S7-314C-2DP Profibus: Reading ICP DAS GW-7552 Modbus Data

Overview

This reference walks through a field-proven integration of a Siemens SIMATIC S7-314C-2DP Profibus master with an ICP DAS GW-7552 Profibus-to-Modbus RTU gateway. The gateway polls a 1-channel Modbus RTU thermocouple / RTD module (commonly referred to as the "Modbus 1TE" module, e.g. ICP DAS M-2018 or M-2018C) and exposes the measured temperature as cyclic I/O data on the Profibus slave side. The S7-314C-2DP reads the value, scales it from 0.1 °C to °C, and makes it available to the user program.

The original commissioning reported three issues that this document addresses explicitly:

1. The GSD file imports and the gateway enters RUN, but the user is unsure how to address the temperature word in OB1.
2. The Profibus input address range on the configured slot is limited; values above ~byte 82/83 do not update.
3. The raw value displayed in the watch table is ten times higher than the real temperature (e.g. 23.0 °C shown as 230), requiring explicit scaling.

System Architecture

Three physical segments connect to a single PROFIBUS DP segment terminated at both ends with 220 Ω, 1 W bus terminators (typically the PROFIBUS connector with the integrated switch in the ON position at the physical ends).

Prerequisites

GW-7552 Hardware Configuration

The gateway has three elements that must match the PLC project before any GSD work begins:

1. Profibus slave address (rotary switches MSB/LSB): Range 0–99. The DP master must allow this address; on the S7-300 the default "Reserved address for PROFIBUS master = address 2" still leaves 1, 3–126 free. Set, for example, address 3 (MSB = 0, LSB = 3).
2. Profibus baud rate: Auto-detect up to 12 Mbps. The DP master baud rate is set in TIA Portal under Properties > PROFIBUS address > Transmission rate. Both sides must converge; if the master is set to 1.5 Mbps and the slave supports it, link quality improves with shielded, terminated cable.
3. Modbus RTU side: Default 9600 bps, 8 data bits, no parity, 1 stop bit (9600-8N1). Configure with the ICP DAS GW-7552 Utility over the device micro-USB. Set the Modbus polling table: Function 04 (Read Input Registers), slave address 1, starting register 0x0001, quantity 1. This is where the gateway picks up the scaled temperature word.

Installing the GSD File in TIA Portal

1. Open the TIA Portal project and select the S7-300 station in the project tree.
2. Open Devices & Networks and double-click the CPU.
3. Switch to Device View. Click on the DP interface (port X2) of the CPU.
4. In the Hardware catalog pane on the right, click Options > Manage general station description files (GSD).
5. Browse to the ICP0AAA0.GSD file and check the folder containing the bitmap. Confirm the import.
6. After the import succeeds, the catalog entry appears under Other field devices > PROFIBUS DP > Gateway > ICP DAS > GW-7552.
7. Drag the gateway to the PROFIBUS DP master system graphic. TIA Portal prompts for a slave address — use the same address set on the rotary switches (3 in this example).

Slot Configuration and I/O Mapping

The GW-7552 GSD file ships a fixed modular slot map. The default module used to read a 16-bit integer is module index 1 ("8 Byte In / 0 Byte Out" or similar). The configured slot produces a contiguous block of input bytes mapped to the S7 process-image input area (PI).

Why addresses > ~84 do not work on this CPU

The S7-314C-2DP's process-image input partition for the integrated DP master has historically been allocated byte addresses 0–127. In some firmware revisions of the CPU, the configured start address for newly added DP slaves defaults to the next free pair in the high half of the PI range. The driver loaders in certain TIA Portal builds have exhibited a defect where the master only refreshes input bytes whose offset is < 84 within the process image. The symptom reported in the original case was:

"Driver had problems with this high addresses. After changing word input address from bytes 256 and 257 to smaller values — in my case 82 and 83 — the value updated."

