Troubleshooting Profibus DP on Hach SC1000 in TIA Portal V15

David Krause13 min read
ProfibusSiemensTroubleshooting
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

Troubleshooting Profibus DP on Hach SC1000 in TIA Portal V15

A Siemens CPU 1512SP-1 PN controlling a Hach Lange SC1000 multi-channel digital controller over Profibus DP through a CM 1542-5 master module is a typical water/wastewater analyser network. Field engineers frequently report that the SC1000 stays "not reachable" after GSD installation and address configuration. The root cause is almost always a mismatch between the SC1000 keypad-configured Profibus telegram and the slot configuration downloaded into the S7-1500, compounded by an incomplete project download. This reference walks through architecture, GSD handling, telegram alignment, hardware download, and the data-exchange program required to bring the link up.

1. System Architecture

The network is a classic Profibus DP master/slave link with a hybrid ET 200SP station acting as the head-end controller.

Component Order Number / Model Role
CPU 6ES7 512-1SK00-0AB0 (CPU 1512SP-1 PN) PROFINET controller, hosts ET 200SP backplane
Profibus Master Module 6ES7 545-5DA00-0AB0 (CM 1542-5) DP master class 1/2, plugged to the right of CPU on ET 200SP base unit
Base Unit (for CM) 6ES7 193-6BP00-0BA0 (BU15-P16+A0+2B) or BU20 Carries CM 1542-5 on the ET 200SP backplane
Profibus Slave Hach Lange SC1000 with Profibus option card DP slave, multi-channel digital controller
Engineering TIA Portal V15.0 (combo + S7-1500 HSP) Project, hardware configuration, programming

The CM 1542-5 (6ES7 545-5DA00-0AB0) is a Profibus DP master/slave module for the SIMATIC ET 200SP distributed I/O system. It supports DPV0 and DPV1, up to 32 slaves per segment, and diagnostic interrupts to the host CPU. The module must be inserted into a Type A0 or Type A1 base unit (BU15-P16+A0+2B or similar). Without a base unit the module will not be detected during hardware detection in TIA Portal.

Identification tip: The 6ES7 545-5DA00-0AB0 is the CM 1542-5 for ET 200SP. Do not confuse it with the older 6GK7 542-5FX00-0AB0 (CP 1542-5) which is a PROFINET-to-Profibus proxy. The CM 1542-5 is a pure DP master/slave on the ET 200SP backplane.

2. Profibus Cabling and Termination

Before touching software, validate the physical layer. A Profibus DP link at the standard 1.5 Mbaud baud rate tolerates only the segment limits defined by IEC 61158 / EN 50170:

  • Max segment length at 1.5 Mbaud: 200 m
  • Max segment length at 12 Mbaud: 100 m
  • Termination: active at both segment ends, ON at the connector (typically Siemens 6GK1 500-0FC10 or 6ES7 972-0BA12-0XA0)
  • Shield continuity: 360° bonding at every connector
  • Shield grounded at cabinet entry, not on both ends if the segment runs between buildings (avoid ground loops)

With only two nodes (master at address 2, slave at address 4), the terminators at the two end connectors are sufficient. A common field failure is leaving terminators OFF at both ends because both connectors ship with the switch in the OFF position. Verify with a continuity check across the A and B cores between the two end connectors; termination creates a defined DC bias.

3. GSD File Installation

The SC1000 Profibus option card requires a vendor GSD file (Hach Lange part of the SC1000 Profibus option kit). The GSD defines the device's slave capabilities: supported baud rates, module identifiers, and the I/O data layout.

3.1 Install the GSD in TIA Portal V15

  1. Copy the GSD file (e.g., HACHA044.GSD or HACH0F6C.GSD) and matching bitmap .bmp to a local folder.
  2. Open TIA Portal > Options > Manage general station description files (GSD).
  3. Browse to the folder, select the .gsd file, click Install.
  4. Confirm the device appears under Other field devices > PROFIBUS DP > Sensors > ... > HACH LANGE > SC1000.
Common mistake: Installing the GSD only into the HW catalog of the TIA Portal user but not refreshing the project. After installation, close and reopen the project, or right-click the catalog and choose Update. The SC1000 will not appear in the catalog of an open project until the catalog is refreshed.

4. Profibus Address Allocation

Profibus DP uses station addresses 0 to 127, with 0 and 1 reserved for masters in most implementations. The reported network uses:

Station Profibus Address Configured in
CM 1542-5 (Master) 2 TIA Portal > CM 1542-5 properties > PROFIBUS address
SC1000 (Slave) 4 SC1000 keypad menu, see section 5

Both addresses must match. Mismatched addresses are the number one reason the SC1000 stays "not reachable" even though the cable checks out.

