Your S7-200 Has No Ethernet Port — Here's How to Network It Anyway
Last updated: June 2026 · 8 min read
The Scenario
You have a Siemens S7-200 PLC running a critical production line. It's been working perfectly for 15 years. Now your boss wants real-time production data on a dashboard. Your IT team wants to pull data into the MES. Your customer wants remote monitoring capability.
You open the S7-200 cabinet and look at the CPU module. There's a single DB9 port — the PPI (Point-to-Point Interface) programming port. No Ethernet. No RJ45. No WiFi. Just that one 9-pin serial port that speaks a proprietary Siemens protocol at 9.6K to 187.5K baud.
Now what?
The Wrong Approach: Replace the PLC
The first quote you'll get is probably from a Siemens distributor: "Upgrade to S7-1200 with PROFINET." That means:
- New CPU: $800-1,500
- New I/O modules (if the old ones don't fit): $500-2,000
- Rewrite the PLC program: 2-5 days of engineering time
- Production downtime: 1-3 days for commissioning
- Total: $3,000-8,000 per machine + significant downtime risk
For a factory with 20 S7-200 PLCs, that's $60,000-160,000. And the old PLCs weren't broken — they were doing their job perfectly.
The Right Approach: Add a Protocol Converter
A protocol converter (also called a communication processor or Ethernet adapter) is a small module that plugs directly into the S7-200's existing DB9 PPI port. It does one thing: translates between the PLC's native PPI protocol and standard Ethernet TCP/IP.
How It Works — Step by Step
What You Can Do After Installation
Once the protocol converter is installed, the S7-200 becomes a fully networked device:
- Program and debug remotely — No more walking to the machine with a laptop and PC Adapter cable. Debug from your desk, or from another country.
- Connect SCADA/HMI software — WINCC, SIMATIC NET, KEPWARE OPC, and any Modbus TCP client can read/write data over Ethernet. Support for 8-24 simultaneous connections depending on the model.
- Send data to MES/ERP — The module exposes data via Modbus TCP, which virtually any enterprise system can consume.
- Connect to cloud — Feed data to an edge gateway → MQTT → Azure IoT Hub or AWS IoT for cloud dashboards.
- Exchange data with other PLCs — Built-in data exchange function can automatically share data between multiple S7-200 PLCs on the same network.
The Bonus: Built-in Modbus Gateway
Most protocol converters also include an RS-485 expansion port that can operate as a Modbus master or slave. This means you can connect third-party Modbus devices (power meters, temperature controllers, VFDs) directly to the same module — one device serving double duty.
Cost Comparison
| Approach | Cost per PLC | Downtime | Programming Changes |
|---|---|---|---|
| Replace with S7-1200 | $3,000-8,000 | 1-3 days | Full rewrite |
| Siemens CP 243-1 | $1,000-1,500 | 2-4 hours | HW config changes |
| Protocol Converter | $150-300 | Zero (hot-plug) | None |
Important Safety Notes
- Safe to hot-plug on PPI/MPI ports — The module draws power from the port and uses the same signals as your programming cable. No risk to the PLC.
- Do NOT hot-plug on active PROFIBUS DP ports — If the DB9 port is connected to DP slaves (drives, I/O stations), the momentary voltage disturbance during insertion could trigger a bus fault. Stop the PLC first, then plug in.
- Check the port is not in use — If your HMI is connected to the same PPI port, you'll need to either chain the devices or use a different port.
What About S7-300 and S7-400?
The same approach works. S7-300 and S7-400 use MPI (Multi-Point Interface) and PROFIBUS instead of PPI, but the principle is identical. Different converter models support different bus types:
- S7PPI model — For S7-200 and S7-200 SMART (PPI bus, 9.6K-187.5K baud)
- S7MPI model — For S7-200/300/400 and SINUMERIK 840D (PPI/MPI/PROFIBUS, up to 6Mbps)
Both models provide identical Ethernet functionality. The S7MPI model costs slightly more due to the higher-speed PROFIBUS support.
Real-World Deployment
Related Articles
- How to Connect Old Siemens PLCs to Modern Networks
- How to Collect Data from CNC Machines
- OPC UA vs MQTT vs Modbus: Protocol Comparison
FAQ
- Q: Will this void my PLC warranty?
- No. The protocol converter uses the standard programming port — the same connection your maintenance engineer uses with a PC Adapter cable. It's a passive device that doesn't modify the PLC hardware or software.
- Q: Can I still use my Siemens HMI (TD200, TD400)?
- It depends on the port configuration. If your HMI uses the same PPI port, you'll need to set the converter to 'bridge mode' — the HMI connects to the converter's secondary DB9 port, and both devices share the bus. Alternatively, use a different port for the HMI.
- Q: What's the maximum communication speed?
- For PPI bus: up to 187.5K baud. For MPI/PROFIBUS: up to 6Mbps. The module auto-detects the baud rate — no manual configuration needed.
- Q: Does the converter store PLC data?
- No. It's a transparent bridge — it passes data between the PPI/MPI bus and Ethernet in real-time. No data buffering or storage. For data logging, connect a database or edge gateway on the Ethernet side.
- Q: How many devices can connect to one converter via Ethernet?
- Depending on the model: 8, 16, 24, or 32 simultaneous Ethernet clients. Each client can independently read/write PLC data.