EIO0000001214 04/2013

Siemens AG
SIMATIC S7 Ethernet
03/2014
EIO0000001214.00

www.schneider-electric.com
2 EIO0000001214 03/2014
 Table of Contents

Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
About the Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 1 SIMATIC S7 Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
System Structure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Supported Device Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Consecutive Equipment Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
I/O Manager Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Equipment Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Device Address Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

EIO0000001214 03/2014 3
4 EIO0000001214 03/2014
 Safety Information
§

Important Information

NOTICE
Read these instructions carefully, and look at the equipment to become familiar with
the device before trying to install, operate, or maintain it. The following special
messages may appear throughout this documentation or on the equipment to warn
of potential hazards or to call attention to information that clarifies or simplifies a
procedure.

EIO0000001214 03/2014 5
PLEASE NOTE
Electrical equipment should be installed, operated, serviced, and maintained only by
qualified personnel. No responsibility is assumed by Schneider Electric for any
consequences arising out of the use of this material.
A qualified person is one who has skills and knowledge related to the construction
and operation of electrical equipment and its installation, and has received safety
training to recognize and avoid the hazards involved.

6 EIO0000001214 03/2014
 About the Book

At a Glance

Document Scope
This manual describes the device driver communication settings in the Vijeo
Designer screen editing software. Vijeo Designer enables you to design Magelis
target machines that communicate with PLCs, drives, field devices, and other
equipment.
For more information about Vijeo Designer and Magelis target machines, please
refer to Vijeo Designer user documentation.

Validity Note
The data and illustrations found in this book are not binding. We reserve the right to
modify our products in line with our policy of continuous product development. The
information in this document is subject to change without notice and should not be
construed as a commitment by Schneider Electric.

Documentation Conventions
Target Machine: Human-Machine Interface (HMI) that runs user applications
designed in Vijeo Designer screen editing software. A target machine is also known
as a terminal.

EIO0000001214 03/2014 7
Product Related Information

WARNING
LOSS OF CONTROL
 The designer of any control scheme must consider the potential failure modes
of control paths and, for certain critical control functions, provide a means to
achieve a safe state during and after a path failure. Examples of critical control
functions are emergency stop and overtravel stop.
 Separate or redundant control paths must be provided for critical control
functions.
 System control paths may include communication links. Consideration must be
given to the implications of unanticipated transmission delays or failures of the
link.*
 Each implementation of a Magelis XBTGT, HMISTO, HMISTU, HMIGTO,
HMIGTU, XBTGH, XBTGK, XBTGC, iPC, and XBTGTW must be individually
and thoroughly tested for proper operation before being placed into service.
Failure to follow these instructions can result in death, serious injury, or
equipment damage.

* For additional information, refer to NEMA ICS 1.1 (latest edition), “Safety
Guidelines for the Application, Installation, and Maintenance of Solid State Control.“

User Comments
We welcome your comments about this document. You can reach us by e-mail at
techcomm@schneider-electric.com.

8 EIO0000001214 03/2014
 SIMATIC S7 Ethernet
EIO0000001214 04/2013

SIMATIC S7 Ethernet

1
Subject of this Chapter
This chapter explains the SIMATIC S7 Ethernet.

What's in this Chapter?

This chapter contains the following topics:
Topic Page
System Structure 10
Supported Device Addresses 12
Consecutive Equipment Addresses 19
I/O Manager Configuration 20
Equipment Configuration 21
Device Address Configuration 25

EIO0000001214 03/2014 9
SIMATIC S7 Ethernet

System Structure

Overview
The following table describes the basic system setup for connecting the target
machine to Siemens S7-200/300/400 Series PLCs over a network.

