Migrating Siemens S5 CP1430 Sinec H1 to S7-400 CP443-1: Step-by-Step
This technical reference documents the field-proven procedure for replacing a Siemens S5-135 CP 1430 TF module and its Sinec H1 (Industrial Ethernet) infrastructure with an S7-400 CPU and a CP 443-1 communications processor. The guide covers physical layer conversion (thick coax / AUI to twisted pair), ISO transport connection re-creation in NetPro, FETCH/WRITE mode mapping, and WinCC v7.0 tag migration from the S5 Ethernet Layer (S5-L4) driver to the S7-TCPIP suite.
1. Migration Scope and Topology Assumptions
The reference migration replaces the following S5-side hardware:
- S5-135U / S5-155U CPU with a CP 1430 TF communications module (Siemens article numbers 6GK1143-0BA01 / 6GK1143-0BA02) configured for Sinec H1 (Industrial Ethernet IEEE 802.3, 10 Mbit/s).
- A 10BASE5 (yellow cable) or 10BASE2 (thin coax / "brown cable") Sinec H1 backbone terminated with repeaters and transceiver drops.
- A PC-based WinCC v7.0 station using a CP 1613 (6GK1161-3AA01) PCIe/ISA card with the WinCC S5 Ethernet Layer driver ("S5-L4").
- Multiple peer S5-135/155 stations using the same Sinec H1 bus for cross-CPU data exchange.
The replacement hardware is an S7-400 station (CPU 414/416/417) with a CP 443-1 (6GK7443-1EX11-0XE0, -1GX11-0XE0, or the 4-port variant 6GK7443-1UX11-0XE0). All migration decisions described below assume the existing Sinec H1 bus is being preserved during cut-over to avoid interruption of the peer S5 CPUs. Refer to the STEP 7 From S5 to S7 Conversion Manual for the broader S5 program conversion workflow that runs in parallel with this communications migration.
2. Sinec H1 vs Industrial Ethernet: Physical Layer Constraints
Sinec H1 is the historical Siemens name for IEEE 802.3 10 Mbit/s Industrial Ethernet using ISO transport services (RFC 1006 on top of TCP, plus the connection-oriented ISO-on-TCP variant). The physical media in the legacy plant is typically one of the following:
| Physical Media | Connector | Impedance / Drop Type | Maximum Segment |
|---|---|---|---|
| 10BASE5 ("yellow" / "vampire tap") | AUI transceiver + drop cable | 50 Ω coax, N-series transceiver | 500 m |
| 10BASE2 ("thin" / "brown" / "Cheapernet") | BNC T-connector | 50 Ω coax, BNC | 185 m |
| 10BASE-T (twisted pair) | RJ45 | UTP/STP Cat 3+ | 100 m |
The CP 1430 TF exposes an AUI (Attachment Unit Interface, 15-pin D-Sub) port for the host CPU's external MAU (transceiver). The CP 443-1 exposes an RJ45 port. When the legacy Sinec H1 backbone uses 10BASE5 (yellow) or 10BASE2 (brown) cabling, the engineer must either replace the segment with twisted-pair Industrial Ethernet or insert a media converter. Replacing the backbone is faster and more reliable; preserving the legacy coax is acceptable when trenching or cable tray access is restricted.
3. Media Conversion Options: AUI-to-Twisted-Pair Bridges
Two viable approaches bridge an AUI DTE port onto a 100 Mbit/s twisted-pair switch:
3.1 Industrial Media Converter (Preferred for Field Use)
A DIN-rail mounted media converter with an AUI input and one or more RJ45 outputs lets the CP 1430 slot continue to communicate on the new bus without rewiring the segment. Examples include third-party AUI-to-UTP converters (Black Box LE180A-class devices) installed in the cabinet alongside the existing CP 1430. This option is recommended when the existing Sinec H1 segment must remain operational for peer S5 stations that are not being replaced at the same time.
