Contents

General Technical Specifications

1
SIMATIC Racks
2

Power Supply Modules

3
S7-400, M7-400 Programmable
Controllers Module S7-400 CPUs
4
Specifications
Digital Modules
5
Reference Manual Analog Modules
6
Interface Modules
(Send IMs and Receive IMs)
7
This manual is part of the documentation
package with the order number:
Memory Cards
8
6ES7498-8AA03-8BA0

Interface Submodules for S7-400

9
Cable Duct and
Fan Subassemblies
10

RS 485 Repeater
11

Spare Parts and Accessories

12

CPUs for M7-400

13

M7-400 Expansions
14

Interface Submodules
15
Cycle and Reaction Times
of the S7-400
16

Appendices

Edition 07/2000 Index

A5E00069467-03
 Safety Guidelines
This manual contains notices which you should observe to ensure your own personal safety, as well as to
protect the product and connected equipment. These notices are highlighted in the manual by a warning
triangle and are marked as follows according to the level of danger:

Danger
! indicates that death, severe personal injury or substantial property damage will result if proper precau-
tions are not taken.

Warning
! indicates that death, severe personal injury or substantial property damage can result if proper precau-
tions are not taken.

Caution
! indicates that minor personal injury or property damage can result if proper precautions are not taken.

Note
draws your attention to particularly important information on the product, handling the product, or to a
particular part of the documentation.

Qualified Personnel
Only qualified personnel should be allowed to install and work on this equipment. Qualified persons are
defined as persons who are authorized to commission, to ground, and to tag circuits, equipment, and sys-
tems in accordance with established safety practices and standards.

Correct Usage
Note the following:

Warning
! This device and its components may only be used for the applications described in the catalog or the
technical descriptions, and only in connection with devices or components from other manufacturers
which have been approved or recommended by Siemens.
This product can only function correctly and safely if it is transported, stored, set up, and installed cor-
rectly, and operated and maintained as recommended.

Trademarks
SIMATIC, SIMATIC HMI and SIMATIC NET are registered trademarks of SIEMENS AG.
Some of other designations used in these documents are also registered trademarks; the owner’s rights
may be violated if they are used by third parties for their own purposes.

Copyright { Siemens AG 1998 All rights reserved Disclaimer of Liability

The reproduction, transmission or use of this document or its We have checked the contents of this manual for agreement with the
contents is not permitted without express written authority. hardware and software described. Since deviations cannot be pre-
Offenders will be liable for damages. All rights, including rights cluded entirely, we cannot guarantee full agreement. However, the
created by patent grant or registration of a utility model or design, are data in this manual are reviewed regularly and any necessary cor-
reserved. rections included in subsequent editions. Suggestions for improve-
ment are welcomed.
Siemens AG
Bereich Automatisierungs- und Antriebstechnik
Geschaeftsgebiet Industrie-Automatisierungssysteme  Siemens AG 1998
Postfach 4848, D- 90327 Nuernberg Technical data subject to change.
S7-400H Programmable Controller Fault-Tolerant Systems
Index-2
Siemens Aktiengesellschaft A5E00069467 07/2000
Contents

1 General Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

1.1 Electromagnetic Compatibility of the Modules in the
S7-400/M7-400 Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5
1.2 Transport and Storage Conditions for Modules and Backup Batteries
in the S7-400/M7-400 Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
1.3 Ambient Conditions for Operating the S7-400/M7-400 Systems . . . . . . . . 1-9
1.4 Information on Insulation Tests, Protection Class, and Degree
of Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12
1.5 Ambient Climatic Conditions for Operating the M7-400
Automation Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-13
2 Racks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
2.1 Function and Structure of the Racks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
2.2 The UR1 and UR2 Racks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3
2.3 The UR2-H Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
2.4 The CR2 Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
2.5 The ER1 and ER2 Racks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
3 Power Supply Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1
3.1 Common Characteristics of the Power Supply Modules . . . . . . . . . . . . . . . 3-2
3.2 Redundant Power Supplies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5
3.3 Backup Battery (Option) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-7
3.4 Controls and Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-8
3.5 Fault/Error Messages via LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13
3.6 PS 407 4A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-19
3.7 PS 407 10A and PS 407 10A R Power Supply Modules . . . . . . . . . . . . . . 3-21
3.8 PS 407 20A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-24
3.9 PS 407 20A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-27
3.10 PS 405 4A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-29
3.11 PS 405 10A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-31
3.12 PS 405 10A and PS 405 10A R Power Supply Modules . . . . . . . . . . . . . . 3-33
3.13 PS 405 20A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-35
3.14 PS 405 20A Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-37

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 iii
Contents

4 S7-400 CPUs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

4.1 Controls and Indicators on the CPUs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
4.2 Monitoring Functions of the CPUs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10
4.3 Status and Fault/Error Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12
4.4 Mode Selector Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15
4.5 Multipoint Interface (MPI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19
4.6 PROFIBUS-DP Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-21
4.7 Overview of the Parameters for the S7-400 CPUs . . . . . . . . . . . . . . . . . . . 4-22
4.8 Evaluating Process Interrupts in the S7-400H System . . . . . . . . . . . . . . . . 4-23
4.9 Technical Specifications of the CPU 412-1 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-24
4.10 Technical Specifications of the CPU 412-2 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-27
4.11 Technical Specifications of the CPU 414-2 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-31
4.12 Technical Specifications of the CPU 414-3 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-35
4.13 Technical Specifications of the CPU 416-2 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-39
4.14 Technical Specifications of the CPU 416-3 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-43
4.15 Technical Specifications of the CPU 417-4 . . . . . . . . . . . . . . . . . . . . . . . . . . 4-47
4.16 Technical Specifications of the CPU 417-4 H . . . . . . . . . . . . . . . . . . . . . . . . 4-51
5 Digital Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1
5.1 Assigning Parameters to the Digital Input Modules . . . . . . . . . . . . . . . . . . . 5-2
5.2 Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3
5.3 Digital Input Module SM 421; DI 32 x 24 VDC . . . . . . . . . . . . . . . . . . . . . . . 5-6
5.4 Digital input module SM 421;DI 32 x DC 24 V . . . . . . . . . . . . . . . . . . . . . . . 5-9
5.5 Digital Input Module SM 421; DI 16 x 24/60 VUC . . . . . . . . . . . . . . . . . . . . 5-12
5.6 Digital Input Module SM 421; DI 16 x 120/230 VUC . . . . . . . . . . . . . . . . . . 5-21
5.7 Digital Input Module SM 421; DI 32 x 120 VUC . . . . . . . . . . . . . . . . . . . . . . 5-24
5.8 Digital Input Module SM 421; DI 16 x 120 VAC . . . . . . . . . . . . . . . . . . . . . . 5-27
5.9 Digital Output Module SM 422; DO 16 x 20 to 120 VAC/2 A . . . . . . . . . . . 5-30
5.10 Digital Output Module SM 422; DO 32 x 24 VDC/0.5 A . . . . . . . . . . . . . . . 5-37
5.11 Digital Output Module SM 422; DO 16 x 24 VDC/2 A . . . . . . . . . . . . . . . . . 5-40
5.12 Digital Output Module SM 422; DO 8 x 120/230 VAC/5 A . . . . . . . . . . . . . 5-43
5.13 Digital Output Module SM 422; DO 16 x 120/230 VAC/2 A . . . . . . . . . . . . 5-46
5.14 Relay Output Module SM 422; DO 16 x 30/230 VUC/Rel 5 A . . . . . . . . . . 5-49
5.15 Digital Output Module SM 422; DO 16 x 20 to 125 VDC/1.5 A . . . . . . . . . 5-52
5.16 Digital Input Module SM 421; DI 16 x 120/230 VUC;
Input Characteristic to IEC1131, Type 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-59

S7-400, M7-400 Programmable Controllers Module Specifications

iv A5E00069467-03
 Contents

5.17 Digital Input Module SM 421; DI 16 x 24 VDC . . . . . . . . . . . . . . . . . . . . . . . 5-62

5.17.1 Parameters of the Digital Input Module SM 421; DI 16 x 24 VDC . . . . . . . 5-64
5.17.2 Explanations of the Static Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-65
5.17.3 Explanations of the Dynamic Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-66
5.17.4 Basic Requirements for Parameter Assignment . . . . . . . . . . . . . . . . . . . . . 5-67
5.17.5 Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-68
5.18 Digital Output Module SM 422; DO 32 x 24 VDC/0.5 A . . . . . . . . . . . . . . . 5-76
5.18.1 Parameters of the SM 422; DO 32 x 24 VDC/0.5 A
Digital Output Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-78
5.18.2 Explanations of the Static Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-79
5.18.3 Explanations of the Dynamic Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-79
5.18.4 Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-80
6 Analog Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1
6.1 Setting the Type of Measurement and Measuring Ranges
of the Analog Input Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2
6.2 Parameters of the Analog Input Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-5
6.2.1 Explanations of the Analog Input Module Parameters . . . . . . . . . . . . . . . . 6-8
6.2.2 Default Parameters of the Analog Input Modules . . . . . . . . . . . . . . . . . . . . 6-13
6.3 Behavior of the Analog Input Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-14
6.3.1 Conversion Time and Cycle Time of the Analog Input Channels . . . . . . . . 6-15
6.4 Connecting Thermocouples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16
6.5 Connecting Voltage Sensors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-20
6.6 Connecting Current Sensors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-21
6.7 Connecting Resistance Thermometers and Resistances . . . . . . . . . . . . . . 6-23
6.8 Isolated Measured Value Sensors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-24
6.9 Parameters of the Analog Output Modules . . . . . . . . . . . . . . . . . . . . . . . . . . 6-25
6.9.1 Explanations of the Analog Output Module Parameters . . . . . . . . . . . . . . . 6-26
6.9.2 Default Parameters of the Analog Output Modules . . . . . . . . . . . . . . . . . . . 6-26
6.10 Behavior of the Analog Output Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-27
6.10.1 Conversion Time, Cycle Time, Settling Time, and Response Time
of the Analog Output Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-28
6.11 Connecting Loads/Actuators to Analog Outputs . . . . . . . . . . . . . . . . . . . . . 6-30
6.12 Analog Value Representation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-31
6.12.1 Analog Measuring Ranges for Input Channels . . . . . . . . . . . . . . . . . . . . . . . 6-32
6.12.2 Analog Value Representation for Analog Input Modules . . . . . . . . . . . . . . . 6-34
6.12.3 Analog Output Ranges for Output Channels . . . . . . . . . . . . . . . . . . . . . . . . 6-41
6.12.4 Analog Value Representation for Output Modules . . . . . . . . . . . . . . . . . . . . 6-43
6.13 Diagnostics of the Analog Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-46
6.14 Analog Input Module SM 431; AI 8 x 13 Bits (6ES7431-1KF00-0AB0) . . 6-50
6.15 Analog Input Module SM 431; AI 8 x 14 Bits (6ES7431-1KF10-0AB0) . . 6-55
6.16 Analog Input Module SM 431; AI 8 x 14 Bits (6ES7431-1KF20-0AB0) . . 6-68
6.17 SM 431 Analog Input Module; AI 16 x 13 Bit (6ES7431-0HH00-0AB0) . . 6-76

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 v
Contents

6.18 Analog Input Module SM 431; AI 16 x 16 Bits

(6ES7431-7QH00-0AB0) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-83
6.19 Analog Input Module SM 431; AI 8 x RTD x 16 Bits
(6ES7 431-7KF10-0AB0) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-100
6.20 Analog Input Module SM 431; AI 8 x 16 Bits (6ES7 431-7KF00-0AB0) . . 6-111
6.21 Analog Output Module SM 432; AO 8 x 13 Bits
(6ES7432-1HF00-0AB0) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-123
7 Interface Modules (Send IMs and Receive IMs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1
7.1 Common Characteristics of the Interface Modules . . . . . . . . . . . . . . . . . . . 7-2
7.2 The IM 460-0 and IM 461-0 Interface Modules . . . . . . . . . . . . . . . . . . . . . . 7-5
7.3 The IM 460-1 and IM 461-1 Interface Modules . . . . . . . . . . . . . . . . . . . . . . 7-8
7.4 The IM 460-3 and IM 461-3 Interface Modules . . . . . . . . . . . . . . . . . . . . . . 7-11
8 Memory Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1
8.1 Design and Function of Memory Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2
8.2 RAM Card and Flash Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-4
9 Interface Submodules for S7-400 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-1
9.1 PROFIBUS-DP Master Interface IM 467/IM 467 FO . . . . . . . . . . . . . . . . . . 9-2
9.1.1 Display and Operating Mode Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-6
9.2 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-8
9.3 Connecting to the PROFIBUS DP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-10
9.3.1 Bus Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-10
9.3.2 Optical Connection to the PROFIBUS DP . . . . . . . . . . . . . . . . . . . . . . . . . . 9-11
9.3.3 Connecting the Fibre Optic Cable to the IM 467 FO . . . . . . . . . . . . . . . . . . 9-12
9.4 Technical Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-14
9.4.1 Technical Data of the IM 467 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-14
9.4.2 Technical Data of the IM 467 FO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-15
10 Cable Duct and Fan Subassemblies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-1
10.1 Fan Monitoring in the Fan Subassemblies . . . . . . . . . . . . . . . . . . . . . . . . . . 10-2
10.2 Cable Duct . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
10.3 The 120/230 VAC Fan Subassembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-5
10.4 The 24 VDC Fan Subassembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-8
11 RS 485-Repeater . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-1
11.1 Application and Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-2
11.2 Appearance of the RS- 485 Repeater (6ES7 972-0AA01-0XA0) . . . . . . . 11-3
11.3 RS 485 Repeater in Ungrounded and Grounded
Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-4
11.4 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-6

S7-400, M7-400 Programmable Controllers Module Specifications

vi A5E00069467-03
 Contents

12 Spare Parts and Accessories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-1

13 CPUs for M7-400 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-1
13.1 Performance Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-2
13.2 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-3
13.3 Function Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-3
13.3.1 Status and Fault LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-6
13.3.2 Memory Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-8
13.3.3 Mode Selector Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-9
13.3.4 Submodule Receptacles for Interface Submodules . . . . . . . . . . . . . . . . . . . 13-11
13.3.5 Memory Submodules Suitable for the Main Memory . . . . . . . . . . . . . . . . . . 13-13
13.3.6 Expansion Socket . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-14
13.3.7 Multipoint Interface (MPI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-15
13.4 The BIOS setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-16
13.4.1 BIOS Power Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-17
13.4.2 BIOS Hot Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-19
13.4.3 Operator Inputs in the BIOS Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-20
13.4.4 Opening and Exiting the BIOS Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-22
13.4.5 Setup Page “User Help” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-24
13.4.6 Setup Page “IF modules” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-25
13.4.7 Setup Page “Timeout Function” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-29
13.4.8 Setup Page “Security” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-30
13.4.9 Setup Page “Date and Time” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-32
13.4.10 “Hard Disk” Setup Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-33
13.4.11 Setup Page “Floppy/Card” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-35
13.4.12 Setup Page “Boot Options” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-36
13.4.13 Setup Page “System” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-38
13.5 I/O Addresses, Main Memory and Interrupt Assignments . . . . . . . . . . . . . 13-40
14 M7-400 Expansions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-1
14.1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-2
14.2 EXM 478 Expansion Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-6
14.2.1 Addressing the EXM 478 Expansion Module . . . . . . . . . . . . . . . . . . . . . . . . 14-7
14.2.2 Interrupt Assignments, Signal Switching EXM 478 . . . . . . . . . . . . . . . . . . . 14-13
14.2.3 Technical Specifications of the EXM 478 Expansion Module . . . . . . . . . . . 14-14
14.3 ATM 478 AT Adapter Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-15
14.3.1 Pin Assignments of the AT Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-16
14.3.2 Technical Specifications of the ATM 478 AT Adapter Module . . . . . . . . . . 14-19
14.4 MSM 478 Mass Storage Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-22
14.4.1 LPT1 Parallel Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-23
14.4.2 Technical Specifications of the MSM 478 Mass Storage Module . . . . . . . 14-25

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 vii
Contents

15 Interface Submodules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-1

15.1 Interface Submodules Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-2
15.2 Submodule IDs and Insertion Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-4
15.3 IF 962-VGA Interface Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-5
15.3.1 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-6
15.3.2 Addressing, Interrupts, and Submodule ID . . . . . . . . . . . . . . . . . . . . . . . . . . 15-7
15.3.3 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-8
15.4 IF 962-COM Interface Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-10
15.4.1 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-11
15.4.2 Addressing and Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-12
15.4.3 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-16
15.5 IF 962-LPT Interface Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-17
15.5.1 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-18
15.5.2 Addressing and Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-19
15.5.3 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-22
15.6 IF 961-DIO Interface Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-23
15.6.1 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-24
15.6.2 Addressing and Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-26
15.6.3 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-30
15.7 IF 961-AIO Interface Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-32
15.7.1 Pin Assignments and Terminal Connection Diagram . . . . . . . . . . . . . . . . . . 15-33
15.7.2 Connecting Measured Value Sensors to Analog Inputs . . . . . . . . . . . . . . . 15-36
15.7.3 Connecting Loads/Actuators to Analog Outputs . . . . . . . . . . . . . . . . . . . . . 15-41
15.7.4 Conversion Time and Cycle Time of the Analog Input Channels . . . . . . . . 15-43
15.7.5 Conversion Time, Cycle Time, Settling Time, and Response Time
of the Analog Output Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-44
15.7.6 Starting Up the IF 961-AIO Interface Submodule . . . . . . . . . . . . . . . . . . . . 15-45
15.7.7 Addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-45
15.7.8 Analog Output Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-46
15.7.9 Analog Input Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-47
15.7.10 Analog Value Representation for the Measuring Ranges of
the Analog Inputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-49
15.7.11 Analog Value Representation for the Measuring Ranges of
the Analog Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-50
15.7.12 Diagnostics, Interrupts, and Submodule ID . . . . . . . . . . . . . . . . . . . . . . . . . . 15-51
15.7.13 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-52
15.8 IF 961-CT1 Interface Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-54
15.8.1 What Can the IF961-CT1 Interface Submodule Do? . . . . . . . . . . . . . . . . . . 15-55
15.8.2 Addressing and Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-57
15.8.3 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-58
15.9 IF 964-DP Interface Submodule for S7-400 and M7-400 . . . . . . . . . . . . . . 15-59
15.9.1 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-61
15.9.2 Addressing and Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-62
15.9.3 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-63
15.10 Synchronization Submodule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-64

S7-400, M7-400 Programmable Controllers Module Specifications

viii A5E00069467-03
 Contents

16 Cycle and Reaction Times of the S7-400 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-1

16.1 Cycle Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-2
16.2 Communication Load . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-9
16.3 Reaction Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-12
16.4 Examples of Calculating the Cycle Time and Reaction Time . . . . . . . . . . . 16-18
16.5 Interrupt Reaction Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-22
16.6 Example of Calculating the Interrupt Reaction Time . . . . . . . . . . . . . . . . . . 16-24
16.7 Reproducibility of Time-Delay and Watchdog Interrupts . . . . . . . . . . . . . . . 16-25
A IM 463-2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1
A.1 Using SIMATIC S5 Expansion Units in an S7-400 . . . . . . . . . . . . . . . . . . . . A-2
A.2 Rules for Connecting S5 Expansion Units . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3
A.3 Operator Controls and Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-4
A.4 Installing and Connecting the IM 463-2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-6
A.5 Setting the Operating Modes of the IM 463-2 . . . . . . . . . . . . . . . . . . . . . . . . A-7
A.6 Configuring S5 Modules for Operation in the S7-400 . . . . . . . . . . . . . . . . . A-9
A.7 Pin Assignments of the 721 Connecting Cable . . . . . . . . . . . . . . . . . . . . . . A-10
A.8 Terminating Connector for IM 314 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-12
A.9 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-13
B Parameter Sets of the Signal Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1
B.1 Principle of Assigning Parameters to Signal Modules in
the User Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-2
B.2 Parameters of the Digital Input Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-3
B.3 Parameters of the Digital Output Modules . . . . . . . . . . . . . . . . . . . . . . . . . . B-6
B.4 Parameters of the Analog Input Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . B-9
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Index-1

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 ix
Contents

S7-400, M7-400 Programmable Controllers Module Specifications

x A5E00069467-03
General Technical Specifications 1
Chapter Overview

Section Description Page

1.1 Electromagnetic Compatibility of the Modules in the 1-5
S7-400/M7-400 Systems
1.2 Transport and Storage Conditions for Modules and Backup 1-8
Batteries in the S7-400/M7-400 Systems
1.3 Ambient Conditions for Operating the S7-400/M7-400 1-9
Systems
1.4 Information on Insulation Tests, Protection Class, and Degree 1-12
of Protection
1.5 Ambient Climatic Conditions for Operating the M7-400 1-13
Automation Computer

Also listed in conjunction with the general technical specifications are the
standards and test values that the modules of the S7-400/M7-400 system conform
to and fulfill as well as the test criteria in accordance with which the
S7-400/M7-400 systems have been tested.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-1
General Technical Specifications

Observing the Installation Guidelines

The installation guidelines and safety notes given in this manual must be observed
during restart and operation of the S7-400/M7-400 systems.

Approvals

The following approvals exist for the S7-400/M7-400:

• UL Recognition Mark
Underwriters Laboratories (UL) in accordance with Standard UL 508:
– Report E 85972
– Report 143289 for the modules in Table 1-1
• CSA Certification Mark
Canadian Standard Association (CSA) in accordance with Standard C 22.2
No. 142:
– Report LR 63533
– Report 111 879 for the modules in Table 1-1
• Factory Mutual Approval Standard Class Number 3611, Class I, Division 2,
Group A, B, C, D.
Temperature class: T4 at 60 °C ambient temperature
Exception: The following applies for the power supply modules in Table 1-1:
Temperature class T3C at 60 °C ambient temperature
Temperature class T4 at 40 °C ambient temperature
In the case of the modules in Table 1-1 the T4 temperature class is achieved for
the whole system if the ambient temperature does not exceed 40 °C during
operation.
Special requirements should also be observed which you can fulfill, for
example, by mounting the system in cabinets.

Table 1-1 Power Supply Modules

Name Order Number

PS 407 4 A Power Supply Module 6ES7 407-0DA00-0AA0
PS 407 10 A Power Supply Module 6ES7 407-0KA00-0AA0
PS 407 20 A Power Supply Module 6ES7 407-0RA00-0AA0
PS 405 4 A Power Supply Module 6ES7 405-0DA00-0AA0
PS 405 10 A Power Supply Module 6ES7 405-0KA00-0AA0
PS 405 20 A Power Supply Module 6ES7 405-0RA00-0AA0

S7-400, M7-400 Programmable Controllers Module Specifications

1-2 A5E00069467-03
 General Technical Specifications

Warning
! Personal injury or property damage can result.
In hazardous areas, personal injury or property damage can result if you create or
break an electrical circuit during operation of an S7-400/M7-400 (for example, by
means of plug-in connections, fuses, switches).
Do not create or break live electric circuits unless you are certain there is no
danger of explosion.

Warning
! WARNING - DO NOT DISCONNECT WHILE CIRCUIT IS LIVE
UNLESS LOCATION IS KNOWN TO BE NON-HAZARDOUS.

CE Marking
SIMATIC products fulfill the requirements of the following EU directives.

EMC Directive
SIMATIC products meet the requirements of EU directive 89/336/EEC
“Electromagnetic Compatibility”.
SIMATIC products are intended for industrial use.

Area of Application Requirements on

Noise emission Noise immunity
Industry EN 50081-2: 1993 EN 50082-2: 1995

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-3
General Technical Specifications

Low-Voltage Directive
The products listed below fulfill the requirements of EU directive 73/23/EEC
“Low-Voltage Directive”. Adherence to this EU directive was tested in accordance
with IEC 61131-2.

Name Order Number

Digital Input Module SM 421; DI 32 x 120 VUC 6ES7 421-1EL00-0AA0
Digital Input Module SM 421; DI 16 x 120/230 VUC 6ES7 421-1FH00-0AA0
Digital Output Module SM 422; DO 8 x 120/230 VAC/5 A 6ES7 422-1FF00-0AA0
Digital Output Module SM 422; DO 16 x 120/230 VAC/2 A 6ES7 422-1FH00-0AB0
Relay Output Module SM 422; DO 16 x 30/230 VUC/Rel5A 6ES7 422-1HH00-0AA0
The 120/230 VAC Fan Subassembly 6ES7 408-1TB00-0XA0
PS 407 4A 6ES7 407-0DA00-0AA0
PS 407 10A 6ES7 407-0KA00-0AA0
6ES7 407-0KA01-0AA0
PS 407 20A 6ES7 407-0RA00-0AA0
6ES7 407-0RA01-0AA0
PS 407 10AR 6ES7 407-0KR00-0AA0

Safety Requirements for Installation

The S7-400/M7-400 programmable controllers are “open type” equipment
according to the IEC 61131-2 standard and therefore adhere to the
EU directive 73/23/EEC “Low-Voltage Directive” and are UL/CSA certified as such.
To fulfill requirements for safe operation with regard to mechanical stability, flame
retardance, stability, and shock-hazard protection, the following alternative types of
installation are specified:
• Installation in a suitable cabinet
• Installation in a suitable housing
• Installation in a suitably equipped, enclosed operating area.

Declaration of Conformity
In accordance with the above-mentioned EU directive, the EU declarations of
conformity are held at the disposal of the competent authorities at the address
below:
Siemens Aktiengesellschaft
Bereich Automatisierungs- und Antriebstechnik
A&D AS E42
Postfach 1963
D-92209 Amberg

S7-400, M7-400 Programmable Controllers Module Specifications

1-4 A5E00069467-03
 General Technical Specifications

Note for Australia

SIMATIC products fulfill the requirements of the AS/NZS 2064 standard (Class A).

1.1 Electromagnetic Compatibility of the Modules in the

S7-400/M7-400 Systems

Introduction
All the components of the S7-400/M7-400 systems meet the requirements of the
standards in force in Europe provided they are installed in accordance with all the
appropriate regulations (see Installation Manual, Chapters 2 and 4).

Warning
! Installation of expansions that have not been approved for the S7-400/M7-400 can
result in violations of the requirements and regulations for safety and
electromagnetic compatibility.
Use only expansions that have been approved for the system.

This section contains information on the noise immunity of the modules of the
S7-400/M7-400 system as well as notes on the execution of radio interference
suppression measures.

Pulse-Like Interference
Table 1-2 shows the EMC response of the modules of the S7-400/M7-400 system
to pulse-like interference.

Note
Cables for data and analog signals must be shielded.
Cables for digital signals can be unshielded.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-5
General Technical Specifications

Table 1-2 EMC Response of the Modules of the S7-400/M7-400 Systems to Pulse-Like Interference
Pulse-Like Interference Test Voltage Corres-
ponds to
Severity
Level
Electrostatic discharge Discharge to air: ±8 kV
3
in accordance with IEC 61000-4-2 Contact discharge: ±6 kV
Bursts (fast transient interference in accordance 2 kV (power supply line)
with IEC 61000-4-4) 2 kV (signal line > 10 m) 3
1 kV (signal line > 10 m)
High-energy single pulse (surge) in accordance with IEC 61000-4-5 3
• Asymmetrical coupling 2 kV (supply line) DC voltage with
protective elements
2 kV (signal line/data line) > 10 m only,
possibly with protective elements
• Symmetrical coupling 1 kV (supply line) DC voltage with
protective elements
1 kV (signal line) > 10 m only, possibly
with protective elements

Sinusoidal Interferences
Table 1-3 shows the EMC response of the modules of the S7-400/M7-400 systems
to sinusoidal interference.

Table 1-3 EMC Response of the Modules of the S7-400/M7-400 Systems to Sinusoidal Interference

Sinusoidal Interference Test Values Corres-

ponds to
Severity
Level
HF interference (electromagnetic fields)
in accordance with IEC 61000-4-3 10 V/m with 80 % amplitude modulation of
1 kHz in the range 80 MHz to 1000 MHz 3

In accordance with IEC 61000-4-3 10 V/m with 50 % pulse modulation at 900 MHz
HF interference on cables and cable Test voltage 10 V with 80 % amplitude
shields in accordance with modulation of 1 kHz in the range 9 kHz to 3
IEC 61000-4-6 80 MHz

Emission of Radio Interference

Radio interference suppression in accordance with EN 55011: Limit value class A,
Group 1.

S7-400, M7-400 Programmable Controllers Module Specifications

1-6 A5E00069467-03
 General Technical Specifications

Line Voltage Interference

The products listed in the table below fulfill the requirements of the following
standards for system perturbation:
Harmonic currents: EN 61000-3-2
Voltage fluctuations and flickering EN 61000-3-3

Name Order Number

PS 407 10 A Power Supply Module 6ES7 407-0KA01-0AA0
PS 407R 10 A Redundant Power Supply Module 6ES7 422-0KR00-0AA0
PS 407 20 A Power Supply Module 6ES7 407-0RA01-0AA0

Additional Measures
If you want to connect an S7-400 or M7-400 system to the public line supply, you
must ensure limit value class B in accordance with EN 55022. Suitable additional
measures must be taken, if you need to enhance the noise immunity of the system
as a result of high external noise levels.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-7
General Technical Specifications

1.2 Transport and Storage Conditions for Modules and Backup

Batteries in the S7-400/M7-400 Systems

Transport and Storage of Modules

The modules of the S7-400/M7-400 systems exceed the IEC 61131-2
requirements regarding transport and storage conditions.
Table 1-4 lists the transport and storage conditions for modules of the
S7-400/M7-400 systems transported or stored in their original packaging (transport
packaging).
The climatic conditions conform to IEC 60721, Part 3-3, Class 3K7 for storage and
IEC 60721, Part 3-2, Class 2K4 for transport.
The mechanical conditions conform to IEC 60721, Part 3-2, Class 2M2.

Table 1-4 Transport and Storage Conditions for Modules

Permissible range
Free fall ≤ 1 m (up to 10 kg)
Temperature –40 °C to +70 ° C
Atmospheric pressure 1080 to 660 hPa (corresponds to a height of -1000 to
3500 m)
Relative humidity (at +25 °C) 5 to 95 %, without condensation
Sinusoidal vibrations in accor- 5 to 9 Hz: 3.5 mm
dance with IEC 60068-2-6 9 to 500 Hz: 9.8 m/s2
Shock in accordance with 250 m/s2, 6 ms, 1000 shocks
IEC 60068-2-29

Transport and Storage of Backup Batteries

Transport backup batteries in the original packaging whenever possible. No special
measures are required for the transport of the backup batteries used in the
S7-400/M7-400 systems. The lithium component of the backup battery is less than
0.5 g.
Backup batteries must be stored in cool and dry conditions. The maximum storage
time is 10 years.

S7-400, M7-400 Programmable Controllers Module Specifications

1-8 A5E00069467-03
 General Technical Specifications

Warning
! Improper handling of backup batteries can cause injury and material damage.
Wrongly handled backup batteries can explode or cause serious burns.
Please observe the following rules when handling the backup batteries used in the
S7-400/M7-400 systems:
• Never recharge the batteries
• Never heat them
• Never throw them onto a fire
• Never damage them mechanically (drill, crush, etc.)

1.3 Ambient Conditions for Operating the S7-400/M7-400 Systems

Conditions of Use
The S7-400/M7-400 systems are designed for weather-protected, stationary use.
Conditions of use are in accordance with IEC 60721, Part 3, Class 3M3
(mechanical requirements) or Class 3K3 (ambient climatic requirements).
Conditions of use in accordance with ICE 60721 3-3 correspond to areas of
application with high traffic density and in the immediate vicinity of industrial plants
with chemical emissions.

Use with Additional Measures

The S7-400/M7-400 must not be used, for example, in the following situations
without additional measures:
• In locations with a high component of ionized radiation
• In locations with difficult operating conditions such as
– Dust
– Corrosive fumes or gases
– Strong electrical or magnetic fields
• In plants requiring special monitoring, such as:
– Elevator systems
– Electrical plants in especially hazardous areas.
An example of an additional measure could be enclosure in a housing/cabinet.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-9
General Technical Specifications

Ambient Mechanical Conditions

Tables 1-5 and 1-6 show the ambient mechanical conditions for the S7-400/M7-400
modules in the form of sinusoidal vibrations.

Table 1-5 Ambient Mechanical Conditions

Frequency (Hz) Test Values

10 ≤ f < 58 0.075 mm amplitude
58 ≤ f < 500 1 g constant acceleration

Table 1-6 Ambient Mechanical Conditions for the MSM 478 Mass Storage Module in
Operation

Frequency (Hz) Test Values

10 ≤ f < 58 0.035 mm amplitude
58 ≤ f < 500 0.5 g constant acceleration
Shock Semi-sinusoidal 5 g, 11 ms

Reduction of Vibrations
If the S7-400 or M7-400 is subject to high levels of shock or vibration, you must
take suitable measures to reduce the acceleration or amplitude.
We recommend that you secure the S7-400/M7-400 on shock-absorbent material
(for example, rubber-metal vibration dampers).

Test for Ambient Mechanical Conditions

Table 1-7 provides information on the type and range of the tests for ambient
mechanical conditions.

Table 1-7 Test for Ambient Mechanical Conditions

Test for... Test Standard Remarks

Vibrations Vibration test in accor- Vibration type: Frequency sweeps with a rate
dance with IEC 60068 of change of 1 octave/minute.
Part 2-6 (sinusoidal) 10 Hz ≤ f < 58 Hz, constant amplitude
0.075 mm
58 Hz ≤ f < 500 Hz, constant acceleration 1 g
Vibration duration: 10 frequency sweeps per
axis in each of the 3 axes arranged vertically
to each other
Shock Shock test in accor- Shock type: Semi-sinusoidal
dance with IEC 60068 Strength of shock: 10 g peak value, 6 ms
Part 2-29 duration
Shock direction: 100 shocks in each of the
3 axes arranged vertically to each other

S7-400, M7-400 Programmable Controllers Module Specifications

1-10 A5E00069467-03
 General Technical Specifications

Ambient Climatic Conditions

The S7-400/M7-400 can be used under the following ambient climatic conditions:

Table 1-8 Ambient Climatic Conditions for Modules

Permissible range Remarks

Temperature 0 to +60 °C
Temperature Max. 10 °C/h
change
Relative humi- Max. 95 % at +25 °C No condensation, corresponds to RH
dity stressing level 2 in accordance with
IEC 61131-2
Atmospheric 1080 to 860 kPa (corresponds to
pressure a height of -1000 to 1500 m)
Concentration SO2: < 0.5 ppm; Test: 10 ppm; 4 days
of contami- RH < 60 %, no condensation)
nants
H2S: < 0.1 ppm; Test: 1 ppm; 4 days
RH < 60 %, no condensation)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-11
General Technical Specifications

1.4 Information on Insulation Tests, Protection Class, and Degree

of Protection

Test Voltages
The insulation resistance has been proved with different test voltages (in
accordance with IEC 61131-2):
Table 1-9 lists the test voltages in the insulation test.

Table 1-9 Test Voltages in the Insulation Test

Circuits with Rated Voltage Ue Against Other Cir-

Test Voltage
cuits or Against Ground
0 V < Ue ≤ 50 V 350 V
50 V < Ue ≤ 100 V 700 V
100 V < Ue ≤ 150 V 1300 V
150 V < Ue ≤ 300 V 2200 V

Protection Class
Protection class I in accordance with IEC 60536 (VDE 0106, Part 1); that is a
protective cover connection to the power supply module is required!

Protection Against Foreign Bodies and Water

Protection class IP 20 in accordance with IEC 60529; that is protection against
contact with standard test probes.
There is no protection against the ingress of water.

S7-400, M7-400 Programmable Controllers Module Specifications

1-12 A5E00069467-03
 General Technical Specifications

1.5 Ambient Climatic Conditions for Operating the M7-400

Automation Computer

Ambient Climatic Conditions for the M7-400

The M7-400 automation computer may be used under the following ambient
climatic conditions:

Table 1-10 Ambient Climatic Conditions for the Modules Used in the M7-400

Permissible range Remarks

Temperature 0 to +60 °C When using a CPU 486-3 or 488-3

5 to +55 °C When using an MSM 478 without

diskette operation but with ventila-
5 to +40 °C tion
When using an MSM 478 with
diskette operation or without
ventilation

(when using an ATM 478, the

permissible temperature range is
restricted by the AT module used)
Relative humidity Max. 95 % No condensation, corresponds to
RH stressing level 2 in accordance
with IEC 61131-2
Atmospheric 1080 to 869 kPa (corresponds to
pressure a height of -1000 to 1500 m)
Concentration of Test:
contaminants SO2: < 0.5 ppm; 10 ppm; 4 days
RH < 60 %, no condensation)

H2S: < 0.1 ppm; 1 ppm; 4 days

RH < 60 %, no condensation)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1-13
General Technical Specifications

S7-400, M7-400 Programmable Controllers Module Specifications

1-14 A5E00069467-03
 Racks

Racks 2
Chapter Overview

Section Description Page

2.1 Function and Structure of the Racks 2-2
2.2 The UR1 and UR2 Racks 2-3
2.3 The UR2-H Rack 2-5
2.4 The CR2 Rack 2-7
2.5 The ER1 and ER2 Racks 2-8

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 2-1
Racks

2.1 Function and Structure of the Racks

Introduction
The racks in the S7-400 have the following tasks:
• They hold the modules.
• They supply the modules with operating voltage.
• They connect the individual modules to each other via the signal buses.

Structure of the Racks

A rack consists of the following elements:
• Aluminum mounting rail with threaded bolts for fixing the modules and lateral
cutouts for mounting the rack
• Plastic parts that function, among other things, as guides when swinging the
modules into place.
• A backplane bus, an I/O bus and, if necessary, a communication bus with bus
connector
• Connection for local ground
Figure 2-1 shows the mechanical configuration of a rack (UR1).

Aluminum carrier Plastic parts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

Connection for local ground Bus connector (covered when shipped)

Figure 2-1 Structure of a Rack with 18 Slots

UL/CSA Note
Special requirements should be taken into consideration in the area of influence of
the UL/CSA; these may be fulfilled by installing the system in a cabinet.

S7-400, M7-400 Programmable Controllers Module Specifications

2-2 A5E00069467-03
 Racks

2.2 The UR1 and UR2 Racks

Order Number
UR1: 6ES7 400-1TA01-0AA0
UR2: 6ES7 400-1JA01-0AA0

Introduction
The UR1 and UR2 racks are used for assembling central racks and expansion
racks.
The UR1 and UR2 racks have both an I/O bus and a communication bus.

Suitable Modules for UR1 and UR2

You can use the following modules in the UR1 and UR2 racks:
When the UR1 or UR2 is used as a central rack:
• All S7-400 modules with the exception of receive IMs
When the UR1 or UR2 is used as an expansion rack:
• All S7-400 modules with the exception of CPUs and send IMs
Special case: Power supply modules cannot be used in conjunction with the
IM 461-1 receive IM.

Structure of the UR1 and UR2

Figure 2-2 shows the structure of the UR1 rack with 18 slots and the UR2 rack with
9 slots.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 1 2 3 4 5 6 7 8 9

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 1 2 3 4 5 6 7 8 9

I/O bus I/O bus

290 mm 190 mm

Communication bus Communication bus

40 mm

465 mm 240 mm

482.5 mm 257.5 mm

Figure 2-2 Dimensions of the 18-Slot or 9-Slot Rack

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 2-3
Racks

Technical Specifications of the UR1 and UR2 Racks

Rack UR1 UR2

Number of single-width slots 18 9
Dimensions W x H x D (in mm) 482.5 x 290 x 27.5 257.5 x 290 x 27.5
Weight (in kg) 3 1.5
Buses I/O bus and I/O bus and
communication communication
bus bus

S7-400, M7-400 Programmable Controllers Module Specifications

2-4 A5E00069467-03
 Racks

2.3 The UR2-H Rack

Order Number
6ES7 400-2JA00-0AA0

Introduction
The UR2-H rack is used for assembling two central racks or expansion racks in
one rack. The UR2-H rack essentially represents two electrically isolated UR2
racks on the same rack profile. The main area of application of the UR2-H is in the
compact structure of redundant systems (two subracks or subsystems in one
rack).

Suitable Modules for the UR2-H

You can use the following modules in the UR2-H rack:
When the UR2-H is used as a central rack:
• All S7-400 modules with the exception of receive IMs
When the UR2-H is used as an expansion rack:
• All S7-400 modules apart from CPUs, send IMs, the IM 463-2, and the adapter
module
Special case: Power supply modules cannot be used in conjunction with the
IM 461-1 receive IM.

Structure of the UR2-H

Figure 2-3 shows the structure of the UR2-H rack with 2 x 9 slots.

Subrack I Subrack II

1 2 3 4 5 6 7 8 9 1 2 3 4 5 6 7 8 9

1 2 3 4 5 6 7 8 9 1 2 3 4 5 6 7 8 9

290 mm 190 mm

40 mm

465 mm

482.5 mm

Figure 2-3 Dimensions of the Rack

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 2-5
Racks

Caution
! Danger of damage to equipment.
If you insert a power supply module in a slot that is not permitted for power supply
modules, the module may be damaged. Slots 1 to 4 are permitted, whereby power
supply modules starting from slot 1 must be inserted without leaving gaps.
Make sure that power supply modules are only inserted in permitted slots. Take
particular notice of the option of swapping modules in slot 1 on subrack II and slot
9 on subrack I.

Technical Specifications of the UR2-H Rack

Rack UR2-H
Number of single-width slots 2x9
Dimensions W x H x D (in mm) 482.5 x 290 x 27.5
Weight (in kg) 3
Buses Segmented I/O bus,
segmented communication bus

S7-400, M7-400 Programmable Controllers Module Specifications

2-6 A5E00069467-03
 Racks

2.4 The CR2 Rack

Order Number
CR2: 6ES7 401-2TA01-0AA0

Introduction
The CR2 rack is used for assembling segmented central racks. The CR2 has both
an I/O bus and a communication bus. The I/O bus is split into two local bus
segments with 10 or 8 slots.

Suitable Modules for the CR2

You can use the following modules in the CR2 rack:
• All S7-400 modules with the exception of receive IMs

Structure of the CR2

Figure 2-4 shows the structure of the CR2 rack.

SEG1 SEG2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

I/O bus I/O bus

Segment 1 Segment 2

Communication bus

Figure 2-4 CR2 Rack

Technical Specifications of the CR2 Rack

Rack CR2
Number of single-width slots 18
Dimensions W x H x D (in mm) 482.5 x 290 x 27.5
Weight (in kg) 3
Busses Segmented I/O bus,
continuous communication bus
Only one power supply module required

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 2-7
Racks

2.5 The ER1 and ER2 Racks

Order Number
ER1: 6ES7 403-1TA01-0AA0
ER2: 6ES7 403-1JA01-0AA0

Introduction
The ER1 and ER2 racks are used for assembling expansion racks.
The ER1 and ER2 racks have only one I/O bus with the following restrictions:
• Interrupts from modules in the ER1 or ER2 have no effect since there are no
interrupt lines provided.
• Modules in the ER1 or ER2 are not supplied with 24 V. Modules requiring a
24 V supply are not provided for use in the ER1 or ER2.
• Modules in the ER1 or ER2 are not backed up either by the battery in the power
supply module or by the voltage supplied externally to the CPU or the receive
IM (EXT.-BATT. socket).
Battery faults and backup voltage faults are not reported to the CPU.
The battery monitoring function of a power supply module installed in the ER1
or ER2 should therefore always be switched off.

Suitable Modules for ER1 and ER2

You can use the following modules in the ER1 and ER2 racks:
• All power supply modules
• Receive IMs
• All signal modules provided the above-mentioned restrictions are observed.
However: Power supply modules cannot be used in conjunction with the IM 461-1
receive IM.

S7-400, M7-400 Programmable Controllers Module Specifications

2-8 A5E00069467-03
 Racks

Structure of ER1 and ER2

Figure 2-5 shows the structure of an ER1 rack with 18 slots.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

I/O bus

Figure 2-5 ER1 Rack

Figure 2-6 shows the structure of an ER2 rack with 9 slots.

1 2 3 4 5 6 7 8 9

I/O bus

Figure 2-6 ER2 Rack

Technical Specifications of the ER1 and ER2 Racks

Rack ER1 ER2

Number of single-width slots 18 9
Dimensions W x H x D (in mm) 482.5 x 290 x 27.5 257.5 x 290 x 27.5
Weight (in kg) 2.5 1.25
Busses Restricted Restricted
I/O bus I/O bus

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 2-9
Racks

S7-400, M7-400 Programmable Controllers Module Specifications

2-10 A5E00069467-03
Power Supply Modules 3
Chapter Overview

Section Description Page

3.1 Common Characteristics of the Power Supply Modules 3-2
3.2 Redundant Power Supply Modules 3-5
3.3 Backup Battery (Option) 3-7
3.4 Controls and Indicators 3-8
3.5 Fault/Error Messages via LEDs 3-13
3.6 PS 407 4A Power Supply Module 3-19
6ES7 407-0DA00-0AA0
3.7 PS 407 10A and PS 407 10A R Power Supply Module 3-21
PS 407 10A: 6ES7 407-0KA01-0AA0 (Standard)
PS 407 10A R: 6ES7 407-0KR00-0AA0 (Redundancy
Capability)
3.8 PS 407 20A Power Supply Module 3-24
6ES7 407-0RA00-0AA0
3.9 PS 407 20A Power Supply Module 3-27
6ES7 407-0RA01-0AA0
3.10 PS 405 4A Power Supply Module 3-29
6ES7 405-0DA00-0AA0
3.11 PS 405 10A Power Supply Module 3-31
6ES7 405-0KA00-0AA0
3.12 PS 405 10A and PS 405 10A R Power Supply Module 3-33
PS 405 10A: 6ES7 405-0KA01-0AA0 (Standard)
PS 405 10A R: 6ES7 405-0KR00-0AA0 (Redundancy
Capability)
3.13 PS 405 20A Power Supply Module 3-35
6ES7 405-0RA00-0AA0
3.14 PS 405 20A Power Supply Module 3-37
6ES7 405-0RA01-0AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-1
Power Supply Modules

3.1 Common Characteristics of the Power Supply Modules

Tasks of the Power Supply Modules

The power supply modules of the S7-400 supply the other modules in the rack with
their operating voltages via the backplane bus. They do not provide load voltages
for the signal modules.

Common Characteristics of the Power Supply Modules

The power supply modules share certain common characteristics in addition to
their special technical specifications. The most important common characteristics
are:
• Encapsulated design for use in mounting racks of the S7-400 system.
• Cooling via natural convection
• Plug-in connection of the supply voltage with AC - DC coding
• Protection class I (with protective conductor) in accordance with IEC 60536;
VDE 0106, Part 1
• Limitation of switch-on current in accordance with NAMUR recommendation
Part 1 of August 1998.
• Short-circuit-proof outputs
• Monitoring of both output voltages. If one of these voltages fails, the power
supply module signals a fault to the CPU.
• Both output voltages (5 VDC and 24 VDC) share a common ground.
• Primary clocked
• Battery backup as option. The parameters set and the memory contents (RAM)
are backed up via the backplane bus in the CPUs and programmable modules.
In addition, the backup battery enables you to carry out a hot restart on the
CPU. Both the power supply module and the backed up modules monitor
battery voltage.
• Operating and fault/error LEDs on the front plate.

Note
A mains disconnecting device must be provided when installing AC power supply
modules.

S7-400, M7-400 Programmable Controllers Module Specifications

3-2 A5E00069467-03
 Power Supply Modules

Switching the Line Voltage On/Off

The power supply modules have a making-current limiter in accordance with
NAMUR. If you switch off the line voltage or disconnect the power supply module
from the mains, you must wait approximately 20 seconds before switching the
mains back on. Only this ensures that the making-current limiter of the power
supply module is effective.

Power Supply Module in Invalid Slot

If you insert the power supply module in an invalid slot of a rack, it will not power
up. In this case, proceed as follows to start up the power supply module correctly:
1. Disconnect the power supply module from the mains (not just the standby
switch).
2. Remove the power supply module.
3. Install the power supply module in slot 1.
4. Wait at least 1 minute and then switch the line voltage on again.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-3
Power Supply Modules

Observance of the NAMUR Recommendation

If you use one of the modules listed below, you can achieve mains buffering in
accordance with the NAMUR recommendation with a central power supply in
accordance with NAMUR or an uninterrupted power supply.

Name Order Number

PS 407 4A Power Supply Module 6ES7 407-0DA00-0AA0
PS 407 20A Power Supply Module 6ES7 407-0RA00-0AA0
PS 405 4A Power Supply Module 6ES7 405-0DA00-0AA0
PS 405 10A Power Supply Module 6ES7 405-0KA00-0AA0
PS 405 20A Power Supply Module 6ES7 405-0RA00-0AA0

S7-400, M7-400 Programmable Controllers Module Specifications

3-4 A5E00069467-03
 Power Supply Modules

3.2 Redundant Power Supplies

Order Numbers and Functions

Type Order Number Input Voltagae Output voltage See

Section
PS 407 10A R 6ES7 407-0KR00-0AA0 85 VAC to 264 V or 5 VDC/10 A and 3.7
88 VDC to 300 V 24 VDC/1 A
PS 405 10A R 6ES7 405-0KR00-0AA0 19.2 VDC to 72 V 5 VDC/10 A and 3.12
24 VDC/1 A

Redundant Mode
You can configure a redundant power supply for a rack using two type PS 407
10A R power supply modules. This is recommended when you wish to enhance
the availability of your programmable controller, especially if you have to operate
the programmable controller on an unreliable network.

Configuring a redundant power supply

Redundant mode is possible with the CPUs and racks described in this manual. A
further requirement is STEP 7, version 4.02 or higher.
To configure a redundant power supply, plug two power supply modules, starting
from the left, into adjacent slots of a rack (UR, CR or ER) – in other words, without
leaving gaps between slots 1 to 4. You can then configure the rack with modules to
the extent that one power supply module can completely supply the rack on its own
– in other words, all the inserted modules do not consume more than 10 A overall
for redundant mode.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-5
Power Supply Modules

Characteristics
The redundant power supply of an S7-400 has the following characteristics:
• The power supply module delivers a making current in accordance with
NAMUR.
• Each of the power supply modules can take over the supply of power to the
whole rack if the other one fails. There is no loss of operation.
• Each of the power supply modules can be exchanged while the system is in
operation. No loss of power and no peak stress occurs with the effective
voltages when the modules are removed or inserted.
• Each of the power supply modules monitors its function and sends a message if
it fails.
• Neither of the power supply modules can generate an error which affects the
output voltage of the other power supply module.
• A redundant battery concept (backup concept) is only provided when two
backup batteries are used in each of the power supply modules. If only one
battery is used in each module, only non-redundant backup is possible, since
both batteries are being used at the same time.
• The failure of a power supply module is registered via a plug and remove
interrupt (default STOP). It is only when the power supply module is being used
in the second segment of the CR 2 that no message is sent if the module fails.
• If two power supply modules have been inserted but only one is switched on, a
startup delay of up to a minute occurs on power on.

Note
The check box “Startup if preset configuration not equal to actual configuration”
should be activated in the “Properties” dialog box of the CPU.

S7-400, M7-400 Programmable Controllers Module Specifications

3-6 A5E00069467-03
 Power Supply Modules

3.3 Backup Battery (Option)

Introduction
The power supply modules of the S7-400 have a battery compartment for one or
two backup batteries. Use of these batteries is optional.

Function of Backup Batteries

If backup batteries have been installed, the parameters set and the memory
contents (RAM) will be backed up via the backplane bus in CPUs and
programmable modules if the supply voltage fails. The battery voltage must be
within the tolerance range.
In addition, the backup battery enables you to carry out a hot restart on the CPU
after power-on.
Both the power supply module and the backed up modules monitor the battery
voltage.

Power Supply Modules With Two Backup Batteries:

Some power supply modules contain a battery compartment for two batteries. If
you use two batteries and set the switch to 2BATT, the power supply module
defines one of the two batteries as the backup battery. This assignment remains in
force until the battery is empty. When the backup battery is completely discharged,
the system switches to the reserve battery which is then in turn used as the
backup battery for the duration of its life. The status “backup battery” is also stored
in the event of a power failure.

Battery Type
Only batteries authorized by Siemens can be used (see Chapter 12: Spare Parts
and Accessories).
The batteries can form a passivation layer. Depassivation takes place when the
batteries are inserted in the power supply module.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-7
Power Supply Modules

Backup Times
The maximum backup time depends on the load on the backup battery. A battery
capacity of 63% of the nominal capacity results in the following values:
Imax ≤ 200 µA Buffer time approximately 250 days
Imax ≤ 4 mA Buffer time approximately 12.5 days
The maximum backup current is 4 mA.
You can find the backup currents of the modules in the technical specifications for
the relevant modules.

3.4 Controls and Indicators

Introduction
The power supply modules of the S7-400 have essentially the same controls and
indicators.
The main differences are:
• Not all power supply modules have a voltage selector switch.
• Power supply modules with a backup battery have an LED (BATTF) that
indicates an empty, defective, or missing backup battery.
Power supply modules with two redundant backup batteries have two LEDs
(BATT1F and BATT2F) for indicating empty, defective and missing batteries.

S7-400, M7-400 Programmable Controllers Module Specifications

3-8 A5E00069467-03
 Power Supply Modules

Operator Controls and Indicators

Figure 3-1 shows a power supply module (PS 407 20A) with two (redundant)
backup batteries. The LEDs are in the top left of the module front plate.

• Fixing screws
PS 407 20A

1 X 2 2 3
3 4
407-0RA00-0AA0

INTF

BAF
BATT1F
BATT2F • LEDs INTF,
DC 5 V
BAF, BATT1F, BATT2F, 5 VDC, 24 VDC
DC 24 V

FMR • FMR pushbutton (Failure Message Reset)

• Standby switch (does not cut off mains)

+
BATT.1 BATT.2
+
Under cover

• Battery compartment
– –

BATT. INDIC.
2 BATT
OFF
• Switches BATT. INDIC.
1 BATT
2 BATT, OFF, 1 BATT
• Voltage selector switch (if present)
230

VOLTAGE

• 3-pin plug-in mains connector

• Fixing screw

Figure 3-1 Front View of the PS 407 20A Power Supply Module

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-9
Power Supply Modules

Meaning of the LEDs

The meaning of the LEDs on the power supply modules is described in the tables
below. Section 3.5 has a list of the faults indicated by these LEDs and notes on
how to acknowledge the faults.

INTF, DC 5 V, DC 24 V

LED Color Meaning

INTF Red Lights up in the event of an internal fault
DC5V Green Lights up as long as the 5 V voltage is within the tolerance limits
DC24V Green Lights up as long as the 24 V voltage is within the tolerance limits

BAF, BATTF
Power supply modules with one backup battery have the following indications:

LED Color Meaning

BAF Red Lights up if the battery voltage on the backplane bus is too low
and the BATT INDIC switch is at the BATT position
BATTF Yellow Lights up if the battery is empty, if the polarity is reversed, or if
the battery is missing, and the BATT INDIC switch is at the BATT
position

BAF, BATT1F, BATT2F

Power supply modules with two backup batteries have the following indications:

LED Color Meaning

BAF Red Lights up if the battery voltage on the backplane bus is too low
and the BATT INDIC switch is at the 1 BATT or 2 BATT position
BATTF Yellow Lights up if battery 1 is empty or if the polarity is reversed or if the
battery is missing, and the BATT INDIC switch is at the 1 BATT
or 2 BATT position
BATTF Yellow Lights up if battery 2 is empty or if the polarity is reversed, or if
the battery is missing, and the BATT INDIC switch is at the
2 BATT position

S7-400, M7-400 Programmable Controllers Module Specifications

3-10 A5E00069467-03
 Power Supply Modules

Battery Voltage on the Backplane Bus

The battery voltage is either supplied by the backup battery or externally into the
CPU or receive IM. In its normal state, the level of the battery voltage is between
2.7 V and 3.6 V.
The battery voltage is monitored for the lower limit. Violation of the lower limit is
indicated by the BAF LED and reported to the CPU.
BAF lights up if the battery voltage on the backplane bus is too low. Possible
causes of this include:
• Battery (batteries) empty or battery polarity has been reversed.
• External supply via CPU or receive IM is defective or supply from secondary
power supply module is defective or missing.
• Short-circuit or overload on the battery voltage.

Note
Due to internal capacities, if you remove the battery or switch off the external
supply, some time may elapse before BAF, BATT1F, or BATT2F lights up.

Function of the Operator Controls

FMR momentary- For acknowledging and resetting a fault indicator after correcting the
contact pushbut- fault
ton
Standby switch Switches the output voltages (5 VDC/24 VDC) to 0 V by intervening in
the control loop (no mains disconnection).
• I : Output voltages at nominal value
• : Output voltages 0 V
BATT INDIC Used for setting LEDs and battery monitoring
switch
Where one battery can be used (PS 407 4A, PS 405 4A):
• OFF: LEDs and monitor signals inactive
• BATT: BAF/BATTF LEDs and monitor signals active
Where two batteries can be used (PS 407 10A, PS 407 20A,
PS 405 10A, PS 405 20A)
• OFF: LEDs and monitor signals inactive
• 1 BATT: Only BAF/BATT1F LEDs (for battery 1) active.
• 2 BATT: BAF/BATT1F/BATT2F LEDs (for batteries 1 and 2) active.
Voltage selector For setting the primary voltage (120 VAC or 230 VAC), protected by its
switch (if present) own cover. (Please give due consideration to the note below)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-11
Power Supply Modules

Battery compart- For backup battery (batteries)

ment
Mains connection 3-pin plug for line voltage connection (do not plug in or remove when
power is on).

Warning
! One of the following power supply modules can be damaged:
Power supply module PS 407 4A (6ES7 407-0DA00-0AA0)
Power supply module PS 407 20A (6ES7 407-0RA00-0AA0)
If you set the voltage selector switch on these AC power supply modules to the
120 V position and connect the powers supply modules to a 230 V mains supply,
the power supply modules may become defective. Any warranty lapses in this in-
stance.
Set the voltage selector switch on these AC power supply modules to the existing
mains voltage.

Cover
The battery compartment, battery selector switch, voltage selector switch, and
mains connection are housed under one cover. The cover must remain closed
during operation in order to protect these operator controls and to prevent static
electricity from affecting the battery connections.
If you have to take measurements on a module, discharge your body before
working. To do so, touch grounded metal objects. Use only grounded measuring
instruments.

S7-400, M7-400 Programmable Controllers Module Specifications

3-12 A5E00069467-03
 Power Supply Modules

3.5 Fault/Error Messages via LEDs

Introduction
The power supply modules of the S7-400 indicate module faults and backup
battery faults via LEDs on the front plate.

Overview of the Fault/Error Messages

Type of Fault/Error LEDs

Module fault INTF
DC5V
DC24V
Backup battery fault Power supplies with 1 backup battery:
BAF
BATTF
Power supplies with 2 backup batteries:
BAF
BATT1F
BATT2F

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-13
Power Supply Modules

INTF, DC5V, DC24V

The following table shows the faults indicated by the INTF, DC5V, and DC24V
LEDs and lists how to remedy the faults.
The status of the BAF, BATTF, BATT1F, and BATT2F LEDs is not relevant here.

LED Cause of Fault Remedy

INTF DC5V DC24V
D D D Standby switch in position Set standby switch to I position
Line voltage missing Check line voltage
Serious internal fault, power supply Replace power supply module
module defective
Cutoff after overvoltage on 5 V or illegal Disconnect from mains and reconnect
external supply after approximately 1 minute; if neces-
sary, remove external supply
Power supply module operated in Install the power supply module in the
wrong slot correct slot (slot 1)
Short-circuit or overload on 5 V Switch off the power supply module,
remove the source of the short circuit;
after approximately 3 seconds, the
power supply module can be switched
on with the standby switch or the mains
supply.*
D L D Overvoltage on 24 V Check if the supply is external; if not,
replace power supply module
L D* D Short-circuit or overload on 5 V and Check load on the power supply mo-
24 V dule.
Possibly remove modules

D = LED is dark; L = LED lights up; F = LED flashing;

S7-400, M7-400 Programmable Controllers Module Specifications

3-14 A5E00069467-03
 Power Supply Modules

LED Cause of Fault Remedy

INTF DC5V DC24V
L D* L/D ** Short-circuit or overload on 5 V Check load on the power supply mo-
dule.
Possibly remove modules
L L D If the standby switch is at the posi- Remove all modules.
tion, illegal external supply on 5V Determine which module is faulty
If the standby switch is at the I posi- Check load on the power supply mo-
tion, short-circuit or overload on 24 V dule.
Possibly remove modules
D F L Voltage restored after short-circuit or Press FMR momentary-contact push-
overload on 5 V if faults occur in opera- button:
tion Flashing light changes to constant light
Dynamic overload on 5 V Check load on the power supply mo-
dule.
Possibly remove modules
D L F Voltage restored after short-circuit or Press FMR momentary-contact push-
overload on 24 V if faults occur in ope- button:
ration Flashing light changes to constant light
Dynamic overload on 24 V Check load on the power supply mo-
dule.
Possibly remove modules
D F F Voltage restored after short-circuit or Press FMR momentary-contact push-
overload on 5 V and 24 V if faults occur button:
in operation Flashing light changes to constant light
D F F Dynamic overload on 5 V and 24 V Check load on the power supply mo-
dule.
Possibly remove modules

D = LED is dark; L = LED lights up; F = LED flashing;

* If the power supply module does not start up again after a few seconds once the
overload has been removed, remove power to the module for 5 minutes and then
switch it on again. If the module stills does not start up, you must replace it. This
applies to 6ES7 407-0KA01-0AA0, release 3 and for 6ES7 407-0KR00-0AA0,
release ≤ 5.
** Depending on the short-circuit resistance
If either the 5VDC or 24VDC LEDs remains dark after switching on, the system
has not powered up.
If the PS 407 10A R remains dark for longer than 1 or 2 seconds after switching on
either of the DC5V or DC24V LEDs, the power supply module will not start up.
The following power supply modules will switch off in the event of a short circuit or
overload after 1 s to 3 s. The module will try to start up after no more than 3 s. If
the error has been eliminated by then, the module will start up. This applies to the
following modules:
• PS 405 10 A (6ES7 405-0KA01-0AA0)
• PS 405 10 A R (6ES7 405-0KR00-0AA0)
• PS 405 20 A (6ES7 405-0RA01-0AA0)
• PS 407 10 A R (6ES7 407-0KR00-0AA0), release ≥ 7

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-15
Power Supply Modules

• PS 407 20 A (6ES7 407-0RA01-0AA0)

• PS 407 10 A (6ES7 407-0KA01-0AA0), release ≥ 5

BAF, BATTF
The following table applies to power supply modules with one battery if the BATT
INDIC switch is in the BATT position. It shows the faults indicated and lists how to
remedy the faults.

LED Cause of Fault Remedy

BAF BATTF
L L Battery empty or missing Insert new battery.
No backup voltage available Press FMR momentary-contact pushbut-
ton
D L Battery empty or missing Insert new battery.
Press FMR momentary-contact pushbut-
ton
Battery has been stored for Depassivate battery
too long (see Installation Manual, Chapter 7)
L D Battery in order • Fault after plugging in a module:
No backup voltage available Plugged-in module defective
(short-circuit) • Fault after switching on: Remove all
modules and plug in individually
D D Battery in order –

D = LED is dark; L = LED lights up;

S7-400, M7-400 Programmable Controllers Module Specifications

3-16 A5E00069467-03
 Power Supply Modules

BAF, BATT1F, BATT2F

The following table applies to power supply modules with two batteries if the BATT
INDIC switch is in the 1BATT position. It shows the faults indicated and lists how to
remedy the faults.
Nothing is indicated about the condition of any second battery that may be in use.

LED Cause of Fault Remedy

BAF BATTF BATTF

L L D Battery 1 empty or missing Insert new battery in compart-

No backup voltage available ment 1.
Press FMR momentary-con-
tact pushbutton
D L D Battery 1 empty or missing Insert new battery in compart-
ment 1.
Press FMR momentary-con-
tact pushbutton
Battery has been stored for Depassivate battery
too long (see Installation Manual,
Chapter 7)
L D D Battery 1 in order • Fault after plugging in a
No backup voltage available module: Plugged-in
(short-circuit) module defective
• Fault after switching on:
Remove all modules and
plug in individually
D D D Battery 1 in order –

D = LED is dark; L = LED lights up;

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-17
Power Supply Modules

The following table applies to power supply modules with two batteries if the BATT
INDIC switch is in the 2BATT position. It shows the faults indicated and lists how to
remedy the faults.

LED Cause of Fault Remedy

BAF BATTF BATTF

L L L Both batteries are empty or mis- Insert new batteries in compartments 1

sing. and 2
No backup voltage available Press FMR momentary-contact push-
button
D L L Both batteries empty or missing Insert new batteries in compartments 1
and 2
Press FMR momentary-contact push-
button
L L D Battery 1 empty or missing Insert new battery in compartment 1.
Press FMR momentary-contact push-
button
No backup voltage available • Fault after plugging in a module:
(short-circuit or overload) Plugged-in module defective
• Fault after switching on: Remove all
modules and plug in individually
D L D Battery 1 empty or missing Insert new battery in compartment 1.
Press FMR momentary-contact push-
button
Battery has been stored for too Depassivate battery
long (see Installation Manual, Chapter 7)
L D L Battery 2 empty or missing Insert new battery in compartment 2.
Press FMR momentary-contact push-
button
No backup voltage available • Fault after plugging in a module:
(short-circuit or overload) Plugged-in module defective
• Fault after switching on: Remove all
modules and plug in individually
D D L Battery 2 empty or missing Insert new battery in compartment 2.
Press FMR momentary-contact push-
button
Battery has been stored for too Depassivate battery
long (see Installation Manual, Chapter 7)
L D D Both batteries in order. • Fault after plugging in a module:
No backup voltage available Plugged-in module defective
(short-circuit) • Fault after switching on: Remove all
modules and plug in individually
D D D Both batteries in order. –

D = LED is dark; L = LED lights up;

S7-400, M7-400 Programmable Controllers Module Specifications

3-18 A5E00069467-03
 Power Supply Modules

3.6 PS 407 4A Power Supply Module

Order Number
6ES7 407-0DA00-0AA0

Function
The PS 407 4A power supply module is designed for connecting to an AC line
voltage of 120 / 230 VAC and supplies 5 VDC /4 A and 24 VDC / 0.5 A on the
secondary side.

Controls and Indicators on the PS 407 4A

• Fixing screw
PS 407 4A
X 2
1
3 4
407-0DA00-0AA0

INTF

BAF
BATTF
• LEDs INTF,
5 VDC
BAF, BATTF,
24 VDC
DC 5 V, DC 24 V

FMR • FMR pushbutton (Failure Message Reset)

• Standby switch (does not cut off mains)

Under cover

• Battery compartment

BATT. INDIC.
BATT • Switches BATT. INDIC.
OFF
BATT, OFF
•
230

Voltage selector switch

VOLTAGE

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-19
Power Supply Modules

Technical Specifications of the PS 407 4A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 25x290x217 Output voltages
Weight 0.78 kg • Nominal values 5.1 VDC /24 VDC
Cable cross-section 3x1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+2%/–0.5%
with wire end ferrule 24 VDC: ±5%
with insulating collar;
use only flexible Output currents
sheath cable) • Nominal values 5 VDC: 4 A
Cable diameter 3 to 9 mm 24 VDC: 0.5 A
Input Variables Max. residual ripple 5 VDC: 50 mVSS
Input voltage 24 VDC: 200 mVSS
• Nominal value 120/230 VAC Max. switching peaks 5 VDC: 150 mVS
• Permissible range 85 to 132 VAC / 24 VDC: 500 mVS
170 to 264 VAC Idle conditions 5 VDC: 100 mA
Base load required
Mains frequency
24 VDC: Idling-proof
• Nominal value 50 / 60 Hz
(no base load requi-
• Permissible range 47 to 63 Hz red)
Nominal input current Characteristics
• At 120 VAC 0.55 A
Protection class in I, with protective
• At 230 VAC 0.31 A accordance with IEC 60536 conductor
Starting current inrush Overvoltage category II
• Nominal input Peak value 15 A Pollution severity 2
current 264 V Half-value width
Rated voltage Ue Test Voltage
• Nominal input 2 ms
current 132 V Peak value 18 A 0 < Ue ≤ 50 V 700 VDC
Half-value width (secondary <–> PE)
2 ms 150 V < Ue ≤ 300 V 2200 VDC
Leakage current < 3.5 mA (primary <–> PE)

Overvoltage resistance In accordance with Buffering of power failures:

DIN VDE 0160, • At 50 Hz 4.5 ms to 7.5 ms
curve W2 • At 60 Hz 6.5 ms to 8.5 ms
Power consumption 46.5 W
Power losses 13.9 W
Backup current Max. 100 µA on
power off
Backup battery (option) 1 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-20 A5E00069467-03
 Power Supply Modules

3.7 PS 407 10A and PS 407 10A R Power Supply Modules

Order Numbers
PS 407 10A: 6ES7 407-0KA01-0AA0 (standard)
PS 407 10A R: 6ES7 407-0KR00-0AA0 (redundancy capability,
refer to section 3.2)

Function
The PS 407 10A and PS 407 10A R power supply modules are designed for
connecting to either an AC line voltage of 85 to 264 VAC or a DC line voltage
of 88 to 300 VDC and supplies 5 VDC / 10 A and 24 VDC / 1 A on the secondary
side.

Controls and Indicators on the PS 407 10A and PS 407 10A R

• Fixing screw
PS 407 10A
1 X 2
2
3 4
407-0KR00-0AA0

INTF

BAF
BATTF
BATTF • LEDs INTF,
5 VDC BAF, BATT1F, BATT2F,
24 VDC
DC 5 V, DC 24 V

FMR • FMR pushbutton (Failure Message Reset)

• Standby switch (does not cut off mains)

BATT.1 BATT.2

+ + Under cover
• Battery compartment
– –

BATT. INDIC.
2 BATT
OFF
• Switches BATT. INDIC.
1 BATT
2 BATT, OFF, 1 BATT

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-21
Power Supply Modules

Mains connection
In contrast to the instructions on assembling a power supply module in the manual
“S7-400 and M7-400 Programmable Controllers, Hardware and Installation”, an
AC power plug is used for connecting the PS 407 10A and the PS 407 10A R to
both an AC and a DC supply.

Polarity Reversal of L+ and L-

The polarity reversal of L+ and L- with supply voltages of between 88 VDC
and 300 VDC has no effect on the function of the power supply. The connection
should be made according to the instructions in the Installation Manual, Chapter 6.

S7-400, M7-400 Programmable Controllers Module Specifications

3-22 A5E00069467-03
 Power Supply Modules

Technical Specifications of the PS 407 10A and the PS 407 10A R

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 50x290x217 Output voltages
Weight 1.36 kg • Nominal values 5.1 VDC /24 VDC
Cable cross-section 3 x 1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+3%/–0.5%
with wire end ferrule 24 VDC:+25%/–20%
with insulating collar;
use only flexible Output currents
sheath cable) • Nominal values 5 VDC: 10 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A
Input Variables Max. residual ripple 5 VDC: 50 mVSS
Input voltage 24 VDC: 200 mVSS
• Nominal value 110/230 VDC Max. switching peaks 5 VDC: 150 mVS
• Permissible range 120/230 VAC 24 VDC: 500 mVS
88 to Idle conditions 5 VDC: 200 mA
300 VDC, 85 to base load required
264 VAC
24 VDC: Idling-proof
(long-range input)
(no base load requi-
Mains frequency red)
• Nominal value 50 / 60 Hz Characteristics
• Permissible range 47 to 63 Hz Protection class in accor- I, with protective
Nominal input current dance with IEC 60536 conductor
• At 120 VAC 1.2 A (0.9*) Overvoltage category II
• At 110 VDC 1.2 A (1.0*) Pollution severity 2
• At 230 VAC 0.6 A (0.5*)
Rated voltage Ue Test Voltage
• At 230 VDC 0.6 A (0.5*)
0 < Ue ≤ 50 V 700 VDC
Starting current inrush ≤ 15 x nominal input (secondary <–> PE)
current at a half-time
150 V < Ue ≤ 300 V 2300 VDC
of ≤ 5 ms
(primary <–> PE)
Starting current inrush
Buffering of power failures > 20 ms
• At 230 VAC Peak value 230 A,
Half-value width Power consumption 105 W
200 µs Power losses 29.7 W
Peak value 63 A*, Backup current Max. 100 µA on
Half-value width power off
1 ms*
Backup batteries (option) 2 x Lithium AA,
• At 300 VDC Peak value 230 A,
3.6 V / 1.9 Ah
Half-value width
200 µs Protective separation Yes
Peak value 58 A*, to IEC 61131-2
Half-value width
1 ms * PS 407 10A: as of version 5
* PS 407 10A R: as of version 7
Leakage current < 3.5 mA
Overvoltage resistance In accordance with
DIN VDE 0160,
curve W2

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-23
Power Supply Modules

3.8 PS 407 20A Power Supply Module

Order Number
6ES7 407-0RA00-0AA0

Function
The PS 407 20A power supply module is designed for connecting to an AC line
voltage of 120 / 230 VAC and supplies 5 VDC / 20A and 24 VDC / 1 A on the
secondary side.

Controls and Indicators on the PS 407 20A

• Fixing screws
PS 407 20A
1 X 2 2 3
3 4
407-0RA00-0AA0

INTF

• LEDs INTF,
BAF
BATTF
BATTF

5 VDC
BAF, BATT1F, BATT2F, DC 5 V, DC 24 V
24 VDC

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch (does not cut off mains)

BATT.1 BATT.2
Under cover
+ +

• Battery compartment
– –

BATT. INDIC.
2 BATT
OFF
• Switches BATT. INDIC.
1 BATT
2 BATT, OFF, 1 BATT
• Voltage selector switch
230

VOLTAGE

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

3-24 A5E00069467-03
 Power Supply Modules

Backup Battery
The PS 407 20A power supply module contains a battery compartment for two
batteries. If you use two batteries and set the switch to 2BATT, the PS 407 20A
defines one of the batteries as the backup battery. This assignment remains in
force until the battery is empty. When the backup battery is completely discharged,
the system switches to the reserve battery which is then in turn used as the
backup battery for the duration of its life. The status “backup battery” is also stored
in the event of a power failure.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-25
Power Supply Modules

Technical Specifications of the PS 407 20A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 75x290x217 Output voltages
Weight 1.93 kg • Nominal values 5.1 VDC/24 VDC
Cable cross-section 3x1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+2%/–0.5%
with wire end ferrule 24 VDC: ±5%
with insulating collar;
use only flexible Output currents
sheath cable) • Nominal values 5 VDC: 20 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A
Input Variables Max. residual ripple 5 VDC: 50 mVSS
Input voltage 24 VDC: 200 mVSS
• Nominal value 120/230 VAC Max. switching peaks 5 VDC: 150 mVS
• Permissible range 85 to 132 VAC / 24 VDC: 500 mVS
170 to 264 VAC Idle conditions 5 VDC: 200 mA
base load required
Mains frequency
24 VDC: Idling-proof
• Nominal value 50 / 60 Hz
(no base load requi-
• Permissible range 47 to 63 Hz red)
Nominal input current Characteristics
• At 120 VAC 1.87 A
Protection class in accor- I, with protective
• At 230 VAC 1A dance with IEC 60536 conductor
Starting current inrush Overvoltage category II
• Nominal input current Peak value 70 A Pollution severity 2
264 V Half-value width
2 ms Rated voltage Ue Test Voltage
• Nominal input current Peak value + 110 A/ 0 < Ue ≤ 50 V 700 VDC
132 V – 65 A (secondary <–> PE)
Half-value width 150 V < Ue ≤ 300 V 2200 VDC
1.5 ms (primary <–> PE)
Leakage current < 3.5 mA Buffering of power failures:
Overvoltage resistance In accordance with • At 50 Hz 4.5 ms to 7.5 ms
DIN VDE 0160, • At 60 Hz 6.5 ms to 8.5 ms
curve W2
Power consumption 162 W
Power losses 35.6 W
Backup current Max. 100 µA on
power off
Backup batteries (option) 2 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-26 A5E00069467-03
 Power Supply Modules

3.9 PS 407 20A Power Supply Module

Order Number
6ES7 407-0RA01-0AA0

Function
The PS 407 20A power supply module is designed for connecting to either an AC
line voltage of 85 to 264 VAC or a DC line voltage of 88 to 300 VDC and
supplies 5 VDC/20 A and 24 VDC /1 A on the secondary side.

Controls and Indicators on the PS 407 20A

• Fixing screws
PS 407 20A

1 X 2 2 3
3 4
407-0RA00-0AA0

INTF

• LEDs INTF,
BAF
BATTF
BATTF

5 VDC
BAF, BATT1F, BATT2F, DC 5 V, DC 24 V
24 VDC

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch (does not cut off mains)

BATT.1 BATT.2
Under cover
+ +

• Battery compartment
– –

BATT. INDIC.
2 BATT
OFF
• Switches BATT. INDIC.
1 BATT
2 BATT, OFF, 1 BATT

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-27
Power Supply Modules

Technical Specifications of the PS 407 20A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 75x290x217 Output voltages
Weight 2.2 kg • Nominal values 5.1 VDC / 24 VDC
Cable cross-section 3x1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+3%/–0.5%
with wire end ferrule 24 VDC:+25%/–20%
with insulating collar;
use only flexible Output currents
sheath cable) • Nominal values 5 VDC: 20 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A
Input Variables Max. residual ripple 5 VDC: 50 mVSS
Input voltage 24 VDC: 200 mVSS
• Nominal value 110/230 VDC Max. switching peaks 5 VDC: 150 mVS
120/230 VAC 24 VDC: 500 mVS
• Permissible range 88 to Idle conditions 5 VDC: 200 mA
300 VDC, 85 to base load required
264 VAC
24 VDC: Idling-proof
(long-range input)
(no base load requi-
Mains frequency red)
• Nominal value 50 / 60 Hz Characteristics
• Permissible range 47 to 63 Hz Protection class in accor- I, with protective
Nominal input current dance with IEC 60536 conductor
• At 120 VAC / 110 VDC 1.5 A Overvoltage category II
• At 230 VAC / 230 VDC 0.8 A Pollution severity 2
Starting current inrush Peak value 88 A Rated voltage Ue Test Voltage
Half-value width
1.1 ms 0 < Ue ≤ 50 V 700 VDC
(secondary <–> PE)
Leakage current < 3.5 mA
150 V < Ue ≤ 300 V 2300 VDC
Overvoltage resistance In accordance with (primary <–> PE)
DIN VDE 0160,
Buffering of power failures > 20 ms
curve W2
Power consumption 168 W
Power losses 44 W
Backup current Max. 100 µA on
power off
Backup batteries (option) 2 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-28 A5E00069467-03
 Power Supply Modules

3.10 PS 405 4A Power Supply Module

Order Number
6ES7 405-0DA00-0AA0

Function
The PS 405 4A power supply module is designed for connecting to a DC line
voltage of 24 VDC and supplies 5 VDC / 4 A and 24 VDC / 0.5 A on the secondary
side.

Controls and Indicators on the PS 405 4A

• Fixing screw
PS 405 4A
X 2
1
3 4
405-0DA00-0AA0

INTF

• LEDs INTF,
BAF
BATTF

5 VDC
BAF, BATTF,
24 VDC
DC 5 V, DC 24 V

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch

Under cover

• Battery compartment

BATT. INDIC.
BATT
OFF • Switches BATT. INDIC.
BATT, OFF

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-29
Power Supply Modules

Technical Specifications of the PS 405 4A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 25x290x217 Output voltages
Weight 0.8 kg • Nominal values 5.1 VDC / 24 VDC
Cable cross-section 3 x 1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+2%/–0.5%
with wire end ferrule, 24 VDC ±5%
use component con-
ductor or flexible Output currents
sheath cable) • Nominal values 5 VDC: 4 A
Cable diameter 3 to 9 mm 24 VDC: 0.5 A
Input Variables Max. residual ripple 5 VDC: 50 mVSS
Input voltage 24 VDC: 200 mVSS
• Nominal value 24 VDC Max. switching peaks 5 VDC: 150 mVS
• Permissible range Static: 24 VDC: 500 mVS
19.2 to 30 VDC Idle conditions 5 VDC: 100 mA
Dynamic: Base load required
18.5 to 30.2 VDC 24 VDC: Idling-proof
Nominal input current 2A (no base load requi-
red)
Starting current inrush Peak value 27 A
Half-value width Characteristics
10 ms Protection class in accor- I, with protective con-
Overvoltage resistance In accordance with dance with IEC 60536 ductor
DIN VDE 0160, Overvoltage category II
curve B2
Pollution severity 2
Rated voltage Ue Test Voltage
0 < Ue ≤ 50 V 700 VDC
(secondary <–> PE)
150 V < Ue ≤ 300 V 2200 VDC
(primary <–> PE)
Buffering of power failures 4 ms to 5 ms
Power consumption 48 W
Power losses 16 W
Backup current Max. 100 µA on
power off
Backup battery (option) 1 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-30 A5E00069467-03
 Power Supply Modules

3.11 PS 405 10A Power Supply Module

Order Number
6ES7 405-0KA00-0AA0

Function
The PS 405 10A power supply module is designed for connecting to a DC line
voltage of 24 VDC and supplies 5 VDC / 10 A and 24 VDC / 1 A on the secondary
side.

Controls and Indicators on the PS 405 10A

PS 405 10 A

405-0KA00-0AA0
X
3
2
4
2
• Fixing screw
INTF

BAF
BATTF
BATTF • LEDs INTF,
5 VDC BAF, BATT1F, BATT2F,
24 VDC
DC 5 V, DC 24 V

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch

+
BATT.1 BATT.2
+
Under cover

• Battery compartment
– –

BATT. INDIC.

• Switches BATT. INDIC.

2 BATT
OFF
1 BATT

2 BATT, OFF, 1 BATT

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-31
Power Supply Modules

Technical Specifications of the PS 405 10A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 50x290x217 Output voltages
Weight 1.4 kg • Nominal values 5.1 VDC / 24 VDC
Cable cross-section 3x1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+2%/–0.5%
with wire end ferrule; 24 VDC: ±5%
use component con-
ductor or flexible Output currents
sheath cable) • Nominal values 5 VDC: 10 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A

Input Variables Max. residual ripple 5 VDC: 50 mVSS

24 VDC: 200 mVSS
Input voltage
• Nominal value 24 VDC Max. switching peaks 5 VDC: 150 mVS
• Permissible range Static: 24 VDC: 500 mVS
19.2 to 30 VDC Idle conditions 5 VDC: 200 mA
Dynamic: base load required
18.5 to 30.2 VDC 24 VDC: Idling-proof
Nominal input current 4.5 A (no base load requi-
red)
Starting current inrush Peak value 44 A
Half-value width Characteristics
20 ms Protection class in accor- I, with protective
Overvoltage resistance In accordance with dance with IEC 60536 conductor
DIN VDE 0160, Overvoltage category II
curve B2
Pollution severity 2
Rated voltage Ue Test Voltage
0 < Ue ≤ 50 V 700 VDC
(secondary <–> PE)
150 V < Ue ≤ 300 V 2200 VDC
(primary <–> PE)
Buffering of power failures 4 ms to 5 ms
Power consumption 108 W
Power losses 33 W
Backup current Max. 100 µA on
power off
Backup batteries (option) 2 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-32 A5E00069467-03
 Power Supply Modules

3.12 PS 405 10A and PS 405 10A R Power Supply Modules

Order Number
PS 405 10A: 6ES7 405-0KA01-0AA0 (standard)
PS 405 10A R: 6ES7 405-0KR00-0AA0 (redundancy capability,
refer to section 3.2)

Function
The PS 405 10A and PS 405 10A R power supply modules are designed for
connecting to a DC line voltage of 19.2 VDC to 72 VDC and supplies 5 VDC/10 A
and 24 VDC/1 A on the secondary side.

Controls and Indicators on the PS 405 10A and the PS 405 10A R

PS 405 10 A

405-0KA00-0AA0
X
3
2
4
2
• Fixing screw
INTF

BAF
BATTF
BATTF • LEDs INTF,
5 VDC BAF, BATT1F, BATT2F,
24 VDC
DC 5 V, DC 24 V

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch

+
BATT.1 BATT.2
+
Under cover

• Battery compartment
– –

BATT. INDIC.

• Switches BATT. INDIC.

2 BATT
OFF
1 BATT

2 BATT, OFF, 1 BATT

• 3-pin plug-in mains connector

• Fixing screw

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-33
Power Supply Modules

Technical Specifications of the PS 405 10A and the PS 405 10A R

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 50x290x217 Output voltages
Weight 1.4 kg • Nominal values 5.1 VDC / 24 VDC
Cable cross-section 3 x 1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+3%/–0.5%
with wire end ferrule, 24 VDC:+25%/–20%
use component con-
ductor or flexible Output currents
sheath cable) • Nominal values 5 VDC: 10 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A

Input Variables Max. residual ripple 5 VDC: 50 mVSS

24 VDC: 200 mVSS
Input voltage
• Nominal value 24 VDC/48 VDC/60 V Max. switching peaks 5 VDC: 150 mVS
• Permissible range Static: 24 VDC: 500 mVS
19.2 to 72 VDC Idle conditions 5 VDC: 200 mA
Dynamic: base load required
18.5 to 75.5 VDC 24 VDC: Idling-proof
Nominal input current 4.3 A/2.1 A/1.7 A (no base load requi-
red)
Starting current inrush Peak value 18 A
Half-value width Characteristics
20 ms Protection class in accor- I, with protective
Overvoltage resistance In accordance with dance with IEC 60536 conductor
DIN VDE 0160, Rated voltage Ue Test Voltage
curve B2 0 < Ue ≤ 50 V 700 VDC
(secondary <–> PE)
150 < Ue ≤ 300 V 2300 VDC
(primary <–> PE)
Overvoltage category II
Pollution severity 2
Buffering of power failures > 20 ms
Power consumption 104 W
Power losses 29 W
Backup current Max. 100 µA on
power off
Backup batteries (option) 2 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-34 A5E00069467-03
 Power Supply Modules

3.13 PS 405 20A Power Supply Module

Order Number
6ES7 405-0RA00-0AA0

Function
The PS 405 20A power supply module is designed for connecting to a DC line
voltage of 24 VDC and supplies 5 VDC / 20 A and 24 VDC / 1 A on the secondary
side.

Controls and Indicators on the PS 405 20A

PS 405 20A

1 X
3 4
2 2 3
• Fixing screws
405-0RA00-0AA0

INTF

• LEDs INTF,
BAF
BATTF
BATTF

BAF, BATT1F, BATT2F,

5 VDC
24 VDC DC 5 V, DC 24 V

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch
BATT.1 BATT.2 Under cover
+ +

• Battery compartment
– –

BATT. INDIC.

• Switches BATT. INDIC.

2 BATT
OFF
1 BATT

2 BATT, OFF, 1 BATT

• 3-pin plug-in mains connector

• Fixing screws

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-35
Power Supply Modules

Technical Specifications of the PS 405 20A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 75x290x217 Output voltages
Weight 2.2 kg • Nominal values 5.1 VDC / 24 VDC
Cable cross-section 3x1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+2%/–0.5%
with wire end ferrule; 24 VDC: ±5%
use component con-
ductor or flexible Output currents
sheath cable) • Nominal values 5 VDC: 20 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A

Input Variables Max. residual ripple 5 VDC: 50 mVSS

24 VDC: 200 mVSS
Input voltage
• Nominal value 24 VDC Max. switching peaks 5 VDC: 150 mVS
• Permissible range Static: 24 VDC: 500 mVS
19.2 to 30 VDC Idle conditions 5 VDC: 200 mA
Dynamic: base load required
18.5 to 30.2 VDC 24 VDC: Idling-proof
Nominal input current 7.2 A (no base load requi-
red)
Starting current inrush Peak value 48 A
Half-value width Characteristics
25 ms Protection class in accor- I, with protective
Overvoltage resistance In accordance with dance with IEC 60536 conductor
DIN VDE 0160, Overvoltage category II
curve B2
Pollution severity 2
Rated voltage Ue Test Voltage
0 < Ue ≤ 50 V 700 VDC
(secondary <–> PE)
150 V < Ue ≤ 300 V 2200 VDC
(primary <–> PE)
Buffering of power failures 4 ms to 5 ms
Power consumption 172.8 W
Power losses 46.8 W
Backup current Max. 100 µA on
power off
Backup batteries (option) 2 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-36 A5E00069467-03
 Power Supply Modules

3.14 PS 405 20A Power Supply Module

Order Number
6ES7 405-0RA01-0AA0

Function
The PS 405 20A power supply module is designed for connecting to a DC line
voltage of 19.2 VDC to 72 VDC and supplies 5 VDC/20 A and 24 VDC/1 A on the
secondary side.

Controls and Indicators on the PS 405 20A

PS 405 20A

1 X
3 4
2 2 3
• Fixing screws
405-0RA00-0AA0

INTF

• LEDs INTF,
BAF
BATTF
BATTF

BAF, BATT1F, BATT2F,

5 VDC
24 VDC DC 5 V, DC 24 V

FMR
• FMR pushbutton (Failure Message Reset)

• Standby switch
BATT.1 BATT.2 Under cover
+ +

• Battery compartment
– –

BATT. INDIC.

• Switches BATT. INDIC.

