Page 1
SIMATIC RF166C Introduction Security recommendations Description SIMATIC Ident Mounting RFID systems SIMATIC RF166C Connecting Configuring Operating Instructions Configuration using the Programming via SIMATIC controller Programming via OPC UA Service and maintenance Technical specifications Dimensional drawings Appendix Syslog messages Service & Support...
Page 2
Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems.
The "Settings - General" menu item ..................64 7.3.3 The "Settings - Reader Interface" menu item ................. 65 7.3.4 The "Settings - Communication" menu item ................69 7.3.5 The menu command "Diagnostics - Hardware diagnostics" ........... 78 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 4
Updating firmware of the readers using the TIA Portal (STEP 7 Basic / Professional) ..148 10.4 Factory settings ........................150 10.4.1 Restoring the factory settings via WBM ................150 10.4.2 Restoring the factory settings manually ................151 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 5
Ordering data ........................164 Certificates & approvals ......................167 Syslog messages ..........................169 Structure of the Syslog messages ..................169 Variables in Syslog messages ....................170 List of Syslog messages ....................... 171 Service & Support ..........................175 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
(RF200, RF300, RF600, MV400 and MV500). Further information on the PROFIBUS can be found in the "PROFIBUS Network Manual". You can find the current versions of the various manuals on the pages of the Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps/14970/man).
Page 8
Do not dispose of the products at public disposal sites. For environmentally compliant recycling and disposal of your electronic waste, please contact a company certified for the disposal of electronic waste or your Siemens representative. Adhere to the various country-specific regulations.
● Keep the software up to date. Keep yourself informed regularly about safety updates for the product. You can find information about this at Link (http://www.siemens.com/industrialsecurity). ● Activate only protocols that you actually need to use the device. ● Limit access to the device using a firewall or rules in an access control list (ACL).
Page 10
● The following certificate formats are supported for the import: Certificate Supported formats HTTPS *.p12 OPC UA server *.pfx *.pem *.cer *.cert *.der OPC UA client *.pem OPC UA CA *.cer OPC UA issuer *.cert *.der May contain a private key. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 11
● Enable only the services (protocols) that will actually be used on the device. The same applies to the installed interfaces/ports. Unused ports could be used to access the network downstream from the device. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 12
Security recommendations List of available protocols All available protocols and their ports that are used with SIMATIC RF166C are listed below. Table 2- 1 List of available protocols Service/ Protocol/ Preset port Port configura- Port number Authentication Encryption Protocol Port number...
Page 13
Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers’...
Properties of the communications modules Area of application The SIMATIC RF166C communication modules are designed for use in all areas of automation. It covers all areas in which SIMATIC Ident RFID readers and optical readers are operated. The application takes place in the field level via a controller. Thanks to the Ethernet interface, diagnostic data, such as processed transponder data or log entries, can be transferred to higher-level systems via OPC UA parallel to regular operation.
Note that the time of the device clock corresponds to UTC time and cannot be adjusted to time zones. It is recommended to synchronize the time with an NTP server to obtain unique time information. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 17
Only the sections with user-specific content, in other words content that is tool/interface-specific, contain these symbols. Sections without these symbols are general and relevant for both areas of application. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Reader LEDs 2x interface for PROFIBUS (M12, 5-pin, B-coded) ④ ⑨ Ethernet interface PROFIBUS address adjuster (M12, 4-pin, D-coded) ⑤ ⑩ Ethernet LED Mounting holes and functional ground Figure 3-2 Design of the communication module SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 19
Portal or another engineering system. The GSD file is stored on the communication module and can be downloaded from it using a Web browser. You can also find the GSD file at the website of Siemens Industry Online Support. SIMATIC RF166C...
Mounting rules Note Mounting the communication modules Only install the communication module when supply voltages are switched off. You do not have to observe any special rules when installing the communication modules. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
ISO 1207 / DIN EN ISO 1580 If you need washers, use washers conforming to DIN EN ISO 7089 / DIN EN ISO 7090. Cylinder head screw with M4 hex socket accord- ing to DIN EN ISO 4762 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 23
Fasten the communication module with the screws on a solid level surface. The device must be screwed (≤ 1.2 Nm) onto the panel at both fastening points (front top and bottom). Figure 4-1 Installing RF166C communication module SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Note Suitability of the power supply Make sure that the power supply units you use are also suitable for altitudes > 2,000 m. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 25
Information on the nameplate You will find the currently valid markings and approvals on the nameplate of the communication module. All other markings and approvals are currently based on an altitude up to 2,000 m. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 26
Mounting 4.3 Use at altitudes over 2,000 m SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
RF166C, it is possible that the connected device may be destroyed. PROFIBUS connection system You can find detailed information on PROFIBUS DP in the "PROFIBUS Network Manual (https://support.industry.siemens.com/cs/ww/en/view/35222591)" system manual. CAUTION Power supply All supply and signal voltages must be safety extra low voltage (SELV/PELV according to IEC 61140).