Connection

Series CPU Ethernet Module

LOGO! OBA7 Ethernet Interface on CPU*3
SIMATIC S7-200 CPU222 CP243-1 IT
Series CPU224 CP243-1
CPU224 XP
CPU226
SIMATIC S7-300 CPU312IFM CP 343-1 IT
Series CPU313
CP 343-1*1
CPU314
CPU314IFM
CPU315
CPU315-2 DP
CPU316
CPU316-2 DP
CPU318-2
CPU 315-2 PN/DP
CPU 317-2 PN/DP
CPU 319-3 PN/DP
CPU 315-2 PN/DP Ethernet Interface on CPU*3
CPU 317-2 PN/DP
CPU 319-3 PN/DP
SIMATIC S7-400 CPU412-1 CP 443-1 IT
Series CPU412-2 DP CP 443-1
CPU413-1
CPU413-2 DP
CPU414-1
CPU414-2 DP
CPU414-3 DP
CPU416-1
CPU416-2 DP
CPU416-3 DP
CPU417-4
CPU 414-3 PN/DP
CPU 416-3 PN/DP
CPU 414-3 PN/DP Ethernet Interface on CPU*3
CPU 416-3 PN/DP
SIMATIC S7-1200 CPU 1211C Ethernet Interface on CPU*3
Series CPU 1212C
CPU 1214C

10 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

*1) PLC supports a maximum of 16 connections. Because 2 connections are

required for each target machine, one for Fetch and one for Write, the PLC can
support up to 8 target machines.
*2) PLC supports a maximum of 64 connections. Because 2 connections are
required for each target machine, one for Fetch and one for Write, the PLC can
support up to 32 target machines.
*3) The direct connection to the Ethernet Interface on these CPUs only supports the
“OP Communication” type. The FETCH/WRITE protocol will not work.

Note:
 Use a 100BASE-TX connection for iPC Series, XBTGTW Series, XBTGK
Series, XBTGC2000 Series or higher, XBTGT2000 Series or higher,
XBTGH2000 Series, XBTGT1005 Series, HMIGTO Series, HMIGTU Series,
HMISTO Series, and HMISTU Series target machines.

EIO0000001214 03/2014 11
SIMATIC S7 Ethernet

Supported Device Addresses

Overview

WARNING
UNINTENDED EQUIPMENT OPERATION
Incorrect values will result if conflicting writes to the same register are requested
simultaneously by the target and PLC program.
Design your system to avoid conflicting write processes between the target
machine and PLC program.
Failure to follow these instructions can result in death, serious injury, or
equipment damage.

The following tables list the device address ranges you can enter from the Device
Address keypad.
For actual device address ranges supported by the PLC, refer to the corresponding
PLC manual.

LOGO! OBA7

Device Bit Address Word Address 16 Bit 32 Bit

Variable*1 V00000.0-V00849.7 VW00000-VW00848 H/L H/L

Input*1 I00000.0-I00003.7 IW00000-IW00002

Output *1
Q00000.0-Q00001.7 QW00000-QW00000

Marker*1 M00000.0-M00003.7 MW00000-MW00002

*1) PLC word addresses defined for integer, float, and string variables must be
even-numbered. i.e., IW5 is not a valid device address for an integer variable.
Must be either IW4 or IW6.

12 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

S7-1200 Series

S7-1200 CPU 1211C and S7-1200 CPU 1212C

Device Bit Address*1 Word Address 16 Bit 32 Bit

Input I00000.0-I01023.7 IW00000-IW01022*4*5 H/L*6 H/L*6

or or
E00000.0-E01023.7*2
EW00000-EW01022*2*4*5
Output Q00000.0-Q01023.7 QW00000-QW01022*4
or or
A00000.0-A01023.7*2
AW00000-AW01022*2*4
Marker M00000.0-M04095.7 MW00000-MW04094*4

Data Block*3 DB00001.DBX00000.0 - DB00001.DBW00000 -

DB65535.DBX65535.7 DB065535.DBW65534*4

*1) Read-modify-write. When you write to one of these bit addresses, the target
machine reads the entire word address, sets the defined bit, then returns the new
value to the PLC. If the ladder program writes data to this word address during
the bit read/write process, the resulting data may be incorrect.
*2) German variable name.
*3) Data blocks are created by the user. Available addresses depend on what the
user has created.
*4) PLC word addresses defined for integer, float, and string variables must be even-
numbered. i.e., IW5 is not a valid device address for an integer variable. Must be
either IW4 or IW6.
*5) Depending on the CPU type, IW0-IW2 may be reserved for onboard I/O.
*6) 16-bit and 32-bit data, High and Low, refer to data as defined in the following
examples.

