Controlling 6RA70 Digital I/O via Profibus with S7-414-2DP
This reference explains how to expose and actuate the digital inputs and outputs of a Siemens SIMOREG 6RA70 series DC MASTER drive on a Profibus-DP network controlled by a SIMATIC S7-414-2DP CPU. It covers the connector/binector (K/U/B) routing required in the drive, the PPO/PZD word layout that carries the free digital I/O over the bus, the S7 hardware configuration, the STEP 7 program interface, and a complete commissioning and troubleshooting matrix. The information is written for engineers commissioning rolling-mill lines, stand-alone DC drives, and retrofit applications where the 6RA70 must be controlled bit-for-bit from a Profibus master.
1. System Overview
The 6RA70 is a fully-digital, three-phase (six-pulse or twelve-pulse) DC converter designed for armature and field control of DC motors up to 1200 A and beyond. Communication is handled by one or two Communication Unit boards (CUD1 left slot, CUD2 right slot). Each CUD exposes:
- Profibus-DP slave interface (baud rate 9.6 kbit/s to 12 Mbit/s, automatic detection)
- Up to 6 digital inputs on the CUD terminal strip (X171, X172)
- Up to 4 digital outputs on the CUD terminal strip (X173)
- Additional digital I/O available on the customer terminal strip (X177) and power-interface board
- One serial RS485 port (X200) for commissioning with DriveMonitor / STARTER
The S7-414-2DP is a SIMATIC S7-400 CPU with an integrated Profibus-DP master port (MPI/DP, selectable). It exchanges a parameter-process-data object (PPO) with the drive every Profibus cycle. The 5th PZD word (16 bits) is a "free" 16-bit channel; routing connectors and binectors in the drive is what turns that 16-bit channel into a digital input mirror and a digital output actuator.
2. Prerequisites
2.1 Hardware
- 1 × SIMOREG 6RA70 (any frame size, CUD1 populated, CUD2 optional for redundancy)
- 1 × SIMATIC S7-414-2DP (or any S7-400 with a Profibus-DP master port, e.g. S7-414-3PN/DP via CP443-5)
- Profibus cable (violet, type A, 2-wire, 120 Ω characteristic impedance, terminated on both ends)
- Two Profibus connectors with terminating resistors (last node = ON)
- Shielded I/O wiring 0.5 mm² for the digital signals on the 6RA70 terminals
2.2 Software
- STEP 7 V5.5 + SPx (or TIA Portal V15.1 and higher with HSP for SIMOREG)
- SIMOREG 6RA70 GSD file:
SIEM811F.GSD(for firmware < 3.x) orSIEM8117.GSD(for firmware 3.x and newer) - DriveMonitor or STARTER (Comissioning tool with SIMOREG device package)
- Manual set: SIMOREG DC MASTER 6RA70 Operating Instructions (E31925-K3080-U001 series)
2.3 Required drive firmware parameters
Verify the following parameters are accessible (write protection P053 = 0):
-
P051 = 40(parameter access level — service) -
P052 = 3(parameter set selection: enable CUD2 parameters when populated) -
P060 = 5(free PZD selection — see below) -
P918 = <DP node address>(Profibus station address, default 4)
3. Profibus PPO/PZD Layout
SIMOREG 6RA70 supports PPO types 1, 2, 3, 4, and 5. Only PPO type 4 (6 PZD each direction) and PPO type 5 (10 PZD each direction) provide the fifth PZD word that is used as the "free digital channel".
| Word (PZD index) | PLC → Drive (Setpoints) | Drive → PLC (Actual values) |
|---|---|---|
| 1 | STW1 (Control word 1) | ZSW1 (Status word 1) |
| 2 | Speed setpoint (NSOLL) | Speed actual (NIST) |
| 3 | Reserved / free | Reserved / free |
| 4 | Reserved / free | Reserved / free |
| 5 | Free digital outputs (DO control word) | Free digital inputs (DI status word) |
| 6 | Free (only PPO 4 and 5) | Free (only PPO 4 and 5) |
PPO 5 extends the free area with words 7–10. The fifth word is the one most often used because it does not conflict with the standard control word 1 / status word 1 handshake (on/off, fault reset, ramp enable, etc.) and is short enough to read as a single 16-bit pattern.
