Siemens CP 343-1 Connection Partner Not Responding: Fix Guide

David Krause17 min read
S7-300SiemensTroubleshooting
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Problem Description: "Connection Partner Is Not Responding" (S7 Diagnostic Event 33:16656)

When commissioning or maintaining a SIMATIC S7-300 station fitted with a CP 343-1 communications processor, STEP 7 / SIMATIC Manager may display the diagnostic message:

Operating Mode (33:16656)
Online: Connection could not be established - the connection partner is not responding.

This event is generated by the S7 communication firmware when an active or passive ISO-on-TCP / TCP connection establishment request times out. The CP 343-1 transmits its ARP/TCP-SYN, the CPU's communication stack registers no reply within the configured keep-alive window, and the diagnostic buffer logs the event ID 33:16656 in the operating mode of the CPU. The message is not a CPU fault - it is a transport-layer time-out.

In practice this event almost always traces to one of three classes of fault:

  1. Layer 1 fault: no physical link - cable, port, or transceiver fault, often revealed by a dark LINK LED on the CP 343-1.
  2. Layer 3 fault: the PC's TCP/IP stack is bound to the wrong network adapter, or two adapters are fighting over the same /24 subnet.
  3. Layer 7 fault: STEP 7's PG/PC interface does not point at the adapter that physically reaches the CP, so S7 online services never leave the PC.

The remainder of this article walks each layer in the order a field engineer should test it, using the CP 343-1 (order number 6GK7 343-1CX10-0XE0) and CP 343-1 Lean (6GK7 343-1EX30-0XE0) as the reference hardware. The diagnostic procedure also applies to the CP 343-1 Advanced (6GK7 343-1GX30-0XE0) and to all S7-300 CPU variants (31x, 31xC, 31xT, 31xF) with on-board PROFINET, because the failure mode is identical.

Important: Always read the diagnostic event in the CPU's diagnostic buffer (PLC > Diagnostic/Settings > Module Information) before changing STEP 7 settings. Event 33:16656 may be paired with an earlier event that identifies the root cause - e.g. 33:16655 (connection aborted locally), 33:16657 (partner rejected connection), or 33:16500 (no route to host). Treating only 33:16656 will leave the underlying fault in place.

CP 343-1 Hardware Identification and LED Layout

Before touching any software setting, identify the exact CP variant and verify the port LEDs. The CP 343-1 family has two RJ-45 jacks on the front, each with a dedicated two-LED indicator stack:

LED Color State Meaning
LINK Green On Valid 100 Mbit/s link established (physical layer OK)
LINK — Off No link detected - check cable, switch port, partner port, auto-negotiation
FAST FDX Green On 100 Mbit/s full duplex
FAST FDX — Off 10 Mbit/s or half duplex, or no link
RX/TX Yellow Flicker Telegram traffic on the PROFINET interface
SF (group fault) Red On / blink Group fault - see diagnostic buffer; usually accompanies 33:16656
BF (bus fault) Red On / blink Bus fault - duplicate IP, broken ring, or no PROFINET controller

A CP 343-1 Lean (6GK7 343-1EX30-0XE0) uses the same LED labels but does not support routing, clock synchronisation, or the PROFINET CBA role - relevant only if your project configuration tries to use those services.

Step 1: Hardware Layer Verification - LINK/FDX LEDs

The single most common cause of 33:16656 in green-field commissioning is a Layer-1 problem. Confirm the link before chasing IP settings.

  1. Power up the S7-300 station; allow 30 s for the CP to finish its self-test and ARP scan.
  2. Connect a known-good Cat 5e (or better) patch cable from the PC to the CP 343-1's left-hand RJ-45 jack (X1). For most CPs, X1 is the default PROFINET interface; X2 is reserved for switch cascading.
  3. Observe the LINK LED on the CP. If it stays off, the PC's NIC is the suspect: try the cable in the PC's other RJ-45, try a different cable, then try a switch between PC and CP.
  4. If the link comes up only when a switch is in the path, the suspect is auto-negotiation, not the cable. Modern CP 343-1 modules (firmware V2.x and later) and almost all PC NICs since 2010 implement Auto-MDI/MDIX, so a straight-through cable is electrically identical to a crossover. Very old CP 343-1 revisions (firmware V1.0, e.g. 6GK7 343-1CX10-0XE0 with MLFB suffix < 0AE0) may require a crossover cable or a switch when connecting directly to a NIC. Check the module's MLFB suffix against the Siemens Industry Online Support catalog to confirm.
  5. Once the LINK LED is solid green, confirm FAST FDX is also lit. If only LINK is on and FAST FDX is off, the link has downshifted to 10 Mbit/s half duplex - replace the cable or the patch panel run; 10 Mbit HDX is not supported by PROFINET and will drop S7 connections under load.
Field tip: If a switch LED for the CP port is dark but the CP's own LINK LED is on, the switch is bad. Replace the switch before touching STEP 7.

