1. Problem Overview
A mixed-drive Profibus installation pairs a Siemens SIMOREG DC 6RA70 with a Siemens SIMOVERT Masterdrives MC (6SE70 series) AC/AC drive on the same Profibus-DP network, controlled by a Siemens SIMATIC S7-300 CPU. In the field scenario described, the DC 6RA70 starts, references, and runs normally from the PLC, while the Masterdrive MC AC drive controlling a traverse motor refuses to run. No fault or alarm is visible on either the PLC diagnostic buffer or the drive PMU (Parameterization Unit). The mechanical side is verified intact. This article isolates that exact failure mode and walks through every layer of the diagnostic stack from the physical copper up to the application control word.
2. System Topology and Signal Flow
The configuration under test is a single-master Profibus-DP segment with three nodes: the S7-300 CPU acting as Class-1 master, the SIMOREG DC 6RA70 with a CBP2 communication board (running normally), and the Masterdrive MC 6SE70 AC/AC unit fitted with its own CBP2 (Communication Board Profibus) option. Both drives exchange Process Data Objects (PZD) and Parameter Data (PKW) over Profibus-DP V0/V1. The PLC issues a 16-bit control word (STW1) and main setpoint (HSW) in the outgoing PZD area and reads a 16-bit status word (ZSW1) and actual value (HIW) in the incoming PZD area.
The drive accepts commands only when its parameterization layer (the source for control-word bits) routes those bits to the CBP PZD words. On Masterdrive MC the parameterization is enabled by P060 = 8 (parameter menu selection: parameter set) and the relevant control-word source parameters must point at the CBP channel.
3. Safety and Prerequisites Before Diagnosis
- Lock out and tag out the AC drive's main contactor; observe the five safety rules (disconnect, secure against re-energizing, verify absence of voltage, ground and short, cover adjacent live parts) before opening the drive cabinet.
- Wait the manufacturer-specified discharge time on the DC link (typically 5 minutes for a Masterdrive MC, 6 minutes for a 6RA70) before removing any module.
- Confirm you have a DriveMonitor / SIMOVIS or Starter commissioning cable to go online with the Masterdrive MC.
- Confirm you have the STEP 7 project (or at minimum the GSD file
SIEM804D.GSDfor Masterdrive MC PPO3 or PPO1, andSIMOREG.GSDorSIEM808F.GSDfor the 6RA70) loaded in HW Config. - Bring a PG/PC with STEP 7 V5.x or TIA Portal plus the SIMATIC USB PC adapter or CP5512/CP571 ready.
4. Step 1 — Verify Profibus Hardware Integrity
Even though the 6RA70 is operating, segment integrity for the Masterdrive MC slave should still be confirmed, because a single slave with a poor connection or wrong address does not necessarily kill the bus.
4.1 Physical layer
- Inspect the Profibus D-sub connector on the Masterdrive MC CBP2: verify pins 3 (B-line) and 8 (A-line) are intact, shield is bonded, and the connector's terminating resistor switch is OFF if a downstream node is present.
- Confirm the segment has exactly two terminating resistors enabled (master end and last slave end). With three nodes including the 6RA70 and Masterdrive MC, only the physical ends are terminated.
- Measure cable length: Profibus-DP at 1.5 Mbaud supports up to 200 m of cable per segment.
- Check shield bonding at each cabinet entry — shield must be clamped to PE on both ends, ideally through 360-degree EMC backshells.
4.2 CBP2 LED status
The CBP2 board on a Masterdrive MC has three diagnostic LEDs whose state tells you immediately whether the slave is alive on the bus:
| LED | Color | Meaning | Action if abnormal |
|---|---|---|---|
| PROFIBUS (or "DP") | Green | Slave is exchanging data with the master (Data Exchange state) | Off or red means PLC has not completed parameterization or the slave has fallen off the bus |
| Online | Yellow/Orange | Slave has cleared the token and is in Data Exchange | Off = slave in Wait Prm or Wait Cfg |
| Fault / BF | Red | Bus fault, duplicate address, or parameterization failure | Investigate slave address, GSD mismatch, or bus short |
5. Step 2 — Validate PLC Master Configuration and PPO Type
5.1 Slave address and slot
Open the STEP 7 HW Config and locate the Masterdrive MC slave on the Profibus subnet. Verify:
- Profibus address matches the DIP switch setting on the CBP2 board (parameter
P918on the drive side must agree). - The slave is not disabled (the "Activate" checkbox is ticked in HW Config).
