Siemens S7-200 PLC Technical Reference and CPU Comparison Guide

Siemens S7-200 PLC Family Overview and Positioning

The SIMATIC S7-200 is Siemens' micro-PLC platform, designed for small standalone machines, OEM equipment, and remote telemetry applications. The S7-200 occupies the price/performance tier below the modular S7-300 and S7-400 lines, trading scalability and instruction breadth for compact form factor and lower unit cost. Across three decades the family has shipped in three distinct generations: the legacy S7-21x series (CPU 212, 214, 215, 216), the enhanced S7-22x series (CPU 221, 222, 224, 224XP, 226), and the current S7-200 SMART successor line. Detailed electrical and mechanical specifications are documented in the official SIMATIC S7-200 Programmable Controller System Manual.

Position the S7-200 against the rest of the SIMATIC portfolio as follows:

S7-21x Series CPU Specifications (Legacy Generation)

The S7-21x generation uses the STEP 7 Micro/WIN V3.x or V4.0 programming environment and is no longer in active production. Field installations remain widespread in water/wastewater, OEM machinery, and remote telemetry. Key specifications per the S7-200 system manual:

The CPU 216 remains the most deployed legacy CPU because of its 24 DI / 16 DQ on-board density and dual PPI/freeport interfaces. Municipal water utilities operate CPU 216 fleets driving lift-station RTUs where the Siemens Modbus slave subroutine (application tip 26719739) is loaded into Subroutine 0 and polled by SCADA masters at 9.6 kbps.

Power supply requirements are identical across the S7-21x family: 85 to 264 VAC at 47 to 63 Hz with a 24 VDC sensor output delivering up to 180 mA (CPU 214/215) or 280 mA (CPU 216). Hold-up time on 24 VDC supply loss is 10 ms minimum, which is sufficient to ride through contactor coil collapse but not sufficient for graceful shutdown.

S7-22x Series CPU Specifications (Enhanced Generation)

The S7-22x series introduced parameterized subroutines (pass-by-value local variables), PID auto-tune, recipe storage on cartridge, and a redesigned STEP 7 Micro/WIN V4.0 development environment. The S7-200 system manual specifies the following comparison across the S7-22x CPUs:

The CPU 224XP is the workhorse for motion-friendly applications because its two 100 kHz high-speed counters and 100 kHz pulse outputs can command stepper drives directly through Q0.0 and Q0.1. The CPU 226 (and 226XM) is the right choice when a pick-and-place retrofit must replace a legacy Allen-Bradley PLC-5 while driving 24 inputs and 16 outputs of I/O in the original junction-box footprint. The dual RS-485 ports let one port face the HMI and the other port face a Modbus RTU master without requiring the CP 243-1 Ethernet module.

S7-200 SMART CPU Specifications

The current generation is the SIMATIC S7-200 SMART, documented in the S7-200 SMART System Manual. It retains the S7-200 programming paradigm but adds an integrated Ethernet port, a micro SD card slot, and updated I/O density. The CPU naming convention shifts from CPU 22x to SR20/ST20/ST30/ST40/ST60.

I/O Expansion and Module Catalog

The S7-200 family uses a side-mounted bus that carries 5 VDC power and a proprietary protocol; digital and analog expansion modules are hot-replaceable only on the S7-200 SMART. Representative EM module functions from the S7-200 system manual:

The legacy platform does not include a PROFIBUS DP master module or a dedicated ASCII/Basic interpreter module. For barcode readers and programmable instruments without ASCII capability, use the freeport USS or user-defined protocol mode on Port 0/Port 1, accepting that throughput is limited to 187.5 kbps without parity or to 115.2 kbps with proper shielded cable.

STEP 7 Micro/WIN Programming Environment

The S7-200 development tool is STEP 7 Micro/WIN V4.0 SP9 (the last release compatible with Windows 10). The environment supports three programming languages:

• LAD (Ladder): IEC 61131-3 graphical; default for relay-logic substitution.
• FBD (Function Block Diagram): IEC 61131-3 graphical; useful for math and signal conditioning.
• STL (Statement List): Siemens text language; required for indirect addressing and pointer manipulation.

The editor enforces a single global symbol table across the entire project. Parameterized subroutines (introduced in the S7-22x) accept local variables that are passed by value, allowing libraries of reusable FB-style logic. However, arbitrary symbolic address mapping is restricted — you cannot assign an arbitrary byte offset to an arbitrary name without using the AT attribute workaround introduced in firmware V1.20 of the S7-22x CPUs.

