Connecting LOGO! 0BA7 to KTP 900 Basic via S7-200 Driver

David Krause12 min read
SiemensTIA PortalTutorial / How-to
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview

Siemens LOGO! 0BA7 (the so-called "LOGO! 7" generation, 6ED1052-1xx00-0BA7 family) communicates using the S7-200 protocol over its integrated Ethernet port, not the native "LOGO!" driver that appears in TIA Portal V15 for the newer 0BA8 generation. When a KTP 900 Basic (6AV2123-2JB03-0AX0) panel is configured against a 0BA7 CPU, the project must select the SIMATIC S7-200 connection driver — selecting the LOGO! driver in TIA Portal will compile cleanly but will not establish runtime communication. The 0BA8 (LOGO! 8) supports both the dedicated LOGO! driver and the S7-200 driver; 0BA7 only supports the S7-200 driver path.

This reference covers the complete integration path: the physical Ethernet topology, the S7-200 connection block in TIA Portal V15 (and compatible V15.1 / V16 / V17 projects), the LOGO! Variable Memory (VM) mapping that the S7-200 driver expects, tag declarations on the HMI side, and a verification checklist based on diagnostic indicators visible in the panel's connection status.

Prerequisites

Item Specification
LOGO! CPU 0BA7 (e.g. 6ED1052-1MD00-0BA7, 6ED1052-1HB00-0BA7, 6ED1052-1FB00-0BA7) with integrated Ethernet RJ45
LOGO! Firmware 0BA7 firmware (FS:04 or later recommended for stable S7-200 communication)
HMI Panel KTP 900 Basic (6AV2123-2JB03-0AX0) — 9" TFT, PN interface
Engineering Tool SIMATIC TIA Portal V15 (or V15.1 / V16 / V17) with WinCC Basic / Comfort installed
LOGO! Programming Tool LOGO!Soft Comfort V8.3 (or V8.0–V8.4) for VM/parameter configuration
Cabling Standard Cat5e/Cat6 Ethernet, direct or via switch (max 100 m per segment)
IP addresses in same subnet Example: LOGO! 192.168.0.10 / 24, HMI 192.168.0.20 / 24
Critical: TIA Portal V15 (and V15.1) installed with only WinCC Basic supports the KTP 900 Basic (Basic Panels 2nd generation). Comfort Panels (TP/Comfort) require WinCC Comfort. Both panel families can use the S7-200 driver when targeting a 0BA7.

Why the LOGO! Driver Fails on 0BA7

The "LOGO!" connection in TIA Portal was introduced specifically for the 0BA8 generation. The 0BA8 firmware exposes a connection service compatible with the LOGO! driver block. The 0BA7 firmware, despite having the same RJ45 footprint, exposes only an S7-200 compatible communication server. When the HMI is configured with a LOGO! connection against a 0BA7 CPU, the panel sends the LOGO! connection-establishment telegram; the 0BA7 replies with a TSAP/port mismatch or no response at all, and the panel reports "Connection interrupted" (Event 140001 / 140002 / 140003 / 140004 in the HMI diagnostic buffer).

The SIMATIC S7-200 driver in TIA Portal issues an S7 communication request to the standard S7 port 102 (ISO-on-TCP / RFC 1006), which the 0BA7 firmware accepts. The same driver is used when a real S7-200 CPU (6ES721x-xxxxx-xxxx) or a compatible S7-200 emulation is the target — the LOGO! 0BA7 is a compatible device from the perspective of this driver.

Network Topology

Both the LOGO! 0BA7 and the KTP 900 Basic expose a single PROFINET (PN) interface. The classic integration is a point-to-point or single-switch Ethernet segment. The IP subnet, gateway, and subnet mask must match.

LOGO! 0BA7 IP 192.168.0.10 Mask 255.255.255.0 Port 102 / S7-200 SCALANCE / Switch (optional, or crossover/direct) KTP 900 Basic IP 192.168.0.20 Mask 255.255.255.0 Driver: SIMATIC S7-200

Direct connection (crossover or auto-MDIX) is acceptable for commissioning. In production, route through a managed switch and assign fixed IPs in the LOGO! 0BA7 web configuration (Tools → Ethernet → IP Address) and in the TIA Portal HMI device configuration (Display → Network settings).