Step 2: Multi-NIC and Windows IP Subnet Conflict Resolution

The most subtle source of 33:16656 is a Windows host with more than one network adapter. Modern Windows does not gracefully route between two adapters that share a subnet; the TCP/IP stack picks one and the other becomes a "black hole" for outgoing packets.

A typical laptop setup that triggers the failure:

Adapter Role IP Address Subnet Mask Status
Wi-Fi PPPoE / Internet 192.168.0.100 255.255.255.0 Active, default route to ISP
Ethernet (Intel I219-V) Lab / Engineering 192.168.0.1 (was set by user) 255.255.255.0 Stale route, blocks PLC subnet
CP 343-1 (target) PLC PROFINET 192.168.0.10 255.255.255.0 Target

Because both the Wi-Fi and the Ethernet NIC live in 192.168.0.0/24, the Windows routing table produces ambiguous next-hop decisions. ARPs go to the wrong MAC, S7-connection TCP-SYNs disappear, and STEP 7 reports 33:16656.

Resolution procedure

  1. Open Control Panel > Network and Sharing Center > Change adapter settings (or run ncpa.cpl).
  2. Disable any NIC you do not need for the engineering session. Right-click the Wi-Fi (or unused second Ethernet) and select Disable. Wait 10 s for the routing table to re-converge.
  3. Re-enable the NIC only after STEP 7 has successfully connected to the CP. If the connection drops the moment the second NIC comes back, the IP configuration of that NIC is the culprit - move it to a different subnet, e.g. 192.168.1.50/24, so it cannot be mistaken for a PLC route.
  4. Hard rule: every active NIC on an engineering PC must live in a different /24 (or finer) subnet. If you must keep both active, put the PLC engineering adapter in 192.168.1.0/24 and the internet adapter in 192.168.0.0/24 (or vice-versa). Never overlap.

Verifying the routing table

Open a command prompt and run:

route print -4

For a healthy engineering PC you should see exactly one interface route per subnet, with the CP 343-1's subnet (e.g. 192.168.0.0 255.255.255.0 On-link 192.168.0.1 ... Intel I219-V) and no other active interface in the same subnet. If two entries appear, disable one of them.

Step 3: PG/PC Interface Assignment in STEP 7

Even when the IP layer is correct, STEP 7 will not find the CP if the PG/PC interface is bound to the wrong adapter.

  1. Open Start > Siemens Automation > Set PG/PC Interface (or run SetPgPcInterface.exe).
  2. Set Access Point of the Application to S7ONLINE (STEP 7) --> TCP/IP <your Ethernet NIC>.
  3. Confirm the chosen adapter is the one that just established the link. Run ipconfig /all in a second command window; the NIC with the 192.168.0.x address assigned to your engineering network must match the NIC selected in the PG/PC dialog.
  4. Click Diagnostics in the Set PG/PC Interface dialog. A successful Read on the local adapter proves the driver layer is alive. A failure here points at a corrupt SetPgPc.Ini - close the tool, delete the file at %APPDATA%\Siemens\Automation\SetPgPc\SetPgPc.Ini, and re-open.

For TIA Portal (V14 and later) the same logic applies, but the path is Project > Online > Go online > PG/PC Interface type: TCP/IP > PG/PC Interface: <your NIC>. See the TIA Portal documentation for the corresponding Local/Partner connection configuration object, which defines the logical binding of two communication partners for S7 services.

Step 4: STEP 7 Online Access - Accessible Nodes

Use Accessible Nodes as the first live check, before any project download attempt.

