Resolving Siemens PROFIBUS Diagnostic Repeater Time Stamp Errors

The Siemens PROFIBUS Diagnostic Repeater (6ES7 972-0AB01-0XA0) maintains an internal real-time clock used to timestamp diagnostic events, statistical counters, and topology records. After power-up, the internal clock defaults to DT#1994-01-01-00:00:00:000 and must be synchronized from the CPU. When time synchronization fails, the user program receives a frozen 1994 timestamp from RD_REC / RDREC calls and the WR_REC / WRREC call returns a Siemens SFC error code, most commonly W#16#8090 (specified logical base address invalid). This article documents the root cause, the correct record layout, and the verified TIA Portal configuration that eliminates the fault.

1. Problem Description

When reading diagnostic records from the PROFIBUS Diagnostic Repeater into a SIMATIC S7 PLC, all timestamps in the returned buffers display the value 01/01/1994 00:00:00.000. The same frozen value persists across power cycles, regardless of the current CPU clock time.

Typical symptoms observed in user programs:

• SFC 59 "RD_REC" or SFB 52 "RDREC" returns W#16#0000 (no error) on the RET_VAL, but the timestamp bytes inside the returned record remain at the 1994 baseline.
• SFC 58 "WR_REC" or SFB 53 "WRREC" returns W#16#8090 when writing record 60 (Time). The error indicates that there is no assignment in SDB1/SDB2x or that no base address has been configured.
• Custom time-set function blocks migrated from STEP 7 V5.5 to TIA Portal V13 (or later) compile cleanly, but the BUSY output latches TRUE and never returns to IDLE state.

The diagnostic address used to read the device (typical value: 8186) is by default the only configured base. This is the address that the application passes to LADDR on the WRREC block.

2. Affected Hardware and Firmware

The diagnostics repeater is a PROFIBUS segment device that physically monitors the copper bus lines during online operation and reports line errors back to the DP master. It is a pure RS-485 copper repeater; it does not act on fiber or PA segments. See the PROFIBUS Product Finder entry for Diagnostic Repeater for the canonical description.

3. Root Cause Analysis

There are three independent root causes that produce the symptoms in section 1. All three are configuration issues; no firmware bug is involved.

3.1 Cause A — "Time Synchronisation" option is ON in TIA Portal

The TIA Portal device configuration exposes a Time Synchronisation checkbox on the Diagnostic Repeater object. When this option is enabled, the engineering tool generates a slot-1 time-master assignment to the repeater, but no equivalent synchronization frame is generated for the application-level WRREC path. The result is that the PLC's WRREC call against the diagnostic address never receives a positive acknowledgement, the BUSY flag remains latched, and RET_VAL reports a permanent error. The DT_TO_DR Siemens-supplied block and any user block based on it inherit this same fault.

Verified corrective action: set Time Synchronisation = OFF in the device properties of the Diagnostic Repeater. After the change is compiled and downloaded, both the standard Siemens block and the user's WRREC logic complete without residual BUSY.

3.2 Cause B — Diagnostic address only, no I/O base assigned

The Diagnostic Repeater is a passive diagnostic device. The default hardware configuration assigns only a diagnostic address (used by the CPU to receive diagnostic interrupts). The LADDR input of WR_REC / WRREC must reference the slot/diagnostic address of the device. If TIA or STEP 7 has stripped or never created the address mapping for record access, the SFC returns W#16#8090 "Specified logical base address invalid: there is no assignment in SDB1/SDB2x or there is no base address".

This is the exact error reported in field reports: the application uses LADDR = 8186 (the diagnostic address) and receives 8090.

3.3 Cause C — Time never written after power-up

If the user program only reads records and never writes record 60 (Time), the repeater simply keeps the 1994 default. The 1994 timestamp is a documented, expected behavior at power-on, not a fault. The frozen 1994 value is a symptom of missing time synchronization, not a defect of the repeater.

4. S7 DATE_AND_TIME Layout

The repeater stores time in the standard S7 8-byte BCD DATE_AND_TIME structure. The byte layout, indexed from the first byte of the record payload, is:

The repeater will reject any year value outside 1994–2089; the boundary DT#2089-12-31-23:59:59.999 is the maximum representable timestamp.

5. Record and Function Block Reference

For the diagnostic repeater with MLFB 6ES7 972-0AB01-0XA0, the Time record index is 60. The Siemens official reference is the manual entry SIMATIC Diagnostic Repeater for PROFIBUS-DP (entry ID 7915183).

6. Solution — Step-by-Step

6.1 Prerequisites

• Engineering project open in TIA Portal (V13 SP1 or later, recommended V16+).
• Diagnostic Repeater (6ES7 972-0AB01-0XA0) inserted under the DP master system.
• Diagnostic address assigned (the value visible in device properties, e.g. 8186).
• CPU clock correctly set (visible in PLC online diagnostics).