Configuring the LOGO! 0BA7 Network

  1. Connect the LOGO! 0BA7 to your engineering PC and open LOGO!Soft Comfort V8.3.
  2. Go to Tools → Ethernet Connections (or right-click the device → Properties → Ethernet).
  3. Assign a static IP compatible with the HMI's subnet. Example: 192.168.0.10, subnet mask 255.255.255.0, gateway 192.168.0.1.
  4. Set the S7 server to enabled (default in 0BA7 firmware). The 0BA7 listens on TSAP 01.00 / local TSAP 02.00 for the S7-200 communication slot — the TIA S7-200 driver uses these by default.
  5. Transfer the project to the LOGO! and cycle power if prompted.
Web configuration alternative: Open a browser to http://192.168.0.10 on the 0BA7 to verify the IP and confirm the S7 communication check-box is enabled. The 0BA7 web page shows MAC address, IP, subnet mask, and a status line for the S7 connection.

Configuring the S7-200 Connection in TIA Portal V15

  1. Open the TIA Portal project that contains both the LOGO! 0BA7 station (under "Devices & Networks") and the KTP 900 Basic station.
  2. Select the KTP 900 Basic device in the project tree, then double-click Connections.
  3. Right-click in the empty connections area and choose Add new connection.
  4. From the Communication driver dropdown, select SIMATIC S7-200. Do not select "LOGO!" — that driver is for 0BA8 only.
  5. Set the connection partner to the LOGO! 0BA7 station. Configure the partner IP to 192.168.0.10.
  6. Leave the rack/slot at the S7-200 defaults (rack 0, slot 0 — LOGO! 0BA7 maps to this logical position for the S7-200 driver).
  7. Click Compile and download the HMI project to the KTP 900 Basic.

Connection Block Parameter Summary

Parameter Value Notes
Connection name LOGO_HMI Free text; reference this name in the HMI tags area pointers
Communication driver SIMATIC S7-200 Only valid driver for 0BA7
Partner IP 192.168.0.10 Must match LOGO! 0BA7 IP exactly
Partner rack 0 S7-200 logical rack
Partner slot 0 S7-200 logical slot
Connection type Ethernet (PN/IE) HMI PN interface used
TSAP (local / partner) 02.00 / 01.00 Default S7-200 server TSAPs; LOGO! 0BA7 default

Variable Memory (VM) Address Mapping

The LOGO! 0BA7 exposes its internal flags, I/O, and function block parameters in a Variable Memory range that the S7-200 driver can read/write. The S7-200 driver expects the addressing scheme DB1.DBx for byte access (where DB1 is the implicit LOGO! data block) and V<byte>.<bit> for bit access. The complete mapping is:

LOGO! 0BA7 Element S7-200 Address (TIA) Data Type Access
Digital inputs I1–I24 V0.0–V2.7 / VW0 / VD0 Bool / Word / DWord Read only
Digital outputs Q1–Q16 V1000.0–V1001.7 / VW1000 Bool / Word Read/Write
Analog inputs AI1–AI8 VW2000 / VW2002 / ... / VW2014 Word (Int 0..1000) Read only
Analog outputs AQ1–AQ2 VW3000 / VW3002 Word (Int 0..1000) Read/Write
Merker / flags M1–M27 V4000.0–V4003.3 / VW4000 Bool / Word / DWord Read/Write
Function block parameter Per block parameter list Word / DWord Read/Write
Network inputs NI1–NI64 V5000.0–V5007.7 Bool / Word / DWord Read/Write
Network outputs NQ1–NQ64 V6000.0–V6007.7 Bool / Word / DWord Read only
Cursor keys / function keys V7000.0–V7000.3 (F1–F4 / ESC / OK) Bool Read only
Note on bit ordering: S7-200 bit numbering is byte.LSB-first. The LOGO! 0BA7 bit order is also byte.LSB-first. Mapping is therefore direct — no bit-swap required. If a value appears inverted or shifted, double-check that the HMI tag is declared with the correct DB number (default = 1) and that no swap byte block is enabled in the connection properties.

