Selecting an S7-1200 for 90 Digital Inputs: CPU 1214 and SM 1221

System Overview and I/O Budget

The target installation aggregates status data from 30 distributed microcontrollers (µCs) into a single cabinet-mounted PLC for centralized visualization through a webserver. Each µC exposes three discrete signals, so the total discrete input count is 30 × 3 = 90 digital inputs. The cabinet sits approximately 100 m from the nearest µC, with a routed Ethernet internet connection present inside the cabinet. The PLC must (1) read the 90 inputs at a cycle rate that meets the supervisory requirement, (2) serve the live input state on standard HTTP/HTTPS, and (3) be addressable remotely for engineering or monitoring from outside the local network.

This reference walks through the full component selection, wiring, network, and commissioning process. It targets the SIMATIC S7-1200 platform, which provides onboard DI, signal module (SM) expansion, an integrated webserver, and a TIA Portal programming environment. All part numbers and firmware assumptions match the published Siemens catalog state (S7-1200 firmware V4.x, TIA Portal V13 SP1 minimum, V16 or V17 recommended for long-term support). Documentation is on the Siemens Industry Online Support portal and the S7-1200 product page.

Begin with the deterministic input count: N = 30 µCs × 3 signals/µC = 90 DI. Apply a 5–10% margin for spares, future expansion, and diagnostic re-purposing. The most cost-effective configuration that absorbs the 90 DI plus margin is the SIMATIC S7-1200 CPU 1214C (14 onboard 24 V DC DI) plus five SM 1221 modules (16 × 24 V DC DI each), giving 14 + (5 × 16) = 94 DI, four channels of headroom above the 90 required.

CPU Selection: SIMATIC S7-1200 CPU 1214C

The CPU 1214C is the smallest S7-1200 that comfortably supports the required expansion while leaving program, webserver, and PROFINET resources available. The relevant catalog numbers and key specs:

For a pure aggregation/visualization node the DC/DC/DC variant (6ES7214-1AG40-0XB0) is recommended. Its 24 V DC DI share the same 1M/2M common reference as the SM 1221 inputs, simplifying field wiring and avoiding ground-loop ambiguity. The relay variants are appropriate when the system also drives loads that need dry contacts. All variants support the integrated PROFINET interface (1 × RJ45, 10/100 Mbit/s), the integrated webserver (firmware V4.0 and later), and up to 8 SMs on the right-side expansion bus.

Each CPU 1214C accepts up to 8 signal modules, plus additional communication processors (CM 1241 for RS-232/485, CP 1243-1 for cellular) and a battery board (BB1297) for RTC backup. Five SM 1221 modules leave three expansion slots free for future SMs, an additional CM, or a second PROFINET port (CPU 1215C and higher provide 2 × PROFINET natively). See the SIMATIC S7-1200 product page for the published maximums and operating temperature limits: 0 °C to 55 °C horizontal mounting, 0 °C to 45 °C vertical mounting, 5–95% non-condensing humidity, 795 hPa to 1080 hPa pressure.

Digital Input Expansion: SM 1221 Modules and Cabinet Footprint

The SM 1221 digital input modules are available in three point counts. For this application the 16-point, 24 V DC sink/source module is the right match:

Five SM 1221 6ES7221-1BH32-0XB0 modules provide 5 × 16 = 80 DI, and the CPU 1214C provides 14 onboard DI, totaling 94 DI (4 spare channels). The 70 mm width per 16-point module gives a manageable cabinet footprint. SM 1221 modules install to the right of the CPU on the same DIN rail; the bus connector is pre-fitted and self-connects when the modules are clipped together.

The hardware width stack is:

100 m Field Wiring Considerations

Wiring 30 µCs × 3 signals over 100 m has three constraints: voltage drop, capacitive loading, and electromagnetic susceptibility.