2 BATT
OFF
1 BATT

2 BATT, OFF, 1 BATT

• 3-pin plug-in mains connector

• Fixing screws

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 3-37
Power Supply Modules

Technical Specifications of the PS 405 20A

Dimensions, Weight, and Cable Cross-Sections Output Variables
Dimensions WxHxD (mm) 75x290x217 Output voltages
Weight 2.2 kg • Nominal values 5.1 VDC / 24 VDC
Cable cross-section 3x1.5 mm2 (litz wire • Permissible ranges 5.1 VDC:+3%/–0.5%
with wire end ferrule; 24 VDC:+25%/–20%
use component con-
ductor or flexible Output currents
sheath cable) • Nominal values 5 VDC: 20 A
Cable diameter 3 to 9 mm 24 VDC: 1.0 A

Input Variables Max. residual ripple 5 VDC: 50 mVSS

24 VDC: 200 mVSS
Input voltage
• Nominal value 24 VDC/48 VDC/60 V Max. switching peaks 5 VDC: 150 mVS
• Permissible range Static: 24 VDC: 500 mVS
19.2 to 72 VDC Idle conditions 5 VDC: 200 mA
Dynamic: base load required
18.5 to 75.5 VDC 24 VDC: Idling-proof
Nominal input current 7.3 A/3.45 A/2.75 A (no base load requi-
red)
Starting current inrush Peak value 56 A
Half-value width Characteristics
1.5 ms Protection class in accor- I, with protective
Overvoltage resistance In accordance with dance with IEC 60536 conductor
DIN VDE 0160, Overvoltage category II
curve B2
Pollution severity 2
Rated voltage Ue Test Voltage
0 < Ue ≤ 50 V 700 VDC
(secondary <–> PE)
150 V < Ue ≤ 300 V 2300 VDC
(primary <–> PE)
Buffering of power failures > 20 ms
Power consumption 175 W
Power losses 51 W
Backup current Max. 100 µA on
power off
Backup batteries (option) 2 x Lithium AA,
3.6 V / 1.9 Ah
Protective separation Yes
to IEC 61131-2

S7-400, M7-400 Programmable Controllers Module Specifications

3-38 A5E00069467-03
S7-400 CPUs 4
Chapter Overview

Section Description Page

4.1 Controls and Indicators on the CPUs 4-2
4.2 Monitoring Functions of the CPUs 4-10
4.3 Status and Fault/Error Indicators 4-12
4.4 Mode Selector Switch 4-15
4.5 Multipoint Interface (MPI) 4-19
4.6 PROFIBUS-DP Interface 4-21
4.7 Overview of the Parameters for the S7-400 CPUs 4-22
4.9 Technical Specifications of the CPU 412-1; 4-24
6ES7 412-1XF03-0AB0
4.10 Technical Specifications of the CPU 412-2; 4-27
6ES7 412-2XG00-0AB0
4.11 Technical Specifications of the CPU 414-2; 4-31
6ES7 414-2XG03-0AB0
4.12 Technical Specifications of the CPU 414-3; 4-35
6ES7 414-3XJ00-0AB0
4.13 Technical Specifications of the CPU 416-2; 4-39
6ES7 416-2XK02-0AB0
4.14 Technical Specifications of the CPU 416-3; 4-43
6ES7 416-3XL00-0AB0
4.15 Technical Specifications of the CPU 417-4; 4-47
6ES7 417-4XL00-0AB0
4.16 Technical Specifications of the CPU 417-4 H; 4-51
6ES7 417-4HL01-0AB0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-1
S7-400 CPUs

4.1 Controls and Indicators on the CPUs

Controls and Indicators on the CPUs 412-1

CPU 412-1

6ES7412-1XF03-0AB0

LEDs INTF, EXTF, BUS1F,

FRCE, RUN, STOP
BUS1F

Receptacle for memory card

Mode selector switch

Under cover

MPI/PROFIBUS-DP interface

External battery supply

Figure 4-1 Arrangement of the Operator Controls and Indicators on the CPUs 412-1

S7-400, M7-400 Programmable Controllers Module Specifications

4-2 A5E00069467-03
 S7-400 CPUs

Controls and Indicators on the CPUs 41x-2

CPU 414-2

6ES7414-3XG03-0AB0

LEDs INTF, EXTF, BUS1F,

BUS2F, FRCE, RUN, STOP
BUS1F
BUS2F

Receptacle for memory card

Mode selector switch

Under cover

MPI/PROFIBUS-DP interface

PROFIBUS-DP interface

External battery supply

Figure 4-2 Arrangement of the Operator Controls and Indicators on the CPUs 41x-2

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-3
S7-400 CPUs

Operator Controls and Indicators on the CPUs 41x-3

CPU 416-3

6ES7416-3XL00-0AB0

LEDs INTF, EXTF, BUS1F, LEDs

BUS2F, FRCE, RUN, STOP IFM1F
BUS1F
BUS2F

IFM1F

Receptacle for memory card

Mode selector switch

Under cover under cover

MPI/PROFIBUS-DP interface
Module slot for
interface module

PROFIBUS-DP interface

External battery supply

Figure 4-3 Arrangement of the Operator Controls and Indicators on the

CPUs 41x-3

S7-400, M7-400 Programmable Controllers Module Specifications

4-4 A5E00069467-03
 S7-400 CPUs

Controls and Indicators on the CPU 417-4

LEDs INTF, EXTF, BUSF1, LEDs

BUSF2, FRCE, RUN, STOP IFM1F, IFM2F
BUSF1
BUSF2

FMOD1
FMOD2

Receptacle for memory card

Mode selector switch

Under cover Under cover

MPI/PROFIBUS-DP interface
Submodule slot for
interface submodule 1

Submodule slot for

PROFIBUS-DP interface interface submodule 2

External battery supply

Under metal cover

on the left-hand side
Interface for
memory expansion

Figure 4-4 Arrangement of the Operator Controls and Indicators on the CPU 417-4

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-5
S7-400 CPUs

Controls and Indicators on the CPU 417 H

LEDs INTF, EXTF, BUSF1, BUSF1 LEDs REDF, IFM1F,

BUSF2, FRCE, RUN, STOP
BUSF2
FMOD1
IFM2F, MSTR, RACK0,
FMOD2
RACK1
RACK0

Receptacle for memory card RACK1

Mode selector switch

Under cover Under cover

Submodule slot for

MPI/PROFIBUS-DP interface interface submodule 1

PROFIBUS-DP interface Submodule slot for

interface submodule 2

External battery supply

Under metal cover
on the left-hand side
Interface for memory expansion

Figure 4-5 Arrangement of the Operator Controls and Indicators on the CPU 417 H

LEDs
Table 4-1 provides an overview of the LEDs on the individual CPUs.
Section 4.2 describes the states and faults indicated by these LEDs.

S7-400, M7-400 Programmable Controllers Module Specifications

4-6 A5E00069467-03
 S7-400 CPUs

Table 4-1 LEDs on the CPUs

LED Color Meaning Available on CPU

412-1 412-2 414-3 417-4 417 H
414-2 416-3
416-2
INTF Red Internal fault x x x x x
EXTF Red External fault x x x x x
FRCE Yellow A force job is x x x x x
active.
RUN Green RUN state x x x x x
STOP Yellow STOP state x x x x x
BUSF 1 Red Bus fault/error x x x x x
on the
PROFIBUS-DP
interface1
BUSF 2 Red Bus fault/error – x x x x
on the
PROFIBUS-DP
interface2
MSTR Yellow CPU controls – – - – x
program
processing
REDF Red Loss of – – - – x
redundancy /
redundancy
error
RACK0 Yellow CPU in rack 0 – – - – x
RACK1 Yellow CPU in rack 1 – – - – x
IFM1F Yellow Error on – – x x x
interface
submodule 1
IFM2F Yellow Error on – – - x x
interface
submodule 2

Mode Selector Switch

You can select the operating mode of the CPU using the mode selector switch.
The mode selector is a key switch with four settings. You can use different
protection levels and restrict program changes or startup possibilities (transition
from STOP to RUN) to specific personnel.
Section 4.4 describes the functions of the mode selector switch and the protection
levels of the CPUs.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-7
S7-400 CPUs

Receptacle for memory cards

You can insert memory cards into this receptacle.
There are two types of memory cards:
• RAM cards
With the RAM card, you can expand the load memory of a CPU.
• Flash cards
With the Flash card, you can store your user program and your data safe from
power failures (even without a backup battery). You can program the Flash card
either in the programming device or in the CPU. The Flash card also expands
the load memory of the CPU.
You will find a detailed description of the memory cards in Chapter 8.

Slot for Interface Submodules

In this slot, for the CPUs 41x-3 and 41x-4, you can insert either an interface
submodule (IF submodule) or the H-sync submodule for the CPU 417-4 H.

Interface for Memory Expansions

The CPUs 417-4 and 417-4 H also have additional interfaces for memory
expansions. These provide you with the option of extending the work memory (see
“S7-400 and M7-400 Programmable Controllers, Hardware and Installation” ).

Multipoint Interface (MPI)

You can connect the following devices, for example, to the multipoint interface:
• Programming devices
• Operator interface devices
• Further S7-400 or S7-300 programmable controllers (see Section 4.5).
Use bus connectors with slanted outgoing cables (see Installation Manual,
Chapter 7)
You can also use the MPI interface as a PROFIBUS-DP interface. For this purpose
you can reconfigure the MPI interface under STEP 7 in the SIMATIC manager.

PROFIBUS-DP Interface
You can connect the distributed I/O, programming devices/operator panels, and
other DP master stations to the PROFIBUS-DP interface.

S7-400, M7-400 Programmable Controllers Module Specifications

4-8 A5E00069467-03
 S7-400 CPUs

External Battery Supply on “EXT. BATT.” Socket

You can use one or two backup batteries – depending on the module type – with
the power supply modules of the S7-400. The backup batteries can be used to
• Back up the user program that you have stored in RAM; or to
• Retentively store data such as bit memory, timers, counters and system data,
as well as data in variable data blocks.
• Back up the internal clock.
You can achieve the same data backup if you apply a DC voltage of between 5 V
and 15 V to the “EXT. BATT.” socket of the CPU.
The “EXT. BATT.” input has the following characteristics:
• Reverse polarity protection
• Short-circuit current limited to 20 mA
To supply the “EXT. BATT.” socket, you require a connecting cable with a jack plug
of 2.5 mm diameter as shown in the following figure. Please note the polarity of the
jack plug.

Plus pole Minus pole

Jack plug 2.5 mm diameter

Note
You require external supply on the “EXT. BATT.” socket if you are replacing a
power supply module and you want to backup the user program stored in RAM
and the data mentioned above while you replace the module.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-9
S7-400 CPUs

4.2 Monitoring Functions of the CPUs

Monitoring Functions and Fault/Error Messages

There are monitoring functions in the hardware of the CPU and in the operating
system that ensure proper operation and a defined response to faults/errors. A
response via the user program is also possible for a range of faults/errors.
The following table provides an overview of the possible errors, their causes, and
the response of the CPU.
In addition, there are test and information functions available to you in every CPU
that you can call with STEP 7.

Type of Cause of Fault Response of Operating Fault

Fault/Error System LED
Clock failure Monitoring of failure of the processor Disable digital outputs by
clock outputting the “OD” (output –
System standstill disable) signal
Access error Failure of a module “EXTF” LED lights up until the
(SM, FM, CP) error has been acknowledged.
SMs:
• OB122 is called
• An entry is made in the
diagnostic buffer EXTF
• Input modules: “Zero” is
entered in the accumulator
or the process image
Other modules:
• OB122 is called
Timer error • The run time of the user program “INTF” LED lights up until the
(OB1 and all interrupts and error error has been acknowledged.
OBs) exceeds the default
maximum cycle time
OB80 called
• OB request error INTF
If OB is not loaded: CPU goes to
• Overflow of the start information STOP.
buffer
• Time-of-day error interrupt
Power supply In the central rack or expansion rack, OB81 called
module fault • At least one backup battery in the If OB is not loaded: CPU
(not power failure) power supply module is empty continues to operate.
EXTF
• The backup voltage is missing
• The 24 V supply of the power
supply module has failed
Diagnostic An I/O module with interrupt OB82 called
interrupt capability signals a diagnostic If OB is not loaded: CPU goes to EXTF
interrupt STOP.

S7-400, M7-400 Programmable Controllers Module Specifications

4-10 A5E00069467-03
 S7-400 CPUs

Type of Cause of Fault Response of Operating Fault

Fault/Error System LED
Insert / remove Signal module removed or plugged OB83 called
interrupt in or wrong module type plugged in. If OB is not loaded: CPU goes to
With the default parameter STOP.
assignment, if the only signal module
plugged in is removed when the EXTF
CPU is in STOP, the “EXTF” LED
does not light up. If the signal
module is inserted again, the LED
lights up briefly.
Priority class error • Priority class called but relevant OB85 called
OB missing. If OB is not loaded: CPU goes to INTF
• SFB call: Instance DB missing or STOP.
faulty
• Error updating the process image EXTF
Failure of a rack / • Power failure in an expansion OB86 called
station rack If OB is not loaded: CPU goes to
• Failure of a DP chain STOP. EXTF
• Failure of a communication
chain: missing or defective IM,
wire break
Communication • Status information cannot be OB87 called
error entered in DB If OB is not loaded: CPU goes to
• Wrong frame ID STOP.
• Frame length error INTF
• Illegal global ID (GBZ) number
• DB access error
• Configured S7 connections failed
Programming Error in machine code or user OB121 called
error program: If OB is not loaded: CPU goes to
• BCD conversion error STOP.
• Range length error
• Range error
• Alignment error INTF
• Write error
• Timer number error
• Counter number error
• Block number error
• Block not loaded
MC7 code error Error in compiled user program; for CPU goes to STOP.
example, an invalid OP code, or a Warm restart or memory reset INTF
jump beyond the end of the block required.
end.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-11
S7-400 CPUs

4.3 Status and Fault/Error Indicators

Controls and Indicators

The two LEDs, RUN, and STOP on the front panel of a CPU inform you of the
operating mode currently active on the CPU.

LED Meaning
RUN STOP
L D CPU is in the RUN state.
D L CPU is in STOP state. The user program is not executed. A hot, warm or
complete (cold) restart is possible. If the STOP state is the result of a
fault/error, the fault LED (INTF or EXTF) will also be set.
F F CPU is in the DEFECTIVE state. The LEDs INTF, EXTF, and FRCE also
2 Hz 2 Hz flash.

F L HOLD state is triggered by test function.

0.5 Hz
F L A complete/warm/hot restart has been requested. Depending on the
2 Hz length of the called OB, it may take a minute or longer until the
complete/warm/hot restart is executed. If the CPU does not then go into
RUN, a fault in the plant configuration may be present.
x F Memory reset requested by CPU.
0.5 Hz
x F Memory reset in progress.
2 Hz

D = LED is dark; L = LED lights up; F = LED flashing with the specified frequency;
x = LED status irrelevant

Controls and Indicators on the CPU 417-4H

The three LEDs MSTR, RACK0, and RACK1 on the front panel of the CPU 417-4H
inform you of the rack number set on the synchronization submodule and which
CPU controls the processing of the switched I/O.

LED Meaning
MSTR RACK0 RACK1
L x x CPU controls processing of switched I/O
x L D CPU on rack with number 0
x D L CPU on rack with number 1

D = LED is dark; L = LED lights up; x = LED state irrelevant

S7-400, M7-400 Programmable Controllers Module Specifications

4-12 A5E00069467-03
 S7-400 CPUs

Error LEDs and Special Events on All CPUs

The three LEDs INTF, EXTF, and FRCE on the front panel of a CPU inform you of
errors and special events which occur while the user program is being processed.

LED Meaning
INTF EXTF FRCE
L x x An internal fault/error has been detected (programming error or
parameter assignment error).
x L x An external fault/error has been detected (that is, a fault whose
cause is not located in the CPU).
x x L A force job is active.

L = LED lights up; x = LED state irrelevant

The LEDs BUSF1, BUSF2 display errors related to the MPI/DP and
PROFIBUS-DP interfaces.

LED Meaning
BUS BUS2
1F F
H x A fault/error has been detected on the MPI/DP interface.
x H An fault/error has been detected on the PROFIBUS-DP interface.
B x One or more slaves on the PROFIBUS-DP interface 1 are not
responding.
x B One or more slaves on the PROFIBUS-DP interface 2 are not
responding.

L = LED lights up; F = LED flashing; x = LED state irrelevant

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-13
S7-400 CPUs

Error LEDs and Special Events on the CPUs 41x-3 and 41x-4
The CPUs 41x-3 and 41x-4 continue to have the LED IFM1F and the LEDs
IFM1F and IFM2F respectively. These display errors related to the first and second
submodule interfaces.

LED Meaning
IFM1F IFM2F
H x An error was detected on the submodule slot 1.
x H An error was detected on the submodule slot 2.
B x One or more slaves connected to the PROFIBUS-DP interface in
submodule slot 1 do not respond.
x B One or more slaves connected to the PROFIBUS-DP interface in
submodule slot 2 do not respond.

L = LED lights up; B = LED blinks; x = LED state irrelevant

Error LEDs and Special Features of the CPU 417-4H

The CPU 417-4H also has the REDF LED. This displays certain system statuses
and redundancy errors.

LED REDF System Status Situation

Flashes at Interface –
0.5 Hz
Flashes at 2 Hz Update –
Off Redundant (CPUs redundant) No redundancy error
On Redundant (CPUs redundant) I/O redundancy error:
• Failure of a DP master or partial or
complete failure of a DP master sy-
stem
• Redundancy loss on the DP slave
All the system statuses except –
redundant, interface and up-
date

Diagnostic buffer
To remove an error, you can read out the exact cause of the error with STEP 7
(PLC > Module Information) from the diagnostic buffer.

S7-400, M7-400 Programmable Controllers Module Specifications

4-14 A5E00069467-03
 S7-400 CPUs

4.4 Mode Selector Switch

Function of the Mode Selector Switch

Using the mode selector switch you can switch the CPU to RUN, RUN-P, or STOP
mode or carry out a memory reset on the CPU. STEP 7 offers further methods of
changing the operating mode.

Positions
The mode selector is a key switch. Figure 4-6 shows the possible positions of the
mode selector switch.

RUN-P

RUN

STOP

MRES

Figure 4-6 Positions of the Mode Selector Switch

Table 4-2 explains the positions of the mode selector switch. If an error occurs or if
there are restrictions to startup, the CPU remains in STOP, regardless of the
position of the mode selector switch.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-15
S7-400 CPUs

Table 4-2 Positions of the Mode Selector Switch

Position Explanation
RUN-P If there is no error and no restriction to startup and the CPU can be switched to RUN
mode, the CPU processes the user program or stays idling. I/O accesses are possible.
The key cannot be removed in this position.
Programs can be
• Read out of the CPU with the programming device (CPU ⇒ PG),
• Downloaded to the CPU (PG ⇒ CPU).
RUN If there is no error and no restriction to startup and the CPU can be switched to RUN
mode, the CPU processes the user program or stays idling. I/O accesses are possible.
The key can be removed in this position to prevent unauthorized persons from
changing the operating mode.
Programs in the CPU can be displayed on the programming device (CPU ⇒ PG).
The program in the CPU cannot be changed in RUN mode
(see STEP 7). The protection level can be ignored if you set a password in the
“Configuring Hardware” application in STEP 7 (from STEP 7 V4.02 onwards); that
is, if you know this password, the program can also be changed when the CPU is
in RUN mode.
STOP The CPU does not execute the user program. The digital signal modules are disabled.

The key can be removed in this position to prevent unauthorized persons from
changing the operating mode.
Programs can be
• Read out of the CPU with the programming device (CPU ⇒ PG),
• Downloaded to the CPU (PG ⇒ CPU).
MRES Key position for carrying out a memory reset on the CPU and for a cold restart (see
(memory reset) following pages).

Protection Levels
With the S7-400 CPUs, a protection level can be set with which the programs in
the CPU can be protected from unauthorized access. The protection level
determines which programming device (PG) functions a user can execute on the
respective CPU without special authorization (password). With a password, all PG
functions are permitted.

Setting the Protection Levels

You can set the protection levels (1 - 3) for a CPU in the “Configuring Hardware”
application in STEP 7.
You can remove these protection levels set under STEP 7 by manually carrying out
a memory reset with the mode selector switch.
You can also set protection levels 1 and 2 using the mode selector switch.
Table 4-3 shows the protection levels of a CPU in the S7-400 series.

S7-400, M7-400 Programmable Controllers Module Specifications

4-16 A5E00069467-03
 S7-400 CPUs

Table 4-3 Protection Levels of an S7-400 CPU

Protection Function Switch Position

Level
1 • All programming device functions are permitted RUN-P / STOP
(default setting).
2 • Uploading objects from the CPU to the RUN
programming device is permitted, meaning read
programming device functions only are permitted.
• The functions for process control, process
monitoring, and process communication are
permitted
• All information functions are permitted.
3 • The functions for process control, process –
monitoring, and process communication are
permitted.
• All information functions are permitted.

If different settings for the protection levels are set using the mode selector switch
and in STEP 7, the higher priority setting is valid (3 before 2, 2 before 1).

Operating Sequence for a Memory Reset

Case A: You want to transfer a new, complete user program to the CPU.
1. Turn the switch to the STOP position.
Result: The STOP LED lights up.
2. Turn the mode selector switch to the MRES position and hold it there.
Result: The STOP LED goes dark for 1 second, lights up for 1 second, goes
dark again for 1 second, and then remains lit.
3. Turn the switch back to the STOP position and, within the next 3 seconds, to
the MRES position again and back to STOP.
Result: The STOP LED flashes for approximately 3 seconds at 2 Hz (a
memory reset is carried out) and then remains lit.
Case B: The CPU requests a memory reset by slow flashing of the STOP
LED at 0.5 Hz (prompt from system to carry out a memory reset; for example,
after removing or inserting a memory card).
Turn the switch to the MRES setting and back to the STOP setting.
Result: The STOP LED flashes for approximately 3 seconds at 2 Hz (a
memory reset is carried out) and then remains lit.
You can find a complete description of the processes involved in a memory reset in
the Installation Manual: S7-400 / M7-400 Programmable Controllers, Chapter 8.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-17
S7-400 CPUs

Cold Restart
With a cold restart, the user program is started again from the beginning. All the
data, including retained data, are deleted.

Hot Restart
During a hot restart the application is relaunched at the point where it was
interrupted.
The S7-400 must have battery backup for the hot restart following power-on
(automatic hot restart).

Warm Restart
In a warm restart, the user program is restarted from the beginning. Data that has
been stored in non-retentive areas is deleted.

Operating Sequence for a Warm or Hot Restart (CPU 412, 414, 416 and 417)
1. Turn the switch to the STOP position.
Result: The STOP LED lights up.
2. Turn the switch to the RUN/RUN-P position.
Whether the CPU carries out a warm restart or a hot restart depends on the CPU
configuration. With the CPU 417-4H there is no hot restart.
Note that the CPU 417-4H does not support the warm restart.

Operating Sequence for a Complete (Cold) Restart

1. Turn the switch to the STOP position.
Result: The STOP LED lights up.
2. Turn the mode selector switch to the MRES position and hold it there.
Result: The STOP LED goes dark for 1 second, lights up for 1 second, goes
dark again for 1 second, and then remains lit.
3. Turn the switch to the RUN/RUN-P position.

S7-400, M7-400 Programmable Controllers Module Specifications

4-18 A5E00069467-03
 S7-400 CPUs

4.5 Multipoint Interface (MPI)

Devices which can be Connected

You can connect the following nodes to the multipoint interface:
• Programming devices (PGs/PCs)
• Operator interface devices (OPs and TDs)
• Other SIMATIC S7 programmable controllers
Some devices that can be connected require a 24-V supply from the interface. This
voltage is available here in non-isolated form.

S7-200 on the MPI Subnet

If you connect an S7-200 to the MPI subnet, you must set a transmission rate of
19.2 Kbps for the multipoint interface.

Note
A maximum of 8 nodes (CPU, PG/OP, FM/CP with own MPI address) are
permitted in a subnet when using a speed of 19.2 Kbps for communicating with
S7-200. You cannot configure global data communication.
Note that earlier S7-400 CPUs did not support the 19.2 Kbps transmission rate.
You can set the 19.2 Kbps transmission rate from STEP 7 V4.02 onwards.

You can find more information on connecting a S7-200 to a MPI subnet in the
system manual “Programmable Controller S7-200”

PG/OP to CPU Communication

When communicating with programming devices or OPs, a CPU can maintain
several online connections simultaneously. However, the default setting is that one
of these connections is always reserved for a programming device and one is
always reserved for an operator panel (OP)/operator interface device.

Note
Interrupt reaction times may be delayed due to read and write jobs of a maximum
data size (approx. 460 bytes).

CPU to CPU Communication

There are three methods of CPU to CPU communication available:
• Data exchange via S7 basic communication
• Data exchange via S7 communication
You will find more information on this topic in the manual “Programming with
STEP 7”.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-19
S7-400 CPUs

Connectors
Use only bus connectors with slanted outgoing cables for PROFIBUS-DP or PG
cables for connecting devices to the multipoint interface (see Installation Manual,
Chapter 7).

Multipoint Interface as DP Interface

You can also configure the multipoint interface as a DP interface. In this way, you
can configure a DP chain with up to 32 slaves.

S7-400, M7-400 Programmable Controllers Module Specifications

4-20 A5E00069467-03
 S7-400 CPUs

4.6 PROFIBUS-DP Interface

Suitable Devices
You can connect the following nodes to the PROFIBUS-DP interface:
• S7-300 as an intelligent slave (for example, CPU 315-2 with PROFIBUS-DP
connection)
• ET 200M (distributed station with S7-300 I/O)
• All other PROFIBUS DP slaves in the ET 200 system family
• Other standard PROFIBUS-DP slaves
• Further S7 DP masters (programming devices, OPs, etc.)
The CPU is the active DP master station that is connected to the passive slave
stations or further DP masters via the PROFIBUS-DP field bus.
Some devices that can be connected require a 24-V supply from the interface. This
voltage is available here in non-isolated form.

Connectors
Use only bus connectors for PROFIBUS-DP or PROFIBUS cables for connecting
devices to the PROFIBUS-DP interface (see Installation Manual, Chapter 7).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-21
S7-400 CPUs

4.7 Overview of the Parameters for the S7-400 CPUs

Default Values
When shipped, all parameters are set to the default values. The S7-400 can be
used right away and without any further parameter setting using these default
values that are suitable for a whole range of standard applications.
You can determine the CPU-specific default values with the “Configuring
Hardware” application in STEP 7.

Blocks of Parameters
The response and the properties of the CPU are defined by means of parameters
(which are stored in system data block). The CPUs have a defined default setting
so as to guarantee a reproducible response. You can change this default setting by
modifying the parameters.
The following list provides an overview of the system properties which can be
assigned in the CPUs.
• General properties (for example, MPI node number)
• Startup (for example, enable following hot restart)
• Scan cycle/clock memory (for example, cycle time monitoring)
• Retentivity (number of memory bits, timers and counters stored retentively)
• Memory
Note: The available work memory for program code and data blocks increases
or decreases as you increase or decrease the default values for image process,
the number of diagnostic buffer entries, the maximum number of interrupt-8
blocks and blocks for S7 communication, for example.
• Interrupt assignment (hardware interrupts, delay interrupts, asynchronous error
interrupts) for the priority classes
• Time-of-day interrupts (for example, start, interval duration, priority)
• Cyclic interrupts (for example, priority, interval duration)
• Diagnostics/clock (for example, time synchronization)
• Protection levels
• High availability system parameters specific to the CPU 417-4H

Note
In the default setting, 16 memory bits and 8 counters are stored retentively,
meaning they are not deleted when a warm restart is carried out on the CPU.

S7-400, M7-400 Programmable Controllers Module Specifications

4-22 A5E00069467-03
 S7-400 CPUs

Parameter Assignment Application

You can set the individual CPU parameters using the STEP 7 application
“Configuring Hardware.”

Note
If you make changes to the current settings for the following parameters the
operating system will initialize settings in the same way as with a cold restart.
• Size of the process-image input
• Size of the process-image output
• Size of the local data
• Number of diagnostic buffer entries
• Communication resources
These initial settings are as follows:
– Data blocks are initialized with the load values
– Bit memory, timers, counters, inputs, and outputs are deleted, irrespective
of whether they are retentive (0)
– Data blocks generated via system functions are deleted
– Programmed, dynamic connections are disconnected as well as
non-configured connections between X/I blocks from the active
side of the connection
– All priority classes have their default values

4.8 Evaluating Process Interrupts in the S7-400H System

When you use a module that generates process interrupts in the S7-400H system,
it is possible that the process values that can be read in the process interrupt OB
by means of direct access might not correspond to the process values at the time
of the interrupt. You should instead evaluate the temporary variables (start
information) in the process interrupt OB.
When you use the SM 321-7BH00 module, which generates process interrupts, it
therefore does not make sense to respond to rising and falling edges differently via
one and the same input because the I/O would have to be accessed directly. If you
want to respond differently in your user program to the two edge changes, put the
signal on two inputs from different channel groups and set one input for rising
edges and the other input for falling edges.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-23
S7-400 CPUs

4.9 Technical Specifications of the CPU 412-1

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 412-1XF03-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 04 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.2 Bit memory 4 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 4095
ge Service Pack 2 • preset from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 512 (DB 0 reserved)
• integrated 48 Kbytes for program • size max. 48 Kbytes
48 Kbytes for data Local data (settable) max. 8 Kbytes
• expandable no • preset 4 Kbytes
Load memory Blocks
• integrated 256 Kbytes RAM OBs see Instruction List
• expandable FEPROM with memory card • size max. 48 Kbytes
(FEPROM) up to 64 Mbytes
Nesting depth
• expandable RAM with memory card (RAM)
up to 64 Mbytes • per priority class 24
Backup yes • within an error OB 2 additional
• with battery all data FBs max. 256
• without battery none • size max. 48 Kbytes
Process Times FCs max. 256
Process times for • size max. 48 Kbyte
• bit operations min. 0.2 s Address Areas (I/Os)
• word operations min. 0.2 s Total I/O address area 4 Kbytes/4 Kbytes
• fixed point arithmetic min. 0.2 s • distributed
• floating point arithmetic min. 0.6 s – MPI/DP interface 2 KBytes/2 KBytes
Timers/Counters and their Retentivity – DP interface 2 KBytes/2 KBytes
S7 counters 256 Process image 4 KBytes/4 KBytes (setta-
ble)
• settable retentivity from Z 0 to Z 255
• preset 128 bytes/128 bytes
• preset from Z 0 to Z 7
• number of process max. 8
• counter range 1 to 999 image sections
IEC counter yes Digital channels 32768/32768
• type SFB • local 32768/32768
S7 timers 256 Analog channels 2048/2048
• settable retentivity from T 0 to T 255 • local 2048/2048
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

4-24 A5E00069467-03
 S7-400 CPUs

Configuration • number of additional 1

values per message
Central max. 1/21
controllers/expansion units – 100 ms interval none
Multicomputing max. 4 CPUs (with UR1 or – 500, 1000 ms inter- 1
UR2) val
Number of plug-in IMs max. 6 • number of messages
(total) – total max. 512
• IM 460 max. 6 – 100 ms interval none
• IM 463 max. 6 – 500 ms interval max. 256
Number of DP masters – 1000 ms interval max. 256

• integrated 1 Process diagnostic yes

messages
• via interface module none
• simultaneously active max. 70
• via IM/CP max. 10 interrupt-S blocks
Number of plug-in S5 max. 6 Process control messages yes
modules via adapter casing
(in central controller) Interrupt-8 blocks yes

Operable function modules • number of instances for max. 300

and communication interrupt-8 blocks and
processors blocks for S7
communication
• FM limited by number of slots (settable)
and connections
• preset max. 150
• CP, point-to-point limited by number of slots
Number of archive IDs that 4
and connections
can be logged in simulta-
• CP, LAN limited by number of slots neously
and connections
Test and Commissioning Functions
– with S5 compatible max. 4
Status/control variable yes
communication
Time of Day
• variable I/Os, bit operations, DB,
distributed I/Os, timers,
Clock yes counters
• buffered yes • number max. 70
• accuracy upon Force function yes
– POWER DOWN daily deviation 1.7 s • variable I/Os, bit operations,
distributed I/Os
– POWER ON daily deviation 8.6 s
Operating hours counter 8
• number max. 64
Status block yes
• number 0 to 7
Single sequence yes
• value range 0 to 32767 hours
Breakpoint 4
• granularity 1 hour
Diagnostic buffer yes
• retentive yes
Time of day yes
• number of entries max. 200
(settable)
synchronization
• on the PLC master/slave
• preset 120
Communication Functions
• at the MPI master/slave
PG/OP communication yes
S7 Message Functions
Global data communication yes
Number of stations for max. 8
message functions, which • number of GD
can be activated (e.g. OS) packages
SCAN process yes – sender max. 8
– receiver max. 16

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-25
S7-400 CPUs

• size of the GD max. 64 bytes – PG/OP yes

packages communication
– consistent 32 bytes – routing yes

S7 basic communication yes – lateral yes

communication
• useful data per job max. 76 bytes
– SYNC/FREEZE yes
– consistent 16 bytes – activate/deactivate no
S7 communication yes DP slaves

• useful data per job max. 64 Kbytes • transmission speed up to 12 Mbps

– consistent 32 bytes • number of DP slaves max. 32

S5 compatible yes (via CP and loadable • address area max. 2 Kbytes I / 2 Kbytes O
communication FC) • useful data per max. 244 bytes I/
• useful data per job max. 8 Kbytes DP slave 244 bytes O

– consistent 240 bytes Programming

Standard communication yes (via CP and loadable Programming language LAD, FBD, STL, SCL
FC) Available operations see Instruction List
• useful data per job depending on CP Nesting levels 8
– consistent depending on CP System functions (SFC) see Instruction List
Number of connection re- 16 Number of simultaneously
sources active SFCs
Interfaces • WR_REC 8
1st Interface • WR_PARM 8
Type of interface integrated interface module • PARM_MOD 1
Physical interface RS 485 • WR_DPARM 2
Optically isolated yes • DPNRM_DG 8
Power supply at interface max. 150 mA • RDSYSST 1 ... 8
(15 to 30 V DC)
System function blocks see Instruction List
Number of connection re- 16 (SFB)
sources
Program security password protection
Functionality
Dimensions
• MPI yes
Mounting dimensions 25
290
219
• PROFIBUS DP DP master W
H
D (mm)
• point-to-point no Slots necessary ca. 1
connection
Weight ca. 0.72 kg
MPI
Voltages, Currents
• services
Power supply voltage nominal value 24 V DC
– PG/OP yes
communication Current consumption from typ. 1.5 A
S7-400 bus (5 V DC) max. 1.6 A
– routing yes
– global data yes Current consumption from max. 0.15 A
communication S7-400 bus (24 V DC)

– S7 basic yes Backup current typ. 40 A

communication max. 300 A
– S7 communication yes External feed for CPU 5 V DC up to 15 V DC
backup voltage
• transmission speed up to 12 Mbps
PG supply on MPI (15 to max. 150 mA
DP Master 30 V DC)
• services
Power loss typ. 8 W

S7-400, M7-400 Programmable Controllers Module Specifications

4-26 A5E00069467-03
 S7-400 CPUs

4.10 Technical Specifications of the CPU 412-2

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 412-2XG00-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 04 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.2 Bit memory 4 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 4095
ge Service Pack 2 • retentivity preset from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 512 (DB 0 reserved)
• integrated 72 Kbytes for program • size max. 64 Kbytes
72 Kbytes for data Local data (settable) max. 8 Kbytes
• expandable no • preset 4 Kbytes
Load memory Blocks
• integrated 256 Kbytes RAM OBs see Instruction List
• expandable FEPROM with memory card • size max. 64 Kbytes
(FEPROM) up to 64 Mbytes
Nesting depth
• expandable RAM with memory card (RAM)
up to 64 Mbytes • per priority class 24
Backup yes • within an error OB 2 additional
• with battery all data FBs max. 256
• without battery none • size max. 64 Kbytes
Process Times FCs max. 256
Process times for • size max. 64 Kbytes
• bit operations min. 0.2 s Address Areas (I/Os)
• word operations min. 0.2 s Total I/O address area 4 Kbytes/4 Kbytes
• fixed point arithmetic min. 0.2 s • distributed
• floating point arithmetic min. 0.6 s – MPI/DP interface 2 Kbytes/2 Kbytes
Timers/Counters and their Retentivity – DP interface 4 Kbytes/4 Kbytes
S7 counters 256 Process image 4 Kbytes/4 Kbytes
(settable)
• settable retentivity from Z 0 to Z 255
• preset 128 bytes/128 bytes
• preset from Z 0 to Z 7
• number of process max. 8
• counter range 1 to 999 image sections
IEC counter yes Digital channels 32768/32768
• type SFB • local 32768/32768
S7 timers 256 Analog channels 2048/2048
• settable retentivity from T 0 to T 255 • local 2048/2048
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-27
S7-400 CPUs

Configuration • number of additional 1

values per message
Central max. 1/21
controllers/expansion units – 100 ms interval none
Multicomputing max. 4 CPUs (with UR1 or – 500, 1000 ms inter- 1
UR2) val
Number of plug-in IMs max. 6 • number of messages
(total) – total max. 512
• IM 460 max. 6 – 100 ms interval none
• IM 463 max. 6 – 500 ms interval max. 256
Number of DP masters – 1000 ms interval max. 256

• integrated 2 Process diagnostic yes

messages
• via interface module none
• simultaneously active max. 70
• via IM/CP max. 10 interrupt-S blocks
Number of plug-in S5 max. 6 Process control messages yes
modules via adapter casing
(in central controller) Interrupt-8 blocks yes

Operable function modules • number of instances for max. 300

and communication interrupt-8 blocks and
processors blocks for
S7 communication
• FM limited by number of slots (settable)
and connections
• preset max. 150
• CP, point-to-point limited by number of slots
Number of archive IDs that 4
and connections
can be logged in simulta-
• CP, LAN limited by number of slots neously
and connections
Test and Commissioning Functions
– with S5 compatible max. 4
Status/control variable yes
communication
Time of Day
• variable I/Os, bit operations, DB,
distributed I/Os, timers,
Clock yes counters
• buffered yes • number max. 70
• accuracy upon Force function yes
– POWER DOWN daily deviation 1.7 s • variable I/Os, bit operations,
distributed I/Os
– POWER ON daily deviation 8.6 s
Operating hours counter 8
• number max. 64
Status block yes
• number 0 to 7
Single sequence yes
• value range 0 to 32767 hours
Breakpoint 4
• granularity 1 hour
Diagnostic buffer yes
• retentive yes
Time of day yes
• number of entries max. 400 (settable)
synchronization • preset 120
• on the PLC master/slave Communication Functions
• auf MPI master/slave Total connections 16
S7 Message Functions PG/OP communication yes
Number of stations for max. 8 Global data communication yes
message functions, which
can be activated (e.g. OS)
• number of GD
packages
SCAN process yes
– sender max. 8
– receiver max. 16

S7-400, M7-400 Programmable Controllers Module Specifications

4-28 A5E00069467-03
 S7-400 CPUs

• size of the GD max. 64 bytes DP Master

packages • services
– consistent 32 bytes – PG/OP yes
S7 basic communication yes communication

• useful data per job max. 76 bytes

– routing yes
– lateral yes
– consistent 16 bytes
communication
S7 communication yes – SYNC/FREEZE no
• useful data per job max. 64 Kbytes – activate/deactivate no
DP slaves
– consistent 32 bytes
• transmission speed up to 12 Mbps
S5 compatible yes (via CP and loadable
communication FC) • number of DP slaves max. 32
• useful data per job max. 8 Kbytes • address area max. 2 Kbytes I/2 Kbytes O
– consistent 240 bytes • useful data per max. 244 bytes I/
DP slave 244 bytes O
Standard communication yes (via CP and loadable
FC) 2nd Interface
• useful data per job depending on CP Type of interface integrated interface module
– consistent depending on CP Physical interface RS 485
Number of connection re- 16 Optically isolated yes
sources
Power supply at interface max. 150 mA
Interfaces (15 to 30 V DC)
1st Interface Number of connection re- 16
sources
Type of interface integrated interface module
Functionality
Physical interface RS 485
• DP master yes
Optically isolated yes
• PROFIBUS DP DP master
Power supply at interface max. 150 mA
(15 to 30 V DC) • point-to-point connec- no
tion
Number of connection re- 16
sources DP Master
Functionality • services

• MPI yes
– PG/OP yes
communication
• PROFIBUS DP DP master
– routing yes
• point-to-point connec- no – lateral yes
tion communication
MPI – SYNC/FREEZE yes
• services – activate/deactivate no
DP slaves
– PG/OP yes
communication • transmission speed up to 12 Mbps
– routing yes • number of DP slaves max. 64
– global data yes • address area max. 4 Kbytes I/4 Kbytes O
communication
• useful data per max. 244 bytes I/
– S7 basic yes DP slave 244 bytes O
communication
– S7 communication yes
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-29
S7-400 CPUs

Programming Dimensions
Programming language LAD, FBD, STL, SCL Mounting dimensions 25
290
219
W
H
D (mm)
Available operations see Instruction List
Slots necessary 1
Nesting levels 8
Weight ca. 0.72 kg
System functions (SFC) see Instruction List
Voltages, Currents
Number of simultaneously
active SFCs Power supply voltage nominal value 24 V DC
• WR_REC 8 Current consumption from typ. 1.5 A
S7-400 bus (5 V DC)
• WR_PARM 8 max. 1.6 A

• PARM_MOD 1 Current consumption from max. 0.3 A

S7-400 bus (24 V DC)
• WR_DPARM 2
Backup current typ. 40 A
• DPNRM_DG 8
max. 320 A
• RDSYSST 1 ... 8
External feed for CPU 5 V DC up to 15 V DC
System function blocks see Instruction List backup voltage
(SFB)
PG supply on MPI (15 to max. 300 mA
Program security password protection 30 V DC)
Power loss typ. 8 W

S7-400, M7-400 Programmable Controllers Module Specifications

4-30 A5E00069467-03
 S7-400 CPUs

4.11 Technical Specifications of the CPU 414-2

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 414-2XG03-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 04 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.2 Bit memory 8 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 8191
ge Service Pack 2 • retentivity preset from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 1024 (DB 0 reserved)
• integrated 128 Kbytes for program • size max. 64 Kbytes
128 Kbytes for data Local data (settable) max. 16 Kbytes
• expandable no • preset 8 Kbytes
Load memory Blocks
• integrated 256 Kbytes RAM OBs see Instruction List
• expandable FEPROM with memory card • size max. 64 Kbytes
(FEPROM) up to 64 Mbytes
Nesting depth
• expandable RAM with memory card (RAM)
up to 64 Mbytes • per priority class 24
Backup yes • within an error OB 2 additional
• with battery all data FBs max 1024
• without battery none • size max. 64 Kbytes
Process Times FCs max. 1024
Process times for • size max. 64 Kbytes
• bit operations min. 0.1 s Address Areas (I/Os)
• word operations min. 0.1 s Total I/O address area 8 Kbytes/8 Kbytes
• fixed point arithmetic min. 0.1 s • distributed
• floating point arithmetic min. 0.6 s – MPI/DP interface 2 Kbytes/2 Kbytes
Timers/Counters and their Retentivity – DP interface 6 Kbytes/6 Kbytes
S7 counters 256 Process image 8 Kbytes/8 Kbytes
(settable)
• settable retentivity from Z 0 to Z 255
• preset 256 bytes/256 bytes
• preset from Z 0 to Z 7
• number of process max. 8
• counter range 1 to 999 image sections
IEC counter yes Digital channels 65536/65536
• type SFB • local 65536/65536
S7 timers 256 Analog channels 4096/4096
• settable retentivity from T 0 to T 255 • local 4096/4096
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-31
S7-400 CPUs

Configuration • number of additional

values per message
Central max. 1/21
controllers/expansion units – with 100 ms max. 1
interval
Multicomputing max. 4 CPUs (with UR1 or
UR2) – with 500/1000 ms max. 10
interval
Number of plug-in IMs max. 6
(total) • number of messages
• IM 460 max. 6 – total max. 512

• IM 463 max. 6
– 100 ms interval max. 128
– 500 ms interval max. 256
Number of DP masters
– 1000 ms interval max. 512
• integrated 2
Process diagnostic yes
• via interface module none messages
• via IM/CP max. 10 • simultaneously active max. 100
Number of plug-in S5 max. 6 interrupt-S blocks
modules via adapter casing Process control messages yes
(in central controller)
Interrupt-8 blocks yes
Operable function modules
and communication • number of instances for max. 600
processors interrupt-8 blocks and
blocks for
• FM limited by number of slots S7 communication
and connections (settable)
• CP, point-to-point limited by number of slots • preset max. 300
and connections
Number of archive IDs that 16
• CP, LAN limited by number of slots can be logged in simulta-
and connections neously
– with S5 compatible max. 4 Test and Commissioning Functions
communication
Status/control variable yes
Time of Day
• variable I/Os, bit operations, DB,
Clock yes distributed I/Os, timers,
counters
• buffered yes
• accuracy upon
• number variable max. 70
Force function yes
– POWER DOWN daily deviation 1.7 s
– POWER ON daily deviation 8.6 s
• variable I/Os, bit operations,
distributed I/Os
Operating hours counter 8
• number variable max. 256
• number 0 to 7
Status block yes
• value range 0 to 32767 hours
Single sequence yes
• granularity 1 hour
Breakpoint 4
• retentive yes
Diagnostic buffer yes
Time of day yes
synchronization
• number of entries max. 400
(settable)
• on the PLC master/slave
• preset 120
• at the MPI master/slave
Communication Functions
S7 Message Functions
PG/OP communication yes
Number of stations for max. 8
Global data communication yes
message functions, which
can be activated (e.g. OS) • number of GD
packages
SCAN process yes
– sender max. 8

S7-400, M7-400 Programmable Controllers Module Specifications

4-32 A5E00069467-03
 S7-400 CPUs

– receiver max. 16 DP Master

• size of the GD max. 64 bytes • services
packages
– PG/OP yes
– consistent 32 bytes communication
S7 basic communication yes – routing yes
• useful data per job max. 76 bytes – lateral yes
communication
– consistent 16 bytes
– SYNC/FREEZE yes
S7 communication yes
– activate/deactivate nein
• useful data per job max. 64 Kbytes
DP slaves
– consistent 32 bytes
• transmission speed up to 12 Mbps
S5 compatible yes (via CP and loadable
communication FC)
• number of DP slaves max. 32

• useful data per job max. 8 Kbytes

• address area max. 2 bytes I/ 2 bytes O

– consistent 240 bytes

• useful data per max. 244 bytes I/
DP slave 244 bytes O
Standard communication yes (via CP and loadable
2nd Interface
FC)
Type of interface integrated interface module
• useful data per job depending on CP
Physical interface RS 485
– consistent depending on CP
Optically isolated yes
Number of connection re- 32
sources Power supply at interface max. 150 mA
(15 to 30 V DC)
Interfaces
Number of connection re- 16
1st Interface
sources
Type of interface integrated interface module
Functionality
Physical interface RS 485
• MPI no
Optically isolated yes
• PROFIBUS DP DP master
Power supply at interface max. 150 mA
(15 to 30 V DC)
• point-to-point connec- no
tion
Number of connection re- 32
DP Master
sources
• services
Functionality
– PG/OP yes
• MPI yes communication
• PROFIBUS DP DP master – routing yes
• point-to-point connec- no – lateral yes
tion communication
MPI – SYNC/FREEZE yes

• services – activate/deactivate no
DP slaves
– PG/OP yes
communication • transmission speed up to 12 Mbps

– global data yes • number of DP slaves max. 96

communication • address area max. 6 Kbytes I/
6 Kbytes O
– S7 basic yes
communication • useful data per max. 244 bytes I/
DP slave 244 bytes O
– S7 communication yes
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-33
S7-400 CPUs

Programming Dimensions
Programming language LAD, FBD, STL, SCL Mounting dimensions 25
290
219
W
H
D (mm)
Available operations see Instruction List
Slots necessary 1
Nesting levels 8
Weight ca. 0.72 kg
System functions (SFC) see Instruction List
Voltages, Currents
Number of simultaneously
active SFCs Power supply voltage nominal value 24 V DC
• WR_REC 8 Current consumption from typ. 1.5 A
S7-400 bus (5 V DC)
• WR_PARM 8 max. 1.6 A

• PARM_MOD 1 Current consumption from max. 0.3 A

S7-400 bus (24 V DC)
• WR_DPARM 2
Backup current typ. 40 A
• DPNRM_DG 8
max. 380 A
• RDSYSST 1 ... 8
External feed for CPU 2 V DC up to 15 V DC
System function blocks see Instruction List backup voltage
(SFB)
Power loss typ. 8 W
Program security password protection

S7-400, M7-400 Programmable Controllers Module Specifications

4-34 A5E00069467-03
 S7-400 CPUs

4.12 Technical Specifications of the CPU 414-3

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 414-3XJ00-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 02 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.2 Bit memory 8 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 8191
ge Service Pack 2 • preset retentivity from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 1024 (DB 0 reserved)
• integrated 384 Kbytes for program • size max. 64 Kbytes
384 Kbytes for data Local data (settable) max. 16 Kbytes
• expandable no • preset 8 Kbytes
Load memory Blocks
• integrated 256 Kbytes RAM OBs see Instruction List
• expandable FEPROM with memory card • size max. 64 Kbytes
(FEPROM) up to 64 Mbytes
Nesting depth
• expandable RAM with memory card (RAM)
up to 64 Mbytes • per priority class 24
Backup yes • within an error OB 2 additional
• with battery all data FBs max. 1024
• without battery none • size max. 64 Kbytes
Process Times FCs max. 1024
Process times for • size max. 64 Kbytes
• bit operations min. 0.1 s Address Areas (I/Os)
• word operations min. 0.1 s Total I/O address area 8 Kbytes/8 Kbytes
• fixed point arithmetic min. 0.1 s • distributed
• floating point arithmetic min. 0.6 s – MPI/DP interface 2 Kbytes/2 Kbytes
Timers/Counters and their Retentivity – DP interface 6 Kbytes/6 Kbytes
S7 counters 256 Process image 8 Kbytes/8 Kbytes
(settable)
• settable retentivity from Z 0 to Z 255
• preset 256 bytes/256 bytes
• preset from Z 0 to Z 7
• number of process max. 8
• counter range 1 to 999 image sections
IEC counter yes Digital channels 65536/65536
• type SFB • local 65536/65536
S7 timers 256 Analog channels 4096/4096
• settable retentivity from T 0 to T 255 • local 4096/4096
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-35
S7-400 CPUs

Configuration • number of additional

values per message
Central max. 1/21
controllers/expansion units – with 100 ms max. 1
interval
Multicomputing max. 4 CPUs (with UR1 or
UR2) – with 500, 1000 ms max. 10
interval
Number of plug-in IMs max. 6
(total) • number of messages
• IM 460 max. 6 – total max. 512

• IM 463 max. 6
– 100 ms interval max. 128
– 500 ms interval max. 256
Number of DP masters
– 1000 interval max. 512
• integrated 2
Process diagnostic yes
• via interface module 1 messages
• via IM/CP max. 10 • simultaneously active max. 100
Number of plug-in S5 max. 6 interrupt-S blocks
modules via adapter casing Process control messages yes
(in central controller)
Interrupt-8 blocks yes
Operable function modules
and communication • number of instances for max. 600
processors interrupt-8 blocks and
blocks for
• FM limited by number of slots S7 communication
and connections (settable)
• CP, point-to-point limited by number of slots • preset max. 300
and connections
Number of archive IDs that 16
• CP, LAN limited by number of slots can be logged in simulta-
and connections neously
– with S5 compatible max. 4 Test and Commissioning Functions
communication
Status/control variable yes
Time of Day
• variable I/Os, bit operations, DB,
Clock yes distributed I/Os, timers,
counters
• buffered yes
• accuracy upon
• number variable max. 70
Force function yes
– POWER DOWN daily deviation 1.7 s
– POWER ON daily deviation 8.6 s
• variable I/Os, bit operations,
distributed I/Os
Operating hours counter 8
• number variable max. 256
• number 0 to 7
Status block yes
• value range 0 to 32767 hours
Single sequence yes
• granularity 1 hour
Diagnostic buffer yes
• retentive yes
• number of entries max. 3200 (settable)
Time of day yes
synchronization
• preset 120
Communication Functions
• on the PLC master/slave
PG/OP communication yes
• at the MPI master/slave
Global data communication yes
S7 Message Functions
Number of stations for max. 8
• number of GD
packages
message functions, which
can be activated (e.g. OS) – sender max. 8
SCAN process yes – receiver max. 16

S7-400, M7-400 Programmable Controllers Module Specifications

4-36 A5E00069467-03
 S7-400 CPUs

• size of the GD max. 64 bytes DP Master

packages
• services
– consistent 32 bytes
– PG/OP yes
S7 basic communication yes communication
• useful data per job max. 76 bytes – routing yes
– consistent 16 bytes – lateral yes
communication
S7 communication yes
– SYNC/FREEZE yes
• useful data per job max. 64 Kbytes
– activate/deactivate no
– consistent 32 bytes
DP slaves
S5 compatible yes (via CP and loadable
communication FC)
• transmission speed up to 12 Mbps

• useful data per job max. 8 Kbytes

• number of DP slaves max. 32

– consistent 240 bytes

• address area max. 2 Kbytes I/2 Kbytes O

Standard communication yes (via CP and loadable

• useful data per max. 244 bytes I/
DP slave 244 bytes A
FC)
2nd Interface
• useful data per job depending on CP
Type of interface integrated interface module
– consistent depending on CP
Physical interface RS 485
Number of connection re- 32
sources Optically isolated yes
Interfaces Power supply at interface max. 150 mA
(15 to 30 V DC)
1st Interface
Number of connection re- 16
Type of interface integrated interface module
sources
Physical interface RS 485
Functionality
Optically isolated yes
• MPI no
Power supply at interface max. 150 mA
(15 to 30 V DC)
• PROFIBUS DP DP master

Number of connection re- 32

• point-to-point connec- no
tion
sources
DP Master
Functionality
• services
• MPI yes
– PG/OP yes
• PROFIBUS DP DP master communication
• point-to-point connec- no – routing yes
tion
– lateral yes
MPI communication
• services – SYNC/FREEZE yes

– PG/OP yes – activate/deactivate no

communication DP slaves

– routing yes • transmission speed up to 12 Mbps

– global data yes • number of DP slaves max. 96

communication • address area max. 6 Kbytes I/6 Kbytes O
– S7 basic yes • useful data per max. 244 bytes I/
communication DP slave 244 bytes O
– S7 communication yes
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-37
S7-400 CPUs

3rd interface Dimensions

Type of interface Pluggable interface module Mounting dimensions 50
290
219
W
H
D (mm)
Insertable interface module IF-964-DP
Slots necessary 2
Technical properties as for 2nd interface
Weight ca. 1.07 kg
Programming
Voltages, Currents
Programming language LAD, FBD, STL, SCL
Power supply voltage nominal value 24 V DC
Available operations see Instruction List
Current consumption from typ. 1.5 A
Nesting levels 8
S7-400 bus (5 V DC) max. 1.6 A
System functions (SFC) see Instruction List
Current consumption from max. 0.45 A
Number of simultaneously S7-400 bus (24 V DC)
active SFCs
Backup current typ. 40 A
• WR_REC 8
max. 420 A
• WR_PARM 8
External feed for CPU 5 V DC up to 15 V DC
• PARM_MOD 1 backup voltage
• WR_DPARM 2 Power loss typ. 8 W
• DPNRM_DG 8
• RDSYSST 1 ... 8
System function blocks see Instruction List
(SFB)
Program security password protection

S7-400, M7-400 Programmable Controllers Module Specifications

4-38 A5E00069467-03
 S7-400 CPUs

4.13 Technical Specifications of the CPU 416-2

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 416-2XK02-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 04 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.3 Bit memory 16 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 16383
ge Service Pack 2 • preset retentivity from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 4096 (DB 0 reserved)
• integrated 0.8 Mbytes for program • size max. 64 Kbytes
0.8 Mbytes for data Local data (settable) max. 32 Kbytes
• expandable no • preset 16 Kbytes
Load memory Blocks
• integrated 256 Kbytes RAM OBs see Instruction List
• expandable FEPROM with memory card (FLASH) • size max. 64 Kbytes
up to 64 Mbytes
Nesting depth
• expandable RAM with memory card (RAM)
up to 64 Mbytes • per priority class 24
Backup yes • within an error OB 2 additional
• with battery all data FBs max 2048
• without battery none • size max. 64 Kbytes
Process Times FCs max. 2048
Process times for • size max. 64 Kbytes
• bit operations min. 0.08 s Address Areas (I/Os)
• word operations min. 0.08 s Total I/O address area 16 Kbytes/16 Kbytes
• fixed point arithmetic min. 0.08 s • distributed
• floating point arithmetic min. 0.48 s – MPI/DP interface 2 Kbytes/2 Kbytes
Timers/Counters and their Retentivity – DP interface 8 Kbytes/8 Kbytes
S7 counters 512 Process image 16 Kbytes/16 Kbytes
(settable)
• settable retentivity from Z 0 to Z 511
• preset 512 bytes/512 bytes
• preset from Z 0 to Z 7
• number of process max. 8
• counter range 1 to 999 image sections
IEC counter yes Digital channels 131072/131072
• type SFB • local 131072/131072
S7 timers 512 Analog channels 8192/8192
• settable retentivity from T 0 to T 511 • local 8192/8192
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-39
S7-400 CPUs

Configuration • number of additional

values per message
Central max. 1/21
controllers/expansion units – with 100 ms max. 1
interval
Multicomputing max. 4 CPUs (with UR1 or
UR2) – with 500, 1000 ms max. 10
interval
Number of plug-in IMs max. 6
(total) • number of messages
• IM 460 max. 6 – total max. 1024

• IM 463 max. 6
– 100 ms interval max. 128
– 500 ms interval max. 512
Number of DP masters
– 1000 ms interval max. 1024
• integrated 2
Process diagnostic yes
• via interface module none messages
• via IM/CP max. 10 • simultaneously active max. 200
Number of plug-in S5 max. 6 interrupt-S blocks
modules via adapter casing Process control messages yes
(in central controller)
Interrupt-8 blocks yes
Operable function modules
and communication • number of instances for max. 1800
processors interrupt-8 blocks and
blocks for
• FM limited by number of slots S7 communication
and connections (settable)
• CP, point-to-point limited by number of slots • preset max. 600
and connections
Number of archive IDs that 32
• CP, LAN limited by number of slots can be logged in simulta-
and connections neously
– with S5 compatible max 4 Test and Commissioning Functions
communication
Status/control variable yes
Time of Day
• variable I/Os, bit operations, DB,
Clock yes distributed I/Os, timers,
counters
• buffered yes
• accuracy upon
• number variable max. 70
Force function yes
– POWER DOWN daily deviation 1.7 s
– POWER ON daily deviation 8.6 s
• variable I/Os, bit operations,
distributed I/Os
Operating hours counter 8
• number variable max. 512
• number 0 to 7
Status block yes
• value range 0 to 32767 hours
Single sequence yes
• granularity 1 hour
Diagnostic buffer yes
• retentive yes
• number of entries max. 3200 (settable)
Time of day yes
synchronization
• preset 120
Communication Functions
• on the AS master/slave
PG/OP communication yes
• at the MPI master/slave
Global data communication yes
S7 Message Functions
Number of stations for max. 12
• number of GD
packages
message functions, which
can be activated (e.g. OS) – sender max. 16
SCAN process yes – receiver max. 32

S7-400, M7-400 Programmable Controllers Module Specifications

4-40 A5E00069467-03
 S7-400 CPUs

• size of the GD max. 64 bytes DP Master

packages
• services
– consistent 32 bytes
– PG/OP yes
S7 basic communication yes communication
• useful data per job max. 76 bytes – routing yes
– consistent 16 bytes – lateral yes
cummunication
S7 communication yes
– SYNC/FREEZE yes
• useful data per job max. 64 Kbytes
– activate/deactivate no
– consistent 32 bytes
DP slaves
S5 compatible yes (via CP and loadable
communication FC)
• transmission speed up to 12 Mbps

• useful data per job max. 8 Kbytes

• number of DP slaves max. 32

– consistent 240 bytes

• address area max. 2 bytes I/ 2 bytes O

Standard communication yes (via CP and loadable

• useful data per max. 244 bytes I/
DP slave 244 bytes A
FC)
2nd Interface
• useful data per job depending on CP
Type of interface integrated interface module
– consistent depending on CP
Physical interface RS 485
Number of connection re- 64
sources Optically isolated yes
Interfaces Power supply at interface max. 150 mA
(15 to 30 V DC)
1st Interface
Number of connection re- 32
Type of interface integrated interface module
sources
Physical interface RS 485
Functionality
Optically isolated yes
• MPI no
Power supply at interface max. 150 mA
(15 to 30 V DC)
• PROFIBUS DP DP master

Number of connection re- 44

• point-to-point connec- no
tion
sources
DP Master
Functionality
• services
• MPI yes
– PG/OP yes
• PROFIBUS DP DP master communication
• point-to-point connec- no – routing yes
tion
– lateral yes
MPI communication
• services – SYNC/FREEZE yes

– PG/OP yes – activate/deactivate no

communication DP slaves

– routing yes • transmission speed up to 12 Mbps

– global data yes • number of DP slaves max. 125

communication • address area max. 8 bytes I/ 8 Kbytes O
– S7 basic yes • useful data per max. 244 bytes I/
communication DP slave 244 bytes O
– S7 communication yes
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-41
S7-400 CPUs

Programming Dimensions
Programming language LAD, FBD, STL, SCL Mounting dimensions 25
290
219
W
H
D (mm)
Available operations see Instruction List
Slots required 1
Nesting levels 8
Weight ca. 0.72 kg
System functions (SFC) see Instruction List
Voltages, Currents
Number of simultaneously
active SFCs Power supply voltage nominal value 24 V DC
• WR_REC 8 Current consumption from typ. 1.5 A
S7-400 bus (5 V DC)
• WR_PARM 8 max. 1.6 A

• PARM_MOD 1 Current consumption from max. 0.3 A

S7-400 bus (24 V DC)
• WR_DPARM 2
Backup current typ. 40 A
• DPNRM_DG 8
max. 420 A
• RDSYSST 1 ... 8
External feed for CPU 5 V DC up to 15 V DC
System function blocks see Instruction List backup voltage
(SFB)
Power loss typ. 8 W
Program security password protection

S7-400, M7-400 Programmable Controllers Module Specifications

4-42 A5E00069467-03
 S7-400 CPUs

4.14 Technical Specifications of the CPU 416-3

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 416-3XL00-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 02 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.2 Bit memory 16 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 16383
ge Service Pack 2 • retentivity preset from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 4096 (DB 0 reserved)
• integrated 1.6 Mbytes for program • size max. 64 Kbytes
1.6 Mbytes for data Local data (settable) max. 32 Kbytes
• expandable no • preset 16 Kbytes
Load memory Blocks
• integrated 256 Kbyte RAM OBs see Instruction List
• expandable FEPROM with memory card (FLASH) • size max. 64 Kbytes
up to 64 Mbytes
Nesting depth
• expandable RAM with memory card (RAM)
up to 64 Mbytes • per priority class 24
Backup yes • within an error OB 2 additional
• with battery all data FBs max 2048
• without battery none • size max. 64 Kbytes
Process Times FCs max. 2048
Process times for • size max. 64 Kbytes
• bit operations min. 0.08 s Address Areas (I/Os)
• word operations min. 0.08 s Total I/O address area 16 Kbytes/16 Kbytes
• fixed point arithmetic min. 0.08 s • distributed
• floating point arithmetic min. 0.48 s – MPI/DP interface 2 Kbytes/2 Kbytes
Timers/Counters and their Retentivity – DP interface 8 Kbytes/8 Kbytes
S7 counters 512 Process image 16 Kbytes/16 Kbytes
(settable)
• settable retentivity from Z 0 to Z 511
• preset 512 bytes/512 bytes
• preset from Z 0 to Z 7
• number of process max. 8
• counter range 1 to 999 image sections
IEC counter yes Digital channels 131072/131072
• type SFB • local 131072/131072
S7 timers 512 Analog channels 8192/8192
• settable retentivity from T 0 to T 511 • local 8192/8192
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-43
S7-400 CPUs

Configuration • number of additional

values per message
Central max. 1/21
controllers/expansion units – with 100 ms max. 1
interval
Multicomputing max. 4 CPUs (with UR1 or
UR2) – with 500, 1000 ms max. 10
interval
Number of plug-in IMs max. 6
(total) • number of messages
• IM 460 max. 6 – total max. 1024

• IM 463 max. 6
– 100 ms interval max. 128
– 500 ms interval max. 512
Number of DP masters
– 1000 ms interval max. 1024
• integrated 2
Process diagnostic yes
• via interface module 1 messages
• via IM/CP max. 10 • simultaneously active max. 200
Number of plug-in S5 max. 6 interrupt-S blocks
modules via adapter casing Process control messages yes
(in central controller)
Interrupt-8 blocks yes
Operable function modules
and communication • number of instances for max. 1800
processors interrupt-8 blocks and
blocks for
• FM limited by number of slots S7 communication
and connections (settable)
• CP, point-to-point limited by number of slots • preset max. 600
and connections
Number of archive IDs that 32
• CP, LAN limited by number of slots can be logged in simulta-
and connections neously
– with S5 compatible max. 4 Test and Commissioning Functions
communication
Status/control variable yes
Time of Day
• variable I/Os, bit operations, DB,
Clock yes distributed I/Os, timers,
counters
• buffered yes
• accuracy upon
• number variable max. 70
Force function yes
– POWER DOWN daily deviation 1.7 s
– POWER ON daily deviation 8.6 s
• variable I/Os, bit operations,
distributed I/Os
Operating hours counter 8
• number variable max. 512
• number 0 to 7
Status block yes
• value range 0 to 32767 hours
Single sequence yes
• granularity 1 hour
Diagnostic buffer yes
• retentive yes
• number of entries max. 3200 (settable)
Time of day yes
synchronization
• preset 120
Communication Functions
• on the PLC yes
PG/OP communication yes
• at the MPI yes
Global data communication yes
S7 Message Functions
Number of stations for max. 12
• number of GD
packages
message functions, which
can be activated (e.g. OS) – sender max. 16
SCAN process yes – receiver max. 32

S7-400, M7-400 Programmable Controllers Module Specifications

4-44 A5E00069467-03
 S7-400 CPUs

• size of the GD max. 64 bytes DP Master

packages
• services
– consistent 32 bytes
– PG/OP yes
S7 basic communication yes communication
• useful data per job max. 76 bytes – routing yes
– consistent 16 bytes – lateral yes
communication
S7 communication yes
– SYNC/FREEZE yes
• useful data per job max. 64 Kbytes
– activate/deactivate no
– consistent 32 bytes
DP slaves
S5 compatible yes (via CP and loadable
communication FC)
• transmission speed up to 12 Mbps
– reserved 1 for PG, 1 for OP
• useful data per job max. 8 Kbytes
– consistent 240 bytes
• number of DP slaves max. 32

Standard communication yes (via CP and loadable

• address area max. 2 bytes I/ 2 bytes O
FC) • useful data per max. 244 bytes I/
DP slave 244 bytes A
• useful data per job depending on CP
2nd Interface
– consistent depending on CP
Type of interface integrated interface module
Number of connection re- 64
sources Physical interface RS 485
Interfaces Optically isolated yes
1st Interface Power supply at interface max. 150 mA
(15 to 30 V DC)
Type of interface integrated interface module
Number of connection re- 32
Physical interface RS 485
sources
Optically isolated yes
Functionality
Power supply at interface max. 150 mA
(15 to 30 V DC)
• MPI no

Number of connection re- 44

• PROFIBUS DP DP master
sources • point-to-point connec- no
tion
Functionality
DP Master
• MPI yes
• services
• PROFIBUS DP DP master
– PG/OP yes
• point-to-point connec- no communication
tion
– routing yes
MPI
– lateral yes
• services communication
– PG/OP yes – SYNC/FREEZE yes
communication – activate/deactivate no
– routing yes DP slaves

– global data yes • transmission speed up to 12 Mbps

communication • number of DP slaves max. 125
– S7 basic yes • address area max. 8 Kbytes I/8 Kbytes O
communication
• useful data per max. 244 bytes I/
– S7 communication yes DP slave 244 bytes O
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-45
S7-400 CPUs

3. Schnittstelle Dimensions
Type of interface pluggable interface module Mounting dimensions 50
290
219
W
H
D (mm)
Insertable interface module IF-964-DP
Slots necessary 2
Technical properties as for 2nd interface
Weight ca. 1.07 kg
Programming
Voltages, Currents
Programming language LAD, FBD, STL, SCL
Power supply voltage nominal value 24 V DC
Available operations see Instruction List
Current consumption from typ. 1.6 A
Nesting levels 8
S7-400 bus (5 V DC) max. 1.8 A
System functions (SFC) see Instruction List
Current consumption from max. 0.3 A
Number of simultaneously S7-400 bus (24 V DC)
active SFCs
Backup current typ. 50 A
• WR_REC 8
max. 460 A
• WR_PARM 8
External feed for CPU 5 V DC up to 15 V DC
• PARM_MOD 1 backup voltage
• WR_DPARM 2 PG supply on MPI (15 to max. 150 mA
• DPNRM_DG 8
30 V DC)

• RDSYSST 1 ... 8 Power loss typ. 8 W

System function blocks see Instruction List

(SFB)
Program security password protection

S7-400, M7-400 Programmable Controllers Module Specifications

4-46 A5E00069467-03
 S7-400 CPUs

4.15 Technical Specifications of the CPU 417-4

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 417-4XL00-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 03 memory; timers; counters) (with backup battery)

• Firmware version V 1.1.2 Bit memory 16 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 16383
ge Service Pack 2 • retentivity preset from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 8192 (DB 0 reserved)
• integrated 2 Mbytes for program • size max. 64 Kbytes
2 Mbytes for data Local data (settable) max. 64 Kbytes
• expandable up to 10 Mbytes for • preset 32 Kbytes
program
up to 10 Mbytes for data Blocks

Load memory OBs see Instruction List

• integrated 256 Kbytes RAM • size max. 64 Kbytes

• expandable FEPROM with memory card (FLASH) Nesting depth

up to 64 Mbytes • per priority class 24
• expandable RAM with memory card (RAM) • within an error OB 2 additional
up to 64 Mbytes
FBs max 6144
Backup yes
• size max. 64 Kbytes
• with battery all data
FCs max. 6144
• without battery none
• size max. 64 Kbytes
Process Times
Address Areas (I/Os)
Process times for
Total I/O address area 16 Kbytes/16 Kbytes
• bit operations min. 0.1 s
• distributed
• word operations min. 0.1 s
– MPI/DP interface 2 Kbytes/2 Kbytes
• fixed point arithmetic min. 0.1 s
– DP interface 8 Kbytes/8 Kbytes
• floating point arithmetic min. 0.6 s
Process image 16 Kbytes/16 Kbytes
Timers/Counters and their Retentivity (settable)
S7 counters 512 • preset 1024 bytes/1024 bytes
• settable retentivity from Z 0 to Z 511 • number of process max. 8
image sections
• preset from Z 0 to Z 7
Digital channels 131072/131072
• counter range 1 to 999
• local 131072/131072
IEC counter yes
Analog channels 8192/8192
• type SFB
• local 8192/8192
S7 timers 512
• settable retentivity from T 0 to T 511
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-47
S7-400 CPUs

Configuration • number of additional

values per message
Central max. 1/21
controllers/expansion units – with 100 ms max. 1
interval
Multicomputing max. 4 CPUs (with UR1 or
UR2) – with 500, 1000 ms max. 10
interval
Number of plug-in IMs max. 6
(total) • number of messages
• IM 460 max. 6 – total max. 1024

• IM 463 max. 6
– 100 ms interval max. 128
– 500 ms interval max. 512
Number of DP masters
– 1000 ms interval max. 1024
• integrated 2
Process diagnostic yes
• via interface module 2 messages
• via IM/CP max. 10 • simultaneously active max. 200
Number of plug-in S5 max. 6 interrupt-S blocks
modules via adapter casing Process control messages yes
(in central controller)
Interrupt-8 blocks yes
Operable function modules
and communication • number of instances for max. 10000
processors interrupt-8 blocks and
blocks for
• FM limited by number of slots S7 communication
and connections (settable)
• CP, point-to-point limited by number of slots • preset max. 1200
and connections
Number of archive IDs that 64
• CP, LAN limited by number of slots can be logged in simulta-
and connections neously
– with S5 compatible max. 4 Test and Commissioning Functions
communication
Status/control variable yes
Time of Day
• variable I/Os, bit operations, DB,
Clock yes distributed I/Os, timers,
counters
• buffered yes
• accuracy upon
• number max. 70
Force function yes
– POWER DOWN daily deviation 1.7 s
– POWER ON daily deviation 8.6 s
• variable I/Os, bit operations,
distributed I/Os
Operating hours counter 8
• number max. 512
• number 0 to 7
Status block yes
• value range 0 to 32767 hours
Single sequence yes
• granularity 1 hour
Diagnostic buffer yes
• retentive yes
• number of entries max. 3200 (settable)
Time of day yes
synchronization
• preset 120
Communication Functions
• on the PLC master/slave
PG/OP communication yes
• at the MPI master/slave
Global data communication yes
S7 Message Functions
Number of stations for max. 16
• number of GD
packages
message functions, which
can be activated (e.g. OS) – sender max. 16
SCAN process yes – receiver max. 32

S7-400, M7-400 Programmable Controllers Module Specifications

4-48 A5E00069467-03
 S7-400 CPUs

• size of the GD max. 64 bytes DP Master

packages
• services
– consistent 32 bytes
– PG/OP yes
S7 basic communication yes communication
• useful data per job max. 76 bytes – routing yes
– consistent 16 bytes – lateral yes
communication
S7 communication yes
– SYNC/FREEZE yes
• useful data per job max. 64 Kbytes
– activate/deactivate no
– consistent 32 bytes
DP slaves
S5 compatible yes (via CP and loadable
communication FC)
• transmission speed up to 12 Mbps

• useful data per job max. 8 Kbytes

• number of DP slaves max. 32

– consistent 240 bytes

• address area max. 2 Kbytes I/2 Kbytes O

Standard communication yes (via CP and loadable

• useful data per max. 244 bytes I/
DP slave 244 bytes A
FC)
2nd Interface
• useful data per job depending on CP
Type of interface integrated interface module
– consistent depending on CP
Physical interface RS 485
Number of connection re- 64
sources Optically isolated yes
Interfaces Power supply at interface max. 150 mA
(15 to 30 V DC)
1st Interface
Number of connection re- 32
Type of interface integrated interface module
sources
Physical interface RS 485
Functionality
Optically isolated yes
• MPI no
Power supply at interface max. 150 mA
(15 to 30 V DC)
• PROFIBUS DP DP master

Number of connection re- 44

• point-to-point connec- no
tion
sources
DP Master
Functionality
• services
• MPI yes
– PG/OP yes
• PROFIBUS DP DP master communication
• point-to-point connec- no – routing yes
tion
– lateral yes
MPI communication
• services – SYNC/FREEZE yes

– PG/OP yes – activate/deactivate no

communication DP slaves

– routing yes • transmission speed up to 12 Mbps

– global data yes • number of DP slaves max. 125

communication • address area max. 8 Kbytes I/8 Kbytes O
– S7 basic yes • useful data per max. 244 bytes I/
communication DP slave 244 bytes O
– S7 communication yes
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-49
S7-400 CPUs

3rd interface Dimensions

Type of interface pluggable interface module Mounting dimensions 50
290
219
W
H
D (mm)
Insertable interface module IF-964-DP
Slots necessary 2
Technical properties as for 2nd interface
Weight ca. 1.07 kg
4th interface
Voltages, Currents
Typ der Schnittstelle pluggable interface module
Power supply voltage nominal value 24 V DC
Insertable interface module IF-964-DP
Current consumption from typ. 1.8 A
Technical properties as for 2nd interface
S7-400 bus (5 V DC) max. 2.0 A
Programming
Current consumption from max. 0.6 A
Programming language LAD, FBD, STL, SCL S7-400 bus (24 V DC)
Available operations see Instruction List Backup current typ. 75 A
Nesting levels 8 max. 860 A
System functions (SFC) see Instruction List External feed for CPU 5 V DC up to 15 V DC
backup voltage
Number of simultaneously
active SFCs Power loss typ. 10 W
• WR_REC 8
• WR_PARM 8
• PARM_MOD 1
• WR_DPARM 2
• DPNRM_DG 8
• RDSYSST 1 ... 8
System function blocks see Instruction List
(SFB)
Program security password protection

S7-400, M7-400 Programmable Controllers Module Specifications

4-50 A5E00069467-03
 S7-400 CPUs

4.16 Technical Specifications of the CPU 417-4 H

CPU and Version Data Areas and their Retentivity
MLFB 6ES7 417-4HL01-0AB0 Total retentive data area (bit total work and load memory
• Hardware version 01 memory; timers; counters) (with backup battery)

• Firmware version V 2.1.0 Bit memory 16 Kbytes

Associated program packa- STEP7 5.0 or higher; • settable retentivity from MB 0 to MB 16383
ge Service Pack 2 • retentivity preset from MB 0 to MB 15
Memory Clock memory 8 (1 memory byte)
Work memory Data blocks max. 8192 (DB 0 reserved)
• integrated 2 Mbytes for program • size max. 64 Kbytes
2 Mbytes for data Local data (settable) max. 64 Kbytes
• expandable up to 10 Mbytes for • preset 32 Kbytes
program
up to 10 Mbytes for data Blocks

Load memory OBs see Instruction List

• integrated 256 Kbytes RAM • size max. 64 Kbytes

• expandable FEPROM with memory card (FLASH) Nesting depth

up to 64 Mbytes • per priority class 24
• expandable RAM with memory card (RAM) • within an error OB 2 additional
up to 64 Mbytes
FBs max 6144
Backup yes
• size max. 64 Kbytes
• with battery all data
FCs max. 6144
• without battery none
• size max. 64 Kbytes
Process Times
Address Areas (I/Os)
Process times for
Total I/O address area 16 Kbytes/16 Kbytes
• bit operations min. 0.1 s
• distributed
• word operations min. 0.1 s
– MPI/DP interface 2 Kbytes/2 Kbytes
• fixed point arithmetic min. 0.1 s
– DP interface 8 Kbytes/8 Kbytes
• floating point arithmetic min. 0.6 s
Process image 16 Kbytes/16 Kbytes
Timers/Counters and their Retentivity (settable)
S7 counters 512 • preset 1024 bytes/1024 bytes
• settable retentivity from Z 0 to Z 511 • number of process max. 8
image sections
• preset from Z 0 to Z 7
Digital channels 131072/131072
• counter range 1 to 999
• local 131072/131072
IEC counter yes
Analog channels 8192/8192
• type SFB
• local 8192/8192
S7 timers 512
• settable retentivity from T 0 to T 511
• preset no retentivity
• timer range 10 ms to 9990 s
IEC timer yes

• type SFB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-51
S7-400 CPUs

Configuration • number of additional

values per message
Central max. 1/21
controllers/expansion units – with 100 ms max. 1
interval
Multicomputing no
– with 500, 1000 ms max. 10
Number of plug-in IMs max. 6
interval
(total)
• IM 460 max. 6
• number of messages
– total max. 1024
• IM 463 max. 6
– 100 ms interval max. 128
Number of DP masters – 500 ms interval max. 512
• integrated 2 – 1000 ms interval max. 1024
• via interface module none Process diagnostic yes
• via IM/CP max. 10 messages

Number of plug-in S5 none • simultaneously active max. 200

modules via adapter casing interrupt-S blocks
(in central controller) Process control messages yes
Operable function modules Interrupt-8 blocks yes
and communication
processors • number of instances for max. 10000
interrupt-8 blocks and
• FM limited by number of slots blocks for
and connections S7 communication
(settable)
• CP, point-to-point limited by number of slots
and connections • preset max. 1200
• CP, LAN limited by number of slots Number of archive IDs that 64
and connections can be logged in simulta-
neously
– with S5 compatible max. 4
communication Test and Commissioning Functions
Time of Day Status/control variable yes
Clock yes • variable I/Os, bit operations, DB,
distributed I/Os, timers,
• buffered yes
counters
• accuracy upon
• number max. 70
– POWER DOWN daily deviation 1.7 s
Force function yes
– POWER ON daily deviation 8.6 s
• variable I/Os, bit operations,
Operating hours counter 8 distributed I/Os
• number 0 to 7 • number variable max. 512
• value range 0 to 32767 hours Status block yes
• granularity 1 hour Single sequence yes
• retentive yes Diagnostic buffer yes
Time of day yes • number of entries max. 3200 (settable)
synchronization
• preset 120
• on the PLC master/slave
• at the MPI master/slave
S7 Message Functions
Number of stations for max. 16
message functions, which
can be activated (e.g. OS)
SCAN process yes

S7-400, M7-400 Programmable Controllers Module Specifications

4-52 A5E00069467-03
 S7-400 CPUs

Communication Functions DP Master

PG/OP communication yes • services
Global data communication no – PG/OP yes
communication
S7 basic communication no
– routing yes
S7 communication yes
– lateral no
• useful data per job max. 64 Kbytes
communication
– consistent 32 bytes
– SYNC/FREEZE no
S5 compatible yes (via CP and loadable
– activate/deactivate no
communication FC)
DP slaves
• useful data per job max. 8 Kbytes
• transmission speed up to 12 Mbps
– consistent 32 bytes
• number of DP slaves max. 32
Standard communication yes (via CP and loadable
FC)
• address area max. 2 Kbytes I/2 Kbytes O

• useful data per job depending on CP

• useful data per max. 244 bytes I/
DP slave 244 bytes A
– consistent depending on CP
2nd Interface
Number of connection re- 64
Type of interface integrated interface module
sources
Physical interface RS 485
Interfaces
Optically isolated yes
1st Interface
Power supply at interface max. 150 mA
Type of interface integrated interface module
(15 to 30 V DC)
Physical interface RS 485
Number of connection re- 32
Optically isolated yes sources
Power supply at interface max. 150 mA Functionality
(15 to 30 V DC)
• MPI no
Number of connection re- 44
sources
• PROFIBUS DP DP master

Functionality
• point-to-point connec- no
tion
• MPI yes
DP Master
• PROFIBUS DP DP master • services
• point-to-point connec- no – PG/OP yes
tion communication
MPI – routing yes
• services – lateral no
communication
– PG/OP yes
communication – SYNC/FREEZE no

– routing ja • transmission speed up to 12 Mbps

– global data no • number of DP slaves max. 125

communication • address area max. 8 Kbytes I/8 Kbytes O
– S7 basic no • useful data per max. 244 bytes E/
communication DP slave 244 bytes O
– S7 communication yes
• transmission speed up to 12 Mbps

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 4-53
S7-400 CPUs

3rd interface Dimensions

Type of interface Pluggable interface module Mounting dimensions 50
290
219
(fiber-optic cable) W
H
D (mm)
Insertable interface module Synchronization module Slots necessary 2
IF 960 (only with redundant
Weight ca. 1.07 kg
operation; with separate
operation the interface re- Voltages, Currents
mains free/covered)
Power supply voltage nominal value 24 V DC
4th interface
Current consumption from typ. 1.8 A
Type of interface Pluggable interface module S7-400 bus (5 V DC) max. 2.0 A
(fiber-optic cable)
Current consumption from max. 0.6 A
Insertable interface module Synchronization module S7-400 bus (24 V DC)
IF 960 (only with redundant
operation; with separate Backup current typ. 75 A
operation the interface re- max. 860 A
mains free/covered)
External feed for CPU 5 V DC up to 15 V DC
Programming backup voltage
Programming language LAD, FBD, STL, SCL Power loss typ. 10 W
Available operations see Instruction List
Nesting levels 8
Number of simultaneously
active SFCs
• WR_REC 8
• WR_PARM 8
• PARM_MOD 1
• WR_DPARM 2
• DPNRM_DG 8
• RDSYSST 1 ... 8
System functions (SFC) see Instruction List
System function blocks see Instruction List
(SFB)
Program security password protection

S7-400, M7-400 Programmable Controllers Module Specifications

4-54 A5E00069467-03
Digital Modules 5
Chapter Overview

Section Description Page

5.1 Assigning Parameters to the Digital Input Modules 5-2
5.2 Diagnostics 5-3
5.3 Digital Input Module SM 421; DI 32 x 24 VDC 5-6
6ES7 421-1BL00-0AA0
5.4 Digital Input Module SM 421; DI 32 x 24 VDC 5-9
6ES7 421-1BL01-0AA0
5.5 Digital Input Module SM 421; DI 16 x 24/60 VUC 5-12
6ES7 421-7DH00-0AB0
5.6 Digital Input Module SM 421; DI 16 x 120/230 VUC; 5-21
6ES7 421-1FH00-0AA0
5.7 Digital Input Module SM 421; DI 32 x 120 VUC; 5-24
6ES7 421-1EL00-0AA0
5.8 Digital Input Module SM 421; DI 16 x 120 VAC; 5-27
6ES7 421-5EH00-0AA0
5.9 Digital Output Module SM 422; DO 16 x 20-120 VAC/2 A 5-30
(with Diagnostic Interrupt); 6ES7 422-5EH00-0AB0
5.10 Digital Output Module SM 422; DO 32 x 24 VDC/0.5 A; 5-37
6ES7 422-1BL00-0AA0
5.11 Digital Output Module SM 422; DO 16 x 24 VDC/2 A; 5-40
6ES7 422-1BH10-0AA0
5.12 Digital Output Module SM 422; DO 8 x 120/230 VAC/5 A; 5-43
6ES7 422-1FF00-0AA0
5.13 Digital Output Module SM 422; DO 16 x 120/230 VAC/2 A; 5-46
6ES7 422-1FH00-0AA0
5.14 Relay Output Module SM 422; DO 16 x 30/230 VUC/Rel 5 A; 5-49
6ES7 422-1HH00-0AA0
5.15 Digital Output Module SM 422; DO 16 x 20-125 VDC/1.5 A; 5-52
6ES7 422-5EH10-0AB0
5.16 Digital Output Module SM 421; DI 16 x 120/230 VUC; Input 5-59
Characteristic to IEC1131, Type 2;
6ES7 421-1FH20-0AA0
5.17 Digital Input Module SM 421; DI 16 x 24 VDC; 5-62
6ES7 421-7BH00-0AB0
5.18 Digital Output Module SM 422; DO 32 x 24 VDC/0.5 A; 5-76
6ES7 422-7BL00-0AB0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-1
Digital Modules

5.1 Assigning Parameters to the Digital Input Modules

Parameter Assignment Application

You can set the parameters using STEP 7.
The parameters set in this way are stored in the CPU during transfer from the
programming device to the S7-400. After downloading from the programming device
to the S7-400, the CPU then transfers these parameters to the relevant digital
modules.
In the RUN state of the CPU, you can change some of the parameters (dynamic
parameters) via SFC commands.
However, after a RUN  STOP, STOP  RUN transition, the parameters created
with STEP 7 come back into force.

Default Parameter Assignment

Note
Startup of the digital modules with the default parameters is only possible in the
CR.

S7-400, M7-400 Programmable Controllers Module Specifications

5-2 A5E00069467-03
 Digital Modules

5.2 Diagnostics

Fault/Error Messages via LEDs

Faults are indicated to you via the following LEDs on the front of the module:
• INTF (internal faults)
• EXTF (external faults)

Fault/Error Messages
You can use SFCs to read out system-wide and channel-specific diagnostic
messages from the module at any time.
You can read out the cause of the fault from the diagnostic buffer.

Fault/Error Indication via Diagnostic Interrupt

If you have enabled the diagnostic interrupt, OB82 is called automatically. The
system diagnostic messages are then already available to you. You can use
SFC51 or SFC59 in OB82 to get detailed fault/error information (DS 1). The
diagnostic information remains consistent until you exit OB82, meaning the
information remains frozen. The diagnostic interrupt on the module is
acknowledged when you exit OB82.

Note
Fault/error messages are not possible via the diagnostic interrupt if the module is
plugged into ER-1/ER-2.
If a diagnostic interrupt is enabled for a module in ER-1/ER-2, module diagnostics
can no longer be updated after the occurence of the first diagnostic message.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-3
Digital Modules

INTF and EXTF LEDs

Fault Description
Internal fault The internal fault (INTF) LED indicates faults detected by the module
(INTF) within the module.
This LED indicates on the front of the module the status of the internal fault
diagnostic bit.
The LED remains lit until all internal faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until all
internal faults have been corrected and acknowledged.
External fault The external fault (EXTF) LED indicates faults detected by the module on
(EXTF) the process side.
This LED indicates on the front of the module the status of the external
fault diagnostic bit.
The LED remains lit until all external faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until all
external faults have been corrected and acknowledged.

System-Specific Diagnostic Information

Type of Fault LED Description

Module fault INTF/ This is the fault indicator set in the event of any fault detected
EXTF by the module.
Internal fault INTF The module has detected a fault within the module.
External fault EXTF The module has detected a fault on the process side.
Channel fault INTF/ Indicates that only certain channels contain faults.
EXTF
Front connector EXTF Between connections 1 and 2 of the front connector, there is a
missing jumper that checks the module.
Module not INTF The indicator remains from power on until the parameters have
assigned been transferred by the CPU. To function, the module has to
parameters know whether to use the default parameters or the parameters
you entered.
Wrong INTF One parameter or the combination of parameters is not valid.
parameters This indicator is set if, for example, you assign a measuring
range that the module cannot process.
Channel INTF/ This is set if the module can supply additional channel
information EXTF information in the event of a channel fault.
available
STOP state – This indicator is generated by the programmable digital input
module if the module has not been assigned parameters and
the first module cycle has not yet been completed. This
indicator is reset if all input values are in the transfer memory
after a warm restart of the CPU.
Internal voltage INTF The module checks that all the voltages required for the
failed function are available. If this fault is indicated, the module is
defective.

S7-400, M7-400 Programmable Controllers Module Specifications

5-4 A5E00069467-03
 Digital Modules

Type of Fault LED Description

EPROM fault INTF The module checks its program memory.
If this fault is indicated, the module is defective.
Fuse INTF One or more fuses on the module have blown and triggered
this fault.
Hardware INTF The module cannot initiate an interrupt because the previous
interrupt lost interrupt has not been acknowledged.
Interrupt events occur at a faster rate than the execution time
of the interrupt OB.
This fault indicates an error in the configuration of your system.

