Hach-Lange SC 1000 User Manual

DOC023.52.90143.Jan09

sc1000 Controller

Enhanced Communications

MANUAL

Edition 1

© HACH LANGE GmbH, 2009. All rights reserved. Printed in Germany as/sk

2

Table of contents

Section 1 Specifications ............................................................................................................................... 5

Section 2 General information ................................................................................................................... 7

2.1 Safety information .............................................................................................................................................. 7

2.2 Overview of product ........................................................................................................................................... 7

Section 3 Installation...................................................................................................................................... 9

3.1 User requirements ............................................................................................................................................. 9

3.2 General requirements associated with remote maintenance............................................................................. 9

3.2.1 Requirements associated with the sc1000 controller ............................................................................... 9

3.2.2 Requirements associated with the computer............................................................................................ 9

3.2.3 Scope of delivery .................................................................................................................................... 10

3.3 Overview of the various connection options .................................................................................................... 10

3.4 Establish an Ethernet connection .................................................................................................................... 12

3.4.1 Establish a basic Ethernet connection.................................................................................................... 13

3.4.2 Establish an Ethernet connection with secure VPN tunnel..................................................................... 14

3.5 Install a VPN tunnel ......................................................................................................................................... 15

3.5.1 Requirements associated with the sc1000 controller ............................................................................. 15

3.5.2 Requirements associated with the computer.......................................................................................... 15

3.5.3 sc1000 controller: Install the VPN client using an SD memory card ...................................................... 15

3.5.4 sc1000 controller: Install the VPN client using a web browser ............................................................... 17

3.5.5 sc1000 controller: Install the VPN client using Windows Explorer/FTP.................................................. 20

3.5.6 sc1000 controller: Check VPN installation.............................................................................................. 22

3.5.7 Computer: Install the VPN client............................................................................................................. 23

3.5.8 Establish a VPN connection between the sc1000 controller and the computer ..................................... 24

3.6 Establish a GPRS connection .......................................................................................................................... 25

3.6.1 Hardware requirements associated with the sc1000 controller ..............................................................26

3.6.2 Software settings for the sc1000 controller ............................................................................................ 26

3.6.3 GPRS connection without VPN tunnel ................................................................................................... 27

3.6.4 Establish a GPRS connection with secure VPN tunnel ......................................................................... 27

3.7 Establish a GPRS connection via fixed IP VPN server ................................................................................... 28

3.8 GPRS connection via a VPN server of the mobile network operator .............................................................. 29

3.9 GPRS connection via fixed IP service and VPN server of the mobile network operator.................................. 30

3.10 Optional Modbus TCP expansion .................................................................................................................. 30

3.10.1 Requirements associated with Modbus TCP........................................................................................ 30

3.10.2 sc1000 controller software settings ...................................................................................................... 31

3.10.3 Configure the Modbus TCP software module on the sc1000 controller ............................................... 32

3.10.4 Configure the Modbus telegram ........................................................................................................... 33

3.10.5 System configuration example using Unity Pro .................................................................................... 37

Section 4 Error messages.......................................................................................................................... 41

4.1 GSM/GPRS...................................................................................................................................................... 41

4.2 VPN tunnel....................................................................................................................................................... 41

4.3 Modbus TCP .................................................................................................................................................... 41

4.4 Notification by e-mail in the event of error messages/warnings....................................................................... 42

4.4.1 sc1000 controller software settings ........................................................................................................ 42

4.4.2 E-mail format .......................................................................................................................................... 43

Section 5 Replacement parts and accessories ................................................................................. 45

Section 6 Glossary ........................................................................................................................................ 47

Section 7 Contact........................................................................................................................................... 49

3

4

Section 1 Specifications

Specifications are subject to change without notice.

sc1000 controller display module

The sc1000 display module with integrated GSM/GPRS modem transfers data, SMS
and GPRS services to GSM networks.

The sc1000 controller is available with various GSM frequencies:

*GSM/*GPRS modem

Modbus TCP server

Ethernet port Ethernet RJ45, 10 MB/s

Warranty

Warranty 2 years

Outside the USA: MC55 EGSM900 GSM1800 GSM1900
USA: MC56 GSM1800 GSM1900 GSM850
MC55/56 supports GPRS multislot class 10 and the GPRS coding schemes CS-1,

CS-2, CS-3 and CS-4.
The Modbus TCP server exhibits "conformance class 0".

This class supports the following function codes:
Read Multiple Registers (FC 3)
Write Multiple Registers (FC 16)

The following function codes are also supported:
Read/Write Multiple Registers (FC 23)
Read Device Information (FC 43/14)

* USA

The transmitter contained within this product is a ”Tri-Mode” device that can operate in the 850 MHz / 1800 MHz /1900 MHz
bands. The use of this device is not authorized for operation as GSM 1800 Mhz in US & Canadian Territories.
This transmitter is authorized for use in either fixed or mobile locations.
Antennas used with this product must be located such that operation of this device is at least 20 cm (7.9 in) away from all
persons and must not be Co-Located with any other transmitting antenna.
The user is not authorized to use any antenna other than that provided by the manufacturer and shall not exceed 7 dbi for
GSM 1900 and 1.4 dbi for GSM 850 Mhz.

FCC ID: QIPMC56
IC #: 267W-MC56
CE per Notified Body#: CE 0682

* EUROPE

CAUTION

• Do not operate the device in hospitals and/or near medical instruments such as cardiac pacemakers or hearing aids.

• The device cannot be used in hazardous locations.

• Do not operate the device in the proximity of combustible gases, steams or dust.

• Do not operate the device near highly combustible areas such as gas stations, fuel depots, chemical plants and blasting
works.

• The device can cause disturbances when in the proximity of television sets, radios or PCs.

• Do not expose the device to strong vibrations or impacts.

• Using the GSM services (SMS messages, data communication, GPRS etc.) is likely to incur additional costs from a service
provider. The user is exclusively responsible for any damages and costs incurred.

• Do not use or install this equipment in any manner other than that specified in this manual. Inappropriate use will void the
warranty.

• Any change of the equipment is inadmissible and leads to the loss of the operating permission

• In addition to the safety considerations, obey all the regulations specific to the country in which the device is being operated.

