Siemens LOGO! 12/24RCE and KTP700 HMI Network Limits for Hotel

David Krause16 min read
HMI / SCADASiemensTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Siemens LOGO! 12/24RCE and KTP700 HMI Network Limits for Hotel BMS

1. Application Overview

This reference covers the engineering constraints encountered when deploying a large-scale room-automation architecture based on Siemens LOGO! 12/24RCE controllers supervised by a SIMATIC KTP700 HMI panel. The target use case is a hotel building management system (BMS) where each guest room is assigned an autonomous LOGO! 12/24RCE acting as a stand-alone room controller (no LOGO!-to-LOGO! communication), and the HMI acts as a single-head-end visualization client that polls and writes the room setpoints.

For a building of 220 rooms (22 rooms per floor × 10 floors), the design challenge is not the LOGO! program itself but the network-layer capacity of the HMI panel and the LOGO! project limits inside LOGO! Soft Comfort and TIA Portal / WinCC. The following sections define each limit, show the math that bounds the architecture, and propose a workable topology that survives the published constraints.

Field-proven caveat: The "number of connections" advertised by a SIMATIC panel is the hard compile-time ceiling inside TIA Portal. Increasing the configured connections above the panel's published limit causes the WinCC build to fail with error "Maximum number of connections per HMI exceeded," regardless of CPU or memory resources.

2. LOGO! 12/24RCE Hardware Reference

The LOGO! 12/24RCE (Siemens article number 6ED1052-1MD08-0BA1, LOGO! 8.FS4 generation) is the relay-output variant with integrated Ethernet. The key specifications for a hotel room application are summarized below.

LOGO! 12/24RCE technical data
Parameter Value
Supply voltage 12 V DC / 24 V DC (12–28.8 V DC range)
Digital inputs (built-in) 8 (of which 4 usable as analog 0–10 V)
Digital outputs 4 relay contacts, 10 A continuous per NO, 5 A inductive
Analog inputs 4 (shared with DI, 0–10 V, 12-bit)
Ethernet 1 × RJ45, 10/100 Mbit/s, S7-compatible
Program memory 8500 function blocks equivalent
Web server Yes (read-only without password, write with password)
Variable memory for HMI Up to 64 network variables in/out (BM/AM area)
SNTP/NTP Yes (client mode)
Firmware (current) FS4 = V1.81.x as of LOGO! Soft Comfort V8.3

Source: LOGO! 8 System Manual (Siemens Support entry ID 109743415) and the LOGO! product page on the Siemens Industry Online Support portal.

3. I/O Allocation per Hotel Room

A single LOGO! 12/24RCE handles the full room I/O budget. The allocation used in the reference application is:

Per-room I/O map (LOG! 12/24RCE)
Signal Type LOGO! terminal Notes
Room temperature (PT1000 / NTC 10 k) Analog in AI1 0–10 V scaled
Bathroom temperature Analog in AI2 0–10 V scaled
Setpoint UP button Digital in I3 +1 °C pulse, max +5 °C
Setpoint DOWN button Digital in I4 −1 °C pulse, min −5 °C
SOS / panic button (room) Digital in I5 Latching, latched flag to HMI
Door / window status (magnetic contact) Digital in I6 NO contact, 24 V DC wetting
FCU solenoid valve (4-pipe) Digital out, relay Q1 Q1 230 V AC, 2 A inductive
Bathroom radiator solenoid Digital out, relay Q2 Q2 230 V AC, 2 A inductive
Ventilator ON/OFF (3-speed fan via relays) Digital out, relay Q3 Q3 Fan enable, 230 V AC
Spare / window-blind driver Digital out, relay Q4 Q4 Optional 24 V DC blind motor

Two physical analog inputs cover two sensors. Two digital inputs cover the setpoint buttons, two more cover SOS and door status. Four relay outputs cover two solenoid valves, fan enable, and one spare. Total: 2 AI + 4 DI + 4 DO, well inside the LOGO! 12/24RCE envelope.

4. HMI Panel Options and Connection Limits

The SIMATIC HMI panel family used at the head end distinguishes between Basic Panels and Comfort Panels. Each has a different ceiling on simultaneously configurable PLC connections, and this is the single most important number when sizing a multi-LOGO! architecture.

