Festo CPX-IOT Operating Instructions Manual

CPX-IOT

Gateway

Festo AG & Co. KG
Ruiter Straße 82
73734 Esslingen
Germany
[phone]

www.festo.com

Instructions| Operating

8108871
2019-04a
[8108873]

8108871

Translation of the original instructions

EtherNet/IP®, OPCUA®, PI PROFIBUS PROFINET®, SPEEDCON® are registered
trademarks of the respective trademark owners in certain countries.

1 Intended use

The module described in this document is intended for use in the industrial sector
as a gateway between industrial Ethernet networks and cloud applications, such
as, forexample, Festo Dashboard applications.
The module is intended for installation in machines or automation-technology
systems and may only be used only as follows:
– In perfect technical condition
– In its original condition, without unauthorised modifications, except for the

adaptations described in this document
– Within the limits of the product defined by the technical data.
Outside of industrial environments, e.g.in commercial and mixed-residential
areas, it may be necessary to take measures to suppress interference.

Information on commissioning and operating the gateway, e.g. to activate the
network connections "Cloud" and "Device" and to integrate them into the cloud
("Onboarding"):

è 6.3 Rotary switch operating mode
èFesto App World, www.festo.com/appworld
èFesto Dashboards, dashboards.festo.com

Information on the terminal CPX:
èSystem description of the terminal CPX (CPX-SYS), www.festo.com/pk

3 Connection and display components

LED displays

1

Network connection "Cloud"

2

Network connection "Device"

3

Rotary switch operating mode

4

DIL switch

5

Interface to the terminal CPX

6

without a network connection
è 8 Connection technology

Fig. 1 Connection and display components

3.1 Network connections

For connection to the Internet and the local industrial Ethernet network or direct
connection to the field devices, there are two industrial Ethernet interfaces on the
module, the network connections "Cloud" and "Device". Both connections have
Auto-Negotiation und Crossover detection (factory setting).

Connection1)Pin

Cloud

2)

Device

2)

Signal3)Explanation Signal Explanation

1 TD+ Transmitted data + RD+ Received data +

2 RD+ Received data + TD+ Transmitted data +

3 TD– Transmitted data – RD– Received data –

4 RD– Received data – TD– Transmitted data –

Housing,
shielding con­nected

1) socket, M12, D-coded, 4-pin, SPEEDCON-compatible

2) Pin activation with deactivated crossover detection

3) TD = Transmit Data, RD = Receive Data, FE = Functional Earth

4) via RC link to functional earth

5) equipotential bonding èSystem description of the terminal CPX (CPX-SYS)

FE,
Shield

4)

Functional earth5)FE,

Shield

Functional earth

5)

Tab. 1 Network connections

3.1.1 Fieldbus protocol and field devices

Via the network connection "Device", field devices can be directly connected with
an industrial Ethernet connection to the Gateway, e.g. bus node or controllers
(controller, PLC) with protocols such as, forexample, PROFINET, EtherNet/IP or
OPCUA.

All available documents for the product èwww.festo.com/pk.

Note on licencing

This product uses open-source software, which is subject to "GNU General Public
License", Version2 and "GNU Lesser General Public License",
Version2.1,among others.
The licence conditions of the GPL, LGPL and the other open-source licences can be
viewed via the integrated web server of the product:

• Connect the gateway via the network connection "Device" with a PC or Note-

book.

• Calling up the web server:

èhttp://<IP-Adresse_des_Netzwerkanschlusses_"Device"/cgi-bin/system-

about.

2 Safety

– Before assembly or installation work:

Switch off the power supply and secure it against being switched on again.
– For the electrical power supply, use PELV circuits in accordance with

IEC 60204-1/EN 60204-1.
– Observe the handling specifications for electrostatically sensitive devices.
– Seal unused connections with cover caps to achieve the required degree of

protection.
– Use connection hardware with the required degree of protection.
– Observe specifications in the system description of the terminal CPX

(CPX-SYS).
– Commission only a completely mounted and wired module.

Information on the supported field devices and controllers èFesto AppWorld,
www.festo.com/appworld.

3.1.2 Network security

NOTICE!

Unauthorised access to the device can cause damage or malfunctions.

When connecting the device to a network, protect the network from unauthorised
access.
Measures to protect the network include:

• Firewall

• Intrusion Prevention System (IPS)

• Network segmentation

• Virtual LAN (VLAN)

• Virtual Private Network (VPN)

• Security at physical access level (Port Security)

An access password only protects against unintentional modification.
For additional information èGuidelines and standards for security in information
technology, e.g. IEC62443, ISO/IEC27001.

