Connecting Multiple Siemens LOGO! to WinCC Flexible: Connection Limits and Architecture
Engineers commissioning small-to-medium LOGO! fleets routinely need to visualise eight or more LOGO! 8 base modules from a single supervisory PC running WinCC Flexible 2008 Runtime. The runtime enforces a hard ceiling on the number of simultaneous S7 connections, which prevents a flat one-to-one topology once that ceiling is reached. This reference documents the ceiling, the LOGO! 8 communication capabilities available to bypass it, three production-grade architectures, and the configuration and verification steps for each.
1. Problem Definition: The 8-Connection Ceiling
WinCC Flexible PC Runtime allocates one S7 connection slot per configured PLC partner. Once the runtime reaches its maximum, additional connection objects in the project are reported by the configuration tool and the runtime will not start the extra channel. For most PC Runtime installations this limit is 8 active S7 connections, which is also the number of remote partners most engineers report as the practical limit when configuring LOGO!-to-WinCC projects.
Consequences for a fleet of 10 LOGO! PLCs (or even 8 with spare capacity for a safety or energy partner):
- Direct 1:1 connection from the PC to each LOGO! is impossible once the ceiling is reached.
- Tag updates slow down because every polled point competes for one of the limited channels.
- Adding a new machine in the field forces a redesign instead of a small change.
Three architectural patterns resolve the conflict without abandoning WinCC Flexible or the LOGO! 8 fleet.
2. WinCC Flexible PC Runtime: Connection Architecture
WinCC Flexible distinguishes between logical connections (channel objects in the project tree) and active connections (channels opened by the running runtime against remote partners). The runtime enforces both a hard cap and per-connection point limits.
| Runtime Object | Typical PC Runtime Value | Notes |
|---|---|---|
| Maximum S7 connections | 8 (standard PC Runtime) | Documented ceiling for the base PC Runtime license. Some licensing options raise this; verify against the active license. |
| Maximum tags per connection | Up to 2048 (version-dependent) | Each LOGO! exposes a fixed process image, so this limit is rarely the binding constraint. |
| Cyclic read cycle minimum | 100 ms | Applies per connection. Multiple tags within a connection share the cycle. |
| Supported LOGO! partners | LOGO! 8 BM, LOGO! 8 TDE-compatible | LOGO! 8 advertises itself as an S7-200 compatible partner. |
| Connection transport | ISO-on-TCP (RFC1006) port 102 | Default for S7 connections in WinCC Flexible. |
For the typical engineer, the binding constraint is the row labelled "Maximum S7 connections". The project will configure cleanly until the ninth connection object is added, at which point the editor warns and the runtime refuses to bring up the extra channel.
3. LOGO! 8 Communication Capabilities
LOGO! 8 base modules ship with a 10/100 Mbit Ethernet port on the bottom of the BM. This single port is used for programming, HMI, and peer-to-peer traffic.
| Function | LOGO! 8.0 (BA0) | LOGO! 8.1 (BA1) | LOGO! 8.2 (BA2) | LOGO! 8.3+ (BA3/BA4) |
|---|---|---|---|---|
| S7 server (passive partner for WinCC) | Yes | Yes | Yes | Yes |
| S7 client (PUT/GET to peers) | Yes | Yes | Yes | Yes |
| Modbus TCP server | No | Yes | Yes | Yes |
| Web server (visualisation) | No | Yes | Yes (HTTPS) | Yes (HTTPS, user mgmt) |
| Maximum S7 server connections | 8 (firmware-defined) | 8 (firmware-defined) | 8 (firmware-defined) | Verify against firmware release notes |
| Maximum S7 client operations | Limited | Limited | Limited | Limited (block-instance bound) |
| DNS / NTP | Limited | Yes | Yes | Yes |
The critical capability for the patterns in this article is the S7 client role: a LOGO! 8 can act as an active S7 partner and pull or push data from another LOGO! 8 on the same network using the network input/output blocks in LOGO!Soft Comfort. This makes the LOGO! itself a valid data concentrator.