EIO0000001214 03/2014 13
SIMATIC S7 Ethernet

S7-1200 CPU 1214C

Device Bit Address*1 Word Address 16 Bit 32 Bit

Input I00000.0-I01023.7 IW00000-IW01022*4*5 H/L*6 H/L*6

or or
E00000.0-E01023.7*2
EW00000-EW01022*2*4*5
Output Q00000.0-Q01023.7 QW00000-QW01022*4
or or
A00000.0-A01023.7*2
AW00000-AW01022*2*4
Marker M00000.0-M08191.7 MW00000-MW08190*4

Data Block*3 DB00001.DBX00000.0 - DB00001.DBW00000 -

DB65535.DBX65535.7 DB065535.DBW65534*4

*1) Read-modify-write. When you write to one of these bit addresses, the target
machine reads the entire word address, sets the defined bit, then returns the new
value to the PLC. If the ladder program writes data to this word address during
the bit read/write process, the resulting data may be incorrect.
*2) German variable name.
*3) Data blocks are created by the user. Available addresses depend on what the
user has created.
*4) PLC word addresses defined for integer, float, and string variables must be even-
numbered. i.e., IW5 is not a valid device address for an integer variable. Must be
either IW4 or IW6.
*5) Depending on the CPU type, IW0-IW2 may be reserved for onboard I/O.
*6)16-bit and 32-bit data, High and Low, refer to data as defined in the following
examples.

14 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

S7-300/400 Series

Device Bit Address*1 Word Address 16 Bit 32 Bit

Input I00000.0-I00127.7 IW00000-IW00126*7 H/L*8 H/L*8

or or
E00000.0-E00127.7*2
EW00000-EW00126*2*7
Output Q00000.0-Q00127.7 QW00000-QW00126*7
or or
A00000.0-A00127.7*2
AW00000-AW00126*2*7
Marker M00000.0-M00255.7 MW00000-MW00254*7

Data Block*6 DB00001.DBX00000.0 - DB00001.DBW00000 -

DB65535.DBX65535.7 DB065535.DBW65534*7

Timer*3*4*5 T00000-T00255

Counter*3*4*5 C00000-C00255
or
Z00000-Z00255*2

*1) Read-modify-write. When you write to one of these bit addresses, the target
machine reads the entire word address, sets the defined bit, then returns the new
value to the PLC. If the ladder program writes data to this word address during
the bit read/write process, the resulting data may be incorrect.
*2) German variable name.
*3) Timers and Counters (T&C Devices) store special information in the top 4 bits
(time base, counter up/down status, and so on). The actual timer current value
is stored in the lower 12 bits. Depending on which “Connection Type” is used the
data returned by the PLC is in a different format. For “FETCH/WRITE” mode, the
current timer/counter value is returned as Binary encoded data, but for “OP
Communication” the current timer/counter value is returned as BCD encoded
data.
*4) Valid range in BCD is 0000 to 0999.
*5) Read-only.
*6) Data blocks are created by the user. Available addresses depend on what the
user has created.
*7) PLC word addresses defined for integer, float, and string variables must be even-
numbered. i.e., IW5 is not a valid device address for an integer variable. Must be
either IW4 or IW6.

EIO0000001214 03/2014 15
SIMATIC S7 Ethernet

*8) 16-bit and 32-bit data, High and Low, refer to data as defined in the following
examples.

