Problem Overview
A SIMATIC Connection Point (article number 6AV2 125-2AE13-0AX0) running firmware V5.2 is configured as the PROFINET access point for a KTP700 Mobile / KTP700F Mobile Panel. When the project is loaded into an S7-1517F-3PN controller under TIA Portal V17, the diagnostic buffer of the CPU reports "Connection point - not supported" (German equivalent: Anschaltpunkt wird nicht unterstützt). The wireless link between the Mobile Panel and the Connection Point comes up, standard HMI tags operate, but the safety-related emergency-stop circuit on the Mobile Panel does not engage the F-program in the CPU.
This failure mode is a classic PROFIsafe address-mismatch / PROFINET IO activation problem on the Wireless HMI subsystem. It is fully recoverable in the field and does not normally indicate a hardware fault on the Connection Point, the Mobile Panel, or the S7-1500F CPU. The resolution requires three coordinated actions: enabling PROFINET IO on the HMI station, restarting the Mobile Panel so it re-reads its PROFINET identity, and aligning the PROFIsafe F-destination address between the Connection Point and the TIA Portal device configuration.
Affected Components and Versions
| Component | Article / Order Number | Firmware / Software | Role |
|---|---|---|---|
| SIMATIC Connection Point | 6AV2 125-2AE13-0AX0 | V5.2 (or compatible 5.x) | PROFINET access point for the Mobile Panel |
| KTP700 Mobile / KTP700F Mobile | 6AV2 125-1Axx / 6AV2 125-1Bxx | Image & firmware from Connection Point V5.2 | Wireless HMI / F-HMI |
| F-CPU | SIMATIC S7-1517F-3 PN/DP | Firmware ≥ V2.9 recommended for TIA V17 | F-runtime host |
| Engineering | STEP 7 / WinCC in TIA Portal | V17 (Update 4 or later recommended) | Configuration, PROFIsafe address assignment |
Root Cause Analysis
The error string "Connection point - not supported" is produced by the PROFINET IO controller inside the S7-1500F when it cannot bind a configured AR (Application Relationship) to the physical device. The most frequent root causes in this topology are listed in order of probability:
- PROFINET IO mode is disabled on the Mobile Panel / Connection Point station. The Connection Point can be operated in two roles: pure PROFINET access point for HMI traffic, or PROFINET IO device exposing the wireless safety slot. If the IO role is not activated, the controller never sees the slot, and the safety communication path stays down even though standard HMI pages still work over the same wireless link.
- F-destination address mismatch. The PROFIsafe F-destination address on the Connection Point (assigned by the user at first commissioning) does not match the F-destination address configured under Devices & Networks > Properties > PROFIsafe for the F-CPU. The CPU logs a communication error (SF) on the F-module and refuses the safety frames.
- Device description / HSP missing. A Connection Point on V5.2 firmware has new GSDML revision that may not be present in the TIA V17 base install. The catalog shows the device as a placeholder; the controller treats the slot as "not supported".
- Topology or NTP interruption during semi-offline commissioning. When the project is loaded without the complete physical topology (e.g. ET200SP or Festo CPX missing from the rack), the diagnostic buffer fills with subordinate faults and the real connection-point error becomes hard to identify.
Reading the Diagnostic Buffer Correctly
Before any change is made, capture the CPU diagnostic buffer. This is the single source of truth and must be captured in English so the message IDs can be matched against the Siemens manual.
- Open the project, select the S7-1517F-3 PN, right-click Online & Diagnostics > Diagnostics > Diagnostic Buffer.
- Click Save as Text and store the file in UTF-8.
- If the project language is French, change it first: Project > Languages > Editor language > English. Reload, then re-export.
- Filter the buffer for entries whose Event ID is in the range
0x08E0 … 0x08FF(PROFINET IO connection events) and0x0E0A … 0x0E15(PROFIsafe events).
A clean buffer should contain exactly one PROFINET connection-establish entry for the Connection Point slot, followed by a PROFIsafe address-OK entry. Anything else (IO not accessible, station failure, AR-removed) is a symptom, not the root cause, and must be eliminated first.
Reducing Diagnostic Noise Before Re-Test
When the panel is loaded in a semi-offline environment (e.g. the ET200SP and the Festo CPX are physically missing), the diagnostic buffer can be flooded with IO-not-accessible events that push the real PROFIsafe error out of the historical log. Apply this five-step noise-reduction procedure before reloading:
- Use File > Save As > Save as copy on the live project. Work on the copy.
