Overview
Siemens LOGO! 0BA7 (the so-called "LOGO! 7" generation, 6ED1052-1xx00-0BA7 family) communicates using the S7-200 protocol over its integrated Ethernet port, not the native "LOGO!" driver that appears in TIA Portal V15 for the newer 0BA8 generation. When a KTP 900 Basic (6AV2123-2JB03-0AX0) panel is configured against a 0BA7 CPU, the project must select the SIMATIC S7-200 connection driver — selecting the LOGO! driver in TIA Portal will compile cleanly but will not establish runtime communication. The 0BA8 (LOGO! 8) supports both the dedicated LOGO! driver and the S7-200 driver; 0BA7 only supports the S7-200 driver path.
This reference covers the complete integration path: the physical Ethernet topology, the S7-200 connection block in TIA Portal V15 (and compatible V15.1 / V16 / V17 projects), the LOGO! Variable Memory (VM) mapping that the S7-200 driver expects, tag declarations on the HMI side, and a verification checklist based on diagnostic indicators visible in the panel's connection status.
Prerequisites
| Item | Specification |
|---|---|
| LOGO! CPU | 0BA7 (e.g. 6ED1052-1MD00-0BA7, 6ED1052-1HB00-0BA7, 6ED1052-1FB00-0BA7) with integrated Ethernet RJ45 |
| LOGO! Firmware | 0BA7 firmware (FS:04 or later recommended for stable S7-200 communication) |
| HMI Panel | KTP 900 Basic (6AV2123-2JB03-0AX0) — 9" TFT, PN interface |
| Engineering Tool | SIMATIC TIA Portal V15 (or V15.1 / V16 / V17) with WinCC Basic / Comfort installed |
| LOGO! Programming Tool | LOGO!Soft Comfort V8.3 (or V8.0–V8.4) for VM/parameter configuration |
| Cabling | Standard Cat5e/Cat6 Ethernet, direct or via switch (max 100 m per segment) |
| IP addresses in same subnet | Example: LOGO! 192.168.0.10 / 24, HMI 192.168.0.20 / 24 |
Why the LOGO! Driver Fails on 0BA7
The "LOGO!" connection in TIA Portal was introduced specifically for the 0BA8 generation. The 0BA8 firmware exposes a connection service compatible with the LOGO! driver block. The 0BA7 firmware, despite having the same RJ45 footprint, exposes only an S7-200 compatible communication server. When the HMI is configured with a LOGO! connection against a 0BA7 CPU, the panel sends the LOGO! connection-establishment telegram; the 0BA7 replies with a TSAP/port mismatch or no response at all, and the panel reports "Connection interrupted" (Event 140001 / 140002 / 140003 / 140004 in the HMI diagnostic buffer).
The SIMATIC S7-200 driver in TIA Portal issues an S7 communication request to the standard S7 port 102 (ISO-on-TCP / RFC 1006), which the 0BA7 firmware accepts. The same driver is used when a real S7-200 CPU (6ES721x-xxxxx-xxxx) or a compatible S7-200 emulation is the target — the LOGO! 0BA7 is a compatible device from the perspective of this driver.
Network Topology
Both the LOGO! 0BA7 and the KTP 900 Basic expose a single PROFINET (PN) interface. The classic integration is a point-to-point or single-switch Ethernet segment. The IP subnet, gateway, and subnet mask must match.
Direct connection (crossover or auto-MDIX) is acceptable for commissioning. In production, route through a managed switch and assign fixed IPs in the LOGO! 0BA7 web configuration (Tools → Ethernet → IP Address) and in the TIA Portal HMI device configuration (Display → Network settings).
Configuring the LOGO! 0BA7 Network
- Connect the LOGO! 0BA7 to your engineering PC and open LOGO!Soft Comfort V8.3.
- Go to Tools → Ethernet Connections (or right-click the device → Properties → Ethernet).