Voltage drop. For a 24 V DC input with a 15 V DC "1" threshold, the allowed round-trip drop is 24 V − 15 V = 9 V. With a typical 0.50 mm² (AWG 20) Cu conductor at 36 mΩ/m, the loop resistance is:

R = 2 × 100 m × 36 mΩ/m = 7.2 Ω
V_drop = I × R
V_drop (at 2.5 mA signal) = 2.5 mA × 7.2 Ω = 18 mV
V_drop (at 100 mA worst case, relay-driven source) = 100 mA × 7.2 Ω = 720 mV

Both values are well inside the 9 V margin. A 0.75 mm² (AWG 18) cable is the standard recommendation for 24 V DC signal runs of 50–150 m; it gives a loop resistance of 4.8 Ω at 100 m and provides mechanical robustness for outdoor or tray runs.

Capacitive loading. A 100 m run of standard 0.5 mm² signal cable has roughly 50–80 pF/m, giving 5–8 nF of cable capacitance. The SM 1221 input has a 2.2 kΩ input impedance with an internal RC filter of approximately 1.5 kΩ / 4.7 nF, so the cable adds a distributed low-pass in parallel. Signal edges from µC GPIO are typically 10–100 ns, so a 100 m cable adds 1–5 µs of delay and some edge rounding — acceptable for status signaling at the supervisory cycle rates typical here.

EMC. Run the 90 input conductors in a single multi-conductor cable (e.g., a 100-conductor, overall-shielded, LiYCY-type) with the shield grounded only at the cabinet end. Keep the 24 V DC input bundle at least 200 mm from any VFD output wiring, relay coil wiring, or unshielded 230 V AC conductors in the cabinet. For installations in close proximity to large VFDs or motors, place a 30 V TVS diode (e.g., P6KE36CA) at the SM terminal of each long run to clamp induced transients.

Cable routing. Use a single home-run cable from the cabinet to a junction box near the µC cluster, then a multi-conductor drop cable to each µC. This keeps the 100 m main run shielded and unbroken, and reduces the number of shield terminations. Land the shield at the cabinet-end 1M/2M ground bar using a 360° low-impedance clamp, not a pigtail.

Webserver Configuration on the S7-1200

The S7-1200 webserver is a free, integrated function that ships with the firmware. It exposes the standard system pages (diagnostic buffer, module status, tag table, watch table) and supports user-defined pages written in HTML/JavaScript. The S7-1200 webserver listens on TCP/80 by default; on firmware V4.0 and later HTTPS (TCP/443) is supported and recommended for any internet-exposed deployment.

To enable HTTPS, generate or import a server certificate in the device configuration under "Webserver → Security". Self-signed certificates work for browser access; for permanent deployments, use a certificate from a public CA or an internal PKI, and load the CA chain into the engineering PC so that browsers trust the PLC.

User-defined pages are built in TIA Portal under "Webserver → User-defined pages" and transferred to the CPU by the "Load to device" function. The standard approach is to add a single HTML file in the project tree, reference input tags with the :="DB_name".TagName: substitution syntax, and load it to the CPU. A minimal example that displays the first three µC signals (I0.0, I0.1, I0.2) follows:

<!DOCTYPE html>
<html>
<head>
  <title>Cabinet Status</title>
  <meta charset="utf-8">
  <meta http-equiv="refresh" content="5">
</head>
<body>
  <h1>Aggregated µC Status</h1>
  <p>µC 01, Signal A: :="DB_Status".uC01_SigA:</p>
  <p>µC 01, Signal B: :="DB_Status".uC01_SigB:</p>
  <p>µC 01, Signal C: :="DB_Status".uC01_SigC:</p>
</body>
</html>

The :="DB_Status".uC01_SigA: syntax is replaced server-side by the CPU with the current boolean state and an automatic refresh timestamp. The CPU webserver supports up to 99 user-defined pages and 1 MB total HTML size on firmware V4.x. For 90 tags, use a single consolidated page rather than per-tag pages; the webserver refresh is single-threaded and scales with the number of referenced tags, not the page count.

