Station Gateway en
Station Gateway en
Configuration and
operational manual
Siemens
Operating manual Industry
Online
https://support.industry.siemens.com/cs/ww/en/view/109779570 Support
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal
safety, as well as to prevent damage to property. The notices referring to your
personal safety are highlighted in the manual by a safety alert symbol, notices
referring only to property damage have no safety alert symbol. These notices
shown below are graded according to the degree of danger.
indicates that minor personal injury can result if proper precautions are not
taken.
CAUTION
© Siemens 2021 All rights reserved
NOTICE indicates that property damage can result if proper precautions are not
taken.
If more than one degree of danger is present, the warning notice representing the
highest degree of danger will be used. A notice warning of injury to persons with a
safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified for the specific task in accordance with the relevant
documentation, in particular its warning notices and safety instructions. Qualified
personnel are those who, based on their training and experience, are capable of
identifying risks and avoiding potential hazards when working with these
products/systems.
Siemens products may only be used for the applications described in the
catalog and in the relevant technical documentation. If products and
components from other manufacturers are used, these must be
WARNING recommended or approved by Siemens. Proper transport, storage,
installation, assembly, commissioning, operation and maintenance are
required to ensure that the products operate safely and without any
problems. The permissible ambient conditions must be complied with. The
information in the relevant documentation must be observed.
Siemens AG
Division Digital Factory Ⓟ 05/2021 Subject to change
Postfach 48 48
90026 NÜRNBERG Copyright © Siemens AG 2021.
Germany All rights reserved 2
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining
trademarks in this publication may be trademarks whose use by third parties for
their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the
hardware and software described. Since variance cannot be precluded entirely, we
cannot guarantee full consistency. However, the information in this publication is
reviewed regularly and any necessary corrections are included in subsequent
editions.
Security information
Siemens provides products and solutions with industrial security functions that
support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it
is necessary to implement – and continuously maintain – a holistic, state-of-the-art
industrial security concept. Siemens’ products and solutions only form one element
of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems,
machines and networks. Systems, machines and components should only be
connected to the enterprise network or the internet if and to the extent necessary
and with appropriate security measures (e.g. use of firewalls and network
segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken
© Siemens 2021 All rights reserved
into account. For more information about industrial security, please visit
https://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them
more secure. Siemens strongly recommends to apply product updates as soon as
available and to always use the latest product versions. Use of product versions
that are no longer supported, and failure to apply latest updates may increase
customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial
Security RSS Feed under https://www.siemens.com/industrialsecurity.
Siemens AG
Division Digital Factory Ⓟ 05/2021 Subject to change
Postfach 48 48
90026 NÜRNBERG Copyright © Siemens AG 2021.
Germany All rights reserved 3
Table of contents
Table of contents
Legal information ......................................................................................................... 2
1 Overview ............................................................................................................. 6
1.1 What is new or different?...................................................................... 7
1.2 Spare part compatibility ........................................................................ 7
1.3 Article numbers and order details of the Station Gateway
package ................................................................................................ 8
1.3.1 List of required order details: ................................................................ 9
1.3.2 Packing list ........................................................................................... 9
1.4 Certificates ........................................................................................... 9
1.5 Personal data disclaimer ...................................................................... 9
1.6 Security Issues ................................................................................... 10
1.6.1 Security concept ................................................................................. 10
1.6.2 Note of usage and misuse.................................................................. 10
1.6.3 Prevention of misconfiguration ........................................................... 10
1.6.4 Disclaimer ........................................................................................... 11
1.6.5 System hardening .............................................................................. 11
1.6.6 Integrity of delivery ............................................................................. 11
1.6.7 Updates .............................................................................................. 12
1.6.8 Open-Source Components................................................................. 12
2 Hardware .......................................................................................................... 13
2.1 Interfaces and fitting dimensions ........................................................ 13
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 4
Table of contents
Station Gateway
Entry-ID: 109779570, 05/2021 5
1 Overview
1 Overview
This document is valid for Station Gateway V2.x (based on Nanobox IPC) only.
The Station Gateway based on Nanobox IPC connects IEC 61850 devices from
different vendors to the PCS 7 system.
The gateway uses two Ethernet RJ45 interfaces: The IEC 61850 interface (eth1) is
connected to the Ethernet network with the protection relays using the protocol
IEC 61850. The S7-Interface (eth0) is connected to the PCS 7 Controllers via the
PCS 7 plant bus Industrial Ethernet. On both ethernet networks the IP protocol is
used with static IP addresses for the communication partners.
OS OS
Clients Clients
redundant
OS Server
READ / WRITE
PCS 7 plant bus
© Siemens AG 2021 All rights reserved
S7 communication
AS 4xxH
Substation
Station
Gateway
IEC 61850
Ethernet FO
Station Gateway
Entry-ID: 109779570, 05/2021 6
1 Overview
Cyclic Data
Different types of data are transferred cyclically from the protection relays to the
outputs of special function blocks in a PCS 7 Automation Station. The data types in
PCS 7 are: BOOL, REAL, INT, DINT. The scan cycle time is one second or
greater.
Commands
Binary commands and interlocks are transferred from inputs of special function
blocks in a PCS 7 Automation Station to the designated protection relays.
Analog Reporting
With the reporting mechanism for analog IEC 61850, tags like float can be exchanged event
based between IED and S7 PLC to reduce unnecessary load on the fieldbus.
current Nanobox Station Gateway, for supported driver blocks refer to chapter
5.2.6.1.
Station Gateway
Entry-ID: 109779570, 05/2021 7
1 Overview
Station Gateway
Entry-ID: 109779570, 05/2021 8
1 Overview
Orders can only be done via a local Siemens sales representative, who needs to
provide the following details among others:
• Order contact
• Number of IEDs (for license)
• Project and end customer details (PATAC)
• Version of PCS 7
• Station Gateway Nanobox with Linux operation system and license key
installation
• Mounting rail
• Station Gateway license certificate
• USB stick with IPC227E information (refer chapter 0)
• Individual device specific notes
– Root Password
– Login credentials for the web interface
• CD with manuals and tools
© Siemens AG 2021 All rights reserved
1.4 Certificates
The Station Gateway Nanobox 227E has a lot of certificates which can be obtained
via Siemens customer support websites, e.g.
https://support.industry.siemens.com/cs/search?search=227E&type=Certificate&lc
=de-WW. Among these are UL, BV, ABS, LR, GL, NP as well as manufacturer's
release for Linux operation system. Further details are available in the operation
manual of Nanobox 227E.
Please note: ATEX version of IPC227E is not available for Station Gateway.
Station Gateway
Entry-ID: 109779570, 05/2021 9
1 Overview
The physical access to the Station Gateway has to be restricted (mounting inside a
locked cabinet). Unauthorized people shouldn’t get access to Station Gateway or
its connectors. The access to the web interface has to be restricted to authorized
people.
Both the overlayed systems (like PCS 7 PLC and WinCC) and the underlayed
systems (like IEDs) must implement protections and interlocks to avoid damage of
property or personal damage. These protections and interlocks must be done
inside the single systems with the adequate configuration tool (like DIGSI).
Direct connection of the Station Gateway Nanobox to the internet has to be
avoided. In order to protect plants, systems, machines and networks against cyber
threats, it is necessary to implement – and continuously maintain – a holistic, state-
of-the-art industrial security concept. Siemens’ products and solutions constitute
one element of such a concept. For more information about industrial security,
please visit http://www.siemens.com/industrialsecurity.
To increase the plant security, Siemens provides several Industrial Security
Services. Please check
https://new.siemens.com/global/en/products/services/industry/digital-industry-
services/industrial-security-services.html to see which service is applicable for your
project.
© Siemens AG 2021 All rights reserved
Siemens products may only be used for the applications described in the catalogue
and in the relevant technical documentation. If products and components from
other manufacturers are used, these must be recommended or approved by
Siemens. Proper transport, storage, installation, assembly, commissioning,
operation and maintenance are required to ensure that the products operate safely
and without any problems. The permissible ambient conditions must be complied
with. The information in the relevant documentation must be observed.
Please refer chapter “2 Safety Instructions” in manual “SIMATIC IPC227E
Operating Instructions 09/2017 A5E35782395-AC”. These instructions are fully
applicable to Station Gateway.
PCIS and PCS 7 are not a replacement for IED control level. It must be ensured
that both the IED system is fully functional and that experts for the IED system are
available during operation.
