1. Problem Description
A Profibus DP network connecting a Siemens SIMATIC S7-315-2DP/PN CPU to a Danfoss VLT FC 300 drive develops an intermittent bus fault as soon as the drive is commanded to run. The configuration downloads to the PLC without error, the FC 300 acknowledges Profibus synchronisation, and the first cyclic data exchange appears healthy. The moment the user writes the start control word (CTW) into the drive's PZD input area, two events occur simultaneously:
- The FC 300 front display shows Alarm W34 ("No Profibus communication").
- The S7-300 diagnostic buffer (open in STEP 7 via PLC → Module Information → Diagnostic Buffer) appends the entries "Distributed I/O: station failure" and, a few hundred milliseconds later, "Distributed I/O: station return".
The bus LED on the Danfoss Profibus option then re-illuminates, the warning W34 self-clears, and PLC/drive communication is re-established. As soon as the CTW is written back to a stop value and the motor has decelerated to zero speed, the diagnostic buffer appends the same pair of entries again. A critical field observation is reported in the troubleshooting session: disconnecting the motor output conductors from the drive terminals U/V/W makes the bus fault vanish instantly, even while the drive is still commanded to run. This single test narrows the root cause to load-side electromagnetic interference rather than configuration, addressing, or GSD issues.
2. Affected System Components
| Component | Model / Designation | Role in the Fault |
|---|---|---|
| PLC CPU | Siemens SIMATIC S7-315-2DP/PN (6ES7 315-2EHxx or -2AHxx) | Class 1 Profibus DP master, generates the cyclic STW/CTW to the drive. |
| VFD | Danfoss VLT FC 300 with MCA 101 Profibus option | Profibus slave, displays W34, executes speed/torque commands. |
| Profibus cable | 2-core shielded twisted pair, 150 Ω characteristic impedance, violet sheath | Carries RS-485 differential signal between CPU and drive. |
| Connectors | Siemens 6GK1 500-0FC10 or compatible 9-pin D-sub with terminating switch | Provide bus termination (ON only at first and last node) and shield bonding. |
| Motor cable | 3-phase + PE from FC 300 to motor | Common-mode noise source. Confirmed root cause when disconnecting it clears the fault. |
3. Diagnostic Buffer Interpretation
The two S7-300 diagnostic events are the master firmware's response to a complete loss of Profibus frame acknowledgement from the slave for at least one full watchdog interval. The events are not configuration errors — they are runtime faults. The exact event IDs and meaning are:
| S7 Event ID | Text | Meaning |
|---|---|---|
| 0x0E08 / 0xE08 | Distributed I/O: station failure | The DP master polled the slave address but received no valid response, or the response CRC failed. Fired after the configured slot time × retries elapses. |
| 0x0E08 / 0xFF | Distributed I/O: station return | The slave has re-acknowledged within the next poll cycle. Generated automatically on first valid response. |
Because the two events appear in immediate succession, the slave is not permanently down — it is being knocked off the bus for tens of milliseconds during the load transition. That rules out a duplicate address, GSD parameter mismatch, or watchdog configuration error (those would generate persistent station-failure entries, not a paired failure/return).
4. W34 Alarm on the Danfoss FC 300
The Danfoss FC 300 Profibus manual maps W34 to a "No communication with the drive" warning. It is raised when the drive's Profibus option detects that no valid DP telegram has been received for longer than the configured telegram failure time (parameter 8-07). The warning is non-latching by default; once telegrams resume it self-clears. Two key W34-related parameters on the FC 300 are:
| Parameter | Default | Purpose |
|---|---|---|
| 8-07 — Telegram Failure Timeout | 1 s | Time without valid telegram before W34 is raised. Increasing it suppresses transient warnings but does not fix the underlying cause. |
| 8-04 — Control Word Timeout Function | Off | Optional action (stop, coast, ramp) executed on timeout. Useful as a safe-state reaction. |
5. Root Cause Analysis: Motor-Load-Coupled Bus Fault
The decisive field test is: "when I pull out the motor output of the inverter, the error of PLC disappears instantly." With the configuration, cable type, address, and connector hardware all already ruled out, this is the textbook signature of common-mode conducted and radiated noise from the inverter's output stage. The mechanism is:
- The drive's IGBT bridge switches at 2–8 kHz with sub-microsecond edges, producing high dV/dt at the motor terminals (typically 3–8 kV/µs).
- The cable-to-motor parasitic capacitance and bearing/capacitive coupling to ground force a high-frequency common-mode current back through the PE conductor and the cable shield.
- Part of that common-mode current flows onto the Profibus cable shield, especially if both shields share the same backplane ground path or run in parallel trays.