- Open Devices & Networks > Topology view and temporarily delete all port-to-port interconnections. Recompute and reload.
- Either remove the NTP server configuration in the CPU properties, or stage a real NTP server on the same subnet (a router or a Windows time service) so the CPU does not log a clock-failure every cycle.
- Ensure only one controller owns each HMI connection. If a secondary S7-1500 is in the project and also has a WinCC connection to the KTP700, the controller will log a connection-station-down entry on every cycle.
- Create an OB82 (IO fault) and an OB83 (module plug/remove) in the S7-1500F program. Without these OBs the CPU goes to STOP on the first missing device, which prevents the safety program from reaching the F-runtime OB.
:P qualifier (e.g. %I0.0:P) must reference a real, present module. :P accesses on missing modules generate a fresh diagnostic entry on every scan and will overflow the buffer.
Resolution Procedure
Step 1 – Enable PROFINET IO on the Mobile Panel / Connection Point
- In the TIA Portal project tree, select the Mobile Panel device (or the Connection Point device if the IO slot is owned by the CP).
- Open Properties > PROFINET interface > Operating mode.
- Tick the option "Operate as PROFINET IO device" (or Activate PROFINET IO mode, depending on the GSDML revision).
- Confirm that the slot assigned to the safety sub-module is selected (typically slot 1 sub-slot 1 for the F-source address of the Mobile Panel).
- Recompile the project. The CPU device configuration must show the Connection Point as a partner on PROFINET IO, not only as an HMI station.
Step 2 – Restart the KTP700 Mobile
Once the PROFINET IO role is enabled and downloaded, the Mobile Panel must perform a clean re-init so it re-reads its station name, IP address, and PROFINET identity. Power-cycle the panel from the Connection Point:
- Hold the operator panel power key for three seconds until the display goes dark.
- Wait ten seconds.
- Re-insert the panel into the Connection Point cradle. The panel pulls a fresh identity from the CP and starts a PROFINET AR with the F-CPU.
A soft restart via the Control Panel Reboot command is not sufficient when the F-source address has changed; a hard power-cycle is required.
Step 3 – Align the PROFIsafe F-Destination Address
The F-destination address is a 1-based integer in the range 1…65534 and is stored both in the project and in the Connection Point. Both values must match exactly, otherwise the F-CPU discards the safety telegram.
- In the project, navigate to the F-CPU's PROFINET IO submodule representing the Mobile Panel. Open Properties > PROFIsafe.
- Read the F-destination address field. Note the value (e.g.
3). - On the Connection Point's web-based management (WBM) or via the KTP Control Panel, navigate to Safety > PROFIsafe > F-destination address.
- Set the same value (e.g.
3) and apply. The CP prompts for confirmation to overwrite the current address; confirm. - Power-cycle the Mobile Panel once more so the new F-address is loaded into the F-CPU AR.
The address assignment follows the rule: one unique F-destination address per PROFIsafe slot on a single PROFINET network segment. The F-source address is the device's own, while the F-destination address is the controller-side logical identifier of the slave.
Step 4 – Re-Download and Verify the F-Program
- Compile the safety program (F-blocks). TIA Portal performs a signature check on every F-block.
- Download the F-program to the S7-1517F-3 PN with the standard F-download procedure (password-protected).
- Check the CPU operator panel: SF / BF / MAINT LEDs must be off.
- Inspect the diagnostic buffer: only the F-address-OK entry should remain as the latest PROFIsafe event.
Safety Function Verification
The emergency-stop circuit on the KTP700F Mobile is wired to the F-inputs of the F-CPU through PROFIsafe. After the resolution steps the path is live, but the safety function must be formally proven before the machine is released for production.
- Open TIA Portal Online & Diagnostics > Safety > Status for the F-module. The status must read RUN with no passivation indicator.
- Press the physical E-Stop on the Mobile Panel. The status should toggle to passivated within one PROFIsafe watchdog cycle (default 50 ms × monitoring number 3 = 150 ms max).
- Release the E-Stop with the standard acknowledge sequence. The slot should return to RUN only after the F-runtime OB in the CPU confirms the safe state.
- Document the test result with the operator-panel screenshot and the diagnostic-buffer export. This is mandatory for the CE technical file and for the safety acceptance test record.
