Two separate interfaces (integrated network separation):
Gigabit interface with one RJ45 port with 10/100/1 000 Mbps, full/half-duplex with auto-sensing capability
PROFINET interface with four RJ45 ports with 10/100 Mbps full/half duplex with autosensing and autocrossover functionality via integrated 4-port switch
Communication services via both interfaces:
Open communication (TCP/IP and UDP): Multicast with UDP, including routing between both interfaces
PG/OP communication: Inter-network with S7 routing
S7 communication (client, server, multiplexing) including routing between both interfaces
S7 H communication for S7-400 H systems, now also across network boundaries (ISO-on-TCP)
IT communication: HTTP communication permits access to process data via user's own Web pages. HTTPS communication is also possible with the CP 443-1 Advanced1). The e-mail client function allows e-mails to be sent directly from the user program. FTP communication allows program-controlled FTP client communication. Access to data blocks via FTP server.
Communication services via PROFINET interfaces:
Certified PROFINET IO controller with real-time properties (RT and IRT)
PROFINET CBA
IP address assignment via DHCP, simple PC tool or via user program (e.g. for HMI)
Media redundancy (MRP):
Within an Ethernet network with a ring topology, the CP supports the MRP media redundancy protocol as an MRP manager and as an MRP client
Diagnostics and network management:
Comprehensive diagnostics functions for all modules in the rack (including graphical diagnostics, e.g. topology)
Integration in network management systems due to support of SNMP V1/V3
Security mechanisms:
Access protection by means of configurable IP access list
Firewall for filtering connections on the basis of their IP/port addresses
Bandwidth limitation to avoid communication overload
VPN server and VPN client for tap-proof access to controllers
Encrypted HTML pages using SSL (HTTPs)
Secure file transfer (FTPs)
Tap-proof transfer of network analysis information to the network management system (SNMP)
Translation of private and public IP addresses (NAT/NAPT)
Configuration of all functions with STEP 7; The security functions are configured using the Security Configuration Tool (SCT) included in the scope of delivery for STEP 7 V5.5 SP2 HF1.
Configuration with STEP 7 Professional V11; only possible with a limited range of functions of the predecessor CP 443-1 (6GK7 443-1GX20-0XE0), without security functions and CBA. Version with security functions for TIA Portal in the planning stages.