Channel-Specific Diagnostic Information

Type of Fault LED Description

Parameter error INTF A parameter is invalid if, for example, you set an impossible
input delay or the input delay in this byte does not match. The
relevant channel is deactivated.
Wire break EXTF In the wire-break check, a current flow is detected at the input.
A sensor circuit is required for this (2-wire BEROs are an
exception) so that even if the contact (sensor) is open a low
current will still flow.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-5
Digital Modules

5.3 Digital Input Module SM 421; DI 32 x 24 VDC

Order Number
6ES7 421-1BL00-0AA0

Characteristics
The SM 421; DI 32 x 24 VDC is a digital input module with the following
characteristics:
• 32 inputs, isolated in a group of 32, that is, all inputs are connected to a
common ground.
• Nominal load voltage: 24 VDC
• Suitable for switches and 2-wire proximity switches (BEROs, IEC1131 Type 2).

Note
The status LEDs indicate the process status.

Function Expansion as of Version 03

The lower nominal input area range is expanded from -3 V to -30 V when the
signal is “0”.
The rated input voltage for signal “0” is set: -30 V to 5 V.

S7-400, M7-400 Programmable Controllers Module Specifications

5-6 A5E00069467-03
 Digital Modules

Connection Diagram, Circuit Block Diagram of the Digital Output Module

SM 421; DI 32 x 24 VDC

Process Module

1
2
L+ 3 L+ t
4 0
5 1
6 2
7 3
8 4
9 5
10 6
11 7
12
13
14

Data memory and bus controller

t
15 0
16 1
17 2
18 3
19 4
20 5
21 6
22 7
23
24
25
26
t
27 0
28 1
29 2
30 3
31 4
32 5
33 6
34 7
35
36
37
38 t
39 0
40 1
41 2
42 3
43 4
44 5
45 6
46 7
47
M 48 M

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-7
Digital Modules

Technical Specifications of the SM 421; DI 32 x DC 24 V

Dimensions and weight Status, interrupts, diagnostics

Dimensions 25
290
210 Status display Green LED per
W
H
D (mm) channel
Weight Approx. 600 g Interrupts none
Module–specific data Diagnostics functions none
Number of inputs 32 Substitute value injection no
Length of cable Data for sensor selection
• Unshielded Max. 600 m Input voltage
• Shielded Max. 1000 m • Rated value 24 V DC
Voltages, currents, potentials • For signal ”1” 11 to 30 V
Rated supply voltage of 24 VDC • For signal ”0” –3 to 5 V
electronics L+ –30 to 5 V version
• Reverse polarity protec- yes 03 or later
tion Input current
• Stored energy time with none • For signal ”1” 6 to 8 mA
power failure • For signal ”0” < 6 mA
Number of simulta- 32 Input delay
neously driven inputs, max.
• For ”0” to ”1” 1.2 to 4.8 ms
Galvanic isolation
• For ”1” to ”0” 1.2 to 4.8 ms
• Between channels and yes
backplane bus Input characteristic IEC 1131- 2; type 2
Connection of Possible
• Between channels and no
2-wire BEROs
electronics pow. supply
• Permissible quiescent Max. 2,5 mA
• Between channels no
current
Permitted potent. difference
• Between different cir- 75 V DC/60 V AC
cuits
Insulation tested with
• Channels to backplane 500 V DC
bus
Current input
• From backplane bus Max. 30 mA
• From power Max. 30 mA
supply L+
Module power loss Typically 6 W

S7-400, M7-400 Programmable Controllers Module Specifications

5-8 A5E00069467-03
 Digital Modules

5.4 Digital input module SM 421;DI 32 x DC 24 V

Order number
6ES7 421-1BL01-0AA0

Properties
The SM 421;DI 32 x DC 24 V is a digital input module with the following properties:
• 32 inputs, optically isolated in one group of 32 – in other words, all inputs share
a common ground.
• Rated input voltage: 24 V DC
• Suitable for switches and 2–wire proximity switches (BEROs, IEC 1131,
Type 1).

Note
The status LEDs indicate the process status.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-9
Digital Modules

Connection Diagram, Circuit Block Diagram of the Digital Input Module

SM 421;DI 32 x 24 VDC

Process Module

1
2
L+ 3
4 0
5 1
6 2
7 3
8 4
9 5
10 6
11 7 M
12
13
14
15 0
16 1
17 2
18 3

Data register and bus driver

19 4
20 5
21 6
22 7
23
24
25
26
27 0
28 1
29 2
30 3
31 4
32 5
33 6
34 7
35
36
37
38
39 0
40 1
41 2
42 3
43 4
44 5
45 6
46 7
47
M 48 M

S7-400, M7-400 Programmable Controllers Module Specifications

5-10 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 421; DI 32 x DC 24 V

Dimensions and weight Status, interrupts, diagnostics

Dimensions 25
290
210 Status display Green LED per
W
H
D (mm) channel
Weight Approx. 500 g Interrupts none
Module–specific data Diagnostics functions none
Number of inputs 32 Substitute value injection no
Length of cable Data for sensor selection
• Unshielded Max. 600 m Input voltage
• Shielded Max. 1000 m • Rated value 24 V DC
Voltages, currents, potentials • For signal ”1” 13 to 30 V
Rated supply voltage of Not necessary • For signal ”0” -30 to 5 V
electronics L+ Input current
Number of simulta- 32 • For signal ”1” 7 mA
neously driven inputs, max.
• For signal ”0” < 1,3 mA
Galvanic isolation
Input delay
• Between channels and yes
backplane bus
• For ”0” to ”1” 1.2 to 4.8 ms
• For ”1” to ”0” 1.2 to 4.8 ms
• Between channels no
Input characteristic IEC 1131- 2; type 1
Permitted potential differen-
ce Connection of Possible
75 V DC/60 V AC
2-wire BEROs
• Between different cir-
cuits • Permissible quiescent Max. 1,5 mA
current
Insulation tested with
• Channels to backplane 500 V DC
bus
Current input
• From backplane bus Max. 20 mA
Module power loss Typically 6 W

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-11
Digital Modules

5.5 Digital Input Module SM 421; DI 16 x 24/60 VUC

Order Number
6ES7 421-7DH00-0AB0

Characteristics
The SM 421; DI 16 x 24/60 VUC is a digital input module with the following
characteristics:
• 16 inputs, individually isolated, that is, each input is connected to its own
ground.
• Nominal load voltage 24 VUC to 60 VUC
• Suitable for switches and 2-wire proximity switches (BEROs)
• Diagnostic capability
• Hardware interrupt capability (for rising and/or falling edge)
• Setting of input delay possible
• Wire-break detection

Note
The status LEDs indicate the process status.

S7-400, M7-400 Programmable Controllers Module Specifications

5-12 A5E00069467-03
 Digital Modules

Connection Diagram, Circuit Block Diagram of the SM 421; DI 16 x 24/60 VUC

Process Module
1 INTF
Front connector jumper
2 EXTF
3
L 4 0 Input
N Adapter Diagnostics
5 1N
L Input
6 1
N Adapter Diagnostics
7 2N
L 8 2
Input
N Adapter Diagnostics
9 3N
L Input
10 3
N Adapter Diagnostics
11 4N
12
13
14
L Input
15 4
N Adapter Diagnostics
16 5N
L Input
17 5
N Adapter Diagnostics
18 6N
L 19 6
Input
N Adapter Diagnostics

Data memory and bus controller

20 7N
L Input
21 7
N Adapter Diagnostics
22 8N
23
24
25
26
L Input
27 0
N Adapter Diagnostics
28 9N
L Input
29 1
N Adapter Diagnostics
30 10 N
L 31 2
Input
N Adapter Diagnostics
32 11 N
L 33 3
Input
N Adapter Diagnostics
34 12 N
35
36
37
38
L 39 4 Input
N Adapter Diagnostics
40 13 N
L 41 5
Input
N Adapter Diagnostics
42 14 N
L 43 6 Input
N Adapter Diagnostics
44 15 N
L 45 7
Input
N Adapter Diagnostics
46 16 N
47
48

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-13
Digital Modules

Hardware Interrupt
The SM 421; DI 16 x 24/60 VUC can trigger a hardware interrupt either at a rising
edge, a falling edge or at both edges of the input signal. The setting can be made
by channel and can be changed (in RUN) at any time. Irrelevant channels can be
assigned parameters so that they can be used as input channels without triggering
a hardware interrupt. You set the parameters with STEP 7.
If a hardware interrupt has been triggered by the module, no other channel can be
signaled by the system until the interrupt has been acknowledged. A diagnostic
interrupt can be triggered during this time. If a further edge change occurs on the
same channel during the time from triggering the hardware interrupt to
acknowledging it, the loss of the hardware interrupt is signaled to the system by
means of a diagnostic interrupt, other channels are subsequently signaled
following acknowledgement.
The interrupt-triggering channels are stored in the local data of the interrupt OBs
(OB40 to OB47). One bit is assigned per channel.
Channels are assigned in the hardware interrupt supplementary information.
The hardware interrupt supplementary information is two words long. These words
have bit numbers 0 to 31. Bits 16 to 31 are not assigned. In the assigned bits, the
bit numbers correspond to the channel numbers.

Parameters

SM 421; DI 16 x 24/60 VUC Digital Module Value Range

Static Parameters
Target CPU for interrupts 1/2/3/4
Wire-break check Yes/No
Input delay * 0.5 ms
3 ms
10/20 ms
Dynamic Parameters
Hardware interrupt enable Yes/No
Diagnostic interrupt enable Yes/No
Hardware interrupt at rising edge Yes/No
Hardware interrupt at falling edge Yes/No

*Only byte-wise parameter assignment possible; channel 0: 0 to 7 and channel 8: 8 to 15

Diagnostic Parameter
The module checks for internal and external faults. You can activate the individual
diagnostic types with YES. The diagnostic function is executed and any fault/error
is signaled by
• A diagnostic entry and
• A fault/error LED.

S7-400, M7-400 Programmable Controllers Module Specifications

5-14 A5E00069467-03
 Digital Modules

Diagnostic Type Remark

Wire break In the wire-break check, a current flow is detected at the input. A
sensor circuit is required for this (2-wire BEROs are an exception) so
that even if the contact (sensor) is open a low current will still flow.

Input Delay Parameter

The input delay is used to suppress any coupled interference. The parameter
assignment of the input delay is also dependent on the cable length selected.

For an Input Delay of

DC mode 3 ms und 0.5 ms
AC mode 10/20 ms

Note
If you select the value 0.5 ms as the input delay, do not select a diagnostic
function. The internal execution time for diagnostic functions can be greater than
0.5 ms.

Basic Requirements for Parameter Assignment

Only byte-wise setting of the input delay is possible, that is, the setting for
channel 0 applies to inputs 0 to 7 and the value for channel 8 applies to inputs 8 to
15. The parameters entered for remaining channels (1 to 7 and 9 to 15) must be
the same as the value 0 or 8 otherwise the relevant channels will be signaled as
being wrongly assigned. In the event of incorrect parameter assignment (unknown
input delay on channels 0 to 8), the entire group is signaled as being wrongly
assigned. The input data for these channels are then always 0.

Hardware Interrupt Enable Parameter

If you set the hardware interrupt enable parameter to YES for a digital input
module, an edge change on one of your inputs is signaled via a hardware interrupt.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

You can trace dynamic parameters via your user program.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-15
Digital Modules

Diagnostic Interrupt Enable Parameter

If you set the diagnostic interrupt enable parameter to YES, incoming and outgoing
fault/error events are signaled to you via interrupts.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

You can trace dynamic parameters via your user program.

Hardware Interrupt Parameter

The module can trigger a hardware interrupt for each channel in the event of an
edge change. You can select the edge by setting the parameter in each case to
Yes.
• Edge change from 0 to 1 (rising edge)
• Edge change from 1 to 0 (falling edge)
• Edge change from 0 to 1 and from 1 to 0
You must also have set the hardware interrupt enable parameter to YES.

Default Parameter Assignment

If you did not assign parameters to the module under STEP 7, all input channels
work in the default parameter setting following a warm restart. This means
specifically:

Default Parameters Value

Target CPU for interrupts CPU 1
Group diagnosis Deactivated
Input delay 3 ms
Diagnostic and hardware interrupts Disabled

LEDs
The SM 421; DI 16 x 24/60 VUC has two red LEDs for internal or external faults.

S7-400, M7-400 Programmable Controllers Module Specifications

5-16 A5E00069467-03
 Digital Modules

Diagnostic Functions
The SM 421; DI 16 x 24/60 VUC uses the following diagnostic options:

Address Meaning Location

0 7 0 Diagnostic byte 1 DS0/DS1
0
Module fault
Internal fault
External fault
Channel fault
Front connector missing
Not assigned
Wrong parameters
1 Diagnostic byte 2 DS0/DS1
7 0
0 0 0 1 1 1 1
Module class
Channel information available

2 7 0 Diagnostic byte 3 DS0/DS1

0 0 0 0 0 0 0
RUN/STOP

3 DS0/DS1
7 0 Diagnostic byte 4
0 0 0 0 0 0

EPROM fault

Hardware interrupt lost

4 DS1
7 0 Channel type
0 1 1 1 0 0 0 0
=^ 70 h : DI

5 DS1
7 0 Length of information per channel
0 0 0 0 1 0 0 0 ^ 8 bits long
=

6 DS1
7 0 Number of channels
0 0 0 1 0 0 0 0 ^ 16 : 16 channels on module
=

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-17
Digital Modules

Address Meaning Location

7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7

8 DS1
7 0 Channel fault vector

Fault occurred in channel 8

Fault occurred in channel 9
Fault occurred in channel 10
Fault occurred in channel 11
Fault occurred in channel 12
Fault occurred in channel 13
Fault occurred in channel 14
Fault occurred in channel 15

9 to 25 DS1
7 0 Diagnostic byte
(channel-specific)
0 0 0 0 0 0
Parameter error
Wire break

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

5-18 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 421; DI 16 x 24/60 VUC

Dimensions and Weight Data for Selecting a Sensor
Dimensions W x H x D (mm) 25x290x210 Input voltage
Weight approx. 600 g • Nominal value 24 to 60 VUC
Module-Specific Data • For signal “1” 15 to 72 VDC
15 to 72 VDC
Number of inputs 16 15 to 60 VAC
• Cable length unshielded • For signal “0” -6 to +6 VDC
0.5 ms input delay 100 m 0 to 5 VAC
3 ms input delay 600 m
10/20 ms input delay 600 m Frequency range for
AC signals 47 to 63 Hz
• Cable length, shielded 1000 m
Input current
Voltages, Currents, Potentials
• At signal “1” 4 to 10 mA
Nominal load voltage L+ –
Input delay time
• Reverse polarity protection –
• Can be set yes
Number of inputs that can be
controlled simultaneously 16
• At nominal value of the
input voltage typ. 3 ms
Galvanic isolation yes, using At “0” to “1” 1.2 to 4.8 ms
optocouplers At “1” to “0” 1.2 to 4.8 ms
• In groups of 1 • At nominal value of the
Current consumption input voltage typ. 0.5 ms
At “0” to “1” 0.2 to 0.8 ms
• from S7-400 bus (5 VDC) max. 150 mA
At “1” to “0” 0.2 to 0.8 ms
typ. 100 mA
• At nominal value of the
• From load current supply L+ –
input voltage typ. 10/20 ms
Power losses At “0” to “1” 2 to 15 ms
• Nominal operation 24 V max. 3.5 W At “1” to “0” 10 to 30 ms
• Nominal operation 48 V max. 6.5 W Connection of 2-wire BEROs possible
• Nominal operation 60 V max. 8.0 W • Permissible quiescent 0.5 to 2 mA 2)
current
Status, Interrupts, Diagnostics
Input characteristic curve 1)
Status indicated yes, green LED
per channel Sensor Switching
Interrupts Resistance circuit of the
• Hardware interrupt yes, can be set sensor for wire break
monitoring
• Diagnostic interrupt yes, can be set
• Nominal voltage 24 V 18 kΩ
Diagnostic functions yes, can be set (15 to 35 V)
• Fault indication on the • Nominal voltage 48 V 39 kΩ
module yes, red LED (30 to 60 V)
for internal fault yes, red LED
for external fault • Nominal voltage 60 V 56 kΩ
yes (50 to 72 V)
• Diagnostic information
display

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-19
Digital Modules

Test voltage
Voltage check
• Between the inputs 1500 VAC
• Between the inputs and the
central grounding point 1500 VAC
• Between S7-400 bus and
central grounding point 500 VDC
Module Cycle Times
• Without interrupt processing max. 250 s
• With hardware interrupt max. 450 s
processing
• With hardware interrupt and max. 2 ms
diagnostics

1) IEC 1131 gives no specifications for UC modules. However, the values have been adapted to IEC 1131 as
far as possible.
2) Minimum quiescent current is necessary in the case of wire-break monitoring.

S7-400, M7-400 Programmable Controllers Module Specifications

5-20 A5E00069467-03
 Digital Modules

5.6 Digital Input Module SM 421; DI 16 x 120/230 VUC

Order Number
6ES7 421-1FH00-0AA0

Characteristics
The SM 421; DI 16 x 120/230 VUC is a digital input module with the following
characteristics:
• 16 inputs, isolated
• Nominal input voltage:120/230 V AC/DC
• Suitable for switches and 2-wire proximity switches (BEROs)

Note
The status LEDs indicate the process status.

Block Diagram of the SM 421; DI 16 x 120/130 VUC

Terminal Terminal Terminal Terminal

block block block block

4 4 4 4

Group 4 Group 3 Group 2 Group 1

inputs inputs inputs inputs

4 4 4 4

Optocoupler Optocoupler Optocoupler Optocoupler

4 4 4 4

Filter Filter Filter Filter

4 4 4 4

Parallel → Serial

Bus
ASIC

S7-400 bus

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-21
Digital Modules

Connection Diagram, Circuit Block Diagram of the SM 421; DI 16 x 120/130 VUC

Process Module
1
2
3
4 0
5
6 1
7
8 2

Data memory and bus controller

9
10 3
11
12
13 1N
14
15 4
16
17 5
18
19 6
20
21 7
22
23
24 2N
25
26
27 0
28
29 1
30
31 2
32
33 3
34
35
36 3N
37
38
39 4
40
41 5
42
43 6
44
45 7
46
47
48 4N

S7-400, M7-400 Programmable Controllers Module Specifications

5-22 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 421; DI 16 x 120/130 VUC

Dimensions and Weight Data for Selecting a Sensor
Dimensions WxHxD 25 x 290 x 210 Input voltage
(mm) • Nominal value 120/230 VAC
Weight approx. 650 g • For signal “1” 79 to 264 VAC
Module-Specific Data 80 to 264 VDC
Number of inputs 16 • For signal “0” 0 to 40 V
Cable length Input current
• Unshielded 600 m • At signal “1” 2 to 5 mA
1000 m • At signal “0”
• Shielded 0 to 1 mA
Voltages, Currents, Potentials Input delay time
• Reverse polarity any polarity at • At “0” to “1” min. 5 ms
protection connection max. 25 ms

Number of inputs that

• At “1” to “0” min. 5 ms
max. 25 ms
can be controlled
simultaneously 16 Input characteristic In accordance with
• Up to 40 _C 16 at 120 V,
IEC 1131, Part 2
• Up to 60 _C 8 at 240 V Type of input
16 with fan in accordance with Type 1
subassembly IEC 1131
Galvanic isolation yes, using Connection of 2-wire
optocouplers proximity switches possible
• In groups of 4 • Permissible quiescent max. 1 mA
current
Operating frequency 47 to 63 Hz
Permissible potential
difference
• Between the groups 500 VAC
• Between input and the
central grounding point 1500 VAC
Current consumption
• From S7-400 bus max. 0.1 A
Power losses of the module typically 3.5 W
max. 19 W
Status, Interrupts, Diagnostics
Status indicated yes, green LED per
channel
Interrupts none
Diagnostic functions none

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-23
Digital Modules

5.7 Digital Input Module SM 421; DI 32 x 120 VUC

Order Number
6ES7 421-1EL00-0AA0

Characteristics
The SM 421; DI 32 x 120 VUC is a digital input module with the following
characteristics:
• 32 inputs, isolated
• Nominal input voltage:120 V AC/DC
• Suitable for switches and 2-wire proximity switches (BEROs)

Note
The status LEDs indicate the process status.

Block Diagram of the SM 421; DI 32 x 120 VUC

Terminal Terminal Terminal Terminal

block block block block

8 8 8 8

Group 4 Group 3 Group 2 Group 1

Inputs Inputs Inputs Inputs

8 8 8 8

Optocoupler Optocoupler Optocoupler Optocoupler

8 8 8 8

Filter Filter Filter Filter

8 8 8 8

Parallel → Serial

Bus
ASIC

S7-400 bus

S7-400, M7-400 Programmable Controllers Module Specifications

5-24 A5E00069467-03
 Digital Modules

Connection Diagram, Circuit Block Diagram of the SM 421; DI 32 x 120 VUC

Process Module
1
2
3
4 0
5 1
6 2
7 3
8 4
9 5
10 6
11 7
12
13 1N

Data memory and bus controller

14
15 0
16 1
17 2
18 3
19 4
20 5
21 6
22 7
23
24 2N
25
26
27 0
28 1
29 2
30 3
31 4
32 5
33 6
34 7
35
36 3N
37
38
39 0
40 1
41 2
42 3
43 4
44 5
45 6
46 7
47
48 4N

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-25
Digital Modules

Technical Specifications of the SM 421; DI 32 x 120 VUC

Dimensions and Weight Data for Selecting a Sensor
Dimensions WxHxD 25 x 290 x 210 Input voltage
(mm) • Nominal value 120 VAC
Weight approx. 600 g • For signal “1” 79 to 132 VAC
Module-Specific Data 80 to 132 VDC
Number of inputs 32 • For signal “0” 0 to 20 V
Cable length Input current
• Unshielded 600 m • At signal “1” 2 to 5 mA
• Shielded 1000 m • At signal “0” 0 to 1 mA
Voltages, Currents, Potentials Input delay time
Nominal load voltage L+ 79 to 132 VAC / • At “0” to “1” min. 5 ms
max. 25 ms
80 to 132VDC
• Reverse polarity • At “1” to “0” min. 5 ms
any polarity at max. 25 ms
protection connection
Input characteristic In accordance
Number of inputs that with IEC 1131,
can be controlled Part 2
simultaneously 32
Type of input
Galvanic isolation yes, using in accordance with Type 1
optocouplers IEC 1131
• In groups of 8
Connection of 2-wire
Operating frequency 47 to 63 Hz proximity switches possible
Permissible potential • Permissible quiescent max. 1 mA
difference current
• Between the groups 250 VAC
• Between input and the
central grounding point 1500 VAC
Current consumption
• From S7-400 bus max. 0.2 A
Power losses of the module typ 6.5 W
max. 16 W
Status, Interrupts, Diagnostics
Status indicated yes, green LED per
channel
Interrupts none
Diagnostic functions none

S7-400, M7-400 Programmable Controllers Module Specifications

5-26 A5E00069467-03
 Digital Modules

5.8 Digital Input Module SM 421; DI 16 x 120 VAC

Order Number
6ES7 421-5EH00-0AA0

Characteristics
The SM 421; DI 16 x 120 VAC is a digital input module with the following
characteristics:
• 16 inputs, isolated
• Nominal input voltage: 120 VAC
• Suitable for switches and 2-wire proximity switches (BEROs, IEC1131 Type 2).

Block Diagram of the SM 421; DI 16 x 120 VAC

Terminal
block

16

Input
circuit

16

Optocoupler

16

Filter

16

Parallel → Serial

Bus
ASIC

S7-400 bus

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-27
Digital Modules

Connection Diagram of the SM 421; DI 16 x 120 VAC

16 digital inputs (16 grounds)

1
2
Byte 0 3
4 0
5 1N
6 1
7 2N
8 2
9 3N
10 3
11 4N
12
13
14
15 4
16 5N
17 5
18 6N
19 6
20 7N
21 7
22 8N
23
24
25
Byte 1 26
27 0
28 9N
29 1
30 10N
31 2
32 11N
33 3
34 12N
35
36
37
38
39 4
40 13N
41 5
42 14N
43 6
44 15N
45 7
46 16N
47
48

S7-400, M7-400 Programmable Controllers Module Specifications

5-28 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 421; DI 16 x 120 VAC

Dimensions and Weight Status, Interrupts, Diagnostics
Dimensions WxHxD (mm) 25 x 290 x 210 Status indicated yes, green LED per
channel
Weight approx. 650 g
Interrupts none
Module-Specific Data
Diagnostic functions none
Number of inputs 16
Data for Selecting a Sensor
Cable length
• Unshielded 600 m Input voltage
• Shielded 1000 m • Nominal value 120 VAC

Voltages, Currents, Potentials

• For signal “1” 72 to 132 VAC
• For signal “0” 0 to 20 V
Nominal load voltage L+ 74 to 132 VAC /
Input current
• Reverse polarity any polarity at
protection connection • At signal “1” 6 to 20 mA
• At signal “0” 0 to 4 mA
Number of inputs that 16, max. 60° C
can be controlled Input delay time
simultaneously • At “0” to “1” max. 2 ms
Galvanic isolation yes, using max. 15 ms
optocouplers • At “1” to “0” min. 5 ms
• In groups of 1 max. 25 ms
Type of input
Operating frequency 47 to 63 Hz
in accordance with Type 2
Permissible potential IEC 1131
difference
Connection of 2-wire
• Between the groups 250 VAC proximity switches possible
• Between input and the • Permissible quiescent max. 4 mA
central grounding point 1500 VAC current
Current consumption
• From S7-400 bus max. 0.1 A
Power losses of the module typically 3.0 W
max. 10 W

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-29
Digital Modules

5.9 Digital Output Module SM 422; DO 16 x 20 to 120 VAC/2 A

Order Number
6ES7 422-5EH00-0AB0

Characteristics
The SM 422; DO 16 x 20 to 120 VAC/2 A is a digital output module with the
following characteristics:
• 16 outputs, isolated in groups of 1
• Nominal output voltage: 20 to 120 VAC
• Diagnostic interrupt capability
• Output level selectable in STOP mode

Fault/Error Messages via LEDs

Faults are indicated to you via the following LEDs on the front of the module:
• INTF (internal faults): fuse blown, parameter error, or EPROM fault
• EXTF (external faults): front connector missing

Fault/Error Messages
You can use SFCs to read out system-wide, module-specific, and channel-specific
diagnostic messages from the module at any time.
You can read the fault cause from the diagnostic buffer in STEP 7.

S7-400, M7-400 Programmable Controllers Module Specifications

5-30 A5E00069467-03
 Digital Modules

Block Diagram of the SM 422; DO 16 x 20 to 120 VAC/2A

Logic / Process Side User / Field Side

Isolation boundary

Outputs
Backplane 16 galv. Front
bus Control logic isolated connector
outputs
(Fuse, Triac, L x 16
P bus Bus Buffer x16
EPROM 16 LEDs overvoltage
ASIC
16 optos protector) Q x 16

x16 x16

Error Micro- Diagnostic x16

buffer Fuse fault
LEDs processor
16 optos

Front
connector
plugged

Diagnostics

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-31
Digital Modules

Connection Diagram of the SM 422; DO 16 x 20 to 120 VAC/2 A

16 digital outputs (16 grounds)

1 INTF
2 EXTF
Byte 0 3
4 0
5 1L1
6 1
7 2L1
8 2
9 3L1
10 3
11 4L1
12
13
14
15 4
16 5L1
17 5
18 6L1
19 6
20 7L1
21 7
22 8L1
23
24
25
Byte 1 26
27 0
28 9L1
29 1
30 10L1
31 2
32 11
33 3
34 12L1
35
36
37
38
39 4
40 13L1
41 5
42 14L1
43 6
44 15L1
45 7
46 16L1
47
48

S7-400, M7-400 Programmable Controllers Module Specifications

5-32 A5E00069467-03
 Digital Modules

Diagnostic Parameter
The module checks for internal and external faults. You can activate the individual
diagnostic types under “Module Properties” in STEP 7.
• Fuse fault: the module monitors all outputs and checks the fuses. For the fuse
monitoring function to work, the load voltage and load must be connected.

Diagnostic Interrupt Enable Parameter

If you set the diagnostic interrupt enable parameter to YES, incoming and outgoing
fault/error events are signaled to you via interrupts.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

Default Parameters
If you have not assigned parameters to the relevant module using STEP 7, all
output channels will work with the default settings of all parameters after a warm
restart.

Default Parameters Value

Target CPU for interrupts CPU 1
Group diagnosis Deactivated
Status of outputs in STOP All outputs deactivated

Note
Startup of the digital modules with the default parameters is only possible in the
CR.

Static and Dynamic Parameters of the SM 422; DO 16 x 20 to 120 VAC/2 A

Parameter Value Range

Static parameters (Data Set 0)
Target CPU for interrupts 1 to 4
Check for fuse failure On/off for each output
Dynamic parameters (data set 1)
Diagnostic interrupt enable On/off

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-33
Digital Modules

Parameter Value Range

Switch substitute value/retain last value SSV/RLV
Substitute values On/off for each output

You can change dynamic parameters in the user program via SFC instructions.

Diagnostic Functions
You can display the following diagnostic information from the SM422; DO16 x 20 to
120 VAC/2A with SFC51.

Address Meaning Location

0 Diagnostic byte 1 DS0/DS1
7 0
0
Module fault
Internal fault
External fault
Channel fault
Front connector missing
Not assigned
Wrong parameters

1 Diagnostic byte 2 DS0/DS1

7 0
0 0 0 1 1 1 1
Module class
Channel information available

2 7 0 Diagnostic byte 3 DS0/DS1

0 0 0 0 0 0 0
RUN/STOP

3 DS0/DS1
7 0 Diagnostic byte 4
0 0 0 0 0 0 0

EPROM fault

4 DS1
7 0 Channel type
0 1 1 1 0 0 1 0
^ 72 h : DO
=

S7-400, M7-400 Programmable Controllers Module Specifications

5-34 A5E00069467-03
 Digital Modules

Address Meaning Location

5 7 0 Length of information per channel DS1
0 0 0 0 1 0 0 0 ^ 8 bits long
=

6 DS1
7 0 Number of channels
0 0 0 1 0 0 0 0 ^ 16 : 16 channels on module
=

7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7

8 DS1
7 0 Channel fault vector

Fault occurred in channel 8

Fault occurred in channel 9
Fault occurred in channel 10
Fault occurred in channel 11
Fault occurred in channel 12
Fault occurred in channel 13
Fault occurred in channel 14
Fault occurred in channel 15

9 to 25 DS1
7 0 Diagnostic byte (channel-specific)
0 0 0 0 0 0
Parameter error
Fuse failed

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-35
Digital Modules

Technical Specifications of the SM 422; DO 16 x 20 to 120 VAC/2 A

Dimensions and Weight Data for Selecting an Actuator
Dimensions WxHxD (mm) 25 x 290 x 210 Output voltage
Weight approx. 800 g • Voltage dip max. 1.5 VRMS
Module-Specific Data Output current (per output)
Number of outputs 16 • Nominal value
Voltages, Currents, Potentials • Permissible range for 2A

Nominal load voltage L+ 20 V to 132 VAC 0 _C to 60 _C 2A

• Reverse polarity no • Minimum current

protection • Max. surge current 100 mA
Total current of the outputs without fan/with fan • Leakage current max. 20 A / 2 cycles
• Up to 25_ C 20 A 32 A max. 4.5 mA/132 V
• Up to 40_ C 16 A 24 A max. 2.5 mA/30 V
Zero crossing no outputs with zero
• Up to 60_ C* 7A 16 A
crossing
Galvanic isolation yes, using
Size of motor starter max. size 5 in
optocouplers
accordance with
• In groups of 1 NEMA
Operating frequency 47 to 63 Hz Lamp load max. 50 W
Permissible potential Parallel wiring of 2 outputs no
difference Setting a digital input yes
• Between the groups 250 VAC Switching frequency max.
• Between input and the • At resistive load 10 Hz
central grounding point 1500 VAC
• At inductive load 0.5 Hz
Current consumption
• At lamp load 1 Hz
• from S7-400 bus max. 600 mA
(5 VDC) Short-circuit protection of 8 A fuse, 125V, 2AG
the outputs (1 fuse per (16 required)
• From each group max. 0 mA group)
(without load)
• Current required to at least 40 A
Power losses of the typically 20 W switch off fuse
module
• Pre-arcing time typically 33 ms
Status, Interrupts, Diagnostics
Equivalent fuses 8 A fuse, fast
Status indicated yes, green LED per
channel
• Little fuse 225.008
Interrupts yes
* Neighboring outputs should not be operated with
Diagnostic interrupt yes, can be set maximum current
Diagnostic functions yes, can be set
• Fault indication on the
module
for internal fault yes, red LED (INTF)
for external fault yes, red LED (EXTF)
• Diagnostic information yes
display

Warning
! May cause personal injury.
When you change a fuse without disconnecting the front connector from the
module, you may experience injury from an electric shock.
Remove the front connector before you change a fuse.

S7-400, M7-400 Programmable Controllers Module Specifications

5-36 A5E00069467-03
 Digital Modules

5.10 Digital Output Module SM 422; DO 32 x 24 VDC/0.5 A

Order Number
6ES7 422-1BL00-0AA0

Characteristics
The SM 422; DO 32 x 24 VDC/0.5 A is a digital output module with the following
characteristics:
• 32 outputs, isolated in a group of 32, that is, all outputs are connected to a
common ground
• Output current 0.5 A
• Nominal load voltage: 24 VDC

Note
The status LEDs indicate the system state even if the front connector is not
plugged in.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-37
Digital Modules

Connection Diagram of the SM 422; DO 32 x 24 VDC/0.5 A

Process Module
1
1L+
2
3 1L+
4 0
5 1
6 2
7 3
8 4

Data memory and bus controller

9 5
6
11 7
12
2L+ 13 2L+
14 2L+
15 0
16 1
17 2
18 3
19 4
20 5
21 6
22 7
23
24
3L+ 25 3L+
26 3L+
27 0
28 1
29 2
30 3
31 4
32 5
33 6
34 7
35
36
4L+ 37 4L+
38 4L+
39 0
LED control

40 1
41 2
42 3
43 4
44 5
45 6
46 7
47
48 M
L+ M

S7-400, M7-400 Programmable Controllers Module Specifications

5-38 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 422; DO 32 x 24 VDC/0.5 A

Dimensions and Weight Data for Selecting an Actuator
Dimensions WxHxD (mm) 25 x 290 x 210 Output voltage
Weight approx. 600 g • At signal “1” min. L+ (-0.3 V)
Module-Specific Data Output current
Number of outputs 32, 24 VDC • At signal “1”
Nominal value 0.5 A
Cable length Permissible range 5 mA to 0.6 A
• Unshielded 600 m • At signal “0” (residual max. 0.3 mA
• Shielded 1000 m current)
Voltages, Currents, Potentials Lamp load max. 5 W
Nominal load voltage L+ 24 VDC Parallel switching of 2
Permissible range 20.4 V to 28.8 VDC outputs (same group)
Total current of the outputs • For enhancing
(for each supply voltage performance possible
group of 8 outputs) • For logic operations possible
• Up to 35 oC 4A Setting a digital input yes
• Up to 60 oC 2A Switching frequency max.

Galvanic isolation yes, using

• At resistive load 100 Hz
optocouplers • At inductive load 2 Hz at 0.3 A
0.5 Hz at 0.5 A
• In groups of 32
Switching delay max. 1 ms
Current consumption Inductive cutoff voltage
• from S7-400 bus max. 200 mA limited (internally) to - 27 V
(5 VDC) typically 160 mA Short-circuit protection of
• From load current supply max. 30 mA the output1 yes, electronically
L+ (without load) clocked
Power losses of the typically 4 W • Switching threshold 0.7 to 1.5 A
module Test voltage
Status, Interrupts, Diagnostics Voltage check
Status indicated yes, green LED per • Between output group 500 VDC
channel and central grounding
point
Interrupts none
• Between S7-400 bus 500 VDC
Diagnostic functions none and central grounding
point

1After a short-circuit there is no guarantee of

switching on again under full load. Remedial
measures are:
• Change the signal at the output or
• Interrupt the load voltage of the module or
• Disconnect the load from the output
temporarily

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-39
Digital Modules

5.11 Digital Output Module SM 422; DO 16 x 24 VDC/2 A

Order Number
6ES7 422-1BH10-0AA0

Characteristics
The SM 422; DO 16 x 24 VDC/2 A is a digital output module with the following
characteristics:
• 16 outputs, isolated in two groups of 8, that is, each group of 8 outputs is
connected to the same ground.
• Output current 2 A
• Nominal load voltage: 24 VDC

Note
To start up the module, connect the nominal load voltage at least once to each
group of 8 outputs.
The status LEDs indicate the system state even if the front connector is not
plugged in.

Caution
! To commission the module, each group of 8 inputs must be supplied at least once
with rated load voltage (for example, connection of 1L and 3L). If a group is not
supplied – for example, due to a failure of 1L and 2L – all outputs including those
in the second group are turned off. The function of the status LED remains as it is.

S7-400, M7-400 Programmable Controllers Module Specifications

5-40 A5E00069467-03
 Digital Modules

Connection Diagram, Circuit Block Diagram of the SM 422; DO 16 x 24 VDC/2 A

Process Module

1
2
3 1L+
4 0
5
6 1
7

Data memory and bus controller

8 2
9
3
11
12
13 2L+
14 2L+
15 4
16
17 5
18
19 6
20
21 7
22
23 1M
24
25 3L+
26 3L+
27 0
28
29 1
30
31 2
32
33 3
34
35
36
37 4L+
38 4L+
39 4
40
41 5
42
LED control

43 6
44
45 7
46
47 2M
48 2M

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-41
Digital Modules

Technical Specifications of the SM 422; DO 16 x 24 VDC/2 A

Dimensions and Weight Data for Selecting an Actuator (for DC Outputs)
Dimensions WxHxD (mm) 25 x 290 x 210 Output voltage
Weight approx. 600 g • At signal “1” min. L+ (-0,5 V)
Module-Specific Data Output current
Number of outputs 16; 24 VDC • At signal “1”
Nominal value 2 A
Cable length
Permissible range
• Unshielded 600 m 5 mA to 2.4 A
• Shielded 1000 m
• At signal “0” (residual max. 0.5 mA
current)
Voltages, Currents, Potentials
Lamp load max. 10 W
Nominal load voltage L+ 24 VDC
Parallel switching of 2
Permissible range 20.4 to 28.8 VDC
outputs (same load voltage
Total current of the outputs group)
(for each supply voltage
• For enhancing not possible
group of 2 outputs)
performance
• Up to 20 oC 4 A
• For logic operations possible
• Up to 60 oC 2 A
Setting a digital input yes
Galvanic isolation yes, using
Switching frequency max.
optocouplers
• At resistive load 100 Hz
• In groups of 8
• At inductive load 0.2 Hz at 1 A
Current consumption
0.1 Hz at 2 A
• from S7-400 bus (5 VDC) max. 160 mA
typically 110 mA Switching delay max. 1 ms
• From load current supply Inductive cutoff voltage
L+ (without load) max. 30 mA limited (internally) to max. -30 V
Power losses of the module typically 5 W Short-circuit protection of yes, electronically
the output1 clocked
Status, Interrupts, Diagnostics
• Switching threshold 2.8 to 6 A
Status indicated yes, green LED per
channel Test voltage
Interrupts none Voltage check
Diagnostic functions none • Between output groups 500 VDC
• Between output group
and central grounding
point 500 VDC
• Between S7-400 bus and
central grounding point 500 VDC

1After a short-circuit there is no guarantee of

switching on again under full load. Remedial
measures are:
• Change the signal at the output or
• Interrupt the load voltage of the module or
• Disconnect the load from the output
temporarily

S7-400, M7-400 Programmable Controllers Module Specifications

5-42 A5E00069467-03
 Digital Modules

5.12 Digital Output Module SM 422; DO 8 x 120/230 VAC/5 A

Order Number
6ES7 422-1FF00-0AA0

Characteristics
The SM 422; DO 8 x 120/230 VAC/5 A is a digital output module with the following
characteristics:
• 8 outputs, isolated in groups of 1
• Nominal output voltage: 120/230 VAC

Note
The status LEDs indicate the system state even if the front connector is not
plugged in.

Block Diagram of the SM 422; DO 8 x 120/230 VAC/5 A

SM401 Serial - Triac

S7-400 Buffer Opto-triac
bus parallel output
P bus driver
ASIC conversion channel
(0-7)

Status
LEDs

Int./ext. Int./Ext.
Comparator Optocoupler
error error
indication detector

Galvanic
isolation

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-43
Digital Modules

Connection Diagram of the SM 422; DO 8 x 120/230 VAC/5 A

Process Module

1 INFT
2 EXTF
3 t
4 0
5 1L
6 F100
7 1N
8
9
10 1
11 2L
12 F200
13 2N
14

Data memory and bus controller

15 2
16 3L
17 F300
18 3N
19
20
21 3
22 4L
23 F400
24 4N
25
26
27 4
28 5L
29 F500
30 5N
31
32
33 5
34 6L
35 F600
36 6N
37
38
39 6
40 7L
41 F700
42 7N
LED control

43
44
45 7
46 8L
47 F800
48 8N

S7-400, M7-400 Programmable Controllers Module Specifications

5-44 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 422; DO 8 x 120/230 VAC/5 A

Dimensions and Weight Diagnostic functions yes
Dimensions WxHxD (mm) 25x 290 x 210 • Fault indication: fuse yes, red LED top; one
fault indicator for all fuses
Weight approx. 800 g
Module-Specific Data
• Fault indication: no yes, red LED bottom;
AC connection one indicator for all
Number of outputs 8 channels
Cable length Data for Selecting an Actuator
• Unshielded 600 m Output voltage
• Shielded 1000 m • Voltage dip
Voltages, Currents, Potentials At maximum current max. 1.55 VRMS
Nominal load voltage L 120/230 VAC At minimum current max. 10.7 VRMS
Permissible range 79 to 264 VAC Output current (per output)
• Reverse polarity – • Nominal value 5A
protection • Permissible range for
Total current of the without fan/with fan 0_ C to 60_ C 5A
outputs • Minimum current 10 mA
• Up to 20o C 20 A 28 A • Max. surge current max. 50 A per cycle
• Up to 40o C 16 A 24 A • Leakage current +55 V (isolated), max.
• Up to 60o C 8A 20 A • Residual current max. 3.5 mA
Galvanic isolation yes, using Zero crossing yes
optocouplers
Size of motor starter max. size 5 in
• In groups of 1 accordance with
Operating frequency 47 to 63 Hz NEMA
Permissible potential Lamp load max. 100 W
difference Parallel wiring of 2 outputs no
• Between the channels 500 VAC Setting a digital input yes
• Between input and the Switching frequency max.
central grounding point 1500 VAC • At resistive load 10 Hz
Current consumption
• At inductive load 0.5 Hz
• From S7-400 bus max. 250 mA
• At lamp load 1 Hz
• From each channel Short-circuit protection of 8 A fuse, 250 V (8)
(without load) max. 1.5 mA
the outputs (8 outputs)
Power losses of the max. 16 W
module
• Current required to min. 100 A
switch off fuse
Status, Interrupts, Diagnostics • Pre-arcing time max. 100 ms
Status indicated yes, green LED per Equivalent fuses 8 A fuse, fast
channel
• Wickmann 19 194-8 A
Interrupts none
• Schurter SP001.013
• Little fuse 217.008

Warning
! May cause personal injury.
When you change a fuse without disconnecting the front connector from the
module, you may experience injury from an electric shock.
Remove the front connector before you change a fuse.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-45
Digital Modules

5.13 Digital Output Module SM 422; DO 16 x 120/230 VAC/2 A

Order Number
6ES7 422-1FH00-0AA0

Characteristics
The SM 422; DO 16 x 120/230 VAC/2 A is a digital output module with the
following characteristics:
• 16 outputs, isolated in four groups of four channels
• Nominal output voltage: 120/230 VAC

Note
The status LEDs indicate the system state even if the front connector is not
plugged in.

Block Diagram of the SM 422; DO 16 x 120/230 VAC/2 A

SM401 Serial - Triac

S7-400 Buffer Opto-triac
bus parallel output
P bus driver
ASIC conversion channel
(0-15)

Status
LEDs

Int./ext. Int./Ext.
Comparator Optocoupler
error error
indication detector

Galvanic
isolation

S7-400, M7-400 Programmable Controllers Module Specifications

5-46 A5E00069467-03
 Digital Modules

Connection Diagram of the SM 422; DO 16 x 120/230 VAC/2 A

Process Module

16 digital outputs (4 grounds)

1 INTF
2 EXTF
Byte 0 3
4 0
5
6 1
7
8 2

Data memory and bus controller

9
10 3
11 1L
12 F1
13 1N
14
15 4
16
17 5
18
19 6
20
21 7
22 2L
23 F2
24 2N
25
Byte 1 26
27 0
28
29 1
30
31 2
32
33 3
34 3L
F3
35
36 3N
37
38
LED control

39 4
40
41 5
42
43 6
44
45 7
46 4L
47 F4
48 4N

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-47
Digital Modules

Technical Specifications of the SM 422; DO 16 x 120/230 VAC/2 A

Dimensions and Weight Data for Selecting an Actuator
Dimensions WxHxD (mm) 25x 290 x 210 Output voltage
Weight approx. 800 g • Voltage dip
At maximum current max. 1.3 VRMS
Module-Specific Data
At minimum current max. 18.1 VRMS
Number of outputs 16
Output current (per output)
Cable length
• Nominal value 2 A
• Unshielded 600 m
• Permissible range for 2A
• Shielded 1000 m 0_ C to 60_ C
Voltages, Currents, Potentials • Minimum current 10 mA
Nominal load voltage L 79 to 264 VAC • Max. surge current max. 50 A per cycle
• Reverse polarity – (per group)
protection • Leakage current max. 3.3 mA
Total current of the without fan/with fan • Residual current max. 2.6 mA
outputs (per group)
Zero crossing no zero-crossing
• Up to 20_ C 5A 7A switch
• Up to 40_ C 4A 6A Size of motor starter max. size 5 in
• Up to 60_ C 2A 5A accordance with
Galvanic isolation yes, using NEMA
optocouplers Lamp load max. 50 W
• In groups of 4 Parallel wiring of 2 outputs no
Operating frequency 47 to 63 Hz Setting a digital input yes
Permissible potential Switching frequency max.
difference • At resistive load 10 Hz
• Between isolated • At inductive load 0.5 Hz
groups 500 VAC • At lamp load 1 Hz
• Between input and the Short-circuit protection of 8 A fuse, 250 V (4)
central grounding point 1500 VAC the outputs (1 fuse per
Current consumption group) min. 100 A
• From S7-400 bus max. 400 mA • Current required to
• From each group switch off fuse max. 100 ms
(without load) max. 1.5 mA • Pre-arcing time
Power losses of the Equivalent fuses 8 A fuse, fast
module max. 16 W • Wickmann 19 194-8 A
Status, Interrupts, Diagnostics • Schurter SP001.013
Status indicated yes, green LED per • Little fuse 217.008
channel
Interrupts none
Diagnostic functions yes
• Fault indication: Fuse yes, red LED top; one
fault indicator for all fuses
• Fault indication: No AC yes, red LED bottom;
connection one indicator for all
channels

Warning
! May cause personal injury.
When you change a fuse without disconnecting the front connector from the
module, you may experience injury from an electric shock.
Remove the front connector before you change a fuse.

S7-400, M7-400 Programmable Controllers Module Specifications

5-48 A5E00069467-03
 Digital Modules

5.14 Relay Output Module SM 422; DO 16 x 30/230 VUC/Rel 5 A

Order Number
6ES7 422-1HH00-0AA0

Characteristics
The SM 422; DO 16 x 30/230 VUC/Rel 5 A is a relay output module with the
following characteristics:
• 16 outputs, isolated in 8 groups of two channels
• Nominal output voltage: 230 VAC/ 125 VDC

Note
The status LEDs indicate the system state even if the front connector is not
plugged in.

Circuit Block Diagram of the SM 422; DO 16 x 30/230 VUC/Rel 5 A

S7-400 bus

Output
disable Bus
logic ASIC

Ser → Par Ser → Par Ser → Par Ser → Par

4 4 4 4

Relay driver Relay driver Relay driver Relay driver

2 2 2 2 2 2 2 2

Group 8 Group 7 Group 6 Group 5 Group 4 Group 3 Group 2 Group 1

Relay Relay Relay Relay Relay Relay Relay Relay

2 2 2 2 2 2 2 2

Terminal Terminal Terminal Terminal Terminal Terminal Terminal Terminal

block block block block block block block block

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-49
Digital Modules

Connection Diagram of the SM 422; DO 16 x 30/230 VUC/Rel 5 A

1
2
3
4 0
5 1
6 1L
7
8

Data memory and bus controller

9 2
10 3
11 2L
12
13
14
15 4
16 5
17 3L
18
19
20 6
21 7
22 4L
23
24
25
26
27 0
28 1
29 5L
30
31
32 2
33 3
34 6L
35
36
37
38
LED control

39 4
40 5
41 7L
42
43
44 6
45 7
46 8L
47
48

S7-400, M7-400 Programmable Controllers Module Specifications

5-50 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 422; DO 16 x 30/230 VUC/Rel 5 A

Dimensions and Weight Data for Selecting an Actuator

Dimensions WxHxD (mm) 25x 290 x 210 Switching capacity of the
contacts
Weight approx. 700 g
• For resistive load 5 A/30 VDC/230 VAC
Module-Specific Data
1.2 A/60 VDC
Number of outputs 16 0.2 A/125 VDC
Cable length • For inductive load DC 5 A/30 VDC,
• Unshielded 600 m  = 7 ms max.),
• Shielded 1000 m
• For inductive load AC 5 A/230 VAC
(pf = 0.4)
Voltages, Currents, Potentials
Nominal load voltage L+ • Size of motor starter NEMA 5
• Permissible range 5 to 264 VAC Life span in accordance
5 to 125 VDC with IEC 947
Total current of the without fan/with fan • 15 AC 0.1 m. operating
outputs (per group) cycles
• Up to 40_ C 10 A 10 A • 13 DC 0.1 m. operating
• Up to 60_ C 5A 10A cycles
Galvanic isolation yes • Mechanical 3 m. operating cycles

• In groups of 2 Switching frequency max. 10 Hz

Permissible potential Note: In environments with high humidity and
difference where sparking at the relay contacts is possible,
• Between the groups 500 VAC use a spark suppressor. This increases the life
span of the relay contacts. A suitable spark
• Between the process suppressor is an RC element or a varistor
sideand the control 1500 VAC switched in parallel to the relay contact or the load.
side Dimension the suppressor depending on the load
Contact type Form A (see Installation Manual, Chapter 4).
Contact resistance max. 100 
Minimum load current 10 mA
Current consumption
• From S7-400 bus max. 1 A
Power losses of the typically 4.5 W
module max. 25 W

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-51
Digital Modules

5.15 Digital Output Module SM 422; DO 16 x 20 to 125 VDC/1.5 A

Order Number
6ES7 422-5EH10-0AB0

Characteristics of the SM 422; DO 16 x 20 to 125 VDC/1.5 A

• 16 outputs, with channel-by-channel overload protection and reporting
• Isolated and reverse-polarity protection in two groups of eight
• 20 to 125 VDC rated output voltage
• Diagnostic interrupt capability
• Output level selectable in STOP mode

Fault/Error Messages via LEDs

• INTF (internal faults): parameter error, or EPROM fault
• EXTF (external faults): output short circuit, voltage fault, or front connector
missing

Reading Error Messages with SFCs

You can use SFCs to read out module-specific, and channel-specific diagnostic
messages from the module at any time. You can read the fault cause from the
diagnostic buffer in STEP 7.

Block Diagram of the SM 422; DO 16 x 20 to 125 VDC/1.5 A

Logic/Process Side Isolation boundary User/Field Side

Backplane Field
bus Control logic Outputs x2 groups connection

P bus SM400 Buffers

EPROM green LEDs Transistor A x 16
ASIC
optocouplers outputs
Address bus
Data bus
Lx2
A x 16

Error Optocouplers Overload

Clock LEDs Micro- detection &
& diagnostic
processor shutdown
buffer

Reverse-polarity
protection & fault Lx2
detection
Front connector
detection
Diagnostics

S7-400, M7-400 Programmable Controllers Module Specifications

5-52 A5E00069467-03
 Digital Modules

Connection Diagram of the SM 422; DO 16 x 20 to 125 VDC/1.5 A

16 digital outputs (2 grounds)

1 INTF
2 EXTF
Byte 0 3
4 0
5
6 1
7
8 2
9
10 3
11
12
-+ 13 L1+
14 L1+
15 4
16
17 5
18
19 6
20
21 7
22
23 M1
24
25
Byte 1 26
27 0
28
29 1
30
31 2
32
33 3
34
35
36
-+ 37 L2+
38 L2+
39 4
40
41 5
42
43 6
44
45 7
46
47 M2
48 M2

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-53
Digital Modules

Diagnostic Parameter
The module checks for internal and external faults. You can activate the individual
diagnostic types under “Module Properties” in STEP 7.
• Missing load voltage: The module monitors the voltage supply for both output
groups. An error indicates that the voltage is too low (typically less than 14 V),
the L+ or M connection is missing, or a fuse has blown.
• Short circuit to ground: The module reports on a channel-by-channel basis
outputs that have been overloaded or shorted.

Diagnostic Interrupt Enable Parameter

If you set the diagnostic interrupt enable parameter to YES, incoming and outgoing
fault/error events are signaled to you via interrupts.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

Default Parameters of the SM 422; DO 16 x 20 to 125 VDC/1.5 A

If you have not assigned parameters to the relevant module using STEP 7, all
output channels will work with the default settings of all parameters after a warm
restart.

Default Parameters Value

Target CPU for interrupts CPU 1
Group diagnosis Deactivated
Status of outputs in STOP All outputs deactivated

Note
Startup of the digital modules with the default parameters is only possible in the
CR.

S7-400, M7-400 Programmable Controllers Module Specifications

5-54 A5E00069467-03
 Digital Modules

Static and Dynamic Parameters of the SM 422; DO 16 x 20 to 125 VDC/1.5 A

Parameter Value Range

Static parameters (data set 0)
Target CPU for interrupts 1 to 4
Load voltage L+ missing On/off per group
Short circuit to ground On/off for each output
Dynamic parameters (data set 1)
Diagnostic interrupt enable On/off
Switch substitute value/retain last value SSV/RLV
Substitute values On/off for each output

You can change dynamic parameters in the user program via SFC instructions.
The structure of the dynamic parameters for data set 1 is shown below:

Address Meaning Location

0 7 0 DS1
0 0 0 0 0 0
0 = Switch to substitute value
1 = Retain last value
0 = Disable diagnostic interrupt
1 = Enable diagnostic interrupt
1 7 0 DS1

Substitute value for channel 0

Substitute value for channel 1
Substitute value for channel 2
Substitute value for channel 3
Substitute value for channel 4
Substitute value for channel 5
Substitute value for channel 6
Substitute value for channel 7
2 7 0 DS1

Substitute value for channel 8

Substitute value for channel 9
Substitute value for channel 10
Substitute value for channel 11
Substitute value for channel 12
Substitute value for channel 13
Substitute value for channel 14
Substitute value for channel 15

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-55
Digital Modules

Diagnostic Functions
You can display the following diagnostic information from the
SM422; DO 16 x 20-120 VAC/1.5 A using SFC51.

Address Meaning Location

0 Diagnostic byte 1 DS0/DS1
7 0
0
Module fault
Internal fault
External fault
Channel fault
Front connector missing
Module not assigned parameters
Wrong parameters

1 Diagnostic byte 2 DS0/DS1

7 0
0 0 0 1 1 1 1
0FH: Module class
Channel information available

2 7 0 Diagnostic byte 3 DS0/DS1

0 0 0 0 0 0 0
Operating state RUN/STOP

3 DS0/DS1
7 0 Diagnostic byte 4
0 0 0 0 0 0 0

EPROM fault

4 DS1
7 0 Channel type
0 1 1 1 0 0 1 0
^ 72 H : DO (Digital Output)
=

5 DS1
7 0 Length of information per channel
0 0 0 0 1 0 0 0 ^ 8 bits long
=

6 Number of channels DS1

7 0
0 0 0 1 0 0 0 0 ^ 10H: 16 channels on module
=

S7-400, M7-400 Programmable Controllers Module Specifications

5-56 A5E00069467-03
 Digital Modules

Address Meaning Location

7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7

8 7 0 Channel fault vector DS1

Fault in channel 8
Fault in channel 9
Fault in channel 10
Fault occurred in channel 11
Fault in channel 12
Fault in channel 13
Fault in channel 14
Fault in channel 15
9 to 25 7 0 Diagnostic byte DS1
0 0 0 0 0 (channel-specific)

Parameter error
Short circuit to ground overload
Load voltage missing

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-57
Digital Modules

Technical Specifications of the SM 422; DO 16 x 20 to 125 VDC/1.5 A

Dimensions and Weight Data for Selecting an Actuator
Dimensions WxHxD (mm) 25x290x210 Output voltage
(1.0 x 11.4 x 8.3 in.) • Voltage dip max. 1.0 VDC
Weight approx. 800 g (28 oz.) Output current (per output)
Module-Specific Data • Nominal value 1.5 A
Number of outputs 16 • Permissible range for
Voltages, Currents, Potentials 0 _C to 60 _C 1.5 A
Nominal load voltage L+ 20 VDC to 138 VDC • Minimum current 10 mA
• Reverse polarity yes, fuse • Max. surge current max. 3 A at 10 ms
protection
• Leakage current max. 0.5 mA
Maximum module current without fan/with fan
On delay typically 1 ms
of outputs1
Off delay typically 10 ms
• Up to 25_ C (77_ F) 20 A 24 A
Parallel wiring of 2 outputs yes
• Up to 40_ C (104_ F) 16 A 21 A Setting a digital input yes
• Up to 60_ C (140_ F) 8A 14 A Short-circuit protection of Electronically
Galvanic isolation yes, using the outputs protected2
optocouplers Overload threshold typically 5 A
• In groups of 8 Reverse-polarity
Permissible potential protection for outputs 12.5 A fuse, 250 V,
difference (1 fuse per group) (2 required)
• Between the groups 250 VAC Equivalent fuses 12.5 A fuse, fast
• Between the process • Schurter SP001.1015
side and the control
side 1500 VAC 1 To obtain maximum performance, distribute high
Current consumption current loads between the two groups.
• from S7-400 bus 2 To reset an output that has tripped off, toggle the

(5 VDC) max. 700 mA output signal to 0 then 1.

• From each group If an output signal of 1 is written to a tripped output
(without load) max. 2 mA and the short circuit remains, additional interrupts
Power losses of the will be generated (provided that the diagnostic
module typically 10 W interrupt parameter has been enabled).
Status, Interrupts, Diagnostics
Status indicated yes, green LED per Note: When the power supply is switched on using a
channel mechanical contact, a voltage pulse may occur at
Interrupts yes the outputs. The duration of the transient pulse will
be less than 0.5 ms.
Diagnostic interrupt yes, can be set
Diagnostic functions yes, can be set
• Fault indication on the
module
for internal fault yes, red LED (INTF)
for external fault yes, red LED (EXTF)
• Diagnostic information yes
displayed

Warning
! May cause personal injury.
When you change a fuse without disconnecting the front connector from the
module, you may experience injury from an electric shock.
Remove the front connector before you change a fuse.

S7-400, M7-400 Programmable Controllers Module Specifications

5-58 A5E00069467-03
 Digital Modules

5.16 Digital Input Module SM 421; DI 16 x 120/230 VUC;

Input Characteristic to IEC1131, Type 2

Order Number
6ES7 421-1FH20-0AA0

Characteristics
The SM 421; DI 16 x 120/230 VUC; input characteristic to IEC 1131, Type 2 is a
digital input module with the following characteristics:
• 16 inputs, isolated in groups of 4
• Nominal input voltage: 120/230 VUC
• Characteristic to IEC 1131, Type 2
• Suitable for switches and 2-wire proximity switches (BEROs)

Note
The status LEDs indicate the process status.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-59
Digital Modules

Connection Diagram and Circuit Block Diagram of the

SM 421; DI 16 x 120/230 VUC

1
2
3
4 0
5
6 1
7

Data memory and bus controller

8 2
9
10 3
11
12
13 1N
14
15 4
16
17 5
18
19 6
20
21 7
22
23
24 2N
25
26
27 0
28
29 1
30
31 2
32
33 3
34
35
36 3N
37
38
39 4
40
41 5
42
43 6
44
45 7
46
47
48 4N

S7-400, M7-400 Programmable Controllers Module Specifications

5-60 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 421; DI 16 x 120/230 VUC

Dimensions and Weight Data for Selecting a Sensor
Dimensions WxHxD 25x 290 x 210 Input voltage
(mm) • Nominal value 120/230 VAC
Weight approx. 650 g • For signal “1” 74 to 264 VAC
Module-Specific Data 80 to 264 VDC
Number of inputs 16 • For signal “0” 0 to 40 V
Cable length Frequency range for 47 to 63 Hz
• Unshielded 600 m Input current
• Shielded 1000 m • At signal “1”
120 VAC typically AC 10 mA
Voltages, Currents, Potentials
typically DC 1.8 mA
• Reverse polarity any polarity at 230 V typically AC 14 mA
protection connection typically DC 2 mA
Number of inputs that can • At signal “0” AC 0 to 6 mA
be controlled 16 DC 0 to 2 mA
simultaneously Input delay time
Galvanic isolation yes • At “0” to “1”
• Between channels and • At “1” to “0” max. 25 ms
backplane bus yes max. 25 ms
• Between the channels yes Input characteristic in accordance with
• in groups of 4 IEC 1131, Type 2
Permissible potential Connection of 2-wire
difference proximity switches possible
• Between internal • Permissible quiescent max. 5 mA
ground and the inputs 250 VAC current
• Between the inputs of
different groups 500 VAC
Isolation checked with
• Channels to
backplane bus 1500 VAC
• Between the channels 2000 VAC
Current consumption
• From S7-400 bus max. 80 mA
Power losses of the typically 12 W
module max. 15 W
Status, Interrupts, Diagnostics
Status indicated yes, green LED per
channel
Interrupts none
Diagnostic functions none

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-61
Digital Modules

5.17 Digital Input Module SM 421; DI 16 x 24 VDC

Order Number
6ES7 421-7BH00-0AB0

Characteristics
The SM 421; DI 16 x 24 VDC is a digital output module with the following
characteristics:
• 16 inputs, isolated in two groups of eight channels
• Nominal input voltage: 24 VDC
• Suitable for switches and 2-wire proximity switches (BEROs, IEC1131 Type 2).
• Two short-circuit-proof sensor supplies for eight channels each
• External redundant supply to the sensor supply possible
• Group fault display for internal faults (INTF) and external faults (EXTF)
• Status indicated ”Sensor voltage (Vs) OK”
• Setting of input delay possible
• Hardware interrupt capability for rising and/or falling edge
• Substitute values can be set in the input rangere
• Diagnostic capability (wire-break detection, sensor supply fault)
• Diagnostic interrupt capability

Note
The status LEDs indicate the process state.

S7-400, M7-400 Programmable Controllers Module Specifications

5-62 A5E00069467-03
 Digital Modules

Connection Diagram, Circuit Block Diagram of the SM 421; DI 16 x 24 VDC

Monitor front connector

1 INTF
Monitor external auxiliary voltage 1L+
2 EXTF Monitor internal voltage
1L+ 3 1L+ 1L+
4 0
5
6 1
7
8 2
9
10 3
11
12
24 V 1M
13 1Vs
14
1L+
Short-circuit

Backplane bus connection

15 4
protection
16
17 5 Monitor sensor supply 1Vs
18
19 6
20
21 7
22
1M 23 1M
1M
24 1M Monitor external auxiliary voltage 2L+
25 2L+ Monitor internal voltage
2L+ 26 2L+
2L+
27 0
28
29 1
30
31 2
32
33 3
34
35
24 V
36 2M
Short-circuit 2L+
37 2Vs protection
38
39
4
40 Monitor sensor supply 2Vs
41
5
42
43
6
44
45
7
46
47
2M 2M
48 2M
2M
L+ M
24 V

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-63
Digital Modules

Note
To ensure that the wire break is detected, you will require an external sensor
protective circuit (10 to 18 k resistor (exception: operating 2-wire BEROs; no
additional protective circuit is necessary here). The resistor has to be connected in
parallel to the contact. The resistor should be positioned as close as possible to
the sensor. If the wire-break diagnostics are not assigned, this resistor is not
required.

Hardware Interrupt
If a hardware interrupt was triggered by the module, no further channel can be
registered until the interrupt is acknowledged by the system. Hardware interrupts
from channels not currently registered which occurred in the meantime are
subsequently signaled following acknowledgement. A diagnostic interrupt can be
triggered during this time. If a further edge change occurs on the same channel
during the time from triggering the hardware interrupt to acknowledging it, the loss
of the hardware interrupt is signaled to the system by means of a diagnostic
interrupt, other channels are subsequently signaled following acknowledgement.
The interrupt-triggering channels are stored in the local data of the interrupt OBs
(OB40 to OB47). One bit is assigned per channel.
The hardware interrupt supplementary information is two words long. These words
have bit numbers 0 to 31. Bits 16 to 31 are not assigned. In the assigned bits, the
bit numbers correspond to the channel numbers.

5.17.1 Parameters of the Digital Input Module SM 421; DI 16 x 24 VDC

Parameter Assignment Application

You can set the parameters using STEP 7.
The parameters set in this way are stored in the CPU during transfer from the
programming device to the S7-400. After downloading from the programming device
to the S7-400, the CPU then transfers these parameters to the relevant digital
modules.
In the RUN state of the CPU, you can change some of the parameters (dynamic
parameters) via SFC commands.
However, after a RUN  STOP, STOP  RUN transition, the parameters created
with STEP 7 come back into force.

Static and Dynamic Parameters of the SM 421; DI 16 x 24 VDC

If you did not assign parameters to the module under STEP 7, all input channels
work in the default parameter setting following a warm restart.

S7-400, M7-400 Programmable Controllers Module Specifications

5-64 A5E00069467-03
 Digital Modules

Digital Module Value Range Default Values Area Affected

SM 421; DI 16 x 24 VDC
Static Parameters
Target CPU for interrupt 1/2/3/4 1 Module
Diagnostics: load voltage L+ missing / Yes/No No Channel group
sensor supply missing
Diagnostics: wire break Yes/No No Channel
Input delay* (ms) 0.1 (DC) 3 (DC) Channel group
0.5 mA
3 (DC)
Dynamic Parameters
Hardware interrupt enable Yes/No No Module
Diagnostic interrupt enable Yes/No No Module
Hardware interrupt trigger: rising edge Yes/No No Channel
Hardware interrupt trigger: falling edge Yes/No No Channel
Behavior in case of fault Switch substitute value Switch substitute Module
(SSV)/ value (SSV)
Retain last value (RLV)
Switch substitute values 1 Yes/No No Module

*Parameter assignment only possible in groups of channels; channel 0: 0 to 7 and

channel 8: 8 to 15

Note
Starting up digital input modules with the default parameter assignments is only
possible in the CR.

5.17.2 Explanations of the Static Parameters

Target CPU for Interrupt Parameter

If more than one CPU is inserted in the rack, you can select the target CPU for
hardware and diagnostic interrupts with this parameter.

Diagnostic Parameter
The module checks for internal and external faults. You can activate the individual
diagnostic types with YES. The diagnostic function is executed and any fault/error
is signaled by
• A diagnostic entry and
• A fault/error LED.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-65
Digital Modules

Diagnostic Type Remark

Wire break In the wire-break check, a current flow is detected at the input. A
sensor circuit is required for this (2-wire BEROs are an exception) so
that even if the contact (sensor) is open a low current will still flow.
Load voltage L+ The module checks the load voltage and the sensor supply which is
missing/Sensor protected against short circuits on the module and is then fed to the
supply missing* contact.

*Parameter assignment only possible in groups of channels; channel 0: 0 to 7 and

channel 8: 8 to 15

Input Delay Parameter

The input delay is used to suppress any coupled interference. The parameter
assignment of the input delay is also dependent on the cable length selected.

5.17.3 Explanations of the Dynamic Parameters

You can trace dynamic parameters via your user program.

Hardware Interrupt Trigger Parameter

The module can trigger a hardware interrupt for each channel in the event of an
edge change. You can select the edge by setting the parameter in each case to
Yes.
• Edge change from 0 to 1 (rising edge)
• Edge change from 1 to 0 (falling edge)
• Edge change from 0 to 1 and from 1 to 0 (rising and falling edge)
You must also have set the hardware interrupt enable parameter to YES.
Irrelevant channels can be assigned parameters so that they can be used as input
channels without triggering a hardware interrupt.

Hardware Interrupt Enable Parameter

If you set the hardware interrupt enable parameter to YES for a digital input
module, an edge change on one of the inputs is signaled via a hardware interrupt.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

S7-400, M7-400 Programmable Controllers Module Specifications

5-66 A5E00069467-03
 Digital Modules

Diagnostic Interrupt Enable Parameter

If you set the diagnostic interrupt enable parameter to YES, incoming and outgoing
fault/error events are signaled to you via interrupts.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

Behavior in Case of Fault Parameter

You can set the parameter behavior in case of fault to “switch substitute value
(SSV)” or “retain last value (RLV)”.
This means that for channels signaled as faulty in the diagnostic process, the set
substitute value or the last valid value can be entered in the process data.
Channels assigned incorrect parameters always have the process value 0.

5.17.4 Basic Requirements for Parameter Assignment

Only byte-wise setting of the input delay is possible, that is, the setting for
channel 0 applies to inputs 0 to 7 and the value for channel 8 applies to inputs 8 to
15. The parameters entered for remaining channels (1 to 7 and 9 to 15) must be
the same as the value 0 or 8 otherwise the relevant channels will be signaled as
being wrongly assigned. Any hardware interrupts which occurred in the meantime
are subsequently signaled following acknowledgement.

Optimum Signal Propagation Times

You can achieve the fastest signal propagation time using the following settings:
• Both channel groups assigned an input delay of 0.1 ms
• All diagnostics (load voltage fault, wire break) are deactivated
• Diagnostic interrupt is not enabled.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-67
Digital Modules

5.17.5 Diagnostics

Fault/Error Messages via LEDs

• INTF (internal faults)
• EXTF (external faults)

Fault Description
Internal fault The internal fault (INTF) LED indicates faults detected by the module
(INTF) within the module.
This LED indicates on the front of the module the status of the internal fault
diagnostic bit.
The LED remains lit until all internal faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until all
internal faults have been corrected and acknowledged.
External fault The external fault (EXTF) LED indicates faults detected by the module on
(EXTF) the process side.
This LED indicates on the front of the module the status of the external
fault diagnostic bit.
The LED remains lit until all external faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until all
external faults have been corrected and acknowledged.

Status of the Sensor Supply

The sensor supply is protected against short-circuiting in groups of channels. The
lit green LEDs indicate that the sensor supply is not faulty.

Fault/Error Messages
You can use SFCs to read out system-wide and channel-specific diagnostic
messages from the module at any time.
You can read the cause of the fault from the diagnostic buffer.

Fault/Error Indication via Diagnostic Interrupt

If you have enabled the diagnostic interrupt, OB82 is called automatically. The
system diagnostic messages are then already available to you. You can use
SFC51 or SFC59 in OB82 to get detailed fault/error information (DS 1). The
diagnostic information remains consistent until you exit OB82, meaning the
information remains frozen. The diagnostic interrupt on the module is
acknowledged when you exit OB82.

Note
Fault/error messages are not possible via diagnostic interrupts if the module is
plugged into ER-1/ER-2.
If a diagnostic interrupt is enabled for a module in ER-1/ER-2, module diagnostics
can no longer be updated after the occurence of the first diagnostic message.

S7-400, M7-400 Programmable Controllers Module Specifications

5-68 A5E00069467-03
 Digital Modules

Diagnostic Messages of the SM 421; DI 16 x 24 VDC

Diagnostic Messages Area Affected by Diagnostics Can be set

Sensor supply missing Channel Yes
External auxiliary voltage missing Module No
Internal auxiliary voltage missing Module Yes
Wire break Channel Yes
Wrong parameters in module Module No

The diagnostic information is either assigned to the channel or to the whole

module.
The following list describes the individual fault types.

Type of Fault LED Description

Module fault INTF/ This is the fault indicator set in the event of any fault detected
EXTF by the module.
Internal fault INTF The module has detected a fault within the module.
External fault EXTF The module has detected a fault on the process side.
Channel fault INTF/ Indicates that only certain channels contain faults.
EXTF
External auxiliary EXTF The voltage required to operate the module (load voltage,
voltage missing sensor supply) is missing
Front connector EXTF Between connections 1 and 2 of the front connector, there is a
missing jumper that checks the module.
Module not INTF The indicator remains from power on until the parameters have
assigned been transferred by the CPU. To function, the module has to
parameters know whether to use the default parameters or the parameters
you entered.
Wrong INTF One parameter or the combination of parameters is not valid.
parameters This indicator is set if, for example, you assign a measuring
range that the module cannot process.
Channel INTF/ This is set if the module can supply additional channel
information EXTF information in the event of a channel fault.
available
STOP state – This indicator is generated by the programmable digital input
module if the module has not been assigned parameters and
the first module cycle has not yet been completed. This
indicator is reset if all input values are in the transfer memory
after a warm restart of the CPU.
Internal voltage INTF The module checks that all the voltages required for the
failed function are available. If this fault is indicated, the module is
defective.
EPROM fault INTF The module checks its program memory. If this fault is
indicated, the module is defective.
Hardware INTF The module cannot initiate an interrupt because the previous
interrupt lost interrupt has not been acknowledged.
Interrupt events occur at a faster rate than the execution time
of the interrupt OB.
This fault indicates an error in the configuration of your system.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-69
Digital Modules

Channel-Specific Diagnostic Information

Type of Fault LED Description

Parameter error INTF A parameter is invalid if, for example, you set an impossible
input delay or the input delay in this byte does not match. The
relevant channel is deactivated.
Wire break EXTF In the wire-break check, a current flow is detected at the input.
A sensor circuit is required for this (2-wire BEROs are an
exception) so that even if the contact (sensor) is open a low
current will still flow.
Sensor supply EXTF The sensor supply which is protected against short circuits on
missing the module and is then fed to the contact is not applied.

Diagnostic Functions of the SM 421; DI 16 x 24 VDC

Address Meaning Location

0 Diagnostic byte 1 DS0/DS1
7 0

Module fault
Internal fault
External fault
Channel fault
External auxiliary voltage missing
Front connector missing
Not assigned
Wrong parameters
1 7 0 Diagnostic byte 2 DS0/DS1
0 0 0 1 1 1 1
Module class
Channel information available
2 7 0 Diagnostic byte 3 DS0/DS1
0 0 0 0 0 0

RUN/STOP
Internal voltage failed
3 7 0 Diagnostic byte 4 DS0/DS1
0 0 0 0 0 0

EPROM fault

Hardware interrupt lost

4 7 0 Channel type DS1
0 1 1 1 0 0 0 0
^ 70 h : DI
=

S7-400, M7-400 Programmable Controllers Module Specifications

5-70 A5E00069467-03
 Digital Modules

Address Meaning Location

5 7 0 Length of information per channel DS1
0 0 0 0 1 0 0 0 ^ 8 bits long
=
6 7 0 Number of channels DS1
0 0 0 1 0 0 0 0 ^ 16 : 16 channels on module
=
7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7
8 7 0 Channel fault vector DS1

Fault occurred in channel 8

Fault occurred in channel 9
Fault occurred in channel 10
Fault occurred in channel 11
Fault occurred in channel 12
Fault occurred in channel 13
Fault occurred in channel 14
Fault occurred in channel 15
9 to 25 7 0 Diagnostic byte (channel-specific) DS1
0 0 0 0 0

Parameter error
Wire break
Sensor supply missing

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-71
Digital Modules

Causes of Faults and How to Repair Them

Note that the signal module must have the correct parameters set in order to be
able to detect a missing load voltage or sensor supply.

Diagnostic Messages Possible Causes of Faults How to Repair

Sensor supply missing Sensor supply overloaded Remove the overload
Sensor supply short circuit to ground Repair the short circuit
External auxiliary voltage The supply voltage L+ for the module Supply L+
missing is missing
Internal auxiliary voltage The supply voltage L+ for the module Supply L+
missing is missing
The module-internal fuse is defective Exchange the module
Wrong parameters in module Incorrect parameters transferred to Assign new parameters to the
the module module
EPROM fault Module defective Exchange the module
Hardware interrupt lost Hardware interrupts are arriving Change the interrupt processing
faster than the CPU can process in the CPU and reassign the
them module parameters if necessary
Wire break Wire break; an input line is not Check the external wiring of the
connected; an external sensor inputs; connect the sensor with
supply is missing 10 to 18 k

S7-400, M7-400 Programmable Controllers Module Specifications

5-72 A5E00069467-03
 Digital Modules

Response to Faults/Errors
The following table shows the input values of the module depending on possible
causes of faults.

Cause of Fault Parameter Assignment Process Value (May Depend on

Parameter Assignment)
Diagnostics Response to
Fault/Error
Module cannot be Cannot be 0 (all channels)
assigned parameters switched off
Wrong parameters Cannot be 0 (module/allincorrectly set channels)
(module/channel) switched off
Front connector SSV Set substitute value
missing
RLV Last valid value read in
Load voltage L+ Deactivated 0, provided contact is connected via sensor
missing (by groups of supply; process value if external sensor
channels) supply
Activated SSV Set substitute value
RLV Last valid value read in
Internal auxiliary Cannot be SSV Set substitute value
voltage missing switched off
RLV Last valid value read in
Sensor supply missing Deactivated 0
(activated via “load
Activated SSV Set substitute value
voltage L+ missing”)
RLV Last valid value read in
Wire break (by Deactivated 0
channel)
Activated SSV Set substitute value
RLV Last valid value read in
Hardware interrupt lost Cannot be Current process value (no SSV/RLV)
switched off
STOP state Cannot be Process data not updated
switched off

The process value of incorrectly set channels is connected with the “0” signal
independent of the parameter “Response to Fault/Error”.
If an input delay of 100 µs is assigned and the response to the fault is set to RLV
or the response to the fault is set to SSV and the substitute value is assigned as
“1”, if a fault occurs at a channel which had the process value “1”, “0” may briefly
be output as the process data and a hardware interrupt may be generated before
the last valid value or the substitute value (“1”) is displayed.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-73
Digital Modules

Influence of Supply Voltage and Operating State

The input values of the SM 421; DI 16 x 24 VDC; with hardware and diagnostic
interrupts are dependent on the supply voltage of the digital module and on the
operating state of the CPU.
The following table shows an overview of these dependencies.

CPU Operating State Supply Voltage L+ to Digital Input Value of Digital Module
Module
POWER ON RUN L+ present Process value
L+ missing 0 signal *)
STOP L+ present Process value
L+ missing 0 signal*)
POWER – L+ present –
OFF
L+ missing –

*) depends on the parameter assignment (see table above)

The failure of the supply voltage of the SM 421; DI 16 x 24 VDC; with hardware
and diagnostic interrupts is always displayed by the LED EXTF on the front panel
of the module and also entered in the diagnostic data.
The triggering of a diagnostic interrupt depends on the parameter assignment (see
Section 5.17.1).

S7-400, M7-400 Programmable Controllers Module Specifications

5-74 A5E00069467-03
 Digital Modules

Technical Specifications of the SM 421; DI 16 x 24 VDC

Dimensions and Weight Status, Interrupts, Diagnostics
Dimensions WxHxD (mm) 25x 290 x 210 Status indicated
Weight approx. 600 g
• Inputs yes, green LED
per channel
Module-Specific Data • Sensor supplies (Vs) yes, one green
Number of inputs 16 LED each
Cable length Interrupts
• Unshielded • Hardware interrupt yes, can be set
3 ms input delay max. 600 m • Diagnostic interrupt yes, can be set
0.5 ms input delay max. 50 m Diagnostic functions can be set
0.1 ms input delay max. 20 m • Group fault indicator
• Shielded – For internal fault red LED
3 ms input delay max. 1000 m (INTF)
0.5 ms input delay max. 70 m – For external fault red LED
0.1 ms input delay max. 30 m (EXTF)
Voltages, Currents, Potentials • Diagnostic information
displayed yes
Nominal load voltage L+ 24 VDC
• Reverse polarity yes Sensor Supply Outputs
protection Outputs 2
Number of inputs that can be Output voltage
controlled simultaneously 16 • Loaded min. L+(-2.5 V)
Galvanic isolation Output current
• Between channels and • Nominal value 120 mA
backplane bus yes • Permissible range 0 to 150 W
• Between the channels yes
in groups of 8 Additional redundant supply permitted
• Between L+ and Vs no Short-circuit protection yes, electronically
• Between L+1 and L+2
andVs1 and Vs2 yes Data for Selecting a Sensor
Permissible potential Input voltage
difference • Nominal value 24 VDC
• Between different circuits 75 VDC, 60 VAC • For signal “1” 11 to 30 V
• For signal “0” -30 to 5 V
Current consumption
• From backplane bus max. 130 mA Input current
(5 VDC) typically 100 mA • At signal “1” 6 to 12 mA
Input characteristic in accordance
• From load voltage supply max. 120 mA with IEC 1131,
L+ Part 2, Type 2
Power losses of the module typically 5 W Connection of 2-wire BEROs possible
Isolation checked with 500 VDC • Permissible quiescent max. 3 mA
current
Sensor Switching
Resistance circuit of the
sensor for wire break 10 to 18 k
monitoring
Time, Frequency
• Input delay typically 0.5 ms
• Internal preprocessing
time
– Same input delay for max. 0.07 ms
both channel groups
– Different input delay max. 0.12 ms
for both channel
groups

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-75
Digital Modules

5.18 Digital Output Module SM 422; DO 32 x 24 VDC/0.5 A

Order Number
6ES7 422-7BL00-0AB0

Characteristics
The SM 422; DO 32 x 24 VDC/0.5 A is a digital output module with the following
characteristics:
• 32 outputs, isolated in groups of eight channels
• Output current 0.5 A
• Nominal load voltage: 24 VDC
• Short-circuit protection of the outputs
• Parallel switching of 2 outputs for the redundant triggering of a load or to
increase performance
• Group fault display for internal faults (INTF)
• Group fault display for external faults (EXTF)
• Diagnostic capability
• Diagnostic interrupt capability
• Wire-break detection
• Short-circuit detection
• Substitute values can be set

Note
The status LEDs indicate the system state even if the front connector is not
plugged in.

S7-400, M7-400 Programmable Controllers Module Specifications

5-76 A5E00069467-03
 Digital Modules

Connection and Circuit Block Diagram of the SM 422; DO 32 x 24 VDC/0.5 A

1L+ monitoring 1
1L+ INTF
2
Fuse monitoring EXTF
3 1L+
1L+ +
Triggering Triggering 4
0
Channel 5
status 1
display 6
Diagnostics 2
7
3
8
Output status 4
9
5
10
6
11
7
1M 1M 12 1M

2L+ 13
2L+ 2L+ 14 2L+
+
0 15

1 16

2 17

3 18

4 19
5 20
Backplane bus connection

6 21
7 22
2M 23
2M
2M 24
3L+ 25
3L+ 3L+ 26 3L+
+
0 27
1 28
2 29
3 30
4 31
5 32
6 33
7 34
3M
3M 35
3M 36
4L+ 37
4L+ 4L+
4L+ 38
+
0 39
1 40
2 41
3 42
4 43
5 44
6 45
7 46
4M 47
4M 4M 48
L+

24V

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-77
Digital Modules

5.18.1 Parameters of the SM 422; DO 32 x 24 VDC/0.5 A Digital Output

Module

Parameter Assignment Application

You can assign parameters using STEP 7.
The parameters set in this way are stored in the CPU during transfer from the
programming device to the S7-400. After downloading from the programming device
to the S7-400, the CPU then transfers these parameters to the relevant digital
output modules.
In the RUN state of the CPU, you can change some of the parameters (dynamic
parameters) via SFC commands.
However, after a RUN  STOP, STOP  RUN transition, the parameters created
with STEP 7 come back into force.

Static and Dynamic Parameters of the SM SM 422; DO 32 x 24 VDC/0.5 A

If you did not assign parameters to the module under STEP 7, all input channels
work in the default parameter setting following a warm restart.

Digital Output Module SM 422; Value Range Default Values Area Affected
DO 32 x 24 VDC/0.5A
Static Parameters
Target CPU for interrupt 1/2/3/4 1 Module
Diagnostics: load voltage L+ missing Yes/No No Channel group
/ sensor supply missing
Diagnostics: wire break Yes/No No Channel
Short circuit to ground Yes/No No Channel
Short circuit to L+ Yes/No No Channel
Dynamic Parameters
Diagnostic interrupt enable Yes/No No Module
Reaction to CPU STOP Switch to substitute value Switch to Module
(SSV)/ substitute value
Retain last valid value (SSV)
(RLV)
Switch substitute values 1 Yes/No No Channel

Note
Starting up digital output modules with the default parameter assignments is only
possible in the CR.

S7-400, M7-400 Programmable Controllers Module Specifications

5-78 A5E00069467-03
 Digital Modules

5.18.2 Explanations of the Static Parameters

Diagnostic Parameter
The module checks for internal and external faults. You can activate the individual
diagnostic types with YES. The diagnostic function is executed and any fault/error
is signaled by
• A diagnostic entry and
• A fault/error LED.

Diagnostic Type Remark

Target CPU for Only relevant for multicomputing. This parameter determines the
interrupt CPU which receives the interrupts.
Diagnostics: load This parameter is used to switch on the monitoring and signaling of
voltage missing the load voltage by groups.
Diagnostics: wire This parameter is used to switch on the monitoring and signaling of a
break wire break by channels.
Short circuit to This parameter is used to switch on the monitoring and signaling of a
ground short circuit to ground by channels.
Short circuit to L+ This parameter is used to switch on the monitoring and signaling of a
short circuit to L+ by channels.

5.18.3 Explanations of the Dynamic Parameters

Diagnostic Interrupt Enable Parameter

If you set the diagnostic interrupt enable parameter to YES, incoming and outgoing
fault/error events are signaled to you via interrupts.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

Reaction to CPU STOP Parameter and Substitute Values Parameter

You can set the parameter reaction to CPU STOP to “switch to substitute value
(SSV)” or “retain last value (RLV)”.
This means that when the CPU goes into STOP, the set substitute value or the last
valid value is output to all channels.
Channels assigned incorrect parameters always have the output value 0.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-79
Digital Modules

5.18.4 Diagnostics

Fault/Error Messages via LEDs

• INTF (internal faults)
• EXTF (external faults).

Table 5-1 Internal Faults (INTF) and External Faults (EXTF)

Fault Description
Internal fault The internal fault (INTF) LED indicates faults detected by the module
(INTF) within the module.
This LED indicates on the front of the module the status of the internal fault
diagnostic bit.
The LED remains lit until all internal faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until all
internal faults have been corrected and acknowledged.
External fault The external fault (EXTF) LED indicates faults detected by the module on
(EXTF) the process side.
This LED indicates on the front of the module the status of the external
fault diagnostic bit.
The LED remains lit until all external faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until all
external faults have been corrected and acknowledged.

Fault/Error Messages
You can use SFCs to read out system-wide and channel-specific diagnostic
messages from the module at any time.
You can read the cause of the fault from the diagnostic buffer.

Fault/Error Indication via Diagnostic Interrupt

If you have enabled the diagnostic interrupt, OB82 is called automatically. The
system diagnostic messages are then already available to you. You can use
SFC51 or SFC59 in OB82 to get detailed fault/error information (DS 1). The
diagnostic information remains consistent until you exit OB82, meaning the
information remains frozen. The diagnostic interrupt on the module is
acknowledged when you exit OB82.

Note
Fault/error messages are not possible via diagnostic interrupt if the module is
plugged into ER-1/ER-2.
If a diagnostic interrupt is enabled for a module in ER-1/ER-2, module diagnostics
can no longer be updated after the occurence of the first diagnostic message.

S7-400, M7-400 Programmable Controllers Module Specifications

5-80 A5E00069467-03
 Digital Modules

Diagnostic Messages of the SM 422; DO 32 x 24 VDC/0.5 A

Diagnostic Messages Area Affected by Can be Set

Diagnostics
External auxiliary voltage Channel group Yes
missing/load voltage missing
Short circuit to L+ Channel Yes
Short circuit to ground Channel Yes
Wire break Channel Yes
Internal auxiliary voltage Channel group No
missing
Wrong parameters in Module/Channel No
module

The following list describes the individual fault types.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-81
Digital Modules

System-Specific Diagnostic Information

Type of Fault LED Description

Module fault INTF/ This is the fault indicator set in the event of any fault detected
EXTF by the module.
Internal fault INTF The module has detected a fault within the module.
External fault EXTF The module has detected a fault on the process side.
Channel fault INTF/ Indicates that only certain channels contain faults.
EXTF
External auxiliary EXTF Voltage necessary to operate the module (load voltage)
voltage missing missing.
Front connector EXTF Between connections 1 and 2 of the front connector, there is a
missing jumper that checks the module.
Module not INTF The indicator remains from power on until the parameters have
assigned been transferred by the CPU. To function, the module has to
parameters know whether to use the default parameters or the parameters
you entered.
Wrong INTF One parameter or the combination of parameters is not valid.
parameters
Channel INTF/ This is set if the module can supply additional channel
information EXTF information in the event of a channel fault.
available
STOP state – This message is generated by the digital output module if it is
not assigned parameters it requires and the first module cycle
is not yet completed.
EPROM fault INTF The module checks its program memory. If this fault is
indicated, the module is defective.
Internal auxiliary INTF This message results if the output is overloaded. If this fault is
voltage missing indicated, the module is defective.