6.2 Procedure

1. Open the device view of the PROFIBUS Diagnostic Repeater in TIA Portal.
2. Open Properties > Time Synchronisation.
3. Set Time Synchronisation = OFF (this is the corrective action that resolves the latched BUSY state of the Siemens DT_TO_DR block and the WRREC error 8090).
   Critical: If a time-master role is required at network level, configure it on the DP master itself, not on the diagnostic repeater. The repeater is a passive diagnostic device and should not be configured as a time master.
4. Compile the hardware configuration and download to the CPU.
5. Add or restore the time-set function block. The Siemens reference implementation is described in Diagnostics repeater: Setting the time (entry ID 15013976). The two function blocks of interest are DT_FROM_CPU (reads the CPU clock with SFC 1 / READ_CLK) and DT_TO_DR (writes the result to the repeater with SFC 58 / WR_REC or SFB 53 / WRREC).
6. Call the time-set block cyclically (typical interval: every 60 s). A single set at startup is not sufficient because the repeater's internal oscillator drifts; the manual recommends regular resynchronization.
7. After the time is successfully written, the RDREC call to record 60 returns the current PLC time. The frozen 1994 timestamp disappears from statistics, topology, and diagnostic event records.

6.3 Sample SCL implementation (S7-1500 / TIA Portal)

// Read CPU clock into the S7 DATE_AND_TIME buffer
#rdRetVal := RD_SYS_T(OUT => #cpuTime);

IF #rdRetVal = 0 THEN
    // Issue write request to the diagnostic repeater
    #wrBusy   := TRUE;
    #wrError  := FALSE;
    #wrRetVal := WRREC(
        REQ     := #setTrigger AND NOT #wrBusy,
        ID      := #drDiagId,           // e.g. 8186 (DWORD cast of diagnostic address)
        INDEX   := 60,                  // Time record
        LEN     := 8,                   // DATE_AND_TIME length
        DATA    := #cpuTime,            // 8-byte BCD
        DONE    => #wrDone,
        BUSY    => #wrBusy,
        ERROR   => #wrError,
        STATUS  => #wrStatus);
    IF #wrDone OR #wrError THEN
        #wrBusy := FALSE;
    END_IF;
END_IF;

The above skeleton mirrors the behavior of the Siemens DT_TO_DR block and is suitable for S7-300, S7-400, S7-1200, and S7-1500 targets. For the S7-300/400, substitute SFC 1 for RD_SYS_T and SFB 53 for WRREC.

7. Verification

1. Place the CPU online in TIA Portal and watch the WRREC.STATUS word. A healthy write returns W#16#0000 on the next call cycle (DONE=TRUE, BUSY=FALSE).
2. Trigger an RDREC call against record 60 (Time) and inspect the 8-byte payload. The bytes must reflect the current CPU time, not 1994-01-01.
3. Force a topology change (unplug a segment) and read record 1 (Topology) and record 3 (Diagnostic). The timestamp on the new event must show the current time.
4. Power-cycle the repeater segment. The clock should return to 1994-01-01 immediately, then jump to the current CPU time within one cycle of the time-set block. If it stays at 1994 after a full minute, the time-set block is not being called or is still returning an error.
5. Confirm in the device properties that Time Synchronisation is still OFF after every project re-compile, as a re-import from a master project can revert it.

8. WR_REC / WRREC Error Code Matrix

If the time-set function block returns a permanent BUSY=TRUE with no DONE transition, this is a behavior caused by the Time Synchronisation setting interacting with TIA Portal's slot-1 configuration. Set Time Synchronisation to OFF.

9. Diagnostic Repeater Network Topology

The diagnostic repeater is wired inline between two PROFIBUS segments and is transparent to DP slaves and masters at the protocol level. Each repeater occupies one DP slave address on the segment, and up to 9 repeaters may be cascaded per PROFIBUS DP master system. The internal segment monitor records topology and statistics for both of its ports independently.

10. Field-Proven Caveats

• Re-import resets Time Synchronisation. When a project is re-imported from a TIA master project, the Time Synchronisation setting can revert to ON. Verify the setting after every import cycle.
• Migration blocks latch BUSY. The Siemens time-set blocks written for STEP 7 V5.5 work as-is. Migrated copies in TIA Portal V13 compile cleanly but the BUSY output latches if Time Synchronisation is ON. Use the post-migration block with the Time Synchronisation setting corrected, or replace the migrated code with a fresh TIA Portal implementation of RD_SYS_T + WRREC as shown in section 6.3.
• Do not use the repeater as a time master. The Diagnostic Repeater does not synchronize the bus; it only stores an internal clock. The CPU must remain the time source.
• Time drift. The repeater's internal clock drifts slowly. Siemens recommends a cyclic resync interval. A 60-second interval is conservative; 10 seconds is allowed if the PLC has spare capacity.
• Year wrap. All timestamps are limited to 1994–2089. Do not assume the timestamps survive past 2089-12-31.
• STEP 7 V5.5 vs. TIA Portal API difference. In STEP 7 V5.5, SFC 58 / SFC 59 are used. In TIA Portal, the standard functions are WRREC and RDREC (technically SFB 53 / SFB 52 on S7-300/400 and integrated instructions on S7-1200/1500). The record index, length, and behavior are identical.

11. Related Siemens Documentation

• SIMATIC Diagnostic Repeater for PROFIBUS-DP — manual (entry 7915183)
• Diagnostic repeater: Setting the time — function block (entry 15013976)
• Basic information on the diagnostic repeater — TIA Portal V20 docs
• Diagnostic Repeater — PROFIBUS Product Finder

12. FAQ