A minimal PID loop using the PID wizard expansion:

NETWORK 1    // Auto-tune trigger
LD     SM0.0
CALL   PID0_INIT, VB100, VW200, VW202, 0, 1.0, 0.1, 0.0
NETWORK 2    // Manual mode disable
LD     I0.0
EU
RST    M0.1

The PID0_INIT call expands to the standard Siemens PID instruction with table pointer VB100, process variable VW200, setpoint VW202, mode 0 = auto, gain 1.0, sample time 0.1 s, integral/derivative = 0 for first commissioning. The PID0 table occupies 36 bytes starting at VB100 and must not overlap any other variable region in V memory.

Communication Protocols and Interfaces

The S7-200 RS-485 ports natively support three modes:

The S7-200 SMART adds PROFINET via the on-board Ethernet port for programming, HMI, and S7-protocol PUT/GET peer communication up to 16 active connections. Freeport on the S7-200 SMART is still RS-485 but supports Modbus RTU master without a separate library. Newer Siemens Industrial Edge devices extend the S7-200 SMART with cloud-ready MQTT and OPC UA Pub/Sub on top of the native PROFINET stack.

Freeport receive programming template:

NETWORK 1
LD     SM0.1
MOVB   9, SMB30        // 9600 bps, no parity, 8 data, 1 stop
MOVB   200, SMB87      // RCV enable, idle detect, msg timeout
MOVB   50, SMB88       // Start char = any
MOVB   16#0A, SMB89    // End char = LF
MOVW   +1000, SMW92    // Inter-character timeout 1000 ms
ATCH   RCV_DONE, 23    // Event 23 = RCV complete
ENI

Wiring, Removable Connectors, and Field Installation

The legacy S7-200 ships with screw-type fixed terminal blocks on most CPU variants. Removable terminal blocks are available as separately ordered accessories because field retrofits (especially when replacing an Allen-Bradley PLC-5 with an S7-224) require that the field wiring be unplugged and reseated without disturbing stranded conductors. Fixed blocks force a re-strip of every wire during a junction-box swap-out.

Wire gauge accepted by the removable blocks is 0.3 to 1.0 mm² (22 to 17 AWG). Torque to 0.4 N·m. The on-board 24 VDC sensor supply (marked "L+" / "M" on the lower terminal row) delivers up to 180 mA on the CPU 222/224 and 280 mA on the CPU 226 — sufficient for approximately 12 standard 24 VDC 3-wire sensors at 20 mA each. For additional sensors, add an external 24 VDC power supply that shares the same ground reference as the CPU chassis.

Application Case Studies

Case 1 — Pick-and-place retrofit (S7-224 in place of PLC-5): A packaging machine previously controlled by an Allen-Bradley PLC-5 was split into four zones (pick-and-place, resistance welder, conveyor, RF seal, operator interface). Each zone consumes 40 inputs and 36 outputs, total 76 I/O points. An S7-224 per zone (with one EM 223 + one EM 235) handles the full program in approximately 4 KB of code. Compared to an equivalent S5-95U implementation, the S7-224 program is roughly 40 percent smaller while delivering more diagnostic functionality.

Case 2 — Wastewater lift-station RTU (CPU 216 fleet): A municipal utility standardized on the CPU 216 because of its dual RS-485 ports: Port 0 in PPI for laptop programming, Port 1 in freeport Modbus RTU slave. The Siemens application subroutine 26719739 implements the Modbus slave in Subroutine 0, polled by a SCADA master at 9.6 kbps. CPU 216 RTU populations of 600+ units have demonstrated MTBF figures of 12+ years because the CPU has no moving parts and no fan.

Case 3 — Small servo axis (CPU 224XP + EM 253): The CPU 224XP delivers two 100 kHz pulse trains directly from its transistor outputs (Q0.0 and Q0.1), sufficient to command a stepper drive through an indexer. For a single servo axis with closed-loop feedback, an EM 253 positioning module accepts differential A/B/Z encoder inputs and provides one direction/step pulse output, configurable for S-curve or trapezoidal profiles up to 200 kHz with 1 ms acceleration ramp resolution.

Migration to S7-200 SMART and Beyond

New designs should not specify the legacy S7-200 CPU 21x/22x. Specify the S7-200 SMART line. For applications that outgrow the S7-200 SMART, the natural upgrade is the connected S7-1200 with PROFINET, or for data-heavy applications, an ET 200S distributed I/O node coordinated by an Industrial Edge gateway.

Program conversion from Micro/WIN to TIA Portal is supported via the S7-200 SMART migration tool in TIA V17 and later. The tool maps the S7-200 symbol table to a TIA Portal DB, preserves LAD/FBD networks, and flags any STL instructions requiring manual review. SM (Special Memory) bits and V-memory addresses require explicit remapping because the TIA Portal address model differs from the legacy Micro/WIN flat memory model.

Troubleshooting Matrix

FAQ