Problem Description: "Connection Partner Is Not Responding" (S7 Diagnostic Event 33:16656)
When commissioning or maintaining a SIMATIC S7-300 station fitted with a CP 343-1 communications processor, STEP 7 / SIMATIC Manager may display the diagnostic message:
Operating Mode (33:16656)
Online: Connection could not be established - the connection partner is not responding.
This event is generated by the S7 communication firmware when an active or passive ISO-on-TCP / TCP connection establishment request times out. The CP 343-1 transmits its ARP/TCP-SYN, the CPU's communication stack registers no reply within the configured keep-alive window, and the diagnostic buffer logs the event ID 33:16656 in the operating mode of the CPU. The message is not a CPU fault - it is a transport-layer time-out.
In practice this event almost always traces to one of three classes of fault:
- Layer 1 fault: no physical link - cable, port, or transceiver fault, often revealed by a dark LINK LED on the CP 343-1.
- Layer 3 fault: the PC's TCP/IP stack is bound to the wrong network adapter, or two adapters are fighting over the same /24 subnet.
- Layer 7 fault: STEP 7's PG/PC interface does not point at the adapter that physically reaches the CP, so S7 online services never leave the PC.
The remainder of this article walks each layer in the order a field engineer should test it, using the CP 343-1 (order number 6GK7 343-1CX10-0XE0) and CP 343-1 Lean (6GK7 343-1EX30-0XE0) as the reference hardware. The diagnostic procedure also applies to the CP 343-1 Advanced (6GK7 343-1GX30-0XE0) and to all S7-300 CPU variants (31x, 31xC, 31xT, 31xF) with on-board PROFINET, because the failure mode is identical.
CP 343-1 Hardware Identification and LED Layout
Before touching any software setting, identify the exact CP variant and verify the port LEDs. The CP 343-1 family has two RJ-45 jacks on the front, each with a dedicated two-LED indicator stack:
| LED | Color | State | Meaning |
|---|---|---|---|
| LINK | Green | On | Valid 100 Mbit/s link established (physical layer OK) |
| LINK | — | Off | No link detected - check cable, switch port, partner port, auto-negotiation |
| FAST FDX | Green | On | 100 Mbit/s full duplex |
| FAST FDX | — | Off | 10 Mbit/s or half duplex, or no link |
| RX/TX | Yellow | Flicker | Telegram traffic on the PROFINET interface |
| SF (group fault) | Red | On / blink | Group fault - see diagnostic buffer; usually accompanies 33:16656 |
| BF (bus fault) | Red | On / blink | Bus fault - duplicate IP, broken ring, or no PROFINET controller |
A CP 343-1 Lean (6GK7 343-1EX30-0XE0) uses the same LED labels but does not support routing, clock synchronisation, or the PROFINET CBA role - relevant only if your project configuration tries to use those services.
Step 1: Hardware Layer Verification - LINK/FDX LEDs
The single most common cause of 33:16656 in green-field commissioning is a Layer-1 problem. Confirm the link before chasing IP settings.
- Power up the S7-300 station; allow 30 s for the CP to finish its self-test and ARP scan.
- Connect a known-good Cat 5e (or better) patch cable from the PC to the CP 343-1's left-hand RJ-45 jack (X1). For most CPs, X1 is the default PROFINET interface; X2 is reserved for switch cascading.
- Observe the LINK LED on the CP. If it stays off, the PC's NIC is the suspect: try the cable in the PC's other RJ-45, try a different cable, then try a switch between PC and CP.
- If the link comes up only when a switch is in the path, the suspect is auto-negotiation, not the cable. Modern CP 343-1 modules (firmware V2.x and later) and almost all PC NICs since 2010 implement Auto-MDI/MDIX, so a straight-through cable is electrically identical to a crossover. Very old CP 343-1 revisions (firmware V1.0, e.g. 6GK7 343-1CX10-0XE0 with MLFB suffix < 0AE0) may require a crossover cable or a switch when connecting directly to a NIC. Check the module's MLFB suffix against the Siemens Industry Online Support catalog to confirm.
- Once the LINK LED is solid green, confirm FAST FDX is also lit. If only LINK is on and FAST FDX is off, the link has downshifted to 10 Mbit/s half duplex - replace the cable or the patch panel run; 10 Mbit HDX is not supported by PROFINET and will drop S7 connections under load.