- Assign a static IP compatible with the HMI's subnet. Example:
192.168.0.10, subnet mask255.255.255.0, gateway192.168.0.1. - Set the S7 server to enabled (default in 0BA7 firmware). The 0BA7 listens on TSAP
01.00/ local TSAP02.00for the S7-200 communication slot — the TIA S7-200 driver uses these by default. - Transfer the project to the LOGO! and cycle power if prompted.
http://192.168.0.10 on the 0BA7 to verify the IP and confirm the S7 communication check-box is enabled. The 0BA7 web page shows MAC address, IP, subnet mask, and a status line for the S7 connection.Configuring the S7-200 Connection in TIA Portal V15
- Open the TIA Portal project that contains both the LOGO! 0BA7 station (under "Devices & Networks") and the KTP 900 Basic station.
- Select the KTP 900 Basic device in the project tree, then double-click Connections.
- Right-click in the empty connections area and choose Add new connection.
- From the Communication driver dropdown, select SIMATIC S7-200. Do not select "LOGO!" — that driver is for 0BA8 only.
- Set the connection partner to the LOGO! 0BA7 station. Configure the partner IP to
192.168.0.10. - Leave the rack/slot at the S7-200 defaults (rack 0, slot 0 — LOGO! 0BA7 maps to this logical position for the S7-200 driver).
- Click Compile and download the HMI project to the KTP 900 Basic.
Connection Block Parameter Summary
| Parameter | Value | Notes |
|---|---|---|
| Connection name | LOGO_HMI | Free text; reference this name in the HMI tags area pointers |
| Communication driver | SIMATIC S7-200 | Only valid driver for 0BA7 |
| Partner IP | 192.168.0.10 | Must match LOGO! 0BA7 IP exactly |
| Partner rack | 0 | S7-200 logical rack |
| Partner slot | 0 | S7-200 logical slot |
| Connection type | Ethernet (PN/IE) | HMI PN interface used |
| TSAP (local / partner) | 02.00 / 01.00 | Default S7-200 server TSAPs; LOGO! 0BA7 default |
Variable Memory (VM) Address Mapping
The LOGO! 0BA7 exposes its internal flags, I/O, and function block parameters in a Variable Memory range that the S7-200 driver can read/write. The S7-200 driver expects the addressing scheme DB1.DBx for byte access (where DB1 is the implicit LOGO! data block) and V<byte>.<bit> for bit access. The complete mapping is:
| LOGO! 0BA7 Element | S7-200 Address (TIA) | Data Type | Access |
|---|---|---|---|
| Digital inputs I1–I24 | V0.0–V2.7 / VW0 / VD0 | Bool / Word / DWord | Read only |
| Digital outputs Q1–Q16 | V1000.0–V1001.7 / VW1000 | Bool / Word | Read/Write |
| Analog inputs AI1–AI8 | VW2000 / VW2002 / ... / VW2014 | Word (Int 0..1000) | Read only |
| Analog outputs AQ1–AQ2 | VW3000 / VW3002 | Word (Int 0..1000) | Read/Write |
| Merker / flags M1–M27 | V4000.0–V4003.3 / VW4000 | Bool / Word / DWord | Read/Write |
| Function block parameter | Per block parameter list | Word / DWord | Read/Write |
| Network inputs NI1–NI64 | V5000.0–V5007.7 | Bool / Word / DWord | Read/Write |
| Network outputs NQ1–NQ64 | V6000.0–V6007.7 | Bool / Word / DWord | Read only |
| Cursor keys / function keys | V7000.0–V7000.3 (F1–F4 / ESC / OK) | Bool | Read only |
Example: Reading Output Q1 from the HMI
Q1 in the LOGO! 0BA7 corresponds to bit V1000.0. In TIA Portal, configure an HMI tag as follows:
- Name:
LOGO_Q1 - Connection:
LOGO_HMI(the S7-200 connection) - PLC tag / address:
%DB1.DBX1000.0or use the area pointer V syntax if the driver exposes it directly:V 1000.0 - Data type:
Bool - Acquisition mode:
Cyclic continuous, 1 s cycle
Example: Writing to Flag M8
- Name:
LOGO_M8 - Address:
%DB1.DBX4000.7(byte 4000, bit 7, since M1=V4000.0, M8=V4000.7) - Data type:
Bool
Reading an Analog Input (AI1)
- Name:
LOGO_AI1 - Address:
%DB1.DBW2000 - Data type:
Int(raw 0..1000; convert with HMI scaling if 0..10 V or 4..20 mA is needed)
HMI Tag Configuration in TIA Portal
- In the project tree, expand KTP 900 Basic → HMI tags.