  1. In SIMATIC Manager, choose PLC > Edit Ethernet Node > Browse (or Target system > Ethernet > Browse in TIA).
  2. STEP 7 broadcasts a DCP identify request on the bound adapter. The CP 343-1 replies with its MAC and IP. The station should appear in the list within 5 s.
  3. If nothing appears, the problem is Layer 1/2 (cable, switch, or NIC), not STEP 7. Re-check the LINK LED.
  4. If the station appears, double-click it. The IP/MAC editor opens - this is also where you can correct an IP that is out-of-range or duplicated on the subnet.
Note on DCP and PROFINET: CP 343-1 modules identify themselves via Discovery and Configuration Protocol (DCP), which uses Ethernet multicast 01:0E:CF:00:00:00. If a managed switch has DCP/IGMP-snooping misconfigured, the DCP frames are filtered and the station will not appear in Accessible Nodes even though the IP layer is healthy. Disable the snooping filter for the engineering port, or use a dumb switch for first-line commissioning.

Step 5: Direct Cable, Auto-Crossover, and Switch Considerations

Auto-crossover (Auto-MDI/MDIX) is mandatory for any direct CP-to-PC connection without a switch. The CP 343-1 supports it on ports shipped with firmware V2.0 or later - the cut-in date for the family is around 2008. CP 343-1 modules with a single Ethernet controller (early EX10 and CX10) require a crossover cable or an intermediate switch when connected to a PC NIC that does not implement Auto-MDI/MDIX.

Verify by reading the module's firmware from the diagnostic buffer (Module Information > Diagnostic Buffer > Module startup). If the entry shows firmware V1.x, install a crossover cable or insert a switch. The physical-layer link is the only honest test of auto-crossover - the LEDs are the answer.

Topology Cable required (CP > FW2.0) Cable required (CP < FW2.0) Notes
PC <-> CP 343-1 (direct) Any patch (straight or crossover) Crossover (or insert a switch) LINK LED is the ground truth
PC <-> Switch <-> CP 343-1 Any patch (PC side + CP side) Any patch (switch handles polarity) Recommended for first-time debug
PC <-> Managed switch (VLAN) <-> CP 343-1 Any patch; verify VLAN trunk Any patch; verify VLAN trunk Spanning-tree / DCP filter can drop the link at boot

Step 6: Ping Test as the Connectivity Sanity Check

Once the LINK LED is steady, the next gate is a Layer-3 ping. A successful ping proves the IP stack and ARP are healthy; a time-out proves either a firewall or a wrong subnet.

C:\> ping 192.168.0.10

Pinging 192.168.0.10 with 32 bytes of data:
Reply from 192.168.0.10: bytes=32 time=1ms TTL=64
Reply from 192.168.0.10: bytes=32 time<1ms TTL=64
Reply from 192.168.0.10: bytes=32 time<1ms TTL=64
Reply from 192.168.0.10: bytes=32 time<1ms TTL=64

If the ping times out:

  1. Disable the Windows Firewall temporarily (wf.msc > Windows Defender Firewall Properties > Off) and re-test. Re-enable after the test - S7-connection ports (TCP 102, TCP 161/162 for SNMP, UDP 34964 for PNIO) must be allowed through the firewall profile used on the engineering NIC. The Siemens SIMATIC Automation Tool installer normally opens these ports automatically; a manual install on a hardened PC may not.
  2. Confirm both ends share the subnet. 192.168.0.1/24 and 192.168.0.100/24 are the same /24 - that is fine. 192.168.0.1/24 and 192.168.1.100/24 are not the same /24 and need a router to talk.
  3. Check for a duplicate IP. If another device on the same /24 already has the CP's IP, both the ping and the S7 connection will fail with intermittent results. arp -a shows the MAC behind each IP - if the MAC for 192.168.0.10 is not the CP's MAC, change the CP's IP.

Step 7: CPU and CP 343-1 IP Address Configuration

The CP 343-1 takes its IP address from the SD-card project, the MPI/DP download, or a SIMATIC Manager Edit Ethernet Node assignment. For first commissioning, use the hardware path:

  1. Open SIMATIC Manager with no project open.
  2. PLC > Edit Ethernet Node > Browse - the station should appear (LINK LED proven).
  3. Select the station, click Edit, and assign IP 192.168.0.10, subnet mask 255.255.255.0, leave router empty unless you actually have one.
  4. Click Assign IP Configuration. The CP stores the address in its non-volatile memory and restarts its PROFINET stack - the BF LED will blink briefly during restart.

If the CP has an MPI/DP interface as well, the same IP can be assigned from the CPU's display (where fitted) via SETUP > PN > IP Address. This is the only path that works when the LINK LED is dead and STEP 7 cannot see the CP at all.

