Make the following setting in CPU device configuration:

Under ibaREQ_DB (DB15) block properties – Attributes disable the Optimized block access option.

S7-1500 CPUs with TCP/IP connection mode (not TCP/IP S7-1x00)

Up to TIA Portal V18, make the following settings in the TIA Portal:

In the CPU properties (Properties GeneralProtectionConnection mechanisms), activate the access via PUT/GET communication.

For the S7-1200, this option is only available firmware V4.0 or higher.

As of TIA Portal V19 and CPU firmware V3.1 (V4.7 for S7-1200), activate the PUT/GET access for S7-1500 and S7-1200 CPUs as follows:

  1. In the project navigation, navigate to Security settings – Users and roles – Roles tab.

  2. Add a new role and enter a name, e.g. "Put/Get".

  3. In the Runtime rights tab, select your PLC under Function rights categories.

  4. Under Function rights, activate the access level HMI access.

  5. Under Users and Roles, go to the Users tab.

  6. Activate the user "Anonymous".

  7. Confirm the following message with <OK>.

  8. Under Assigned roles, assign the newly created role to the anonymous user.

  9. In the Device view, open the properties of the CPU.

  10. In the section navigation, navigate to Protection & Security – Connection mechanisms.

  11. Activate the option Permit access with PUT/GET communication from remote partner.

  12. Save and compile the configuration and load the changes into the CPU.

You can find further information in the SiePortal under https://support.industry.siemens.com/cs/ww/en/view/109925755.

S7-1500 access protection

You can enable access protection on S7-1500 CPUs. There is the following dependency with ibaPDA:

Access level

CPU access

ibaPDA reads symbolic from CPU

S7 access

Full access (no protection)

HMI, read, write

OK

OK

Read access

HMI, read

OK

OK

HMI access

HMI

No

OK

No access (complete protection)

-

No

No