Channel-Specific Diagnostic Information

Type of Fault LED Description

Parameter error INTF A parameter which only affects one channel is invalid.
Wire break EXTF Wire break between output and actuator or between actuator
and ground. Check wiring.
Load voltage EXTF Supply voltage L+ for the module missing.
missing
Short circuit to EXTF Overload of the output or short circuit of the output to ground.
ground Remedy short circuit or overload.
Short circuit to EXTF Short circuit of the output to L+. Check wiring of outputs.
L+

S7-400, M7-400 Programmable Controllers Module Specifications

5-82 A5E00069467-03
 Digital Modules

Diagnostic Functions of the SM 422; DO 32 x 24 VDC/0.5 A

Address Meaning Location

0 7 0 Diagnostic byte 1 DS0/DS1

Module fault
Internal fault
External fault
Channel fault
External auxiliary voltage missing
Front connector missing
Not assigned
Wrong parameters
1 Diagnostic byte 2 DS0/DS1
7 0
0 0 0 1 1 1 1

Module class
Channel information available
2 7 0 Diagnostic byte 3 DS0/DS1
0 0 0 0 0 0
RUN/STOP
Internal voltage failed
3 7 0 Diagnostic byte 4 DS0/DS1
0 0 0 0 0 0 0

EPROM fault
4 7 0 Channel type DS1
0 1 1 1 0 0 1 0
^ 72 h : DO
=
5 7 0 Length of information per channel DS1
0 0 0 0 1 0 0 0 ^ 8 bits long
=
6 7 0 Number of channels DS1
0 0 1 0 0 0 0 0 ^ 32 : 32 channels on module
=
7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-83
Digital Modules

Address Meaning Location

8 7 0 Channel fault vector DS1

Fault occurred in channel 8

Fault occurred in channel 9
Fault occurred in channel 10
Fault occurred in channel 11
Fault occurred in channel 12
Fault occurred in channel 13
Fault occurred in channel 14
Fault occurred in channel 15
9 7 0 Channel fault vector DS1

Fault occurred in channel 16

Fault occurred in channel 17
Fault occurred in channel 18
Fault occurred in channel 19
Fault occurred in channel 20
Fault occurred in channel 21
Fault occurred in channel 22
Fault occurred in channel 23
10 7 0 Channel fault vector DS1

Fault occurred in channel 24

Fault occurred in channel 25
Fault occurred in channel 26
Fault occurred in channel 27
Fault occurred in channel 28
Fault occurred in channel 29
Fault occurred in channel 30
Fault occurred in channel 31
11 to 42 7 0 DS1
Diagnostic byte
0 0 0 (channel-specific)
Parameter error
Short circuit to phase
Short circuit to ground
Wire break
Load voltage missing

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

5-84 A5E00069467-03
 Digital Modules

Causes of Faults and How to Repair Them

In the following table you will find the possible causes of faults which trigger
individual diagnostic messages and the appropriate measures to remedy the fault.

Diagnostic Messages Possible Causes of Faults How to Repair

Load voltage The supply voltage for the Supply L+
missing/external auxiliary module is missing
voltage missing
Internal auxiliary voltage Module overloaded Remove the overload, exchange module
missing Fuse in module defective
Parameter error/wrong Incorrect parameters transferred Assign new parameters to the module
parameters to the module
EPROM fault Module defective Exchange the module
Wire break Wire break between actuator and Check the wiring of the outputs
output or between actuator and
ground.
Channel unused (open) Disable ”diagnostics wire break” for the
channel via parameter assignment
Short circuit to ground Output overloaded Remove the overload
Short circuit of the output to Check the wiring of the outputs
ground
Short circuit to L+ Short circuit of the output to L+ Check the wiring of the outputs

Influence of Supply Voltage and Operating State

The output values of the SM 422; DO 32 x 24 VDC/0.5 A with diagnostic interrupt
are dependent on the supply voltage of the digital module and on the operating
state of the CPU.
The following table shows an overview of these dependencies.

CPU Operating State Supply Voltage L+ to Digital Output Value of Digital

Module Module
POWER ON RUN L+ present CPU value
L+ missing 0 signal
STOP L+ present Substitute value / last value
(0 signal default)
L+ missing 0 signal
POWER – L+ present 0 signal
OFF L+ missing 0 signal

The failure of the supply voltage of the SM 422; DO 32 x 24 VDC/0.5 A; with

diagnostic interrupt is always displayed by the LED EXTF on the front panel of the
module and also entered in the diagnostic data.
The triggering of a diagnostic interrupt depends on the parameter assignment.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 5-85
Digital Modules

Technical Specifications of the SM 422; DO 32 x 24 VDC/0.5 A

Dimensions and Weight Data for Selecting an Actuator
Dimensions WxHxD (mm) 25x 290 x 210 Output voltage
Weight approx. 600 g • At signal “1” min. L+ (-0.8 V)
Module-Specific Data Output current
• At signal “1”
Number of outputs 32
Nominal value 0.5 A
Cable length Permissible range 5 mA to 0.6 A
• Unshielded 600 m • At signal “0” (residual max. 0.5 mA
• Shielded 1000 m current)
Voltages, Currents, Potentials Output delay at resistive
load max. 0.1 ms
Nominal load voltage L+ 24 VDC
Load resistance range 48  to 4k
Total current of the outputs
(in groups of 8 outputs) Lamp load max. 5 W
• Up to 40o C 4A Parallel switching of
• Up to 60o C 2A 2 outputs (same group)
• For enhancing possible, with
Galvanic isolation performance current per output
• Between channels and 0.8 x Inom
backplane bus yes • For redundant control of possible
• Between the channels yes a load
• in groups of 8 Setting a digital input possible, 1 input in
acc. with IEC
Permissible potential
1131-2, Type 2
difference
• Between different Switching frequency
circuits 75 VDC, 60 VAC • At resistive load max. 100 Hz
Isolation checked with 500 VDC • At inductive load in acc.
with IEC 947-5-1, DC13 max. 2 Hz
Current consumption • At lamp load max. 2 Hz
• From backplane bus max. 200 mA
(5 VDC) Inductive cutoff voltage
• From load voltage max. 120 mA limited (internally) to L+ - 45 V
supply L+ (without load) Short-circuit protection of yes, electronically
Power losses of the module typically 8 W the output clocked
Status, Interrupts, Diagnostics Switching threshold 0.75 to 1.5 A
Status indicated yes, green LED per
channel
Interrupts
• Diagnostic interrupt can be set
Diagnostic functions
• Group fault indicator
For internal fault
(INTF) red LED
For external fault red LED
(EXTF)
• Diagnostic information possible
display

S7-400, M7-400 Programmable Controllers Module Specifications

5-86 A5E00069467-03
Analog Modules 6
Chapter Overview

Section Description Page

6.1 Setting the Type of Measurement and Measuring Ranges of 6-2
the Analog Input Channels
6.2 Parameters of the Analog Input Modules 6-5
6.3 Behavior of the Analog Input Modules 6-14
6.4 Connecting Thermocouples 6-16
6.5 Connecting Voltage Sensors 6-20
6.6 Connecting Current Sensors 6-21
6.7 Connecting Resistance Thermometers and Resistances 6-23
6.8 Isolated Measured Value Sensors 6-24
6.9 Parameters of the Analog Output Modules 6-25
6.10 Behavior of the Analog Output Module 6-27
6.11 Connecting Loads/Actuators to Analog Outputs 6-30
6.12 Analog Value Representation 6-31
6.13 Diagnostics of the Analog Modules 6-46
6.14 Analog Input Module SM 431; AI 8 x 13 Bits 6-50
(6ES7431-1KF00-0AB0)
6.15 Analog Input Module SM 431; AI 8 x 14 Bits 6-55
(6ES7431-1KF10-0AB0)
6.16 Analog Input Module SM 431; AI 8 x 14 Bits 6-68
(6ES7431-1KF20-0AB0)
6.17 Analog Input Module SM 431; AI 16 x 13 Bits 6-76
(6ES7431-0HH00-0AB0)
6.18 Analog Input Module SM 431; AI 16 x 16 Bits 6-83
(6ES7431-7QH00-0AB0)
6.19 Analog Input Module SM 431; AI 8 x RTD x 16 Bits 6-100
(6ES7 431-7KF10-0AB0)
6.20 Analog Input Module SM 431; AI 8 x 16 Bits 6-111
(6ES7 431-7KF00-0AB0)
6.21 Analog Output Module SM 432; AO 8 x 13 Bits 6-123
(6ES7432-1HF00-0AB0)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-1
Analog Modules

6.1 Setting the Type of Measurement and Measuring Ranges of the

Analog Input Channels

Introduction
There are two ways of setting the type of measurement and measuring ranges of
the analog input channels of the S7-400 analog modules.
• With a measuring range submodule and STEP 7.
• Using the wiring of the analog input channel and STEP 7.
The method used with the individual analog modules is module-specific and is
described in detail in the module section.
This section describes how to set the type of measurement and measuring range
using measuring range submodules.

Setting the Type of Measurement and Measuring Ranges via Measuring Range
Submodules
If the analog modules have measuring range submodules, they will be supplied
with the measuring range submodules plugged in.
You might have to reconnect the measuring range submodules to change the type
of measurement or measuring range. Please note that the measuring range
submodules are located on the analog input module side. It is therefore necessary
to make sure before installing the analog input module, whether or not you have to
set the measuring range submodules to another type of measurement and another
measuring range. The assignment of measuring range submodules to measuring
ranges is described under the relevant analog modules and printed on the module
next to the measuring range submodules.

Markings for the Measuring Range Submodules

Please note the marking points on the analog input module when reconnecting the
measuring range submodules.
The following figure shows you the position of the measuring range submodules
relative to the markings on the analog input module.

Marking points on the

analog module
AB
C

D
AB
C

Markings on the
AB
C

measuring range
D
submodule

S7-400, M7-400 Programmable Controllers Module Specifications

6-2 A5E00069467-03
 Analog Modules

If you must reset a measuring range submodule, proceed as follows:

1. Lever the measuring range submodule out of the analog input module using a
screwdriver.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-3
Analog Modules

2. Insert the measuring range submodule into the analog input module at the
desired setting (1).
3. The measuring range that points to marking point (2) is the one selected.

4. Proceed in this way for all measuring range submodules.

Settings for the Measuring Range Submodules

The possible settings for the measuring range submodules are: “A”, “B”, “C” and “D”.
You will find the assignment of setting to type of measurement and measuring
range in the description of the analog module.
The settings for the different types of measurement and measuring ranges are also
printed on the analog module.

S7-400, M7-400 Programmable Controllers Module Specifications

6-4 A5E00069467-03
 Analog Modules

6.2 Parameters of the Analog Input Modules

Introduction
Depending on their functionality, the analog input modules use a subset of the
parameters or value ranges listed below.

Parameter Assignment Tool

The tool for assigning parameters to analog modules is STEP 7. The parameters
set in this way are stored in the CPU during transfer from the programming device
to the S7-400. After downloading from the programming device to the S7-400, the
CPU transfers these parameters to the relevant analog modules. In addition, you
might have to set the measuring range submodules of the module to the required
position.
In the RUN state of the CPU, you can change some of the parameters (dynamic
parameters) via SFC commands. However, after a RUN  STOP, STOP  RUN
transition, the parameters created with STEP 7 come back into force.

Static Parameters of the Analog Input Modules

Static Parameters (Data Set 0)

Target CPU for interrupts (1 to 4)

The following settings can be made channel-by-channel:

Measuring range deactivated (Yes/No)

Voltage measuring range

± 25 mV
± 50 mV
± 80 mV
± 250 mV
± 500 mV
±1V
± 2.5 V
±5V
1 to 5 V
± 10 V

Current measuring range for 4-wire transducers

± 5 mA
± 10 mA
0 to 20 mA
4 to 20 mA
± 20 mA

Current measuring range for 2-wire transducers

4 to 20 mA

Resistance measuring range, 4-wire connection

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-5
Analog Modules

Static Parameters (Data Set 0)

48 
150 
300 
600 
6000 
Resistance measuring range, 3-wire connection

48 
150 
300 
600 
6000 

Resistance thermometers with linearization, 3-wire connection

Pt 100 climatic range

Pt 200 climatic range
Pt 500 climatic range
Pt 1000 climatic range
Ni 100 climatic range
Ni 1000 climatic range
Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range

Resistance thermometers with linearization, 4-wire connection

Pt 100 climatic range

Pt 200 climatic range
Pt 500 climatic range
Pt 1000 climatic range
Ni 100 climatic range
Ni 1000 climatic range
Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range

Thermocouples with linearization

Type B
Type N
Type E
Type R
Type S
Type J
Type L
Type T
Type K
Type U

S7-400, M7-400 Programmable Controllers Module Specifications

6-6 A5E00069467-03
 Analog Modules

Static Parameters (Data Set 0)

Diagnostics

Ground fault
Check for short circuit to ground
Check for short circuit to phase
Wire break
Reference channel check
Underflow
Overflow

Interference frequency suppression

None
50 Hz interference suppression
60 Hz interference suppression
400 Hz interference suppression

Smoothing

None
Weak smoothing
Medium smoothing
Strong smoothing

Reference junction

None
RTD on channel 0
Reference temperature value dynamic

End-of-cycle interrupt

Dynamic Parameters of the Analog Input Modules

Refer to Appendix B.3 for the structure of data set 1 in which the parameters for
the analog input modules are stored.

Dynamic Parameters (Data Set 1)

Basic setting

Hardware interrupt enable

Diagnostic interrupt enable
Reference temperature
The following settings can be made channel-by-channel:

Upper limit value

Lower limit value

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-7
Analog Modules

6.2.1 Explanations of the Analog Input Module Parameters

Type of Measurement / Measuring Range

Here you select a type of measurement for the relevant channel. You have the
option of selecting your measuring range for each type of measurement.

Type of Measuring Ranges Explanations

Measurement
Deactivated Use this parameter if no sensor is connected to this
channel and if you want to reduce the module cycle
time.
Voltage measuring  25 mV to  10 V
range
Current measuring  5 mA to 
20 mA
range, 4-wire
transducers
Current measuring 4 to 20 mA The sensor supply is protected against
range, 2-wire short-circuiting depending on the module. For this
transducers purpose, you must connect the load voltage to the
L+ and M terminals.
Resistance 0 to 48  to 0 to 6000  The 4-wire connection offers the highest possible
measuring range, accuracy. The line resistances are fully
4-wire connection compensated depending on the principle.
Resistance 0 to 48  to 0 to 6000  The error of the current-carrying line in the
measuring range, measuring circuit is compensated for by additional
3-wire connection measurements. The conversion time increases.
Resistance Platinum and nickel Characteristic temperature curves of different
thermometers with resistance thermometers resistance thermometers (RTDs) are stored in the
linearization read-only memory of the module. The converted
4-wire connection analog value is represented in units of 0.1o C in the
standard temperature range and 0.01o C in the
climatic temperature range. The gain is optimized
on the sensors with parameters set.
Resistance Platinum and nickel The error of the current-carrying line in the
thermometers with resistance thermometers measuring circuit is compensated for by additional
linearization measurements. The conversion time increases.
3-wire connection The converted analog value is represented in units
of 0.1o C in the standard temperature range and
0.01o C in the climatic temperature range. The gain
is optimized on the sensors with parameters set.
Thermocouples Type B (PtRh-PtRh) Characteristic temperature curves of different
with linearization Type N (NiCrSi-NiSi) thermocouples are stored in the read-only memory
of the module. The converted analog value is
Type E (NiCr-CuNi)
represented in units of 0.1o C. The gain is optimized
Type R (PtRh-Pt) on the sensors with parameters set.
Type S (PtRh-Pt)
Type J (Fe-CuNi acc. to DIN)
Type L (Fe-CuNi acc. to IEC)
Type T (Cu-CuNi acc. to IEC)
Type K (NiCr-Ni)
Type U (Cu-CuNi acc. to DIN)

S7-400, M7-400 Programmable Controllers Module Specifications

6-8 A5E00069467-03
 Analog Modules

Reference Junction
If you have connected a thermocouple, you have the following possible methods
for determining the reference junction:

Reference Explanations
Junction
None The module captures only the temperature difference between the
measuring junction and the free ends of the thermocouple or
equalizing conductor.
RTD on channel 0 Connect a platinum or nickel resistance thermometer at channel 0
that captures the reference junction in the climatic temperature range.
In this case, you can use any thermocouple types on the remaining
channels.
Reference Select this specification if there is a constant temperature at your
temperature reference junction or if the temperature of the reference junction is
captured by another module.
You can specify the temperature value in the “Reference
temperature” parameter and correct dynamically in RUN.

Reference Temperature
Here, you can specify the reference junction temperature in 0.01o C (climatic
temperature range) for capturing temperatures by means of thermocouples.
You can correct these parameters via your user program. This means you can
capture the reference junction temperature via another module.

Interference Frequency Suppression

The frequency of your AC line supply can interfere with the measured value
especially when measuring in the lower voltage ranges and when using
thermocouples. Specify here the line frequency applicable to your system.

Smoothing
The individual measured values are smoothed with digital filtering. Depending on
the module, you can choose between no smoothing, weak, medium, or strong
smoothing. The stronger the smoothing, the greater the time constant of the filter.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-9
Analog Modules

Diagnostics
Below is a description of the possible diagnostic types. The individual modules use
a subset of the diagnostic types listed, depending on their functionality. You will find
detailed information under the module descriptions.
The module checks for internal and external faults. You can activate the individual
diagnostic types with YES. The diagnostics are carried out and in the event of a
fault
• The value 7FFFH is indicated,
• A diagnostic entry is made, and
• This is indicated by the fault LED lighting up.
If you have deactivated diagnostics, the fault will not be indicated.
You cannot deactivate checks not listed here such as the check to see whether the
front connector is plugged in or if the load voltage is present.

Diagnostic Explanations
Type
Ground The module checks that the permissible common-mode voltage is being
fault observed.
Short circuit The sensor supply of 2-wire transducers is monitored for short circuit to the
to ground ground potential.
Reference You enable the group error signal of the reference junction here. If this
channel indicates an error, for instance, wire break on channel 0 or overflow of the
error reference temperature value, the reference channel error is signaled here for
the thermocouple channel to be set.
Underflow If the digitized measured value drops below the limit 8100H or the relevant
limit of the temperature sensor, the measured value is generally set to
8000H. If you have activated the monitor, a fault will be signaled as well.
Overflow If the digitized measured value exceeds the limit 7EFFH or the relevant limit
of the temperature sensor, the measured value is generally set to 7FFFH. If
you have activated the monitor, a fault will be signaled as well.
Wire break We distinguish between physical and computer wire-break checks.
• In the case of the physical wire-break check, a test current is sent across
the voltage or resistance sensor and the current flow is detected.
This procedure is normally only possible in the case of passive sensors
(thermocouples and resistance sensors).
In the case of active sensors, the function depends on the loop resistance
which is primarily determined by the internal resistance of the sensor.
If the module can no longer drive the test current against the connected
measured value sensor, a wire-break signal is generated in certain
circumstances at higher voltages. We therefore recommend that you
switch off the wire-break check completely in the measuring range 10 V
by means of STEP 7.
If you use an active re-adjusting sensor, the measured value can be
corrupted under certain circumstances. In this case, you should switch off
the wire-break check using STEP 7.
If you have wired a sensor to two modules in parallel, the check current of
one module would interfere with the capture of the measured value by the
other module. You must also switch off the wire-break check in this case.
• The computer wire-break check is executed in the life-zero measuring
ranges. If the value drops below the limit ED00H (-4864) (see Table 6-3
“Life-Zero Input Ranges”) this is interpreted as a wire break.

S7-400, M7-400 Programmable Controllers Module Specifications

6-10 A5E00069467-03
 Analog Modules

Diagnostic Interrupt Enable

If you set this parameter to YES, incoming fault events (first occurrence of the
fault) and outgoing fault events (signal after correction of the fault) are signaled to
you via an interrupt.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

End-of-Cycle Interrrupt Enable

With this parameter, you can synchronize a process with the cycle of the analog
input module.
Select the channel after whose processing a hardware interrupt is to be generated
as a synchronization signal.
Contents of the 4-byte supplementary information at an end-of-cycle interrupt:
FFFF FFFF.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

Hardware Interrupt at Limit Value

Enter a value for an upper and lower limit here. The module compares the digitized
measured value with these limits. If the measured value exceeds one of these
limits, a hardware interrupt is generated. If the upper limit is above the overrange
or if the lower limit is below the underrange, no comparison is made. You can
discover which channel has exceeded which limit in the 4 bytes of the hardware
interrupt supplementary information.

Contents of the 4 bytes 27 26 25 24 23 22 21 20 Byte

supplementary information
Analog SMs 2 bits per channel for marking the range
Upper limit value exceeded 7 6 5 4 3 2 1 0 0
in channel
Lower limit value exceeded 7 6 5 4 3 2 1 0 1
in channel
Upper limit value exceeded 15 14 13 12 11 10 9 8 2
in channel
Lower limit value exceeded 15 14 13 12 11 10 9 8 3
in channel

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-11
Analog Modules

Example
A hardware interrupt is also generated if the measured value comes back down
below the upper limit again or back up above the lower limit.

Measured value

Upper limit

Lower limit

t
Hardware interrupt
Upper limit
exceeded 1 0 0 0
Lower limit
exceeded 0 0 1 0

Note
If you use the module in the ER-1/ER-2, you must leave these parameters at their
default values because the interrupt lines are not available in the ER-1/ER-2.

Fault/Error Messages
The module supplies the value 7FFF for the inputs if
• Parameters do not match (validity check),
• Parameters and the set measuring range do not match,
• A parameter contains coding unknown to the module.
You will find specific basic requirements under the individual module descriptions.

Hardware Interrupt Enable

If you set this parameter to YES, hardware interrupt events such as end-of-cycle or
limit value violation are signaled to you via an interrupt.

Note
If you use the module in the ER-1/ER-2, you must set this parameter to NO
because the interrupt lines are not available in the ER-1/ER-2.

You can trace this parameter via your user program.

S7-400, M7-400 Programmable Controllers Module Specifications

6-12 A5E00069467-03
 Analog Modules

6.2.2 Default Parameters of the Analog Input Modules

Default Parameters
If you have not assigned parameters to the relevant module in STEP 7, all input
channels will work with the default settings of all parameters after a warm restart.
This means specifically:

Parameter Default Value

Type of Measurement Voltage
Measuring range  10 V
Group diagnosis Deactivated
Interference frequency suppression 50 Hz
Smoothing None
Reference junction None
End-of-cycle interrupt No
Diagnostic and hardware interrupts Disabled
Reference temperature 0000H
Upper limit values 7FFFH (no limit value comparison)
Lower limit values 8000H (no limit value comparison)

Note
Startup of the analog modules with the default parameters is only possible in the
CR.

Caution
! Danger of destroying the module.
If you have not set the measuring range submodules correctly, the module can be
destroyed.
Set the measuring range submodules correctly.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-13
Analog Modules

6.3 Behavior of the Analog Input Modules

Behavior in the Event of Failure of L+

Failure of the load current supply L+ of the analog module with diagnostic
capability is indicated per LED (EXTF) on the module for set 2-wire transducers. In
addition, this information is made available on the module (diagnostic entry).
The triggering of a diagnostic interrupt depends on the parameter assignment (see
Section 6.2).

Limit Range of the Analog Signals

The behavior of the analog modules depends on which part of the value range
contains the input values.

Measured Input Value LED Diagnostics Interrupt

Value in (EXTF)
Nominal range Measured – – –
value
Overrange / Measured – – –
underrange: value
Overflow 7FFFH Lights up* Entry made* Diagnostic interrupt*
Underflow 8000H Lights up* Entry made* Diagnostic interrupt*
Outside the set Measured – – Hardware interrupt*
limit value value

* Only for modules with diagnostic capability and depending on parameter assignment

If the measured value exceeds the overflow/underflow limit, an incoming diagnostic

interrupt is signaled. If the measured value exits the overflow/underflow range, an
outgoing diagnostic interrupt is signaled.
If the measured value exceeds a set limit value, a hardware interrupt is signaled
(regardless of the direction).

Effect of Faults/Errors
Faults/errors result in a diagnostic entry and a diagnostic interrupt in analog
modules with diagnostic capability and the relevant parameter assignment (see
Section 6.13). The LED on the analog module lights up.
Limit value comparisons are not carried out in the case of detected faults/errors.
The LED also lights up in the case of external faults, regardless of the operating
state of the CPU.

S7-400, M7-400 Programmable Controllers Module Specifications

6-14 A5E00069467-03
 Analog Modules

6.3.1 Conversion Time and Cycle Time of the Analog Input Channels

Conversion Time
The conversion time consists of the basic conversion time and the additional
conversion times for:
• Resistance measurement
• Wire-break monitoring
The basic conversion time depends on the conversion method (integrated method,
successive approximation) of the analog input channel. In the case of the
integrated conversion methods, the integration time is incorporated in the
conversion time. See the technical specifications for the integration times of the
individual analog modules. The integration time depends on the interference
frequency suppression you set with STEP 7.

Cycle Time
Analog-digital conversion and transfer of the digitized measured values to the
memory or along the backplane bus of the S7-400 takes place sequentially, that is,
the analog input channels are converted in order one after the other. The cycle
time; that is, the time until an analog input value has been converted again, is the
sum of the conversion times of all activated analog input channels of the analog
input module. Deactivate unused analog input channels in STEP 7 in order to
minimize the cycle time.
The figure below gives a breakdown of the cycle time for an n-channel analog input
module.

Conversion time channel 1

Conversion time channel 2

Cycle time

Conversion time channel n

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-15
Analog Modules

6.4 Connecting Thermocouples

Structure of Thermocouples
A thermocouple consists of
• The thermocouple (sensors) itself and
• The relevant installation and connection parts.
The thermocouple itself comprises two wires, made of different metals or metal
alloys, whose ends are soldered or welded together. There are different
thermocouple types, for example, K, J, N, depending on the different materials
used. The measuring principle is the same for all thermocouples regardless of their
type.

Measuring
junction
Thermocouple with plus and
minus shanks
Connection point
Equalizing conductor

Reference
junction
Supply lead
(Cu)

Point of capture for thermovoltage

°C

How Thermocouples Work

If the measuring junction is subjected to a temperature different from that of the
free ends of the thermocouple, a voltage, the thermovoltage, is generated at the
free ends.
The level of the thermovoltage depends on the difference between the temperature
of the measuring junction and the temperature at the free ends of the reference
junction as well as on the type of materials used in the thermocouple. Since a
thermocouple always captures a difference in temperature, the free ends on a
reference junction must always be kept at a known temperature in order to be able
to determine the temperature of the measuring junction.

S7-400, M7-400 Programmable Controllers Module Specifications

6-16 A5E00069467-03
 Analog Modules

Compensation of the Reference Junction Temperature

There are various methods of capturing the reference junction temperature in order
to determine an absolute temperature value from the difference in temperature
between the reference junction and the measuring junction.
You have the following options, depending on module type:

Method Explanations Parameter

Reference
Junction
No compensation If you only want to capture the temperature None
difference between the measuring junction
and the reference junction.
Use of a compensating You have already captured and None
box in the supply leads to compensated the reference junction
an individual temperature with the help of a
thermocouple compensating box looped into the supply
leads of an individual thermocouple. No
further processing is required in the module.
Use of a resistance You can capture the reference temperature RTD on
thermometer for capturing by means of a resistance thermometer channel 0
the reference junction (platinum or nickel) and have the module
temperature make the calculation for any thermocouple.
(recommended method)
Constant reference If the reference junction temperature is Reference
junction temperature constant and known, you can specify this temperature
(thermostat, ice bath) value in the dynamic parameters. value
Distributing the On one module, use a resistance Reference
thermocouples with the thermometer that measures the reference temperature
same reference junction junction temperature and set the reference value
over several modules junction parameter of the thermocouples
there as described above (RTD on channel
0). Read the climatic temperature value into
the CPU and transfer the value to the other
modules using SFC55.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-17
Analog Modules

Connecting Thermocouples
Connect the thermocouple directly or via equalizing conductors to the inputs of the
module. Independently of the other channels, each channel can use one of the
possible thermocouple types supported by the analog module.

M+
M-
M+
M-

Equalizing conductor
IC +:Constant current line (positive)
IC -:Constant current line (negative)
M +:Measuring line (positive)
M -:Measuring line (negative)

Figure 6-1 Connection of Isolated Thermocouples Without Compensation, with Internal

Compensation, or Use of the Reference Temperature Value

Non-Isolated Thermocouples
If you use non-isolated thermocouples, you must ensure that the permissible
common-mode voltage is maintained.

Extension to a Reference Junction

The thermocouples can be extended from their connection point to a point with as
constant a temperature as possible (reference junction) using equalizing
conductors.
The equalizing conductors are made of the same material as the thermocouple
wires. The supply leads are made of copper. In this case, you must not set internal
compensation. Correct polarity must be ensured, otherwise measuring errors can
result.

S7-400, M7-400 Programmable Controllers Module Specifications

6-18 A5E00069467-03
 Analog Modules

Using a Compensating Box

The effect of the temperature on the reference junction of a thermocouple (for
example, terminal box) can be equalized by using a compensating box.
The compensating box contains a bridging circuit that has been adjusted for a
specific reference junction temperature (compensation temperature). The
connections for the ends of the equalizing conductor of the thermocouple form the
reference junction.
If the actual reference temperature deviates from the compensation temperature,
the temperature-dependent bridge resistance changes. A positive or negative
compensation voltage is created that is added to the thermovoltage.
For compensating the analog input modules, use compensating boxes with the
reference junction temperature of 0_ C.
Please note:
• The compensating box must have an isolated supply.
• The power supply unit must have sufficient interference filtering, for example,
by a grounded shielding winding.

Compensation by Capturing the Reference Junction Temperature

If all the thermocouples connected to the inputs of the module have the same
reference junction, compensate as follows:

M+
M-
I C+
Equalizing
conductor I C-
M+
M-
M+
M-

Reference
Copper
junction conductor IC +:Constant current line (positive)
IC -:Constant current line (negative)
M +:Measuring line (positive)
M -:Measuring line (negative)

Figure 6-2 Connecting Isolated Thermocouples of the Same Type with External
Compensation by a Resistance Thermometer Connected to Channel 0

Connect the resistance thermometer to channel 0. Please note the parameter

assignment of the reference junction at each thermocouple channel.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-19
Analog Modules

6.5 Connecting Voltage Sensors

Voltage sensors
The figure below shows you how to connect voltage sensors to an analog input
module. (The L+ supply is not necessary in the case of voltage sensors.)

+ M+
U M-
- M+
+ M-
U
-

MANA*

* Connection required in the case of modules with MANA

Four-wire transducers with voltage output are connected in the same way as
voltage sensors.

S7-400, M7-400 Programmable Controllers Module Specifications

6-20 A5E00069467-03
 Analog Modules

6.6 Connecting Current Sensors

Voltage Supply of the Sensors

The 2-wire transducer has a short-circuit-proof voltage supply via the terminals of
the analog input module.
The 2-wire transducer converts the measured variable supplied into a current.
Four-wire transducers require a separate auxiliary voltage (V).
Since 2-wire transducers are supplied by the module, you must not ground the
M lines.

Connecting 2-Wire Transducers

The figure below shows you how to connect current sensors as 2-wire transducers
to analog input modules.

+24 V
Sensor, e.g.
pressure gauge 2-wire L+
transducer 4 to 20 mA
+ M+
P M-
-
M+
P +
2-wire M-
transducer -

M M

The figure below shows how to connect current sensors as 2-wire transducers to
the SM 431; 8 x 13 bit module.

+24 V
Sensor, e.g.
pressure gauge 2-wire MV+
transducer
+ MI+
P MI+
-
M-
P +
2-wire MV+
transducer -
MI+
MI+
M-

M MANA

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-21
Analog Modules

Connecting 4-Wire Transducers

The figure below shows you how to connect current sensors as 4-wire transducers
to analog input modules.

VA

Sensor, e.g.
pressure gauge 4-wire
transducer M+
P +
M-
-
M+
P
+ M-
4-wire
transducer -

VA

MANA*

* Connection required for modules with MANA

VA = Auxiliary power

The figure below shows how to connect current sensors as 4-wire transducers to
the SM 431; 8 x 13 bit module.

VA

Sensor, e.g. MV+

pressure gauge 4-wire MI+
transducer
P + MI+
- M+
+ MV+
P 4-wire MI+
transducer -
MI+
M+

VA

MANA

VA = Auxiliary power

S7-400, M7-400 Programmable Controllers Module Specifications

6-22 A5E00069467-03
 Analog Modules

6.7 Connecting Resistance Thermometers and Resistances

Introduction
The resistance thermometers/resistances are measured in a 4-wire or 3-wire
connection. A constant current is supplied to the resistance
thermometers/resistances via the IC + and IC - connections. The voltage occurring
at the resistance thermometer/resistance is measured via the M + and M -
connections. This achieves a high degree of accuracy in the measured results for
4-wire connection.

4-Wire Connection
The figure below shows you how to connect 4-wire connections of resistance
thermometers/resistances.

M+
M-
IC+
IC-
IC

In the case of 2-wire and 3-wire connections, you must apply the relevant jumpers
on the module between M + and IC + and M - and IC - . However, you must reckon
with losses in accuracy in the measured results here.

3-Wire Connection
The figure below shows you how to connect 3-wire connections of resistance
thermometers/resistances.

M+
M-
IC+ IM+
IC- IM-

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-23
Analog Modules

6.8 Isolated Measured Value Sensors

Introduction
The relevant precautions must be taken to prevent the permissible potential
difference DCM (common mode) being exceeded when connecting sensors. These
measures differ between isolated measured value sensors and non-isolated
measured value sensors.

Modules Isolated from the System

You must use isolated analog modules if a potential difference DISO could arise
between the reference point of the measuring circuit MANA and local ground. You
must use an equipotential bonding conductor to ensure that DISO does not exceed
the permissible value.

Isolated Measured Value Sensors

Potential differences can occur between the individual measured value sensors in
the case of isolated measured value sensors. These potential differences can
occur as the result of interference or the physical distribution of the measured
value sensors. Please ensure that DCM does not exceed the permissible value, by
using, for example, an equalizing conductor.
The figure below shows you how to connect isolated measured value sensors.

Isolated
measured
value sensors M+
+
VI1
- M-
+
DCM1 M+
- +
VI2
- M-
+
DCM2
-
MANA*

DISO

Local
VI = Input voltage ground
* Connection required for modules with MANA

S7-400, M7-400 Programmable Controllers Module Specifications

6-24 A5E00069467-03
 Analog Modules

6.9 Parameters of the Analog Output Modules

Introduction
This section gives an overview of the parameters of the analog output modules.
Depending on their functionality, the modules use a subset of the parameters or
value ranges listed below.
You can set the parameters using STEP 7.

Parameter Assignment Tool

The tool for assigning parameters to analog modules is STEP 7. The parameters
set in this way are stored in the CPU during transfer from the programming device
to the S7-400. After downloading from the programming device to the S7-400, the
CPU transfers these parameters to the relevant analog modules.
In the RUN state of the CPU, you can change some of the parameters (dynamic
parameters) via SFC commands. However, after a RUN  STOP, STOP  RUN
transition, the parameters created with STEP 7 come back into force.

Static Parameters of the Analog Output Modules

Static Parameters (Data Set 0)

The following settings can be made channel-by-channel:
Measuring range deactivated (Yes/No)
Voltage range
1 to 5 V
0 to 10 V
± 10 V
Current range
0 to 20 mA
4 to 20 mA
± 20 mA

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-25
Analog Modules

6.9.1 Explanations of the Analog Output Module Parameters

Output Type/Range
Here you select an output type for the corresponding channel. For each output
type you have the possibility of entering a subset of the parameters or value
ranges listed below. You can set the parameters using STEP 7.

Output Type Output Explanations

Range
Deactivated Use this parameter if you have not connected a load to
this channel and you want to reduce the module cycle
time.
Voltage 1 to 5 V Wire the sensor inputs S+ and S- of the module directly
0 to 10 V your load to be controlled in order to compensate for line
± 10 V influences.
Current 0 to 20 mA
± 20 mA
4 to 20 mA

6.9.2 Default Parameters of the Analog Output Modules

Default Parameters
If you have not assigned parameters to the relevant module in STEP 7, all output
channels will work with the default settings of all parameters after a warm restart.
This means specifically:

Parameter Default Value

Output type Voltage
Output range ± 10 V

Note
Starting up the analog modules with the default parameters is only possible in the
CR.

S7-400, M7-400 Programmable Controllers Module Specifications

6-26 A5E00069467-03
 Analog Modules

6.10 Behavior of the Analog Output Module

Dependency on Load Current Supply and Operating Mode

The output values of the analog output module depend on the load current supply
of the module and on the operating mode of the CPU.

Operating State of Load Current Supply L+ on Output Value of the Analog

the CPU the Analog Output Module Output Module
RUN L+ present CPU values
L+ missing 0 signal (0 V / 0 mA)
STOP L+ present 0 signal (0 V / 0 mA)
L+ missing 0 signal (0 V / 0 mA)

Influence of the Value Range

The behavior of the analog output module depends on which part of the value
range contains the input and output values.

Output Value in Output Value

Nominal range CPU value
Underrange/overrange CPU value
Overflow 0 signal
Underflow 0 signal

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-27
Analog Modules

6.10.1 Conversion Time, Cycle Time, Settling Time, and Response

Time of the Analog Output Channels

Conversion Time
The conversion time of the analog output channels includes the transfer of the
digitized output values from the internal memory and the digital-analog conversion.

Cycle Time
The data of the analog output channels are converted sequentially.
The cycle time; that is, the time until an analog value has been converted again, is
the sum of the conversion times of all active analog output channels of the analog
output module.
The figure below gives a breakdown of the cycle time for an n-channel analog
output module.

Conversion time channel 1

Conversion time channel 2

Cycle time

Conversion time channel n

Settling Time
The settling time (t2 to t3); that is, the time between the presence of the converted
value and reaching the specified value at the analog output, depends on the load.
Here, a distinction must be made between resistive, capacitive, and inductive load.

S7-400, M7-400 Programmable Controllers Module Specifications

6-28 A5E00069467-03
 Analog Modules

Response Time
The response time (t1 to t3), that is the time between the presence of the digital
output values in the internal memory and reaching the specified value at the analog
output, is, in the worst case, the sum of the cycle time and the settling time. The
worst case arises if the analog channel is converted shortly before transfer of a
new output value and converted back only after conversion of the other channels
(cycle time).
The figure below shows the response time of the analog output channels.

tR

tS
tc

t1 t2 t3

tA = Response time
tC = Cycle time corresponds to n
conversion time
(n = activated channels)
tE = Settling time
t1 = New digitized output value available
t2 = Output value received and converted
t3 = Specified output value reached

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-29
Analog Modules

6.11 Connecting Loads/Actuators to Analog Outputs

Connecting Loads to the Current Output

The figure below shows the circuit at one channel as an example.

QI: Analog output current

L+ +24 V MANA: Chassis ground (analog part)
RL: Load resistance
QI

RL
MANA

M
0V

Connecting Loads to the Voltage Output

If you connect a 4-wire circuit you can achieve higher accuracy at the
load/actuator.
The figure below shows you how to connect loads/actuators via a 4-wire circuit to a
voltage output.

+24 V QI: Analog output current

L+
QV: Analog output voltage
QV
S +: Sensor line (positive)
S+ S -: Sensor line (negative)
S- MANA: Chassis ground (analog part)
MANA RL: Load resistance
DCM1
RL1
QV
S+
S-
DCM2 RL2
M MGROUND
0V
DISO

You must connect the sensor lines (S +, S -) directly to the load. This allows the
voltage to be measured and corrected immediately at the load
You can also use only QV and MANA, with loss of accuracy, by jumpering QV with
S+ and MANA with S- on the front connector. The line resistances are not
compensated for in this case.

S7-400, M7-400 Programmable Controllers Module Specifications

6-30 A5E00069467-03
 Analog Modules

6.12 Analog Value Representation

Introduction
The analog values for all measuring ranges and output ranges that you can use
with the S7-400 analog modules are represented in this section.
All modules use the same analog value representation but have different
resolutions.

Analog Value Representation in the Case of 16-Bit Resolution

The digitized analog value is the same for input values and output values in the
same nominal range.
The analog values are represented as fixed-point numbers in twos complement.
The following assignment results:

Bit 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0

Value of the 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20

bit

Sign
The sign (SI) of the analog value is always in bit number 15:
• ”0”  
• ”1”  

Resolution Less Than 16 Bits

If the resolution of an analog module is less than 16 bits, the analog value is stored
in the module left-justified. The unused lower-value positions are written with “0”.

Example
In the example below, you can see how the unused positions in the case of low
resolution are written with “0”.
Bit pattern of a 16-bit and a 13-bit analog value

Resolution Analog Value

Bit number 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
16-bit analog value 0 1 0 0 0 1 1 0 0 1 1 1 0 0 1 1
13-bit analog value 0 1 0 0 0 1 1 0 0 1 1 1 0 0 0 0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-31
Analog Modules

6.12.1 Analog Measuring Ranges for Input Channels

Input Ranges
The input ranges represented in Tables 6-1 to 6-3 are defined in the twos
complement representation:

Table 6-1 Bipolar Input Ranges

Units Measured Data Word Range

Value in %
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20
32767 118.515 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow
32511 117.589 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange
27649
100.004 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1
27648 100.000 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0
1 0.003617 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
0 0.000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nominal
range
-1 -0.003617 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
- 27648 -100.000 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0
- 27649 - 100.004 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Underrange
- 32512 -117.593 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0
- 32768 - 117.596 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow

Table 6-2 Unipolar Input Ranges

Units Measured Data Word Range

Value in %
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20
32767 118.515 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow
32511 117.589 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange

27649 100.004 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1

27648 100.000 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0
1 0.003617 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Nominal
range
0 0.000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
-1 -0.003617 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Underrange

- 4864 -17.593 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0

- 32768 - 17.596 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow

S7-400, M7-400 Programmable Controllers Module Specifications

6-32 A5E00069467-03
 Analog Modules

Table 6-3 Life-Zero Input Ranges

Units Measured Data Word Range

Value in %
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20
 32767 118.515 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow
32511 117.589 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange

27649 100.004 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1

27648 100.000 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0
1 0.003617 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Nominal
range
0 0.000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
-1 - 0.003617 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Underrange

- 4864 -17.593 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0

 -4865 -17.596 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Wire break

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-33
Analog Modules

6.12.2 Analog Value Representation for Analog Input Modules

Introduction
The tables in this section contain the measured value representations for the
individual measuring ranges of the analog input modules. The table values apply
for all modules with the relevant measuring ranges.

How to Read the Measured Value Tables

Tables 6-4 to 6-5 contain the digitized analog values for the different measuring
ranges.
Since the binary representation of the analog values is always the same, the tables
below contain only the comparison of the measuring ranges to the units.
You can look up the corresponding binary representation of the measured values in
the tables in Section 6.12.1 .

Analog Value Representation in Voltage Measuring Ranges

Table 6-4 Analog Value Representation in Voltage Measuring Ranges ± 10 V to ± 1 V

System Voltage Measuring Range

Dec. Hex. ± 10 V ±5V ± 2.5 V ±1V
118.515 % 32767 7FFF 11.851 V 5.926 V 2.963 V 1.185 V Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 11.759 V 5.879 V 2.940 V 1.176 V Overrange
27649 6C01
100.000 % 27648 6C00 10 V 5V 2.5 V 1V
0.003617 % 1 1 361.7 V 180.8  V 90.4 V 36.17 V
0% 0 0 0V 0V 0V 0V
-1 FFFF Nominal range
- 100.000 % - 27648 9400 - 10 V -5V - 2.5 V -1V
- 27649 93FF Underrange
- 117.593 % - 32512 8100 - 11.759 V - 5.879 V - 2.940 V - 1.176 V
- 117.596 % - 32513 80FF Underflow
- 118.519 % - 32768 8000 - 11.851 V - 5.926 V - 2.963 V - 1.185 V

S7-400, M7-400 Programmable Controllers Module Specifications

6-34 A5E00069467-03
 Analog Modules

Table 6-5 Analog Value Representation in Voltage Measuring Ranges ± 500 mV to ± 25 mV

System Voltage Measuring Range

Dec. Hex. ± 500 mV ± 250 mV ± 80 mV ± 50 mV ± 25 mV
118.515 % 32767 7FFF 592.6 mV 296.3 mV 94.8 mV 59.3 mV 29.6 mV Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 587.9 mV 294.0 mV 94.1 mV 58.8 mV 29.4 mV Overrange
27649 6C01
100.000 % 27648 6C00 500 mV 250 mV 80 V 50 V 25 V
0.003617 % 1 1 18.08 V 9.04 V 2.89 V 1.81 V 904.2 nV
0% 0 0 0 mV 0 mV 0 mV 0 mV 0 mV Nominal
range
-1 FFFF
- 100.000 % - 27648 9400 - 500 mV - 250 mV - 80 mV - 50 mV - 25 mV
- 27649 93FF Underrange
- 117.593 % - 32512 8100 - 587.9 mV - 294.0 mV - 94.1 mV - 58.8 mV - 29.4 mV
- 117.596 % - 32513 80FF Underflow
- 118.519 % - 32768 8000 - 592.6 mV - 296.3 mV - 94.8 mV - 59.3 mV - 29.6 mV

Table 6-6 Analog Value Representation in Voltage Measuring Ranges 1 to 5 V

System Voltage Measuring Range

Dec. Hex. 1 to 5 V
118.515 % 32767 7FFF 5.741 V Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 5.704 V Overrange
27649 6C01
100.000 % 27648 6C00 5V
0.003617 % 1 1 1 V + 144.7 V Nominal range
0% 0 0 1V
-1 FFFF Underrange
- 17.593 % - 4864 ED00 0.296 V

-17.596 % 32767 7FFF Wire break

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-35
Analog Modules

Analog Value Representation in Current Measuring Ranges

Table 6-7 Analog Value Representation in the Current Measuring Ranges ± 20 mA to ± 3.2 mA

System Current Measuring Range

Dec. Hex. ± 20 mA ± 10 mA ± 5 mA ± 3.2 mA
118.515 % 32767 7FFF 23.70 mA 11.85 mA 5.93 mA 3.79 mA Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 23.52 mA 11.76 mA 5.88 mA 3.76 mA Overrange
27649 6C01
100.000 % 27648 6C00 20 mA 10 mA 5 mA 3.2 mA
0.003617 % 1 1 723.4 nA 361.7 nA 180.8 nA 115.7 nA
0% 0 0 0 mA 0 mA 0 mA 0 mA Nominal range
-1 FFFF
-100.000 % - 27648 9400 - 20 mA - 10 mA - 5 mA - 3.2 mA
- 27649 93FF Underrange
- 117.593 % - 32512 8100 - 23.52 mA - 11.76 mA - 5.88 mA - 3.76 mA
- 117.596 % - 32513 80FF Underflow
- 118.519 % - 32768 8000 - 23.70 mA - 11.85 mA - 5.93 mA - 3.79 mA

Table 6-8 Analog Value Representation in the Current Measuring Ranges 4 to 20 mA

System Current Measuring Range

Dec. Hex. 4 to 20 mA
118.515 % 32767 7FFF 22.96 mA Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 22.81 mA Overrange
27649 6C01
100.000 % 27648 6C00 20 mA
0.003617 % 1 1 4 mA + 578.7 nA Nominal range
0% 0 0 4 mA
-1 FFFF Underrange
- 17.593 % - 4864 ED00 1.185 mA

 - 17.596 % 32767 7FFF Wire break

S7-400, M7-400 Programmable Controllers Module Specifications

6-36 A5E00069467-03
 Analog Modules

Table 6-9 Analog Value Representation in the Current Measuring Ranges 0 to 20 mA

System Current Measuring Range

Dec. Hex. 0 to 20 mA
118.515 % 32767 7FFF 23.70 mA Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 23.52 mA Overrange
27649 6C01
100.000 % 27648 6C00 20 mA
0.003617 % 1 1 723.4 nA Nominal range
0% 0 0 0 mA
-1 FFFF Underrange
- 17.593 % - 4864 ED00 - 3.52 mA
- 4865 ECFF Underflow
- 118.519 % - 32768 8000

Analog Value Representation for Resistance-Type Sensors

Table 6-10 Analog Value Representation for Resistance-Type Sensors from 48  to 6 k

System Resistance Sensor

Dec. Hex. 48  150  300  600  6 k
118.515 % 32767 7FFF 56.89  177.77  355.54  711.09  7.11 k Overflow
117.593 % 32512 7F00
117.589 % 32511 7EFF 56.44  176.38  352.77  705.53  7.06 k Overrange
27649 6C01
100.000 % 27648 6C00 48  150  300  600  6 k
0.003617 % 1 1 1.74 m 5.43 m 10.85 m 21.70 m 217.0 m Nominal
range
0% 0 0 0 0 0 0 0
-1 FFFF Underrange
- 17.593 % - 4864 ED00
- 4865 ECFF Underflow
- 118.519 % - 23296 8000

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-37
Analog Modules

Analog Value Representation for Temperature Sensors

Table 6-11 Analog Value Representation for Temperature Sensors

System Temperature Range

Climatic Standard
(1digit =0.01o C) (1digit=0.1o C)
Dec. Hex. Pt100, Ni100, Pt100, Ni100,
Pt200, Ni1000 Pt200, Ni1000
Pt500, Pt500,
Pt1000 Pt1000
118.5149 % 32767 7FFF 327.67o C 3276.7o C
117.59 % 32512 7F00
117.589 % 32511 7EFF Overflow
*295o C
100.000 % 27648 6C00 276.48o C 2764.8o C

*155o C 250o C
130o C *1000 oC
*295 oC Overrange
850o C
250o C
0.003617 % 1 1 0.01o C 0.01o C 0.1o C 0.1o C
0% 0 0 0.00o C 0.00o C 0.0o C 0.0o C Nominal range
-1 FFFF - 60o C
- 200o C Underrange
60o C *- 105o C
*- 243o C
*-105o C
- 120o C Underflow

*- 145o C

- 118.519 % - 32768 8000

*Overrange or underrange: The rise in the characteristic curve that exists on exiting the linearized nominal
range is retained in the overrange/underrange.

S7-400, M7-400 Programmable Controllers Module Specifications

6-38 A5E00069467-03
 Analog Modules

Table 6-12 Analog Value Representation for Thermocouples

System Temperature Range

Standard (1digit=0.1o C)
Dec. Hex. Type B Type R Type S Type T Type E

118.5149 % 32767 7FFF 3276.7o C

117.59 % 32512 7F00
117.589 % 32511 7EFF Overflow

100.000 % 27648 6C00 2764.8o C

*2070o C *2019o C *2019o C *1200o C Overrange

*540o C
1820o C 1769o C 1769o C 1000o C
400o C

0.003617 % 1 1 0.1o C 0.1o C 0.1o C 0.1o C 0.1o C

0% 0 0 0.0o C 0.0o C 0.0o C 0.0o C 0.0o C Nominal
-1 FFFF - 50o C - 50o C range

*-120o C
*-170o C *-170o C - 270o C - 270o C
Underrange
*-390o C *-390o C

Underflow

- 118.519 % - 32768 8000

*Overrange or underrange: The rise in the characteristic curve that exists on exiting the linearized nominal
range is retained in the overrange/underrange.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-39
Analog Modules

Table 6-13 Analog Value Representation for Thermocouples

System Temperature Range

Standard (1digit=0.1 oC)
Dec. Hex. Type J Type K Type U Type L Type N

118.5149 % 32767 7FFF 3276.7o C

117.59 % 32512 7F00
117.589 % 32511 7EFF Overflow

100.000 % 27648 6C00 2764.8o C

1450o C 1622o C 1150o C 1550o C Overrange

850o C
1200o C 1372o C 900o C 1300o C
600o C

0.003617 % 1 1 0.1o C 0.1o C 0.1o C 0.1o C 0.1o C

0% 0 0 0.0o C 0.0o C 0.0o C 0.0o C 0.0o C Nominal
-1 FFFF range

- 210o C - 270o C - 200o C - 200o C - 270o C

Underrange
- 330o C - 390o C - 320o C - 320o C - 390o C

Underflow

- 118.519 % - 32768 8000

*Overrange or underrange: The rise in the characteristic curve that exists on exiting the
linearized nominal range is retained in the overrange/underrange.

S7-400, M7-400 Programmable Controllers Module Specifications

6-40 A5E00069467-03
 Analog Modules

6.12.3 Analog Output Ranges for Output Channels

Output Range

Table 6-14 Bipolar Output Ranges

Units Output Value Data Word Range

in % 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20
32512 0% 0 1 1 1 1 1 1 1 x x x x x x x x Overflow
32511 117.589 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange
27649 100.004 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1
27648 100.000 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0
1 0.003617 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
0 0.000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nominal
range
-1 -0.003617 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
- 27648 -100.000 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0
- 27649 100.004 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Underrange
- 32512 -117.593 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0
 32513 0 % 1 0 0 0 0 0 0 0 x x x x x x x x Underflow

Table 6-15 Unipolar Output Ranges

Units Output Value Data Word Range

in % 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20
32512 0% 0 1 1 1 1 1 1 1 x x x x x x x x Overflow
32511 117.589 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange
27649 100.004 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1
27648 100.000 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0
1 0.003617 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Nominal
range
0 0.000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
-1 0.000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Limited to
nominal
range lower
- 32512 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 limit 0 V or
0 mA
 32513 0 % 1 0 0 0 0 0 0 0 x x x x x x x x Underflow

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-41
Analog Modules

Table 6-16 Life-Zero Output Ranges

Units Output Value Data Word Range

in % 21 21 21 21 21 21 2 2 2 2 2 2 2 2 2 2
5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0

 32512 0% 0 1 1 1 1 1 1 1 x x x x x x x x Overflow
32511 117.589 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange
27649 100.004 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1
27648 100.000 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0
1 0.003617 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Nominal
range
0 0.000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
-1 -0.003617 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Underrange
- 6912 -25.000 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0
- 6913 1 1 1 0 0 1 0 0 1 1 1 1 1 1 1 1 Limited to
overcontrol
-25.000 range,
- 32512 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 lower limit
0 V or 0 mA

- 32513 - 25 % 1 0 0 0 0 0 0 0 x x x x x x x x Underflow

S7-400, M7-400 Programmable Controllers Module Specifications

6-42 A5E00069467-03
 Analog Modules

6.12.4 Analog Value Representation for Output Modules

Introduction
The tables in this section contain the measured value representations for the
individual measuring ranges of the analog output modules. The table values apply
for all modules with the relevant measuring ranges.

How to Read the Measured Value Tables

The tables below contain the digitized analog values for the different measuring
ranges.
Since the binary representation of the analog values is always the same, the tables
below contain only the comparison of the measuring ranges to the units.
You can look up the corresponding binary representation of the measured values in
the tables in Section 6.12.1 .

Analog Value Representation

The tables below show the analog value representation for output channels in the
different voltage ranges.

Voltage Range ± 10 V

System Voltage Range

Dec. Hex. ± 10 V
118.5149 % 32767 7FFF 0.00 V Overflow, de-energized
32512 7F00
117.589 % 32511 7EFF 11.76 V Overrange
27649 6C01
100 % 27648 6C00 10 V
0.003617 % 1 1 361.7 µV Nominal range
0% 0 0 0V
-1 FFFF - 361.7 µV
- 100 % - 27648 9400 - 10 V
- 27649 93FF Underrange
- 117.593 % - 32512 8100 - 11.76 V
- 32513 80FF Underflow, de-energized
- 118.519 % - 32768 8000 0.00 V

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-43
Analog Modules

Voltage Ranges 0 to 10 V and 1 to 5 V

System Voltage Range

Dec. Hex. 0 to 10 V 1 to 5 V
118.5149 % 32767 7FFF 0.00 V 0.00 V Overflow, de-energized
32512 7F00
117.589 % 32511 7EFF 11.76 V 5.70 V Overrange
27649 6C01
100 % 27648 6C00 10 V 5V
0.003617 % 1 1 361.7µV 1V+144.7µV Nominal range
0% 0 0 0V 1V
-1 FFFF Underrange
- 25 % - 6912 E500 *0 V
- 6913 E4FF Not possible. The output
value is limited to 0 V.
- 117.593 % - 32512 8100
- 32513 80FF Underflow, de-energized
- 118.519 % - 32768 8000 0.00 V 0.00 V

*Underrange

Current Range ± 20 mA

System Current Range

Dec. Hex. ± 20 mA
118.5149 % 32767 7FFF 0.00 mA Overflow, de-energized
32512 7F00
117.589 % 32511 7EFF 23.52 mA Overrange
27649 6C01
100 % 27648 6C00 20 mA
0.003617 % 1 1 723.4 nA
0% 0 0 0 mA Nominal range
-1 FFFF - 723.4 mA
- 100 % - 27648 9400 - 20 mA
- 27649 93FF Underrange
- 117.593 % - 32512 8100 - 23.52 mA
- 32513 80FF Underflow, de-energized
- 118.519 % - 32768 8000 0.00 mA

S7-400, M7-400 Programmable Controllers Module Specifications

6-44 A5E00069467-03
 Analog Modules

Current Ranges 0 to 20 mA and 4 to 20 mA

System Current Measuring Range

Dec. Hex. 0 to 4 to 20 mA
20 mA
118.5149 % 32767 7FFF 0.00 mA 0.00 mA Overflow, de-energized
32512 7F00
117.589 % 32511 7EFF 23.52 mA 22.81 mA Overrange
27649 6C01
100 % 27648 6C00 20 mA 20 mA
0.003617 % 1 1 723.4 nA 4 mA+578.7 nA Nominal range
0% 0 0 0 mA 4 mA
-1 FFFF Underrange
- 25 % - 6912 E500 0 mA*
- 6913 E4FF Not possible.
The output value is limited
- 117.593 % - 32512 8100 to 0 mV.
- 32513 80FF Underflow, de-energized
- 118.519 % - 32768 8000 0.00 mA 0.00 mA

*Underrange

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-45
Analog Modules

6.13 Diagnostics of the Analog Modules

Fault/Error Indications in the Measured Value

All analog input modules, including the modules without diagnostic capability,
indicate faults via the measured value.

Measured Meaning in All Analog Input Modules

Value
7FFFH Overflow, fault, or deactivated channel
8000H Underflow

Example
A module without diagnostic capability is operated in the life-zero measuring range
4 to 20 mA. The current of the measured value sensor drops to a value around
0 mA. The module enters the digitized measured value 7FFFh for this channel
because it has detected a computer wire break.

The following information applies to the SM 431; AI 16 x 16 bit module

Fault/Error Indication via LEDs

Faults/errors are indicated via the two LEDs INTF (internal fault) and EXTF
(external fault) on the front of the module.

Internal Fault The internal fault (INTF) LED indicates faults detected by the module
(INTF) within the module.
The LED remains lit until all internal faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until
all internal faults have been corrected and acknowledged.
External Fault The external fault (EXTF) LED indicates faults detected by the
(EXTF) module on the process side.
The LED remains lit until all external faults have been corrected.
If the diagnostic interrupt has been enabled, the LED remains lit until
all external faults have been corrected and acknowledged.

Fault/Error Messages
You can use SFCs to read out system-wide and channel-specific diagnostic
messages from the module at any time.
You can read the cause of the fault from the diagnostic buffer (see STEP 7).

S7-400, M7-400 Programmable Controllers Module Specifications

6-46 A5E00069467-03
 Analog Modules

Fault/Error Indication via Diagnostic Interrupt

If you have enabled the diagnostic interrupt, OB82 is called automatically. The
system diagnostic messages are then already available to you. You can use
SFC51 or SFC59 in OB82 to get detailed fault/error information (DS 1). The
diagnostic information remains consistent until you exit OB82, meaning the
information remains frozen. The diagnostic interrupt on the module is
acknowledged when you exit OB82.

Note
Fault/error messages are not possible via diagnostic interrupt if the module is
plugged into ER-1/ER-2.
If a diagnostic interrupt is enabled for a module in ER-1/ER-2, module diagnostics
can no longer be updated after the occurrence of the first diagnostic message.

System-Specific Diagnostic Information

Type of Fault LED Description

Module fault INTF/ This is the fault indicator set in the event of any fault
EXTF detected by the module.
Internal fault INTF The module has detected a fault within the programmable
controller.
External fault EXTF The module has detected a fault outside the programmable
controller.
Channel fault INTF/ Indicates that only certain channels contain faults.
EXTF
External auxiliary EXTF There is no load voltage at terminals L+ and M for supplying
voltage missing 2-wire transducers.
Front connector EXTF Between connections 1 and 2 of the front connector, there is
missing a jumper that checks the module.
Module not INTF The indicator remains from power on until the parameters
assigned have been transferred by the CPU. To function, the module
parameters has to know whether to use the default parameters or the
parameters you entered.
Wrong parameters INTF One parameter or the combination of parameters is not valid.
This indicator is set if, for example, you assign a measuring
range that the module cannot process.
Channel INTF/ This is set if the module can supply additional channel
information EXTF information in the event of a channel fault.
available

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-47
Analog Modules

Type of Fault LED Description

Wrong user INTF One or more measuring range submodules are missing or
module/user are connected in the wrong direction.
module not The module checks the direction of connection with the
plugged in measuring ranges for validity.
Even when using the default parameters, a check is made to
see if the measuring range submodule is set in the correct
direction for the voltage range 10 V.
STOP state – This indicator is generated by the analog input module if the
module has not been assigned parameters and the first
module cycle has not yet been completed. This indicator is
reset if all digitized analog values are in the transfer memory
after complete restart of the CPU.
Internal voltage INTF The module checks that all the voltages required for the
failed function are available. If this fault is indicated, the module is
defective.
EPROM fault INTF The module checks its program memory.
If this fault is indicated, the module is defective.
RAM fault INTF The module checks its data memory.
If this fault is indicated, the module is defective.
ADC/DAC fault INTF The module checks the analog-digital converter or the
digital-analog converter.
If this fault is indicated, the module is defective (internal
fault).
Hardware interrupt INTF The module cannot initiate an interrupt because the previous
lost interrupt has not been acknowledged.
Interrupt events occur at a faster rate than the execution
time of the interrupt OB.
This fault indicates an error in the configuration of your
system.
The fault remains in force and latched until the module is
supplied with new parameters.

Channel-Specific Diagnostic Information for Analog Input Modules

Type of Fault LED Description

Parameter error INTF A parameter or the combination of parameters for this
channel is invalid.
This indicator is set if, for example, you have enabled a
diagnosis that is not possible in the measuring range set.
This indicator is also set if you have assigned a measuring
range and the measuring range submodule is missing or is
connected in the wrong direction.
The module checks the direction of connection with the
measuring ranges for validity.
Even when using the default parameters, a check is made to
see if the measuring range submodule is set in the correct
direction for the voltage range  10 V (internal fault).
Common-mode EXTF Violation of the permissible common-mode voltage.
fault

S7-400, M7-400 Programmable Controllers Module Specifications

6-48 A5E00069467-03
 Analog Modules

Type of Fault LED Description

Short circuit to EXTF The sensor supply, protected via the module, has been
phase short-circuited to P potential.
Short circuit to EXTF The sensor supply of 2-wire transducers has been
ground short-circuited to ground potential.
Tripping of the current limiter is detected on the module
(external fault).
Wire break EXTF The measuring line or current line is interrupted.
We distinguish between physical and computer wire-break
checks.
If you have activated the wire-break check function, the error
in the digitized measured value in the event of a wire break
is indicated by 7FFFH and in the case of modules with
diagnostic capability, the wire-break fault indicator is set. If
you have switched the wire-break check function off, the
digitized measured value in the event of a wire break is
undefined.
The computer wire-break check is executed in the life-zero
measuring ranges. If the value drops below the limit ED00H
(-4864) (see Table 6-3 “Life-Zero Input Ranges”) this is
interpreted as a wire break.
The digitized measured value is always defined 7FFFH in
the event of a wire break. Note: There is no underflow in
life-zero measuring ranges.
Reference channel EXTF A fault on the reference channel adversely affects the
error calculation of the input value.
Depending on the parameter assignment, either the
reference junction, connected to channel 0, has a fault, or
the transferred reference temperature is not within the value
range.
The reference channel check is only of use in conjunction
with thermocouples.
Underflow EXTF The digitized value is more negative than the underrange.
The digitized measured value is set at 8000H.
If you have set a sensor in the life-zero measuring range,
you cannot detect an underflow (external fault).
Overflow EXTF The digitized value is more positive than the overrange
(external fault).

Channel-Specific Diagnostic Information for Analog Output Modules

Type of Fault LED Explanations

Parameter error INTF A parameter or the combination of parameters for this
channel is invalid.
This indicator is set if, for example, you have enabled a
diagnosis that is not possible in the measuring range set.
Common-mode fault EXTF Violation of the permissible common-mode voltage.
Short circuit to phase EXTF The output signal has been short-circuited to P potential.
Short circuit to EXTF The output signal has been short-circuited to M potential.
ground
Wire break EXTF Wire break in the load circuit
Load voltage missing EXTF The voltage required to drive the output stages is not
present at the front connector.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-49
Analog Modules

6.14 Analog Input Module SM 431; AI 8 x 13 Bits

(6ES7431-1KF00-0AB0)

Order Number
6ES7 431-1KF00-0AB0

Characteristics
The SM 431; AI 8 x 13 Bits is an analog input module with the following
characteristics:
• 8 inputs for voltage/current measurement
• 4 inputs for resistance measurement
• Resolution 13 bits
• Isolated
• Permissible common-mode voltage 30 VAC

Circuit Block Diagram of the SM 431; AI 8 x 13 Bits

MV0+
MI0+
MI0+

M0–
D
Protective circuit, current routing

CH0
S7-400 bus
Bus controller

CH 1 CH1

CH7 CH7

Front connector
F_CON check
+5V
+5V
M ANA S7-400 bus
0V 0V
S7-400 bus
–5V

S7-400, M7-400 Programmable Controllers Module Specifications

6-50 A5E00069467-03
 Analog Modules

Terminal Connection Diagram of the SM 431; AI 8 x 13 Bits

Voltage Current Resistance

measurement measurement measurement

1
2
3
4
5
6 MV0+ MV0+ M0+
7 V MI0+
CH0 Word 0 CH0
8 MI0+
9 M0- M0- M0-
10 CH0 Word 0
11 MV1+ MV1+ IC0+
12 MI1+
CH1 Word 2 CH1
13 A MI1+
14 M1- M1- IC0-
15
16 MV2+ MV2+ M1+
17 MI2+
CH2 Word 4 CH2
18 MI2+
19 M2- M2- M1-
20 CH2 Word 4
21 MV3+ MV3+ IC1+
22 MI3+
23 CH3 Word 6 CH3
MI3+
24 M3- M3- IC1-
25 MANA
26 M ANA
27
28 MV4+ MV4+ M2+
29 V MI4+
CH4 Word 8 CH4
30 MI4+
31 M4- M4- M2-
32 CH4 Word 8
33 MV5+ MV5+ IC2+
34 MI5+
35 CH5 Word 10 CH5
A MI5+
36 M5- M5- IC2-
37
38 MV6+ MV6+ M3+
39 MI6+
CH6 Word 12 CH6
40 MI6+
41 M6- M6- M3-
42
CH6 Word 12
43 MV7+ MV7+ IC3+
44 MI7+
45 CH7 Word 14 MI7+ CH7
46 M7- M7- IC3-
47
48

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-51
Analog Modules

Adapting to Different Sensors

To adapt the analog input module to different sensors, follow the steps outlined
below:
• Wire the front connector in accordance with the sensor type in each case
• Set the relevant measuring range for the channels of the module when you set
the module parameters.

Warning
! The module can be damaged.
The shunt resistance of an input channel can be destroyed if you accidentally
connect a voltage sensor to the M-/MI+ clamps of a channel.
Make sure that the front connector wiring is correct in accordance with the
connection diagram.

Parameters
The analog input module SM 431; AI 8 x 13 Bits uses the following static parameters
stored in data set 0.

Parameter Value Range

The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
Voltage measuring range 1V
 10 V
1 to 5 V
Current measuring range for 4-wire transducers 4 to 20 mA
 20 mA
Current measuring range for 2-wire transducers 4 to 20 mA
Resistance measuring range, 4-wire connection 600 
Interference frequency suppression 50 Hz Integration time 20 ms
60 Hz Integration time 16.66 ms

Basic Requirements for Parameter Assignment

The table below contains the individual parameters and their basic requirements:

Parameter Permissible on Basic Requirement

Channel n
Resistance measuring 0, 2, 4, or 6 You must deactivate the measuring range
range, 4-wire connection parameter of channel n+1 (1, 3, 5, 7)

Reason:
The connections of channel n+1 are used to supply the resistance connected to
channel n.

S7-400, M7-400 Programmable Controllers Module Specifications

6-52 A5E00069467-03
 Analog Modules

Technical Specifications of the SM 431; AI 8 x 13 Bits

Dimensions, Cable Length and Weight Analog Value Generation

Dimensions WxHxD (mm) 25x290x210 Interference frequency suppression
Weight approx. 480 g
• Can be set for interference
Module-Specific Data frequency f1 in Hz 60 50
Number of inputs Resulting in:
• For current/voltage Integration time/conversion time/resolution(per
measurement 8
channel)
• For resistance 4
measurement • Possible integration time in ms 16.7 20
Cable length, shielded 200 m • Possible basic conversion time 23 25
Surge protection in External protection
in ms
accordance with IEC device required in
1000-4-5 the signal lines Additional conversion time for
Voltages, Currents, Potentials resistance measurements None

Nominal load voltage L+ Not required • Cycle time Number of active channels x
basic conversion time
Voltage supply
fortransducers No • Resolution in bits
Galvanic isolation between (incl. overrange/
bus, analog section and Yes representation in twos 13 13
local ground complement)

Test voltage Interference Suppression, Error Limits

• Between bus and Interference voltage

analog section 2120 VDC suppression for
f = n x (f11 %),
• Between bus and local (f1 = interference frequency)
ground 500 VDC > 70 dB
• Common-mode
• Between analog section interference
and local ground 2120 VDC > 40 dB
(VCM < 30 Veff)
Common-mode test voltage • Normal-mode interference
• Between the reference (Peak value of interference < nominal value of the
potentials of the input range)
connected sensors and
MANA or among the Cross-talk attenuation between the inputs
sensors (channels)
themselves (input 30 VACeff • At 50/60 Hz > 50 dB
voltage 0 V) Operating error limits (in the entire temperature
range, related to the input range)
Constant current for
resistance sensors 1.67 mA • 1 V  1.0 %
Current consumption •  10 V  0.6 %
• from S7-400 bus max. 350 mA • 1 to 5 V  0.7 %
(5 VDC) typ. 300 mA •  20 mA  1.0 %
• From load current – • 4 to 20 mA  1.0 %
supply L+ • 0 to 500   1.25 %
Power losses of the module typ. 1.8 W

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-53
Analog Modules

Basic error limits (operating error limits at 25° C, Data for Selecting a Sensor
related to input range)
Input ranges (nominal
• 1V  0.7 % ranges)/input resistance
•  10 V  0.4 % • For voltage ranges  1V/>200 k
• 1 to 5 V  0.5 %  10 V/>200 k
1 to 5 V/>200 k
•  20 mA  0.7 %
• For current ranges  20 mA/80 
• 4 to 20 mA  0.7 %
4 to 20 mA/80 
• 0 to 500   0.8 %
Temperature error (related to • For resistance range 0 to 600 
input range) (useful to 500 
• In the resistance measuring  0.02 %/K
range  0.007 %/K Permissible input voltage max. 50 V constant;
• In all other measuring for voltage input 75 V for max. 1 ms
ranges (destruction limit) (mark-space ratio
1:20)
Linearity error (related to input
range)  0.05 % Permissible input current
for current input 50 mA constant
Repetition accuracy (in settled
(destruction limit)
state at 25° C, related to input
range) Connection of signal
 0.1 % sensors
Code gaps Code gaps occur • For voltage Possible
systematically in measurement
the ranges  • For current Possible
1 V, 1 to 5 V, measurement
4 to 20 mA • As 2-wire transducer Possible, with
Status, Interrupts, Diagnostics external transducer
supply
Interrupts
• As 4-wire transducer Possible
• Limit value interrupts No
• For resistance Possible, line
• Diagnostic interrupt No measurement with resistances are also
Diagnostic functions 2-wire connection measured
• Fault indicators on the
module
for internal faults No 3-wire connection Not possible
for external faults No 4-wire connection Possible
• Diagnostic information Characteristic curve
display No linearization No
Temperature
compensation No

S7-400, M7-400 Programmable Controllers Module Specifications

6-54 A5E00069467-03
 Analog Modules

6.15 Analog Input Module SM 431; AI 8 x 14 Bits

(6ES7431-1KF10-0AB0)

Order Number
6ES7 431-1KF10-0AB0

Characteristics
The SM 431; AI 8 x 14 Bits is an analog input module with the following
characteristics:
• Especially suitable for temperature acquisition
• 8 inputs for current and voltage measurement or
4 inputs for resistance measurement
• Resolution 14 bits
• Input ranges for voltage
• Input ranges for current
• Input ranges for resistance-type sensors
• Input ranges for resistance thermometers
• Input ranges for thermocouples
• Temperature sensor types can be assigned
• Linearization of sensor characteristic curves
• Any input ranges selectable
Adaptation of the measuring type using the measuring range submodules in
groups of 2
• Supply voltage: 24 VDC; only required when connecting 2-wire transducers
• Isolated
• Permissible common-mode voltage 120 VAC

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-55
Analog Modules

Circuit Block Diagram of the SM 431; AI 8 x 14 Bits

CH0 Measuring
range
CH1 submodule 0

S7-400 bus

Bus controller
A

MULTIPLEXER
OPTO-RELAY

CH6 Measuring
range
CH7 submodule 3

+ 5V ENABLE
+ 15V +5V S7-400 bus
L+
M 0V 0V S7-400 bus
– 15V

S7-400, M7-400 Programmable Controllers Module Specifications

6-56 A5E00069467-03
 Analog Modules

Terminal Connection Diagram of the SM 431; AI 8 x 14 Bits

Thermocouples Resistance measurement

Voltage measurement Resistance thermometer
Current measurement
1
2
3
L+ L+
4
5
6 M0+ CH0 Word 0 M0+
7 M0- M0-
8
9 CH0 Word 0
10
11 V
M1+ CH1 Word 2 IC0+
12 M1- IC0-
13
14
15
16 M2+ CH2 Word 4 M1+
17 M2- M1-
18
19 CH2 Word 4
20
21 M3+ CH3 Word 6 IC1+
22 M3- IC1-
23
24
25
26
27
28 V
M4+ CH4 Word 8 M2+
29 M4- M2-
30
31 CH4 Word 8
32
33 V M5+ CH5 Word 10 IC2+
34 M5- IC2-
35
36
37
38 M6+ Word 12 M3+
Tr CH6
39 M6- M3-
40
41 CH6 Word 12
42
43 Tr
M7+ CH7 Word 14 IC3+
44 M7- IC3-
45
46
47
M M M
48

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-57
Analog Modules

Adapting to Different Sensors

To adapt the analog input module to different sensors, follow the steps outlined
below:
1. Insert the measuring range submodule into the module. One measuring range
submodule adapts two input channels or one resistance channel to a sensor
type.
2. Set the relevant measuring range for the channels of the module when you set
the module parameters.

Using the Measuring Range Submodules

With the measuring range submodules supplied, you can adapt two successive
input channels or one resistance channel to one sensor type.
Table 6-17 contains the assignments of individual measuring range submodule
positions to the relevant sensor types.

Table 6-17 Position of the Measuring Range Submodule

Position Sensor Types

A Thermocouples
Voltage sensors
Resistance sensors in 4-wire connection
Resistance thermometers (RTDs) in 4-wire connection
Resistance sensors in 3-wire connection
Resistance thermometers (RTDs) in 3-wire connection
B Unused
C Current sensors
4-wire transducers with current output
D 2-wire transducers
To supply these transducers, you must connect 24 V to the
front connector terminals L+ and M.

Warning
! The module can be damaged.
The shunt resistance of an input channel can be destroyed if you accidentally
connect a voltage sensor to the channel and you set the measuring range
submodule to position C (current/4-wire transducer).
Please make sure that the measuring range submodule is in the correct position
before you connect a sensor to the module.

S7-400, M7-400 Programmable Controllers Module Specifications

6-58 A5E00069467-03
 Analog Modules

Parameters
The analog input module SM 431; AI 8 x 14 Bits uses static uses static parameters
stored in data set 0 and dynamic parameters stored in data set 1. The table below
shows which static parameters the module uses.

Parameter Value Range

The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
Voltage measuring range  80 mV
 250 mV
 500 mV
1V
 2.5 V
5V
 10 V
1 to 5 V
Current measuring range for 4-wire transducers 0 to 20 mA
4 to 20 mA
 20 mA
Current measuring range for 2-wire transducers 4 to 20 mA
Resistance measuring range, 3-wire connection 300 
600 
6000 
Resistance measuring range, 4-wire connection 48 
150 
300 
600 
6000 
Resistance thermometers with linearization, Pt 100 climatic range
3-wire connection Pt 200 climatic range
Pt 500 climatic range
Pt 1000 climatic range
Ni 100 climatic range
Ni 1000 climatic range
Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-59
Analog Modules

Resistance thermometer swith linearization, Pt 100 climatic range

4-wire connection Pt 200 climatic range
Pt 500 climatic range
Pt 1000 climatic range
Ni 100 climatic range
Ni 1000 climatic range
Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range
Thermocouples with linearization Type B
Type N
Type E
Type R
Type S
Type J
Type L
Type T
Type K
Type U
Wire break Yes/No
Interference frequency suppression 50 Hz Integration time 20 ms
60 Hz Integration time 16.66ms
400 Hz Unused, causes deactivation
of the channel

Smoothing None
Weak
Medium
Strong
Reference junction None
RTD on chanel 0
Reference temperature value dynamic

The table below shows which dynamic parameters the module uses.

Parameter Value Range

Reference temperature in 0.01° C - 27315 to + 32767

S7-400, M7-400 Programmable Controllers Module Specifications

6-60 A5E00069467-03
 Analog Modules

Time Characteristics of the Digital Low Pass First Order

Smoothing can be set to 4 levels with the smoothing factor k multiplied by the
module cycle time corresponding to the time constant of the filter.
Smoothing factor: k:

None 1
Weak 4
Medium 32
Strong 64

Calculation of the Time Characteristics

You can calculate the time characteristics for any jump of the input value x and
smoothing factor k used according to the following formula:

xn  (k – 1) yn–1
yn :
k
yn = Transfer value to the system in the current cycle n

Step Response
The figure below shows the step response for different smoothing factors
depending on the number of module cycles.

1
Step Response

0.63

0.5

200
0 50 100 150
k=4 Module cycles
k = 32
k = 64

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-61
Analog Modules

Basic Requirements for Parameter Assignment

The tables below contain the individual parameters and their basic requirements:

Table 6-18 Current Measuring Range, Wire-Break Check

Parameter Basic Requirements

Current measuring range for 4-wire You must set the “Wire-break check” parameter of the
transducers selected channel to NO.
Current measuring range for 2-wire You must set the “Wire-break check” parameter of the
transducers selected channel to NO.

Reason:
The physical wire-break check is not possible with current sensors.

Table 6-19 Resistance Measuring Range, Resistance Thermometers

Parameter Permissible Basic Requirements

on Channel n
Resistance measuring range, 4-wire 0, 2, 4, or 6 You must deactivate the measuring range
connection parameter of channel n+1 (1, 3, 5, 7).
Resistance measuring range, 3-wire 0, 2, 4, or 6 You must deactivate the measuring range
connection parameter of channel n+1 (1, 3, 5, 7).
Resistance thermometers with 0, 2, 4, or 6 You must deactivate the measuring range
linearization, 3-wire connection parameter of channel n+1 (1, 3, 5, 7).
Resistance thermometer swith 0, 2, 4, or 6 You must deactivate the measuring range
linearization, 4-wire connection parameter of channel n+1 (1, 3, 5, 7).

Reason:
The connections of channel n+1 are used to supply the resistance connected to
channel n.

Note
If you use thermocouples, you should always set the wire-break check since then,
in the event of a wire break, the measured value automatically goes into overflow
and is detected using the measured value 7FFFH.

The measuring range submodule sets two channels. For this reason, there are
restricting parameter assignment conditions for two neighboring channels (0/1),
(2/3), (4/5), (6/7).

S7-400, M7-400 Programmable Controllers Module Specifications

6-62 A5E00069467-03
 Analog Modules

The following table provides an overview:

Table 6-20 Combinations of n Channels: Channel n+1 (n: 0, 2, 4...)

Measuring Range Deac- Vol- Current Current Resi- Resi- Thermo Thermo Ther-
Channel n+1 tiva- tage 4-wire- 2-wire- stance stance resi- resi- mocou-
Measuring ted trans.* trans.* 4-wire 3-wire stance stance ples
Range Channel n 4-wire 3-wire
Deactivated x x x x x
Voltage x x x
Current x x
4-wiretrans.*
Current x x
2-wiretrans.*
Resistance 4-wire x
Resistance 3-wire x
Thermo resistance x
4-wire
Thermo resistance x
3-wire
Thermocouples x x x
* trans. = transducer

Example
If you have selected the current measuring range parameter for 2-wire transducers
for channel 6, you must select only measuring range deactivated or current
measuring range for 2-wire transducers for channel 7.
Table 6-21 Thermocouples

Parameter Basic Requirement

Thermocouples with linearization You can select the reference junction.

Reason:
Specifying a reference junction temperature only makes sense in the case of
thermocouples.
If you select an RTD on channel 0 for reference junction compensation, the
following also applies:
Table 6-22 Thermocouple with Reference Junction Compensation via RTD on Channel 0

Parameter Permissible Basic Requirement

on Channel n
Reference junction RTD on 2 to 7 You must connect and set a resistance thermometer with
channel 0 linearization, 3-wire or 4-wire connection in the climatic
range on channel 0 (see also Table 6-19)

Reason:
If channel 0 is to be used as the reference junction, a resistance sensor must be
connected there that captures absolute temperatures in the climatic range. By
connecting the resistance sensor, channels 0 and 1 are assigned. You can
therefore use only channels 2 to 7 for the option.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-63
Analog Modules

Technical Specifications of the SM 431; AI 8 x 14 Bits

Dimensions, Cable Length and Weight Constant current for
resistance sensors 1.667 mA
Dimensions WxHxD (mm) 25x290x210
Weight approx. 500 g Current consumption

Module-Specific Data
• from S7-400 bus (5 VDC) max. 600 mA
typ. 550 mA
Number of inputs
• From load current
• For current/voltage supply L+ max. 200 mA
measurement 8
Only necessary for
• For resistance 4
supplying 2-wire
measurement
transducers,
Cable length, shielded 200 m depending on the
• For the input range phase control of the
 80 mV and transducer
thermocouples 50 m Power losses max. 3.5 W
• Surge-protection in External protection Analog Value Generation
accordance with devices required in
Measuring principle Integrating
IEC1000-4-5 the supply lines and
signal lines Interference frequency suppression
Voltages, Currents, Potentials • Can be set for interference
Load voltage L+ 24 VDC frequency f1 in Hz 60 50
Only necessary for supplying 2-wire transducers, Resulting in:
depending on the phase control of the transducer
Integration time/conversion time/resolution(per
• Reverse polarity Yes channel)
protection
Voltage supply for
• Possible integration time in ms 16.7 20
transducers • Possible basic conversion time
• Short-circuit protected Yes in ms 20.1 23.5
• Feed current per channel typ. 50 mA Additional conversion time for
Galvanic isolation Yes resistance measurement for
3-wire connection in ms 40.2 47
Galvanic isolation between
or
bus, analog section and
additional conversion time for wire
local ground Yes
break monitoring except in the
Test voltage case of resistance measurement 4.3 4.3
• Between bus and L+/M 2120 VDC in ms
or
• Between bus and analog
additional conversion time for
section 2120 VDC
wire break monitoring in the case 5.5 5.5
• Between bus and local of
ground 500 VDC resistance measurement in ms
• Between analog section
and L+/M 707 VDC
• Cycle time Number of active channels x
basic conversion time
• Between analog section
and local ground 2120 VDC • Possible resolution in bits
(incl. overrange) with smoothing 14 14
• Between L+/M and local
switched on 16 16
ground 2120 VDC
Common-mode test voltage
• Inputs to each other 120 VAC
• Between input and central
grounding point (input
voltage 0 V) 120 VAC

S7-400, M7-400 Programmable Controllers Module Specifications

6-64 A5E00069467-03
 Analog Modules

Interference Suppression, Error Limits Basic error limits (operating error limits at 25° C,
related to input range)
Interference voltage
suppression •  80 mV  0.17 %
for f = nx (f1  1 %), •  250 mV  0.15 %
(f1 = interference frequency)
•  500 mV  0.15 %
• Common-mode interference > 100 dB
(VPP < 120V)
• 1 V  0.15 %
> 50 dB
• Normal-mode interference •  2.5 V  0.15 %

(Peak value of interference < nominal value of the

• 5 V  0.15 %
input range) • 1 to 5 V  0.15 %
Cross-talk attenuation •  10 V  0.15 %
between the inputs • 0 to 20 mA  0.15 %
• At 50 Hz > 70 dB •  20 mA  0.15 %
• At 60 Hz > 70 dB • 4 to 20 mA
Operating error limits (in the entire temperature 4-wire transducer  0.15 %
range, related to the input range) • 4 to 20 mA
2-wire transducers  0.15 %
•  80 mV  0.38 %
•  250 mV  0.35 %
• 0 to 48  4-wire meas.  0.15 %

•  500 mV  0.35 %
• 0 to 150  4-wire meas.  0.15 %

• 1 V  0.35 %
• 0 to 300  4-wire meas.  0.15 %

•  2.5 V  0.35 %
• 0 to 600 ; 4-wire meas.  0.15 %

• 5 V  0.35 %
• 0 to 5000 
4-wire measurement
• 1 to 5 V  0.35 % (in the range of 6000   0.15 %
•  10 V  0.35 % • 0 to 300  3-wire meas.  0.3 %
• 0 to 20 mA  0.35 % • 0 to 600  3-wire meas.  0.3 %
•  20 mA  0.35 % • 0 to 5000 
• 4 to 20 mA 3-wire measurement
4-wire transducer  0.35 % (in the range of 6000   0.3 %
• 4 to 20 mA Temperature error (related to
2-wire transducers  0.35 % input range)  0.004%/K
• 0 to 48  4-wire meas.  0.35 % Linearity error (related to
• 0 to 150 , 4-wire meas.  0.35 % input range)  0.01%
• 0 to 300  4-wire meas.  0.35 % Repetition accuracy (in
• 0 to 600 ; 4-wire meas.  0.35 % settled state at 25° C, related
to input range)  0.1%
• 0 to 5000 ;
4-wire measurement
(in the range of 6000   0.35 %
• 0 to 300 ; 3-wire meas.  0.5 %
• 0 to 600 ; 3-wire meas.  0.5 %
• 0 to 5000 Ω;
3-wire measurement
(in the range of 6000   0.5 %

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-65
Analog Modules

Status, Interrupts, Diagnostics Data for Selecting a Sensor

Interrupts Input ranges (nominal  80 mV/ > 1M
• Limit value interrupts No ranges)/input resistance  250 mV/ > 1 M
• Diagnostic interrupt No  500 mV/ > 1 M
Diagnostic  1 V/ > 1 M
functions • Injection and sensing of a  2.5 V/ > 1 M
• Wire break test current in the case of  5 V/ > 1 M
voltage sensors and  10 V/ > 1 M
resistance sensors; can be
1 to 5 V/ > 1 M
set. Permissible loop
resistance max. 5 k 0 to 20 mA/ 50 
• Drop below value 4 to 20 mA/50 
in the case of life-zero 0 to 48 
measuring 0 to 150 
ranges;
cannot be set. 0 to 300 
Measured value in the case 0 to 600 
of wire break 7FFFH. 0 to 6000 
• Underflow • Drop below the value 8100H useful to 5000 
in the case of bipolar Permissible input voltage max. 18 V constant;
measuring ranges; cannot for voltage input 75 V for max. 1 ms
be set. (destruction limit) (mark-space ratio
• Drop below the value 1:20)
ED00H in the case of Permissible input current
unipolar measuring ranges; for current input 40 mA
cannot be set. (destruction limit)
• Drop below the Connection of signal
standardized temperature
sensors
curve; cannot be set.
• For voltage measurement Possible
Measured value in the case
of underflow 8000H. • For current measurement
As 2-wire transducer Possible
• Overflow • Value 7EFFH exceeded in
the case of bipolar As 4-wire transducer Possible
measuring ranges; • For resistance
cannot be set. measurement with
• Standardized temperature 2-wire connection Possible
curve exceeded; cannot be 3-wire connection Possible,
set. compensation of the
Measured value in the case line resistances
of overflow 7FFFH. 4-wire connection Possible
• Fault indicators on the Characteristic curve
module linearization Yes, can be set
for internal faults No • For thermocouples Types
for external faults No B,R,S,T,E,J,K,N
• Diagnostic information in accordance with
display No IEC 584;
Types U, L
in accordance with
DIN 43710

S7-400, M7-400 Programmable Controllers Module Specifications

6-66 A5E00069467-03
 Analog Modules

• Thermocouple/degree/ TC TypeB/ Temperature Yes, can be set

digit/nominal temperature 0,1/1820° C compensation
TC TypeR/ • Internal temperature
0,1/1769° C compensation Not possible
TC TypeS/ • External temperature Possible, one
0,1/1769° C compensation with compensating box
TC TypeT/ compensating box per channel
0,1/400° C • External temperature Possible
TC TypeE/ compensation with
0,1/1000° C thermoresistance on
channel 0
TC TypeJ/
0,1/1200° C • Via dynamic reference Possible
temperature value
TC TypeK/
0,1/1372° C Smoothing Yes, can be set in 4 levels by means
of the of digital filtering
TC TypeU/0,1/600° C
measuring
TC TypeL/0,1/900° C values
TC TypeN/ Level Time Resolution
0,1/1300° C constant
None 14 bits
• For resistance Pt 100 in accordance
Weak 1*cycle time 16 bits
thermometers with DIN IEC 751
Medium 4*cycle time 16 bits
Pt 200,
Strong 32*cycle time 16 bits
Pt 500,Pt 1000
64*cycle time
Ni 100 in accordance
with DIN 43760
Ni 1000
• Resistance Pt 100/0.01/130° C
thermometer/degree/digit/ Pt 200/0.01/130° C
nominal temperature
Pt 500/0.01/130° C
Pt 1000/0.01/130° C
Ni 100/0.01/250° C
Ni 1000/0.01/250° C
Pt 100/0.1/850° C
Pt 200/0.1/850° C
Pt 500/0.1/850° C
Pt 1000/0.1/850° C
Ni 100/0.1/250° C
Ni 1000/0.1/250° C

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-67
Analog Modules

6.16 Analog Input Module SM 431; AI 8 x 14 Bits

(6ES7431-1KF20-0AB0)

Order Number
6ES7 431-1KF20-0AB0

Characteristics
The SM 431; AI 8 x 14 Bits is an analog input module with the following
characteristics:
• High-speed A/D conversion, therefore especially suitable for high-dynamic
processes
• 8 inputs for current/voltage measurement
• 4 inputs for resistance measurement
• Resolution 14 bits
• Input ranges for voltage
• Input ranges for current
• Input range for resistance-type sensor
• Free choice between voltage and current
• Supply voltage: 24 VDC
• Isolated

Circuit Block Diagram of the SM 431; AI 8 x 14 Bits

CH0 Measuring
range
CH1 submodule 0

S7-400 bus
Bus controller

A
MULTIPLEXER

Measuring
CH6 range
submodule 3
CH7

+ 5V ENABLE
+ 15V +5V S7-400 bus
L+
0V 0V S7-400 bus
M
– 15V

S7-400, M7-400 Programmable Controllers Module Specifications

6-68 A5E00069467-03
 Analog Modules

Terminal Connection Diagram of the SM 431; AI 8 x 14 Bits

Voltage measurement Resistance measurement

Current measurement
1
2
3
L+ L+
4
5
6 M0+ CH0 Word 0 M0+
V
7 M0- M0-
8
9 CH0 Word 0
10
11 V
M1+ CH1 Word 2 IC0+
12 M1- IC0-
13
14
15
16 M2+ CH2 Word 4 M1+
17 M2- M1-
18
19 CH2 Word 4
20
21 M3+ CH3 Word 6 IC1+
22 M3- IC1-
23
24
25
26 MANA
27
28 A
M4+ CH4 Word 8 M2+
29 M4- M2-
30
31 CH4 Word 8
32
33 A M5+ CH5 Word 10 IC2+
34 M5- IC2-
35
36
37
38 M6+ M3+
Tr CH6 Word 12
39 M6- M3-
40
41 CH6 Word 12
42
43 Tr
M7+ CH7 Word 14 IC3+
44 M7- IC3-
45
46
47
M M
48

Figure 6-3 Circuit Block Diagram of the Analog Input Module SM 431; AI 8 x 14 Bits

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-69
Analog Modules

Adapting to Different Sensors

To adapt the analog input module to different sensors, follow the steps outlined
below:
1. Insert the measuring range submodule into the module. One measuring range
submodule adapts two input channels or one resistance channel to a sensor
type.
2. Set the relevant measuring range for the channels of the module when you set
the module parameters.