Configuration method Tool When to use Prerequisites
HW Config (in STEP 7 V5.x) SIMATIC Manager Project-bound commissioning Project open, online to CPU
Edit Ethernet Node SIMATIC Manager First-time IP on a blank CP LINK LED on, no project needed
PRONETA / Topology editor Siemens PRONETA Diagnostic only - no IP write CP and PC in same subnet
CPU display (where fitted) Front panel LINK LED dead, no STEP 7 access CPU with display (e.g. CPU 315-2 PN/DP)
Primary Setup Tool (legacy) PST Very old projects only RS-232 MPI cable or Ethernet

Step-by-Step Resolution Procedure (Field Card)

Use this ordered checklist on the next 33:16656 ticket. Stop at the first failing step and remediate before continuing.

  1. LINK LED on CP 343-1 - if off, fix the cable, switch, or NIC first.
  2. FAST FDX LED on - confirms 100 Mbit/s full duplex; replace cable if downshifted.
  3. Single active NIC on PC, in the CP's subnet - disable every other NIC, or move them to non-overlapping subnets.
  4. IP address reachable by ping - proves the stack and ARP.
  5. Accessible Nodes finds the station - proves DCP and the PG/PC interface binding.
  6. PG/PC interface points at the right NIC - Set PG/PC Interface > S7ONLINE > TCP/IP <your NIC>.
  7. STEP 7 / TIA online connection succeeds - downloads the project; from here on, project download overwrites any temporary IP.
33:16656 - Connection Partner Not Responding 1. LINK LED off? 1. Link LED on (100 FDX) Fix cable / NIC / switch 2. Multiple NICs active? Insert switch / use crossover 3. Ping succeeds? 4. Accessible Nodes - connect

Verification and Commissioning

After completing the procedure, verify the fix end-to-end:

  1. Open SIMATIC Manager with the engineering project. PLC > Accessible Nodes shows the CP at 192.168.0.10 within 5 s.
  2. Select PLC > Download. STEP 7 negotiates a connection on TCP port 102; the diagnostic event 33:16656 must be absent from the new diagnostic buffer entry "Online connection established".
  3. In TIA Portal, choose Go online from the project tree. The online state should turn green within 10 s for a small project.
  4. Open the CP's web server (browse to http://192.168.0.10) - this is the cleanest end-to-end check, because the web server uses HTTP on TCP 80, completely independent of the S7 stack. If the web page appears, your IP and routing are proven correct and any remaining 33:16656 is a STEP 7 PG/PC binding problem, not a network problem.
  5. Force an online diagnostic refresh (PLC > Diagnostic/Settings > Module Information > Diagnostic Buffer). The most recent entry should be the new "Go online" event, not a stale 33:16656.

Troubleshooting Matrix

Symptom Most likely cause Fix
LINK LED off, no reply to ping Cable / NIC / port Try another cable, port, switch; verify auto-MDI/MDIX
LINK on, FAST FDX off 10 Mbit or half-duplex Replace cable; force 100 Mbit/FDX on managed switch port
LINK on, ping time-out Firewall or wrong subnet Disable firewall for test; re-check IP/subnet on both ends
LINK on, ping OK, Accessible Nodes empty PG/PC interface bound to wrong NIC Set PG/PC Interface to S7ONLINE > TCP/IP <correct NIC>
Accessible Nodes shows the station, Go online fails TSAP / connection resource exhausted Check CP connection resources; remove stale NetPro connections
All OK, but only one NIC in PC works Subnet conflict (two NICs in same /24) Move second NIC to a different subnet
BF LED solid red on CP Duplicate IP on subnet Run arp -a; reassign unique IP via Edit Ethernet Node
Web server reachable, STEP 7 still times out TSAP / CPU connection count Verify the CP's connection resources; check S7-300 CPU connection limits (CPU 314 = 8, CPU 315-2 PN/DP = 16, CPU 317 = 32)
Event 33:16655 instead of 33:16656 Local stack closed the socket (firewall on PC, or partner reset) Check Windows Firewall rule for TCP 102; check partner PLC for SF LED
Event 33:16500 (no route to host) No route in PC routing table to PLC subnet Add static route or fix NIC configuration

Notes on S7-300 / CP 343-1 Connection Resources

CP 343-1 modules support a finite number of S7 connections. Hitting the limit is another common source of 33:16656 - the new connection request finds no free resource and is rejected, not "not responded to". The error code in that case is 33:16508 ("no resources free") rather than 33:16656, but field reports frequently conflate the two.