4. Architecture Options for 8+ LOGO! PLCs
| Pattern | PC Connections Used | Engineering Effort | Live Update Latency | Failure Isolation | Best When |
|---|---|---|---|---|---|
| A. LOGO! Data Concentrator | 1–2 | Medium (peer wiring in LOGO!Soft Comfort) | One LOGO! scan cycle + WinCC cycle | Peer LOGO! failure isolated; concentrator failure takes the cluster down | 10–30 LOGO! PLCs, low tag count per peer, no strict event-time accuracy |
| B. Multi-Subnet with Routing | Up to 8 per subnet | High (IP planning, routing, multiple connection objects) | One WinCC cycle | Per-subnet isolation; routing failure severs both sides | Geographically distributed cabinets with existing VLANs |
| C. Modbus TCP Polling | 1 logical connection with multiple polled stations | Medium (Modbus address mapping) | N × WinCC cycle where N = number of polled devices | Per-device isolation | LOGO! 8.1+ fleet with energy/IO monitoring tags, slow updates OK |
| D. OPC Aggregation (SIMATIC NET PC Software) | 1 OPC DA connection to WinCC | High (OPC server licensing) | Depends on aggregator polling | Strong isolation through the OPC layer | Existing SIMATIC NET footprint, future migration to TIA Portal |
Patterns A and C are the most common for brownfield LOGO! installations because they reuse the LOGO! 8 itself and avoid new licensing. Pattern B is preferred when the cabinets are already on isolated VLANs. Pattern D is a transitional architecture that pays off when migrating to TIA Portal WinCC.
5. Option A: LOGO! Data Concentrator Pattern
In this pattern one or two "gateway" LOGO! 8 modules act as data concentrators. Each remote LOGO! pushes its critical tags to the concentrator using S7 PUT/GET blocks programmed in LOGO!Soft Comfort. WinCC Flexible connects only to the concentrator(s) and reads the merged process image.
5.1 Sizing the Concentrator
A LOGO! 8 BM exposes 24 network inputs (NI) and 20 network outputs (NO) per peer direction. A practical cluster size is 4–6 peers per concentrator because each peer typically needs 4–8 NI/NQ words for status, setpoints, and counters. Two concentrators comfortably cover a 10–12 LOGO! fleet and stay well under the runtime's 8-connection cap if you choose to also connect the second concentrator.
5.2 What Belongs in the Concentrator and What Does Not
| Send to concentrator | Keep at peer |
|---|---|
| Aggregate run/stop bits, current, fault word | Fast interlocks (cycle-time critical) |
| Hour counters, energy counters | Local I/O used only at the peer |
| Operator setpoints from WinCC | Safety-related hard-wired signals |
| Alarm status words | Closed-loop control outputs |
6. Option B: Multi-Subnet Architecture with WinCC Routing
When the cabinet layout already separates LOGO! PLCs across VLANs or physical switches, use a managed switch with IP routing or a small SCALANCE router to expose each subnet to the PC. WinCC Flexible then opens a connection to a router address with a TSAP- or IP-routing extension in the connection properties.
Use this pattern when:
- Cabinets are physically remote and already on their own switches.
- Tag update latency must match a single WinCC cycle (no extra hop).
- You have at most 8 partners per subnet (one WinCC connection per partner).
7. Option C: Modbus TCP Polling
LOGO! 8.1 and later expose a Modbus TCP server on the same Ethernet port as the S7 server. WinCC Flexible supports Modbus TCP as a native channel since WinCC Flexible 2008. Polling all peers through a single Modbus TCP channel uses one connection object in WinCC, leaving the rest of the connection budget free for alarms or a non-LOGO! partner.
7.1 Modbus Address Planning
The LOGO! Modbus mapping is documented in the LOGO! 8 system manual. A practical subset for fleet visualisation:
| LOGO! Holding Register | Meaning | Modbus Address |
|---|---|---|
| VM 0–7 | Digital inputs state | 0000–0007 |
| VM 8–15 | Digital outputs state | 0008–0015 |
| VM 100–103 | Analog inputs (word) | 0100–0103 |
| VM 200–203 | Analog outputs / flags | 0200–0203 |
Mapping is firmware-dependent. Always cross-check against the active system manual entry for your BA-level firmware on the Siemens support portal.
7.2 Polling Strategy
WinCC Flexible issues one read per polling cycle. To poll N peers, either:
- Use a slow scan group (e.g. 1000 ms) and cycle through peers using a script, or
- Use a separate connection object per peer with a fast cycle, accepting the connection budget hit.