Station Gateway
Entry-ID: 109779570, 05/2021 10
1 Overview
1.6.4 Disclaimer
We have reviewed the contents of this publication to ensure consistency with the
hardware and software described. Since variance cannot be precluded entirely, we
cannot guarantee full consistency. However, the information in this publication is
reviewed regularly and any necessary corrections are included in subsequent
editions.
The Station Gateway fulfils the functionality described in this document. Older
releases of this document are invalid. Functionality which is not described or is
explicitly marked as ‘not supported’ is not supported by this product or software
release.
It is possible that superior products (like PCS 7 or STEP7) provide a system
standard functionality (Profibus or SFC). If this functionality isn’t handled inside this
document, the system behavior of the Station Gateway can differ from the superior
system.
For more information about this topic, please contact
mailto:function.blocks.industry@siemens.com.
hardware manual”. Consider the strategy with responsible and qualified personnel
of your plant. System hardening requires a deep knowledge about the guidelines,
environment and needs on site. For this reason, system hardening isn’t covered by
the service agreement. Please note a wrong hardening configuration can impact
the functionality.
Please ensure the integrity of the delivered components when hardware is arrived
and unpacked. To ensure the integrity, we seal the packaging of hardware
components and the storage volumes with the following seal.
Station Gateway
Entry-ID: 109779570, 05/2021 11
1 Overview
NOTICE Please ensure that all components contain a valid seal. If the seals are missing
or broken, do not connect the device or data volume. In this case, please contact
us!
1.6.7 Updates
© Siemens AG 2021 All rights reserved
Updates are published on the Siemens SIOS webpage. Alternatively, updates can
be requested on our hotline. Depending on the update cause (feature extensions,
bug fixing, closing security issues, ...), the installation of the update should be
considered. The availability of security updates should be checked permanently, to
ensure a proper and secure operation.
If a valid Service Agreement exists, the update can be requested on our hotline.
Station Gateway
Entry-ID: 109779570, 05/2021 12
2 Hardware
2 Hardware
Station Gateway Nanobox 227E does not have any moving parts including a fan or
ventilation holes, but thus is sensitive to overheating. It has to be mounted in a
horizontal position (vertical gills). For correct circulation of cooling air, a space of
50 mm above and 100 mm below has to be kept free. Free space below is also
required for the connection of Ethernet cables.
Without optional components like SSD, PCIe or HDD it can be operated in an
environment with the following conditions:
• Horizontal mounting: 0° C – 60° C
• Vertical mounting: 0° C – 50° C
For further ratings regarding the environmental conditions, please refer the
IPC227E manual.
For the electrical connection a T20 and a 0.5*3 mm screwdriver are required. The
24 V (+/-20 %) power supply cable’s cross-sectional area can range from 0.75 to
2.5 mm2.
The device must only be connected to a 24 VDC power supply which satisfies the
requirements of safety extra low voltage (SELV) according to IEC/EN/DIN EN/UL
60950-1. The power supply must meet the NEC Class 2 or LPS requirement in
accordance with IEC/EN/DIN EN/UL 60950-1.
Figure 2-1 Front view and side view of the main module
Station Gateway
Entry-ID: 109779570, 05/2021 13
2 Hardware
Dimensions
Dimension Value
Width 191 mm
Height 100 mm, additional free space of 100 mm below and 50 mm above
is required
Depth 60 mm
Number Element
1 Protective conductor connection PE, 2.5 mm², screw requires a T20 key
2 Connection for a 24 VDC power supply, 0.75 – 2.5 mm², 0.5*3 mm
screwdriver
3 Memory card slot CFast 4 MB is included in Station Gateway package
4 USB 3.0 port, high current: Please note restrictions of power consumption
and related de-rating of temperature specification as described in the
Nanobox 227E operation manual.
5 On/off switch: OFF position when the symbol "C-" is pressed in
6 USB 2.0 port, high current
7 Serial interface, 9-pin (optional, used for redundant configuration)
• RS 232
8 DisplayPort connection
9 RJ45 Ethernet connection 1 (eth0) for 10/100/1000 Mbps, SIMATIC plc
network
10 RJ45 Ethernet connection 2 (eth1) for 10/100/1000 Mbps, IEC 61850
network
Station Gateway
Entry-ID: 109779570, 05/2021 14
2 Hardware
NOTE Inside the shipping box of the Station Gateway, a USB stick is included. This
USB stick contains IPC227E information and a recovery system. Please, do not
use the recovery system on the USB stick. This will reset your Station Gateway
back to a default IPC227E without the Station Gateway software and
environment!
Station Gateway
Entry-ID: 109779570, 05/2021 15
2 Hardware
Station Gateway
Entry-ID: 109779570, 05/2021 16
3 Service agreement
3 Service agreement
A 5-year service agreement is mandatory for Nanobox based Station Gateways.
This service agreement covers questions about general topics, system handling
and troubleshooting via phone or Email.
Because of included hardware spare parts and free of charge patches/updates,
this service agreement is needed for every single device. A single Station Gateway
requires one service agreement, a redundant Station Gateway requires two service
agreements.
If the DIAG_CM block was engineered how it is described in this manual, the
expiration of the service agreement will raise an alarm. This alarm has no impact to
the operation of the Station Gateway. If the alarm is raised, please consider a new
service agreement. For questions regarding the service agreement, please contact
mailto:function.blocks.industry@siemens.com.
Without a valid service agreement, no hardware replacement is possible. If support
via email or phone is required, an extended support package has to be ordered if
the service contract is run out.
A template of the service agreement document can be found in appendix in
chapter 9.3 "Service Agreement".
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 17
4 Pre requirements
4 Pre requirements
4.1 Software Environment
The Station Gateway is delivered with a function block library. This library can be
used with STEP7 or PCS 7. Depending on used PCS 7 version, different function
block library versions are inside the same PCS 7 archive:
When using Station Gateway, we recommend usage of PCS 7 V9.0 SP3. The older
libraries don’t support all new features of current Station Gateway firmware version.
PCS 7 versions prior V8.2 are not supported.
NOTE These libraries are not compatible with the outdated S7mEC version of Station
© Siemens AG 2021 All rights reserved
NOTE The IP-Addresses for the two Station Gateway Ethernet interfaces must be in
two different sub-networks.
Station Gateway
Entry-ID: 109779570, 05/2021 18
4 Pre requirements
NOTE Station Gateway Ethernet interfaces only work properly with the setting "Auto
Negotiation" on the switch or other network communication devices. Station
Gateway requires all connected ports of switches and other direct
communication partners to be configured for Auto-Negotiation
OS OS OS OS
Clients Clients Clients Clients
redundant redundant
OS Server OS Server
PCS 7 plant bus PCS 7 plant bus
S7 communication S7 communication
AS 4xxH AS 4xxH
Single Redundant
Substation Substation
Station Station
Gateway Gateway
Station Gateway
Entry-ID: 109779570, 05/2021 19
5 Configuration
5 Configuration
The following workflow diagram shows a recommend order of the setup of a
Station Gateway.
Station Gateway
Setup
NetPro:
Creation of the needed S7
connections /S7 connection
to unspecified partner)
CFC:
Engineering of the I61:LINK
(configuration oblockg Ids)
CFC:
Engineering of the I61:LINK
block (configuration og Ids)
© Siemens AG 2021 All rights reserved
Web Interface:
Configuration
Test:
Detailed test of all
engineered tags
Station Gateway
Setup finished
Station Gateway
Entry-ID: 109779570, 05/2021 20
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 21
5 Configuration
The following image shows the setup of a new connection to a Station Gateway
with the IP “140.80.162.12”.
The function block I61_LINK manages all redundancy options with the information
of its 4 connection IDs. It initiates the communication to the Station Gateway by
sending a BSEND telegram. The function block I61_LINK uses the S7 connections
engineered with NetPro.
Figure 5-4 S7 connections between a CFC function block and Station Gateways
Industrial Ethernet
PCS7 station
S7 connection 1
Station Gateway
I61_LINK
S7 connection 2 A
PLC 0 - CONN_ID1
PLC 0 - CONN_ID1
PLC 0 - CONN_ID1 S7 connection 3
Station Gateway
PLC 0 - CONN_ID1 S7 connection 4
B
Station Gateway
Entry-ID: 109779570, 05/2021 22
5 Configuration
5.1.1 Redundancy
The function blocks are running in single and in redundant systems according to
the redundancy functions of the host system PCS 7. The function block I61_LINK
manages the redundant communication with up to four S7 connections. Each S7
connection is engineered as a single connection. All S7 connections combined
constitute a redundant connection. A redundant Station Gateway pair needs at
least two S7 connections to one I61_LINK block.