5

Specifications

6

Section 2 General information

2.1 Safety information

Please read the entire manual carefully before installing the software. Further information
regarding the sc1000 controller is provided in the sc1000 controller manual.

2.2 Overview of product

The sc1000 controller is designed for Internet-based communication with other users.
The Ethernet port (wired connection) or the GSM/GPRS modem (wireless connection)
serves as the communication interface for the sc1000.

The wired connection via the Ethernet port (used to be service port) is established using
a LAN cable. If necessary, the optional sc1000 outdoor Ethernet port kit can be used to
afford additional protection to the Ethernet port when the sc1000 controller is used
outdoors. sc1000 controllers are also frequently installed in areas unsuitable for a wired
Internet/network connection. Mobile communications networks are a viable option for
collecting data and controlling the sc1000 controller remotely. This "M2M" solution
(M2M = machine to machine) integrates the sc1000 controller in a local IT network via a
GPRS mobile communications network.

A VPN tunnel makes sure that communication between the sc1000 controller and the IT
network is secure.

Once the LAN or GPRS connection has been established, no further steps are necessary
on the sc1000 controller.

The sc1000 controller is configured via a computer web browser. It is also possible to
download data logs/upload software updates in this way.

The optional Modbus TCP software module enables the sc1000 controller to be
integrated directly in PLC systems (PLC = programmable logic controller). PLC systems
record data measured by the sc1000 controller and process this data further.

7

General information

8

Section 3Installation

3.1 User requirements

Only appropriately trained specialist personnel are authorized to install and operate the
computer system and sc1000 controller. Users must possess sound knowledge of
network technology and computer systems.

3.2 General requirements associated with remote maintenance

Every specified requirement must be fulfilled, otherwise remote maintenance and/or
browser-based access to the sc1000 controller will not be possible, and damage to the
system may occur.

3.2.1 Requirements associated with the sc1000 controller

All safety information and instructions provided in the sc1000 controller manual must be
observed.

Additional requirements:

Browser password allocation

A browser password must be assigned before the Ethernet/GPRS connection is set up to
make sure browser-based access to the sc1000 controller is possible.

SYSTEM SETUP
BROWSER ACCESS
PAS SWORD

1. Select SYSTEM SETUP>BROWSER ACCESS>PASSWORD from the main menu of
the sc1000 controller.

2. Assign a browser password.

Assessment of GPRS availability at location

GPRS must be available at the sc1000 controller's location for this to be accessible
via GPRS.

Note: The availability of GPRS must be ensured at the controller's location.

Installation of Modbus TCP software module

If Modbus TCP support is used, the Modbus TCP software module must be licensed and
an activation key provided.

3. To activate either a trial- or permant license enter SYSTEM SETUP>LICENSE
MANAGEMENT.

3.2.2 Requirements associated with the computer

The computer to be connected to the sc1000 controller must be capable of establishing a
workable Internet connection.

The following requirements must be fulfilled:

• The user account used to log in to the computer must be assigned administration
rights

• A web browser must be installed

• An Internet connection must be available

9

Installation

3.2.3 Scope of delivery

The following components are included in the scope of delivery:

• VPN client software tailored to the sc1000 controller

• Manual

Note: Please contact the manufacturer or responsible representative immediately if either of the
components listed above are missing or defective.

3.3 Overview of the various connection options

There are several ways to establish a connection between the sc1000 controller and a
computer. Examples of the following types of connection are illustrated in Figure 1 and

Figure 2:

• Ethernet-based connection

• GPRS-based connection

Figure 1 Overview of alternative Ethernet-based connections

1 Basic Ethernet connection
2 Ethernet connection with secure VPN tunnel
3 Ethernet connection via fixed IP VPN server

10

Installation

Figure 2 Overview of alternative GPRS-based connections

1 GPRS connection without VPN tunnel (only possible if a CDA (Corporate Data Access) account is set up with the mobile

network operator)

2 GPRS connection with secure VPN tunnel
3 GPRS connection via a VPN server of the mobile network operator
4 GPRS connection via fixed IP VPN server
5 GPRS connection via a fixed IP service and VPN server of the mobile network operator

11

Installation

3.4 Establish an Ethernet connection

Figure 3 Ethernet connections

1 Basic Ethernet connection
2 Ethernet connection with secure VPN tunnel
3 Ethernet connection with fixed IP VPN server

The Ethernet connection is the wired connection between a computer and the Ethernet
port on the sc1000 controller. This Ethernet port is a 10 MB/s Ethernet connection located
on the display module.

A direct connection between the computer and the sc1000 controller is established as
follows:

Via basic Ethernet connection

(Figure 3, point 1)

Scope of application: The sc1000 controller is located within the corporate network or
used for testing purposes.

Via Ethernet connection with secure VPN tunnel

(Figure 3, point 2)

Scope of application: The sc1000 controller is outside of the corporate network.

Via Ethernet connection with fixed IP VPN server

(Figure 3, point 3)

Scope of application: The sc1000 controller is accessible via the Internet from any
location with a fixed IP address.

12

3.4.1 Establish a basic Ethernet connection

Figure 4 Basic Ethernet connection

If the sc1000 controller is located within the corporate network or is used for testing
purposes, a basic Ethernet connection without VPN between the devices is advisable
(Figure 4).

1. Connect the computer to the corporate network using an Ethernet cable. Make sure
the Internet connection is fully functioning. Open various Internet pages to test the
connection.

2. Connect the sc1000 controller to the network by inserting an Ethernet cable into the
RJ45 Ethernet port (Figure 5).

Installation

Figure 5 Ethernet port on sc1000 controller display module

1 Ethernet port (used to be service port) on display module

3. Select SYSTEM SETUP>BROWSER ACCESS from the sc1000 controller main

menu to configure network settings.

4. Request the following settings from the IT department if configuring network settings

SYSTEM SETUP
BROWSER ACCESS
IP ADDRESS
NETMASK
DNS IP
GATEWAY
DHCP

manually:

• IP ADDRESS

• NETMASK

• DNS IP

• GATEWAY

5. Configure the DHCP setting as follows for automatic configuration:

• DHCP: ON

13

Installation

6. Open a web browser on the computer. Enter the IP address of the sc1000 controller

in the address bar (refer to point 3.). The login page for the sc1000 controller is
displayed (Figure 6).

