Problem Details: LOGO! 8 Web Server Not Reachable from Mobile
The LOGO! 8 (6ED1052-xxx08-0BA1/0BA2) logic module ships with an onboard Ethernet interface and an integrated Web Server (V1.0.0 and later) that exposes the on-line monitoring page at http://<logo-ip>. A recurring field issue is that the same Web Server opens correctly from a PC connected by cable, yet the page refuses to load when the operator opens the same URL from a smartphone or tablet on the same Wi-Fi. Symptoms include:
- PC (wired) loads
http://192.168.1.10immediately; phone on Wi-Fi returns "site cannot be reached" / "ERR_CONNECTION_TIMED_OUT". - Phone can browse the Internet fine, but cannot see the LOGO!.
- Phone pings the router but not the LOGO! IP.
- Browser displays a security block ("Your connection is not private", certificate warning, or "unsafe site blocked").
Root Cause Analysis: Why the Phone Fails While the PC Works
When the wired PC works and the wireless phone does not, the failure almost always sits in one of four layers between the phone and the LOGO!. The fix is to localize the failing layer first, then correct the configuration.
| Layer | Typical Defect | Symptom from Phone |
|---|---|---|
| L1 - Physical / Wi-Fi link | Phone is on guest SSID or 5 GHz band that the SOHO router isolates | Phone has Internet but no LAN access |
| L3 - IP / Subnet | LOGO! IP is outside the router's DHCP / subnet pool; phone gets a different /24 | Ping to LOGO! IP times out; ping to router works |
| L3 - DHCP collision | LOGO! uses a static IP that sits inside the router's DHCP range; another device may receive the same address | Intermittent access or wrong host responds |
| L4 - Filter | MAC filter / AP isolation / firewall blocks the LOGO! MAC or the client | Phone cannot reach any LAN device |
| L7 - Browser / TLS | Modern phone browser refuses plain HTTP or self-signed HTTPS | "Not secure" block, certificate error, page never paints |
The most frequent root cause reported in the field is the IP / subnet mismatch: the LOGO! is configured with a static address (e.g. 192.168.0.10) that is outside the DHCP / subnet scope of the consumer router (e.g. 192.168.1.x / 255.255.255.0). The PC happens to be on the correct subnet because its NIC was manually configured the same way, while the phone receives an automatic address in the router's range and can no longer route to the LOGO!.
Pre-Flight Checklist: Confirm the Web Server Is Actually Enabled
Before chasing the network, verify the Web Server is published in the project. Open the LOGO! project in LOGO! Soft Comfort V8.x and confirm the items in the table below. The official enabling procedure is described in Siemens Support entry 108994400.
| Setting Path in LOGO! Soft Comfort | Required Value |
|---|---|
| File > Properties > Web Server | Web Server enabled = Yes |
| Tools > Transfer > PC → LOGO! (Ethernet) | Project downloaded successfully |
| Online > User profile setting (in Webserver tab) | User profile = Administrator; Allow Webserver access = checked |
| LOGO! onboard display: ESC > Network | IP address matches the project; Subnet mask = 255.255.255.0 |
| LOGO! onboard display: ESC > Network > Webserver | Status = Running (LOGO! 8.2 and later) |
Step-by-Step Solution: Make the LOGO! Reachable from the Phone
-
Put the PC on Wi-Fi for a control test. Disconnect the Ethernet cable from the PC and let it join the same SSID the phone uses. Open
http://<logo-ip>. If the PC now fails too, the LOGO! is on a different subnet than the Wi-Fi; the problem is purely L3 and the rest of this procedure applies. If the PC still works on Wi-Fi but the phone does not, jump to step 6 (filter / browser). - Reconcile the IP plan. All three devices - LOGO!, PC, phone - must share Network ID, Subnet Mask, and Default Gateway. The simplest plan is to put the LOGO! on a static IP inside the router's DHCP range only if you exclude that address from DHCP, or to put the LOGO! on a static IP outside the DHCP range but still inside the same subnet. Typical SOHO plan:
| Device | IP Address | Subnet | Gateway | How Assigned |
|---|---|---|---|---|
| SOHO Router (e.g. Fritz!Box, TP-Link) | 192.168.1.1 | 255.255.255.0 | - | Factory default |
| LOGO! 8 (fixed) | 192.168.1.10 | 255.255.255.0 | 192.168.1.1 | Static (LOGO! display or Soft Comfort) |
| PC (wired) | 192.168.1.20 | 255.255.255.0 | 192.168.1.1 | Static or DHCP reservation |
| Phone | 192.168.1.101 (DHCP) | 255.255.255.0 | 192.168.1.1 | DHCP from router |
| DHCP pool (router) | 192.168.1.100 - 192.168.1.200 | 255.255.255.0 | 192.168.1.1 | Exclude 192.168.1.10 and 192.168.1.20 |
On the LOGO! onboard display, set the values via ESC > Network > IP Address / Subnet Mask / Gateway, or use LOGO! Soft Comfort: Tools > Transfer > Configure Network. The Siemens manual LOGO! 8 System Manual, 06/2021 edition, article 6ED1050-1AA08-0AA0, Section "Configuring the network settings" describes the on-device menu.