SG SG SG SG SG SG SG
A B A B A B
Each S7 connection is monitored using live sign telegrams from both systems. One
S7 connection is sufficient for the complete data transfer in both directions. If two
S7 connections are available, one S7 connection (via one CP443-1 card) is
dedicated to sending data only and the other S7 connection (via the other CP443-1
Station Gateway
Entry-ID: 109779570, 05/2021 23
5 Configuration
card) to receiving data only. S7 410-5H PLCs can also use the internal X5 ProfiNet
interface instead of an external CP.
The data transfer is switched over to another S7 connection to the same Station
Gateway after a data package is not acknowledged by the receiver.
Station Gateway
Entry-ID: 109779570, 05/2021 24
5 Configuration
To ensure a proper PLC functionality and correct time stamps (in PLC created
alarms), the PLC time should be synchronized.
Depending on the current configuration of the usable FC number band, a
compile/download error could occur. This can be fixed by changing the following
values:
Figure 5-8 FC number configuration for compile/download process
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 25
5 Configuration
In the program of the S7-PLC, the blocks of the SG_LINK library have to be
configured. The following image shows the principle of the layout:
Station Gateway
Entry-ID: 109779570, 05/2021 26
5 Configuration
The S7 function block I61_LINK is the interface to the Station Gateway for the
specific function blocks. It coordinates and executes the data exchange between
the PCS 7 function blocks and the Station Gateway. The inputs CONN_IDx contain
the ID of the used S7 connections.
NOTE The I61_LINK block needs each S7 connection exclusively for itself. Therefore,
an ID of an S7 connection can be used only once in an input CONN_IDx.
The specific PCS 7 IEC 61850 driver function blocks are connected to a Station
Gateway by binding their input element CONNECT to the output element
CONNECT of an I61_LINK block. In the configuration program CFC, the
connection is graphically established by mouse-clicking subsequently on the output
and the input.
Station Gateway
Entry-ID: 109779570, 05/2021 27
5 Configuration
The I61_LINK accepts up to 100 connected driver function blocks. If more than 100
devices are to be connected, a second I61_LINK block must be used. Its cycle time
for the cyclic operation in the S7 CPU should be shorter than 1 second. The
connected function blocks may run in a slower cycle than the I61_LINK block.
Each specific IEC 61850-driver function block needs a registration in the connected
function block I61_LINK. As long as the registration is not completed, the function
block consumes additional operation time to execute the registration. To avoid an
operation time overflow, the maximum operation time per cycle is limited by
splitting the registration process into several cycles. Therefore, the registration of
all function blocks needs multiple cycles. The registration is done during start up by
using the OB 100. The function blocks have the property “S7_tasklist := OB100”.
According to this property, they are inserted in OB100 automatically by the
engineering tool CFC. When the CPU starts up, all function blocks in OB100
perform their registration before the cyclic operation is started. This is only
successful if the function block I61_LINK is placed in OB100 on top of the
specific function blocks.
Figure 5-11 Link block engineering
© Siemens AG 2021 All rights reserved
NOTE In the sequence of the function blocks in the OB100 the function block I61_LINK
must be on top of the Gateway-specific blocks.
Station Gateway
Entry-ID: 109779570, 05/2021 28
5 Configuration
The string outputs STAT1, STA2, STA3 and STAT4 display the actual status of the
S7 connections, which are entered in the inputs CONN_ID1, CONN_ID2,
CONN_ID3 and CONN_ID4. A connection fault is displayed with a negative
number. The error free states are displayed with several symbols. Example: A1>
Symbol in Description
STATn
X or Y Connection established to one (X) or two (X and Y) Station
Gateway without a fixed role
1 Connection via the Ethernet CP (CP443-1) with the lower IP
address
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 29
5 Configuration
5.2.2 DIAG_CM
This block provides status and debug information about the connected Station
Gateway devices.
The input CONNECT needs to be connected to the I61_LINK output CONNECT. At
the input SE_EX_DA (Service agreement expire date), the expiration date of your
hardware specific service contract should be entered. The output REM_DAYS
(remaining days of current service contract), shows the remaining days of the
current service agreement. If the service agreement expires, an OS alarm is
created. The DIAG_CM outputs shows the current data.
Figure 5-12 DIAG_CM
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 30
5 Configuration
NOTE The maximum length of an IEC path for any tag must not be longer than 66
characters in total. The path to an IEC tag consists of the IED Name and IED
Address. Tags with paths which are longer than 66 characters will not be
exchanged. IED Name and Logical Device must not be longer than 33
characters in total.
The following table shows inputs and outputs of the function blocks I61_GEN and
© Siemens AG 2021 All rights reserved
SG_x:
Name Type Function
Inputs
INIT_OBJ BOOL Start loading the parameters for the transfer objects (IEC 61850
addresses) to the Station Gateway when changing from 0 to 1,
INIT_OBJ must be set to 1 during online operation.
IED_NAME STRING[30] Name of the IEC 61850 device in the IEC 61850 protocol
IP STRING[15] IP address of the IEC 61850 device,
Example: 192.168.11.12
DATSET1 STRING[66] Data set name for buffered reports in the IEC 61850 device
used by Station Gateway 1.
• DATASET1 can be the same than DATASET2
• Static and dynamic datasets are supported
BRCB1 STRING[66] Path name for buffered reports in the IEC 61850 device
used by Station Gateway 1
• BRCB1 must be different from BRCB2
• Buffered and unbuffered ReportControlBlocks can be used
DATSET2 STRING[66] Data set name for buffered reports in the IEC 61850 device
used by Station Gateway 2
BRCB2 STRING[66] Path name for buffered reports in the IEC 61850 device
used by Station Gateway 2
UDATSET1 STRING[66] Data set name for unbuffered reports in the IEC 61850 device
used by Station Gateway 1.
• DATASET1 can be the same than DATASET2
• Static and dynamic datasets are supported
Station Gateway
Entry-ID: 109779570, 05/2021 31
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 32
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 33
5 Configuration
NOTE If only tags for cyclical reading are configured, the communication won’t work.
The configuration of at least one reporting Boolean value is required.
5.2.4
Station Gateway
Entry-ID: 109779570, 05/2021 34
5 Configuration
5.2.5 I61_RIO
The function block I61_RIO was designed to connect remote IOs (e.g., Phoenix)
via IEC 61850 to PCS 7. The setup of the IED name, IED IP, Datasets and
ReportControlBlocks are equal to the other device blocks.
This block offers the following amount of IOs:
• 128 acyclic Bool inputs (single point)
• 16 cyclic Bool inputs (single point)
• 64 Bool command outputs (single point)
• 64 cyclic Real inputs
• 32 Real command outputs
• 2 cyclic Integer inputs
The I61_RIO itself doesn’t contain alarms for Bool input values. The alarm
generation is done via Bool input interface.
NOTE The maximum length of an IEC path for any tag must not be longer than 66
characters in total. The path to an IEC tag consists of the IED Name and IED
Address. Tags with paths which are longer than 66 characters will not be
exchanged.
© Siemens AG 2021 All rights reserved
NOTE The I61_RIO and its interface blocks must be used inside the same runtime
group!
NOTE To ensure that all written commands are transferred successfully from the PLC
to the IED, the interpretation of the command feedback is necessary.
Alternatively, all transferred commands could be read back and compared with
the value of the command inside the PLC.
Station Gateway
Entry-ID: 109779570, 05/2021 35
5 Configuration
The following table shows inputs and outputs of the function block I61_RIO:
ACTIVE
Single BOOL Single=0 usage with redundant Station Gateway
Single=1 usage with singular Station Gateway
Health_Def STRUCT Input for configuration of alternative health parameter.
CDI_D1 STRUCT IEC 61850 addresses of Cyclic Digital (bool) Input values. Each
CDI_D2 input represents 8 Channels.