Using the Measuring Range Submodules

With the measuring range submodules supplied, you can adapt two successive
input channels or one resistance channel to one sensor type.
The table below contains the assignments of individual measuring range
submodule positions to the relevant sensor types.

Position Sensor Types

A Voltage sensors;  1 V
Resistance sensors in 4-wire connection
B Voltage sensors; 1 ... 5 V,  10 V
C Current sensors
4-wire transducers with current output
D 2-wire transducer
To apply current to these transducers, you must connect 24 V
to the front connector terminals L+ and M.

Warning
! The module can be damaged.
The shunt resistance of an input channel can be destroyed if you accidentally
connect a voltage sensor to the channel and you set the measuring range
submodule to position C (current/4-wire transducer).
Please make sure that the measuring range submodule is in the correct position
before you connect a sensor to the module.

S7-400, M7-400 Programmable Controllers Module Specifications

6-70 A5E00069467-03
 Analog Modules

Parameters
The analog input module SM 431; AI 8 x 14 Bits uses the following static
parameters stored in data set 0.

Parameter Value Range

The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
Voltage measuring range 1V
1 to 5 V
 10 V
Current measuring range for 4-wire transducers 4 to 20 mA
 20 mA
Current measuring range for 2-wire transducers 4 to 20 mA
Resistance measuring range, 4-wire connection 600 
Interference frequency suppression 400 Hz interference suppression
60 Hz interference suppression
50 Hz interference suppression
Smoothing None
Strong

Time Characteristics of the Digital Low Pass

The two figures below show the time characteristics of the digital low pass.
Interference frequency suppression can be set in 4 levels.
The cycle time is not affected by the digital low pass.

Interference frequency Smoothing Filter Order Filter Settling Time in ms

suppression
None None – –
50 Hz None 48 20
60 Hz None 40 16.667
400 Hz None 6 2.5

Step Response when Interference Frequency Suppression is Activated

1
Step Response

0.63

0.5

0
0 Filter settling time t

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-71
Analog Modules

Smoothing
With the smoothing parameter, you choose between the two value ranges
no smoothing/strong smoothing
Switching on additional smoothing only makes sense if you have also set
interference frequency suppression. If you have only set smoothing, the measured
value resolution will be reduced to 9 bits.
The figure below shows the step response when interference frequency
suppression and smoothing are activated.

Interference frequency Smoothing Filter Order Filter Settling Time in ms

suppression
None Strong – –
50 Hz Strong 48 100
60 Hz Strong 40 83.333
400 Hz Strong 6 12.5

Step Response when Interference Frequency Suppression and Smoothing are

Activated

1
Step Response

0.63

0.5

0
0 Filter settling time t

S7-400, M7-400 Programmable Controllers Module Specifications

6-72 A5E00069467-03
 Analog Modules

Basic Requirements for Parameter Assignment

The tables below contain the individual parameters and their basic requirements:

Table 6-23 Measuring Range Deactivated, Resistance Measuring Range, Resistance Thermometers

Parameter Permissible Basic Requirements

on Channel n
Resistance measuring range, 4-wire 0, 2, 4, or 6 You must deactivate the measuring range
connection parameter of channel n+1 (1, 3, 5, 7).
Resistance thermometer swith 0, 2, 4, or 6 You must deactivate the measuring range
linearization, 4-wire connection parameter of channel n+1 (1, 3, 5, 7).

Reason:
The connections of channel n+1 are used to supply the resistance connected to
channel n.
The measuring range submodule sets two channels. For this reason, there are
restricting parameter assignment conditions for two neighboring channels (0/1),
(2/3), (4/5), (6/7).

Table 6-24 Combinations of n Channels: Channel n+1 (n: 0, 2, 4...)

Measuring Range Deacti- Voltage Voltage 1 Voltage Current Current Resistance

Channel n+1 vated 1 V to 5 V 10 V 4-wire 2-wire 4-wire
Measuring trans.* trans.*
Range Channel n
Deactivated x x x x x x
Voltage 1 V x x
Voltage 1 to 5 V x x x
Voltage 10 V x x x
Current 4-wire trans.* x x
Current 2-wire trans.* x x
Resistance 4-wire x

* trans. = transducer

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-73
Analog Modules

Technical Specifications of the SM 431; AI 8 x 14 Bits

Dimensions, Cable Length and Weight Current consumption
Dimensions WxHxD (mm) 25x290x210 • from S7-400 bus (5 VDC) max. 1000 mA
typ. 900 mA
Weight approx. 500 g
• From load current
Module-Specific Data supply L+ 0 to 200 mA
Number of inputs Power losses max. 4.9 W
• For current/voltage
Analog Value Generation
measurement 8
• For resistance Measuring principle Instantaneous
measurement 4 value encoding

Cable length Interference frequency suppression by means of

• Shielded max. 200 m comb filter

Surge protection in External protection

• Can be set for interference
frequency f1 in Hz 400 60 50
accordance with device required in
IEC 1000-4-5 the signal lines • Order 6 40 48
Voltages, Currents, Potentials Conversion time per channel 10 s
Load voltage L+ 24 VDC; only Basic conversion time per 52 s
necessary for channel
supplying 2-wire Cycle time (independent of 420 s
transducers the no. of active channels)
• Reverse polarity protection Yes • Possible resolution (incl. 14 bits (twos
Voltage supply for overrange) complement)
transducers Substitute values switchable No
• Short-circuit protected Yes
Status, Interrupts, Diagnostics
• Feed current per channel typ. 50 mA
Interrupts
Galvanic isolation Yes • Limit value interrupt No
Galvanic isolation between • Diagnostic interrupt No
analog section, bus and local
ground Yes Diagnostic functions No
• Fault indication on the
Test voltage
module
• Between bus and analog for internal fault No
section 2120 VDC
for external fault No
• Between bus and local • Diagnostic information
ground 500 VDC
display No
• Between analog section
and local ground 2120 VDC
• Between analog section
and L+/M 707 VDC
• Between L+/M and local
ground 2120 VDC

Common-mode test voltage

• Between the reference
potentials of the connected
sensors and MANA or
among the sensors
(channels) themselves
(input voltage = 0 V) 8 VAC
Constant current for
resistance sensors approx. 1.7 mA

S7-400, M7-400 Programmable Controllers Module Specifications

6-74 A5E00069467-03
 Analog Modules

Interference Suppression, Error Limits Data for Selecting a Sensor

Interference voltage Input ranges (nominal  1V/10 M
suppression ranges)/input resistance 1 to 5V/10 M
for f = nx (f1”1%);
 10V/100 k
(f1 = interference frequency)
 20mA/50 
• Common-mode
interference > 80 dB, with 4 to 20 mA/50 
VPP < 11V active filter 0   0 
• Normal-mode interference Permissible input voltage for max. 18 V constant
(Peak value of interference voltage input (destruction 75 V for max. 1 ms
< nominal value of the input limit) (mark-space ratio
range) > 40 dB, with 1:20)
active filter Permissible input current for
Cross-talk attenuation current input (destruction 54 mA
between the inputs limit)
• At 50 Hz 70 dB Connection of signal sensors
• At 60 Hz 70 dB • For voltage measurement Possible
Operating error limits (in the • For current measurement Possible
entire temperature range, • As 2-wire-transducer Possible
related to the input range) • As 4-wire-transducer Possible
•1 V  0.7%
• For resistance
• 10 V  0.9% measurement with
• Current input  0.8% 2-wire connection Possible, line
• 0 to 600 R  1.0% resistances are
Basic error limits (operating also measured
error limits at 25° C, related 3-wire connection Not possible
to input range)
•1 V  0.6% 4-wire connection Possible
• 10 V  0.75% Characteristic curve
• Current input  0.7% linearization No
• 0 to 600 R  0.7% Temperature compensation No
Temperature error (related to
input range)
•1 V  0.03% /K
• 10 V  0.03% /K
• Current input  0.03% /K
• 0 to 600 R  0.03% /K
Linearity error (related to
input range)
•1 V  0.05%
• 10 V  0.05%
• Current input  0.05%
• 0 to 600 R  0.05%
Repetition accuracy (in
settled state at 25° C, related
to input range)  0.2%

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-75
Analog Modules

6.17 SM 431 Analog Input Module; AI 16 x 13 Bit

(6ES7431-0HH00-0AB0)

Order Number
6ES7 431-0HH00-0AB0

Characteristics
The SM 431;AI 16 x 13 Bit has the following characteristics:
• 16 inputs for current/voltage measurement
• Resolution13 bits
• Non-isolated (no isolation between bus section and analog section)
• Permissible common-mode voltage 2 VDC/VAC

S7-400, M7-400 Programmable Controllers Module Specifications

6-76 A5E00069467-03
 Analog Modules

Terminal Connection Diagram of the SM 431; AI 13 x 16 Bit

Voltage measurement
Current measurement
1
2
3
L+ L+
4
5
6 M0+ CH0 Word 0
7 M0-
8 M1+ CH1 Word 2
9 M1-
10
11 M2+ CH2 Word 4
12 M2-
13 M3+ CH3 Word 6
14 M3-
15
16 Tr M4+ CH4 Word 8
17 M4-
18 Tr M5+ CH5 Word 10
19 M5-
20
21 Tr M6+ CH6 Word 12
22 M6-
23 Tr M7+ Word 14
CH7
24 M7-
25
26
27
28 M8+ CH8 Word 16
29 M8-
30 M9+ CH9 Word 18
31 M9-
32
33 M10+ CH10 Word 20
34 M10-
35 M11+ CH11 Word 22
36 M11-
37
38 M12+ CH12 Word 24
Tr
39 M12-
40 M13+ CH13 Word 26
Tr
41 M13-
42
43 Tr
M14+ CH14 Word 28
44 M14-
45 Tr M15+ CH15 Word 30
46 M15-
47
M M
48

Figure 6-4 Terminal Connection Diagram of the Analog Input Module SM 431;AI 16 x 13 Bit

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-77
Analog Modules

Block Diagram of the SM 431; AI 13 x 16 Bit

Measuring range module

Tr

Tr

Tr

Tr

ADC

* Tr = Transducer

Tr

*Voltage/current and M must be

Tr
linked to the chassis ground of the
rack

Tr

Tr

Figure 6-5 Block Diagram of the SM 431 Analog Input Module; AI 16 x 13 Bit

S7-400, M7-400 Programmable Controllers Module Specifications

6-78 A5E00069467-03
 Analog Modules

Adapting to Different Sensors

To adapt the analog input module to different sensors, follow the steps outlined
below:
1. Insert the measuring range module into the module. One measuring range
module adapts two inputs channels to a sensor type.
2. Set the relevant measuring range for the channels of the module when you set
the module parameters.

Using the Measuring Range Modules

With the measuring range modules supplied, you can adapt two successive input
channels or one resistance channel to one sensor type.
The following table shows the assignments of individual measuring range module
positions to the relevant sensor types.

Position Sensor Types

A Voltage sensors;  1 V
B Voltage sensors; 1 to 5 V,  10 V
C Current sensors;20 mA, 4 to 20 mA
4-wire transducer with current output
D 2-wire transducer; 4 to 20 mA
To apply current to these transducers, you must connect 24 V
to the front connector terminals L+ and M.

Warning
! The module can be damaged.
The shunt resistance of an input channel can be destroyed if you accidentally
connect a voltage sensor to the channel and you set the measuring range module
to position C (current/4-wire transducer).
Please make sure that the measuring range module is in the correct position
before you connect a sensor to the module.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-79
Analog Modules

Parameters
The analog input module SM 431;AI 16 x 13 Bit use the following static parameters
which are stored in data set 0.

Table 6-25 Static Parameters of the SM 431;AI 16 x 13 Bit

Parameter Value Range

The following settings can be made:
Measuring range deactivated (channel-by- Yes/No
channel)
Voltage measuring range (channel-by-channel) 1V
1 to 5 V
 10 V
Current measuring range for 4-wire transducers 4 to 20 mA
(channel-by-channel)  20 mA
Current measuring range for 2-wire transducers 4 to 20 mA
(channel-by-channel)
Interference frequency suppression (for the 50 Hz Integration time 60 ms
whole module) 60 Hz Integration time 50 ms

The measuring range module sets two channels. For this reason, there are
restricting parameter assignment conditions for two neighboring channels (0/1),
(2/3), (4/5), (6/7).

Table 6-26 Combinations of n Channels; Channel n+1 (n: 0, 2, 4...)

Measuring Range Deacti- Voltage Voltage Voltage Current Current

Channel n+1 vated 1 V 1 to5 V 10 V 4-wire 2-wire
Measuring trans.* trans.*
Range Channel n
Deactivated x x x x x x
Voltage1 V x x
Voltage 1 to 5 V x x x
Voltage 10 V x x x
Current 4-wire trans.* x x
Current 4-wire trans.* x x

* trans. = transducer

S7-400, M7-400 Programmable Controllers Module Specifications

6-80 A5E00069467-03
 Analog Modules

Technical Data of the SM 431; AI 16 x 13 Bit

Dimensions, Cable Length, and Weight Analog Value Generation

Dimensions WxHxD (mm) 25x290x210 Measuring principle Sigma-Delta
transformer
Weight approx. 500 g
(integrating)
Module-Specific Data
• Can be set for interference
Number of inputs frequency f1 in Hz 60 50
• For current/voltage Resulting in:
measurement 16
Integration time/conversion time/resolution (per
Cable length channel)
• Shielded max. 200 m
• Possible integration time in
Surge-protection in External protection ms 50 60
accordance with device required in
IEC1000-4-5 the signal lines
• Possible basic conversion
time in ms 55 65
Voltages, Currents, Potentials
• Cycle time Number of active
Load voltageL+ 24 VDC only channels x basic
necessary for conversion time
supplying 2-wire
• Resolution in bits (incl.
transducers
overrange in second
• Reverse polarity protection Yes complement) 13 13
Voltage supply for
transducers
• Short-circuit protected Yes
• Feed current per channel typ. 50 mA
Galvanic isolation between
analog section and bus No
Galvanic isolation between
analog section, bus and Yes
chassis ground
Test voltage 500 VDC
Common-mode test voltage
• Between the reference
potentials of the connected
sensor and chassis ground
(input voltage = 0 V) 2 VDC, 2 VAC
Current consumption
• From S7-400 bus (5 VDC) max. 100 mA
typ. 70 mA
• From load current
supply L+ 0 to 400 mA
Power losses max. 2 W

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-81
Analog Modules

Interference Suppression, Error Limits Status, Interrupts, Diagnostics

Interference voltage Interrupts
suppression for f=nx(f11%) • Limit value interrupts No
(f1=interference frequency) • Diagnostic interrupts No
• Common mode Diagnostic functions
interference >86 dB
• Fault indicators on the
(VCM<2Vs)
module
• Normal-mode interference for internal faults No
(Peak value of interference for external faults No
< nominal value of the input >60 dB
• Diagnostic functions No
range)
Data for Selecting a Sensor
Cross-talk attenuation
between the inputs Input ranges (nominal
• At 50/60 Hz >50 dB ranges)/input resistance
• For voltage ranges 1V/10 M
Operating error limits (in the
10V/100 k
entire temperature range,
1 to 5 V/100 k
related to the input range)
0.65% • For current measurement 20mA/50 
• 1 V
0.65% 4 to 20mA /50
• 10 V
• 1...5 V 1.0% Permitted input voltage for max. 20 V constant
0.65% voltage input (destruction 75 V for max. 1 ms
• 20 mA limit) (mark-space ratio
• 4...20 mA 0.65%
1:20)
Basic error limit (operating Permitted input current for
error limit at 25 °C, related to current input (destruction
input range) limit) 40 mA constant
• 1 V 0.25%
Connection of signal sensors
• 10 V 0.25%
• For voltage measurement Possible
• 1...5 V 0.5%
• For current measurement Possible
• 20 mA 0.25%
• As 2-wire transducer Possible
• 4...20 mA 0.25%
• As 4-wire transducer Possible
Temperature error (related to
input range)
• In all ranges  0.01% /K
Linearity error (related to
input range)  0.05%
Repetition accuracy (in
settled state at 25°C, related
to input range)  0.1%
Code gaps Code gaps occur
systematically in
the ranges
1 to 5 V and
4 to 20 mA

S7-400, M7-400 Programmable Controllers Module Specifications

6-82 A5E00069467-03
 Analog Modules

6.18 Analog Input Module SM 431; AI 16 x 16 Bits

(6ES7431-7QH00-0AB0)

Order Number
6ES7 431-7QH00-0AB0

Characteristics
The SM 431; AI 16 x 16 Bits is an analog input module with the following
characteristics:
• Diagnostic capability and
• Hardware interrupt capability, therefore especially suitable for processes
requiring close monitoring
• 16 inputs (max. 8 in the case for resistance measurements)
• Resolution 16 bits
• Input ranges for voltage
• Input ranges for current
• Input ranges for resistance sensors, resistance thermometers
• Input ranges for thermocouples
• Temperature sensor types can be assigned
• Linearization of sensor characteristic curves
• Supply voltage: 24 VDC; only required when connecting
2-wire transducers
• Isolated
• Permissible common-mode voltage 120 VAC

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-83
Analog Modules

Terminal Connection Diagram of the SM 431; AI 16 x 16 Bits

CH0 Measuring I
CH1 range const
submodule 0
D

Bus controller
S7-400 bus
Signal
routing PGA

A
Opto-Relay
Multiplexer

Measuring
CH14 range
CH15 submodule 7

+ 15 V

L+ + 5V +5V
Diagnostics
0V S7-400 bus
L+ circuit
M - 15 V 0V

S7-400, M7-400 Programmable Controllers Module Specifications

6-84 A5E00069467-03
 Analog Modules

Circuit Block Diagram of the SM 431; AI 16 x 16 Bits

Thermocouples Resistance measurement

Voltage measurement Resistance thermometer
Current measurement
INTF 1
EXTF 2
3
L+ L+
4
5
6 M0+ CH0 Word 0 M0+
7 M0- M0- CH0 Word 0
8 M1+ CH1 Word 2 IC0+
9 M1- IC0-
10
11 V M2+ CH2 Word 4 M1+
12 M2- M1- CH2 Word 4
13 V M3+ CH3 Word 6 IC1+
14 M3- IC1-
15
16 M4+ CH4 Word 8 M2+
17 M4- M2- CH4 Word 8
18 M5+ CH5 Word 10 IC2+
19 M5- IC2-
20
21 M6+ CH6 Word 12 M3+
22 M6- M3- CH6 Word 12
23 M7+ CH7 Word 14 IC3+
24 M7- IC3-
25
26
27
28 A M8+ CH8 Word 16 M4+
29 M8- M4- CH8 Word 16
30 A M9+ CH9 Word 18 IC4+
31 M9- IC4-
32
33 A
M10+ CH10 Word 20 M5+
34 M10- M5- CH10 Word 20
35 A M11+ CH11 Word22 IC5+
36 M11- IC5-
37
38 Tr
M12+ CH12 Word 24 M6+
39 M12- M6- CH12 Word 24
40 Tr M13+ CH13 Word 26 IC6+
41 M13- IC6-
42
43 M14+ CH14 Word 28 M7+
Tr
44 M14- M7- CH14 Word 28
45 Tr
M15+ CH15 Word 30 IC7+
46 M15- IC7-
47
M M
48

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-85
Analog Modules

Adapting to Different Sensors

To adapt the analog input module to different sensors, follow the steps outlined
below:
1. Insert the measuring range submodule into the module. One measuring range
submodule adapts two input channels or one resistance channel to a sensor
type.
2. Set the relevant measuring range for the channels of the module when you set
the module parameters.

Using the Measuring Range Submodules

With the measuring range submodules supplied, you can adapt two successive
input channels or one resistance channel to one sensor type.
The table below contains the assignments of individual measuring range
submodule positions to the relevant sensor types.

Position Sensor Types

A Thermocouples
Voltage sensors
Resistance sensors in 4-wire connection
Resistance thermometers (RTDs) in 4-wire connection
Resistance sensors in 3-wire connection
Resistance thermometers (RTDs) in 3-wire connection
B Unused
C Current sensors
4-wire transducers with current output
D 2-wire transducers
To supply these transducers, you must connect 24 V to the front
connector terminals L+ and M.

Warning
! The module can be damaged.
The shunt resistance of an input channel can be destroyed if you accidentally
connect a voltage sensor to the channel and you set the measuring range
submodule to position C (current/4-wire transducer).
Please make sure that the measuring range submodule is in the correct position
before you connect a sensor to the module.

S7-400, M7-400 Programmable Controllers Module Specifications

6-86 A5E00069467-03
 Analog Modules

Static Parameters of the SM 431; AI 16 x 16 Bits

Parameter Value Range

Target CPU for interrupts 1 to 4
The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
Voltage measuring range  25 mV
 50 mV
 80 mV
 250 mV
 500 mV
1V
 2.5 V
5V
1 to 5 V
 10 V
Current measuring range for 4-wire transducers  5 mA
 10 mA
0 to 20 mA
4 to 20 mA
 20 mA
Current measuring range for 2-wire transducers 4 to 20 mA
Resistance measuring range, 3-wire connection 300 
600 
6000  max. 
Resistance measuring range, 4-wire connection 48 
150 
300 
600 
6000  max. 
Resistance thermometers with linearization, 3-wire Pt 100 climatic range
connection Pt 200 climatic range
Pt 500 climatic range
Pt 1000 climatic range
Ni 100 climatic range
Ni 1000 climatic range
Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-87
Analog Modules

Parameter Value Range

Resistance thermometer swith linearization, 4-wire Pt 100 climatic range
connection Pt 200 climatic range
Pt 500 climatic range
Pt 1000 climatic range
Ni 100 climatic range
Ni 1000 climatic range
Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range
Thermocouples with linearization Type B
Type N
Type E
Type R
Type S
Type J
Type L
Type T
Type K
Type U
Check for short-circuit to ground Yes/No
Wire break Yes/No
Reference channel check Yes/No
Underflow Yes/No
Overflow Yes/No
Interference frequency suppression 400 Hz interference suppression
60 Hz interference suppression
50 Hz interference suppression
Smoothing None
Weak
Medium
Strong
Reference junction None
RTD on chanel 0
Reference temperature value
dynamic
End-of-cycle interrupt Yes/No

S7-400, M7-400 Programmable Controllers Module Specifications

6-88 A5E00069467-03
 Analog Modules

Dynamic Parameters of the SM 431; AI 16 x 16 Bits

Parameter Value Range

Hardware interrupt enable Yes/No
Diagnostic interrupt enable Yes/No
Reference temperature -27315 to +27648
(in 0.01° C)
The following settings can be made channel-by-channel:
Upper limit value 8000H to 7FFFH
Lower limit value 8000H to 7FFFH

Diagnostic Functions of the SM 431; AI 16 x 16 Bits

Address Meaning Location

0 Diagnostic byte 1 DS0/DS1
7 0

Module fault
Internal fault
External fault
Channel fault
External auxiliary voltage missing
Front connector missing
Module not assigned parameters
Wrong parameters
1 7 0 Diagnostic byte 2 DS0/DS1
0 0 0 0 1 0 1
Module class
Channel information available
2 Diagnostic byte 3 DS0/DS1
7 0
0 0 0 0 0 0
Wrong measuring range
submodule or measuring
range submodule missing
Operating state RUN/STOP
3 7 0 Diagnostic byte 4 DS0/DS1
0 0 0 0
EPROM fault
RAM fault
ADC/DAC error
Hardware interrupt lost

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-89
Analog Modules

Address Meaning Location

4 7 0 Channel type DS1
0 1 1 1 0 0 0 1
^ 71 h : AI
=
5 7 0 Length of information per channel DS1
0 0 0 0 1 0 0 0 ^ 8 : 8 bits long
=

6 7 0 Number of channels DS1

0 0 0 1 0 0 0 0 ^ 16 : 16 channels on module
=

7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7
8 7 0 Channel fault vector DS1

Fault occurred in channel 8

Fault occurred in channel 9
Fault occurred in channel 10
Fault occurred in channel 11
Fault occurred in channel 12
Fault occurred in channel 13
Fault occurred in channel 14
Fault occurred in channel 15
9 to 25 7 0 Diagnostic byte DS1
0 0 (channel-specific)

Parameter error
Short circuit to ground
Wire break
Reference channel error
Underflow
Overflow

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

6-90 A5E00069467-03
 Analog Modules

Time Characteristics of the Digital Low Pass First Order

Smoothing can be set to 4 levels with the smoothing factor k multiplied by the
module cycle time corresponding to the time constant of the filter.
Smoothing factor: k:

None 1
Weak 2
Medium 16
Strong 32

Calculation of the Time Characteristics

You can calculate the time characteristics for any jump of the input value x and
smoothing factor k used according to the following formula:

xn  (k – 1) yn–1
yn :
k
yn = Transfer value to the system in the current cycle n

Step Response for Different Smoothing Factors

1
Step Response

0.63

0.5

0 20 40 60 80 100

Module cycles
k=2
k = 16
k = 32

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-91
Analog Modules

Basic Requirements for Parameter Assignment

The module has diagnostic capability. Parameter errors are indicated via diagnostic
information:
• Module fault
• Internal fault
• Wrong parameters.
If the fault can be assigned to specific channels, the following diagnostic
information is indicated:
• Module fault
• Internal fault
• Channel fault
• Wrong parameters
• Channel information available
• Channel fault vector
• Channel fault bit parameter error.
The following tables contain the individual parameters and their basic
requirements:

Table 6-27 Resistance Measuring Range, Resistance Thermometer with Linearization, 3-Wire and 4-Wire
Connection

Parameter On Channel n Basic Requirement

Resistance measuring range, 0, 2, 4, 6, 8, 10, You must deactivate the measuring range
4-wire connection 12, 14 parameter of channel n+1 (1, 3, 5, 7, 9, 11, 13, 15).
Resistance measuring range, 0, 2, 4, 6, 8, 10, You must deactivate the measuring range
3-wire connection 12, 14 parameter of channel n+1 (1, 3, 5, 7, 9, 11, 13, 15).
Resistance thermometers with 0, 2, 4, 6, 8, 10, You must deactivate the measuring range
linearization, 3-wire connection 12, 14 parameter of channel n+1 (1, 3, 5, 7, 9, 11, 13, 15).
Resistance thermometer swith 0, 2, 4, 6, 8, 10, You must deactivate the measuring range
linearization, 4-wire connection 12, 14 parameter of channel n+1 (1, 3, 5, 7, 9, 11, 13, 15).

Reason:
The connections of channel n+1 are used to supply the resistance connected to
channel n.
The measuring range submodule sets two channels. For this reason, there are
restricting parameter assignment conditions for two neighboring channels (0/1),
(2/3), (4/5), (6/7) (8/9), (10/11), (12/13), (14/15).

S7-400, M7-400 Programmable Controllers Module Specifications

6-92 A5E00069467-03
 Analog Modules

The following table provides an overview:

Table 6-28 Combinations of n Channels: Channel n+1 (n: 0, 2, 4...)

Measuring Range Deac- Vol- Current Current Resi- Resi- Thermo Thermo Ther-
Channeln+1 tiva- tage 4-wire- 2-wire- stance stance resi- resi- mocou-
Measuring ted trans.* trans.* 4-wire 3-wire stance stance ples
Range Channel n 4-wire 3-wire
Deactivated x x x x x
Voltage x x x
Current x x
4-wiretrans.*
Current x x
2-wiretrans.*
Resistance 4-wire x
Resistance 3-wire x
Thermo resistance x
4-wire
Thermo resistance x
3-wire
Thermocouples x x x

* trans. = transducer

Example
If you have selected the current measuring range parameter for 2-wire transducers
for channel 6, you must select only measuring range deactivated or current
measuring range for 2-wire transducers for channel 7.

Table 6-29 Thermocouples with linearization

Parameter On Channel n Basic Requirement

Thermocouples with linearization 0 to 15 You can select the reference junction.

Reason:
Assigning a reference junction only makes sense with thermocouples.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-93
Analog Modules

The following also applies if you select an RTD on channel 0 as the reference
junction:

Table 6-30 Thermocouple with Reference Junction

Parameter Permissible Basic Requirement

on Channel n
Reference junction: RTD 2 to 15 You must connect and set a resistance thermometer with
on channel 0 linearization, 3-wire or 4-wire connection in the climatic
range on channel 0 (see also Table 6-19)

Reason:
If you want to use channel 0 as the reference junction, a resistance sensor must
be connected there that captures absolute temperatures in the climatic range.
Connection of the resistance sensor occupies channels 0 and 1 so that you can
only use channels 2 to 15 with this parameter.

Table 6-31 Current measuring range for 2-wire transducers

Parameter Basic Requirement

Current measuring range for 2-wire You can select diagnostics enable for short-circuit to
transducers ground.

Reason:
You can only check for short-circuit to ground if you have connected a 2-wire
transducer.

Table 6-32 Current measuring range for 4-wire transducers

Parameter Value Range Basic Requirement

Current measuring range for 4-wire 4 to 20 mA You can select diagnostics enable for
transducers wire break check.

Reason:
Wire break check is not possible in the case of current sensors, with the exception
of life-zero ranges.
Requirement: You have connected a thermocouple

S7-400, M7-400 Programmable Controllers Module Specifications

6-94 A5E00069467-03
 Analog Modules

Table 6-33 Thermocouples Reference Junction

Parameter Value Range Basic Requirement

Reference junction RTD on channel 0 You can select diagnostics enable for reference
Reference tempera- channel check.
ture
Reference channel Yes If you have connected and set a thermocouple, you
diagnostics must assign as the reference junction
• RTD on channel 0
or
• Reference temperature value

Reason:
The reference channel is only checked if a thermocouple has been connected
whose reference junction is the “RTD on channel 0” or the “reference temperature
value” entered in DS1.

Table 6-34 Voltage Measuring Range, Current Measuring Range

Parameter Value Range Basic Requirement

Voltage measuring range 1 to 5 V You must set the diagnostics enable for
“Underflow check” of the relevant channel to NO
Current measuring range 4 to 20 mA You must set the diagnostics enable for
for 4-wire transducers “Underflow check” of the relevant channel to NO
Current measuring range 4 to 20 mA You must set the diagnostics enable for
for 2-wire transducers “Underflow check” of the relevant channel to NO

Reason:
There is no underflow in life-zero ranges. A value that is too low or a negative
value is interpreted as a wire break.

Table 6-35 Cycle Interrupt Enable

Parameter Possible on Channel n Basic Requirement

Cycle interrupt enable is YES 0 to 15 You must set the cycle interrupt enable
parameter to NO on all higher channels.

Reason:
You can set only one cycle interrupt.

Dynamic Parameters (Data Set 1)

The “Upper limit value” parameter of channel n must be greater than the “Lower
limit value” parameter of channel n.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-95
Analog Modules

Technical Specifications of the SM 431; AI 16 x 16 Bits

Dimensions and Weight Common-mode test voltage

Dimensions WxHxD (mm) 25x290x210 • Inputs to each other 120 VAC
Weight approx. 650 g • Between input and central
grounding point (input
Module-Specific Data voltage 0 V) 120 VAC
Number of inputs Constant current for
• For current/voltage resistance sensors 1.667 mA
measurement 16 Current consumption
• For resistance • from S7-400 bus (5 VDC) max. 700 mA
measurement 8 typ. 600 mA
• From load current
Surge protection in External protection supply L+ max. 400 mA
accordance with IEC device required in
Only necessary for supplying 2-wire transducers,
1000-4-5 the signal lines
depending on the phase control of the transducer
Cable length, shielded 200 m
Power losses max. 4.5 W
• For the input range Interference Suppression, Error Limits

80 mV and
thermocouples 50 m Interference voltage suppression for f = nx
(f11 %),
Voltages, Currents, Potentials (f1 = interference frequency)
Load voltage L+ 24 VDC only • Common-mode
necessary for interference > 100 dB
supplying 2-wire (VPP < 120V) > 50 dB
• Reverse polarity transducers • Normal-mode interference
protection
(Peak value of interference < nominal value of the
Yes input range)
Voltage supply for
Cross-talk attenuation between the inputs
transducers
• Short-circuit protected Yes • At 400 Hz 70 dB
• Feed current per channel typ. 50 mA • At 50 Hz 70 dB
Galvanic isolation between • At 60 Hz 70 dB
bus, analog section and
local ground Yes
Test voltage
• Between bus and L+/M 2120 VDC
• Between bus and analog
section 2120 VDC
• Between bus and local
ground 500 VDC
• Between analog section
and L+/M 707 VDC
• Between analog section
and local ground 2120 VDC
• Between L+/M and local
ground 2120 VDC

S7-400, M7-400 Programmable Controllers Module Specifications

6-96 A5E00069467-03
 Analog Modules

Operating error limits (in the entire temperature Basic error limits (operating error limits at 25° C,
range, related to the input range) related to input range)
•  25 mV  0.35 % •  25 mV  0.23 %
•  50 mV  0.32 % •  50 mV  0.19 %
•  80 mV  0.31 % •  80 mV  0.17 %
•  250 mV  0.3 % •  250 mV  0.15 %
•  500 mV  0.3 % •  500 mV  0.15 %
• 1 V  0.3 %
• 1 V  0.15 %
•  2.5 V  0.3 %
• 5 V  0.3 % •  2.5 V  0.15 %
• 1 to 5 V  0.3 % • 5 V  0.15 %
•  10 V  0.3 % • 1 to 5 V  0.15 %
• 0 to 20 mA  0.3 % •  10 V  0.15 %
•  5 mA  0.3 % • 0 to 20 mA  0.15 %
•  10 mA  0.3 % •  5 mA  0.15 %
•  20 mA  0.3 % •  10 mA  0.15 %
• 4 to 20 mA
4-wire transducer  0.3 %
•  20 mA  0.15 %
• 4 to 20 mA • 4 to 20 mA
2-wire transducers  0.3 % 4-wire transducer  0.15 %
• 0 to 48  4-wire meas.  0.3 % • 4 to 20 mA
• 0 to 150 , 4-wire meas.  0.3 % 2-wire transducers  0.15 %
• 0 to 300  4-wire meas.  0.3 % • 0 to 48  4-wire meas.  0.15 %
• 0 to 600 ; 4-wire meas.  0.3 % • 0 to 150  4-wire meas.  0.15 %
• 0 to 5000 ; • 0 to 300  4-wire meas.  0.15 %
4-wire measurement
(in the range of 6000   0.3 %
• 0 to 600 ; 4-wire meas.  0.3 %
• 0 to 300 ; 3-wire meas.  0.4 % • 0 to 5000 
• 0 to 600 ; 3-wire meas.  0.4 % 4-wire measurement
(in the range of 6000   0.3 %
• 0 to 300  3-wire meas.  0.3 %
• 0 to 600  3-wire meas.  0.3 %
• 0 to 5000 
3-wire measurement
(in the range of 6000   0.3 %
Temperature error
(related to input range)  0.004%/K
Linearity error
(related to input range)  0.01%
Repetition accuracy
Repetition accuracy (in
settled state at 25° C,
related to the input range)  0.1%

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-97
Analog Modules

Status, Interrupts, Diagnostics Characteristic curve Yes, can be set

linearization
Interrupts
• For thermocouples Types B,R,S,T,E,J,
• Limit value interrupts Yes, can be set
K,N, in accordance
• Diagnostic interrupt Yes, can be set
with IEC 584;
Diagnostic functions Yes, can be set Types U, L,
• Fault indicators on the in accordance with
module DIN 43710
for internal faults Yes, red LED Permissible input voltage max. 18 V constant;
for external faults Yes, red LED for voltage input 75 V for max. 1 ms
• Diagnostic information (destruction limit) (mark-space ratio
display Yes 1:20)
Data for Selecting a Sensor Permissible input current
for current input
Input ranges (nominal 25 mV/>1M (destruction limit) 40 mA
ranges)/input resistance 50 mV/>1M • Thermocouple/degree/ TC TypeB/
80 mV/>1M digit/nominal temperature 0,1/1820° C
250 mV/>1M TC TypeR/
500 mV/>1M 0,1/1769° C
1 V/>1M TC TypeS/
2.5 V/>1M 0,1/1769° C
5 V/>1M TC TypeT/0,1/400° C
1 to 5 V/>1M TC TypeE/
10 mV/>1M 0,1/1000° C
0 to 20 mA/50  TC TypeJ/
 5 mA/50  0,1/1200° C
10 mA/50  TC TypeK/
20 mA/50  0,1/1372° C
4 to 20 mA/50  TC TypeU/0,1/600° C
0 to 48  TC TypeL/0,1/900° C
0 to 150  TC TypeN/
0,1/1300° C
0 to 300 
0 to 600  • For resistance Pt 100
thermometers in accordance with
0 to 6000 ; useful to
5000  DIN IEC 751
Pt 200,
Connection of signal Pt 500,Pt 1000,
sensors
Ni 100
• For voltage measurement Possible in accordance with
• For current measurement DIN 43760
As 2-wire transducer Possible Ni 1000
As 4-wire transducer Possible • Resistance Pt 100/ 0.01/130° C
• For resistance thermometer/degree/digit/ Pt 200/ 0.01/130° C
measurement with nominal temperature Pt 500/ 0.01/130° C
2-wire connection Possible Pt 1000/ 0.01/130° C
3-wire connection Possible, Ni 100/ 0.01/250° C
compensation of the Ni 1000/ 0.01/250° C
line resistances Pt 100/ 0.1/850° C
4-wire connection Possible Pt 200/ 0.1/1820° C
Pt 500/ 0.1/850° C
Pt 1000/ 0.1/850° C
Ni 100/0,1/250° C
Ni 1000/ 0.1/250° C

S7-400, M7-400 Programmable Controllers Module Specifications

6-98 A5E00069467-03
 Analog Modules

Temperature Yes, can be set Resulting in:

compensation
Integration time/conversion time/resolution(per
• Internal temperature channel)
compensation Not possible
• External • Possible integration time in 2.5 16.7 20
ms
temperature Possible, one
compensation with compensating box per • Possible basic conversion
compensating box channel time in ms 6 21.1 23.5
• External Additional conversion time
temperature for resistance
compensation with measurement for 3 -wire
thermoresistance on connection in ms 12 40.2 47
channel 0 Possible or
• Via dynamic additional conversion time
reference for wire break monitoring
temperature value Possible except in the case of
Smoothing Yes, can be set in 4 levels by means resistance measurement
of the of digital filtering in ms 4.3 4.3 4.3
measuring or
values additional conversion time
Level Time Resolution for wire break monitoring in
constant the case of resistance
None 1*cycle time 14 bits measurement 5.5 5.5 5.5

Weak 2*cycle time 16 bits • Cycle time Number of active

channels x
Medium 16*cycle time 16 bits
basic conversion time
Strong 32*cycle time 16 bits
• Possible resolution in bits
Analog Value Generation
(incl. overrange) 16 16 16
Measuring principle Integrating
Interference frequency
suppression
• Can be set for interference 400 60 50
frequency f1 in Hz

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-99
Analog Modules

6.19 Analog Input Module SM 431; AI 8 x RTD x 16 Bits

(6ES7 431-7KF10-0AB0)

Order Number
6ES7 431-7KF10-0AB0

Characteristics
The SM 431; AI 8 x RTD x 16 Bits is an analog input module with the following
characteristics:
• 8 differential inputs for resistance thermometers (RTD)
• Resistance thermometer (RTD) can have parameters assigned
• Linearization of the RTD characteristic curves
• Resolution 16 bits
• 25 ms update rate for 8 channels
• Galvanically isolated (programmable controller-to-field), 1500 VAC
• Permissible common-mode voltage 120 VAC
• Diagnostic capability
• Hardware interrupt capability, especially suitable for processed requiring close
monitoring
• No external power requirements

Note
This analog module does not use the measuring range submodules desribed in
the S7-400, M7-400 Programmable Controllers, Module Specifications Reference
Manual. The upper and lower limit values and the overflow ranges are different
from the ranges shown in Chapter 6.

S7-400, M7-400 Programmable Controllers Module Specifications

6-100 A5E00069467-03
 Analog Modules

Circuit Block Diagram of the SM 431; AI 8 x RTD x 16 Bits

Ch0 RTD Isolation boundary

current
source
OCI
End of
scan cycle
SO+0
SE+0
SE-0 16K
OCI EEPROM
AGND
Ch0 diff. buffer
AMP
Serial
bus 32K
80C32 RAM
micro-
Analog 8 channel processor
switch 16 bit
channel delta-sigma
config. Ch7 RTD A/D converter 64K
stage current EPROM
source
8 bit parallel
ADR/data bus

SO+7
SE+7
SM400
SE-7 S7-400
ASIC
AGND Ch7 diff. bus
buffer AMP

Command
register and Isolated DC-DC converter
latch
+5
+9
+5 V from
-5
Mode backplane
-9
register

Overrange,
wire-break
register

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-101
Analog Modules

Connection Diagram of the SM 431; AI 8 x RTD x 16 Bits

INTF 1
EXTF 2
3
4
5
6 SE+0
7 SE-0
CH0 Word 0
8 SO0
9 AGND
10
11 SE+1
12 SE-1
CH1 Word 1
13 SO1
14 AGND
15
16 SE+2
17 SE-2
18 CH2 Word 2
SO2
19 AGND
20
21 SE+3
22 SE-3
CH3 Word 3
23 SO3
24 AGND
25
26
27
28 SE+4
29 SE-4
CH4 Word 4
30 SO4
31 AGND
32
33 SE+5
34 SE-5
CH5 Word 5
35 SO5
36 AGND
37
38 SE+6
39 SE-6
CH6 Word 6
40 SO6
41 AGND
42
43 SE+7
44 SE-7
CH7 Word 7
45 SO7
46 AGND
47
48

S7-400, M7-400 Programmable Controllers Module Specifications

6-102 A5E00069467-03
 Analog Modules

Static Parameters of the SM 431; AI 8 x RTD x 16 Bits

Parameter Value Range

Target CPU for interrupts 1 to 4
The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
RTD with linearization, 3-wire connection Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range
RTD with linearization, 4-wire connection Pt 100 standard range
Pt 200 standard range
Pt 500 standard range
Pt 1000 standard range
Ni 100 standard range
Ni 1000 standard range
Temperature coefficient of RTD sensors Platinum (Pt)
0.00385  /° C
0.003916  /° C
0.003902  /° C
0.003920  /° C
Nickel (Ni)
0.00618  /° C
0.00672  /° C
Wire-break check Yes/No
Underflow check Yes/No
Overflow check Yes/No
Smoothing None
Weak
Medium
Strong
The following settings can be made only to all channels:
Interference frequency suppression None
60 Hz
50 Hz
Temperature format °C
°F

Dynamic Parameters of the SM 431; AI 8 x RTD x 16 Bits

Parameter Value Range

Hardware interrupt enable Yes/No
Diagnostic interrupt enable Yes/No
The following settings can be made channel-by-channel:
Upper hardware interrupt limit value range -32768 to 32767
Lower hardware interrupt limit value range -32768 to 32767
*Hardware interrupt settings must be within the rated temperature range of the set sensor
type.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-103
Analog Modules

Diagnostic functions
The SM 431; AI 8 x RTD x 16 Bits uses the following diagnostic possibilities:

Address Meaning Location

0 7 0 Diagnostic byte 1 DS0/DS1
0
Module fault
Internal fault
External fault
Channel fault
Front connector missing
Module not assigned parameters
Wrong parameters
1 7 0 Diagnostic byte 2 DS0/DS1
0 0 0 0 1 0 1
05H : Module class
Channel information available
2 7 0 Diagnostic byte 3 DS0/DS1
0 0 0 0 0 0 0

Operating state RUN/STOP

3 7 0 Diagnostic byte 4 DS0/DS1
0 0 0 0 0

EPROM fault
Analog/digital converter fault
Hardware interrupt lost
4 7 0 Channel type DS1
0 1 1 1 0 0 0 1
71H : AI (analog input)
5 7 0 Length of information per channel DS1
0 0 0 1 0 0 0 0 10H : 16 bits long

6 7 0 Number of channels DS1

0 0 0 0 1 0 0 0 08H : 8 channels on module

S7-400, M7-400 Programmable Controllers Module Specifications

6-104 A5E00069467-03
 Analog Modules

Address Meaning Location

7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7
8, 10 to 7 0 Channel-specific DS1
22 0 0 0 0 diagnostic byte 1

Parameter error
Wire break
Underflow
Overflow
9, 11 to 7 0 Channel-specific DS1
23 diagnostic byte 2
0
User connector not wired
Sense + lead open
Sense - lead open
Calibration error*
Out of range
Current source line open
User calibration mismatch with
parameter assignment

*This module performs a run-time calibration on each channel every 2 to

6 minutes, depending on the number of channels programmed. If there is a
wiring error present on a set channel during the calibration cycle, this bit will be
set. After the wiring error is corrected, the bit remains set until the next
calibration (up to 6 minutes). You can also reset the bit by placing the PLC in
STOP mode and then back to RUN mode.

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-105
Analog Modules

Smoothing
Smoothing can be set to four different levels for each channel. The smoothing filter
function is implemented in the module by providing a rolling average of the number
of readings determined by the smoothing level parameter you assign for each
channel. The number of samples used in the rolling average for a given smoothing
level is shown below.

None 1
Weak 2
Medium 16
Strong 32

Step Response
The amount of smoothing assigned to a given channel determines the step
response for that channel. The figure below shows the response to a step of 50° C
for a 100-ohm 0° C RTD using weak, medium, and strong smoothing.

50° C step response for a 100  ° C RTD

Temperature
in degrees C
60

50

40

30

20

10
0
0 1 2 3 4 5 6
Step response time in seconds
Smoothing
Strong
Medium
Weak

S7-400, M7-400 Programmable Controllers Module Specifications

6-106 A5E00069467-03
 Analog Modules

Parameter Error
The module has diagnostic capability. Parameter errors are indicated via diagnostic
information:
• Module fault
• Internal fault
• Wrong parameters
• Module not assigned parameters
If the fault can be assigned to specific channels, the following diagnostic
information is indicated:
• Module fault
• Internal fault
• Channel fault
• Wrong parameters
• Channel information available
• Channel fault vector
• Channel parameter error
• Calibration mismatch with parameter assignment

Dynamic Parameters (Data Set 1)

The “Upper limit value” parameter of channel n must be greater than the “Lower
limit value” parameter of channel n.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-107
Analog Modules

Technical Specifications of the SM 431; AI 8 x RTD x 16 Bits

Dimensions, Cable Length and Weight Accuracy and Repeatability

Dimensions WxHxD (mm) 25x 290 x 210 Basic accuracy typ. max.
25° C 25° C
Weight approx. 650 g
Module-Specific Data
• 100  Pt. 0.1° C 0.5° C
• 200  Pt. 0.1° C 0.3° C
Number of RTD inputs 8
• 500  Pt. 0.1° C 0.2° C
Overvoltage protection in External protection • 1000  Pt. 0.1° C 0.2° C
acc. with IEC 1000-4-5 device required in
the signal lines Full range accuracy Basic accuracy
(0 to 60° C) 25° C 30 ppm/° C
Cable length, shielded 200 m
Repeatability (full 3-wire 4-wire
Voltages, Currents, Potentials temperature range) mode mode
Galvanic isolation between Yes, 3 mm • 100  Pt. 0.4° C 0.2° C
bus, analog inputs, and clearance
chassis ground
• 200  Pt. 0.2° C 0.1° C
• 500  Pt. 0.1° C 0.1° C
Test voltage
• 1000  Pt. 0.1° C 0.1° C
• Between bus and
1500 VAC Status, Interrupts, Diagnostics
analog input section
• Between bus and Interrupts
chassis ground 500 VAC • Limit value interrupts Yes, can be set
• Between analog input • Diagnostic interrupts Yes, can be set
section and chassis
ground Diagnostic functions Yes, can be set
1500 VAC
Common-mode test voltage • Fault indicators on the
module
• Inputs to each other None
for internal fault Yes, red LED
• Between input and (upper)
central grounding point
for external fault Yes, red LED (lower)
(input voltage 0 V) 120 VAC
• Diagnostic information
Constant current for 1.0 mA per channel read out via data sets Yes
resistance sensors
Data for Selecting a Sensor
Current consumption from max. 650 mA
S7-400 bus (5 VDC) typ. 450 mA RTDs Pt 100, 0.00385
in accordance with
Interference Suppression, Error Limits
DIN IEC 751
Interference voltage suppression for f = Ni 100, 0.00618
nx (f1  1%), (f1 = set interference frequency) in accordance with
• Common-mode DIN 43760
interference Pt 200,
(UCM < 120V) > 100 dB Pt 500,
Pt 1000
• Common-mode
Ni 1000
interference (peak value
of interference Resolution in degrees 0.1 (° C or ° F)
< nominal value of the (all sensor types)
input range) > 50 dB
Cross-talk attenuation between the inputs
• At 50 Hz 70 dB
• At 60 Hz 70 dB

S7-400, M7-400 Programmable Controllers Module Specifications

6-108 A5E00069467-03
 Analog Modules

Rated Temperature Range

Pt 100 -200° C ... 850° C
Pt 200 -200° C ... 850° C
Pt 500 ( = 0.00385) -200° C ... 830° C
Pt 500 ( = 0.003916) -200° C ... 810° C
Pt 500 ( = 0.003902) -200° C ... 800° C
Pt 500 ( = 0.00392) -200° C ... 800° C
Pt 1000 -200° C ... 240° C
Ni 100 ( = 0.00618) -60° C ... 250° C
Ni 100 ( = 0.00672) -75° C ... 275° C
Ni 1000 ( = 0.00618) -60° C ... 140° C
Ni 1000 ( = 0.00672) -75° C ... 130° C
Smoothing of the Yes, can be set in 4
measuring values levels by means of
digital filtering
Smoothing Time constant
None 1 * cycle time
Weak 2 * cycle time
Medium 16 * cycle time
Strong 32 * cycle time
Analog Value Generation
Analog/digital conversion Sigma/Delta type
method (pipeline)
Interference frequency
suppression f1 60 Hz, 50 Hz
Conversion time/resolution
• Update time (8
channels, 50 Hz
rejection enabled) <25.0 ms
• Update time (1 channel,
no line noise rejection) <8.0 ms
Time required for run-time
calibration with no new data
updates (not deselectable)

• 4-wire connection 120 ms, occurring

every 2 to
6 minutes,
depending on the
number of channels
programmed
• 3-wire mode (includes 200 ms, occurring
3-wire correction every 2 to
measurement) 6 minutes,
depending on the
number of channels
programmed
Time required for wire break max. 100 ms, every
check with no new data 1 to 4 s, depending
updates (not deselectable) on the number of
channels
programmed
Resolution (including
overrange) 16 bits

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-109
Analog Modules

Resistance Thermometer Temperature Ranges

The figure below shows the temperature ranges (in ° C) for each resistance
thermometer sensor type of the analog input module
SM 431; AI 8 x RTD x 16 Bits.

Temperature Range
System Word Pt 100, Pt 500 Pt 1000 Ni 100 Ni 1000
Decimal Hex. Pt 200 0.00385 0.003916 0.003902 0.00392 0.00618 0.00672 0.00618 0.00672
32767 7FFF

Overflow
9350 2486 935.0
9130 23AA 913.0
8910 22CE 891.0
8800 2260 880.0 880.0
8500 2134 850.0
8300 206C 830.0
8100 1FA4 810.0
8000 1F40 800.0 800.0

3000 BB8 300.0

2750 ABE 275.0 275.0
2640 A50 264.0
2500 9C4 250.0
2400 960 240.0
1550 60E 155.0
1430 596 143.0
1400 578 140.0
1300 514 130.0

1 1 0.1 0.1 0.1 0.1 0.1 0.1 0.1 0.1 0.1 0.1
0 0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0
-1 FFFF -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1

-600 FDA8 -60.0 -60.0

-660 FDC6 -66.0 -66.0
-750 FD12 -75.0 -75.0
-830 FCC2 -83.0 -83.0

-2000 F830 -200.0 -200.0 -200.0 -200.0 -200.0 -200.0

-2200 F768 -220.0 -220.0 -220.0 -220.0 -220.0 -220.0
Underflow
-32768 8000
Standard: 1 digit = 0.1° C

Nominal range
Overrange/underrange
Overflow/underflow

S7-400, M7-400 Programmable Controllers Module Specifications

6-110 A5E00069467-03
 Analog Modules

6.20 Analog Input Module SM 431; AI 8 x 16 Bits

(6ES7 431-7KF00-0AB0)

Order Number
6ES7 431-7KF00-0AB0

Characteristics
The SM 431; AI 8 x 16 Bits is an analog input module with the following
characteristics:
• 8 isolated differential analog inputs
• Input range for voltage
• Input range for thermocouple
• Input range for 4-wire transducer
• Can have parameters assigned for voltage, current, and thermocouple
• Linearization of the thermocouple characteristic curves
• Isolated bus to analog inputs
• Diagnostic capability
• Hardware interrupt capability, especially suitable for processed requiring close
monitoring
• Permissible common-mode voltage 120 VAC
• Internal current sense resistor
• Field connector (6ES7 431-7KF00-6AA0) with internal reference temperature
(shipped with module)
• Analog-to-digital conversion resolution 24 bits (including sign)
• Analog value resolution 16 bits (including sign)
• No external power requirements

Note
This analog module does not use the measuring range submodules desribed in
the S7-400, M7-400 Programmable Controllers, Module Specifications Reference
Manual. The upper and lower limit values and the overflow ranges are different
from the ranges shown in Chapter 6.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-111
Analog Modules

Circuit Block Diagram of the SM 431; AI 8 x 16 Bits

Input 0
Thermocouple connector
6ES7 431-7KF00-6AA0

Cold junction
sensor 1
+15V
-15V Cold junction

Data bus
+5V
GND sensor 2

Cold junction
sensor 3
Input 1
Cold junction
sensor 4

Input 2 Micro-
processor EEPROM
80C32

Input 3

EPROM
Input 4

RAM Reset
logic
Address bus

Input 5

S7-400 bus
Input 6
SM400
bus interface

Input 7

S7-400, M7-400 Programmable Controllers Module Specifications

6-112 A5E00069467-03
 Analog Modules

Terminal Connection Diagram of the SM 431; AI 8 x 16 Bits

Optional connector Connector with Thermocouples

(screw type) temperature reference Voltage measurement
Current measurement
INTF 1
EXTF 2
3
4
5
6
7
8
9 M0+ M0+
0 M0+ M0+
10 CH0 Word 0
11 R0 R0
12 M0- M0-
13
14 M1+ M1+
1 M1+ M1+
15
R1 R1 CH1 Word 1
16
17 M1- M1-
18
19 M2+ M2+
2 M2+ M2+
20
A R2 V R2 CH2 Word 2
21
22 M2- M2-
23
24 M3+ M3+
3
25 M3+ M3+ CH3 Word 3
V R3
V R3
26
27 M3- M3-
28
29 M4+ M4+
4 30 M4+ M4+
V R4 A R4 CH4 Word 4
31
32 M4- M4-
33
34 M5+ M5+
5 M5+ M5+
35
A R5 A R5 CH5 Word 5
36
37 M5- M5-
38
39 M6+ M6+
6 M6+ M6+
40
Tr Tr CH6 Word 6
41 R6 R6
42 M6- M6-
43
44 M7+ M7+
7 M7+ M7+
45
Tr R7
Tr R7
CH7 Word 7
46
47 M7- M7-
48

6ES7 492-1AL00-0AA0 6ES7 431-7KF00-6AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-113
Analog Modules

Static Parameters of the SM 431; AI 8 x 16 Bits

Parameter Value Range

Target CPU for interrupts 1 to 4
The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
Voltage measuring range 25 mV
50 mV
80 mV
100 mV
250 mV
500 mV
1 V
2.5 V
5 V
10 V
1 to 5 V
Current measuring range for 4-wire ”3.2 mA
transducers ”5 mA
”10 mA
”20 mA
0 to 20 mA
4 to 20 mA
Thermocouples with linearization Type B
Type N
Type E
Type R
Type S
Type J
Type L
Type T
Type K
Type U
Cold reference junction None
Internal
Dynamic
Wire break Yes/No
Underflow check Yes/No
Overflow check Yes/No
Reference check Yes/No
Interference frequency suppression 10 Hz
50 Hz
60 Hz
400 Hz
Smoothing None
Weak
Medium
Strong
The following settings can be made only to all channels:
Temperature format* °C
°F
*Affects output temperature format and dynamic reference temperature format.

S7-400, M7-400 Programmable Controllers Module Specifications

6-114 A5E00069467-03
 Analog Modules

Dynamic Parameters of the SM 431; AI 8 x 16 Bits

Parameter Value Range

Hardware interrupt enable Yes/No
Diagnostic interrupt enable Yes/No
Reference temperature
• 1/100° C -273.15 to 327.67° C
• 1/100° F -327.68 to 327.67° F
The following settings can be made channel-by-channel:
Upper hardware interrupt limit value range -32768 to 32767
Lower hardware interrupt limit value range -32768 to 32767
*Hardware interrupt settings must be within the rated temperature range of the set sensor
type.

Diagnostic Functions
The SM 431; AI 8 x 16 Bits uses the following diagnostic possibilities:

Address Meaning Location

0 Diagnostic byte 1 DS0/DS1
7 0
0
Module fault
Internal fault
External fault
Channel fault
Front connector missing
Module not assigned parameters
Wrong parameters
1 Diagnostic byte 2 DS0/DS1
7 0
0 0 0 0 1 0 1
05H : Module class
Channel information
available
2 Diagnostic byte 3 DS0/DS1
7 0
0 0 0 0 0 0
Thermocouple connector fault
Operating state RUN/STOP

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-115
Analog Modules

Address Meaning Location

3 7 0 Diagnostic byte 4 DS0/DS1
0 0 0 0

EPROM fault
RAM fault
Analog/digital converter fault
Hardware interrupt lost
4 7 0 Channel type DS1
0 1 1 1 0 0 0 1
71H : AI (analog input)
5 7 0 Length of information per channel DS1
0 0 0 1 0 0 0 0 10H : 16 bits long

6 7 0 Number of channels DS1

0 0 0 0 1 0 0 0 08H : 8 channels on module

7 7 0 Channel fault vector DS1

Fault occurred in channel 0

Fault occurred in channel 1
Fault occurred in channel 2
Fault occurred in channel 3
Fault occurred in channel 4
Fault occurred in channel 5
Fault occurred in channel 6
Fault occurred in channel 7
8, 10 to 7 0 Channel-specific DS1
22 diagnostic byte 1
0 0 0
Parameter error
Wire break
Reference channel error
Underflow
Overflow
9, 11 to 7 0 Channel-specific DS1
23 diagnostic byte 2
0 0 0 0 0 0
Run-time calibration error
User calibration mismatch with
parameter assignment

0 = default value 0; the module does not process this diagnostic function
1 = default value 1; the module uses constants
- = no default; the module uses variables, value 1 corresponds to a fault

S7-400, M7-400 Programmable Controllers Module Specifications

6-116 A5E00069467-03
 Analog Modules

Smoothing
Smoothing can be set to four different levels for each channel. The smoothing filter
function is implemented in the module by calculating the output of a digital filter.
The number of readings (smoothing factor) used in calculating the digital filter
output for a given smoothing level is shown below.

None 1
Weak 2
Medium 16
Strong 32

Step Response
The amount of smoothing assigned to a given channel determines the step
response for that channel. The figure below shows the full range response for any
analog input signal using none, weak, medium, and strong smoothing. The time
the output value takes to read the specified accuracy is determined by the
interference suppression selected.

Step response for any analog input signal

Procent of
signal change

Smoothing
None
Weak
Medium
Strong

Response times in ms per number of readings for each filter selection:

displayed 1 2 16 32
values
10 Hz 100 200 1600 3200 ms

50 Hz 20 40 320 ms 640 ms

60 Hz 16.7 33.3 267 533 ms

400 Hz 10 20 160 mA 320 ms ms

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-117
Analog Modules

Parameter Errors
The module has diagnostic capability. Parameter errors are indicated via diagnostic
information:
• Module fault
• Internal fault
• Wrong parameters
• Module not assigned parameters
If the fault can be assigned to specific channels, the following diagnostic
information is indicated:
• Module fault
• Internal fault
• Channel fault
• Wrong parameters
• Channel information available
• Channel fault vector
• Channel parameter error
• Calibration mismatch with parameter assignment

Dynamic Parameters (Data Set 1)

The “Upper limit value” parameter of channel n must be greater than the “Lower
limit value” parameter of channel n.

S7-400, M7-400 Programmable Controllers Module Specifications

6-118 A5E00069467-03
 Analog Modules

Technical Specifications of the SM 431; AI 8 x 16 Bits

Dimensions, Cable Length and Weight Accuracy and Repeatability

Dimensions WxHxD (mm) 25x290x210 Basic accuracy typ. max.
25° C 0 - 60° C
Weight approx. 650 g
• 25 mV 0.05% 0.3%
Module-Specific Data
• 50 mV 0.05% 0.3%
Number of inputs 8 • 80 mV 0.05% 0.3%
Overvoltage protection in External protection • 100 mV 0.05% 0.3%
acc. with IEC 1000-4-5 device required in • 250 mV 0.05% 0.3%
the signal lines • 500 mV 0.05% 0.3%
Cable length, shielded 200 m • 1 V 0.05% 0.3%
Voltages, Currents, Potentials • 2.5 V 0.05% 0.3%
Galvanic isolation between • 5 V 0.05% 0.3%
bus, analog inputs, and • 10 V 0.05% 0.3%
chassis ground Yes, 3mm clearance • 1 to 5 V 0.05% 0.3%
• 3.2 mA  0.15%  0.5%
Test voltage • 5 mA  0.15%  0.5%
• 10 mA  0.15%  0.5%
• Between bus and
analog input section 1500 VAC • 20 mA  0.15%  0.5%
•  0.15%  0.5%
• Between bus and 0 to 20 mA
chassis ground 500 VAC • 4 to 20 mA  0.15%  0.5%
• Between analog inputs • Type B 0.9° C 3.5° C
(channel-to-channel) 1500 VAC • Type N 0.7° C 2.7° C
• Between analog inputs • Type E 0.5° C 1.8° C
and chassis ground 1500 VAC • Type R 0.9° C 3.3° C
Common-mode test voltage • Type S 0.8° C 3.2° C
• 0.6° C 2.4° C
• Inputs to each other 120 VAC Type J
• 0.4° C 1.7° C
• Between input and Type L
• Type T 0.2° C 0.8° C
central grounding point
(input voltage 0 V) 120 VAC • Type K 0.6° C 2.5° C
• Type U 0.3° C 1.2° C
Current consumption from max. 1200 mA
S7-400 bus (5 VDC) typ. 820 mA Full range drift
Interference Suppression, Error Limits (0 to 60° C) 2 ppm/° C
Deviation internal
Interference voltage suppression for
resistance-type sensor 25 ppm/° C
f = nx (f1  1%),
(f1 = set interference frequency) Note:
• Common-mode The accuracy of thermocouples is given for a reference
junction temperature of 0° C. The accuracy when
interference
> 130 dB recording the reference junction temperature must be
(UCM < 120V) added to the values.
• Common-mode The accuracy of 4-wire transducers includes the
interference (peak value accuracy of the internal resistance-type sensor and the
of interference deviation values.
< nominal value of the Thermocouple connector (6ES7431-7KF00-6AA0)
input range) > 80 dB
Accuracy of the internal reference junction temperature 0
• Cross-talk attenuation to 60° C:2° C
between the inputs > 130 dB

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-119
Analog Modules

Accuracy and Repeatability Data for Selecting a Sensor

Repeatability (full typ. Input impedance (input 25 mV / > 2 M
temperature range) 10, 50, 60, 400 Hz range/input impedance) 50 mV / > 2 M
• 25 mV 0.011% 0.014% 80 mV / > 2 M
• 50 mV 0.011% 0.014% 100 mV / > 2 M
250 mV / > 2 M
• 80 mV 0.011% 0.014%
500 mV / > 2 M
• 100 mV 0.011% 0.014% 1 V / > 2 M
• 250 mV 0.007% 0.011% 2.5 V / > 2 M
• 500 mV 0.007% 0.011% 5 V / > 2 M
• 1 V 0.004% 0.007% 10 V / > 2 M
1 to 5 V / > 2 M
• 2.5 V 0.004% 0.007%
3.2 mA / 50 
• 5 V 0.004% 0.007%
5 mA / 50 
• 10 V 0.004% 0.007% 10 mA / 50 
• 1 to 5 V 0.004% 0.007% 20 mA / 50 
• 3.2 mA 0.007% 0.011% 0 to 20 mA / 50 
• 5 mA 0.007% 0.011% 4 to 20 mA / 50 
Typ B / > 2 M
• 10 mA 0.004% 0.007%
Type N / > 2 M
• 20 mA 0.004% 0.007%
Type E / > 2 M
• 0 to 20 mA 0.004% 0.007% Type R / > 2 M
• 4 to 20 mA 0.004% 0.007% Type S / > 2 M
• Type B 0.2° C 0.2° C Type J / > 2 M
0.1° C 0.2° C Type L / > 2 M
• Type N
Type T / > 2 M
• Type E 0.1° C 0.1° C
Type K / > 2 M
• Type R 0.2° C 0.2° C Type U / > 2 M
• Type S 0.2° C 0.2° C
Analog value resolution
• Type J 0.1° C 0.2° C
• 25 mV 904 nV
• Type L 0.1° C 0.1° C
• 50 mV 1.8 V
• Type T 0.1° C 0.1° C
• 80 mV 2.9 V
• Type K 0.1° C 0.2° C
• 100 mV 3.6 V
• Type U 0.1° C 0.1° C
• 250 mV 9.0 V
Status, Interrupts, Diagnostics • 500 mV 18.1 V
Interrupts • 1 V 36.2 V
• Limit value interrupts Yes, can be set • 2.5 V 90.4 V
• Diagnostic interrupts Yes, can be set • 5 V 180.8 V
Diagnostic functions Yes, can be set • 10 V 361.7 V
• Fault indicators on the • 1 to 5 V 144.7 V
module • 3.2 mA 115.7 nA

for internal fault Yes, red LED (upper) • 5 mA 180.8 nA

for external fault Yes, red LED (lower) • 10 mA 361.7 nA
• Diagnostic information • 20 mA 723.4 nA
read out via data sets Yes • 0 to 20 mA 723.4 nA
• 4 to 20 mA 578.7 nA
• All thermocouple types 0.1° C or 0.1° F

S7-400, M7-400 Programmable Controllers Module Specifications

6-120 A5E00069467-03
 Analog Modules

Rated Temperature Range

Type B 0° C to 1820° C
Type N -270° C to 1300° C
Type E -270° C to 1000° C
Type R -50° C to 1768° C
Type S -50° C to 1768° C
Type J -210° C to 1200° C
Type L -200° C to 900° C
Type T -270° C to 400° C
Type K -270° C to 1372° C
Type U -200° C to 600° C
Smoothing of the Yes, can be set in
measuring values 4 levels by means of
digital filtering
Smoothing Time constant
None 1 * conversion time
Weak 2 * conversion time
Medium 16 * conversion time
Strong 32 * conversion time

Analog Value Generation

Analog/digital conversion Sigma/Delta type
method (one per channel)
Resolution (including
overrange) 24 bits
Interference Frequency 10, 50, 60, and
Suppression 400 Hz
Time required for run-time 9* update time,
calibration with no new occurring every
data updates (not 2 to 5 seconds
deselectable)
Interference Conversion Conversion
frequency time resolution*
10 Hz 100 ms >20 bits
50 Hz 20 ms >20 bits
60 Hz 16.7 ms >19 bits
400 Hz 10 ms >15 bits

* Effective resolution due to conversion noise; includes

repeatability

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-121
Analog Modules

Thermocouple Temperature Ranges

The figure below shows the temperature ranges (in ° C) for each thermocouple
type in the analog input module SM 431; AI 8 x 16 Bits.
In the case of thermocouples, temperature data refers to differential temperatures
or absolute temperatures at a reference junction temperature of 0° C.

System Word Thermocouple Temperature Ranges

Decimal Hex. Type B Type R Type S Type T Type E Type J Type K Type U Type L Type N
32767 7FFF

Overflow
18200 4718 1820.0

17690 451A 1769.0 1769.0

13720 3598 1372.0

13000 32C8 1300.0

12000 2EE0 1200.0

10000 2710 1000.0

9000 2328 900.0

6000 1770 600.0

4000 FA0 400.0

1 1 0.1 0.1 0.1 0.1 0.1 0.1 0.1 0.1 0.1 0.1
0 0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0
-1 FFFF -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1 -0.1

-500 FE0C -50.0 -50.0

-2000 F830 -200.0 -200.0

-2100 F7CC -210.0

-2700 F574 -270.0 -270.0 -270.0 -270.0

Underflow
-32768 8000
Standard: 1 digit = 0.1° C

Nominal range
Overflow/underflow

S7-400, M7-400 Programmable Controllers Module Specifications

6-122 A5E00069467-03
 Analog Modules

6.21 Analog Output Module SM 432; AO 8 x 13 Bits

(6ES7432-1HF00-0AB0)

Order Number
6ES7 432-1HF00-0AB0

Characteristics
The SM 432; AO 8 x 13 Bits is an analog input module with the following
characteristics
• 8 outputs
• Resolution 13 bits
• Output ranges for voltage
• Output ranges for current
• Supply voltage: 24 VDC
• Isolated
• Permissible common-mode voltage 3 VDC

Circuit Block Diagram of the SM 432; AO 8 x 13 Bits

CH0
A

CH1
Bus controller

S7-400 bus CH2

CH3

CH4

CH5
D

CH6

CH7

24 V

L+/M
Analog supply

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-123
Analog Modules

Terminal Connection Diagram of the SM 432; AO 8 x 13 Bits

Voltage output Current output

1
2
3
L+ L+ L+
4
5
6 QV0 CH0 Word 0 QI0 CH0 Word 0
7 S0+
8 S0-
9
10
11 QV1 CH1 Word 2 QI1 CH1 Word 2
12 S1+
13 S1-
14
15
16 QV2 CH2 Word 4 QI2 CH2 Word 4
17 S2+
18 S2-
19
20
21 QV3 CH3 Word 6 QI3 CH3 Word 6
22 S3+
23 S3-
24
25 MANA M ANA M ANA
26
27
28 QV4 CH4 Word 8 QI4 CH4 Word 8
29 S4+
30 S4-
31
32
33 QV5 CH5 Word 10 QI5 CH5 Word 10
34 S5+
35 S5-
36
37
38 QV6 CH6 Word 12 QI6 CH6 Word 12
39 S6+
40 S6-
41
42
43 QV7 CH7 Word 14 QI7 CH7 Word 14
44 S7+
45 S7-
46
47
M
48 M

S7-400, M7-400 Programmable Controllers Module Specifications

6-124 A5E00069467-03
 Analog Modules

Static Parameters of the SM 432; AO 8 x 13 Bits

The SM 432; AO 8 x 13 bits uses static parameters stored in data set 0.

Static Parameters (Data Set 0) Value Range

The following settings can be made channel-by-channel:
Measuring range deactivated Yes/No
Voltage range 1 to 5 V
0 to 10 V
 10 V
Current range 0 to 20 mA
4 to 20 mA
 20 mA

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-125
Analog Modules

Technical Specifications of the SM 432; AO 8 x 13 Bits

Dimensions, Cable Length and Weight Conversion time per
channel
Dimensions WxHxD (mm) 25x290x210
Weight approx. 650 g
• In the ranges 1 to 5 V
and 4 to 20 mA 420 s
Module-Specific Data • In all other ranges
Number of outputs 8 300 s
Cable length, shielded 200 m Cycle time Activated channels x
• Surge protection in External protection conversion time
accordance with IEC devices required in Settling time
1000-4-5 the supply lines and
signal lines
• For resistive load 0.1 ms
• For capacitive load 3.5 ms
Voltages, Currents, Potentials
• For inductive load 0.5 ms
Nominal load voltage L+ 24 VDC
Substitute values No
• Reverse polarity switchable
protection Yes
Interference Suppression, Error Limits
Galvanic isolation
between analog section, Cross-talk attenuation
bus, local ground and between the outputs > 40 dB
L+/M Yes Interference voltage
Test voltage suppression of
common-mode
• Between bus and interference
analog section 2120 VDC UCM < DC 3 V min. 60 dB
• Between bus and local VCM < AC 3 Vss (50 Hz) min. 60 dB
ground 500 VDC
Operating error limits
• Between bus and L+/M 2120 VDC
(0° C to 60° C related to the output range)
• Between L+/M and
analog section 2120 VDC
• Voltage  0.5 %

• Between L+/M and local • Current 1%

ground 707 VDC Basic error limits
• Between analog section (at 25° C, related to the output range)
and local ground 2120 VDC • Voltage  0.2 %
Permissible • Current  0.3 %
common-mode range
Temperature error (related
• Outputs to each other or to the output range) 
0.02 %/K
outputs to MANA < 3 VDC
Linearity error (related to
Current consumption the output range)  0.05 %
• from S7-400 bus max. 150 mA Repetition accuracy (in
(5 VDC) typ. 90 mA settled state at 25° C,
• From load current approx. 200 to related to the output  0.05 %
supply L+ 400 mA (depending range)
on the output signal
Output ripple (related to
and load)
the output range; band-
Power losses max. 9 W width 50kHz)  0.05 %
Analog Value Generation Interference peak at the 15 V/25 mA for
outputs (occurring when max. 0.5 ms
Resolution (incl.
RESET removed or L+/M
overrange, representation
connected)
in twos complement) 13 bits

S7-400, M7-400 Programmable Controllers Module Specifications

6-126 A5E00069467-03
 Analog Modules

Status, Interrupts, Diagnostics Current output

Interrupts • Idle voltage max. 18 V
• Diagnostic interrupt No
Diagnostic functions Connection of actuators
• For voltage output
• Fault indication on the
module 2-wire connection Possible, without
compensation of
for internal fault No
the line resistances
for external fault No 4-wire connection
• Diagnostic information (measuring line) Possible
display No
Data for Selecting a Sensor • For current output
2-wire connection Possible
Output range (nominal  10 V
values) 0 to 10 V
Destruction limits against
1 to 5 V voltages/currents applied
 20 mA externally
0 to 20 mA • Voltage at outputs to max. 20 VDC
4 to 20 mA MANA constant 75 V for
max. 1 ms
Load impedance (mark-space ratio
• At voltage outputs min. 1 kΩ 1:20)
– capacitive load max. 1 µF • Current DC 50 mA
• At current outputs max. 500 Ω;
max. 600 Ω with
reduced
common-mode
voltage reduced to
<1V
– inductive load max. 1 mH
Voltage output
• Short-circuit protection Yes
• Short-circuit current approx. 25 mA

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 6-127
Analog Modules

S7-400, M7-400 Programmable Controllers Module Specifications

6-128 A5E00069467-03
Interface Modules
(Send IMs and Receive IMs) 7
Chapter Overview
Section Description Page
7.1 Common Characteristics of the Interface Modules 7-2
7.2 The IM 460-0 and IM 461-0 Interface Modules 7-5
7.3 The IM 460-1 and IM 461-1 Interface Modules 7-8
7.4 The IM 460-3 and IM 461-3 Interface Modules 7-11

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-1
Interface Modules (Send IMs and Receive IMs)

7.1 Common Characteristics of the Interface Modules

Function
The send and receive interface modules are required if one or more expansion
units (ER) are to be connected to one central rack (CR). This configuration is
described in the Installation Manual, Chapter 4.

Configuration
Interface modules must always be used together. While the send modules (send
IMs) are plugged into the CR, the associated receive modules (receive IMs) are
plugged into the ER connected in series in each case.

Table 7-1 Interface Modules of the S7-400

Partner Areas of Application

IM 460-0 Send IM for local link without power transmission; with communication bus

IM 461-0 Receive IM for local link without power transmission; with communication
bus

IM 460-1 Send IM for local link with power transmission; without communication bus

IM 461-1 Receive IM for local link with power transmission; without communication
bus

IM 460-3 Send IM for remote link up to 100 m; with communication bus

IM 461-3 Receive IM for remote link up to 100 m; with communication bus

Terminating Connectors
The bus must be terminated in the last ER of a chain. For this purpose, plug the
prescribed terminating connector into the lower front connector of the receive IM in
the last ER of the chain. Unused front connectors of a send IM need not be
terminated.

Table 7-2 Terminating Connectors for the Receive IMs

Receive IM Terminating Connectors

IM 461-0 6ES7 461-0AA00-7AA0
IM 461-1 6ES7 461-1BA00-7AA0
IM 461-3 6ES7 461-3AA00-7AA0

S7-400, M7-400 Programmable Controllers Module Specifications

7-2 A5E00069467-03
 Interface Modules (Send IMs and Receive IMs)

The following figure shows a typical configuration with send IMs, receive IMs, and
terminating connectors.

Receive IM

Terminating
Receive IM Connectors

Send IM

CR

Connecting Cables
There are prefabricated cables available in different fixed lengths for connecting
the individual interface modules to each other (see Chapter 12: Spare Parts and
Accessories).

Table 7-3 Connecting Cables for Interface Modules

Interface Modules Connecting Cables

(Send IMs and Receive IMs)
IM 460-0 and IM 461-0 6ES7 468-1 (I/O bus and communication bus are
IM 460-3 and IM 461-3 transferred)

IM 460-1 and IM 461-1 6ES7 468-3 (I/O bus is transferred; rack is supplied with
current via the IM)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-3
Interface Modules (Send IMs and Receive IMs)

Installing and Removing the Modules During Operation

Please note the following warning when installing or removing the interface
modules and the associated connecting cables.

Caution
! Data loss or data corruption can result.
If you remove or plug in the interface modules and/or the associated connecting
cables when live, this can result in data loss or data corruption.
Switch off the power supply modules of the CR and ERs on which you are working
before carrying out such actions.

External Battery Supply on “EXT. BATT.” Socket

You can achieve uninterrupted backup in the CR when changing the battery in the
power supply modules of the S7-400 if you apply a DC voltage of between 5 V and
15 V to the “EXT. BATT.” socket of the CPU. This only backs up the CR.
You can achieve the same backup in an ER by applying a DC voltage of between
5 V and 15 V to the “EXT. BATT.” socket of the receive IM.
The “EXT. BATT.” input has the following characteristics:
• Reverse polarity protection
• Short-circuit current limited to 20 mA
To supply on the “EXT. BATT.” socket, you require a connecting cable with a jack
plug of 2.5 mm diameter as shown in the following figure. Please note the polarity
of the jack plug.

Plus pole Minus pole

Jack plug 2.5 mm∅

S7-400, M7-400 Programmable Controllers Module Specifications

7-4 A5E00069467-03
 Interface Modules (Send IMs and Receive IMs)

7.2 The IM 460-0 and IM 461-0 Interface Modules

Order Numbers
IM 460-0 (send IM) 6ES7 460-0AA00-0AB0
IM 461-0 (receive IM) 6ES7 461-0AA00-0AA0

Position of the Operator Controls and Indicators

The following figure shows the view of the front plate of the IM 460-0 and IM 461-0
and the position of the operator controls and indicators of the module.

IM 460-0 IM 461-0

LEDs
EXTF INTF
C1 EXTF
C2

Coding switch

External battery
supply

under cover

X1 connector:

C1 interface IN

X2 connector:

C2 interface OUT

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-5
Interface Modules (Send IMs and Receive IMs)

Function
The IM 460-0 (send IM) and IM 461-0 (receive IM) interface modules are used for
local links (up to a maximum total of 3 m). Data are transferred on the
communication bus at the full transmission rate.

Parameter Assignment, Rack Number

You must set the number of the rack containing the receive IM using the two-digit
coding switch on the front plate of the module. The permissible range is 1 to 21.

Setting or Changing the Number

Proceed as follows:
1. In the ER in which you want to make the change, set the switch of the power
supply module to the position (output voltages 0 V).
2. Enter the number via the coding switch.
3. Switch the power supply module back on.

Operator Controls and Indicators on the Send IM

LED EXTF (red) Lights up in the event of an external fault. Chain 1 or chain 2 contains a
fault (terminating connector missing or cable break).
LED C1 (green) Chain 1 (via front connector X1, connection 1) is in order.
LED C1 An ER in the chain is not ready for operation because
(green flashing) • The power supply module is not switched on
• A module has not yet completed the initialization run
LED C2 (green) Chain 2 (via front connector X2, connection 2) is in order.
LED C2 An ER in the chain is not ready for operation because
(green flashing) • The power supply module is not switched on
• A module has not yet completed the initialization run
Front connector Connector plug (output) for chain 1 and chain 2.
X1 and X2 X1 = upper front connector; X2 = lower front connector

Operator Controls and Indicators on the Receive IM

LED INTF (red) Lights up if the rack number has been set > 21 or = 0.
Lights up if you have modified the module while the power was
switched on.
LED EXTF (red) Lights up in the event of an external fault (chain fault, for example, if
the terminating connector has not been plugged in or if a module has
not yet completed the initialization run, but not if the central controller
is switched off)
Coding switch Coding switch for setting the number of the rack.

S7-400, M7-400 Programmable Controllers Module Specifications

7-6 A5E00069467-03
 Interface Modules (Send IMs and Receive IMs)

External battery You can connect an external battery (5 V to 15 V) or a central backup

supply socket at this socket when replacing the rack power supply (see Installation
EXT.-BATT. Manual, Chapter 9). This achieves uninterrupted backup of the
relevant ER. If you use the receive IM in a cabinet, use an angled
plug for the battery supply to save space.
Front connector X1 Upper connector (input) for the connecting cable from the previous
interface module.
Front connector X2 Lower connector (output) for connecting cable to the next interface
module or for the terminating connector.

Technical Specificationsof the IM 460-0 and IM 461-0

Maximum chain length (total) 3m

Dimensions W x H x D (mm) 25 x 290 x 280
Weight
• IM 460-0 600 g
• IM 461-0 610 g
Current consumption from S7-400 bus 5 VDC
• IM 460-0 typ. 130 mA
max. 140 mA
• IM 461-0 typ. 260 mA
max. 290 mA
Power losses
• IM 460-0 typ. 650 mW
max. 700 mW
• IM 461-0 typ. 1300 mW
max. 1450 mW
Terminating connectors 6ES7 461-0AA00-7AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-7
Interface Modules (Send IMs and Receive IMs)

7.3 The IM 460-1 and IM 461-1 Interface Modules

Order Numbers
IM 460-1 (send IM) 6ES7 460-1BA00-0AB0
IM 461-1 (receive IM) 6ES7 461-1BA00-0AA0

Position of the Operator Controls and Indicators of the IM 460-1 and IM 461-1

IM 460-1 IM 461-1

LEDs
EXTF INTF
C1 EXTF
C2

5 VDC

Coding switch

under cover

X1 connector:

C1 interface IN

X2 connector:
C2 interface
OUT

S7-400, M7-400 Programmable Controllers Module Specifications

7-8 A5E00069467-03
 Interface Modules (Send IMs and Receive IMs)

Function
The IM 460-1 (send IM) and IM 461-1 (receive IM) interface modules are used for
local links (up to a maximum total of 1.5 m). These interface modules are also
used to transfer the 5 V supply voltage. Please note the following points:
• The power requirements of the modules plugged into the ER must not exceed
5 V/5 A.
• You must connect only one ER per chain.
• The modules in this rack are not supplied with 24 V and are not backed up.
• Data are not transferred on the communication bus in the case of the IM 460-1
and IM 461-1.
• You must not use a power supply module in the ER.

Note
If you connect an ER via a local link with 5 V transmission, ungrounded operation
is prescribed for the ER (see Installation Manual, Chapter 4).

Parameter Assignment, Rack Number

You must set the number of the rack containing the receive IM using the two-digit
coding switch on the front plate of the module. The permissible range is 1 to 21.

Setting or Changing the Number

Proceed as follows:

1. Set the switch of the power supply module in the CR to the position (output
voltages 0 V).
2. Enter the number via the coding switch.
3. Switch the power supply module back on.

Operator Controls and Indicators on the Send IM

LED EXTF (red) Lights up in the event of an external fault. Chain 1 or chain 2 contains a
fault (terminating connector missing or cable break).
LED C1 (green) Chain 1 (via front connector X1, connection 1) is in order.
LED C1 A module has not yet completed the initialization run.
(green flashing)
LED C2 (green) Chain 2 (via front connector X2, connection 2) is in order.
LED C2 A module has not yet completed the initialization run.
(green flashing)
Front connector Connector (output) for chain 1 and chain 2
X1 and X2 X1 = upper front connector; X2 = lower front connector

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-9
Interface Modules (Send IMs and Receive IMs)

Operator Controls and Indicators on the Receive IM

LED INTF (red) Lights up if the rack number has been set > 21 or = 0.
Lights up if you have modified the module while the power was
switched on.
LED EXTF (red) Lights up in the event of an external fault (chain fault, for example, if
the terminating connector has not been plugged in or if a module
has not yet completed the initialization run, but not if the central
controller is switched off)
5 VDC (green) Power supply in the ER is in order.
Coding switch Coding switch for setting the number of the rack.
Front connector X1 Upper connector (input) for the connecting cable from the previous
interface module.
Front connector X2 Lower connector (output) for connecting cable to the next interface
module or for the terminating connector.

Caution
! Modules can be damaged.
If you want to connect an ER via the IM 461-1 interface module and you use a
power supply module in this ER, the modules could be damaged.
Do not use a power supply module in the ER that you want to connect to the CR
via the IM 461-1 interface module.

Technical Specifications of the IM 460-1 and IM 461-1

Maximum chain length (total) 1.5 m

Dimensions W x H x D (mm) 25 x 290 x 280
Weight
• IM 460-1 600 g
• IM 461-1 610 g
Current consumption from S7-400 bus 5 VDC
• IM 460-1 typ. 50 mA
max. 85 mA
• IM 461-1 typ. 100 mA
max. 120 mA
Power losses
• IM 460-1 typ. 250 mW
max. 425 mW
• IM 461-1 typ. 500 mW
max. 600 mW
Terminating connectors 6ES7 461-1BA00-7AA0
Power supply for ER 5 V/5 A per chain

S7-400, M7-400 Programmable Controllers Module Specifications

7-10 A5E00069467-03
 Interface Modules (Send IMs and Receive IMs)

7.4 The IM 460-3 and IM 461-3 Interface Modules

Order Numbers
IM 460-3 (send IM) 6ES7 460-3AA00-0AB0
IM 461-3 (receive IM) 6ES7 461-3AA00-0AA0

Position of the Operator Controls and Indicators of the IM 460-3 and IM 461-3

IM 460-3 IM 461-3

LEDs
EXTF INTF
C1 EXTF
C2

Coding switch

External battery supply

under cover

X1 connector:

C1 interface IN

X2 connector:

C2 interface OUT

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-11
Interface Modules (Send IMs and Receive IMs)

Function
The IM 460-3 (send IM) and IM 461-3 (receive IM) interface modules are used for
remote links (up to a maximum total of 100 m). Data are transferred on the
communication bus at the full transmission rate.

Parameter Assignment
You must set the number of the rack containing the receive IM using the two-digit
coding switch on the front plate of the module. The permissible range is 1 to 21.
If required, you can change the distance specification of the chain via STEP 7 on
the programming device.
The default setting for the distance specification is 100 m.
Match the distance specification as closely as possible to the actual length (sum of
all connecting cables per chain) to accelerate data transmission.

Note
The distance specification set must always be greater than the actual cable length
per chain.

Setting or Changing the Number

Proceed as follows:
1. In the ER in which you want to make the change, set the switch of the power
supply module to the position (output voltages 0 V).
2. Enter the number via the coding switch.
3. Switch the power supply module back on.

