Connecting Siemens LOGO! 8.3 to Network and iPhone Access

David Krause13 min read
Industrial NetworkingSiemensTutorial / How-to
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Overview

The Siemens LOGO! 8.3 (6ED1052-xxx08-0BA1 / -0BA2 base modules) integrates an Ethernet interface, a built-in web server, and a customizable user page editor. This combination allows a LOGO! to be deployed as a small stand-alone controller for residential and light-commercial applications — including pool controllers, irrigation systems, lighting scenes, and HVAC sequencing — and to be monitored or operated from any browser-capable device on the same network, including an iPhone, iPad, Android phone, or PC.

This reference covers the most common deployment failure modes when transitioning from a direct point-to-point PC connection to a residential router, and from a desktop browser to a mobile browser. Symptoms typically include: the LOGO! web server responds on a direct PC link but not through a router; the iPhone Safari or Chrome browser times out or spins indefinitely; the user dashboard built in LOGO! Web Editor (LWE) is visible to the PC but not the phone; and HTTPS/SSL warnings cannot be cleared because the root certificate installation steps are unclear.

The complete solution requires correct static IP addressing, activation of access control in LOGO!Soft Comfort, configuration of the LWE project, router port and firewall handling, and (for HTTPS) installation of the LOGO! root certificate on iOS.

Prerequisites

  • LOGO! 8.3 base module with Ethernet port (LOGO! 8.3 12/24 RCE, RCEo, 230 RCE, or 24 CE; verify with the order number suffix 0BA2 for the current 8.3 generation).
  • LOGO!Soft Comfort (LSC) V8.3 or newer programming software — required for firmware 8.3 features and the matching LWE editor.
  • LOGO! Web Editor (LWE) V1.0.x or V1.1.x — installed as a component of LOGO!Soft Comfort V8.3.
  • Residential router with DHCP and at least one free 10/100 Mbps Ethernet port.
  • PC with an Ethernet or Wi-Fi adapter.
  • iPhone running iOS 12 or newer (for HTTPS root certificate installation) or iOS 11 and newer for HTTP-only access.
  • Ethernet patch cable (Cat 5e or better) for the LOGO! to router link.

Confirm the firmware version on the LOGO! base module before proceeding: navigate to LOGO! Display > Diagnostics > Version on the device, or in LSC under Online > LOGO! > Identification. The firmware string should begin with FS: 02.04.00 or later for the 0BA2 hardware.

LOGO! 8.3 Hardware Reference

Per the LOGO! V8.3 Stay-in-Touch Webinar, the 8.3 generation ships in four base module variants:

Variant Display Power Supply Digital I/O Ethernet
LOGO! 8.3 12/24 RCE Yes 12/24 V DC 8 DI / 4 DO (relay) 10/100 Mbps, RJ45
LOGO! 8.3 12/24 RCEo No 12/24 V DC 8 DI / 4 DO (relay) 10/100 Mbps, RJ45
LOGO! 8.3 230 RCE Yes 115/230 V AC 8 DI / 4 DO (relay) 10/100 Mbps, RJ45
LOGO! 8.3 24 CE Yes 24 V DC 8 DI / 4 DO (solid-state) 10/100 Mbps, RJ45

Maximum configuration per base module is determined by the expansion bus; refer to the LOGO! 8.3 system manual, chapter "Maximum Setup", for the exact slot count. The Ethernet port is the integration point for both LSC online access and the on-board web server. The web server itself listens on TCP/80 (HTTP) and TCP/443 (HTTPS) and uses a self-signed certificate generated at first power-up.

Network Architecture and IP Addressing

When the LOGO! is wired directly to a PC with a crossover or patch cable, the PC typically assigns itself a link-local address (169.254.x.x / 16) and reaches the LOGO!'s default address (169.254.0.0/16 — verify with Online > Go Online in LSC). As soon as the LOGO! is connected to a router, both devices move into the router's address space and addressing must be made explicit.