7. Enter the browser password (refer to Figure 6 and Section 3.4.1 on page 13).

Note: A browser password is essential for web browser-based access to the sc1000 controller.

Figure 6 Login page for sc1000 controller

The Ethernet connection between the computer and the sc1000 controller has now been
established.

3.4.2 Establish an Ethernet connection with secure VPN tunnel

Figure 7 Ethernet connection with secure VPN tunnel

If the sc1000 controller is outside of the corporate network, an Ethernet connection with a
VPN tunnel is required (Figure 7). Information on setting up a VPN tunnel is provided in

Section 3.5 on page 15.

14

3.5 Install a VPN tunnel

If the sc1000 controller is outside of the corporate network, a virtual private network
(VPN) must be installed between the computer and the sc1000 controller. The VPN
makes sure that the computer and sc1000 controller can communicate within a secure
channel (tunnel) that is protected from unauthorized access.

Windows 2000 and Windows XP both provide a built-in VPN server. However this only
enables a single connection to be made between an sc1000 controller and the computer
at any one time. For several connections to run simultaneously, a separate stand-alone
VPN server is required.

Depending on the design of the VPN connection, the VPN server is provided by a mobile
network operator/Internet service provider or the IT department. The design must be
planned thoroughly before installation.

3.5.1 Requirements associated with the sc1000 controller

The sc1000 controller requires a specific VPN software package that must be purchased
from the manufacturer. There are several ways to install the VPN software package on
the sc1000 controller:

• Using an SD memory card

• Using a web browser

Installation

• Using Windows Explorer/FTP data transfer

3.5.2 Requirements associated with the computer

The freeware VPN software "OpenVPN" must be installed on the computer (refer to

Section 3.5.4 on page 17).

3.5.3 sc1000 controller: Install the VPN client using an SD memory card

The sc1000 controller display module includes a build-in slot for SD cards. One of the
functions of the SD card is to update the controller software. Further information
regarding the use of SD memory cards is provided in the sc1000 controller manual.

An SD memory card containing the VPN client software tailored to the sc1000 controller
can be purchased from the manufacturer (refer to Section 5 on page 45).

Note: Only use SD cards with a maximum memory size of 1 gigabyte for installation.

1. Create the following directories on the SD memory card (if not yet created):

• DEV_SETTINGS

• SC1000

• UPDATE

2. Copy the following files to the UPDATE directory on the SD memory card:

From manufacturer:

• Tailored VPN client software for sc1000

(if not already installed on the SD card contact the support of the manuafcturer)

15

Installation

From VPN server provider:

• Configuration file (e.g. file with ".ovn" extension)

• Certificate (e.g. file with ".crt" extension)

• Key file (e.g. file with ".key" extension)

3. Start sc1000 controller.

4. Remove the cover of the SD card slot on the sc1000 controller display module

(Figure 8).

1

3

2

Figure 8 Underside of display module

1 SD card slot 3 SD memory card
2 SD card slot cover

5. Insert the SD memory card into the SD card slot on the sc1000 controller.

6. Reattach the SD card slot cover.

SYSTEM SETUP
STORAGE CARD
SOFTWARE UPDATE

7. Start the installation of the VPN client via SYSTEM SETUP>STORAGE
CARD>SOFTWARE UPDATE.

The sc1000 controller installs and configures the VPN software automatically and must
then be restarted.

8. To confirm the VPN configuration enter SYSTEM SETUP>BROWSER
ACCESS>VPN.

16

3.5.4 sc1000 controller: Install the VPN client using a web browser

Note: The web browser installed on the computer must support file transfer via FTP. Microsoft
Internet Explorer 7 only supports FTP protocol to a limited extent.

1. Make sure that the Ethernet connection between the sc1000 controller and computer
is fully functioning.

2. Make sure that the web browser used supports FTP.

3. Open the web browser on the computer and enter the IP address of the sc1000

controller into the address bar (Figure 9).

4. The login page for the sc1000 controller is shown.

Installation

SYSTEM SETUP
BROWSER ACCESS
IP ADDRESS

Figure 9 Login page for sc1000 controller

The IP address of the sc1000 controller can be found under

SYSTEM SETUP>BROWSER ACCESS>IP ADDRESS.

5. Enter the browser password (refer to 3.4.1 on page 13).

Note: A browser password is essential for web browser-based access to the sc1000 controller.

17

Installation

6. Press the UPDATE button under NAVIGATION (Figure 10).

Figure 10

7. Click on the UPDATE DISPLAY MODULE link (Figure 11).

Figure 11 Update Display Module link

UPDATE button

18

Installation

8. The "Upload files to sc1000" screen is displayed and the file manager interface (e.g.

Microsoft Windows Explorer) is integrated into the browser window.

Figure 12 Upload files to sc1000 controller

9. Click on ftp under FILES UPLOADED in the browser window.

10. Open the file manager (e.g. Microsoft Windows Explorer) and select the following

files. These must be stored on the hard disk, the network or a mobile data carrier:

From manufacturer:

• Tailored VPN client software

From VPN server provider:

• Configuration file (e.g. file with ".ovn" extension)

• Certificate (e.g. file with ".crt" extension)

• Key file (e.g. file with ".key" extension)

19

Installation

11. Copy the files and paste into the incoming directory in the web browser (Figure 13).

Figure 13 Transfer files

12. Press the

13. Confirm the update on the sc1000 controller screen.

The sc1000 controller now installs and configures the software automatically and must
then be restarted.

CONTINUE button.

3.5.5 sc1000 controller: Install the VPN client using Windows Explorer/FTP

If the web browser does not support FTP protocol, data transfer via FTP in Windows
Explorer is a viable alternative.

1. Close the web browser (if still open).

2. Open Windows Explorer.

3. Enter the following FTP address into the address bar in Windows Explorer:

ftp://<IP address of sc1000 controller>/tmp/incoming

Example: ftp://192.168.154.30/tmp/incoming

4. Press the

5. Open the file manager (e.g. Microsoft Windows Explorer) and select the following

files. These must be stored on the hard disk, the network or a mobile data carrier:

From manufacturer:

• Tailored VPN client software

ENTER key to confirm the FTP connection.

