Configure PROFINET

Information about Configuring PROFINET

PROFINET is the PROFIBUS International (PI) open Industrial Ethernet Standard that uses TCP/IP and IT standards for automation control. PROFINET is particularly useful for industrial automation systems and process control networks, in which motion control and precision control of instrumentation and test equipment are important. It emphasizes data exchange and defines communication paths to meet speed requirements.

PROFINET communication is scalable on three levels:

  • Normal non-real-time communication uses TCP/IP and enables bus cycle times of approximately 100 ms.

  • Real-time communication enables cycle times of approximately 10 ms.

  • Isochronous real-time communication enables cycle times of approximately 1 ms.

PROFINET I/O is a modular communication framework for distributed automation applications. PROFINET I/O uses cyclic data transfer to exchange data, alarms, and diagnostic information with programmable controllers, input/output (I/O) devices, and other automation controllers (for example, motion controllers).

PROFINET I/O recognizes three classes of devices:

  1. I/O devices

  2. I/O controllers

  3. I/O supervisors

Restrictions and Guidelines for Configuring PROFINET

Cisco Catalyst IE9300 Rugged Series Switches are supported for:

The restrictions and guidelines for configuring PROFINET are:

  • PROFINET feature set is available with Network-Essentials license.

  • Cisco IE-9300 series switches support only PROFINET I/O, RT (Real-Time) but not IRT (isochronous real-time) communication.

  • Profinet can be enabled only on standalone IE-9300 series switches. Profinet is not supported when IE-9300 series switches are stacked

  • MRP-Client mode is not supported.

PROFINET Device Roles

An I/O controller is a programmable logic controller (PLC) that controls I/O devices and exchanges data such as configuration, alarms, and I/O data through an automation program. The I/O controller and the I/O supervisor exchange diagnostic information. The I/O controller shares configuration and input/output information with the I/O device and receives alarms from the I/O device.

PROFINET is designed to be the sole or primary management system platform. Because the I/O controller detects the switch with the Discovery and Configuration Protocol (DCP), and sets the device name and IP address, you do not need to enter Cisco IOS commands for the basic configuration. For advanced configurations (for example, QoS, DHCP, and similar features) you must use Cisco IOS commands on the switch because these features cannot be configured by using PROFINET.

An I/O supervisor is an engineering station, such as a human machine interface (HMI) or PC, used for commissioning, monitoring, and diagnostic analysis. The I/O supervisor exchanges diagnostic, status, control, and parameter information with the I/O device.

An I/O device is a distributed input/output device such as a sensor, an actuator, or a motion controller.


Note


If Profinet DCP cannot detect the switch/PLC/IO mac addresses, temporarily disable the firewall/virus scan from the Window PC that installed the Siemens STEP7 or TIA Portal.

In a PROFINET I/O system, all the I/O devices communicate over an Ethernet communication network to meet the automation industry requirement for bus cycle times of less than 100 ms. The network uses switches and full-duplex data exchange to avoid data collisions.

PROFINET Device Data Exchange

After PROFINET uses DCP to discover devices, including the switch, they establish application relationships (ARs) and communication relationships (CRs). After a connection is established and information about device parameters is exchanged, input and output data is exchanged. The switch uses non-real-time CRs to exchange the data attributes listed in the tables.

Table 1. PROFINET I/O Switch Attributes

PROFINET I/O Switch Configuration Attributes

Value or Action

Device name

Configures a name for the device

TCP/IP

IP address, subnet mask, default gateway, SVI

Primary temperature alarm

Enables or disables monitoring for specified alarm

Secondary temperature alarm

Enables or disables monitoring for specified alarm

RPS failed alarm

Enables or disables monitoring for specified alarm

Relay major alarm

Enables or disables monitoring for specified alarm

Reset to factory defaults

Uses the PROFINET I/O controller to reset the switch to factory defaults. This action removes the startup configuration and reloads the switch.

Relay major configuration

Specifies the type of port alarm (for example, link fault) that triggers the major relay. Any port configured with the specified alarm type can trigger the major relay.

Table 2. PROFINET I/O Port Attributes

PROFINET I/O Port Configuration Attributes

Value or Action

Speed

10/100/1000/auto

Duplex

Half/full/auto

Port mode

Access/trunk

Link status

Shut down/no shut down

Configure rate limiting

Broadcast, unicast, multicast threshold exceeds configured levels

Port link fault alarm

Enables or disables monitoring for specified alarm

Port not forwarding alarm

Enables or disables monitoring for specified alarm

Port not operating alarm

Enables or disables monitoring for specified alarm

Port FCS threshold alarm

Enables or disables monitoring for specified alarm

VLAN

VLAN Information

PROFINET devices are integrated by using a general station description (GSD) file that contains the data for engineering and data exchange between the I/O controller, the I/O supervisor, and the I/O devices, including the switch. Each PROFINET I/O field device must have an associated GSD file that describes the properties of the device and contains all this information required for configuration:

  • Device identification information (device ID, vendor ID and name, product family, number of ports)

  • Number and types of pluggable modules

  • Error text for diagnostic information

  • Communication parameters for I/O devices, including the minimum cycle time, the reduction ratio, and the watch dog time

  • Configuration data for the I/O device modules, including speed, duplex, VLAN, port security information, alarms, and broadcast-rate-limiting thresholds

  • Parameters configured for I/O device modules for the attributes listed in the Profinet I/O Port Attributes table.