S7-300/400 Fetch/Write

Device Bit Address*1 Word Address 16 Bit 32 Bit

Input*2 I00000.0-I00127.7 IW00000-IW00126*7 H/L*8 H/L*8

or or
E00000.0-E00127.7*9
EW00000-EW00126*7*9

Output*2 Q00000.0-Q00127.7 QW00000-QW00126*7

or or
A00000.0-A00127.7*9
AW00000-AW00126*7*9

Marker*2 M00000.0-M00255.7 MW00000-MW00254*7

Data DB00001.DBX00000.0 - DB00001.DBW00000 -
Block*2*6 DB00255.DBX16383.7 DB00255.DBW16382*7

Timer*3*4*5 T00000-T00255

Counter*3*4*5 C00000-C00255
or
Z00000-Z00255*9

*1) Read-modify-write. When you write to one of these bit addresses, the target
machine reads the entire word address, sets the defined bit, then returns the new
value to the PLC. If the ladder program writes data to this word address during
the bit read/write process, the resulting data may be incorrect.
*2) Device size is 1 byte.
*3) Device size is 2 bytes, or 1 word.
*4) Valid range in BCD is 0000 to 0999.
*5) Read-only.
*6) Data blocks are created by the user. Available addresses depend on what the
user has created.
*7) PLC word addresses defined for integer, float, and string variables must be even-
numbered. i.e., IW5 is not a valid device address for an integer variable. Must be
either IW4 or IW6.
*8) 16-bit and 32-bit data, High and Low, refer to data as defined in the following
examples.

16 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

*9) German variable name.

S7-200 Series

Device Bit Address*1 Word Address 16 Bit 32 Bit

Variable*2 V00000.0-V10239.7 VW00000-VW10238 H/L*5 H/L*5

Input*2*3 I00000.0-I00015.7 IW00000-IW00014

or or
E00000.0-E00015.7*6 EW00000-EW0000014*6

Output*2*4 Q00000.0-Q00015.7 QW00000-QW00014

or or
A00000.0-A00015.7*6 AW00000-AW00014*6
Marker M00000.0-M00031.7 MW00000-MW00030

Timer Word *7 T00000-T00255

Counter Word*7 C00000-C00255

or
Z00000-Z00255*6

*1) Read-modify-write. When you write to one of these bit addresses, the target
machine reads the entire word address, sets the defined bit, then returns the new
value to the PLC. If the ladder program writes data to this word address during
the bit read/write process, the resulting data may be incorrect.
*2) PLC word addresses defined for integer, float, and string variables must be even-
numbered. i.e., IW5 is not a valid device address for an integer variable. Must be
either IW4 or IW6.
*3) Depending on the CPU type, it may not be possible to write to addresses IW0-
IW2. These addresses are reserved for onboard I/O.
*4) You can write to the QW / Q device only while the PLC is in RUN mode. Outputs
are reset if the PLC is in STOP mode.
*5) 16-bit and 32-bit data, High and Low, refer to data as defined in the following
examples.
*6) German variable name.

EIO0000001214 03/2014 17
SIMATIC S7 Ethernet

*7) These devices are read-only.

18 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

Consecutive Equipment Addresses

Overview
The following table lists the maximum number of consecutive addresses that can be
read by each PLC. Refer to this table when using block transfers.
Note:
 To speed up data communication, use consecutive variable addresses on the
same panel screen.
 The following situations increase the number of times that the equipment is
read, which reduces the data communication speed between the target
machine and the equipment:
 when the number of consecutive addresses exceeds the maximum
 when different device types are used.

Device Max. Consecutive Addresses Gap Span

Read Write
Input (I) 218 bytes 212 bytes 218 bytes
Output (Q)
Internal Bit (M)
Data Block (DBX)
Register Bits (V)
Input (IW)
Output (QW)
Internal Bit (MW)
Data Block (DBW)
Register Words (VW)
Timer Word (T) 1 word
Counter Word (C)

EIO0000001214 03/2014 19
SIMATIC S7 Ethernet

I/O Manager Configuration

Overview
The driver and equipment, which enable communication between the target
machine and the PLC, depends on the PLC type.
Note:
 For information on how to display the [New Driver] dialog box, see the Vijeo
Designer Help.

