Home

PLX30 Series - absatraining.com

1. IP Address IP address of processor to reach Slot Number 1 for PLC5 amp SLC processor slot number of ControlLogix Page 92 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual 6 MBTCP Protocol In This Chapter 6 1 MBTCP Functional Overvlew tnt 94 6 2 MBTCP Configuration ccccccccccceeeeeeeeeeceeeeeceaeeeeaaeeceeeeseaeeesaaeeseneeseeeesaeeesaaeseenees 98 6 3 OEB e te 106 This chapter contains information specific to PLX30 series gateways with a Modbus TCP IP MBTCP protocol driver ProSoft Technology Inc Page 93 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 6 1 MBTCP Functional Overview The PLX30 Modbus TCP IP MBTCP protocol can be used to interface many different protocols into the Schneider Electric Quantum family of processors as well other devices supporting the protocol The MBTCP protocol supports both Client and server connections The gateway supports a Client connection on the TCP IP network to interface with processors and other server based devices using a user constructed command list of up to 100 entries The gateway s internal database is used as the source for write commands to the remote processors Data collected from the processors using read commands is placed in the gateway s database Data
2. Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is Word and Byte typically used when dealing with floating point or other swap multi register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to a PLC5 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed
3. cc ccceecceceeeceeeaeeeeneeceeeeeceaeeesaaeeseeeeseaeeesaeeesaeeseneeseaees 52 5 1 1 EtherNet IP Client 53 5 2 EIP eene H te EE 54 5 2 1 EIP Class 3 Server Connection cccccceseeeceeseeceeeeeceaeeeeaaeeseseeseeeeseaeessaeeeeeeeeeaees 54 5 2 2 EIP Class 1 Connection 56 5 2 3 EIP Class 3 Client UClient x Connecton cee eeeeeeeeeeee sete eeeaeeetaeeeeeeeesaees 58 5 3 EIP RE e lee 70 5 3 1 PCB Diagnostics Men 70 5 3 2 EIP Status Data in Upper Memonm 70 5 3 3 EIP Error Codes ege Ee e ee eee 73 5 4 EIP Reterence ss eege etched ieee natin Eege 77 5 4 1 SLC and MicroLogix Specifics 0 ceccccecceeeeeeeeeeeceeeeeceaeeesaaeeeeaeeseeeesaeeeeaeeeeeeeeas 77 5 4 2 PLC5 Processor Specifics uiii iaaa aa iaaa iaa aaah 81 5 4 3 ControlLogix and CompactLogix Processor Gpecflces 85 5 4 4 EIP Command Entry Fom nenn 92 6 MBTCP Protocol 93 6 1 MBTCP Functional Overvlew 94 6 1 1 General Specifications Modbus TCP IP c ccssececeeeeeeeeeeeeseeseeeeeseaeeeeeeseeneeeaas 94 6 1 Internal Databases sarres n a EE 95 6 2 MBIGP Configuration assoi er akc ian daa tind eel dae iaaa 98 6 2 1 IOTENR e SE 98 6 2 2 MBTCP Glient xX a aae a iad ech oan en tia elena 100 6 2 3 MBTCP Client x Commande 102 6 3 MBIGP RT ele 106 6 3 1 NEIE e ele 106 6 3 2 MBTCP Status Data in Upper Memonm 106 6 3 3 MBIGP Error CodeSiviect aia ia ea dann Al ala diated 109 6 4 MBTGPReferenc ica aint ainsi aces tinct anda nite atinh beeen cen niente
4. Decimal Hex Description 40 Oxffd8 Too few parameters 41 Oxffd7 Invalid enable code 42 Oxffd6 Internal address gt maximum address 44 Oxffd4 Count parameter set to 0 45 Oxffd3 Invalid function code 46 Oxffd2 Invalid swap code 47 Oxffd1 Invalid TSAP code Page 186 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual 9 4 SIE Reference 9 4 1 Maximum Register Counts CPU315 2 DP Data Block Address Type Function Data Type Max Reg Cnt Max Reg Cnt DB READ BOOL 1 Write BOOL 1 READ BYTE 164 Write BYTE 164 READ DINT 41 Write DINT 41 READ REAL 41 Write REAL 41 READ INT 82 Write INT 82 READ TIME 82 Write TIME 41 READ COUNT 82 Write COUNT 82 Address Type Function Data Type Max Reg Cnt Timer READ TIME 1 Counter Address Type Function Data Type Max Reg Cnt Counter READ Count 111 ProSoft Technology Inc Page 187 of 200 July 10 2013 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Flag Address Type Function Data Type Max Reg Cnt Max Reg Cnt Flag READ BOOL 1 Write BOOL 1 READ BYTE 222 Write BYTE 212 READ DINT 55 Write DINT 53 READ REAL 55 Write REAL 53 READ I
5. 12288 0xD000 Not used 8192 OxE000 Not used OxFOnn Error code in the EXT STS byte nn contains EXT error code Errors When EXT STS Is Present Code Int Code Hex Description 4096 0xF000 Not used 4095 OxF001 A field has an illegal value 4094 OxF002 Less levels specified in address than minimum for any address 4093 0xF003 More levels specified in address than system supports 4092 0xF004 Symbol not found 4091 0xF005 Symbol is of improper format 4090 OxFO06 Address does not point to something usable 4089 OxFO07 File is wrong size 4088 OxF008 Cannot complete request 4087 OxFO09 Data or file is too large 4086 OxFOOA Transaction size plus word address is too large 4085 OxFOOB Access denied improper privilege 4084 OxFOO0C Condition cannot be generated resource is not available 4083 OxFOOD Condition already exists resource is already available 4082 OxFOOE Command cannot be executed 4081 OxFOOF Histogram overflow 4080 OxF010 No access 4079 OxFO11 Illegal data type 4078 OxF012 Invalid parameter or invalid data 4077 OxF013 Address reference exists to deleted area 4076 OxF014 Command execution failure for unknown reason 4075 OxFO15 Data conversion error 4074 OxF016 Scanner not able to communicate with 1771 rack adapter 4073 OxFO17 Type mismatch 4072 OxF018 1171 Gateway response was not valid 4071 OxF019 Duplicate
6. An incremented received sequence number in Word 0 signals that new data is available in Words 1 2 and 9 through 136 Words 3 through 8 are updated continuously by the gateway whether or not the port is receiving messages If the gateway is configured to swap the data bytes received the receive driver will swap the bytes in each word received before placing the data into the data block Because the data received may contain an odd number of bytes the length of the message received will be incremented by 1 when an odd number of bytes are received and the swap option is utilized This is to avoid losing the last byte of data in the message Page 156 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual Transmit Data Data to transmit by the transmit driver is placed in the gateway s internal database in a fixed format at the location selected by the user The transmit driver is disabled if the database start location is set to a value of 1 The following table shows the structure of transmit data Word Offset Description 0 Transmit sequence number This number is incremented by the user s application for each new packet to transmit 1 Number of characters received 0 to 256 from last receive request 2 Inter character delay for this message milliseconds between characters 3 Number of characters to transmit on port 0 to 255 4 to 131 Data to transmit o
7. The status of coils 20 to 27 is shown as CD HEX 1100 1101 Binary Reading left to right this shows that coils 27 26 23 22 and 20 are all on The other coil data bytes are decoded similarly Due to the quantity of coil statuses requested the last data field which is shown 1B HEX 0001 1011 Binary contains the status of only 5 coils 52 to 56 instead of 8 coils The 3 left most bits are provided as zeros to fill the 8 bit format Read Input Status Function Code 02 Query This function allows the user to obtain the ON OFF status of discrete inputs in the addressed server PC Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial input address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 inputs to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The inputs are numbered form zero input 10001 zero input 10002 one input 10003 two and so on for a 584 The following table is a sample read input status request to read inputs 10197 to 10218 from server number 11 Adr Func Data Start PtHi DataStartPtLo Data of Pts Hi Data of Pts Lo Error Check Field 11 02 00 C4 00 16 CRC Response An example response to Read Input Status
8. 0 to 3998 Specifies the internal database address to use as the zero address or starting point for Input Register 16 bit integer data Input Register data is read only data requested by Modbus Function Code 4 commands Read Input Registers For example if this parameter is set to 500 and a Function Code 4 command is received requesting Input Register address 0 virtual Modbus address 30001 or 300001 the data returned in the response will be the value at register 500 in the gateway s database Output Offset 0 TO 3998 Specifies the internal database address to use as the zero address or starting point for binary output Coil data Coil data is read by Modbus Function Code 1 commands Read Coils and written by Function Codes 5 Force Single Coil or Function Code 15 Force Multiple Coils For example if this parameter is set to 50 anda Function Code 1 command is received requesting Coil address 0 virtual Modbus Coil address 00001 or 000001 the data returned in the response will be the value at register 50 bit 0 in the gateway s database Holding Register Offset 0 to 3998 Specifies the internal database address to use as the zero address or starting point for Holding Register 16 bit integer data Holding Register data is read by Modbus Function Code 3 commands Read Holding Registers and written by Function Code 6 Preset Single Register or Function Code 16 Preset Multiple Registers For example if this para
9. 6 and 16 will interpret floating point values for registers as specified by the two following parameters Float Start 0 to 32767 Specifies the first register of floating point data All requests with register values greater than or equal to this value will be considered floating point data requests This parameter is only used if the Float Flag is enabled For example if a value of 7000 is entered all requests for registers 7000 and above will be considered as floating point data Float Offset 0 to 3998 Specifies the start register for floating point data in the internal database This parameter is used only if the Float Flag is enabled For example if the Float Offset value is set to 3000 and the float start parameter is set to 7000 data requests for register 7000 will use the internal Modbus register 3000 Protocol RTU or Specifies the Modbus protocol version to be used on the port ASCII Baud Rate Various Specifies the baud rate to be used on the port Parity None Parity is a simple error checking algorithm used in serial Odd communication This parameter specifies the type of parity checking Even to use All devices communicating through this port must use the same parity setting Data Bits 7or8 Specifies the number of data bits for each word used by the protocol All devices communicating through this port must use the same number of data bits Stop Bits 1or2 Stop bits signal the end of a character in the data stream For most appl
10. Actively reads data from and writes data to Modbus TCP IP devices using MBAP e Upto 10 Client connections with multiple commands to talk to multiple servers Page 94 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual Modbus TCP IP Server e The server driver accepts incoming connections on Service Port 502 for Clients using Modbus TCP IP MBAP messages and connections on Service Port 2000 or other Service Ports for Clients using Encapsulated Modbus messages e Supports multiple independent server connections for any combination of Service Port 502 MBAP and Service Port 2000 Encapsulated e Upto 20 servers are supported Modbus Commands 1 Read Coil Status 15 Force Write Multiple Coils Supported 2 Read Input Status 16 Preset Write Multiple Client and Server 3 Read Holding Registers Holding Registers 4 Read Input Registers 22 Mask Write Holding 5 Force Write Single Coil Register Slave Only 6 Preset Write Single 23 Read Write Holding Holding Register Registers Slave Only Configurable Gateway IP Address Parameters PLC Read Start Register MW Client and Server PLC Write Start Register MW Number of MBAP and MBTCP servers Gateway Modbus Read Start Address Gateway Modbus Write Start Address Configurable Minimum Command Delay Parameters Response Timeout Client Only Retry Count Command Error Pointer Command List Up to
11. An example of the dialog box follows Message Configuration message 4 x Configuration Communication Tag Message Type CIP Data Table Write e Source Tag pic5data 0 v New Tag Number Of Elements 10 Destination Element fint_data 0 O Enable Enable Waiting Start Done Done Length 1 Error Code I Timed Out Extended Error Code Cancel Apply Help Complete the dialog box for the data area to be transferred CIP Data Table messages require a tag database element for both the source and destination The SOURCE TAG is a tag defined in the Controller Tag database The DESTINATION ELEMENT is the tag element in the gateway The gateway simulates a tag database as an array of elements defined by the maximum register size for the gateway user configuration parameter Maximum Register in the Gateway section with the tag name INT_DATA ProSoft Technology Inc Page 89 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways In the previous example the first element in the database is the starting location for the write operation of ten elements The COMMUNICATION information must also be configured An example of the dialog box follows Message Configuration writemsg x Configuration Communication Path Enet 2 192 168 0 79 Browse Enet 2 192 168 0 75 Communication Method CIP DH Chane z Destinatio
12. Because the server interface device is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Some servers will limit the quantity of register content provided each scan thus for large register quantities multiple transmissions will be made using register content from sequential scans Page 112 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual In the example below the registers 40108 to 40110 have the decimal contents 555 0 and 100 respectively Adr Func ByteCnt HiData LoData HiData LoData HiData LoData Error Check Field 11 03 06 02 2B 00 00 00 64 CRC Read Input Registers Function Code 04 Query Function code 04 obtains the contents of the controller s input registers at addresses 3xxxx These locations receive their values from devices connected to the I O structure and can only be referenced not altered from within the controller The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered for zero 30001 zero 30002 one and so on Broadcast mode is not allowed The example below requests the contents of register 3009 in server number 11 Adr Func Data Start Reg H Data Start Reg Lo Data of Regs Hi Data of Regs Lo Error Check Field mi 04 0
13. Enable Continuous 0 lt Enable Value Status OK Set to Defaults Edit Row Internal Address Poll Interval ModBus Function MB Addr FC3 Read Hol 0 Swap Code Node Address No Change 1 Reg Count 0 1 Edit Row 1 Enable zl Enable Continuous Internal Address Poll Interval Reg Count Swap Code No Change Node Address i ModBus Function FC 3 Read Holding Registers MB Address in Device a Comment Continuous Definition This field defines whether or a not the command is to be executed and under what conditions Disable 0 The command is disabled and will not be executed in the normal polling sequence Enable 1 The command is executed each scan of the command list if the Poll Interval Time is set to zero If the Poll Interval time is set Reset All Reset Tag OK Cancel 5 When configuration is complete download the configuration to the gateway For protocol specific configuration information see the Configuration section in the appropriate protocol chapter of this manual EIP configuration page54 MBTCP configuration page 98 MBS configuration page127 ASCII configuration page 163 SIE configuration page 169 Page 26 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual 2 6 Using the CommonNet Data Map Note Th
14. Encapsulated PCCC Read Message 87 Encapsulated PCCC Write Message 85 Error Codes 73 Error Status Codes 140 Errors When EXT STS Is Present 74 EtherNet IP Explicit Messaging Server Command Support 55 Example and State Diagram 116 148 F Float Flag 98 100 127 Float Offset e 98 100 127 Float Start 98 100 127 Force Multiple Coils Function Code 15 120 151 Force Single Coil Function Code 05 114 145 G Gateway Communication Error Codes 109 Gatewaylnternal Database 126 168 General Specifications 154 168 General Specifications Modbus TCP IP 94 H Hardware Information 45 Holding Register Offset 99 130 How to Contact Us 2 Important Installation Instructions 3 Installing ProSoft Configuration Builder Software 16 Internal Database 95 L LED Indicators 34 Local STS Error Codes 73 Main Gateway LEDs 34 Master Port Command List Errors 137 Modbus Slave List Status 138 MBS Configuration 127 MBS Functional Overview 124 MBS Port x Commands 131 MBS Po x 127 MBS Protocol 123 MBTCP Client x 100 MBTCP Client x Commands 102 ProSoft Technology Inc July 10 2013 Page 199 of 200 Index User Manual PLX30 Series Ethernet and Serial Gateways MBTCP Client Command List Error Data 108 MBTCP Client Error Status Data 107 MBTCP Client Specific Errors 109 MBTCP Configuration 98 MBTCP Error and Status Data 106
15. Func Code 100 Specifies the function code to be used in the command 101 100 Word Range Write 102 101 Word Range Read 102 Read Modify Write File Type Binary Specifies the file type to be associated with the Counter command Timer Control Integer Float ASCII String Status File Number 1 Specifies the PLC5 file number to be associated with Page 64 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual Parameter Value Description the command If a value of 1 is entered for the parameter the field will not be used in the command and the default file will be used Element Specifies the element in the file where the command Number will start Sub Element Specifies the sub element to be used with the command Refer to the AB documentation for a list of valid sub element codes Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc July 10 2013 Page 65 of 200 EIP Protocol User Manual PLX30 Series Ethernet and Serial Gateways Class 3 Client UClient x Commands PLC5 ASCII Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write T
16. Goanosg Test Connection ok JL cance _ ProSoft Technology Inc Page 31 of 200 July 10 2013 Configuring Your Gateway PLX30 Series User Manual Ethernet and Serial Gateways 2 9 Printing a Configuration File 1 2 3 Select the Gateway icon and then click the right mouse button to open a shortcut menu On the shortcut menu choose VIEW CONFIGURATION This action opens the View Configuration window In the View Configuration window open the FILE menu and choose PRINT This action opens the Print dialog box In the Print dialog box choose the printer to use from the drop down list select printing options and then click OK Page 32 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 3 Diagnostics and Troubleshooting In This Chapter 3 1 BORgle et tel 34 3 2 Using Diagnostics in ProSoft Configuration Builder c cccccssecceeesteeeeesneeeeeees 36 ProSoft Technology Inc Page 33 of 200 July 10 2013 Diagnostics and Troubleshooting User Manual PLX30 Series Ethernet and Serial Gateways 3 1 LED Indicators Troubleshooting can be performed using several methods The first and quickest is to scan the LEDs on the gateway to determine the existence and possibly the cause of a problem The gateway s LEDs provide valuable information such as e The state of each port e System configurati
17. Ox unge This Controller Control Bits Communication Command PLC5 Read Ignore if timed out TO o Data Table Address 10 0 To be retried NR 0 Size in Elements Awaiting Execution EW 0 Channel Continuous Run C0 o S Error ER 0 m Target Device Message done DN Message Timeout Message Transmitting ST fc Data Table Address Message Enabled EN o Waiting for Queue Space o Local Remote MultiHop m Error Error CodefHex 0 No errors Error Description VE The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages The MULTIHOP option must be set to YES Fill in the MULTIHOP tab portion of the dialog box as shown in the following illustration NG N11 0 51 Elements LO x General Ins Add Hop Del Remove Hop To Address Typ This SLC500 1756 ENet I P str 192 168 0 75 ControlLogix Backplane ar 1756 Backplane Slot dec Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero ProSoft Technology Inc Page 79 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways SLC File Types This section contains information specific to the SLC and MicroLogix processor bas
18. Set to Defaults Add Row Insert Row Delete Row Move Up Move Down Edit Row Copy Row OK Cancel Row 1 in the SIMATICS Manager screen shot below shows the data transferred from the gateway If the data is broken up and displayed in binary format it can be seen that the binary data stored in the first byte of DB1 DBW 0 is identical to that stored in byte address DB1 DBB 0 This is because the memory locations referenced by the first byte of DB1 DBW 0 and by DB1 DBBO are one and the same as explained previously al H ar Modify value DB1 DBYY 0 DEC 11733 D I D 0 BIN DB1 DBYY 1 BIN DB1 DBB 0 BIN DB1 DBB 1 BIN EECHER 7010 mol Same memory space Same memory space DB1 DBW0DB1 DBW1 DB1 DBBO0 DB1 DBB1 DB1 DBB1 DB1 DBB2 ProSoft Technology Inc Page 181 of 200 July 10 2013 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways The first byte of DB1 DBW0O is the same as DB1 DBBO The second byte of DB1 DBWO is the same as DB1 DBB1 and is the same as the first byte of DB1 DBW1 In reality the memory space looks like below DB1 DBWO DB1 DBW1 Fang 9 2 1101_0101 Ze DB1 DBB0 DB1 DBB1 DB1 DBB2 Note To access the first address of Data Block Flag Input Output Timer and Counter memory locations in the S7 300 and S7 1200 processors use the following address syntax Data Block gt DB1 DBB0 DB1 DBWO DB1 DBD0 Flag gt MBO MWO MDO Input gt IBO IWO IDO Output
19. Write REAL READ INT Write INT ProSoft Technology Inc July 10 2013 Page 173 of 200 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Input Address Type Function Data Type Input READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT Page 174 of 200 ProSoft Technology Inc July 10 20133 SIE Protocol User Manual PLX30 Series Ethernet and Serial Gateways 7 1200 Data Block Address Type Function Data Type DB READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ COUNT Write COUNT Flag Address Type Function Data Type Flag READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count ProSoft Technology Inc July 10 2013 Page 175 of 200 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Output Address Type Function Data Type Output READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Writ
20. and then follow the instructions on your screen to install the program If you do not have access to the Internet you can install ProSoft Configuration Builder from the ProSoft Solutions DVD ROM included in the package with your gateway Page 16 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual To Install ProSoft Configuration Builder from the Product DVD ROM 1 Insert the ProSoft Solutions DVD into the DVD drive of your PC Wait for the DVD menu to appear Note It may be necessary to manually open the DVD menu as not all DVD drives AutoRun Double click My Computer and navigate to your DVD drive in the list of connected drives Double click the DVD drive icon to open the DVD menu me My Computer File Edit View Favorites Tools Help e Ba O B serh Folders E7 d My Computer Hard Disk Drives System Tasks view system information se Local Disk C T Add or remove programs change a setting eg RECOVERY Di Other Places My Network Places Devices with Removable Storage OH my Documents oo D Control Panel 0 6 ProSoft_DVD Ze Details ee Removable Disk F 2 Onthe DVD menu click PROSOFT CONFIGURATION BUILDER This action automatically begins the installation process 3 Click Browse Product Folder to open the PRODUCT folder This folder contains videos and files you will need to set up and configure you
21. even months later an output is connected to that coil the output will be hot ProSoft Technology Inc Page 151 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Preset Multiple Registers Function Code 16 Query Holding registers existing within the controller can have their contents changed by this message a maximum of 60 registers However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller 16 bit for the 184 384 and 584 unused high order bits must be set to zero A Note Function codes 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func Hi LoAdd Quantity Byte Hi Lo Hi Lo Data Error Check Add Cnt Data Data Data Field 11 10 00 87 00 02 04 00 OA 01 02 CRC Response The normal response to a function 16 query is to echo the address function code starting address and number of registers to be loaded Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 10 00 87 00 02 56 Page 152 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 ASCII Protocol In This Chapter 8 1 ASCII Functional Overvieuw 154 8 2 ASGIM GO MPIQUPATION EE 163 8 3 ASCII Diagnostiek arinrin fede eanan o ra taadaa der ida aan
22. notation you will need to convert the hexadecimal value to a decimal value to enter in this parameter In such cases it is not usually necessary to subtract 1 from the converted decimal number as this addressing scheme typically uses the exact offset address expressed as a hexadecimal number ProSoft Technology Inc July 10 2013 Page 105 of 200 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 6 3 MBTCP Diagnostics 6 3 1 PCB Diagnostics The best way to troubleshoot the MBTCP driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 6 3 2 MBTCP Status Data in Upper Memory The MBTCP driver has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 27 Note that all the status values are initialized to zero 0 at power up cold boot and during warm boot MBTCP Server Status Data The following table lists the addresses in upper memory where status data for MBTCP servers can be found Server Port Address Range 2000 6200 through 6209 502 6210 through 6219 2001 6220 through 6229 The content of each ser
23. 10 1 Contacting Technical Support ProSoft Technology Inc ProSoft is committed to providing the most efficient and effective support possible Before calling please gather the following information to assist in expediting this process 1 Product Version Number 2 System architecture 3 Network details If the issue is hardware related we will also need information regarding Gateway configuration and associated ladder files if any Gateway operation and any unusual behavior Configuration Debug status information LED patterns Details about the serial Ethernet or fieldbus devices interfaced to the Gateway if any A Note For technical support calls within the United States an after hours answering system allows 24 hour 7 days a week pager access to one of our qualified Technical and or Application Support Engineers Detailed contact information for all our worldwide locations is available on the following page OD P GAMM ch Page 196 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways Support Service and Warranty User Manual Internet Web Site www prosoft technology com support E mail address support prosoft technology com Asia Pacific Tel 603 7724 2080 E mail asiaoc prosoft technology com location in Malaysia Languages spoken include Chinese English Asia Pacific Tel 86 21 5187 7337 x888 E mail asiapc prosoft technology com location in China L
24. 110 6 4 1 Modbus Protocol Specification ccccccececeeeeeeeceeeeeceeeeeeeaeeeeaeeseeeeeseaeeeeaeeeeneeeaas 110 7 MBS Protocol 123 7 1 MBS Functional Overview ccccccsceceeceeceeeeeeeeeeeeeeeseeeeesaaeeeeaeeseeeeeseaeeeeaeeeeneeeeas 124 7 1 1 Modbus Serial Gpechticatons 124 7 1 2 Modbus Master Slave Port Specifications cccccceeeeeseeeeeeeeceeeeeceeeeeeaeeeeneeeaas 125 7 1 3 Gateway Internal Database 0 ccceccceceteeeeeeeeeeseeseeeeeseaeeeeaaeeeeeeeseaeeesaeeseeeseeeees 126 7 2 MBS Conftouraiion 127 7 2 1 MBS Port X ea esses cece cc sauce see aaa eana potas oth etapa edge daa eaaa d 127 7 2 2 MBS Port x Commands cee eeeeaeeeeeeeseaeeesaaeeseaeeseeeeseaeeesaaeeeeneeeaas 131 7 3 MBS RUE le e 134 7 3 1 NR e ee 134 7 3 2 MBS Status Data in Upper Memory cccceeceeeeeeeceeeeeeeeeeeeaeeseeeeeseaeeesaeeeeneeeaas 134 7 3 3 Error Status Codes AAA 140 ZA MBS hReterene uereg eege a EAE AA EA 141 7 4 1 Modbus Protocol Specification cccccceeeceeeeeceeeeeceeeeeseaeeseeeeseeeeeseaeeesaeeeeeeeeeas 141 Page 6 of 200 ProSoft Technology Inc July 10 2013 PLX30 Series Contents Ethernet and Serial Gateways User Manual 8 ASCII Protocol 153 8 1 ASCII Functional Overview ccccececeeceeceeeeeeeaeceeeeeceeeeeseaeeseneeseeeeeseaeeeeaaeeeeeeeeaas 154 8 1 1 General Specifications 2 2 0 cccceesceceecceeeeeceeeaeeeeeeeceeeeeeaaeesenaeseneeeeaeeesaaeeseaaeeseneeeaas 154 8 1 2