Page 28
The connection cable is available in lengths of 2, 5, 10, 20 and 50 m as standard. If necessary, these can be extended. Figure 5-2 Overview of connections SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Configuring RF166C with ungrounded reference potential When the communications module is set up with ungrounded reference potential, any interference currents occurring are conducted to functional ground via an internal RC network (no external connection between 1M and FE). SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 30
Fuses for line protection (automatic circuit breaker for 16 A) ④ When setting up the communications module with ungrounded reference potential, there is no connection between 1M, 2M and FE Figure 5-3 Electrical design SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 31
Insulation monitoring Isolation monitoring must be provided in the following cases: ● Design of the communications module with ungrounded reference potential ● If hazardous plant states can be expected as a result of faults. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
● Load voltage 2L+ and all other circuit components ● Communication interfaces (PROFIBUS) of the communication module and all other circuit components The following figure shows the potential relationships of the communication modules. Figure 5-4 Potential relationships of the communication modules SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 33
Load voltage (2L+) has no direct effect on the RF166C communication module. The following figure shows a configuration with another voltage supply for the communications modules. The different potential groups are highlighted in gray. Figure 5-5 Wiring of the power supply SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Required tools You need the following tool to connect to the functional ground: ● Screwdriver Accessories required You need the following accessories to connect to the functional ground: ● Fastening screw (M4) and washer SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 35
Ensure there is a low-impedance connection between the communications module and the conductive base and between the conductive base and functional ground. ① Grounded, metallic base ② Unpainted thread or nut support Figure 5-6 Mounting the CM on a conductive base SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
To connect to functional ground with a non-conductive mounting base, you can need the following accessories: ● Fastening screw (M4) and washer ● Cable lug suitable for M4 screws ● Ground conductor cable (copper braid) with a minimum cross-section of 4 mm SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 37
1.2 Nm. NOTICE Grounding with non-conductive mounting base Ensure a low impedance connection between the communications module and functional ground. Figure 5-7 Mounting the CM on a non-conductive base / connection to functional ground SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
⑦ ⑧ You can loop the supply voltages and PROFIBUS via the M12 round sockets The pin assignments of the various interfaces are lasered on the side of each communication module at the factory. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 39
M12 plug (4-pin, L-coded) and 4-wire cable (4 x 1.5 mm ● For the PROFIBUS connection M12 plug (5-pin, B-coded) and 2-wire PROFIBUS cable (shielded) You can find the associated article numbers in the section "Ordering data (Page 164)". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 40
Functional ground / shielding / shielding Table 5- 3 Pin assignment Ethernet; M12 socket (4-pin, D-coded) Assignment View of M12 socket, 4-pin Data line TxP Data line RxP Data line TxN Data line RxN SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 41
Data reference potential M5 Data line B Functional earth (FE): The voltage may be used exclusively to supply the external terminating resistor. Looping the volt- age through to the next connector via a cable is not permitted. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 42
Connector for the reader connection (M12, 8-pin, A-coded) ② Connector for the Ethernet connection (M12, 4-pin, D-coded) ③ Connector for the power supply (M12, 4-pin, L-coded) ④ Connector for PROFIBUS connection (M12, 5-pin, B-coded) Figure 5-9 Connect the plug SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Make sure to use a conductor cross-section of at least 1.5 mm². If you do not observe the maximum permissible supply current and the cable cross- section required, this may result in the cable isolation and contacts overheating and in the device being damaged. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
0.2 V. The value can vary significantly depending on the plug connection or condition. When using a 7 m power cable with ∅ 1.5 mm , the voltage drop is approx. 2.6 V with a 16 A load. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
– Lower rotary encoder switch: 1st position 3. Screw the two M12 seal caps back onto the threads to protect the rotary coding switches (torque: 0.5 to 0.8 Nm). 4. Switch the supply voltage off and on again. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 46
PROFIBUS address adjuster on the RF166C The following table below shows the setting for PROFIBUS address "26" as an example: Table 5- 6 Setting example of the PROFIBUS address 10th position Position 2 1st position Position 6 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 47
It can be screwed onto the unused PROFIBUS interface of the CM. The following figure shows a typical application for a terminating resistor. ① PROFIBUS connection ② Terminating resistor Figure 5-13 Terminating resistor on RF166C SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
OPC UA, it may be necessary to change the IP address. Requirements The Primary Setup Tool (V4.2 or higher) is installed and the communication module is connected and running. You can find the Primary Setup Tool on the pages of "Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/view/19440762)". Procedure...