- The GSD file imported for the Masterdrive MC corresponds to the actual firmware revision. The classic files used for 6SE70 are
SIEM804D.GSDandSIEM804F.GSD; using the wrong one causes parameterization to fail silently with F0191 or F0192 on the drive.
5.2 PPO type selection
Masterdrive MC supports PPO1 (4 PKW + 2 PZD), PPO3 (0 PKW + 2 PZD), and PPO4 (0 PKW + 6 PZD). The most common production configuration is PPO3 for two-word cyclical exchange without parameter channel. PPO1 is used when the application needs read/write of drive parameters at runtime. The 6RA70 typically uses PPO3 or PPO5 depending on configuration.
| PPO Type | PKW Words | PZD Words | Total Words | Typical Use |
|---|---|---|---|---|
| PPO1 | 4 (PKW) | 2 (PZD) | 6 | Parameter channel + STW/HSW/ZSW/HIW |
| PPO3 | 0 | 2 (PZD) | 2 | STW/HSW/ZSW/HIW only, fastest cycle |
| PPO4 | 0 | 6 (PZD) | 6 | Multi-channel setpoint applications |
P927 expects PPO3 (or vice versa), the slave refuses to enter Data Exchange. The PLC will report "Slave diagnostics: configuration error" or "Length specification error" and the CBP LED stays red. The 6RA70 can still work because its PPO type matches its parameters.5.3 I address mapping in the S7 program
For a PPO3 Masterdrive MC at address 6, the inputs and outputs in the STEP 7 symbol table typically appear as:
-
QW 256— STW1 (control word 1) to Masterdrive MC -
QW 258— HSW (main setpoint, N-setpoint) to Masterdrive MC -
IW 256— ZSW1 (status word 1) from Masterdrive MC -
IW 258— HIW (main actual value) from Masterdrive MC
Compare these addresses against the actual MOVE / SFC14 / SFC15 / DPRD_DAT / DPWR_DAT calls in OB1 or OB35. A swapped slave address between the 6RA70 (e.g., address 5) and the Masterdrive MC (e.g., address 6) at this stage is a classic cause of "command sent to wrong drive, drive runs the wrong motion". If addresses are accidentally duplicated in HW Config, the PLC will report a duplicate address at startup.
6. Step 3 — Inspect CBP LED Status and Drive-Side Parameters
6.1 Drive-side Profibus parameters
With DriveMonitor connected to the Masterdrive MC via the serial commissioning interface, navigate to the parameter set and confirm:
| Parameter | Description | Required Value | Symptom if Wrong |
|---|---|---|---|
| P918 | CBP Profibus address | Matches HW Config slave address | Drive ignores all I/O from PLC |
| P927 | Parameterization interface (source of control words) | 1 = CBP, or as configured | Control word never reaches the sequencer |
| P554 | Source of ON/OFF1 command (Bit 0 of STW1) | 3001 = CBP word 1, bit 0 | Drive stays in "Switch-on inhibit" |
| P555 | Source of OFF2 (Bit 1) | 3001 = CBP word 1, bit 1 | Drive coasts to stop (status bit 4 = 1) |
| P556 | Source of OFF3 (Bit 2) | 3001 = CBP word 1, bit 2 | Quick stop active (status bit 5 = 1) |
| P557 | Source of Enable/Inhibit (Bit 3) | 3001 = CBP word 1, bit 3 | Operation inhibited |
| P558 | Source of Enable Ramp Generator (Bit 4) | 3001 = CBP word 1, bit 4 | Ramp generator frozen |
| P559 | Source of Unfreeze Ramp Generator (Bit 5) | 3001 = CBP word 1, bit 5 | Ramp output held |
| P560 | Source of Setpoint Enable (Bit 6) | 3001 = CBP word 1, bit 6 | Setpoint ignored |
| P571 | Source of CW/CCW direction (Bit 11/12) | 3001 or fixed per application | Direction not toggling |
| P572 | Source of fault acknowledge (Bit 7) | 3001 = CBP word 1, bit 7 | Drive cannot reset faults from PLC |
| P590 | Source of PLC control request (Bit 10) | 3001 = CBP word 1, bit 10 | Drive stays in local (PMU) control |
| P443 | Main setpoint source | 5002 = CBP word 2 (HSW) | Drive ignores speed setpoint |
| P60 | Parameter set selection | 8 (parameter menu) | Parameter changes will not save |
6.2 Setpoint routing
Even when control-word routing is correct, the main setpoint must also be wired to the CBP word. If P443 = 0 (analog input) and the analog input is open, the drive will run at 0 Hz and appear "not running". Confirm P443 = 5002 for the standard profile configuration with a CBP2 PZD2 setpoint, or use the profile-specific setpoint P443 = 5005 when following the Profidrive profile mapping.