Recommended LAN settings for a residential deployment:

Device IP Address Subnet Mask Default Gateway DNS
Residential router (typical) 192.168.1.1 255.255.255.0 Provided by ISP
LOGO! 8.3 (static) 192.168.1.50 255.255.255.0 192.168.1.1 192.168.1.1
PC (DHCP or static) 192.168.1.10 255.255.255.0 192.168.1.1 192.168.1.1
iPhone (DHCP) 192.168.1.20 (assigned) 255.255.255.0 192.168.1.1 192.168.1.1

To set a static IP on the LOGO!:

  1. In LOGO!Soft Comfort, open the project and choose Tools > Transfer > Ethernet Connections.
  2. Click Add. Enter 192.168.1.50 as the LOGO! IP and 255.255.255.0 as the subnet mask.
  3. Mark the new entry as Active and click OK.
  4. Transfer the configuration to the LOGO! via PC ↔ LOGO! or by writing it directly on the LOGO! display under Network Settings > IP Address.
  5. Power-cycle the LOGO! to apply.

Reserve the LOGO! address in the router's DHCP table (or set a DHCP reservation by MAC) so a future DHCP lease cannot hand 192.168.1.50 to another device and create a duplicate-address conflict.

Subnet consistency is mandatory. If the PC is on 192.168.0.x and the LOGO! is on 192.168.1.x, neither will see the other even with correct gateway settings on a flat consumer router. Pick one subnet and stay on it.

Step-by-Step: From Direct PC Link to Router Deployment

1. Confirm the direct connection still works

With the LOGO! connected directly to the PC (no router), browse to http://169.254.x.x (use the address displayed on the LOGO! under Diagnostics > IP Address). The login page should appear. If it does not, the web server is disabled — re-enable it from the LOGO! display under Settings > Web Server Access > Enable or via LSC Tools > Transfer > Access Control.

2. Configure the static address on the LOGO!

Use the procedure above to assign 192.168.1.50 / 255.255.255.0 / 192.168.1.1. Verify the change by reading back the address on the LOGO! display: Menu > Diagnostics > IP Address. The display should show 192.168.1.50 after power-cycle.

3. Connect LOGO! to the router

  1. Disconnect the PC ↔ LOGO! patch cable.
  2. Connect the LOGO! Ethernet port to a numbered LAN port on the residential router using a standard patch cable.
  3. Confirm the link LED on the LOGO! Ethernet RJ45 is lit (green/yellow activity LED is normal; if dark, replace the cable or try another router port).

4. Test from the PC on the same router

From the PC (now connected via Wi-Fi or a different LAN port on the same router), open a browser and navigate to http://192.168.1.50. The LOGO! web server login page should appear within two seconds. If it does not, proceed to the troubleshooting matrix below before continuing.

5. Activate Access Control

Web server access from any browser — including the iPhone — is gated by Access Control. In LSC:

  1. Select Tools > Transfer > Access Control.
  2. Check Activate Access Control for Web Server.
  3. Define user accounts: at minimum one administrator account with username and password. Add an operator-level account if read-only monitoring is needed.
  4. Choose Access Type → HTTP/HTTPS and assign each user Read, Write, or Read/Write rights.
  5. Click Apply, then transfer the project back to the LOGO!.
Access Control is the gatekeeper. Until a user is created and the access list is applied, the web server responds with HTTP 401 Unauthorized to every browser request — including a correctly addressed one from the iPhone.

6. Test from the iPhone on Wi-Fi

Connect the iPhone to the same Wi-Fi SSID the PC is using. Open Safari and enter http://192.168.1.50. The LOGO! login page should render. If Safari reports "Safari cannot open the page because the server stopped responding", the most likely causes are:

  • iPhone is on a guest SSID or a different VLAN than the LOGO!.
  • The router's AP/client isolation is enabled (common on consumer mesh systems).
  • HTTPS-only mode is forced by an iOS profile (corporate MDM) — switch Safari to allow HTTP.
  • The LOGO! firewall (none on 8.3, but router firewall or iOS Private Relay feature may be interfering).

LOGO! Web Editor (LWE) Project Configuration

The LOGO! Web Editor is bundled with LOGO!Soft Comfort V8.3 and is used to build the responsive user page displayed in the browser. The LWE project is stored on the LOGO! in the user-program area and is downloaded as part of the program transfer.

  1. In LSC, open the program. From the menu, choose Tools > LOGO! Web Editor. LWE opens in a new window.
  2. Drop LOGO! variables onto the canvas: drag I1, I2, Q1, Q2, VW0, etc., from the variable tree on the right.
  3. Bind each element to a widget (button, indicator, numeric display, slider). Mark each widget as Read or Write in the properties pane.
  4. Click Project > Save and then Project > Transfer to LOGO!. The LWE pages are pushed to the LOGO! flash alongside the LSC program.
  5. Verify on the PC browser: http://192.168.1.50. After login, the dashboard should appear with live values.