Step 2: Multi-NIC and Windows IP Subnet Conflict Resolution
The most subtle source of 33:16656 is a Windows host with more than one network adapter. Modern Windows does not gracefully route between two adapters that share a subnet; the TCP/IP stack picks one and the other becomes a "black hole" for outgoing packets.
A typical laptop setup that triggers the failure:
| Adapter | Role | IP Address | Subnet Mask | Status |
|---|---|---|---|---|
| Wi-Fi | PPPoE / Internet | 192.168.0.100 | 255.255.255.0 | Active, default route to ISP |
| Ethernet (Intel I219-V) | Lab / Engineering | 192.168.0.1 (was set by user) | 255.255.255.0 | Stale route, blocks PLC subnet |
| CP 343-1 (target) | PLC PROFINET | 192.168.0.10 | 255.255.255.0 | Target |
Because both the Wi-Fi and the Ethernet NIC live in 192.168.0.0/24, the Windows routing table produces ambiguous next-hop decisions. ARPs go to the wrong MAC, S7-connection TCP-SYNs disappear, and STEP 7 reports 33:16656.
Resolution procedure
- Open Control Panel > Network and Sharing Center > Change adapter settings (or run
ncpa.cpl). - Disable any NIC you do not need for the engineering session. Right-click the Wi-Fi (or unused second Ethernet) and select Disable. Wait 10 s for the routing table to re-converge.
- Re-enable the NIC only after STEP 7 has successfully connected to the CP. If the connection drops the moment the second NIC comes back, the IP configuration of that NIC is the culprit - move it to a different subnet, e.g.
192.168.1.50/24, so it cannot be mistaken for a PLC route. - Hard rule: every active NIC on an engineering PC must live in a different /24 (or finer) subnet. If you must keep both active, put the PLC engineering adapter in
192.168.1.0/24and the internet adapter in192.168.0.0/24(or vice-versa). Never overlap.
Verifying the routing table
Open a command prompt and run:
route print -4
For a healthy engineering PC you should see exactly one interface route per subnet, with the CP 343-1's subnet (e.g. 192.168.0.0 255.255.255.0 On-link 192.168.0.1 ... Intel I219-V) and no other active interface in the same subnet. If two entries appear, disable one of them.
Step 3: PG/PC Interface Assignment in STEP 7
Even when the IP layer is correct, STEP 7 will not find the CP if the PG/PC interface is bound to the wrong adapter.
- Open Start > Siemens Automation > Set PG/PC Interface (or run
SetPgPcInterface.exe). - Set Access Point of the Application to S7ONLINE (STEP 7) --> TCP/IP <your Ethernet NIC>.
- Confirm the chosen adapter is the one that just established the link. Run
ipconfig /allin a second command window; the NIC with the192.168.0.xaddress assigned to your engineering network must match the NIC selected in the PG/PC dialog. - Click Diagnostics in the Set PG/PC Interface dialog. A successful Read on the local adapter proves the driver layer is alive. A failure here points at a corrupt
SetPgPc.Ini- close the tool, delete the file at%APPDATA%\Siemens\Automation\SetPgPc\SetPgPc.Ini, and re-open.
For TIA Portal (V14 and later) the same logic applies, but the path is Project > Online > Go online > PG/PC Interface type: TCP/IP > PG/PC Interface: <your NIC>. See the TIA Portal documentation for the corresponding Local/Partner connection configuration object, which defines the logical binding of two communication partners for S7 services.
Step 4: STEP 7 Online Access - Accessible Nodes
Use Accessible Nodes as the first live check, before any project download attempt.
- In SIMATIC Manager, choose PLC > Edit Ethernet Node > Browse (or Target system > Ethernet > Browse in TIA).
- STEP 7 broadcasts a DCP identify request on the bound adapter. The CP 343-1 replies with its MAC and IP. The station should appear in the list within 5 s.
- If nothing appears, the problem is Layer 1/2 (cable, switch, or NIC), not STEP 7. Re-check the LINK LED.
- If the station appears, double-click it. The IP/MAC editor opens - this is also where you can correct an IP that is out-of-range or duplicated on the subnet.