To avoid wasting time on the same defect:

1. In TIA Portal, click the DP slave > Properties > I/O addresses of the slot.
2. Override the default start address. Pick the next free pair below 84 (e.g. PIW 82, PIW 84, PIW 86). Names like IW_Temp_Raw are useful for diagnostics.
3. Compile (Hardware > Compile) and download the hardware configuration only — the program is unaffected.

Confirm by re-reading Online & Diagnostics > Diagnostic status on the slave: the Slave is exchanging data LED must be green before continuing.

PLC Programming — Reading the Temperature

STL snippet (works in both Simatic Manager and TIA Portal STL view)

// Read the raw 0.1 °C INT from PIW 82
      L     PIW 82            // load 16-bit input word
      ITD                     // convert INT to DINT (sign-extend)
      DTR                     // convert DINT to REAL
      L     1.000000e+001     // load divisor
      /R                      // REAL division: temp_C := raw / 10.0
      T     MD 100            // store real to flag area
      RND                    // optional: convert to engineering integer
      T     MW 104            // scaled value, e.g. 230 for 23.0 °C

This block matches the community suggestion in spirit but makes the scaling explicit. The original guidance was:

      L     PID 256           // load 32-bit input area
      T     MD 100            // transfer to flag area

Note that PID reads a 32-bit double-word, while the source word is only 16 bits. If the upstream register width is 16 bits, the high word read into the DINT contains the next input word — usually status, not temperature. Prefer PIW plus explicit ITD sign-extension for INT16 sources.

SCL block in TIA Portal

FUNCTION_BLOCK FB1000 "ModbusTempScale"
VAR
  RawTemp     : INT;     // from PIW 82, 0.1 °C units
  EngTempReal : REAL;    // engineering value, °C
  EngTempInt  : INT;     // rounded, °C
END_VAR
BEGIN
  RawTemp := WORD_TO_INT("IW_Temp_Raw");
  EngTempReal := INT_TO_REAL(RawTemp) / 10.0;
  EngTempInt  := REAL_TO_INT(EngTempReal);
  // Latch outputs to global data block for HMI / recipe use
  "dbTemp".Raw       := RawTemp;
  "dbTemp".Celsius   := EngTempReal;
  "dbTemp".CelsiusR  := EngTempInt;
END_FUNCTION_BLOCK

Call FB1000 once per OB1 cycle. With a 16-bit INT source the maximum representable reading is ±3276.7 °C, comfortably above any practical 1TE module's full-scale range (M-2018 covers -100 °C to +1370 °C, type K).

Ladder Logic Equivalent (Step 7 V5 / TIA Portal LAD)

NETWORK 1  -- Read raw temperature word
      PIW 82    ----[ MOVE ]----    MW 100    (raw INT 0.1 °C)

NETWORK 2  -- Convert INT to REAL
      MW 100    ----[ ITD ]-----    MD 102    (DINT)
      MD 102    ----[ DTR ]-----    MD 106    (REAL)

NETWORK 3  -- Divide by 10.0
      MD 106    ----[ /R   ]----   MD 114    (REAL °C)
      MD 114    ----[ ROUND ]---   MW 120    (INT °C)

Data Scaling — Why the Reading Is Ten Times High

Modbus temperature modules standardise on a 16-bit signed integer where 1 LSB = 0.1 °C. The raw register content of the M-2018 with a 23.0 °C input is therefore 230. The same convention is used by ICP DAS M-2000 series, M-2018, M-2018C, M-2019, M-2024, M-2026, M-2028, and most third-party units. The register map for the M-2018 is:

Therefore, if the watch table shows 230 at 23.0 °C, the math is correct, the data is correct, and only the engineering-units step is missing. Division by 10 is the standard practice. The OPC / HMI layer can either subscribe to the scaled REAL value in the data block or perform the same divide internally.