Screen example of I/O Manager Configuration

20 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

Equipment Configuration

Overview

WARNING
UNINTENDED EQUIPMENT OPERATION
Read and understand the instructions in this section to ensure data is properly
transferred. If you do not follow these instructions, incorrect data could be written
to the PLC and the target machine.
Failure to follow these instructions can result in death, serious injury, or
equipment damage.

To set up details about the communication process between the target machine and
the PLC, use the [Equipment Configuration] dialog box.

For an overview of the driver and equipment settings, see Equipment Configuration.
Note:
 For information on how to display the [Equipment Configuration] dialog box, see
the Vijeo Designer Help.

LOGO! OBA7

Screen Description

Area Description
IP Address Enter the PLC unit’s IP address.

EIO0000001214 03/2014 21
SIMATIC S7 Ethernet

S7-1200 Series

Screen Description

Area Description
IP Address Enter the PLC unit’s IP address.

S7-300/400 Series

Screen Description

Area Description
IP Address Enter the PLC unit’s IP address.
Rack Enter the rack number where the CPU is located.
Slot Enter the slot number where the CPU is located.

22 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

S7-300/400 Series Fetch/Write

Screen Description

Area Description
IP Address Enter the PLC unit’s IP address.
PLC Ports Fetch
Specify the PLC’s TCP port number for the Fetch operation. Specify
values between 1024~65535.
Write
Specify the PLC’s TCP port number for the Write operation. Specify
values between 1024~65535.
Host Port Override Select the Host Port Override checkbox when:
 the PLC is configured to communicate with only specified
host ports or
 the PLC is configured to accept any host ports but there is a
port conflict with other applications on the target machine.
Fetch
Specify the TCP Fetch port number to be used on the target machine.
If the PLC is configured to communicate with only specified host ports,
then this setting must match the PLC connection configuration.
Write
Specify the TCP Write port number to be used on the target machine.
If the PLC is configured to communicate with only specified host ports,
then this setting must match the PLC connection configuration.

EIO0000001214 03/2014 23
SIMATIC S7 Ethernet

Note:
 The IP Address and PLC Ports fields should match the communication settings
on the PLC unit.
 The connection configuration on the PLC can be configured to accept only
specified host IP addresses and specified host ports.

S7-200 Series

Screen Description

Area Description
IP Address Enter the PLC unit’s IP address.
Module Enter the module number to match the PLC configuration software.
Connection Enter the connection number to match the PLC configuration software.

24 EIO0000001214 03/2014
 SIMATIC S7 Ethernet

Device Address Configuration

Overview

WARNING
UNINTENDED EQUIPMENT OPERATION
Read and understand the instructions in this section to ensure data is properly
transferred. If you do not follow these instructions, incorrect data could be written
to the PLC and the target machine.
Failure to follow these instructions can result in death, serious injury, or
equipment damage.

To set up a PLC variable in the Variable List, use the Device Address Keypad from
the variable properties.

See Supported Device Addresses.

Note:
 For information on how to display the Device Address Keypad, see the Vijeo
Designer Help.

Screen example of Device Address Configuration

EIO0000001214 03/2014 25
SIMATIC S7 Ethernet

Screen Description

Area Description
Memory Area Lists the device type.
Data Block Defines a number for a valid data block. This field is available when
DB is selected as the Memory Area. To enter a valid data block, click
the Data Block field’s ellipsis to display the [Data Block Selector]
keypad.

Address Enter the device address number here.

When mapping an integer, float, or string variable to a PLC device,
you can enter only even addresses.
When mapping a discrete variable to a PLC device, you can enter
both odd or even addresses.
In the Address field, click the ellipsis [...] to display the [Address
Selector] keypad, which assists you in entering a valid device
address.

Bit Available when mapping discrete variables to a PLC device. Lists

the available bits (0-7).

26 EIO0000001214 03/2014