8. Step-by-Step: Configuring S7 PUT/GET Between LOGO! 8 Peers
The data concentrator pattern requires network input (NI) and network output (NQ) blocks in LOGO!Soft Comfort. The example below wires one peer (LOGO! Peer A at 192.168.0.20) into a concentrator (192.168.0.10).
- In LOGO!Soft Comfort open the concentrator project. From the toolbar choose Tools → Ethernet Connections (or right-click the project node and add an S7 connection).
- Add a new S7 connection:
Connection Type = S7,Remote IP = 192.168.0.20,Local TSAP = 03.00,Remote TSAP = 03.00. Save the connection asPeerA. - Insert a Network Input (NI) block in the Ladder/FBD diagram. Configure:
Block: NI Connection: PeerA Read Start Address: VB0 (peer process image start) Length: 8 bytes Read Cycle: 500 ms - Insert a Network Output (NQ) block to send setpoints back:
Block: NQ Connection: PeerA Write Start Address: VB100 (peer setpoint region) Length: 4 bytes Trigger: rising edge of M50 - Compile and download the program to the concentrator. Verify with Online → Test that NI flags are updating.
- Repeat for each peer, using a unique S7 connection object and unique NI/NQ blocks. Use the same local TSAP across connections if the concentrator is acting as a single server (S7 allows multiple server connections on the same TSAP).
03.00 as the default S7 server TSAP. Keep the local TSAP at 03.00 on the concentrator; change it only if the project collides with another S7 device on the same IP.9. Step-by-Step: Configuring the WinCC Flexible Connection to the Concentrator
- In the WinCC Flexible project tree, right-click Connections → Add Connection.
- Set the communication driver to SIMATIC S7-200 / LOGO! for a direct LOGO! 8 partner, or SIMATIC S7-300/400 if the concentrator is an S7-300 used as gateway.
- Configure the partner:
Partner IP: 192.168.0.10 Partner TSAP: 03.00 Local TSAP: 01.01 Connection Type: S7 (ISO-on-TCP) - Under Area Pointers, enable the process-image areas you actually need (e.g.
DB 1, Byte 0..31for the merged peer image). - Add tags mapped to the area pointer offsets. Keep tag names structured (e.g.
PeerA_Status,PeerB_Counter) to make the project readable when a new peer is added. - Repeat for the second concentrator (if used). WinCC Flexible will report a connection-budget warning if the total exceeds 8.
10. Network Topology and IP Plan
Lay out the IP plan in writing before connecting cables. The 192.168.0.0/24 range below is an example; adapt to your site standard.
| Device | Role | IP | Subnet |
|---|---|---|---|
| PC / WinCC Runtime | Supervisor | 192.168.0.1 | /24 |
| LOGO! Concentrator #1 | Data concentrator | 192.168.0.10 | /24 |
| LOGO! Concentrator #2 (optional) | Data concentrator | 192.168.0.11 | /24 |
| LOGO! Peer A | Field PLC | 192.168.0.20 | /24 |
| LOGO! Peer B | Field PLC | 192.168.0.21 | /24 |
| LOGO! Peer C | Field PLC | 192.168.0.22 | /24 |
| LOGO! Peer D | Field PLC | 192.168.0.23 | /24 |
| LOGO! Peer E | Field PLC | 192.168.0.24 | /24 |
| LOGO! Peer F | Field PLC | 192.168.0.25 | /24 |
| LOGO! Peer G | Field PLC | 192.168.0.26 | /24 |
| LOGO! Peer H | Field PLC | 192.168.0.27 | /24 |
| LOGO! Peer I | Field PLC | 192.168.0.28 | /24 |
| LOGO! Peer J | Field PLC | 192.168.0.29 | /24 |
| Managed switch | Aggregation | 192.168.0.250 | /24 |
192.168.0.1 through 192.168.0.19 for the supervisor, the concentrators, and any future gateway. Field peers always start at .20. This makes the addressing pattern obvious to any engineer who later audits the network.11. Verification and Diagnostics
After the project is loaded, run the following checks before handing the system over to operations.