CP variant Order number Max S7 connections Max ISO-on-TCP / TCP
CP 343-1 Lean 6GK7 343-1EX30-0XE0 8 4
CP 343-1 (standard) 6GK7 343-1CX10-0XE0 16 16
CP 343-1 Advanced 6GK7 343-1GX30-0XE0 32 32

CPU 31x-2 PN/DP variants have their own connection resources for the on-board PROFINET interface. CPU 315-2 PN/DP supports 16 S7 connections, CPU 317-2 PN/DP supports 32. The total S7 connections used by the project (engineering + HMI + OPC + S7 routes) must fit inside both the CPU and the CP. Open NetPro in STEP 7 to audit.

Quick Reference: S7 Diagnostic Event Codes Encountered During CP 343-1 Bring-up

Event ID Meaning Typical root cause
33:16656 Connection partner not responding (this article) Layer 1/3/7 - check link, NIC, PG/PC interface
33:16655 Connection aborted locally PC firewall, CPU STOP, partner reset
33:16657 Partner rejected connection TSAP mismatch, security level, certificate
33:16500 No route to host Routing table miss on PC
33:16508 No resources free CPU/CP connection limit reached
33:16498 Connection establishment rejected Wrong PG/PC interface type (e.g. ISO vs TCP)

FAQ

What does S7 diagnostic event 33:16656 mean on a CP 343-1?

It is a transport-layer time-out: the CPU's S7 communication stack tried to open an ISO-on-TCP or TCP connection, sent the SYN, and received no reply within the keep-alive window. The fault is almost always a layer-1 link problem, a Windows multi-NIC subnet conflict, or a STEP 7 PG/PC interface bound to the wrong adapter - not a CP or CPU hardware failure.

Why does the CP 343-1 LINK LED stay dark on a direct cable to my PC?

Either the cable is bad, the PC NIC port is bad, or the CP is an early firmware V1.x module that does not implement Auto-MDI/MDIX and needs a crossover cable. Insert a switch as a fast test - if the link comes up via the switch but not direct, install a crossover cable or upgrade the CP to firmware V2.0+.

My PC has two network adapters. Which one should I use for STEP 7 to the CP 343-1?

Use the adapter that is physically connected to the CP. Disable every other adapter, or move it to a different /24 subnet (for example, the internet NIC on 192.168.0.0/24 and the engineering NIC on 192.168.1.0/24). Two active adapters in the same /24 will route packets ambiguously and STEP 7 will report 33:16656.

How do I confirm the PG/PC interface is pointing at the right NIC?

Open Set PG/PC Interface, choose S7ONLINE (STEP 7) --> TCP/IP <your Ethernet NIC>, then run the Diagnostics button. Cross-check with ipconfig /all that the NIC you selected carries the engineering IP. In TIA Portal V14 or later the path is Project > Online > Go online > PG/PC Interface.

Accessible Nodes finds the station, but Go online still fails with 33:16656. What next?

Your Layer 1/3 is healthy. The next suspect is the connection resource count on the CP 343-1 (max 8/16/32 depending on variant) or a TSAP mismatch in NetPro. Run PLC > Diagnostic/Settings > Module Information > Diagnostic Buffer - if you see 33:16508, the CP is out of free connections; remove stale NetPro connections or upgrade the CP. If you see 33:16657, the TSAP does not match; verify the partner TSAP in the connection properties.

Can I connect a CP 343-1 to a managed switch with PROFINET and still use STEP 7 from the same port?

Yes, but the switch must allow DCP multicast (01:0E:CF:00:00:00) and must not strip LLDP frames. Disable PROFINET-aware filtering on the engineering port, or use a dedicated dumb switch for the engineering PC. Managed switches with PROFINET compliance (e.g. SCALANCE XC-200) profile the port automatically.

Does this procedure also apply to the S7-300 on-board PROFINET port (CPU 31x-2 PN/DP)?

Yes. The on-board port uses the same TCP/UDP stack and the same diagnostic event codes. The only difference is that you cannot replace the CPU's PROFINET interface with a CP - the connection resource count is fixed by the CPU variant (CPU 315-2 PN/DP = 16, CPU 317-2 PN/DP = 32).

Back to blog