3.2 Replace the Segment with a Scalance X Managed Switch
For a permanent migration, replace the legacy 10BASE5/10BASE2 backbone with a Scalance X-series Industrial Ethernet switch (e.g., Scalance X101 / XC100 / XC200) and run twisted-pair drops to each station. The repeaters previously used for Sinec H1 are decommissioned. The Scalance X101 supports 10/100 Mbit/s auto-negotiation and auto-crossover (MDI/MDIX), which simplifies drop cable wiring. The resulting bus operates at 100 Mbit/s, but the S5 peer stations continue to communicate using ISO transport at the protocol layer, which is fully compatible.
4. Selecting the CP 443-1 Variant
| CP 443-1 Article Number | Ports | Connection Count | Firmware (typical) | Notes |
|---|---|---|---|---|
| 6GK7443-1EX11-0XE0 | 1 × RJ45 (10/100) | Up to 32 | V2.x / V3.x | Baseline ISO / TCP / UDP support |
| 6GK7443-1GX11-0XE0 | 1 × RJ45 (10/100) | Up to 64 | V3.x / V4.x | Added IT functions, Web diagnostics |
| 6GK7443-1UX11-0XE0 | 4 × RJ45 + 1 × combo | Up to 128 | V3.x / V4.x | Integrated switch, ERTEC |
For a typical Sinec H1 replacement with 4-12 peer connections, the EX11 or GX11 variant is sufficient. For larger plants with many cross-CPU data exchanges, the UX11 4-port variant is preferred because it eliminates the need for an external switch at the rack and supports connection counts well above the S5 peer list.
Verify the installed STEP 7 version supports the CP firmware. SIMATIC Manager V5.5 SPx or TIA Portal V13+ is required for the V3/V4 firmware variants. Mismatched CP firmware and STEP 7 component version is a common cause of "Connection not established" errors after migration.
5. Documenting Existing CP 1430 Connections with NCM COM 1430
Before removing any S5 hardware, extract every configured connection from each CP 1430 TF. The dedicated tool for this on the S5 side is NCM COM 1430 (Siemens part of the COM 1430 TF software package). Use it to read each CP's connection database and export:
- Ethernet MAC address of the local CP 1430.
- Connection type for each entry (SEND/RECEIVE, FETCH active/passive, WRITE active/passive).
- Partner MAC address and partner TSAP (Transport Service Access Point) for each remote station.
- Local TSAP (typically encoded with the rack/slot and connection number in S5 format).
- Data block references and length for SEND/RECEIVE.
- Cycle / timeout parameters.
Save the export as the master record. The same TSAPs and MAC addresses are re-entered into NetPro on the S7-400 side to keep the partner S5 stations from needing any modification at all.
6. Connection Type Mapping: S5 Active/Passive vs S7 Equivalents
The CP 1430 supports four connection roles. The CP 443-1 supports a superset, but the role pairing must be preserved or the partner CPU will reject the connection. The mapping is:
| CP 1430 Role on S5-135 (legacy) | Partner Role on S5-135 (legacy) | S7-400 CP 443-1 Role (new) | Partner Role Remains |
|---|---|---|---|
| SEND/RECEIVE (both sides) | SEND/RECEIVE | SEND/RECEIVE on ISO transport | Unchanged on remaining S5 |
| FETCH active | FETCH passive | FETCH passive (not available: active) | FETCH active on remaining S5 |
| WRITE active | WRITE passive | WRITE passive (not available: active) | WRITE active on remaining S5 |
| FETCH passive | FETCH active | FETCH active (available) | FETCH passive on remaining S5 |
| WRITE passive | WRITE active | WRITE active (available) | WRITE passive on remaining S5 |
7. TSAP and MAC Address Handling
TSAPs on the S5 side are typically 2-byte hex values such as 01.01 (rack 0, slot 1 in COM 1430 notation), 02.05, or symbolic values such as S5-CPU1. The CP 443-1 accepts TSAPs in either numeric or ASCII form via NetPro. To minimise disruption on the partner S5 stations, keep the numeric TSAP strings identical. Example mapping:
Legacy CP 1430 entry:
Local TSAP : 01.01
Partner MAC : 08.00.06.01.02.03
Partner TSAP : 02.01
Connection type: SEND/RECEIVE
NetPro entry on S7-400 CP 443-1:
Local TSAP : 01.01 (identical)
Partner MAC : 08.00.06.01.02.03 (identical)
Partner TSAP : 02.01 (identical)
Connection type: ISO transport, SEND/RECEIVE
MAC addresses on the new CP 443-1 are assigned via the CP's DIP switches or via STEP 7 / TIA Portal hardware configuration. If the existing CP 1430 MAC address must be preserved on the bus (for example, because a partner CPU is hard-coded to that MAC), the CP 443-1 should be assigned the same MAC. CP 443-1 supports manual MAC override in the hardware properties.