Page 50
Wait until the IP address / the device name has been updated. To display the change, you need to activate the search function using the "Search" icon Result: The communication module is assigned the new IP address, subnet mask and a new device name. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
WBM. You can also find the GSD file at the website of Siemens Industry Online Support. If the communication modules are integrated into an automation system using the GSD file, some of the following parameters may not be displayed.
Page 52
Parameters in the "Module parameters" parameter group Parameter Parameter value Default value Description User Mode Ident profile/RFID stand- Ident profile/RFID With this parameter, you select the block: ard profile standard profile Ident profile/RFID standard profile • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 53
No alarms are generated. Hard errors: • Critical hardware errors/faults are reported by the S7 diagnostics. Hard/soft errors: • Critical hardware faults and errors occurring when processing commands are reported by the S7 diagnostics. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
This section is intended only for OPC UA users. You can read diagnostic data from the communication modules via OPC UA. You can find detailed information on the OPC output voltage functions in the section "Programming via OPC UA (Page 99)". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
You can call WBM using the versions of the following Web browsers current at the time of publication of this manual: Microsoft Internet Explorer, Microsoft Edge, Mozilla Firefox and Google Chrome. The user interface of the WBM is designed for a screen resolution of 1366 x 768 pixels. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 56
3. Confirm your entry by pressing the <Enter> key. Result: WBM of the communication module opens. Alternatively, you can also open the WBM from the TIA Portal. Figure 7-2 The start page of the WBM SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
• Use a ping request to check the connection between the PC and the communication module. The WBM You can use the WBM to configure the SIMATIC RF166C communication modules. NOTICE Security recommendation: Enable user management After starting the WBM the first time, no user management is enabled. To make sure that no unauthorized persons can access the communication module settings, we recommend that you enable the user management and create new user profiles after the first login.
Page 58
The WBM start window is divided into the following areas: ① Toolbar/status bar and log-on ② Menu tree ③ Main window ④ Message area ⑤ Information bar Figure 7-3 Start window of the WBM SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 59
On the right above the main window there is the status bar with the following information: ● Date/time display of the communication module ● Display of the device status ● Drop-down list for selecting the user interface language ● Logon/logoff area (with active user administration) SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 60
If you are logged in to the WBM with the "User" role, some menu items can only be used with restrictions. You will find a list of the restrictions in the section "The "User management" menu item (Page 89)". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The menu items of the WBM 7.3.1 The "Start page" menu item The "Start page" menu item is divided into the following areas. ● Device-specific information ● Project ID ● Address information (PROFIBUS) ● Address information (Ethernet) SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 62
The second area contains text boxes that you can use to store your own device-specific information in the communication module. Among other things, these should help you to more easily identify the individual communication modules. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 63
With the "Flash" check box, you can have the LEDs of the communication module and the reader connected to it flash. This enables you to quickly and easily identify the connected devices on sight. Note that this function is not supported by all readers. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Call parameters for the commands of the user application Status telegrams Recording status commands in PLC communication. Can be switched off if the status commands are used as cable monitoring. In this way, the logbook is kept free for user data. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
RF290R ing "Reader parameters" section. RF300 general If no device is connected to the interface, select the "Empty module" parameter value. RF380R RF300 Gen 2 general RF380R Gen 2 MV400/MV500 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 66
Using the "Update firmware" link, you jump to the "System - Reader firmware" menu item in which you can update firmware for the connected reader. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 67