SIMATIC HMI connection ceilings (TIA Portal V13 → V17)
Panel class Example model Article number Max connections Max tags (variables)
KTP400 Basic 6AV2123-2DB03-0AX0 4" touch 4 250
KTP700 Basic PN 6AV2123-2GB03-0AX0 7" touch, Ethernet 4 500
KTP700 Basic DP 6AV2123-2GA03-0AX0 7" touch, Profibus 4 500
KTP1200 Basic PN 6AV2123-2MB03-0AX0 12" touch 4 500
TP700 Comfort 6AV2124-0GC01-0AX0 7" touch, color 8 2048
TP1200 Comfort 6AV2124-1MC01-0AX0 12" touch, color 8 2048
TP1500 Comfort 6AV2124-1QC02-0AX0 15" touch, color 8 4096
TP2200 Comfort 6AV2124-1XC02-0AX0 22" touch, color 8 4096

Source: SIMATIC HMI Operator Panels Manual Collection (entry ID 63481236) and the SIMATIC TIA Portal Help portal on docs.tia.siemens.cloud.

Connection definition: In TIA Portal a "connection" is a logical S7 communication channel between the panel runtime and a single PLC (one LOGO!, one S7-1200, etc.). The HMI runtime polls the configured connections in turn; each connection reserves a separate TCP port and a separate configuration node in the project tree. The 4/8 ceiling is enforced by the WinCC ES at compile time, not by the panel firmware.

5. LOGO! Soft Comfort Project Network Limits

Inside LOGO! Soft Comfort V8.x the LOGO! network project (the topology editor that visualizes Master/Slave relationships and the IP ring) accepts up to 32 LOGO! devices per project, regardless of the HMI brand or number of connections. This limit is set by the LOGO! Soft Comfort editor and the LOGO! BM/AM remote-variable table structure, not by the panel.

Concretely, a LOGO! Soft Comfort project can contain:

  • 1 × LOGO! designated as Master (network coordinator)
  • ≤ 31 × LOGO! designated as Slave (remote variables BM/AM)
  • 1 × external HMI peer (optional, but counted toward the 32-node ceiling in some releases)

If LOGO!-to-LOGO! communication is not required (the case in the hotel BMS where each room is autonomous), the LOGO! Soft Comfort network project is unnecessary — the HMI can be configured as point-to-point S7 client against any number of LOGO! devices by listing each IP under a separate connection.

Reference: LOGO! 8 Communication (System Manual section 7).

6. Maximum Device Math

Combining the two limits yields the absolute ceiling of a LOGO! + SIMATIC HMI architecture:

Maximum LOGO! count per HMI panel class
Panel Connections (logical) Max LOGO! per connection (LOGO! Soft Comfort) Total LOGO! reachable
KTP700 Basic PN (4 conn) 4 31 slaves + 1 master = 32 4 × 32 = 128
TP700 Comfort (8 conn) 8 32 8 × 32 = 256
TP1200 Comfort (8 conn) 8 32 8 × 32 = 256

The formula is straightforward:

N_max = C_panel × N_LOGO_per_connection

where C_panel is the panel connection ceiling (4 Basic, 8 Comfort) and N_LOGO_per_connection is 32 in the LOGO! Soft Comfort project, but in practice 1 if LOGO!-to-LOGO! networking is disabled (one LOGO! IP per connection). This produces two distinct maximum-count interpretations:

  • If each HMI connection is a direct S7 link to a single LOGO! (1:1 reading, no LOGO! network project): the panel ceiling itself is the absolute cap. N_max = C_panel = 4 LOGO! for a KTP700 Basic, 8 for a Comfort panel.
  • If each HMI connection points at a LOGO! Soft Comfort network of 32 LOGO!s: the theoretical cap rises to 128 (Basic) or 256 (Comfort).
Reality check: A WinCC connection in TIA Portal that "talks to a LOGO! network" still only exchanges data with the single LOGO! IP configured on that connection — the LOGO! Soft Comfort network topology (BM/AM remote variables between LOGO!s) is internal to the LOGO! cluster and is invisible to the HMI. The HMI must therefore open one S7 connection per LOGO! it wants to read, even inside a LOGO! network project. The "128 / 256" figure is theoretical and does not survive a real point-to-point integration without intermediate logic.

7. Recommended Architecture for 220 Rooms

For 220 rooms, the only clean answer is to introduce an intermediate aggregation layer:

Option A — LOGO! + S7-1200 head-end (recommended)

  • 220 × LOGO! 12/24RCE in rooms, each with its own fixed IP (e.g. 192.168.10.101 through 192.168.10.220).
  • 1 × SIMATIC S7-1215C DC/DC/DC (or S7-1512C for higher tag count) as the head-end PLC with 4-port switch module (CSM1277 / CM 1542-1).
  • The S7-1200 acts as a Modbus/TCP or PROFINET aggregator: the LOGO! 12/24RCE exposes its VM (variable memory) area via S7-protocol on its Ethernet port; the S7-1200 opens S7 PUT/GET against each LOGO! and mirrors the data into a single DB.
  • 1 × TP1200 Comfort panel reads the single DB on the S7-1200 (1 connection, ≤ 4096 tags).