8. NetPro Configuration on the S7-400
Open the S7 project in SIMATIC Manager (or TIA Portal), open the S7-400 station, and add the CP 443-1 to the hardware configuration at the slot corresponding to the position previously occupied by the CP 1430 (or any free slot in the rack that the STEP 7 hardware catalog allows for that CPU type). Then open NetPro (or "Devices & Networks" in TIA Portal) and create an ISO transport connection for each entry from the NCM COM 1430 export.
- Right-click the CP 443-1 in NetPro and choose Insert New Connection.
- Select Unspecified as the partner and pick ISO transport connection as the type.
- Enter the partner MAC address exactly as recorded from the CP 1430 export.
- Enter the local and partner TSAPs exactly as recorded.
- Select the role: SEND/RECEIVE, FETCH passive, or WRITE passive according to the table in section 6.
- Confirm the connection ID and slot. The S7-400 connection ID is a 16-bit word used by the program blocks (e.g.,
ID = W#16#0001). - Download the hardware configuration and the NetPro connection table to the S7-400 CPU. The CP 443-1 firmware boots with the new connection database.
9. SEND/RECEIVE Programming on the S7-400
Each ISO transport connection is consumed from the user program by an FC/FB that matches the role:
- FC5 / FC50 (AG_SEND) and FC6 / FC60 (AG_RECV) for SEND/RECEIVE role on ISO transport.
- FB7 (FETCH) and FB8 (WRITE) when CP 443-1 is active (rare for a migrated station because the legacy was likely the active partner).
- FB9 (FETCH passive server) and FB10 (WRITE passive server) when CP 443-1 is passive — the partner CPU initiates FETCH/WRITE.
A minimal S7-400 SEND example:
CALL "AG_SEND" // FC5
ACT := TRUE
ID := W#16#0001 // NetPro connection ID
LADDR := W#16#0100 // CP 443-1 logical base address
SEND := P#DB100.DBX0.0 BYTE 200
LEN := 200
DONE := M10.0
ERROR := M10.1
STATUS := MW12
NOP := 0;
A minimal S7-400 RECEIVE example:
CALL "AG_RECV" // FC6
ID := W#16#0001
LADDR := W#16#0100
RECV := P#DB110.DBX0.0 BYTE 200
NDR := M20.0
ERROR := M20.1
STATUS := MW22
LEN := MW24
NOP := 0;
Both blocks use the same ID as the connection row in NetPro and the logical base address LADDR from the CP 443-1 hardware configuration. Mismatched ID or LADDR yields STATUS = 0x8181 (connection not configured) or 0x8183 (partner not reachable).
10. WinCC v7.0 Tag Migration: S5-L4 → S7-TCPIP
The PC-based WinCC v7.0 station must migrate from the legacy S5 Ethernet Layer driver ("S5-L4", tied to the CP 1613 and Sinec H1) to the S7-TCPIP channel that ships with every WinCC v7.0 installation. The tag database is rewritten; the wire-level protocol is the same ISO transport, so the WinCC side simply needs new driver entries and updated tag addresses.
10.1 Add the S7-TCPIP Channel
- In WinCC Explorer, right-click Tag Management → Add New Driver → select
SIMATIC S7 PROTOCOL SUITE→TCP/IP. - Right-click TCP/IP → System Parameters and configure the unit IP address, rack, and slot of the S7-400 CPU.
- Disable or remove the legacy S5 Ethernet Layer driver once the new tags are online.
