Configuring TIA Portal on Mac with Thunderbolt Ethernet Adapter

Overview

Engineers using macOS as their primary workstation who must commission or maintain Siemens S7-1500, S7-1200, S7-300, and S7-400 PLCs face a recurring constraint: SIMATIC engineering software (Step 7 V5.5 SP3, TIA Portal V13 SP1 and later) is Windows-only. Apple removed the built-in RJ45 jack from MacBook Air and MacBook Pro models beginning with the 2015–2016 generation, leaving Thunderbolt-to-Ethernet or USB-C-to-Ethernet adapters as the only wire-line path to PROFINET networks. This reference documents how to pass that adapter into a Windows virtual machine, configure static IP addressing for the S7-1500 CPU, enable USB passthrough for legacy MPI/PROFIBUS adapters, and verify end-to-end online connectivity from the SIMATIC engineering stack.

The recommended topology is a single MacBook host running Parallels Desktop or VMware Fusion with the Thunderbolt Ethernet adapter bound to the guest in Bridged mode. The Windows guest receives the adapter as a virtual Intel/VMware NIC, picks up an in-box ASIX AX88179 driver, and presents the PLC subnet directly to TIA Portal and Step 7 without NAT translation. This eliminates double-NAT issues that prevent S7 communication on TCP/102 (ISO-TSAP) and PROFINET RPC on TCP/34964–34965.

Hardware Prerequisites

Supported Apple Mac Models

• MacBook Air 11"/13" (Mid 2011 – 2017) — Mini DisplayPort / Thunderbolt 1
• MacBook Pro Retina (2012 – Mid 2015) — Thunderbolt 2
• MacBook Pro (Late 2016 and later) — Thunderbolt 3 (USB-C)
• MacBook Air (2018 and later) — Thunderbolt 3 (USB-C)

Apple Wired Ethernet Adapter Catalog

The ASIX AX88179 controller ships with in-box drivers on every supported macOS release (10.9 Mavericks through current) and on every Windows release from Windows 7 SP1 through Windows 11. No driver installation is required inside the VM guest when the adapter is bridged through.

S7-1500 CPU Reference Targets

Virtualization Platform Comparison

Bridged Network Configuration

Parallels Desktop

1. Shut down the VM and open Configuration > Hardware > Network 1.
2. Set Type = Bridged Network.
3. From the Source dropdown, select the Thunderbolt Ethernet adapter (macOS typically labels this en4, en5, or Thunderbolt Ethernet Slot X).
4. Confirm Connect network adapter is checked and disable the default NAT adapter if not required.
5. Boot the VM and verify the guest sees a new Ethernet adapter in Device Manager.

VMware Fusion

1. Power off the VM, then open Settings > Network Adapter.
2. Select Bridged Networking: Connect directly to the physical network.
3. Choose Thunderbolt Ethernet from the device list.
4. Uncheck Replicate physical network connection state to prevent the VM from going down when the host sleeps.

Oracle VirtualBox

1. Power off the VM, then Settings > Network > Adapter 1.
2. Set Attached to: Bridged Adapter.
3. From Name, select the Thunderbolt Ethernet interface (typically en4).
4. Promiscuous Mode: Allow All.

S7-1500 IP Addressing for Engineering Access

The S7-1500 PROFINET interface X1 is configured with a static IPv4 address. The VM guest, macOS host (if also online), and the PLC must all reside in the same /24 subnet so TIA Portal can resolve the device during "Accessible nodes" discovery.

To set the VM IP, open Control Panel > Network and Sharing Center > Ethernet > Properties > Internet Protocol Version 4 and enter the values above. TIA Portal V13 SP1 will auto-detect mismatched subnets on "Go online" and prompt to change the PG/PC interface — pre-setting the correct IP eliminates that dialog.

Step 7 V5.5 SP3 Installation Notes

1. Install in this order: Step 7 V5.5 → SP3 → latest HF update → Automation License Manager → transfer authorization (USB License Key or floating license server).
2. Disable Windows Defender real-time scanning during the install; it falsely flags the S7DOS service executable.
3. After install, open Start > SIMATIC > Set PG/PC Interface.
4. Set Access Point of Application: S7ONLINE.
5. Set Interface Parameterization Used: TCP/IP (Auto) > [Thunderbolt Ethernet Adapter].
6. Confirm with Diagnostics — the S7-1500 CPU should appear in the broadcast window within 3 seconds.