"init_run" or "WRITE-CONFIG" with "Init" (RESET) or after the successful execution of a command. Max. number of tran- 1 ... 40 Number of transponders expected in the anten- sponders na field. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 68
RF300, MOBY E ISO 15693 None ISO 15693 General MDS D3xx, Infineon MDS D4xx, Fujitsu - 4 KB MDS D1xx, NXP MDS D2xx, TI MDS D261, STM MDS D5xx, Fujitsu - 8 KB ECC mode SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The "Network interfaces" tab The "Network interfaces" tab is divided into the following areas: ● Network ports ● SNMP ● NTP ● Syslog messages Figure 7-7 The "Settings -- Communication" menu item, "Network interfaces" tab SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 70
Input box for specifying the intervals at which the communication mod- in seconds ule automatically synchronizes its time. Accept time from Check box to ensure that the communication module also accepts the unsynchronized time from unsynchronized NTP servers. NTP server SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 71
Text box for entering the address of the Syslog server to which the Sys- Syslog server log messages are transferred. Default port Text box for entering the default port of the Syslog server via which the Syslog messages are transferred. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 72
The "OPC UA" tab is divided into the following areas: ● Basic settings ● Diagnostic settings ● Security settings ● OPC UA certificates Figure 7-8 The "Settings - Communication" menu item, "OPC UA" tab SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 73
Transmission of log entries • Read point (1-2) Definition of the read point via which the log entries are transmitted. The dis- played names depends on the interface names specified in the "Reader inter- face" menu. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 74
OPC UA rights. A user with OPC UA rights can be created via the WBM. The user profile preinstalled in the factory (user name: "admin", password "admin") also has OPC UA rights. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 75
The OPC UA server certificate contains the application name, the security profile and the IP address of the communication module. If any part of this information is changed, the server certificate needs to be recreated. Note: Note that the procedure can take several minutes. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 76
"Accept" button. Certificates displayed in black have already been accepted and are classified as trustworthy. Depending on the selected certificate type, you can delete existing certificates. To do so, select the desired certificate in the list and click on the "Delete" but- ton. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 77
The CSR file contains all relevant information of the installed server certificate. A CA (Certificate Authority) can create a signed, module-specific server certifi- cate using this file that you can then import into this module. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The menu command "Diagnostics - Hardware diagnostics" is divided into the following sections: ● Basic settings ● Monitoring status ● Status ● Error counter Figure 7-9 The menu command "Diagnostics - Hardware diagnostics" SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 79
1.0 W 1.25 W 1.5 W 1.75 W 2.0 W Max. number of tran- Maximum number of transponders to be expected that may be located in sponders the antenna field at the same time. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 80
Number of passive errors which occurred Active error counter Number of errors which occurred Sum of the signature and CRC errors Presence counter Time in [ms] that the transponder spent in the antenna field. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 81
Received signal strength [dB] for which phase modulation with the tran- sponder was detected. Note Error counter readings The displayed error counter readings are counted from the last restart of the reader or the last manual reset of the error counter readings. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
PC and displayed accordingly. Type Type of message Which message types are signaled depends on the check boxes enabled in the menu item "Settings - General" in the "Log settings" area. Entry Text of the message SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The log records internal processes of the communication module and is required for service support by SIEMENS specialists. Only make settings on this page if you are instructed to do so by SIEMENS personnel. The log entries are also evaluated by SIEMENS personnel.
Page 84
Frames on reader interface 1 (X21) CM_DEVICE02 Frames on reader interface 2 (X22) Detailed information Performance Recording heartbeat telegrams in the service information. In this way, the log monitoring is kept free for user data. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 85
The log read out by the communication module is saved as an *.slf file. The service file contains additional information relevant to Siemens service personnel. With a large number of log entries in the history, it may take several minutes before these are displayed.