To populate DB_Status, copy the IW input words into the DB in OB1. A representative ladder/network for the first three µCs is:

// Network 1 — copy 14 onboard DI to DB_Status.Onboard14 (WORD)
"DB_Status".Onboard14 := IW0;

// Network 2 — map I0.0, I0.1, I0.2 to µC 01 signals
"DB_Status".uC01_SigA := I0.0;
"DB_Status".uC01_SigB := I0.1;
"DB_Status".uC01_SigC := I0.2;

// Network 3 — map µC 02 signals (I0.3, I0.4, I0.5)
"DB_Status".uC02_SigA := I0.3;
"DB_Status".uC02_SigB := I0.4;
"DB_Status".uC02_SigC := I0.5;

For the remaining 28 µCs, continue the bit-by-bit mapping across the SM 1221 input range (I8.0 through I25.7), with three bits per µC. To reduce code volume, declare the DB with arrays and use a FOR loop with a calculated bit index; this approach is also more maintainable than hand-written ladder.

Network Architecture: Cabinet Router, Port Forwarding, VPN

The original design uses an internet-connected cabinet router and exposes the S7-1200 webserver through that router. The minimum viable topology is:

Three deployment patterns are common, ranked by security posture:

For simple read-only access, a single port-forwarded HTTPS listener is sufficient. Configure the router as follows:

1. Assign a static LAN IP to the S7-1200 (e.g., 192.168.0.10) and a static DHCP reservation on the router to avoid address conflicts.
2. Set the PROFINET device name on the CPU (e.g., cabinet-plc-01) under "Device configuration → PROFINET interface → Ethernet addresses".
3. Create a NAT rule: external TCP/8443 → internal 192.168.0.10:443 (offset the external port as a basic security-through-obscurity step).
4. Enable a DynDNS client on the router (No-IP, DynDNS, or vendor-specific) if the cabinet has a dynamic public IP.
5. Create a strong, unique user on the S7-1200 webserver with the "Read" permission only; do not enable the "Write" permission for the remote-access user.
6. Set the S7-1200 webserver update interval to 2–5 s. Sub-second intervals on 90+ tags overload the single-threaded webserver refresh.

Industrial Router Selection (-20 °C to +40 °C)

For an unheated or outdoor cabinet, the router must operate across the full industrial temperature range. Common candidates that meet -20 °C to +40 °C with at least one margin degree are:

Choose a router that supports the local cellular bands and the desired VPN. The S7-1200 does not need VPN hardware acceleration — any IPsec/OpenVPN/WireGuard stack on the router is sufficient for HTTPS-based access. For first-party integration in a Siemens cabinet, the SCALANCE M series is the natural choice and is supported in TIA Portal's "Devices & networks" catalog for offline engineering. Documentation is on the SCALANCE product page.

Power Supply and Hardware Sizing

The PM 1207 (6EP1332-1SH71) is the standard 24 V DC, 2.5 A supply for an S7-1200 cabinet. Sizing the 24 V DC bus:

The PM 1207 with 2.5 A (60 W) output is sized correctly with 20% spare. For larger spare capacity (e.g., future SM additions, a second PROFINET device, or 24 V DC field power for µC inputs), step up to the PM 1207 6EP1333-1SH71 (24 V, 5 A). The CPU's 24 V DC input terminals (1L+/1L-) feed the module electronics; the SM 1221 input power is fed from the same 24 V DC rail through the bus connector, and the SM field-side commons (1M/2M) must be tied back to 24 V DC common on the supply.

Engineering with TIA Portal

Configure the CPU and SMs in TIA Portal. The minimum TIA Portal version that supports the firmware shipped on the S7-1200 CPU 1214C with MLFB 6ES7214-1...40-0XB0 is TIA Portal V13 SP1 Update 9. Newer V14 SP1, V15.1, V16, V17, and V18 releases all support the same hardware. For long-term maintainability, target TIA Portal V16 or V17 — both are still in mainstream support as of 2024. The TIA Portal product page has release notes and compatibility matrices.