TIA Portal V13 SP1 Installation Notes

1. Mount the TIA Portal V13 SP1 DVD ISO inside the VM and run Setup.exe as Administrator.
2. Select SIMATIC TIA Portal + STEP 7 Professional V13 SP1 + WinCC Professional V13 SP1 as needed.
3. Skip antivirus check if it falsely flags S7PCT; install with override.
4. Activate license via Automation License Manager.
5. Open Project View > Online > Accessible devices. The S7-1500 CPU should be listed by IP and PROFINET device name.

USB Passthrough for MPI / PROFIBUS Adapters

Legacy S7-300/400 CPUs without PROFINET require a Siemens USB adapter. The following catalog numbers are verified to enumerate correctly under the bridged VM configuration:

Parallels Desktop

Top menu → Devices > USB > [Siemens Adapter Name]. The adapter disconnects from macOS and re-appears in Windows Device Manager as a USB Serial Converter.

VMware Fusion

Virtual Machine > Removable Devices > [Siemens Adapter] > Connect. Auto-detect on insert can be enabled under Settings > USB > Advanced.

VirtualBox

1. Settings > USB → enable USB 2.0 (EHCI) controller.
2. Add a filter with Vendor ID 0908 and the matching Product ID from the table.
3. Insert the adapter; the VM should claim it immediately.

Performance Tuning

TIA Portal V13 SP1 is memory-intensive: a 50-device project consumes 1.5–2.5 GB of working set during compile. Step 7 V5.5 SP3 is lighter (<800 MB). Allocate VM resources as follows:

Disable Time Machine snapshots of the VM bundle to prevent compile hangs when the host I/O is busy. Configure VM to use Apple's APFS-formatted virtual disk for fastest compile throughput.

Firewall and Port Configuration

S7 communication and PROFINET discovery require the following ports to be open inbound on the VM's Windows Firewall profile:

Add a Windows Firewall inbound rule named "SIMATIC" enabling the above TCP/UDP ports on the Thunderbolt Ethernet adapter profile only (Public profile acceptable for isolated PLC networks).

Verification Procedure

1. From the VM, open Command Prompt and run: ping 192.168.5.12 -t. Confirm reply times <1 ms consistently.
2. Open Step 7 V5.5 → PLC > Accessible Nodes. The S7-1500 CPU should appear with its IP, rack/slot, and module type within 3 seconds.
3. In TIA Portal, Online > Accessible devices. Confirm the CPU and any PROFINET IO devices appear with green status indicators.
4. Open the project, right-click the CPU, select Go online. Confirm "Online status: Connected".
5. Read the CPU diagnostic buffer (PLC > Diagnostics > Diagnostic Buffer) and confirm the most recent entry timestamp matches the VM's current local time.
6. Download a small hardware configuration change (e.g. add a comment to a tag) to verify read/write round-trip.

Troubleshooting Matrix

Wireless and VPN Considerations

Wi-Fi and VPN paths to the S7-1500 are suitable for read-only diagnostics and web-server access on port 80/443 of the CPU, but not for online program editing. Latency variance over 802.11ac/ax typically exceeds 10 ms, which causes TIA Portal online connections to drop during block compare/transfer. Reserve the Thunderbolt Ethernet path for any download, compare, or trace operation.

Recommended Configuration Checklist

• macOS 10.15 Catalina or later on Intel Mac (required for Step 7 V5.5 SP3)
• Parallels Desktop 18/19 or VMware Fusion 12/13 (Intel build)
• 4 GB RAM and 4 vCPUs allocated to the VM (fixed, not adaptive)
• Apple A1433 or A1649 wired Ethernet adapter on Thunderbolt bus
• VM network adapter set to Bridged bound to Thunderbolt Ethernet
• VM static IP 192.168.5.11/24, PLC IP 192.168.5.12/24
• Windows Firewall rule "SIMATIC" opening TCP/102, TCP/34964–34965, UDP/161 on Thunderbolt profile
• USB passthrough enabled for legacy MPI/PROFIBUS adapters (Siemens USB PC Adapter 6ES7972-0CB20-0XA0 or CP 5711 6GK1571-1AA00)
• Verify "Accessible nodes" shows the S7-1500 CPU before opening any project