"Syslog messages (Page 169)". With the "Update" button you can read in the entries from the communication module again and update the list. The displayed log entries contain 128 KB of data. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
2 areas: ● Basic settings ● Read/write Figure 7-13 The "Edit transponder" menu item Basic settings This area enables you to select the reader or reader interface with which transponders are to be processed. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 88
Note that, if a connection to the controller is established, the configuration of the readers is performed via the controller. To enable transponder data to be read/written via the WBM, the connected readers must have been initialized via the S7 controller beforehand. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
After starting the WBM the first time, no user management is enabled. To make sure that no unauthorized persons can access the CM settings, we recommend that you enable the user management and create new user profiles after the first login and delete the pre- installed profile. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 90
In the "User management" menu item, you can create, delete and edit user profiles and change passwords. This page is divided into the following areas: ● User profiles ● User properties ● Password ● Roles ● User management on / off Figure 7-15 The "User management" menu item SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 91
OPC UA connection. This role has no rights whatsoever in the WBM and it cannot be used to log on to the WBM. Click the "Save" button to save the changes and to create the new user profile. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
IP address of the communication module, load certificates on the communication module and transfer control files to the PC. This page is divided into the following areas: ● Firmware update ● Reset ● IP address SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 93
IP address to the communication module. If you lose your administrator password, you must reset the communication module to the factory settings as described in the section "Restoring the factory settings manually (Page 151)". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 94
Click the "Save on PC" button to transfer device description files to the connected PC. You can use these files to integrate the communication modules into the configuration software of your controllers. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
WBM as well as links to the relevant documents and the Siemens Industry Online Support. Operating Instructions With the "Help - Operating Instructions" menu item, you can find the corresponding "SIMATIC RF166C" manual for the reader. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 96
Configuration using the WBM 7.3 The menu items of the WBM SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Programming via SIMATIC controller This section is intended only for S7 users. You can program and configure the SIMATIC RF166C communication modules using Ident instructions via a SIMATIC controller. To configure Ident systems using STEP 7 Basic / Professional (TIA Portal), you need appropriate Ident instructions.
OPC UA. The identification devices can be subdivided as follows: ● Text recognition devices (OCR) ● Optical readers (e.g. barcode) ● RFID reader and ● Devices for localization (RTLS). Figure 9-1 Ident devices in an OPC UA network SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
● An OPC UA client that wishes to use the full RFID functionality of the readers connected to a communication module needs to support the following fundamental OPC UA access mechanisms: – Data Access (DA) – Events – Methods SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 101
Each OPC UA server publishes to the OPC UA clients its OPC UA functionalities via nodes in its address area. You can find the read points or "RfidReaderDevices" under the node "Objects > DeviceSet" in the address area of the OPC UA server of the communication modules. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 102
This function is only supported by UHF readers. SetTagPassword Set transponder-specific passwords. This function is only supported by UHF readers. ReadTag Read out transponder data. WriteTag Write transponder data. OPC UA events RfidScanEventType Receive "TagEvents". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 103
Device status of read point HardwareRevision Hardware version of the communication module LastScanData Most recently scanned transponder of the read point (Scan, ScanStart). Manufacturer Manufacturer (always "Siemens AG") Model Variant of the communication module RevisionCounter Always "-1" SerialNumber Serial number of the communication module...
Page 104
The headers column of the log as formatted string You can find the specified functions under the following path in the address area of a read point: ● DeviceSet > Readpoint_x1 > IOData ● DeviceSet > Readpoint_x1 > RuntimeParameters SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
FALSE: Read point does not scan for transponders. • Set: TRUE: The scan process of the read point for transponders is • activated. FALSE: The scan process of the read point for transponders • is deactivated. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The type definition of "CodeTypes" is "MultiStateDiscrete- Type". This means that the variable has an "Enum" that indicates the supported data types as "Property". Possible values 0: ByteString • 1: String • 2: ScanDataEpc • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Transponders which are detected with a lower RSSI value are counted as not detected. This is a value without a unit and with- out direct reference to the power strength. This variable is only supported by UHF readers. Possible values 0 … 255 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 108
For UHF readers: Radiated power of the antenna in [dB] • 5 ... 33 • Settings outside of the specified values are set to the respective area limits (1-4 ⇒ 5; 34-127 ⇒ 33). SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
If this is not possible, use the "AutoIdLastAccessEvent" events, which are also supported by the communication modules. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 111