When connecting the gateway, configure the firewall setting for the network con­nection "Cloud" as follows:
– Outgoing connections: release for port 443 (HTTPS)
– Incoming connections: no port release

For further information on the required measures in terms of network security,
enter èwww.festo.com/sp: "CPX-IOT", filter according to Application Note .

3.2 LED displays

3.2.3 Module status "Onboarding"

Network-specific LED displays Gateway-specific LED displays

Cloud
(blue)

NS
(red/green)

TP1
(green)

TP2
(green)

1) General information on the LEDs PS and SF èSystem description of the terminal CPX (CPX-SYS)

2) Module positioning: LEDs PS, PL and NS flash at the same rate.

Network status "Cloud" PS

Network status "Device"

Connection status "Cloud"
("Link/Traffic")

Connection status "Device"
("Link/Traffic")

2)

2)

(green)

PL Reserved

SF

1)

(red)

M
(yellow)

supply
(Power System)

System error
(System Failure)

Module status "Onboarding"

Status of operating voltage -

1)

Tab. 2 LED displays

Normal operating status

Behaviour of the LED displays in a normal operating status:
– PS and NS illuminated green
– Cloud illuminated blue
– TP1 and/or TP2 illuminated or flashing green
– PL, SF and M are not illuminated

3.2.1 Network status "Cloud"

LED status Meaning Error handling

Illumin­ated blue

Flashes
blue 1x

Flashes
blue 2x

Off

Normal operating status:
Network connection to the cloud
("Link") created

Creation or new creation of a con­nection to the cloud

Network error – Check the configuration, e.g.

No connection to the cloud – Check network connection

–

–

DHCP address assignment,
static IP address

Tab. 3 Network status "Cloud" (LED with cloud symbol)

3.2.2 Network status "Device" (Network Status)

LED status Meaning Error handling

Illumin­ated
green

Flashes
green

Illumin­ated red

Flashes
red

Normal operating status:
The gateway is connected with field
devices ("Devices").

No connection to field devices
("Devices"):
The gateway is online and has an IP
address, but is not yet connected
with field devices.

Communication with the field
devices("Devices") has failed:
Non-permitted network configura­tion, e.g. already used IP address.

Communication with field devices
has failed:
Network connection disturbed, z.B.
connecting cable interrupted.

The gateway is offline. – Check network connection

–

– Check configuration
– Check module status
– Restart module ("Reboot")
– Repeat "Onboarding"

– Check configuration, e.g.

DHCP address assignment,
static IP address

– Check device connection

LED status Meaning Error handling

Off

Flashes
yellow 1x

Flashes 2x
yellow

Flashes 3x
yellow

Illumin­ated yel­low

Normal operating status:
Onboarding completed.
The gateway has been successfully
integrated into the cloud applica­tion.
The gateway is in the operating
mode "Off", "Read only" or
"Read/Write"

è 6.3 Rotary switch operating

mode.

Gateway Onboarding active:
The gateway is in operating mode
"Onboarding".
The gateway is integrated into the
cloud application.

The gateway is in operating mode
"Onboarding".
The gateway has been successfully
integrated into the cloud applica­tion.

Devices Onboarding active.
The gateway performs a network
scan: supported devices
("Devices") are integrated into the
cloud application.
The gateway is in operating mode
"Read/Write".

The gateway is not yet integrated
into the cloud application.
The gateway is in the operating
mode "Off", "Read only" or
"Read/Write"

è 6.3 Rotary switch operating

mode.

–

–

– Select operating mode

"Read only" or "Read/Write"

è 6.3 Rotary switch operating

mode

–

– Perform Onboarding

Tab. 5 Module status "Onboarding" (LED M)

3.2.4 Connection status "Cloud"

LED status Meaning Error handling

Normal operating status:
Network connection to the cloud
established

Illumin­ated
green

Data traffic ("Traffic")

Flashes
green

No network connection – Check network connection

Off

1) Flashing frequency is dependent on the traffic.

1)

–

–

Tab. 6 Connection status "Cloud" (Link/Traffic, LED TP1)

3.2.5 Connection status "Device"

LED status Meaning Error handling

Illumin­ated
green

Flashes
green

Normal operating status:
Network connection ("Link") to the
field devices ("Devices") estab­lished

Data traffic ("Traffic")

No network connection – Check network connection

1)

–

–

Off

Tab. 4 Network status "Device" (Network Status, LED NS)

Off

1) Flashing frequency is dependent on the traffic.

Tab. 7 Connection status "Device" ("Link/Traffic", LED TP2)

3.2.6 Status of operating voltage supply (Power System)

LED status Meaning Error handling

Normal operating status:
Operating voltage applied.

Illumin­ated
green

Undervoltage:
Operating voltage outside the toler­ance range.