The GSD file is on the switch, but the I/O supervisor uses this file.


Note


You must use the GSD file that is associated with the Cisco IOS release on the switch to manage your PROFINET network. Both the I/O supervisor and the Cisco IOS software alert you to a mismatch between the GSD file and the switch Cisco IOS software version.

How to Configure PROFINET

Configuring PROFINET

You can use either the PROFINET software on the I/O supervisor or the Cisco IOS software for basic switch configuration.

After you enable PROFINET, LLDP is automatically enabled on the switch because PROFINET relies on LLDP to fully function. If you disable PROFINET, you can enable or disable LLDP as needed.

Table 3. Feature history table

Feature

Release information

Feature description

VLAN 0 Priority Tagging

Release 17.18.1

This feature enables prioritization of critical traffic using 802.1Q frames with a VLAN ID of zero, ensuring higher processing priority without VLAN assignment.

Configure the default PROFINET settings on a switch

This task explains how to activate PROFINET on a switch by enabling the default VLAN 1 configuration.

PROFINET is enabled by default on all switches. The default configuration operates on VLAN 1, but you can assign it to another VLAN ID if required. By default, VLAN 1 is in a shutdown state when the switch is first powered on. To activate PROFINET on an out-of-the-box switch, you must unshut VLAN 1.

VLAN 0 Priority Tagging

Starting with Cisco IOS XE Release 17.18.1, the VLAN 0 Priority Tagging feature allows you to prioritize traffic without assigning it to a specific VLAN. This feature enables the transmission and reception of 802.1Q Ethernet frames with the VLAN ID set to zero, by retaining the 802.1P priority bits of the VLAN 0 Ethernet packets. These Ethernet frames are known as priority tagged frames. As a result, critical traffic receives higher processing priority.

Procedure


Step 1

Enter the global configuration mode, with the configure terminal command.

Example:

Switch#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.

Step 2

Access the VLAN 1 interface with the interface vlan 1 command.

Example:

Switch(config)#interface vlan 1

Specify VLAN 1 as the interface to be configured

Step 3

Enable VLAN 1 with the no shut command.

Example:

Switch(config-if)#no shut

Step 4

Exit the configuration mode.

Example:

Switch(config-if)#end

If PROFINET has been disabled, follow the specific procedure for enabling PROFINET on the switch in Enabling PROFINET.

Note

 

Cisco devices undergo the Profinet Certification process to ensure compliance with industrial automation standards. During this process, the use of non-standard protocols such as CDP results in test failures, preventing certification. As a result, Cisco devices intended for Profinet environments must use IEEE standard LLDP instead of CDP.


Enabling PROFINET

Procedure

  Command or Action Purpose

Step 1

configure terminal

Enters global configuration mode.

Step 2

profinet

Enables PROFINET on the switch.

Step 3

profinet id line

(Optional) Sets the PROFINET device identifier (ID) by using the Cisco IOS software.

The maximum length is 240 characters. The only special characters allowed are the period (.) and hyphen (-), and they are allowed only in specific positions within the ID string. It can have multiple labels within the string. Each label can be from 1 to 63 characters, and labels must be separated by a period (.). The final character in the string must not be zero (0).

For more details about configuring the PROFINET ID, see the PROFINET specification, document number TC2-06-0007a, filename PN-AL-protocol_2722_V22_Oct07, available from PROFIBUS.

Step 4

profinet vlan vlan id

(Optional) Changes the VLAN number. The default VLAN number is 1. The VLAN ID range is 1-4096. Supports one VLAN per switch.

Step 5

interface <x/y>

Specifies the port to be configured for PROFINET, and enters interface configuration mode

Step 6

switchport mode access

Configure the port mode as access.

Step 7

switchport access vlan

Configure the access vlan required for the port.

Step 8

switchport voice vlan dot1p

Add the voice vlan dot1p command.

This command applies to Cisco IOS XE Release 17.17.1 and earlier versions. Starting with Cisco IOS XE Release 17.18.1, the system enables the command by default.

Step 9

end

Returns to privileged EXEC mode.

Step 10

show running-config

Verifies your entries.