3.1 PPO type selection in the drive
Set the PPO type in the master HW Config and verify with parameter P060 (PZD configuration) and P927 (parameter write enable). The drive will accept whatever the master sends; mismatches are logged as fault F060.
4. Reading the Digital Inputs (Drive → PLC)
The internal status of the digital inputs is available at the binector K0020. To bring this status onto the bus, route the binector to a connector — the connector name format is U734.nn, where the index nn selects the position of the 16-bit word inside the PZD set. The 6RA70 uses U734 for the free PZD outputs. Each U734.nn corresponds to a 16-bit word:
| Connector | PZD word | Meaning |
|---|---|---|
| U734.01 | PZD 1 (free) | Word 1 not used (occupied by STW1) |
| U734.02 | PZD 2 (free) | Word 2 not used (occupied by NSOLL) |
| U734.03 | PZD 3 | Free, can be assigned |
| U734.04 | PZD 4 | Free, can be assigned |
| U734.05 | PZD 5 | Free PZD 5 — this is the DI status word |
| U734.06 | PZD 6 | Free PZD 6 |
4.1 K0020 (DI status) — bit map
K0020 is a 16-bit consolidated binector (an aggregation of digital input states). On the standard CUD1 terminal strip the mapping is:
| Bit | Source | Terminal | Default function |
|---|---|---|---|
| 0 | DI0 | X171.4 | On / Off 1 (de-facto assignment) |
| 1 | DI1 | X171.5 | Fault reset / acknowledgment |
| 2 | DI2 | X171.6 | Jog 1 |
| 3 | DI3 | X171.7 | Jog 2 |
| 4 | DI4 | X172.4 | Enable ramp-function generator |
| 5 | DI5 | X172.5 | Free / customer |
| 6 | DI6 | X172.6 | Free / customer |
| 7 | DI7 | X172.7 | Free / customer |
| 8–11 | DI8–DI11 | X177.x | Free, customer terminal strip |
| 12–15 | Reserved | — | Read as 0 |
The exact bit-to-terminal mapping is shown on function diagram Z110 in the SIMOREG 6RA70 manual. K0020 is also documented on page 652 of the parameter list.
4.2 Step-by-step: route K0020 to U734.05
- On the OP1S or DriveMonitor front panel, navigate to
P764(connector destination assignment — index 05). - Set
P764.05 = K0020. - Save with P.
- Cycle the 6RA70 control board to re-initialise the connector routing, or write
P052 = 0followed byP052 = 3to force a parameter-set reload. - On the S7 side, after the next Profibus cycle, the fifth PZD receive word in the drive's I/O image will contain the live status of the digital inputs.
5. Writing the Digital Outputs (PLC → Drive)
The free PZD word coming from the PLC is mapped to binectors B3500–B3515 (one per bit). To make a bit of that word appear on a physical digital output, route the corresponding binector into the parameter that owns that output. The 6RA70 exposes digital outputs through parameters P771–P774:
| Parameter | Function | Function diagram |
|---|---|---|
| P771 | Digital output 0 (DO0) source selection | G112 |
| P772 | Digital output 1 (DO1) source selection | G112 |
| P773 | Digital output 2 (DO2) source selection | G112 |
| P774 | Digital output 3 (DO3) source selection | G112 |
For each of the four binary outputs, P771–P774 accept a binector source (e.g. B3500, B3501, B3502 …). The default source is the standard status-word bit, so without re-routing the output is meaningless from a free-channel perspective.
