Resolving 'Invalid Address' Error in S7-1200 PTO Configuration

Problem Overview: 'Direccion no valida' / 'Invalid Address' on PTO Parameterization

When configuring a Pulse Train Output (PTO) on a Siemens SIMATIC S7-1200 CPU in TIA Portal, technicians frequently encounter the runtime or compile-time message The parameterization of the pulse generator (PTO) is not valid (Invalid address) — the original Spanish being La parametrizacion del generador de impulsos (PTO) no es valida (Direccion no valida). The error blocks the motion output, prevents the CTRL_PTO instruction from compiling cleanly, stops the project download, or disables the pulse output during operation.

The message appears in one of three locations:

• Device configuration: The Properties dialog for the PTO channel shows a red "Invalid address" indicator on the pulse generator.
• Compile log: TIA Portal flags CTRL_PTO or the axis technology object with Address of pulse generator invalid.
• Online diagnostics: The CPU diagnostic buffer logs a parameter error event tied to PTO parameter assignment.

Affected Hardware and Firmware

Reference: Configuring a pulse channel for PWM or PTO - SIMATIC S7-1200 Manual Collection.

AC/DC/RLY variants cannot source PWM/PTO at the frequencies required for stepper or servo pulse input because the relay outputs cannot switch fast enough. Only the DC/DC/DC transistor outputs support PTO.

Root Cause Analysis

Six distinct root conditions produce the "Invalid address" message. Diagnose by working through them in this order.

1. PTO channel not enabled in Device Configuration

The most common cause. The pulse generator output is disabled by default. The output byte/bit is therefore not assigned a hardware identifier (HW ID), and CTRL_PTO cannot bind to it. Symptoms: no PTO listed under the CPU in the project tree, and Properties > Pulse generators shows the channel as "Not used".

2. Hardware mismatch between PTO channel and the physical output

The output selected in the PTO configuration is the wrong physical terminal. For example, trying to assign a PTO to a Q-output that is already in use by the high-speed counter (HSC) or by an axis technology object. The error is raised at compile time when the assignment overlaps.

3. CTRL_PTO HW_ID does not match the configured pulse generator

After enabling the PTO in Device Configuration, TIA Portal assigns a hardware identifier (commonly 256 through 259). The CTRL_PTO instruction's HW_ID input must reference the same identifier, not the I/O address (P#Q0.0). Symptom: compile error Hardware identifier not found or runtime error Parameter assignment of pulse generator not valid.

4. Project downloaded to wrong CPU

If the project target device is a different CPU type than the one physically connected, the PTO outputs that exist on the target may not map to the same terminals on the detected CPU, and the HW_ID becomes invalid.

5. Firmware version too old for the configured feature

PTO motion control technology objects require firmware V4.0 or later. V3.x CPUs do not support the newer motion APIs. Some frequency options, such as 1 MHz on the CPU 1217C, require V4.1+.

6. PTO and HSC share the same input/output pin

On S7-1200, a single physical output can be allocated to either a PTO or an HSC, not both. The error is raised at compile time when the assignment overlaps.

Diagnostic Procedure

1. Open the project in TIA Portal and select the CPU device in the project tree.
2. Open Device view and double-click the CPU module.
3. Navigate to Properties > Pulse generators (PTO/PWM) in the inspector window.
4. Note the channel selection: PTO1, PTO2, PTO3, PTO4.
5. For each PTO channel, check the Output dropdown. It should show a fixed Q-address (for example, Q0.0 for PTO1 on a CPU 1214C).
6. Right-click the CPU and choose Compile > Hardware (rebuild all). Read the messages carefully.
7. Open the Program blocks and inspect the CTRL_PTO instance DB. Expand it and check the HW_ID parameter under Input.
8. Online: right-click the CPU and select Online & Diagnostics > Diagnostics buffer. Look for events in the 16#FFD0-16#FFD9 range or motion events related to PTO parameter error.
9. Compare the online HW_ID (read from the instance DB) with the configured HW_ID in Device Configuration (Properties > System constants).

Step-by-Step Solution

Step 1 - Enable the PTO channel in Device Configuration

1. In the TIA Portal project tree, double-click Device & Networks to open the device view.
2. Click the CPU module (not the signal board).
3. In the Properties inspector, go to Pulse generators (PTO/PWM).
4. Select channel PTO1/PWM1.
5. Set the Operating mode drop-down to PTO (pulse train output).
6. Optionally enable PTO2/PWM2, PTO3/PWM3, PTO4/PWM4 if your application needs multiple pulse channels.
7. Close the properties pane. The hardware identifier is now created (typically 256, 257, 258, 259 in sequence).

Reference: Siemens SIMATIC S7-1200 Manual: Configuring a pulse channel for PWM or PTO.

Step 2 - Set the output terminal and direction control

1. Still in the Pulse generators properties, expand the channel selected.
2. The Pulse output field shows the assigned Q-bit (for example, Q0.0 for PTO1). This field is read-only because the assignment is fixed by hardware.
3. If a direction output is required (for example, for a stepper drive with a DIR input), enable Use direction output and select a Q-bit from the dropdown. The direction bit is one of the remaining high-speed outputs on the CPU.
4. Optionally enable Output of the HSC value if the application needs the current position to be readable from the system.

