to another IP network, the TeleService gateway should be protected at least by the firewall of the operating system and/or the connected router against attacks from the connected network. Remember that during installation of the system, several ports need to be opened and other changes need to be made in your system. These settings are displayed during installation. You can print these settings during the installation or save them in a log file. Note Response to a deactivated firewall If the firewall is deactivated during installation, the necessary incoming and outgoing rules will not be created. In this case, no warning is output. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 15 Installation, commissioning and operation 2.2 Installation of the software Commissioning the TeleService gateway 1. Set up the PC according to the documentation that ships with the PC. 2. Connect up the following connectors on the PC: - Monitor, keyboard, mouse - Power supply - Local area network if the engineering station is connected via a LAN. - Internet Note the information from the network provider and the manufacturer of the router 3. Turn on the PC. 4. Set up the following access: - Local LAN connection - Internet access 5. Insert the product DVD that ships with the CP in the DVD drive. 6. In the file management of the PC, an open the DVD root directory > folder "TS Gateway". 7. Start the installation by double clicking on the "setup.exe" file. The installation of the software begins automatically. A wizard guides you through the remaining steps in installation. Figure 2-1 Section of the window of the installation wizard of TS Gateway 8. Enable the two options "TeleService Gateway V3.x" and "SQL Server 2008 Express" and click "Next". During the installation, the "Database settings and certificates" dialog opens in which you make the settings for the database, refer to the following section. "Database settings and certificates" dialog In this dialog, you configure the following: Database password Use of an existing database of TS Gateway V2 / TCSB V2 if available If an older version V2 is installed on your computer, you have the option of using your previous data. TS Gateway 16 Operating Instructions, 09/2014, C79000-G8976-C380-01 Installation, commissioning and operation 2.2 Installation of the software Figure 2-2 "Database settings and certificates" dialog Database password In the "Assign a password for your database:" box, Assign the database password for later access to the database of TS Gateway to be installed. Note Note down the database password You only require this password if you want to access the database using Microsoft tools. You do not require the password for any activities in the system. Import a TCSB V2 database If there is already a version V2 of the gateway on your computer, you have the option of continuing to use the data of your existing system. To do this, continue to use the database of the TeleService gateway V2. You control this during the installation in the "Import a TCSB database V2" box. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 17 Installation, commissioning and operation 2.3 Changing port and network settings In the "Import a TCSB V2 database" box, specify the use of the database using the following options: Do not import database When the option is selected, you install the new database of the TS Gateway V3 / TCSB V3 system. By doing this you specify that a new empty system will be created. Existing data of an older system can no longer be used. Select the storage location of the file "Smsc.sqlite". If the option is selected, you continue to use your previous SQLITE database of the V2 system. The preset path of the database in the file directory is displayed in the input box. If you have moved your database to another location, you will need to enter the correct path in the input box. When all the options in the dialog are correctly set, confirm the dialog with OK. The installation is continued and completed. 2.3 Changing port and network settings Network settings To ensure that the system operates correctly, the following settings must be made: 1. Open the following dialog in the Control Panel of the TS Gateway computer: "Network and Internet" > "Network and Sharing Center" > "Advanced sharing settings" 2. Turn on "Network discovery" for both networks "Home or Work" and "Public". Opening changed ports If you change port numbers, you will need to open the ports used in the router or using the functions of the operating system. Below you will find the ports of TS Gateway along with their significance and the default numbers: Listener port for stations of the type S7-1200 + mobile wireless CP The port must be opened for communication with the engineering station and with remote stations of the type S7-1200 with a mobile wireless CP. Default port number: 55097 Port of the database server Port of the database server for TCP connections with CMT client PCs Default port number: 26865 You can change the default port numbers in the CMT, refer to section TCSB system (Page 33) > "Listener ports". TS Gateway 18 Operating Instructions, 09/2014, C79000-G8976-C380-01 Installation, commissioning and operation 2.4 Installation of two TeleService gateways 2.4 Installation of two TeleService gateways Installation of two TeleService gateways If you install TS Gateway on two computers, two parallel systems of TS Gateway are installed that are independent of each other. In terms of the range of functions, both systems are identical and do not monitor each other. Configuration Make sure that the configuration of both systems is consistent, especially the configuration of the projects. 