- Create a new tag, assign the connection
LOGO_HMI. - Enter the DB1 address as shown above. The address syntax accepted by the S7-200 driver in TIA Portal V15 is
DB1,DBX1000.0(Bool) orDB1,DBW1000(Word) — when typed, the compiler converts to the canonical%DB1.DBX1000.0form. - For Word / Int / DWord tags, confirm the byte order is little-endian (S7-200 native). The LOGO! 0BA7 returns words in big-endian for some analog values; if a value reads as 0 or as 256× the expected value, swap the bytes using a "Swap bytes" property on the tag or use a script.
- Group tags by LOGO! block for easier commissioning:
LOGO_I,LOGO_Q,LOGO_AI,LOGO_AQ,LOGO_M.
Verification Procedure
- Physical layer: Confirm the green link LED on the LOGO! 0BA7 RJ45 and on the KTP 900 Basic PN port are lit.
-
IP layer: From the engineering PC,
ping 192.168.0.10andping 192.168.0.20. Both must respond before the HMI will connect. - LOGO! S7 service: From the PC, run a third-party S7-200 client (e.g. LibNoDave, Snap7) or use the LOGO! web page to confirm the S7-200 server is active.
- HMI runtime: On the KTP 900 Basic, open Start Center → Settings → Network and confirm the HMI IP and subnet mask.
- Connection status: Place a status view on a screen that shows the connection state. The "Connected" indicator must change from red to green within ~10 s of HMI startup.
-
Tag live value: Force a digital output in the LOGO! 0BA7 program (e.g.
Q1 := TRUEin a test rung) and confirm the HMI tagLOGO_Q1reflects TRUE within one acquisition cycle.
Troubleshooting Matrix
| Symptom on KTP 900 | Likely Cause | Fix |
|---|---|---|
| "Connection interrupted" (Event 140001) | Wrong driver selected (LOGO! driver used against 0BA7) | Delete the connection, recreate with SIMATIC S7-200, recompile, redownload |
| Event 140002 (partner unreachable) | IP mismatch, cable fault, or LOGO! in client mode | Ping from PC, verify LOGO! 0BA7 web page accessible, check Ethernet cable |
| Event 140003 (TSAP not found) | TSAP misconfigured on 0BA7 | Restore default TSAPs in LOGO!Soft Comfort (Tools → Ethernet Connections → S7) |
| Connected but tags show 0 / -1 | Wrong DB number or byte offset | Verify VM mapping; remember LOGO! 0BA7 returns M1 at V4000.0, Q1 at V1000.0 |
| Connected, tags flicker, some wrong | Byte-swap needed (analog values) | Enable Swap Bytes on the tag or use a conversion script in the HMI |
| Panel shows "Connection interrupted" intermittently | Subnet mismatch or duplicate IP | Verify all three devices (LOGO!, HMI, PC if connected) have unique IPs in the same subnet |
| TIA Portal rejects "S7-200" driver option | WinCC Basic not licensed or wrong panel class | Confirm KTP 900 Basic is the panel model selected; install a license for the connection if prompted |
| Download to HMI fails on the connection | 0BA7 firmware older than FS:04 | Update LOGO! 0BA7 firmware via LOGO!Soft Comfort (Tools → Firmware Update) |
Communication with Third-Party Gateways
When a non-Siemens gateway sits between the LOGO! 0BA7 and the HMI (for example an HMS Anybus X-gateway or Communicator), the gateway can be configured with the S7-300/400 TCP/IP Master driver on the HMI side, while terminating the LOGO! end as an S7-200 server. The HMS Networks knowledge base article 27220934218642 documents the parameter set required for this topology, including TSAP and slot configuration on the gateway's S7-300/400 master side. This is the documented way to expose LOGO! 0BA7 data to non-S7-200 HMI panels that only support the S7-300/400 driver.