HEAD STRING[16] Constant label: 'Cyclic BOOL obj'
B01_ID STRING[66] Address of the transfer object 1
B02_ID STRING[66] Address of the transfer object 2
B03_ID STRING[66] Address of the transfer object 3
B04_ID STRING[66] Address of the transfer object 4
B05_ID STRING[66] Address of the transfer object 5
B06_ID STRING[66] Address of the transfer object 6
B07_ID STRING[66] Address of the transfer object 7
B08_ID STRING[66] Address of the transfer object 8
CAI_D1 STRUCT IEC 61850 addresses of Cyclic Analogue (real) Input values. Each
CAI_D2 input represents 8 Channels.
CAI_D3
CAI_D4 HEAD STRING[16] Constant label: 'Cyclic REAL obj'
R01_ID STRING[66] Address of the transfer object 1
R02_ID STRING[66] Address of the transfer object 2
R03_ID STRING[66] Address of the transfer object 3
R04_ID STRING[66] Address of the transfer object 4
R05_ID STRING[66] Address of the transfer object 5
R06_ID STRING[66] Address of the transfer object 6
R07_ID STRING[66] Address of the transfer object 7
R08_ID STRING[66] Address of the transfer object 8
Station Gateway
Entry-ID: 109779570, 05/2021 36
5 Configuration
DO_D1 STRUCT IEC 61850 addresses of Digital (bool) Outputs (command) values.
DO_D2 Each input represents 8 Channels.
DO_D3 HEAD STRING[16] Constant label: ‘Command
DO_D4 objects’
DO_D5 CMD_1 STRING[66] Address of the command 1
DO_D6 CMD_2 STRING[66] Address of the command 2
DO_D7
CMD_3 STRING[66] Address of the command 3
DO_D8
CMD_4 STRING[66] Address of the command 4
CMD_5 STRING[66] Address of the command 5
CMD_6 STRING[66] Address of the command 6
CMD_7 STRING[66] Address of the command 7
CMD_8 STRING[66] Address of the command 8
Station Gateway
Entry-ID: 109779570, 05/2021 37
5 Configuration
61850 device
ERR_REDS BOOL 1 = the link between the redundant Station Gateways is disturbed
OBJ_CM1 BOOL 1 = parameters loaded into the first connected Station Gateway
OBJ_CM2 BOOL 1 = parameters loaded into the second connected Station Gateway
STAT_CM1 INT Error code in the case of a communication errors, 0= no error
STAT_CM2 INT Error code in the case of a communication errors, 0= no error
STAT_DEV INT Status of the IEC 61850 device, 1 = OK
HEALTH_CM1 INT Health of device from Station Gateway1
HEALTH_CM2 INT Health of device from Station Gateway2
DIAG_CM1 BYTE Error code buffered reporting Station Gateway1
DIAG_CM2 BYTE Error code buffered reporting Station Gateway2
MSG_E_FB BOOL ALARM_8P: Error
MSG_U_FB BOOL True = Message Suppression active
MSG_S_FB WORD ALARM_8P: STATUS Output
MSG_A_FB WORD ALARM_8P: ACK_STATE Output
QCDI_1 STRUCT Output of Cyclic Digital Input values. Each output represents 8
QCDI_2 Channels.
This Output should be used with interface block I61_DI.
QDO_1 STRUCT Feedback of Digital Output commands. Each output represents 8
QDO_2 Channels.
QDO_3 This output should be used with interface block I61_DO_FB.
QDO_4
QDO_5
QDO_6
QDO_7
QDO_8
Station Gateway
Entry-ID: 109779570, 05/2021 38
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 39
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 40
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 41
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 42
5 Configuration
The in-/outputs of the I61_RIO are organized in groups of 8 channels. Each input
group (e.g. CAI_D1, cyclical analogue input definition group 1) has the appropriate
group output (e.g. QAI_1, output cyclical analogue input 1).
Station Gateway
Entry-ID: 109779570, 05/2021 43
5 Configuration
Multiple connections from multiple Station Gateways (or multiple SG_LINK blocks)
to one IED are possible.
NOTE Each connection needs its own unique ReportControlBlock. Otherwise, the data
transfer of the DataSets between IED and Station Gateway isn’t triggered
correctly.
5.2.6.1 General
The function blocks in PCS 7 for the communication with IEC 61850 devices are
designed for CFC charts but can also be engineered in the software tool
KOP/AWL/FUP.
For the communication via the Station Gateway, the function blocks need a
connection of their input CONNECT with the output CONNECT of the I61_LINK
block.
The following table FB number Description
gives an overview of
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 44
5 Configuration
Station Gateway requires some common logical nodes. These common logical
nodes are defined as mandatory inside IEC 61850 specification 7.4 chapter 5.3.3.
NOTE If health attribute (Health$stVal) doesn’t exist on IED, communication issues like
bad quality codes could appear.
To avoid this issue, it is possible to assign an alternative health parameter using
the input “Health_Def”.
Station Gateway
Entry-ID: 109779570, 05/2021 45
5 Configuration
The following table shows the quantity of the different function blocks which are
part of the SG_LINK driver library. The Power Control Library (PCL) is not part of
the scope of delivery, but some of the blocks have an interface designed for the
technological blocks of the Power Control Library.
Analog Command
Binary Command
Double Point Ind.
Single Point Ind.
Double Integer
PCL Interface
Alarming
Integer
Float
Bool
I61_GEN 64 16 16 20 10 10 12 2 x -
I61_RIO 128 - 16 24 2 - 64 16 - -
SG_FEEDER 96 8 10 20 8 8 8 2 x x
SG_TRAFO 48 4 10 27 8 8 4 2 x x
SG_LINE 40 4 10 31 8 8 4 2 x x
SG_SYNC 80 8 50 60 8 8 8 2 x x
An IEC 61850 device is addressed by its IP address (input IP). The IED Name of
the IEC 61850 device is used to confirm the addressing. If the parameterized name
in the input IED_NAME does not match the name of the addressed IEC 61850
device, no communication is performed. Error status and code will be indicated.
Station Gateway
Entry-ID: 109779570, 05/2021 46
5 Configuration
For each transferred object, that is defined in a STRING[66] input, the function
block contains designated outputs with status information of this object.
The objects defined in BMSG_DEF are created in the dataset for the buffered
reporting.
The addresses of an IEC 61850 device are located in STRING inputs of the
assigned driver function block. The symbol $, which is often used in such
addresses, must be replaced by § in the address strings of the function blocks,
because the symbol $ is not accepted in the engineering tool CFC.
Example:
• original address IEC 61850: MEAS/MMXU1$MX$A$phsA$cVal$mag$f
• address string in PCS 7: MEAS/MMXU1§MX§A§phsA§cVal§mag§f
Station Gateway
Entry-ID: 109779570, 05/2021 47
5 Configuration
The function block needs the names of the dataset and report control blocks used
for the buffered reporting of the messages/alarms. If the configured datasets are
not available in the device, the gateway tries to create them (dynamic datasets). If
a redundant set of Station Gateways is used, the same dataset (but different report
control blocks) for both devices can be configured.
NOTE Important: In some devices, this creation is not possible. Then pre-defined
datasets (static datasets) have to be used. These static datasets should contain
the same tags for both devices of a redundant Station Gateway.
To check if report control blocks (RCB) are used after the configuration, check the
variables with IEC Browser BRCB1+RepEna and BRCB2+RepEna (e.g.,
DEV_CTRL/LLN0$BR$brcbA01$RptEna). They should be “true” or “1”. If RptEna is
not “true” after 5 minutes, something is wrong with the configuration and it must be
investigated.
Station Gateway
Entry-ID: 109779570, 05/2021 48
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 49
5 Configuration
The alarm texts and the message classes are defined in the blocks
“MSG_CREATE”, the ALARM_8P call is done within the I61_GEN block. The
I61_GEN block uses the original timestamps coming from IED.
Station Gateway
Entry-ID: 109779570, 05/2021 50
5 Configuration
Station Gateway
Entry-ID: 109779570, 05/2021 51
5 Configuration
SCAN_SEC
The Station Gateway cyclically reads the objects that are addressed in the
structures BOOL_DEF, REAL_DEF, DINT_DEF and INT_DEF. All defined objects
are polled with the same scan time. The common scan time can be set with the
parameter SCAN_SEC in steps of one second. The parameter SCAN_SEC is
transferred into the Station Gateway when the object parameters (all addresses)
are loaded. After changing the parameter SCAN_SEC, it is required to load the
Station Gateway again. The communication with the IEC 61850 device is stopped
during loading.
