Configuring S7-400H Redundant Communication and Open Modbus TCP in SIMATIC PCS 7
To configure communication for an S7-400H controller (CPU 414-5H with two CP 443-1 modules) connecting to a single-station OS and a third-party DCS via Modbus TCP in PCS 7, establish two separate communication layers in NetPro. For the OS connection, configure an 'S7 fault-tolerant connection' between the WinCC Application and the S7-400H CPUs. For communication with the third-party DCS over Modbus TCP, you must utilize the licensed Siemens function block package 'SIMATIC S7 - Open Modbus/TCP Redundant' (specifically FB108 / MODB4_H). There is no free official Siemens library for redundant S7-400H Modbus TCP; each CPU requires a runtime software license registered with the individual CPU hardware serial number.
Table of Contents
- Executive Summary
- Architecture and Fundamental Mechanics
- Step-by-Step Implementation Procedure
- Verification
- Limitations and Operational Precautions
- Engineer FAQ
- Technical References
- Related Articles
- Related Tags
Executive Summary
Integrating high-availability SIMATIC S7-400H controllers into plant architectures often involves dual communication requirements: establishing high-speed, deterministic internal communication to PCS 7 Operator Stations (OS) while simultaneously interfacing with third-party Distributed Control Systems (DCS), power monitoring systems, or package units using industrial Modbus TCP.
Engineers frequently struggle with configuring NetPro connection tables for dual-network architectures and often seek 'free' or open-source Modbus libraries to avoid commercial licensing fees. In PCS 7 S7-400H architectures, connecting to WinCC requires an S7 Fault-Tolerant Connection configured in NetPro and mapped via Station Configurator. For third-party DCS integration over Modbus TCP across redundant CP 443-1 processors, Siemens provides the dedicated 'Open Modbus/TCP Redundant' library. This is a commercial licensed package requiring individual CPU registration; unauthorized or unbundled blocks will enter demo mode and cease communication after a timeout. This guide details the step-by-step NetPro configuration for both OS and DCS connections and establishes the commercial licensing rules governing redundant Modbus TCP.
Architecture and Fundamental Mechanics
The communication architecture of an S7-400H system with dual CP 443-1 processors encompasses two independent communication channels:
1. PCS 7 OS Plant Bus Communication:
* The Single Station OS communicates using the SIMATIC S7 protocol suite via an S7 Fault-Tolerant Connection.
* In NetPro, this connection links the WinCC Application on the PC Station to both CPU 0 and CPU 1 through the redundant CP 443-1 cards.
* The S7 Redconnect protocol layer on the PC manages automated, bumpless path switchover if one CP 443-1, cable, or industrial switch fails.
2. Third-Party DCS Modbus TCP Communication:
* Modbus TCP operates over standard TCP/IP (port 502) using client/server or master/slave socket connections.
* S7-400H controllers cannot use standard non-redundant Modbus blocks because a CPU or CP switchover would drop the TCP socket without recovery.
* The licensed Siemens package Open Modbus/TCP Redundant provides function blocks (such as FB108 / MODB4_H) specifically designed to manage redundant TCP connections across dual CP 443-1 modules.
* The block manages IP address failover, reconnect timers, and cyclic socket handshakes to ensure continuous Modbus polling across controller failovers.
3. Licensing Framework for Modbus TCP:
* Siemens Open Modbus/TCP is proprietary licensed software.
* Licensing is enforced per CPU: an activation string (REG_KEY) derived from the CPU hardware serial number must be parameterized on the block input.
* Without a valid registration key, the block functions in demo mode for approximately 2 hours before terminating communication and asserting license error flags.
Step-by-Step Implementation Procedure
Step 1: Configure S7-400H and PC Station in HW Config
- In SIMATIC Manager, open HW Config for the S7-400H system (Racks 0 and 1).
- Insert the redundant CP 443-1 communication processors into available slots on both racks.
- Assign static IP addresses on Subnet 1 (Plant Bus for OS) and Subnet 2 (DCS Modbus network) for each CP.
- Configure the SIMATIC PC Station for the Single Station OS (Slot 1: WinCC Application, Slot 2: IE General or CP 1623).
- Save and compile HW Config.
Step 2: Configure S7 Fault-Tolerant Connection for the OS in NetPro
- Open NetPro.
- Select the
WinCC Appl.object in the PC Station. - Right-click the connection table, select
Insert New Connection, select the S7-400H controller, and chooseS7 fault-tolerant connection. - Verify that two communication paths are configured to CPU 0 and CPU 1.
- Save and compile NetPro, then download network configurations to both the AS and PC station.