Verification with Watch Table

1. Open Online & Diagnostics > Watch tables in TIA Portal. Create a new watch table named wtModbus.
2. Add the following entries: IW_Temp_Raw (PIW 82), dbTemp.Raw, dbTemp.Celsius, dbTemp.CelsiusR.
3. Toggle the gateway power briefly; the watch table should show the raw word following the actual temperature within one Profibus cycle (typ. 1–10 ms at 1.5 Mbps).
4. Heat the TC junction with a hot air gun or apply a 100 Ω precision resistor at the input for an RTD module. Confirm that the reading tracks the source within the module's specified accuracy (M-2018: ±0.2 °C + 0.2 % of reading, type K).

Diagnostics and Troubleshooting Matrix

Edge Cases and Field-Proven Caveats

• Negative temperatures. A reading of –3276.7 °C corresponds to INT16 = –32767. Verify that the configured PIW start address lands on a word boundary and that the partner word is not another Modbus register (e.g. status). When the I/O pair is misaligned, the high byte is the next register's low byte, corrupting the sign.
• Endianness. Modbus RTU is big-endian. The GW-7552 swaps to little-endian (Intel) on the Profibus side to match S7 PIW. If the reading is always 256× the expected value, the GSD slot was configured in byte pairs the wrong way round — typically caused by selecting a 1-byte module when the upstream register is 16 bits. Re-select the 2-byte input module.
• Watchdog. The S7-300 CPU raises SF if the Profibus slave goes into clear state. With the GW-7552 this happens when Modbus retries are exhausted. The CPU fault buffer records "DP slave failure" plus the configured diagnosis. Add a 100 ms OB82 time-stamping routine so faults are logged in chronological order.
• Multiple Modbus slaves. The GW-7552 supports a polling table of up to 12 Modbus commands. Each command must be placed in a separate GSD module, in the same DP slave, to keep the I/O map contiguous. Plan the I/O address plan before importing the GSD to avoid hand-renumbering every address.
• Redundancy. The S7-314C-2DP does not support Profibus HSR / MRP. For redundant designs, a second GW-7552 on a different DP master is the only path; the S7-300 family does not include a redundant DP master.
• Firmware mismatch. If you replace a GW-7552 with one of a different firmware revision, re-import the matching GSD file. Older gateway firmware (≤ 1.0) uses a 4-byte-in / 4-byte-out module, while firmware ≥ 1.2 uses 2-byte modules per command. Mixing them causes "module does not match GSD" errors during DP parameterisation.
• Compliance with EMC. Profibus cable must be run in a separate tray from VFD output cables, with at least 200 mm clearance. If the cabinet is shared, use a grounded separator plate. This is enforced by the IEC 61784-1 EMC guidance for CP 3/2 class installations.

Performance Notes

At 1.5 Mbps Profibus with a single GW-7552 in the segment, the typical end-to-end latency from a TC event on the 1TE module to the S7 PIW is:

• Modbus RTU poll: 0.5 ms (8 bytes at 9600 bps, plus inter-frame 3.5 char times).
• Gateway buffering: 0.4–1.0 ms (FIFO 1 cycle).
• Profibus cycle: 1–5 ms (depends on bus configuration and Ti/To times).
• S7-300 OB1 update: ≤ 10 ms for typical programs.

Worst-case end-to-end: ~20 ms. For 99 % of process control loops (heating, slow ramp, OEE display) this is irrelevant. For a 50 ms motion loop, do not use the GW-7552 path — wire the thermocouple to a TM131 or use an SM 331 directly.

Reference Procedure Summary

1. Set the GW-7552 Profibus slave address (rotary switches) and Modbus polling table (utility).
2. Install the GSD file in TIA Portal; drag the gateway to the DP master system.
3. Select the 2-byte input module that matches the polled Modbus register (0x0001).
4. Override the start address to PIW < 84 to avoid the master driver defect.
5. Add a data block with three tags (Raw, Celsius, CelsiusR) and an FB to scale the reading.
6. Call the FB from OB1, place on watch table, verify scaling and sign.