Access Description Diagnostics on the last transponder access Outputs the time of the last transponder access. The prerequisite is that the "Parallel" or "Diagnostics" option is set in the WBM. Possible values Example: 2018-05-29T08:29:15.812Z SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 112
The first digit stands for the read point index, the second digit for the antenna index within the read point. Example: Read point 1, antenna 1: 11 • Read point 2, antenna 1: 21 • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 113
Outputs the protocol control word of the transponder that was accessed last. This variable is only supported by UHF readers. The prerequisite is that the "Parallel" or "Diagnostics" option is set in the WBM. Possible values Example: 3000 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 114
Outputs the RSSI value with which the last command was exe- cuted on the transponder. This variable is only supported by UHF readers. The prerequisite is that the "Parallel" or "Diagnostics" option is set in the WBM. Possible values 0 ... 255 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 115
The prerequisite is that the "Parallel" or "Diagnostics" option is set in the WBM. Possible values Date_Time ; Type ; Entry ; Command_Type; Sequence_Number ; Readpoint ; EPCID_UID ; PC ; RSSI ; Power SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
"AutoIdDiagnosisEvent" event, which in turn is derived from "BaseEvent" with its properties as defined in the OPC UA standard. Figure 9-3 Derivations of the OPC UA events based on the "BaseEvent" SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The prerequisite is that the "Parallel" or "Diagnostics" option is set in the WBM. In addition to the inherited properties of "BaseEvent", an "RfidLastAccessEvent" also contains the following properties: ● DeviceName ● Client ● Command ● LastAccessResult SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 119
"CommonSettings > Co- deTypes" variable. Description UID or EPC of transponder which was accessed with the last command. Possible values Example (RF300 reader, data type string): 000000005575B67D SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 120
Only possible with commands for reading/writing the transponder memory. Possible values Example (RF300 reader, data type string): 0011223344556677 Table 9- 33 CodeTypeRWData Data type CodeTypeDataType Description Shows the set format of "RWData" as String. Possible values RAW:BYTES • RAW:STRING • • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 121
Polarization Data type String Description Polarization with which the last command was executed on the transponder. This variable is only supported by UHF readers. Possible values Default • Circular • Linear_vertical • Linear_horizontal • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
"SourceName" of "BaseEvent" con- tains the BrowseName of the read point via which the event was transmitted. Possible values Example: SIMATIC_RF166C (192.168.0.254) The text of the log entry is in the "Message" Property inherited by the "BaseEvent". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
● Via the LED displays of the communication modules ● Via SNMP ● Using WBM ● Via the TIA Portal (STEP 7 Basic / Professional) ● Via OPC UA These alternative methods are described below. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Shows whether an Ethernet connection is present. LINK • ④ PROFIBUS LED display Shows whether a PROFIBUS connection via the PROFIBUS • interface is available. Figure 10-1 LED displays of the RF166C communication module SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 125
The flash test is performed for reader identification. At the same time, the LEDs of the reader, PROFIBUS and Ethernet LED display also flash. Communication takes place between CM and reader. The presence of a transponder is reported. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 126
Display of the Ethernet states via the Ethernet LED display LINK Meaning No connection is available. • No cable has been connected. • LED test while the CM is starting up. • A connection is available. • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
In the "Log" menu, you can find all the diagnostics messages of the communication module that have occurred. The "Service log" helps SIEMENS specialists to analyze errors. You can read out the syslog messages from the "Syslog log" and you can read out the "Status parameters"...
To obtain more information on the error that has occurred, you can read out the diagnostic information of the respective module (communication module or reader). SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 129
"General" entry. – Under the "Diagnostic status" entry, you can see current status information of the communication module. Figure 10-2 Display of the diagnostics information of the communication module SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Using the OPC UA variables and events, you can read out diagnostic messages and query them in a targeted manner. You can find more information on this subject in the section "Programming via OPC UA (Page 99)". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
S7 diagnostics. In contrast to the hard errors, errors that arise during command processing are also reported in this case. Please note that messages triggered by command processing are automatically taken back after 3 seconds. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Bit 7..0 0x00: All reader channels 0x0X: Channel number of the reader function_num See Profile Guideline error_decode Error message of Ident profile error_code_1 Error message of Ident profile error_code_2 Error message of Ident profile SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 133
Antenna 2: Antenna type or version is incorrect 0x3B Antenna 3: Antenna type or version is incorrect 0x3C Antenna 4: Antenna type or version is incorrect 0x3D Antenna 5: Antenna type or version is incorrect SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Write command: The transponder that has just left the antenna field contains an incomplete data record. Possible causes: Operating distance between reader and transponder is not being maintained. • Configuration error: The data record to be processed is too large (in dynamic mode). • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 135