5. SC1000 Profibus Telegram Configuration (Key Step)

The SC1000 is a pure DP slave. There are no DIP switches on the controller to set the address or telegram; every parameter is configured through the SC1000 keypad. The Profibus menu structure and the supported telegram data widths are described in the SC1000 controller manual, section 5.12.

5.1 Setting the Slave Address on the SC1000

  1. On the SC1000 front panel, press Menu.
  2. Navigate to System Setup > Communication > Profibus.
  3. Set Profibus Address to 4.
  4. Save and back out to confirm the value persists after a power cycle.

5.2 Choosing the Telegram Length

The SC1000 Profibus option card supports several fixed telegram widths. The most commonly used data layouts for the SC1000 are:

SC1000 Module Input Bytes (Slave → Master) Output Bytes (Master → Slave) Typical Use
16 Byte In / 16 Byte Out 16 16 Up to 8 probes, full diagnostics
32 Byte In / 32 Byte Out 32 32 Up to 16 probes, full diagnostics
4 Byte In / 4 Byte Out 4 4 Limited set, minimal cyclic data

Whatever width is selected in the SC1000 menu MUST match the slot configuration that is downloaded into the CM 1542-5 in TIA Portal. If the widths differ, the master either reports a parameterisation fault or, more commonly, the slave appears online but no process data is exchanged and the SC1000 stays "not reachable" in the user's mind because no values update.

Critical: If the SC1000 is set to 16 bytes in / 16 bytes out but the TIA Portal slot list is 4 bytes in / 4 bytes out, the slave will go into parameterisation error and the BF (bus fault) LED on the CM 1542-5 will light. Read the SC1000 manual section 5.12 to identify the exact data width codes used in your firmware revision.

6. TIA Portal Hardware Configuration

Open the device view of the CM 1542-5 in the project tree. The configuration must mirror the SC1000 telegram chosen in section 5.

6.1 Add the SC1000 to the Profibus Subnet

  1. Open Devices & Networks.
  2. Select the CM 1542-5 and the existing PROFIBUS_1 subnet (or create a new one with the desired baud rate; Auto is acceptable for a homogeneous segment).
  3. In the hardware catalog, navigate to Other field devices > PROFIBUS DP > Sensors > HACH LANGE > SC1000.
  4. Drag the SC1000 onto the subnet. The system will assign a default Profibus address; change it to 4 in the inspector.
  5. Open the SC1000 device view. Add a slot module matching the SC1000 telegram width (e.g., 16 bytes I / 16 bytes O).

6.2 Slot and I/O Address Map

TIA Portal assigns I and Q addresses in the process image. The base addresses for the SC1000 slot appear in the inspector under I/O addresses:

Module Input Address Range Output Address Range Length
SC1000 Slot 0 IW 256 .. IW 270 (example) QW 256 .. QW 270 (example) 16 bytes I / 16 bytes O

Note these addresses. The LADDR input of DPRD_DAT and DPWR_DAT expects the logical base address from the I/O addresses table. Using the diagnostic address instead of the process image base is a common error.

7. Project Download — The Single Most Common Field Mistake

Configuring the hardware is not enough. The configuration must be compiled and downloaded to the S7-1500 station. Field engineers frequently use the top-bar Download button in TIA Portal, which downloads the software (the program blocks) but not the hardware configuration. The result is a project with a program but with the original PLC hardware configuration still in the CPU — and therefore no Profibus master at all, or a Profibus master with the old slot list.

Correct procedure: Right-click the CPU in the project tree, choose Download to device > Hardware configuration. This forces TIA Portal to push both the program and the HWCNF container to the S7-1500. Confirm the dialog that says "Download hardware configuration". After completion, the CPU will restart the Profibus master and the SC1000 will be parameterised.
  1. Right-click the CPU_1 [CPU 1512SP-1 PN] node.
  2. Choose Download to device > Hardware configuration.
  3. If a PG/PC interface dialog appears, select the PROFINET interface used for engineering.
  4. In the download preview, verify the following are selected:
    • Software (blocks)
    • Hardware configuration
    • All Profibus devices (CM 1542-5 and SC1000)
  5. Click Load. Accept the prompt to overwrite online/offline differences.
  6. After download, perform a CPU restart (Run > Restart) so the CM 1542-5 reinitialises and the SC1000 is parameterised.