Step 11

copy running-config startup-config

(Optional) Saves your entries in the configuration file.

Configuring switches for PROFINET integration

Summary

Preparing and integrating switches into a PROFINET network using TIA Portal or STEP7 requires ensuring all device descriptions and assignments are properly set up.

The key components involved in preparing switches for integration into a PROFINET network using TIA Portal or STEP7 are:

  • GSD file: Provides the device description required for integration and compatibility.

  • PC with TIA Portal or STEP7: Hosts the engineering software used for configuration and project management.

  • PLC and switch: The PLC acts as the PROFINET controller, and the switch as a device being integrated.

Workflow

The process involves these stages:

  1. Prerequisites: The switch is prepared with the necessary files and is assigned to the PLC within the tool, enabling further configuration for PROFINET integration.

  2. Configuration: The switch is configured as a PROFINET device and actively communicates with the PLC, completing its integration into the PROFINET network.

Result

The switch is fully integrated as a PROFINET device, allowing communication across the PROFINET network managed by the PLC.

Prepare and assign a switch for PROFINET network integration

Use this task to prepare the files for integrating a switch into a PROFINET network using TIA Portal or STEP7.

Before you begin
  • Ensure that the GSD file version matches the one bundled with your Cisco IOS software.

  • Verify the GSD file is available and accessible on your PC.

    For more information on what a GSD file is what information it contains about PROFINET devices, where Cisco stores these files on its switches, how to load them, and how to verify that the correct GSD is in use, see General Station Description File.

  • PROFINET is enabled by default on all switches. Hence, do not use the CLI to configure or modify the switch when PROFINET and TIA are in use.

Procedure

Step 1

Launch the latest version of the TIA Portal or STEP7.

Step 2

Click Create new project and enter a name in the Project name field. Click Create.

Step 3

From the STEP7/TIA dashboard, choose Options > Manage general station description files.

Step 4

Browse to the latest version of the GSD file location on your PC and click Install.

Wait for the Hardware catalog to update.

Step 5

From the Hardware catalog, choose the PLC and the switch.

The PLC and the switch appear in the Devices & networks window.

Step 6

Assign the switch to the PLC.


The correct GSD file is installed and the switch is assigned to the PLC.

What to do next

Configure the switch to operate as a PROFINET device using Siemens STEP7 or TIA portal.

Configure a switch for PROFINET integration using STEP7 or TIA

Use this task to configure a switch for integration into a PROFINET network using either STEP7 or the TIA portal.

Before you begin
Ensure the GSD file is installed and the switch is assigned to the PLC.
Procedure

Step 1

Double-click on the switch icon and assign the IP address and name.

  1. In the General tab, under the Profinet interface, choose Ethernet addresses

  2. In the IP protocol section, enter the IP address and click Save.

  3. In the General tab, under the General, enter the name of the switch in the Name field.

Figure 1. Ethernet adresses

Note

 

These settings are for STEP7 or the TIA Portal only; the actual switch configuration occurs during discovery.

Step 2

From the Hardware catalog, add any required expansion or pluggable modules to the switch.

Step 3

Discover the device on the network.

  1. From the main menu, choose Online > Accessible devices.

  2. From the PG/PC interface choose the PC which is connected to the PROFINET. This uses LLDP (enabled by default) and initiates the device discovery.

  3. Click Show to verify the switch appears in the Accessible device section with its MAC address listed.

Step 4

Assign the IP address and device name to the switch.

  1. In the Devices pane, go to Online & diagnostics.

  2. Locate Assign IP address in Functions and enter the IP address in the field.

  3. In the Assign PROFINET device name and enter the name in the field.

Figure 2. Assign IP address

Step 5

Save, compile, and download the project.

  1. In the General tab, choose the Devices & networks and click Save project from the tool bar.

  2. From the tool bar, click Compile.

  3. From the tool bar, click Download. In the Extended download to device window, choose the correct interface from the Connection to interface/subnet.

  4. Choose Show accessible devices and from the Select target device, choose PLC and click Load and Finish.

Step 6

Click Go online to establish a live connection.


The PROFINET connection is established between the switch and the PLC.

Profinet Connection Configuration

When a Profinet connection/session is established, the network device automatically applies and saves the CLI configurations (including SNMP) given in the table below.

Table 4. CLI for the PROFINET Configuration

CLI

Purpose

snmp-server community private RW

snmp-server community public RO

Configure two Simple Network Management Protocol (SNMP) community strings, each with a read-write and read-only access.

LLDP

lldp timer 5

lldp holdtime 20

lldp run

Enable the Link Layer Discovery Protocol (LLDP) with a frame transmission interval of 5 seconds and a holdtime of 20 seconds.

CDP

no cdp run

Disable the Cisco Discovery Protocol (CDP).