Project steps:

1. Add a new device → "SIMATIC S7-1200 CPU 1214C DC/DC/DC" (6ES7214-1AG40-0XB0).
2. Open "Device view" and add five "SM 1221 DI 16 × 24 V DC" (6ES7221-1BH32-0XB0) modules to slots 1–5 of the right-side expansion bus.
3. Open "Properties → DI 16 → Inputs" on each module and set the input filter to 0.8 ms. The default 6.4 ms filter is sized for mechanical contacts and will smear short µC pulses.
4. Open "Properties → Webserver" and enable webserver access. Add at least one user with the "Read" role. Enable HTTPS and load a server certificate (self-signed is acceptable for first commissioning; replace with a CA-signed certificate before exposing to the internet).
5. Open "Properties → Ethernet addresses" and set the CPU's IP to 192.168.0.10, subnet 255.255.255.0, and use-router 192.168.0.1. Set the PROFINET device name (e.g., cabinet-plc-01).
6. Create a global DB "DB_Status" with 90 BOOL tags, one per µC signal. Add a 16-bit WORD tag "Onboard14" for the spare 14 onboard channels.
7. Program OB1 to copy the IW input addresses into DB_Status (see code example in the Webserver section above).
8. Configure the CSM 1277 and SCALANCE router as separate PROFINET devices in the same project, or simply configure them out-of-band — the S7-1200 does not require router configuration to be in the TIA project for webserver reachability.

Address map for the five SM 1221 modules in slots 1 through 5:

The address gap between the onboard DI (I0–I1) and the first SM (I8) is intentional; the S7-1200 reserves process-image space between onboard I/O and the first SM. Confirm the actual addresses in the device view's I/O table after project compilation — the values above match the S7-1200 system manual's standard mapping for CPU 1214C firmware V4.x.

Commissioning and Verification Procedure

Follow this sequence to bring the system up safely. Stop at any failed step and diagnose before continuing.

1. Mechanical check. Confirm the DIN rail is bonded to cabinet ground, the CPU and SMs are clipped firmly, the SIMATIC Memory Card (SMC) is seated in the CPU's card slot, and the cabinet interior is dust-free.
2. Power-on test (no field wires). Apply 24 V DC. The CPU's status LEDs should show STOP (yellow) on the right LED group, and the PROFINET LINK/ACT LED should be green/amber. All five SMs should show a solid green "OK" LED within 5 s; an SF (red) LED on any SM indicates a project/configuration mismatch.
3. Engineering connection. Connect a PC to the CPU's PROFINET port (directly or through the CSM 1277), set the PC to 192.168.0.100/24, scan the network in TIA Portal under "Online → Accessible devices", and "Go online". Verify the CPU's IP, PROFINET device name, and firmware version match the project.
4. Firmware compatibility. In TIA Portal, check "Online & diagnostics → General → Device information". The CPU firmware should match (or be downgradable/upgradeable from) the project version. If an online firmware update is needed, follow the procedure in the S7-1200 system manual — the CPU remains in STOP during a firmware update, typically for 1–3 minutes.
5. DI walk-down (bench test). With the µCs powered but no active field wiring to the cabinet, short each SM input to 24 V DC with a test probe, one channel at a time. Confirm the corresponding bit in the watch table ("DB_Status") and the webserver tag toggles. This validates the SM addressing and the user-defined page.
6. Field wiring hookup. Connect the 30 µC signal bundles one bundle at a time, starting with the closest µC. After each bundle, verify all three inputs register correctly on the webserver. Mark each cable at the cabinet end with a permanent wire marker (e.g., Weidmüller MultiCard or Phoenix PMC).
7. Webserver check (LAN). From the engineering PC on the LAN, open https://192.168.0.10. Log in with the configured user. Verify the user-defined page renders, all 90 referenced tags resolve (no "?" placeholders), and inputs are live within 5 s.
8. Internet exposure test. From a phone on cellular, connect to the public DynDNS hostname (or the public IP) on the external port (e.g., https://cabinet.dyndns.org:8443). Verify the page loads without certificate warnings and the inputs are live.
9. Soak test. Leave the system running for 48 h. Monitor for any "SF" LED events, webserver reconnects, or DI chatter. Review the diagnostic buffer at the end of the soak — a clean diagnostic buffer over 48 h is the best predictor of long-term reliability.
10. Documentation handover. Save the TIA Portal project (with user-defined page source) to the cabinet laptop or a managed version-control repository. Export the CPU's diagnostic buffer and webserver configuration as PDF. Update the single-line diagram and the I/O list to reflect as-built wiring.

Troubleshooting Matrix

FAQ