20

From VPN server provider:

• Configuration file (e.g. file with ".ovn" extension)

• Certificate (e.g. file with ".crt" extension)

• Key file (e.g. file with ".key" extension)

6. Copy the selected files to the following FTP directory:
<IP address of sc1000 controller>\tmp\incoming (Figure 14).

Installation

Figure 14 FTP data transfer in Microsoft Windows Explorer

7. Open the web browser on the computer and enter the IP address of the sc1000
controller into the address bar.

The login page for the sc1000 controller is shown.

8. Enter the browser password.

9. Press the UPDATE button.

10. Click on the UPDATE DISPLAY MODULE link.

11. Confirm the update on the sc1000 controller screen.

The sc1000 controller now installs and configures the software automatically and must
then be restarted.

21

Installation

3.5.6 sc1000 controller: Check VPN installation

1. Open the web browser on the computer and enter the IP address of the sc1000

controller into the address bar.

2. Enter the browser password (refer to 3.4.1 on page 13).

SYSTEM SETUP
BROWSER ACCESS
VPN
VPN

SYSTEM SETUP
BROWSER ACCESS
VPN
CONFIG FILE

3. On the SYSTEM SETUP>BROWSER ACCESS>VPN screen, make sure that the
VPN tag is set to LAN.

4. On the SYSTEM SETUP>BROWSER ACCESS screen, make sure that the VPN tag
is set to CONNECTION.

5. On the SYSTEM SETUP>BROWSER ACCESS>VPN>CONFIG FILE screen, make

sure that no tags are highlighted red.

Red tags indicate errors (refer to Section 4 on page 41).

Light gray tags indicate information that is already included in the configuration and
can be ignored.

6. Enter the USERNAME and PASSWO R D on the SYSTEM SETUP>BROWSER
ACCESS>VPN screen if requested to do so by the VPN server provider. These

details must be supplied by the VPN server provider.

22

3.5.7 Computer: Install the VPN client

In order to communicate with the sc1000 controller via a VPN tunnel, a VPN client must
also been installed on the computer.

Important Note: If a VPN client is required on the sc1000 controller to establish a
connection, OpenVPN must be installed as the VPN client on the computer. OpenVPN is a
free VPN solution supported by several operating systems. The software can be
downloaded from http://www.openvpn.net.

1. Install OpenVPN on the computer (following the installation instructions provided with
the software).

The OpenVPN icon appears in the taskbar on the desktop following installation
(Figure 15).

Installation

1 OpenVPN icon

Figure 15 OpenVPN icon in the taskbar

2. Copy the following files to the OpenVPN directory:

From manufacturer:

• Tailored VPN client software

From VPN server provider:

• Configuration file (e.g. file with ".ovn" extension)

• Certificate (e.g. file with ".crt" extension)

• Key file (e.g. file with ".key" extension)

3. Start OpenVPN.

23

Installation

3.5.8 Establish a VPN connection between the sc1000 controller and the computer

1. Start OpenVPN on the computer.

2. Enter username and password (Figure 16). These are supplied by the VPN server

provider.

Figure 16 Establish connection in OpenVPN

3. Enter the IP address (supplied by VPN server provider) of the sc1000 controller in the
web browser on the computer (Figure 17).

Note: The IP address can be found in the SYSTEM SETUP>BROWSER ACCESS>
VPN>IP ADDRESS menu on the controller.

Note: OpenVPN on the computer is not provided by the manufacturer. For details contact the VPN

server provider.

24

Figure 17 Login page for sc1000 controller

4. Enter the browser password (refer to Section 3.4.1 on page 13).

The computer and sc1000 controller are now connected via a secure VPN tunnel.

3.6 Establish a GPRS connection

Installation

Figure 18 GPRS connections

1 GPRS connection with secure VPN tunnel
2 GPRS connection via a VPN server of the mobile network operator
3 GPRS connection via fixed IP VPN server (only possible if a CDA (Corporate Data Access) account is set up with the

mobile network operator)

4 GPRS connection via a fixed IP service and VPN server of the mobile network operator

GPRS is a packet-oriented data service based on the established GSM mobile
communications standard. GPRS enables users to transfer data on the move. In this form
of data transfer, individual batches of data are converted into small data packets, in which
they are subsequently sent. These packets are then reconstructed upon receipt.

If GPRS is activated on the sc1000 controller, there is a seemingly permanent connection
with the receiver ('always-on' operation). However, a radio channel is not opened until
data is actually transferred. Use of a GPRS service is billed not by the duration of the
connection, but by the volume of data sent.

The mobile station (i.e. the sc1000 controller) is assigned a temporary, dynamic IP
address that uniquely identifies it. From the user's point of view, the device is accessed
via this IP address, as is customary on the Internet.

GPRS enables the sc1000 controller to establish an Internet-based connection through
which communication with other Internet users is possible.

The IP address assigned when using GPRS is not usually accessible directly from the
Internet. As a result, requests sent by a GPRS device (e.g. the sc1000 controller) can
only be routed as far as the Internet. Only at that point does the network operator
authorize the response to be routed from the Internet to the GPRS device.

25

Installation

All GPRS connections are managed via a mobile network operator. The following types of
GPRS connection are detailed in this manual (Figure 18):

• GPRS connection with secure VPN tunnel
(Figure 18, point 1)

• GPRS connection via a VPN server of the mobile network operator (only possible if a
CDA (Corporate Data Access) account is set up with the mobile network operator)
(Figure 18, point 2)

• GPRS connection via fixed IP VPN server
(Figure 18, point 3)

• GPRS connection via a fixed IP service and VPN server of the mobile network
operator (Figure 18, point 4)

3.6.1 Hardware requirements associated with the sc1000 controller

The sc1000 controller must be equipped for mobile data communication:

• A GSM/GPRS modem must be installed.

• An antenna must be connected.

• A GPRS-enabled SIM card must be installed.

If applicable, the SIM card must have been configured to the mobile network
operator's specifications ( e.g. PIN modified).

Note: A suitable data volume agreement should be concluded with a mobile network operator.

3.6.2 Software settings for the sc1000 controller

• Assign a browser password in the SYSTEM SETUP>BROWSER
ACCESS>PASSWORD menu.