25. 212 Write BYTE 212 READ DINT 53 Write DINT 53 READ REAL 53 Write REAL 53 READ INT 106 Write INT 106 READ TIME 105 Write TIME 105 READ Count 106 Write Count 106 Page 190 of 200 ProSoft Technology Inc July 10 20133 July 10 2013 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual Output Address Type Function Data Type Max Reg Cnt Max Reg Cnt Output READ BOOL 1 Write BOOL 1 READ BYTE 212 Write BYTE 212 READ DINT 53 Write DINT 53 READ REAL 53 Write REAL 53 READ INT 106 Write INT 106 READ TIME 105 Write TIME 105 READ Count 111 Write Count 106 Input Address Type Function Data Type Max Reg Cnt Max Reg Cnt Input READ BOOL 1 Write BOOL 1 READ BYTE 222 Write BYTE 212 READ DINT 55 Write DINT 53 READ REAL 55 Write REAL 53 READ INT 111 Write INT 111 READ TIME 111 Write TIME 106 READ Count 111 Write Count 106 ProSoft Technology Inc Page 191 of 200 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways CPU224XP Data Block Address Type Function Data Type Max Read Max Write DB READ BOOL 1 Write BOOL 1 READ BYTE 222 Write BYTE 212 READ DINT 55 Write DINT 53 READ REAL 55 Write REAL 53 READ INT 111 Write INT 106 Flag Addres
26. 5 3 2 EIP Status Data in Upper Memory The EIP driver has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 27 Note that all the status values are initialized to zero 0 at power up cold boot and during warm boot Page 70 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual EIP Client Status Data The following table lists the addresses in upper memory where general error and status data for each EIP connected and unconnected Client can be found EIP Client Address Range Connected Client 0 7900 through 7909 Connected Client 1 8100 through 8109 Unconnected Client 0 12800 through 12809 The content of each Client s status data area is structured the same The following table describes the content of each register in the status data area Offset Description Number of Command Requests Number of Command Responses Number of Command Errors Number of Requests Number of Responses Number of Errors Sent Number of Errors Received Reserved Current Error Code Last Error Code O DOIN ID JAJA W N o EIP Client Command List Error Data A status error code is held in upper memory for each command in each ElPClient
27. A six inch RJ45 to DB9Male adapter cable is provided for each serial port The DB9Male adapter cable provides connections for RS 232 wired as Data Terminal Equipment DTE RS 422 and RS 485 4 2 1 RS 232 Null Modem DTE with Hardware Handshaking This type of connection is used when the device connected to the gateway requires hardware handshaking control and monitoring of modem signal lines To enable hardware handshaking set the port configuration to use RTS CTS handshaking For MBS protocol set the Use CTS Line parameter to Yes For ASCII protocol set the Handshaking parameter to Yes RS 232 Application Port Cable Hardware Handshaking DB 9 Male RS 232 Device TxD RxD CTS RTS Signal ES Signal Common Common a Page 48 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Hardware Information Ethernet and Serial Gateways User Manual 4 2 2 RS 232 Null Modem DTE without Hardware Handshaking This type of connection can be used to connect the gateway to a computer or field device communication port RS 232 Application Port Cable No Handshaking DB 9 Male RS 232 Device RTS RTS CTS jumper must be installed if CTS line CTS e monitoring enabled Signal Signal Common Common A Note If the port is configured to use RTS CTS handshaking then a jumper is required between the RTS and the CTS line on the gateway connection 4 2 3 RS 232 DTE to DCE Modem Connection This type of conn
28. Data FION 256s te aa eine ohana cies hie ie 155 8 1 3 Modes of Operation 158 8 2 ASCII Configuratio M sreiininiinidiinn piens inea denia pnira aaiae na doede raada neiaie raia hiaan 163 8 2 1 ASCII Port KEE 163 8 3 ASCII DIAQNOSUCS ainle aaa antia aaa Mies dat Es 165 8 3 1 SEI RI e Ee 165 8 3 2 ASCII Status Data in Upper Memory ccccecceeeceeeeeeeeeeaeeeeeeeseeeeesaeeesaeeeeeeesaas 165 Ee EE 9 1 SIE Functional Overview cccccccecceceeeeeeeeeeeeeeeceaeeecaaeeeeaaeseeeeeseaeeesaeeseaeeseeeeesaas 168 1 1 General Specifications 2 2 00 ccceeececeecceeeeeeeeeeeeeeneeceaeeeeaaeeeeaaesseeeeceaeeesaaeeseaeeeseneesaas 168 A Gateway Internal Database ccccceceeceeeeeceeeeeceneeecaeeeeaaeseeeeeseaeeesaaeeeeaeeseneeeeaas 168 9 2 SIE Configuratio EE 169 9 2 1 nl E 169 9 2 2 SIE Client x Commande eseeeeeneeee ene eeneseie stie ttinttnntttnstenntnnnttnntnnntnnnnn nennen nnna 169 9 3 lee ee 183 9 3 1 Client Command Errors aaa aaa aa ea aia aiea r aE 183 9 3 2 EE EE eege eebe E A E a a a aS 184 9 4 lee ts e aae n A a E A ETV A a a cantaameceter 187 9 4 1 Maximum Register Coumts 187 10 Support Service and Warranty 195 10 1 Contacting Technical Support ccceeceeeeeeeeeeeceeeeeeaeeeeeaeseeeeeeeaeeeeaeeeeaeeseeeeeeaas 196 10 2 Warranty Information sesi ue ieai e a EEA TAN 198 Do o ProSoft Technology Inc Page 7 of 200 July 10 2013 Contents PLX30 Series User Manual Ethernet and Se
29. Error Count Status20to Status28to Status36to Status44to Status52to Check 27 35 43 51 56 Field 41 D 05 CD 6B B2 OE 1B CRC The status of coils 20 to 27 is shown as CD HEX 1100 1101 Binary Reading left to right this shows that coils 27 26 23 22 and 20 are all on The other coil data bytes are decoded similarly Due to the quantity of coil statuses requested the last data field which is shown 1B HEX 0001 1011 Binary contains the status of only 5 coils 52 to 56 instead of 8 coils The 3 left most bits are provided as zeros to fill the 8 bit format Read Input Status Function Code 02 Query This function allows the user to obtain the ON OFF status of discrete inputs in the addressed server PC Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial input address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 inputs to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The inputs are numbered form zero input 10001 zero input 10002 one input 10003 two and so on for a 584 The following table is a sample read input status request to read inputs 10197 to 10218 from server number 11 Adr Func DataStartPtHi DataStartPtLo Dat
30. J180 Power Connector 1 to 4 RJ45 DB9M Serial Adapter Cable serial protocol only 1 to 4 DB9 to Screw Terminal Adapter serial protocol only Page 46 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Hardware Information Ethernet and Serial Gateways User Manual 4 1 1 Serial Port Specifications RX RX PORT 2 PORT 1 TX TX RX RX PORT 3 PORT 4 TX TX Type Specifications Serial Port Isolation 2500 Vrms port signal isolation per UL 1577 serial port communication signal uses RF Radio Frequency modulation signal as isolation media IC chip model is Silicon Labs Si844x Si8440 Si8441 Si8442 RS 485 422 port interface lines TVS diode protected at 27V standoff voltage RS 232 port interface lines fault protected to 36V power on 40V power off Serial Port Protection ProSoft Technology Inc Page 47 of 200 July 10 2013 Hardware Information PLX30 Series User Manual Ethernet and Serial Gateways 4 2 Serial Port Cables for Gateways with Serial Ports This section contains information on the cable and pin assignments for the PLX30 gateway s serial ports RS 232 422 485 The PLX30 gateway will come with one or four serial ports depending on the configuration purchased Example The PLX31 EIP MBS4 gateway contains four serial communication ports The PLX31 EIP MBS gateway contains one serial communication port Each physical serial port has a RJ45 jack connector
31. Number Of Elements fi 0 16 bit integers Destination Element Jm 0 0 O Enable Enable Waiting Start O Done Done Length 10 Eror Code I Timed Out Extended Error Code Cancel Complete the dialog box for the data area to be transferred For PLC5 and SLC messages the DESTINATION ELEMENT should be an element in a data file such as N10 0 For the PLC2 Unprotected Write message the DESTINATION ELEMENT is the address in the gateway s internal database and cannot be set to a value less than ten This is not a limitation of the gateway but of the RSLogix software For a PLC2 unprotected write or read function the database address should be entered in octal format The COMMUNICATION information must also be configured The following is an example of the dialog box Message Configuration writemsg x Configuration Communication Path Jet 2 192 168 0 74 Browse Enet 2 192 168 0 75 Communication Method CIP DH Channel l z Destration Link a c CIP With Source Link a Destination Wade p ctal Source ID I Cache Connections Enable Enable Waiting Start Done Done Length 10 D Error Code I Timed Out Extended Error Code Cancel Apply Her Page 86 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PAT
32. Number Of Elements fi 0 16 bit integers Destination Tag plc5data 1 D v Create Tag Enable Enable Waiting Start Done Done Length 10 Error Code T Timed Out Extended Error Code Cancel Help ProSoft Technology Inc Page 87 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Complete the dialog box for the data area to be transferred For PLC5 and SLC messages the SOURCE ELEMENT should be an element in a data file such as N10 0 For the PLC2 Unprotected Read message the SOURCE ELEMENT is the address in the gateway s internal database and cannot be set to value less than ten This is not a limitation of the gateway but of the RSLogix software The COMMUNICATION information must also be configured An example of the dialog box follows Message Configuration readmsg x Configuration Communication Path SREP Enet 2 192 168 0 75 Browse m Communication Method Ze CIP C DH Ghamel l z Destinatan ink e CIP With Source Link 3 Destination Mode fi ictal Source ID I Cache Connections O Enable Enable Waiting O Start Done Done Length 0 Eror Code I Timed Out Extended Error Code Cancel Apply Help Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by comm
33. OPERATING SYSTEM REVISION 2 6 30 10 aen RUN NUMBER 57 E Decimal MY IP ADDRESS 192 168 0 250 Gd Hex MY ETHERNET ADDRESS CHEX 00 00 8D 88 00 16 DI Float PROGRAM SCAN COUNTER 31511315656 EIP Class 1C 7 SYSTEM FREE MEMORY 254865920 O Se onhection MODULE NAME PLX31 EIP MBS4 onfig Status EIP Class 3 Server Ej Config E Comm Status EIP Class 3 Client 0 E Contig C Comm Status O Commands F Cmd Errors Decimal Cmd Errors Hex sta EIP Class 3 Client 1 D Contig lt Path Ethemet 192 168 0 250 A Caution Some of the commands available to you from this menu are designed for advanced debugging and system testing only and can cause the gateway to stop communicating with the processor or with other devices resulting in potential data loss or other communication failures Use these commands only if you fully understand their potential effects or if you are specifically directed to do so by ProSoft Technology Technical Support Engineers ProSoft Technology Inc Page 39 of 200 July 10 2013 Diagnostics and Troubleshooting User Manual PLX30 Series Ethernet and Serial Gateways The following menu commands are common to all PLX30 series gateways Menu Submenu Description Command Command Module Version Displays the gateway s current software version and other important values You may be asked to provide this information when calling for technical support Data Ma
34. Siemens Industrial Ethernet s Data Type used in the command If Data Type Bool is used in the command list then the database address will be interpreted as a bit address When any other data types are used then the database address is interpreted as a 16 bit word register address Poll Interval 0 to 65535 Specifies the minimum interval between executions of continuous commands The value is in tenths of a second Therefore if a value of 100 is entered the command will execute no more frequently than once every 10 seconds Reg Count Command dependent Specifies the number of 16 bit registers or binary bits to be transferred by the command The allowable range depends on the Siemens processor addressed by the command and on the type of command used See Maximum Register Counts page 187 Swap Code No Change Word Swap Word and Byte Swap Byte Swap Specifies if and how the order of bytes in data received or sent is to be rearranged This option exists to allow for the fact that different manufacturers store and transmit multi byte data in different combinations This parameter is helpful when dealing with floating point or other multi byte values as there is no one standard method of storing these data types The parameter can be set to rearrange the byte order of data received or sent into an order more useful or convenient for other applications No change 0 No change is made in the byte ordering 1
35. Specifies if the data from the server is to be ordered differently than it was received This parameter is typically used when dealing with floating point or other multi register values None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to an SLC 5 05 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code OO P GO ch Specifies the function code to be used in the command 1 Protected Write 2 Unprotected Read 3 Protected Bit Write 4 Unprotected Bit Write 5 Unprotected Write Word Address Specifies the word address where to start the operation Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc July 10 2013 Page 69 of 200 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 5 3 EIP Diagnostics 5 3 1 PCB Diagnostics Menu The best way to troubleshoot the EIP driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Et
36. Typed Write 511 Protected Typed Write w Mask Page 62 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual Parameter Value Description File Type Binary Specifies the file type to be associated with the Counter command Timer Control Integer Float ASCII String Status File Number 1 Specifies the SLC 500 file number to be associated with the command If a value of 1 is entered for the parameter the field will not be used in the command and the default file will be used Element Specifies the element in the file where the command Number will start Sub Element Specifies the sub element to be used with the command Refer to the AB documentation for a list of valid sub element codes Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc July 10 2013 Page 63 of 200 EIP Protocol User Manual PLX30 Series Ethernet and Serial Gateways Class 3 Client UClient x Commands PLC5 Binary Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command executes only if the internal data associated with the command changes
37. Unknown Product Line Last Change Last Download Module Information Last Change Never Last Download Never Application Rev OS Rev Loader Rev MAC Address Configedit version 2 2 0 Build 1 Module Configuration Module Module Type Module Name Default Module Default Module Page 20 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways Configuring Your Gateway User Manual To add the gateway to the project 1 Use the mouse to select DEFAULT MODULE in the tree view and then click the right mouse button to open a shortcut menu S Untitled ProSoft Configuration Builder File View Project Tools Help 9 Default Project Name Status Information Default Location 3 Delete Rename Copy Choose Module Type 8 Default Module Unknown Product Line Please Select Module Type Last Change Last Download Load Config File Module Information Last Change Never Last Download Never Application Rev OS Rev Loader Rev mac Address Configedit version 4 0 1 Build 1 Module configuration Module Module Type Module Name Default Module Default Module 2 Onthe shortcut menu select CHOOSE MODULE TYPE This action opens the Choose Module Type dialog box Choose Module Type C PLx4000 C all C PLx5000 STEP 1 Select Module Type Product Line Filter C MSL C Pro C MVI56 MVI
38. address lt 0 or gt 255 44 Count parameter set to 0 45 Invalid function code 46 Invalid swap code Gateway Communication Error Codes Code Description 2 Timeout while transmitting message 11 Timeout waiting for response after request same as 36 253 Incorrect slave server address in response 254 Incorrect function code in response 255 Invalid CRC LRC value in response ProSoft Technology Inc July 10 2013 Page 109 of 200 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 6 4 MBTCP Reference 6 4 1 Modbus Protocol Specification Read Coil Status Function Code 01 Query This function allows the user to obtain the ON OFF status of logic coils used to control discrete outputs from the addressed server only Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial coil address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 coils to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The coils are numbered from zero coil number 1 zero coil number 2 one coil number 3 two and so on The following table is a sample read output status request to read coils 0020 to 0056 from serv
39. and Serial Gateways 3 2 Using Diagnostics in ProSoft Configuration Builder ProSoft Configuration Builder PCB has many useful tools to help you with diagnostics and troubleshooting You can use PCB to connect to your gateway and retrieve current status values configuration data and other valuable information Tip You can have a ProSoft Configuration Builder Diagnostics window open for more than one gateway at a time To connect to the gateway s communication port 1 Start PCB and then select the gateway Click the right mouse button to open a shortcut menu Default Project Cal Default Location ih PPL X31 EIP MBS 2 On the shortcut menu choose DIAGNOSTICS Default Project Nam Cal Default Location vd PLX ih RES Delete Pe Rename E Copy EI El EI Choose Module Type M C view Configuration JO Export Configuration File s a Load Config File las API IS Download from PC to Device LO Upload from Device to PC Gei IS Page 36 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual This opens the Diagnostics window E Diagnostics Connection Log Module Suel cc il H Cannot Connect to IP Address Time 16 03 50 Cannot Connect to IP Address Path Ethemet 192 168 0 250 If there is no response from the gateway as in the example above follow these steps 1 Click the Setup Conn
40. be followed Failure to use ProSoft Technology software or approved software with our hardware products may result in injury harm or improper operating results Failure to observe this information can result in injury or equipment damage 2013 ProSoft Technology All rights reserved Important Installation Instructions Power Input and Output I O wiring must be in accordance with Class I Division 2 wiring methods Article 501 4 b of the National Electrical Code NFPA 70 for installation in the U S or as specified in Section 18 1J2 of the Canadian Electrical Code for installations in Canada and in accordance with the authority having jurisdiction The following warnings must be heeded A This Equipment is Suitable For Use in Class Division 2 Groups A B C D or Non Hazardous Locations Only WARNING Explosion Hazard Substitution of Any Components May Impair Suitability for Class Division 2 WARNING Explosion Hazard Do Not Disconnect Equipment Unless Power Has Been Switched Off Or The Area is Known To Be Non Hazardous Agency Approvals and Certifications CE Mark UL cUL Class Div II ATEX Zone 2 CB Safety RoHS PLX30 Series Contents Ethernet and Serial Gateways User Manual Contents Your Feedback EE 2 How to Contact U Soia a araia aaar eaaa eaan en aa tage ates hee Seeerei ege beten 2 ProSoft Technology Product Documentation 2 Literature Content Disclaimer 2 Important Installation Inst
41. but do not continue to automatically update the data displayed They are not live data screens Therefore to see a change in STATE or COMM STATE you must repeatedly call the screen by pressing the appropriate menu key to have the screen refreshed Depending on the refresh timing you may or may not see a change in the displayed values every time you call for an update The STATE register may display any of the following values STATE Value Description 2 Preparing port Flushing all buffers Scan for RTS Off or Waiting for port enable signal 1 Waiting for receipt of data 0 Undefined state 1 Receiving a message from the Master 2 Building a slave response message 2000 Sending slave response to the Master The COMM STATE register may display any of the following values COMM STATE Description Value 0 Port not sending data Wait for send 1 Setting up minimum Response Delay Timer 101 Waiting for Minimum Response Delay to timeout 2 Turning on RTS line and starting RTS On Delay Timer 3 Waiting for RTS On Delay timer to timeout 4 Sending data 5 Waiting for all data to be sent and starting RTS Off Delay Timer 6 Waiting for RTS Off Delay timeout and then turning OFF RTS line after timeout Page 136 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual Master Port Command List Errors The individual command errors for each Master port are returned to the addr
42. by the command type received in the incoming message from the Client The following table specifies the relationship of the gateway s internal database to the addresses required in the incoming Modbus TCP IP requests Page 96 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual Database Address Modbus Address 0 40001 1000 41001 2000 42001 3000 43001 3999 44000 The following virtual addresses are not part of the normal gateway user database and are not valid addresses for standard data However these addresses may be used for incoming commands that are requesting floating point data To use addresses in this upper range requires the following Set the Float Flag in the MBTCP server configuration to Yes e Set the Float Start to a database address in the range below Set the Float Offset to a database address in the gateway user memory area shown above Remember that once this is done all data above the Float Start address must be floating point data Database Address Modbus Address 4000 44001 5000 45001 6000 46001 7000 47001 8000 48001 9000 49001 9999 50000 The MBTCP gateway must be correctly configured and connected to the network before any attempt is made to use it Use a network verification program such as ProSoft Discovery Service or the command prompt PING instruction to verify that the gatew
43. data field any information that was requested in the request In an exception response the server returns an exception code in the data field This defines the server condition that caused the exception The following table shows an example of a Master request and server exception response Request Response Field Name Hex Field Name Hex Function 01 Function 81 Starting Address Hi 04 Exception Code 02 Starting Address Lo Al Quantity of Outputs Hi 00 Quantity of Outputs Lo 01 In this example the Master addresses a request to server device The function code 01 is for a Read Output Status operation It requests the status of the output at address 1245 04A1 hex Note that only that one output is to be read as specified by the number of outputs field 0001 ProSoft Technology Inc Page 149 of 200 July 10 2013 MBS Protocol User Manual PLX30 Series Ethernet and Serial Gateways If the output address does not exist in the server device the server will return the exception response with the exception code shown 02 This specifies an illegal data address for the server Modbus Exception Codes Code Name Meaning 01 Illegal Function The function code received in the query is not an allowable action for the server This may be because the function code is only applicable to newer devices and was not implemented in the unit selected It could also indicate that the serv
44. device for the register and bit address assignments valid for that device The Modbus Function Code determines whether the address will be a register level or bit level OFFSET address into a given data type range The offset will be the target data address in the server minus the base address for that data type Base addresses for the different data types are e 00001 or 000001 0x0001 for bit level Coil data Function Codes 1 5 and 15 e 10001 or 100001 1x0001 for bit level Input Status data Function Code 2 30001 or 300001 3x0001 for Input Register data Function Code 4 e 40001 or 400001 4x0001 for Holding Register data Function Codes 3 6 and 16 Address calculation examples o For bit level Coil commands FC 1 5 or 15 to read or write a Coil OX address 00001 specify a value of 0 00001 00001 0 Page 132 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBS Protocol User Manual Parameter Value Description o For Coil address 00115 specify 114 o 00115 00001 114 e For register read or write commands FC 3 6 or 16 4X range for 40001 specify a value of 0 o 40001 40001 0 e For01101 11101 31101 or 41101 specify a value of 1100 o 01101 00001 1100 o 11101 10001 1100 o 31101 30001 1100 o 41101 40001 1100 Note If the documentation for a particular Modbus server device lists data addre
45. engaged in processing a long duration program command The Master should retransmit the message later when the server is free 08 Memory Parity Error Specialized use in conjunction with function codes 20 and 21 and reference type 6 to indicate that the extended file area failed to pass a consistency check The server attempted to read record file but detected a parity error in the memory The Master can retry the request but service may be required on the server device Da Gateway Path Unavailable Specialized use in conjunction with gateways indicates that the gateway was unable to allocate an internal communication path from the input port to the output port for processing the request Usually means that the gateway is misconfigured or overloaded Ob Gateway Target Device Failed To Respond Specialized use in conjunction with gateways indicates that no response was obtained from the target device Usually means that the device is not present on the network ProSoft Technology Inc July 10 2013 Page 119 of 200 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Force Multiple Coils Function Code 15 Query This message forces each coil in a consecutive block of coils to a desired ON or OFF state Any coil that exists within the controller can be forced to either state ON or OFF However because the controller is actively scanning unless the coils are disabled the
46. gt QB0 QWO QDO Timers gt TO T65535 Counters gt C0 C65535 Note To access the first address of Data Block Flag Input and Output memory locations in the S7 200 processor use the following address syntax Data Block gt VBO VWO VDO Flag gt MBO MWO MDO Input gt IBO IWO IDO Output gt QB0 QWO QDO Page 182 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual 9 3 SIE Diagnostics The best way to troubleshoot the SIE driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 9 3 1 Client Command Errors Each SIE Client has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 27 The following table lists the starting addresses in upper memory where the status data for each Client can be found Client Gateway Starting Register for Status Data 0 21100 1 21125 2 21151 18 21568 19 21594 The following table describes the content of each Client s status data area Word Offset Description Command Request Count Co
47. has been altered Adr Func DataRegHi DataRegLo ODatalnputRegHi Data Input RegLo Error Check Field 11 06 00 01 00 03 CRC Diagnostics Function Code 08 MODBUS function code 08 provides a series of tests for checking the communication system between a Client device and a server or for checking various internal error conditions within a server The function uses a two byte sub function code field in the query to define the type of test to be performed The server echoes both the function code and sub function code in a normal response Some of the diagnostics cause data to be returned from the remote device in the data field of a normal response In general issuing a diagnostic function to a remote device does not affect the running of the user program in the remote device Device memory bit and register data addresses are not accessed by the diagnostics However certain functions can optionally reset error counters in some remote devices A server device can however be forced into Listen Only Model in which it will monitor the messages on the communications system but not respond to them This can affect the outcome of your application program if it depends upon any further exchange of data with the remote device Generally the mode is forced to remove a malfunctioning remote device from the communications system Sub function Codes Supported Only Sub function 00 is supported by the gateway 00 Return Query Data The data pa
48. is as shown in Figure C4 The data is packed one bit for each input The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each input 1 ON O OFF The lower order bit of the first character contains the addressed input and the remainder follows For input quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as a quantity of RTU characters that is the number is the same whether RTU or ASCII is used ProSoft Technology Inc Page 111 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Because the server interface device is serviced at the end of a controller s scan data will reflect input status at the end of the scan Some servers will limit the quantity of inputs provided each scan thus for large coil quantities multiple PC transactions must be made using coil status for sequential scans Adr Func Byte Data Discrete Input Data Discrete Input Data Discrete Input Error Check Field Count 10197 to 10204 10205 to 10212 10213 to 10218 11 02 03 AC DB 35 CRC The status of inputs 10197 to 10204 is shown as AC HEX 10101 1100 binary Reading left to right this show that inputs 10204 10202 and 10199 are all on The other input data bytes are decoded similar Du