Operator Controls and Indicators on the Send IM

LED EXTF Lights up in the event of an external fault. Chain 1 or chain 2 contains a
(red) fault (terminating connector missing or cable break).
LED C1 Chain 1 (via front connector X1, connection 1) is in order.
(green)
LED C1 An ER in the chain is not ready for operation because
(green flashing) • The power supply module is not switched on
• A module has not yet completed the initialization run
LED C2 Chain 2 (via front connector X2, connection 2) is in order.
(green)
LED C2 An ER in the chain is not ready for operation because
(green flashing) • The power supply module is not switched on
• A module has not yet completed the initialization run

S7-400, M7-400 Programmable Controllers Module Specifications

7-12 A5E00069467-03
 Interface Modules (Send IMs and Receive IMs)

Operator Controls and Indicators on the Receive IM

LED INTF (red) Lights up if the rack number has been set > 21 or = 0.
Lights up if you have modified the module while the power was
switched on.
LED EXTF (red) Lights up in the event of an external fault (chain fault, for example, if
the terminating connector has not been plugged in or if a module has
not yet completed the initialization run or if the central controller is
switched off)
Coding switch Coding switch for setting the number of the rack.
External battery You can connect an external battery (5 V to 15 V) or a central backup
supply socket at this socket when replacing the rack power supply. This achieves
EXT.-BATT. uninterrupted backup of the relevant ER. If you use the receive IM in
a cabinet, use an angled plug for the battery supply to save space.
Front connector X1 Upper connector (input) for the connecting cable from the previous
interface module.
Front connector X2 Lower connector (output) for connecting cable to the next interface
module or for the terminating connector.

Technical Specifications of the IM 460-3 and IM 461-3

Maximum chain length (total) 100 m

Dimensions W x H x D (mm) 25 x 290 x 280
Weight
• IM 460-3 630 g
• IM 461-3 620 g
Current consumption from S7-400 bus 5 VDC
• IM 460-3 typ. 1350 mA
max. 1550 mA
• IM 461-3 typ. 590 mA
max. 620 mA
Power losses
• IM 460-3 typ. 6750 mW
max. 7750 mW
• IM 461-3 typ. 2950 mW
max. 3100 mW
Terminating connectors 6ES7 461-3AA00-7AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 7-13
Interface Modules (Send IMs and Receive IMs)

S7-400, M7-400 Programmable Controllers Module Specifications

7-14 A5E00069467-03
Memory Cards 8
Chapter Overview

Section Description Page

8.1 Design and Function of Memory Cards 8-2
8.2 RAM Card and Flash Card 8-4

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 8-1
Memory Cards

8.1 Design and Function of Memory Cards

Order Numbers
The order numbers for the memory cards are listed in the technical specifications.

Design
The memory card is slightly larger than a credit card and protected by a strong
metal casing. It is plugged into a receptacle at the front of the CPU; the end to be
inserted is obvious from the design of the memory card.
The following figure shows the design of the memory card.

Side elevation

Type plate

Grip

Front elevation

Name of the memory card

Order number

Function
The memory card and an integrated memory area on the CPU together form the
load memory of the CPU. In operation, the load memory contains the complete
user program including comments, symbols, special additional information that
permits decompiling of the user program, and all the module parameters.

What the Memory Card Contains

The following data can be stored in the memory card:
• User program, that is, blocks (OBs, FBs, FCs, DBs) and system data
• Parameters that determine the behavior of the CPU
• Parameters that determine the behavior of the I/O modules.

S7-400, M7-400 Programmable Controllers Module Specifications

8-2 A5E00069467-03
 Memory Cards

Types of Memory Cards for the S7-400

Two types of memory card are used in the S7-400:
• RAM cards
• Flash cards (FEPROM cards)

Note
Non-Siemens memory cards cannot be used in the S7-400.

Which Type of Memory Card to Use

Whether you use a RAM card or a Flash card depends on how you want to use the
memory card.

If You ... Then ...

want to store the data in RAM and you want use a RAM card
to modify your program during RUN or
RUN-P mode,
want to store your user program long-term use a Flash card
on memory card also when the power is
switched off (without backup or outside the
CPU),

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 8-3
Memory Cards

8.2 RAM Card and Flash Card

RAM Card
If you use a RAM card, you must plug this into the CPU to load the user program.
The user program is loaded with the help of the programming device (PG).
You can load the entire user program or the individual parts such as FBs, FCs,
OBs, DBs, or SDBs into the load memory in STOP mode or in RUN-P mode.
If you remove the RAM card from the CPU, the information stored on it is lost. The
RAM card does not have a built-in backup battery.
If the power supply has a functioning backup battery or if an external backup
voltage is supplied to the CPU via the “EXT. BATT.” socket, the contents of the
RAM card are retained after switching off the power supply provided the RAM card
remains plugged into the CPU and the CPU remains in the rack.

Flash Card
If you use a Flash card, there are two ways of loading the user program:
• Set the CPU to STOP with the mode selector, plug the Flash card into the CPU,
and load the user program into the load memory with the help of the
programming device (PG).
• Load the user program into the Flash card in offline mode at the programming
device and then insert the Flash card into the CPU.
You can only load your complete user program with the Flash card. You can load
smaller program sections into the integrated load memory on the CPU using the
programming device. In the case of larger program changes, you must always
reload the Flash card with the complete user program.
The Flash card does not require voltage to store its contents, that is, the
information stored on it is retained even when you remove the Flash card from the
CPU or if you operate your S7-400 system without backup (without backup battery
in the power supply module or without backup voltage at the “EXT. BATT.” socket
of the CPU).

Which Memory Card Capacity to Use

The capacity of the memory card you use depends on the size of the user program
and the additional memory requirement resulting from the use of function modules
or communications modules. See the manuals of these modules for details of their
memory requirements.

S7-400, M7-400 Programmable Controllers Module Specifications

8-4 A5E00069467-03
 Memory Cards

Changing the Memory Card

To change the memory card, follow the steps outlined below:
1. Set the CPU to STOP.

Note
If the memory card is not removed in the STOP mode, the CPU goes to the STOP
state and the STOP indicator flashes every 3 seconds to prompt you to carry out a
memory reset. This sequence cannot be influenced by error OBs.

2. Remove the plugged in memory card.

3. Insert a “new” memory card.
4. Perform a memory reset on the CPU.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 8-5
Memory Cards

Technical Specifications

Name Order Number Current Backup can be

Consumption Currents used in
at 5 V M7-400
MC 952 / 64 Kbytes / RAM 6ES7 952-0AF00-0AA0 typ. 20 mA typ. 0.5 mA –
max. 50 mA max. 20 A
MC 952 / 256 Kbytes / RAM 6ES7 952-1AH00-0AA0 typ. 35 mA typ. 1 mA –
max. 80 mA max. 40 A
MC 952 / 1 Mbyte / RAM 6ES7 952-1AK00-0AA0 typ. 40 mA typ. 3 mA –
max. 90 mA max. 50 A
MC 952 / 2 Mbytes / RAM 6ES7 952-1AL00-0AA0 typ. 45 mA typ. 5 mA –
max. 100 mA max. 60 A
MC 952 / 4 MB / RAM 6ES7 952-1AM00-0AA0 typ. 45 mA typ. 5 mA –
max. 100 mA max. 60 A
MC 952 / 8 MB / RAM 6ES7 952-1AP00-0AA0 typ. 45 mA typ. 5 mA –
max. 100 mA max. 60 A
MC 952 / 64 Kbytes / 5V Flash 6ES7 952-0KF00-0AA0 typ. 15 mA – –
max. 35 mA
MC 952 / 256 Kbytes / 5V 6ES7 952-0KH00-0AA0 typ. 20 mA – –
Flash max. 45 mA
MC 952 / 1 Mbyte / 5V Flash 6ES7 952-1KK00-0AA0 typ. 40 mA – Yes
max. 90 mA
MC 952 / 2 Mbytes / 5V Flash 6ES7 952-1KL00-0AA0 typ. 50 mA – Yes
max. 100 mA
MC 952 / 4 Mbytes / 5V Flash 6ES7 952-1KM00-0AA0 typ. 40 mA – Yes
max. 90 mA
MC 952 / 8 Mbytes / 5V Flash 6ES7 952-1KP00-0AA0 typ. 50 mA – Yes
max. 100 mA
MC 952 / 16 Mbytes / 5V Flash 6ES7 952-1KS00-0AA0 typ. 55 mA – Yes
max. 110 mA
MC 952 / 32 Mbytes / 5V Flash 6ES7 952-1KT00-0AA0 typ. 55 mA – –
max. 110 mA
MC 952 / 64 Mbytes / 5V Flash 6ES7 952-1KY00-0AA0 typ. 55 mA – –
max. 110 mA
Dimensions W x H x D (in mm) 7.5  57  87
Weight max. 35 g
EMC protection Provided by construction

S7-400, M7-400 Programmable Controllers Module Specifications

8-6 A5E00069467-03
Interface Submodules for S7-400 9
Chapter Overview

Section Description Page

9.1 PROFIBUS-DP Master Interface IM 467/IM 467 FO 9-2
9.2 Configuration 9-8
9.3 Connecting to the PROFIBUS DP 9-10
9.4 Technical Data 9-14

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-1
Interface Submodules for S7-400

9.1 PROFIBUS-DP Master Interface IM 467/IM 467 FO

Order Number
IM 467 6ES7 467-5GJ00-0AB0 (RS 485)
IM 467 6ES7 467-5GJ01-0AB0 (RS 485)
IM 467 6ES7 467-5GJ02-0AB0 (RS 485)
IM 467 FO 6ES7 467-5FJ00-0AB0 (FO)

Use
PROFIBUS DP, standardized according to EN 50170, allows fast communication in
the field area between programmable logic controllers, PCs, and field devices.
Field devices include distributed I/O devices (ET 200), drives, valve islands,
switching devices, and many others.
The IM 467/IM 467 FO interface module is intended for use in an S7-400
programmable logic control system. It enables you to connect an S7-400 to
PROFIBUS DP.

S7-400, M7-400 Programmable Controllers Module Specifications

9-2 A5E00069467-03
 Interface Submodules for S7-400

Design
• Configuration according to the rules for an S7-400
• Can be operated without a fan
• A maximum of four IM 467/IM 467 FO modules can be used in the central rack.
No slot rules apply
• A total of four IM 467/IM 467 FO and CP 443-5 Extended modules can be used
together
• Various transmission rates between 9.6 Kbps and 12 Mbps can be set in the
software
• Configuration and programming are possible via PROFIBUS DP although
PROFIBUS parameters must not be changed !
• IM 467 with 9-pin sub-D female connector for attachment to PROFIBUS DP
(6ES7 467-5GJ00-0AB0, 6ES7 467-5GJ01-0AB0, 6ES7 467-5GJ02-0AB0)
• IM 467 FO with fiber-optic cable for attachment to PROFIBUS DP
(6ES7 467-5FJ00-0AB0)

LED displays

Mode switch

PROFIBUS-DP interface
9-pin sub-D

Figure 9-1 Configuration of the IM 467

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-3
Interface Submodules for S7-400

Communication Services
The IM 467/IM 467 FO provides you with two possible means of communication:
• PROFIBUS DP
The IM 467/IM 467 FO is a PROFIBUS-DP master which conforms to
EN 50 170. It is configured completely with STEP 7. In principle, its behavior is
the same as that of the integrated PROFIBUS-DP interfaces on the CPU
modules (for differences, refer to the technical data of the IM 467/IM 467 FO).
No function calls are necessary in the STEP 7 user program for DP
communication.
• S7 functions
The S7 functions ensure optimized simple communication in a SIMATIC
S7/M7/C7 automation system. For IM 467/IM 467 FO, the following
S7 functions are used:
– Programming device functions via PROFIBUS DP
– Operator monitoring and control functions via PROFIBUS DP
Communication requires no further configuration on the IM 467/IM 467 FO.
The S7 functions can be used alone or parallel to the PROFIBUS-DP protocol.
If they are used parallel to DP communication, this will affect the
PROFIBUS-DP round-trip time.

Functional extensions 6ES7 467-5GJ01-0AB0 compared to

6ES7 467-5GJ00-0AB0
• SYNC/FREEZE function
SYNC/FREEZE function and the application with ET 200M:
ET 200M peripheral devices which are assigned with the STEP 7
SYNC/FREEZE groups may not be equipped with interfaces of the type FM
or CP.

S7-400, M7-400 Programmable Controllers Module Specifications

9-4 A5E00069467-03
 Interface Submodules for S7-400

Functional extensions 6ES7 467-5GJ02-0AB0/6ES7 467-5FJ00-0AB0 compared

to 6ES7 467-5GJ01-0AB0
• PG-bus functions across several sub-networks.
If you wish to use the PG-bus functions across several sub-networks, STEP 7
software version V5.00 or higher must be installed on the PG/PC.
• Larger configuration memory
It is now possible to utilize more complex DP-slave arrangements than on
earlier versions of CPs.
• DP cross traffic (DP-Slave to DP-Slave)
The IM 467/IM 467 FO, as DP-Master, can enable its DP-Slaves cross traffic
operation.
”Cross traffic” is a special communication relationship between two
PROFIBUS-DP DP-Slaves.
• Equidistance
”Equidistance” means a DP-bus cycle with an accuracy deviation of only few s
and it can be configured with STEP 7.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-5
Interface Submodules for S7-400

9.1.1 Display and Operating Mode Switch

LED Display
The LED display bar on the front panel of the IM 467/IM 467 FO is occupied by
4 display elements:
INTF
EXTF

RUN
STOP

IM operating status
The LED displays show information about the IM operating status as in the
following scheme:

STOP-LED RUN-LED EXTF-LED INTF-LED CP Operating Status

(yellow) (green) (red) (red)
Start

RUN

STOPPING

STOP

STOP with internal error (e.g.

IM not projected)
Waiting for FW-Update (period
10 sec after power on)
Waiting for FW-Update (IM at
the moment contains an
incomplete FW-status).
RUN and PROFIBUS-DP bus
error
RUN; however, disruptions in
the DP line (e.g. DP-Slave not
transferring data or disrupted
interface in the DP-Slave)

Interface error/
System error
Legend: on off flashing

S7-400, M7-400 Programmable Controllers Module Specifications

9-6 A5E00069467-03
 Interface Submodules for S7-400

Controlling the operating status

You have two ways and means to control the operating status of the
IM 467/IM 467 FO, namely via:
• Operating mode switch
• Operating via PG/PC

Operating mode switch

You can establish the following operating states with the operating mode switch:
• Switching over from STOP to RUN
In RUN status all configured devices and also the S7 communication services
are available.
The IM operating status can be controlled via PG/PC only with the switch in
position RUN.
• Switching over from RUN to STOP
The IM is toggled to operating status STOP. Active S7 communications are shut
down and the DP-Slaves are not serviced anymore.

Loadable Firmware
The IM 467/IM 467 FO supports the update of the firmware (FW) per FW-Loader.
The FW-Loader is a component of the projecting software NCM S7 for
PROFIBUS DP. An authorization is here not required. After an FW-update the
central rack must be switched off and on again before going into normal operation.

Note
For additional information on loading the firmware please refer to the manual
NCM S7 for PROFIBUS DP and, if necessary, the README file of the projecting
software NCM S7 for PROFIBUS DP.

Note
The IM 467 FO requires an optical bus terminal (OBT) for FW-loading.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-7
Interface Submodules for S7-400

9.2 Configuration

The IM 467/IM 467 FO is configured with STEP 7. The process data is maintained
even at power loss; a memory module is not required. The S7 functions facilitate
remote programming and projecting of all IM 467/IM 467 FO connected to the
network and of all CPUs connected via SIMATIC S7-400 backplane bus.
Prerequisite is SIMATIC STEP 7
• STEP 7 V3.1
From STEP7 Version 3.1, the IM 467 with the MLFB number
6ES7 467-5GJ00-0AB0 can be configured.
• STEP 7 V4.02
From STEP7 Version 4.02, the IM 467 with the MLFB number
6ES7 467-5GJ01-0AB0 can be configured additionally with the functional
extensions according to chapter 6 (SYNC/FREEZE).
• STEP 7 from Version 5.00
From STEP 7 Version 5.00, the IM 467/IM 467 FO with the MLFB number
6ES7 467-5GJ02-0AB0/6ES7 467-5FJ00-0AB0 can be additionally configured
with the functional extensions according to chapter 6 (routing of PG-Functions,
DP cross traffic, equidistance).

Interface replacement without PG

Process data is stored to the CPU load memory. Storage of the process data is
secured against power loss via battery buffer or EPROM module print in the CPU.
You can replace the IM 467/IM 467 FO without having to explicitly reload the
process data.
Extracting and inserting the IM 467/IM 467 FO under power is not permitted .

Multi processor operation

The connected DP-Slaves can always be assigned only to one CPU and can be
serviced only by this CPU.

Configuration and diagnostics not simultaneously

When you configure the IM 467/IM 467 FO, you may not run diagnostics via MPI at
the same time.

S7-400, M7-400 Programmable Controllers Module Specifications

9-8 A5E00069467-03
 Interface Submodules for S7-400

Prerequisites
The IM 467/IM 467 FO is supported by all CPU operating systems with the output
states shown below.
In addition, determine on hand of the table:
• The number of IM 467/IM 467 FO which can be operated by one CPU
• Multi-processor operation support

CPU MLFB-Number Initial Multi-Processor Number of

State Operation Possible IM 467
which can
be
Operated
412 6ES7 412-1XF03-0AB0 1 yes 10
412-2 6ES7 412-2XG00-0AB0 1 yes 10
414-2 6ES7 414-2XG03-0AB0 1 yes 10
416-2 6ES7 416-2XK02-0AB0 1 yes 10
416-3 6ES7 414-3XL00-0AB0 1 yes 10
417-4 6ES7 417-4XL00-0AB0 1 yes 10

Note
The baud rates of 3 MB and 6 MB are not approved for the IM 467-FO.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-9
Interface Submodules for S7-400

9.3 Connecting to the PROFIBUS DP

You have principally 2 possibilities to connect to the PROFIBUS DP:

• Electric connection via bus connector
• Optical connection via fibre optic cable

9.3.1 Bus Connector

Only for 6ES7 467-5GJ00-0AB0, 6ES7 467-5GJ01-0AB0, 6ES7 467-5GJ02-0AB0.

The bus line is here introduced to the IM 467. (For a detailed description please
refer to the chapter “Networking” in the Installation Manual S7-400/M7-400
constructing).

Switch for the bus

terminating resistor
Bus connector
PROFIBUS-DP bus line

Maximum cable length of the Profibus DP

Transfer rate 9.6 19.2 93.75 187.5 500 1500 3000 6000 12000
in Kbps
max. length of a bus 1.000 1.000 1.000 1.000 400 200 100 100 100
segment in m
max. number of bus 10 10 10 10 10 10 10 10 10
segments 1)
max. length in m 10.000 10.000 10.000 10.000 4.000 2.000 1.000 1.000 1.000
1)Bus segments are coupled via RS 485 repeater

S7-400, M7-400 Programmable Controllers Module Specifications

9-10 A5E00069467-03
 Interface Submodules for S7-400

Connector pin assignment

The following chart specifies the electric interface for the connection to the
PROFIBUS DP (9-pin sub-D interface).

INTF
EXTF
used by
Pin. Signal PROFIBUS
RS 485
RUN No Name Description
STOP

RUN
STOP 1 PE Ground Yes
2 - - -
3 RxD/TxD-P Data line B Yes
4 RTS (AG) Control - A -
5 M5V2 Data reference potential Yes
6 P5V2 Supply Plus Yes
7 BATT - -
8 RxD/TxD-N Data line A Yes
9 - - -

9.3.2 Optical Connection to the PROFIBUS DP

Only for 6ES7 467-5FJ00-0AB0.

The IM 467 FO with integrated fibre optic cable facilitates the optical connecting
version to the PROFIBUS DP.

C
P43-5 X2
43-5FX 3E04
00-0X
IN
T
FF
E
X
T

RSU
N
T
O
P
R U
N
STO
P

A
U
I/T
P

PROFIBUS FO bus line

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-11
Interface Submodules for S7-400

9.3.3 Connecting the Fibre Optic Cable to the IM 467 FO

Required accessories
• Package with Simplex connectors and polishing sets (6GK1901-0FB00-0AA0)
• Package with plug adapters (6ES7 195-1BE00-0XA0)

Mounting the connector

1. Strip the sheathing of the FOC duplex cable by approximately 30 cm.
2. Mount the FOC duplex cable with their Simplex connectors. For detailed
instructions on the assembly of Simplex connectors please refer to the manual
”SIMATIC NET PROFIBUS-Networks”
TIP: Instead of snapping in the 2 Simplex connectors individually, hold them
together to obtain one ”Duplex connector”. This will give them a better support
on the connecting interface.
IMPORTANT: The ground and polished surface of the optical fibre must be
absolutely smooth and even. The plastic sheathing must not project or be cut
off improperly. Any deviation will cause extreme damping of the optical signal
across the FOC!
3. Insert the Simplex connector into the connecting interface for the IM467 FO and
the FOC into the provided cable guides. Close the connecting interface so that
you will clearly hear the side segments engaging with a click.
Take care to insert the connector in the correct connecting interface position:
transmitter always at the top and receiver always at the bottom!

Plug-in adapter
for IM 467 FO

Fold the 2 Simplex connectors

together to obtain one
“Duplex-connector”.
Tip: To obtain a better cable guiding inside the
cable conduit of the IM 467 FO, cut the length of
the lower cable appr. 10 mm shorter than the upper
LWL-Duplex cable
cable.
30 mm = max. bending radius

S7-400, M7-400 Programmable Controllers Module Specifications

9-12 A5E00069467-03
 Interface Submodules for S7-400

Reusing the FOC

Note
If you insert a used FOC into the connecting adapter, you must shorten the FOC
cables by the bent length and remount the Simplex connectors.
By this measure you will avoid possible damping loss caused by repeatedly bent
and extreme stress of the FOC cable.

FOC in the IM 467 FO

Insert the completely mounted connecting interface into the IM 467 FO. Swivel the
projecting grips of the connecting interface upwards.
Observe the correct position: Insert the transmitter FOC into the receiver socket
and the receiver FOC into the transmitter socket of the IM 467 FO’s FOC interface.
If the IM 467 FO is the last client of the FOC network, you must close the FOC
interface which is not in use with a blind stop (stops are included with the delivered
IM 467 FO)

Caution
! Do not look directly into the opening of the optical transmitter diodes.
The emitted light beam can harm your eyes.

PROFIBUS DP
Transmitter Grip

R Receiver
T Transmitter

R Receiver
Receiver
T Transmitter

Figure 9-2 Inserting the FOC into the IM 467 FO

Bending radius of the FOC

Take care, that when you insert the duplex FOC into the connecting interface and
run the cables, the bending radius does not fall below the permitted 30 mm. Please
also refer to the FOC mounting guidelines in the operating manual
SIMATIC NET-PROFIBUS networks.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-13
Interface Submodules for S7-400

9.4 Technical Data

9.4.1 Technical Data of the IM 467

6ES7 467-5GJ00-0AB0, 6ES7 467-5GJ01-0AB0, 6ES7 467-5GJ02-0AB0.

The IM 467 technical data is listed below.

Measurements and Weights PROFIBUS DP

Dimensions Conditions for Use
WxHxD (mm) 25 x 290 x 210 For use with SIMATIC S7-400, max.
Weight 700 g 4 IM 467 in the central
Ambient Conditions rack
Power supply 5 VDC via backplane
Ambient temperature bus
• Operation 0 to 60 °C Current consumption
• Transport and -40 to +70 °C • at 5 VDC 1.3 A
storage Addressing volume max. 4 Kbytes for inputs
and 4 Kbytes for
Operating altitude 3000 m above sea
outputs
level
Number of connectable
PROFIBUS DP 96
I/Os (slaves)
• Standard PROFIBUS DP,
EN 50 170 Number of connections
• Data transfer rate 9.6 Kbps to 12 Mbps for S7 functions for PGs 32 + 1 diagnostic
can be set to various and operator interface connection
rates devices
• Data transfer RS 485 via 9-pin Data volume per Slave
Consistency max. 244 bytes
method Sub-D-Interface max. 128 bytes
Configuration software
STEP 7
Differences Compared with the DP Interface
Integrated in the CPU
• Different system status list IDs for system
diagnostics
• Extended SFC runtimes (in some cases)
• additional Return codes for SFC 14 and
SFC 15

S7-400, M7-400 Programmable Controllers Module Specifications

9-14 A5E00069467-03
 Interface Submodules for S7-400

9.4.2 Technical Data of the IM 467 FO

6ES7 467-5FJ00-0AB0
The IM 467 FO technical data is listed below.

Dimensions and Weight Conditions for Use

Dimensions WxHxD 25 x 290 x 210 mm For use with SIMATIC S7-400, max.
(1.0 x 11.4 x 8.3 in.) 4 IM 467 in the central
Weight rack
700 g (28 oz)
Power supply 5 VDC via the
Ambient Conditions backplane bus
Current consumption
Ambient temperature
• from 5 VDC 1.3 A
• Operation 0 to 60 °C
Addressing volume max. 4 Kbytes for inputs
• Transport and -40 to +70 °C and 4 Kbytes for
storage outputs
Operating altitude 3000 m above sea level Number of connectable 96
PROFIBUS DP I/Os (slaves)

• Standard PROFIBUS, Number of connections

for S7 functions for PGs 32 + 1 diagnostic
EN 50 170 connection
and operator interface
• Data transfer rate 9.6 Kbps to 12 Mbps, devices
can be set to various
Data volume per slave
rates (3 and 6 Mbps not
possible) Consistency
max. 244 bytes
• Data transfer FOC; Configuration software
max. 128 bytes
method Wave length = 660 nm
STEP 7
2 x Duplex socket
Differences Compared with the DP Interface
Integrated in the CPU
• Different system status list IDs for system
diagnostics
• Extended SFC operating times (in some
cases)
• Additional return codes for SFC14 and SFC15

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 9-15
Interface Submodules for S7-400

S7-400, M7-400 Programmable Controllers Module Specifications

9-16 A5E00069467-03
Cable Duct and Fan Subassemblies 10
Chapter Overview

Section Description Page

10.1 Fan Monitoring in the Fan Subassemblies 10-2
10.2 Cable Duct 10-4
10.3 The 120/230 VAC Fan Subassembly 10-5
10.4 The 24 VDC Fan Subassembly 10-8

Characteristics
The cable duct and the fan subassembly have the following characteristics
• The air inflow area is variable.
• Shield and cable clamping are possible.
In addition, the fan subassembly has the following characteristics:
• Fans and filter frames can be replaced from the front during operation.
• The fan function is controlled by means of speed monitoring.
• Operation with filter frames is optional.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 10-1
Cable Duct and Fan Subassemblies

10.1 Fan Monitoring in the Fan Subassemblies

In this section, you will find out how to monitor the fans.
There is a signaling concept example at the end of the section.

LEDs
The three red LEDs are assigned to the individual fans. From left to right, these
are:
F1 – for fan 1
F2 – for fan 2
F3 – for fan 3

Fans
The fans have a redundant design. The fan subassembly continues to function
even if one fan fails.

Fan Monitoring
The function of the fans is controlled by means of speed monitoring. If the speed of
a fan drops below the limit speed of 1750 rpm, the LED assigned to it lights up. In
addition, the relay K1 drops out.
If the speed of a second fan drops below the limit speed, the LED assigned to it
lights up; in addition, the relay K2 drops out.
The following table is the function table for the fan monitoring.

Fan1 Fan2 Fan3 LED F1 LED F2 LED F3 Relay K1 Relay K2

– – – L L L – –
– – + L L D – –
– + – L D L – –
+ – – D L L – –
– + + L D D – +
+ – + D L D – +
+ + – D D L – +
+ + + D D D + +
–* –* –* D* D* D* –* –*

+ Fan in operation or relay picked up

– Fan failed or relay dropped out
D LEDs dark
L LEDs lit
* Power off

S7-400, M7-400 Programmable Controllers Module Specifications

10-2 A5E00069467-03
 Cable Duct and Fan Subassemblies

Signaling Concept Example

You can check the fault-free functioning of the fan subassembly using digital
inputs.
You can cause the power supply to be cut off after the failure of at least two fans
by using the relay K2. For example, you can use an intermediate contactor to
interrupt the mains.
The relay contacts are labeled as follows:
Relay K1: No. 1...3
Relay K2: No. 4...6
The following diagram explains the circuit in the fan subassembly when all fans are
functioning.

... to the digital input module

... in the fan assembly

Evaluation
(digital input module) 1
L+ 2 ... to the monitor
Evaluation 3 K1
(digital input module)

4
... to the monitor
5
K2
24 V 6

... to the power supply module

... to the mains

Status: All fans operating

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 10-3
Cable Duct and Fan Subassemblies

10.2 Cable Duct

Order Number
6ES7 408-0TA00-0AA0

Function
The cable duct is used in installations outside the cabinet for
• Cable clamping and/or for
• Shielding or for
• Air circulation without fan assistance

Front View of the Cable Duct

Eye for
clamping cable

Shielding clamp

(Side elevation
Scale 1:1)

Shielding Clamps
If you do not require the shielding clamps supplied, do not install them in the cable
duct.

Technical Specifications

Dimensions W
H
D (mm) 482.5109.5235

Weight ca. 1200 g

S7-400, M7-400 Programmable Controllers Module Specifications

10-4 A5E00069467-03
 Cable Duct and Fan Subassemblies

10.3 The 120/230 VAC Fan Subassembly

Order Number
6ES7 408-1TB00-0XA0

Operator Controls and Indicators on the 120/230 VAC Fan Subassembly

Relay contacts
1, 2, 3

Relay contacts
4, 5, 6

Quick-release lock LEDs F1, F2, F3

Voltage
selector switch

Fuse
compartment

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 10-5
Cable Duct and Fan Subassemblies

Component Parts of the 120/230 VAC Fan Subassembly

Blanking plate Eyes for clamping cable

Fan

PCB

Toroidal-core Base
current transformer
Shielding clamp

(Side elevation
Scale 1:1)

Fuse
Included in this fan subassembly are standard cartridge fuse links,
5 x 20 mm, conforming to DIN
• 250 mAT for 120 V
• 160 mAT for 230 V.
The fuse for the 230 V range is already installed on shipping from the factory.

Note
If you change the voltage range, you must also insert the fuse for this voltage
range in the fan subassembly. You will find a description of how to change the fuse
in the Installation Manual, Chapter 9.

Shielding Clamps
If you do not require the shielding clamps supplied, do not install them in the fan
subassembly.

S7-400, M7-400 Programmable Controllers Module Specifications

10-6 A5E00069467-03
 Cable Duct and Fan Subassemblies

Technical Specifications

Dimensions W
H
D 482.5109.5235

(mm)
Weight ca. 2000 g
Lifespan of the fans
at 40° C 70000 h
at 75° C 25000 h
Max. contact load of relay contacts 1 to 6
• Switching voltage 24 VDC
• Switching current 200 mA
Voltages 230 VAC 120 VAC
At nominal voltage of 230 VAC, the following applies: 120 VAC, the following applies:
Power consumption
• with fans 17 W 18 W
• without fans 5W 4W
Starting current 0.6 A 1.15 A
Fuses 160 mA 250 mA

Warning
! Electrical current can lead to personal injury.
If you remove the left cover when installing or removing the fan subassembly, the
terminals on the transformer are accessible briefly.
Remove the voltage from the fan subassembly before you install or remove it.
Disconnect the supply cable before you remove the fan subassembly.

Caution
! Danger of damage to equipment.
If you mix up the power supply PCB and the monitoring PCB in the fan
subassembly, the fan subassembly may be damaged.
During maintenance of the unit, make sure you do not mix up the power supply
PCB and the monitoring PCB.

Monitoring Function
In the case of a fault (defective fans) the fans are not switched off. Once you have
replaced the defective fan(s), the fault is acknowledged automatically as soon as
the fans have reached the required speed. Any faults that occur are not stored.
When you switch on the fan subassembly, the fans start running. After
approximately 10 s the current status of the fans is indicated via LEDs and relays.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 10-7
Cable Duct and Fan Subassemblies

10.4 The 24 VDC Fan Subassembly

Order Number
6ES7 408-1TA00-0XA0

Operator Controls and Indicators on the 24 VDC Fan Subassembly

Relay contacts
1, 2, 3
1 AT

Relay contacts
4, 5, 6

Quick-release lock LEDs F1, F2, F3

1 AT
Fuse
compartment

Characteristics
The 24 VDC fan subassembly has the same construction and functional
characteristics as the 120/230 VAC fan subassembly.

Installation
Installing the 24 VDC fan subassembly is the same as for the 120/230 VAC fan
subassembly.

Wiring
You connect the 24 VDC fan subassembly to the 24 VDC supply in the same
manner as for the 120/230 VAC fan subassembly. You should note the polarity of
the spring connections L+ and L–.

S7-400, M7-400 Programmable Controllers Module Specifications

10-8 A5E00069467-03
 Cable Duct and Fan Subassemblies

Signaling Concept
The signaling concept of the 24 VDC fan subassembly is identical to the signaling
concept of the 120/230 VAC fan subassembly.

Fuse
Included in this fan subassembly are standard cartridge fuse links,
5 x 20 mm, conforming to DIN
• 1.0 AT for 24 V
The fuse is already installed on shipping from the factory.

Shielding Clamps
If you do not require the shielding clamps supplied, do not install them in the fan
subassembly.

Technical Specifications

Dimensions W
H
D (mm) 482.5109.5235

Weight ca. 1600 g
Lifespan of the fans
at 40° C 70000 h
at 75° C 25000 h
Max. contact load of relay contacts 1 to 6
• Switching voltage 24 VDC
• Switching current 200 mA
Input variables
Input voltage

• Nominal value 24 VDC

• Permissible range Static: 19.2 to 30 V

Dynamic: 18.5 to 30.2 V
Starting current 0.9 A at 24 V
Fuse 1.0 AT
Characteristics
Power consumption
• with fans 12 W
• without fans 1.4 W

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 10-9
Cable Duct and Fan Subassemblies

Caution
! Danger of damage to equipment.
If you insert the monitoring PCB in the wrong position in the fan subassembly, the
fan subassembly may be damaged.
During maintenance of the unit, make sure you do not replace the monitoring PCB
in the wrong position.

Monitoring Function
In the case of a fault (defective fans) the fans are not switched off. Once you have
replaced the defective fan(s), the fault is acknowledged automatically as soon as
the fans have reached the required speed. Any faults that occur are not stored.
When you switch on the fan subassembly, the fans start running. After
approximately 10 s the current status of the fans is indicated via LEDs and relays.

S7-400, M7-400 Programmable Controllers Module Specifications

10-10 A5E00069467-03
RS 485-Repeater 11
Chapter Overview
You will find a detailed description of the RS 485 repeater in this chapter.
This includes:
• The purpose of the RS 485 repeater
• The maximum possible lengths of cable between two RS 485 repeaters
• The functions of the different controls and interfaces
• Information about grounded and ungrounded operation
• Technical specifications and the basic circuit diagram

Further information
You will find further information on the RS 485 repeater in the Configuration, CPU
Data manuals, in the section ”Configuring an MPI Network or a PROFIBUS-DP
Network”.

Chapter Overview

Section Description Page

11.1 Application and Characteristics 11-2
11.2 Appearance of the RS 485 Repeater (6ES7 972-0AA01-0XA0) 11-3
11.3 RS 485 Repeater in Ungrounded and Grounded Operation 11-4
11.4 Technical Specifications 11-6

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 11-1
RS 485-Repeater

11.1 Application and Characteristics

Order Number
6ES7 972-0AA01-0XA0

What is an RS 485 Repeater?

An RS 485 repeater amplifies data signals on bus lines and links bus segments.

Application of the RS 485 Repeater

You will require an RS 485 repeater if:
• More than 32 stations are connected to the bus
• Bus segments are to be operated ungrounded, or
• The maximum cable length of a segment is exceeded (see
Table 11-1).

Table 11-1 Maximum Cable Length of a Segment

Transmission Rate Maximum Cable Length of Segment (in m)

9.6 to 187.5 Kbps 1000
500 Kbps 400
1.5 Mbps 200
3 to 12 Mbps 100

Rules
If you want to construct a bus with RS 485 repeaters, the following rules apply:
• No more than 9 RS 485 repeaters can be connected in series.
• The maximum cable length between two nodes must not exceed the values
given in Table 11-2 for the RS 485 repeater:

Table 11-2 Maximum Cable Length between Two Nodes

Transmission Rate Maximum Cable Length between Two Nodes (in m) with
RS 485 Repeaters (6ES7 972-0AA01-0XA0)
9.6 to 187.5 Kbps 10000
500 Kbps 4000
1.5 Mbps 2000
3 to 12 Mbps 1000

S7-400, M7-400 Programmable Controllers Module Specifications

11-2 A5E00069467-03
 RS 485-Repeater

11.2 Appearance of the RS- 485 Repeater (6ES7 972-0AA01-0XA0)

The following table shows the appearance of the RS 485 repeater and lists its
functions.

Table 11-3 Description and Functions of the RS 485 Repeater

Appearance of the Repeater No. Function

À Connection for the power supply of the RS 485 repeater (pin
“M5.2” is the reference ground if you want to measure the
10
DC
24 V M PE M 5.2
À voltage wave shape between connections “A2” and “B2”.)
Á Shielding clamp for strain relief and grounding of the bus cable
Á
from bus segment 1 or bus segment 2
 Connection for the bus cable from bus segment 1
Â
A1 B1 A1 B1
à Terminating resistor for bus segment 1
ON Ä Switch for OFF mode
Ã
11 (in other words, separate bus segments from each other for
Ä
DP1
È PG
OFF
commissioning, for example)
OP 12
Å
DP2
Å Terminating resistor for bus segment 2
ON
Æ Connection for the bus cable from bus segment 2
SIEMENS
RS 485 REPEATER
A2 B2 A2 B2 Ç Slide for mounting the RS 485 repeater on a DIN rail and
Æ removing it from the DIN rail
È Interface for PG/OP on bus segment 1
Á
10 LED for 24 V power supply
Ç 11 LED for bus segment 1
12 LED for bus segment 2

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 11-3
RS 485-Repeater

11.3 RS 485 Repeater in Ungrounded and Grounded

Operation

Grounded or Ungrounded
The RS 485 repeater is ...
• Grounded if all nodes in the segment are also operated in a grounded
configuration
• Ungrounded if all nodes in the segment are also operated in an ungrounded
configuration

Note
Bus segment 1 is grounded if you connect a programming device (PG) to the
PG/OP socket of the RS 485 repeater. The ground connection is made because
the MPI in the PG is grounded and the PG/OP socket in the RS 485 repeater is
connected internally to bus segment 1.

Grounded Operation of the RS 485 Repeater

For grounded operation of the RS 485 repeater, you must bridge the “M” und “PE”
connections on the top side of the RS 485 repeater.

Ungrounded operation of the RS 485 Repeater

For ungrounded operation of the RS 485 repeater, the “M” und “PE” connections
on the top side of the RS 485 repeater must not be interconnected. In addition, the
power supply of the RS 485 repeater must be ungrounded.

S7-400, M7-400 Programmable Controllers Module Specifications

11-4 A5E00069467-03
 RS 485-Repeater

Terminal connection
When the repeater is installed with non–grounded reference potential (ungrounded
operation), interference currents and static charges are drained via an RC network
integrated in the repeater (see Figure 11-1) to the protective conductor.

PE
DC
24 V M PE M 5.2

22 nF 10 MΩ
M

A1 B1 A1 B1

Ground Bus

Figure 11-1 RC Network with 10 MΩohm for Installation with Non–Grounded Reference
Potential

Galvanic Isolation between Bus Segments

Bus segment 1 and bus segment 2 are galvanically isolated from each other. The
PG/OP interface is internally linked to the connection for bus segment 1. Figure
11-2 shows the front side of the RS 485 repeater.

DC
24 V M PE M 5.2

Connection for bus segment 1

A1 B1 A1 B1

ON

PG/OP PG
OFF
DP1

interface OP
DP2

ON
Connection for bus segment 2
Galvanic SIEMENS
RS 485 REPEATER
isolation A2 B2 A2 B2

Figure 11-2 Galvanic Isolation between the Bus Segments

Amplifying the Bus Signals

The bus signals are amplified between the connection for bus segment 1 or the
PG/OP interface and the connection for bus segment 2.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 11-5
RS 485-Repeater

11.4 Technical Specifications

Technical Specifications of the RS 485 Repeater

Technical Specifications

Power supply
• Rated voltage 24 VDC
• Ripple 20.4 to 28.8 VDC
Current consumption at rated voltage
• Without load on the PG/OP socket 200 mA
• Load on the PG/OP socket (5 V/90 mA) 230 mA
• Load on the PG/OP socket (24 V/100 mA) 200 mA
Galvanic isolation Yes, 500 VAC
Connection of fiber–optic cables Yes, via repeater adapters
Redundant operation No
Transmission rate (detected automatically by the 9.6 Kbps, 19.2 Kbps, 45.45 Kbps,
repeater) 93.75 Kbps, 187.5 Kbps, 500 Kbps,
1.5 Mbps, 3 Mbps, 6 Mbps, 12
Mbps
Degree of protection IP 20
Dimensions W
H
D (in mm) 45
128
67
Weight (incl. packaging) 350 g

Pin Assignment of the Sub D Connector (PG/OP Socket)

View Pin No. Signal Name Description

1 – –
2 M24V 24 V ground
5 3 RxD/TxD-P Data line B
9 4 RTS Request To Send
4
8 5 M5V2 Data reference potential (from station)
3
7 6 P5V2 Supply plus (from station)
2
6 7 P24V 24 V
1
8 RxD/TxD-N Data line A
9 – –

S7-400, M7-400 Programmable Controllers Module Specifications

11-6 A5E00069467-03
 RS 485-Repeater

Circuit Block Diagram of the RS 485 Repeater

• Bus segment 1 and bus segment 2 are galvanically isolated from each other.
• Bus segment 2 and the PG/OP socket are galvanically isolated from each
other.
• Signals are amplified
– Between bus segment 1 and bus segment 2
– Between PG/OP socket and bus segment 2

Segment 1 Segment 2
A1 A2
Logic
B1 B2
A1 A2
B1 B2

PG/OP 5V 1M 5V 1M
socket
24V 24V
L+ (24 V) L+ (24 V)
M M
A1
B1 PE
5V M 5.2
M5 V

Figure 11-3 Schematic Circuit Diagram of the RS 485 Repeater

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 11-7
RS 485-Repeater

S7-400, M7-400 Programmable Controllers Module Specifications

11-8 A5E00069467-03
Spare Parts and Accessories 12
Spare Parts and Accessories

For Racks
Number wheel for slot labeling C79165-Z1523-A22
Spare slot covers (qty 10) 6ES7 490-1AA00-0AA0
For Power Supplies
Spare connector for PS 405 (DC) 6ES7 490-0AA00-0AA0
Spare connector for PS 407 (AC) 6ES7 490-0AB00-0AA0
Backup battery 6ES7 971-0BA00
For CPUs
Key for CPU mode selector switch 6ES7 911-0AA00-0AA0
2 Mbyte memory submodule 6ES7 911-0AA00-0AA0
4 Mbyte memory submodule 6ES7 911-0AA00-0AA0
For Digital Modules/Analog Modules
Cover foil (10 x) for labeling strips of the SMs 6ES7 492-2XX00-0AA0
Cover flap for fuse receptacle on the AC modules 6ES7 422-0XX00-7AA0
Measuring range module for analog modules 6ES7 974-0AA00-0AA0
Front connector screw-type connection 6ES7 492-1AL00-0AA0
Front connector spring connection 6ES7 492-1BL00-0AA0
Front connector crimp connection 6ES7 492-1CL00-0AA0
Crimping tool for crimp contacts 6XX3 071
Crimp contacts (package of 250) 6XX3 070
Extraction tool for crimp contacts 6ES5 497-4UC11
Fuses (fusible cutouts)
For IMs
Terminating connector for IM 461-0 6ES7 461-0AA00-7AA0
Terminating connector for IM 461-1 6ES7 461-1AA00-7AA0
Terminating connector for IM 461-3 6ES7 461-3AA00-7AA0
IM 463-2, send IM, 600 m to IM 314 of the S5 6ES7 463-2AA00-0AA0
IM cable with communication bus, 0.75 m 6ES7 468-1AH50-0AA0
IM cable with communication bus, 1.5 m 6ES7 468-1BB50-0AA0
IM cable with communication bus, 5 m 6ES7 468-1BF00-0AA0
IM cable with communication bus, 10 m 6ES7 468-1CB00-0AA0
IM cable with communication bus, 25 m 6ES7 468-1CC50-0AA0
IM cable with communication bus, 50 m 6ES7 468-1CF00-0AA0
IM cable with communication bus, 100 m 6ES7 468-1DB00-0AA0
IM cable with current transmission, 0.75 m 6ES7 468-3AH50-0AA0
IM cable with current transmission, 1.5 m 6ES7 468-3BB50-0AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 12-1
Spare Parts and Accessories

For CP 441
IF963-RS232 interface submodule 6ES7 961-1AA00-0AA0
IF963-TTY interface submodule 6ES7 961-2AA00-0AA0
IF963-X27 interface submodule 6ES7 961-3AA00-0AA0
IF module L2-DP 6ES7 964-2AA00-0AB0
For Interfacing / Networking
RS 485 repeater 6ES7 972-0AA00-0XA0
DIN rail 6ES5 710-8MA...
PROFIBUS bus cable 6XV1 830-0BH10
6XV1 830-3BH10
PROFIBUS internal cable 6XV1 830-0BH10
PROFIBUS grounding cable 6XV1 830-3BH10
PROFIBUS bus connector without PG socket 6ES7 972-0BA00-0XA0
PROFIBUS bus connector with PG socket 6ES7 972-0BB10-0XA0
PROFIBUS bus connector without PG socket for CPU 417 6ES7 972-0BA40-0X40
PROFIBUS bus connector with PG socket for CPU 417 6ES7 972-0BB40-0X40
PROFIBUS RS 485 bus terminal 6GK1 500-0AA00
6GK1 500-0AB00
6GK1 500-0DA00
PG cable, short 6ES7 901-0BF00-0AA0
PG 705 cable 6ES7 705-0AA00-7BA0
PC/MPI cable (5 m) 6ES7 901-2BF00-0AA0
PC/MPI cable (16 m) 6ES7 901-2CB60-0AA0
For Fan Subassembly
Spare fan for fan subassembly 6ES7 408-1TA00-6AA0
Filters (qty 10) for fan subassembly 6ES7 408-1TA00-7AA0
Monitoring PCB for fan subassembly 6ES7 408-1TX00-6XA0
Power supply PCB for fan subassembly 6ES7 408-1XX00-6XA0
Cabinets
Cabinet 2200 x 800 x 400 with extension set for 8 MC 2281-7FC11-8DA1
SIMATIC S7-400
Extension set for SIMATIC S7-400 8 MC 1605-0BS70-0AA0
Cables
Connecting cables for printers with
• Serial port (COM, 10 m) 9AB4 173-2BN10-0CA0
• Parallel port (Centronics) 6AP1 901-0AL00
Connecting cable for interface module
• 1m 6ES7 368-3BB00-0AA0
• 2.5 m 6ES7 368-3BC00-0AA0
• 5m 6ES7 368-3BF00-0AA0
• 10 m 6ES7 368-3CB00-0AA0
V.24 cable 9AB4 173-2BN10-0CA0
Connector housing, gray
• 9-pin V42254-A6000-G109
• 15-pin V42254-A6000-G115
• 25-pin V42254-A6000-G125
Connector housing, black
• 9-pin V42254-A6001-G309
• 15-pin V42254-A6001-G315
• 25-pin V42254-A6001-G325

S7-400, M7-400 Programmable Controllers Module Specifications

12-2 A5E00069467-03
 Spare Parts and Accessories

Memory Submodules for M7-400

The following table lists the memory submodules that can be used in the
CPU 486-3 and CPU 488-3.

Product Description Order No.

MEM 478 Memory submodule for main memory 6ES7 791-0EP00-0XA0
DRAM 2 x 8 Mbytes/3.3 V

In the CPUs the memory submodules must always be used in pairs.

Spare Parts for M7-400 Modules

Memory cards
• Flash EPROM, 1 Mbyte 6ES7 952-1KK00-0AA0
• Flash EPROM, 2 Mbytes 6ES7 952-1KL00-0AA0
• Flash EPROM, 4 Mbytes 6ES7 952-1KM00-0AA0
• Flash EPROM, 8 Mbytes 6ES7 952-1KP00-0AA0
• Flash EPROM, 16 Mbytes 6ES7 952-1KS00-0AA0
10 cover foils for SM labeling strips 6ES7 492-2XX00-0AA0
Cover flap for fuse receptacle, AC-SM 6ES7 422-0XX00-7AA0
12 spare submodule covers 6ES7 398-0BA00-0AA0
6 connecting clips 6ES7 498-6BA00-0AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 12-3
Spare Parts and Accessories

S7-400, M7-400 Programmable Controllers Module Specifications

12-4 A5E00069467-03
CPUs for M7-400 13
In this Chapter
This chapter describes the CPUs of the M7-400 automation computer:
• CPU 486-3,
• CPU 488-3,
The CPUs differ essentially in their clock frequencies. You will find a comparison of
their performance features in Table 13-1.
The tables in Sections 13.1 and 13.2 give an overview of the performance features
and technical specifications of the CPUs.
Following this overview, the modules are described in detail.

Chapter Overview

Section Description Page

13.1 Performance Features 13-2
13.2 Technical Specifications 13-3
13.3 Function Elements 13-3
13.4 The BIOS Setup 13-16
13.5 I/O Addresses, Main Memory and, Interrupt Assignments 13-40

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-1
CPUs for M7-400

13.1 Performance Features

Introduction
There are two CPUs with different clock frequencies available for use with the
automation computer.
Table 13-1 gives you an overview of the most important performance features of
these CPUs.

Table 13-1 Performance Features of the CPUs

Performance Features CPU 486-3 CPU 488-3

(6ES7486-3AA00-0AB0) (6ES7488-3AA00-0AB0)
Processor Pentium 75 MHz Pentium 120 MHz
MEM 478 DRAM memory submodules*
for main memory
• Expansion capability 16 Mbytes 16 Mbytes
• Supply voltage 3.3 V 3.3 V
Second-level cache No 250 Kbytes
Submodule receptacle for memory card Yes
Submodule receptacles for interface 2
submodules
Connection of expansions max. 3
MPI Yes
Watchdog * Yes
* see M7-SYS User Manual

S7-400, M7-400 Programmable Controllers Module Specifications

13-2 A5E00069467-03
 CPUs for M7-400

13.2 Technical Specifications

The following table contains the technical specifications of the CPUs for the
M7-400 automation computer.

Table 13-2 Technical Specifications of the CPUs

CPU 486-3 CPU 488-3

(6ES7486-3AA00-0AB0) (6ES7488-3AA00-0AB0)
Nominal voltage 5 VDC (4.75 to 5.25 VDC)
Typical current consumption 2.75 A 3.0 A
Maximum permissible power 3.25 A 3.5 A
consumption
Maximum permissible power losses 16.25 W 17.5 W
Maximum permissible power losses with
interface submodules 19.25 W 20.5 W
Forced ventilation required No
Weight 1300 g
Dimensions W x H x D (mm) 50 x 290 x 219

13.3 Function Elements

Introduction
In this section you will become familiar with the individual function elements of the
CPU 486-3 and CPU 488-3. You require the information here to be able to respond
to displays, start up, and operate an M7-400 automation computer and handle
further components (for example, memory cards, expansions).
In addition, you will find information on the watchdog, the BIOS setup and the
address assignments and interrupt assignments.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-3
CPUs for M7-400

General View
Figure 13-1 shows the front and rear view of the CPU 486-3 and CPU 488-3
without covering flap. The positions of the indicators, operator controls, and other
elements required for operation can be seen from this figure.

Front view Rear view

2 1

9
3
8
4
7

4 6

1 =
Receptacle for memory card 7 = Expansion socket
2 =
Status and fault LEDs 8 = Cover for memory submodule
3 =
Mode selector switch receptacle → 2 x DRAM
4 =
Submodule receptacle for 9 = Dongle interface
interface submodules (in preparation)
5 = External battery supply
6 = MPI

Figure 13-1 Front and Rear View of a CPU 486-3 and CPU 488-3 without Covering Flap

CPU Elements
The following table gives the meanings of the individual elements of the CPU 486-3
and CPU 488-3.

Table 13-3 Elements of the CPU 486-3 and CPU 488-3

Element Meaning
Status and fault LEDs The status and fault LEDs indicate the operating state of your
CPU.
See page 13-6 for more detailed explanations.
Submodule receptacle A long memory card can be inserted in the submodule
for memory card receptacle. The system and user software can be loaded from
this card into the main memory during startup. See page 13-8
for more detailed explanations.

S7-400, M7-400 Programmable Controllers Module Specifications

13-4 A5E00069467-03
 CPUs for M7-400

Table 13-3 Elements of the CPU 486-3 and CPU 488-3

Element Meaning
Mode Selector The mode selector switch is a key switch. See page 13-9 for
more detailed explanations.
Submodule receptacles Interface submodules can be plugged into these submodule
for interface receptacles.
submodules See page 13-11 for more detailed explanations.
Main memory The main memory is freely accessible via a cover on the
left-hand side of the housing. This allows problem-free insertion
and replacement of memory submodules.
See page 13-13 for more detailed explanations.
Expansion socket Expansions such as the EXM expansion module, AT adapter
module, ATM and MSM mass storage can be connected via the
expansion socket.
See page 13-14 for more detailed explanations.
MPI The CPU 486-3 and CPU 488-6 are equipped with a multipoint
(9-pin sub D socket) interface. See page 13-15 for more detailed explanations.
External battery supply An external battery can be connected via this socket so that, for
example, the contents of the SRAM and the time of day are not
lost if the power supply fails. The same technical details apply
as for the S7-400 CPUs, see Section 4.1.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-5
CPUs for M7-400

13.3.1 Status and Fault LEDs

Status and Fault LEDs

The CPU 486-3 and CPU 488-3 have the following status and fault LEDs:

INTF
EXTF
SD
HD
USR1
USR2

RUN
STOP

Figure 13-2 Status and Fault LEDs on the CPU 486-3 and CPU 488-3

S7-400, M7-400 Programmable Controllers Module Specifications

13-6 A5E00069467-03
 CPUs for M7-400

Meaning of the Status and Fault LEDs

The status and fault LEDs are explained in Table 13-4 in the order in which they
are arranged on the CPU 486-3 and CPU 488-3 modules. The following status and
fault LEDs are available:

Table 13-4 Meaning of the Status and Fault LEDs on the CPU 486-3 and CPU 488-3

LED Meaning Explanations

INTF (red) Internal or external Lights up in the event of:
EXTF (red) fault indicator • Hardware faults
• Firmware faults
• Programming faults
• Parameter assignment faults
• Computational faults
• Timer faults
• Memory card faults
• I/O faults
Use the programming device for precise fault-finding
(read out diagnostic buffer).
SD (green) Access to memory Lights up if read or write access to the memory card is
card taking place.
HD (green) Hard disk access Lights up if read or write access to the hard disk of the
mass storage module is taking place
USR1 Special LED for Can be assigned by the user (see Programming
(yellow) the user program Manual)
(User)
USR2 Special LED for
(yellow) the user program
(User)
RUN “RUN” state LED Lights up if the system software is loaded and user
(green) programs are running
(I/O access enabled).
STOP “STOP” state LED • Lights up when the user program of the
(yellow) programmable module is not controlling the
process (I/O access disabled)
• Flashes when a memory reset is requested or is
being performed

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-7
CPUs for M7-400

13.3.2 Memory Cards

Introduction
The CPU 486-3 and CPU 488-3 offer the possibility of operating a memory card in
the same way as a diskette. In this section, you will learn how you can use these
options.

Note
If the power fails during a write access to the memory card, the entire contents of
the memory card can be damaged under unfavorable conditions.
Please note that in contrast to a diskette, a memory card is only designed for a
limited number of write accesses.

Memory Card
A memory card emulates a diskette from which an operating system can also be
booted. In addition, a memory card can also be used to exchange user software
and user data.
Memory cards with Flash EPROM are available for the CPUs (see the ordering
data).

Drive Assignment
The memory card is accessed by the operating system in the same way as a
conventional drive.
You can set the drive assignment in the BIOS setup (Section 13.4.11, page 13-35).

Boot Sequence
You can set the boot sequence in the BIOS setup (Section 13.4.12, page 13-36).

Formatting
Memory cards are formatted with the program FTLFORM.EXE included with the
system software. Read the relevant sections in the M7-SYS User Manual.

Note
The memory capacity specified for the memory card is the actual physical memory
capacity (gross). Formatting reduces the gross memory capacity to approximately
80% (net) that is then available to the operating system for storing data/programs.
UNDELETE: Files which were deleted from the memory card cannot be restored
using UNDELETE programs.

S7-400, M7-400 Programmable Controllers Module Specifications

13-8 A5E00069467-03
 CPUs for M7-400

13.3.3 Mode Selector Switch

Mode Selector Switch

The mode selector switch of the CPUs is a keyswitch.
You can see the positions of the mode selector switch in the following figure.

RUN-P
RUN

STOP
MRES

Figure 13-3 Mode Selector Switch

Positions of the Mode Selector Switch

The positions of the mode selector switch are explained in Table 13-5 in the order
in which they are arranged on the CPUs.

Table 13-5 Positions of the Mode Selector Switch

Position of the Explanations

Mode Selector
Switch
RUN-P The CPU executes the user program.
The key cannot be removed in this position.
Write and read access to the CPU are possible.
RUN The CPU executes the user program. Read access only to the CPU is
possible.
The key can be removed in this position to prevent any unauthorized
persons from changing the operating mode.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-9
CPUs for M7-400

Table 13-5 Positions of the Mode Selector Switch

Position of the Explanations

Mode Selector
Switch
STOP I/O access is disabled for the user program of the CPU. The user
program cannot control the process.
The key can be removed in this position to prevent any unauthorized
persons from changing the operating mode.
MRES Position of the keyswitch for software-controlled resetting of the CPU
(hardware reset).

Activating MRES
To generate a hardware reset via MRES, follow the steps outlined below:
1. Turn the mode selector switch to the STOP position.
Result: The STOP LED lights up.
2. Turn the mode selector switch to the MRES position and hold it there.
Result: The STOP LED goes dark for a second, lights up for a second, goes
dark again, and then remains lit.
3. Turn the switch back to the STOP position and then, in the next 3 seconds, to
the MRES position again and back to STOP.
Result: The STOP LED flashes for approximately 3 seconds at 2 Hz (a
memory reset is being carried out) and then remains lit.
4. If the STOP LED does not flash or other LEDs light up or flash, you must repeat
steps 2 and 3.

Note
Resetting by activating MRES is controlled by the system software. If this has not
been started, the CPU must be reset by switching the power supply off and on. If
a keyboard is connected to the CPU, it is also possible to initiate a complete
restart via hot keys (see Table 13-7 on page 13-19).

S7-400, M7-400 Programmable Controllers Module Specifications

13-10 A5E00069467-03
 CPUs for M7-400

13.3.4 Submodule Receptacles for Interface Submodules

Submodule Receptacle Definition

The submodule receptacle is a slot for a submodule. The CPU 486-3 and
CPU 488-3 have a receptacle for the memory card and two submodule receptacles
for interface submodules.
Figure 13-4 shows the position of the two receptacles for interface submodules on
the CPU 486-3 and CPU 488-3.

Submodule
receptacle

Figure 13-4 Position of the Receptacles for Interface Submodules on the CPU 486-3 and
CPU 488-3

Numbering on the Submodule Receptacles

Each receptacle for an interface submodule has a submodule receptacle number
assigned to it. The submodule receptacle number depends on the module slot and
on the arrangement of the receptacle on the expansion module or the CPU. You
can see the submodule receptacle numbers in Figure 13-5.
You require these submodule receptacle numbers for configurations that you
undertake in the BIOS setup or for determining the I/O addresses of an interface
module (see the Chapter “M7-400 Expansions”).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-11
CPUs for M7-400

CPU 486-3 EXM 478

CPU 488-3

6 9 12

3 7 10 13

0 8 11 14

Slot n n+1 n+2 n+3 n+4

Figure 13-5 Submodule Receptacle Numbers on the CPU486-3/CPU488-3 and EXM478

Submodule Covers
Unused submodule receptacles are protected by submodule covers.

S7-400, M7-400 Programmable Controllers Module Specifications

13-12 A5E00069467-03
 CPUs for M7-400

13.3.5 Memory Submodules Suitable for the Main Memory

Introduction
You must order the MEM 478 DRAM memory submodules for the main memory of
the CPUs separately. They are also shipped separately. These memory
submodules must be inserted before plugging into the mounting rack.

Main Memory Expansion

You can see from Table 13-6 which memory submodules you can use in which
CPU.

Table 13-6 Main Memory Expansion Possibilities

MEM478 DRAM Memory CPU 486-3 CPU 488-3

Submodules
2 x 8 Mbytes, 3.3 V • •

Warning
! DRAM memory submodules can be damaged.
If you use memory submodules for the main memory other than the DRAM
submodules designed for the purpose, the submodules can be damaged.
Use only the MEM 478 DRAM memory submodules for the main memory.

Inserting the Memory Submodules

The sections “Installing an M7-400” and “Replacing Modules and Submodules” in
the User Manual explain how to insert or replace the memory submodules.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-13
CPUs for M7-400

13.3.6 Expansion Socket

Introduction
The CPU 486-3 and CPU 488-3 are each equipped with an expansion socket. The
ISA bus is continued via the expansion socket.

Which Expansions Can Be Connected?

One EXM 478 extension module with up to three interface submodules, one
MSM 478 mass storage module with diskette and hard disk drives, or one
ATM 478 AT adapter module for short AT cards can be connected direct to the
CPUs.
A total of up to three expansions can be connected in series to the CPU.
If three EXM 478 expansion modules are connected, up to 11 interface
submodules can be operated together with the slots on each CPU (see
Section 13.3.4).

S7-400, M7-400 Programmable Controllers Module Specifications

13-14 A5E00069467-03
 CPUs for M7-400

13.3.7 Multipoint Interface (MPI)

X1 Interface
The X1 interface of the CPU 486-3 and CPU 488-3 for connecting devices such as
PCs/programming devices is a multipoint interface (MPI) and is connected via a
9-pin sub D connector.

Suitable Devices
You can connect the following at the MPI:
• Programming devices (PGs/PCs)
• Operator panels (OPs)
• Additional CPUs.
You can address up to 127 communications partners (programming devices, OPs,
CPUs) via the multipoint interface of the CPU 486-3 and CPU 488-3. A maximum
of 44 connections can be made to the CPU.

Connectors
Use only bus connectors or PG cables for connecting devices to the MPI (see
Chapter 7).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-15
CPUs for M7-400

13.4 The BIOS setup

Overview
The BIOS setup handles the configuration of the relevant CPUs in your M7-400
system. The settings and technical information concerning the configuration of this
programmable module are displayed in the BIOS setup. The CPUs already have a
default setup. It is set in such a way that the minimal configuration of a CPU (with
memory card drive) will power up via BIOS setup without programming.
You can change the default settings in the BIOS setup. This becomes necessary if,
for example, you want to connect expansions to your CPU (expansion module with
interface submodules, mass storage module with diskette and hard disk drives, or
AT adapter module with short AT card). You must inform the operating system of
these expansions.
If you want to make settings in the BIOS setup, you can do so:
• Directly at the relevant module if your M7-400 is equipped with interface
submodules and I/O devices such as a monitor and keyboard (interface
submodule IF962-VGA).
• Remote setup with a terminal program (for example, HyperTerminal under
Windows 95) on programming device/PC or with an ANSI terminal via the
COM1 port (interface submodule IF962-COM).

Remote Setup
To run BIOS settings via the Remote Setup without the interface submodule
IF962-VGA, follow the steps outlined below:
1. Switch off the line voltage to your M7-400.
2. Connect the programming device to the COM1 port of the SIMATIC M7 device
(see Section 8.7.2 of the Installation Manual).
3. On your programming device under Windows 95 select “Start > Accessories >
Hyperterminal”.
4. In the HyperTerminal window, select the menu command “File > New
Connection”. Enter a connection description and select the COM port with the
following transmission properties: 19200 bps, 8 data bits, no parity, 1 stop bit,
no flow control.
5. Switch on the line voltage to the M7-400 and hold the “Q” key pressed during
startup until the M7-400 registers itself in the HyperTerminal with the hardware
tests (a “U” appears).
6. Press the ESC button immediately.
Result: You are in the BIOS setup.

S7-400, M7-400 Programmable Controllers Module Specifications

13-16 A5E00069467-03
 CPUs for M7-400

13.4.1 BIOS Power Up

Power Up without Error Message

After switching on or after warm restart of the CPU, the BIOS (Basic Input Output
System) starts a ”Power On Self Test” (POST) and displays the results in the
POST window.

Figure 13-6 POST Window for a CPU 488-3

If no error occurs, all LEDs on the CPU are switched off with the exception of the
STOP LED.

Power Up with Warnings

During power up, warnings are given in the POST window after the “Video Shadow
RAM...” line if:
• The battery power is missing
• There is no keyboard
• The CMOS checksum is wrong.
The warnings remain for 2 seconds. After this, the first line is suppressed from the
POST window.
If battery power is missing, the date is reset to 1.1.1994.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-17
CPUs for M7-400

Power Up with Error Message

If one of the following errors occurs:
• Memory test error
• Hard disk configuration error
• CMOS checksum error,
the INTF LED remains lit as well as the STOP LED. A window appears on the
screen with the relevant error message. The window disappears after
approximately two seconds and the power up continues.
With an incorrect CMOS checksum, the default settings are loaded.

Behavior in the Event of Serious Errors

In the case of serious errors, the power up is stopped. Serious errors include:
• No memory plugged in.
• More than one IF962-VGA interface submodule has been plugged in
(INTF LED lights up).
• The CMOS memory location 15 (0xF) contains an invalid shutdown code during
the warm restart.
These errors prevent screen output since the video unit is not initialized. The
INTF LED lights up.
Ensure that the MEM 478 DRAM memory submodules required for operation are
plugged into the CPU or check to see if more than one IF262-VGA interface
submodule has been plugged into the CPU. If you do not find an error, there must
be an invalid shutdown code. If this is the case, reset the CPU using power off/on.

Warm Restart
After a warm restart of the CPU, the following window appears signaling an
accelerated system power up (see Section 13.4.2 “BIOS Hot Keys”).

Figure 13-7 Warm Restart Window for a CPU

S7-400, M7-400 Programmable Controllers Module Specifications

13-18 A5E00069467-03
 CPUs for M7-400

13.4.2 BIOS Hot Keys

BIOS Hot Keys

After power up, the BIOS offers the user a range of functions under MS-DOS.
These functions are executed by pressing the following groups of keys
simultaneously:

Table 13-7 BIOS Hot Keys with German and English Key Assignments

English Key Assignments German Key Assignments Function

CTRL + Alt + DEL STRG + Alt + ENTF Warm restart of the module

CTRL + Alt + HOME STRG + Alt + POS1 Cold restart of the module
(power off/on with
initialization of all blocks)
CTRL + Alt + ↓ STRG + Alt + ↓ IDE hard disk in standby
mode
CTRL + Alt + PGDN STRG + Alt + Bild ↓ Screen saver on (dark
screen)
CTRL + Alt + PGUP STRG + Alt + Bild ↑ Screen saver off

Note
These functions can be overlaid by other operating systems or user programs
such as Windows.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-19
CPUs for M7-400

13.4.3 Operator Inputs in the BIOS Setup

Definition of the Setup Fields

Within the BIOS setup, there are fields in which you can make entries or
selections. These fields have the following functions:
• Editbox;
You can enter desired values in this field . The field content must be
deleted first with BACKSPACE or DEL .
• List box;
This field lists, for example, all menu pages in the setup menu, from
which you can select and start one.
• Check box;
You can switch on the associated function by activating the check box [ ] and
switch it off again by deactivating the check box [ ] .
• Option button;
By activating an option button (:) you can select one of a range of options.
Activating another option button has the effect of deactivating the previous
option button ( ).

Key Control within the Setup Menu

The following keys are used for control within the Setup menu and the associated
setup page (conforming to the WindowsTM Standard):
ENTER With this key, you jump to the first line of a list box,
edit box, check box, or option button.
If the cursor is at a button (OK, CANCEL, ...) or at a selected
line (inverse video) within a list box, you can activate the function
with ENTER .

If the cursor is not at a button when you press ENTER

this executes the same function as an activated OK button:
Return to the Setup menu with any changes made in the
setup page being retained.
ESC This key executes the same function as a CANCEL button:
Return to Setup menu with any changes in the setup page being
deleted.
TAB With this key, you can move the cursor from one box to the next
box or to the next button.
SHIFT TAB With this key, you can move the cursor from one box to the next
box or to the next button (only locally, not under Remote Setup).

S7-400, M7-400 Programmable Controllers Module Specifications

13-20 A5E00069467-03
 CPUs for M7-400

↓ ↑ With the cursor control keys, you can jump from line to line within a
list box. The line you are in is marked with a dark bar.
You can page with the cursor control keys within an edit box if
there are several values available for selection within the box.
You activate an option button if you position the cursor at the
button using the cursor control keys.
← → With the cursor control keys, you can jump from character to
character within an edit box.

With the spacebar, you can confirm the selected lines as selected
or activate a check box.
INS Holding the INSERT key pressed during a complete restart of the
module leads to certain BIOS default settings being loaded which
are required for a safe startup.
F1 With this function key, a context-sensitive help window is
displayed.
Figure 13-8 shows an example.

Figure 13-8 Context-Sensitive Help Window

The Remote Setup can either be operated with the keyboard of the remote
computer or with the keyboard of the M7-400. In both cases the above key
assignments apply.
In the edit windows:

HOME sets the minimum value of the window.

end sets the maximum value of the window.

F1 displays a context-sensitive help text.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-21
CPUs for M7-400

13.4.4 Opening and Exiting the BIOS Setup

Opening the Setup Menu

To open the Setup menu, press the following keys simultaneously while the CPU is
powering up and the POST window (Figure 13-6) is on the screen: CTRL
+ Alt + ESC or ESC under Remote Setup.
The Setup menu then appears to allow you to select the setup pages.
Figure 13-9 shows the front and rear view of the CPU 486-3 and CPU 488-3
without covering flap.

The setup pages are

described on
––> page 13-24
––> page 13-25
––> page 13-29
––> page 13-30
––> page 13-32
––> page 13-33
––> page 13-35
––> page 13-36
––> page 13-38

Figure 13-9 Setup Menu

The Setup menu consists of:

• A list box from which you can select the required setup page,
• An OPEN button which opens the selected setup page when activated,
• An EXIT button which closes the Setup menu after prompting you to decide
whether changes are to be saved or not,
The setup pages for the CPU 486-3 and CPU 488-3 are shown below.
The setup pages below show the default settings.

S7-400, M7-400 Programmable Controllers Module Specifications

13-22 A5E00069467-03
 CPUs for M7-400

Exiting the BIOS Setup

To exit the BIOS setup, activate the EXIT button shown in Figure 13-9 or press
ESC . The “Setup Exit” dialog box then appears (see Figure 13-10).

Figure 13-10 “Setup Exit” Dialog Box

Here you have the following choices:

• SAVE
saves the parameters to the CMOS and then runs a cold restart.
• EXIT
exits the setup without saving the parameters to the CMOS and then runs a
cold restart (power off/on with initialization of all blocks).
• RETURN
returns to the setup. All changes that were made since Setup was opened are
abandoned.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-23
CPUs for M7-400

13.4.5 Setup Page “User Help”

Opening the Setup Page

If you have selected “User Help” and activated the OPEN button in the Setup
menu (Figure 13-9 on page 13-22), this setup page appears on the screen
(Figure 13-11).

Figure 13-11 “User Help” Setup Page

What is the Purpose of the Setup Page?

This setup page contains notes that help you to use the Setup menu.

OK Button
Activating this button returns to the Setup menu.

S7-400, M7-400 Programmable Controllers Module Specifications

13-24 A5E00069467-03
 CPUs for M7-400

13.4.6 Setup Page “IF modules”

Opening the Setup Page

If you have selected “IF Modules” and activated the OPEN button in the Setup
menu (Figure 13-9 on page 13-22), this setup page appears on the screen
(Figure 13-12)

Figure 13-12 “IF Modules” Setup Page

What is the Purpose of the Setup Page?

If you have expanded your CPU with expansion modules, you can configure the
interface submodules used in the expansion modules on this setup page. See the
“Interface Submodules” and “M7-400 Expansions” chapters for the settings you
require.
You should only change the settings if you need to, otherwise the default settings
should be used.

Representation of Information
Information cannot be edited. It is shown on this setup page in gray type. The gray
type is not available in Remote Setup and is replaced there with black type.

Accepting Edited Values

Only the values for which the relevant interface submodule has been designed are
accepted by the system in the edit boxes. If, for example, you enter three values
under “Interrupt Source” and the interface submodule only has one interrupt, only
the first value will be significant.
Any changed values are only saved when you confirm them with the TAB key
or with SHIFT – TAB (only locally, not under Remote Setup).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-25
CPUs for M7-400

Select Submodule Number

Here, you enter the consecutive number for the submodule receptacle containing
the interface submodule or you select the number using the cursor control keys
↓ ↑ .
In the M7-400, you can enter submodule receptacle numbers 0 to 14 if the
maximum possible three EXM 478 expansion modules are in use (see
Section 14.2) Three submodule receptacle numbers are used per slot on the
backplane bus.
The submodule receptacle number is linked to the other values on this setup page.
If you change the submodule receptacle number, the associated values also
appear, if they have been entered.

I/O Base (Gray Type)

Shows the current address of the expansion module (see Chapter 13 “M7-400
Expansions”) or CPU associated with the submodule receptacle. However, the
double-width CPU has two addresses, one address for submodule receptacles in
its left half and a second address, higher by + 100H for the submodule receptacle
in its right half. The information cannot be edited.

Type Configured + Detected (Gray Type)

At “Type configured,” you enter the type of interface submodule already plugged
into this slot or still to be plugged in.
“Detected” indicates the type of interface submodule currently (at the last CPU
power up) occupying this slot. The information cannot be edited.
The BIOS executes a SETPOINT/ACTUAL VALUE comparison. If the value set in
“Type configured” does not agree with the value in “detected”, or if the value 0FFH
has been configured in “Type configured”, the BIOS does not execute the
configuration for this interface submodule.
If there is no interface submodule in the submodule receptacle, the value “FF” is
displayed.

Interrupt Source
Here, you set interrupts A to C (see the “Interface Submodules” chapter) provided
for the interface submodule. The values positioned on the left are setpoints. You
can edit these. The value indicated in gray type to the right of these is the actual
value (determined at the last CPU power up). It cannot be edited.

S7-400, M7-400 Programmable Controllers Module Specifications

13-26 A5E00069467-03
 CPUs for M7-400

Note
For the IF 961-AIO, IF 961-DIO and IF 961-CT1 interface modules there are no
default interrupts in the BIOS setup (default values are always 0xFF). Additionally,
no error message is given if no interrupt is set for an interface module, which is
configured for interrupt generation.

BIOS settings for interrupt capable interface modules

If you have set the interrupt generation for an interface module in the SIMATIC
manager, you have to set an interrupt for this interface module in the BIOS setup
page “IF modules”. For this, use an available interrupt (see above and Table 13-9
“Interrupt Assignment” on page 13-42).

Shared Dest.
Here, you set a shared interrupt for the interface submodule (see the “Interface
Submodules” and “M7-400 Expansions” chapters). This value is entered only once
per expansion module at the first submodule receptacle (0, 3, 6, 9, etc.). The value
on the left-hand side is the setpoint value, which you can edit. The value indicated
in gray type to the right of it is the actual value (determined at the last CPU power
up). It cannot be edited.

DMA Request
Enter here the DMA request A and B for the interface submodule (see the
“Interface Submodules” chapter). The values positioned on the left are setpoints.
You can edit these. The value indicated in gray type to the right of these is the
actual value (determined at the last CPU power up). It cannot be edited.

Config. Index
Here, you can address the 40 H configuration space of the interface submodules
(0H to 3FH). You will find the address in the Table “Offset Address for the
Configuration Register” of each interface submodule in the “Interface Submodules”
chapter.

Value (Gray Type)

Under the address set with “Config. Index”, you can now enter the configuration
value. You will find this value and its significance in the chapter “Interface
Submodules” under the relevant interface submodule.
The configuration value positioned on the left is the setpoint. You can edit this
value. When you have entered it, confirm by pressing the Tab key or the key
combination Shift Tab , so that it is accepted. The configuration value shown
to the right of this in gray type (black type in Remote Setup) is the actual value
(determined at the last power up of the CPU). It cannot be edited. If there is no
submodule in the submodule receptacle, the value “FF” is displayed.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-27
CPUs for M7-400

SIG Source
Here, you enter the signal source if the relevant interface submodule is designed
for it (“Interface Submodules” chapter). The values for the signal source positioned
on the left are the setpoints. You can edit these. The values shown to the right of
this in gray type (black type in Remote Setup) are the actual values (determined at
the last power up of the CPU).

SIG Dest.
Here you enter the signal destination if the relevant interface submodule is
designed for it (“Interface Submodules” chapter). This value is entered only once
per expansion module at the first submodule receptacle (0, 3, 6, 9, etc.). The value
for the signal destination positioned on the left is the setpoint. You can edit this
value. The signal destination value shown to the right of this in gray type (black
type in Remote Setup) is the actual value (determined at the last power up of the
CPU). It cannot be edited.

OK Button
Returns to the Setup menu when activated. Changes on the setup page are
retained.

CANCEL Button
Returns to the Setup menu when activated. Deletes all changes you have made on
the setup page.

S7-400, M7-400 Programmable Controllers Module Specifications

13-28 A5E00069467-03
 CPUs for M7-400

13.4.7 Setup Page “Timeout Function”

Opening the Setup Page

If you have selected “Timeout Function” in the Setup menu (Figure 13-9 on
page 13-22) and activated the OPEN button, this setup page appears on the
screen (Figure 13-13).

Figure 13-13 Setup Page “Timeout Function”

What is the Purpose of the Setup Page?

On this setup page, you determine whether the hard disk is to go into standby
mode during access pauses or the screen is to be protected by a screen saver
during entry pauses.

Timeout Mode
Timeout mode offers you the following possible selections:

By Activating the Option Button... You Can...

Disabled switch the timeout function off.
Screen saver or have the screen saver switched on during entry
pauses,
IDE Standby or operate the hard disk in energy-saving standby
mode during access pauses

Delay Time
In this edit box, you enter the time in minutes that has to elapse after the last entry
or the last hard disk access before the timeout function activates.

OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-29
CPUs for M7-400

CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page.

13.4.8 Setup Page “Security”

Opening the Setup Page

If you have selected “Security” in the Setup menu (Figure 13-9 on page 13-22) and
activated the OPEN button, this setup page appears on the screen (Figure 13-14).

Figure 13-14 “Security” Setup Page

What is the Purpose of the Setup Page?

On this setup page, you activate or deactivate the write protection for the disk drive
and hard drive and the password protection for setting up and/or booting the CPU.

Device Security
Floppy Disk Read Only
When this check box is activated, write access to the hard disk is no longer
possible.
Hard Disk Read Only
When this check box is activated, write access to the hard disk is no longer
possible.

S7-400, M7-400 Programmable Controllers Module Specifications

13-30 A5E00069467-03
 CPUs for M7-400

Password
Enter Setup
By activating this check box, you can assign a password that authorizes access to
the Setup.

System Boot
By activating this check box, you can assign a password that permits booting of
the operating system.
You can only set this password if a valid password was already entered for “Enter
Setup”.

Note
The password can have a maximum of 8 alphanumeric characters. Upper and
lower case are distinguished. If you use the American keyboard to enter the
password and then change, for example, to using another national keyboard such
as the German, this can have consequences for the password. For the password
Johnny_* you would then have to enter Johnnz?(.
Write down your password and keep it in a safe place where you can find it again.
If you lose or forget your password, contact your local Siemens dealer.

OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.

CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-31
CPUs for M7-400

13.4.9 Setup Page “Date and Time”

Opening the Setup Page

If you have selected “Date and Time” and activated the OPEN button in the Setup
menu (Figure 13-9 on page 13-22), this BIOS setup page appears on the screen
(Figure 13-15).

Figure 13-15 “Date and Time” Setup Page (Default)

What is the Purpose of the Setup Page?

On this setup page, you set the date and time for the programmable module.

Date
You enter the date in the form dd-mm-yyyy (day, month, year) in this edit box.

Time
You enter the time in the form hh:mm:ss (hour, minute, second) in this edit box.
The seconds in the setup page are updated continuously and only stopped when
you select the seconds field. You can then accept the value displayed or set by
pressing the RETURN key.

OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.

CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page with the exception of the time.

S7-400, M7-400 Programmable Controllers Module Specifications

13-32 A5E00069467-03
 CPUs for M7-400

13.4.10 “Hard Disk” Setup Page

Opening the Setup Page

If you have selected “Hard Disk” and activated the OPEN button in the Setup menu
(Figure 13-9 on page 13-22), this BIOS setup page appears on the screen
(Figure 13-16).

Figure 13-16 “Hard Disk” Setup Page with only the Master Hard Disk Present

What is the Purpose of the Setup Page?

The setup page is used for transferring the parameters of the hard disk in your
mass storage module to the BIOS.
Only change the default settings if you install a different hard disk and this cannot
be detected automatically (see Auto function). If the wrong hard disk type is
entered, the operating system cannot be started.

AUTO All Drives

Sets the type and all parameters for the master and slave hard disks.

Auto
Sets the type and all parameters for the corresponding hard disk automatically
during BIOS startup if the check box is activated.

Type .... Size

These are drive-specific parameters.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-33
CPUs for M7-400

Translation Mode
In Translation Mode you have four possible settings:
• Auto
reads the hard disk parameters and automatically sets the correct mode
(Normal, LBA, Large). The Translation Mode “Auto” is set as the default.
• Normal
used for hard disks with a memory capacity of  504 Mbytes.
• LBA (Logical Block Addressing)
is used for hard disks with a memory capacity of  504 Mbytes.
• Large
must be set for hard disks with a memory capacity of  504 Mbytes which do
not support the LBA mode.

Block Mode
Sets the block mode for DMA transfers. As the hard disks in the M7-400 are not
being operated in DMA mode, this check box should not be activated.

32 bits
Sets 32-bit access mode. As this is not supported by ISA hard disk controllers, this
check box should not be activated.

Fast PIO
Sets a faster Programmed Input Output mode.

OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.

CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page.

S7-400, M7-400 Programmable Controllers Module Specifications

13-34 A5E00069467-03
 CPUs for M7-400

13.4.11 Setup Page “Floppy/Card”

Opening the Setup Page

If you have selected “Floppy/Card” and activated the OPEN button in the Setup
menu (Figure 13-9 on page 13-22), this setup page appears on the screen
(Figure 13-17).

Figure 13-17 “Floppy/Card” Setup Page

What is the Purpose of the Setup Page?

You can enter the diskette (floppy disk) drive in your mass storage module and the
memory card drive in your CPU on this page.
Drive A
At the first power up or after the INS key has been pressed during booting, the
BIOS setup detects whether the CPU has been expanded by a mass storage
module and whether it therefore has a floppy disk drive available or not.
• If a floppy disk drive is available, the BIOS assigns drive A to it by activating the
option button “1.44 Mb”.
• If a floppy disk drive is not available, the BIOS assigns drive A to the memory
card drive by activating the option button “MemCard”.
If you do not want either of the two drives entered, activate the option button
“NONE”.
The other Drive A settings are not significant at the present time.
Drive B
Drive B stands only for the memory card drive within the CPU if a floppy disk drive
is entered in Drive A.
• Activate the option button “MemCard” if you want to work with a memory card.
• Otherwise, activate the option button “NONE”.
The other Drive B settings are not significant at the present time.
OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.
CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-35
CPUs for M7-400

13.4.12 Setup Page “Boot Options”

Opening the Setup Page

If you have selected “Boot Options” and activated the OPEN button in the Setup
menu (Figure 13-9 on page 13-22), this setup page appears on the screen
(Figure 13-18).

Figure 13-18 “Boot Options” Setup Page

What is the Purpose of the Setup Page?

On this page, you set the boot drive and the method for the main memory test.

Boot Sequence
By activating the relevant option button, you select here the drive from which the
CPU is to boot at power up.
• Drive A represents the floppy disk drive or memory card, depending on which of
them has been entered as Drive A in the “Floppy/Card” setup page. If there is
no medium with boot capability in the floppy disk drive, the system will next try
to boot from the memory card (“Floppy/Card” setup page –> Drive B).
• Drive C represents the hard disk drive.
It is possible to designate a primary and secondary drive, that is, if there is no boot
program in the primary drive, the system boots automatically from the secondary
drive if there is a boot program there.
If neither Drive A nor Drive C contain a boot program, a message on the screen
prompts you to insert a medium with boot capability and to confirm this by
pressing RETURN .

S7-400, M7-400 Programmable Controllers Module Specifications

13-36 A5E00069467-03
 CPUs for M7-400

Halt On ...
Here you can choose which error messages are displayed in an error window
during booting. Displaying an error window delays booting by approximately
2 seconds.

Keyboard State
Typematic Settings Enabled
If you activate this check box, the values “Typematic Rate” and “Typematic Delay”
are set by the BIOS.
Typematic Rate
This value is used to set the maximum keyboard rate in characters per second.
Typematic Delay
This value is used to set the delay time in milliseconds, after which characters are
transferred with the maximum keyboard rate.
Num Lock On
If you activate this check box, “Num Lock” becomes active after BIOS power up.

System Memory
If this check box is activated, only sample tests are made of the main memory at
power up so the test is especially fast.

OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.

CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page.

DEFAULT Button
When this button is activated, the default settings are entered in the setup page
again. The original settings are deleted.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-37
CPUs for M7-400

13.4.13 Setup Page “System”

Opening the Setup Page

If you have selected “System” and activated the OPEN button in the Setup menu
(Figure 13-9 on page 13-22), this setup page appears on the screen
(Figure 13-19).

Figure 13-19 “System” Setup Page

What is the Purpose of the Setup Page?

On this page, you make the settings for the cache memory, the system ROM, and
the video ROM. We recommend you use the default settings (see Figure 13-19).

System Cache
System Cache offers you the following possible selections:

By Activating the Option Button... You Can Switch...

Disabled all cache memory off,
Primary only only the process-oriented cache on,
Primary and Secondary both the internal and external cache on. If
Size 0 is displayed for Secondary Cache,
only the Primary Cache can be switched on.

Secondary Cache Size

Indicates the size of the secondary cache memory. This field is for information only
and cannot be edited.

S7-400, M7-400 Programmable Controllers Module Specifications

13-38 A5E00069467-03
 CPUs for M7-400

System Cache
For the memory areas of the System ROM, the VIDEO ROM, and the addresses
of BIOS expansions, you can set whether they are copied to the Shadow RAM and
whether the cache should be used.

• System ROM offers you the following possible selections:

By Activating the Option Button... You Determine...

Shadowed that the BIOS address area of 128 Kbytes is
to be copied into the high-speed shadow
RAM. This option cannot be switched off.
Shadowed and Cached that a cache memory is available for this
memory area in addition to shadow RAM.

Note
If you have switched off the cache memory in the “Primary and Secondary
Cache” field, the setting in the “System ROM” field does not change
automatically.

• Video ROM offers you the following possible selections:

By Activating the Option Button... You Determine...

Shadowed that the video ROM (32 Kbytes) is copied
into the fast shadow RAM. This accelerates
video output (faster screen buildup).
Shadowed and Cached that a cache memory is available for this
memory area in addition to shadow RAM.
Further accelerates video output.

OK Button
Activating this button returns to the Setup menu. Changes on the setup page are
retained.

CANCEL Button
Activating this button returns to the Setup menu. Deletes all changes you have
made on the setup page.

DEFAULT Button
When this button is activated, the default settings are entered in the setup page
again. The original settings are deleted.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-39
CPUs for M7-400

13.5 I/O Addresses, Main Memory and Interrupt Assignments

Introduction
This section gives you detailed information, in the form of a table, on the I/O
address space assignment, main memory and interrupt assignments of the CPUs.

Memory Assignment
The main memory is assigned as follows in the M7-400:

Table 13-8 Main Memory Assignment

Address Content
1 MB to 15 MB User memory area
15 MB to 16 MB PROFIBUS DP*), otherwise free
E 8000H to F FFFFH BIOS
E 0000H to E 7FFFH Free (32 K)
D 0000H to D FFFFH Free (64 K)
C F000H to C FFFFH Free (4 K)
C C000H to C EFFFH Memory card, otherwise free (12 K)
C 8000H to C BFFFH Free (16 K)
C 0000H to C 7FFFH Shadow VGA BIOS (32 K)
A 0000H to B FFFFH VGA (128 K)
0 0000H to 9 FFFFH 640 K system area
*) If the interface submodule IF 964-DP is not plugged in the preferred slot (see Table 15-3 on
page 15-4)

Keeping Memory Areas Free

The memory areas that are not always marked as “free” should be kept free when
using a memory manager.

SRAM Area
The size of the SRAM with battery backup is 64 Kbytes (net for data blocks
56 Kbytes). If the battery is removed and inserted again when there is no power
connected, the SRAM content will be lost. This is indicated by the BAF LED.

S7-400, M7-400 Programmable Controllers Module Specifications

13-40 A5E00069467-03
 CPUs for M7-400

Memory Areas for AT Cards

AT cards which are inserted in the expansion module ATM 478 can occupy the
following memory areas:

Range M7 RMOS32 M7 RMOS32 with MS-DOS M7 RMOS32

with
Without EMS With EMS MS-Windows
D 0000H to E 7FFFH 96 K 96 K 32 K2) 32 K2)
C 8000H to C BFFFH 16 K 16 K 16 K 16 K
C C000H bis C EFFFH1) 12 K 12 K 12 K 12 K
C F000H to C FFFFH 4K 4K 4K 4K

1) The area is only available if no memory card is present.

