LOGO! 8 Web Server Mobile Access: Troubleshooting IP and DHCP

David Krause11 min read
HMI / SCADASiemensTroubleshooting
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Problem Details: LOGO! 8 Web Server Not Reachable from Mobile

The LOGO! 8 (6ED1052-xxx08-0BA1/0BA2) logic module ships with an onboard Ethernet interface and an integrated Web Server (V1.0.0 and later) that exposes the on-line monitoring page at http://<logo-ip>. A recurring field issue is that the same Web Server opens correctly from a PC connected by cable, yet the page refuses to load when the operator opens the same URL from a smartphone or tablet on the same Wi-Fi. Symptoms include:

  • PC (wired) loads http://192.168.1.10 immediately; phone on Wi-Fi returns "site cannot be reached" / "ERR_CONNECTION_TIMED_OUT".
  • Phone can browse the Internet fine, but cannot see the LOGO!.
  • Phone pings the router but not the LOGO! IP.
  • Browser displays a security block ("Your connection is not private", certificate warning, or "unsafe site blocked").
Affected firmware families: LOGO! 8.1 (6ED1052-1MD08-0BA1) and LOGO! 8.2 (6ED1052-2MD08-0BA1) and the LOGO! 8.3 (6ED1052-3MD08-0BA1) BM with Ethernet. The Web Server is enabled per project in LOGO! Soft Comfort V8.x and is gated by the Webserver access flag in Online > User profile setting as documented in the Siemens support entry "How do you enable and call the web server on LOGO! 8?".

Root Cause Analysis: Why the Phone Fails While the PC Works

When the wired PC works and the wireless phone does not, the failure almost always sits in one of four layers between the phone and the LOGO!. The fix is to localize the failing layer first, then correct the configuration.

Layer Typical Defect Symptom from Phone
L1 - Physical / Wi-Fi link Phone is on guest SSID or 5 GHz band that the SOHO router isolates Phone has Internet but no LAN access
L3 - IP / Subnet LOGO! IP is outside the router's DHCP / subnet pool; phone gets a different /24 Ping to LOGO! IP times out; ping to router works
L3 - DHCP collision LOGO! uses a static IP that sits inside the router's DHCP range; another device may receive the same address Intermittent access or wrong host responds
L4 - Filter MAC filter / AP isolation / firewall blocks the LOGO! MAC or the client Phone cannot reach any LAN device
L7 - Browser / TLS Modern phone browser refuses plain HTTP or self-signed HTTPS "Not secure" block, certificate error, page never paints

The most frequent root cause reported in the field is the IP / subnet mismatch: the LOGO! is configured with a static address (e.g. 192.168.0.10) that is outside the DHCP / subnet scope of the consumer router (e.g. 192.168.1.x / 255.255.255.0). The PC happens to be on the correct subnet because its NIC was manually configured the same way, while the phone receives an automatic address in the router's range and can no longer route to the LOGO!.

Pre-Flight Checklist: Confirm the Web Server Is Actually Enabled

Before chasing the network, verify the Web Server is published in the project. Open the LOGO! project in LOGO! Soft Comfort V8.x and confirm the items in the table below. The official enabling procedure is described in Siemens Support entry 108994400.

Setting Path in LOGO! Soft Comfort Required Value
File > Properties > Web Server Web Server enabled = Yes
Tools > Transfer > PC → LOGO! (Ethernet) Project downloaded successfully
Online > User profile setting (in Webserver tab) User profile = Administrator; Allow Webserver access = checked
LOGO! onboard display: ESC > Network IP address matches the project; Subnet mask = 255.255.255.0
LOGO! onboard display: ESC > Network > Webserver Status = Running (LOGO! 8.2 and later)
Without Allow Webserver access in the user profile the Web Server is disabled at runtime even if the project contains a Web Server configuration. The radio button must be set under Online > User profile setting > Webserver access as documented in the Siemens support article 108994400.