01:0E:CF:00:00:00. If a managed switch has DCP/IGMP-snooping misconfigured, the DCP frames are filtered and the station will not appear in Accessible Nodes even though the IP layer is healthy. Disable the snooping filter for the engineering port, or use a dumb switch for first-line commissioning.
Step 5: Direct Cable, Auto-Crossover, and Switch Considerations
Auto-crossover (Auto-MDI/MDIX) is mandatory for any direct CP-to-PC connection without a switch. The CP 343-1 supports it on ports shipped with firmware V2.0 or later - the cut-in date for the family is around 2008. CP 343-1 modules with a single Ethernet controller (early EX10 and CX10) require a crossover cable or an intermediate switch when connected to a PC NIC that does not implement Auto-MDI/MDIX.
Verify by reading the module's firmware from the diagnostic buffer (Module Information > Diagnostic Buffer > Module startup). If the entry shows firmware V1.x, install a crossover cable or insert a switch. The physical-layer link is the only honest test of auto-crossover - the LEDs are the answer.
| Topology | Cable required (CP > FW2.0) | Cable required (CP < FW2.0) | Notes |
|---|---|---|---|
| PC <-> CP 343-1 (direct) | Any patch (straight or crossover) | Crossover (or insert a switch) | LINK LED is the ground truth |
| PC <-> Switch <-> CP 343-1 | Any patch (PC side + CP side) | Any patch (switch handles polarity) | Recommended for first-time debug |
| PC <-> Managed switch (VLAN) <-> CP 343-1 | Any patch; verify VLAN trunk | Any patch; verify VLAN trunk | Spanning-tree / DCP filter can drop the link at boot |
Step 6: Ping Test as the Connectivity Sanity Check
Once the LINK LED is steady, the next gate is a Layer-3 ping. A successful ping proves the IP stack and ARP are healthy; a time-out proves either a firewall or a wrong subnet.
C:\> ping 192.168.0.10
Pinging 192.168.0.10 with 32 bytes of data:
Reply from 192.168.0.10: bytes=32 time=1ms TTL=64
Reply from 192.168.0.10: bytes=32 time<1ms TTL=64
Reply from 192.168.0.10: bytes=32 time<1ms TTL=64
Reply from 192.168.0.10: bytes=32 time<1ms TTL=64
If the ping times out:
- Disable the Windows Firewall temporarily (wf.msc > Windows Defender Firewall Properties > Off) and re-test. Re-enable after the test - S7-connection ports (TCP 102, TCP 161/162 for SNMP, UDP 34964 for PNIO) must be allowed through the firewall profile used on the engineering NIC. The Siemens SIMATIC Automation Tool installer normally opens these ports automatically; a manual install on a hardened PC may not.
- Confirm both ends share the subnet.
192.168.0.1/24and192.168.0.100/24are the same /24 - that is fine.192.168.0.1/24and192.168.1.100/24are not the same /24 and need a router to talk. - Check for a duplicate IP. If another device on the same /24 already has the CP's IP, both the ping and the S7 connection will fail with intermittent results.
arp -ashows the MAC behind each IP - if the MAC for192.168.0.10is not the CP's MAC, change the CP's IP.
Step 7: CPU and CP 343-1 IP Address Configuration
The CP 343-1 takes its IP address from the SD-card project, the MPI/DP download, or a SIMATIC Manager Edit Ethernet Node assignment. For first commissioning, use the hardware path:
- Open SIMATIC Manager with no project open.
- PLC > Edit Ethernet Node > Browse - the station should appear (LINK LED proven).
- Select the station, click Edit, and assign IP
192.168.0.10, subnet mask255.255.255.0, leave router empty unless you actually have one. - Click Assign IP Configuration. The CP stores the address in its non-volatile memory and restarts its PROFINET stack - the BF LED will blink briefly during restart.