Transponder is defective. • Transponder is in the limit area. • 0xE1FE8400 General transponder error 0xE1FE8500 The transponder has too little power to execute the command. Possible causes: Transponder is in the limit area. • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 136
The carrier signal is not activated. 0xE2FE8700 There is more than one transponder in the transmission window. 0xE2FE8800 General radio protocol error 0xE3FE0100 The file name is not allowed. 0xE3FE0200 The file does not exist. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 137
0xE4FE8100 The specified tag field of the transponder is unknown. 0xE4FE8A00 General error 0xE4FE8B00 No or bad configuration data/parameters were transferred. Possible causes: You are accessing a read point that is not configured. • SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 138
Incorrect sequence number order (SN) on the reader/communication module 0xE5FE0200 Incorrect sequence number order (SN) in the Ident profile 0xE5FE0400 Invalid data block number (DBN) on the reader/communication module 0xE5FE0500 Invalid data block number (DBN) in the Ident profile SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 139
An uninterpretable XML command was sent to the reader or the Ident profile sends an uninter- pretable command to the reader. Possible causes: The "AdvancedCmd" block was supplied with an incorrect "CMD". • The "CMD" input of the "AdvancedCmd" block was overwritten. • 0xE6FE0200 Invalid command index (CI) SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 140
Possible causes / action to be taken: The "WRITE-CONFIG" command is incorrect. • After eliminating the error, execute an "INIT". • Check the parameter "IID_HW_CONNECT". • 0xE6FE8100 A parameter is missing. 0xE6FE8200 The parameter has an invalid format. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 141
0xE7FE0800 Timeout during "INIT" (60 seconds) 0xE7FE0900 Command repetition is not supported. 0xE7FE0A00 Error during the transfer of the PDU (Protocol Data Unit). "--" means that the error is not displayed by the LEDs. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Start "INIT" after correcting the error good MISC_ERROR_ The inventory command failed. TOTAL good MISC_ERROR_ Enabling write protection on the transponder has failed. TOTAL good MISC_ERROR_ The "Kill" command failed. TOTAL good PERMISSON_ The transponder is read/write-protected. ERROR SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 143
INVALID_ The specified tag field of the transponder is unknown. CONFIGURATION good RF_COMMUNICATION_ The transponder is not responding. ERROR good RF_COMMUNICATION_ The verification of the written transponder data has failed. ERROR SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 144
BadOutOf Possible cause: Range / You are accessing a read point that is not configured. • OpcUa_ Configura- tion Error BadInvalid A parameter is missing. Argument BadInvalid The parameter has an invalid format. Argument SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
4. Click on the "System - System settings" menu item. 5. In the "Firmware update" area, click the "Select firmware file" icon. 6. Select the update file (*.sfw). 7. Click on the "Open" button. 8. Click the "Update" button. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Reaction: The WBM of the communication module opens in your Web browser. Figure 10-3 Firmware update of the communication module 7. Continue the firmware update as described in the section "Updating the firmware via WBM (Page 145)". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Result: The firmware of the reader is updated. The update process is indicated in the information bar. After the update has completed, the reader is restarted. The updated firmware is active following the restart. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
4. Select the affected communication module and switch to the device view. 5. Establish an online connection. 6. Right-click on the desired communication module to which the respective reader is connected and click on "Online & Diagnostics" in the shortcut menu. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 149
– Note: If the check box is not selected, the new firmware is only activated on the next startup of the communication module. 10.Click the "Start upgrade" button. Result: The firmware is updated. The update process is displayed. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
The communication module is ready for operation when the "RUN" LED is lit/flashes green. After restarting the communication module, you may have to assign a new IP address or a new device name to the communication module. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Because the IP address is discarded, it is possible that the connection between the WBM and browser is lost. After restarting the communication module, you may have to assign a new IP address or a new device name to the communication module. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
● On the controller ● Using the TIA Portal (STEP 7 Basic / Professional as of V16) in a STEP 7 project ● Using the WBM on your PC These alternative methods are described below. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
You can find additional information on programming the blocks and the structure of the configuration data in the section "Config_Upload/Download" of the manual "Ident Profile and Ident Blocks, Standard function for Ident systems". SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Installation/removal with the power off Only wire the SIMATIC controller and the communications modules to be switched on when the voltage is switched off. Make sure that the power supply is turned off when installing/uninstalling the devices. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 155
LED is lit/flashing green). 9. If necessary, assign a unique IP address to the communication module. 10.Load the configuration onto the communications module. 11.Switch on user management if necessary and create new user profiles. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 156
Service and maintenance 10.5 Module replacement SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Technical specifications Table 11- 1 Technical specifications for RF166C 6GT2002-0EE20 Product type designation SIMATIC RF166C PROFIBUS interface Connection type PROFIBUS DP-V1 Physical medium RS485 Transmission speed 9.6 Kbps ... 12 Mbps Connector 2x M12 interface, 8-pin, B-coded Maximum block length 10 words cyclic •...