49. label Page 74 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Code Int Code Hex Description 4070 OxFO1A File is open another node owns it 4069 OxF01B Another node is the program owner 4068 OxF01C Reserved 4067 OxFO1D Reserved 4066 OxFO1E Data table element protection violation 4065 OxFO1F Temporary internal problem Gateway Specific Error not ElPCompliant Code Int Code Hex Description 1 OxFFFF CTS modem control line not set before transmit 2 OxFFFE Timeout while transmitting message 10 OxFFF6 Timeout waiting for DLE ACK after request 11 OxFFF5 Timeout waiting for response after request 12 OxFFF4 Reply data does not match requested byte count 20 OxFFEC DLE NAK received after request 21 OxFFEB DLE NAK sent after response 200 OxFF38 DLE NAK received after request TCP IP Interface Errors Error Int Error Hex Description 33 OxFFDF Failed to connect to target 34 OxFFDE Failed to register session with target timeout 35 OxFFDD Failed forward open response timeout 36 OxFFDC PCCC Tag command response timeout 37 OxFFDB No TCP IP connection error Common Response Errors Error Int Error Hex Description 40 OxFFD8 Invalid response length 41 OxFFD7 CPF item count not correct 42 OxFFD6 CPF addr
50. on the type of communication network used and the expected response time of the slowest device on the network Retry Count 0 to 10 This parameter specifies the number of times a command will be retried if it fails Float Flag YES or NO This flag specifies if the floating point data access functionality is to be implemented If the float flag is set to YES Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the two following parameters Float Start 0 to 32767 This parameter specifies the first register of floating point data All requests with register values greater than or equal to this value will be considered floating point data requests This parameter is only used if the Float Flag is enabled For example if a value of 7000 is entered all requests for registers 7000 and above will be considered as floating point data Float Offset 0 TO 3998 This parameter specifies the starting register for floating point data in the internal gateway database This parameter is used Page 100 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBTCP Protocol User Manual Parameter Value Description only if the Float Flag is set to YES For example if the Float Offset value is set to 3000 and the Float Start parameter is set to 7000 the data returned as floating point data for register 47001 or 407001 will actually come from i
51. reached Swap Rx YES OR NO Specifies if byte swapping of received data will occur Data Bytes Tx Timeout 0 TO 65535 Specifies the timeout period to transmit a message out the port Message transmission will be aborted if the message is not transmitted out the port within the specified timeout period Tx Minimum 9 TO 65535 Specifies the minimum number of milliseconds to delay Delay before transmitting a message out the port This pre send delay is applied before the RTS on time This may be required when communicating with slow devices Swap Tx YES OR NO Specifies if byte swapping of transmitted data will occur Data Bytes Page 164 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 3 ASCII Diagnostics 8 3 1 PCB Diagnostics The best way to troubleshoot this driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 8 3 2 ASCII Status Data in Upper Memory Each ASCII port has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 27 The following table lists the starting addres
52. sufficient data memory exists The following illustration describes the flow of data between the Ethernet Clients and the internal database Processor I Network 1 Databases Slave Client i I 1 I 1 I 1 Write or Read l Function I I teed or l Writ Function I Response I AT Resa Comman List Request Multiple Server Access to Database The MBTCP gateway provides server functionality using reserved Service Port 502 for Modbus TCP IP MBAP messages as well as Service Ports 2000 and 2001 to support the TCP IP Encapsulated Modbus version of the protocol used by several HMI manufacturers Server support in the gateway permits Client applications for example HMI software Quantum processors etc to read from and write to the gateway s database This section discusses the requirements for attaching to the gateway using Client applications The server driver is able to support multiple concurrent connections from several Clients Up to five 5 Clients can simultaneously connect on Service Port 502 and five 5 more can also simultaneously connect on Service Port 2000 Service Port 2001 is used by the MBTCP protocol to pass Encapsulated Modbus commands through from the Ethernet port to the gateway s serial port When configured as a server the internal database of the MBTCP gateway is used as the source for read requests and the destination for write requests from remote Clients Access to the database is controlled
53. target controller tag SINT name INT DINT REAL DWORD Tag Name Specifies the controller tag in the target PLC Page 68 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual Class 3 Client UClient x Commands Basic Parameter Value Description Enable Enable Disable Conditional Write Specifies if the command should be executed and under what conditions Enable The command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the module s internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from the specified data area Poll Interval 0 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Word swap Word and Byte swap Byte swap
54. the coil is disabled the controller can also alter the state of the coil Coils are numbered from zero coil 0001 zero coil 0002 one and so on The data value 65 280 FF00 HEX will set the coil ON and the value zero will turn it OFF all other values are illegal and will not affect that coil The use of server address 00 Broadcast Mode will force all attached servers to modify the desired coil A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast The example below is a request to server number 11 to turn ON coil 0173 Adr Func Data Coil Hi Data Coil Lo Data On off Ind Data Error Check Field 11 05 00 AC FF 00 CRC ProSoft Technology Inc Page 145 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Response The normal response to the Command Request is to re transmit the message as received after the coil state has been altered Adr Func Data Coil Hi DataCoil Lo Data On Off Data Error Check Field 11 05 00 AC FF 00 CRC The forcing of a coil via MODBUS function 5 will be accomplished regardless of whether the addressed coil is disabled or not In ProSoft products the coil is only affected if the necessary ladder logic is implemented A Note The Modbus protocol does not include standard functions for testing or changing the DISABLE state of discrete inputs or outputs Where applicable this may be ac
55. will eventually process a timeout condition for the request If the server receives the request but detects a communication error parity LRC CRC etc no response is returned The Master program will eventually process a timeout condition for the request If the server receives the request without a communication error but cannot handle it for example if the request is to read a non existent output or register the server will return an exception response informing the Master of the nature of the error The exception response message has two fields that differentiate it from a normal response Function Code Field In a normal response the server echoes the function code of the original request in the function code field of the response All function codes have a most significant bit MSB of 0 their values are all below 80 hexadecimal In an exception response the server sets the MSB of the function code to 1 This makes the function code value in an exception response exactly 80 hexadecimal higher than the value would be for a normal response With the function code s MSB set the Master s application program can recognize the exception response and can examine the data field for the exception code Data Field In a normal response the server may return data or statistics in the data field any information that was requested in the request In an exception response the server returns an exception code in the data field
56. words of output data When finished click ok 9 Inthe Module properties window each I O connection can be configured with its own RPI time Adding the Gateway to RSLogix5000 v 19 and Below 1 Add a New Module under the EtherNet IP bridge in the I O tree 2 Click Find and search for Generic EtherNet Bridge click Create 3 Set the IP address to the gateway This creates the communication path from the processor to the PLX30 gateway Page 56 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual 4 Next add a New Module under the Generic EtherNet Bridge and add a ClP Connection Here the parameters for the I O connection are specified The input and output sizes need to match the input and output sizes configured in PCB The Address field value represents the connection number in PCB By default all of the connections have 248 Input words 248 Output words and 0 Configuration words The Comm format should be set to Data type INT and the Assembly instances should be 1 for input 2 for output and 4 for configuration 5 ACIP Connection will need to be added and configured for each I O connection Configuring EIP Class 1 Connections in PCB There are four configurable parameters for each I O connection in PCB Parameter Value Range Description Input Data 0 3999 This parameter specifies the starting address within the Address gateway s vir
57. 0 08 00 01 CRC Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are 2 bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits Because the server interface is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Each PC will limit the quantity of register contents provided each scan thus for large register quantities multiple PC scans will be required and the data provided will be form sequential scans In the example below the register 3009 contains the decimal value 0 Adr Func Byte Count Data Input Reg Hi Data Input Reg Lo Error Check Field 11 04 02 00 00 E9 ProSoft Technology Inc Page 113 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Force Single Coil Function Code 05 Query This message forces a single coil either ON or OFF Any coil that exists within the controller can be forced to either state ON or OFF However because the controller is actively scanning unless the coil is disabled the controller can also alter the state of the coil Coils are numbered from zero coil 0001 ze
58. 00 mSec ABCDEFG Comment After the A character is received on the port the message timeout is started The characters ABCDE will be sent to the controller in one block The characters FG will follow in the second block one second later Intercharacter delay timeout used Settings Intercharacter delay timeout 300 mSec Rdelay 300 Data Received on port TIME gt 0 1000 mSec 2000 mSec A B C D E F lt gt GH gt 300mSec time gap Comment After each character is received the intercharacter delay timer is reset The characters ABCDEF will be sent to the controller in one block because the delay timer expires The characters GH will follow in the second block when the next time gap is recognized Packet size limit used Settings Packet size 4 RPacketLen 4 Data Received on port ABcCODEF GHI J Comment The first block sent to the controller will contain the characters ABCD and the second block will contain the characters EFGH The characters lJ will not be sent until two more characters are received on the port Page 162 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 2 ASCII Configuration In order for the ASCII driver to function a minimum amount of configuration data must be transferred to the gateway from the gateway s file system Care must be taken in constructing the gateway configuration parameters
59. 160 Modbus commands one tag per command Status Data Error codes reported individually for each command High level status data available from Modbus TCP IP Client for example PLC Command List Polling Each command can be individually enabled or disabled write only on data change is available 6 1 2 Internal Database Central to the functionality of the gateway is the internal database This database is shared between all the ports on the gateway and is used as a conduit to pass information from one device on one network to one or more devices on another network This permits data from devices on one communication port to be viewed and controlled by devices on another communication port In addition to data from the Client and server status and error information generated by the gateway can also be mapped into the internal database ProSoft Technology Inc Page 95 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Modbus TCP IP Client Access to Database The Client functionality exchanges data between the PLX30 gateway s internal database and data tables established in one or more Quantum processors or other server based devices The command list defined in the user configuration specifies what data is to be transferred between the gateway and each of the servers on the network No ladder logic is required in the processor server for Client functionality except to assure that
60. 2 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Select the COMMUNICATION COMMAND to execute from the following list of supported commands e PLC5 Type Read e PLC2 Unprotected Read e PLC5 Typed Read to PLC e PLC Typed Logical Read The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages For the PLC2 Unprotected Read message set the address to the database index such as 1000 to consider with the command The MULTIHOP option must be set to YES The MULTIHOP tab portion of the dialog box must be completed as shown in the following window AMSG MG13 0 2 Elements Bisi x Del Remove Hop 1756 ua F str 192 168 0 75 ControlLogix Backplane e 1756 Backplane Slot dec 0 Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero ProSoft Technology Inc Page 83 of 200 July 10 2013 EIP Protocol User Manual PLX30 Series Ethernet and Serial Gateways PLC 5 Sub Element Fields This section contains information specific to the PLC 5 processor with relation to the PCCC command set The commands specific to the PLC 5 processor contain a sub element code field This field selects a sub element field in a complex data table For example to obtain the curren
61. 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual Preset Multiple Registers Function Code 16 Query Holding registers existing within the controller can have their contents changed by this message a maximum of 60 registers However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller 16 bit for the 184 384 and 584 unused high order bits must be set to zero AN Note Function codes 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func Hi LoAdd Quantity Byte Hi Lo Hi Lo Data Error Check Add Cnt Data Data Data Field 11 10 00 87 00 02 04 00 0A 01 02 CRC Response The normal response to a function 16 query is to echo the address function code starting address and number of registers to be loaded Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 10 00 87 00 02 56 ProSoft Technology Inc Page 121 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Page 122 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBS Protocol User Manual 7 MBS Protocol In This Chapter 7 1 7 2 7 3 7 4 MBS Functional Overview MBS Configuration MBS Diagnostics MBS Reference This chapter cont
62. 234 1234 Word Swap 1 The words are swapped 1234 3412 Word and Byte Swap 2 The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap 3 The bytes in each word are swapped 1234 2143 These swap operations affect 4 byte or 2 word groups of data Therefore data swapping using these Swap Codes should be done only when using an even number of words such as when 32 bit integer or floating point data is involved Node IP Address XXX XXX XXX XXX IP address of the Siemens processor being addressed by the command PLC Type S7 200 S7 300 S7 Type of Siemens processor being addressed by the command ProSoft Technology Inc July 10 2013 Page 177 of 200 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Parameter Value Description 400 S7 1200 Rack 0 to 999 Rack number of the S7 300 S7 400 or S7 1200 CPU Note Rack number is not used for the S7 200 CPU Slot 0 to 12 Slot number of the S7 300 S7 400 or S7 1200 CPU Note Slot number is not used for the S7 200 CPU TSAP TSAP of the S7 200 CPU This can be found in the Siemens STEP 7 MicroWIN software Note TSAP is not used for the S7 300 S7 400 and S7 1200 Func Type Weg This parameter can either be Read or Write rite Data Type BOOL This parameter can be BOOL BYTE DINT REAL INT TIME BYTE or COUNT DINT REAL INT TIME COUNT Address INPUT This parameter can be
63. 3 Read Input Registers Function Code 04 113 144 Read Input Status Function Code 02 111 142 Receive Data 156 Receive Only Mode 158 Register Count 28 Remote STS Error Codes 74 Renaming PCB Objects 23 Response Timeout 100 Retry Count 100 RS 232 DTE to DCE Modem Connection 49 RS 232 Null Modem DTE with Hardware Handshaking 48 RS 232 Null Modem DTE without Hardware Handshaking 49 RS 422 Interface Connections 50 RS 485 Interface Connections 50 S Serial Port Cables 48 Serial Port Specifications 47 Setting Up the Project 20 SLC File Types 80 SLC5 05 Read Commands 78 SLC5 05 Write Commands 77 SLC 500 Command Set Functions 55 Standard Modbus Exception Code Errors 109 Start Here 9 Sub function Codes Supported 116 147 Support Service amp Warranty 195 Swap Code 28 System Requirements 10 T TCP IP Interface Errors 75 Termination of Received Data 161 Timer Counter 84 To Address 28 Transmit Data 157 Transmit Only Mode 159 Transmit Receive Mode 160 U Using Diagnosticsin ProSoft Configuration Builder 36 Using the CommonNet Data Map 27 Using the Online Help 19 W Warranty Information 198 Word Input Offset 99 130 Y Your Feedback Please 2 Page 200 of 200 ProSoft Technology Inc July 10 2013
64. 56E C MVI46 C MVI69 C PLx6000 e PLX30 Search Module Type Module Definition m PLX31 EIP MBS4 STEP 2 Define Ports Section Comment EIP Class 3 Server EIP Class 3 Client 0 EIP Class 3 Client 1 EIP Class 3 UClient 0 MBS Port 1 MBS Port 2 MBS Port 3 MBS Port 4 CommonNET v Status Action Required Used Used Used Used Used Used Used Used Used Used UnCheck if Not Used UnCheck if Not Used UnCheck if Not Used ProSoft Technology Inc July 10 2013 Page 21 of 200 Configuring Your Gateway PLX30 Series User Manual Ethernet and Serial Gateways 3 Inthe Product Line Filter area of the dialog box select the PLX30 radio button 4 Inthe STEP 1 Select Module Type drop down list select the model number that matches your gateway and then click OK to save your settings and return to the PCB Main window Page 22 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual 2 4 Renaming PCB Objects S Untitled ProSoft Configuration Builder File Yiew Project Tools Help Default Project name Status Ifo Ga Default Location A Default Module Please Select Module Type 3 Default Module Unknown Product Line Last Change Last Download Module Information Last Change Never Last Download Never Application Rev OS Rev Loader Rev MAC Address ConfigEdit
65. Address Fields ProSoft Technology Inc July 10 2013 Page 55 of 200 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 5 2 2 EIP Class 1 Connection The EIP Class 1 Connection is used when the gateway acts as an EIP adapter transferring data to and from a PLC the EIP scanner using a direct I O connection Direct I O connections can be used to transfer large amounts of data quickly The PLX30 seriesEIP gateway can handle up to eight I O connections each with 248 words of input data and 248 words of output data Rockwell Automation customers running RSLogix 5000 v 20 and higher can take advantage of premier integration with an Add on profile Adding the Gateway to RSLogix5000 v 20 1 Open up RSLinx and browse to the PLX30 gateway 2 Open up a short cut window by right clicking on the gateway 3 Select Upload EDS from device Note RSLogix5000 may need to be restarted in order to complete the installation 4 Once RSLogix5000 has been restarted add a New Module under the EtherNet IP bridge in the I O tree 5 Inthe Module Type Vendor Filters window set the filter options to ProSoft Technology 6 Select the corresponding PLX30 gateway and click Create 7 Inthe next window set the IP address to the address of the PLX30 gateway To add I O connections click the Change button 8 Here up to eight I O connections can be added The I O connections have a fixed size of 248 words of input data and 248
66. BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count Output Address Type Function Data Type Output READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count ProSoft Technology Inc July 10 2013 Page 171 of 200 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Input Address Type Function Data Type Input READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count Page 172 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways SIE Protocol User Manual 7 200 Data Block Address Type Function Data Type DB READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT Flag Address Type Function Data Type Flag READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT Output Address Type Function Data Type Output READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL
67. Command List The value to specify depends on the communication network used and the expected response time plus or minus of the slowest device on the network Retry Count 0 to 10 Specifies the number of times a command will be retried if it fails End of Message Delay 0 to 65535 Specifies a time delay in milliseconds to be added to the 3 5 character time delay used by the module to recognize the end of a message Certain applications may require validation of Modbus messages with more than 3 5 character time between consecutive bytes example modem applications A value of 0 will cause the default end of message delay to be used Minimum Command Delay 0 to 32767 Specifies the number of milliseconds to wait between receiving the end of a slave s response to the most recently transmitted command and the issuance of the next command This parameter can be used to place a delay after each command to avoid sending commands on the network faster than the slaves can be ready to receive them This parameter does not affect retries of a command as retries will be issued when a command failure is recognized Error Delay Counter 0 to 60000 Specifies the number of poll attempts to be skipped before trying to re establish communications with a slave that has failed to respond to a command within the time limit set by the Response Timeout parameter After the slave fails to respond the master will skip sending com
68. D0 gt lt 75 gt lt R gt _TT__TT_ 06 04 14 00 00 00 00 00 00 00 00 00 00 _TT_ 00 00 00 00 00 00 00 00 oo oo F3 97 TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_ aT TT T_T LT TT T_T Tt e e _TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 06 gt lt 10 gt lt 00 gt lt 32 gt lt 00 gt lt 04 gt lt 14 gt lt 00 gt lt 32 gt lt 00 gt lt 33 gt lt 00 gt lt 34 gt lt 00 gt lt 3 5 gt lt 00 gt lt 36 gt lt 00 gt lt 3 7 gt lt 00 gt lt 38 gt lt 00 gt lt 39 gt lt 00 gt lt 3A gt lt 00 gt lt 3B gt lt 1LE gt lt 26 gt lt R gt _TT_TT_ 06 10 00 32 00 oa EO 76 TT__TT__TT__TT__TT__TT__TT__TT__TT_TT__TT_TT_ T_T T_T E _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 01 gt lt 03 gt lt 00 gt lt 00 gt lt 00 gt lt 04 gt lt C5 gt lt CD gt lt R gt _TT_ 01 03 14 00 _TT_ 00 00 00 oo 00 00 00 00 00 00 00 00 00 Coo 00 00 oo oo oo a3 67 TT TT Nat da aaa a a ee eT a a I i TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 01 gt lt 10 gt lt 00 gt lt 00 gt lt 00 gt lt 0A gt lt 14 gt lt 04 gt lt D2 gt lt 10 gt lt E1 gt lt 16 gt lt 2E gt lt 22 gt lt 3D gt lt 3F gt lt FF gt lt 00 gt lt 05 gt lt 00 gt lt 06 gt lt 00 gt lt 07 gt lt 00 gt lt 08 gt lt 00 gt lt 09 gt lt 86 gt lt 49 gt lt R gt _TT__TT__TT_ 01 10 00 00 00 04 40 0E rr rr rr rr rr rr _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__
69. Delay Use CTS Line Internal Slave ID Bit Input Offset Word Input Offset Output Offset Holding Register Offset End of Message Delay bi 3 Definition Baud rate for port OoOoOOOrZroOOtz Oo o Reset Tag Reset All OK Cancel Page 24 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual 4 Double clicking any E icon will open an Edit dialog box with a table E Edit Modbus Port 1 Commands Internal Address Pollinterval Reg Count Swap Code Node Address ModBus Function MB Addr Internal Address Value Status OK Setto Defaults Add Row Insert Row Move Up Move Down Edit Row Copy Row Paste Row OK Cancel To add a row to the table click the Add Row button E Edit Modbus Port 1 Commands Enable Internal Address Poll Interval_ Reg Count Swap Code Node Address ModBus Function MB Addr 1 No Change 1 FC 3 Read Hol 0 Enable Value Status OK Setto Defaults Add Row Insert Row Delete Row Move Up Move Down Edit Row Copy Row OK Cancel ProSoft Technology Inc Page 25 of 200 July 10 2013 Configuring Your Gateway User Manual PLX30 Series Ethernet and Serial Gateways To edit the row click the Edit Row button This will open an Edit dialog box where you can edit the row parameters EE Edit Modbus Port 1 Commands bed
70. H specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions Encapsulated PCCC Read Message Read commands transfer data from the gateway to a processor The following encapsulated PCCC commands are supported e PLC2 Unprotected Read e PLC5 Typed Read e PLC5 Word Range Read e PLC Typed Read An example rung used to execute a read command is shown in the following diagram writemsg DN readmsg EN MSG 1 JE Type PLC5 Word Range Read EN Message Control readmsg E DN s IER writemsg DN The MESSAGE CONFIGURATION dialog box must be completed to define the data set to transfer to the processor from the gateway An example of the dialog box follows Message Configuration readmsg x Configuration Communication Message Type PLC5 Word Range Read Source Element Nt 0 0
71. INPUT OUTPUT FLAG TIMER Type OUTPUT COUNTER or DB Data Block FLAG TIMER COUNTER DB DB Number 9 to 32767 Specifies the Data Block number to be used with the command Note DB Number is only used when the Address Type is set to DB Address Address of the data in the Siemens device For Read or Write operations using the INT DINT REAL or BYTE Data Types the address is a byte address For Read or Write operations using the BOOL Data Type the address is a bit address Please see below for notes on addressing Page 178 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual Notes on Addressing in S7 Processors 7 300 S7 1200 Processor Byte Address in Data Block DB1 DBB1 DB1 DBB3 2 0000_0110 2 0000_0000 2 0110_0001 2 0011_0110 2 1100_0110 DB1 DBBO DB1 DBB2 DB1 DBB4 Word Address in Data Block DB1 DBW1 DB1 DBW3 2 0000_0110 2 0000 0000 27011 Wat 2 0011_0110 2 1100_0110 _ DB1 DBW0 DB1 DBW2 The gray area above represents the byte memory locations being overlapped when word address is used consecutively DB1 DBW0 DB1 DBW1 DB1 DBW2 etc lf DB1 DBW0 is used as the first address in the Siemens processor the next word address that can be used without overwriting the data would be DB1 DBW2 Double Word Address in Data Block DB1 DBD1 eee 2 0000_0110 2 0000 0000 240110 0001 2 0011_0110 2 1100_0110 DB1 DBDO The gr
72. If the gateway does not function as expected examine the configuration parameters using PCB Diagnostics After setting up the configuration in PCB download it to the gateway 8 2 1 ASCII Port x Parameter Value Description Enabled YES or NO Specifies if the port will be used If the parameter is set to No the port will not be used If the parameter is set to Yes the port will be used supporting the ASCII protocol RS Interface RS 232 Specifies the electrical interface for the ports RS 485 RS 422 Rx DB Start 1 Specifies the starting location in the internal database LA 3896 where the received data will be stored The buffer holds 130 words however the first three words of the data area define the sequence number last write byte count and the Rx message length If the parameter is set to 1 the port will not receive data Refer to Receive Data page 156 for detailed information on Rx data structure Tx DB Start 1 This parameter specifies the starting location in the internal E O 3896 database where the transmit data will be stored The buffer holds 130 words however the first three words of the data area define the sequence number last write byte count and the Tx message length If the parameter is set to 1 the port will not transmit data Refer to Transmit Data page 157 for detailed information on Tx data structure Baud Rate Various Specifies the baud rate to be used on the port Parity N
