Connecting Multiple LOGO! to WinCC Flexible: Limits and Setup

David Krause13 min read
HMI / SCADASiemensTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Connecting Multiple Siemens LOGO! to WinCC Flexible: Connection Limits and Architecture

Engineers commissioning small-to-medium LOGO! fleets routinely need to visualise eight or more LOGO! 8 base modules from a single supervisory PC running WinCC Flexible 2008 Runtime. The runtime enforces a hard ceiling on the number of simultaneous S7 connections, which prevents a flat one-to-one topology once that ceiling is reached. This reference documents the ceiling, the LOGO! 8 communication capabilities available to bypass it, three production-grade architectures, and the configuration and verification steps for each.

Scope: Siemens LOGO! 8 (6ED1052-xxx08-0BA0 family, firmware BA0 through BA4), WinCC Flexible 2008 SP5 PC Runtime, LOGO!Soft Comfort V8.x. Where TIA Portal WinCC improves on a limit, the migration path is summarised at the end.

1. Problem Definition: The 8-Connection Ceiling

WinCC Flexible PC Runtime allocates one S7 connection slot per configured PLC partner. Once the runtime reaches its maximum, additional connection objects in the project are reported by the configuration tool and the runtime will not start the extra channel. For most PC Runtime installations this limit is 8 active S7 connections, which is also the number of remote partners most engineers report as the practical limit when configuring LOGO!-to-WinCC projects.

Consequences for a fleet of 10 LOGO! PLCs (or even 8 with spare capacity for a safety or energy partner):

  • Direct 1:1 connection from the PC to each LOGO! is impossible once the ceiling is reached.
  • Tag updates slow down because every polled point competes for one of the limited channels.
  • Adding a new machine in the field forces a redesign instead of a small change.

Three architectural patterns resolve the conflict without abandoning WinCC Flexible or the LOGO! 8 fleet.

2. WinCC Flexible PC Runtime: Connection Architecture

WinCC Flexible distinguishes between logical connections (channel objects in the project tree) and active connections (channels opened by the running runtime against remote partners). The runtime enforces both a hard cap and per-connection point limits.

Runtime Object Typical PC Runtime Value Notes
Maximum S7 connections 8 (standard PC Runtime) Documented ceiling for the base PC Runtime license. Some licensing options raise this; verify against the active license.
Maximum tags per connection Up to 2048 (version-dependent) Each LOGO! exposes a fixed process image, so this limit is rarely the binding constraint.
Cyclic read cycle minimum 100 ms Applies per connection. Multiple tags within a connection share the cycle.
Supported LOGO! partners LOGO! 8 BM, LOGO! 8 TDE-compatible LOGO! 8 advertises itself as an S7-200 compatible partner.
Connection transport ISO-on-TCP (RFC1006) port 102 Default for S7 connections in WinCC Flexible.

For the typical engineer, the binding constraint is the row labelled "Maximum S7 connections". The project will configure cleanly until the ninth connection object is added, at which point the editor warns and the runtime refuses to bring up the extra channel.

3. LOGO! 8 Communication Capabilities

LOGO! 8 base modules ship with a 10/100 Mbit Ethernet port on the bottom of the BM. This single port is used for programming, HMI, and peer-to-peer traffic.

Function LOGO! 8.0 (BA0) LOGO! 8.1 (BA1) LOGO! 8.2 (BA2) LOGO! 8.3+ (BA3/BA4)
S7 server (passive partner for WinCC) Yes Yes Yes Yes
S7 client (PUT/GET to peers) Yes Yes Yes Yes
Modbus TCP server No Yes Yes Yes
Web server (visualisation) No Yes Yes (HTTPS) Yes (HTTPS, user mgmt)
Maximum S7 server connections 8 (firmware-defined) 8 (firmware-defined) 8 (firmware-defined) Verify against firmware release notes
Maximum S7 client operations Limited Limited Limited Limited (block-instance bound)
DNS / NTP Limited Yes Yes Yes

The critical capability for the patterns in this article is the S7 client role: a LOGO! 8 can act as an active S7 partner and pull or push data from another LOGO! 8 on the same network using the network input/output blocks in LOGO!Soft Comfort. This makes the LOGO! itself a valid data concentrator.