Per the LOGO! Web Editor Tips & Tricks document, dashboards are rendered server-side by the LOGO! web server and served at /logo_dashboard.html by default. The LWE project XML is stored at /lwe.xml on the LOGO! and can be inspected for debugging.

HTTPS and iOS Root Certificate Installation

The LOGO! 8.3 web server generates a self-signed certificate at first boot. iOS Safari, like most modern browsers, warns on self-signed certificates by default. To clear the warning, install the LOGO! root certificate into the iOS trust store.

  1. From a PC on the same network, browse to https://192.168.1.50 and click through the browser warning to download the root certificate (PEM/CRT file).
  2. Email or AirDrop the certificate to the iPhone. Alternatively, host the certificate on a local web server and download it directly.
  3. On the iPhone, open the certificate. iOS prompts to install it under Settings > General > VPN & Device Management.
  4. After installation, navigate to Settings > General > About > Certificate Trust Settings and enable full trust for the LOGO! root certificate.
  5. Reopen Safari and navigate to https://192.168.1.50. The lock icon should now appear without warning.
iOS certificate handling has changed across versions. On iOS 12.1 and newer, the "Certificate Trust Settings" toggle is mandatory after installation; the certificate will appear installed but untrusted until this is enabled. On iOS 16 and newer, full Safari access also requires enabling Settings > Safari > Advanced > Show Full-URL for some HTTPS connection debugging.

For production deployments serving multiple devices, generate a permanent certificate using a CA, replace the LOGO! self-signed certificate, and distribute the CA chain to all clients. The LOGO! 8.3 firmware supports certificate replacement via SFTP push to the /cert folder.

Remote Access from Outside the Home Network

The initial failure mode is almost always LAN-side; once LAN access is confirmed, the same architecture extends to the WAN side. Two patterns are supported.

Pattern A — Port Forwarding

  1. On the residential router, create a port-forwarding rule: external TCP 8443 → internal 192.168.1.50:443.
  2. Reserve a DNS name with a dynamic DNS provider (Dyn, No-IP, DuckDNS) so the changing WAN IP is addressable.
  3. From the iPhone on cellular data, browse to https://yourname.duckdns.org:8443.
Security exposure. Port-forwarding opens the LOGO! web server to the entire internet. The web server does not support IP allow-listing or rate limiting. Use a strong 16-character administrator password and consider an HTTPS-only setup to prevent credential sniffing.

Pattern B — VPN

For higher-security deployments, enable the router's VPN server (WireGuard, OpenVPN, or IPsec) and have the iPhone connect via the iOS VPN client. All traffic then traverses the encrypted tunnel, and the LOGO! remains invisible to the public internet. The Siemens LOGO! does not itself act as a VPN endpoint; the router or a separate firewall appliance handles this role.

LOGO! Cloud Connectivity (AWS)

LOGO! 8.3 supports the LOGO! Cloud broker and AWS IoT integration via the LOGO!Soft Comfort cloud connector. Pairing requires:

  1. Create an AWS IoT Thing and download the certificates.
  2. In LSC, open Tools > LOGO! Cloud and enter the AWS endpoint URL, Thing name, and certificates.
  3. Transfer the configuration. The LOGO! publishes its variables to the AWS MQTT broker at the configured cadence.

Many AWS console screens have changed since the original LOGO! 8.3 documentation shipped; the modern path is AWS IoT Core > Manage > Things > Connect device → MQTT. If the AWS UI does not match the LOGO! manual, regenerate the certificates and use the newer MQTT over WebSockets configuration option in the LOGO! Cloud tool.