73. In order to interface with this database the table mapping feature provided by RSLogix 5000 must be used The software permits the assignment of Controller Tag Arrays to virtual PLC 5 data tables The ProSoft gateway using the PLC 5 command set defined in this document can then reach this controller data PLC5 and SLC5 05 processors containing an Ethernet interface use the encapsulated PCCC message method The gateway simulates these devices and accepts both read and write commands The following topics describe the support for the read and write operations Encapsulated PCCC Write Message Write commands transfer data from the processor to the gateway The following encapsulated PCCC commands are supported e PLC2 Unprotected Write e PLC5 Typed Write e PLC5 Word Range Write e PLC Typed Write An example rung used to execute a write command is shown in the following diagram WriteData writemsg EN MSG D t Type PLCS Word Range Write N Message Control writemsg E Ni R WriteData ProSoft Technology Inc Page 85 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways The MESSAGE CONFIGURATION dialog box must be completed to define the data set to be transferred from the processor to the gateway An example of the dialog box follows Message Configuration writemsg x Configuration l Communication Message Type PLC5 Word Range Write Source Tag BEES 7 Create Tag
74. MBTCP Functional Overview 94 MBTCP Server Port 2000 Status Error Locations 106 MBTCPServers 98 Messaging from a PLC5 81 Messaging from a SLC 5 05 Processor 77 MG 84 Minimum Command Delay 100 MNET Client Specific Errors 186 MNET Client x 169 MNET Client x Commands 169 Modbus Error and Status Data Area Addresses 134 Modbus Error Codes 140 Modbus Exception Codes 119 150 Modbus Exception Responses 118 140 149 Modbus Master Slave Port Specifications 125 Modbus Message Routing Port 2001 97 Modbus Port Access to Database 126 Modbus Ports Error and Status 134 Modbus Protocol Specification 110 Modbus TCP IP Client Access to Database 96 Modes of Operation 158 Module Communication Error Codes 184 Module Specific Error not Multiple Compliant 75 Mounting the Gateway on a DIN rail 12 Multiple Server Access to Database 96 O Output Offset 98 130 Package Contents 11 PD 84 Pinouts 3 PLC 5 Command Set Functions 55 PLC5 Read Commands 82 PLC 5 Sub Element Fields 84 PLC5 Write Commands 81 Port 1 Command Error List Layout 137 Port 1 Slave List Status Layout 138 Preset Multiple Registers Function Code 16 121 152 Preset Single Register Function Code 06 115 146 Printing a Configuration File 32 ProSoft Technology Product Documentation 2 R Read Coil Status Function Code 01 110 141 Read Holding Registers Function Code 03 112 14
75. NT 111 Write INT 106 READ TIME 111 Write TIME 53 READ Count 111 Write Count 106 Output Address Type Function Data Type Max Reg Cnt Max Reg Cnt Output READ BOOL 1 Write BOOL 1 READ BYTE 128 Write BYTE 128 READ DINT 32 Write DINT 32 READ REAL 32 Write REAL 32 READ INT 64 Write INT 64 READ TIME 64 Write TIME 32 READ Count 64 Write Count 64 Page 188 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual Input Address Type Function Data Type Max Reg Cnt Max Reg Cnt Input READ BOOL 1 Write BOOL 1 READ BYTE 128 Write BYTE 128 READ DINT 32 Write DINT 32 READ REAL 32 Write REAL 32 READ INT 64 Write INT 64 READ TIME 64 Write TIME 32 READ Count 64 Write Count 64 ProSoft Technology Inc July 10 2013 Page 189 of 200 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways CPU1212C Data Block Address Type Function Data Type Max Read Max Write DB READ BOOL 1 Write BOOL 1 READ BYTE 30 Write BYTE 30 READ DINT 7 Write DINT 7 READ REAL 7 Write REAL 7 READ INT 15 Write INT 15 READ TIME 15 Write TIME 15 READ COUNT 15 Write COUNT 15 Flag Address Type Function Data Type Max Reg Cnt Max Reg Cnt Flag READ BOOL 1 Write BOOL 1 READ BYTE
76. Note None of the addresses are available in the Modbus address range In order for them to be accessed via a Modbus request they must be moved into the 0 to 3999 address range See Using the CommonNet Data Map page 27 The status data area is initialized with zeros whenever the gateway is restarted This occurs during a cold start power on reset reset push button pressed or a warm boot operation commanded from a debug screen or after downloading a new configuration Page 134 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBS Protocol User Manual Port 1 General Modbus Error and Status Layout The addresses listed are for Port 1only but the format is the same for each port The start address for each port is given in the previous section Example Internal Offset Description Database Address 4400 0 Number of Command Requests 4401 1 Number of Command Responses 4402 2 Number of Command Errors 4403 3 Number of Requests 4404 4 Number of Responses 4405 5 Number of Errors Sent 4406 6 Number of Errors Received 4407 7 Configuration Error Code 4408 8 Current Error Index 4409 9 Last Error Index Slave Port General Port STATE and COMM STATE Status Note There are two additional port status parameters that are not available from the General Modbus Error and Status Data area The status values Port STATE and Port COMM STATE circled in
77. P server devices a command list must be constructed The commands in the list specify the server device to be addressed the function to be performed read or write the data area in the device to interface with and the registers in the internal database to be associated with the device data The Client command list supports up to 16 commands per Client The command list is processed from top command 0 to bottom The following table describes the command list configuration parameters Page 102 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBTCP Protocol User Manual Parameter Value Description Enable YES Specifies if the command is to be executed and under what NO conditions CONDITIONAL No 0 the command is disabled and will not be executed in the normal polling sequence However the command can still be activated using Command Control Yes 1 the command will be executed upon each scan of the Command List if the Poll Interval is set to zero 0 If the Poll Interval is set to a non zero value the command will be executed when the interval timer for that command expires Conditional 2 the command will execute only if the internal bit data associated with the command changes It will also clear the bit or bits in the internal database after the write command is built This parameter is valid only for bit level write commands FC 5 and 15 Intern
78. PLX31 EIP SIE 2 connections Class 3 Connected Client 2 Unconnected Client 1 Server 5 Page 52 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual 5 1 1 EtherNet IP Client In Client mode the gateway controls the read write data transfer between the gateway and other EtherNet IP devices Number of Clients Supported Connected Clients 2 Unconnected Clients 1 Command List Support for 100 commands per Client each configurable for command type IP address register to from addressing and word bit count Polling of Command List User configurable polling of commands including disabled continuous and on change of data write only Other Configurable Parameters Number of Commands up to 100 per Client Min Command Delay Response Timeout Retry Count Command Error Pointer ProSoft Technology Inc Page 53 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 5 2 EIP Configuration 5 2 1 EIP Class 3 Server Connection The EIP Class 3 Server Connection is used when the gateway is acting as a server slave device responding to message instructions initiated from a Client Master device such as an HMI DCS or PLC5 Configuring EIP Class 3 Server Connections in PCB The PLX30 Server connection file size is user selectable for 100 or 1000 integers If a value of 100 is selected valid registers
79. PU does not support reading a bit block of length lt gt 1 7 0x0007 Write data size error 10 0x000a The desired item is not available in the PLC 123 Oxff85 Cannot evaluate the received PDU 124 Oxff84 The PLC returned a packet with no result data 125 Oxff83 The PLC returned an error code not understood by this library 126 Oxff82 This result contains no data 127 Oxff81 Cannot work with an undefined result set 128 Oxff80 Unexpected function code in answer 129 Oxff7f PLC responds with an unknown data type 1024 Oxfc00 Short packet from PLC 1025 Oxfbff Timeout when waiting for PLC response 32767 0x8001 Not allowed in current operating status 32511 0x8101 Hardware fault 32509 0x8103 Object access not allowed 32508 0x8104 Context is not supported Step7 says Function not implemented or error in telegram 32507 0x8105 Invalid address 32506 0x8106 Data type not supported Page 184 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways SIE Protocol User Manual Decimal Hex Description 32505 0x8107 Data type not consistent 32502 0x810A Object does not exist 31999 0x8301 Insufficient CPU memory 31742 0x8402 CPU already in RUN or already in STOP 31740 0x8404 Severe error 31488 0x8500 Incorrect PDU size 30974 0x8702 Address invalid 12286 Oxd002 Step7 Variant of command
80. ProSoft TECHN agence Where Automation Connects PLX30 Series Ethernet and Serial Gateways July 10 2013 Your Feedback Please We always want you to feel that you made the right decision to use our products If you have suggestions comments compliments or complaints about our products documentation or support please write or call us How to Contact Us ProSoft Technology 5201 Truxtun Ave 3rd Floor Bakersfield CA 93309 1 661 716 5100 1 661 716 5101 Fax www prosoft technology com support prosoft technology com Copyright 2013 ProSoft Technology Inc all rights reserved PLX30 Series Ethernet and Serial Gateways User Manual July 10 2013 ProSoft Technology ProLinx inRAx ProTalk and RadioLinx are Registered Trademarks of ProSoft Technology Inc All other brand or product names are or may be trademarks of and are used to identify products and services of their respective owners ProSoft Technology Product Documentation In an effort to conserve paper ProSoft Technology no longer includes printed manuals with our product shipments User Manuals Datasheets Sample Ladder Files and Configuration Files are provided on the enclosed DVD ROM in Adobe Acrobat Reader file format PDFs These product documentation files may also be freely downloaded from our web site http Awww prosoft technology com Literature Content Disclaimer This documentation is not intended as
81. R or XON XOFF Page 154 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 1 2 Data Flow The following illustration shows receive and transmit data flow of the ASCII protocol Internal Database To external device ____ Rx Data From external device ASCII Device Data received from the ASCII device is accepted by the receive driver and placed in the receive database location configured by the user The receive driver waits until the user configured termination condition is recognized while receiving the data before placing the new data into the database For example if the carriage return character ASCII 13 is used as the termination condition for a received message this signals the end of the message When the receive driver observes this character in the input stream it takes all received characters and places them in the internal database In both receive and transmit operations a signal is required to determine when new data is received or must be transmitted The first word in the two data area is used for this purpose When the value of the first word changes new data is available Example The sequence number in the receive data block has a value of 0 as set when the gateway initializes The ASCII device sends a new data packet and the termination condition is present The receive driver copies the data int
82. SCII String Status File Number 1 Specifies the PLC 5 file number to be associated with the command If a value of 1 is entered for the parameter the field will not be used in the command and the default Page 60 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Parameter Value Description file will be used Element Specifies the element in the file where the command will Number start Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc Page 61 of 200 July 10 2013 EIP Protocol User Manual PLX30 Series Ethernet and Serial Gateways Class 3 Client UClient x Commands SLC500 3 Address Fields This command is typically used when accessing data in a Timer or Counter Le T 1 1 2 is the address of the accumulator in Timer 1 Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data receive
83. SSAGE CONFIGURATION dialog box must be completed to define the data set to transfer to the processor from the gateway An example of the dialog box follows x Configuration Communication Tag Message Type CIP Data Table Bes zl Source Element int_data 50 Number Of Elements bn a Destination Tag fplchdata 50 d New Tag Enable Enable Waiting Start Done Done Length 1 Error Code I Timed Out Extended Error Code Cancel Apply Help Complete the dialog box for the data area to be transferred CIP Data Table messages require a tag database element for both the source and destination The DESTINATION TAG is a tag defined in the Controller Tag database The SOURCE ELEMENT is the tag element in the EIP gateway The gateway simulates a tag database as an array of elements defined by the maximum register size for the gateway user configuration parameter Maximum Register in the Gateway section with the tag name INT_DATA In the example above the first element in the database is the starting location for the read operation of ten elements Additionally the COMMUNICATION information must also be configured An example of the dialog box follows Message Configuration readmsg x Configuration Communication Path EEMETA Browse Enet 2 192 168 0 75 Communication Method CIP C DH Chamel z Destination Link C SE Source Link Destination Node fp aeta J Ca
84. TT__TT__TT__TT__TT__TT__TT_ TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 02 gt lt 03 gt lt 00 gt lt OA gt lt 00 gt lt 0A gt lt E5 gt lt FC gt lt R gt _TT__TT__TT_ 02 03 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 L00 00 F7 82 TT_TT_TT_TT_TT_TT_ TT TTT TTT Tt et Tt tit TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 02 gt lt 10 gt lt 00 gt lt 0A gt lt 00 gt lt 0A gt lt 14 gt lt 00 gt lt 04 gt lt 00 gt lt 0B gt lt 00 gt lt 0C gt lt 00 gt lt 0D gt lt 00 gt lt 0E gt lt 00 gt lt 0F gt lt 00 gt lt 10 gt lt 00 gt lt 11 gt lt 00 gt lt 12 gt lt 00 gt lt 13 gt lt A5 gt lt 08 gt lt R gt _TT__TT_ 02 10 00 04 00 0a 60 3F _TT_TT_ For Modbus protocol users To interpret the data packets refer to the Modbus Protocol Specification which can be found in this manual page 141 or at www modbus org ProSoft Technology Inc Page 43 of 200 July 10 2013 Diagnostics and Troubleshooting PLX30 Series User Manual Ethernet and Serial Gateways 3 3 Gateway Status Data in Upper Memory The gateway places useful status data in dedicated upper memory locations in its internal database The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database registers 0 through 3999 It can be accessed by remote devices such
85. The bytes in each word are swapped 1234 2143 These swap operations affect 4 byte or 2 word groups of data Therefore data swapping using these Swap Codes should be done only when using an even number of words such as when 32 bit integer or floating point data is involved Node 1 to 255 0 Specifies the node address of the Modbus slave device Values of 1 Address isa to 255 are permitted broadcast Note Most Modbus devices only accept addresses in the range of 1 to 247 so check with the slave device manufacturer to see if a particular slave can use addresses 248 to 255 If the value is set to zero the command will be a broadcast message on the network The Modbus protocol permits broadcast commands for write operations Do not use node address 0 for read operations Modbus 1 2 3 4 5 Specifies the Modbus Function Code to be executed by the Function 6 15 or 16 command These function codes are defined in the Modbus protocol More information on the protocol is available from www modbus org The following function codes are supported by the gateway 1 Read Coil Status 2 Read Input Status 3 Read Holding Registers 4 Read Input Registers 5 Force Write Single Coil 6 Preset Write Single Register 15 Force Multiple Coils 16 Preset Multiple Registers MB Address Varies Specifies the starting Modbus register or bit address in the server to in Device be used by the command Refer to the documentation of each Modbus server
86. This defines the server condition that caused the exception The following table shows an example of a Master request and server exception response Request Response Field Name Hex Field Name Hex Function 01 Function 81 Starting Address Hi 04 Exception Code 02 Starting Address Lo Al Quantity of Outputs Hi 00 Quantity of Outputs Lo 01 In this example the Master addresses a request to server device The function code 01 is for a Read Output Status operation It requests the status of the output at address 1245 04A1 hex Note that only that one output is to be read as specified by the number of outputs field 0001 Page 118 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBTCP Protocol User Manual If the output address does not exist in the server device the server will return the exception response with the exception code shown 02 This specifies an illegal data address for the server Modbus Exception Codes Code Name Meaning 01 Illegal Function The function code received in the query is not an allowable action for the server This may be because the function code is only applicable to newer devices and was not implemented in the unit selected It could also indicate that the server is in the wrong state to process a request of this type for example because it is unconfigured and is being asked to return register valu
87. X30 Series Ethernet and Serial Gateways Index User Manual Index Modbus Port X Commands 128 0 00 Return Query Data 116 147 4 4101 Series LEDs 35 A ARP Timeout 101 ASCII Configuration 163 ASCII Functional Overview 154 ASCII Port x 163 ASCII Protocol 153 B Basic Command Set Functions 55 Bit Input Offset 99 130 BI 84 C CIP Data Table Operations 89 CIP Data Table Read 90 CIP Data Table Write 89 Client Command Errors 183 Command Error Delay 101 Command List Entry Errors 109 186 Command List Error Codes 140 Command List Overview 169 Commands Supported by the Module 170 Configuring a Port for Transmit Only Mode 159 Configuring a Port for Transmit Receive Mode 160 Configuring an IP Address 29 Configuring the Drivers 24 Configuring the Port for Receive Only Mode 158 Configuring Your Gateway 15 Connecting Power to the PLX30 Gateway 13 Connection Timeout 99 Contacting Technical Support 196 Control 84 ControlLogix and CompactLogix Processor Specifics 85 D Data Flow 155 DFNT Client 0 Status 71 DFNT Servers 1 Through 4 72 Diagnostics Function Code 08 115 147 Diagnostics Menu 29 Downloading the Project to the Gateway 30 E EIP Client Command List Error Data 71 EIP Command Entry Form 92 EIP Functional Overview 52 EIP Protocol 51 EIP Reference 77 Encapsulated PCCC Messages 85
88. a of Pts Hi Data of Pts Lo Error Check Field 11 02 00 C4 00 16 CRC Page 142 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual Response An example response to Read Input Status is as shown in Figure C4 The data is packed one bit for each input The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each input 1 ON O OFF The lower order bit of the first character contains the addressed input and the remainder follows For input quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as a quantity of RTU characters that is the number is the same whether RTU or ASCII is used Because the server interface device is serviced at the end of a controller s scan data will reflect input status at the end of the scan Some servers will limit the quantity of inputs provided each scan thus for large coil quantities multiple PC transactions must be made using coil status for sequential scans Adr Func Byte Data Discrete Input Data Discrete Input Data Discrete Input Error Check Field Count 10197 to 10204 10205 to 10212 10213 to 10218 11 02 03 AC DB 35 CRC The status of inputs 10197 to 10204 is shown as AC HEX 10101 1100 binary Readi
89. a Ada ridad A Oina Karina 165 This chapter contains information specific to PLX30 series gateways with an ASCII protocol driver ProSoft Technology Inc Page 153 of 200 July 10 2013 ASCII Protocol User Manual PLX30 Series Ethernet and Serial Gateways 8 1 ASCII Functional Overview The ASCII protocol permits the PLX30 Gateway to interface any ASCII device to the many protocols and networks available ASCII devices include barcode scanners weigh scales many field instruments printers and terminals The protocol supports one to four serial communication ports that provide accessibility from one to four independent serial networks 8 1 1 General Specifications e Ports One to four serial communication ports to receive and or transmit data e Receive buffer size 255 bytes e Receive termination Stream mode termination character s message timeout inter character delay or packet size length e Receive database location 1 disable receiver 0 to 3896 Transmit buffer size 255 bytes e Transmit characters with pacing 0 to 65535 millisecond delay between each transmitted character Transmit database location 1 disable transmitter 0 to 3896 Communication Configuration o Baud Rate 110 to 115 200 o Parity None Odd Even o Data Bits 5 to 8 o Stop Bits 1 or 2 o RTS On and Off Timing 0 to 65535 milliseconds o Minimum Response Delay 0 to 65535 milliseconds o Hardware or Software Handshaking RTS CTS DTR DS
90. a substitute for and is not to be used for determining suitability or reliability of these products for specific user applications It is the duty of any such user or integrator to perform the appropriate and complete risk analysis evaluation and testing of the products with respect to the relevant specific application or use thereof Neither ProSoft Technology nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein Information in this document including illustrations specifications and dimensions may contain technical inaccuracies or typographical errors ProSoft Technology makes no warranty or representation as to its accuracy and assumes no liability for and reserves the right to correct such inaccuracies or errors at any time without notice If you have any suggestions for improvements or amendments or have found errors in this publication please notify us No part of this document may be reproduced in any form or by any means electronic or mechanical including photocopying without express written permission of ProSoft Technology All pertinent state regional and local safety regulations must be observed when installing and using this product For reasons of safety and to help ensure compliance with documented system data only the manufacturer should perform repairs to components When devices are used for applications with technical safety requirements the relevant instructions must
91. ains information specific to PLX30 series gateways with a Modbus Serial MBS protocol driver ProSoft Technology Inc July 10 2013 Page 123 of 200 MBS Protocol User Manual PLX30 Series Ethernet and Serial Gateways 7 1 MBS Functional Overview The Modbus Serial protocol supports both Master and slave implementations of the protocol Each of the gateway serial ports is individually configurable to communicate to separate networks 7 1 1 Modbus Serial Specifications Command List Up to 100 commands per Master port each fully configurable for Function Code slave address register to from addressing and word bit count Supported Modbus Function Codes Read Coil Status Read Input Status Read Holding Registers Read Input Registers Force Write Single Coil Preset Write Single Holding Register 15 Force Write Multiple Coils 16 Preset Write Multiple Holding Registers OO P Gab ch Polling of Command List Configurable polling of command list including continuous and on change of data and dynamically user or automatic enabled Status Data Error codes available on an individual command basis In addition a slave status list is maintained per active Modbus Master port Node Address 1 to 247 software selectable RS Interface RS232 RS422 and RS485 Page 124 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gatew
92. al 0 to 3999 for Specifies the database address in the gateway s internal Address register level database to use as the destination for data brought in by a read addressing command or as the source for data to be sent out by a write or command The database address is interpreted as a bit address 0 to 63999 for or a 16 bit register word address depending on the Modbus bit level Function Code used in the command addressing For Modbus functions 1 2 5 and 15 this parameter is interpreted as a bit level address For Modbus functions 3 4 6 and 16 this parameter is interpreted as a register level address Poll Interval 9 to 65535 Specifies the minimum interval between executions of continuous commands The value is in tenths of a second Therefore if a value of 100 is entered the command will execute no more frequently than once every 10 seconds Reg Count 1 to 125 for This parameter specifies the number of 16 bit registers or binary registers bits to be transferred by the command ee 800 for Modbus functions 5 and 6 ignore this field as they apply only to coils a single data point For Modbus functions 1 2 and 15 this parameter sets the number of bits inputs or coils to be transferred by the command For Modbus functions 3 4 and 16 this parameter sets the number of registers to be transferred by the command Swap Code No Change Specifies if and how the order of bytes in data received or sent Word Swap is to be re
93. anguages spoken include Chinese English Europe Tel 33 0 5 34 36 87 20 location in Toulouse E mail support EMEA prosoft technology com France Languages spoken include French English Europe Tel 971 4 214 6911 location in Dubai UAE E mail mea prosoft technology com Languages spoken include English Hindi North America location in California Tel 1 661 716 5100 E mail support prosoft technology com Languages spoken include English Spanish Latin America Oficina Regional Tel 1 281 2989109 E Mail latinam prosoft technology com Languages spoken include Spanish English Latin America location in Puebla Mexico Tel 52 222 3 99 6565 E mail soporte prosoft technology com Languages spoken include Spanish Brasil location in Sao Paulo Tel 55 11 5083 3776 E mail brasil prosoft technology com Languages spoken include Portuguese English ProSoft Technology Inc July 10 2013 Page 197 of 200 Support Service and Warranty PLX30 Series User Manual Ethernet and Serial Gateways 10 2 Warranty Information For complete details regarding ProSoft Technology s TERMS amp CONDITIONS OF SALE WARRANTY SUPPORT SERVICE AND RETURN MATERIAL AUTHORIZATION INSTRUCTIONS please see the documents on the Product CD DVD or at www prosoft technology warranty Documentation is subject to change without notice Page 198 of 200 ProSoft Technology Inc July 10 20133 PL
94. arranged This option exists to allow for the fact that Word and Byte different manufacturers store and transmit multi byte data in Swap different combinations This parameter is helpful when dealing Byte Swap with floating point or other multi byte values as there is no one standard method of storing these data types The parameter can be set to rearrange the byte order of data received or sent into an order more useful or convenient for other applications No change 0 No change is made in the byte ordering 1234 1234 Word Swap 1 The words are swapped 1234 3412 Word and Byte Swap 2 The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap 3 The bytes in each word are swapped 1234 21 43 These swap operations affect 4 byte or 2 word groups of data Therefore data swapping using these Swap Codes should be ProSoft Technology Inc July 10 2013 Page 103 of 200 MBTCP Protocol User Manual PLX30 Series Ethernet and Serial Gateways Parameter Value Description done only when using an even number of words such as when 32 bit integer or floating point data is involved Node IP Address XXX XXX XXX XXX IP address of the device being addressed by the command Serv Port 502 or other supported port on server Service port on which communication will occur Use a value of 502 when addressing Modbus TCP IP servers which are compatible with the S
