Hello everyone,

I am fairly new to programming with a S7-1500 CPU. Until now i have only worked with S7-300 and 400 CPUs so still trying to get the hang of it.

I am currently writing a program for a 1516-3 PN/DP V1.8 and have stumbled upon a problem with getting information about the Profibus and Profinet network. Well not really a problem but more of a hassle. With my previous S7-300/400 projects I always integrate on the HMI a network diagnostic screen where the operator is shown what is configured on the network. If its configured, what is the status (online/offline) and if an error is active or not.

All this was done using SFC51 where I would get in return a list of every address and the status. so for example to detect if a node is configured in the hardware or not, I used SSL_ID W#16#0692 with Index W#16#175C and in return i get a list from address 1 to 126 with a bool signal for each address 0-not conf. 1-is conf. The same thing for the online/Offline state and error status. With this system, I was able to just copy my function block to other projects and get the complete network information just by changing 1 or 2 parameters.

Now with S7-1500, I cant find anything similar which is kinda strange. From my research, the only way to get this information is by using "ModuleStates" and "DeviceStates" but both of these functions requires the hardware identifier address of each node on the network. This means I have to do this for every node on the network. So now there is no way of just getting the compete network scan like in Step7 using the SFC51. Is this correct or did I miss something? I was expecting a 1500 CPU to be easier to access information but it seems that is not the case.

I also posted this in the S7-1500 hardware section, didn't know where was the most appropriate place to post.

Thank you for any help or info given on this matter

mopS04

hi Rui_t,

S7-1500 has an integrated system diagostic.

There´s an application sample about it, that shows how it works:

System Diagnostics with S7-1500 and TIA Portal

hope this helps,

regards,

 Hello mopS04,

Thank you for the help. I have been studying a bit more and I checked the link you sent. This is perfect and kinda what i´m looking for but the problem is I need this information to integrate into a WPF based scada system. Everything I´ve seen is internal between Siemens components. For example the system diagnostic view component in TIA panels brings a list of everything that is configured in the hardware and with S300/S400 CPUs I was able to get the complete network information with just a few lines of code with SFC51, not having to worry about diagnostic addresses or how many nodes are configured. this is all given automatically by sfc51. This is what I am trying to achieve also with 1500 CPUs.  A simple and efficient why to retrieve the network information without having to call "ModuleStates" and "DeviceStates" for every node.

Hello everyone,

So I have found the solution to my problem. I will share it and hopefully save someone some time and headache if found with this same problem. Now that i found the solution, it doesn't seem that hard  but made harder to find due to some missing information on the Siemens help files...

So... as i explained in the first post, I mainly programmed S7-300/S7-400 CPUs in Step 7, I am fairly new using TIA for CPU programming and even newer to S7-1500 CPUs. The main dilemma was finding the equivalent function I use on 300/400 CPUs using SFC51 to read the entire Profibus and Profinet network on 1500 CPUs.

I normally create a network diagnostic screen for the operators of the machines to check what is configured on the network and check the status of the configured nodes on each network. Instead of having to configure by hand what is configured in each network and for every machine, I get a complete list for the hole network using SFC51.  This is possible using SSL-ID w#16#92 to get a list from 1-126 with a bool signal for each node detected in the hardware configuration. Then using SSL-ID w#16#292 to get again a list 1-126 but this time a bool signal for the nodes that are detected online. Finally using SSL-ID w#16#692 to get a bool signal for the nodes where a problem is detected. With this system, I can copy and past this along with the screen on every program I create only needing to change the network ID when different. Nothing else needed, this saves a lot of time when you have to create a different program for every machine/application you create. 

Now that I am finally moving on to S7-1500 CPUs, the problem arose when trying to implement the same concept. The documentation says that you must use "DeviceStates" or "ModuleStates". The only way I got this function to work was reading individual nodes using the hardware ID. I wasn't finding no apparent way to read the hole network same as I was doing with SFC51. But after many hours playing around with hundreds of possibilities, I finally got it to work reading the hole network.

Here is how I managed to get it working and where I was getting it wrong:

So to read the complete network, the input LADDR must be configuered with the HW_IoSystem address of the network that wasn't that easy to find for a new user but its one of those thing that once you know, you will never forget . The best and easiest way I think to find the address is going to the PLC tags then show all tags. Then at the top right there is a tab that says system constants and walla! in the list you will find all HW_IoSystem addresses and its also available as a tag so you can call the tag directly on the input instead of hand writing the number .

So fist input of DeviceStates taken care of, now to the second input "Mode". This was no problem and very clear in the documentation. 1 will give the configured status, 4 will give the online status and 5 gives the problem detected status. Ret_Val output of DeviceStates is also very clear on the documentation but could be more helpful and detect more errors instead of just returning -32622 most of the times. Lastly the output STATE..... This is where I saw getting it wrong the most. So with SFC51 I was calling a Struct on a DB with the indicated amount of bytes from the documentation no problem. With DeviceStates, a struct format does not work. It must be an Array of Bool. Also another difference is the amount changes depending on the type of network you are reading. So for a Profibus network, the output should be Array[0..127] of bool and for a Profinet network, the output should be Array[0..1023] of bool but after various test I found out that using the Array of 0..1023 works on both so I just ended up always using Array[0..1023] of Bool regardless of the network type.

And there you have it... what I was achieving on S7-300/400 CPUs using SFC51 now also achieved on S7-1500 CPUs using DeviceState.

Always learning something new and liking 1500 CPUs more and more....

So if you find yourself in the same situation as I did or just wanting to read the complete network without much work, here is the solution.

Hope this helps someone out....