Step-by-Step Solution: Make the LOGO! Reachable from the Phone

  1. Put the PC on Wi-Fi for a control test. Disconnect the Ethernet cable from the PC and let it join the same SSID the phone uses. Open http://<logo-ip>. If the PC now fails too, the LOGO! is on a different subnet than the Wi-Fi; the problem is purely L3 and the rest of this procedure applies. If the PC still works on Wi-Fi but the phone does not, jump to step 6 (filter / browser).
  2. Reconcile the IP plan. All three devices - LOGO!, PC, phone - must share Network ID, Subnet Mask, and Default Gateway. The simplest plan is to put the LOGO! on a static IP inside the router's DHCP range only if you exclude that address from DHCP, or to put the LOGO! on a static IP outside the DHCP range but still inside the same subnet. Typical SOHO plan:
Device IP Address Subnet Gateway How Assigned
SOHO Router (e.g. Fritz!Box, TP-Link) 192.168.1.1 255.255.255.0 - Factory default
LOGO! 8 (fixed) 192.168.1.10 255.255.255.0 192.168.1.1 Static (LOGO! display or Soft Comfort)
PC (wired) 192.168.1.20 255.255.255.0 192.168.1.1 Static or DHCP reservation
Phone 192.168.1.101 (DHCP) 255.255.255.0 192.168.1.1 DHCP from router
DHCP pool (router) 192.168.1.100 - 192.168.1.200 255.255.255.0 192.168.1.1 Exclude 192.168.1.10 and 192.168.1.20

On the LOGO! onboard display, set the values via ESC > Network > IP Address / Subnet Mask / Gateway, or use LOGO! Soft Comfort: Tools > Transfer > Configure Network. The Siemens manual LOGO! 8 System Manual, 06/2021 edition, article 6ED1050-1AA08-0AA0, Section "Configuring the network settings" describes the on-device menu.

  1. Exclude the LOGO! IP from the router's DHCP range. Log into the SOHO router (commonly 192.168.1.1) and either (a) narrow the DHCP pool so it does not include 192.168.1.10, or (b) create a DHCP reservation / static lease for the LOGO!'s MAC address. This stops the router from handing the LOGO!'s address to a phone or laptop.
  2. Re-verify with the phone. Connect the phone to the same SSID, open a browser, navigate to http://192.168.1.10. The LOGO! Web Server page should paint. If the address bar shows Not secure, that is normal - the Web Server is plain HTTP.
  3. Disable router-side isolation. On the router, confirm the following flags are off for the SSID the phone uses: AP Isolation / Client Isolation, Wireless Isolation, Guest Network mode (guest networks always block LAN access). On enterprise-style APs (Ubiquiti, TP-Link Omada, MikroTik) check WLAN > Access.
  4. Disable MAC / device filters. Routers with MAC Filtering or Access Control enabled may block unknown devices. Either disable filtering or add the LOGO!'s MAC (printed on the device label and visible under ESC > Network > MAC) and the phone's MAC to the allow-list.
  5. Allow plain HTTP on the phone browser. Modern Chromium-based browsers (Chrome 90+, Samsung Internet 14+, Edge mobile) display a security warning for http:// sites but still render them. Firefox mobile renders http:// without complaint. If the phone uses a corporate MDM profile or a "Safe Browsing" filter app, the request may be silently dropped - whitelist the LOGO! IP in the MDM console.
  6. Test the underlying path with a ping app. Install "Network Analyzer" or "PingTools" on the phone and confirm:
    ping 192.168.1.10       // LOGO! - must succeed
    ping 192.168.1.1        // Router  - must succeed
    ping 8.8.8.8            // Internet - must succeed (proves WAN path)
    
    If the LOGO! ping fails but the router ping succeeds, the LOGO! is on a different /24, a different VLAN, or is being filtered. If both pings fail, the phone is on a guest network or a different SSID/VLAN.

Verification: Proving the Phone Can Reach the LOGO!

Test Command / Action Pass Criterion
L3 reachability ping 192.168.1.10 from phone 0% loss, < 5 ms
TCP port open Phone app: nc -vz 192.168.1.10 80 or browser at http://192.168.1.10 Connection succeeds / HTTP 200
Web Server login Enter the configured user/password at http://192.168.1.10 Variable view loads, I/O states update
LOGO! log LOGO! display: ESC > Diagnostic > Webserver access log (LOGO! 8.2 / 8.3) Phone IP appears with HTTP 200 entries

Configuration Reference: LOGO! Web Server Parameters

Parameter Where to Set It Typical Value Notes
LOGO! IP address LOGO! Soft Comfort > Tools > Transfer > Configure Network 192.168.1.10 Static, outside DHCP range
Subnet mask Same dialog 255.255.255.0 Must match router / phone
Default gateway Same dialog 192.168.1.1 Router LAN IP
Web Server port LOGO! Soft Comfort > File > Properties > Web Server 80 (default) Plain HTTP only; no HTTPS option on LOGO! 8
Webserver access Online > User profile setting Enabled Per Siemens ID 108994400
User name / password Online > User profile setting admin / <project pwd> Case-sensitive; required for variable write
Web Server time-out Online > User profile setting 120 s (default) Idle session auto-logout