If the CP has an MPI/DP interface as well, the same IP can be assigned from the CPU's display (where fitted) via SETUP > PN > IP Address. This is the only path that works when the LINK LED is dead and STEP 7 cannot see the CP at all.
| Configuration method | Tool | When to use | Prerequisites |
|---|---|---|---|
| HW Config (in STEP 7 V5.x) | SIMATIC Manager | Project-bound commissioning | Project open, online to CPU |
| Edit Ethernet Node | SIMATIC Manager | First-time IP on a blank CP | LINK LED on, no project needed |
| PRONETA / Topology editor | Siemens PRONETA | Diagnostic only - no IP write | CP and PC in same subnet |
| CPU display (where fitted) | Front panel | LINK LED dead, no STEP 7 access | CPU with display (e.g. CPU 315-2 PN/DP) |
| Primary Setup Tool (legacy) | PST | Very old projects only | RS-232 MPI cable or Ethernet |
Step-by-Step Resolution Procedure (Field Card)
Use this ordered checklist on the next 33:16656 ticket. Stop at the first failing step and remediate before continuing.
- LINK LED on CP 343-1 - if off, fix the cable, switch, or NIC first.
- FAST FDX LED on - confirms 100 Mbit/s full duplex; replace cable if downshifted.
- Single active NIC on PC, in the CP's subnet - disable every other NIC, or move them to non-overlapping subnets.
- IP address reachable by ping - proves the stack and ARP.
- Accessible Nodes finds the station - proves DCP and the PG/PC interface binding.
- PG/PC interface points at the right NIC - Set PG/PC Interface > S7ONLINE > TCP/IP <your NIC>.
- STEP 7 / TIA online connection succeeds - downloads the project; from here on, project download overwrites any temporary IP.
Verification and Commissioning
After completing the procedure, verify the fix end-to-end:
- Open SIMATIC Manager with the engineering project. PLC > Accessible Nodes shows the CP at
192.168.0.10within 5 s. - Select PLC > Download. STEP 7 negotiates a connection on TCP port 102; the diagnostic event 33:16656 must be absent from the new diagnostic buffer entry "Online connection established".
- In TIA Portal, choose Go online from the project tree. The online state should turn green within 10 s for a small project.
- Open the CP's web server (browse to
http://192.168.0.10) - this is the cleanest end-to-end check, because the web server uses HTTP on TCP 80, completely independent of the S7 stack. If the web page appears, your IP and routing are proven correct and any remaining 33:16656 is a STEP 7 PG/PC binding problem, not a network problem. - Force an online diagnostic refresh (PLC > Diagnostic/Settings > Module Information > Diagnostic Buffer). The most recent entry should be the new "Go online" event, not a stale 33:16656.
Troubleshooting Matrix
| Symptom | Most likely cause | Fix |
|---|---|---|
| LINK LED off, no reply to ping | Cable / NIC / port | Try another cable, port, switch; verify auto-MDI/MDIX |
| LINK on, FAST FDX off | 10 Mbit or half-duplex | Replace cable; force 100 Mbit/FDX on managed switch port |
| LINK on, ping time-out | Firewall or wrong subnet | Disable firewall for test; re-check IP/subnet on both ends |
| LINK on, ping OK, Accessible Nodes empty | PG/PC interface bound to wrong NIC | Set PG/PC Interface to S7ONLINE > TCP/IP <correct NIC> |
| Accessible Nodes shows the station, Go online fails | TSAP / connection resource exhausted | Check CP connection resources; remove stale NetPro connections |
| All OK, but only one NIC in PC works | Subnet conflict (two NICs in same /24) | Move second NIC to a different subnet |
| BF LED solid red on CP | Duplicate IP on subnet | Run arp -a; reassign unique IP via Edit Ethernet Node |
| Web server reachable, STEP 7 still times out | TSAP / CPU connection count | Verify the CP's connection resources; check S7-300 CPU connection limits (CPU 314 = 8, CPU 315-2 PN/DP = 16, CPU 317 = 32) |
| Event 33:16655 instead of 33:16656 | Local stack closed the socket (firewall on PC, or partner reset) | Check Windows Firewall rule for TCP 102; check partner PLC for SF LED |
| Event 33:16500 (no route to host) | No route in PC routing table to PLC subnet | Add static route or fix NIC configuration |
Notes on S7-300 / CP 343-1 Connection Resources
CP 343-1 modules support a finite number of S7 connections. Hitting the limit is another common source of 33:16656 - the new connection request finds no free resource and is rejected, not "not responded to". The error code in that case is 33:16508 ("no resources free") rather than 33:16656, but field reports frequently conflate the two.