5.1 Bit mapping (PLC → drive → output)
| PZD 5 bit | Binector | Target parameter | Physical output | Terminal |
|---|---|---|---|---|
| 0 | B3500 | P771 | DO0 | X173.1 / X173.2 |
| 1 | B3501 | P772 | DO1 | X173.3 / X173.4 |
| 2 | B3502 | P773 | DO2 | X173.5 / X173.6 |
| 3 | B3503 | P774 | DO3 | X173.7 / X173.8 |
| 4 | B3504 | — (free) | Not used (customer logic) | — |
| 5 | B3505 | — (free) | Not used | — |
| 6 | B3506 | — (free) | Not used | — |
| 7 | B3507 | — (free) | Not used | — |
| 8–15 | B3508–B3515 | — (free) | Reserved for software interlocks | — |
5.2 Step-by-step: route B3500–B3503 to P771–P774
- Navigate to
P771; assignP771 = B3500. - Navigate to
P772; assignP772 = B3501. - Navigate to
P773; assignP773 = B3502. - Navigate to
P774; assignP774 = B3503. - Save the parameters.
- Set
P052 = 0thenP052 = 3to commit the routing to non-volatile storage.
After this, setting bit 0 of the fifth PZD send word from the S7-414-2DP will turn on DO0 on the CUD1 terminal strip. Bits 1–3 control DO1–DO3, and bits 4–15 are available for software-side interlocks inside the drive (e.g. wired to additional free binectors for ramp-enable, brake release, fault acknowledge, or warning-lamp logic).
6. S7-414-2DP Hardware Configuration
- Open SIMATIC Manager and load the station with the S7-414-2DP.
- In HW Config, double-click the DP master port and open "Properties → Profibus". Set the address (default 2) and baud rate (1.5 Mbit/s is the practical maximum for a stable 6RA70 link, even though 12 Mbit/s is supported).
- Open the GSD file
SIEM811F.GSD(or the equivalent for your firmware) and drag the 6RA70 slave from the catalog into the Profibus subnet. - Set the slave Profibus address to match
P918on the drive (default 4). - Slot 1 of the slave: select PPO type 4 (or 5) with 6 PZD each direction.
- Map the I/O addresses. The fifth PZD word will typically land at PEW xxx (input from drive) and PAW xxx (output to drive) within the S7 input/output image of the slave.
6.1 Example address assignment (32-byte aligned)
| PZD | Receive (PIW) | Send (PQW) |
|---|---|---|
| 1 | PIW 256 | PQW 256 |
| 2 | PIW 258 | PQW 258 |
| 3 | PIW 260 | PQW 260 |
| 4 | PIW 262 | PQW 262 |
| 5 | PIW 264 | PQW 264 |
| 6 | PIW 266 | PQW 266 |
7. STEP 7 Program — Consistent Read/Write
For reliable, cycle-consistent data exchange with the 6RA70, always use SFC14 DPRD_DAT and SFC15 DPWR_DAT. Direct peripheral access (L PIW 264) returns only process-image data and is not consistent across the Profibus cycle; bit operations inside the S7 CPU can tear a 16-bit value.
7.1 Reading the DI status word (PIW 264)
// Call in OB1, FB or FC
CALL SFC 14 (
LADDR := W#16#0108, // logical base address = 264 decimal = 0x108
RET_VAL := MW 100, // return code (0 = OK; 80xx/82xx = error)
RECORD := P#M 110.0 BYTE 12 // destination: 12 bytes for 6 PZD words
);
// Bit-level access (mask, do not alias the word)
L W#16#0001; // DI0 mask
T MW 120; // mask for DI0 in MW 110 low word
L MW 110; // 5th PZD word lives in low word of M110..M121
L MW 120;
UW ; // AND
==I ; // test
= M 200.0; // boolean: DI0 active
7.2 Writing the DO control word (PQW 264)
// Build the 5th PZD control word
L MW 300; // free DO control word, set by HMI or logic
T MW 314; // copy to PZD5 send position
CALL SFC 15 (
LADDR := W#16#0108,
RECORD := P#M 310.0 BYTE 12, // 6 PZD = 12 bytes
RET_VAL := MW 322
);
The first 12 bytes of M310..M321 (six 16-bit words) hold PZD1..PZD6 in the same order: PQW 256..266. The fifth word is MW 318.
