alivirgo/major-ai-skills/siemens-tia-portal

┌─────────────────────────────────────────────────────────────┐
│                 TIA Portal System Architecture              │
│                                                             │
│  Engineering & Openness API Layer                           │
│  ├── TIA Portal V18/V19 IDE (Project View & Portal View)    │
│  ├── TIA Openness API (.NET Framework `Siemens.Engineering`)│
│  └── WinCC Unified (HTML5 Web Engine & JavaScript Runtime)  │
│                                                             │
│  SIMATIC Execution & Hardware Core                          │
│  ├── S7-1200 / S7-1500 Multi-Tasking Execution Engine       │
│  ├── Cyclic OB1 Organization Blocks, Cyclic Interrupt OB30 │
│  └── Data Blocks (Standard DB vs Optimized Block Access)    │
│                                                             │
│  Industrial Communications & S7 Subsystem                   │
│  ├── S7comm / S7comm-plus Industrial Protocol (TCP Port 102)│
│  ├── PROFINET IO Real-Time (RT / IRT Isochronous Real-Time) │
│  └── Direct Socket & Snap7 Industrial Communication Engine  │
└─────────────────────────────────────────────────────────────┘

"""
Siemens SIMATIC S7-1200 / S7-1500 PLC Communication Client (Snap7)
Connects to S7 PLC over TCP port 102, reads Data Block (DB1) variables, and writes setpoints.
"""
import sys
import struct
import snap7
from snap7.util import get_bool, set_bool, get_real, set_real, get_int, set_int
PLC_IP = "192.168.0.1"
RACK = 0
SLOT = 1 # Slot 1 for S7-1200/S7-1500; Slot 2 for S7-300/S7-400
def monitor_s7_plc():
    print(f"--- [CONNECTING TO SIEMENS S7 PLC: {PLC_IP} (Rack: {RACK}, Slot: {SLOT})] ---")
    client = snap7.client.Client()
    try:
        client.connect(PLC_IP, RACK, SLOT)
        if client.get_connected():
            print("✅ Successfully connected to SIMATIC S7 CPU via S7comm (Port 102)!")
            # 1. Read Data Block 1 (DB1) - Read 16 bytes starting at Offset 0
            # DB Layout:
            # Offset 0.0: bMotorRunning (Bool)
            # Offset 2.0: rSpeedActual (Real / Float32)
            # Offset 6.0: iPieceCount (Int16)
            db_number = 1
            data = client.db_read(db_number, 0, 16)
            is_running = get_bool(data, 0, 0)
            actual_speed = get_real(data, 2)
            piece_count = get_int(data, 6)
            print(f"\n--- [DB{db_number} LIVE MONITORING] ---")
            print(f"• Motor Running:   {is_running}")
            print(f"• Actual Speed:    {actual_speed:.2f} RPM")
            print(f"• Piece Count:     {piece_count} units")
            # 2. Write Setpoint Tag: DB1.DBD8 (rTargetSpeed = 1500.0 RPM)
            print("\nWriting Target Speed Setpoint (1500.0 RPM) to DB1.DBD8...")
            write_buffer = bytearray(4)
            set_real(write_buffer, 0, 1500.0)
            client.db_write(db_number, 8, write_buffer)
            print("✅ Setpoint successfully written to PLC memory.")
            client.disconnect()
        else:
            print("🚨 Failed to connect to S7 PLC.")
    except Exception as e:
        print(f"🚨 S7 Communication Error: {e}")
        print("Note for S7-1200/1500: Ensure 'Permit access with PUT/GET' is enabled in CPU Properties -> Protection, and DB is set to Non-Optimized (Standard).")
if __name__ == "__main__":
    monitor_s7_plc()

# 1. Launch TIA Portal V19 via Command Line
"C:\Program Files\Siemens\Automation\Portal V19\Bin\Siemens.Automation.Portal.exe"
 
# 2. Query S7comm Port 102 Connectivity
python3 -c "import socket; s = socket.socket(); s.connect(('192.168.0.1', 102)); print('S7 Port 102 Open!'); s.close()"