• Enter the PIN specified by the mobile network operator in the SYSTEM SETUP>GSM
MODULE>PIN menu.

SYSTEM SETUP
GSM MODULE
DIAL-IN NUMBER
APN
GPRS
USERNAME
PASSWORD

• From the SYSTEM SETUP>GSM MODULE>GPRS menu

• Check whether the DIAL-IN NUMBER is identical to the number specified by the

mobile network operator

• Enter the APN (Access Point Name, provided by mobile network operator)

• Enter the USERNAME and PASSWO RD (provided by mobile network operator)

• Set the GPRS tag to ON.

The sc1000 controller is now GPRS-ready.

26

3.6.3 GPRS connection without VPN tunnel

Figure 19 GPRS connection without VPN tunnel

A GPRS connection without a VPN tunnel is only possible if a CDA account has been set
up with a mobile network operator. If this is the case, only the software settings need to
be configured on the sc1000 controller (Section 3.6.2 on page 26); configuration of the
VPN itself is part of CDA administration.

Without a CDA account, it is only possible to connect to the Internet. E-mails can be sent,
but access to the sc1000 controller is not possible with this type of connection.

3.6.4 Establish a GPRS connection with secure VPN tunnel

Installation

Figure 20 Establish a GPRS connection with secure VPN tunnel

1. Install the VPN client on both the computer and sc1000 controller as described in

Section 3.5 on page 15.

2. Set the SYSTEM SETUP>BROWSER ACCESS>VPN>VPN tag to GPRS on the
sc1000 controller.

3. Under SYSTEM SETUP>BROWSER ACCESS>VPN, check whether

• The STATUS tag is set to CONNECTION

• An IP address is displayed in the IP ADDRESS tag

Note: This IP address is important and will have been specified by the VPN server provider.
This address will already have been set when the standard VPN Ethernet connection was
established.

Check connection

The GPRS connection with secure VPN tunnel has been established if:

• The GPRS CONNECTION tag is displayed under STATUS in the SYSTEM
SETUP>GSM MODULE>GPRS menu.

• An IP address has been assigned in the SYSTEM SETUP>GSM MODULE>GPRS

menu. This IP address must be assigned, however, it is not relevant beyond this
stage.

27

Installation

3.7 Establish a GPRS connection via fixed IP VPN server

Figure 21 Establish a GPRS connection via fixed IP VPN server

There are problems associated with connecting a sc1000 controller within a corporate
network via a VPN tunnel. An external fixed IP service that assumes the roles of VPN
server and interface to the mobile network operator is therefore a viable alternative.

If a fixed IP service is used, the sc1000 controller is assigned its own fixed IP address,
from which it can be accessed via the Internet. This address does not change.

A fixed IP connection such as this can be Ethernet or GPRS-based (Figure 21). Costs
incurred for the use of GPRS/mobile network are billed based on the volume of data
transmitted and the frequency with which this occurs.

28

Installation

3.8 GPRS connection via a VPN server of the mobile network operator

Figure 22 GPRS connection via a VPN server of the mobile network operator

The mobile network operator's CDA service (Corporate Data Access service) is used the
transfer encrypted data between devices and the control center via GPRS. The corporate
network is connected to the mobile communications network in one of two ways: via a
rented line, which guarantees a fixed bandwidth and high degree of security, or via the
Internet. The connection between the corporate network and the mobile network operator
is established using a secure VPN tunnel.

The APN (Access Point Name), username and password are requested every time a
connection is established between the sc1000 controller and the computer. Users are
identified by the mobile network operator.

SYSTEM SETUP
GSM MODULE
DIAL-IN NUMBER
APN
GPRS
USERNAME
PAS SWORD

• From the SYSTEM SETUP>GSM MODULE>GPRS menu

• Check whether the DIAL-IN NUMBER is identical to the number specified by the

mobile network operator

• Enter the APN (Access Point Name, provided by mobile network operator)

• Enter the USERNAME and PASSWORD (provided by mobile network operator)

• Set the GPRS tag to ON

It is also possible to obtain a private access point (APN) within the network. If this option
is pursued, only machines with a specific SIM card profile can log on to the network via
this access point. The mobile network operator specifies the requirements associated
with configuring a private access point.

29

Installation

3.9 GPRS connection via fixed IP service and VPN server of the mobile network operator

Figure 23 GPRS connection via fixed IP service and VPN server of the mobile network operator

There are often problems associated with connecting to a company's own private
network. For this reason, fixed IP providers usually also offer this service.

The mobile network operator connects the user to the fixed IP provider via a private VPN
tunnel. The sc1000 controller does not require its own VPN client in this case. The user
requires VPN client software on his/her PC in order to connect to the fixed IP provider.

3.10 Optional Modbus TCP expansion

Modbus TCP is a standard for industrial communication. Through Modbus TCP,
computers can be connected to measurement and control systems that use the TCP/IP
protocol for data transmission. This form of data transmission is termed M2M
communication (M2M = machine to machine).

Note: In order to use the Modbus TCP software module, NO Modbus card must be installed in the
sc1000 controller.

The Modbus TCP software module enables the sc1000 controller to be integrated directly
in PLC systems (PLC = programmable logic controller). PLC systems record data
measured by the sc1000 controller and process this data further. Analysis of the data
received and the resulting actions are programmed in the PLC system.

3.10.1 Requirements associated with Modbus TCP

The Modbus TCP software module must be activated/licensed for use in the sc1000
controller.

30

3.10.2 sc1000 controller software settings

The Modbus TCP software module is configured in the following sc1000 controller
menus:

SYSTEM SETUP
MODBUS TCP

MODBUS TCP Determines whether Modbus TCP is activated (ON) or not (OFF).
TCP PORT Determines the TCP port.
TELEGRAM Configures a slave based on individual data compilations from various devices.

Default value: 0

MODBUS ADDRESS

VIRTUAL SLAVES

DATA ORDER

SIMULATION

SIMULATION

DURATION

MAXIMUM

MINIMUM

ERRORS

STATUS

TOGGLE Changes the direction of the simulated ramp application.

STATUS Contains information for data transfer.

Determines the address (1 to 247) of the Modbus slave configured in the TELEGRAM menu.