Station Gateway
Entry-ID: 109779570, 05/2021 52
5 Configuration
5.2.6.8 Loading the object parameters (addresses) into the Station Gateway
All specific parameters for the communication between the IEC 61850 device and
the function block are located in the inputs of the device driver blocks.
After changing the object parameters, the new values are not yet active in the
Station Gateway. It is necessary to download them into the Station Gateway first.
The download is started by rising edge of the input INIT_OBJ.
Additionally, the download of the object parameters is started automatically:
• after the restart of a Station Gateway
• after the restart of the PCS 7 controller
• after a communication interrupt of more than 3 minutes
The download of the object parameters can be suppressed with INIT_OBJ=0.
During online operation, the input INIT_OBJ must remain at the value 1. The value
0 is allowed only while changing the address inputs or temporarily to create a rising
edge to start the download.
The download may need some seconds up to a minute, depending on the number
of function blocks to be loaded.
During initialization, no process data is transferred between the function block and
the Station Gateway. The Station Gateway will continue storing messages with
timestamps (buffered reports) of the IEC 61850 device and will send them to PCS
7 after the download and initializing is finished.
If only one Station Gateway of a redundant pair is switched off and on, only this
© Siemens AG 2021 All rights reserved
Station Gateway will be initialized with the object parameters, while the other
Station Gateway continues the communication with the IEC 61850 device.
The Inputs and the Outputs of the device specific driver blocks are APL-structures,
so they contain the value and the quality code of the signal.
Inputs are only valid for the block if the quality code is 0x80.
For each cyclic transferred data from the IEC 61850 device, a group of output
structures is provided in the function block. These output structures contain the
process value and a quality byte.
Station Gateway
Entry-ID: 109779570, 05/2021 53
5 Configuration
For each IEC 61850 address parameter STRING[66], there is a quality indication
“.St” within the structure of the specific output. The quality is of the data type byte
and can have the following values:
5.2.6.12 Commands
The IEC addresses of Binary commands are configured at the input “BCMD_DEF”.
A typical IEC address example for a switch command is
'CTRL/Q0CSWI1§CO§Pos§Oper§ctlVal'.
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 54
5 Configuration
Command configuration
The IEC protocol provides 3 additional configuration bits, which are sent with the
command (see also IEC 61850 documentation).
• Check interlocking: If this bit is set, the IEC device checks the local interlocks
before processing the command
• Synchrocheck: If this bit is set, the IEC device performs a synchrocheck before
processing the command
• Test: If this bit is set, the IEC device only performs a test of the command
These bits can be configured in the Station Gateway per configured command on
the Input “CMD_CONF”:
There is one byte for each command. This byte has the following bit allocation:
• Bit 0(0x01): Check Interlocking
• Bit 1(0x02): Synchrocheck
• Bit 3(0x04): Test
E.g., 0x03 for Interlocking and Synchrocheck
Station Gateway
Entry-ID: 109779570, 05/2021 55
5 Configuration
The individual function blocks do not monitor the S7 connections to the Station
Gateway. The error indication for the S7 connections is done by the I61_LINK
block. The individual function blocks, that are placed behind the I61_LINK block,
watch the data exchange with the Station Gateway regardless of the number of S7
connections used by the function block I61_LINK.
HEALTH_CM1/2
The outputs HEALTH_CM1/2 display the value of the IEC Address
CTRL/LLN0$ST$Health$stVal, which is the global status of the device.
HEALTH_CM1 comes from the first Station Gateway, HEALTH_CM2 from the
second.
© Siemens AG 2021 All rights reserved
Value Description
1 (“OK” in CFC) OK
2 Warning
3 Error
255 No connection to the device
For deeper troubleshooting, the Station Gateway offers some more information.
Inside the appropriate logfile /var/log/S7diag/[IED-Name].log search for the
following line:
"[Fri Nov 15 13:49:26 2019]Health device (0)
IED_0012CTRL/LLN0$ST$Health$stVal, Health BR 0"
• “Health device”: shows the health state of the device. “-1” means “Cannot read
value”
• “Health BR”: shows the health state of the buffered report control block:
Station Gateway
Entry-ID: 109779570, 05/2021 56
5 Configuration
DIAG_CM1/2
The DIAG outputs display the status of the buffered reporting for the Boolean
values and the alarms. If the reporting is set up successfully and the
communication is running, the CFC displays “OK” on these outputs. If not, there is
a hexadecimal error code. The explanation of the different error codes is done in
the appendix of this document.
with the function block. ERR_REDD is set if one Station Gateway indicates an error
of the data exchange with the designated IEC 61850 device. ERR_REDS is set if
one Station Gateway has lost its connection to the redundant Station Gateway via
Ethernet.
Station Gateway
Entry-ID: 109779570, 05/2021 57
5 Configuration
STAT_CMx Description
-1 Initial value, no operation in the PCS 7 station
0 No error
1 No connected data block at the input CONNECT
2 Input CONNECT is not connected with a I61_LINK block
3 Too many blocks connected with one I61_LINK block
4 No connection with a Station Gateway
6 Error while sending to a Station Gateway
7 Error while receiving from a Station Gateway
10 Waiting for the start of the communication with a Station Gateway
11,12 Error during loading of IED_NAME or IP
14,15 Error during loading of the object parameter
16,17 Error during loading of message object parameter
18,19 Error during loading of REAL object parameter
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 58
5 Configuration
The function block I61_STRUP was designed to reduce the PLC load while
initializing the IEC 61850 connections on start up.
The function block can be used optionally and is not required for the
communication itself. Depending on the amount of IEDs and the kind of cyclic
interrupt, which is being used for the driver blocks, it might be necessary to avoid
peaks of cycle time at start up. Usually, this block is only required in case of more
than 60 IEDs. The I61_STRUP block must be connected to all IEC 61850 driver
blocks used in one PLC. The following modes can be selected at the input
“MODE”:
• ECO
In ECO-Mode, the connected IEDs are started sequentially in groups, as
parametrized with the input “GRP_SIZE”. In case the GRP_SIZE is 16, 16
IEDs are started simultaneously until all IEDs are finished.
© Siemens AG 2021 All rights reserved
• FAST
In FAST-Mode all connected IEDs are started simultaneously.
• SAFE
In SAFE-Mode, every IED is started sequentially. This reduces the cycle time
at start up the most, but it will take some time to initialize all IEDs.
NOTE In case a driver block is not connected to a I61_STRUP block, all IEC 61850
driver blocks will be initialized simultaneously.
The following table shows inputs and outputs of the function block I61_STRUP:
Name Type Functions
Inputs
MODE BOOL Startup Mode (1 = ECO, 2 = FAST, 3 = SAFE)
GRP_SIZE INT Amount of IEDs to initialize simultaneously in ECO-
Mode
TIMEOUT INT Maximum number of cycles for one start up group
until the next start up group will start.
Outputs
STRUP_CON DWORD Interface to IEC 61850 driver blocks
Station Gateway
Entry-ID: 109779570, 05/2021 59
5 Configuration
One I61_SCFG can be used for multiple IEC 61850 driver blocks using the same
configuration.
© Siemens AG 2021 All rights reserved
NOTE In case of Analog reporting instead of standard cyclic polling, the IEC path needs
to be adjusted: While the standard IEC path at the input ‘REAL_DEF’ is only
required to be defined until the DataObject, the analog reporting also needs
information about the used measurand, e.g.:
Polling:
‘MEAS/MMXU1§MX§Hz’
Reporting:
‘MEAS/MMXU1§MX§Hz§mag§f’
NOTE Depending on the selected data source, the required PLC’s cycle time will
increase. As there are various configuration possibilities, the expected cycle time
is not predictable.
Station Gateway
Entry-ID: 109779570, 05/2021 60
5 Configuration
The following table shows inputs and outputs of the function blocks:
Name Type Functions
Inputs
INIT_OBJ BOOL Start loading the parameters for the transfer objects
(IEC 61850 addresses) to the IEC 61850 driver block
when changing from 0 to 1,
INIT_OBJ must be set to 1 during online operation
S_CFG_A STRUCT Source config for analogue values
S_CFG_B STRUCT Source config for binary values
S_CFG_BC CTRUCT Source config for binary commands (only I61_SCFG)
Outputs
SCFG_CON STRUCT Interface to IEC 61850 driver blocks
The following table shows the possible inputs of the I61_SCFG inputs. E.g., in case
the Input “HWA30_REAL” shall be used as the data source for the frequency at the
SG_FEEDER block, the corresponding input at “S_CFG_A” must be set to “16#30”.