Step 3 - Read the hardware identifier

1. Right-click the CPU in the project tree and choose Properties.
2. Navigate to System constants.
3. Locate the constants named PTO1_PULSE, PTO1_DIR, PTO2_PULSE, and so on.
4. Note the integer value next to each (for example, 256, 257). These are the HW_IDs you must reference in your program.

Step 4 - Add the CTRL_PTO instruction

1. Open the program block (OB1) where motion control is required.
2. In the project tree, expand Instructions > Technology > Pulse.
3. Drag CTRL_PTO into the network.
4. Click the ??? on the HW_ID input and enter the system constant for the pulse channel, for example, "PTO1_PULSE".
5. Click ??? on the instance DB drop-down to create a new instance data block, for example, iDB_PTO1.

Step 5 - Wire CTRL_PTO inputs and outputs

A minimal CTRL_PTO call in Structured Text (SCL) for stepper control:

// Drive enable input
iDB_PTO1.EN          := TRUE;             // Enable pulse output
iDB_PTO1.SW_STOP     := FALSE;            // No software stop
iDB_PTO1.RESUME      := FALSE;            // No resume
iDB_PTO1.STEP_NUMBER := 16#80000000;      // Single step, no continuous run
iDB_PTO1.SET_DUTY    := 50;               // Not used for PTO
iDB_PTO1.FREQUENCY   := 5000;             // 5 kHz pulse rate
iDB_PTO1.COUNT       := 2000;             // Number of pulses

// Status outputs (read for diagnostics)
rStatus := iDB_PTO1.STATUS;
bBusy   := iDB_PTO1.BUSY;
bError  := iDB_PTO1.ERROR;

For LAD/FBD, the equivalent block has these terminals:

Step 6 - Compile, download, and verify

1. Right-click the CPU and choose Compile > Hardware and software (rebuild all).
2. Resolve any remaining error messages. The "Invalid address" message should now be gone.
3. Download to the CPU.
4. Go online and monitor the CTRL_PTO instance DB online values.
5. Force EN := TRUE momentarily and confirm the Q-output shows pulses with a scope or counter.

Hardware Configuration Patterns

Pattern A: Single-axis stepper with direction

For a stepper drive that takes PULSE and DIR signals:

* Most drives use differential inputs; wire PULSE- to the drive's reference ground or differential return.
** Q0.2 and Q0.3 are NOT shared with the next PTO channel; they are dedicated DIR outputs.

Pattern B: Servo drive with CW/CCW pulse

Set the PTO channel to use Pulse + Direction in Device Configuration. The drive must be configured for Pulse + Sign mode. Frequency ranges: 500 Hz minimum, up to 1 MHz on CPU 1217C outputs Q0.0-Q0.3.

Pattern C: PTO versus Motion Control axis technology object

S7-1200 firmware V4.x offers two motion APIs:

• CTRL_PTO: simple pulse output with no ramp. Good for steppers that take step + direction. Use when you need raw, real-time pulse stream control.
• Axis technology object (TO_Axis_PTO): full motion control with ramp, jerk limit, homing, and positioning table. Use when you need an absolute move or synchronized motion.

If both are configured for the same output, the second one configured takes priority and the first one reports the "Invalid address" error.

Verification Tests

1. Static check: Open the Properties of the PTO channel in Device Configuration. The Address area must show a valid HW identifier, not "-".
2. Compile check: TIA Portal should report 0 errors and 0 warnings for the project.
3. Download check: Successful download with no Cannot write technology object warning.
4. Online diagnostic buffer check: No events with ID 16#FFD1 (technology object parameter error) immediately after download.
5. Oscilloscope check: Probe the assigned Q-bit with a scope. Expect 50% duty cycle pulses at the configured frequency when EN is TRUE.
6. Drive response check: Stepper or servo should execute the commanded number of steps. Use the drive's position-feedback display (for example, the integrated display on a SINAMICS V90) to confirm the commanded pulse count was received.

Error Code Reference for CTRL_PTO STATUS

Frequently Confused Settings

Field-Commissioning Checklist

• CPU catalog number ends in DC/DC/DC; not AC/DC/RLY.
• Firmware version V4.0 or later under Online & Diagnostics > Identification.
• PTO channel enabled in Device Configuration with the correct mode (PTO, not PWM).
• System constant for the pulse channel used as the HW_ID input of CTRL_PTO.
• Direction output enabled only if the drive requires DIR (or skip for CW/CCW with two PTO channels).
• FREQUENCY value within the Q-output capability (1 MHz max on Q0.0-Q0.3 of CPU 1217C, 100 kHz on other CPUs).
• Wiring uses shielded twisted pair for PULSE/DIR signals; shield grounded at the drive end only.
• Drive's pulse input mode matches the S7-1200 configuration (Pulse + Direction or CW/CCW).
• 24 V supply to the S7-1200 output groups is sourced from a clean, isolated 24 VDC rail.
• Digital outputs used for PTO are NOT used elsewhere (no output coil, no HSC, no other TO).

FAQ