How to Fix Modbus RTU Timeout Error 16#80C8 on Siemens S7-1200

If you connect a third-party Modbus RTU device to a Siemens S7-1200 PLC (using the CM1241, CB 1241, or ET 200SP CM PtP modules), the MB_MASTER instruction block frequently encounters a communication fault. When the ERROR bit goes high and the STATUS output locks, you are likely facing the notorious Modbus error 80C8 (Timeout).

Block: MB_MASTER (FB 43)
REQ:    TRUE
DONE:   FALSE
ERROR: TRUE
STATUS: 16#80C8

Description: Timeout during Modbus RTU communication. The slave device did not respond within the defined RESP_TO time.

In Siemens TIA Portal, 16#80C8 strictly indicates a “Timeout”. The PLC was able to send out a Modbus request frame but did not receive any valid response from the slave device. Verify the following engineering checklist before replacing the communication module or assuming hardware failure. Most of those timeout errors (roughly 90 percent) are caused by physical layer inversions or logical polling collisions.

Step 1: The RS485 Polarity Trap (A/B Wires)

This is the leading cause of initial communication failure when bridging Siemens hardware with third-party inverters, power meters, or VFDs.

The Fix: If 16#80C8 occurs consistently and the slave’s RX/TX indicators show no activity, swap the A and B wires on the slave side (Siemens Pin 3 to positive, Pin 8 to negative). Reversing the polarity will not cause electrical damage; it merely prevents signal interpretation.

The 120-Ohm Termination Resistor

For long daisy-chains (over 50 meters), signal reflection causes garbled frames which the CM1241 drops. Always install 120-ohm resistors at both ends of the RS485 bus to prevent signal bounce and subsequent 16#80C8 errors.

Other Common Physical Layer Culprits:

• Baud Rate & Parity Mismatch: Ensure your MB_COMM_LOAD block parameters perfectly match the slave device’s factory defaults. If the PLC is set to 9600 8N1 but the slave is 19200 8E1, the frame is unreadable, resulting in an immediate 16#80C8 timeout.

Step 2: Execution Order (MB_COMM_LOAD)

In the PLC cycle the CM 1241 serial port must be fully initialized before any polling requests can be made.

• Ensure the MB_COMM_LOAD block executes only once (typically triggered by the FirstScan system memory bit during startup).
• Do not trigger the REQ pin of the MB_MASTER block until MB_COMM_LOAD.DONE returns TRUE. Polling an uninitialized port will immediately yield an 80C8 timeout.

Step 3: Polling Collisions & Bus Decoupling

Modbus RTU is inherently a half-duplex serial protocol. Aggressively polling slave devices without allowing sufficient processing and response time will result in bus collisions.

• Check your RESP_TO parameter: In the MB_COMM_LOAD background Data Block (DB), the Response Timeout defaults to 1000 ms. When polling older legacy devices that are slower it is recommended to increase this value to 2000ms.
• Implement a State Machine: Never utilize a continuous clock pulse (e.g., a 1Hz Clock Memory bit) to trigger MB_MASTER. Instead, utilize the DONE or ERROR outputs of the block to trigger a short delay timer (e.g., 50ms), and use that timer’s completion to trigger the subsequent REQ.

// Step 1: Wait for Device to finish (DONE or ERROR)
IF "MB_MASTER_DB".DONE OR "MB_MASTER_DB".ERROR THEN
    "Polling_State" := 10;
END_IF;

// Step 2: Enforce a breathing delay for RS485 bus
"Inter_Frame_Delay".TON(IN := ("Polling_State" = 10),
                        PT := T#50ms);

// Step 3: Trigger next Request ONLY after delay
IF "Inter_Frame_Delay".Q THEN
    "MB_MASTER_REQ" := TRUE;
    "Polling_State" := 20;
END_IF;