95. as In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions Page 88 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual CIP Data Table Operations This method of data transfer uses CIP messages to transfer data between the ControlLogix or CompactLogix processor and the gateway Tag names define the elements to be transferred The following topics describe the support for the read and write operations CIP Data Table Write CIP data table write messages transfer data from the processor to the gateway An example rung used to execute a write command is shown in the following diagram WriteData writemsg EN MSG 0 JE Type CIP Data Table Write LEN Message Control writemsg E HoN LER WriteData The MESSAGE CONFIGURATION dialog box must be completed to define the data set to be transferred from the processor to the gateway
96. as HMls or processors See Using the CommonNet Data Map page 27 3 3 1 General Gateway Status Data in Upper Memory The following table describes the contents of the gateway s general status data area Register Address Description 4000 through 4001 Program Cycle Counter 4002 through 4004 Product Code ASCIl 4005 through 4009 Product Revision ASCII 4010 through 4014 Operating System Revision ASCII 4015 through 4019 OS Run Number ASCII 3 3 2 Protocol Specific Status Data in Upper Memory The gateway also has upper memory locations for protocol specific status data Information about upper memory addresses where the gateway places status data for its protocol drivers can be found in the Diagnostics sections of the protocol chapters EIP diagnostics page 70 MBTCP diagnostics page 106 MBS diagnostics page 134 ASCII diagnostics page 165 SIE diagnostics page 183 Page 44 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Hardware Information Ethernet and Serial Gateways User Manual 4 Hardware Information In This Chapter 4 1 Hardware Specifications cceccceccseeeseceeeeeceeeeeeaeeeeeeeceaeeesaaeseeaeesseeeseaeeesaeeeeeees 4 2 Serial Port Cables for Gateways with Serial Porte ProSoft Technology Inc Page 45 of 200 July 10 2013 Hardware Information User Manual PLX30 Series Ethernet and Serial Gateways 4 1 Hardware Specifications Specification Power S
97. ateways The following illustration shows an example Data Map E Edit DATA MAP From Address To Address Register Count Swap Code Delay Preset Comment 1000 2 No Change 1000 4170 4370 6300 1010 2 1020 30 1100 20 From Address Value Status OK 1001 1002 1003 No Change No Change No Change Set to Defaults Add Row Insert Row Delete Row Move Up Move Down Edit Row Copy Row OK Cancel The following table describes the parameters for configuring the Data Map Parameter Value Description From Address 0 to highest This parameter specifies the beginning internal database Status Data register address for the copy operation This address can be address any valid address in the User Data Area or the Status Data Area of the gateway To Address 0 to 3999 This parameter specifies the beginning destination register address for the copy operation This address must always be within the User Data registers area A destination address must be specified that will not overwrite data that has been stored in memory by one of the communication protocols running on the gateway Register Count 1 to 100 This parameter specifies the number of registers to copy Swap Code No Change The order of the bytes in the registers may need to be Word Swap swapped during the copy process in order to change the Word and Byte alignment of bytes between dissimilar protocols This Swap parameter is helpful wh
98. ay area above represents the byte memory locations being overlapped when double word address is used consecutively DB1 DBD0 DB1 DBD1 DB1 DBD2 etc ProSoft Technology Inc Page 179 of 200 July 10 2013 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways If DB1 DBDO is used as the first address in the Siemens processor the next double word address that can be used without overwriting the data would be DB1 DBD4 All of the above share the same memory locations in the processor Note Incorrect memory location addressing can cause the data to be overwritten Below is a graphical representation of the addressing of the processor s memory locations DB1 DBD1 DB1 DBBODB1 DBB1 DB1 DBB2 DB1 DBB3 DB1 DBB4 DB1 DBD0 Example Sending an integer value of 11733 from gateway register 1000 to a Siemens S7 300 processor demonstrates the addressing scheme in the Siemens S7 300 processor Page 180 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual PCB screen shot showing Client command to send INT data to DB1 address 0 W Edit SIE Client 0 Commands Enable Internal Address PollInterval Re Swap Code PAddress PLC Type Rack Slot TSAP Func Type Data Type Address Ty DB Number Address Comment x EEI 10 DW 1 No Change 10 1 3 179 57 3007 0 2 1000 Write INT DB 1 lt Enable Value Status OK
99. ay can be seen on the network Use ProSoft Configuration Builder to confirm proper configuration of the gateway and to transfer the configuration files to and from the gateway Modbus Message Routing Port 2001 When Modbus messages are sent to the Gateway over the TCP IP connection to port 2001 the messages are sent routed in the Gateway directly out the serial communication port Port 0 if it is configured as a Modbus Master The commands whether a read or a write command are immediately routed to the slave devices on the serial port Response messages from the slave devices are routed to the TCP IP network to be received by the originating host ProSoft Technology Inc Page 97 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 6 2 MBTCP Configuration 6 2 1 MBTCP Servers This section contains database offset information used by the server when accessed by external Clients These offsets can be utilized to segment the database by data type Edit MNet Servers Float Flag Float Start 7000 Float Offset es Output Offset 0 Bit Input Offset 0 Holding Register Offset 0 Word Input Offset 0 Connection Timeout 60 Comment Definition Yes or No This flag specifies if the floating point data access functionality is to be implemented If the float flag is set to Yes Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the t
100. ays The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages The MULTIHOP option must be set to YES The MULTIHOP tab portion of the dialog box must be completed as displayed in the following window 7 3MSG N10 0 51 Elements Dis Ins Add Hop Del Remove Hop To Address Type This SLC500 1756 ENet LP str 192 168 0 75 ControlLogix Backplane He 1756 Backplane Slot dec 0 Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero SLC5 05 Read Commands Read commands transfer data to the SLC processor from the gateway An example rung used to execute a read command is shown in the following diagram z N10 0 MSG 0001 Readirite Message END 13 Type Peer To Peer ReadMrite Read ke Des Target Device PLCS5 Local Remote Local KER Control Block N11 0 Control Block Length 51 Setup Screen N10 0 13 Page 78 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Set the READ WRITE parameter to READ The gateway supports a TARGET DEVICE parameter value of 500CPU or PLCS In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box Si D
101. ays MBS Protocol User Manual 7 1 2 Modbus Master Slave Port Specifications Type Specifications General Parameters Internal Database Up to 4000 registers words available Communication parameters Port 0 Baud Rate 110 to 115K baud possible 110 to 38 4K baud recommended for all applications Higher baud rates are recommended only for use with very slow Modbus polling rates e g 1command or less per second Port 1 2 3 Baud Rate 110 to 115K baud Stop Bits 1 or 2 Data Size 5 to 8 bits Parity None Even Odd RTS Timing delays 0 to 65535 milliseconds Modbus Modes RTU mode binary with CRC 16 ASCII mode with LRC error checking Floating Point Data Floating point data movement supported including configurable support for Enron implementation Modbus Function Codes Read Coil Status Read Input Status Read Holding Registers Read Input Registers Force Write Single Coil Preset Write Single Register 15 Force Write Multiple Coils 16 Force Write Multiple Register 22 Mask Write Holding Register Slave Only 23 Read Write Holding Registers Slave Only OO P Gab ch Modbus Master Command List Up to 100 command per Master port each fully configurable for function slave address register to from addressing and word bit count Status Data Error codes available on an individual command basis In addition a slave status list is mainta
102. che Connections O Enable Enable Waiting Start Done Done Length 0 Error Code J Timed Out Extended Error Code Cancel Apply Help ProSoft Technology Inc Page 91 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions 5 4 4 EIP Command Entry Form The following form can be used to design the application s command list Gateway Information Data Device Information Data Column 1 2 3 4 5 6 7 8 9 10 11 12 Function Enable Internal Poll Count Swap IP Slot Function Function Parameters Code Code Address _ Interval Code Address Number Code Time
103. chneider Electric MBAP specifications this will be most devices If the server device supports another service port enter the value here Slave Address 1 to 255 0 is a broadcast Specifies the node address of a remote Modbus Serial device through a Modbus Ethernet to Serial converter Values of 1 to 255 are permitted Note Most Modbus devices only accept addresses in the range of 1 to 247 so check with the slave device manufacturer to see if a particular slave can use addresses 248 to 255 If the value is set to zero the command will be a broadcast message on the network The Modbus protocol permits broadcast commands for write operations Do not use node address 0 for read operations Modbus Function 1 2 3 4 5 6 15 or 16 Specifies the Modbus Function Code to be executed by the command These function codes are defined in the Modbus protocol More information on the protocol is available from www modbus org The following function codes are supported by the gateway 1 Read Coil Status 2 Read Input Status 3 Read Holding Registers 4 Read Input Registers 5 Force Write Single Coil 6 Preset Write Single Register 15 Force Multiple Coils 16 Preset Multiple Registers MB Address in Device Varies Specifies the starting Modbus register or bit address in the server to be used by the command Refer to the documentation of each Modbus server device for the register and bit addres
104. complished via device specific Program commands In ProSoft products this is only accomplished through ladder logic programming Coils that are reprogrammed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function Code 5 and even months later an output is connected to that coil the output will be hot Preset Single Register Function Code 06 Query Function 06 allows the user to modify the contents of a holding register Any holding register that exists within the controller can have its contents changed by this message However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller unused high order bits must be set to zero When used with server address zero Broadcast mode all server controllers will load the specified register with the contents specified AX Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func Data Start Reg Data Start Reg Data of Regs Hi Data ofRegsLo Error Check Field Hi Lo 11 06 00 01 00 03 CRC Page 146 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual Response The response to a preset single register request is to re transmit the query message after the register
105. controller can also alter the state of the coil Coils are numbered from zero coil 00001 zero coil 00002 one and so on The desired status of each coil is packed in the data field one bit for each coil 1 ON 0 OFF The use of server address 0 Broadcast Mode will force all attached servers to modify the desired coils A Note Functions 5 6 15 and 16 are the only messages other than Loopback Diagnostic Test that will be recognized as valid for broadcast The following example forces 10 coils starting at address 20 13 HEX The two data fields CD 1100 and 00 0000 000 indicate that coils 27 26 23 22 and 20 are to be forced on Adr Func HiAdd Lo Quantity Byte Data Coil Status Data Coil Status Error Check Add Cnt 20 to 27 28 to 29 Field 11 OF 00 13 00 OA 02 CD 00 CRC Response The normal response will be an echo of the server address function code starting address and quantity of coils forced Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 OF 00 13 00 0A CRC The writing of coils via Modbus function 15 will be accomplished regardless of whether the addressed coils are disabled or not Coils that are not programmed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function code 15 and even months later an output is connected to that coil the output will be hot Page 120 of 200 ProSoft Technology Inc July 10
106. d and the expected response time of the slowest device on the network Retry Count 0Oto10 Specifies the number of times a command will be retried if it fails 9 2 2 SIE Client x Commands The SIE Client x Commands section of the configuration sets the Siemens Industrial Ethernet Client command list This command list polls Siemens Industrial Ethernet server devices attached to the Siemens Industrial Ethernet Client port The gateway supports numerous commands This permits the module to interface with a wide variety of Siemens Industrial Ethernet protocol devices The function codes used for each command are those specified in the Siemens Industrial Ethernet protocol Each command list record has the same format The first part of the record contains the information relating to the gateway and the second part contains information required to interface to the Siemens Industrial Ethernet server device Command List Overview A command list needs to be constructed to interface the gateway with Siemens Industrial Ethernet server devices The commands in the list specify the server device to be addressed the function to be performed read or write the data area in the device to interface with and the registers in the internal database to be associated with the device data Each Client command list supports up to 16 commands The command list is processed from top command 1 to bottom A poll interval parameter is associated with eac
107. d in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Word swap Word and Byte swap Byte swap Specifies if the data from the server is to be ordered differently than it was received This parameter is typically used when dealing with floating point or other multi register values None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to an SLC 5 05 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 502 510 511 Specifies the function code to be used in the command 502 Protected Typed Read 510 Protected
108. de 15 Force Multiple Coils For example if this parameter is set to 50 and a Function Page 98 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBTCP Protocol User Manual Parameter Value Description Code 1 command is received requesting Coil address 0 virtual Modbus Coil address 00001 or 000001 the data returned in the response will be the value at register 50 bit 0 in the gateway s database Bit Input 0 to 3999 This parameter specifies the offset address in the internal Modbus Offset database for network requests for Modbus function 2 commands For example if the value is set to 150 an address request of 0 will return the value at register 150 in the database Holding 0 to 3999 This parameter specifies the offset address in the internal Modbus Register database to with network requests for Modbus functions 3 6 or 16 Offset commands For example if the value is set to 50 an address request of 0 will return the value at register 50 in the database Word Input 0 to 3999 This parameter specifies the offset address in the internal Modbus Offset database for network requests for Modbus function 4 commands For example if the value is set to 150 an address request of 0 will return the value at register 150 in the database Connection 0 to 1200 This parameter specifies the number of seconds the server will wait Timeout seconds to receive new data If the serv
109. devices on the network and their IP addresses H Prosoft Discovery Service Sn 0000212C Sn 00004051 MVI5S6E SIE H 5202 DFNT MC 10 1 3 196 m 105 102 0 71 Sn 00000355 Sn 00000008 PLX31 EIP SIE 3_IEDs 10 1 3 155 10 1 3 245 Click the search icon to begin the browse Page 30 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual 4 Right click your PLX30 series gateway and select IP Configuration from the shortcut menu H IP Configuration TOX The module will be rebooted and the data communication will be temporarily interrupted Por 1 Name EI IP Address 192 168 O Network Mask 255 255 255 U MAC ID 00 0D 8D A2 00 07 5 Enter the same IP address and network mask that you entered in the Ethernet configuration of the gateway Click OK The gateway will reboot 6 Close the ProSoft Discovery Service window to return to the Download dialog box 7 Click the DOWNLOAD bution The gateway will perform a platform check to read and load its new settings When the platform check is complete the status bar in the Download dialog box will display the message Module Running Download files from PC to module Module Running r SSS Ss sss ss STEP 1 Select Communication Path Select Connection Type Ethernet v Browse Device s Ethernet 192 168 0 250 Use Default IP ClIPconnect STEP 2 Transfer File s
110. ds Reg Count 1 to 125 for Specifies the number of 16 bit registers or binary bits to be registers transferred by the command a 800 for Modbus functions 5 and 6 ignore this field as they apply only to a coils single data point For Modbus functions 1 2 and 15 this parameter sets the number of bits inputs or coils to be transferred by the command For Modbus functions 3 4 and 16 this parameter sets the number of registers to be transferred by the command Swap Code No Change Specifies if and how the order of bytes in data received or sent is to Word Swap be rearranged This option exists to allow for the fact that different Word and manufacturers store and transmit multi byte data in different Byte Swap combinations This parameter is helpful when dealing with floating Byte Swap point or other multi byte values as there is no one standard method of storing these data types The parameter can be set to rearrange the byte order of data received or sent into an order more useful or convenient for other applications No change 0 No change is made in the byte ordering 1234 ProSoft Technology Inc July 10 2013 Page 131 of 200 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Parameter Value Description 1234 Word Swap 1 The words are swapped 1234 341 2 Word and Byte Swap 2 The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap 3
111. dy to be sent to an external device Data received by an external device is also stored in the gateway s internal database until ready to be transmitted to the ASCII device The following illustration shows the data flow when the port is configured for transmit receive mode ASCII Device Ei Internal Database To external device From external device Tx Driver Configuring a Port for Transmit Receive Mode In order to set a port to both receive data and transmit data to an ASCII device ensure that the Rx DB Start parameter and the Tx DB Start parameter both contain values that specify data storage starting locations A 1 value in either parameter will disable the particular function that the parameter serves Page 160 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual Termination of Received Data When data is received on the application port the user must define in the configuration when this data will be transferred to the internal database within the gateway This is known as the termination type for port When the termination condition is met the data will be sent from the port s receive buffer data area of 255 bytes to the internal database This termination type is set in the bit mapped type field of the gateway object The following illustration shows the bit map used for this parameter Termina
112. e INT READ TIME Write TIME READ Count Write Count Input Address Type Function Data Type Input READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count Page 176 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways SIE Protocol User Manual Command List Parameters Parameter Value Description Enable DISABLED ENABLED CONDITIONAL Specifies if the command is to be executed and under what conditions Disabled 0 the command is disabled and will not be executed in the normal polling sequence Continuous 1 the command will be executed upon each scan of the Command List if the Poll Interval is set to zero 0 If the Poll Interval is set to a non zero value the command will be executed when the interval timer for that command expires Conditional 2 the command will execute only if the internal data associated with the command changes Internal Address 0 to 3999 for register level addressing or 0 to 63999 for bit level addressing Specifies the database address in the gateway s internal database to use as the destination for data brought in by a read command or as the source for data to be sent out by a write command The database address is interpreted as a bit address or a 16 bit register word address depending on the
113. e command is built To use this feature configure the commands as disabled enable code 0 This Command Control feature can be disabled by setting this parameter to a value of 0 to 1 ProSoft Technology Inc July 10 2013 Page 129 of 200 MBS Protocol User Manual PLX30 Series Ethernet and Serial Gateways Slave Configuration Parameters Parameter Value Description Minimum Response Delay 0 TO 65535 Specifies the number of milliseconds to wait before responding to a command received on the port from a remote Master This delay is sometimes required to accommodate slower Master devices Internal Slave ID 1 TO 247 Defines the virtual Modbus slave address for the port Any commands received on the slave port addressed to the node address entered here will be processed by the gateway Each slave device on the network must be assigned a unique address Bit Input Offset 0 to 3998 Specifies the internal database address to use as the zero address or starting point for binary Input Status data Input Status data is read only data requested by Modbus Function Code 2 commands Read Input Status For example if this parameter is set to 150 and a Function Code 2 command is received requesting Input Status address 0 virtual Modbus Address 10001 or 100001 the data returned in the response will be the bit value at register 150 bit 0 in the gateway s database Word Input Offset
114. e identical to the request Sub function Data Field Request Data Field Response 00 00 Any Echo Request Data Example and State Diagram Here is an example of a request to remote device to Return Query Data This uses a sub function code of zero 00 00 hex in the two byte field The data to be returned is sent in the two byte data field A5 37 hex Request Response Field Name Hex Field Name Hex Function 08 Function 08 Sub function Hi 00 Sub function Hi 00 Sub function Lo 00 Sub function Lo 00 Data Hi A5 Data Hi A5 Data Lo 37 Data Lo 27 Page 116 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual The data fields in responses to other kinds of queries could contain error counts or other data requested by the sub function code YES Data Value OK ProSoft Technology Inc Page 117 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Modbus Exception Responses When a Modbus Master sends a request to a server device it expects a normal response One of four possible events can occur from the Master s query If the server device receives the request without a communication error and can handle the query normally it returns a normal response If the server does not receive the request due to a communication error no response is returned The Master program
115. e to the quantity of input statuses requested the last data field which is shown as 35 HEX 0011 0101 binary contains the status of only 6 inputs 10213 to 102180 instead of 8 inputs The two left most bits are provided as zeros to fill the 8 bit format Read Holding Registers Function Code 03 Query Read Holding Registers 03 allows the user to obtain the binary contents of holding registers 4xxxx in the addressed server The registers can store the numerical values of associated timers and counters which can be driven to external devices The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered form zero 40001 zero 40002 one and so on The broadcast mode is not allowed The example below reads registers 40108 through 40110 from server 584 number 11 Adr Func Data Start Reg Hi Data Start Reg Lo Data of Regs Hi Data ofRegsLo Error Check Field mi 03 00 6B 00 03 CRC Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are two bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits
116. echnology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual 2 2 Using the Online Help Most of the information needed to help you use ProSoft Configuration Builder is provided in a Help System that is always available whenever you are running ProSoft Configuration Builder The Help System does not require an Internet connection To view the help pages start ProSoft Configuration Builder open the HELP menu and then choose CONTENTS ProSoft Technology Inc Page 19 of 200 July 10 2013 Configuring Your Gateway User Manual PLX30 Series Ethernet and Serial Gateways 2 3 Setting Up the Project To begin start ProSoft Configuration Builder PCB If you have used other Windows configuration tools before you will find the screen layout familiar ProSoft Configuration Builder s PCB s window consists of a tree view on the left and an information pane on the upper right side and a configuration pane on the lower right side of the window When you first start PCB the tree view consists of folders for Default Project and Default Location with a Default Gateway in the Default Location folder The following screen shows the PCB window with a new project Ei Untitled ProSoft Configuration Builder Eile View Project Tools Help CC Default Project Cal Default Location Fg Default Module Default Module d d Please Select Module Type
117. ection button In the Connection Setup dialog box select ETHERNET from the Select Connection Type dropdown menu Type in the gateway s IP address in the Ethernet field Connection Setup Select Connection Type fEthemet M Ethernet 192 168 0 250 ProSoft Discovery Service PDS Browse Device s ClPconnect ee EHS Test Connection Cancel ProSoft Technology Inc Page 37 of 200 July 10 2013 Diagnostics and Troubleshooting PLX30 Series User Manual Ethernet and Serial Gateways 2 Click the Connect button Verify that the Ethernet is connected properly between your computer s communication port and the gateway If you are still not able to establish a connection contact ProSoft Technology for assistance Page 38 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 3 2 1 Diagnostics Menu The Diagnostics menu is arranged as a tree structure with the Main menu at the top of the tree and one or more submenus for each menu command The menu commands available will depend on the protocol combination of your gateway Diagnostics Connection Log Module tg chic dnt d PLX31 EIP MBS4 Time 15 47 10 Hi MODULE PLX31 EIP MBS4 gt MODULE gt Version Refresh Counter 2 Versi WS PRODUCT NAME PLX31 EIP MBS4 Data Map PRODUCT NAME CODE EIM4 l sf Modbus Database View SOFTWARE REVISION LEVEL 1 00 182
118. ection is required between the gateway and a modem or other communication device RS 232 Application Port Cable Modem Connection DB 9 Male RS 232 Device Signal Signal Common Common DTR DTR For most modem applications RTS CTS handshaking should be enabled in the port configuration ProSoft Technology Inc Page 49 of 200 July 10 2013 Hardware Information PLX30 Series User Manual Ethernet and Serial Gateways 4 2 4 RS 422 Interface Connections The following illustration applies when the RS 422 interface is selected RS 422 Application Port Cable DB 9 Male RS 422 Device TxD RxD TxD RxD Signal Signal Common Common RxD 2 Ht RxD s H ro 4 2 5 RS 485 Interface Connections The following illustration applies when the RS 485 interface is selected RS 485 Application Port Cable DB 9 Male RS 485 Device TxD RxD TxD RxD TxD RxD s TxD RxD Signal 5 Signal Common Common A NOTE This type of connection is commonly called a RS 485 half duplex 2 wire connection If you have RS 485 4 wire full duplex devices they can be connected to the gateway s serial ports by wiring together the TxD and RxD from the two pins of the full duplex device to Pin 1 on the gateway and wiring together the TxD and RxD from the two pins of the full duplex device to Pin 8 on the gateway As an alternative you could try setting the gateway to use the RS 422 interface and connect the full duplex device according to