7. Step 4 — Monitor Control Word and Status Word Live
Use a VAT (Variable Table) in STEP 7 online, or the online monitoring in TIA Portal, to force and observe the four PZD words of the Masterdrive MC. The objective is to confirm that the bytes the PLC sends are actually arriving at the drive and that the drive's response status word reflects the command sequence.
7.1 Reference STW1 sequence
Per the Profidrive profile adopted by Siemens drives (and replicated in the SIMOVERT Masterdrives MC sequencer), a 6RA70 and a Masterdrive MC start command is typically the sequence shown below. Bit numbers are 0-based:
| Step | Hex Value | Binary (Bit 15 ... Bit 0) | State |
|---|---|---|---|
| Initial / Coast | 0x0000 | 0000 0000 0000 0000 | OFF1=0, OFF2=0 |
| OFF2 inactive | 0x0002 | 0000 0000 0000 0010 | Bit 1 set |
| OFF3 inactive | 0x0006 | 0000 0000 0000 0110 | Bits 1,2 set |
| Ready to switch on | 0x0406 | 0000 0100 0000 0110 | Bit 10 set (PLC control) |
| Operation enabled | 0x047F | 0000 0100 0111 1111 | Bits 0,1,2,3,4,5,6,10 |
| Run with setpoint | 0x047F | as above | Speed follows HSW |
| Reverse / CW | 0x0C7F | 0000 1100 0111 1111 | Bit 11 set (CCW) |
7.2 Status word interpretation
With the control word forced to 0x047F, observe the ZSW1 response from the drive. If ZSW1 remains at 0x0000 or 0x0031 ("Switch-on inhibit"), the sequencer has not accepted any of the control bits — almost always a control-word source mismatch (Section 6).
| ZSW1 Hex | Interpretation | Next Check |
|---|---|---|
| 0x0000 | Drive offline / no Data Exchange | Bus, address, CBP LED |
| 0x0031 | Ready to switch on, switch-on inhibit | Check P554–P560 routing |
| 0x0033 | Ready to operate | Bit 0 missing in STW1 |
| 0x0037 | Operation enabled, no fault | Check setpoint routing (P443) |
| 0x0237 | Operation enabled, setpoint-actual deviation | Ramp or load fault, check P588 |
| 0x0F37 | Fault present | Read fault buffer F### |
7.3 PMU observation
The PMU (front-panel display) on a Masterdrive MC shows the active parameter number and value. Cycle to r011 (operating display 1) and r012 for current setpoint/actual in Hz, and to r060 / r065 for active control word and status word bits. This is the fastest method to confirm that the CBP PZD are actually arriving at the drive when you do not have a VAT handy.