-
Exclude the LOGO! IP from the router's DHCP range. Log into the SOHO router (commonly
192.168.1.1) and either (a) narrow the DHCP pool so it does not include192.168.1.10, or (b) create a DHCP reservation / static lease for the LOGO!'s MAC address. This stops the router from handing the LOGO!'s address to a phone or laptop. -
Re-verify with the phone. Connect the phone to the same SSID, open a browser, navigate to
http://192.168.1.10. The LOGO! Web Server page should paint. If the address bar shows Not secure, that is normal - the Web Server is plain HTTP. - Disable router-side isolation. On the router, confirm the following flags are off for the SSID the phone uses: AP Isolation / Client Isolation, Wireless Isolation, Guest Network mode (guest networks always block LAN access). On enterprise-style APs (Ubiquiti, TP-Link Omada, MikroTik) check WLAN > Access.
- Disable MAC / device filters. Routers with MAC Filtering or Access Control enabled may block unknown devices. Either disable filtering or add the LOGO!'s MAC (printed on the device label and visible under ESC > Network > MAC) and the phone's MAC to the allow-list.
- Allow plain HTTP on the phone browser. Modern Chromium-based browsers (Chrome 90+, Samsung Internet 14+, Edge mobile) display a security warning for http:// sites but still render them. Firefox mobile renders http:// without complaint. If the phone uses a corporate MDM profile or a "Safe Browsing" filter app, the request may be silently dropped - whitelist the LOGO! IP in the MDM console.
-
Test the underlying path with a ping app. Install "Network Analyzer" or "PingTools" on the phone and confirm:
If the LOGO! ping fails but the router ping succeeds, the LOGO! is on a different /24, a different VLAN, or is being filtered. If both pings fail, the phone is on a guest network or a different SSID/VLAN.ping 192.168.1.10 // LOGO! - must succeed ping 192.168.1.1 // Router - must succeed ping 8.8.8.8 // Internet - must succeed (proves WAN path)
Verification: Proving the Phone Can Reach the LOGO!
| Test | Command / Action | Pass Criterion |
|---|---|---|
| L3 reachability |
ping 192.168.1.10 from phone |
0% loss, < 5 ms |
| TCP port open | Phone app: nc -vz 192.168.1.10 80 or browser at http://192.168.1.10
|
Connection succeeds / HTTP 200 |
| Web Server login | Enter the configured user/password at http://192.168.1.10
|
Variable view loads, I/O states update |
| LOGO! log | LOGO! display: ESC > Diagnostic > Webserver access log (LOGO! 8.2 / 8.3) | Phone IP appears with HTTP 200 entries |
Configuration Reference: LOGO! Web Server Parameters
| Parameter | Where to Set It | Typical Value | Notes |
|---|---|---|---|
| LOGO! IP address | LOGO! Soft Comfort > Tools > Transfer > Configure Network | 192.168.1.10 | Static, outside DHCP range |
| Subnet mask | Same dialog | 255.255.255.0 | Must match router / phone |
| Default gateway | Same dialog | 192.168.1.1 | Router LAN IP |
| Web Server port | LOGO! Soft Comfort > File > Properties > Web Server | 80 (default) | Plain HTTP only; no HTTPS option on LOGO! 8 |
| Webserver access | Online > User profile setting | Enabled | Per Siemens ID 108994400 |
| User name / password | Online > User profile setting | admin / <project pwd> | Case-sensitive; required for variable write |
| Web Server time-out | Online > User profile setting | 120 s (default) | Idle session auto-logout |
Edge Cases and Field-Proven Caveats
- 5 GHz vs 2.4 GHz. Older LOGO! 8 base modules do not transmit Wi-Fi (the module is wired Ethernet only). The phone must join the same SSID the router offers, but the LOGO! stays on the router's Ethernet port. If the router is dual-band, put the phone on the same band the PC uses for the diagnostic test.