2.5 Wake-up SMS for the CP 1242-7 (firmware V1.x) Wake-up SMS Waking the station by a TeleService gateway is achieved by sending an e-mail. The e-mail is sent to an SMS gateway via an SMTP server. The SMS gateway converts the e-mail into an SMS message and transfers this to the station. The SMS gateway is configured in the CMT of the TeleService gateway, refer to the section Configuring SMS gateway providers (Page 37). If the wake-up SMS message is sent from a phone, the number of the phone must be authorized in the STEP 7 configuration of the receiving CP (refer to "Authorized phone numbers"). The telephone must support the CLIP function (transfer of its own call number) and the sending of SMS messages. The wake-up SMS message is not send extra when a TeleService connection is established, it is generated automatically by the TeleService gateway. Depending on the switching TeleService gateway, the following text must be transferred in the wake-up SMS: Text for the wake-up SMS message for establishing a connection via the first TeleService gateway (TeleService server): TELESERVICE or TELESERVICE 1 Text for the wake-up SMS message for establishing a connection via the second TeleService gateway (TeleService server) - if it exists: TELESERVICE 2 You configure the TeleService server in STEP 7 in the "TeleService settings" parameter group of the mobile wireless CP. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 19 Installation, commissioning and operation 2.6 Overview of the passwords 2.6 Overview of the passwords Overview of the passwords used during operation Below, you will find an overview of the passwords used on the TeleService gateway. No. Password Password configuration in ... Password entry in ... Function Administrator password CMT of the TeleService gateway CMT (at startup) Protection of the TeleService gateway from unauthorized access TeleService password CP (per station in STEP 7) STEP 7 (TeleService startup) Protection from access to the CP in TeleService Server password STEP 7 (TeleService startup) Protection from access to the TeleService gateway in TeleService Figure 2-3 Per project in CMT (TCSB only) Overview of the passwords used. The numbers correspond to those in the table. Other passwords required by the mobile wireless, SMTP server or SMS gateway providers or when installing the database are not listed here. TS Gateway 20 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.1 3 The Configuration and Monitoring Tool (CMT) The Configuration and Monitoring Tool (CMT) The Configuration and Monitoring Tool (CMT) is the programm user interface of TS Gateway and is used to configure the following parameters and settings: System of the TeleService gateway - Address data of the gateway and port numbers - Authorized phone number for connections to the CPs Projects (optional) If you have configured different projects with different server passwords for the telecontrol server, you must create projects with the same name in the CMT of the gateway. SMS gateway provider SMTP server Functions not supported The CMT of TS Gateway is a special form of the CMT of the "TeleControl Server Basic" (TCSB) software. This contains several functions that are not supported by the CMT of the TS Gateway application. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 21 Configuration 3.2 Windows and buttons of the CMT 3.2 Windows and buttons of the CMT 3.2.1 Window layout and Editing Layout of the user interface The program user interface of the CMT is divided into the following areas: Figure 3-1 Window layout of the CMT The subareas have the following functions: No. Area / subarea Function Title bar Display of the name of the program Menu bar Contains the menus System navigation Shows the structure of the parameter groups: Projects, users (administrator), system, SMS gateway provider, SMTP server The individual objects of the selected parameter group are displayed in the object area. TS Gateway 22 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.2 Windows and buttons of the CMT No. Area / subarea Function Object area Depending on the entry selected in the system navigation, the following content is displayed: * Projects and their parameters * Administrator * System parameters * SMS gateway provider, SMTP server Command bar Contains buttons for functions in the context of the particular object area Parameter area Shows the parameters of the object selected in the object area. Message window Displays the accumulated system messages. The window is opened using the "View" > "Messages" menu and is closed again using the 'X' icon at the top right. Status bar Shows the connection status of CMT and the logged in users. Parameter area - Editing objects The parameter area shows the parameters of the object selected in the object area. The individual parameters are described in the sections that follow. The following applies generally: The displayed parameters depend on the object selected in the object area. As default, all the parameter boxes are grayed out and cannot be edited. To be able to edit permitted boxes, prior to editing, the "Edit" button (see below) must be enabled. The configuration must be consistent (for example the SMS number of a station must not be assigned more than once). If an input box is intended only for certain types of character, other types of character will be rejected. Example: Letters cannot be entered in input boxes for phone numbers. While they are being entered and prior to being transferred to the runtime system, parameters are checked for plausibility. Invalid parameters Incomplete input boxes and input boxes containing fobidden characters are declared invalid during the plausibility check and shown on a red background (see figure). Figure 3-2 Marking of input boxes with forbidden content Objects with bad parameters are given the configuration status "invalid". Figure 3-3 Marking of objects with invalid parameters Invalid parameters are not stored in the database. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 23 Configuration 3.2 Windows and buttons of the CMT Editing objects Before boxes can be edited, an object must first be enabled using the "Edit" button. After editing has been enabled, the editing icon () appears in the left-hand column in the object area. After saving, edited boxes are grayed out again and the editing icon () disappears. 3.2.2 The buttons of the CMT The most important buttons in the CMT After starting the CMT, all the input boxes in the program user interface are locked. Configuration is only possible and other buttons can only be selected after clicking the "Edit" button. The buttons described below can be found in most views of the CMT. Edit Enables the objects or parameters displayed in the object or parameter area for configuration. Add Generates a new object in the particular view. Delete Deletes the selected object Discard Discards all the changes made in the current view and restores the status as it was after the last save. Save To avoid changed data being lost when you exit a view, you need to save any changes you have made. In some views, you can only "Save & activate"; this means that the changed data is transferred to the runtime system when you save. Save & activate Relevant for connection and project data Before the configured data of connections takes effect in the runtime system, the relevant project must be activated. The configured data can only be transferred to the runtime system for entire projects. If you have not yet saved the configuration data, the configuration data is saved first in the database prior to activation. TS Gateway 24 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.2 Windows and buttons of the CMT 3.2.3 Menu bar The menu bar contains the following menus: "File" menu Menu command Function Exit Closes the CMT. Menu command Function Messages Shows the messages of the system below the parameter area. "View" menu "Options" menu Menu command Function Language Opens a drop-down list for setting the language used by the CMT. "Help" menu 3.2.4 Menu command Function Help Opens the online help of the CMT. About Shows version information of the program. Individual adaptation of the window Adapting the view The following options are available for adapting the program user interface: Changing the size of areas By moving the dividing line between the individual areas, you can change the size of the areas in the window. Changing the column width in the object area *) By moving the dividing lines in the table header with the mouse, you can change the width of the columns in the object area. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 25 Configuration 3.3 Starting CMT - changing passwords Sorting entries in the object area If you click on a column header, you can sort the entries in the table in ascending or descending order according to this column. Changing the column order By selecting a column header and moving it while holding down the mouse button, you can move the column to the right or left. *) 3.2.5 This also applies the system variables in the parameter area. Online help Opening online help You open the online help of CMT with the menu "Help" > "Online help". 3.3 Starting CMT - changing passwords Starting the CMT To start the CMT, select the following program: Windows Start menu > Siemens Automation > SIMATIC > TCS Basic > Config and Monitoring Tool Logging on After the program has started, the logon window of the CMT is displayed. Figure 3-4 Logon window of the CMT TS Gateway 26 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.3 Starting CMT - changing passwords 1. Enter a configured user name or leave the default user name. You will find information on the first login in the next section. 2. Enter the corresponding password. You will find information on the first login in the next section. 3. Click the "Logon" button. When you log on for the first time, you need to change the password immediately. Make sure you read the notes below. During all subsequent logons, the same window of the CMT opens. Initial logon: User name and password The following user data is set in the factory: User data Default values set in the factory User name administrator Password 0000 Entering the wrong user name or password If you enter a user name that is not configured, an error message is displayed regardless of the password entered. One or a variety of incorrect user names can be entered any number of times without the system being locked. Note Loss of the administrator password Note down a newly assigned or modified administrator password and keep this in a safe place. If only one administrator is set up, the loss of the administrator password means that no more administrator tasks can be performed. There is no way in which the system can be reset to the factory-set administrator password. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 27 Configuration 3.3 Starting CMT - changing passwords Note Incorrect entry of the password * When entering the default user name: If you enter an incorrect password with the default user name (see above) an error message is displayed. You can attempt to enter the factory-set password any number of times to log on with the system. If you enter an incorrect password, a lock out time begins that is extended with each attempt to logon with an incorrect password. * When entering a configured user name: If you enter an incorrect password along with a configured user name, an error message is displayed. If you enter an incorrect password, a lock out time begins that is extended with each attempt to logon with an incorrect password. Formats and lengths for user names and passwords User names Length (characters): Minimum 1, maximum 32 The following ASCII characters are permitted (digits, lowercase letters, uppercase letters, many special characters): - 0x20 ... 0x7e - 0x80 ... 0xff Passwords Length (characters): Minimum 8, maximum 32 The following ASCII characters are permitted (digits, lowercase letters, uppercase letters, many special characters): - 0x20 ... 0x7e - 0x80 ... 0xff TS Gateway 28 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.4 Creating and configuring projects 3.4 Creating and configuring projects View when the "Projects" entry is selected in the navigation area With this selection, the CMT displays the following screen: Figure 3-5 Object area when the "Projects" entry is selected in the navigation area The "Projects" tab displays the configuration data of the individual projects in the form of a table. Purpose of creating projects To use the functions of the TeleService gateway, it is not absolutely essential to create projects. If you do not create a project, the provider listed first in the drop-down list will be used as the SMS gateway provider". In larger systems, in which all stations are not accessed via the same SMS gateway provider, you can create various projects that are then assigned to a specific SMS gateway provider. The stations to be accessed via a specific SMS gateway provider are grouped together in a project. This means that you do not need to change the provider data each time. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 29 Configuration 3.4 Creating and configuring projects A unique project number must be assigned to each CMT project that matches the project number of the CPs in the STEP 7 project. Note Consistency with the STEP 7 project Make sure that the project number in the CMT is consistent with the project number of the mobile wireless CP in the STEP 7 project. The SMS gateway provider is assigned to the project in the parameter area (see below). Parameters of projects The mandatory parameters "Project name" and "Project number" of the project must be completed by the administrator. Project name Assign a project name. The mandatory parameter is checked for consistency when it is entered. If the entry is inconsistent, the input box is shown with a red frame. Project number Assign the project number. The mandatory parameter is checked for consistency when it is entered. If the entry is inconsistent, the input box is shown with a red frame. As long as no project number has been entered, the input box has a red frame and the configuration cannot be saved. Note Consistency with the STEP 7 project The project number assigned here must be identical to the project number of the mobile wireless CP in STEP 7 because it forms part of the address of the connections. Check and agree the project number with the configuration engineer of the STEP 7 project. TS Gateway 30 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.4 Creating and configuring projects SMS gateway provider From the drop-down list, select the SMS gateway provider via which you want to send a wake-up SMS message to the remote stations. Comment Optional: If necessary, enter a comment (max. 200 characters). Note Saving configuration data Following configuration, save the project otherwise the configuration data is lost. When you save, the configuration data is saved in the database but is not transferred to the runtime system. Creating projects Create new projects as follows: 1. Select the "Projects" entry in the navigation panel. 2. Click the "Add" button. The new project appears in the navigation area and in the object area. 3. Click the "Create" button. Activating projects Once you have completed the configuration in the CMT, you need to transfer the modified data to the runtime system using the "Save & activate" button so that the configuration data becomes effective for the connection establishment. Configuration data can only be transferred for entire projects not for individual stations. Deleting projects Deleting inactive projects If the project to be deleted contains no or only new data records (the project has not yet been activated), it is deleted immediately. Deleting projects that have already been activated If the project to be deleted already contains activated data records, deleting initially changes it to the "To delete" status. To delete the configuration data from the runtime system, it must then be activated. Only then is the entire delete procedure completed. To delete a project, follow the steps outlined below: 1. Select the "Projects" entry. 2. Select the project in the object area. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 31 Configuration 3.5 Setting up an administrator 3. Click the "Delete" button. - The project disappears if it contains no or only new data records. In this case, deleting is completed. - The project changes to the "To delete" status if it was previously activated (configuration data in the runtime system). 4. Activate the project that has the "To delete" status. The project is finally deleted. 3.5 Setting up an administrator Configuration of the administrator With the "Users" entry in the navigation area, you can edit the user properties of the administrator: "General" parameter group The following data must be entered when they are created. - User name User name of the administrator, is used to log in to CMT. - Password Password of the administrator, is used to log in to CMT. Note Loss of the administrator password Note down a newly assigned or modified administrator password and keep this in a safe place. Once the administrator has been set up, the loss of the administrator password means that the system can no longer be configured or operated. There is no way in which the system can be reset to the factory-set administrator password. - First and last name of the administrator are optional. "Contact information" parameter group All contact information is optional and can be entered and modified by the administrator. - E-mail address - Call number - Mobile phone number - Address TS Gateway 32 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.6 TCSB system 3.6 TCSB system Selection of the navigation entry "TCSB system" Under this entry, you will find the parameters to make settings for the following system components: TCM Database Only administrators can make the settings for the system. If you expand the "TCSB system"entry, the following further entries will be visible and these are described in the following sections: SMTP gateway provider SMTP server TCSB system, "TCM" tab "General" box Here, you configure the address data of the TeleService gateway and, if it exists, the second gateway. Figure 3-6 The "TCSB system" > "TCM" dialog TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 33 Configuration 3.6 TCSB system Here, the IP address and the ports of the TeleService gateway are configured. Note Consistency with the STEP 7 project or block configuration The address data to be configured here is also configured in the STEP 7 project of the mobile wireless CP. The configuration of an IPv4 address is mandatory. IPv4 addresses are given preference by the gateway. The configuration of an IPv6 address is necessary if stations that use the IPv6 standard are connected to the gateway. As default the computer name of the relevant PC is entered in the input box of the IPv6 address of TCM 1. The relevant port numbers are preassigned. If necessary you can change these. The following applies to all ports: The port number must be between 1 025 and 65 535. Address TCM 1 or TCM 2 IP address of the TeleService gateway Select one of the following entries: - The valid IP address of the computer - "localhost" entry - Entry "127.0.0.1" for the first gateway - Entry "127.0.0.2" for the second gateway In addition to the addresses in IPv4 format, you can also specify the addresses in IPv6 format. "Listener ports" box If necessary, you can change the default numbers of listener ports of the system here. Note Port numbers used If you change port numbers, note the information in the section Changing port settings (Page 37). MSC listener port Not relevant for TeleService gateway Default port number: 26862 ITP listener port Listener port for stations of the type S7-1200 The port must be opened for communication with the engineering station and with remote stations of the type S7-1200 with a mobile wireless CP. Default port number: 55097 TS Gateway 34 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.6 TCSB system Control port Not relevant for TeleService gateway Default port number: 26861 Data port Not relevant for TeleService gateway Default port number: 26860 TCSB port The port must be opened for the TCM to communicate with the CMT. Default port number: 26864 Note After changing and saving the port numbers, a restart is necessary for the changes to take effect. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 35 Configuration 3.6 TCSB system TCSB system, "Database" tab Authorized phone number Here, enter the string of numbers of the phone number that authorizes the TeleService gateway to establish a connection with the mobile wireless CP. This number configured for the CP is transferred to the CP with the SMS message. The phone number entered here must be configured in the STEP 7 project of the CPs in the list of phone numbers under the "Authorized phone number" parameter. Note Permitted character set Keep to the permitted ASCII character set for the parameter: 0x20...0x7e and 0x80...0xff. The hash '#' (0x23) must not be used. Regular backup For archiving purposes or if you want to transfer the configuration to another computer, you can use this function to make regular copies of the entire database. So as not to reduce the storage capacity of your hard disk too much, if you have short backup intervals, you should delete older backup copies from time to time or move them to a different data storage medium. Select the interval at which backup copies of the database will be created. The backup copies are saved as *.bak files in the following directory: <Drive>:\Microsoft SQL Server\MSSQL10_50.TCSB\MSSQL\Backup Backup copies are always created at 00:00h. Restart: When TS Gateway is restarted, the counter for the time of creation of the backup copies is reset and the period is counted starting from the time of the restart. This changes the time at which the backup copies are made. If you have configured the creation of backup copies and restart the gateway computer, the backup copies will be created at the configured intervals again starting from the day of the restart. TS Gateway 36 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.7 Changing port settings 3.7 Changing port settings Changing and opening ports Changing port numbers If you change port numbers, select ports only from the number range 1024 ... 