10.2 Address Conversion: S5 → S7 Format
WinCC S5-L4 tags use data block / word / bit notation tied to S5 absolute addressing (e.g., DB 100 DW 0). The S7-TCPIP driver uses S7-conformant addressing (DB100.DBD0, DB100.DBW0, DB100.DBX0.0). Use the WinCC tag export to a CSV and rewrite the address column. A typical conversion:
| S5-L4 Address | S7-TCPIP Address | Data Type |
|---|---|---|
| DB 100 DW 0 | DB100.DBD0 | DWORD (32-bit) |
| DB 100 DW 2 | DB100.DBW2 | WORD (16-bit) |
| DB 100 DR 4 | DB100.DBD4 | REAL (32-bit float) |
| DB 100 D 6.0 | DB100.DBX6.0 | BOOL |
| MW 200 | MW200 | WORD (merker) |
| EW 0 | IW0 | WORD (input) |
| AW 4 | QW4 (or QW4) | WORD (output) |
11. End-to-End Migration Procedure
- Inventory: Document all CP 1430 connections with NCM COM 1430. Record MAC, TSAP, role, DB references.
- Topology: Decide whether to replace the Sinec H1 backbone or insert AUI-to-UTP media converters. For permanent migration, replace with a Scalance X switch.
- Hardware prep: Install the S7-400 rack, CPU, and CP 443-1 alongside the existing S5 rack. Power up. Assign an IP/MAC address on the same subnet (or none, if ISO-only).
- Configure CP 443-1: In STEP 7 / TIA Portal, add the CP 443-1 in the hardware config, set its MAC address to match the legacy CP 1430 (if MAC preservation is required), set the IP/subnet (for diagnostics).
- Recreate connections in NetPro: For each CP 1430 entry, create a matching ISO transport connection on the CP 443-1, copying MAC and TSAP values.
- Download to S7-400: Download hardware config and NetPro to the CPU. The CP 443-1 will start to listen on the listed TSAPs.
-
Program SEND/RECV: Add FC5/FC6 calls in the OB1 cycle with the correct
IDandLADDR. - Migrate WinCC tags: Add the S7-TCPIP driver, configure the unit, convert tag addresses, set byte order, and remove the S5-L4 driver.
- Parallel run: Keep both racks powered. Verify that the S5 partner CPUs and the WinCC station are receiving identical data from the new S7-400 as from the legacy CP 1430.
- Cut-over: After the agreed soak period (typically 24-72 hours), decommission the CP 1430 and remove the legacy S5-135 rack from the bus.
12. Verification and Commissioning Checklist
| Check | Method | Expected Result |
|---|---|---|
| CP 443-1 module status | STEP 7 / TIA online diagnostics | RUN green, no SF / BF errors |
| Connection status | NetPro online view, "Connection diagnostics" | All listed connections "established" |
| Send/Receive data integrity | Force a known pattern in DB100 on the S7-400, verify on peer S5 | Pattern matches, no STATUS <> 0
|
| WinCC tag values | Online tag diagnostics in WinCC Explorer | Values match source DB, quality code 0xC0 (good) |
| CP 443-1 diagnostic buffer | Module diagnostics → Diagnostic buffer | No "connection aborted" or "TSAP invalid" entries |
| Bus load | Wireshark capture on the new switch port | Steady ISO transport traffic, no retries |
| Partner S5 diagnostics | S5 CPU status display or COM 1430 on the peer | Connection "OK", receive counter incrementing |
13. Troubleshooting Matrix
| Symptom | Probable Cause | Corrective Action |
|---|---|---|
| CP 443-1 SF/BF LED red | Physical layer: cable, port, duplex mismatch | Verify RJ45 link, force 10 Mbit/s full duplex on the switch port if autonegotiation fails |
| AG_SEND STATUS = 0x8181 | Connection ID not configured in NetPro | Verify ID matches the connection row; rebuild NetPro and download |
| AG_SEND STATUS = 0x8183 | Partner unreachable or wrong TSAP | Confirm partner MAC and TSAP; check that the S5 partner is online and the CP 1430 has the matching TSAP |
| Connection establishes then drops after a few seconds | FETCH/WRITE role mismatch | Review section 6 role mapping; the active side must initiate, the passive side must respond |
| WinCC values scrambled | Byte-order mismatch | Set tag properties to Big-endian / Motorola |
| WinCC quality code 0x91 (timeout) | Unit IP or rack/slot mismatch in WinCC channel | Re-check the S7-TCPIP unit parameters; rack 0, slot 3 is typical for an S7-400 CPU |
| Peer S5 logs "partner unknown" | MAC address of new CP does not match the registered partner on the peer | Either assign the legacy MAC to the CP 443-1 or reconfigure the peer's CP 1430 with the new MAC |
| High cyclic error rate after migration | Duplex mismatch between CP 443-1 and switch | Hard-code 100 Mbit/s full duplex on the switch port for the CP 443-1 |
| Scalance X101 port LED off | Wrong cable (crossover vs straight-through) | Modern Scalance switches have auto-MDI/MDIX; if LED is off, replace the patch cable |
14. Reference Documents and Tools
- STEP 7 From S5 to S7 Conversion Manual — Siemens Industry Online Support, document number 45531547.