- The common-mode voltage shifts the Profibus reference ground above the receiver's common-mode input range (Siemens Profibus transceivers tolerate typically ±7 V on the bus pins), corrupting one or two frames and triggering the station-failure/return pair.
6. Profibus Physical Layer Verification
Before changing the program, perform the following field checks. None of these require STEP 7 modifications.
- Segment voltage & termination. With the bus running, measure between pins 5 (GND) and 6 (VP, +5 V) at the master and the drive connector. A healthy bus reads between 4.75 V and 5.25 V DC. Voltage below 4.5 V indicates too many terminations or a shorted stub.
- Terminator count. Exactly two terminators must be ON in any single segment, at the first and last physical node. The terminator is the built-in 220 Ω + 390 Ω resistor network inside the D-sub connector, activated by the slide switch. A drawing of the two-termination rule is shown below.
Two-termination rule: ON at first and last physical node, OFF in between.
- Shield bonding. The Profibus cable shield must be clamped 360° at every connector with the metal strain-relief saddle in contact with the shield, not the drain wire alone. Lift the shield only at one end (the master) if a low-impedance ground path is uncertain; otherwise bond at both ends.
- Trunk length. At 1.5 Mbit/s the maximum trunk length is 200 m. A 2 m segment like the one described here is well within spec, so distance is not the cause.
- Connector pin check. Pins 3 (B-line) and 8 (A-line) on the 9-pin D-sub must show clean ±1 V differential eye; pins 5 (DGND) and 6 (VP) the 5 V supply. A bent pin is a frequent commissioning defect.
7. PPO Type and FC Profile Configuration
Danfoss FC 300 drives communicate over Profibus with Parameter Process Data Objects (PPO). PPO types 1, 2, 5, and 6 are the standard drive profiles. PPO 1 is the most common and provides:
| Word | Master → Drive (PZD) | Drive → Master (PZD) |
|---|---|---|
| 0 | CTW (Control Word) | STW (Status Word) |
| 1 | MRV (Main Reference Value, %) | MAV (Main Actual Value, %) |
Confirm the following inside HW Config / STEP 7:
- Slave GSD file: Danfoss FC 300 ships with GSD file DAN_0F70.GSD (or equivalent — check the MCA 101 option's manual for the exact revision). Using a generic "VLT5000" or "FC300PROF" GSD on the wrong firmware revision can produce the symptom where communication starts and then drops on CTW activity.
- Selected PPO type: must match the FC 300's parameter 9-15 (PCD Config Write) layout. If 9-15 is left at default, PPO 1 is recommended.
- I/O length in HW Config: 4 words in / 4 words out for PPO 1 (or 12/12 for PPO 5, etc.). Mismatches cause one-shot aborts, but typically a configuration error, not a runtime drop.
8. CTW and STW Word Mapping (Danfoss FC Profile)
The values reported in the discussion, 0x047C for start and 0x043C for stop, are the canonical Danfoss FC profile control words. Verify that the PLC writes them to the correct PZD word offset of the slave's input area.
| CTW Value | Bit Pattern | Profile Function |
|---|---|---|
| 0x047C | 0000 0100 0111 1100 | Start with the value in MRV as the speed reference. Activates ramp, enables output, releases brake. |
| 0x043C | 0000 0100 0011 1100 | Stop ramp. Bit 6 (Ramp stop) cleared, bit 0 (Start) still set, so a subsequent 0x047C resumes without an OFF1 sequence. |
| 0x0477 | 0000 0100 0111 0111 | Quick stop / coast to zero (Bit 4 = OFF2 cleared, Bit 1 = Coast stop asserted). |
| 0x0400 | 0000 0100 0000 0000 | Hold reference, drive remains enabled but does not run. |
If the PLC is sending the right CTW to the wrong offset, the drive will read 0x0000, interpret that as "OFF1," and the motor will not start. That would not, however, generate W34 — so the bus fault is independent of the CTW value itself; the CTW simply happens to be the action that turns the motor (and therefore the noise) on.
9. Step-by-Step Resolution Procedure
Follow these steps in order. Each step should be verified before continuing.
- Force a single-direction test. Disconnect the motor leads from the FC 300 terminals U, V, W. Run the program with 0x047C. If the bus fault no longer appears, the diagnosis of output-side noise is confirmed. Reconnect only after the next steps.
- Inspect the motor cable. Use a shielded, symmetric 3-phase cable (e.g. CY-JZ or a screened VFD cable with 100% braid coverage). Confirm the shield is bonded 360° to the EMC gland at both the drive and the motor terminal box. A drain wire floating at one end is a frequent offender.
- Increase the physical separation. The motor cable and the Profibus cable must follow a separate routing path with at least 200 mm continuous clearance and never share the same ladder/tray. Crossings must be at 90°. The 2 m distance is short enough that any capacitive coupling at low impedance is significant.