Flashes
green

Operating voltage is not present – Check operating voltage sup-

Off

1)

General information on LEDPS èSystem description of terminalCPX (CPX-SYS)

–

– Rectify undervoltage.

ply

Tab. 8 Status of operating voltage supply (Power System, LED PS)

3.2.7 System error (System Failure)

LED

Process1)Meaning Error handling

(red)

Normal operating status:
No error.

–

4.1 Assembly

1)

NOTICE!

Material damage due to incorrect mounting.

Select screws that are suitable for the material of the interlinking block:

• Polymer: thread-grooving screws

• Metal: screws with metric thread

When ordering an individual module, all the screws required are enclosed.

1. Switch off the power supply and secure it against being switched on again.

2. Check seal and seal surfaces. Replace damaged parts.

3. Push the module carefully and without tilting into the interlinking block up to
the stop.

4. Turn the screws into the existing thread.

5. Tighten the screws in diagonally opposite sequence.
Tightening torque:1Nm ±10%.

4.2 Disassembly

1. Switch off the power supply and secure it against being switched on again.

2. Unscrew the screws.

3. Pull the module without tilting out of the interlinking block.

2)

5 Power supply

The operating and load voltage supply is fed in via interlinking blocks or end
plates with system supply.

Off

Simple error / information
(error class 1)

Flashes
red 1x

Error
(error class 2)

Flashes
red 2x

Serious error, internal error, e.g.
hardware error
(error class 3)

Flashes
red 3x

1) The LED SF flashes if an error occurs and is dependent on the error class.

2)

General information on LEDSF èSystem description of the terminalCPX (CPX-SYS)

3) Error class1 (minor error): 1xflash, pause

4) Error class2 (error): 2xflashes, pause

5) Error class3 (serious error): 3xflashes, pause

3)

4)

5)

– Error handling

èFesto App World,
www.festo.com/appworld.

Tab. 9 System error (System Failure, LED SF)

4 Assembly and disassembly

The module must be inserted into an interlinking block for the terminal CPX
èwww.festo.com/catalogue:
– Version 1:

Gateway in an interlinking block with system supply, e.g.CPX-GE-EV-S-...,
between two end plates

– Version 2:

Gateway in an interlinking block without supply, between two end plates with
system supply, e.g.CPX-EPL-EV-S-...

Information on power supply:

èSystem description of the terminal CPX (CPX-SYS)
èPin allocation power supply connection (CPX-PIN-BEL)

WARNING!

Risk of injury due to electric shock.

• For the electric power supply, use PELV circuits that guarantee a reliable elec­tric disconnection from the mains network.

• Observe IEC 60204-1/EN 60204-1.

• Connect all circuits for the operating and load voltage supply.

6 Switching elements

DIL switch 1

1

DIL switch 2

2

Rotary switch operating mode

3

Information on power supply è 5 Power supply.

1

2

3

Fig. 2 Assembly and disassembly

Gateway CPX-IOT

Screw

Interlinking block
(with system supply)

Fig. 3 Switching elements

6.1 DIL switch 1

Switching position Function

DIL 1.1: Off
(factory setting)

DIL 1.1: On Reserved

Reserved

Tab. 10 DIL switch 1.1

Switching position Function

DIL 1.2: Off
(factory setting)

DIL 1.2: On Reserved

Reserved

Tab. 11 DIL switch 1.2

6.2 DIL switch 2

Switching position Function

DIL 2.1: Off
(factory setting)

DIL 2.1: On è 10 Reset to factory setting ("FactoryReset")

Reserved

Tab. 12 DIL switch 2.1

Switching position Function

DIL 2.2: Off
(factory setting)

DIL 2.2: On è 10 Reset to factory setting ("FactoryReset")

Reserved

Tab. 13 DIL switch 2.2

6.3 Rotary switch operating mode

Switching position Operating mode/function

0: Off – Network connection "Cloud" deactivated (switch-off of inter-

1: Onboarding – Network connection "Cloud" activated

2: Readonly – Gateway sends process data of the configured field devices to

3: Read/Write – Gateway sends process data of the configured field devices to

face)

– No communication with the cloud

– Gateway for integration into the cloud ("Onboarding") ready

the cloud
– Manual adding of field devices enabled
– Automatic adding of field devices via the Auto-Scan function

blocked
– Removal of field devices and removal of the gateway from the

cloud ("Offboarding") blocked
– Receipt of data, e.g. parameters, from the cloud disabled
– Parameters of connected devices cannot be changed

the cloud
– Manual adding of field devices enabled
– Automatic adding of field devices via the Auto-Scan function

enabled
– Removal of field devices and removal of the gateway from the

cloud ("Offboarding") enabled
– Receipt of data, e.g. parameters, from the cloud enabled
– Parameters of connected devices can be changed

Tab. 14 Rotary switch operating mode

7 Ensuring the degree of protection

NOTICE!