8. Data Exchange Programming (DPRD_DAT / DPWR_DAT)

For DPV0 slaves the standard SIMATIC system blocks are DPRD_DAT (read) and DPWR_DAT (write). Both blocks come from the SIMATIC system library and are available in TIA Portal as part of the standard S7-1500 instruction set.

8.1 Block Interfaces

Block Input Type Meaning
DPRD_DAT LADDR WORD (INT) Logical base address of the SC1000 input area, e.g., W#16#100 (256 dec)
DPRD_DAT RET_VAL INT Return value; 0000 on success
DPRD_DAT RECORD VARIANT Destination buffer, e.g., P#DB100.DBX0.0 BYTE 16
DPWR_DAT LADDR WORD (INT) Logical base address of the SC1000 output area, e.g., W#16#100
DPWR_DAT RECORD VARIANT Source buffer, e.g., P#DB100.DBX16.0 BYTE 16
DPWR_DAT RET_VAL INT Return value; 0000 on success

The LADDR must be the input base for DPRD_DAT and the output base for DPWR_DAT. Some engineers mistakenly use the same value for both. The two addresses are usually adjacent but not always; check the device view.

8.2 Structured Text Sample (SCL)

// FB_SC1000_DataExchange
// Inputs : bEnable : BOOL, hwInputBase : WORD, hwOutputBase : WORD
// Outputs: bBusy : BOOL, bError : BOOL, wStatus : WORD
// InOuts : iqData : ARRAY[0..31] of BYTE

IF bEnable THEN
    // Read 16 bytes from SC1000 into iqData[0..15]
    #iStatusRead := DPRD_DAT(
        LADDR  := #hwInputBase,
        RET_VAL:= #wStatusRead);
    // wStatusRead = 0 means success

    // Write 16 bytes from iqData[16..31] to SC1000
    #iStatusWrite := DPWR_DAT(
        LADDR  := #hwOutputBase,
        RECORD := #iqData[16],
        RET_VAL:= #wStatusWrite);
END_IF;

8.3 Ladder Logic Sample

Network 1 — Read SC1000 input data
|--[ bEnable ]--[CALL DPRD_DAT
|                 LADDR := W#16#100
|                 RECORD := P#DB100.DBX0.0 BYTE 16
|                 RET_VAL := MW200 ]--|

Network 2 — Write SC1000 output data
|--[ bEnable ]--[CALL DPWR_DAT
|                 LADDR := W#16#100
|                 RECORD := P#DB100.DBX16.0 BYTE 16
|                 RET_VAL := MW202 ]--|

For DPV1 services (acyclic read/write of diagnostic data), the standard blocks RDREC and WRREC are used. The SC1000 GSD may not expose DPV1 slots; check the GSD revision.

9. Diagnostics and LED Behaviour

Read the LED status of the CM 1542-5 and the Profibus connector to isolate the fault layer:

LED State Meaning Next Action
BF (Bus Fault) on CM 1542-5 Off Profibus link OK —
BF Flashing at 2 Hz No Profibus partner detected Check cable, terminator, slave power
BF Solid red Parameterisation or configuration fault Check slave address, telegram length match
SF (System Fault) on CM 1542-5 On Module diagnostic interrupt active Open Online & diagnostics > Diagnostics buffer
CM RUN Green Module running, DP master active —
CM RUN Off Module not initialised Check base unit seating, power, slot

10. TIA Portal Online Diagnostics

  1. Go online with the CPU.
  2. Open Devices & Networks, then Online & diagnostics on the CM 1542-5.
  3. Open the Diagnostics buffer. Look for entries such as:
    • Parameterisation error at slave address 4 — telegram mismatch or wrong GSD revision
    • Slave not found — address or wiring problem
    • Configuration error at slave address 4 — slot count differs from GSD
  4. Click the slave in the Profibus topology view. The status panel shows:
    • OK: slave in cyclic data exchange
    • Not reachable: no response to parameterisation
    • Fault: parameterisation failed

11. SC1000 Front-Panel Diagnostics

On the SC1000 keypad, navigate to System Setup > Communication > Profibus > Status. Typical status displays:

SC1000 Status Meaning
"Profibus OK" Cyclic data exchange active
"Profibus Watchdog" Master has stopped polling; check master and cable
"Profibus Param Error" Slot configuration in master does not match SC1000
"Profibus Not Active" Slave has not entered token ring; check address and baud rate auto-detect

12. Step-by-Step Recovery Procedure

If the SC1000 is still "not reachable" after the steps above, perform a clean recovery:

  1. On the SC1000 keypad, perform a Factory Defaults on the Profibus option card (System Setup > Communication > Profibus > Reset).
  2. Re-enter the Profibus address 4 and select the desired telegram width (e.g., 16/16).
  3. In TIA Portal, delete the SC1000 from the Profibus subnet.
  4. Re-drag the SC1000 from the catalog onto the subnet.
  5. Re-add the matching slot module in the SC1000 device view.
  6. Right-click the CPU and choose Download to device > Hardware configuration (NOT the top-bar download button).
  7. Wait for the CPU to restart. Watch the CM 1542-5 BF LED transition to off.
  8. Check the SC1000 Profibus status: should read "OK".
  9. Monitor the relevant DB with a VAT table to confirm process values update.

13. Troubleshooting Matrix

Symptom Most Likely Root Cause Resolution
BF LED flashing, no slave visible Wiring, terminator, slave power Re-check cable, terminator switches, SC1000 power supply
BF LED solid red Telegram or address mismatch Verify SC1000 address = 4, slot count matches GSD
BF off, SF on Diagnostic interrupt from slave Read CM 1542-5 diagnostic buffer
Slave visible, no process data LADDR wrong, or record length wrong Verify LADDR in DPRD_DAT/DPWR_DAT, verify RECORD length
Slave visible intermittently Baud rate too high for cable length, EMC Reduce baud rate, check shield bonding
CPU reports "IO device failure" but CM 1542-5 is a Profibus module Wrong download method Use right-click Download to device > Hardware configuration
SC1000 says "Profibus Not Active" Address conflict with another master Verify no other master in the segment uses address 4
SC1000 says "Param Error" Slot configuration mismatch Align TIA Portal slot list with SC1000 telegram width

14. Performance and Timing Notes

Profibus DP cycle time on a small two-node segment at 1.5 Mbaud is typically in the 1–5 ms range. With the SC1000 polling at 16/16 the cyclic data is updated in the S7-1500 process image at the OB1 cycle boundary. For better determinism move the SC1000 I/O into a process image partition (PIP) and use OB 6x synchronised to a constant bus cycle. Hach documentation does not specify a minimum OB1 cycle time, but Profibus DP guarantees token rotation and slave polling within configured slot time (Tsl) and watchdog.

15. Related Standards and References

The Profibus DP protocol is standardised in IEC 61158 and IEC 61784. The CM 1542-5 conforms to the PROFIBUS profile for DP master class 1/2. The SC1000 Profibus option is registered in the PI (PROFIBUS & PROFINET International) product guide as a vendor-registered slave device.

Why does the SC1000 show "not reachable" after I configured the CM 1542-5 in TIA Portal V15?

Three causes are most common: (1) the GSD file was installed but the catalog was not refreshed inside the open project; (2) the SC1000 was downloaded only as a program change, not via the right-click Download to device > Hardware configuration, leaving the old slot list in the CPU; (3) the SC1000 keypad telegram width (e.g., 16/16) does not match the slot module width selected in TIA Portal. Reinstall the GSD, perform a hardware download, and align the telegram.

Does the Hach SC1000 have DIP switches to set the Profibus address?

No. The Profibus option card has no DIP switches. The address is set exclusively via the SC1000 keypad under System Setup > Communication > Profibus > Address. See section 5.12 of the SC1000 manual for the exact menu path.

What function blocks do I use to read and write the SC1000 from an S7-1500?

For DPV0 cyclic exchange, use the SIMATIC system blocks DPRD_DAT and DPWR_DAT. LADDR is the logical base address from the I/O addresses table in the device view (input base for read, output base for write). For DPV1 acyclic diagnostics, use RDREC and WRREC.

Is the 6ES7 545-5DA00-0AB0 a Profibus master or a proxy?

The 6ES7 545-5DA00-0AB0 is the CM 1542-5, a Profibus DP master/slave interface module for SIMATIC ET 200SP. It is a pure Profibus master plugged into the ET 200SP backplane next to the CPU 1512SP-1 PN. It is not a PROFINET-to-Profibus proxy; that role is served by the CP 1542-5 (6GK7 542-5FX00-0AB0).

How do I confirm the SC1000 is in cyclic data exchange?

Three independent checks: (1) the SC1000 keypad status reads "Profibus OK"; (2) the CM 1542-5 BF LED is off and the SC1000 icon in the TIA Profibus online view shows "OK"; (3) a VAT table on the relevant DB shows process values updating in line with probe changes on the SC1000 front panel.

Back to blog