Siemens S7 ISOTCP

Siemens S7 ISOTCP is a protocol developed by Siemens for communication with Siemens S7 series PLCs. This protocol is based on the TCP/IP protocol stack and uses the ISO-TSAP protocol for handling connections and data transmission. It enables read and write operations on various data types of the PLC, including bits, bytes, word, double word, timers and counters.

The implementation of S7 ISOTCP in Neuron is divided into two plugins. The Siemens S7 ISOTCP plugin is mainly used to connect to PLC modules such as Siemens S200, S200smart, S1200 and S1500. The Siemens S7 ISOTCP for 300/400 plugin is mainly used to connect to PLC modules such as Siemens S300 and S400 that have an Ethernet module.

Plugins

PluginDescription
Siemens S7 ISOTCPFor Siemens S200, S200smart, S1200, S1500 PLC
Siemens S7 ISOTCP for 300/400For Siemens S300, S400 PLC

Parameters

ParameterDescription
PLC IP AddressTarget PLC IPv4 Address
PLC PortTarget PLC port, default 102
PDU SizePDU size, default 960
PLC ModuleTarget PLC module, S7-200/300/400/1200/1500
Connection TypeConnection type, default PG
CPU RackPLC CPU rack, default 0
CPU SlotPLC CPU slot, default 1
Local TSAPLocal TSAP
Remote TSAPRemote TSAP

TIP

When using the Siemens S7 ISOTCP plugin to access the S7 1200/1500 PLC, you need to use Siemens software(TIA16) to make some settings for the PLC.( For detailed settings, please refer to plc-settings. )

  • The optimized block access must be turned off.
  • The access level must be full and the connection mechanism must allow GET/PUT.

Data types

  • INT16
  • UINT16
  • INT32
  • UINT32
  • FLOAT
  • DOUBLE
  • BIT
  • STRING

Address Format

AREA ADDRESS[.BIT][.LEN]

AREA ADDRESS

AREADATA TYPEATTRIBUTEREMARKPLC Area
Iint16/uint16/bitreadinputInput I、E
Oint16/uint16/bitread/writeoutputOutput Q、A
Fint16/uint16/bitread/writeflagFLAG Memory M
Tint32/uint32/floatread/writetimerTimer T
Cint16/uint16read/writecounterCounter C
DBint16/uint16/bit/int32/uint32/float/double/stringread/writeglobal DB blockVariable Memory V, DB index 1

Example:

AddressData TypeDescription
I0int16I area, address is 0
I1uint16I area, address is 1
O2int16O area, address is 2
O3uint16O area, address is 3
F4int16F area, address is 0
F5int16F area, address is 0
T6int32T area, address is 0
T7int32T area, address is 0
C8uint16C area, address is 0
C9uint16C area, address is 0
DB10.DBW10int16In a data block of 10 , the starting data word is 10
DB12.DBW10uint16In a data block of 12 , the starting data word is 10
DB10.DBW10floatIn a data block of 10 , the starting data word is 10
DB11.DBW10doubleIn a data block of 11 , the starting data word is 10

.BIT

Optional, referring to a bit of an address.

.LEN

When the data type is a string type, it is required and indicates the length of the string.

Address Examples

AddressData TypeDescription
I0.0bitI area, address 0, bit 0
I0.1bitI area, address 0, bit 1
O1.0bitO area, address 1, bit 0
O1.2bitO area, address 1, bit 2
F2.1bitF area, address 2, bit 1
F2.2bitF area, address 2, bit 2
DB1.DBW10.1bitIn a data block of 1 , the starting data word is 10, bit 0
DB2.DBW1.15bitIn a data block of 2 , the starting data word is 1, bit 15
DB1.DBW12.20stringIn a data block of 1 , the starting data word is 12, string length is 20