| CP variant | Order number | Max S7 connections | Max ISO-on-TCP / TCP |
|---|---|---|---|
| CP 343-1 Lean | 6GK7 343-1EX30-0XE0 | 8 | 4 |
| CP 343-1 (standard) | 6GK7 343-1CX10-0XE0 | 16 | 16 |
| CP 343-1 Advanced | 6GK7 343-1GX30-0XE0 | 32 | 32 |
CPU 31x-2 PN/DP variants have their own connection resources for the on-board PROFINET interface. CPU 315-2 PN/DP supports 16 S7 connections, CPU 317-2 PN/DP supports 32. The total S7 connections used by the project (engineering + HMI + OPC + S7 routes) must fit inside both the CPU and the CP. Open NetPro in STEP 7 to audit.
Quick Reference: S7 Diagnostic Event Codes Encountered During CP 343-1 Bring-up
| Event ID | Meaning | Typical root cause |
|---|---|---|
| 33:16656 | Connection partner not responding (this article) | Layer 1/3/7 - check link, NIC, PG/PC interface |
| 33:16655 | Connection aborted locally | PC firewall, CPU STOP, partner reset |
| 33:16657 | Partner rejected connection | TSAP mismatch, security level, certificate |
| 33:16500 | No route to host | Routing table miss on PC |
| 33:16508 | No resources free | CPU/CP connection limit reached |
| 33:16498 | Connection establishment rejected | Wrong PG/PC interface type (e.g. ISO vs TCP) |
FAQ
What does S7 diagnostic event 33:16656 mean on a CP 343-1?
It is a transport-layer time-out: the CPU's S7 communication stack tried to open an ISO-on-TCP or TCP connection, sent the SYN, and received no reply within the keep-alive window. The fault is almost always a layer-1 link problem, a Windows multi-NIC subnet conflict, or a STEP 7 PG/PC interface bound to the wrong adapter - not a CP or CPU hardware failure.
Why does the CP 343-1 LINK LED stay dark on a direct cable to my PC?
Either the cable is bad, the PC NIC port is bad, or the CP is an early firmware V1.x module that does not implement Auto-MDI/MDIX and needs a crossover cable. Insert a switch as a fast test - if the link comes up via the switch but not direct, install a crossover cable or upgrade the CP to firmware V2.0+.
My PC has two network adapters. Which one should I use for STEP 7 to the CP 343-1?
Use the adapter that is physically connected to the CP. Disable every other adapter, or move it to a different /24 subnet (for example, the internet NIC on 192.168.0.0/24 and the engineering NIC on 192.168.1.0/24). Two active adapters in the same /24 will route packets ambiguously and STEP 7 will report 33:16656.
How do I confirm the PG/PC interface is pointing at the right NIC?
Open Set PG/PC Interface, choose S7ONLINE (STEP 7) --> TCP/IP <your Ethernet NIC>, then run the Diagnostics button. Cross-check with ipconfig /all that the NIC you selected carries the engineering IP. In TIA Portal V14 or later the path is Project > Online > Go online > PG/PC Interface.
Accessible Nodes finds the station, but Go online still fails with 33:16656. What next?
Your Layer 1/3 is healthy. The next suspect is the connection resource count on the CP 343-1 (max 8/16/32 depending on variant) or a TSAP mismatch in NetPro. Run PLC > Diagnostic/Settings > Module Information > Diagnostic Buffer - if you see 33:16508, the CP is out of free connections; remove stale NetPro connections or upgrade the CP. If you see 33:16657, the TSAP does not match; verify the partner TSAP in the connection properties.
Can I connect a CP 343-1 to a managed switch with PROFINET and still use STEP 7 from the same port?
Yes, but the switch must allow DCP multicast (01:0E:CF:00:00:00) and must not strip LLDP frames. Disable PROFINET-aware filtering on the engineering port, or use a dedicated dumb switch for the engineering PC. Managed switches with PROFINET compliance (e.g. SCALANCE XC-200) profile the port automatically.
Does this procedure also apply to the S7-300 on-board PROFINET port (CPU 31x-2 PN/DP)?
Yes. The on-board port uses the same TCP/UDP stack and the same diagnostic event codes. The only difference is that you cannot replace the CPU's PROFINET interface with a CP - the connection resource count is fixed by the CPU variant (CPU 315-2 PN/DP = 16, CPU 317-2 PN/DP = 32).