Problem Summary
A SIMATIC S7-1516F-3 PN/DP controller is connected through PROFINET to an ET 200SP distributed I/O station built around an IM 155-6PN ST interface module that also carries F-I/O modules. After downloading the STEP 7 / TIA Portal hardware configuration, the IM 155-6PN enters a hard fault state: the SF (group error) and BF (bus fault) LEDs illuminate, the channel diagnostics on the inserted I/O modules flash, and the CPU's diagnostic buffer records the following entry:
IO device failure — PNIO configuration error (connection parameter) — internal AR code: 15
The PROFINET connection itself is physically intact. Both the S7-1516F-3 PN/DP and the IM 155-6PN respond to ping and appear in the "Accessible nodes" list with their configured IP addresses. The Application Relationship (AR) between the PROFINET IO controller and the PROFINET IO device is rejected during connection parameter negotiation, before any cyclic data exchange starts. This is a configuration-side failure, not a cable or layer-1 issue. The error text uses the word "connection", which frequently steers engineers toward network topology, but the actual root cause is in the device/station configuration record.
Affected Hardware and Required Firmware
Confirm the exact catalog numbers and firmware versions in the field before opening the project in TIA Portal. AR code 15 is version-sensitive, so use the SIMATIC Automation Tool, the device's web server, or the online & diagnostics view in TIA Portal to read the live firmware of every PROFINET device involved.
| Component | MLFB / Article Number | Firmware versions relevant to the fix | Notes |
|---|---|---|---|
| SIMATIC S7-1516F-3 PN/DP | 6ES7516-3FN02-0AB0 | V2.6 / V2.8 / V2.9 / V3.0 / V3.1 | 3 PN ports, 1 DP port; safety CPU |
| ET 200SP IM 155-6PN ST (standard) | 6ES7155-6AU02-0BN0 | V4.4 / V4.5 (FW release ≥ V4.0) | Up to 32 I/O modules, 1 slot for server module |
| ET 200SP IM 155-6PN HF (high feature, F-capable) | 6ES7155-6BA00-0CN0 | V4.4 / V4.5 (FW release ≥ V4.0) | Supports F-I/O, Isochronous Real Time, Shared Device |
| STEP 7 Professional / TIA Portal | — | V15.1 / V16 / V17 / V18 | Use a version that ships the matching HSP for the installed IM |
Root Cause Analysis: What AR Code 15 Actually Means
PROFINET uses the term "AR" (Application Relationship) for the cyclic data channel between an IO controller and an IO device. Before the controller can exchange process data, it must establish the AR by exchanging the expected configuration record (the AR Set with slot, subslot, module, sub-module, and expected identification data) with the device. The device then compares the offer against what it has physically plugged in and configured internally.
When the device's comparison fails, the controller receives an AR abort with a vendor-specific error code. On Siemens IM 155-6PN stations, the most common abort codes encountered in the field are:
| Internal AR code (decimal / hex) | Typical cause on ET 200SP | Field action |
|---|---|---|
| 1 / 0x0001 | Station name mismatch (assigned name ≠ expected name in controller record) | Re-assign PROFINET device name with PRONETA or TIA |
| 5 / 0x0005 | Slot contains a different module type than projected | Compare slot list against physical build |
| 11 / 0x000B | Sub-module / channel diagnostic identifier unknown | Update GSD or HSP for the module |
| 14 / 0x000E | Sub-module state mismatch (wrong parameter record) | Check parameter assignment of F-I/O module |
| 15 / 0x000F | Configuration record error: firmware version, IM revision or subslot ID does not match the controller's expectation | Verify the IM firmware selected in the device configuration against the actual IM firmware; update the HSP or downgrade the configured firmware |
| 24 / 0x0018 | Vendor-specific: F-I/O signature or PROFIsafe address mismatch | Re-assign PROFIsafe addresses on F-modules |
| 27 / 0x001B | PROFINET IO watchdog time-out (cyclic frame loss) | Check cable, port, and update time |
AR code 15 covers any "configuration record error" detected at AR establishment. In practice on ET 200SP this almost always traces back to one of three root causes:
- Wrong firmware in the offline project: the IM 155-6PN has, for example, firmware V4.5 installed, but the TIA Portal device configuration pins the IM to V4.2 because the engineer dragged an old HSP version into the project, or because the TIA Portal installation does not yet contain the newer HSP.
- Wrong module order or empty slots in a station: the configuration includes a module ID that the actual IM does not support on the given firmware, or a slot is reserved without a corresponding module.