- Two routers cascaded. A common home setup is ISP router → Wi-Fi router. The PC sits behind the Wi-Fi router, the phone sits on the Wi-Fi router, but the LOGO! is plugged into the ISP router. The PC works because the ISP router is also in the path; the phone cannot reach the LOGO! because the ISP router and the Wi-Fi router are on different subnets. Fix: put the LOGO! on the same router the phone talks to, or set the Wi-Fi router to Access Point mode.
- VPN on the phone. If the phone is connected to a corporate VPN (Cisco AnyConnect, GlobalProtect, WireGuard, etc.), all traffic may be forced through the tunnel and the LOGO! appears off-subnet. Disconnect the VPN for the test.
- IPv6-only or dual-stack routers. Some ISP routers (e.g. Fritz!Box 7590 with certain firmwares) advertise IPv6 and use a non-standard IPv4 gateway. Force the phone to obtain an IPv4 address in the Wi-Fi settings, or disable IPv6 on the router.
- Power-saving on the phone. Aggressive battery savers (Xiaomi MIUI, Huawei EMUI, Samsung Deep Sleep) may put the Wi-Fi radio to sleep. Pin the Web Server tab in the recent-apps list to keep it awake.
-
HTTPS expectation. The LOGO! 8 Web Server speaks HTTP only. There is no TLS option in the firmware. A browser that auto-upgrades to HTTPS will fail. Type the URL explicitly as
http://.
Troubleshooting Matrix
| Symptom from Phone | First Check | Second Check | Fix |
|---|---|---|---|
| "Site cannot be reached" | Phone IP and subnet | Ping LOGO! IP | Realign LOGO! IP with router's subnet |
| "This site is not secure" block | URL scheme | MDM / security app | Use http://, allow in browser |
| Login page loads but credentials fail | User profile | Online > User profile | Re-enter password, confirm caps lock |
| Login page blank / partial | Browser cache | JavaScript enabled? | Clear cache, enable JS, try Firefox |
| Intermittent drops every few minutes | Web Server time-out | DHCP lease | Re-authenticate; set phone to static IP |
| LOGO! reachable from PC but not phone | SSID / VLAN | AP isolation | Join same SSID as PC, disable isolation |
| LOGO! Web Server not in Online menu | Project settings | Transfer success | Enable Web Server in File > Properties, re-download project |
Related Siemens Documentation
- Siemens Support 108994400 - How do you enable and call the web server on LOGO! 8?
- LOGO! 8 System Manual (06/2021), article 6ED1050-1AA08-0AA0 - section "Web Server" and "Network settings"
- LOGO! Soft Comfort V8.3 Online Help - chapter "Configuring the Web Server"
FAQ
Why can my PC open the LOGO! 8 Web Server but my phone cannot?
Almost always an IP/subnet mismatch. The PC is on the same /24 as the LOGO! (often manually configured), while the phone receives a DHCP address from the router that is on a different subnet or VLAN. Set the LOGO! to a static IP inside the router's DHCP range (and exclude it from the pool) or to a static IP in the same /24 the phone receives.
How do I enable the LOGO! 8 Web Server in LOGO! Soft Comfort?
Open the project, then go to Online > User profile setting and on the Webserver access tab check Allow Webserver access. Also confirm File > Properties > Web Server has the Web Server enabled, then transfer the project to the LOGO!. The full procedure is in Siemens Support entry 108994400.
What port does the LOGO! 8 Web Server use and does it support HTTPS?
The default port is TCP 80 (HTTP). LOGO! 8 firmware does not support HTTPS or user certificates, so the URL must be http://<logo-ip>. Modern mobile browsers may display a "Not secure" warning - this is normal and the page still loads unless the phone has a corporate MDM policy that blocks plain HTTP.
Should the LOGO! IP be inside or outside the router's DHCP range?
Outside, but in the same subnet. Pick a static IP (e.g. 192.168.1.10), set the router's DHCP pool to start at 192.168.1.100, and configure the LOGO! with subnet 255.255.255.0 and gateway 192.168.1.1. This prevents the router from leasing the LOGO!'s address to a phone or laptop.
How do I test from the phone that the LOGO! is actually reachable?
Install a network utility app (Network Analyzer, PingTools) and run ping 192.168.1.10. A 0% loss reply with < 5 ms latency proves L3 reachability. If the ping fails, the LOGO! is on a different subnet or VLAN; if the ping succeeds but the browser fails, the issue is a MAC filter, AP isolation, or a browser security policy.