65535. Select free ports that are not otherwise being used. Ports 0 ... 1023 are standardized (well known ports). Of the registered ports as of 1024, no. 1024 is reserved. Opening a port automatically Port 587 used for the SSL authentication of TS Gateway with the SMTP server or SMS gateway provider is opened by TS Gateway during installation. Preset numbers of the listener ports of the Telecontrol Manager (TCM) For the internal communication of the components of TS Gateway and TCM with the stations, various ports are used whose numbers are preset by the system. You can change the default port numbers in the CMT. The function of the ports and the presettings are described in the following section: TCSB system (Page 33), "TCM" tab 3.8 Configuring SMS gateway providers Only an administrator can setup and configure SMS gateway providers. Function The SMS gateway provider forwards an SMS message to the remote stations. The sequence of transmission is as follows: 1. The TeleService gateway sends an e-mail. 2. The e-mail is sent to an SMS gateway via an SMTP server. 3. The SMS gateway converts the e-mail into an SMS message and transfers this to the station. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 37 Configuration 3.8 Configuring SMS gateway providers View Select the "SMS gateway provider" entry in the navigation area. Figure 3-7 Dialog box for configuring an SMS gateway provider The name and e-mail address of the SMS gateway providers that have already been created are displayed in the object area. The data of the provider selected above is configured in the parameter area. Identification: Authorized phone number To allow the mobile wireless CP to identify the TeleService gateway as the sender of an SMS message, a computer ID is transferred in the e-mail. This ID must be configured in the system settings as an "authorized phone number" before the sender of the SMS will be accepted by the CP. The "authorized phone number" is configured in the system settings, refer to the section TCSB system (Page 33). TS Gateway 38 Operating Instructions, 09/2014, C79000-G8976-C380-01 Configuration 3.8 Configuring SMS gateway providers Configuring the parameters of the SMS gateway provider Note Parameters and placeholders Remember that the SMS gateway providers have different requirements for the parameters of the e-mail. You will find examples in appendix Examples of the configuration data of SMS gateway providers (Page 41). There, you will also find the significance of the following placeholders: * <SMS-NO> Placeholder for the phone number of the mobile wireless CP * <MSG> Placeholder for the content of "Re" and "Text" of the e-mail that is automatically entered in the e-mail by TS Gateway. The data of the providers is entered in the parameter area: Name Here, enter the name of the SMS gateway provider (can be selected freely). Address E-mail address of the SMS gateway provider. You will find the address in the agreement documents of your provider. Re Enter a suitable reference here. With some providers, the text field contains the information indicating to the recipient what needs to be done. The field can also include further job-specific information to allow use of special services of a provider. With some providers, the "authorized phone number" is entered here. Ask your provider about the reference. text Enter a suitable text here. Ask your provider about the text. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 39 Configuration 3.9 SMTP server 3.9 SMTP server SMTP server An SMS message of the TeleService gateway is sent as an e-mail. The SMTP server forwards the e-mail to the SMS gateway. In this dialog, you can configure up to two SMTP servers: Server 1 Main server to which all e-mails are sent. Server 2 Substitute server to which the e-mails are sent if the main server is not obtainable. The following parameters must be configured: Mail server SMTP address of the SMTP server Take the data from the agreement documents of your SMTP server provider. Port number Port number of the SMTP server Take the data from the agreement documents of your SMTP server provider. User name Take the data from the agreement documents of your SMTP server provider. Password Take the data from the agreement documents of your SMTP server provider. E-mail address E-mail address of the TeleService gateway. Take the data from the agreement documents of your SMTP server provider. TS Gateway 40 Operating Instructions, 09/2014, C79000-G8976-C380-01 Examples of the configuration data of SMS gateway providers A Examples of the configuration data of SMS gateway providers The following table contains several examples of the configuration of the SMS gateway providers on the CMT. See also section Configuring SMS gateway providers (Page 37). You can find out from your SMS gateway provider how to configure the e-mail for the wakeup SMS message. Table A- 1 SMS gateway provider-related e-mail