Default value: DEACTIVATED
Virtual slaves can be added. These are copies of actual devices and are configured in the

TELEGRAM menu. The Modbus addresses for these slaves are displayed directly to the right of
the configured slave's address. The Modbus address of the first configured device is displayed
directly to the right of the configured slave's address, the address of the second device is
displayed to the right of that, and so forth.

ACTIVATED: Slave copy is activated.
DEACTIVATED: Slave copy is deactivated.

Default value: NORMAL
Determines the byte sequence for transferring floating point values. A floating point value

consists of 4 bytes.
Note that this setting only relates to data of the configured slave.
SWAPPED: Swaps the first byte pair with the last byte pair.
NORMAL: The pairs are not swapped.
An incorrect setting in this menu can lead to slight deviations in the floating point values (shifted

by one register).
Simulates two floating point values and errors/statuses to substitute an instrument. The first

floating point value passes through a ramp between limits set in the MINIMUM and MAXIMUM
menus.

Default value: NO
Switches simulation on (YES) or off (NO).

Default value: 10 minutes
Determines the time required by the first floating point value to pass through the entire range

between MINIMUM and MAXIMUM.
Default value: 100

Upper limit for first floating point value.
Default value: 50

Lower limit for first floating point value.
Default value: 0

The value entered in this menu is set as the value in the first simulated register.
Default value: 0

The value entered in this menu is set as the value in the second simulated register.

Installation

31

Installation

3.10.3 Configure the Modbus TCP software module on the sc1000 controller

SYSTEM SETUP
MODBUS TCP
MODBUS TCP
TCP PORT
TELEGRAM
MODBUS ADDRESS
VIRTUAL SLAVES
SIMULATION
STATUS

1. Set the MODBUS TCP tag to ON in the SYSTEM SETUP>MODBUS TCP menu.

2. Set the TCP PORT tag to 502 in the SYSTEM SETUP>MODBUS TCP menu.

Note: It may be necessary to select an alternative port depending on the corporate firewall
configuration. The responsible IT department will provide the necessary information regarding
this.

3. Create the telegram on the SYSTEM SETUP>MODBUS TCP>TELEGRAM
configuration screen (refer to sc1000 controller manual or Section 3.10.4 on

page 33).

Note: The telegram defines which data points are transferred by the sc1000 controller, and in
what sequence this takes place. The data points and names are probe-dependent.

4. Make sure that the telegram address is entered under SYSTEM SETUP>MODBUS
TCP>MODBUS ADDRESS (default = 1).

Note: Devices at subsequent addresses are only responsive if
SYSTEM SETUP>MODBUS TCP>VIRTUAL SLAVES is set to ON.

5. Enter values in the SYSTEM SETUP>MODBUS TCP>SIMULATION menu to enable
the transfer of data to be tested.

6. Set the SYSTEM SETUP>MODBUS TCP>SIMULATION>SIMULATION menu to ON
to test the transfer of data.

Information regarding the data transfer is displayed in the SYSTEM SETUP>MODBUS

TCP>STATUS menu (refer also to Table 4 on page 41).

32

Figure 24 Modbus TCP status menu

If all values have been set, the values transferred by the telegram can be queried and
processed further using any of the Modbus TCP clients.

A maximum of 5 Modbus TCP clients can be connected to the server at any one time. If
an additional Modbus TCP client attempts to establish a connection, the request will be
accepted but an existing connection will be lost as a result. The connection that has been
idle the longest is terminated.

3.10.4 Configure the Modbus telegram

Installation

SYSTEM SETUP
MODBUS TCP
TELEGRAM

1. Select SYSTEM SETUP>MODBUS TCP>TELEGRAM.

2. The configuration screen is displayed (Figure 25).

Figure 25 Configuration screen

1 ENTER button — Saves configuration and returns to the

FIELDBUS menu

CANCEL button — Returns to the FIELDBUS menu

2

without saving

ADD button — Adds new device/tag to the telegram

3

4 DELETE button — Removes a device/tag from the

telegram

5 UP/DOWN arrow — Moves device/tag up and down

3. Press

(Figure 26).

ADD and select a probe/device. The device selection window is displayed

Figure 26 Device selection window

33

Installation

4. Select a probe/device and press the ENTER button. The probe/device (including

serial number) is added to the telegram box (Figure 27).

Figure 27 Device list

5. Select a tag (e.g. error or status) and press the

ADD button. The tag selection box is

displayed with all tags that are available for the probe/device (Figure 28). The error
and status registers are identical for all probes/devices (Table 2 and Table 3).

Figure 28 Tag selection window

6. Select tag and press the
a tag and press the

ENTER button. The new tag is added to the telegram. Select

UP and DOWN buttons to alter the position of the tag (Figure 29

and Table 1).

34

Figure 29 Telegram list with new tag

7. Repeat steps to add additional probes/devices and tags.

Installation

8. Press the

ENTER button to save the configuration.

Table 1 Telegram list—Column description

Column Description

Data position in the configured Profibus slave (in 2 byte words)

1

2 Tag name to identify the configured data.

3

4

Modbus: Data position in the configured Modbus slave
This slave contains holding registers beginning at 40001.
Example: "0" means register 40001 and "11" means register 40012.

Data type
float=floating point value
int=integer values
sel=integer value resulting from an enumeration or selection list

Data status
r=data is read only
r/w=read/write

Table 2 Error register

Bit Error Description

0 Calibration error Faulty calibration detected
1 Electronic settings error Faulty electronic calibration/settings
2 Cleaning error Error in cleaning cycle detected
3 Measuring module error Error in measuring module detected

4 System initialization

5 Hardware error Faulty hardware detected
6 Internal communication error Internal communication error detected
7 Humidity error Excessive humidity detected
8 Excessive temperature Excessive temperature detected
9
10 Sample feed warning Error in sample feed detected
11 Questionable calibration warning Accuracy of previous calibration inadequate

Questionable measurement

12

warning
13 Safety warning Safety equipment error detected
14 Reagent warning Reagent warning, e.g. fill level < min detected
15 Service request warning Service request detected