- CP 443-1 manual entry on Siemens Industry Online Support: search for "6GK7443-1EX11" or "CP 443-1 Operating Instructions" for the full connection ID / status code reference.
- STEP 7 / SIMATIC Manager online help: Communication > Industrial Ethernet > ISO Transport Connections.
- WinCC Information System: Communication > S7-TCPIP Channel > Configuring the Unit.
15. Field Notes and Common Pitfalls
- Preserving the legacy MAC address on the new CP 443-1 is sometimes the only way to avoid reconfiguring dozens of partner S5 stations. Use the CP 443-1 hardware property "MAC address" to set it manually.
- The CP 443-1 supports both ISO transport and ISO-on-TCP. The legacy CP 1430 only uses ISO transport. Use ISO transport for full protocol compatibility; ISO-on-TCP will be rejected by the CP 1430.
- CPU 416 / 417 with multiple CPs may exceed the maximum number of simultaneously active ISO connections per CP. Verify the firmware release notes for the chosen CP 443-1 firmware version.
- If the plant later upgrades WinCC to v7.4 or v7.5, the S7-TCPIP channel name and configuration dialog changes but the underlying ISO transport stays the same; tag addresses do not need re-entry.
- Document every tag, DB reference, and TSAP in a migration register. The single most time-consuming part of any S5-to-S7 migration is reconstructing undocumented tag names after the S5 program has been archived.
Can the CP 443-1 speak ISO transport to a legacy S5 CP 1430?
Yes. ISO transport is the same protocol that the CP 1430 uses, and the CP 443-1 supports it natively. Configure an ISO transport connection in NetPro with the partner MAC and TSAP from the CP 1430 export. The S5 partner does not need to be reconfigured as long as its MAC and TSAP remain unchanged.
Why is FETCH active not available on the CP 443-1?
Siemens dropped the FETCH active server role from the CP 443-1 firmware because FETCH active is functionally redundant with SEND/RECEIVE on ISO transport. If the legacy S5-135 was the FETCH active partner, the upgraded S7-400 must become FETCH passive, and the legacy S5 must initiate the FETCH.
Do I need to replace the Sinec H1 backbone?
Not strictly. You can keep the 10BASE5/10BASE2 backbone and use AUI-to-UTP media converters at each station. For a permanent migration, however, replacing the segment with a Scalance X switch and twisted-pair drops is faster, more reliable, and removes 30-year-old coax from the cable tray.
How do I migrate WinCC tags from S5-L4 to S7-TCPIP?
Add the SIMATIC S7 Protocol Suite TCP/IP driver in WinCC, configure a unit with the S7-400 rack/slot, then rewrite each tag address from the S5-L4 format (DB, DW, D) to the S7 format (DBx.DBDy, DBx.DBWy, DBx.DBXy.z). Set byte order to Big-endian/Motorola for all word and double-word tags to preserve the S5 byte layout.
Which CP 443-1 variant should I choose?
For 4-12 peer connections, the 6GK7443-1EX11-0XE0 is sufficient. For larger plants with many cross-CPU exchanges, the 6GK7443-1UX11-0XE0 (4-port switch, ERTEC-based) is preferred because it removes the need for an external switch at the rack and supports higher connection counts.