This satisfies the 220-room target with one head-end panel, deterministic polling, and bounded engineering cost. See the S7-1200 Easy Book for PUT/GET programming details.

Option B — Distributed HMIs (KTP700 Basic per floor)

  • 10 × KTP700 Basic PN, one per floor (22 rooms per floor).
  • Each panel opens 4 S7 connections of its own; with 22 rooms per floor you need at least 22 LOGO! IPs reachable per panel.
  • Result: still over the 4-connection ceiling of a Basic panel — only 4 rooms per KTP700 Basic can be polled. Not viable at 22 rooms/floor without a head-end.

Option C — Comfort panel (TP1200) + LOGO! network projects

  • 1 × TP1200 Comfort panel (8 connections).
  • Each connection serves 32 LOGO!s in a LOGO! Soft Comfort network project.
  • Theoretical 256 LOGO! — sufficient for the 220 target with margin.
  • Engineering penalty: each connection still only exchanges data with the LOGO! it points at, so the network-clustering gain is real only if the LOGO!s inter-communicate BM/AM variables (room-to-room door sharing, etc.). For a stand-alone room controller (no LOGO!-to-LOGO!), this option collapses back to 8 rooms per panel.

8. IP Address Planning

A clean /24 subnet (255.255.255.0) is sufficient for 220 LOGO!s. Recommended layout:

Subnet : 192.168.10.0 / 24
Gateway: 192.168.10.1   (router / S7-1200 head-end)
HMI   : 192.168.10.10   (or .20 for backup)
LOGO! : 192.168.10.101  ..  192.168.10.220
Netmask: 255.255.255.0
DNS   : not used

Reserve 192.168.10.1 through 192.168.10.20 for the head-end PLC, switches, and engineering laptop. Begin LOGO! IP assignments at .101 to keep the static-DHCP table small and reviewable.

In the LOGO! web server, set the subnet mask and disable DHCP. Enable SNTP if time-stamping of SOS events is required.

9. TIA Portal / WinCC Configuration Procedure

The following steps reproduce a working 4-LOGO! connection in TIA Portal V13 → V17 against a KTP700 Basic PN. The same flow scales to a TP1200 Comfort for the 8-connection limit.

  1. Create the project. File → New → "HMI Station with WinCC Comfort" (Basic for KTP700). Select the panel part number exactly (e.g. 6AV2123-2GB03-0AX0 for KTP700 Basic PN).
  2. Add LOGO! 8 devices as "Unspecified S7-300/400" or as "LOGO!" if the catalog contains the entry. Devices & Networks → Add new device → PLC → LOGO! 8.
  3. Configure the Ethernet interface of each LOGO! with a fixed IP from the plan above. Subnet mask 255.255.255.0, no router.
  4. Enable S7 communication on the LOGO!: Tools → LOGO! → Remote Access → enable "Allow S7 communication" (also reachable on the device's web page). Reference: LOGO! 8 communication manual.
  5. Add an HMI connection in TIA Portal. Right-click the panel → Connections → Add S7 Connection → assign the partner IP of the first LOGO!. Repeat for the second, third, and fourth LOGO!. The number of configurable connections is visible on the panel's properties under "Connections / Maximum number" (4 for KTP700 Basic, 8 for Comfort).
  6. Map LOGO! VM addresses to HMI tags. LOGO! exposes variables through the VM (Variable Memory) area at addresses starting at VW0. The simplest mapping uses the LOGO! Soft Comfort "Network Variables" feature, then references each variable's BM/AM address from the HMI tag list (e.g. DB1,BD0). For 1:1 polling of room status, only the local VM area of each LOGO! is needed; no BM/AM networking required.
  7. Build the visualization. One root screen "Floor 01 – 22 rooms" with 22 numeric indicators. Wire each indicator to a tag pointing at the corresponding LOGO!'s VM word for the room temperature, setpoint, SOS latch, and door status.
  8. Compile and download. Compile the HMI configuration. If the message "Maximum number of connections per HMI exceeded" appears, the configured count is above 4 (Basic) or 8 (Comfort) — remove connections until the build succeeds.
  9. Set access password for the HMI connection. For each connection, open Connection → Properties → "Access Password" and enter the LOGO! access password. This is the password required by the LOGO! to accept PUT/GET from a non-trusted peer. Reference: TIA Portal help – "Access password for the HMI connection".
  10. Verify with the online diagnostics. HMI → Online → Diagnostics → Connections. Each connection should show status "Connected" within 10 s of PLC scan.