8. Step 5 — Common Root Causes Ranked
| # | Root Cause | Detection | Fix |
|---|---|---|---|
| 1 | Control-word source not set to CBP (P554–P560 still on terminals) | ZSW1 stuck at 0x0031, drive ignores STW1 | Set P554–P560, P572, P590 = 3001 |
| 2 | PPO type mismatch between HW Config and drive parameter P927 | Bus fault LED on CBP, "Configuration error" in PLC diag buffer | Align HW Config PPO slot with P927 / drive GSD |
| 3 | Profibus slave address conflict (duplicate with 6RA70) | Both drives intermittent, BF LED on at least one | Set unique P918 on both drives, reboot |
| 4 | Parameter download or factory reset reverted to terminal defaults | Recent commissioning or DCC upload | Re-route control-word sources, save parameter set |
| 5 | Fault still active in drive buffer despite PMU showing none | History buffer shows F-code; OFF1 cannot be issued until cleared | Read fault buffer (r947/r949), clear with STW bit 7 edge |
| 6 | Drive in local mode (PMU control selected) | PMU displays "LOCAL" indicator, control word not effective | Press PMU LOCAL/REMOTE key, or set P072 = 0 (remote) |
| 7 | Main setpoint source not bound to CBP word 2 | Drive runs but at 0 Hz | Set P443 = 5002 |
| 8 | PLC sends wrong polarity setpoint (4000h vs signed) | Direction wrong or stuck at -nmax | Check HSW scaling; use N2/N1 normalization per P601 |
| 9 | Traverse-specific safety interlock missing in drive | Enable bit 3 toggling but no run | Check P575 (enable start), coasting inhibit, safety relay K81 |
| 10 | CBP2 board firmware incompatibility with drive firmware | Diagnostics show "module not supported" | Cross-check CBP2 firmware version vs drive firmware release notes |
9. Step-by-Step Resolution Procedure
-
Open STEP 7 online with the S7-300 CPU. Use VAT1 to force the Masterdrive MC's STW1 to
0x047Fand HSW to0x2000(50% of normalized reference). Read back ZSW1 and HIW. Note whether the CBP LED on the Masterdrive MC turns green and stays green. - Check the PLC diagnostic buffer for entries tagged to the Masterdrive MC slave address. Look for "Slave failure", "Parameterization error", "Configuration error", or "Static diagnostics". Each entry points to a specific cause.
- Connect DriveMonitor to the Masterdrive MC X300 serial port with the SSK2 cable. Go online, select parameter set, and verify parameters P918, P927, P554–P560, P443, P590, P572.
-
Inspect the live control word on the PMU at
r060. If it does not reflect the forced value from the PLC, PZD are not being received; revisit bus and slave address. If it does reflect0x047F, the bus is healthy; the issue is internal to the drive sequencer. -
Inspect live status word at
r065. Ifbit 6 = 1(Switch-on inhibit), one of the OFF conditions is active. Ifbit 0 = 0, STW1 bit 0 (ON) has not been accepted; control-word routing is wrong. -
Read the fault buffer by accessing
r947(active fault),r949(fault history). Common faults:F001overcurrent,F002overvoltage,F006heatsink overtemperature,F011overload,F015motor stalled,F023power section overtemperature,F030commutation,F031encoder. Acknowledge with a 0→1 edge on STW bit 7. - Re-route the control-word source parameters if needed. Save the parameter set with the PMU sequence: P052 = 1 (save in EEPROM), then P053 = exit.
- Re-run the start sequence from the PLC program. Confirm ZSW1 transitions: 0x0031 (Ready to switch on) → 0x0033 (Ready to operate) → 0x0037 (Operation enabled) → 0x0237 (Setpoint reached).
-
Verify rotation direction with a low setpoint (e.g.,
0x0500= 5% of nmax). Use the local emergency stop at the cabinet. Confirm that the traverse motor accelerates smoothly. Reverse test with0x0000setpoint and toggling bit 11 of STW1. - Capture a DriveMonitor trace of P443 input, actual frequency r003, control word r060, status word r065 for 10 seconds at full speed. Archive for warranty / reference.
10. Verification and Commissioning Checks
Before returning the line to production, complete a structured commissioning checklist:
- Steady-state run test: With ZSW1 = 0x0237, hold setpoint for 10 minutes. Confirm no fault escalation, no DC link overcurrent, no thermistor trip.
- Direction reversal test: Alternate STW bit 11 at zero setpoint, verify ZSW reflects "setpoint-actual deviation" only during ramps.
- Stop categories: Issue OFF1 (STW bit 0 = 0), confirm ramp down with P464 deceleration. Issue OFF2 (STW bit 1 = 0), confirm coast stop within P258. Issue OFF3 (STW bit 2 = 0), confirm quick stop with P466. Each must transition ZSW1 to the corresponding state within one cycle.
- Fault injection test: Briefly enable the encoder-fail simulation or motor-stall test (with motor uncoupled if possible). Confirm PLC receives ZSW1 bit 3 = 1 (fault present) and the fault code over PKW or status bits.
- Parameter consistency check: Use DriveMonitor "Compare parameter set" between offline project and drive EEPROM. Resolve any deviation with P052 = 1 to save or with P053 = 4 to restore from drive.
- Documentation: Update the plant asset record with the CBP2 firmware version, drive firmware version, PPO type, Profibus address, and the saved parameter-set checksum.