Name Value Description
S_CFG_A 16#00 Polling analog values
16#01 Reporting analog values
16#30 Hardwired analog values
© Siemens AG 2021 All rights reserved
…
16#37
S_CFG_B 16#00 IEC 61850 values
16#01 Trip indication buffer
16#50 Hardwired single group signals
…
16#57
16#10 Hardwired double group signals
…
16#13
S_CFG_BC 16#00 IEC 61850 commands
16#01 Hardwired binary command
Station Gateway
Entry-ID: 109779570, 05/2021 61
5 Configuration
Through the function block I61_BUFF, the Station Gateway is able to process
IEC 61850 trip signals for the data type bool. The following figure shows an
engineering example for the function blocks SG_FEEDER and I61_BUFF. The
SG_FEEDER is connected to I61_BUFF. The I61_BUFF enables the trip signal
buffering.
The Station Gateway is able to buffer up to 10 value changes per tag. If more than
one value change occurs in one Gateway-Firmware “read-cycle”, the values are
buffered with time stamps inside the Station Gateway. All buffered signals are sent
at once (in one S7 telegram to PCS 7). Value changes occurring in a period shorter
than 15 ms may not be detected successfully.
On the PCS 7 side, if the function block SG_FEEDER (and internal I61_COMM)
receives more than one value change, it writes the values into the buffer. The
function block I61_BUFF is connected like in the figure above. I61_BUFF, like the
Station Gateway-Firmware, can store up to 10 value changes for one tag.
Station Gateway
Entry-ID: 109779570, 05/2021 62
5 Configuration
The function block I61_BUFF is available for the communication function blocks
I61_GEN, SG_FEEDER, SG_TRAFO, SG_LINE and SG_SYNC. Each
communication block instance can be equipped with an own I61_BUFF. Each
I61_BUFF can only be connected to ONE communication block. If a
communication block is equipped with a I61_BUFF, the trip buffering is enabled. If
a communication block has no I61_BUFF, trip buffering is disabled.
The I61_BUFF must be pasted into the same CPU cycle, then the communication
block. I61_BUFF, doesn’t need any configuration.
NOTE Please consider the number of I61_BUFF blocks because these blocks allocate
RAM and generate CPU load.
5.3 Configuration
The configuration of all basic communication settings can be done with the built-in
web interface (see chapter 8).
IEC parameters
• ReconnectTimeout 100 ms
• ConnectTimeout 1000 ms
• InitiateTimeout 1000 ms
• DisconnectTimeout 1000 ms
• ReadListTimeout 1500 ms
• ReadAttrTimeout 1000 ms
• DataSetTimeout 1000 ms
• ReadTimeout 1000 ms
• WriteTimeout 1000 ms
• ControlTimeout 1000 ms
• Trigger Options 16#7C
• Integrity Period 30000 ms
Station Gateway
Entry-ID: 109779570, 05/2021 63
5 Configuration
Network
The default IP-addresses of the Nanobox Station Gateway are listed in the
following table:
NOTE X1 (S7 network) and X2 (IEC network) must be in different logical networks
(different subnets). E.g., if X1 is configured for network 140.80.0.0 (X1 default
configuration), the interface X2 must not be inside the same subnet.
appropriate loot test over all functionalities and signals. This test prevents
malfunction and signal loss during operation.
The tests should cover the following issues:
• Network reliability
• Misconfiguration inside PCS 7 (Netpro, CFC)
• Misconfiguration inside the web interface
– IP configuration
– Redundancy settings
– All needed functionality activated (e.g., time sync)
– IEC 61850 settings (e.g., trigger options)
Station Gateway
Entry-ID: 109779570, 05/2021 64
6 Features
6 Features
6.1 SNTP Routing
It is possible to allow time synchronization of IEDs with any SNTP server (inside
plant bus) through the Station Gateway. This can be enabled and configured via
the web interface.
The forwarding is only possible in the direction from the plant bus to the IEC
network.
The Station Gateway doesn’t contain an own time server. If IED (IP 192.168.60.10)
sends an NTP request (package source 192.168.60.10, destination 192.168.60.6)
to Station Gateway. The Station Gateway checks the NTP request on the IEC
interface. It replaces the source and destination address of the request (new
source 192.168.50.6, new destination 192.168.50.5). After that, the request is sent
to the time server.
The time server replies to the request and sends the answer to the Station
Gateway (IP 192.168.50.6). Station Gateway checks the answer and changes the
Station Gateway
Entry-ID: 109779570, 05/2021 65
6 Features
source and destination back to the appropriate values of the request (source
192.168.60.6, destination 192.168.60.10) and delivers the package to the IED.
This SNTP forwarding runs on each Station Gateway device (on a single Station
Gateway or on both devices of a redundant Station Gateway). If a redundant
Station Gateway is used, the IEDs can be configured to use both devices (IP of first
device and IP of second device) as time server.
In order to ensure network security, direct communication between both networks
over the Station Gateway is not possible.
Configure the S7-400 Controller to also run in the local time zone:
Station Gateway
Entry-ID: 109779570, 05/2021 66
6 Features
With these settings, the messages created in the PLC and in the SIPROTEC are
displayed with the correct timestamps in the WinCC alarm display.
NOTE The system time of the Station Gateway is synchronized via NTP client. The
Station Gateway always runs in UTC (not local time zone). However, the local
Station Gateway time is not used for IEC 61850 timestamps, the local Station
Gateway system time is only used for logging. As an alternative for an NTP
server environment, the time synchronization can be manually triggered once,
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 67
6 Features
6.5 Redundancy
In redundant mode, two gateways are working as two IEC 61850 clients with
individual connections. To setup a redundant Station Gateway, two singular
Nanobox Station Gateways can be paired to one redundant Station Gateway. The
function block for an IEC 61850 device in the PCS 7 station automatically
coordinates the operation of the redundant Station Gateways. Additionally, some
information is exchanged between the redundant partners via a redundancy
connection. This redundancy connection is possible via the serial COM1 or
SIMATIC network port.
• To setup a redundancy connection via SIMATIC network port, each Station
Gateway needs to be configured with its partner's IP address via the web
interface.
• If serial COM1 redundancy is required, the serial cable can be extended by an
Ethernet or an LWL converter
• At the function block I61_RIO, the parameter “Single” indicates if the Station
Gateway is used in a redundant or a singular mode:
▪ Single=0: usage with redundant Station Gateway
▪ Single=1: usage with singular Station Gateway
Each Station Gateway of a redundant pair is an independent client of an
IEC 61850 device. Both Station Gateways are receiving data from each IEC 61850
device at the same time. But only one Station Gateway transfers the data to the
PCS 7 station and only one Station Gateway writes commands into the appointed
© Siemens AG 2021 All rights reserved
IEC 61850 device. The data transfer to the PCS 7 station and to the IEC 61850
device is not necessarily concentrated in one Station Gateway for all IEC 61850
devices. Each Station Gateway may transfer the data of some IEC 61850 devices.
The role of a Station Gateway for an IEC 61850 device is managed in the PCS 7
station by the function block for this IEC 61850 device.
Station Gateway
Entry-ID: 109779570, 05/2021 68
6 Features
S7 400 / S7 400 H
The Station Gateway is designed for the communication of IEDs to project specific
application software in automation stations S7-400 or S7-400H. For this purpose, a
library with IED-interface blocks including OS block icons and faceplates is
delivered together with Station Gateway.
Safety program
The communication blocks cannot be located inside a safety program. Signals from
a safety program and commands into a safety program must be transformed before
they are exchanged between a safety program and a standard program in the PCS
7 CPU.
SFC
SFC programs of PCS 7 are not supported. Signals from an SFC program and
commands into an SFC program must be transferred by additional software for the
CFC chart, where the communication blocks are placed.
Station Gateway
Entry-ID: 109779570, 05/2021 69
7 Maintenance and Diagnostics
Questions regarding IEC 61850 server devices (IEDs), please contact the support
of the IED manufacturer.
For all Station Gateway relevant issues, please contact the PCIS Hotline
(information on the last page of this document).
Station Gateway
Entry-ID: 109779570, 05/2021 70
7 Maintenance and Diagnostics
7.2 Maintenance
Under normal usage conditions, the Station Gateway doesn’t need maintenance.