Short circuit as a result of ingress of liquids or foreign matter.

Malfunction or damage to the electronics.

• Use connection devices (connecting cables, plugs, adapters) with the
required degree of protection.

• Use cover caps to seal unused connections.

• Mount the DIL switch cover:
– Check the seal.
– Place cover and press it on.
– Tighten screws.

Tightening torque: maximum0.4Nm.

8 Connection technology

Using the M12 socket 6 (è Fig.1), a terminal CPX can be directly connected with
the gateway without a network connection, i.e. without an industrial Ethernet
connection.

Connection Connecting hardware Cover cap

Network connection "Cloud"

Network connection "Device"

Interface to terminal CPX
without a network connection

1) socket, M12, D-coded, 4-pin, SPEEDCON-compatible

2) socket, M12, A-coded, 5-pin

1)

Plug NECU-M-S-D12G4-C2-ET

1)

Connecting cable

2)

NEBC-M12G5-S-1,5-N-M12G5

ISK-M12

Tab. 15 Connection technology

9 Parameterisation

The gateway can be parameterised via the FestoField Device Tool (FFT).
Alternatively, the integrated web server of the gateway can be used via the net­work connection "Device" for the parameterisation, e.g. for setting the IP
addresses of the network connections:
Connect the gateway via the network connection "Device" with a PC or Notebook.
Calling up the web server:
èhttp://<IP-Adresse_des_Netzwerkanschlusses_"Device"> (see IP configuration
(factory settings) è 13 Technical data)
Logging in:

èUser name: admin

èPassword (factory setting): CPX-IoT Product Key on the type plate, e.g.

3S7PMM2M93V

10 Reset to factory setting ("FactoryReset")

1. Set rotary switch to "Off".

2. Switch off the power supply.

3. Set DIL switch 2.1 and 2.2 to "On".

4. Switch on the power supply.
LEDM flashes quickly for a few seconds.

Ä

– Do not switch off the power supply
– Do not actuate the DIL switch

5. If the LEDM has stopped flashing:

Set DIL switch 2.1 and 2.2 to "Off".

The gateway has returned to the factory setting.

Ä

11 Firmware update

A firmware update is possible via the Festo Field Device Tool (FFT)
èwww.festo.com/sp.

12 Module replacement

After replacing a gateway, integration into the cloud („Onboarding“) must be car­ried out again èFesto App World, www.festo.com/appworld.

13 Technical data

Property Specification/value

General technical data èSystem description of the

Power supply

Operating power supply U

Intrinsic current consumption at nominal operat­ing voltage 24V from operating voltage supply
U

EL/SEN

Mains buffering time [ms] 10

Separation of network interface from operating
voltage supply U

Protection against electric shock

Degree of protection by housing
With power supply connection

– Via interlinking block IP65/IP67

– Via end plate IP20

Connection technology

Network connections 2 × sockets, M12, D-coded, 4-pin,

Interface to terminal CPX
without a network connection

Network-specific characteristics

Encryption of data transmission to the Cloud HTTPS

Transmission technology Industrial Ethernet,

Specification IEEE 802.3u (100Base-TX)

Transmission rate [Mbit/s] 10/100 (full duplex/half duplex)

Crossover detection Auto-MDI/MDI-X

Number of devices (network connection
"Device")

Cable specification

Cable type Ethernet twisted pair cable, shiel-

Transmission class (Link Class) Category Cat 5

Cable diameter

Wire cross section

Cable length [m] Maximum 100

1) protection against direct and indirect contact in accordance with IEC60204-1/EN60204-1

2) Degree of protection in accordance with IEC60529, module completely assembled, plug connector in the

plugged-in status or provided with cover cap

3) Connected products may only fulfil a lower degree of protection.

4) More devices can be operated depending on the application.

5) when using the plug NECU-M-S-D12G4-C2-ET

6) 22AWG required for max. connection length between network participants (end-to-end link)

5)

EL/SEN

6)

EL/SEN

1)

2)3)

,

[VDC] 24 ±25%

[mA] Typically 80

Cloud DHCP IP configuration (factory settings)

Device IP address: 192.168.0.1

[mm] 6…8

[mm2] 0.14…0.75

terminal CPX (CPX-SYS)

(internal electronics)

Galvanic

Through the use of PELV circuits

SPEEDCON-compatible

1 × socket, M12, A-coded, 5-pin

Subnet mask: 255.255.255.0

Switched Fast Ethernet

Maximum 10

ded (Shielded Twisted Pair, STP)

4)

Tab. 16 Technical data

14 Specified standards

Version

IEC 60529:2001-02 IEEE 802.3:2014-00

Tab. 17 Specified standards