2) Under M7 RMOS32 with MS Windows, or if the driver software under MS-DOS requires
expanded memory (EMS), the memory manager EMM386 occupies 64K in the area
D0000H to E7FFFH because it must be operated in EMS mode.

I/O Address Area

Addressing the ISA-compatible input/output components is done in the I/O area
under the addresses from 0100H to 03FFH. The addresses specified by the ISA
architecture are used here. In contrast to the original AT, the I/O addresses in the
CPUs are completely decoded so that the addresses above 03 FFH can be used
for addressing M7-400-specific hardware.

I/O Address Area for AT Adapter Modules

If you are using AT adapter modules, the following address areas are available for
addressing:
• 0200H to 03FFH
• Except for the area 3 E0H to 3 E3H and
• Except for the areas which the interface submodules are occupying (see the
“Interface Submodules” chapter).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 13-41
CPUs for M7-400

Interrupt Assignment

Table 13-9 Interrupt Assignment

Interrupt Function
NMI Group interrupt for faults and reset signals
IRQ0 System timer
IRQ1 Reserved for keyboard
IRQ2 Cascading of the 2nd interrupt controller
IRQ3 Assigned to COM2, otherwise free
IRQ4 Assigned to COM1, otherwise free
IRQ5 Assigned to LPT2, otherwise free
IRQ6 Assigned to floppy disk drive, otherwise free
IRQ7 Assigned to LPT1, otherwise free
IRQ8 Real-time clock
IRQ9 Software interrupt, rerouted to IRQ2
IRQ10 IF 964-DP, otherwise free
IRQ11 CP 1401, otherwise free
IRQ12 Assigned to trackball/mouse
IRQ13 Assigned to numeric coprocessor
IRQ14 Assigned to hard disk drive, otherwise free
IRQ15 Assigned

S7-400, M7-400 Programmable Controllers Module Specifications

13-42 A5E00069467-03
M7-400 Expansions 14
Chapter Overview

Section Description Page

14.1 Overview 14-2
14.2 EXM 478 Expansion Module 14-6
14.3 ATM 478 AT Adapter Module 14-15
14.4 MSM 478 Mass Storage Module 14-22

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-1
M7-400 Expansions

14.1 Overview

Introduction
You can expand your automation computer from the M7-400 range by adding
expansion modules for interface submodules, short AT modules, and/or the mass
storage module. The interface submodules can include the IF 962-COM,
IF 962-LPT, ... .
The following expansion modules are available:
• EXM 478 expansion module for up to 3 interface submodules
• ATM 478 AT adapter module for one short AT module
• MSM 478 mass storage module with hard disk and floppy disk drive and an
LPT1 printer port.

Expansion Socket
On the right-hand side of a CPU or an M7-400 application module there is a
120-pin socket (AT-ISA bus) for connecting expansions. There is a matching
connector for this socket on the left-hand side of the EXM 478, ATM 478, and
MSM 478 expansion modules (Figure 14-1).
The EXM 478, ATM 478 and MSM 478 expansion modules have one expansion
socket each on the right-hand side so that further expansion modules can be
plugged in.

S7-400, M7-400 Programmable Controllers Module Specifications

14-2 A5E00069467-03
 M7-400 Expansions

Behavior on the S7-400 Backplane Bus

The expansion modules can be accessed via the relevant programmable module
and not via the S7-400 backplane bus.

e.g. FM 456-4 e.g. EXM 478

Expansion
connector

Expansion
socket

Figure 14-1 Positions of Expansion Socket and Expansion Connector

Maximum Expansion
Figure 14-2 shows the maximum possible expansion using expansion modules for
a CPU 486-3, CPU 488-3, or FM 456.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-3
M7-400 Expansions

e.g. FM 456-4 e.g. EXM 478 e.g. MSM 478 e.g. ATM 478

Figure 14-2 Maximum Expansion with Expansion Modules

S7-400, M7-400 Programmable Controllers Module Specifications

14-4 A5E00069467-03
 M7-400 Expansions

Permissible Combinations
You can see from the table below which expansions can be connected to the
programmable M7-400 modules.

Table 14-1 Expansion Possibilities of the CPU 486-3, CPU 488-3, or FM 456

Programmable M7-400 Module Slot Slot Slot

Slot n in the case of single-width modules n+1 n+2 n+3
Slot n and n+1
n+2 n+3 n+4
in the case of double-width modules
– – –
EXM 478 – –
EXM 478 EXM 478 –
EXM 478 EXM 478 EXM 478
EXM 478 EXM 478 ATM 478
EXM 478 ATM 478 ATM 478
EXM 478 ATM 478 –
ATM 478 – –
CPU 486-3, CPU 488-3, FM 456-4
ATM 478 ATM 478 –
ATM 478 ATM 478 ATM 478
MSM 478 – –
EXM 478 MSM 478 –
EXM 478 EXM 478 MSM 478
EXM 478 MSM 478 ATM 478
MSM 478 ATM 478 ATM 478
MSM 478 ATM 478 –

Rules for the Combinations

The following rules apply for expansions from left to right after a CPU or application
module (slots n + 1, n + 2, n + 3 or n + 2, n + 3, n + 4):
1. Up to 3 EXM 478 expansion modules
2. Max. 1 MSM 478 mass storage module
(that is, always after the CPU 486-3, CPU 488-3, FM 456, or EXM 478)
3. Up to 3 ATM 478 AT adapter modules
(that is, always after the CPU 486-3, CPU 488-3, FM 456, EXM 478, or
MSM 478)
In total, a CPU or application module can be expanded with up to three modules.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-5
M7-400 Expansions

14.2 EXM 478 Expansion Module

Order Number
EXM 478 6ES7 478-2AC00-0AC0

Characteristics
The EXM 478 expansion module is used to house up to three interface
submodules. By installing the relevant interface submodule in this expansion
module, such as the IF 962-VGA and IF 962-LPT, you can connect, for example, a
VGA monitor, a keyboard, and a printer to your automation computer.
The EXM 478 expansion module has a 120-pin connector on the left-hand side and
a 120-pin socket on the right-hand side for connecting a further expansion module
or a mass storage module.

Figure 14-3 EXM 478 Expansion Module

S7-400, M7-400 Programmable Controllers Module Specifications

14-6 A5E00069467-03
 M7-400 Expansions

14.2.1 Addressing the EXM 478 Expansion Module

Introduction
In order to be able to program the interface submodules in the EXM 478 expansion
module, you must be able to determine their addresses. There are the following
addressing methods:
• Addressing in the AT-compatible I/O address area
• Addressing in the M7-400-specific I/O address area
In this section, you will find information on both methods of addressing the
interface submodules.

Addressing in the AT-Compatible I/O Address Area

Some of the interface submodules are automatically configured by the BIOS for
operation in the AT-compatible I/O address area. This automatic configuration
takes place, for example, for:
• The IF 962-VGA interface submodule
• Up to 4 COM ports (COM1 to COM4)
• Up to 3 LPT ports (one LPT port on the MSM 478 and two interface
submodules IF 962-LPT)
Further interfaces are configured in the BIOS setup. See the CPU/FM description
to learn how to operate the BIOS setup. The description of the interface
submodules will show the specific settings possible.
To configure in the BIOS setup, you must know the submodule receptacle numbers
of the interface submodule receptacles (slots). You will find this information in
Figure 14-4 later in this section.

Addressing in the M7-400-Specific I/O Address Area

All interface submodules can be accessed via M7-400-specific I/O addresses.
There is a description of how to determine the I/O address of an interface
submodule in the “specific address area” starting from page 14-10.
You require this information to program an interface submodule that is not
addressed in the AT-compatible address area.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-7
M7-400 Expansions

Numbering of the Submodule Receptacles

Each receptacle (slot) for an interface submodule has a submodule receptacle
number assigned to it. The submodule receptacle number depends on the
configuration of your CPU or FM. The submodule slot numbers are shown in
Figures 14-4 and 14-5.
You require these submodule receptacle numbers for configurations that you make
in the BIOS setup or to determine the I/O addresses of an interface submodule.

FM 456-4 EXM 478

3 6 9

0 4 7 10

1 5 8 11

Slot n n+1 n+2 n+3

Figure 14-4 Submodule Receptacle Numbers for the FM 456-4 and EXM 478

S7-400, M7-400 Programmable Controllers Module Specifications

14-8 A5E00069467-03
 M7-400 Expansions

CPU 486-3/ EXM 478

CPU 488-3

6 9 12

3 7 10 13

0 8 11 14

Slot n n+1 n+2 n+3 n+4

Figure 14-5 Submodule Receptacle Numbers for the CPU 486-3, CPU 488-3, and
EXM 478

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-9
M7-400 Expansions

Division of Addresses in the M7-400-Specific I/O Address Area

The EXM 478 expansion module is operated on the ISA bus of the programmable
module. The I/O address area from C000H (to D2FFH) in the CPU 486-3,
CPU 488-3, or the FM 456 application module is reserved for this purpose. Each
expansion module occupies 256 bytes (100H) in this area. The division of the
address area is shown in Figure 14-6 using the FM 456-4 as an example.

80

Submodule receptacle
number 6
40

Reserved
Cr00 00
FF
3. EXM 478
Expansion Module Submodule receptacle
Cq00 number 5
C0
2) EXM 478
Expansion Module Submodule receptacle
Cp00 number 4
80
1) EXM 478
Expansion Module Submodule receptacle
Co00 number 3
40
e.g. FM 456-4
Reserved
Cn00
00

BF
n .. q = Number of the slot of the
Submodule receptacle
module in the mounting
number 1
rack 80
(in hexadecimal notation)

Example: Submodule receptacle

n = 6 FM 456-4 C600H number 0
40
o = 7 1) EXM 478 C700H
p = 8 2) EXM 478 C800H
q = 9 3. EXM 478 C900H Reserved
00
All addresses are in hexadecimal notation.

Figure 14-6 Base Addresses of the Expansion Modules and the Interface Submodules

S7-400, M7-400 Programmable Controllers Module Specifications

14-10 A5E00069467-03
 M7-400 Expansions

Addresses Within an Expansion Module

Each expansion module occupies 256 bytes (100H) within the CPU/FM address
area. The division of the 256 addresses within an expansion module can be seen
from Table 14-2.

Table 14-2 Division of Addresses Within an Expansion Module

Address Function/Slot Remarks

00H to 3FH Reserved In this address area, the automation computer’s
BIOS makes basic settings in the expansion
module such as assignment of interrupts, etc.
40H to 7FH Interface submodule x
80H to BFH Interface submodule y
C0H to FFH Interface submodule z

Base Addresses of the Interface Submodules

Special characteristics of the interface submodules such as the location of the
AT-compatible I/O addresses (IF 962-COM, IF 962-LPT, ...) are set via the base
addresses, or the interface submodules are accessed exclusively via these base
addresses (IF 961-DIO, IF 961-AIO,...).
The base address for an interface submodule is obtained from the sum of the
slot-dependent address of the expansion module and the interface submodule
address within the expansion module. You can find the resulting base addresses in
Tables 14-3 and 14-4:

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-11
M7-400 Expansions

Table 14-3 Base Addresses of the Interface Submodules with FM 456-4

Interface Submodule
Base Address Modules in Submodule
Receptacle ...
Cn40H FM 456-4 Number 0
Cn80H Slot n Number 1
Co40H Nummer 3
Co80H 1st EXM 478 in slot o = n + 1 Number 4
CoC0H Number 5
Cp40H Number 6
Cp80H 2nd EXM 478 in slot p = n + 2 Number 7
CpC0H Number 8
Cq40H Number 9
Cq80H 3rd EXM 478 in slot q = n + 3 Number 10
CqC0H Number 11
n .. q = Number of the module slot in the mounting rack in hexadecimal notation.

Table 14-4 Base Addresses of the Expansion Modules with CPU 486-3,
CPU 488-3

Interface Submodule
Base Address Modules in Submodule
Receptacle ...
Cn40H CPU 486-3, CPU 488-3 Number 0
Slot n
Co40H CPU 486-3, CPU 488-3 Nummer 3
Slot o = n + 1
Cp40H Number 6
Cp80H 1st EXM 478 in slot p = n + 2 Number 7
CpC0H Number 8
Cq40H Number 9
Cq80H 2nd EXM 478 in slot q = n + 3 Number 10
CqC0H Number 11
Cr40H Number 12
Cr80H 3rd EXM 478 in slot r = n + 4 Number 13
CrC0H Number 14
n .. r = Number of the module slot in the mounting rack in hexadecimal notation.

S7-400, M7-400 Programmable Controllers Module Specifications

14-12 A5E00069467-03
 M7-400 Expansions

14.2.2 Interrupt Assignments, Signal Switching EXM 478

Introduction
Up to three interrupts per interface submodule are permitted in an EXM 478
expansion module. The various possible methods of interrupt assignment or
interrupt operation are described below.

Interrupt Assignment
When configuring the interface submodules in the BIOS setup, you can assign ISA
interrupts to the three interrupts of an interface submodule (IRQa, IRQb, IRQc).
For this purpose, enter the ISA interrupt provided in the relevant screen form.
If you enter the value “F0H” instead of the ISA interrupt, this interrupt is processed
via a shared interrupt. See below for details.

Shared Interrupt
Since the number of interrupts is limited due to AT-compatibility, it is possible to
assign several individual interrupts of the interface submodules to a shared
interrupt in the EXM 478 expansion modules. The shared interrupt is shared by all
interface submodule interrupts within an expansion module where the interrupt
assignment “F0H” has been entered.
The shared interrupt is assigned to the ISA interrupt during configuration of the
interface submodule in the BIOS setup.

Signal Switching
In an EXM 478 expansion module, two interface submodule signals can be
switched to another (signal switching). This signal switching is done during
configuration of the interface submodule in the BIOS setup.
Refer to the interface submodule description to find out if an interface submodule
requires signals from a further interface submodule, that is, if signal switching is
necessary.

Note
You will find a detailed description of the BIOS setup in the M7-400 application
module or CPU description.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-13
M7-400 Expansions

14.2.3 Technical Specifications of the EXM 478 Expansion Module

Technical Specifications of the EXM 478

The table below contains the technical specifications of the EM 478 expansion
module:

EXM 478
6ES7 478-2AC00-0AC0
Performance Features
Number of connectable 3
interface modules
Connection of Yes
expansion modules
Technical Specifications
Supply voltage 5 VDC

Current consumption
(without interface
submodules) 0.2 A
Power losses
(without interface
submodules) 0.5 W
Permissible power losses
(with 3 interface
submodules)
• Without forced max. 10 W
ventilation
• With forced ventilation max. 12 W
Dimensions
W x H x D (mm) 25 x 290 x 210
Weight 0.65 kg

Note
The sum of the power losses of the EXM 478 expansion module and the interface
submodules it contains must not exceed the maximum permissible power losses.

S7-400, M7-400 Programmable Controllers Module Specifications

14-14 A5E00069467-03
 M7-400 Expansions

14.3 ATM 478 AT Adapter Module

Order Number
ATM 478: 6ES7 478-2CA00-0AC0

Characteristics
The ATM 478 AT adapter module is used to accommodate a short AT module
(card).
The ATM 478 AT adapter module has a 120-pin connector on the left-hand side
and a 120-pin socket on the right-hand side for connecting a further expansion
module or a mass storage module.

Figure 14-7 ATM 478 AT Adapter Module

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-15
M7-400 Expansions

14.3.1 Pin Assignments of the AT Module

Pin Assignments
The ATM 478 AT adapter module has a 98-pin standard direct connector for short
AT modules (see Figure 14-8).

8 bit data
16 bit data

Figure 14-8 ATM 478 AT Adapter Module, 98-Pin Standard Direct Connector

See the following table for the pin assignments of the 98-pin standard direct
connector.

S7-400, M7-400 Programmable Controllers Module Specifications

14-16 A5E00069467-03
 M7-400 Expansions

Table 14-5 Pin Assignments of the 98-Pin Standard Direct Connector (ATConnector)

Pin Signal Name Pin Signal Name

XT Signals
B1 GND A1 I/OCHCK_N
B2 RESET DRV A2 SD7
B3 P5V A3 SD6
B4 IRQ9 A4 SD5
B5 N5V A5 SD4
B6 DRQ2 A6 SD3
B7 N12V A7 SD2
B8 0WS A8 SD1
B9 P12V A9 SD0
B10 GND A10 I/OCHRDY_N
B11 SMEMW_N A11 AEN
B12 SMEMR_N A12 SA19
B13 I/OW_N A13 SA18
B14 I/OR_N A14 SA17
B15 DACK3_N A15 SA16
B16 DRQ3 A16 SA15
B17 DACK1_N A17 SA14
B18 DRQ1 A18 SA13
B19 REFRESH A19 SA12
B20 SYSCLK A20 SA11
B21 IRQ7 A21 SA10
B22 IRQ6 A22 SA9
B23 IRQ5 A23 SA8
B24 IRQ4 A24 SA7
B25 IRQ3 A25 SA6
B26 DACK2_N A26 SA5
B27 T/C A27 SA4
B28 BALE A28 SA3
B29 P5V A29 SA2
B30 OSC A30 SA1
B31 GND A31 SA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-17
M7-400 Expansions

Table 14-5 Pin Assignments of the 98-Pin Standard Direct Connector (ATConnector)

Pin Signal Name Pin Signal Name

AT Expansion
D1 MEMCS_16_N C1 SBHE_N
D2 I/OCS16_N C2 LA23
D3 IRQ10 C3 LA22
D4 IRQ11 C4 LA21
D5 IRQ12 C5 LA20
D6 IRQ15 C6 LA19
D7 IRQ14 C7 LA18
D8 DACK0_N C8 LA17
D9 DRQ0 C9 MEMR_N
D10 DACK5_N C10 MEMW_N
D11 DRQ5 C11 SD8
D12 DACK6_N C12 SD9
D13 DRQ6 C13 SD10
D14 DACK7_N C14 SD11
D15 DRQ7 C15 SD12
D16 P5V C16 SD13
D17 MASTER_N C17 SD14
D18 GND C18 SD15

S7-400, M7-400 Programmable Controllers Module Specifications

14-18 A5E00069467-03
 M7-400 Expansions

14.3.2 Technical Specifications of the ATM 478 AT Adapter Module

Technical Specifications of the ATM 478

The table below contains the technical specifications of the ATM 478 AT adapter
module:

ATM 478 Supply of the AT Module

6ES7 478-2CA00-0AC0 Supply voltage max. current
Performance Features + 5 V (4.75 V to 5.25 V) 4A
Number of connectable 1 - 5 V (- 4.4 V to - 5.3 V) 70 mA
AT modules (short)
+ 12 V (11.7 V to 12.3 V) 500 mA
Connection of
- 12 V (- 10.9 V to - 13.5 V) 100 mA
expansion modules Yes
The supply voltages -5 V, +12 V, and -12 V are
Technical Specifications
monitored. In the event of a fault, the “INTF” LED
Supply voltage 5 VDC on the CPU or application module lights up.

Current consumption
(without AT module) 0.12 A
Current consumption of See calculation of
the AT module current consumption
Power losses
(without AT module) 0.6 W
Permissible power losses
(with AT module)
• Without forced max. 10 W
ventilation
• With forced ventilation max. 12 W
Dimensions
W x H x D (mm) 25 x 290 x 230
Weight (without AT module) 0.74 kg

Calculation of Power Consumption

You can calculate the power consumption of the short AT module using the
following formula:
I(AT module) = I(- 5 V) x 1.3 + (I(+ 12 V) + I(- 12V)) x 3.12

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-19
M7-400 Expansions

Example of Power Loss Calculation

The following table contains a calculation example for the total power losses for an
AT adapter module with an AT module.

Table 14-6 Calculation Example for Total Power Losses of an ATM 478 with AT Module

Remark Voltage Current Power Losses

Consumption
+5V 0.8 A 4W
+ 12 V 0.1 A 1.2 W
Power losses of the AT module
- 12 V 0.05 A 0.6 W
-5V – –
Power losses of the internal power supply
(P+12V + P-12V + P-5V) x 0.3
of the 0.54 W
(1.2 + 0.6 + 0) x 0.3 W
ATM 478 for supplying the AT module
Power losses of the ATM 478 AT adapter module 0.6 W
Total power losses of the ATM 478 adapter module with AT module 6.94 W

In this example, the power losses are 6.94 W. The ATM 478 AT adapter module
can be operated without forced ventilation.

S7-400, M7-400 Programmable Controllers Module Specifications

14-20 A5E00069467-03
 M7-400 Expansions

Permissible Dimensions of AT Modules

The following illustration shows you the maximum and minimum dimensions in
millimeters that AT modules must meet for the ATM 478 AT adapter module. If
these dimensions are not conformed to, proper installation in the ATM 478 AT
adapter module is no longer possible.

Components max. insertion height 14 mm

106.5 max.
100.33

0.8

3 min.

108.76
164 max. 2.84

4.3

18.4
14
10.9

0 2.85
0
5.9
8
12.2

Figure 14-9 Dimension Specifications for AT Modules to be Installed in an ATM 478

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-21
M7-400 Expansions

14.4 MSM 478 Mass Storage Module

Order Number
MSM 478: 6ES7 478-2BA00-0AC0

Characteristics
The MSM 478 mass storage module is used for storing programs and larger
quantities of data. It also has an AT-compatible parallel port (LPT).
The MSM 478 mass storage module has the following function units:
• One 3.5’’/1.44-Mbyte floppy disk drive
• One hard disk drive with a capacity of ≥ 516 x 106 bytes
• One AT-compatible parallel port LPT1
The MSM 478 mass storage module has a 120-pin connector on the left-hand side
and a 120-pin socket on the right-hand side for connecting further expansion
modules.

Figure 14-10 MSM 478 Mass storage module

System Integration BIOS Setup

So that the BIOS of your CPU 486-3, CPU 488-3, or your FM 456 can correctly
access the diskette and the hard disk, you must make some settings in the BIOS
setup of your CPU/FM.
To learn how to make these settings, see the “BIOS setup” section of the module
description.

S7-400, M7-400 Programmable Controllers Module Specifications

14-22 A5E00069467-03
 M7-400 Expansions

14.4.1 LPT1 Parallel Port

Characteristics
The MSM 478 mass storage module has an AT-compatible parallel port (LPT) for
connecting a printer with Centronics interface. The parallel port can also be used
as a bi-directional data interface. There is a 25-pin sub D socket connector on the
frontside of the submodule for plugging in the connecting cable.
This parallel port is always configured by the BIOS as LPT1 regardless of the slot
occupied by the MSM 478 mass storage module.

Addressing
I/O address of the parallel port (LPT): 03BCH (to 03BEH )
Device name: LPT1

Interrupt Request
The parallel port (LPT) supplies the interrupt request IRQ7.

Pin Assignment of the Parallel Port

There is a 25-pin sub D socket connector on the frontside of the submodule for
plugging in the connecting cable. See Table 14-7 for the pin assignments.

Cable length
The cable length on the LPT1 parallel port should not exceed approximately 3 m.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-23
M7-400 Expansions

Table 14-7 MSM 478 Parallel Port, Socket X1 (25-Pin Sub D Socket)

Pin Meaning Direction

1 /STROBE Input/output
2 Data 0 Input/output
3 Data 1 Input/output
4 Data 2 Input/output
5 Data 3 Input/output
6 Data 4 Input/output
7 Data 5 Input/output
8 Data 6 Input/output
9 Data 7 Input/output
10 /ACK Input
11 BUSY Input
12 PE Input
13 SLCT Input
14 /AUTO FEED Output
15 /ERROR Input
16 /RESET Output
17 /SLCT IN Output
18 GND –
19 GND –
20 GND –
21 GND –
22 GND –
23 GND –
24 GND –
25 GND –

Note
Operational ground (GND signal) at the COMa or COMb ports is referenced to
internal ground.
Suitable measures may be required on the process side to avoid ground loops.

S7-400, M7-400 Programmable Controllers Module Specifications

14-24 A5E00069467-03
 M7-400 Expansions

14.4.2 Technical Specifications of the MSM 478 Mass Storage Module

Technical Specifications of the MSM 478

The table below contains the technical specifications of the MSM mass storage
module: 478

With Mass Storage Module MSM 478 Ambient Operating Conditions

6ES7 478-2AB00-0AC0 Temperature:
Without forced
Performance Features
ventilation from 0 to 40 oC
Diskette 3.5”, 1.44 Mbytes With forced ventilation
Hard disk ≥ 516 x 106 bytes without diskette from 0 to 55 oC
with diskette from 0 to 40 oC
Parallel port 1, LPT1
Temperature change: max. 10 K/h
Connection of
Relative humidity: 8% to 80% at 25 oC,
expansion modules Yes
no condensation
Technical Specifications Height (in relation to sea
Supply voltage 5 VDC level) -50 m to 2,500 m
Mechanical vibrations
Current consumption 1A (measured at the drive)
10 ≤ f ≤ 58 Hz 0,035 mm,
constant amplitude
Power losses 5W 58 ≤ f ≤ 500 Hz 0.1 g, constant
acceleration
Dimensions Shocks: Semisinusoidal: 5 g,
W x H x D (mm) 25 x 290 x 210 (measured at the drive) 11 ms

Weight 1.08 kg Environmental Conditions for

Storage/Transport
Temperature: from -10 to 60 oC
Temperature change: max. 20 K/h
Relative humidity: 8% to 80% at 25 oC,
no condensation
Height (in relation to sea
level) to 10,000 m
Mechanical vibrations
5 ≤ f ≤ 9 Hz 3.5 mm amplitude
9 ≤ f ≤ 500 Hz 1 g acceleration
Shocks: Semisinusoidal: 50 g,
11 ms

Note
The ambient conditions specified are limit values determined by the hard disk
drive. The values must not be exceeded on the hard disk drive.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 14-25
M7-400 Expansions

S7-400, M7-400 Programmable Controllers Module Specifications

14-26 A5E00069467-03
Interface Submodules 15
Chapter Overview

Section Description Page

15.1 Interface Submodules Overview 15-2
15.2 Submodule IDs and Insertion Rules 15-4
15.3 IF 962-VGA Interface Submodule 15-5
15.4 IF 962-COM Interface Submodule 15-10
15.5 IF 962-LPT Interface Submodule 15-17
15.6 IF 961-DIO Interface Submodule 15-23
15.7 IF 961-AIO Interface Submodule 15-32
15.8 IF 961-CT1 Interface Submodule 15-54
15.9 IF 964-DP Interface Submodule 15-59
15.10 Synchronization Submodule 15-64

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-1
Interface Submodules

15.1 Interface Submodules Overview

Introduction
The interface submodules are designed for use in the M7-300 and M7-400
automation computers. They can be operated in the M7-400 programmable
modules and in the EXM 378/EXM 478 expansion modules. The interface
submodules are controlled via the ISA bus.
The interface submodules are labeled on the front plate and so can be identified
even when installed.

Handling
Interface submodules and their front connectors must only be plugged in or
removed when the power is switched off. Avoid confusing front connectors since
this can destroy the interface submodules or the connected devices.

ESD Guidelines
The interface submodules are not enclosed on the underside. For this reason, you
must observe ESD guidelines when handling these modules.

Slots/Submodule Receptacle Numbers

To link the interface submodules into your system (for example, BIOS Setup), you
require the submodule receptacle numbers. See the descriptions of the M7-400
programmable modules or the M7-300/400 expansion modules for the numbering
of the individual submodule receptacles.

Addressing in the M7-300/400 - Reserved I/O Address Area

In the M7-300/400 automation computers, the I/O address area C000H is reserved
for addressing the interface submodules.
The base address at which an interface submodule can be addressed depends on
the submodule receptacle of the M7-400 programmable module or the M7-300/400
expansion module containing the interface submodule. You can find the
submodule-receptacle-dependent base address of the interface submodule in the
description of the M7-400 programmable module or the M7-300/400 expansion
module.
The sections below describe the registers and their meanings as well as the
associated offset addresses for the individual interface submodules.
The resulting I/O address is the sum of the base address and the offset address.

Submodule ID
Each interface submodule has a submodule ID stored in read-only memory. This
information is required in the BIOS Setup.

S7-400, M7-400 Programmable Controllers Module Specifications

15-2 A5E00069467-03
 Interface Submodules

Interrupt Assignments
When configuring the interface submodules in the BIOS setup, you can assign ISA
interrupts to the three interrupts of an interface submodule (IRQa, IRQb, IRQc).
For this purpose, enter the ISA interrupt provided in the relevant screen form. See
the table below for the format for entering the interrupt.

Table 15-1 Format of the Interrupt Entry in the BIOS Setup of the Interface Submodule

Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0

1 1 1 0 ISA interrupt number

If you enter the value “F0H” instead of the ISA interrupt (“EXH”), this interrupt is
processed via a shared interrupt.

Shared Interrupt
Since the number of interrupts is limited due to AT-compatibility, it is possible to
assign several individual interrupts of the interface submodules to a shared
interrupt. The shared interrupt is shared by all interface submodule interrupts within
an expansion module where the interrupt assignment “F0H” has been entered.
The shared interrupt is assigned to the ISA interrupt during configuration of the
interface submodule in the BIOS setup.

Signal Switching
In an EXM 478 expansion module, two interface submodule signals can be
switched to another (signal switching). This signal switching is done during
configuration of the interface submodule in the BIOS setup.
Refer to the interface submodule description to find out if an interface submodule
requires signals from a further interface submodule, that is, if signal switching is
necessary.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-3
Interface Submodules

15.2 Submodule IDs and Insertion Rules

Submodule IDs
The following table contains an overview of the submodule IDs for the interface
submodules.

Table 15-2 Overview of the Submodule IDs for the Interface Submodules

Interface Submodule Submodule ID

IF 961-AIO 01H
IF 961-CT1 03H
IF 961-DIO 02H
IF 962-COM 41H
IF 962-LPT 44H
IF 962-VGA 81H
IF 964-DP 8CH

Insertion Rules
The interface submodules cannot be operated in all submodule receptacles. The
following table shows the insertion rules for those interface submodules that
cannot be used in all receptacles:

Table 15-3 Insertion Rules for Interface Submodules that Cannot be Used in All Receptacles

Submodule Receptacle Numbers in the Following Modules

CPU 486-3/
Interface Submodule EXM 378-2 EXM 378-3 FM 456-4 EXM 478
CPU 488-3
1 2 3 4 5 0 1 0 3 all
IF 962-VGA
D D – D D D D D D D
6ES7 962-1BA00-0AC0
IF 964-DP
D D – D D D D D D*) D
6ES7 964-2AA00-0AB0
*) Preferred slot for IF 964-DP if only one submodule is inserted, see Table 13-8 on page 13-40.

S7-400, M7-400 Programmable Controllers Module Specifications

15-4 A5E00069467-03
 Interface Submodules

15.3 IF 962-VGA Interface Submodule

Order Number
6ES7 962-1BA00-0AC0

Characteristics
The IF 962-VGA interface submodule is used to connect a keyboard and a VGA
screen. The interfaces to the keyboard and the screen are AT-compatible.
As an alternative to a “normal” AT keyboard, a keyboard with an integrated
trackball can be connected (for example, the PG 740 keyboard).
The IF 962-VGA interface submodule is designed for the local area and the
distance to the I/O devices should not exceed approximately 2.5 m.

Figure 15-1 IF 962-VGA Interface Submodule

Note
You can operate a maximum of one keyboard/graphics submodule on one
programmable module (CPU or FM).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-5
Interface Submodules

15.3.1 Pin Assignments

Socket X1 VGA Screen Connection

Table 15-4 Socket X1, VGA Screen Connection IF 962-VGA (15-Pin High-Density Sub D
Socket Connector)
Pin Meaning
1 Analog red
2 Analog green
3 Analog blue
4
5 Signal GND
6 Analog GND red
7 Analog GND green
8 Analog GND blue
9
10 Signal GND
11
12
13 Horizontal sync
14 Vertical sync
15

Socket X2 Keyboard Connection

Table 15-5 X2 Socket, Keyboard Plug Connection IF 961-VGA (6-Pin Mini DIN Socket
Connector)
Pin Meaning Direction
1 Keyboard data Input/output
2 Mouse data Input/output
3 Signal GND –
4 5 VDC –
5 Keyboard clock Input/output
6 Mouse clock Input/output

4
6
2

1 5
3
X2 socket

Figure 15-2 X2 Socket, Keyboard Plug Connection IF 961-VGA (6-Pin Mini DIN Socket
Connector)

S7-400, M7-400 Programmable Controllers Module Specifications

15-6 A5E00069467-03
 Interface Submodules

15.3.2 Addressing, Interrupts, and Submodule ID

Addressing
Addressing corresponds to the AT standard.
The following addresses are occupied by the IF 962-VGA interface submodule:
Memory addresses: A0000H to C7FFFH
I/O addresses: 060H to 06FH, 3B0H to 3BBH, 3BFH to 3DFH

Interrupt Request
The interface submodule supplies the following interrupts:
• IRQ a: Keyboard interrupt
• IRQ b: Mouse interrupt (trackball)
• IRQ c: VGA interrupt
The BIOS routes these interrupts to ISA interrupts in accordance with Table 15-6.

Table 15-6 Interrupt Assignments of the IF 962-VGA Interface Submodule

Interrupt Source of the Interface Submodule ISA Interrupt

Keyboard IRQ a IRQ 1
Mouse (track ball) IRQ b IRQ 12
VGA IRQ c Can be set in the BIOS setup

Submodule ID
The IF 962-VGA interface submodule has the submodule ID 81H.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-7
Interface Submodules

15.3.3 Technical Specifications

Technical Specifications
The IF 962-LPT interface submodule receives its supply voltage from the M7-400
programmable modules or from the M7-300/400 expansion modules. The current
consumption given in the technical specifications is the consumption required for
dimensioning the power supply, that is, the current consumption is referenced to
24 V in the M7-300 and to 5 V in the M7-400.

6ES7 962-1BA00-0AC0
Technical Specifications
Supply voltage Supplied from the
M7-400
programmable
modules or from the
M7-300/400
expansion modules
Current consumption in the
M7-300
(for dimensioning the 24 V
current supply) 0.21 A
Current consumption in the
M7-400
(for dimensioning the 5 V
current supply) 0.6 A
VGA controller WD90C24
Video controller 1 Mbytes
Submodule ID 81H
Power losses 2.5 W
Dimensions
W x H x D (mm) 18.2 x 67 x 97
Weight 0.085 kg

S7-400, M7-400 Programmable Controllers Module Specifications

15-8 A5E00069467-03
 Interface Submodules

Operating Modes
The WD90C24 VGA controller is used on the IF 962-VGA interface submodule.
Table 15-7 shows you the video modes supported by the BIOS of the IF 962-VGA
interface submodule.

Table 15-7 Video Modes of the IF 962-VGA Interface Submodule

Mode Text / Mono- Resolution Number Character Horizontal Vertical

(HEX) Graphics chrome/ (Columns x Lines) of Size Frequency Frequency
Color colours (kHz) (Hz)
0.1 Text Color 320 x 200 16 8x8 31.5 70
0.1 Text Color 320 x 350 16 8 x 14 31.5 70
0.1 Text Color 360 x 400 16 9 x 16 31.3 70
2.3 Text Color 640 x 200 16 8x8 31.5 70
2.3 Text Color 640 x 350 16 8 x 14 31.5 70
2.3 Text Color 720 x 400 16 9 x 16 31.3 70
4.5 Graphics Color 320 x 400 4 8x8 31.5 70
6 Graphics Monochr. 320 x 200 2 8x8 31.5 70
7 Text Monochr. 720 x 350 2 9 x 14 31.3 70
0D Graphics Color 320 x 200 16 8x8 31.5 70
0E Graphics Color 640 x 200 16 8x8 31.5 70
0F Graphics Monochr. 640 x 350 2 8 x 14 31.5 70
10 Graphics Color 640 x 350 16 8 x 14 31.5 70
11 Graphics Monochr. 640 x 480 2 8 x 16 31.5 60
12 Graphics Color 640 x 480 16 8 x 16 31.5 60
13 Graphics Color 320 x 200 256 8x8 31.5 70
54 Text Color 1056 x 344 16 9x9 31.1 70
55 Text Color 1056 x 400 16 8 x 16 31.1 70
5F Graphics Color 640 x 480 256 8 x 16 31.5 60
58/6A Graphics Color 800 x 600 16 8x8 35.1 56
58/6A Graphics Color 800 x 600 16 8x8 37.8 60
58/6A Graphics Color 800 x 600 16 8x8 47.7 72
5C Graphics Color 800 x 600 256 8x8 35.1 56
5C Graphics Color 800 x 600 256 8x8 37.8 60
5C Graphics Color 800 x 600 256 8x8 47.7 72
5D Graphics Color 1024 x 768 16 8 x 16 35.6 87 1)
5D Graphics Color 1024 x 768 16 8 x 16 48.4 60
60 Graphics Color 1024 x 768 256 8 x 16 35.6 87 1)
60 Graphics Color 1024 x 768 256 8 x 16 48.4 60
1) Interlaced mode

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-9
Interface Submodules

15.4 IF 962-COM Interface Submodule

Order Number
6ES7 962-3AA00-0AC0

Characteristics
The IF 962-COM interface submodule is used to connect devices with a serial port.
It contains two serial AT-compatible ports (COMa, COMb).
Up to four COM ports can be accessed on AT I/O addresses in one programmable
module using standard PC drivers. This also includes COM ports located on the
programmable module itself and those located on expansions. The IF 962-LPT
interface submodules can be operated in the AT-compatible address area and, if
special drivers are used, also in the M7-300/400-reserved address area.
Connector X1 corresponds to the COMa port, connector X2 to the COMb port. The
signal levels are defined in accordance with RS232C.
The cable length on the IF 962-COM interface submodule should not exceed
approximately 10 m.

Figure 15-3 IF 962-COM Interface Submodule

What Can be Connected to the Ports?

All devices with an RS232 interface such as:
Printers, modems, terminals, etc.

S7-400, M7-400 Programmable Controllers Module Specifications

15-10 A5E00069467-03
 Interface Submodules

15.4.1 Pin Assignments

Socket X1, X2 COMa, COMb

Table 15-8 Socket X1, X2 IF 962-COM (9-Pin Sub D Plug Connector)

1 DCD Receive signal level Input

2 RxD Receive data Input
3 TxD Transmitted data Output
4 DTR Data terminal ready Output
5 Signal GND Operational ground (GNDint) –
6 DSR Data set ready Input
7 RTS Request to send Output
8 CTS Clear to send Input
9 RI Ring indicator (incoming call) Input

Note
Operational ground (signal GND) at the COMa or COMb ports is referenced to
internal ground.
Suitable measures may be required on the process side to avoid ground loops.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-11
Interface Submodules

15.4.2 Addressing and Interrupts

Addressing
The IF 962-COM interface submodule can be addressed in the following two ways:
• In the AT-compatible I/O address area
• In the M7-300/400-reserved I/O address area (from C000H).

Addressing in the AT-Compatible I/O Address Area

The COM ports can be operated in the AT-compatible I/O address area. The
settings are made in the BIOS Setup. You can see the addresses that can be set
in the BIOS Setup from the following table.

Table 15-9 Addressing the COM Ports in the AT-Compatible Address Area

Name I/O Address Remarks

03F8H to 03FFH
02F8H to 02FFH
*)
03E8H to 03EFH Automatically configured by the BIOS and
02E8H to 02EFH can be set in the BIOS setup.
– 0380H to 0387H
– 0280H to 0287H
*) The BIOS searches the addresses in the order 03F8H, 02F8H, 03E8H and 02E8H and
assigns COM1, COM2, COM3 and COM4 in ascending order. There is no fixed
assignment of the I/O addresses to COMx. For example, if only one COM port is detected
at address 12E8H, this will be COM1.

Example of Setting an AT-Compatible I/O Address

In the following example, the I/O addresses 03F8H (COM1) for COMa and 02F8H
(COM2) for COMb are to be set in the BIOS setup. Proceed as follows to do this:
1. Select the “IF Modules” page in the BIOS setup.
2. Enter the submodule receptacle number of the interface submodule in “Select
Module #”.
3. Enter the offset address for the configuration register of the interface
submodule “00H” at “Config.Index”.
4. Enter “36H” at “Value”. This value is then written into the configuration register
(see also Table 15-13).
5. Press the OK button.

S7-400, M7-400 Programmable Controllers Module Specifications

15-12 A5E00069467-03
 Interface Submodules

Addressing in the M7-300/400-Reserved I/O Address Ares

Regardless of possible addresses in the AT-compatible I/O address area, the
IF 962-COM interface submodule can be addressed in this reserved address area.
The base address depends on the interface submodule slot in the expansion
module or the programmable module. See the descriptions “M7-300 Expansions”,
“M7-400 Expansions” or the description of the M7-400 programmable modules for
the slot-dependent base address of the interface submodule.
The I/O address is the sum of the base address and the offset address.
The registers and their meanings and the offset addresses are described below.

Table 15-10 Offset Address Assignments for the IF 962-COM Interface Submodule
Offset Function Remarks
Address
00H Configuration register Read/write
08H - 0FH UART 16C552 parallel port Unused
10H - 17H COMa UART 16C552 Read/write
18H - 1FH COMb UART 16C552 Read/write

Configuration Register
The BIOS setup defines in which AT-compatible I/O address area the COM
interface is to be operated or whether it is only to be operated in the reserved I/O
address area and this information is stored in the configuration register.
Tables 15-11 to 15-13 give you an overview of the possible settings in the
configuration register.

Table 15-11 Offset Address for the Configuration Register (IF 962-COM)
Offset Function Remarks
Address
00H Configuration register Read/write

Table 15-12 Meaning of the Data Bits in the Configuration Register (IF 962-COM)
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0 Addressing type COM b 0 Addressing type COM a

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-13
Interface Submodules

Table 15-13 Meaning of the Addressing Type Bits in the Configuration Register
(IF 962-COM)
Addressing Type COM b/a
I/O Address
Bit 6/2 Bit 5/1 Bit 4/0
Addressing only possible in the reserved I/O address area
0 0 0
(from C000H) (default)
280H 0 0 1
2E8H 0 1 0
2F8H 0 1 1
380H 1 0 0
3E8H 1 0 1
3F8H 1 1 0
0 1 1 1

Note
The AT-compatible I/O address can only be set once for each COM port of an
automation computer (including those permanently installed in a programmable
module).

COM Ports
The COM ports (COMa and COMb) of the UART 16C552 can be addressed from
offset addresses 10H or 18H in accordance with component specification 16C552.

Data Formats
The following data formats can be set in the IF 962-COM interface submodule:
Data bits: 5 bits, 6 bits, 7 bits, 8 bits
Parity: Even, odd, disable
Stop bit: 1 bit, 1.5 bits, 2 bits

Transmission Speed
The following transmission speeds (transmission rates) can be set in the
IF962-COM interface submodule:
AT-compatible transmission speeds and transmission speeds up to 115.2 Kbps.

Note
Please note that a safe level of transmission speed depends on factors such as
cable length, cable type, and environmental interference.

S7-400, M7-400 Programmable Controllers Module Specifications

15-14 A5E00069467-03
 Interface Submodules

Interrupt Request
The interface submodule supplies an interrupt request (IRQa and IRQb) for each
serial port.
You can define the assignment of the interrupt requests IRQa and IRQb to the
appropriate processor interrupt requests in the BIOS Setup.

Table 15-14 Interrupt Assignments of the IF 962-COM Interface Submodule

Interrupt Source of the Interface Submodule ISA Interrupt

COM a IRQ a Can be set in the BIOS
COM b IRQ b setup

Default settings in the BIOS are: IRQ 4 for COM1 and IRQ3 for COM2.

Submodule ID
The IF 962-COM interface submodule has the submodule ID 41H.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-15
Interface Submodules

15.4.3 Technical Specifications

Technical Specifications
The IF 962-COM interface submodule receives its supply voltage from the M7-400
programmable modules or from the M7-300/400 expansion modules. The current
consumption given in the technical specifications is the consumption required for
dimensioning the power supply, that is, the current consumption is referenced to
24 V in the M7-300 and to 5 V in the M7-400.

6ES7 962-3AA00-0AC0
Technical Specifications
Supply voltage Supplied from the M7-400
programmable modules or
from the M7-300/400
expansion modules
Current consumption in the
M7-300
(for dimensioning the 24 V
current supply) 0.04 A
Current consumption in the
M7-400
(for dimensioning the 5 V
current supply) 0.1 A
Submodule ID 41H
Power losses 0.5 W
Dimensions
W x H x D (mm) 18.2 x 67 x 97
Weight 0.080 kg

S7-400, M7-400 Programmable Controllers Module Specifications

15-16 A5E00069467-03
 Interface Submodules

15.5 IF 962-LPT Interface Submodule

Order Number
6ES7 962-4AA00-0AC0

Characteristics
The IF 962-LPT interface submodule contains an AT-compatible parallel (LPT) port
for connecting a printer with Centronics interface. The IF962-LPT submodule can
also be used as a bi-directional data interface. There is a 25-pin sub D socket
connector on the frontside of the submodule for plugging in the connecting cable.
Up to four LPT ports can be accessed on AT I/O addresses in one programmable
module using standard PC drivers. This also includes LPT ports located on the
programmable module itself and those located on expansions. The IF 962-LPT
interface submodules can be operated in the AT-compatible address area and, if
special drivers are used, also in the M7-300/400-reserved address area.
The cable length on the IF 962-LPT interface submodule should not exceed
approximately 3 m.

Figure 15-4 IF 962-LPT Interface Submodule

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-17
Interface Submodules

15.5.1 Pin Assignments

X1 Socket

Table 15-15 Socket X1, IF 962-LPT (25-Pin Sub D Socket Connector)

Pin Meaning Direction

1 /STROBE Input/output
2 Data 0 Input/output
3 Data 1 Input/output
4 Data 2 Input/output
5 Data 3 Input/output
6 Data 4 Input/output
7 Data 5 Input/output
8 Data 6 Input/output
9 Data 7 Input/output
10 /ACK Input
11 BUSY Input
12 PE Input
13 SLCT Input
14 /AUTO FEED Output
15 /ERROR Input
16 /RESET Output
17 /SLCT IN Output
18 GND –
19 GND –
: GND –
24 GND –
25 GND –

Note
Operational ground (GND signal) at the COMa or COMb ports is referenced to
internal ground.
Suitable measures may be required on the process side to avoid ground loops.

S7-400, M7-400 Programmable Controllers Module Specifications

15-18 A5E00069467-03
 Interface Submodules

15.5.2 Addressing and Interrupts

Addressing
The IF 962-LPT interface submodule can be addressed in the following two ways:
• In the AT-compatible I/O address area
• In the M7-300/400-reserved I/O address area (from C000H)

Addressing in the AT-Compatible I/O Address Area

The LPT ports can be operated in the AT-compatible I/O address area. The
settings are made in the BIOS Setup. You can see the addresses that can be set
in the BIOS Setup from the following table.

Table 15-16 Addressing the LPT Ports

Name I/O Address Remarks

03BCH to 3BEH
0378H to 37FH Automatically configured by the BIOS and
*)
can be set in the BIOS setup.
0278H to 27FH
*) The BIOS searches the addresses in the order 03BCH, 0378H and 0278H and assigns
LPT1, LPT2 and LPT3 in ascending order. There is no fixed assignment of the I/O
addresses to LPTx. For example, if only one LPT port is detected at address 0378H, this
will be LPT1.

Note
The LPT port in the M7-400 expansion module MSM 478 is always at the I/O
address 03BCH. For this reason, the I/O address 03BCH must not be set for the
IP 962-LPT interface submodule if an MSM 478 is in use.

Example of Setting an AT-Compatible I/O Address

In the following example, the I/O address 0278H is to be set in the BIOS setup.
Proceed as follows to do this:
1. Select the “IF Modules” page in the BIOS setup.
2. Enter the submodule receptacle number of the interface submodule in “Select
Module #”.
3. Enter the offset address for the configuration register of the interface
submodule “00H” at “Config.Index”.
4. Enter “FEH” or “02H” at “Value”. This value is then written into the configuration
register (see also Table 15-20).
5. Press the OK button.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-19
Interface Submodules

Addressing in the M7-300/400-Reserved I/O Address Area

Regardless of possible addresses in the AT-compatible I/O address area, the
IF 962-COM interface submodule can be addressed in this reserved address area.
The base address depends on the interface submodule slot in the expansion
module or the programmable module. See the descriptions “M7-300 Expansions”,
“M7-400 Expansions” or the description of the M7-400 programmable modules for
the slot-dependent base address of the interface submodule.
The I/O address is the sum of the base address and the offset address.
The registers and their meanings and the offset addresses are described below.

Table 15-17 Offset Address Assignments for the IF 962-LPT Interface Submodule

Offset Function Remarks

Address
00H Configuration register Read/write
10H - 17H UART 16C552 parallel port Read/write

Default Settings in the BIOS

The following I/O addresses and interrupt numbers are set as defaults in the BIOS
for LPT ports:

Port I/O Address Interrupt No.

With mass storage module MSM 478
LPT1 (on MSM 478) 03BCH 7
LPT2 (IF 962-LPT) 0378H 5
Without mass storage module MSM 478
LPT1 (IF 962-LPT) 0378H 7
LPT2 (IF 962-LPT) 0278H 5

Configuration register
The BIOS setup defines in which AT-compatible I/O address area the LPT
interface is to be operated or whether it is only to be operated in the reserved I/O
address area and this information is stored in the configuration register. Tables
15-18 to 15-20 give you an overview of the possible settings in the configuration
register.

Table 15-18 Offset Address for the Configuration Register (IF 962-LPT)

Offset Function Remarks

Address
0H Configuration register Read/write

S7-400, M7-400 Programmable Controllers Module Specifications

15-20 A5E00069467-03
 Interface Submodules

Table 15-19 Meaning of the Data Bits in the Configuration Register (IF 962-LPT)

Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0

Write: Any (“0” or “1”)
Addressing type LPT
Read: Always “1”

Table 15-20 Meaning of the Addressing Type Bits in the Configuration Register
(IF 962-LPT)

Addressing Type
I/O Address
Bit 1 Bit 0
Addressing only possible in the reserved I/O address area
(fromC000H) 0 0
(default)
378H 0 1
278H 1 0
3BCH 1 1

Note
The AT-compatible I/O address can only be set once for each LPT port of a
programmable module.
The LPT port in the M7-400 expansion module MSM 478 is always at the I/O
address 03BCH. For this reason, the I/O address 03BCH must not be set for the
IP 962-LPT interface submodule if an MSM 478 is in use.

Parallel Port
The parallel port of the interface submodule’s UART 16C552 can be addressed
from offset address 10H in accordance with component specification 16C552.

Interrupt Request
The interface submodule supplies an interrupt request (IRQa).
You can define the assignment of the IRQa interrupt request to the relevant
processor interrupt request in the BIOS setup.

Submodule ID
The IF 962-LPT interface submodule has the submodule ID 44H.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-21
Interface Submodules

15.5.3 Technical Specifications

Technical Specifications
The IF 962-LPT interface submodule receives its supply voltage from the M7-400
programmable modules or from the M7-300/400 expansion modules. The current
consumption given in the technical specifications is the consumption required for
dimensioning the power supply, that is, the current consumption is referenced to
24 V in the M7-300 and to 5 V in the M7-400.

6ES7 962-4AA00-0AC0
Technical Specifications
Supply voltage Supplied from the M7-400
programmable modules or
from the M7-300/400
expansion modules
Current consumption in the
M7-300
(for dimensioning the 24 V
current supply) 0.04 A
Current consumption in the
M7-400
(for dimensioning the 5 V
current supply) 0.1 A
Submodule ID 44H
Power losses 0.5 W
Dimensions
W x H x D (mm) 18.2 x 67 x 97
Weight 0.07 kg

S7-400, M7-400 Programmable Controllers Module Specifications

15-22 A5E00069467-03
 Interface Submodules

15.6 IF 961-DIO Interface Submodule

Order Number
6ES7 961-1AA00-0AC0

Characteristics
The IF 961-DIO interface submodule has the following characteristics:
• 8 inputs, isolated in groups of 2
Input level 24 VDC; 8.5 mA
Input interrupt at rising and/or falling edge
Input delay can be set in common for all channels: approx. 750 µs or approx.
3 ms
• 8 outputs, isolated in groups of 4
Level 24 VDC; 0.1A
Outputs short-circuit protected via electronic fuse.

Figure 15-5 IF 961-DIO Interface Submodule

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-23
Interface Submodules

15.6.1 Pin Assignments

X1 Socket
There is a 25-pin sub D socket connector on the frontside of the submodule for
plugging in the connecting cable.
Figure 15-6 shows the pin assignments of the submodule.

1
14 NC
1M 2
15 DO7
DI0 3
16 DO6
DI1 4
17 DO5
2M 5
18 DO4
DI2 6
19 6L+
DI3 7
20 6M
3M 8
21 DO3
DI4 9
22 DO2
DI5 10
23 DO1
4M 11
24 DO0
DI6 12
25 5L+
DI7 13 5M

Figure 15-6 X1 Socket Assignments, IF 961-DIO (25-Pin Sub D Connector)

S7-400, M7-400 Programmable Controllers Module Specifications

15-24 A5E00069467-03
 Interface Submodules

Figures 15-7 and 15-8 show the circuit block diagrams and the terminal connection
diagrams for wiring the digital inputs and digital outputs.

1
1M 14 NC
2 DO7
DI0 15
3 DO6
Internal DI1 16
4 DO5
data bus 2M 17
5 DO4
DI2 18
6 6L+
DI3 19
7 6M
Minternal 3M 20
8 DO3
DI4 21
9 DO2
DI5 22
Circuit block 10 DO1
4M 23
diagram 11 DO0
DI6 24
12 5L+
DI7 25 13 5M

Terminal connection diagram

Figure 15-7 Circuit Block Diagram and Terminal Connection Diagram for Wiring the Digital Inputs

1
14 NC
1M 2 DO7
DI0 15
3 DO6
DI1 16
4 DO5
2M 17
5 DO4 L+
DI2 18
6 6L+
DI3 19 Internal
7 6M
3M 20 data bus
8 DO3
DI4 21
9 DO2
DI5 22
10 DO1
4M 23
11 DO0 Minternal
DI6 24
12 5L+
DI7 25 13 5M

M
Terminal connection diagram Circuit block diagram

Figure 15-8 Circuit Block Diagram and Terminal Connection Diagram for Wiring the Digital Outputs

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-25
Interface Submodules

15.6.2 Addressing and Interrupts

Addressing in the M7-300/400-Reserved I/O Address Area

The base address depends on the interface submodule slot in the expansion
module or the programmable module. See the descriptions “M7-300 Expansions”,
“M7-400 Expansions” or the description of the M7-400 programmable modules for
the slot-dependent base address of the interface submodule.
The I/O address is the sum of the base address and the offset address.
The registers and their meanings and the offset addresses are described below.

Table 15-21 Offset Address Assignments for the IF 961-DIO Interface Submodule

Offset Function Remarks

Address
00H User data digital input function DI0 - DI7 (Digital Input)
01H User data digital output function DO0 - DO7 (Digital Output)
02H Acknowledgment register Acknowledge interrupt
03H Interrupt register Read cause of interrupt
04H Interrupt enable register General enable of interrupt
05H Selection register rising edge Interrupt generation at rising edge of a
digital input
06H Selection register falling edge Interrupt generation at falling edge of
a digital input
07H Mode register Set input delay

Digital Input Function

Tables 15-22 and 15-23 give an overview of the digital input function.

Table 15-22 Offset Address for the Digital Input Function (IF 961-DIO)
Offset Function Remarks
Address
0 User data digital input function Read only

Table 15-23 Assignment of the Digital Input (DI) Channels to the Bits (IF 961-DIO)
Bit Function =0 =1
20 DI channel 0 In the range In the range
-30 V to 5 V from 13 V to 30 V
: : : :
27 DI channel 7 In the range In the range
-30 V to 5 V from 13 V to 30 V

S7-400, M7-400 Programmable Controllers Module Specifications

15-26 A5E00069467-03
 Interface Submodules

Digital Output Function

Tables 15-24 and 15-25 give an overview of the digital output function.

Table 15-24 Offset Address for the Digital Output Function (IF 961-DIO)
Offset Function Remarks
Address
1 User data digital output function Read/write

Table 15-25 Assignment of the Digital Output (DO) Channels to the Bits (IF 961-DIO)
Bit Function =0 =1
20 DO channel 0 0V + 24 V
: : : :
27 DO channel 7 0V + 24 V

Acknowledgment Register
The interrupt is acknowledged in this register. Tables 15-26 and 15-27 give an
overview of the acknowledgement register.

Table 15-26 Offset Address for the Acknowledgment Register (IF 961-DIO)
Offset Function Remarks
Address
2 Acknowledgment register Write only

Table 15-27 Meaning of the Bits in the Acknowledgment Register (IF 961-DIO)
Bit Function =0 =1
20 Reserved
: :
26 Reserved
27 Acknowledge interrupt No Yes

Interrupt Register
The cause of the interrupt is stored in this register. Tables 15-28 and 15-29 give an
overview of the interrupt register.

Table 15-28 Offset Address for the Interrupt Register (IF 961-DIO)
Offset Function Remarks
Address
3 Interrupt register Read only

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-27
Interface Submodules

Table 15-29 Meaning of the Bits in the Interrupt Register (IF 961-DIO)
Bit Function =0 =1
20 Level change at DI channel 0 No Yes
: : : :
27 Level change at DI channel 7 No Yes

Interrupt Enable Register

Tables 15-30 and 15-31 give an overview of the interrupt enable register.

Table 15-30 Offset Address for the Interrupt Enable Register (IF 961-DIO)

Offset Function Remarks

Address
4 Interrupt enable register Read/write

Table 15-31 Meaning of the Bits in the Interrupt Enable Register (IF 961-DIO)

Bit Function =0 =1
20 Reserved
: :
26 Reserved
27 Interrupt Disabled Enabled

Selection Register Rising Edge

Tables 15-32 and 15-33 give an overview of the selection register for interrupt
generation at a rising edge of a digital input.

Table 15-32 Offset Address for the Selection Register Rising Edge (IF 961-DIO)

Offset Function Remarks

Address
5 Selection register rising edge Read/write

Table 15-33 Meaning of the Bits in the Selection Register Rising Edge (IF 961-DIO)

Bit Function =0 =1
20 Interrupt generation at rising edge of the Disabled Enabled
digital input channel 0
: : : :
27 Interrupt generation at rising edge of the Disabled Enabled
digital input channel 7

S7-400, M7-400 Programmable Controllers Module Specifications

15-28 A5E00069467-03
 Interface Submodules

Selection Register Falling Edge

Tables 15-34 and 15-35 give an overview of the selection register for interrupt
generation at a falling edge of a digital input.

Table 15-34 Offset Address for the Selection Register Falling Edge (IF 961-DIO)
Offset Address Function Remarks
6 Selection register falling edge Read/write

Table 15-35 Meaning of the Bits in the Selection Register Falling Edge (IF 961-DIO)
Bit Function =0 =1
20 Interrupt generation at falling edge of the digital Disabled Enabled
input channel 0
: : : :
27 Interrupt generation at falling edge of the digital Disabled Enabled
input channel 7

Mode Register
Tables 15-36 and 15-37 give an overview of the mode register.

Table 15-36 Offset Address for the Mode Register (IF 961-DIO)
Offset Address Function Remarks
7 Mode register Read/write

Table 15-37 Meaning of the Bits in the Mode Register (IF 961-DIO)
Bit Function =0 =1
20 Input delay 3 ms 750 ms
21 Reserved
: :
27 Reserved

Reset Status
After switching on the interface submodule, the input delay is set to 3 ms.

Interrupt Request
The interface submodule supplies an interrupt request (IRQa).
You can define the assignment of the IRQa interrupt request to the relevant
processor interrupt request in the BIOS setup.

Submodule ID
The IF 961-DIO interface submodule has the submodule ID 02H.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-29
Interface Submodules

15.6.3 Technical Specifications

Technical Specifications
The IF 961-DIO interface submodule receives its supply voltage from the M7-400
programmable modules or from the M7-300/400 expansion modules. The current
consumption given in the technical specifications is the consumption required for
dimensioning the power supply, that is, the current consumption is referenced to
24 V in the M7-300 and to 5 V in the M7-400.

6ES7 961-1AA00-0AC0 Permissible potential

differences
Dimensions and Weight
• Between the M 75 VDC
Dimensions W x H x D terminals of the groups 60 VAC
(mm) 18.2 x 67 x 97
• Between the input
W x H x D (mm)
(M terminal) and the 75 VDC
Weight 0.065 kg central grounding point 60 VAC
Module-Specific Data • Isolation checked with 500 VDC
Submodule ID 02H Supply voltage Supplied from the
M7-400
Number of inputs 8
programmable
Number of outputs 8
modules or from the
Cable length M7-300/400
• Unshielded 200 m at 750 µs, expansion modules
600 m at 3 ms delay Current consumption in the
time M7-300
• Shielded 1000 m (for dimensioning the 24 V
current supply) 0.03 A
Voltages, Currents, Potentials
Current consumption in the
Nominal voltage
M7-400
Load current supply L+ 24 VDC
(for dimensioning the 5 V
Permissible nominal current supply) 0.085 A
voltage range
Load current supply L+ 20.4 V to 28.8 V Power losses of the module 2.4 W

Reverse polarity protection No

(fuse)
Current consumption L+ Dependent on wiring
Number of inputs that can
be controlled
simultaneously 8
Number of outputs that can
be controlled
simultaneously 8

Galvanic isolation Yes (optocoupler)

• In groups of 2

S7-400, M7-400 Programmable Controllers Module Specifications

15-30 A5E00069467-03
 Interface Submodules

Status, Interrupts, Diagnostics Data for Selecting an Actuator

Status indicated – Output voltage
Interrupt 1 sum interrupt from • At signal “0” max. 3 V
up to 8 sources • At signal “1” L+ - 1.5 V
Diagnostic functions No
Output current
Data for Selecting a Sensor • At signal “1”
Input voltage nominal value
permissible range 0.1 A
• Nominal value 24 VDC
• For signal “1” from 13 V to 30 V • At signal “0” (residual from 5 mA to 0.1 A
current) max. 100 mA
• For signal “0” - 30 V to + 5 V
Lamp load max. 2.4 W
Input current
• At signal “1” from 4 mA to 8.5 mA Parallel wiring of 2 outputs No

Input delay time 750 µs or 3 ms Setting a digital input Yes

Input characteristic In accordance with Switching frequency max.

IEC 1131, Part 2 • With resistive load/lamp
Type of input in accordance Type 1 load 500 Hz
with IEC 1131 • At inductive load 2.0 Hz at 0.1 A
Connection of 2-wire Possible under the Inductive cutoff voltage
BEROs following limited (internally) to L+ - 39 V
conditions: Short-circuit protection of
• Permissible quiescent the output yes, electronically
current  1.5 mA
• Permissible supply
voltage min. 22 V

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-31
Interface Submodules

15.7 IF 961-AIO Interface Submodule

Order Number
6ES7 961-2AA00-0AC0

Characteristics
The IF 961-AIO interface submodule has the following characteristics:
• 4 analog inputs, each as voltage and current input
• 2 analog outputs, each as voltage and current output
• 24 VDC external power supply of the analog circuit section
• Hardware interrupt capability and diagnostic capability

Figure 15-9 IF 961-AIO Interface Submodule

Special Feature of the Measuring Range Selection and Output Range Selection
You select the measuring type (current measuring or voltage measuring) of an
input channel via the wiring of the analog inputs (see Figure 15-10 ). You select the
output type (current or voltage output) via the wiring of the analog outputs (see
Figure 15-10).

S7-400, M7-400 Programmable Controllers Module Specifications

15-32 A5E00069467-03
 Interface Submodules

15.7.1 Pin Assignments and Terminal Connection Diagram

X1 Socket
There is a 25-pin sub D socket connector on the frontside of the submodule for
plugging in the connecting cable.
Figure 15-10 shows the assignments for the X1 socket and the terminal
connection diagram of the submodule.

Pinout diagram voltage measurement Pinout diagram current measurement

1 L+ 1 L+
2 MV0+ 2
16 M0- CH 0 16 M0-
MI0+ CH 0
15 15
4 MV1+ 4
18 M1- CH 1 18 M1-
1 CH 1
14 L+ MI1+
L1+ 17 17
2 MV0+
MI0+ 15 6 MV2+ 6
3 NC CH2 M2-
M0- 16 20 M2- 20
4 MV1+ MI2+ CH 2
MI1+ 17 19 19
5 NC
M1- 18 8 MV3+ 8
6 MV2+ CH 3
MI2+ 19 22 M3- 22 M3-
7 NC CH 3
M2- 20 21 21 MI3+
8 MV3+
MI3+ 21
9 S0
M3- 22
10 QV0
QI0 23
11 QV1
QI1 24 Pinout diagram voltage output Pinout diagram current output
12 S1
L2+ 25 13 M R
10 V L QV0 10
9 S0 CH 0 9
23 Ground bar 23 A RL QI0 CH 0
11 V RL of the PLC QV1 11
Ground bar
12 S1 CH1 12 of the PLC
R
24 24 A L QI1 CH1
13 M 13 M

Figure 15-10 X1 Socket Assignments (25-Pin Sub D Connector) and Terminal Connection Diagram of the
IF 961-AIO

Note
Use only shielded cables for connecting the inputs and outputs.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-33
Interface Submodules

Meaning of Signals
The following table shows the meanings of the signals in Figure 15-10.

Table 15-38 Meaning of the Signals of the X1 Socket of the IF 961-AIO Interface
Submodule

Signal Meaning
MV0+ ... MV3+ Analog inputs: Voltage
MI0+ ... MI3+ Analog inputs: Current
M0- ... M3- Reference potential of the analog inputs
QV0, QV1 Analog outputs: Voltage
QI0, QI1 Analog outputs: Current
S0, S1 Reference potential of the analog outputs
L+ Voltage supply input 24 VDC
L1+, L2+ Outputs for supplying the 2-wire transducers (24 VDC)
M Ground (0 V)

Circuit Block Diagram

Figure 15-11 shows the circuit block diagram of the IF 961-AIO interface
submodule.

Inputs
U
I CH 0

A U
CH 1
I

D U
CH 2
I
U CH 3
I
Internal
data bus L1+
Current
limiter
L2+

Outputs
A U
I CH 0

D U CH 1
I

L+
Internal
M
supply

Figure 15-11 Circuit Block Diagram of the IF 961-AIO Interface Submodule

S7-400, M7-400 Programmable Controllers Module Specifications

15-34 A5E00069467-03
 Interface Submodules

Grounding for the Analog Inputs

If the valid Common Mode area (VCM) cannot be retained, the analog inputs must
be grounded. To do this, the ground lines of the individual analog inputs (1) and the
shielding must be routed to the grounding point isolated.
Refer to Figure 15-12 for the grounding of the analog inputs.

Grounding for the Analog Outputs

To do this, the ground lines of the individual analog outputs (2) and the shielding
must be routed to the grounding point isolated.
With a grounded installation of the load current supply, the ground terminal of the
load current supply must be connected with its own line to the grounding point (3).
The following figure shows the grounding of the analog outputs.

+ Transducer
-
Analog
input :
:

+ Transducer
-
QV0
S0
CH 0 RL
-1
QI0

Analog QV1
output
S1
CH 1
QI1
(2)
RL
L+ L+ Load current
M supply
M
(3)
IF 961-AIO Ground point

Figure 15-12 Grounding the Analog Inputs/Outputs of the Interface Submodule IF 961-AIO

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-35
Interface Submodules

15.7.2 Connecting Measured Value Sensors to Analog Inputs

Introduction
Depending on the measuring type, you can connect various measured value
sensors to the analog inputs:
• Voltage sensors
• Current sensors as
– 2-wire transducers
– 4-wire transducers
• Resistance
This section describes how to connect the measured value sensors and what to
look out for when connecting the measured value sensors.

Connecting Measured Value Sensors to Analog Inputs

The maximum permissible voltage difference (VCM = 8 V AC) between the inputs
and the internal ground must not be exceeded.
The measuring ranges (current/voltage) are selected via the wiring of the front
connector and by calling the software driver provided for the measuring range.

Unswitched Channels
You must short-circuit unswitched input channels and ground them. This achieves
optimal noise immunity for the analog module.

S7-400, M7-400 Programmable Controllers Module Specifications

15-36 A5E00069467-03
 Interface Submodules

Isolated Measured Value Sensors

Potential differences can occur between the individual measured value sensors in
the case of isolated measured value sensors. These potential differences can
occur as the result of interference or the physical distribution of the measured
value sensors.

Note
Ensure that the VCM (common mode voltage) does not exceed the permissible
value. Violation of the permissible value can result in wrong measured values.

Figure 15-13 shows the connection of isolated measured value sensors.

Isolated measured
value sensors
MV0+
+
VE0
- M0-
+
VCM0 MV1+
- +
VE1
- M1-
+
VCM1
-
MSENSOR

Ground bus

Figure 15-13 Connection of Isolated Measured Value Sensors

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-37
Interface Submodules

Non-Isolated Measured Value Sensors

Potential differences must not arise between non-isolated measured value
sensors. If necessary, you must take additional installation measures (equipotential
bonding conductor) to ensure this.
Figure 15-14 shows the connection of non-isolated measured value sensors.

Non-isolated
measured value
MV0+
sensors +
VE0 M0-
-
MV1+
+
VE1 M1-
-

MSENSOR

Ground bus

Figure 15-14 Connection of Non-Isolated Measured Value Sensors

Connection of Voltage Sensors

Figure 15-15 shows the connection of voltage sensors to the analog input module.

L+
+24 V
+ MV0+
U M0-
-
+ MV1+
U M1-
-

VCM0 VCM1

0V M

Figure 15-15 Connection of Voltage Sensors

S7-400, M7-400 Programmable Controllers Module Specifications

15-38 A5E00069467-03
 Interface Submodules

Connection of Current Sensors as 2-Wire and 4-Wire Transducers

Figures 15-16 and 15-17 show you how to connect current sensors as 2-wire and
4-wire transducers to analog input modules.
The 24 V voltage is supplied to the 2-wire transducer via a protected output (L1+,
L2+). The 2-wire transducer converts the measured variable to a current of 4 to
20 mA. The range 4 to 20 mA is converted to the required format by a software
driver function.
4-wire transducers have a separate supply voltage.

+24 V
L+
Sensor,
e. g. pressure
gauge + L1+
P 2-wire -
transducers 4 to 20 mA MI0-
M0- Vm

+
P 2-wire - MI1+
transducers 4 to 20 mA Vm
M1-

0V M

Figure 15-16 Connection of 2-Wire Transducers

+24 V
Sensor, L+
e. g. pressure
gauge + MV0+
transducer

P
- M0-
4-wire

P + MV1+
- M1-

VCM0 VCM1

0V M

Figure 15-17 Connection of 4-Wire Transducers

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-39
Interface Submodules

Connection of Resistance Thermometers (e.g. Pt 100) and Resistances

The resistance thermometers/resistances are measured in a 4-wire connection. A
constant current IC which can be set is supplied to the resistance thermometers/
resistances via one analog output QI each. The voltage arising at the resistance
thermometer/resistance is measured over the M+ and M- terminals. This achieves
a high degree of accuracy in the measured results for 4-wire connection.
The lines carrying the constant current are to be run in parallel to the measuring lines
and are not to be connected together until the terminals on the resistance. Voltage
drops on the constant current lines will then not corrupt the measured result.
Three-wire connection is not possible in the case of the IF 961-AIO interface
submodule.
Figure 15-18 shows the connection of resistance thermometers/resistances with a
single current supply via one analog output each.

+24 V L+

MV0+
M0-
QI0+
IC

MV1+
M1-
QI1+
IC
0V M

Figure 15-18 4-Wire Connection of Resistance Thermometers/Resistances with One

Constant Current Source Each

Figure 15-19 shows the connection of resistance thermometers/resistances with a

common current supply via only one analog output. Please take account here of
the maximum permissible load impedance for analog outputs and the maximum
permissible common mode voltage (VCM).

+24 V L+
MV0+
M0-
QI0+
IC
MV3+
M3-

0V M

Figure 15-19 4-Wire Connection of Resistance Thermometers/Resistances with a Common

Constant Current Source

S7-400, M7-400 Programmable Controllers Module Specifications

15-40 A5E00069467-03
 Interface Submodules

15.7.3 Connecting Loads/Actuators to Analog Outputs

Abbreviations Used
The abbreviations used in Figures 15-20 to 15-21 have the following meanings:
QI: Analog output current
QV: Analog output voltage
S: Reference potential of the analog circuit
RL: Load resistance
Figures 15-20 and 15-21 show you how you must connect loads/actuators to the
current or voltage outputs of the analog output module.

Connecting Loads to the Current Output

The following figure shows wiring on one channel as an example.

L+ +24 V

QI
RL

VCM

M 0V

Ground bus

Figure 15-20 Connecting Loads/Actuators via a 2-Wire Connection to a Current Output

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-41
Interface Submodules

Connecting Loads to the Voltage Output

The following figure shows the wiring of two channels as an example.

L+ +24 V

QV1

S1
RL1
QV0

S0
RL2
0V VCM1 VCM0
M

Ground bus

Figure 15-21 Connecting Loads/Actuators via a 3-Wire Connection to a Voltage Output

S7-400, M7-400 Programmable Controllers Module Specifications

15-42 A5E00069467-03
 Interface Submodules

15.7.4 Conversion Time and Cycle Time of the Analog Input Channels

Introduction
This section contains the definitions of and relationships between the conversion
time and the cycle time of analog input modules.

Conversion Time
The conversion time consists of the conversion time of the analog-digital converter
(ADC) and the settling time of the multiplexer.

Cycle Time
Analog-digital conversion and transfer of the digitized measured values takes place
upon request or by way of multiplexing (parameter assignment required), that is
the analog input channels are converted in sequence one after the other. The cycle
time, that is, the time until an analog input value has been converted again, is the
sum of the conversion times of all analog input channels of the interface
submodule.
Figure 15-22 gives a breakdown of the cycle time for an 4-channel analog input
module.

Conversion time channel 0

Conversion time channel 1

Cycle time

Conversion time channel 3

Figure 15-22 Cycle Time of the Analog Input Module

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-43
Interface Submodules

15.7.5 Conversion Time, Cycle Time, Settling Time, and Response

Time of the Analog Output Channels

Introduction
This section contains the definitions and relationships of times relevant to the
analog output modules.

Conversion Time
The conversion time of the analog output channels includes the transfer of the
digitized output values from the internal memory and the digital-analog conversion.

Settling Time
The settling time, that is, the time between the presence of the converted value
and reaching the specified value at the analog output, depends on the load. Here,
a distinction must be made between resistive, capacitive, and inductive load.

Response Time
The response time, that is, the time between the presence of the digital output
values in the internal memory and reaching the specified value at the analog
output, is, in the worst case, the sum of the cycle time and the settling time. The
worst case arises if the analog channel is converted shortly before transfer of a
new output value and converted back only after conversion of the other channels
(cycle time).
Figure 15-23 shows the response time of the analog output channels.

tA

tE
tZ

t1 t2 t3

tA = Response time
tC = Cycle time corresponds to n x conversion time (n = activated channels)
tS = Settling time
t1 = New digitized output value available
t2 = Output value received and converted
t3 = Specified output value reached

Figure 15-23 Response Time of the Analog Output Channels

S7-400, M7-400 Programmable Controllers Module Specifications

15-44 A5E00069467-03
 Interface Submodules

15.7.6 Starting Up the IF 961-AIO Interface Submodule

Electrical Installation
You must connect the ground terminal (M and S0/S1) of the analog input/output
module with the ground terminal of the load power supply. Use a cable with a
cross-section of 1 mm2 for this purpose.

Unswitched Channels
You must short-circuit unswitched input channels. This achieves optimal noise
immunity for the analog module.
Leave unswitched output channels open.

15.7.7 Addressing

Addressing
The IF 961-AIO interface submodule is addressed with the M7-300/400-reserved
I/O address area (starting from C000H).

Addressing in the M7-300/400-Reserved I/O Address Area

The base address depends on the interface submodule slot in the expansion
module or the programmable module. See the descriptions “M7-300 Expansions”,
“M7-400 Expansions” or the description of the M7-400 programmable modules for
the slot-dependent base address of the interface submodule.
The I/O address is the sum of the base address and the offset address.
The registers and their meanings and the offset addresses are described below.

Table 15-39 Offset Address Assignments for the IF 961-AIO Interface Submodule
Offset Function when Function when
Address Reading Writing
00H ADC data channel 0 (20 - 215) ADC data channel 0 (20 - 215)
02H ADC data channel 1 (20 - 215) ADC data channel 1 (20 - 215)
04H ADC data channel 2 (20 - 215) Reserved
06H ADC data channel 3 (20 - 215) Reserved
08H Indication of settings such as automatic Setting of automatic conversion,
conversion, cycle time, interrupt enable cycle time and interrupt enable
0AH Indication of channel number Output of channel number
0CH Indication of end of conversion (EOC) Start of analog-digital conversion
and voltage fault
0EH Reserved Interrupt acknowledgment

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-45
Interface Submodules

15.7.8 Analog Output Function

Analog Output Function

The 12-bit digital value to be converted is loaded left-justified into the DAC data
registers of the relevant DAC channel. After the data has been written into the
register, digital-analog conversion takes place in the selected channel.
You can see the assignment of the address to the output channels and the
meaning of the data bits in Table .
The data format of the analog output value is a 16-bit value in twos complement.
You can see the representation of the digital output value in Table 15-44.

Table 15-40 Meaning of the Data Bits in the Analog Output Function (IF 961-AIO)

Offset Remark
Writing
Address D15 D0
00H 211 210 29 28 27 26 25 24 23 22 21 20 0 0 0 0 DAC data
channel 0

02H 211 210 29 28 27 26 25 24 23 22 21 20 0 0 0 0 DAC data

channel 1

Status After Switching On

Both output channels contain the value “0”.

S7-400, M7-400 Programmable Controllers Module Specifications

15-46 A5E00069467-03
 Interface Submodules

15.7.9 Analog Input Function

Analog Input Function

Tables 15-41 ad 15-42 contain an overview of the read and write registers for the
analog input function.
The data format of analog input values is a 16-bit value in two’s complement. You
can see the representation of the digitized measured value in Table 15-43.

Table 15-41 Meaning of the Input Bits in the Analog Input Function (IF 961-AIO)

Offset Remark
Reading
Address D15 D0
00H 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 ADC data channel 0
02H 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 ADC data channel 1
04H 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 ADC data channel 2
06H 215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 ADC data channel 3
I
A
08H N 0 0 0 0 0 0 0 0 0 0 0 ta ta ta Control register 1
C
T
ADC
0AH 0 0 0 0 0 0 0 0 0 0 0 0 0 Control register 2
channel no.
E
P
0CH 0 0 0 0 0 0 0 0 0 0 0 0 0 0 O Status register ADC
F
C
ta = 000 5.7 ms cycle time of the automatic conversion function
ta = 001 2.8 ms
ta = 010 1.3 ms
ta = 011 600 µs
ta = 100 185 µs
INT Interrupt enable, INT = 0 = not enabled, INT = 1 = enabled
AC = 1 Automatic conversion of all ADC channels active
ADC channel no. Number of the selected ADC channel (in the case of conversion on request)
(individual encoding)
ADC = 001 Channel 0
ADC = 010 Channel 1
ADC = 011 Channel 2
ADC = 100 Channel 3
PF = 1 Power failure, no external voltage
EOC = 1 End of conversion, end of the analog-digital conversion of the selected channel

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-47
Interface Submodules

Table 15-42 Meaning of the Control Bits in the Analog Input Function (IF 961-AIO)
Offset Remark
Writing
Address D15 D0
I
A
08H N 0 0 0 0 0 0 0 0 0 0 0 ta ta ta Control register 1
C
T
ADC
0AH 0 0 0 0 0 0 0 0 0 0 0 0 0 Control register 2
channel no.
S
0CH 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Status register ADC
C
Acknowledge interrupt
0EH x x x x x x x x x x x x x x x x
x = any
ta = 000 5.7 ms cycle time of the automatic conversion function
ta = 001 2.8 ms
ta = 010 1.3 ms
ta = 011 600 µs
ta = 100 185 µs
AC = 1 Automatic conversion of all ADC channels active
INT = 1 Generation of an interrupt after end of cycle
ADC channel no. Number of the selected ADC channel:
ADC = 001 channel 0
ADC = 010 channel 1
ADC = 011 channel 2
ADC = 100 channel 3
SC = 1 Start of analog-digital conversion, (SC = Start of conversion in the case of individual
encoding)

Status After Switching On

Control register 1: AC = 0, INT = 0, ta = 0 ⇒ 5.7 ms
Control register 2: ADC = 001 ⇒ ADC channel no. = 0
Status register ADC: SC = 0

Individual Start of an ADC Channel

Below are listed the steps required for individual encoding in the case of an ADC
channel:
1. Select the ADC input channel by writing the channel number into control
register 2 (offset address “0AH”).
2. Start the ADC conversion by setting the SC bit in the status register ADC to “1”
(offset address “0CH”).
3. Read bit “EOC” in the status register ADC at offset address (0CH) and wait until
EOC = 1.
4. Read the analog value at the relevant address (offset addresses “00H” to “06H”).

Cyclic Conversion of the ADC Channels

Below are listed the steps required for cyclic conversion of the ADC channels:
1. Set the AC bit in control register 1 to “1” (offset address “08H”).
2. Wait for interrupt.
3. Read the values at the relevant address (offset addresses “00H” to “06H”).
4. Acknowledge the interrupt by writing to the offset address “0EH”, data bits 0 to
15 are irrelevant here.

S7-400, M7-400 Programmable Controllers Module Specifications

15-48 A5E00069467-03
 Interface Submodules

15.7.10 Analog Value Representation for the Measuring Ranges of the

Analog Inputs

Voltage and Current Measuring Ranges

Table 15-43 contains the representation of the digitized measured value for
• The voltage measuring range ± 10 V and
• The current measuring range ± 20 mA.

Table 15-43 Representation of the Digitized Measured Value for the Analog Input Function (Voltage and
Current Measuring Range)

Measured Units Measuring range Measuring range

Range 10 V 20 mA
Value in % Decimal Hexadecimal
Overflow ≤ 118.51 32767 7FFFH ≤ 11.851 V ≤ 23.7 mA
117.589 32511 7EFFH 11.7589 V 23.515 mA
Overrange : : : : :
100.004 27649 6C01H 10.0004 V 20.001 mA
100 27648 6C00H 10 V 20 mA
: : : : :
Nominal
0 0 0H 0V 0 mA
range
: : : : :
-100 -27648 9400H -10 V -20 mA
-100.004 -27649 93FFH -10.0004 V -20.001 mA
Underrange : : : : :
-117.59 -32512 8100H -11.759 V -23.516 mA
Underflow ≥-118.51 -32768 8000H ≥-11.851 V ≥-23.7 mA

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-49
Interface Submodules

15.7.11 Analog Value Representation for the Measuring Ranges of the

Analog Outputs

Voltage and Current Output Ranges

Table 15-44 contains the representation of
• The voltage output range ± 10 V and
• The current output range ± 20 mA.

Table 15-44 Representation of the Analog Output Ranges (Voltage and Current Output Ranges)

Units Output Range Output Range

Range 10 V 20 mA
Decimal Hexadecimal
Overflow ≥ 32512 ≥ 7F00H 11.851 V
32496 7EF0H 11.7534 V
Overrange : : :
27664 6C10H 10.0005 V
27648 6C00H 10 V 20 mA
: : : :
Nominal range 0 0H 0V 0 mA
: : : :
-27648 9400H -10 V -20 mA
-27664 93F0H -10.0005 V
Underrange : : :
-32512 8100H -11.759 V
Underflow ≤-32528 ≤ 80F0H -11.851 V

S7-400, M7-400 Programmable Controllers Module Specifications

15-50 A5E00069467-03
 Interface Submodules

15.7.12 Diagnostics, Interrupts, and Submodule ID

Interrupt Request
The interface submodule supplies an interrupt request (IRQa).
You can define the assignment of the IRQa interrupt request to the relevant
processor interrupt request in the BIOS setup.

Diagnostic and Hardware Interrupts

If the interface submodule IF 961-AIO was assigned parameters for cyclic
conversion, you have the possibility of initiating hardware interrupts at the
end-of-cycle. It is also possible to initiate a diagnostic interrupt if a hardware
interrupt is lost.

Submodule ID
The IF 961-DIO interface submodule has the submodule ID 01H.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-51
Interface Submodules

15.7.13 Technical Specifications

Technical Specifications
The IF 961-AIO interface submodule receives its supply voltage from the M7-400
programmable modules or from the M7-300/400 expansion modules. The current
consumption given in the technical specifications is the consumption required for
dimensioning the power supply, that is, the current consumption is referenced to
24 V in the M7-300 and to 5 V in the M7-400.

6ES7 961-2AA00-0AC0 Voltages, Currents, Potentials

Dimensions and Weight Supply voltage Supplied from the

M7-400
Dimensions programmable
W x H x D (mm) 18.2 x 67 x 97 modules or from the
Weight 0.085 kg M7-300/400
expansion modules
Module-Specific Data
Current consumption in the
Submodule ID 01H
M7-300
Number of inputs 4 (for dimensioning the 24 V
Number of outputs 2 current supply) 0.03 A

Cable length, shielded < 200 m Current consumption in the

M7-400
Voltages, Currents, Potentials (for dimensioning the 5 V
Nominal voltage current supply) 0.085 A
Load current supply L + 24 VDC Power losses 2.5 W
Current consumption L + 150 mA Analog Value Generation for the Inputs
Reverse polarity protection No Measuring principle Instantaneous value
Galvanic isolation No encoding
Permissible common mode Resolution (incl. overrange) 16 bits, bipolar, twos
range (VCM) complement
• Inputs to each other or Conversion time / channel 35 ms
to the central grounding Cycle time (all channels) 5.7 ms, 2.8 ms,
point < 8 VAC (automatic conversion) 1.3 ms, 600 ms,
• Voltage outputs to each 185 ms
other or to the central
Interference Suppression, Error Limits for
grounding point < 1.5 VDC
Outputs
• Current outputs to each
other or to the central Load-dependent error at Error (in %) = 19 x
voltage output (RL in ohms) 100 / (19 + RL)
grounding point < 2.4 VDC

S7-400, M7-400 Programmable Controllers Module Specifications

15-52 A5E00069467-03
 Interface Submodules

Interference Suppression, Error Limits for Analog Value Generation for the Outputs
Inputs Resolution (incl. overrange) 12 bits, bipolar, twos
Interference voltage complement
suppression for Cycle time (all channels) Per software
f = n (50/60 Hz  1 %)
Interference Suppression, Error Limits for
n = 1, 2, ...
Outputs
• Common-mode Cross-talk attenuation > 60 dB
interference (Vpp < 1 V) > 60 dB between the outputs
• Normal-mode Operating error limits (over
interference the entire temperature
(Peak value of range related to the output
interference < nominal range)
value of the input range) 0 dB
Cross-talk attenuation • Voltage output 1.0 %
between the inputs > 60 dB • Current output 1.0 %
Operating error limits Basic error limit (operating
(in the entire temperature error limits at 25 _C, related
range, related to the input to output range)
range) • Voltage output 0.8 %
• Voltage input 0.8 % • Current output 0.8 %
• Current input 0.8 % Output ripple (related to “full
Basic error limits (operating scale” of the output range;
error limits at 25° C, related bandwidth 50 kHz)  0.1 %
to input range) Data for Selecting an Actuator
• Voltage input 0.7 % Output ranges (nominal ± 10 V
• Current input 0.7 % values) ± 20 mA
Linearity error (related to  0.05 % Load impedance
input range) • At voltage output min. 2 kW
Repetition accuracy (in • At current output max. 500 W
settled state at 25° C,
• With capacitive load max. 1.6 mF
related to the input range)  0.2 %
Voltage output
Data for Selecting a Sensor
Input ranges (nominal ± 10 V/100 k 
• Short-circuit protection Yes
ranges)/input resistance ± 20 mA/50  • Short-circuit current max. 40 mA
Permissible input voltage Current output
for voltage input • Idle voltage max. 13.1 V
(destruction limit) ± 18 V Connection of actuators
Permissible input current for
• For voltage output
current input (destruction
3-wire connection Possible
limit) ± 40 mA
4-wire connection
Connection of signal (measuring line) Not possible
sensors
• For current output
• For voltage 2-wire connection Possible
measurement Possible
Status, Interrupts, Diagnostics
• For current Interrupts
measurement
As 2-wire-transducer Possible • End-of-cycle interrupt Yes, can be set

As 4-wire-transducer Possible
• Diagnostic interrupt Yes, can be set

• For resistance
measurement Possible 1)
1) When supplied via analog outputs with a
constant current

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-53
Interface Submodules

15.8 IF 961-CT1 Interface Submodule

Order Number
6ES7 961-3AA00-0AC0

Characteristics
The IF 961-CT1 interface submodule is used for connecting incremental encoders.
It has the following characteristics:
• Connection with RS422 or 24 V signals
• 4 digital inputs (START, STOP, SET, RESET), isolated
• 2 digital outputs (Q1, Q2), isolated

Figure 15-24 IF 961-CT1 Interface Submodule

S7-400, M7-400 Programmable Controllers Module Specifications

15-54 A5E00069467-03
 Interface Submodules

15.8.1 What Can the IF961-CT1 Interface Submodule Do?

Introduction
This section contains an overview of the functionality of the IF 961-CT1 interface
submodule.
This functionality is achieved using the relevant driver software.

What Can the IF 961-CT1 Interface Submodule Do?

The IF 961-CT1 interface submodule is a high-speed counter module. There is a
counter on the submodule that can operate in the following counting ranges:
• 0 to 4 294 967 295 or
• - 2 147 483 648 to + 2 147 483 647.
The maximum input frequency of the counter signals is 500 kHz (5 V) or
200 kHz (24V).
You can use the IF 961-CT1 interface submodule for the following counting tasks:
• Endless count
• Single up/down count
• Periodic up/down count
You can start and stop the count either via the user program or via external
signals.

Comparison Values
You can store two comparison values on the submodule assigned to the two
outputs of the submodule. If the counter status reaches one of the comparison
values, the relevant output can be set to initiate control sequences directly in the
process.