All Station Gateway increasing resources (e.g., space for logfiles) are managed by
a fully automated resource management. If the communication between S7 and the
IED runs reliably, and no error indications (LEDs, CFC block alarm, errors on the
web interface) are active, no manual maintenance is needed.
If a DP monitor and a USB keyboard are connected, the user ‘root’ can log in to
change the root password.
To connect a monitor, a DP/DP cable is recommended. Other cables (like DP/DVI),
adapters or KVM switches are not 100% compatible to the IPC227E interface.
An SSH-session can be started with any SSH client. Please use user ‘root’ to
© Siemens AG 2021 All rights reserved
connect.
Station Gateway
Entry-ID: 109779570, 05/2021 71
7 Maintenance and Diagnostics
Station Gateway
Entry-ID: 109779570, 05/2021 72
7 Maintenance and Diagnostics
0B MMSd_Client_ERR_CONNECTION_CLOSED
0C MMSd_Client_ERR_TIMED_OUT
0D MMSd_Client_ERR_CONNECTION_STATE
0E MMSd_Client_ERR_APPLICATION
0F MMSd_Client_ERR_PARAMETERS
10 MMSd_Client_ERR_CONFIRMED_ERROR
11 MSd_Client_ERR_REJECT
64 IEC61850_DATA_OBJECT_INVALIDATED
65 IEC61850_DATA_HARDWARE_FAULT
66 IEC61850_DATA_TEMPORARILY_UNAVAILABLE
67 IEC61850_DATA_OBJECT_ACCESS_DENIED
68 IEC61850_DATA_OBJECT_UNDEFINED
69 IEC61850_DATA_INVALID_ADDRESS
6A IEC61850_DATA_TYPE_UNSUPPORTED
6B IEC61850_DATA_TYPE_INCONSISTENT
6C IEC61850_DATA_OBJECT_ATTRIBUTE_INCONSISTENT
6D IEC61850_DATA_OBJECT_ACCESS_UNSUPPORTED
6E IEC61850_DATA_OBJECT_NON_EXISTENT
e.g., configured report control block is not existent
6F IEC61850_DATA_OBJECT_VALUE_INVALID
FF No Connection to device
Station Gateway
Entry-ID: 109779570, 05/2021 73
7 Maintenance and Diagnostics
NOTE The current version of “IEC Browser” doesn’t support IEC 61850 authentication.
© Siemens AG 2021 All rights reserved
NOTE It is not allowed to mix a redundant pair with one S7mEC and one Nanobox!
Station Gateway
Entry-ID: 109779570, 05/2021 74
7 Maintenance and Diagnostics
Preparation
1. Note all settings of the existing StatCon project on the Engineering Station.
2. Uninstall the existing StatCon version
3. Boot the first new Station Gateway in a separate network for testing purposes.
4. Initial configuration of the new Station Gateway with the web interface using
the settings noted in step one.
5. Configure redundancy properties for the new Station Gateway as required.
6. Repeat step three to five with the second Station Gateway and connect serial
cables if a serial connection is being used.
7. The new Station Gateways should work in redundant operation mode without
any S7 connected or IEDs connected – compare Web (details on the web
interface are explained in chapter 8) interface to the following figure and check
for any misconfiguration.
Station Gateway
Entry-ID: 109779570, 05/2021 75
7 Maintenance and Diagnostics
Replacement
1. Disconnect Station Gateway “A” (S7mEC) from the network and power supply.
Station Gateway “B” (S7mEC) is running, no loss of communication is
expected.
2. Remove Station Gateway “A” (S7mEC) from the cabinet and replace it with the
corresponding new Station Gateway “A” (IPC 227E).
© Siemens AG 2021 All rights reserved
3. Mount new Station Gateway at the cabinet and connect the power supply and
S7/IEC-Network cables to Station Gateway “A” (IPC 227E) and switch on
Station Gateway.
Station Gateway
Entry-ID: 109779570, 05/2021 76
7 Maintenance and Diagnostics
4. The new Station Gateways will automatically be loaded by the PLC. This
process may take several minutes. Afterwards, the web interface of Station
Gateway “A” (IPC 227E) should show a redundancy error only but all IEDs are
connected without any IED Error.
5. Disconnect Station Gateway “B” (S7mEC) from the network and power supply.
Station Gateway “A” (IPC 227E) is running, no loss of communication is
© Siemens AG 2021 All rights reserved
expected.
6. Remove Station Gateway “B” (S7mEC) from the cabinet and replace it with the
corresponding new Station Gateway “B” (IPC 227E).
7. Mount new Station Gateway at the cabinet and connect the power supply and
S7/IEC-Network cables to Station Gateway “B” (IPC 227E) and switch on
Station Gateway.
8. The new Station Gateways will automatically be loaded by the PLC. This
process may take several minutes. After the connections are restored
successfully, the upgrade process is completed.
Station Gateway
Entry-ID: 109779570, 05/2021 77
7 Maintenance and Diagnostics
NOTE This update changes the internal update process. If an update from version
V02_0x to a future one (> V02_13) is required, this update must be applied
before the newer update can be installed.
Solutions/Workarounds:
• Change root password manually on Station Gateway (see appropriate
chapter), no need to do any password change inside StatCon
• Download the StatCon configuration to Station Gateway. After that, hostname,
SNTP and network addresses are set to latest values
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 78
7 Maintenance and Diagnostics
Before a block update of the existing driver blocks which are part of the SG_LINK
library can be performed, you should take into account which version is currently
being used and whether the Power Control Library is part of the project.
Special attention is required in case the Power Control Library is being used and
the PCS 7 version is also being updated. The interfaces between the SG_LINK
blocks and the Power Control Libraries technological blocks changed with the
following versions of PCS 7 respectively the corresponding version of the PCL:
• PCS 7 V8.2 → PCS 7 V9.0
• PCS 7 V9.0 SP1 → PCS 7 V9.0 SP2
The following Table shows which version of the SG_LINK library was released for
which PCS 7 versions:
SG_LINK_V1.1
SG_LINK_V1.1
SG_LINK_V1.1
SG_LINK_V1.1
SG_LINK_V1.1
SG_LINK_V1.1
SG_LINK_V1.1
2
8
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 79
7 Maintenance and Diagnostics
In case the original library is no longer available at the engineering station, the
used version of the SG_LINK library can be determined with the versions of the
following function blocks of the library.
SG_LINK_V1.16
SG_LINK_V1.12
SG_LINK_V1.13
SG_LINK_V1.14
SG_LINK_V1.15
SG_LINK_V1.17
SG_LINK_V1.18
I61_LINK 7.9 7.9 7.9 7.9 7.9 7.9 7.9
19.03.2013
26.03.2013
17.05.2013
14.06.2013
13.10.2014
30.10.2014
Release
NOTE Custom system hardening and aftereffects from system hardening isn’t covered
by the service agreement and technical support.
Station Gateway
Entry-ID: 109779570, 05/2021 80
7 Maintenance and Diagnostics
Please consider that after disabling SSH service, the following inconveniences will
occur:
• StatCon can’t be used for configuration any longer (until SSH server is enabled
again)
• Remote connections via SSH aren’t possible any longer
• Maintenance/troubleshooting must be done via local monitor/keyboard
To change the startup behavior of SSH service, please perform the following steps:
1. Logon as root (local or via SSH)
2. Type the following command:
a. To enable SSH: “/bin/sshEnable.sh” and press enter
b. To disable SSH: “/bin/sshDisable.sh” and press enter
3. Reboot the device by command “reboot” and press
Station Gateway
Entry-ID: 109779570, 05/2021 81
7 Maintenance and Diagnostics
Please consider that after disabling HTTP service, the following inconveniences will
occur:
• Web interface will no longer be available
To change the startup behavior of HTTP service, please perform the following
steps:
1. Logon as root (local or via SSH)
2. Type the following command:
a. To enable web interface: “/bin/httpdEnable.sh” and press enter
b. To disable web interface: “/bin/httpdDisable.sh” and press enter
3. Reboot the device by command “reboot” and press enter
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 82
8 Station Gateway Web Interface
8.1 Status
The status tab contains four main functions:
• Read the current configuration values of the Station Gateway
• Change the configuration values
• Upgrade of the license and of the firmware version
• Export or import configuration files
Station Gateway
Entry-ID: 109779570, 05/2021 83
8 Station Gateway Web Interface
The settings are separated into the groups “General Settings”, “Report Settings”,
“Timeouts”, “Time Synchronization”, “Network Configuration” and “Redundancy”.