structures SMS network provider E-mail address of the SMS gateway provider * Re ** Text ** E-Plus <SMS-NO>@smsmail.eplus.de <MSG> * <MSG> * O2 <SMS-NO>@o2online.de *** <MSG> * <MSG> * Smstrade <SMS-NO>@email2sms.smstrade.de <MSG> * #Identifikationkey #Sendroute #Sender# T-Mobile <SMS-NO>@t-mobile-sms.de <MSG> * <MSG> * Vodafone <SMS-NO>@vodafone-sms.de <MSG> * <MSG> * * <SMS-NO> When configuring the e-mail address of the SMS gateway provider in the "Address" box, enter the placeholder "<SMS-NO>". TCSB then automatically enters the call number of the SIM card of the CP that originates from the CP configuration in STEP 7 and is transferred in the frame of the engineering station. ** All cells of the table with the entry "<MSG>" Enter the placeholder "<MSG>" in the "Re" or "Text" box. TCSB then automatically enters the correct message that is stored in the system and understood by the CP 1242-7. (This is the same text that is transferred in a wake-up SMS as the message text.) Wake-up SMS for the CP 1242-7 (firmware V1.x) (Page 19) *** The call number of the SIM card may only be entered in STEP 7 without the international country dialing code. Activating the e-mail address To receive the e-mail, a personal mobile e-mail address needs to be activated with some network providers. To do this, send an activation SMS with a short number to your SMS network provider that you will find in the table below "Activation and deactivation SMS". You will receive a personal e-mail address via SMS that is normally made up of the phone number and the gateway name. To activate your personal mobile e-mail address, send the special activation text to a short number of your SMS network provider. TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 41 Examples of the configuration data of SMS gateway providers You will receive a reply SMS with your personal mobile e-mail address that is made up of your phone number and the gateway name of your SMS network provider, for example: 0123412345678@providersms.com You will find examples of activation texts and short numbers of SMS network providers in the following table. Note Check with your network provider whether or not it is necessary to send activation and deactivation SMS messages. Your network provider will inform you of the texts and short number. Table A- 2 Activation and deactivation SMS (examples) E-Plus O2 Germany T-Mobile Vodafone Gateway name smsmail.eplus.de o2online.de t-mobile-sms.de vodafone-sms.de Enabling Text: START Text: OPEN Text: OPEN Text: OPEN Send SMS with text to short number Short number: 7676245 Short number: 6245 Short number: 8000 Short number: 3400 Deactivating Text: STOP Text: STOP Text: CLOSE Text: CLOSE Send SMS with text to short number Short number: 7676245 Short number: 6245 Short number: 8000 Short number: 3400 TS Gateway 42 Operating Instructions, 09/2014, C79000-G8976-C380-01 Documentation references B Where to find Siemens documentation You will find the article numbers for the Siemens products of relevance here in the following catalogs: - SIMATIC NET Industrial Communication / Industrial Identification, catalog IK PI - SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog ST 70 You can request the catalogs and additional information from your Siemens representative. You will find SIMATIC NET manuals on the Internet pages of Siemens Automation Customer Support: (http://support.automation.siemens.com/WW/view/en) Enter the entry ID of the relevant manual as the search item. The ID is listed below some of the reference entries in brackets. As an alternative, you will find the SIMATIC NET documentation on the pages of Product Support: 10805878 (http://support.automation.siemens.com/WW/view/en/10805878) Go to the required product group and make the following settings: "Entry list" tab, Entry type "Manuals / Operating Instructions" You will find the documentation for the SIMATIC NET products relevant here on the data medium that ships with some products: - Product CD / product DVD or - SIMATIC NET Manual Collection B.1 /1/ SIMATIC NET TS Gateway (Version V3) Operating Instructions Siemens AG entry ID: 102255310 (http://support.automation.siemens.com/WW/view/en/102255310) TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 43 Documentation references B.2 /2/ B.2 /2/ SIMATIC NET CP 1242-7 Operating Instructions Siemens AG entry ID: 61029644 (http://support.automation.siemens.com/WW/view/en/61029644) B.3 /3/ SIMATIC NET TeleControl Server Basic (Version V3) Operating Instructions Siemens AG entry ID: 46635999 (http://support.automation.siemens.com/WW/view/en/46635999) TS Gateway 44 Operating Instructions, 09/2014, C79000-G8976-C380-01 Index A Administrator password, 27, 32 Loss, 27 ASCII characters Users + passwords, 28 Authorized phone number, 36, 38 C Changing port numbers, 33 Character set Users + passwords, 28 CMT (Configuration and Monitoring Tool), 12 D Database password, 16 E Edit, 24 Export certificate, 26 F Firewall settings, 15 G Ports Numbers, 37 Opening, 37 S Service & Support, 5 SIMATIC NET glossary, 4 SMS gateway provider, 37 SSL authentication, 37 T TCM (Telecontrol Manager), 12 Telecontrol Manager, 12 TeleService server, 19 Training, 5 U User name: Invalid entry, V Validation, 23 W Wake-up SMS, 37 Wrong entry, user name, 27 Glossary, 4 I Invalid parameters, 23 P Password Administrator, 27 Invalid entry, 27 Loss, 27 Port 587, 37 TS Gateway Operating Instructions, 09/2014, C79000-G8976-C380-01 45 Index TS Gateway 46 Operating Instructions, 09/2014, C79000-G8976-C380-01