| Check | Tool / Method | Pass Criteria |
|---|---|---|
| PC → Concentrator reachability | ping 192.168.0.10 -t |
Sub-millisecond replies, zero loss |
| Concentrator → Peer reachability | LOGO!Soft Comfort Online → Test on each NI block | NI flags update on every cycle |
| WinCC connection status | WinCC Flexible Tools → Status of Connections | All configured connections show Connected (green) |
| Tag update latency | Toggle a digital output at a peer, observe corresponding tag in WinCC | Update visible within 2 × WinCC cycle (typically ≤ 1 s) |
| Connection count | WinCC Flexible project statistics | Active connections ≤ 8 |
| Alarms | Force a peer fault, verify WinCC alarm list | Alarm generated within 1 cycle, cleared when condition clears |
12. Troubleshooting Matrix
| Symptom | Likely Cause | Resolution |
|---|---|---|
| WinCC connection object is rejected at compile time | Total configured connections would exceed the runtime cap | Re-architect to concentrator or Modbus TCP pattern |
| Connection shows Disconnected after WinCC start | TSAP mismatch, IP unreachable, or LOGO! in STOP | Verify TSAP 03.00, run ping, switch LOGO! to RUN |
| Tags show "--- " or quality bad | Tag address outside partner process image | Re-map the area pointer; cross-check offset with the LOGO! variable table |
| Intermittent dropouts during scans | Switch buffer overflow or duplicate IP | Check switch port statistics; scan with arp -a on the PC for duplicate MACs |
| NI block in concentrator never updates | Peer S7 connection not enabled in LOGO!Soft Comfort or wrong TSAP | Open the connection properties on the peer; ensure server TSAP is 03.00
|
| WinCC cannot reach a remote subnet peer | Router/firewall blocks ISO-on-TCP (port 102) | Open port 102 between PC subnet and peer subnet on the firewall |
| Tags update slowly across many peers | All peers polled at the same WinCC cycle | Stagger polling groups in WinCC or move to concentrator pattern |
13. Migration Path: TIA Portal WinCC
If a migration to TIA Portal is on the roadmap, the connection budget changes. WinCC Runtime Advanced (TIA Portal) supports more S7 connections depending on the licence panel, and the connection editor exposes the budget explicitly. Migration of a concentrator project is largely a port of the WinCC Flexible area pointers into TIA Portal tag tables; the LOGO!Soft Comfort peer program is unchanged.
Practical steps for a staged migration:
- Document the existing area pointer map in a spreadsheet.
- Import the WinCC Flexible project into TIA Portal using the migration tool (TIA Portal V16+ supports WinCC Flexible 2008 SP5 import).
- Re-add any connections that the migration tool flags as needing reconfiguration.
- Validate tag-by-tag against the running system before decommissioning WinCC Flexible.
For further background on the LOGO! 8 system and S7 communication refer to the Siemens Industry Online Support portal, specifically the LOGO! 8 system manual and the LOGO!Soft Comfort online help. For WinCC Flexible configuration refer to the WinCC Flexible 2008 Communication manual set.
FAQ
Why does WinCC Flexible Runtime limit me to roughly 8 S7 connections?
WinCC Flexible 2008 PC Runtime was designed around an 8-connection budget in the base license to keep the configuration and runtime footprint predictable. Each configured connection consumes channel resources and a TSAP pair, so the editor enforces the cap at compile time. A second license option raises the cap, but most engineers hit it before reaching that tier.
Can I connect more than 8 LOGO! PLCs by using multiple subnets with the same PC?
Yes, but each partner still consumes one connection slot on the PC. Subnets only change the routing, not the connection budget. Use a concentrator LOGO! 8 or Modbus TCP to stay under the 8-slot ceiling.
Does LOGO! 8 support acting as an S7 client to read other LOGO! PLCs?
Yes. From LOGO! 8.0 onward, the LOGO! 8 base module can use the Network Input (NI) and Network Output (NQ) blocks in LOGO!Soft Comfort to act as an active S7 client. This is the basis of the data concentrator pattern.
What is the difference between WinCC Flexible and TIA Portal WinCC connection limits?
TIA Portal WinCC (Runtime Advanced or Professional) exposes a larger configurable connection budget that scales with the licence panel. Migration is recommended for any installation expected to exceed 8 direct partners, but the concentrator pattern remains valid for reducing tag traffic and isolating peer failures.
Can I use Modbus TCP to read all LOGO! PLCs through a single WinCC connection?
Yes, on LOGO! 8.1 and later. WinCC Flexible supports a Modbus TCP channel that can be configured to poll multiple partners within one connection object, leaving the S7 budget free for other devices. Tag latency increases linearly with the number of polled peers, so a concentrator is preferable when sub-second response is required.