- Mixed F- and standard I/O mis-wired in slot: an F-capable module (e.g., 6ES7136-6BA00-0CA0) is placed in a slot whose BaseUnit is not a Type F BaseUnit, so the module ID is correct but the channel does not start.
Preliminary Diagnostics Before Opening TIA Portal
- Open the SIMATIC project and switch to Online > Accessible nodes. Verify that the S7-1516F-3 PN/DP and the IM 155-6PN both appear with their configured IP addresses.
- Ping both devices from a workstation on the same subnet. PROFINET uses ICMP echo, so a successful ping pass means TCP/IP, ARP, and the switch path are working.
- Open the IM 155-6PN web server by typing its IP into a browser (default port 80; user "admin", password configurable in TIA Portal under Properties > Web server > Security). Navigate to "Module information" and record the Article number (for example 6ES7155-6AU02-0BN0) and Firmware version (for example V4.5.0).
- Use the "Online & Diagnostics" view in TIA Portal: select the IM, go to Online & Diagnostics > Module information > Firmware version. This is the authoritative view and is identical to the web server output.
- Open "Topology view" in TIA Portal and switch to Online > Compare offline/online. Resolve every reported difference using the "Synchronize" action. Pay particular attention to neighbour port assignments and cable delay measurements; topology mismatches do not normally cause AR code 15 on their own, but they can mask the real cause by confusing the diagnostic buffer.
Detailed Diagnostic Buffer Interpretation
Read the detailed diagnostic buffer of both the CPU and the IM 155-6PN. The buffer text alone ("PNIO configuration error") is too generic to isolate the cause. Click on the entry to open the detail pane and copy the following fields:
| Field in buffer detail | What it tells you | Example value |
|---|---|---|
| Event ID | PROFINET event class / number; cross-reference to Siemens KB | 0x000F (15) |
| Slot | Slot number in the station; 0 = head module (IM) | 0 |
| Subslot | Subslot within the slot; 0x8000 = IM head, 0x8001+n = I/O module n | 0x8001 |
| Channel | Channel within the subslot; 0x8000 = subslot itself | 0x8000 |
| Error type / Error specifier | Bit-level reason for the abort | 0x001F |
| AddValue 1 / 2 | Vendor-specific payload: e.g., expected vs. actual module ID | 0x0001 vs 0x0002 |
Hex code 0x000F = decimal 15 = "Configuration record: module/subslot identification data rejected". Hex code 0x0018 = decimal 24 = "PROFIsafe parameter or address error". The two are easily confused; if the add-value pair matches the expected PROFIsafe address, then AR code 24 is the actual cause and the path below will not help.
Repairing the Station Configuration in TIA Portal
Update the device description in TIA Portal
- In the TIA Portal device configuration of the IM 155-6PN, right-click the device and choose Change device.
- Replace the IM 155-6PN with the correct article number and firmware from the hardware catalog. If the correct article number is not in the catalog, install the matching HSP from the Siemens Industry Online Support portal: search for "HSP 0330 ET200SP" or the specific article number, then run Options > Support Packages > Install Support Packages.
- After the HSP installation, restart TIA Portal to refresh the hardware catalog.
Re-assign the PROFINET device name
- Select the IM 155-6PN in the project tree, then Online > Assign PROFINET device name.
- Choose the MAC address of the IM, the configured name (must match the device configuration 1:1, case-sensitive, no trailing spaces), and the configured IP address.
- Click Assign name — the IM is identified by the PROFINET DCP protocol on the network and the name is written to non-volatile memory.
- Repeat the assignment after a power cycle to confirm that the name persists. A PROFINET name that does not persist indicates a server module issue or a defective IM.
Re-compile and download the hardware configuration
- Right-click the device or the entire S7-1516F-3 station and choose Compile > Hardware (rebuild complete).
- Mark the CPU and choose Download to device > Hardware configuration.
- Confirm the prompt "Stop CPU and download" — the AR is rebuilt during the download and the CPU is restarted with the new configuration.
- Watch the IM 155-6PN: the SF LED should extinguish within 5–10 seconds of the AR re-establishment, and the BF LED should also extinguish once the cyclic frames are exchanged.
Verification Steps
- Switch to Online > Accessible nodes and confirm the IM 155-6PN now shows a green status icon.
- Open "Online & Diagnostics" of the IM — the "Status" tab should show "Module OK" and the SF and BF LEDs should be off.
- Check the I/O modules' status LEDs: a solid green RUN LED per module means the module is exchanging cyclic data.
- Read the diagnostic buffer of both the CPU and the IM. There should be no new "IO device failure" entry after the download. A clean buffer is the strongest evidence that AR code 15 is resolved.