7.3 STL/cyclic style for OB1
// On every OB1 cycle (or in OB35, the cyclic interrupt OB)
CALL SFC 14
LADDR :=W#16#108 // PIW 264
RET_VAL:=MW 100
RECORD :=P#M 110.0 BYTE 12;
CALL SFC 15
LADDR :=W#16#108 // PQW 264
RECORD :=P#M 310.0 BYTE 12
RET_VAL:=MW 322;
8. CUD1 and CUD2 Considerations
The 6RA70 chassis has two CUD slots. Each CUD runs its own parameter set, and the relevant parameters (P764.x, P771–P774, K0020, B3500–B3515) exist separately on each board. If only CUD1 is populated, only the CUD1 parameters apply; the Profibus slave represented on the bus is CUD1. If CUD2 is fitted, both CUD1 and CUD2 must be configured.
8.1 CUD1 vs CUD2 routing
| Item | CUD1 | CUD2 | Notes |
|---|---|---|---|
| Profibus node (default) | 1 slave (address from P918) | Independent slave (own P918) | Two Profibus addresses on the same bus |
| DI status (K0020) | Read from CUD1 terminal strip | Read from CUD2 terminal strip | Each CUD has its own K0020 |
| DO control (B3500–B3515 → P771–P774) | Routed to CUD1 outputs | Routed to CUD2 outputs | Outputs are physically separate |
| Standard PPO type 4 | Yes | Yes | Both must be configured identically |
For redundant operation in a rolling-mill line, the S7-414-2DP will see two Profibus slaves (one per CUD) and must hold two parallel routing configurations. The application logic in the PLC should only treat the active CUD as authoritative; the standby CUD can be polled for diagnostics but its outputs are masked.
9. Function Diagram Quick Reference
| Sheet | Title | What it covers |
|---|---|---|
| Z110 | Binary inputs / binary outputs — terminal mapping | DI / DO pin-out, K0020, B3500–B3515 origins |
| G110 | Digital inputs — control | How DI bits are routed into internal control binectors |
| G111 | Digital inputs — setpoint | DI as setpoint switchover (e.g. fixed setpoint selection) |
| G112 | Digital outputs — signal assignment | P771–P774 destinations, DO terminal mapping |
These four sheets are mandatory reading before configuring anything; the manual numbering varies by edition, but the sheet numbers Z110, G110, G111, G112 are stable across the 6RA70 family.
10. Commissioning Procedure
- Connect the Profibus cable between the S7-414-2DP and the 6RA70; both ends terminated.
- Power up the drive, set
P051 = 40andP918 = 4(or as per your Profibus plan). - Configure the PPO type in HW Config; PPO 4 is the recommended default.
- Bring the CPU up in run. Watch the slave diagnostic LED on the 6RA70: green steady = Profibus up, flashing = data exchange but parameter mismatch, off = no bus.
- DriveMonitor: open the drive online and confirm that
r735.05(or the read-only back-mirror of U734.05) tracks the 5th PZD receive word from the PLC. - Set bit 0 of the S7 fifth PZD word to 1. Verify with a multimeter that DO0 (X173.1/X173.2) closes.
- Force a single DI high and verify the corresponding bit arrives in the S7 PIW. Toggle every DI to validate the K0020 routing.
- Toggle every DO bit from the PLC; verify the same bit pattern on the CUD terminal strip.
- Save parameters to non-volatile (
P052 = 0 → 3). - Run a full drive enable sequence (STW1 = 047Eh then 047Fh) to confirm standard control-word 1 handshake is not affected by the free PZD work.