119. ed family when used with the PCCC command set The SLC and MicroLogix processor commands support a file type field entered as a single character to denote the data table to interface with in the command The following table defines the relationship of the file types accepted by the Gateway and the SLC file types File Type Description Status Bit Timer Counter Control Integer Floating point String ASCII Kli k r le A wW V The File Type Command Code is the ASCII character code value of the File Type letter This is the value to enter into the File Type parameter of the PCCC Command configurations in the data tables in the ladder logic Additionally the SLC specific functions 502 510 and 511 support a sub element field This field selects a sub element field in a complex data table For example to obtain the current accumulated value for a counter or timer the sub element field should be set to 2 Page 80 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual 5 4 2 PLC5 Processor Specifics Messaging from a PLC5 The gateway can be used to receive messages from a PLC5 containing an Ethernet interface The gateway supports both read and write commands A discussion of each operation is provided in the following topics PLC5 Write Commands Write commands transfer data from the PLC5 processor to the gateway An example
120. en dealing with floating point or other Byte Swap multi register values as there is no standard method of storage of these data types in slave devices No change No change is made in the byte ordering 1234 1234 Word Swap The words are swapped 1234 3412 Word and Byte Swap The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap The bytes in each word are swapped 1234 2143 Delay Preset This parameter sets an interval for each Data Map copy operation The value that is specified for the Delay Preset is not a fixed amount of time It is the number of firmware scans that must transpire between copy operations Page 28 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways User Manual 2 7 Configuring an IP Address Use this procedure to configure the Ethernet settings for your Gateway You must assign an IP address subnet mask and gateway address After you complete this step you can connect to the Gateway with an Ethernet cable 1 Determine the network settings for your Gateway with the help of your network administrator if necessary You will need the following information o IP address fixed IP required o Subnet mask o Gateway address A Note The gateway address is optional and is not required for networks that do not use a default gateway 2 Double click the ETHERNET CONFIGURATION icon This ac
121. ent Error offset 8 will have a non zero value if the currently executing Client command experiences an error The Last Error offset 9 will store the most recent non zero value error code that was reported by the Client the last time it experienced an error Note that this value is retentive This register will hold the last error value until the memory is cleared by a restart reset cold boot or warm boot operation Therefore any value you see here may indicate an error that could have occurred at any time since the gateway was last restarted and may not indicate a current or recent error For details on error codes see MBTCP Client Command List Error Data page109 ProSoft Technology Inc Page 107 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways MBTCP Client Command List Error Data A status error code is held in upper memory for each command in each MBTCP Clients command list The following table lists the addresses in upper memory that hold command list error data for each MBTCP Client Client Address Range 0 15510 through 15525 1 15536 through 15551 2 15562 through 15577 8 15718 through 15733 9 15744 through 15759 The first word in each Client s command list error data area contains the status error code for the first command in the Client s Command List Each successive word in the Command Error List is associated with the next command in the Cl
122. er Manual 2 Configuring Your Gateway In This Chapter 2 1 Installing ProSoft Configuration Builder Software cccscceeeeeeeeeeeeeeeeeeneeeeenees 16 2 2 Using the Online Help 19 2 3 Setting Up the Prolect 20 ProSoft Configuration Builder PCB is a convenient and powerful software tool for managing your gateway configuration Use PCB to configure a new project or to transfer an existing project to a new device You can also to use PCB to retrieve a configuration from a working gateway by uploading the configuration from the gateway ProSoft Technology Inc Page 15 of 200 July 10 2013 Configuring Your Gateway PLX30 Series User Manual Ethernet and Serial Gateways 2 1 Installing ProSoft Configuration Builder Software You must install the ProSoft Configuration Builder PCB software to configure the gateway You can always get the newest version of ProSoft Configuration Builder from the ProSoft Technology website To install ProSoft Configuration Builder from the ProSoft Technology website 1 2 3 4 5 Open your web browser and navigate to http Wwww prosoft technology com pcb Click the link at the Current Release Version section to download the latest version of ProSoft Configuration Builder Choose SAVE or SAVE FILE when prompted Save the file to your Windows Desktop so that you can find it easily when you have finished downloading When the download is complete locate and open the file
123. er Manual Coils that are reprogrammed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function Code 5 and even months later an output is connected to that coil the output will be hot Preset Single Register Function Code 06 Query Function 06 allows the user to modify the contents of a holding register Any holding register that exists within the controller can have its contents changed by this message However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller unused high order bits must be set to zero When used with server address zero Broadcast mode all server controllers will load the specified register with the contents specified A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func Data Start Reg Data Start Reg Data of Regs Hi Data of Regs Lo Error Check Field Hi Lo 11 06 00 01 00 03 CRC Response The response to a preset single register request is to re transmit the query message after the register has been altered Adr Func DataRegHi DataRegLo DatalnputRegHi Data Input RegLo Error Check Field 11 06 00 01 00 03 CRC Diagnostics Function Code 08 MODBUS function code 08 provides a series of tests for checking the communication sys
124. er device number 11 Adr Func Data Start PH Data Start PtLo Data Of Pts Ho Data OfPtsLo Error Check Field 11 01 00 13 00 25 CRC Response An example response to Read Coil Status is as shown in Figure C2 The data is packed one bit for each coil The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each coil 1 ON 0 OFF The low order bit of the first character contains the addressed coil and the remainder follows For coil quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as quantity of RTU characters that is the number is the same whether RTU or ASCII is used Page 110 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual Because the server interface device is serviced at the end of a controller s scan data will reflect coil status at the end of the scan Some servers will limit the quantity of coils provided each scan thus for large coil quantities multiple PC transactions must be made using coil status from sequential scans Adr Func Byte Data Coil Data Coil Data Coil Data Coil Data Coil Error Count Status20to Status 28to Status 36to Status44to Status52to Check 27 35 43 51 56 Field 144 D 05 CD 6B B2 OE 1B CRC
125. er does not receive any new data during this time it will close the connection ProSoft Technology Inc July 10 2013 Page 99 of 200 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 6 2 2 MBTCP Client x The MBTCPClient x section of the configuration specifies the parameters for the client to be emulated on the gateway The command list for the client is entered in a separate section Edit MNet Client 0 Error Status Pointer 4800 Error Status Pointer Command Error Pointer 4810 Minimum Command Delay 10 Response Timeout 1000 Retry Count 3 Float Flag No 2 Float Start 7000 Comment Float Offset 2000 ARP Timeout 5 SNAG eI Command Error Delay 300 Definition MBAP Port Override No Database offset for client status data Reset Tag Reset All OK Cancel Parameter Value Description Minimum 0 to 32767 This parameter specifies the number of milliseconds to wait Command between the initial issuance of a command This parameter can Delay be used to delay all commands sent to slaves to avoid flooding commands on the network This parameter does not affect retries of acommand as they will be issued when failure is recognized Response 0 to 65535 This parameter specifies the time in milliseconds that a Client Timeout milliseconds will wait before re transmitting a command if no response is received from the addressed server The value to use depends
126. er is in the wrong state to process a request of this type for example because it is unconfigured and is being asked to return register values 02 Illegal Data Address The data address received in the query is not an allowable address for the server More specifically the combination of reference number and transfer length is invalid For a controller with 100 registers a request with offset 96 and length 4 would succeed a request with offset 96 and length 5 will generate exception 02 03 Illegal Data Value A value contained in the query data field is not an allowable value for server This indicates a fault in the structure of the remainder of a complex request such as that the implied length is incorrect It specifically does not mean that a data item submitted for storage in a register has a value outside the expectation of the application program because the Modbus protocol is unaware of the significance of any particular value of any particular register 04 Slave Device Failure An unrecoverable error occurred while the server was attempting to perform the requested action 05 Acknowledge Specialized use in conjunction with programming commands The server has accepted the request and is processing it but a long duration of time will be required to do so This response is returned to prevent a timeout error from occurring in the Master The Master can next issue a poll program complete message to d
127. ernal source to an ASCII device When the transmit driver Tx Driver recognizes a new write block containing data data placed in the gateway s internal database it transmits this data out to the port The sequence number used in the block will be different than that of the previous block and therefore signals that the packet is fully assembled and ready to send The following illustration shows data flow for a transmit only device Internal Database ASCII Device Bil From external device Com Configuring a Port for Transmit Only Mode In order to set a port for Transmit Only mode ensure that the Tx DB Start parameter in the configuration file contains the starting location of where the data will be stored The Rx DB Start parameter must contain a value of 1 This value indicates that the port will not receive any data ProSoft Technology Inc Page 159 of 200 July 10 2013 ASCII Protocol PLX30 Series User Manual Ethernet and Serial Gateways Transmit Receive Mode A port configured in transmit receive mode can send and receive data from an ASCII device such as a terminal This mode functions the same way as transmit only mode or receive only mode but handles both the transmit and receive functions Data flow to and from an ASCII device is handled by the gateway s transmit and receive drivers Data received from the ASCII device is stored in the gateway s internal database until rea
128. es 02 Illegal Data Address The data address received in the query is not an allowable address for the server More specifically the combination of reference number and transfer length is invalid For a controller with 100 registers a request with offset 96 and length 4 would succeed a request with offset 96 and length 5 will generate exception 02 03 Illegal Data Value A value contained in the query data field is not an allowable value for server This indicates a fault in the structure of the remainder of a complex request such as that the implied length is incorrect It specifically does not mean that a data item submitted for storage in a register has a value outside the expectation of the application program because the Modbus protocol is unaware of the significance of any particular value of any particular register 04 Slave Device Failure An unrecoverable error occurred while the server was attempting to perform the requested action 05 Acknowledge Specialized use in conjunction with programming commands The server has accepted the request and is processing it but a long duration of time will be required to do so This response is returned to prevent a timeout error from occurring in the Master The Master can next issue a poll program complete message to determine if processing is completed 06 Slave Device Busy Specialized use in conjunction with programming commands The server is
129. ess locations specified in the following table Each port can have up to 100 commands configured Each configured command will use one word of these data areas to store a value representing the execution status from the most recent command execution attempt Modbus Port Address Range 1 4410 to 4509 2 4810 to 4909 3 5210 to 5309 4 5610 to 5709 Status data for Ports 2 through 4 is only present in 4 port MBS gateways Port 1 Command Error List Layout The first word in the specified register location contains the status error code for the first command in the port s Command List Successive words in the Command Error List are associated with corresponding commands in the list The addresses listed are for Port 1 only but the format is the same for each port The start address for each port is given in the previous section Internal Database Offset Description Address Example 4410 0 Command 1 Error Code 4411 1 Command 2 Error Code 4412 2 Command 3 Error Code 4413 3 Command 4 Error Code 4414 4 Command 5 Error Code 4507 97 Command 98 Error Code 4508 98 Command 99 Error Code 4509 99 Command 100 Error Code Note that the values in the Command Error List tables are initialized to zero 0 at power up cold boot and warm boot If a command executes successfully the value in the associated register will remain at zero 0 indicating no command error was detected Any non ze
130. ess field error 43 0xFFD5 CPF packet tag invalid 44 OxFFD4 CPF bad command code 45 OxFFD3 CPF status error reported 46 OxFFD2 CPF incorrect connection ID value returned 47 OxFFD1 Context field not matched 48 OxFFDO Incorrect session handle returned 49 OxFFCF CPF not correct message number ProSoft Technology Inc Page 75 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Register Session Response Errors Error Int Error Hex Description 50 OxFFCE Message length received not valid 51 OxFFCD Status error reported 52 OxFFCC Invalid version Forward Open Response Errors Error Int Error Hex Description 55 OxFFC9 Message length received not valid 56 OxFFC8 Status error reported PCCC Response Errors Error Int Error Hex Description 61 OxFFC3 Message length received not valid 62 OxFFC2 Status error reported 63 OxFFC1 CPF bad command code 64 OxFFCO TNS in PCCC message not matched 65 OxFFBF Vendor ID in PCCC message not matched 66 OxFFBE Serial number in PCCC message not matched Page 76 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual 5 4 EIP Reference 5 4 1 SLC and MicroLogix Specifics Messaging from a SLC 5 05 The gateway can be used to receive messages from a SLC 5 05 containing an Ethernet interface The gateway support
131. etermine if processing is completed 06 Slave Device Busy Specialized use in conjunction with programming commands The server is engaged in processing a long duration program command The Master should retransmit the message later when the server is free 08 Memory Parity Error Specialized use in conjunction with function codes 20 and 21 and reference type 6 to indicate that the extended file area failed to pass a consistency check The server attempted to read record file but detected a parity error in the memory The Master can retry the request but service may be required on the server device Da Gateway Path Unavailable Specialized use in conjunction with gateways indicates that the gateway was unable to allocate an internal communication path from the input port to the output port for processing the request Usually means that the gateway is misconfigured or overloaded Ob Gateway Target Device Failed To Respond Specialized use in conjunction with gateways indicates that no response was obtained from the target device Usually means that the device is not present on the network Page 150 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual Force Multiple Coils Function Code 15 Query This message forces each coil in a consecutive block of coils to a desired ON or OFF state Any coil that exists within the contr
132. for that slave will be decremented When the value reaches zero the slave state will be set to 1 This will re enable polling of the slave The first word in the defined register locations contains the status code for slave node address 1 Each successive word in the list is associated with the next node in sequence up to slave node address 255 Note The values in the slave List Status tables are initialized to zero 0 at power up cold boot and during warm boot ProSoft Technology Inc Page 139 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways 7 3 3 Error Status Codes These are error codes that are part of the Modbus protocol or are extended codes unique to this gateway Modbus Error Codes These error codes are generated or returned on both the Master and slave ports These codes are the standard Modbus errors page 149 Code Description Illegal Function Illegal Data Address Illegal Data Value Failure in Associated Device Acknowledge Busy Rejected Message JAJAJ Mj Module Communication Error Codes These gateway specific error codes are also returned from the command polling process and stored in the Command Error List memory area Code Description 1 CTS modem control line not set before transmit 2 Timeout while transmitting message 11 Timeout waiting for response after request 253 Incorrect slave address in resp
133. ft Technology Inc Page 167 of 200 July 10 2013 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways 9 1 SIE Functional Overview The PLX30 Siemens Industrial Ethernet SIE protocol can be used to interface easily with multiple Siemens Industrial Ethernet server compatible instruments and devices The SIE protocol improves performance when controlling multiple servers on a Siemens Industrial Ethernet network by supporting up to 20 Clients The gateway s Clients interface with processors and other server based devices on the SIE network using a user constructed command list of up to 16 entries per Client The gateway s internal database is used as the source for write commands to the remote processors Data collected from the processors using read commands is placed in the gateway s database 9 1 1 General Specifications 10 100 MB Ethernet Communication port Actively reads data from and writes data to Siemens Industrial Ethernet devices using Siemens Industrial Ethernet protocol Siemens Industrial Ethernet data types overlap in the gateway s memory database so the same data can be conveniently read or written as bit level or register level data Offers 20 Client connections with up to 16 commands each to talk to multiple servers Configurable floating point data movement is supported Status and error information generated by the gateway 9 1 2 Gateway Internal Database Central to the funct
134. h as the AB Power Monitor 3000 series B support unconnected messaging Check your device documentation for further information about its Ethernet IP implementation Class 3 Client UClient x This section specifies the configuration for the EIP Client Master device on the network port Parameter Value Description Minimum 0 to 65535 This parameter specifies the number of milliseconds to wait Command milliseconds between the initial issuances of a command This parameter can Delay be used to delay all commands sent to servers to avoid flooding commands on the network This parameter does not affect retries of acommand as they will be issued when failure is recognized Response 0 to 65535 This parameter specifies the amount of time in milliseconds that Timeout milliseconds a Client will wait before re transmitting a command if no response is received from the addressed server The value to use depends on the type of communication network used and the expected response time of the slowest device connected to the network Retry Count 0 to 10 This parameter specifies the number of times a command will be retried if it fails Page 58 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Class 3 Client UClient x Commands There is a separate command list for each of the different message types supported by the protocol Each list is processed from
135. h command to specify a minimum delay time in tenths of a second between the issuances of a command If the user specifies a value of 10 for the parameter the command will be executed no more frequently than every 1 second ProSoft Technology Inc Page 169 of 200 July 10 2013 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Commands Supported by the Gateway The format of each command in the list depends on the Siemens Industrial Ethernet Function Code being executed The type of functions that will be supported will also depend on the server device and what it can support Below are examples of S7 200 S7 300 and S7 1200 functions that are supported by the gateway 7 300 Data Block Address Type Function Data Type DB READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ COUNT Write COUNT Timer Address Type Function Data Type Timer READ TIME Counter Address Type Function Data Type Counter READ Count Page 170 of 200 ProSoft Technology Inc July 10 20133 SIE Protocol User Manual PLX30 Series Ethernet and Serial Gateways Flag Address Type Function Data Type Flag READ BOOL Write BOOL READ BYTE Write
136. he quantity of data bytes to be returned The contents of the registers requested DATA are two bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits Because the server interface device is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Some servers will limit the quantity of register content provided each scan thus for large register quantities multiple transmissions will be made using register content from sequential scans In the example below the registers 40108 to 40110 have the decimal contents 555 0 and 100 respectively Adr Func ByteCnt HiData LoData HiData LoData HiData LoData Error Check Field 11 03 06 02 2B 00 00 00 64 CRC Read Input Registers Function Code 04 Query Function code 04 obtains the contents of the controller s input registers at addresses 3xxxx These locations receive their values from devices connected to the I O structure and can only be referenced not altered from within the controller The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered for zero 30001 zero 30002 one and so on Broadcast mode is not allowed The example below requests the contents of register 3009 in ser
137. he Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is Word and Byte typically used when dealing with floating point or other swap multi register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to a PLC5 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slo
138. hernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 The following table summarizes the status information available in PCB for the EIP driver Connection Type Submenu Item Description EIP Class 1 Config Configuration settings for Class 1 Connections Status Status of the Class 1 Connections Displays any configuration error present as well as the number of Class 1 Connections EIP Class 3 Server Config Configuration settings for Class 3 Server Connections Comm Status Status information for each Class 3 Server Connection Displays port numbers IP addresses socket status and read and write counts EIP Class 3 Config Configuration settings for Class 3 Client UClient Client UClient x Connections Comm Status Status information for Class 3 Client UClient x commands Displays a summary of all the errors resulting from Class 3 Client UClient x commands Commands Configuration for the Class 3 Client UClient x command list Cmd Errors Displays current error codes for each command on the Decimal Class 3 Client UClient x command list in decimal number format A zero means there is currently no error for the command Cmd Errors Displays current error codes for each command on the Hex Class 3 Client UClient x command list in hexadecimal number format A zero means there is currently no error for the command
139. hese modes and describe the flow of data between the pieces of hardware ASCII device and PLX30Gateway These topics describe the three possible types of communication devices that can be attached to application ports receive only transmit only and transmit receive mode Receive Only Mode A port on the gateway configured to function in receive only mode is set up to only receive data from some sort of ASCII device In this mode the PLX30gateway will never transmit data back to the ASCII device Any data received from the ASCII device is passed from the receiver driver Rx Driver to the PLX30Gateway s internal database Rx Data The following illustration shows the flow of data on a port configured for receive only mode Internal Database To external device bechte ASCII Device Configuring a Port for Receive Only Mode In order to set a port for Receive Only mode ensure that the Rx DB Start parameter in the configuration file contains the starting location of where the data will be stored The Tx DB Start parameter must contain a value of 1 This value indicates that the port will not transmit any data Page 158 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series ASCII Protocol Ethernet and Serial Gateways User Manual Transmit Only Mode A port on the gateway configured to function in transmit only mode is set up to only transmit data from the PLX30gateway s internal database received from an ext
140. hnical support team click the Email Log File button For this to work Microsoft Outlook must be installed on your PC 5 If you do multiple sequential captures PCB will append data from a new capture to the end of the previously captured data If you want previous data to be cleared from the log file each time you start a new capture click the Clear Data button ProSoft Technology Inc Page 41 of 200 July 10 2013 Diagnostics and Troubleshooting PLX30 Series User Manual Ethernet and Serial Gateways 3 2 3 Using the Data Analyzer Serial Protocols Only The Data Analyzer is an extremely valuable troubleshooting tool available in PCB It allows you to see the data packets entering and leaving the serial ports on the gateway You can also capture this data to a log file Note The PCB Data Analyzer is for serial ports only To analyze data traffic on an Ethernet port we recommend using a network protocol analyzer available on the Internet such as Wireshark To use the Data Analyzer 6 Open the Diagnostics window in PCB 7 On the toolbar at the top of the window click the Setup Data Analyzer button ll slalale 8 Inthe Data Analyzer Setup dialog box specify the time tick interval the serial port number and whether the data packet contents should be displayed in hexadecimal number or ASCII character format Click OK Note The time tick is a symbol _TT_ displayed on the Data Analyzer screen that allows