Example: Reading Output Q1 from the HMI

Q1 in the LOGO! 0BA7 corresponds to bit V1000.0. In TIA Portal, configure an HMI tag as follows:

  • Name: LOGO_Q1
  • Connection: LOGO_HMI (the S7-200 connection)
  • PLC tag / address: %DB1.DBX1000.0 or use the area pointer V syntax if the driver exposes it directly: V 1000.0
  • Data type: Bool
  • Acquisition mode: Cyclic continuous, 1 s cycle

Example: Writing to Flag M8

  • Name: LOGO_M8
  • Address: %DB1.DBX4000.7 (byte 4000, bit 7, since M1=V4000.0, M8=V4000.7)
  • Data type: Bool

Reading an Analog Input (AI1)

  • Name: LOGO_AI1
  • Address: %DB1.DBW2000
  • Data type: Int (raw 0..1000; convert with HMI scaling if 0..10 V or 4..20 mA is needed)

HMI Tag Configuration in TIA Portal

  1. In the project tree, expand KTP 900 Basic → HMI tags.
  2. Create a new tag, assign the connection LOGO_HMI.
  3. Enter the DB1 address as shown above. The address syntax accepted by the S7-200 driver in TIA Portal V15 is DB1,DBX1000.0 (Bool) or DB1,DBW1000 (Word) — when typed, the compiler converts to the canonical %DB1.DBX1000.0 form.
  4. For Word / Int / DWord tags, confirm the byte order is little-endian (S7-200 native). The LOGO! 0BA7 returns words in big-endian for some analog values; if a value reads as 0 or as 256× the expected value, swap the bytes using a "Swap bytes" property on the tag or use a script.
  5. Group tags by LOGO! block for easier commissioning: LOGO_I, LOGO_Q, LOGO_AI, LOGO_AQ, LOGO_M.

Verification Procedure

  1. Physical layer: Confirm the green link LED on the LOGO! 0BA7 RJ45 and on the KTP 900 Basic PN port are lit.
  2. IP layer: From the engineering PC, ping 192.168.0.10 and ping 192.168.0.20. Both must respond before the HMI will connect.
  3. LOGO! S7 service: From the PC, run a third-party S7-200 client (e.g. LibNoDave, Snap7) or use the LOGO! web page to confirm the S7-200 server is active.
  4. HMI runtime: On the KTP 900 Basic, open Start Center → Settings → Network and confirm the HMI IP and subnet mask.
  5. Connection status: Place a status view on a screen that shows the connection state. The "Connected" indicator must change from red to green within ~10 s of HMI startup.
  6. Tag live value: Force a digital output in the LOGO! 0BA7 program (e.g. Q1 := TRUE in a test rung) and confirm the HMI tag LOGO_Q1 reflects TRUE within one acquisition cycle.

Troubleshooting Matrix

Symptom on KTP 900 Likely Cause Fix
"Connection interrupted" (Event 140001) Wrong driver selected (LOGO! driver used against 0BA7) Delete the connection, recreate with SIMATIC S7-200, recompile, redownload
Event 140002 (partner unreachable) IP mismatch, cable fault, or LOGO! in client mode Ping from PC, verify LOGO! 0BA7 web page accessible, check Ethernet cable
Event 140003 (TSAP not found) TSAP misconfigured on 0BA7 Restore default TSAPs in LOGO!Soft Comfort (Tools → Ethernet Connections → S7)
Connected but tags show 0 / -1 Wrong DB number or byte offset Verify VM mapping; remember LOGO! 0BA7 returns M1 at V4000.0, Q1 at V1000.0
Connected, tags flicker, some wrong Byte-swap needed (analog values) Enable Swap Bytes on the tag or use a conversion script in the HMI
Panel shows "Connection interrupted" intermittently Subnet mismatch or duplicate IP Verify all three devices (LOGO!, HMI, PC if connected) have unique IPs in the same subnet
TIA Portal rejects "S7-200" driver option WinCC Basic not licensed or wrong panel class Confirm KTP 900 Basic is the panel model selected; install a license for the connection if prompted
Download to HMI fails on the connection 0BA7 firmware older than FS:04 Update LOGO! 0BA7 firmware via LOGO!Soft Comfort (Tools → Firmware Update)

Communication with Third-Party Gateways

When a non-Siemens gateway sits between the LOGO! 0BA7 and the HMI (for example an HMS Anybus X-gateway or Communicator), the gateway can be configured with the S7-300/400 TCP/IP Master driver on the HMI side, while terminating the LOGO! end as an S7-200 server. The HMS Networks knowledge base article 27220934218642 documents the parameter set required for this topology, including TSAP and slot configuration on the gateway's S7-300/400 master side. This is the documented way to expose LOGO! 0BA7 data to non-S7-200 HMI panels that only support the S7-300/400 driver.