Inconsistent settings detected, reset to factory
settings

Accuracy of previous measurement inadequate/out of
range

35

Installation

Table 3 Status register

Bit Status 1 Description

0 Calibration activated

1 Cleaning activated

2 Service mode activated

3 General error message General error detected, refer to error text for details

Measurement value channel 0,

4

poor quality
Measurement value channel 0,

5

range short-fall
Measurement value channel 0,

6

range exceeded
Measurement value channel 1,

7

poor quality
Measurement value channel 1,

8

range short-fall
Measurement value channel 1,

9

range exceeded
Measurement value channel 2,

10

poor quality
Measurement value channel 2,

11

range short-fall
Measurement value channel 2,

12

range exceeded
Measurement value channel 3,

13

poor quality
Measurement value channel 3,

14

range short-fall
Measurement value channel 3,

15

range exceeded

Calibration in progress, measurement value not up to
date

Cleaning in progress, measurement value not up to
date

Device in "Service" mode, measurement value not up to
date

Measurement accuracy is not within specified limits

Measurement value falls short of the specified range

Measurement value exceeds the specified range

Measurement accuracy is not within specified limits

Measurement value falls short of the specified range

Measurement value exceeds the specified range

Measurement accuracy is not within specified limits

Measurement value falls short of the specified range

Measurement value exceeds the specified range

Measurement accuracy is not within specified limits

Measurement value falls short of the specified range

Measurement value exceeds the specified range

36

3.10.5 System configuration example using Unity Pro

Figure 30 through Figure 32 illustrate how a system can be configured using the Unity

Pro PLC system software.

Installation

Figure 30 Overview of system configuration using Unity Pro

1 Engineering station with sc1000 WebAccess 3 sc1000 controller with probe
2 E.g. Telemecanique TSX Premium P57 4634M 4 E.g. Telemecanique Modicon Quantum CPU 65160

37

Installation

Figure 31 Connection of the sc1000 controller using Unity Pro

(The language of the menu entries depends on the language settings)

1 IP address 3 Content of telegram
2 Modbus address

38

Installation

Figure 32 System configuration using Unity Pro

1 Data order swapped 2 Telemecanique TSX Premium P57 4634M starts with

offset 0
Telemecanique Modicon Quantum CPU 65160 with
offset 1

39

Installation

40

Section 4 Error messages

4.1 GSM/GPRS

See GSM error messages in the sc1000 controller manual.

There are no specific status messages for GPRS.

4.2 VPN tunnel

SYSTEM SETUP
BROWSER ACCESS
VPN

4.3 Modbus TCP

SYSTEM SETUP
MODBUS TCP
STATUS

There are several status messages associated with establishing the VPN tunnel
connection. These are displayed under SYSTEM SETUP>BROWSER ACCESS>VPN:

• OFF: The OpenVPN client is deactivated

• LINK CONNECTION : The OpenVPN client is attempting to establish a connection to

the server.

• CONNECTION: A connection to the server has been established.

• INTERRUPTED: The connection to the server has been interrupted. This status is

displayed if the Internet connection is disrupted, e.g. the Ethernet cable is removed or
the GPRS connection is terminated. The connection is automatically established
again once the communication error has been resolved.

If an error occurs, the Modbus TCP server returns corresponding exception codes to the
querying client (Table 4).

The last exception code returned to each connected client is displayed in the SYSTEM

SETUP>MODBUS TCP>STATUS menu.

Table 4 Modbus exception codes in accordance with Modbus specification

Exception code Designation

01 Illegal Function
02 Illegal Data Address
03 Illegal Data Value
04 Illegal Response Length
05 Acknowledge
06 Slave Device Busy
07 Negative Acknowledge
08 Memory Parity Error
10 Gateway Path Unavailable
11 Gateway Target Device Failed to Respond

41

Error messages

4.4 Notification by e-mail in the event of error messages/warnings

If an error occurs, an e-mail containing a description of the error can be sent to one or
more recipients. Up to four configuration sets can be created for e-mail notification.

Each configuration set includes the following (not exhaustive):

• The e-mail address of the recipient.

• Selected errors, warnings and events associated with connected probes that trigger

e-mail notification.

In order to use e-mail notification, an active connection is required between the sc1000
controller and computer (GPRS or Ethernet-based) . An e-mail account must also be set
up with an e-mail provider. This provider must support the sending of e-mails via an
SMTP server (outgoing mail server).

4.4.1 sc1000 controller software settings

E-mail notification is configured from the following sc1000 controller menus:

SYSTEM SETUP

E-MAIL

E-MAIL 1-4

E-MAIL ADDRESS

LANGUAGE Selects the E-MAIL language
E-MAIL LIMIT

(0–100)
REPEAT

(0–24h)

START TIME

INHIBIT

CONFIGURE Specifies which devices are monitored and which error messages/warnings are sent by e-mail.

ADD

REMOVE Removes devices from the configuration list. All configured devices are displayed.

DEVICE NAME
1-n

SENDER E-mail address of the sc1000 controller. Used to specify sender.
SMTP SERVER Outgoing mail server of e-mail provider. The server name is supplied by the e-mail provider.

USER NAME

PASSWORD SMTP server of the e-mail provider. The password is supplied by the e-mail provider.

Specifies the e-mail address to which notifications are sent. Several e-mail addresses can be
specified. These must be separated by a space.

Specifies the maximum number of e-mail notifications that the sc1000 controller can send
within a 24-hour period. The 24-hour cycle begins from the START TIME entered.

Specifies the interval at which unconfirmed error messages are sent again to the E-MAIL
ADDRESS.

Specifies the start time for the REPEAT function.
E.g.: REPEAT=6 h, START TIME=02:00: Unconfirmed messages are sent again at 02:00,

08:00, 14:00, 20:00.
Default: OFF

ON: If the same error occurs more than once, e-mail notification is only sent for the first
instance.

Adds devices to the configuration list. All connected devices are displayed, including the
sc1000 controller. Devices already added are grayed out and cannot be selected.

Compiles individual messages for a device.
The ERRORS and WARNINGS menus contain all errors/warnings for the selected device.
1=An e-mail is sent in the event of an error/warning
0=An e-mail is not sent in the event of an error/warning
SELECT ALL: Activates (1) or deactivates (2) all menu options at once.