4. Architecture Options for 8+ LOGO! PLCs

Pattern PC Connections Used Engineering Effort Live Update Latency Failure Isolation Best When
A. LOGO! Data Concentrator 1–2 Medium (peer wiring in LOGO!Soft Comfort) One LOGO! scan cycle + WinCC cycle Peer LOGO! failure isolated; concentrator failure takes the cluster down 10–30 LOGO! PLCs, low tag count per peer, no strict event-time accuracy
B. Multi-Subnet with Routing Up to 8 per subnet High (IP planning, routing, multiple connection objects) One WinCC cycle Per-subnet isolation; routing failure severs both sides Geographically distributed cabinets with existing VLANs
C. Modbus TCP Polling 1 logical connection with multiple polled stations Medium (Modbus address mapping) N × WinCC cycle where N = number of polled devices Per-device isolation LOGO! 8.1+ fleet with energy/IO monitoring tags, slow updates OK
D. OPC Aggregation (SIMATIC NET PC Software) 1 OPC DA connection to WinCC High (OPC server licensing) Depends on aggregator polling Strong isolation through the OPC layer Existing SIMATIC NET footprint, future migration to TIA Portal

Patterns A and C are the most common for brownfield LOGO! installations because they reuse the LOGO! 8 itself and avoid new licensing. Pattern B is preferred when the cabinets are already on isolated VLANs. Pattern D is a transitional architecture that pays off when migrating to TIA Portal WinCC.

5. Option A: LOGO! Data Concentrator Pattern

In this pattern one or two "gateway" LOGO! 8 modules act as data concentrators. Each remote LOGO! pushes its critical tags to the concentrator using S7 PUT/GET blocks programmed in LOGO!Soft Comfort. WinCC Flexible connects only to the concentrator(s) and reads the merged process image.

Option A: LOGO! Data Concentrator Topology PC + WinCC Flexible 1–2 S7 connections 192.168.0.1 LOGO! Concentrator #1 192.168.0.10 LOGO! Concentrator #2 192.168.0.11 (optional) LOGO! Peer A .20 → NI tags LOGO! Peer B .21 → NI tags LOGO! Peer C .22 → NI tags LOGO! Peer D .23 → NI tags S7 PUT/GET

5.1 Sizing the Concentrator

A LOGO! 8 BM exposes 24 network inputs (NI) and 20 network outputs (NO) per peer direction. A practical cluster size is 4–6 peers per concentrator because each peer typically needs 4–8 NI/NQ words for status, setpoints, and counters. Two concentrators comfortably cover a 10–12 LOGO! fleet and stay well under the runtime's 8-connection cap if you choose to also connect the second concentrator.

5.2 What Belongs in the Concentrator and What Does Not

Send to concentrator Keep at peer
Aggregate run/stop bits, current, fault word Fast interlocks (cycle-time critical)
Hour counters, energy counters Local I/O used only at the peer
Operator setpoints from WinCC Safety-related hard-wired signals
Alarm status words Closed-loop control outputs

6. Option B: Multi-Subnet Architecture with WinCC Routing

When the cabinet layout already separates LOGO! PLCs across VLANs or physical switches, use a managed switch with IP routing or a small SCALANCE router to expose each subnet to the PC. WinCC Flexible then opens a connection to a router address with a TSAP- or IP-routing extension in the connection properties.

Routing constraint: ISO-on-TCP S7 connections through an IP router require the routing of port 102 to be permitted. Verify the firewall and managed switch ACLs allow ISO-on-TCP between the PC subnet and every peer subnet.

Use this pattern when:

  • Cabinets are physically remote and already on their own switches.
  • Tag update latency must match a single WinCC cycle (no extra hop).
  • You have at most 8 partners per subnet (one WinCC connection per partner).

7. Option C: Modbus TCP Polling

LOGO! 8.1 and later expose a Modbus TCP server on the same Ethernet port as the S7 server. WinCC Flexible supports Modbus TCP as a native channel since WinCC Flexible 2008. Polling all peers through a single Modbus TCP channel uses one connection object in WinCC, leaving the rest of the connection budget free for alarms or a non-LOGO! partner.

7.1 Modbus Address Planning

The LOGO! Modbus mapping is documented in the LOGO! 8 system manual. A practical subset for fleet visualisation:

LOGO! Holding Register Meaning Modbus Address
VM 0–7 Digital inputs state 0000–0007
VM 8–15 Digital outputs state 0008–0015
VM 100–103 Analog inputs (word) 0100–0103
VM 200–203 Analog outputs / flags 0200–0203

Mapping is firmware-dependent. Always cross-check against the active system manual entry for your BA-level firmware on the Siemens support portal.