Power-supply

power-supply dual

Set up the device to manage dual power supplies, ensuring it can operate redundantly if one power supply fails.

Guidelines for the IE-9300

The IE-9300 does not behave same as other IE platforms when it comes to Vlan 0 tags. You need to add the voice vlan dot1p command to the interface to allow the vlan 0 tagged packets.

The following example shows the configuration:

Interface gi1/0/2
description connection to PLC device
switchport access vlan 10
switchport mode access
switchport voice vlan dot1p

The highlighted command above allows the vlan 0 tagged packets to be accepted on vlan 10 along with the COS values of ingress frames.

This command applies to Cisco IOS XE Release 17.17.1 and earlier versions. Starting with Cisco IOS XE Release 17.18.1, the system enables the command by default.

Preventing Default Gateway and CDP Loss During Reloads and Upgrades

Cisco IE switches have Profinet (PN) enabled by default to facilitate management through the Siemens TIA application portal, similar to other I/O devices, Programmable Logic Controllers (PLCs), and I/O devices within the Local Area Network (LAN).

Upon reloading an Industrial Ethernet (IE) switch operating on Cisco IOS XE 17.x or performing an upgrade from version 16.x, you may experience unexpected network connectivity disruptions. This phenomenon arises because the default gateway configuration fails to persist in the running configuration, resulting in its silent disappearance. Moreover, the Cisco Discovery Protocol (CDP) may also be disabled during this process. To rectify the loss of default gateway and CDP configurations, see the Recommended Solution section. While both the default gateway and CDP configurations are retained in the startup configuration, they do not appear in the running configuration post-reload or upgrade.

Technical Evaluation

When the Profinet feature is active, the Profinet subsystem conducts several critical checks to ensure proper configuration:

  • Non-Zero Values: The switch IP address configured on the Profinet VLAN, gateway address, and netmask must all be non-zero.

  • Subnet Consistency: The IP address and gateway address must reside within the same subnet.

  • Uniqueness: The IP address and gateway address must not be identical.

If any of these conditions are not met while the Profinet feature is enabled, the default gateway configuration is removed from the running configuration. Additionally, if you save this incomplete configuration to the startup configuration using the write mem command, the erroneous settings will persist through power cycles.

Recommended Solution

To rectify the loss of default gateway and CDP configurations, execute the following steps:

  1. Disable Profinet.

    Enter the no profinet command to disable the Profinet feature.

  2. Reconfigure settings.

    Manually re-enter the CDP and default gateway configurations.

  3. Save configuration.

    Use the write mem command to save the updated configuration.

  4. Verify configuration.

    Optionally, reload the switch to confirm that the configurations are correctly reflected in the running configuration post-reload.

  5. Check Profinet status.

    Use the show profinet status to ensure that Profinet is disabled.

Monitoring and Maintaining PROFINET

Table 5. Commands for displaying the PROFINET Configuration

Command

Purpose

show profinet sessions

Displays the currently connected PROFINET sessions.

show profinet status

Displays the status of the PROFINET subsystem.

show lldp neighbor interface x/x detail

Displays information about the adjacent interface.

Example:

Switch#show profinet status
Profinet : Enabled
Connection Status : Connected
Vlan : 1
Profinet ID : Switch
GSD version : Match
Reduct Ratio : 128

Troubleshooting PROFINET

The PLC has LEDs that display red for alarms, and the I/O supervisor software monitors those alarms.

To troubleshoot PROFINET use the debug profinet privileged EXEC command with the keywords shown in Commands for Troubleshooting the PROFINET Configuration. Be aware that the output of a debug command might cause a serial link to fail. You should use these commands only under the guidance of a Cisco Technical Support engineer. When you use this command, use Telnet to access the Cisco IOS command-line interface (CLI) by using Ethernet rather than a serial port.

Table 6. Commands for Troubleshooting the PROFINET Configuration

Command

Purpose

debug profinet alarm

Displays the alarm status (on or off) and content of PROFINET alarms.

debug profinet cyclic

Displays information about the time-cycle-based PROFINET Ethernet frames.

debug profinet error

Displays the PROFINET session errors.

debug profinet packet ethernet

Displays information about the PROFINET Ethernet packets.

debug profinet packet udp

Displays information about the PROFINET Upper Layer Data Protocol (UDP) packets.

debug profinet platform

Displays information about the interaction between the Cisco IOS software and PROFINET.

debug profinet topology

Displays the PROFINET topology packets received.

debug profinet trace

Displays a group of traced debug output logs.

Additional References

The following sections provide references related to device administration:

Technical Assistance

Description

Link

The Cisco Technical Support website contains thousands of pages of searchable technical content, including links to products, technologies, solutions, technical tips, and tools. Registered Cisco.com users can log in from this page to access even more content.

http://www.cisco.com/techsupport