Differences Between 0BA7 and 0BA8 Communication

Feature LOGO! 0BA7 (LOGO! 7) LOGO! 0BA8 (LOGO! 8)
Native Ethernet Yes (suffix 0BA7 on 12/24 RCE and 230 RCE) Yes (all 0BA8 variants)
S7-200 driver in TIA Portal Required (only option) Supported (alternative)
LOGO! driver in TIA Portal Not supported Native, recommended
VM address range V0..V850 with V4000 flags / V1000 outputs / V2000 analog Same conceptual map; LOGO! driver uses symbolic names
Variable count limit ~200 accessible from S7-200 driver ~500 via LOGO! driver
Web server Basic status only Full web server with VM view
Default TSAPs 01.00 / 02.00 01.00 / 02.00 (same default; LOGO! driver hides this)

Performance and Cycle Time

The S7-200 driver on the KTP 900 Basic operates in cyclic acquisition mode. Typical observed values for a 0BA7 → KTP 900 Basic link over a 100 Mbit switch:

  • Connection establishment: 2–6 s on cold start
  • Single Bool read cycle: 50–150 ms (acquisition cycle dependent)
  • Word read of AI1: 80–200 ms
  • Multi-tag burst (16 mixed tags): 250–500 ms

For applications requiring faster update, lower the acquisition cycle to 100 ms on critical tags and group slow tags (e.g. parameter words) at 1 s. The LOGO! 0BA7 program cycle is typically 1–10 ms; communication latency is dominated by the HMI polling, not the LOGO! cycle.

Safety and Operational Notes

Functional safety: The LOGO! 0BA7 is not a safety PLC. Do not use the HMI→LOGO! path for SIL-rated emergency-stop or safety interlocking. Use a dedicated safety relay (e.g. 3SK1 / Sirius) for those functions.
Network segregation: If the LOGO! 0BA7 is on a production network that also hosts a WinCC station, place the panel on a separate VLAN and use a fixed IP to prevent IP conflicts from breaking the S7-200 connection.
Firmware compatibility: LOGO! 0BA7 firmware before FS:02 has known S7-200 communication instabilities. If you see intermittent disconnects, upgrade to the latest 0BA7 firmware published on the Siemens Industry Online Support portal.

FAQ

Why does my KTP 900 Basic show "Connection interrupted" against a LOGO! 0BA7?

The most common cause is selecting the "LOGO!" communication driver in the HMI connection block. The LOGO! driver is only valid for 0BA8 and newer CPUs. Delete the connection and recreate it with the SIMATIC S7-200 driver — the 0BA7 exposes an S7-200 compatible service on port 102 / TSAP 01.00–02.00.

Can I use the LOGO! driver if I upgrade the LOGO! to 0BA8?

Yes. The 0BA8 supports both the dedicated LOGO! driver (recommended) and the S7-200 driver. With the LOGO! driver, tag addressing becomes symbolic and is taken from the LOGO!Soft Comfort project, which is generally easier to maintain than the V-prefix mapping.

What VM address do I use to read a digital output Q1 from the LOGO! 0BA7?

Use %DB1.DBX1000.0 (S7-200 bit notation) or the legacy V 1000.0 area pointer. Q1 maps to the first bit of the output byte at V1000; Q2 to V1000.1, and so on through Q8 (V1000.7). Q9 starts at V1001.0.

Do I need a special TIA Portal option or license for the S7-200 driver?

No additional license is required when the panel is a SIMATIC Basic Panel (KTP 900 Basic) and the connection targets a 0BA7. The S7-200 driver is included with WinCC Basic/Comfort. If TIA Portal hides the S7-200 option in the dropdown, confirm the panel class supports the S7-200 driver — all KTP 2nd-generation Basic Panels do.

How can I read analog values from the LOGO! 0BA7 in the HMI?

Analog inputs AI1–AI8 are read from VW2000, VW2002, ... VW2014. Each value is a 16-bit signed integer with a range of 0 to 1000, where 0 = 0 V / 0 mA and 1000 = 10 V / 20 mA (depending on the configured input type). Apply a linear scaling on the HMI tag if you need engineering units (e.g. °C, bar).

Is the S7-200 driver usable through a managed switch and across VLANs?

Within a single subnet, yes — the S7-200 protocol is standard ISO-on-TCP (RFC 1006) on port 102. Across routed VLANs, you need a TCP-retaining gateway or a router that allows ISO-on-TCP; typical L3 routers do not pass S7 traffic without explicit configuration. The simpler approach is to keep LOGO! and HMI in the same L2 segment.

Back to blog