Step 3: Install the Open Modbus/TCP Redundant Block Library
- Obtain the licensed software package SIMATIC S7 - Open Modbus/TCP Redundant for S7-400H via CP 443-1 (order numbers and license packages available through an authorized Siemens distributor or the Siemens Industry Mall).
- Run the software installer on the Engineering Station to install the block library in STEP 7.
- Open SIMATIC Manager and copy
FB108(MODB4_H) and associated communication blocks into your project'sBlocksfolder.
Step 4: Configure Modbus TCP Redundant Connections in NetPro
- In NetPro, select the S7-400H CPU.
- Insert two unspecified
TCP connectionobjects (one for CP 443-1 in Rack 0, one for CP 443-1 in Rack 1). - In connection properties, check 'Active connection establishment' (if S7-400H is client) or uncheck it (if S7-400H is server/slave).
- Specify the IP address of the third-party DCS and set the port to
502. - Note the Connection IDs (e.g.,
1and2) and CP rack/slot addresses for CFC parameterization.
Step 5: Implement and License FB108 (MODB4_H) in CFC
- In a cyclic execution chart (OB35), instantiate
FB108(MODB4_H). - Interconnect the NetPro Connection IDs and CP parameters to the block inputs.
- Configure data pointers for holding registers (
Data_Type,Start_Address,Length). - Apply the software registration key: query the CPU serial number, request the official activation license string from Siemens Industry Online Support (SIOS) registration tool, and enter the key at parameter
REG_KEY. - Compile and download the CFC program to the AS controller.
Verification
- In NetPro, verify that the S7 fault-tolerant connection to the OS shows status 'Established' and active in both paths.
- In WinCC Explorer, verify that process data from the AS updates smoothly in Runtime.
- On the Modbus network, connect a Modbus polling simulator (or the third-party DCS) to port 502.
- Read Modbus holding registers from the S7-400H: verify that live process values match the data block values in STEP 7.
- Check the
LICENSEDoutput parameter onFB108: confirm it transitions toTRUE(indicating valid registration key). - Test redundancy failover: switch the master CPU of the S7-400H pair. Verify that Modbus communication switches to the partner CP 443-1 without dropping process data.
Limitations and Operational Precautions
- There is no official 'free' Modbus TCP library provided by Siemens for redundant S7-400H controllers; open-source or non-redundant blocks will fail during CPU switchovers.
- Each S7-400H CPU requires an independent software license tied to its specific hardware serial number; sharing license keys across CPUs is prohibited.
- Final procurement planning, software entitlements, and MLFB order numbers must be confirmed with an authorized Siemens distributor or the Siemens Industry Mall.
- Ensure network firewalls between the PCS 7 plant bus and third-party DCS isolate Modbus traffic (TCP port 502) while blocking unauthorized access to S7 management ports (TCP port 102).
Engineer FAQ
Is there a free Modbus TCP library for S7-400H controllers?
No. Redundant Modbus TCP communication across dual CP 443-1 modules requires the licensed Siemens block package 'SIMATIC S7 - Open Modbus/TCP Redundant'. Unlicensed blocks stop communicating after a 2-hour demo period.
How is the Open Modbus/TCP license registered?
The license key is generated via the Siemens Industry Online Support licensing web portal by pairing the license certificate number with the specific CPU hardware serial number.
Can the S7-400H act as both Modbus TCP Client and Server simultaneously?
Yes. By instantiating multiple instances of the Modbus communication blocks configured with different connection IDs and port numbers, both client and server roles can operate concurrently.
Why can't I use standard S7 connections for the OS?
An S7-400H requires an S7 Fault-Tolerant Connection to ensure that WinCC seamlessly maintains communication when a CPU or CP failure triggers an automated switchover.
Where can I purchase the Open Modbus/TCP Redundant package?
The package and single-license entitlements can be ordered through an authorized Siemens distributor or the Siemens Industry Mall.
Technical References
- SIMATIC S7 Open Modbus/TCP Redundant via CP 443-1 Manual (Entry ID: 109762953)
- SIMATIC Process Control System PCS 7 Minimal Configurations (Entry ID: 24023824)
- SIMATIC S7-400H Fault-Tolerant Systems System Manual (Entry ID: 82478488)
Related Articles
- Configuring NetPro S7 Fault-Tolerant Connections and Station Configurator for ES to AS-OS Downloads
- Integrating Third-Party Systems and Package Units into PCS 7 Using SIMATIC CN 4100 via Modbus TCP and OPC UA
- Resolving SIMATIC Shell RT Station Not Obtainable Errors During PCS 7 OS Server Downloads
Related Tags
- S7-400H
- Modbus TCP
- Open Modbus
- NetPro
- CP 443-1