10. Powerline Networking Considerations (TP-Link AV500)

Hotel retrofits rarely permit new Cat-6 cabling. TP-Link AV500 HomePlug AV adapters (e.g. TL-PA4010, TL-PA4020P with pass-through) provide a workable physical layer for LOGO! Ethernet if the following conditions are met:

  • Same phase or three-phase coupling: AV500 signals propagate through a single 230 V phase. Across phases the signal must traverse the building's three-phase coupling at the distribution board, which heavily attenuates the link. Verify a working link by pairing the adapters and reading the LED status before mounting.
  • Pair programming: encrypt the powerline segment with a private 16-character key to avoid accidental cross-talk with neighboring apartments.
  • Bandwidth: AV500 is nominally 500 Mbit/s PHY, ~80–100 Mbit/s TCP throughput in practice. LOGO! traffic is well below 1 Mbit/s, so the headroom is large; latency is the real concern.
  • Latency budget: typical round-trip per powerline hop is 5–15 ms. For 220 LOGO!s polled at 200 ms each over 4 simultaneous connections, average age of a value is ~55 s — acceptable for room-status display, marginal for SOS alarm annunciation. Plan a dedicated cyclic interrupt on the head-end to poll SOS flags at ≤ 1 s.
  • EMC separation: install powerline adapters at least 0.5 m away from any VFD, elevator drive, or step-up transformer to minimize common-mode noise.

11. Tag-Budget Calculation

For 220 rooms, each exposing 8 HMI tags (room temp, bath temp, setpoint, fan state, valve 1, valve 2, SOS, door), the total tag count is:

tags_total = 220 × 8 = 1760 tags

The KTP700 Basic PN limit is 500 tags — insufficient for 220 rooms. The TP1200 Comfort supports 2048 tags — sufficient. If the Comfort panel is selected, also confirm the connection count (8) and split the LOGO!s across 8 connections of 28–32 devices each:

connections_used = ceil(220 / 32) = 7
logos_per_connection = floor(220 / 7) = 31   (last: 220 - 6×31 = 34)
Connection load-out for 220 LOGO!s on TP1200 Comfort
HMI connection LOGO! count LOGO! IP range
Conn 1 31 192.168.10.101–131
Conn 2 31 192.168.10.132–162
Conn 3 31 192.168.10.163–193
Conn 4 31 192.168.10.194–224 (rescaled)
Conn 5 31 192.168.10.225–255
Conn 6 31 192.168.10.256–286 (rescaled outside /24)
Conn 7 34 192.168.10.287–320
Subnet warning: a /24 mask caps usable host addresses at 254. The 220-LOGO! target stays inside 192.168.10.1 – 192.168.10.220, but if you stack additional devices (engineering PG, IP cameras, switches), reserve the top of the range for those and shrink the LOGO! IP pool accordingly. Alternatively, widen the subnet to /23 (510 hosts) to gain headroom.

12. Verification Checklist

Before declaring the architecture production-ready, run the following checks:

  1. Build clean compile in TIA Portal. No "Maximum number of connections per HMI exceeded," no "tag limit exceeded" warnings.
  2. Web-server confirmation. Browse to http://192.168.10.101 from a PC; the LOGO! home page shows "Operating mode: RUN," supply voltage, and current VM variables. Repeat for each room IP.
  3. Single-LGO! connection test. Configure connection 1 only, download the HMI project, cycle the HMI, and confirm the room temperature, setpoint, and SOS latch update on the screen within 2 s.
  4. Multi-LOGO! connection test. Repeat with all 7 (or 8) connections active. Verify update latency by toggling the SOS push-button in room .101 and confirming the indicator lights within 1.5 s.
  5. Watchdog / fail-state. Disconnect the Ethernet cable of room .101 and confirm the HMI shows a "No connection" alarm after the configured timeout (default 5 s).
  6. Setpoint write-back. From the HMI, push a +1 °C setpoint and confirm the room's analog input count registers the change. This exercises PUT/GET, not just GET.
  7. Access-password test. Remove the LOGO! access password and re-attempt a write from the HMI — the connection should refuse, confirming the password path is active.