7.2 Polling Strategy

WinCC Flexible issues one read per polling cycle. To poll N peers, either:

  • Use a slow scan group (e.g. 1000 ms) and cycle through peers using a script, or
  • Use a separate connection object per peer with a fast cycle, accepting the connection budget hit.

8. Step-by-Step: Configuring S7 PUT/GET Between LOGO! 8 Peers

The data concentrator pattern requires network input (NI) and network output (NQ) blocks in LOGO!Soft Comfort. The example below wires one peer (LOGO! Peer A at 192.168.0.20) into a concentrator (192.168.0.10).

  1. In LOGO!Soft Comfort open the concentrator project. From the toolbar choose Tools → Ethernet Connections (or right-click the project node and add an S7 connection).
  2. Add a new S7 connection: Connection Type = S7, Remote IP = 192.168.0.20, Local TSAP = 03.00, Remote TSAP = 03.00. Save the connection as PeerA.
  3. Insert a Network Input (NI) block in the Ladder/FBD diagram. Configure:
    Block: NI
    Connection: PeerA
    Read Start Address: VB0   (peer process image start)
    Length: 8 bytes
    Read Cycle: 500 ms
    
  4. Insert a Network Output (NQ) block to send setpoints back:
    Block: NQ
    Connection: PeerA
    Write Start Address: VB100 (peer setpoint region)
    Length: 4 bytes
    Trigger: rising edge of M50
    
  5. Compile and download the program to the concentrator. Verify with Online → Test that NI flags are updating.
  6. Repeat for each peer, using a unique S7 connection object and unique NI/NQ blocks. Use the same local TSAP across connections if the concentrator is acting as a single server (S7 allows multiple server connections on the same TSAP).
TSAP discipline: LOGO! 8 uses 03.00 as the default S7 server TSAP. Keep the local TSAP at 03.00 on the concentrator; change it only if the project collides with another S7 device on the same IP.

9. Step-by-Step: Configuring the WinCC Flexible Connection to the Concentrator

  1. In the WinCC Flexible project tree, right-click Connections → Add Connection.
  2. Set the communication driver to SIMATIC S7-200 / LOGO! for a direct LOGO! 8 partner, or SIMATIC S7-300/400 if the concentrator is an S7-300 used as gateway.
  3. Configure the partner:
    Partner IP: 192.168.0.10
    Partner TSAP: 03.00
    Local TSAP: 01.01
    Connection Type: S7 (ISO-on-TCP)
    
  4. Under Area Pointers, enable the process-image areas you actually need (e.g. DB 1, Byte 0..31 for the merged peer image).
  5. Add tags mapped to the area pointer offsets. Keep tag names structured (e.g. PeerA_Status, PeerB_Counter) to make the project readable when a new peer is added.
  6. Repeat for the second concentrator (if used). WinCC Flexible will report a connection-budget warning if the total exceeds 8.

10. Network Topology and IP Plan

Lay out the IP plan in writing before connecting cables. The 192.168.0.0/24 range below is an example; adapt to your site standard.

Device Role IP Subnet
PC / WinCC Runtime Supervisor 192.168.0.1 /24
LOGO! Concentrator #1 Data concentrator 192.168.0.10 /24
LOGO! Concentrator #2 (optional) Data concentrator 192.168.0.11 /24
LOGO! Peer A Field PLC 192.168.0.20 /24
LOGO! Peer B Field PLC 192.168.0.21 /24
LOGO! Peer C Field PLC 192.168.0.22 /24
LOGO! Peer D Field PLC 192.168.0.23 /24
LOGO! Peer E Field PLC 192.168.0.24 /24
LOGO! Peer F Field PLC 192.168.0.25 /24
LOGO! Peer G Field PLC 192.168.0.26 /24
LOGO! Peer H Field PLC 192.168.0.27 /24
LOGO! Peer I Field PLC 192.168.0.28 /24
LOGO! Peer J Field PLC 192.168.0.29 /24
Managed switch Aggregation 192.168.0.250 /24
Reserved range: Reserve 192.168.0.1 through 192.168.0.19 for the supervisor, the concentrators, and any future gateway. Field peers always start at .20. This makes the addressing pattern obvious to any engineer who later audits the network.

11. Verification and Diagnostics

After the project is loaded, run the following checks before handing the system over to operations.