Page 158
IEC 61140) 24 V DC supply: Safety (electrical) isolation of low voltage (SELV/PELV acc. to IEC 61140) The power supply must provide the required current of max. 500 mA for transient power failures ≤ 20 ms. SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Appendix System planning The SIMATIC RF166C communication module is only one of many devices in the SIMATIC Ident portfolio. In addition to the communications module, an industrial identification system also consists of a higher-level controller/PC, connecting cables, as well as readers and/or optical readers.
Joining more than two cables to form a long cable should be avoided due to the additional contact resistances. Pin assignment Table A- 1 Connecting cable/extension cable M12 ↔ M12 M12 connector (male) M12 connector (female) SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
CM adapter cable 6GF3500-8BA12 for MV500 Power supply cable 0.5 m 6XV1801-6DE50 L-coded, 4-pin 1.0 m 6XV1801-6DH10 M12-180 1.5 m 6XV1801-6DH15 2.0 m 6XV1801-6DH20 3.0 m 6XV1801-6DH30 5.0 m 6XV1801-6DH50 10 m 6XV1801-6DN10 15 m 6XV1801-6DN15 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 165
2-wire, 20 - 1000 m PROFIBUS Torsion Cable without Plug 6XV1830-0PH10 2-wire, 20 - 1000 m Field-fabricated connector for PROFIBUS (5 units) 6GK1905-0EB00 M12-180, female Field-fabricated connector for PROFIBUS (5 part) 6GK1905-0EA00 M12-180, male SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 166
L-coded, 4-pin / A-coded, 4-pin M12-180 / M12-180 Terminating resistor for PROFIBUS interface 6GK1905-0EC00 M12 sealing caps 3RX9802-0AA00 for unused connections (10 units) Usable as of product version "02" DVD "RFID Systems Software & Documentation" 6GT2080-2AA20 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
SIMATIC NET/SIMATIC Ident products are regularly submitted to the authorities and approval centers for approvals relating to certain markets and applications. Contact your Siemens representative if you need a list of the current approvals for the individual devices or check the Internet pages of Siemens Industry Online Support: Current approvals (https://support.industry.siemens.com/cs/ww/en/ps/15666)
Page 168
Germany You will find the CE Declaration of Conformity for this product on the Internet at the following address: CE declaration of conformity (https://support.industry.siemens.com/cs/ww/en/ps/15105/cert) Country-specific approvals Safety If the device has one of the following markings, the corresponding approval has been obtained.
The "sysUpTime" parameter is metainformation about the message. It specifies the time (in hundredths of a second) since the last reinitialization of the network man- agement part of the system. MESSAGE Message as ASCII string (English) SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
{Time sec- Number of seconds ond} {Max ses- Maximum number of sessions sions} {Url} URL of the Web server that was accessed. /Engineering/Reset2Facto ry?r=0.685644556250803 {Config de- Character string (with spaces) for the configuration. Power tail} SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Standard IEC 62443-3-3 Reference: n/a (NERC-CIP 007-R5) User account management Message text Authentication was enabled. Example Authentication was enabled. Explanation Authentication was enabled. Severity Notice Facility local0 Standard IEC 62443-3-3 Reference: SR 1.3 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 172
{Protocol}: User {User}: Access to url {url} denied. Example WBM: User admin: Access to url /Engineering/Reset2Factory?r=0.6856445562508033 denied. Explanation Access to Web resource was denied. Severity Error Facility local0 Standard IEC 62443-3-3 Reference: SR 2.1 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 173
Message text {Protocol}: User {User name} has changed {Config detail} configuration. Example OPC: User admin has changed Power configuration. Explanation User has changed specific configuration. Severity Info Facility local0 Standard IEC 62443-3-3 Reference: SR 2.12 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Page 174
Notice Facility local0 Standard IEC 62443-3-3 Reference: SR 7.4 Message text {Protocol}: Firmware activation failed. Example WBM: Firmware activation failed. Explanation Firmware activation failed. Severity Error Facility local0 Standard IEC 62443-3-3 Reference: SR 7.4 SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...
Industry Online Support In addition to the product documentation, you are supported by the comprehensive online information platform of Siemens Industry Online Support at the following Internet address: Link: (https://support.industry.siemens.com/cs/de/en/) Apart from news, you will also find the following there: ●...
Page 176
Service & Support SIMATIC RF166C Operating Instructions, 12/2019, C79000-G8976-C578-01...