User name for logging on to the SMTP server of the e-mail provider. The user name is
supplied by the e-mail provider.

42

4.4.2 E-mail format

Error messages

Table 5 and Table 6 illustrate the e-mail format:

Table 5 E-mail format

Date
Warning/error text
Device name

2008-18-12
Communication Error
LDO

Local time
Warning/error ID number
Device serial number

Table 6 Example e-mail format

18:07:32
<E32>
[405410120]

Event counter

(1)

43

Error messages

44

Section 5 Replacement parts and accessories

Description Cat. no.

SD card, 1 GB LZY520
HACH LANGE display module with GSM modem LXV402.99.01001
Outdoor Ethernet port kit LZY553
Ethernet cable RJ45 LZX998
Modbus TCP software module, license key LZY598

45

Replacement parts and accessories

46

Section 6 Glossary

Table 7 Glossary

Ter m Explanation

APN Access Point Name; enables access to an external packet data network.

DHCP

DNS Domain Name System
Ethernet Physical layer for network communication, in accordance with IEEE standard 802.3.
Fixed IP server Server that assigns fixed IP addresses to end devices, and manages these.
FTP File Transfer Protocol
Gateway Networks based on different protocols can communicate with one another via gateways.

GPRS

GSM

M2M Machine to Machine
Modbus TCP/IP Modbus protocol that is integrated in the TCP/IP protocol.
PLC Programmable logic controller

VPN

VPN client

VPN tunnel

Dynamic Host Configuration Protocol; enables a new computer to be connected to an existing
network automatically.

General Packet Radio Service; packet-oriented transmission service that enables data and e-mail
to be sent using cell phones and computers.

Global System for Mobile Communications; second generation (2G) mobile communications
standard.

Software designed to connect devices running on a neighboring network to your own network
without the networks having to be compatible with one another. The network to which the devices
are connected is called an assigned network.

Software that enables a device running on a network to access a secondary VPN network, i.e.
that provides a virtual simulation of the configuration of the assigned network.

Additional encryption of the original network packets within the VPN protocol to prevent
interception and manipulation.

47

Glossary

48

Section 7 Contact

HACH Company
World Headquarters

P.O. Box 389
Loveland, Colorado
80539-0389 U.S.A.
Tel (800) 227-HACH
(800) -227-4224
(U.S.A. only)
Fax [phone]
[e-mail]
www.hach.com

HACH LANGE GMBH

Willstätterstraße 11
D-40549 Düsseldorf
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.de

DR. BRUNO LANGE AG

Juchstrasse 1
CH-8604 Hegnau
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.ch

Repair Service in the
United States:

HACH Company
Ames Service
100 Dayton Avenue
Ames, Iowa 50010
Tel [phone]
(U.S.A. only)
Fax [phone]

HACH LANGE LTD

Pacific Way
Salford
GB-Manchester, M50 1DL
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.co.uk

HACH LANGE FRANCE
S.A.S.

33, Rue du Ballon
F-93165 Noisy Le Grand
Tél. [phone]
Fax [phone]
[e-mail]
www.hach-lange.fr

Repair Service in Canada:

Hach Sales & Service
Canada Ltd.
1313 Border Street, Unit 34
Winnipeg, Manitoba
R3H 0X4
Tel [phone]
(Canada only)
Tel [phone]
Fax [phone]
[e-mail]

HACH LANGE LTD

Unit 1, Chestnut Road
Western Industrial Estate
IRL-Dublin 12
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.ie

HACH LANGE SA

Motstraat 54
B-2800 Mechelen
Tél. [phone]
Fax [phone]
[e-mail]
www.hach-lange.be

Repair Service in
Latin America, the Caribbean,
the Far East, Indian
Subcontinent, Africa, Europe,
or the Middle East:

Hach Company World
Headquarters,
P.O. Box 389
Loveland, Colorado,
80539-0389 U.S.A.
Tel [phone]
Fax [phone]
[e-mail]

HACH LANGE GMBH

Hütteldorferstr. 299/Top 6
A-1140 Wien
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.at

DR. LANGE NEDERLAND B.V.

Laan van Westroijen 2a
NL-4003 AZ Tiel
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.nl

HACH LANGE APS

Åkandevej 21
DK-2700 Brønshøj
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.dk

HACH LANGE LDA

Av. do Forte nº8
Fracção M
P-2790-072 Carnaxide
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.pt

HACH LANGE KFT.

Vöröskereszt utca. 8-10.
H-1222 Budapest XXII. ker.

Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.hu

HACH LANGE D.O.O.

Fajfarjeva 15
SI-1230 Domžale
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.si

HACH LANGE AB

Vinthundsvägen 159A
SE-128 62 Sköndal
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.se

HACH LANGE SP.ZO.O.

Al. Armii Krajowej 45
PL-50-541 Wrocław
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.pl

HACH LANGE S.R.L.

Str. Căminului nr. 3
Sector 2
RO-021741 Bucureşti
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.ro

ΗΑCH LANGE E.Π.Ε.

Αυλίδος 27
GR-115 27 Αθήνα
Τηλ. [phone]
Fax [phone]
[e-mail]
www.hach-lange.gr

HACH LANGE S.R.L.

Via Riccione, 14
I-20156 Milano
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.it

HACH LANGE S.R.O.

Lešanská 2a/1176
CZ-141 00 Praha 4
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.cz

HACH LANGE

8, Kr. Sarafov str.
BG-1164 Sofia
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.bg

HACH LANGE E.P.E.

27, Avlidos str
GR-115 27 Athens
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.gr

HACH LANGE S.L.U.

Edif. Arteaga Centrum
C/Larrauri, 1C- 2ª Pl.
E-48160 Derio/Vizcaya
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.es

HACH LANGE S.R.O.

Roľnícka 21
SK-831 07 Bratislava – Vajnory
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.sk

HACH LANGE SU
ANALİZ SİSTEMLERİ LTD . ŞTİ.

Hilal Mah. 75. Sokak
Arman Plaza No: 9/A
TR-06550 Çankaya/ANKARA
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.com.tr

HACH LANGE D.O.O.

Ivana Severa bb
42 000 Varaždin
Tel. [phone]
Fax [phone]
[e-mail]
www.hach-lange.hr

49

Contact

50