Edge Cases and Field-Proven Caveats

  • 5 GHz vs 2.4 GHz. Older LOGO! 8 base modules do not transmit Wi-Fi (the module is wired Ethernet only). The phone must join the same SSID the router offers, but the LOGO! stays on the router's Ethernet port. If the router is dual-band, put the phone on the same band the PC uses for the diagnostic test.
  • Two routers cascaded. A common home setup is ISP router → Wi-Fi router. The PC sits behind the Wi-Fi router, the phone sits on the Wi-Fi router, but the LOGO! is plugged into the ISP router. The PC works because the ISP router is also in the path; the phone cannot reach the LOGO! because the ISP router and the Wi-Fi router are on different subnets. Fix: put the LOGO! on the same router the phone talks to, or set the Wi-Fi router to Access Point mode.
  • VPN on the phone. If the phone is connected to a corporate VPN (Cisco AnyConnect, GlobalProtect, WireGuard, etc.), all traffic may be forced through the tunnel and the LOGO! appears off-subnet. Disconnect the VPN for the test.
  • IPv6-only or dual-stack routers. Some ISP routers (e.g. Fritz!Box 7590 with certain firmwares) advertise IPv6 and use a non-standard IPv4 gateway. Force the phone to obtain an IPv4 address in the Wi-Fi settings, or disable IPv6 on the router.
  • Power-saving on the phone. Aggressive battery savers (Xiaomi MIUI, Huawei EMUI, Samsung Deep Sleep) may put the Wi-Fi radio to sleep. Pin the Web Server tab in the recent-apps list to keep it awake.
  • HTTPS expectation. The LOGO! 8 Web Server speaks HTTP only. There is no TLS option in the firmware. A browser that auto-upgrades to HTTPS will fail. Type the URL explicitly as http://.

Troubleshooting Matrix

Symptom from Phone First Check Second Check Fix
"Site cannot be reached" Phone IP and subnet Ping LOGO! IP Realign LOGO! IP with router's subnet
"This site is not secure" block URL scheme MDM / security app Use http://, allow in browser
Login page loads but credentials fail User profile Online > User profile Re-enter password, confirm caps lock
Login page blank / partial Browser cache JavaScript enabled? Clear cache, enable JS, try Firefox
Intermittent drops every few minutes Web Server time-out DHCP lease Re-authenticate; set phone to static IP
LOGO! reachable from PC but not phone SSID / VLAN AP isolation Join same SSID as PC, disable isolation
LOGO! Web Server not in Online menu Project settings Transfer success Enable Web Server in File > Properties, re-download project

Related Siemens Documentation

FAQ

Why can my PC open the LOGO! 8 Web Server but my phone cannot?

Almost always an IP/subnet mismatch. The PC is on the same /24 as the LOGO! (often manually configured), while the phone receives a DHCP address from the router that is on a different subnet or VLAN. Set the LOGO! to a static IP inside the router's DHCP range (and exclude it from the pool) or to a static IP in the same /24 the phone receives.

How do I enable the LOGO! 8 Web Server in LOGO! Soft Comfort?

Open the project, then go to Online > User profile setting and on the Webserver access tab check Allow Webserver access. Also confirm File > Properties > Web Server has the Web Server enabled, then transfer the project to the LOGO!. The full procedure is in Siemens Support entry 108994400.

What port does the LOGO! 8 Web Server use and does it support HTTPS?

The default port is TCP 80 (HTTP). LOGO! 8 firmware does not support HTTPS or user certificates, so the URL must be http://<logo-ip>. Modern mobile browsers may display a "Not secure" warning - this is normal and the page still loads unless the phone has a corporate MDM policy that blocks plain HTTP.

Should the LOGO! IP be inside or outside the router's DHCP range?

Outside, but in the same subnet. Pick a static IP (e.g. 192.168.1.10), set the router's DHCP pool to start at 192.168.1.100, and configure the LOGO! with subnet 255.255.255.0 and gateway 192.168.1.1. This prevents the router from leasing the LOGO!'s address to a phone or laptop.

How do I test from the phone that the LOGO! is actually reachable?

Install a network utility app (Network Analyzer, PingTools) and run ping 192.168.1.10. A 0% loss reply with < 5 ms latency proves L3 reachability. If the ping fails, the LOGO! is on a different subnet or VLAN; if the ping succeeds but the browser fails, the issue is a MAC filter, AP isolation, or a browser security policy.

Back to blog