141. ications use one stop bit For slower devices that require more time to re synchronize use two stop bits All devices communicating through this port must use the same number of stop bits ProSoft Technology Inc July 10 2013 Page 127 of 200 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Parameter Value Description RTS On 0 to 65535 Specifies the number of milliseconds to delay data transmission after Ready To Send RTS is asserted RTS Off 0 to 65535 Specifies the number of milliseconds to delay after the last byte of data is sent before the RTS modem signal is set low Use CTS YESORNO This parameter specifies if the Clear To Send CTS modem control Line line is to be used or not If the parameter is set to NO the CTS line will not be monitored If the parameter is set to YES the CTS line will be monitored and must be high before the gateway will send data Normally this parameter is required when half duplex modems are used for communication 2 wire This procedure is commonly referred to as hardware handshaking Master Configuration Parameters Parameter Value Description Response Timeout 0 to 65535 Specifies the command response timeout period in 1 millisecond increments This is the time that a port configured as a Master will wait for a response from the addressed slave before re transmitting the command Retries or skipping to the next command in the
142. ient Command List Therefore the number of valid error values is dependent upon the number of commands defined The structure of the command list error data area which is the same for all Clients is displayed in the following table Offset Description 0 Command 1 Error Code 1 Command 2 Error Code 2 Command 3 Error Code 3 Command 4 Error Code 4 Command 5 Error Code 13 Command 14 Error Code 14 Command 15 Error Code 15 Command 16 Error Code A non zero error code for a command indicates an error To interpret the status error codes refer to MBTCP Error Codes page 109 Page 108 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBTCP Protocol User Manual 6 3 3 MBTCP Error Codes Standard Modbus Exception Code Errors Description Illegal function Illegal data address Illegal data value Failure in associated device Acknowledge Busy message was rejected MBTCP Client Specific Errors Code Description 33 Failed to connect to server specified in command 35 Wrong message length in the response 36 MBTCP command response timeout Same as 11 37 TCP IP connection ended before session finished Command List Entry Errors Code Description 40 Too few parameters 41 Invalid enable code 42 Internal address gt maximum address 43 Invalid node
143. iguring Your Gateway PLX30 Series User Manual Ethernet and Serial Gateways 2 5 Configuring the Drivers 1 Click the sign next to the Gateway icon to expand gateway information 2 Click the sign next to any sa icon to view gateway information and configuration options S Untitled ProSoft Configuration Builder TOR Fle View Project Tools Help Default Project Name Status al Default Location MBS Port 1 Configured 5 PLX31 EIP MBS4 Modbus Port 1 OK si d Comment Modbus Port 1 Comm a EIP Class 3 Server s i EIP Class 1 Connection g EIP Class 3 Client O EIP Class 3 Client 1 di EIP Class 3 UClient O A B Modbus Port 1 E Modbus Port 1 Commands MES Port 2 Modbus Port 1 z 4 MBS Port 3 Enabled a MBS Port 4 RS Interface Type afa CommonNet Float Flag Ethernet Configuration Float Start lt PLX31 EIP MBS4 3 Double click any 5 icon to open an Edit dialog box To edit a parameter select the parameter name in the left hand pane then edit its corresponding field in the right hand pane Note Depending on the parameter the editable field will accept typed input in the form of text or a valid numerical value or it will have a dropdown list with options to choose from Edit Modbus Port 1 Enabled Baud Rate RS Interface Type Float Flag H Float Start Float Offset Comment Protocol Baud Rate Parity Data Bits Stop Bits RTS On RTS Off Minimum Response
144. in the gateway s internal database is accessible for read and write operations by any node on the network supporting the MBAP Service Port 502 or MBTCP Service Ports 2000 2001 TCP IP protocols The MBAP protocol Port 502 is a standard implementation defined by Schneider Electric and used on their Quantum processor This open protocol is a modified version of the Modbus serial protocol The MBTCP protocol is an embedded Modbus protocol message in a TCP IP packet The gateway supports up to five active server connections on Service Ports 502 five additional active server connections on Service Port 2000 and one active Client connection 6 1 1 General Specifications Modbus TCP IP The Modbus TCP IP protocol allows multiple independent concurrent Ethernet connections The connections may be all Clients all servers or a combination of both Client and server connections e 10 100 MB Ethernet Communication port Supports Enron version of Modbus protocol for floating point data transactions Configurable parameters for the client including a minimum response delay of 0 to 65535 ms and floating point support Supports five independent server connections for Service Port 502 Supports five independent server connections for Service Port 2000 All data mapping begins at Modbus register 400001 protocol base 0 Error codes network error counters and port status data available in user data memory fe Modbus TCP IP Client
145. ined per active Modbus Master port Polling of command list Configurable polling of command list including continuous and on change of data Modbus Slave Node address 1 to 247 software selectable Status Data Error codes counters and port status available per configured slave port starting at memory register 4400 ProSoft Technology Inc July 10 2013 Page 125 of 200 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways 7 1 3 Gateway Internal Database The internal gateway database is central to the functionality of the gateway This database is shared between all the ports on the gateway permitting data from devices on one communication network port to be viewed and controlled by devices on another port or network Modbus PLX30 Slave Communication Driver Other PLX30 Gateways Protocol Driver Intemal Database Modbus Up to 4000 regs Master Driver Modbus Port Access to Database The Multiple slave support in the gateway permits remote Master applications HMI software Quantum processors etc to read from and write to the gateway s database When configured as a slave the internal database of the gateway is used as the source for read requests and the destination for write requests from remote Masters Access to the database is controlled by the command type received in the incoming message from the remote Master The following table define
146. ion If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is typically Word and Byte used when dealing with floating point or other multi swap register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to an SLC 5 05 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix rack the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 501 Specifies the function code to be used in the command 509 501 Protected Typed Read 509 Protected Typed Write File Type Binary Specifies the file type to be associated with the command Counter Timer Control Integer Float A
147. ion the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is Word and Byte typically used when dealing with floating point or other swap multi register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to a PLC5 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 332 Specifies the function code to be used in the command 333 332 CIP Data Table Read 333 CIP Data Table Write Data Type Bool Specifies the data type of the
148. ionality of the gateway is the internal database This database is shared between all the ports on the gateway and is used as a conduit to pass information from one device on one network to one or more devices on another network This permits data from devices on one communication port to be viewed and controlled by devices on another communication port In addition to data from the Client status and error information generated by the gateway can also be mapped into the internal database PLX30 Communication Other PLXx30 Gateway Protocol Driver Intemal Database Up to 4000 regs Page 168 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual 9 2 SIE Configuration 9 2 1 SIE Client x This section defines general configuration for the SIE Client Master Parameter Value Description Minimum 0 to 65535 Specifies the number of milliseconds to wait between the initial Command issuances of a command This parameter can be used to delay all Delay commands sent to servers to avoid flooding commands on the network This parameter does not affect retries of a command as they will be issued when failure is recognized Response 0 to 65535 Specifies the time in milliseconds that a Client will wait before re Timeout transmitting a command if no response is received from the addressed server The value to use depends on the type of communication network use
149. is illegal 12284 0xd004 Step7 Status for this command is illegal 12127 Oxd0A1 Step7 Function is not allowed in the current protection level 11775 0xd201 Block name syntax error 11774 Oxd202 Syntax error function parameter 11773 0xd203 Syntax error block type 11772 0xd204 No linked block in storage medium 11771 0xd205 Object already exists 11770 0xd206 Object already exists 11769 0xd207 Block exists in EPROM 11767 0xd209 Block does not exist could not be found 11762 Oxd20e No block present 11760 0xd210 Block number too big 11712 0xd240 Coordination rules were violated 11711 0xd241 Operation not permitted in current protection level 11710 0xd242 Protection violation while processing F blocks F blocks can only be processed after password input 11263 0xd401 Invalid SZL ID 11262 0xd402 Invalid SZL index 11258 0xd406 Diagnosis Info not available 11255 0xd409 Diagnosis DP error 9215 Oxdc01 Invalid BCD code or Invalid time format ProSoft Technology Inc July 10 2013 Page 185 of 200 SIE Protocol User Manual PLX30 Series Ethernet and Serial Gateways SIE Client Specific Error Codes Decimal Hex Description 33 Oxffdf Failed to connect to server specified in command 34 Oxffde Failed to create a socket 36 Oxffdc SIE command response timeout same as 11 37 Oxffdb TCP IP connection ended before session finished Command List Entry Error Codes
150. is is an advanced configuration feature and is not required for the basic operation of the gateway The Data Map section allows data to be copied between areas in the gateway s internal database The Data Map is especially useful for copying protocol specific error and status data from the gateway s upper memory registers address 4000 and up to the user accessible memory registers addresses 0 to 3999 The error and status data copied into the user memory area can then be accessed by a remote device such as an HMI or processor Information about upper memory addresses where the gateway places protocol specific error and status data can be found in the Diagnostics section in the appropriate protocol chapter of this manual EIP diagnostics page 70 MBTCP diagnostics page 106 MBS diagnostics page 134 ASCII diagnostics page 165 SIE diagnostics page 183 The Data Map can also be used to condense widely dispersed data into one contiguous data block for simplified access A maximum of 100 registers per Data Map command can be copied and a maximum of 200 separate copy commands can be configured The byte and or word order can be rearranged during the copy process For example by rearranging byte or word order floating point values can be converted to the correct format for a different protocol ProSoft Technology Inc Page 27 of 200 July 10 2013 Configuring Your Gateway User Manual PLX30 Series Ethernet and Serial G
151. ll Interval is set to zero 0 If the Poll Interval is set to a non zero value the command will be executed when the interval timer for that command expires Event Command 2 the command will execute only if the internal data associated with the command changes This parameter is valid only for write commands FC 5 6 15 and 16 Conditional 3 the command will execute only if the internal bit data associated with the command changes It will also clear the bit or bits in the internal database after the write command is built This parameter is valid only for bit level write commands FC 5 and 15 Internal 0 to 3999 for Specifies the database address in the gateway s internal database Address register to use as the destination for data brought in by a read command or level as the source for data to be sent out by a write command The addressing database address is interpreted as a bit address or a 16 bit register or word address depending on the Modbus Function Code used in 0 to the command 63999 for For Modbus functions 1 2 5 and 15 this parameter is interpreted bit level as a bit level address addressing For Modbus functions 3 4 6 and 16 this parameter is interpreted as a register level address Poll Interval 0 to 65535 Specifies the minimum interval between executions of continuous Commande The value is in seconds Therefore if a value of 10 is entered the command will execute no more frequently than once every 10 secon
152. mands that should have been sent to the slave until the number of skipped commands matches the value entered in this parameter This creates a sort of slow poll mode for slaves that are experiencing communication problems Command Control Reg 1 0 to 3900 This parameter allows the execution of commands in the Command List page 131 to be controlled by setting a value of zero 0 one 1 two 2 or three 3 into a 100 register area of the gateway database beginning at the address entered in this parameter If commands in the list are specified with an Enable code of zero for Page 128 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBS Protocol User Manual Parameter Value Description all commands no commands will be executed If the value in the first control register is changed to one 1 command zero will be executed continuously If the value is the control register for a write command is set to two 2 the command will be enabled for conditional writing which will cause the command to be executed whenever the values in the database registers associated with the command change Use the value of three 3 only for bit level write commands FC 5 and 15 If the parameter is set to three 3 the command will be executed only if the internal bit data associated with the command changes It will also clear the bit or bits in the internal database after the writ
153. meter is set to 1000 and a Function Code 3 command is received requesting Holding Register address 0 virtual Modbus address 40001 or 400001 the data returned in the response will be the value at register 1000 in the gateway s database End of Message Delay 0 to 65535 Specifies a time delay in milliseconds to be added to the 3 5 character time delay used by the module to recognize the end of a message Certain applications may require validation of Modbus messages with more than 3 5 character time between consecutive bytes example modem applications A value of 0 will cause the default end of message delay to be used Page 130 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBS Protocol User Manual 7 2 2 MBS Port x Commands The Modbus Port x Commands where x can be 1 2 3 or 4 sections of the PCB tree Window are used to define a Master serial port Command List This list holds the parameters needed to poll slave devices attached to a Master port Parameter Value Description Enable Disabled Specifies if the command is to be executed and under what Continuous conditions Event Disabled 0 the command is disabled and will not be executed in Command the normal polling sequence However the command can still be Conditional activated using Command Control Continuous 1 the command will be executed upon each scan of the Command List if the Po
154. mmand Response Count Command Error Count Number of Request Packets Number of Response Packets Errors Received Configuration Error Word Current Error Last Error 0 1 2 3 4 5 Errors Sent 6 7 8 9 1 0 to 25 Command List Errors 16 per Client For every command that has an error the gateway automatically sets the poll delay parameter to 30 seconds This instructs the gateway to wait 30 seconds before it attempts to issue the command again ProSoft Technology Inc Page 183 of 200 July 10 2013 SIE Protocol User Manual PLX30 Series Ethernet and Serial Gateways As the commands in the Client Command List are polled and executed an error codeis maintained in the gateway for each command The current error value for each command is displayed in the Command List Errors section of each Client s status data area There is one register for each of the 16 commands in the command list An error code of 0 means no error is currently detected for the specified command The following tables list the various error codes that may be displayed and their descriptions 9 3 2 SIE Error Codes Module Communication Error Codes Decimal Hex Description 1 0x0001 No data from I O module 3 0x0003 The desired item is not available in the PLC 200 family 5 0x0005 The desired address is beyond limit for this PLC 6 0x0006 The C
155. mon errors for the EtherNet IP PCCC protocol are shown in the following tables Local STS Error Codes Code Int Code Hex Description 0 0x0000 Success no error 256 0x0100 DST node is out of buffer space 512 0x0200 Cannot guarantee delivery Link Layer 768 0x0300 Duplicate token holder detected 1024 0x0400 Local port is disconnected 1280 0x0500 Application layer timed out waiting for response 1536 0x0600 Duplicate node detected 1792 0x0700 Station is offline 2048 0x0800 Hardware fault ProSoft Technology Inc Page 73 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways Remote STS Error Codes Code Int Code Hex Description 0 0x0000 Success no error 4096 0x1000 Illegal command or format 8192 0x2000 Host has a problem and will not communicate 12288 0x3000 Remote node host is missing disconnected or shut down 16384 0x4000 Host could not complete function due to hardware fault 20480 0x5000 Addressing problem or memory protect rungs 24576 0x6000 Function not allowed due to command protection selection 26872 0x7000 Processor is in Program mode 32768 0x8000 Compatibility mode file missing or communication zone problem 28672 0x9000 Remote node cannot buffer command 24576 0xA000 Wait ACK 1775 KA buffer full 20480 0xB000 Remote node problem due to download 16384 0xC000 Wait ACK 1775 KA buffer full
156. n Link e CIP with Source Link Destination ode p ictal Source ID I Cache Connections O Enable Enable Waiting Start Done Done Length 10 Error Code I Timed Out Extended Error Code Cancel Apply Help Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions CIP Data Table Read CIP data table read messages transfer data to the processor from the gateway An example rung used to execute a read command is shown writemsg DN readmsg EN SG 1 JE Type CIP Data Table Read N Message Control readmsq El bes R writemsg DN Page 90 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual The ME
157. n port The first word of the data block is used to signal when new transmit data is available Word 1 of the block may optionally contain the number of characters processed in the last receive message Word 2 of the message is used to pace the characters during the transmission process This may be required when interfacing with slow ASCII devices that is modems in command mode If the word is set to a value other than zero a time delay corresponding to the number of milliseconds entered will be placed between each character transmitted If the word is set to zero the whole data packet will be transmitted as fast as the transmit driver can function Word 3 of the data block contains the number of bytes present in the transmit data area to send out the ASCII serial communication port Words 4 to 131 contain the actual data to transmit If the swap option is utilized the transmit driver will swap each byte in the words received before transmitting them Note If an odd number of bytes are sent by the end device when the swap option is used then the last byte of the message may be lost ProSoft Technology Inc Page 157 of 200 July 10 2013 ASCII Protocol PLX30 Series User Manual Ethernet and Serial Gateways 8 1 3 Modes of Operation The gateway can operate in several different modes with each port acting independently The configuration of each port s driver determines its mode The following topics describe t
158. nd are all required for installation and configuration The quantity of cables provided depends on the specific protocol combination being used Important Before beginning the installation please verify that all of the following items are present Gateway with Ethernet Port Qty Part Name Part Number Part Description 1 Gateway PLX PLX30 series communication gateway 1 Ethernet cable RL CBL025 5 straight through cable 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 Power connector J180 PLX30 gateway power connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway Gateway with Ethernet Port and Single Serial Port Qty Part Name Part Number Part Description 1 Gateway PLX PLX30 series communication gateway 1 Ethernet cable RL CBL025 5 straight through cable 1 DB9 to Screw 1454 9F DB9 to screw terminal adapter Terminal Adaptor 1 RJ45 DB9M Serial CABLE14 RJ45 to DB9 male serial adapter cable Adapter Cable 1 Power Connector J180 PLX30 gateway power connector 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway Gateway with Ethernet Port and Four Serial Ports Qty Part Name Part Number Part Description 1 Gateway PLX PLX30 series comm
159. ng left to right this show that inputs 10204 10202 and 10199 are all on The other input data bytes are decoded similar Due to the quantity of input statuses requested the last data field which is shown as 35 HEX 0011 0101 binary contains the status of only 6 inputs 10213 to 102180 instead of 8 inputs The two left most bits are provided as zeros to fill the 8 bit format Read Holding Registers Function Code 03 Query Read Holding Registers 03 allows the user to obtain the binary contents of holding registers 4xxxx in the addressed server The registers can store the numerical values of associated timers and counters which can be driven to external devices The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered form zero 40001 zero 40002 one and so on The broadcast mode is not allowed The example below reads registers 40108 through 40110 from server 584 number 11 Adr Func Data Start Reg Hi Data Start Reg Lo Data of Regs Hi Data ofRegsLo Error Check Field mi 03 00 6B 00 03 CRC ProSoft Technology Inc Page 143 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing t
160. nternal gateway registers 3000 and 3001 If the requested address was 47002 407002 the data will be returned from internal registers 3002 and 3003 If the requested address was 47101 407101 the data will be returned from internal registers 3200 and 3201 and so on ARP Timeout 1 to 60 This parameter specifies the number of seconds to wait for an ARP reply after a request is issued Command 0 to 300 Error Delay This parameter specifies the number of 100 millisecond intervals to turn off a command in the error list after an error is recognized for the command If this parameter is set to 0 there will be no delay ProSoft Technology Inc July 10 2013 Page 101 of 200 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways 6 2 3 MBTCP Client x Commands The MBTCP Client x Commands section defines the Modbus TCP IP commands to be issued from the gateway to server devices on the network These commands can be used for data collection and or control of devices on the TCP IP network W Edit MBTCP Client O Commands Enable Internal Address Polllnterval Reg Count Swap Code Node IP Address ServPort Slave Address Modus Function S i 0 0 1 No Change 1 1 1 1 502 1 FC 3 Read Holding lt Enable Value Status OK Setto Defaults Add Row Insert Row Move Up Move Down Edit Row Copy Row OK Cancel In order to interface the PLX30gateway with Modbus TCP I
161. o the internal data area sets the message length in the data area and finally sets the new sequence number Receive and transmit data block structure is discussed in the following topics ProSoft Technology Inc Page 155 of 200 July 10 2013 ASCII Protocol PLX30 Series User Manual Ethernet and Serial Gateways Receive Data Data received by the receive driver is placed in the gateway s internal database in a fixed format at the location selected by the user The receiver driver is disabled if the database start location is set to a value of 1 The following table shows the structure of the received data Word Offset Description 0 Receive sequence number This register is incremented by the gateway s Receive Driver for each new packet received 1 Number of characters transmitted 0 to 255 from last transmit request 2 Number of characters 0 to 256 in receive block 9 to 136 3 Receive State 1 Listening for data 1 Receiving port data 4 Total receive character count 5 Total receive message count 6 Transmit State 0 Waiting for data to send 1 RTSon 2 RTS timeout 3 Sending data 4 Waiting for RTS off 5 RTS turned off 30 Intercharacter delay 31 Intercharacter delay 32 Intercharacter delay 100 Message delay before transmit 101 Message delay before transmit 7 Total transmit character count 8 Configuration error word 9 to 136 Received data on port
162. oller can be forced to either state ON or OFF However because the controller is actively scanning unless the coils are disabled the controller can also alter the state of the coil Coils are numbered from zero coil 00001 zero coil 00002 one and so on The desired status of each coil is packed in the data field one bit for each coil 1 ON 0 OFF The use of server address 0 Broadcast Mode will force all attached servers to modify the desired coils A Note Functions 5 6 15 and 16 are the only messages other than Loopback Diagnostic Test that will be recognized as valid for broadcast The following example forces 10 coils starting at address 20 13 HEX The two data fields CD 1100 and 00 0000 000 indicate that coils 27 26 23 22 and 20 are to be forced on Adr Func HiAdd Lo Quantity Byte Data Coil Status Data Coil Status Error Check Add Cnt 20 to 27 28 to 29 Field 11 OF 00 13 00 OA 02 CD 00 CRC Response The normal response will be an echo of the server address function code starting address and quantity of coils forced Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 OF 00 13 00 0A CRC The writing of coils via Modbus function 15 will be accomplished regardless of whether the addressed coils are disabled or not Coils that are not programmed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function code 15 and
163. on errors e Application errors e Fault indications 3 1 1 Main Gateway LEDs LED State Description PWR Off Power is not connected to the power terminals or source is Power insufficient to properly power the gateway 208 mA at 24 Vdc is required Solid Green Power is connected to the power terminals FLT Off Normal operation Fault Solid Red A critical error has occurred Program executable has failed or has been user terminated and is no longer running Press theResetbutton or cycle power to clear the error CFG Off Normal operation Config Solid Amber The unit is in configuration mode Either a configuration error uration exists or the configuration file is currently being downloaded or read After power up the configuration is read and the unit implements the configuration values and initializes the hardware This occurs during power cycle or after the Reset button is pressed ERR Off Normal operation Error FlashingAmber An error condition has been detected and is occurring on one of the application ports Check configuration and troubleshoot for communication errors Solid Amber This error flag is cleared at the start of each command attempt Master Client or on each receipt of data slave adapter server so if this condition exists it indicates a large number of errors are occurring in the application due to bad configuration or on one or more
164. one coil number 3 two and so on The following table is a sample read output status request to read coils 0020 to 0056 from server device number 11 Adr Func Data Start PtHi Data Start PtLo Data OfPtsHo Data OfPtsLo Error Check Field 11 01 00 13 00 25 CRC Response An example response to Read Coil Status is as shown in Figure C2 The data is packed one bit for each coil The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each coil 1 ON 0 OFF The low order bit of the first character contains the addressed coil and the remainder follows For coil quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as quantity of RTU characters that is the number is the same whether RTU or ASCII is used ProSoft Technology Inc Page 141 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Because the server interface device is serviced at the end of a controller s scan data will reflect coil status at the end of the scan Some servers will limit the quantity of coils provided each scan thus for large coil quantities multiple PC transactions must be made using coil status from sequential scans Adr Func Byte Data Coil Data Coil Data Coil Data Coil Data Coil
