TSAP for S7 Connections

Home  Back  Next

The S7 has the family types

S7 200 / 300 / 400 / 1200

and the


If the "optimized" data blocks need to be used set the check mark on the "1500" in the protocol settings.

S7 200 / 300 / 400 / 1200

For non-configurable connections (= default connections), so-called standard TSAPs are used. For these, the following rules apply:

First group

contains device IDs for which resources are provided in the S7:

01: PG or PC

02: OS (operating or monitoring device)

03: Others, such as OPC server, Simatic S7 PLC...

Second group

contains the addresses of these components

Left character (bits 7....4):

Rack number multiplied by 2

Right character (bits 3...0):

CPU slot (< 16). S7-300 always uses slot 2

The standard TSAPs MUST be used on the PLC side (Dest TSAP field of the device).

The local TSAP of the device (Own TSAP field) may be selected freely, but should have the same format. We recommend to use 01 01 in the Own TSAP field.


03 02 Communication with the S7 CPU in rack 0, slot 2

03 43 Communication with the S7 CPU in rack 2, slot 3

03 2E Communication with the S7 CPU in rack 1, slot 14


The S7-1200 is usually addressed with the TSAP 02 01 (binary).


The S7-300 is usually addressed with the TSAP 03 02 (binary).

S7 1500

The S7 1500 does not use the service and rack addressing.

The own TSAP should be binary 06 00, the destination TSAP is ASCII "SIMATIC-ROOT-ES"



To enter the binary standard TSAPs, use the HEX field (left field).



The S7 300 or 400 protocol can be used for the S7 1500 too. But then the optimized data blocks can not be accessed.


see also: Routing TSAPs