Troubleshooting Matrix

Symptom Probable Cause Remedy
PC cannot reach LOGO! via router; direct PC link works LOGO! still has link-local 169.254.x.x; no static address Assign 192.168.1.50 static, transfer, power-cycle
PC reaches LOGO!; iPhone times out iPhone on guest SSID or AP isolation enabled Connect iPhone to same SSID as PC; disable AP isolation in router
Browser returns 401 Unauthorized Access Control active but no user assigned Create admin user in Tools > Transfer > Access Control; click Apply
HTTPS warning cannot be bypassed on iPhone Certificate installed but not trusted Enable in Settings > General > About > Certificate Trust Settings
LWE page loads on PC, blank on iPhone LWE project transferred to wrong LOGO! slot, or widgets bound to non-existent variables Re-transfer LWE project; verify variable names match the LSC tag table
Safari spins indefinitely; Chrome times out DNS resolution fallback to external server, or iOS Private Relay interference Use raw IP 192.168.1.50 instead of hostname; disable Private Relay for the LAN
External WAN access fails despite LAN success Router firewall or CGNAT blocking inbound Confirm public IP via curl ifconfig.me on the PC; check ISP for CGNAT; enable port-forwarding
AWS IoT pairing fails AWS console version mismatch with LOGO! documentation Use MQTT over WebSockets in Tools > LOGO! Cloud; regenerate Thing certificates

Verification Checklist

  1. From the PC on the same router: ping 192.168.1.50 returns < 5 ms.
  2. PC browser: http://192.168.1.50 shows the LOGO! login page within 2 seconds.
  3. After login with admin credentials, the LWE dashboard renders with live values updating at the configured refresh interval (typically 1 s).
  4. iPhone on same Wi-Fi: Safari to http://192.168.1.50 returns the login page.
  5. iPhone login: dashboard renders identically to the PC; write operations on bound widgets (button toggles Q1, for example) take effect within 1 s and are visible on the LOGO! display.
  6. For HTTPS: Safari to https://192.168.1.50 shows a closed padlock with no warning.
  7. For external access: from cellular, the dynamic DNS URL with the configured external port returns the same login page.

Engineering Notes

  • The LOGO! web server is single-threaded; concurrent sessions from multiple browsers will queue. For deployments with more than three concurrent dashboards, consider moving visualization to a higher-tier Siemens controller (S7-1200 Web API or S7-1500 with custom web pages) or a dedicated HMI panel.
  • The LOGO! 8.3 web server refresh interval is configurable in LWE under Project > Properties > Refresh Interval. Setting it below 500 ms will noticeably load the LOGO! CPU and may interfere with program scan time.
  • For pool-controller applications, wire the LOGO! inputs through an interposing relay or 24 V DC isolator. The LOGO! 8.3 12/24 RCE inputs are type 1 (IEC 61131-2) and sink 5 mA at 24 V; confirm sensor compatibility before commissioning.
  • The LOGO! V8.3 Stay-in-Touch Webinar includes additional configuration walkthroughs and live demos of LWE features not covered in the printed system manual.

Why does my LOGO! 8.3 respond on a direct PC link but not through my router?

The LOGO! defaults to a 169.254.x.x link-local address when no router is present. Once connected to a router, it must be reconfigured with a static address in the router's subnet (e.g., 192.168.1.50 / 255.255.255.0 / gateway 192.168.1.1) via LOGO!Soft Comfort under Tools > Transfer > Ethernet Connections, then power-cycled.

How do I enable HTTP or HTTPS access on the LOGO! web server?

Open LOGO!Soft Comfort, go to Tools > Transfer > Access Control, check "Activate Access Control for Web Server", create at least one user with Read or Read/Write rights, click Apply, and transfer the project. Without an active user, every browser request returns HTTP 401.

How do I install the LOGO! root certificate on an iPhone?

Download the certificate from https://<LOGO_IP> on a PC, transfer it to the iPhone via AirDrop or email, install it under Settings > General > VPN & Device Management, then enable full trust under Settings > General > About > Certificate Trust Settings. iOS will continue to warn until the trust toggle is on.

Can I reach the LOGO! web server from outside my home network?

Yes. Either configure port-forwarding on the router (external TCP 8443 to internal 192.168.1.50:443) with a dynamic DNS hostname, or enable a VPN server on the router and connect the iPhone via the iOS VPN client. The VPN path is recommended for security because the LOGO! itself has no IP allow-listing.

My LWE dashboard works on PC but the iPhone shows a blank page — what's wrong?

Verify the LWE project was transferred to the same LOGO! as the LSC program (Tools > LOGO! Web Editor > Transfer to LOGO!), and confirm every widget is bound to a variable that exists in the LOGO! tag table. Variable name mismatches between LSC and LWE cause widgets to render empty on all clients.

Back to blog