Pre-Commissioning Checklist
| # | Check | Pass criterion |
|---|---|---|
| 1 | TIA Portal V17 with current HSP / GSDML installed | Connection Point appears in the device catalog with no "unrecognized device" warning |
| 2 | Connection Point firmware V5.2 confirmed via WBM | Firmware page reports V5.2.x |
| 3 | PROFINET IO mode enabled on the CP / Mobile Panel | IO flag set in the device properties and in the WBM |
| 4 | F-destination address matches the project | Same integer value in the WBM and in the F-CPU's PROFIsafe slot |
| 5 | OB82 and OB83 loaded in the F-CPU | Present in the program blocks list and online on the CPU |
| 6 | Topology view: all neighbour ports wired or intentionally removed | No "neighbour mismatch" entries in the diagnostic buffer |
| 7 | NTP server present (or NTP config removed) | No clock-failure entries in the diagnostic buffer |
| 8 | E-Stop test executed and logged | Slot toggles to passivated on press, returns to RUN after acknowledge |
Parameter Reference
| Parameter | Typical value | Where to set | Why it matters |
|---|---|---|---|
| F-destination address | 1…65534, unique per slot | Devices & Networks > PROFIsafe; CP WBM | Mismatch is the primary cause of "Connection point - not supported" |
| F-monitoring number | 3 (default), max 6 | PROFIsafe properties | Defines the passivation threshold; raise only after risk assessment |
| PROFINET device name | Matches the station-name configured in the WBM | Devices & Networks > Ethernet addresses | Required for the AR to bind |
| Update time | 1 ms – 512 ms (multiples of 250 µs) | PROFINET interface > Real-time settings | Safety slots default to 1 ms; longer values increase the watchdog latency |
| OB82 (IO fault) | Empty or with logging logic | S7-1500 program | Prevents STOP on missing devices during semi-offline commissioning |
Common Variations and Edge Cases
Two Mobile Panels on one Connection Point. The CP can host two Mobile Panels (primary + secondary). When only one is online, the second slot raises a station-failure event that may obscure the connection-point error. Disable the secondary slot in the project during commissioning, then re-enable for production.
Mixing generations. Connecting a first-generation Mobile Panel (6AV2 125-1Ax) to a V5.2 Connection Point is supported, but the F-source address negotiation behaves differently. Always check the WBM after a panel swap.
Cross-project copy. If the F-destination address is copied from a reference project, TIA Portal may silently remap the address if the slot number changes. Re-validate the address table after every "Copy & Paste" between controllers.
Firmware downgrade. A downgraded CP firmware (e.g. V4.x to V5.2) retains the previously assigned F-destination address. If the previous project was on a different slot numbering, the new project will show a mismatch.
FAQ
What does "Connection point - not supported" mean in the S7-1500F diagnostic buffer?
It means the CPU cannot bind a PROFINET Application Relationship to the Connection Point slot. The most common cause is that PROFINET IO mode is not enabled on the Mobile Panel / Connection Point, or that the F-destination address in the project does not match the value stored in the Connection Point. Enable PROFINET IO, restart the Mobile Panel, and align the F-destination address in the CP's WBM with the value in Devices & Networks > PROFIsafe.
Is Connection Point firmware V5.2 compatible with TIA Portal V17?
Yes, firmware V5.2 of the 6AV2 125-2AE13-0AX0 Connection Point is supported by TIA Portal V17 with the corresponding PROFINET device description installed. The base install of TIA V17 may require HSP 0375 / HSP 0383 or a later GSDML update for the CP to appear correctly in the device catalog.
Why does the emergency stop on the KTP700F Mobile not trip the F-CPU even though the HMI is online?
The HMI connection (standard WinCC tags) uses the wireless link separately from the PROFIsafe safety connection. If PROFINET IO is not enabled or the F-destination address is wrong, the safety frames are dropped while the standard HMI traffic continues. Resolve the PROFINET IO activation and the F-address mismatch, then re-test the E-Stop.
Where is the PROFIsafe F-destination address configured on the Connection Point?
Open the Connection Point's web-based management (WBM) at the panel's IP address and navigate to Safety > PROFIsafe > F-destination address. Enter the same integer value that is shown under the F-CPU's PROFINET IO submodule in the TIA Portal device configuration. Confirm and power-cycle the Mobile Panel for the new address to take effect.
Do I need OB82 and OB83 in the F-CPU to clear the connection-point fault?
For final production operation, OB82 / OB83 should at minimum exist so the CPU does not transition to STOP on a single missing device. During semi-offline commissioning (when ET200SP or Festo CPX stations are not yet mounted) these OBs are essential to keep the CPU in RUN and allow the safety program to be tested against the Mobile Panel path.