11. Verification Checklist
| # | Check | Pass criterion | Method |
|---|---|---|---|
| 1 | Profibus link up | LED green steady on 6RA70 CBP2 | Visual |
| 2 | PPO type matches | Drive parameter r723 reports same PPO type as HW Config | DriveMonitor / OP1S |
| 3 | DI mirroring | K0020 bit n = DI n terminal state | Force terminal high, read bit in r735.05 or S7 PIW |
| 4 | DO actuation | Bit n in PQW 5th word = DO n closed | Toggle from S7, meter DO terminal |
| 5 | No fault F060/F061 | Fault buffer empty | r047 / r049 in DriveMonitor |
| 6 | Standard control word untouched | Drive on/off via STW1 still works | Send On/Off 1 in PZD 1, observe status |
| 7 | CUD1/CUD2 independence (if both fitted) | DO of CUD1 does not mirror DO of CUD2 | Toggle PQD 5 of each slave, meter both |
| 8 | Parameter persistence | Power-cycle, re-verify items 3 and 4 | Remove 24 V to electronics, restore, retest |
12. Troubleshooting Matrix
| Symptom | Likely cause | Diagnostic | Fix |
|---|---|---|---|
| DI bits always 0 in PLC, drive is alive | K0020 not routed to U734.05 | Read r735.05 in DriveMonitor; if always 0, routing is missing | Set P764.05 = K0020, save, reload parameters |
| DO bits set in PLC but output does not close | P771–P774 still default | Read P771–P774 on the drive; if not B3500–B3503, routing is missing | Re-assign per Section 5.2 |
| DI bit in PLC flickers with no field change | 24 V supply on DI terminal too low; or noise on long cable | Measure terminal voltage with respect to M; check shield | Use 24 V ±10 %; separate I/O and power cables; ground shield at one end only |
| Drive reports F060 (PZD config error) | Master and slave PPO type mismatch | Compare P060 with HW Config | Match both to PPO 4 with 6 PZD |
| Drive reports F061 (telegram failure) | Profibus cable broken, termination wrong, or node address collision | Check bus diagnostics in DriveMonitor; verify address in P918 | Re-terminate, set unique DP address, replace damaged cable |
| DO only works for one direction (set in PLC, not cleared) | Bit polarity in P771 inverted (e.g. P771 = B3500 with NEG flag set) | Inspect parameter value for negator | Reset P771 to B3500 with no inversion |
| CUD2 outputs do not respond to PLC | Routing done on CUD1 only | Compare P771 in CUD1 set vs CUD2 set | Repeat Section 5.2 on CUD2 (P052 selects active set) |
| Slow Profibus communication | Bus at 12 Mbit/s with long cable or many nodes | Check baud rate, cable length, repeaters | Drop to 1.5 Mbit/s; check segment length ≤ 100 m at 12 Mbit/s |
| No Profibus comms at all | CBP2 module not seated; P918 wrong; GSD file mismatch | LED off; check r723 | Power down, re-seat CBP2, re-install GSD, set P918 |
| S7 BF (bus fault) LED on | Slave address wrong or no diagnostics reply | Open online → Profibus diagnostics | Check DP address, cable, termination, GSD version |
13. Standards and Reference Material
- PROFIBUS & PROFINET International (PI) — protocol specification, PPO type definitions, GSD conventions.
- SIMOREG DC MASTER 6RA70 Operating Instructions (Siemens order number 6RX1700-0AD76) — function diagrams Z110, G110, G111, G112 and parameter list including K0020 (page 652).
- SIMOREG 6RA70 List Manual (parameter list) — full descriptions of P060, P764, P771–P774, P918, r723, r735.
- SIMATIC S7-400 CPU 414-2DP Manual — Profibus-DP master configuration, SFC14/SFC15 usage.
14. Edge Cases and Field Notes
14.1 Free PZD vs. control word collision
The Profibus standard for SIMOREG fixes the first two PZD words (STW1/ZSW1 + speed setpoint/actual). Even with PPO 4, the master cannot re-purpose PZD 1 or 2 for free I/O. Do not route K0020 to U734.01 or U734.02 — the master will overwrite it with STW1 every cycle.
14.2 Latency in DI mirroring
Mirror latency is one Profibus cycle plus the S7 OB1/OB35 cycle. At 1.5 Mbit/s and 5 ms S7 cycle, expect ≤ 20 ms total. For high-speed interlocks (e.g. emergency stop over the free PZD), use the dedicated safe inputs on the CUD or wire a hardwired safety chain — do not rely on Profibus round-trip.
14.3 Wire-break on a DO
The CUD outputs are 24 V / 0.5 A sourced from the CUD's internal 24 V. If a wire breaks, the binector still toggles, the parameter still updates, but no current flows. Always confirm with a meter; do not trust the PLC bit alone.