The side navigation bar can be used to toggle between the groups (see Figure 8-2).
© Siemens AG 2021 All rights reserved
In order to change any configuration values, click on the button “Update” in the
bottom right corner (see Figure 8-2). All settings that can be adjusted will then
display either an input field, a drop-down menu, a button or a slider depending on
the kind of setting. You can toggle between the groups of settings without the
inputs being deleted. However, reloading the page or switching to another menu
(top navigation bar) will delete any input data that has not been written to the
Station Gateway yet.
Figure 8-3 Input Report Settings
Station Gateway
Entry-ID: 109779570, 05/2021 84
8 Station Gateway Web Interface
To write the input data to the Station Gateway, click on the button “Send Data”. In
case of faulty inputs, a pop-up window containing further information will appear.
If all inputs are valid, a pop-up window containing all changed data will appear (see
Figure 8-4). If the button “Continue” is clicked, the data is written to the Station
Gateway and the system will reboot.
Figure 8-4 List of modified values
An upgrade of the license or firmware version is also initiated by first clicking on the
bottom right button “Update”. In the “General Settings” tab, two buttons named
“Upgrade” will appear.
To increase the number of possible IEC Devices, a new license is necessary. After
clicking on the Upgrade-button, a pop-up window will appear where you can enter
the license number. Click on “Confirm” once the number is entered and write the
data to the Station Gateway by clicking on “Send Data” as explained in the
previous section.
Station Gateway
Entry-ID: 109779570, 05/2021 85
8 Station Gateway Web Interface
Updating the Image Version requires mounting a USB flash drive containing the
new Image Version directly to the Station Gateway. Please note, that the Image
File needs to be in a *.rar format and the USB stick must only contain one file that
fits the format. Once the button “Continue” in the appearing pop-up window is
clicked, the image version will be upgraded, and the Station Gateway will reboot.
It is possible to export the current configuration into a .txt file or import the
configuration from a .txt file. When the side navigation tab “Import/Export
Configuration” is selected, a second side navigation bar appears with the two
options “Import’” or “Export”.
To import a file, click on the button “Select File”. The file will be read, and the
values displayed (see Figure 8-6). If you wish to write these values to the Station
Gateway, click on the button “Submit Config” and the system will reboot
automatically.
NOTE This process only works reliably if the configuration file was generated through
the web interface. The file should not be modified manually, otherwise errors
might occur. Only values that are displayed in the table will be written to the
Station Gateway. Values that couldn’t be read from the configuration file will be
displayed with a value of “-“.
The file export works similarly: After clicking on the button “Extract Config”, the
current values are displayed in a table and can be saved as a configuration file by
clicking on the button “Save Config”.
Station Gateway
Entry-ID: 109779570, 05/2021 86
8 Station Gateway Web Interface
8.3 IED
Figure 8-7 Display of all available IED Configuration files
© Siemens AG 2021 All rights reserved
The IED tab is used to read IED log files and IED configuration files (automatically
generated from CFC engineering). You can select which one you would like to read
at the side navigation and a second side bar will pop up displaying all available
files (see Fehler! Verweisquelle konnte nicht gefunden werden.).
8.4 Settings
The settings tab contains six different functions:
• Turn Debug Mode on and off
• Enable IEC authentication
• Log the Network Traffic
• Get the age of the root password
• Change the web interface login credentials
• Reboot the Device
The current Debug Mode is displayed in the according tab. To toggle the mode,
first click on the slider and then on the “Change Mode”-button. The system will
reboot automatically.
Station Gateway
Entry-ID: 109779570, 05/2021 87
8 Station Gateway Web Interface
The root password age can be obtained by selecting the according setting at the
side navigation bar.
To log the Network Traffic, it is necessary to physically mount a USB flash drive
directly to the Station Gateway.
NOTE Depending on the network traffic and the time window of the logging, it is highly
recommended to use a flash drive that contains at least 200GB of available
space.
Once the USB drive is inserted to the Station Gateway, click on the button “Mount
USB” in order to start the process (see Figure 8-8).
Once the logging has started, it will only be terminated if “Stop Logging” is clicked
and not by e.g., closing the web interface.
Station Gateway
Entry-ID: 109779570, 05/2021 88
8 Station Gateway Web Interface
The log file is split up into files of 1GB and is saved in a ring buffer. (If the flash
drive contains less than 5GB of available space, the log file is split into files of
200MB.) The files are saved to the USB flash drive in a folder that is named after
the current date and time. The folder name is displayed on the interface once the
process is finished (see Fehler! Verweisquelle konnte nicht gefunden werden.).
NOTICE Please do not remove the USB drive until the dialog in Fehler! Verweisquelle
konnte nicht gefunden werden. is displayed! Only then is it safe to unmount
the USB.
To change the login credentials, it is necessary to enter the current username and
password. The initial username and password are supplied within the delivery of
the Station Gateway. Once the correct data is entered, the option to enter new data
should appear (see Figure 8-10). The password needs to be between 6 to 20
characters long and contain at least one uppercase letter, one lowercase letter and
one digit.
To save the new data to the device, the system will need to reboot.
In this tab, one can reboot the device by clicking on the according button.
Station Gateway
Entry-ID: 109779570, 05/2021 89
9 Appendix
9 Appendix
9.1 Redundancy with COM extender
9.1.1 Fiber optic COM extender
The Ruggedcom RMC 20 was tested to extend the serial RS232 connection with a
fiber connection. A configuration setup was not needed.
The Ruggedcom RMC 30 was tested to extend the serial RS232 connection by an
Ethernet connection.
© Siemens AG 2021 All rights reserved
To set up this extender, some configuration was needed. Refer to the following
graphics:
Station Gateway
Entry-ID: 109779570, 05/2021 90
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 91
9 Appendix
The main requirement of this test was to ensure the collaboration between Station
Gateway and SIPROTEC devices.
The tests should cover:
1. a function test
a. Installation and StatCon configuration
b. Station Gateway CFC engineering
c. Test of the communication with SIPROTEC 4 and 5
i. Reading/writing of values
ii. Check of different data types
iii. Cyclic and acyclic communication
iv. Check of different trigger options
v. Time synchronization
© Siemens AG 2021 All rights reserved
Station Gateway
Entry-ID: 109779570, 05/2021 92
9 Appendix
All tests were performed on the SIPROTEC test field in Nürnberg. The test began
with a complete hardware installation in 09/2018. The long-term tests are still
running and are continuously monitored.
For this test setup new PLCs, Station Gateways and an ES were added to the
SIPROTEC test area. The extra hardware provides the possibility for performing all
tests without touching or interrupting the ordinary work in the test area.
PLC1 PLC2
S7 417-4 single S7 417-4 redundant
CP 443-1 CP 443-1
Station Gateway 2
Redundant
(RS232 connection)
Image V2.00
Station Gateway 1
Image V2.00
© Siemens AG 2021 All rights reserved
PLC1 was configured to communicate with the single StationGateway1, 100 IEDs
were engineered. The redundant PLC2 was connected with four S7 connections to
the redundant StationGateway2, 128 IEDs were engineered.
The following SIPROTEC 4/5 devices were used for the tests:
Station Gateway
Entry-ID: 109779570, 05/2021 93
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 94
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 95
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 96
9 Appendix
The collected experience, the test results and feedback from all participants was
considered during the development of firmware version 2.10 for Station Gateway.
All function tests succeeded. The system is still installed in Nürnberg and is
continuously monitored.
© Siemens AG 2021 All rights reserved
The redundant Station Gateway was connected to 128 IEDs. The singular Station
Gateway was connected to 100 IEDs. Both devices could handle the data load
without a limitation.
Station Gateway
Entry-ID: 109779570, 05/2021 97
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 98
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 99
9 Appendix
Station Gateway
Entry-ID: 109779570, 05/2021 100
9 Appendix
Department
Siemens AG
Industry Online Support
Phone
+49 (0) 721 667 1210 (Monday to Friday, 09:00 am to 05:00 pm CET/CEST)
Email
mailto:function.blocks.industry@siemens.com
Internet
https://support.industry.siemens.com/
Thank you for using one of the above-mentioned contacts to ensure your inquiry is
registered and can be processed.
© Siemens AG 2021
Station Gateway
Entry-ID: 109779570, 05/2021 101