Check Tool / Method Pass Criteria
PC → Concentrator reachability ping 192.168.0.10 -t Sub-millisecond replies, zero loss
Concentrator → Peer reachability LOGO!Soft Comfort Online → Test on each NI block NI flags update on every cycle
WinCC connection status WinCC Flexible Tools → Status of Connections All configured connections show Connected (green)
Tag update latency Toggle a digital output at a peer, observe corresponding tag in WinCC Update visible within 2 × WinCC cycle (typically ≤ 1 s)
Connection count WinCC Flexible project statistics Active connections ≤ 8
Alarms Force a peer fault, verify WinCC alarm list Alarm generated within 1 cycle, cleared when condition clears

12. Troubleshooting Matrix

Symptom Likely Cause Resolution
WinCC connection object is rejected at compile time Total configured connections would exceed the runtime cap Re-architect to concentrator or Modbus TCP pattern
Connection shows Disconnected after WinCC start TSAP mismatch, IP unreachable, or LOGO! in STOP Verify TSAP 03.00, run ping, switch LOGO! to RUN
Tags show "--- " or quality bad Tag address outside partner process image Re-map the area pointer; cross-check offset with the LOGO! variable table
Intermittent dropouts during scans Switch buffer overflow or duplicate IP Check switch port statistics; scan with arp -a on the PC for duplicate MACs
NI block in concentrator never updates Peer S7 connection not enabled in LOGO!Soft Comfort or wrong TSAP Open the connection properties on the peer; ensure server TSAP is 03.00
WinCC cannot reach a remote subnet peer Router/firewall blocks ISO-on-TCP (port 102) Open port 102 between PC subnet and peer subnet on the firewall
Tags update slowly across many peers All peers polled at the same WinCC cycle Stagger polling groups in WinCC or move to concentrator pattern

13. Migration Path: TIA Portal WinCC

If a migration to TIA Portal is on the roadmap, the connection budget changes. WinCC Runtime Advanced (TIA Portal) supports more S7 connections depending on the licence panel, and the connection editor exposes the budget explicitly. Migration of a concentrator project is largely a port of the WinCC Flexible area pointers into TIA Portal tag tables; the LOGO!Soft Comfort peer program is unchanged.

Practical steps for a staged migration:

  1. Document the existing area pointer map in a spreadsheet.
  2. Import the WinCC Flexible project into TIA Portal using the migration tool (TIA Portal V16+ supports WinCC Flexible 2008 SP5 import).
  3. Re-add any connections that the migration tool flags as needing reconfiguration.
  4. Validate tag-by-tag against the running system before decommissioning WinCC Flexible.

For further background on the LOGO! 8 system and S7 communication refer to the Siemens Industry Online Support portal, specifically the LOGO! 8 system manual and the LOGO!Soft Comfort online help. For WinCC Flexible configuration refer to the WinCC Flexible 2008 Communication manual set.

FAQ

Why does WinCC Flexible Runtime limit me to roughly 8 S7 connections?

WinCC Flexible 2008 PC Runtime was designed around an 8-connection budget in the base license to keep the configuration and runtime footprint predictable. Each configured connection consumes channel resources and a TSAP pair, so the editor enforces the cap at compile time. A second license option raises the cap, but most engineers hit it before reaching that tier.

Can I connect more than 8 LOGO! PLCs by using multiple subnets with the same PC?

Yes, but each partner still consumes one connection slot on the PC. Subnets only change the routing, not the connection budget. Use a concentrator LOGO! 8 or Modbus TCP to stay under the 8-slot ceiling.

Does LOGO! 8 support acting as an S7 client to read other LOGO! PLCs?

Yes. From LOGO! 8.0 onward, the LOGO! 8 base module can use the Network Input (NI) and Network Output (NQ) blocks in LOGO!Soft Comfort to act as an active S7 client. This is the basis of the data concentrator pattern.

What is the difference between WinCC Flexible and TIA Portal WinCC connection limits?

TIA Portal WinCC (Runtime Advanced or Professional) exposes a larger configurable connection budget that scales with the licence panel. Migration is recommended for any installation expected to exceed 8 direct partners, but the concentrator pattern remains valid for reducing tag traffic and isolating peer failures.

Can I use Modbus TCP to read all LOGO! PLCs through a single WinCC connection?

Yes, on LOGO! 8.1 and later. WinCC Flexible supports a Modbus TCP channel that can be configured to poll multiple partners within one connection object, leaving the S7 budget free for other devices. Tag latency increases linearly with the number of polled peers, so a concentrator is preferable when sub-second response is required.

Back to blog