Differences Between 0BA7 and 0BA8 Communication
| Feature | LOGO! 0BA7 (LOGO! 7) | LOGO! 0BA8 (LOGO! 8) |
|---|---|---|
| Native Ethernet | Yes (suffix 0BA7 on 12/24 RCE and 230 RCE) | Yes (all 0BA8 variants) |
| S7-200 driver in TIA Portal | Required (only option) | Supported (alternative) |
| LOGO! driver in TIA Portal | Not supported | Native, recommended |
| VM address range | V0..V850 with V4000 flags / V1000 outputs / V2000 analog | Same conceptual map; LOGO! driver uses symbolic names |
| Variable count limit | ~200 accessible from S7-200 driver | ~500 via LOGO! driver |
| Web server | Basic status only | Full web server with VM view |
| Default TSAPs | 01.00 / 02.00 | 01.00 / 02.00 (same default; LOGO! driver hides this) |
Performance and Cycle Time
The S7-200 driver on the KTP 900 Basic operates in cyclic acquisition mode. Typical observed values for a 0BA7 → KTP 900 Basic link over a 100 Mbit switch:
- Connection establishment: 2–6 s on cold start
- Single Bool read cycle: 50–150 ms (acquisition cycle dependent)
- Word read of AI1: 80–200 ms
- Multi-tag burst (16 mixed tags): 250–500 ms
For applications requiring faster update, lower the acquisition cycle to 100 ms on critical tags and group slow tags (e.g. parameter words) at 1 s. The LOGO! 0BA7 program cycle is typically 1–10 ms; communication latency is dominated by the HMI polling, not the LOGO! cycle.
Safety and Operational Notes
FAQ
Why does my KTP 900 Basic show "Connection interrupted" against a LOGO! 0BA7?
The most common cause is selecting the "LOGO!" communication driver in the HMI connection block. The LOGO! driver is only valid for 0BA8 and newer CPUs. Delete the connection and recreate it with the SIMATIC S7-200 driver — the 0BA7 exposes an S7-200 compatible service on port 102 / TSAP 01.00–02.00.
Can I use the LOGO! driver if I upgrade the LOGO! to 0BA8?
Yes. The 0BA8 supports both the dedicated LOGO! driver (recommended) and the S7-200 driver. With the LOGO! driver, tag addressing becomes symbolic and is taken from the LOGO!Soft Comfort project, which is generally easier to maintain than the V-prefix mapping.
What VM address do I use to read a digital output Q1 from the LOGO! 0BA7?
Use %DB1.DBX1000.0 (S7-200 bit notation) or the legacy V 1000.0 area pointer. Q1 maps to the first bit of the output byte at V1000; Q2 to V1000.1, and so on through Q8 (V1000.7). Q9 starts at V1001.0.
Do I need a special TIA Portal option or license for the S7-200 driver?
No additional license is required when the panel is a SIMATIC Basic Panel (KTP 900 Basic) and the connection targets a 0BA7. The S7-200 driver is included with WinCC Basic/Comfort. If TIA Portal hides the S7-200 option in the dropdown, confirm the panel class supports the S7-200 driver — all KTP 2nd-generation Basic Panels do.
How can I read analog values from the LOGO! 0BA7 in the HMI?
Analog inputs AI1–AI8 are read from VW2000, VW2002, ... VW2014. Each value is a 16-bit signed integer with a range of 0 to 1000, where 0 = 0 V / 0 mA and 1000 = 10 V / 20 mA (depending on the configured input type). Apply a linear scaling on the HMI tag if you need engineering units (e.g. °C, bar).
Is the S7-200 driver usable through a managed switch and across VLANs?
Within a single subnet, yes — the S7-200 protocol is standard ISO-on-TCP (RFC 1006) on port 102. Across routed VLANs, you need a TCP-retaining gateway or a router that allows ISO-on-TCP; typical L3 routers do not pass S7 traffic without explicit configuration. The simpler approach is to keep LOGO! and HMI in the same L2 segment.