- Install a VFD output filter. Add a Danfoss dU/dt filter (e.g. VLT MCC 101 or MCC 201 sine-wave filter) close to the drive output. This reduces the dV/dt and high-frequency common-mode content by 5–10× and is the single most effective cure when motor cable is short.
- Add a common-mode EMC kit. On the FC 300, install the manufacturer-recommended EMC bracket kit and ensure the PE conductor returns to the drive's PE terminal through the shortest possible path, not through the backplate.
- Insert a Profibus repeater or fibre-optic link. As a final hardening step, isolate the drive's Profibus node with a repeater (Siemens 6GK1 500-0AA00) or convert to fibre at the drive side. This breaks the galvanic common-mode path between the PLC and the drive, eliminating the coupling entirely.
- Reconnect the motor and re-test. With the EMC and routing corrections in place, reconnect the motor leads. Cycle the drive from stop to several reference speeds. Monitor the PLC diagnostic buffer (open the buffer view and click Update after each run) — the failure/return pair should be gone.
10. Verification Tests
| Test | Procedure | Pass Criterion |
|---|---|---|
| Diagnostic buffer cleanliness | Run 50 start/stop cycles with 0x047C/0x043C at 0%, 50%, and 100% reference. | No new "station failure" entries appear. |
| Bus voltage | Measure pins 5–6 on the FC 300 connector under full load. | DC bus voltage stays in 4.75–5.25 V range. |
| Differential eye | Use a Profibus tester (e.g. Softing BC-700-PB) to capture the signal. | Eye height > 0.8 V, eye width > 50% of bit time, no errored frames over 1 min. |
| W34 status | FC 300 parameter 16-90 (Alarm Word) at end of test. | Bit for W34 remains 0 throughout the run. |
| Drive response | PLC reads back MAV (Main Actual Value) and compares with MRV setpoint. | MAV tracks MRV with < 1% steady-state error. |
11. Preventive Measures for New Installations
- Specify a screened motor cable as part of the panel build, never a generic 4-core PVC cable.
- Add a 200 mm cable routing rule to the cabinet drawing for the Profibus and motor cables.
- For VFD-to-motor distances under 5 m, always include a dU/dt or sine-wave output filter in the BOM.
- For sites with multiple VFDs on a shared Profibus segment, plan for a Profibus repeater at the first drive and convert the segment to fibre for runs above 50 m.
- During commissioning, run a "motor-cable-disconnect" sanity test on every new VFD/Profibus pairing. It costs two minutes and immediately catches the issue documented in this article.
12. Escalation Path if the Fault Persists
- Replace the FC 300 MCA 101 Profibus option card to rule out an internal option-card fault.
- Verify the PLC's Profibus interface hardware (the DP port on the CPU itself).
- Capture a Profibus frame trace with a Softing or Intrelix analyser and look for short bursts of corrupted frames that coincide with the motor current waveform (a spectrum analyzer on the Profibus shield will show the IGBT switching harmonics if the diagnosis is correct).
- As a last resort, ground the Profibus shield only at the master and float it at the drive side — this breaks the common-mode current loop, but it must be evaluated against the site's EMC policy.
What does W34 on the Danfoss FC 300 mean?
W34 is the "No Profibus communication" warning. It is raised when the MCA 101 option detects that no valid DP telegram has been received for longer than parameter 8-07 (default 1 s). It is a warning, not a trip, and clears automatically once telegrams resume.
Why does the bus fault appear only when the motor is running?
Because the common-mode noise that disturbs the Profibus frame is generated by the drive's output IGBT stage switching into the motor cable. With no motor connected (or at standstill with no current), the noise source is silent and the bus is clean. The CTW start command is the trigger only because it energises the output stage.
Are the CTW values 0x047C and 0x043C correct for the Danfoss FC profile?
Yes. 0x047C is "Start with reference" and 0x043C is "Stop ramp" in the Danfoss FC profile. They must be written to the first PZD input word (PZD1) of the slave, in the I/O address area assigned in HW Config.
Can increasing parameter 8-07 suppress the warning permanently?
It can hide the symptom by raising the timeout, but the underlying noise problem remains. Use 8-07 only as a temporary diagnostic aid, not as a fix. The recommended cure is an output filter and proper cable routing.
Why do the diagnostic buffer entries appear in a paired failure/return sequence?
Because the slave drops off the bus for tens of milliseconds and re-acquires within the same poll cycle. S7-300 firmware logs both transitions. Persistent station failures (no "return" entry) would point to a configuration or hardware problem; a paired entry points to a transient bus-quality issue, consistent with EMC.