11. Profibus-Specific Pitfalls with Mixed DC/AC Drive Populations
When the DC 6RA70 and the Masterdrive MC coexist on the same Profibus-DP master, several subtle issues emerge that single-drive installations never expose:
| Pitfall | Symptom | Mitigation |
|---|---|---|
| Different GSD generation per drive family | Configuration accepted for one, rejected for the other | Use vendor-supplied GSD; do not import a third-party copy |
| PKW indexing difference (6RA70 uses IND = 0x00, MC uses 0x80 for parameter) | PKW writes appear to succeed but parameter unchanged | Use the right IND byte for each drive family |
| Bus cycle time mismatch between DP-V0 and DP-V1 slaves | 6RA70 updates normally, MC loses data under heavy load | Use DP-V1 only if both drives support it; otherwise stay DP-V0 |
| Stale parameter upload after drive firmware upgrade | MC stops after restart, 6RA70 OK | Re-upload parameter set with DriveMonitor; EEPROM save |
| PMU LOCAL mode unintentionally left enabled | Drive ignores PLC even with correct STW | Lock P072 (parameter access), set P060 = 8 (parameter menu) |
12. Frequently Asked Questions
Why does the DC 6RA70 run from PLC but the Masterdrive MC AC drive not, on the same Profibus?
The DC 6RA70 default control-word source parameters (P554–P560) are often preconfigured to the CBP channel in factory parameter sets, while the Masterdrive MC (6SE70) defaults to terminal inputs. After a parameter download or factory reset the MC's source parameters revert to terminals, so STW1 bits from the PLC never reach the sequencer. Re-route P554 through P560, P572, and P590 to source 3001 (CBP word 1) and re-save with P052 = 1.
Which PPO type should I select for a Masterdrive MC 6SE70 in STEP 7 HW Config?
For two-word control (STW1 + HSW out, ZSW1 + HIW in) with no parameter channel, choose PPO3. If you also need read/write of drive parameters over Profibus during operation, choose PPO1 (4 PKW + 2 PZD). The PPO selection in HW Config must match the drive's P927 / actual GSD slot, otherwise the slave will not enter Data Exchange and the CBP LED will indicate a configuration error.
How do I check whether the PLC control word is actually arriving at the Masterdrive MC?
Force STW1 to 0x047F in a STEP 7 VAT and read parameter r060 on the PMU. If r060 reflects 0x047F, the CBP is healthy and PZD are received. If r060 stays at 0x0000 or freezes, the slave has not entered Data Exchange — verify the Profibus slave address (P918), CBP LED state, and HW Config PPO slot.
The drive shows no fault on the PMU but ZSW1 bit 3 (Fault present) is set. What now?
The PMU only displays active faults. Read the fault history at r947 (current fault code) and r949 (history). Common codes: F001 overcurrent, F002 overvoltage, F006 heatsink overtemperature, F011 motor overload, F015 stall, F023 power-section overtemperature, F030 commutation, F031 encoder. Acknowledge with a 0→1 edge on STW bit 7 once the root cause is resolved.
Can I acknowledge Masterdrive MC faults from the PLC over Profibus?
Yes. The standard Profidrive acknowledge is a positive edge (0→1) on STW1 bit 7. The drive must have P572 (Acknowledge source) set to 3001 = CBP word 1 for the bit to take effect. After the edge, drive transitions through Switch-on inhibit → Ready to switch on, and ZSW1 bit 3 clears.
Why does the Masterdrive MC spin to -nmax the moment the PLC sends a setpoint?
The main setpoint (HSW) is a 16-bit signed integer normalized against the reference speed defined in P601 (n-reference). The most-significant bit is the sign. If the PLC sends 0x8000 with no offset, the drive interprets it as -nmax. Ensure the HSW range used by the application matches the configured normalization, typically 0x4000 = +nmax for an unsigned bipolar scheme, and that P443 (setpoint source) is bound to CBP word 2 (5002).
Is it safe to download a parameter set to the Masterdrive MC online while the DC 6RA70 is running?
Yes, the Profibus master buffers individual slave parameterization. However, the Masterdrive MC will momentarily drop to "Init" state during parameter re-download and may coast stop. If the drive is part of an interlocked machine, lock the affected area and reduce the risk of unintended motion before initiating an online parameterization.