13. Alternative Controller Considerations

If the project scope expands beyond room control — windows, doors, blinds, room power contactors — a single LOGO! 12/24RCE may run short of outputs (only 4 relays). Alternatives:

LOGO! variants for higher I/O
Variant Article no. DI DO AI Relay rating
LOGO! 12/24RCE 6ED1052-1MD08-0BA1 8 4 R 4 10 A / 5 A inductive
LOGO! 24RCE (24 V DC supply) 6ED1052-2MD08-0BA1 8 4 R 4 10 A / 5 A
LOGO! 230RCE (230 V AC supply) 6ED1052-1FB08-0BA1 8 4 R 0 (no AI native) 10 A
LOGO! 8 AM2 RTD module 6ED1055-1MD00-0BA2 2 × Pt100/Pt1000
LOGO! 8 AM2 AQ module 6ED1055-1MM00-0BA2 2 AO 0–10 V
LOGO! 8 DM16 230R 6ED1055-1CB10-0BA2 8 8 R 5 A

If a single room requires more than 4 relay outputs, stack a DM8 / DM16 expansion module to the right of the base unit. The I/O bus supports up to 24 digital inputs and 20 digital outputs across all expansion modules combined.

If the head-end architecture must scale beyond a single Comfort panel (e.g. a chain of 5 hotels × 220 rooms), move the aggregation layer up to WinCC Professional / SCADA running on a server PC with S7 drivers; this lifts the connection ceiling to 256 PLC connections per OS server, suitable for thousands of LOGO!s.

14. Summary

A 220-room hotel BMS cannot be addressed by a single SIMATIC HMI without an aggregation strategy. The published numbers are:

  • LOGO! Soft Comfort V8 network project: 32 LOGO!s
  • KTP700 Basic PN: 4 connections, 500 tags
  • TP700 / TP1200 Comfort: 8 connections, 2048 tags

The clean engineering answer is a SIMATIC S7-1200 (or S7-1500) head-end PLC acting as a poll-and-mirror concentrator, with one Comfort panel on the operator side. Direct "LOGO! ↔ HMI" topologies cannot reach 220 rooms in a single panel under the published TIA Portal limits.

Can one KTP700 Basic PN read 220 LOGO! 12/24RCE controllers?

No. The KTP700 Basic PN allows only 4 S7 connections and 500 tags. With 220 rooms × 8 tags ≈ 1760 tags and one LOGO! per connection needed for 1:1 polling, the architecture cannot reach 220 devices from a single Basic panel. Use a Comfort panel plus an S7-1200 head-end, or split across multiple Comfort panels per floor.

How many LOGO!s can a TP1200 Comfort panel address?

Up to 8 S7 connections and 2048 tags. If each connection is a point-to-point link to a single LOGO!, the ceiling is 8 LOGO!s. If each connection serves a LOGO! Soft Comfort network project of 32 LOGO!s, the theoretical ceiling is 8 × 32 = 256 LOGO!s, but the HMI only exchanges data with the connection's anchor LOGO! — not with the cluster behind it — so the practical ceiling for a room-automation architecture stays at 8 LOGO!s per panel.

What is the maximum number of LOGO!s in a single LOGO! Soft Comfort project?

32 devices: 1 LOGO! designated as Master and up to 31 Slaves. The HMI is an optional peer in the project tree. This is enforced by the LOGO! Soft Comfort editor (V8.0 onward) and is independent of the HMI panel brand.

Do the LOGO!s need to communicate with each other for the hotel BMS to work?

No. Each room is autonomous: the LOGO! reads its own two temperature sensors, four digital inputs, and drives its four relay outputs. Room-to-room data sharing is not required for setpoint, SOS, or door-status display. The HMI reads each LOGO! individually over Ethernet (S7 PUT/GET or VM read).

Can TP-Link AV500 powerline adapters be used to network 220 LOGO!s?

Yes, provided all adapters are on the same 230 V phase or coupled through the building's three-phase coupling, and the segment is encrypted with a private 16-character key. Latency is ~5–15 ms per hop, suitable for status polling but plan a ≤ 1 s polling cycle for SOS annunciation to keep alarm latency below 2 s end-to-end.

Where do I configure the access password that the LOGO! requires from the HMI?

In TIA Portal, open the HMI connection → Properties → "Access Password" tab, and enter the password configured in the LOGO! (Tools → LOGO! → Remote Access on the device web page). See the official TIA Portal Help topic "Access password for the HMI connection" on docs.tia.siemens.cloud.

Back to blog