- Use a watch table in TIA Portal to read one input byte of the ET 200SP and toggle a corresponding input on the field wiring — the value should change online within one PROFINET update time.
- For F-I/O: open the safety program in TIA Portal, go to Safety > Compile and check, then F-Runtime group > Passivate / Reintegrate the F-I/O. Reintegration must succeed with no PROFIsafe CRC error.
F-I/O Specific Considerations on the S7-1516F-3
The "F" suffix on the S7-1516F-3 PN/DP enables PROFIsafe over PROFINET for fail-safe I/O. The IM 155-6PN must be the F-capable variant (article 6ES7155-6BA00-0CN0 or newer) and the F-modules must sit on Type F BaseUnits (BU15-P16+A0+2B or BU20-P6+A0+2B-T with the -T suffix for the dark-coloured coding element on the backplane). Misplacing an F-module on a non-F BaseUnit can also raise AR code 15 on the failing slot, even though the controller still receives an "AR abort" for the entire station.
| F-Element | MLFB | Required BaseUnit | PROFIsafe address range |
|---|---|---|---|
| F-DI 8x24VDC HF | 6ES7136-6BA00-0CA0 | Type F, BU15-P16+A0+2B | 1–65535 |
| F-DQ 4x24VDC/2A HF | 6ES7136-6DB00-0CA0 | Type F, BU15-P16+A0+2B | 1–65535 |
| F-AI 4xI 2-/4-wire HF | 6ES7136-6AA00-0CA1 | Type F, BU20-P6+A0+2B-T | 1–65535 |
| F-PM-E 24VDC/8A | 6ES7136-6PA00-0BC0 | Type F, BU30-P16+A0+2B | n/a (power module) |
Use the Configuration Control with S7-1500 and ET 200SP application document if you intend to enable or disable I/O modules by the PLC program (option handling). Configuration Control adds an additional layer of AR parameter records and can surface as AR code 15 if the control record is not aligned with the slot list.
Troubleshooting Matrix
| Symptom | Likely fault | Where to look | First action |
|---|---|---|---|
| SF + BF on IM, IO device failure in CPU buffer | Configuration record error (firmware/HSP/slot) | CPU diagnostic buffer + IM web server firmware page | Update HSP, change device, re-download |
| SF on IM, BF off, "Station failure" | No PROFINET name assigned or name mismatch | Online > Accessible nodes, PRONETA | Assign PROFINET device name |
| SF on IM, "PROFINET IO: submodule removed" | Physical module missing or wrong order | Compare module list with physical build | Re-seat or replace module |
| SF on F-DI only, F-CPU in STOP, passivation only | PROFIsafe address mismatch or wire break | F-DI diagnostic buffer, channel value | Re-assign PROFIsafe address |
| Cyclic red on IM, then green, then red (oscillating) | IP address or name assigned twice on two devices | PRONETA network analysis | Remove duplicate assignment |
| BF steady on IM, SF off, CPU does not see device | Cable fault, wrong port, switch issue | Topology view, partner port info | Replace cable, check port LED |
Preventive Measures and Best Practices
- Centralise firmware management. Use the SIMATIC Automation Tool to read every device's firmware, compare it to the TIA project, and raise a deviation report. This is the single most effective countermeasure for AR code 15.
- Use the latest HSP that matches the project version. When starting a new project, install the most recent HSP for the IM 155-6PN family before you instantiate the device. Older TIA installations default to older firmware entries, and the next engineer on the project may add a newer IM without updating the HSP.
- Document PROFINET names and IPs in a separate file. A name with a typo (extra space, wrong case, leading/trailing space) is reported as a configuration record error by some IM revisions and is time-consuming to debug from the buffer alone.
- Use PRONETA (free) for field commissioning. PRONETA's "Network analysis" and "IO test" features quickly identify name/IP duplicates, missing device names, and wrong module placements before the first CPU download.
- Enable the "Report PROFINET IO device state" option in the S7-1500 CPU under Properties > PROFINET interface > Diagnostics addresses. This gives you a status bit in the process image that tells you when a device is in AR error state and can be linked to the HMI diagnostic screen.
- Set the diagnostic interrupt OB82 and the device-fault OB83 in the S7 program. Without these OBs the CPU will simply enter the AR abort without a visible reaction; with them, you can log the exact slot, subslot, and event ID to a ring buffer on the CPU.
- Keep the IM 155-6PN firmware and the TIA Portal HSP version aligned across the project life cycle. When you upgrade the IM firmware in the field, update the TIA project at the same time, otherwise the next project restore from the TIA backup will overwrite the IM's expectations and re-introduce AR code 15.