Initial Value
You can specify an initial value (load value) for the IF 961-CT1. The counter is then
set to the initial value when a signal is present at the 24 V digital input on the
submodule.

Gate Functions
The count can be started and stopped in dependence on other events via gate
functions.
The IF 961-CT1 interface submodule has two gate functions:
• A software gate controlled via the program.
• A hardware gate controlled via the digital inputs of the interface submodule.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-55
Interface Submodules

Interrupts
The IF 961-CT1 can initiate an interrupt when comparison values are reached or in
the event of overflow, underflow, or zero pass of the counter.

Diagnostic Interrupt
The IF 961-CT1 can initiate a diagnostic interrupt for the following events:
• Missing or incorrect counter module parameters
• Hardware interrupt lost
• Signal A, B, or N faulty

Which Signals Can the IF 961-CT1 Count?

The IF 961-CT1 interface submodule can count signals generated by incremental
encoders with 5 V differential signals or with 24 V signals.
The IF 961-CT1 interface submodule can also count 24 V signals generated, for
example, by a light barrier.

Additional Information
You will find more information about the interface submodule IF 961-CT1 in /108/,
IF 961-CT1 Counter Function Module, Programming and Parameter Assignment
Manual.

S7-400, M7-400 Programmable Controllers Module Specifications

15-56 A5E00069467-03
 Interface Submodules

15.8.2 Addressing and Interrupts

Addressing
The IF 961-CT1 interface submodule is addressed with the M7-300/400-reserved
I/O address area (starting from C000H).

Addressing in the M7-300/400-Reserved I/O Address Area

The base address depends on the interface submodule slot in the expansion
module or the programmable module. See the descriptions “M7-300 Expansions”,
“M7-400 Expansions” or the description of the M7-400 programmable modules for
the slot-dependent base address of the interface submodule.

Interrupt Request
The interface submodule supplies an interrupt request (IRQa).
You can define the assignment of the IRQa interrupt request to the relevant
processor interrupt request in the BIOS setup.

Submodule ID
The IF 961-CT1 interface submodule has the submodule ID 03H.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-57
Interface Submodules

15.8.3 Technical Specifications

Technical Specifications
The IF 961-CT1 interface submodule receives its supply voltage from the M7-400
programmable modules or from the M7-300/400 expansion modules. The current
consumption given in the technical specifications is the consumption required for
dimensioning the power supply, that is, the current consumption is referenced to
24 V in the M7-300 and to 5 V in the M7-400.

6ES7 961-3AA00-0AC0 Counter Inputs 24 V

Technical Specifications Number of counter
Supply voltage Supplied from the channels 1, alternative to 5 V
M7-400 Low level - 30 V to + 5 V
programmable High level + 11 V to + 30 V
modules or from the Input resistance 1 k
M7-300/400 Input current typ. 7 mA
expansion modules
Sensor voltage No
Current consumption in the
M7-300 Sensor monitoring No
(for dimensioning the 24 V Counter range 32 bits
current supply) 0.053 A Max. counter frequency 200 kHz
Current consumption in the Digital Inputs
M7-400
(for dimensioning the 5 V Supply voltage 2L+ / 2M
current supply) 0.15 A Number of inputs 4
Nominal voltage load Low level - 30 V to + 5 V
current supply High level + 11 V to + 30 V
2L+ / 2M 24 VDC Input current typ. 7 mA
Current consumption Depends on the Galvanic isolation Yes, to all others
2L+ / 2M load of the digital except the digital
outputs outputs
Type ID 03H Input filter
Power losses 1.5 W (can be set) 50 kHz, 200 kHz
Dimensions Digital Outputs
W x H x D (mm) 18.2 x 67 x 97 Supply voltage 2L+ / 2M
Weight 0.07 kg Number of outputs 2
Counter Inputs 5 V Galvanic isolation Yes, to all others
Number of counter except the digital
channels 1, alternative to 24 V inputs
Level In accordance to Output voltage
RS422 – Low level max. 3 V
Terminating resistance approx. 220 ohms – High level 2 L+ - 1.5 V
Differential voltage min 0.5 V Switching current
– Nominal value 0.3 A
Sensor voltage No – Range 5 mA to 0.3 A
Sensor monitoring Yes
Switching time max. 300 ms
Counter range 32 bits
Cutoff voltage (inductive) Limited to
Max. counter frequency 500 kHz 2L+ + 39 V
Short-circuit protection Yes, via electronic
fuse

S7-400, M7-400 Programmable Controllers Module Specifications

15-58 A5E00069467-03
 Interface Submodules

15.9 IF 964-DP Interface Submodule for S7-400 and M7-400

Order Numbers
You can use the IF 964-DP interface submodule with order number
6ES7 964-2AA00-0AB0 (up to 07/99) in the M7-400.
You can use the IF 964-DP interface submodule with order number
6ES7 964-2AA01-0AB0 (as of 07/99) in the S7-400 and in the M7-400.

Characteristics
The IF 964-DP interface submodule is used for connecting distributed I/O via
“PROFIBUS DP”. The submodule has an isolated RS485 interface. The maximum
transmission rate is 12 Mbps.
The permissible cable length depends on the transmission rate and the number of
nodes. In the case of a point-to-point connection with a speed of 12 Mbps, a cable
length of 100 m is possible, and with a speed of 9.6 Kbps a cable length of
1,200 m is possible.
The system can be expanded to 125 stations.

Figure 15-25 IF 964-DP Interface Submodule

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-59
Interface Submodules

Additional Front Cover

The IF 964-DP interface submodule with order number 6ES7 964-2AA01-0AB0
has an additional front cover, which is similar to the front cover of the IF 960HF
synchronization submodule. As long as this second front cover is not screwed on,
the submodule interface on the S7-400 CPU remains off circuit. Only when you
insert an IF submodule and screw on the second front cover, is the submodule
interface on circuit.
When using the submodule in an M7 the additional front cover has no function, it
should, however, be mounted for technical maintenance reasons and due to
improved EMC properties.

Note
Even in an S7-400 CPU you may remove or insert the IF 964-DP interface
submodule only if it is off circuit.

Additional Information
You can find information on “PROFIBUS DP” in the following technical overviews
or manuals:
• Technical overview Distributed I/O in SIMATIC S7 and M7
• Manuals on the DP masters, for example, S7-300 Programmable Controller or
S7-400, M7-400 Programmable Controllers for the PROFIBUS-DP interface of
the S7-300
• Manuals on the DP slaves, for example, ET 200M Distributed I/O Device or
ET 200C Distributed I/O Device
• The manual on the network components SINEC L2/L2FO Network Manual,
such as bus connectors, RS 485 repeaters
• Manuals on STEP 7

S7-400, M7-400 Programmable Controllers Module Specifications

15-60 A5E00069467-03
 Interface Submodules

15.9.1 Pin Assignments

X1 connector
There is a 9-pin sub D socket connector on the frontside of the submodule for
plugging in the connecting cable. See Table 15-45 for the pin assignments.

Table 15-45 X1 Socket, IF 964-DP (9-Pin Sub D Connector)

Pin Signal Meaning Direction

1 –
2 M 24 24 V reference potential (6ES7 964-2AA01-0AB0) Output
3 LTG_B Line B Input/Output
4 RTSAS Request to send (AS) Output
5 M5ext Operational ground (isolated) Output
6 P5ext + 5 V (isolated), max. 20 mA Output
(for supplying the bus terminator)
7 P 24 V +24 V, max. 150 mA, non-isolated Output
(6ES7 964-2AA01-0AB0)
8 LTG_A Line A Input
9 –

What Can be Connected to the Interface Submodule?

Devices with PROFIBUS can be connected, such as the following:
ET 200 M, ET 200 U (B/C) and other devices conforming to the standard
Other S7 masters (PG, OP)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-61
Interface Submodules

15.9.2 Addressing and Interrupts

In the M7-300/400-Reserved I/O Address Area

The base address depends on the interface submodule slot in the expansion
module or the programmable module. See the descriptions “M7-300 Expansions”,
“M7-400 Expansions” or the description of the M7-400 programmable modules for
the slot-dependent base address of the interface submodule.
You require the base address for assigning parameters to the driver software.

Intermediate Memory
The IF 964-DP interface submodule provides (intermediate) storage of the data in
the dual-port RAM. The size of the memory and its address can be assigned via
the driver used.
Protected Mode: 1 out of 8 areas of 512 Kbytes in the address area
C0 00 00H bis FF FF FFH.

Note
The memory address must not collide with other system addresses. The
IF 964-VGA interface submodule, for example, occupies the addresses from
C 00 00H to C 7F FFH.

Interrupt Request
The interrupt line of the interface submodule is switched with a processor interrupt
per software parameter assignment.

Addressing in the S7-400 I/O Address Area

The interface submodule can be accessed by the respective interface in an
assigned address window.

Interrupt Request
The interrupt line of the interface submodule is permanently assigned to the
processor interrupt.

Submodule ID
The IF 964-DP interface submodule has the submodule ID 8CH.

S7-400, M7-400 Programmable Controllers Module Specifications

15-62 A5E00069467-03
 Interface Submodules

15.9.3 Technical Specifications

Technical Specifications
The IF 964-DP interface submodule receives its supply voltage in the S7-400 from
the central processing unit and in the M7-400 from the programmable modules or
from the expansion modules. The current consumption given in the technical
specifications is the consumption required for dimensioning the power supply, that
is, the current consumption is referenced to 24 V in the M7-300 and to 5 V in the
M7-400.

6ES7 964-2AA00-0AB0 6ES7 964-2AA01-0AB0

Performance Features Performance Features
Transmission rate 9.6 Kbps to 12 Mbps Transmission rate 9.6 Kbps to 12 Mbps
Cable length Cable length
• At 9.6 Kbps 1200 m max. • At 9.6 Kbps 1200 m max.
• At 12 Mbps 100 m max. • At 12 Mbps 100 m max.
Number of stations ≤ 125 (depending on Number of stations ≤ 125 (depending on
CPUs used) CPU used)
Backup memory Backup memory
(dual-port RAM) 256 Kbytes (dual-port RAM) 256 Kbytes
Physical interface RS485 Physical interface RS485
Galvanic isolation Yes Galvanic isolation Yes
Technical Specifications Technical Specifications
Supply voltage Supplied from the Supply voltage Supplied from the
M7-400 S7-400 or from the
programmable M7-400
modules or from the programmable
M7-300/400 modules or from the
expansion modules M7-300/400
expansion modules
Current consumption in Current consumption in
the M7-300 the S7-400
(for dimensioning the 24 V (for dimensioning the 24 V
current supply) 0.16 A current supply) 0.45 A
Current consumption in Current consumption in
the M7-400 the M7-300
(for dimensioning the 5 V (for dimensioning the 24 V
current supply) 0.45 A current supply) 0.16 A
Load rating of the isolated Load rating of the isolated max. 90 mA
5V (P5ext) max. 90 mA 5V (P5ext)
Load rating of the 24 V max. 150 mA
Submodule ID 8CH Submodule ID 8CH
Power losses 2W Power losses 2W
Dimensions Dimensions
W x H x D (mm) 18.2 x 67 x 97 W x H x D (mm) 18.2 x 67 x 97
Weight 0.065 kg Weight 0.065 kg

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-63
Interface Submodules

15.10 Synchronization Submodule

Function of the Synchronization Submodule

The synchronization submodule is used for point-to-point communication between
two redundant S7-400H CPUs with two channels. To ensure the fault tolerance of
1-out-of-2 systems, you require two synchronization submodules per CPU,
connected in pairs via a fiber-optic cable.
A synchronization submodule can be exchanged while power is still being applied.
This supports the repair behavior of H systems in order to control the failure of the
redundant connection without the plant stopping.

Mechanical Configuration

Rack No. 0–x–1

Switch for setting

Additional front cover the rack number

S7-400, M7-400 Programmable Controllers Module Specifications

15-64 A5E00069467-03
 Interface Submodules

Caution
! The synchronization submodule contains a laser system and is classified as a
“CLASS 1 LASER PRODUCT” according to IEC 825-1. To ensure you use this
submodule correctly, read the operating instructions carefully and keep them for
future reference. If you incur problems with this model, inform your nearest
“authorized Siemens representative.” To avoid direct contact with the laser beam,
do not open the housing.

CLASS 1 LASER PRODUCT

LASER KLASSE 1 PRODUKT
TO EN 60825

Inserting and Removing during Power On

You can insert and remove synchronization submodules in an H system while
power is being applied. This is made possible by the mechanical-electrical design
and the additional front cover. As long as this second front cover is not screwed
tight, the submodule interface on the CPU remains without power. This interface is
not supplied with power until you insert a synchronization submodule and screw
the second front cover tight.

Displaying the Rack Number

The CPUs in an H system must be able to display the rack number in order to
distinguish between the two subsystems. One CPU controls rack number 0 and
the other rack number 1. You set the rack number on the synchronization
submodule. A miniature slide switch with 3 possible positions is provided for this
purpose on the submodule. The rack number becomes effective when the power is
switched on.
The partner submodules must display different positions in order for the CPU to
start up correctly; that is, one synchronization submodule must display rack
number 0 and the other rack number 1. The two synchronization submodules in
one CPU must display the same rack number.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-65
Interface Submodules

Switch Position Meaning

The CPU controls rack number 1

No rack number has been assigned to the CPU

The CPU controls rack number 0

Fiber-Optic Cables for Connecting Two Synchronization Submodules

Length Order Number

1m 6ES7960-1AA00-5AA0
2m 6ES7960-1AA00-5BA0
10 m 6ES7960-1AA00-5KA0

Cable Lengths up to 500 m

You can use pairs of synchronization submodules as of version 2 with fiber-optic
cables up to 500m.

S7-400 with CPU 417-4H S7-400 with CPU 417-4H

rack 0 rack 1

max. 500m

Adapted cable SC/ST Adapted cable

SC/ST
Splice box Splice box

Please note the following:

• You can use the synchronization submodules of version 1 and of version 2
together, then cable lengths of up to 10 m are possible.
• When using fiber-optic cables which are longer than 10 m, make sure the
modules are equipped with sufficient cable grip.
• Keep to the ambient operating conditions given for the fiber-optic cables used
(bend radii, pressure, temperature...)
• Note the technical specifications of the fiber-optic cables used (damping,
bandwidth...)

Fiber-optic cable Interfaces: unused modules

...must be protected during storage with filler plugs (insert in the synchronization
submodule in delivery condition).

S7-400, M7-400 Programmable Controllers Module Specifications

15-66 A5E00069467-03
 Interface Submodules

Technical Specifications

Technical Specifications
Supply voltage supplied from the CPU
Current consumption 0.5 A
Submodule ID 0x85
Power losses 2.5 W
Dimensions W x H x D (mm) 18.2 x 67 x 97
Weight 0.080 kg

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 15-67
Interface Submodules

S7-400, M7-400 Programmable Controllers Module Specifications

15-68 A5E00069467-03
Cycle and Reaction Times of the S7-400 16
This chapter explains the composition of the cycle and reaction times of the
S7-400.
You can display the cycle time of your user program on the relevant CPU using the
programming device (see Manual Configuring Hardware and Communication
Connections with STEP 7 Version 5.0 or Higher).
Examples will illustrate how you calculate the cycle time.
The reaction time is important for monitoring a process. This chapter explains in
detail how you calculate the reaction time. If you are using a CPU 41x-2 DP as the
master on a PROFIBUS-DP network, you must also take the DP cycle times into
account (see Section 16.3).

Chapter Overview

Section Description Page

16.1 Cycle Time 16-2
16.2 Communication Load 16-9
16.3 Reaction Time 16-12
16.4 Examples of Calculating Cycle and Reaction Times 16-18
16.5 Interrupt Reaction Time 16-22
16.6 Example of Calculating the Interrupt Reaction Time 16-24
16.7 Reproducibility of Time-Delay and Watchdog Interrupts 16-25

Further information
You will find further information on the following processing times in the S7-400
Instruction List. It lists all the STEP 7 instructions that can be processed by the
relevant CPUs, together with their execution times and all the SFCs/SFBs
integrated in the CPUs and the IEC functions that can be called in STEP 7,
together with their processing times.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-1
Cycle and Reaction Times of the S7-400

16.1 Cycle Time

In this chapter you will learn about the composition of the cycle time and how you
can calculate the cycle time.

Definition of the Cycle Time

The cycle time is the time which the operating system needs to process a program
run – in other words, an OB 1 run – and all the program segments and system
activities that interrupt that run.
This time is monitored.

Time-Sharing Model
Cyclic program scanning, and thus also processing of the user program, is
performed in time slices. So that you can better appreciate these processes, we
will assume in the following that each time slice is exactly 1 ms long.

Process Image
The process signals are read or written prior to program scanning so that a
consistent image of the process signals is available to the CPU for the duration of
cyclic program scanning. Then the CPU does not directly access the signal
modules during program scanning when the address area ”inputs” (I) and ”outputs”
(O) are addressed, but addresses instead the internal memory area of the CPU on
which the image of the inputs and outputs is located.

The Cyclic Program Scanning Process

The following table and figure illustrate the phases of cyclic program scanning.

Table 16-1 Cyclic Program Scanning

Step Process
1 The operating system starts the scan cycle monitoring time.
2 The CPU writes the values from the process-image output table in the
output modules.
3 The CPU reads out the status of the inputs at the input modules and
updates the process-image input table.
4 The CPU processes the user program in time slices and performs the
operations specified in the program.

S7-400, M7-400 Programmable Controllers Module Specifications

16-2 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Table 16-1 Cyclic Program Scanning

Step Process
5 At the end of a cycle, the operating system executes pending tasks,
such as the loading and clearing of blocks.
6 The CPU then goes back to the beginning of the cycle after the
configured minimum cycle time, as necessary, and starts cycle time
monitoring again.

Parts of the Cycle Time

PIQ: process-image output table

PII: process-image input table
SCC: scan cycle checkpoint
OS: operating system
PIQ
Time slice (1 ms each)

Cycle time
PII

User program

SCC (OS)

Time slice (1 ms)

Operating sys.
User program
CCycle time
Communications

Figure 16-1 Parts and Composition of the Cycle Time

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-3
Cycle and Reaction Times of the S7-400

Table 16-2 Parts of the Cycle Time

Factors Remark
Transfer time for the
process-image output table
... see Table 16-3
(PIQ) and the process-image
input table (PII)
User program processing ... is calculated from the execution times of the different
time instructions (see S7-400 Instruction List). For a special
characteristic of the CPU 417-4H refer to Table 16-5.
Operating system scan time
... see Table 16-4
at scan cycle checkpoint
Increase in the cycle time You parameterize the maximum permissible cycle load
from communications due to communications in % in STEP 7 (Manual
Programming with STEP 7 Version 5.0). See Section 16.2.
Impact of interrupts on the Interrupt can interrupt the user program at any time.
cycle time ... see Sections 16.5 and 16.6, and also Table 16-6

Note
With CPUs produced prior to October 1998, updating of the process image of the
outputs takes place before the scan cycle checkpoint.

Process Image Updating

The table below shows the CPU times for process image updating (process image
transfer time). The times listed in the table are ”ideal values” that may be increased
by the occurrence of interrupts and by CPU communications.
The transfer time for process image updating is calculated as follows:

K + number of bytes in the PQ in the central rack × A

+ number of bytes in the PQ in the expansion rack with local link × B
+ number of bytes in the PQ in the expansion rack with remote link × C
+ number of bytes in the PQ via DP × D
= transfer time for the process image

Figure 16-2 Formula for Calculation of the Transfer Time for the Process Image

S7-400, M7-400 Programmable Controllers Module Specifications

16-4 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Table 16-3 Data for Calculation of the Transfer Time for the Process Image

Components CPU 412-1 CPU 414-2 CPU 416-2

CPU 412-2 CPU 414-3 CPU 416-3
K Basic load 30 s 20 s 18 s
A For each byte in the central 1.9 s 1.9 s 1.9 s
rack *)
B For each byte in the expansion 5 s 5 s 5 s
rack with local link
C For each byte in the expansion 10 s 10 s 10 s
rack with remote link
D For each byte in the DP area for 0.5 s 0.5 s 0.5 s
the integrated DP interface
*) Applies similarly to the DP interface via CP 443-5

Components CPU 417-4 CPU 417-4H CPU 417-4H

with n = 1 (byte), 2 (word) solo redundant
or 4 (double word)
K Basic load 20 s 20 s 20 s
A In central rack
Read byte/word/double word n * 1.9 s 23 s+n*1.9 s 28 s+n*1.9 s
Write byte/word/double word n * 1.9 s 17s+n*1.9 s 20s+n*1.9 s
B For each byte in the expansion
unit with local link
Read byte/word/double word n * 5 s 23 s + n*5 s 28 s + n*5 s
Write byte/word/double word n * 5 s 17s + n*5 s 20 s + n*5 s
C For each byte in the expansion
rack with remote link
Read byte/word/double word n * 10 s 23 s + n*10 s 28 s + n*10 s
Write byte/word/double word n * 10 s 17s + n*10 s 20 s + n*10 s
D In the DP area for the integrated
DP interface
Read byte/word/double word n * 0.5 s 23 s+ n*0.5 s 28 s+ n*0.5 s
Write byte/word/double word n * 0.5 s 17s + n*0.5 s 20s + n*0.5 s

Operating System Scan Time at the Scan Cycle Checkpoint

The table below lists the operating system scan times at the scan cycle checkpoint
of the CPUs.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-5
Cycle and Reaction Times of the S7-400

Table 16-4 Operating System Scan Time at the Scan Cycle Checkpoint

Process CPU CPU CPU CPU 417-4 CPU CPU

412-1 414-2 416-2 417-4H 417-4H
412-2 414-3 416-3 solo redundant
Scan cycle 240 s 170 s 135 s 170 s 190 395
control at the -1770 s - 1865 s
SCC
∅ 200 s ∅ 445 s

Increasing the Cycle Time

Basically, you should note that the cycle time of a user program is increased by the
following:
• Time-driven interrupt processing
• Hardware interrupt processing (see also Section 16.5)
• Diagnostics and error handling (see also Section 16.6)
• Communications via the MPI and CPs connected via the communication bus
(for example, Ethernet, Profibus, DP); contained in the communication load
• Special functions such as control and monitoring of variables
or block status
• Transfer and clearance of blocks, compression of the user program memory

Increasing the Cycle Time of the CPU 417-4H

With the CPU 417-4H, you must further multiply the calculated cycle time by a
factor specific to the CPU in question. This factor is shown in the table below:

Table 16-5 User program processing time for the CPU 417-4H

Process CPU 417-4H solo CPU 417-4H redundant

Factor 1.03 1.14

S7-400, M7-400 Programmable Controllers Module Specifications

16-6 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Different Cycle Times

The length of the cycle time (Tcyc) is not identical in each cycle. The following
figure shows different cycle times, Tcyc1 and Tcyc2. Tcyc2 is longer than Tcyc1,
because the cyclically scanned OB 1 is interrupted by a time-of-day interrupt OB
(in this instance, OB 10).

Current cycle Next cycle Next cycle but one

T cyc 1 T cyc 2

OB10

PIQ PII PIQ PII PIQ PII

Updat- Updat- OB1 SCC Updat- Updat- OB1 OB1 SCC Updat- Updat-
ing ing ing ing ing ing

Figure 16-3 Different Cycle Times

A further reason for cycle times of different length is the fact that the execution
time of blocks (for example, OB 1) can vary on account of:
• Conditional instructions
• Conditional block calls
• Different program paths
• Loops, etc.

Maximum Cycle Time

You can modify the default maximum cycle time in STEP 7. If this time has
expired, OB 80 is called, and in it you can define how you want the CPU to
respond to the time error.
If there is no OB 80 in the CPU memory, the CPU goes to STOP.

Minimum Cycle Time

You can set a minimum cycle time for a CPU in STEP 7. This is practical if
• you want the intervals of time between the start of program scanning of OB1
(free cycle) to be roughly of the same length, or
• updating of the process images would be performed unnecessarily often with
too short a cycle time, or
• you want to process a program with the OB 90 in the background (not
CPU 417-4H).

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-7
Cycle and Reaction Times of the S7-400

Current cycle Next cycle

Tmax
Standby
Tmin

T cyc T wait

PCl16 OB40

PCl07 OB10

Process image Process image Process image Pr

PCl01 updating updating OB1 OB1 SCC updating upd
of the outputs of the inputs of the outputs of

PCl29 OB90 OB90

(=PCl0,29)

Tmin = the adjustable minimum cycle time

Tmax = the adjustable maximum cycle time
Tcyc = the cycle time
Twait = the difference between T min and the actual cycle time; in this time,
any interrupts that occur, the background OB and the SCC tasks can be processed.
PCl = priority class

Figure 16-4 Minimum Cycle Time

The actual cycle time is the sum of Tcyc and Twait. It is always greater than or equal
to Tmin.

Increase in Cycle Time by Nesting Interrupts

Table 16-6 Increase in Cycle Time by Nesting Interrupts

CPU Hardware Diagnostic Time-of- Time-Delay Watchdog Programming/

Interrupt Interrupt Day Interrupt Interrupt Periphery
Interrupt Access Error
CPU 412-1/-2 520 s 590 s 490 s 370 s 370 s 180 s / 190 s
CPU 414-2/-3 370 s 420 s 350 s 260 s 260 s 130 s / 140 s
CPU 416-2/-3 300 s 340 s 280 s 210 s 210 s 100 s / 105 s
CPU 417-4 370 s 420 s 350 s 260 s 260 s 130 s / 140 s
CPU 417-4 H 390 s 450 s 310 s 270 s 255 s 140 s / 170 s
solo
CPU 417-4 H 705 s 785 s 560 s 530 s 530 s 175 s / 240 s
redundant
You have to add the program execution time at the interrupt level to this increase.
If several interrupts are nested, their times must be added together.

S7-400, M7-400 Programmable Controllers Module Specifications

16-8 A5E00069467-03
 Cycle and Reaction Times of the S7-400

16.2 Communication Load

The CPU operating system continually makes available to communications the

percentage you configured for the overall CPU processing performance (time
sharing). If this processing performance is not required for communications, it is
available for other processing tasks.
In the hardware configuration, you can set the load due to communications to
between 5% and 50%. By default, the value is set to 20%.
This percentage should be regarded as an average value. In other words, the
communications component can be considerably greater than 20% in a time slice.
On the other hand, the communications component in the next time slice is only a
few or zero percent.
The user program is interrupted for communications processing. The interrupt can
be executed after any instruction. These communication jobs can modify the
program data.
This means that the data consistency cannot be guaranteed for the duration of
several accesses.
The manner in which you can guarantee consistency enduring for more than just
one instruction is explained in the manual System Software for S7-300/400 System
and Standard Functions, in the chapter Overview of S7 Communications and S7
Basic Communications.

Time slice (1 ms) Interrupt of the

user program
Operating system

User program
Component configurable
between 5 and 50%
Communications

Figure 16-5 Breakdown of a Time Slice

Of the part remaining, the operating system of the S7-400 requires only a
negligibly small amount for internal tasks.
The CPU 417-4H is an exception: with this CPU the operating system component
is included in the factor shown in Table 16-5.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-9
Cycle and Reaction Times of the S7-400

Example: 20 % Communication Load

You have configured a communication load of 20% in the hardware configuration.
The calculated cycle time is 10 ms.
A 20% communication load means that, on average, 200 s and 800 s of the time
slice remain for communications and the user program, respectively. The CPU
therefore requires 10 ms / 800 s = 13 time slices to process one cycle. This
means that the actual cycle time is 13 times a 1 ms time slice = 13 ms, if the CPU
fully utilizes the configured communication load.
This means that 20% communications do not increase the cycle linearly by 2 ms
but by 3 ms.
This fact is also expressed by the following formula:

Actual = cycle time
100

cycle time 100 Ć configured communication load in %"

Round up the result to the next whole number !

Figure 16-6 Formula: Influence of Communication Load

Example: 50 % Communication Load

You have configured a communication load of 50% in the hardware configuration.
The calculated cycle time is 10 ms.
This means that 500 s of each time slice remain for the cycle. The CPU therefore
requires 10 ms / 500 s = 20 time slices to process one cycle. This means that the
actual cycle time is 20 ms if the CPU fully utilizes the configured communication
load.
A 50% communication load means that, on average, 500 s and 500 s of the time
slice remain for communications and the user program, respectively. The CPU
therefore requires 10 ms / 500 s = 20 time slices to process one cycle. This
means that the actual cycle time is 20 times a 1 ms time slice = 20 ms, if the CPU
fully utilizes the configured communication load.
This means that 50% communications do not increase the cycle linearly by 5 ms
but by 10 ms.

S7-400, M7-400 Programmable Controllers Module Specifications

16-10 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Dependency of the Actual Cycle Time on the Communication Load

The following figure describes the non-linear dependency of the actual cycle time
on the communication load. As an example, we have chosen a cycle time of
10 ms.

Cycle time
30 ms
You can set the communication load in this range

25 ms

20 ms

15 ms

10 ms

5 ms
0% 5% 10% 20% 30% 40% 50% 60%
Communication load

Figure 16-7 Dependency of the Cycle Time on the Communication Load

Further Effect on the Actual Cycle Time

Due to the increase in the cycle time as a result of the communications
component, even more asynchronous events occur, from a statistical point of view,
within an OB 1 cycle than, say, interrupts. This also increases the OB 1 cycle. This
increase depends on how many events occur per OB 1 cycle and how long event
processing lasts.

Notes
• Check the effects of a change of the value for the parameter “Cycle load due to
communications” in system operation.
• The communication load must be taken into account when you set the
maximum cycle time, since time errors will occur if it is not.

Recommendations
• If possible, apply the default value.
• Use a larger value only if the CPU is being used primarily for communication
purposes and the user program is non-time-critical.
• In all other cases select a smaller value.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-11
Cycle and Reaction Times of the S7-400

16.3 Reaction Time

Definition of the Reaction Time

The reaction time is the time from an input signal being detected to changing an
output signal linked to it.

Variation
The actual reaction time is somewhere between a shortest and a longest reaction
time. For configuring your system, you must always reckon with the longest
reaction time.
The shortest and longest reaction times are analyzed below so that you can gain
an impression of the variation of the reaction time.

Factors
The reaction time depends on the cycle time and on the following factors:
• Delay in the inputs and outputs
• Additional DP cycle times on the PROFIBUS-DP network
• Execution of the user program

Delay in the Inputs and Outputs

Depending on the module, you must heed the following time delays:
• For digital inputs: the input delay
• For digital outputs: negligible time delays
• For relay outputs: typical time delays from 10 to 20 ms.
The delay of the relay outputs depends, among other
things, on the temperature and voltage.
• For analog inputs: cycle time of analog input module
• For analog outputs: response time of the analog output module
The time delays can be found in the technical specifications of the signal modules.

S7-400, M7-400 Programmable Controllers Module Specifications

16-12 A5E00069467-03
 Cycle and Reaction Times of the S7-400

DP Cycle Times on the PROFIBUS-DP Network

If you have configured your PROFIBUS-DP network with STEP 7, then STEP 7 will
calculate the typical DP cycle time that must be expected. You can then have the
DP cycle time of your configuration displayed on the programming device.
The following figure will provide you with an overview of the DP cycle time. We
assume in this example that each DP slave has 4 byte of data on average.

Bus
17 ms
transit
time

7 ms

6 ms Transmission rate: 1.5

Mbps

5 ms

4 ms

3 ms

2 ms Transmission rate:
12 Mbps

1 ms
Min. slave
interval
1 2 4 8 16 32 64 Number of DP slaves

Figure 16-8 DP Cycle Times on the PROFIBUS-DP Network

If you are operating a PROFIBUS-DP network with more than one master, you
must take the DP cycle time into account for each master. In other words, perform
a separate calculation for each master and add the results together.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-13
Cycle and Reaction Times of the S7-400

Shortest Reaction Time

The following figure illustrates the conditions under which the shortest reaction
time is achieved.

SCC (OS)

Delay of the inputs

PIQ
Immediately before the PII is read in, the status of the input under
review changes. The change of input signal is also taken into account
PII in the PII.
The change of input signal is processed here by the user program.
Reaction time

User pro-
gram

SCC (OS)

The reaction of the user program to the change of input signal is output
here to the outputs.
PIQ

Delay of the outputs

Figure 16-9 Shortest Reaction Time

Calculation
The (shortest) reaction time is made up as follows:
• 1 × process image transfer time of the inputs +
• 1 × process image transfer time of the outputs +
• 1 × program processing time +
• 1 × operating system processing time at SCC +
• 2 × run time of the DP slave message frame (including processing in the DP
master) +
• Delay in the inputs and outputs
This is equivalent to the sum of the cycle time, DP run time and the delay in the
inputs and outputs.

S7-400, M7-400 Programmable Controllers Module Specifications

16-14 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Longest Reaction Time

The following figure shows you how the longest reaction time results.

SCC (OS)
Delay in the inputs
+ DP cycle time on the PROFIBUS-DP

PIQ
While the PII is being read in, the status of the input
under review changes. The change of input signal is no
PII
longer taken into account in the PII.
User pro-
gram
Reaction time

SCC (OS)

PIQ
Here the change of input signal is taken into account
PII in the PII.
The change of input signal is processed here by the
User pro-
user program.
gram

SCC (OS)

The reaction of the user program to the change of input

signal is passed here to the outputs.
PIQ

Delay in the outputs

+ DP cycle time on the PROFIBUS-DP

Figure 16-10 Longest Reaction Time

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-15
Cycle and Reaction Times of the S7-400

Calculation
The (longest) reaction time is made up as follows:
• 2 × process image transfer time of the inputs +
• 2 × process image transfer time of the outputs +
• 2 × operating system processing time +
• 2 × program processing time +
• 2 × run time of the DP slave message frame (including processing in the DP
master) +
• Delay in the inputs and outputs
This is equivalent to the sum of twice the cycle time and the delay in the inputs and
outputs plus twice the DP cycle time.

Reducing the Reaction Time

You can achieve faster reaction times by direct access to the I/O in the user
program, for example with
• L PIB or
• T PQW
you can avoid the reaction times in part, as described above.
In this way the maximum reaction time is reduced to
• Delay in the inputs and outputs
• Run time of the user program (can be interrupted by high-priority interrupt
handling)
• Run time of direct accesses
• Twice the bus transit time of DP
You can similarly achieve fast reaction times by using hardware interrupts; refer to
Section 16.5.
The following table lists the execution times of direct accesses by the CPU to I/O
modules. The times shown are “ideal values”.

S7-400, M7-400 Programmable Controllers Module Specifications

16-16 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Table 16-7 Reducing the Reaction Time

Type of Access CPU CPU CPU CPU CPU 417-4H CPU

412-1 414-2 416-2 417-4 solo 417-4H
412-2 414-3 416-3 redundant
Read byte 2.6 s 2.1 s 2.0 s 2.4 s 34 s 64 s
Read word 4.1 s 3.5 s 3.4 s 3.8 s 37 s 67 s
Read double word 8.0 s 7.0 s 6.7 s 7.6 s 41 s 71 s
Write byte 2.7 s 2.2s 2.1 s 2.4 s 29 s 58 s
Write word 4.2 s 3.7s 3.6 s 3.9 s 32 s 61 s
Write double word 8.3 s 7.4s 7.1 s 7.8 s 36 s 65 s
Read byte in the 11.6 s 10.6 s 5.3 s 10.6 s – –
expansion rack with
local link
Read byte in the 17.2 s 16.2 s 10.1 s 16.2 s – –
expansion rack with
remote link

The specified times are merely CPU processing times and apply, unless otherwise
stated, to signal modules in the central rack.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-17
Cycle and Reaction Times of the S7-400

16.4 Examples of Calculating the Cycle Time and Reaction Time

Course of Calculation
1. Using the Instruction List, determine the run time of the user program.
2. Calculate and add the transfer time for the process image. You will find guide
values for this in Table 16-3.
3. Add to it the processing time at the scan cycle checkpoint. You will find guide
values for this in Table 16-4.
4. CPU 417-4H: multiply the calculated value by the factor in Table 16-5.
The result you achieve is the cycle time.
5. Multiply the result by the following factor:
100
100 - “configured communication load in %”
6. Using the Instruction List, calculate the run time of the program sections that
hardware interrupts. Add to it the relevant value in Table 16-6.
Multiply this value by the factor in step 4.
Add this value to the theoretical cycle time as often as the interrupt is triggered,
or is likely to be triggered, during the during the cycle time.
The result you obtain is approximately the actual cycle time. Make a note of the
result.

Table 16-8 Example of Calculating the Reaction Time

Shortest Reaction Time Longest Reaction Time

6. Then, calculate the delays in the 6. Multiply the actual cycle time by a
inputs and outputs and the DP cycle factor of 2.
times on the PROFIBUS DP
7. Then, calculate the delays in the
network.
inputs and outputs and the DP cycle
times on the PROFIBUS DP
network.
7. The result you obtain is the shortest 8. The result you obtain is the longest
reaction time. reaction time.

S7-400, M7-400 Programmable Controllers Module Specifications

16-18 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Example Installation I
You have installed an S7-400 with the following modules in the central rack:
• One CPU 414-2
• Two digital input modules SM 421; DI 32×DC 24 V (4 byte each in PA)
• Two digital output modules SM 422; DO 32×DC 24 V/0.5A (4 byte each in PA)

User Program
According to the Instruction List, your user program has a run time of 15 ms.

Cycle Time Calculation

The cycle time for the example results from the following times:
• Since the CPU-specific factor is 1.0, the user program processing time remains:
approx. 15.0 ms
• Process image transfer time
Process image: 20 s + 16 byte×1.9 s = approx. 0.05 ms
• Operating system run time at scan cycle checkpoint:
approx. 0.17 ms
The cycle time for the example results from the sum of the times listed:
Cycle time = 15.0 ms + 0.05 ms + 0.17 ms = 15.22 ms.

Calculation of the Actual Cycle Time

• Allowance of the communication load (default value: 20%):
1.72 ms * 100 / (100-20) = 19.03 ms.
• There is no interrupt handling.
Rounded off, the actual cycle time is thus 19 ms.

Calculation of the Longest Reaction Time

• Longest reaction time
19.03 ms * 2 = 38.05 ms.
• The delay in the inputs and outputs is negligible.
• All the components are plugged into the central rack; DP cycle times do not
therefore have to be taken into account.
• There is no interrupt handling.
Rounded off, the longest reaction time is thus = 38 ms.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-19
Cycle and Reaction Times of the S7-400

Example Installation II
You have installed an S7-400 with the following modules:
• One CPU 414-2
• Four digital input modules SM 421; DI 32×DC 24 V (4 byte each in PA)
• Three digital output modules SM 422; DO 16×DC 24 V/2A (2 byte each in PA)
• Two analog input modules SM 431; AI 8×13 bit (not in PA)
• Two analog output modules SM 432; AO 8×13 bit (not in PA)

CPU Parameters
The CPU has been assigned parameters as follows:
• Cycle load due to communications: 40%

User Program
According to the Instruction List, the user program has a run time of 10.0 ms.

Cycle Time Calculation

The theoretical cycle time for the example results from the following times:
• Since the CPU-specific factor is 1.0, the user program processing time remains:
approx. 10.0 ms
• Process image transfer time
Process image: 20 s + 22 byte×1.9 s = approx. 0.06 ms
• Operating system run time at scan cycle checkpoint:
approx. 0.17 ms
The cycle time for the example results from the sum of the times listed:
Cycle time = 10.0 ms + 0.06 ms + 0.17 ms = 10.23 ms.

Calculation of the Actual Cycle Time

• Allowance of communication load:
10.23 ms * 100 / (100-40) = 17.05 ms.
• A time-of-day interrupt having a run time of 0.5 ms is triggered every 100 ms.
The interrupt cannot be triggered more than once during a cycle:
0.5 ms + 0.35 ms (in Table 16-6) = 0.85 ms.
Allowance for communication load:
0.85 ms * 100 / (100-40) = 1.42 ms.
• 17.05 ms + 1.42 ms = 18.49 ms.
The actual cycle time is therefore 19 ms taking into account the time slices.

S7-400, M7-400 Programmable Controllers Module Specifications

16-20 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Calculation of the Longest Reaction Time

• Longest reaction time
19 ms * 2 = 38 ms.
• Delays in the inputs and outputs
– The digital input module SM 421; DI 32×DC 24 V has an input delay of not
more than 4.8 ms per channel
– The digital output module SM 422; DO 16×DC 24 V/2A has an output delay
of not more than 1 ms per channel
– The analog input module SM 431; AI 8×13 bit was assigned parameters for
50 Hz interference frequency suppression. This results in a conversion time
of 25 ms per channel. Since 8 channels are active, a cycle time of 200 ms
results for the analog input module.
– Analog output module SM 432; AO 8×13 bit was assigned parameters for
the measuring range from 0 to 10V. This results in a conversion time of 0.3
ms per channel. Since 8 channels are active, a cycle time of 2.4 ms results.
To this must be added the settling time for the resistive load, which is 0.1
ms. A response time of 2.5 ms therefore results for an analog output.
• All the components are plugged into the central rack; DP cycle times do not
therefore have to be taken into account.
• Case 1: When a digital signal is read in, an output channel of the digital output
module is set. This produces a reaction time of:
Reaction time= 38 ms + 4.8 ms + 1 ms = 43.8 ms.
• Case 2: An analog value is read in and an analog value output. This produces a
reaction time of:
Reaction time = 38 ms + 200 ms + 2.5 ms = 240.5 ms.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-21
Cycle and Reaction Times of the S7-400

16.5 Interrupt Reaction Time

Definition of the Interrupt Reaction Time

The interrupt reaction time is the time from when an interrupt signal first occurs to
calling the first instruction in the interrupt OB.
As a rule, the following applies: interrupts having a higher priority take precedence.
This means that the interrupt reaction time is increased by the program processing
time of the higher priority interrupt OBs and interrupt OBs with the same priority
that have not yet been processed (queue).

Note
The interrupt reaction times can be delayed by read and write jobs having a
maximum aggregate (approx. 460 byte).
When interrupts are transferred between a CPU and DP master, only a diagnostic
or hardware interrupt can be currently reported at any time from a DP line.

Calculation

Min. interrupt reaction time of the CPU Max. interrupt reaction time of the CPU
+ min. interrupt reaction time of the + max. interrupt reaction time of the
signal modules signal modules
+ DP cycle time on PROFIBUS-DP + 2 * DP cycle time on PROFIBUS-DP

= Shortest Reaction Time = Longest Reaction Time

Figure 16-11 Calculating the Interrupt Reaction Time

S7-400, M7-400 Programmable Controllers Module Specifications

16-22 A5E00069467-03
 Cycle and Reaction Times of the S7-400

Hardware Interrupt and Diagnostic Interrupt Reaction Times of CPUs

Table 16-9 Hardware Interrupt and Diagnostic Interrupt Reaction Times

CPU Hardware Interrupt Diagnostic Interrupt

Reaction Times Reaction Times
Min. Max. (1) Min. Max. (1)
412-1/-2 360 s 610 s 440 s 690 s
414-2/-3 255 s 435 s 310 s 490 s
416-2/-3 210 s 350 s 250 s 400 s
417-4 255 s 435 s 310 s 490 s
417-4H solo 270 s 530 s 325 s 645 s
417-4H redundant 375 s 690 s 415 s 780 s
(1) The maximum interrupt reaction time increases when communication functions
are active. The increase is calculated with the following formula:
CPU 412: tv = 200 s + 1000 s × n%
CPU 414-417: tv = 100 s + 1000 s × n%
CPU 417-4H tv = 100 s + 1000 s × n%, distinct increase possible
where n = cycle load from communication

Signal Modules
The hardware interrupt reaction time of the signal modules is made up as follows:
• Digital input modules
Hardware interrupt reaction time = internal interrupt processing time + input
delay
You will find the times in the data sheet of the digital input module concerned.
• Analog input modules
Hardware interrupt reaction time = internal interrupt processing time +
conversion time
The internal interrupt processing time of the analog input modules is negligible.
The conversion times can be taken from the data sheet of the analog input
module concerned.
The diagnostic interrupt reaction time of the signal modules is the time which
elapses between a diagnostics event being detected by the signal module and the
diagnostic interrupt being triggered by the signal module. This time is so small that
it can be ignored.

Hardware interrupt processing

When the hardware interrupt OB 40 is called, the hardware interrupt is processed.
Interrupts with higher priority interrupt hardware interrupt processing, and direct
access to the I/O is made when the instruction is executed. When hardware
interrupt processing is completed, either cyclic program processing is continued or
other interrupt OBs with the same or a lower priority are called and processed.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-23
Cycle and Reaction Times of the S7-400

16.6 Example of Calculating the Interrupt Reaction Time

Parts of the Interrupt Reaction Time

As a reminder, the hardware interrupt reaction time is made up of the following:
• Hardware interrupt reaction time of the CPU
• Hardware interrupt reaction time of the signal module.
• 2 × DP cycle time on the PROFIBUS-DP
Example: You have an S7-400 consisting of a CPU 416-2 and 4 digital modules in
the central rack. One digital input module is the SM 421; DI 16×UC 24/60 V; with
hardware and diagnostic interrupts. In the parameter assignment of the CPU and
the SM, you have only enabled the hardware interrupt. You do not require
time-driven processing, diagnostics and error handling. You have assigned an input
delay of 0.5 ms for the digital input module. No activities at the scan cycle
checkpoint are required. You have set a cycle load from communication of 20%.

Calculation
The hardware interrupt reaction time for the example results from the following
times:
• Hardware interrupt reaction time of the CPU 416-2: approx. 0.35 ms
• Increase from communication in accordance with the formula shown in the
footnote of Table 16-9 :
100 s + 1000 s × 20% = 300 s = 0.3 ms
• Hardware interrupt reaction time of the SM 421; DI 16×UC 24/60 V:
– Internal interrupt processing time: 0.2 ms
– Input delay: 0.5 ms
• Since the signal modules are plugged into the central rack, the DP cycle time
on the PROFIBUS-DP is not relevant.
The hardware interrupt reaction time results from the sum of the listed times:
Hardware interrupt reaction time = 0.35 ms + 0.3 ms + 0.2 ms + 0.5 ms = approx.
1.35 ms.
This calculated hardware interrupt reaction time is the time from a signal being
applied across the digital input to the first instruction in OB 40.

S7-400, M7-400 Programmable Controllers Module Specifications

16-24 A5E00069467-03
 Cycle and Reaction Times of the S7-400

16.7 Reproducibility of Time-Delay and Watchdog Interrupts

Definition of “Reproducibility”
Time-delay interrupt:
The deviation with time from the first instruction of the interrupt OB being called to
the programmed interrupt time.
Watchdog interrupt:
The variation in the time interval between two successive calls, measures between
the first instruction of the interrupt OB in each case.

Reproducibility
Table 16-10 contains the reproducibility of time-delay and watchdog interrupts of
the CPUs.

Table 16-10 Reproducibility of Time-Delay and Watchdog Interrupts of the

CPUs.

Module Reproducibility
Time-Delay Interrupt: Watchdog Interrupt
CPU 412-1/-2 –770 s / +330 s –40 s / +40 s
CPU 414-2/-3 –770 s / +330 s –40 s / +40 s
CPU 416-2/-3 –770 s / +330 s –40 s / +40 s
CPU 417-4 –770 s / +330 s –40 s / +40 s
CPU 417-4H solo –750 s / +400 s –850 s / +850 s
CPU 417-4H redundant –500 s / +800 s –700 s / +700 s

These times apply only if the interrupt can be executed at this time and not, for
example, delayed by interrupts with higher priority or interrupts of identical priority
that have not yet been executed.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 16-25
Cycle and Reaction Times of the S7-400

S7-400, M7-400 Programmable Controllers Module Specifications

16-26 A5E00069467-03
IM 463-2 A
Chapter Overview

Section Description Page

A.1 Using SIMATIC S5 Expansion Units in an S7-400 A-2
A.2 Rules for Connecting S5 Expansion Units A-3
A.3 Operator Controls and Indicators A-4
A.4 Installing and Connecting the IM 463-2 A-6
A.5 Setting the Operating Modes of the IM 463-2 A-7
A.6 Configuring S5 Modules for Operation in the S7-400 A-9
A.7 Pin Assignments of the 721 Connecting Cable A-10
A.8 Terminating Connector for IM 314 A-12
A.9 Technical Specifications A-13

Order Number

IM 463-2 6ES7 463-2AA00-0AA0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-1
IM 463-2

A.1 Using SIMATIC S5 Expansion Units in an S7-400

Area of Application
The IM 463-2 interface module is used for distributed connection of S5 expansion
units to an S7-400.
You can use the IM 463-2 in the CR of the S7-400. In the S5 expansion unit, you
use an IM 314.
This allows you to connect the following S5 expansion units to an S7-400:
• EU 183U
• EU 185U
• EU 186U
• ER 701-2
• ER 701-3
Accordingly, you can use all digital and analog I/O modules suitable for these EUs
or ERs.

Basic Requirement
If you connect an S5 expansion unit to a CR of the S7-400 via an IM 463-2, the
SIMATIC S5 basic requirements concerning EMC, ambient conditions, etc., apply
for the overall system.

Note
In environments contaminated by radiated noise, you must apply the type 721
cable shield (see Installation Manual, Chapter 4).

Expanding the Distributed Connection

You can also centrally expand the EUs connected in a distributed configuration via
an IM 463-2. The following table lists the S5 interface modules that you can use for
this purpose.

Module Order Number

IM 300 6ES5 300-5CA11
6ES5 300-3AB11
6ES5 300-5LB11
IM 306 6ES5 306-7LA11

S7-400, M7-400 Programmable Controllers Module Specifications

A-2 A5E00069467-03
 IM 463-2

A.2 Rules for Connecting S5 Expansion Units

Introduction
When you connect S5 expansion units to an S7-400 via the IM 463-2, there are
rules to observe with regard to cable length, maximum expansion, use of a
terminating connector and permissible potential differences.

Cable Length
The maximum cable length per IM 463-2 from the CR of the S7-400 to the last
S5 expansion unit is 600 m. You set the actual cable length at the IM 463-2
(see Section A.3).

Maximum Expansion
You can use up to four IM 463-2s in one S7-400 CR.
At each IM 463-2 interface (C1 and C2), you can connect up to four S5 expansion
units in a distributed configuration.
You can connect further EUs centrally to the EUs connected in the distributed
configuration.

Terminating Connector
You must terminate the IM 314 of the last EU in each chain with the
6ES5760-1AA11 terminating connector.

Permissible Potential Differences

For the safe functioning of the distributed configuration, you must ensure that the
potential difference between two devices is not more than 7 V. Use an
equipotential bonding conductor.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-3
IM 463-2

A.3 Operator Controls and Indicators

Introduction
All controls and indicators on the IM 463-2 are arranged on the front plate. The
following figure shows the arrangement of the controls and indicators.

LEDs EXTF, C1, C 2

Interface selector switch

Cable length selector switch

X1 connector
C1 interface

X2 connector
C2 interface

S7-400, M7-400 Programmable Controllers Module Specifications

A-4 A5E00069467-03
 IM 463-2

LEDs

LED Meaning
LED EXTF (red) Lights up in the event of an external fault. Chain 1 or chain 2 has a
fault (power supply failed in the EU; terminating connector missing;
wire break, or interface selector switch wrongly set).
LED C1 (green) Chain 1 (via front connector X1, connection 1) is in order.
LED C2 (green) Chain 2 (via front connector X2, connection 2) is in order.
Front connector X1 Connector plug (output) for chain 1 and chain 2.
and X2 X1 = upper front connector; X2 = lower front connector

Interface Selector Switch

Switch Position Meaning

C1 ON You use only interface C1.
C2 ON You use only interface C2.
C1, C2 ON You use both interfaces.
C1, C2 OFF You use neither of the two interfaces.
You do not want to operate an S5 EU at present.

Cable Length Selector Selector

Switch Position Meaning

100 Cable length 1 to 100 m
250 Cable length 100 to 250 m
450 Cable length 250 to 450 m
600 Cable length 450 to 600 m

Warning
! Danger of data loss.
Changing the setting of the interface selector switch and the cable length selector
switch in RUN mode can result in loss of data.
Change the settings of these switches only in STOP mode of the CPU.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-5
IM 463-2

A.4 Installing and Connecting the IM 463-2

Introduction
To install an IM 463-2 in a CR of the S7-400, proceed in the same way as when
installing other S7-400 modules (see Installation Manual, Chapter 5).
To connect an IM 463-2, follow the steps outlined below:
1. Prepare the connecting cable.
2. Plug in the connecting cable.
3. Select the interface.
4. Select the cable length.

Preparing the Connecting Cable

You can use the 721 connecting cable. However, you must change the connector
housing on the connection side of the IM 463-2.
Two connector housings are enclosed with every IM 463-2. You can prepare a
connecting cable for an IM 463-2 using one of these connector housings and a 721
connecting cable (see Catalog ST 54.1). To prepare the connecting cable, follow
the steps outlined below:
1. Remove one connector housing on the 721 connecting cable.
2. Open one of the connector housings enclosed with the IM 463-2.
3. Attach this connector housing to the 721 connecting cable.
4. Close the connector housing.

Plugging in the Connecting Cable

To plug in the connecting cable, follow the steps outlined below:
1. Open the cover of the IM 463-2.
2. Plug the new connector of the connecting cable into one of the connectors of
the IM 463-2.
Interface C1 corresponds to the upper connector; interface C2 corresponds to
the lower connector.
3. Screw the connector of the connecting cable onto the connector of the
IM 463-2.
4. Close the cover.

Selecting the Interface

You select the interface with the selector switch on the front plate. Set the
interface(s) here that you want to use. Make the settings on the IM 463-2 only
when the CPU is in STOP mode.

Selecting the Cable Length

You select the cable length with the selector switch on the front plate. Set the
range corresponding to the chain length. Make the settings on the IM 463-2 only
when the CPU is in STOP mode.

S7-400, M7-400 Programmable Controllers Module Specifications

A-6 A5E00069467-03
 IM 463-2

A.5 Setting the Operating Modes of the IM 463-2

Introduction
To operate the IM 463-2, you must set on the IM 314 the S5 expansion unit used
and the address area of the S5 I/O modules.

Setting the S5 Expansion Unit

You set the S5 expansion unit in which you want to use the IM 314 using jumpers
BR1, BR2, and BR3 on the IM 314.
The following figure shows where these jumpers are located on the IM 314 and
which setting corresponds to which expansion unit.

Used in EU 185U, EU 186U Used in EU 183U

2 1 3 2 1 off 2 1 3 2 1 off
S1 S1
BR 1 • • •• • BR 2 on
BR 1 •• ••• BR 2
on

X3 X1 X3 X1
3 2 1 3 2 1
BR 3 ••• BR 3 •• •

X4 X2 X4 X2

Used in ER 701-2, ER 701-3

2 1 3 2 1 off
S1
BR 1 •• •• • BR 2 on

X3 X1
3 2 1
BR 3 • ••

X4 X2

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-7
IM 463-2

Setting the Address Area

The address area of the S5 I/O modules is set on the IM 314. This setting applies
only for the digital and analog I/O modules.
The address areas P, Q, IM3, and IM4 are available. Set the switch to the relevant
position to address the digital and analog I/O modules in these areas.

I/O Area Address Switch Position

O = OFF, 1 = ON
not relevant
P area: F000 - F0FF S1: 0000 *)
OFF
Q area: F100 - F1FF 0001
ON
IM3 area: FC00 - FCFF 1100

IM4 area: FD00 - FDFF 1101

*) Status as shipped

S7-400, M7-400 Programmable Controllers Module Specifications

A-8 A5E00069467-03
 IM 463-2

A.6 Configuring S5 Modules for Operation in the S7-400

You configure the S5 modules using STEP 7. See the description of STEP 7 or the
online help function for details of how to proceed.
The following figure shows a possible connection of CRs and EUs via the IM 463-2
and IM 314.

further EU 184U,
EU 187U (central)

S5 IM 312-3 S5 IM 312-3 S5 IM 312-5

expansion unit expansion unit expansion unit

IM 314 IM 314 IM 314

S5 IM 300-3 S5 S5 IM 300-5
expansion unit expansion unit IM 300-3 expansion unit

Terminating connector 760-1AA11

All 721 connecting cables




S5 IM 312-3 S5 IM 312-5
expansion unit expansion unit

Central mounting rack

IM 314 IM 314

S7-400
IM 463-2 S5 IM 300-3 S5
expansion unit expansion unit IM 300-5

Terminating connector 760-1AA11

All 721 connecting cables

max. 600 m
To further S5 expansion units (distributed)
(max. 4 per IM 463-2)

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-9
IM 463-2

A.7 Pin Assignments of the 721 Connecting Cable

ÍÍÍÍÍÍÍÍÍÍÍ
ÍÍÍÍÍÍÍÍÍÍÍ ÍÍÍÍÍÍÍÍÍÍÍ
ÍÍÍÍÍÍÍÍÍÍÍ
ÍÍÍÍÍÍÍÍÍÍÍ ÍÍÍÍÍÍÍÍÍÍÍ
34 50 17 1

ÍÍÍÍÍÍÍÍÍÍÍ ÍÍÍÍÍÍÍÍÍÍÍ
1 17 50 34

Connector Bundle Core Color Connector

Identification Foil
50-Pin Contact Ident. Sheath 50-Pin Contact
20 white 20
21 brown 21
4 green 4
5 1 yellow 5
red
18 No. 16 gray 18
19 pink 19
2 blue 2
3 red 3
24 white 24
25 brown 25
8 green 8
9 yellow 9
2 green
22 No. 17 gray 22
23 pink 23
6 blue 6
7 red 7
26 white 26
27 brown 27
10 green 10
11 yellow 11
3 yellow
42 No. 18 gray 42
43 pink 43
44 blue 44
45 red 45
28 white 28
29 brown 29
12 green 12
13 yellow 13
4 brown
46 No. 19 gray 46
47 pink 47
30 blue 30
31 red 31

S7-400, M7-400 Programmable Controllers Module Specifications

A-10 A5E00069467-03
 IM 463-2

Connector Bundle Core Color Connector

Identification Foil
50-Pin Contact Ident. Sheath 50-Pin Contact
34 white 34
35 brown 35
36 green 36
37 yellow 37
5 black
38 No. 20 gray 38
39 pink 39
40 blue 40
41 red 41
48 white 48
49 brown 49
14 green 14
6 blue
15 No. 21 yellow 15
32 gray 32
33 pink 33
- Shield -

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-11
IM 463-2

A.8 Terminating Connector for IM 314

Introduction
The IM 314 of the last expansion unit of each chain is terminated with the
6ES5 760-1AA11 terminating connector.
The following table shows the pin assignments of the 760-1AA11 terminating
connector.

ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
1 17

ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
Plug Connection
34

180-Ohm Resistance or Jumper

50

Plug Connection
28 8
29 9
26 6
27 7
48 4
47 5
44 2
45 3
42 24
43 25
38 22
1)
39 23
34 20
1)
35 21
36 18
1)
37 19
40 12
1)
41 13
48 10
2)
49 11
15 30
16 31
14
50
1) 100 
2) 200 

S7-400, M7-400 Programmable Controllers Module Specifications

A-12 A5E00069467-03
 IM 463-2

A.9 Technical Specifications

Dimensions and Weight Voltages, Currents, Potentials

Dimensions Supply voltage from +5 V
WxHxD (mm) 25x290x280 S7-400 bus
Weight 360 g Current consumption typ. 1.2 A
max. 1.32 A
Module-Specific Data
Power losses typ. 6 W
Number and type of 2 parallel, symmetrical
max. 6.6 W
interfaces interfaces
Cable length:
from IM 463-2 to the last
IM 314
(per interface) max. 600 m
Transmission rate 2 Mbytes/s to
100 Kbytes/s
Parameter sets of the differential signal in ac-
signal modules cordance with RS 485
Front connector 2 connectors,
50-pin male

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 A-13
IM 463-2

S7-400, M7-400 Programmable Controllers Module Specifications

A-14 A5E00069467-03
Parameter Sets of the Signal Modules B
Chapter Overview

Section Description Page

B.1 Principle of Assigning Parameters to Signal Modules in the B-2
User Program
B.2 Parameters of the Digital Input Modules B-3
B.3 Parameters of the Digital Output Modules B-6
B.4 Parameters of the Analog Input Modules B-9

Other References
You will find a detailed description of the principle of assigning parameters to signal
modules in the user program and a description of the SFCs that can be used for
this purpose in the STEP 7 manuals.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 B-1
Parameter Sets of the Signal Modules

B.1 Principle of Assigning Parameters to Signal Modules in the

User Program

Assigning Parameters in the User Program

You have already assigned parameters to the S7-400 modules with STEP 7. You
can change the parameter assignment of the module using an SFC in the user
program. In addition, you can also transfer the parameters from the CPU to the
addressed signal module using an SFC in the user program.

Parameters are Stored in Data Sets

The parameters of the signal modules are stored in two data sets, data set 0 and
data set 1.

Modifiable Parameters
You can change the parameters of data set 1 and transfer them to the signal
module with SFC55. This does not change the parameters set in the CPU. You
cannot change the parameters of data set 0 in the user program for the S7-400.
The sections below give you an overview of which parameters of a module class
are stored in data sets 0 and 1.

SFCs for Parameter Assignment

The following SFCs are available for assigning parameters to the signal modules in
the user program.

SFC No. Name Application

55 WR_PARM Transfer of the modifiable parameters (data set 1) to the
addressed signal module.
56 WR_DPARM Transfer of the parameters (data set 0 or 1) from the
CPU to the addressed signal module.
57 PARM_MOD Transfer of all parameters (data sets 0 and 1) from the
CPU to the addressed signal module.

Description of the Parameters

The chapters indicated below contain all modifiable parameters of the different
module classes. The parameters of the programmable signal modules are
described in:
• Chapters 5 and 6 of this manual, and
• STEP 7 online help
The data sheets of the individual signal modules will show you which parameters
can be set for each class of the signal module.

S7-400, M7-400 Programmable Controllers Module Specifications

B-2 A5E00069467-03
 Parameter Sets of the Signal Modules

B.2 Parameters of the Digital Input Modules

Parameters
Table B-1 contains all the parameters you can set for the digital input modules. You
can see from the list
• Which parameters you can change with STEP 7 and
• Which parameters you can change with SFC55 “WR_PARM”.
You can also transfer the parameters set with STEP 7 to the module using SFC56
and SFC57 (see STEP 7 manuals).

Table B-1 Parameters of the Digital Input Modules

Parameter Data Can be Set with ...

Set No.
... SFC55 ... STEP 7
Target CPU for interrupts No Yes
Input delay 0 No Yes
Diagnostics No Yes
Hardware interrupt enable Yes Yes
Diagnostic interrupt enable Yes Yes
Behavior in case of fault *) Yes Yes
1
Hardware interrupt at positive edge Yes Yes
Hardware interrupt at negative edge Yes Yes
Switch substitute values 1 *) Yes Yes

Note
If you want to enable a diagnostic interrupt in the user program in data set 1, you
must first enable the diagnostics in data set 0 using STEP 7.

*) only with 6ES7 421-7BH00-0AB0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 B-3
Parameter Sets of the Signal Modules

Structure of Data Set 1

The following figure shows you the structure of data set 1 (bytes 0, 1, 2 and 3) of
the parameters of the digital input modules.
You activate a parameter by setting the relevant bit to “1”.

7 6 0 Bit no.
Byte 0

Behavior in case of fault *)

Diagnostic interrupt enable
Hardware interrupt enable

7 6 5 4 3 2 1 0
Byte 1 Hardware interrupt

with positive edge on channel 0

with positive edge on channel 1
with positive edge on channel 2
with positive edge on channel 3
with positive edge on channel 4
with positive edge on channel 5
with positive edge on channel 6
with positive edge on channel 7

7 6 5 4 3 2 1 0
Byte 2 Hardware interrupt

with positive edge on channel 8

with positive edge on channel 9
with positive edge on channel 10
with positive edge on channel 11
with positive edge on channel 12
with positive edge on channel 13
with positive edge on channel 14
with positive edge on channel 15

7 6 5 4 3 2 1 0
Byte 3 Hardware interrupt

with negative edge on channel 0

with negative edge on channel 1
with negative edge on channel 2
with negative edge on channel 3
with negative edge on channel 4
with negative edge on channel 5
with negative edge on channel 6
with negative edge on channel 7

*) only with 6ES7 421-7BH00-0AB0

S7-400, M7-400 Programmable Controllers Module Specifications

B-4 A5E00069467-03
 Parameter Sets of the Signal Modules

The following figure shows you the structure of data set 1 (bytes 4, 5, and 6) of the
parameters of the digital input modules.
You activate a parameter by setting the relevant bit to “1”.

7 6 5 4 3 2 1 0
Byte 4 Hardware interrupt

with negative edge on channel 8

with negative edge on channel 9
with negative edge on channel 10
with negative edge on channel 11
with negative edge on channel 12
with negative edge on channel 13
with negative edge on channel 14
with negative edge on channel 15

7 6 5 4 3 2 1 0
Byte 5 Substitute value*)

Switch substitute value 1 to channel 0

Switch substitute value 1 to channel 1
Switch substitute value 1 to channel 2
Switch substitute value 1 to channel 3
Switch substitute value 1 to channel 4
Switch substitute value 1 to channel 5
Switch substitute value 1 to channel 6
Switch substitute value 1 to channel 7

7 6 5 4 3 2 1 0
Byte 6 Substitute value*)

Switch substitute vallue 1 to channel 8

Switch substitute value 1 to channel 9
Switch substitute value 1 to channel 10
Switch substitute value 1 to channel 11
Switch substitute value 1 to channel 12
Switch substitute value 1 to channel 13
Switch substitute value 1 to channel 14
Switch substitute value 1 to channel 15

*) only with 6ES7 421-7BH00-0AB0

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 B-5
Parameter Sets of the Signal Modules

B.3 Parameters of the Digital Output Modules

Parameters
Table B-2 contains all the parameters you can set for the digital output modules.
You can see from the list
• Which parameters you can change with STEP 7 and
• Which parameters you can change with SFC55 “WR_PARM”.
You can also transfer the parameters set with STEP 7 to the module using SFC56
and SFC57 (see STEP 7 manuals).

Table B-2 Parameters of the Digital Output Modules

Parameter Data Can be Set with ...

Set No.
... SFC55 ... STEP 7
Target CPU for interrupts No Yes
0
Diagnostics No Yes
Diagnostic interrupt enable Yes Yes
Reaction to CPU STOP 1 Yes Yes
Switch substitute values 1 Yes Yes

Note
If you want to enable a diagnostic interrupt in the user program in data set 1, you
must first enable the diagnostics in data set 0 using STEP 7.

S7-400, M7-400 Programmable Controllers Module Specifications

B-6 A5E00069467-03
 Parameter Sets of the Signal Modules

Structure of Data Set 1

The following figure shows you the structure of data set 1 (bytes 0, 1 and 2) of the
parameters of the digital input modules.
You activate a parameter by setting the relevant bit to “1”.

7 6 0 Bit no.
Byte 0

Reaction to CPU STOP

Diagnostic interrupt enable

7 6 5 4 3 2 1 0
Byte 1 Substitute value

Switch substitute value 1 to channel 0

Switch substitute value 1 to channel 1
Switch substitute value 1 to channel 2
Switch substitute value 1 to channel 3
Switch substitute value 1 to channel 4
Switch substitute value 1 to channel 5
Switch substitute value 1 to channel 6
Switch substitute value 1 to channel 7

7 6 5 4 3 2 1 0
Byte 2 Substitute value

Switch substitute value 1 to channel 8

Switch substitute value 1 to channel 9
Switch substitute value 1 to channel 10
Switch substitute value 1 to channel 11
Switch substitute value 1 to channel 12
Switch substitute value 1 to channel 13
Switch substitute value 1 to channel 14
Switch substitute value 1 to channel 15

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 B-7
Parameter Sets of the Signal Modules

7 6 5 4 3 2 1 0
Byte 3 Substitute value

Switch substitute value 1 to channel 16

Switch substitute value 1 to channel 17
Switch substitute value 1 to channel 18
Switch substitute value 1 to channel 19
Switch substitute value 1 to channel 20
Switch substitute value 1 to channel 21
Switch substitute value 1 to channel 22
Switch substitute value 1 to channel 23

7 6 5 4 3 2 1 0
Byte 4 Substitute value

Switch substitute value 1 to channel 24

Switch substitute value 1 to channel 25
Switch substitute value 1 to channel 26
Switch substitute value 1 to channel 27
Switch substitute value 1 to channel 28
Switch substitute value 1 to channel 29
Switch substitute value 1 to channel 30
Switch substitute value 1 to channel 31

S7-400, M7-400 Programmable Controllers Module Specifications

B-8 A5E00069467-03
 Parameter Sets of the Signal Modules

B.4 Parameters of the Analog Input Modules

Parameters
Table B-3 contains all the parameters you can set for the analog input modules.
You can see from the list
• Which parameters you can change with STEP 7 and
• Which parameters you can change with SFC55 “WR_PARM”.
You can also transfer the parameters set with STEP 7 to the module using SFC56
and SFC57 (see STEP 7 manuals).

Table B-3 Parameters of the Analog Input Modules

Parameter Data Can be Set with ...

Set No.
... SFC55 ... STEP 7
Target CPU for interrupts No Yes
Measurement: Type No Yes
Measurement: Range No Yes
Diagnostics 0 No Yes
Interference frequency suppression No Yes
Smoothing No Yes
End-of-cycle interrupt No Yes
Diagnostic interrupt enable Yes Yes
1
Hardware interrupt enable Yes Yes
Reference temperature 1 Yes Yes
Upper limit value 1 Yes Yes
Lower limit value 1 Yes Yes

Note
If you want to enable a diagnostic interrupt in the user program in data set 1, you
must first enable the diagnostics in data set 0 using STEP 7.

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 B-9
Parameter Sets of the Signal Modules

Structure of Data Set 1

The following figure shows you the structure of data set 1 of the parameters of the
analog input modules.
You activate a parameter by setting the relevant bit to “1”S in bytes 0 and 1.

7 6 0 Bit no.
Byte 0

Diagnostic interrupt enable

Hardware interrupt enable
Byte 1 High byte Reference
Byte 2 Low byte temperature in 0.01 
Byte 3 High byte
Upper limit Channel 0
Byte 4 Low byte
Byte 5 High byte
Lower limit Channel 0
Byte 6 Low byte
•
•
•
Byte 31 High byte
Byte 32 Low byte Upper limit Channel 7
Byte 33 High byte
Lower limit Channel 7
Byte 34 Low byte
•
•
•
Byte 63 High byte
Upper limit Channel 15
Byte 64 Low byte
Byte 65 High byte
Byte 66 Low byte Lower limit Channel 15

Note
The representation of the limit values and the reference temperature corresponds
to the analog value representation (see Chapter 6). Please observe the range
limits in each case when setting the limit values.

S7-400, M7-400 Programmable Controllers Module Specifications

B-10 A5E00069467-03
Index

Numbers BIOS setup, M7-400, 13-16

exiting, 13-23
2-wire transducers, 15-36
key control, 13-20
connection, 15-39
opening, 13-22
4-wire transducers, 15-36
setup fields, 13-20
connection, 15-39
setup page ”Boot Options”, 13-36
setup page ”Date/Time”, 13-32
setup page ”Floppy/Card”, 13-35
A setup page ”Hard Disk”, 13-33
Accessories, 12-1 setup page ”IF modules”, 13-25
Accessories, M7-400, memory card, 13-8 setup page ”Security”, 13-30
Actuators, connecting, 6-30, 15-41 setup page ”System”, 13-38
Address area, setting, A-8 setup page ”Timeout Function”, 13-29
Address assignment, M7-400, CPUs, 13-40 setup page ”User Help”, 13-24
Ambient climatic conditions, for operating the BIOS, M7-400
M7-400 automation computer, 1-13 hot keys, 13-19
Ambient conditions, 1-11, A-2 power up, 13-17
Analog conversion, 6-15 warm restart, 13-18
Analog modules, isolated, 6-24 Block diagram
Analog value, sign, 6-31 SM 421; DI 16 x 120 VAC, 5-27
Analog value representation, 6-31 SM 422; DO 16 x 20 to 120 VAC/2 A, 5-31
for output channels, 6-43 SM 422; DO 16 x 20-120 VDC/1.5 A, 5-52
for resistance thermometers, 6-38 Bus connector, 13-15
for resistance-type sensors, 6-37
for the measuring ranges, 6-34–6-40
for thermocouples, 6-39–6-40 C
in current measuring ranges, 6-36–6-38
Cable length, A-3
in voltage measuring ranges, 6-34–6-36
selecting, A-6
Analog-digital conversion, 15-43
Cable length selector switch, A-5
Area of application, A-2
Calculation, reaction time, 16-12
ATM 478, 14-15
dimensions of the AT module, 14-21
pin assignment of the AT module, 14-16
power consumptions, calculation, 14-19
technical specifications, 14-19

B
Backup battery, 1-9

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 Index-1
Index

Circuit block diagram CPU

SM 421; DI 16 x 120/230 VAC, 5-22 mode selector switch, 4-15
SM 421; DI 16 x 120/230 VUC, 5-60 parameters, 4-22, 4-23
SM 421; DI 16 x 24 VDC, 5-63 CPU 488-4, M7-400
SM 421; DI 16 x 24/60 VUC, 5-13 performance features, 13-2
SM 421; DI 32 x 120 VAC, 5-25 technical specifications, 13-3
SM 421; DI 32 x 24 VDC, 5-7 CPU 488-5, M7-400
SM 421;DI 32 x DC 24 V, 5-10 performance features, 13-2
SM 422; DO 16 x 24 VDC/2 A, 5-41 technical specifications, 13-3
SM 422; DO 16 x 30/230 VUC/Rel 5 A, CPUs, M7-400, 13-1
5-49 expansion socket, 13-14
SM 422; DO 32 x 24 VDC/0.5 A, 5-38, 5-77 function elements, 13-3
SM 431; AI 8 x 14 bits, 6-69 main memory and interrupt assignment,
Cold restart, operating sequence, 4-18 13-40
Communication bus, 2-3, 2-5 memory card, 13-8
Communications via MPI and via mode selector switch, 13-9
communication bus, cycle load, 16-4 multipoint interface (MPI), 13-15
Compensating box, 6-19 performance features, 13-2
Config. index, M7-400, 13-27 status and fault LEDs, 13-6
Connecting, loads/actuators, 6-30 submodule receptacles for interface
Connecting cable, 7-3 submodules, 13-11
plugging in, A-6 suitable submodules, 13-13
preparing, A-6 technical specifications, 13-3
Connecting cable 721, A-10 Current sensors, 6-21
Connecting resistance thermometer, 6-23 Cycle load, communications via MPI and
Connection communication bus, 16-4
distributed, A-2 Cycle Time, increasing, 16-6
loads/actuators, 15-41 Cycle time, 16-2
Connection diagram analog input module, 6-15, 15-43
SM 421; DI 16 x 120 VAC, 5-28 analog output module, 6-28
SM 421; DI 16 x 120/230 VAC, 5-22, 5-60 calculation example, 16-18
SM 421; DI 16 x 24 VDC, 5-63 parts, 16-3
SM 421; DI 16 x 24/60 VUC, 5-13
SM 421; DI 32 x 120 VAC, 5-25
SM 421; DI 32 x 24 VDC, 5-7 D
SM 421;DI 32 x DC 24 V, 5-10
Data set, B-2
SM 422; DO 16 x 120/230 VAC/2 A, 5-47
Date, M7-400, 13-32
SM 422; DO 16 x 20 to 120 VAC/1.5 A,
Default parameters
5-53
of the AI, 6-13
SM 422; DO 16 x 20 to 120 VAC/2 A, 5-32
of the AO, 6-26
SM 422; DO 16 x 24 VDC/2 A, 5-41
of the DI, 5-65
SM 422; DO 16 x 5/230 VUC/Rel5 A, 5-50
of the DO, 5-78
SM 422; DO 32 x 24 VDC/0.5 A, 5-38, 5-77
Delay time, M7-400, 13-29
SM 422; DO 8 x 120/230 VAC/5 A, 5-44
Device security, M7-400, 13-30
Controls and indicators
Diagnostic entry, 6-14
all CPUs, 4-12
Diagnostic information
CPU 417-4H, 4-12
channel-specific, 5-5, 5-70, 5-82, 6-48, 6-49
Conversion time
system-specific, 5-82, 6-47
analog input channel, 6-15, 15-43
analog output channel, 6-28, 15-44

S7-400, M7-400 Programmable Controllers Module Specifications

Index-2 A5E00069467-03
 Index

Diagnostic interrupt, 6-14 Fault/error indication

IF 971-AIO, 15-51 in the measured value, 6-46
Diagnostic interrupt enable, 6-11 via diagnostic interrupt, 5-3, 5-68, 5-80,
digital input module, B-3, B-6 6-47
Diagnostic interrupt reaction time, 16-24 via LEDs, 6-46
Diagnostics, 5-3, 5-68, 5-80, 6-10 Fault/error messages, 5-3, 5-30, 5-68, 5-80
digital input module, B-3, B-6 Flash card, 8-3
DMA request, M7-400, 13-27 Function elements, M7-400, CPUs, 13-3
DP interface, 4-21
Drive A, M7-400, 13-35
Drive B, M7-400, 13-35 G
Dynamic parameters
Grounded operation, RS 485 repeater, 11-4
of the AI, 6-7
Grounding
of the DI, 5-2
for the analog inputs, IF 961–AIO, 15-35
for the analog outputs, IF 961–AIO, 15-35
E
Effect of faults/errors, 6-14 H
EMV, A-2
Hardware interrupt, digital input module, B-3
End-of-Cycle Interrrupt Enable, 6-11
Hardware interrupt enable, 6-12
Error LEDs
digital input module, B-3
all CPUs, 4-13
Hardware interrupt processing, 16-23
CPU 417-4 and 417-4 H, 4-14
Hardware interrupt reaction time, 16-22
CPU 417-4H, 4-14
of CPUs, 16-23
Error messages, 5-52
of signal modules, 16-23
EXM 478, 14-6
Hardware interrupt, IF 961–AIO, 15-51
addressing, 14-7
Hot keys, M7-400, 13-19
base addresses of the interface
Hot restart, operating sequence, 4-18
submodules, 14-11
interrupt assignment, 14-13
numbering of the submodule receptacles,
14-8 I
signal switching, 14-13 I/O base, M7-400, 13-26
technical specifications, 14-14 I/O bus, 2-3, 2-5
Expansion modules, M7-400, submodule
receptacles for interface submodules, 13-11
Expansion socket, M7-400, CPU, 13-14
Expansions
expansion socket, 14-2
maximum expansions, 14-3
overview, 14-2
permissible combinations, 14-5
External fault (EXTF), 5-80, 6-46

F
Fault LEDs, M7-400, CPUs, 13-6

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 Index-3
Index

IF 961-AIO, 15-32 IF 962-LPT, 15-17

addressing, 15-45 addressing, 15-19
analog input function, 15-47 AT-compatible, 15-19
analog output function, 15-46 M7-300/400 reserved, 15-20
analog value representation inputs, 15-49 characteristics, 15-17
analog value representation output, 15-50 interrupt request, 15-21
characteristics, 15-32 pin assignments, 15-18
circuit block diagram, 15-34 technical specifications, 15-22
cyclic conversion of the ADC channels, IF 962-VGA, 15-5
15-48 addressing, 15-7
electrical installation, 15-45 characteristics, 15-5
individual start of an ADC channel, 15-48 interrupts, 15-7
interrupt, 15-51 keyboard connection, 15-6
measured value sensors, connecting, 15-36 pin assignments VGA, 15-6
measuring range selection, 15-32 submodule ID, 15-7
output range selection, 15-32 technical specifications, 15-8
pin assignments, 15-33 video operating modes, 15-9
starting up, 15-45 IF 964-DP, 15-59
submodule ID, 15-51 additional information, 15-60
technical specifications, 15-52 addressing, 15-62
terminal connection diagram, 15-33 adressing (intermediate) memory, 15-62
unswitched channels, 15-36, 15-45 characteristics, 15-59
IF 961-CT1, 15-54 interrupts, 15-62
addressing, 15-57 pin assignments, 15-61
characteristics, 15-54 technical specifications, 15-63
technical specifications, 15-58 IM 314, A-2
IF 961-DIO, 15-23 Input delay, digital input module, B-3
addressing, 15-26 Input ranges
acknowledgment register, 15-27 bipolar, 6-32
digital input function, 15-26 life-zero, 6-33
digital output function, 15-27 unipolar, 6-32
interrupt enable register, 15-28 Insertion rules, interface submodule, 15-4
interrupt register, 15-27 Interface, selecting, A-6
mode register, 15-29 Interface module, signal switching, 15-3
selection register falling edge, 15-29 Interface modules
selection register rising edge, 15-28 IM 460-0 and IM 461-0, 7-5
characteristics, 15-23 IM 460-1 and IM 461-1, 7-8
pin assignments, 15-24 IM 460-3 and IM 461-3, 7-11
technical specifications, 15-30 Interface selector switch, A-5
IF 962-COM, 15-10
addressing, 15-12
AT-compatible, 15-12
M7-300/400-reserved, 15-13
characteristics, 15-10
interrupts, 15-15
pin assignments COM, 15-11
technical specifications, 15-16

S7-400, M7-400 Programmable Controllers Module Specifications

Index-4 A5E00069467-03
 Index

Interface submodules Memory submodules, M7-400, note on

addressing, 15-2 ordering, 12-3
in the AT-compatible I/O address area, Mode selector switch, M7-400, CPUs, 13-9
14-7 Monitoring functions, 4-10
in the M7-400-specific I/O address area, MPI, 4-19
14-7 MSM 478
base address, 14-10, 14-11 characteristics, 14-22
insertion rules, 15-4 parallel port (LPT), 14-23
interrupt assignment, 14-13, 15-3 technical specifications, 14-25
numbering of the submodule receptacles, Multipoint interface MPI, M7-400, CPUs, 13-15
14-8
shared interrupt, 15-3
signal switching, 14-13 N
submodule ID, 15-4
NAMUR recommendation, 3-4
Interference frequency suppression, 6-9
Internal fault (INTF), 3-14, 3-15, 5-80
Internal Faults (INTF), 6-46
Interrupt assigment, M7-300, CPUs, 13-40 O
Interrupt source, M7-400, 13-26 Operating system, scan time, 16-5, 16-6
Output ranges
bipolar, 6-41
K life-zero, 6-42
unipolar, 6-41
Key control, M7-400, 13-20
Output type/range, 6-26

L P
LBA mode, M7-400, 13-34
Parameter assignment, tool, 6-5, 6-25
LEDs, A-5
Parameters, 4-22
Limit value, 6-11
analog input modules, B-9
Loads, connecting, 6-30, 15-41
digital input modules, B-3
digital output modules, B-6
PARM_MOD, B-2
M Password, M7-400, 13-31
M7-400 Performance features, M7-400, CPUs, 13-2
ambient climatic conditions for use, 1-13 Permissible potential differences, A-3
main memory assignment, 13-40 PG cable, 12-2, 13-15
Main memory assignment, 13-40 Pin assignment, RS 485 repeater, 11-6
Maximum expansion, A-3 Process image updating, processing time, 16-4
Measured value sensors Process interrupt
connecting, 6-24 in the S7-400H system, 4-23
isolated, 6-24, 15-37 SM 321-7BH00, 4-23
non-isolated, 15-38 Processing time
Measuring range submodules, 6-2 process image updating, 16-4
settings, 6-4 user program, 16-4
Measuring ranges, analog input channels, 6-2 Protection class, 1-12
Memory assignment, M7-400, 13-40 Protection level, 4-16
Memory card, 8-2 setting, 4-16
Memory card, M7-400, CPUs, 13-8
Memory reset, operating sequence, 4-17

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 Index-5
Index

Q S
Quick memory test, 13-37 S5 modules, configuring, A-9
Scan cycle control, scan time, 16-6
Scan time
R operating system, 16-5
scan cycle control, 16-6
Rack
Secondary cache size, M7-400, 13-38
CR2, 2-7
Select boot sequence, M7-400, 13-36
ER1, 2-8
Select submodule, M7-400, 13-26
ER2, 2-8
Settling time, analog output, 6-28, 15-44
UR1, 2-3, 2-5
Setup fields, M7-400, 13-20
UR2, 2-3, 2-5
Setup page, M7-400
RAM card, 8-3
”Boot Options”, 13-36
Reaction time, 16-12
”Date/Time”, 13-32
calculation, 16-12
”Floppy/Card”, 13-35
calculation of, 16-14, 16-16
”Hard Disk”, 13-33
diagnostic interrupt, 16-24
”IF modules”, 13-25
hardware interrupt, 16-22
”Security”, 13-30
longest, 16-15
”System”, 13-38
parts, 16-12
”Timeout Function”, 13-29
reducing, 16-16
User Help, 13-24
shortest, 16-14
SFC55 WR_PARM, B-2
Read only, M7-400, 13-30
SFC56 WR_DPARM, B-2
Redundant mode, 3-5
SFC57 PARM_MOD, B-2
Redundant power supplies, 3-5
Shared destination, M7-400, 13-27
Reference junction, 6-9, 6-18
SIG destination, M7-400, 13-28
Reference temperature, 6-9
SIG source, M7-400, 13-28
Repeater. See RS 485 Repeater
Sign, analog value, 6-31
Resistance, 6-23
Smoothing, 6-9
Resistance thermometer, connections, 15-40
Spare parts, 12-1
Resolution, 6-31
Static parameters
Response time, analog output, 6-29, 15-44
of the AI, 6-5
RS 485 repeater, 11-1
of the AO, 6-25
appearance, 11-3
of the DI, 5-2
application, 11-2
Status LEDs, M7-400, CPUs, 13-6
definition, 11-2
Structure of thermocouples, 6-16
grounded, 11-4
Submodule IDs, interface submodule, 15-4
grounded operation, 11-4
rules on construction, 11-2
ungrounded, 11-4
ungrounded operation, 11-4

S7-400, M7-400 Programmable Controllers Module Specifications

Index-6 A5E00069467-03
 Index

Submodule receptacles for interface Technical specifications

submodules, M7-400 CPU 412-1, 4-24
CPUs, 13-11 CPU 412-2, 4-27
expansion modules, 13-11 CPU 414-2, 4-31
Suitable submodules, M7-400, CPUs, 13-13 CPU 414-3, 4-35
System cache, M7-400, 13-38 CPU 416-2, 4-39
System ROM, 13-39 CPU 416-3, 4-43
System ROM, M7-400, 13-39 CPU 417-4, 4-47
CPU 417-4 H, 4-51
IF 961-AIO, 15-52
T IF 961-DIO, 15-30
IF 962-COM, 15-16
Technical Specifications
IF 962-LPT, 15-22
SM 421; DI 16 x 120 VAC, 5-29
IF 962-VGA, 15-8
SM 421; DI 16 x 120/230 VAC, 5-23, 5-61
IF 964-DP, 15-63
SM 421; DI 16 x 24 VDC, 5-75
IM 460-0 and 461-0, 7-7
SM 421; DI 16 x 24/60 VUC, 5-19
IM 460-1 and 461-1, 7-10
SM 421; DI 32 x 120 VAC, 5-26
IM 460-3 and 461-3, 7-13
SM 421;DI 32 x DC 24 V, 5-8, 5-11
PS 405 10A, 3-32, 3-34
SM 422; DO 16 x 120/230 VAC/2 A, 5-48
PS 405 10A R, 3-34
SM 422; DO 16 x 20 to 120 VAC/2 A, 5-36
PS 405 20A, 3-36, 3-38
SM 422; DO 16 x 20-120 VAC/2 A, 5-58
PS 405 4A, 3-30
SM 422; DO 16 x 24 VDC/2 A, 5-42
PS 407 10A, 3-23
SM 422; DO 16 x 30/230 VUC/Rel5 A, 5-51
PS 407 10A R, 3-23
SM 422; DO 32 x 24 VDC/0.5 A, 5-39, 5-86
PS 407 20A, 3-26, 3-28
SM 422; DO 8 x 120/230 VAC/5 A, 5-45
PS 407 4A, 3-20
RS 485 repeater, 11-6
SM 432; AO 8 x 13 bits, 6-126
Technical specifications, M7-400, CPUs, 13-3
Terminating connector, A-3, A-12
Thermocouples, 6-16
compensation box, 6-19
how they work, 6-16
structure, 6-16
Time, M7-400, 13-32
Timeout mode, M7-400, 13-29
Transducer
2-wire, 15-36
4-wire, 15-36
Type configured, M7-400, 13-26
Type of measurement, 6-8
analog input channels, 6-2
Types of thermocouples, 6-16

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 Index-7
Index

U Voltage sensors, 6-20, 15-36

connection, 15-38
Ungrounded operation, RS 485 repeater, 11-4
User program processing time, 16-4
W
V Warm restart, operating sequence, 4-18
Warm restart, M7-400, 13-18
Value, M7-400, 13-27
WR_DPARM, B-2
Video ROM, 13-39
WR_PARM, B-2

S7-400, M7-400 Programmable Controllers Module Specifications

Index-8 A5E00069467-03
 Siemens AG
A&D AS E 81

Oestliche Rheinbrueckenstr. 50
D-76181 Karlsruhe
Federal Republic of Germany

From:
Your Name: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Your Title: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Company Name: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Street: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
City, Zip Code _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Country: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Phone: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Please check any industry that applies to you:

r Automotive r Pharmaceutical
r Chemical r Plastic
r Electrical Machinery r Pulp and Paper
r Food r Textiles
r Instrument and Control r Transportation
r Nonelectrical Machinery r Other _ _ _ _ _ _ _ _ _ _ _
r Petrochemical

S7-400, M7-400 Programmable Controllers Module Specifications

A5E00069467-03 1
$
Remarks Form
Your comments and recommendations will help us to improve the quality and usefulness of our
publications. Please take the first available opportunity to fill out this questionnaire and return it
to Siemens.

Please give each of the following questions your own personal mark within the range from 1 (very
good) to 5 (poor).

1. Do the contents meet your requirements?

2. Is the information you need easy to find?
3. Is the text easy to understand?
4. Does the level of technical detail meet your requirements?
5. Please rate the quality of the graphics/tables:

Additional comments:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

S7-400, M7-400 Programmable Controllers Module Specifications

2 A5E00069467-03