14.4 Adding a redundant Profibus path
Where the 6RA70 is on a Y-link or redundant ring, the 6RA70 Profibus interface does not support Profibus redundancy on its own. Use two CBP2 modules and an external Y-link coupler if full redundancy is required. The free PZD configuration must be repeated on the second CBP2.
14.5 TIA Portal versus STEP 7 V5.5
Configuration is identical at the slave level. In TIA Portal, install the GSD as a generic Profibus device; the slot/PPO mapping dialog is functionally the same. SFC14/SFC15 in TIA Portal is replaced by DPRD_DAT/DPWR_DAT with the same I/O area definition. Bit-level access is identical.
14.6 Brake-control note
For rolling-mill stand drives, DO0/DO1 are typically used for brake release (open/close). Wire the brake contactor through DO0 and use DO1 as a brake-closed feedback or as a secondary release path. Release DO0 only after the drive reports running (ZSW1 bit 2 = 1) and the speed actual exceeds the configured holding speed (default 3 % n_max). Map the enabling condition to bit 4 of the free PZD word (B3504) and then to a free binector, so the application code can interlock DO0 directly in the drive.
15. Roll-up Summary
To control the digital I/O of a 6RA70 from a S7-414-2DP Profibus master:
- Select PPO type 4 (or 5) in HW Config so that 5+ PZD are exchanged.
- For inputs, assign
P764.05 = K0020to send DI status to PZD 5 receive. - For outputs, assign
P771 = B3500,P772 = B3501,P773 = B3502,P774 = B3503to actuate DO0–DO3 from PZD 5 send. - Read with SFC14 and write with SFC15 to ensure consistent PZD exchange.
- Verify each bit with a meter on the CUD terminal strip before trusting the logic.
- If CUD2 is also fitted, repeat the entire routing on the CUD2 parameter set; the two CUDs are independent slaves on the bus.
Once the routing is in place and the parameters are saved, the fifth PZD word is a free 16-bit digital channel between the S7-400 and the drive — 8 usable input bits (DIs 0–7, with DI0–DI3 typically reserved for default control functions) and 4 usable output bits (DO0–DO3) in the standard configuration, with the remaining bits available for drive-internal binector logic.
Which PPO type should I select on the 6RA70 for free digital I/O?
Select PPO type 4 (6 PZD in each direction) or PPO type 5 (10 PZD in each direction). Both expose a 5th PZD word that is not used by the standard control word 1 / status word 1 handshake. PPO 1, 2, and 3 do not provide a 5th PZD, so they cannot transport free digital I/O.
What is K0020 on the 6RA70 and where is it documented?
K0020 is a consolidated 16-bit binector that mirrors the state of the 6RA70 digital inputs. The default mapping of K0020 to the CUD1 terminal strip is shown on function diagram Z110, and K0020 itself is described on page 652 of the SIMOREG 6RA70 parameter list.
How do I wire a free PZD bit from the S7-414-2DP to a physical digital output on the 6RA70?
Route the binector that corresponds to the PZD 5 bit (B3500 for bit 0, B3501 for bit 1, …) into the parameter that owns the output. For the four CUD outputs this means setting P771 = B3500, P772 = B3501, P773 = B3502, P774 = B3503. Function diagram G112 shows the destinations of P771–P774.
Do I have to use SFC14 and SFC15, or can I read the PZD directly?
Use SFC14 (DPRD_DAT) and SFC15 (DPWR_DAT). Direct peripheral access (L PIW 264 / T PQW 264) only returns the process image updated at the start of OB1, and a 16-bit PZD can be torn if read bit-by-bit inside a single cycle. SFC14/SFC15 guarantee a consistent read/write of the full PZD block.
My drive has CUD1 and CUD2 fitted. Do I configure the routing twice?
Yes. Each CUD holds its own parameter set (P764.x, P771–P774, K0020, B3500–B3515). The two CUDs appear as independent Profibus slaves on the bus, so the routing on CUD2 must be repeated with P052 set to the CUD2 parameter set before saving.