TIA Portal Configuration Reference for the S7-1516F-3 PN/DP
Per the official TIA Portal V17 documentation for the CPU 1516F-3 PN/DP, the configuration sequence is:
- Create a new project in the TIA Portal portal view.
- Add the F-CPU and select the matching article number (6ES7516-3FN02-0AB0 for the F variant).
- Configure PROFINET interface X1: set IP address, subnet mask, and router (if used). The PROFINET device name on the X1 interface is what the IM will see in the AR offer.
- Enable the F-capability under Properties > F-Configuration. This sets the PROFIsafe CRC length and enables the F-runtime group support.
- Add the IM 155-6PN as IO device, configure the slot list, and download. The full procedure is documented in the SIMATIC S7-1500 / ET 200MP Manual Collection — Step 1 Configuring the CPU 1516F-3 PN/DP chapter.
PROFINET Update Time and Performance Considerations
AR code 15 is raised at connection establishment, but a related class of faults surfaces only after the station has been running for a while. Set the PROFINET update time explicitly in the device properties of the IM 155-6PN rather than leaving it on "automatic":
| Number of I/O modules | Recommended update time (RT, Class 1) | Notes |
|---|---|---|
| ≤ 8 | 1 ms | Lowest jitter; verify switch supports cut-through |
| 9–16 | 2 ms | Default for most F-I/O applications |
| 17–32 | 4 ms | Sufficient for non-motion applications |
| F-I/O with PROFIsafe V2.6 | ≥ 4 ms recommended | PROFIsafe watchdog is sized to update time |
An update time that is too short relative to the number of modules or the switch latency will not cause AR code 15, but it will raise AR code 27 (PROFINET watchdog timeout). If the diagnostic buffer alternates between code 15 and code 27, set the update time to the next value in the table above and re-test.
Firmware Update Procedure for the IM 155-6PN in the Field
- Download the firmware file (for example "IM1556PN_V45.zip") from the Siemens Industry Online Support portal entry for the IM article number.
- Extract the file to a known location on the TIA Portal workstation.
- In the TIA Portal project, open the IM 155-6PN device configuration and select Properties > General > Firmware update.
- Browse to the extracted
.updfile and confirm the target version. - Connect online, place the IM in STOP by switching the IM to "Update in RUN" mode only if your station supports it; otherwise plan a CPU stop.
- Click Execute update. The IM reboots after the update. The PROFINET name and IP address are preserved.
- After the reboot, re-read the firmware in the IM web server to confirm the new version.
- Update the offline TIA project to the same firmware version, recompile, and download to the CPU so that the controller's AR offer matches the IM.
Frequently Asked Questions
What does PROFINET internal AR code 15 mean on an ET 200SP?
AR code 15 is a configuration record error raised by the IM 155-6PN when the expected module identification, subslot, or firmware version in the controller's AR offer does not match what the IM has physically installed. The most common cause is a firmware version mismatch between the IM and the TIA Portal device configuration.
Can I fix AR code 15 without stopping the F-CPU?
No. Downloading a new hardware configuration that changes the IM firmware, the F-I/O signature, or the module slot list requires the S7-1516F-3 PN/DP to be in STOP. Plan a maintenance window and re-validate the safety signature before returning the system to production.
Do I need a new HSP in TIA Portal to support my IM 155-6PN?
If the article number is not in your TIA Portal hardware catalog, you do. Install the latest HSP (Hardware Support Package) for the ET 200SP family from the Siemens Industry Online Support portal so that the project contains the correct article number and firmware versions.
How do I read the firmware of the IM 155-6PN in the field?
Open the IM's web server (default port 80) or use the TIA Portal Online & Diagnostics view on the IM. Both report the article number and firmware version currently flashed in the module. The SIMATIC Automation Tool can also enumerate all devices on the network and export a firmware report.
Why does the diagnostic text say "PNIO configuration error (connection parameter)" if the problem is firmware?
PROFINET categorises the abort under "connection parameter" because the AR offer is rejected during the configuration phase. The detailed diagnostic buffer entry decodes the abort and reveals the actual cause — AR code 15 in this case — so always expand the buffer entry to the detail view before concluding.
What is the difference between AR code 15 and AR code 24?
AR code 15 (0x000F) is a configuration record error, typically caused by firmware, HSP, or slot mismatch. AR code 24 (0x0018) is a vendor-specific PROFIsafe error, typically caused by a wrong PROFIsafe address on an F-module or a wrong F-I/O signature in the safety program.