165. one Parity is a simple error checking algorithm used in serial Odd communication This parameter specifies the type of parity Even checking to use All devices communicating through this port must use the same parity setting Data Bits 7ors Specifies the number of data bits for each word used by the protocol All devices communicating through this port must use the same number of data bits Stop Bits 1or2 Stop bits signal the end of a character in the data stream For most applications use one stop bit For slower devices that require more time to re synchronize use two stop bits All devices communicating through this port must use the same number of stop bits RTS On 0 to 65535 Specifies the number of milliseconds to delay data transmission after Ready To Send RTS is asserted RTS Off 0 to 65535 Specifies the number of milliseconds to delay after the last byte of data is sent before the RTS modem signal is set low ProSoft Technology Inc Page 163 of 200 July 10 2013 ASCII Protocol PLX30 Series User Manual Ethernet and Serial Gateways Parameter Value Description Handshaking NO Specifies the handshaking used on the port VES No No hard ft handshaki DTR DSR o No hardware or software handshaking XON XOFF Yes RTS CTS hardware handshaking DTR DSR DTR DSR hardware handshaking XON XOFF software handshaking Rx TERMINATION Defines the receive termination characteristic
166. onse 254 Incorrect function code in response 255 Invalid CRC LRC value in response Command List Error Codes These command specific error codes are detected during initial command list loading at gateway power up or reset and are stored in the Command Error List memory region Code Description 41 Invalid enable code 42 Internal address gt maximum address 43 Invalid node address lt 0 or gt 255 44 Count parameter set to 0 45 Invalid function code 46 All parameters set to 0 47 All parameters set to 1 Page 140 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual 7 4 MBS Reference 7 4 1 Modbus Protocol Specification Read Coil Status Function Code 01 Query This function allows the user to obtain the ON OFF status of logic coils used to control discrete outputs from the addressed server only Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial coil address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 coils to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The coils are numbered from zero coil number 1 zero coil number 2
167. p Displays the gateway s Data Map configuration Database ASCII Displays the contents of the gateway s database in ASCII View character format Decimal Displays the contents of the gateway s database in decimal number format Hex Displays the contents of the gateway s database in hexadecimal number format Float Displays the contents of the gateway s database in floating point number format Use the scroll bar on the right edge of the window to navigate through the database Each page displays 100 words of data The total number of pages available depends on your gateway s configuration Page 40 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 3 2 2 Capturing a Diagnostic Session to a Log File You can capture anything you do in a Diagnostics session to a log file This feature can be useful for troubleshooting and record keeping purposes and for communication with ProSoft Technology s technical support team 1 Open a Diagnostics window 2 To log a Diagnostics session to a text file click the Log File button on the toolbar at the top of the Diagnostics window Click the button again to stop the capture 3 To view the log file created click the View Log File button The log file will open as a text file which can be renamed and saved to a different location 4 Toemail the log file to ProSoft Technology s tec
168. ports network communication failures NS Off No power or nolP address Network Solid Red Duplicate IP address Status Solid Green Connected Flashing Red Connection timeout Flashing Green IP address obtained no established connections Alternating Red Self test and Green Flash MS Off No power Module Solid Red Major fault Status Solid Green Device operational Flashing Red Minor fault Flashing Green Standby Alternating Red Self test and Green Flash Page 34 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways Diagnostics and Troubleshooting User Manual 3 1 2 Ethernet Port LEDs LED State Description LINK ACT Off No physical network connection is detected No Ethernet communication is possible Check wiring and cables Solid Green Physical network connection detected This LED must be ON solid for Ethernet communication to be possible 100 Mbit Off No activity on the port Flashing Amber The Ethernet port is actively transmitting or receiving data 3 1 3 Serial Port LEDs for Gateways with Serial Ports LED State Description RX Off No activity on the port Flashing Green The port is actively receiving data TX Off No activity on the port Flashing Amber The port is actively transmitting data ProSoft Technology Inc July 10 2013 Page 35 of 200 Diagnostics and Troubleshooting PLX30 Series User Manual Ethernet
169. r gateway There are also links directly to the Datasheet and User Manual ProSoft Technology Inc Page 17 of 200 July 10 2013 Configuring Your Gateway PLX30 Series User Manual Ethernet and Serial Gateways GR ProSoft Technology Product DVD 8 m e bce aen VVhere Automation Conne AGIA PACIFIC AFRICA BVROPE MIOOLE BABT LATIN AMER Wi Product Selection Tool TECHNOLOGY Platform EE X Datasheet Product Nees User Manual Browse Product Folder ProSoft Configuration Builder PLX31 EIP MBTCP EtherNet IP to Modbus TCP IP Gateway The ProLinx EtherNet IP to Modbus TCP IP Gateway creates a powerful connection between Modbus TCP IP and EtherNet IP networks and employs a single Ethernet port Configuration over Ethernet allows for remote diagnostics With it s built in SD card port the gateway allows for seemless plug in disaster recovery The Modbus TCP IP driver supports Schneider Electric processors as well as most other devices that use Modbus TCP IP This implementation allows multiple Client Master and server slave connections using standard EtherNet IP connections The gateway can use both Modbus TCP IP Note On the Main DVD menu screen the correct platform and product number must be selected through the dark drop down menus on the top right to be linked to the correct product information This is not important for installing Prosoft Configuration Builder Page 18 of 200 ProSoft T
170. red can be found only in the PCB diagnostic menus under Comm Status for a port as shown in the following graphic Gi Diagnostics Connection Log Module gt aloialcl elz MBS Port1 Contig Enabled Slave Status Retries Modbus Cmds State Modbus Cmd Errors Decimal ComState IT ETT Modbus Cmd Errors Hex BS Port 2 Last Err Contig cfg Err Number of Command Requests Comm Status Number cmd Responses CN Slave Status Number Command Errors O Modbus Cmds S Number Requests Modbus Cmd Errors Decimal Numb r Responses vad umber rrors Receive i ey lesser a Number Errors Send Gd Contig F Comm Status Path Ethernet 10 1 3 189 Kate tts tte tststetststetsks 2 12 42 06 ProSoft Technology Inc July 10 2013 Page 135 of 200 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways These status values are state registers They are used as scratchpad areas by the operating firmware to keep track of the current logical state of activities ona slave port These state registers are constantly changing as the gateway progresses through the various stages needed to process communication on the serial ports This processing happens faster than can be followed unless a port error causes the value to remain constant for some noticeable length of time The diagnostic screen displays are snapshot type screens that is they display the current value at the time they are called
171. returns a normal response If the server does not receive the request due to a communication error no response is returned The Master program will eventually process a timeout condition for the request If the server receives the request but detects a communication error parity LRC CRC etc no response is returned The Master program will eventually process a timeout condition for the request If the server receives the request without a communication error but cannot handle it for example if the request is to read a non existent output or register the server will return an exception response informing the Master of the nature of the error The exception response message has two fields that differentiate it from a normal response Function Code Field In a normal response the server echoes the function code of the original request in the function code field of the response All function codes have a most significant bit MSB of 0 their values are all below 80 hexadecimal In an exception response the server sets the MSB of the function code to 1 This makes the function code value in an exception response exactly 80 hexadecimal higher than the value would be for a normal response With the function code s MSB set the Master s application program can recognize the exception response and can examine the data field for the exception code Data Field In a normal response the server may return data or statistics in the
172. rial Gateways Page 8 of 200 ProSoft Technology Inc July 10 2013 PLX30 Series Ethernet and Serial Gateways Start Here User Manual 1 Start Here In This Chapter System Requirements secsi aistras ier ninnan EAEn AR oN ANAA N AA RAEAN A ESEE eS ENNER ES 10 Se le Cl 11 Mounting the Gateway on a DIN rail eeccceceeeeeeeeeeeee cent eeeeaeeeeeeeseeeesaeeesaeeeenees 12 Connecting Power to the PLX30 Gateway ssssssssesrsesrssrssrssrrssrissrrssrissrrssrn 13 ProSoft Technology Inc July 10 2013 Page 9 of 200 Start Here PLX30 Series User Manual Ethernet and Serial Gateways 1 1 System Requirements The ProSoft Configuration Builder configuration software for the gateway requires the following minimum hardware and software components Pentium II 450 MHz minimum Pentium III 733 MHz or better recommended 128 Mbytes of RAM minimum 256 Mbytes of RAM recommended 100 Mbytes of free hard disk space or more based on application requirements 256 color VGA graphics adapter 800 x 600 minimum resolution True Color 1024 x 768 recommended s DVD ROM drive Supported operating systems Microsoft Windows 7 32 bit Microsoft Windows XP Professional with Service Pack 1 or 2 Page 10 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Start Here Ethernet and Serial Gateways User Manual 1 2 Package Contents The following components are included with your gateway a
173. ro coil 0002 one and so on The data value 65 280 FFOO HEX will set the coil ON and the value zero will turn it OFF all other values are illegal and will not affect that coil The use of server address 00 Broadcast Mode will force all attached servers to modify the desired coil A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast The example below is a request to server number 11 to turn ON coil 0173 Adr Func Data Coil Hi Data Coil Lo Data On off Ind Data Error Check Field 11 05 00 AC FF 00 CRC Response The normal response to the Command Request is to re transmit the message as received after the coil state has been altered Adr Func Data Coil Hi Data Coil Lo Data On Off Data Error Check Field 11 05 00 AC FF 00 CRC The forcing of a coil via MODBUS function 5 will be accomplished regardless of whether the addressed coil is disabled or not In ProSoft products the coil is only affected if the necessary ladder logic is implemented A Note The Modbus protocol does not include standard functions for testing or changing the DISABLE state of discrete inputs or outputs Where applicable this may be accomplished via device specific Program commands In ProSoft products this is only accomplished through ladder logic programming Page 114 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways Us
174. ro value in this table indicates the corresponding command experienced an error The data in this table is dynamic It is updated each time a command is executed Therefore if the command fails once and succeeds on the next attempt the Error Code from the previously failed attempt will be replace with zero and be lost Error Codes are not archived in the gateway s database To see if the port has experienced an error since the most recent restart and what the most recently occurring error was if any you can check the Last Error Index ProSoft Technology Inc Page 137 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Master Port Modbus Slave List Status Slave List Status values for each Master port are returned to the address locations specified in the following table Modbus Port Address Range 1 4510 to 4764 2 4910 to 5164 3 5310 to 5564 4 5710 to 5964 Status data for Ports 2 through 4 is only present in 4 port MBS gateways Port 1 Slave List Status Layout The addresses listed are for Port 1 only but the format is the same for each port The start address for each port is given in the previous section Internal Offset Description Database Address Example 4510 0 Slave 1 Status 4511 1 Slave 2 Status 4512 2 Slave 3 Status 4513 3 Slave 4 Status 4514 4 Slave 5 Status The slave status list contains the current poll stat
175. ructions 0 0 eee ee eete cece enee ee ee eeaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeseeaaeeeeneaaeeeeneaas 3 Agency Approvals and Certifications ccccccccceeeeeceeeeceeeeeeeaeeeeaaeseeeecaeeeseaeeseaeeseaeeesaaeeesaaeeneaeeeeaees 3 1 Start Here 9 1 1 System Requirements cccccccccceceeeeeeeeeeeeeeeceaeeeeaaeseeeeeceaeeeseaeeeeeeeseeeesaeeeeeeseeneess 10 1 2 Package Content ccccccceceeeceeseeeseneeceeeeeseaeeeeaeesaeeeceaeeeeaaesseaeeseeeeesaeeseaaesseneeeaas 11 1 3 Mounting the Gateway on a DIN rail scenes seaeeesaeeneaeeteeeees 12 1 4 Connecting Power to the PLX30 Gateway 13 2 Configuring Your Gateway 15 2 1 Installing ProSoft Configuration Builder Software esseesseesseeeseeeeeeesereresrrneee nens 16 2 2 Using the Online Help 19 2 3 Setting Up the Project sra rnai a e a e ae e aE aE EE DAR Sais 20 2 4 Renaming PCB Objects c ccceeceeeceeceeeeeceaeeeeaeeseeeeeceaeeeeaaeseeeeeseeeesiaeeeeaaeseeeeesaas 23 2 5 Configuring the RI Sze innne ea a a E a eE E R 24 2 6 Using the CommonNet Data Map 27 2 7 Configuring an IP Address ccccccseeeeseeeeeeeecceeeeeaeeeeeeeeceaeeesaaeseeeeeseeeesiaeeeeeeseenees 29 2 8 Downloading the Project to the Gateway c ccceeseecseeeeeseeeeeeeseeeeeteaeeeeaeseeneeeaas 30 2 9 Printing a Configuration File 32 3 Diagnostics and Troubleshooting 33 3 1 WED IMNGICATONS 3s steed oc csud ghee c eSidee sa e E 34 3 1 1 Main Gateway LEDS
176. rung used to execute a write command is shown in the following diagram z N9 0 MG12 0 MSG 0000 J F ReadiWrite Message N H EN Control MG12 0 NE Setup Screen R In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box MSp MG12 0 D Elements olx MultiHop This PLC 5 Control Bits Communication Command SLC Typed Logical Write Ignore if timed out TO o Data Table Address To be retried NA 0 Size in Elements Awaiting Execution EW o Port Number Continuous Run C0 o Eror ER 0 Target Device Message done DN fo Data Table ir N11 0 Message Transmitting ST 0 MultiHop Message Enabled EN 0 m Error Error Code Hex D Error Description No errors Select the COMMUNICATION COMMAND to execute from the following list of supported commands e PLC5 Type Write e PLC2 Unprotected Write e PLC5 Typed Write to PLC e PLC Typed Logical Write The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages For the PLC2 Unprotected Write message set the address to the database index such as 1000 to consider with the command ProSoft Technology Inc Page 81 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways The MULTIHOP option must be se
177. s assignments valid for that device The Modbus Function Code determines whether the address will be a register level or bit level OFFSET address into a given data type range The offset will be the target data address in the server minus the base address for that data type Base addresses for the different data types are e 00001 or 000001 0x0001 for bit level Coil data Function Codes 1 5 and 15 10001 or 100001 1x0001 for bit level Input Status data Function Code 2 30001 or 300001 8x0001 for Input Register data Function Code 4 40001 or 400001 4x0001 for Holding Register data Function Codes 3 6 and 16 Address calculation examples o For bit level Coil commands FC 1 5 or 15 to read or write a Coil OX address 00001 specify a value of 0 Page 104 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBTCP Protocol User Manual Parameter Value Description 00001 00001 0 o For Coil address 00115 specify 114 o 00115 00001 114 e For register read or write commands FC 3 6 or 16 4X range for 40001 specify a value of 0 o 40001 40001 0 e For01101 11101 31101 or 41101 specify a value of 1100 o 01101 00001 1100 o 11101 10001 1100 o 31101 30001 1100 o 41101 40001 1100 Note If the documentation for a particular Modbus server device lists data addresses in hexadecimal base16
178. s Type Function Data Type Max Reg Cnt Max Reg Cnt Flag READ BOOL 1 Write BOOL 1 READ BYTE 32 Write BYTE 32 READ DINT 8 Write DINT 8 READ REAL 8 Write REAL 8 READ INT 16 Write INT 16 Page 192 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual Output Address Type Function Data Type Max Reg Cnt Max Reg Cnt Output READ BOOL 1 Write BOOL 1 READ BYTE 16 Write BYTE 16 READ DINT 4 Write DINT 4 READ REAL 4 Write REAL 4 READ INT 8 Write INT 8 Input Address Type Function Data Type Max Reg Cnt Max Reg Cnt Input READ BOOL 1 Write BOOL 1 READ BYTE 16 Write BYTE 16 READ DINT 4 Write DINT 4 READ REAL 4 Write REAL 4 READ INT 8 Write INT 8 ProSoft Technology Inc Page 193 of 200 July 10 2013 SIE Protocol PLX30 Series User Manual Ethernet and Serial Gateways Page 194 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Support Service and Warranty Ethernet and Serial Gateways User Manual 10 Support Service and Warranty In This Chapter 10 1 Contacting Technical Gupport cee eeeeaeeeeaeeseeeeeseaeeetaeeneeeeees 196 10 2 Warranty Information aeiiae ne ea e a EaR 198 ProSoft Technology Inc Page 195 of 200 July 10 2013 Support Service and Warranty PLX30 Series User Manual Ethernet and Serial Gateways
179. s both read and write commands A discussion of each operation is provided in the following topics SLC5 05 Write Commands Write commands transfer data from the SLC processor to the gateway An example rung used to execute a write command is shown in the following diagram lt B3 0 MSG 0000 JE ReadiWrite Message CEN 0 Type Peer To Peer ReadiWrite Write ke De Target Device PLCS Local Remote Local ER Control Block N10 0 Control Block Length 51 Setup Screen B3 0 W 0 Set the READ WRITE parameter to WRITE The gateway supports a TARGET DEVICE parameter value of 500CPU or PLC5 In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box IMSG Of x This Controller m Control Bits _ Communication Command Ignore if timed out TO 0 Data Table Address To be retried NR 0 Size in Elements Awaiting Execution EW 0 Channet Continuous Run CO o z Error ER o T Target Device Message done DN Message Timeout Message Transmitting ST 0 Data Table Address Message Enabled EN 0 Waiting for Queue Space Local Remote MultiHop m Error Error Codef Hex 0 Error Description No errors ProSoft Technology Inc Page 77 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gatew
180. s command list The following table lists the addresses in upper memory that hold command list error data for each EIP Client EIP Client Address Range Connected Client 0 7910 through 8009 Connected Client 1 8110 through 8209 Unconnected Client 0 12810 through 12909 The first word in each Client s command list error data area contains the status error code for the first command in the Client s command list Each successive word in the command error list is associated with the next command in the list Therefore the size of the command list error data area depends on the number of commands defined ProSoft Technology Inc Page 71 of 200 July 10 2013 EIP Protocol PLX30 Series User Manual Ethernet and Serial Gateways The structure of the command list error data area which is the same for all Clients is displayed in the following table Offset Description 0 Command 1 Error Code 1 Command 2 Error Code 2 Command 8 Error Code 3 Command 4 Error Code 4 Command 5 Error Code 97 Command 98 Error Code 98 Command 99 Error Code 99 Command 100 Error Code A non zero error code indicates an error To interpret the status error codes refer to EIP Error Codes page 73 EIP Server Status Data The following table lists the addresses in upper memory that hold status data for each EIP server EIP Server Address Range 0 8900 through 8915 1 8916
181. s for the port Termination CHARACTERS When the ASCII driver encounters the specified termination Type MESSAGE condition on the port it will interpret it as end of message TIMEOUT INTERCHARACTER DELAY PACKET SIZE Rx Term ECK Used when the Rx Termination Type is TERMINATION Count CHARACTERS This parameter specifies the number of different termination characters that can be used to signal the end of a received message Rx Term ASCII CHARACTER Used when the Ax Termination Type is TERMINATION Chars CODES CHARACTERS This parameter specifies the termination characters used to signal the end of each received message Enter up to 12 ASCII character codes in decimal format with spaces between codes The number of termination characters is set in the Rx Term Count parameter Rx Packet 0 TO 200 Used when the Rx Termination Type is PACKET SIZE This Length parameter sets the length of data required to be received on the port before considering end of message reached Rx Timeout 0 TO 65535 Used when the Rx Termination Type is MESSAGE TIMEOUT This parameter sets the number of milliseconds to wait after the first character is received on the port before considering end of message reached Rx Delay 0 TO 65535 Used when the Rx Termination Type is INTERCHARACTER DELAY This parameter sets the maximum number of milliseconds to wait between each character received on the port When this value is exceeded the ASCII driver considers end of message
182. s the relationship of the gateway s internal database to the addresses required in the incoming Modbus TCP IP requests Database Address Modbus Address 0 40001 five digit addressing or 400001 six digit addressing 1000 41001 or 410001 2000 42001 or 420001 3000 43001 or 430001 3999 44000 or 440000 Page 126 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways MBS Protocol User Manual 7 2 MBS Configuration 7 2 1 MBS Port x The Modbus Port x sections of the PCB Tree Window where x stands for 1 2 3 or 4 set the Modbus Master and slave port communication parameters and specify the protocol specific settings Configuration Parameters Common to Master and Slave Parameter Value Description Enabled YES or NO Specifies if the port will be used If the parameter is set to No the port will not be used If the parameter is set to Yes the port will be used RS Interface RS 232 Specifies the electrical interface for the ports RS 485 RS 422 Type MASTER Specifies if the port will emulate a Master or slave device or Master The gateway initiates Modbus commands to one or more SLAVE Modbus devices Slave The gateway responds to Modbus commands initiated by a Modbus master Float Flag YES or NO Specifies if the floating point data access functionality is to be implemented If the float flag is set to YES Modbus functions 3
183. ses in upper memory where the status data for each ASCII port can be found Port Gateway Starting Register for Status Data 1 13000 EN 13010 3 13020 4 13030 Status data for Ports 2 through 4 are only present in 4 port ASCII gateways Port x Status Data Status Register Offset Description 0 Receive state 1 Listening for data 1 Receiving port data 1 Total receive character count 2 Total receive message count 3 Transmit state 0 Waiting for Data to Send 1 RTS On 2 RTS Timeout 3 Sending data 4 Waiting for RTS Off 5 RTS turned off 30 31 and 32 Intercharacter Delay 100 and 101 Message Delay before Transmit 4 Total transmit character count 5 Total transmit message count 6 Reserved Zog No valid data ProSoft Technology Inc Page 165 of 200 July 10 2013 PLX30 Series User Manual Ethernet and Serial Gateways Page 166 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series SIE Protocol Ethernet and Serial Gateways User Manual 9 SIE Protocol In This Chapter 9 1 SIE Functional Overview ccccccecececeeeececeeeeaeeeeeeeeeeeeeseaeseeaeeseeeeeseaeeesaeeeeneeees 168 9 2 SIE Configuration rs nserita rece es he aa denria egee eds eae re ee 169 9 3 SIE RI le ee 183 9 4 SIE LEE e 187 This chapter contains information specific to PLX30 series gateways with a Siemens Industrial Ethernet SIE protocol driver ProSo
184. sirra tinei aa a sauces a a ai AETA EAE ATEGES 34 3 1 2 Ethernet Pot BE 35 3 1 3 Serial Port LEDs for Gateways with Serial Porte 35 3 2 Using Diagnostics in ProSoft Configuration Builder nenene nenene nne 36 3 2 1 Diagnostics Men nessies Eiir arara E Eaa i PUREE O AA 39 3 2 2 Capturing a Diagnostic Session Ioaogtile 41 3 2 3 Using the Data Analyzer Serial Protocols Only 0 cccceseeeeeeeeeeeeeeeeeeeeeeseneeees 42 3 3 Gateway Status Data in Upper Memonm 44 3 3 1 General Gateway Status Data in Upper Memory ssssssssssssisssrresrresrresrrssrresrresrns 44 3 3 2 Protocol Specific Status Data in Upper Memonm 44 4 Hardware Information 45 4 1 Hardware Gpechflcatons 46 4 1 1 Serial Port Specifications sisas inis aiaa aeia a ia iaa 47 4 2 Serial Port Cables for Gateways with Serial Ports esseesseseseeseresrresrresrresresn 48 4 2 1 RS 232 Null Modem DTE with Hardware Handebakimg 48 4 2 2 RS 232 Null Modem DTE without Hardware Handshaking 0 ceseeeeeee 49 ProSoft Technology Inc Page 5 of 200 July 10 2013 Contents User Manual PLX30 Series Ethernet and Serial Gateways 4 2 3 RS 232 DTE to DCE Modem Connection sssessseesseesseesseeenretrnenrennnrnnnernneeenns 49 4 2 4 RS 422 Interface Connechons nenn nnnn 50 4 2 5 RS 485 Interface Connections cccccecccecseeceeneeceeeeeceeeeeeeaeeeeneeseeeeesaeesenaeeeeeeenaees 50 5 EIP Protocol 51 5 1 EIP Functional OVerview
185. ssed in the request data field is to be returned looped back in the response The entire response message should be identical to the request Sub function Data Field Request Data Field Response 00 00 Any Echo Request Data ProSoft Technology Inc Page 147 of 200 July 10 2013 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways Example and State Diagram Here is an example of a request to remote device to Return Query Data This uses a sub function code of zero 00 00 hex in the two byte field The data to be returned is sent in the two byte data field A5 37 hex Request Response Field Name Hex Field Name Hex Function 08 Function 08 Sub function Hi 00 Sub function Hi 00 Sub function Lo 00 Sub function Lo 00 Data Hi A5 Data Hi A5 Data Lo 37 Data Lo 27 The data fields in responses to other kinds of queries could contain error counts or other data requested by the sub function code YES Data Value OK MB Server Sends mb_exception_rsp Page 148 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual Modbus Exception Responses When a Modbus Master sends a request to a server device it expects a normal response One of four possible events can occur from the Master s query If the server device receives the request without a communication error and can handle the query normally it
186. sses in hexadecimal base16 notation you will need to convert the hexadecimal value to a decimal value to enter in this parameter In such cases it is not usually necessary to subtract 1 from the converted decimal number as this addressing scheme typically uses the exact offset address expressed as a hexadecimal number ProSoft Technology Inc July 10 2013 Page 133 of 200 MBS Protocol PLX30 Series User Manual Ethernet and Serial Gateways 7 3 MBS Diagnostics 7 3 1 PCB Diagnostics The best way to troubleshoot the MBS driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 7 3 2 MBS Status Data in Upper Memory Each Modbus port has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 27 General Modbus Error and Status Data The following table lists the starting addresses in upper memory where general error and status data for each Modbus Master or slave port can be found Modbus Port Starting Address 1 4400 2 4800 3 5200 4 5600 Status data for Ports 2 through 4 is only present in 4 port MBS gateways A
187. t number corresponds to the slot in the rack containing the controller being addressed Func Code 150 Specifies the function code to be used in the command 151 150 Word Range Write 152 151 Word Range Read 152 Read Modify Write File Type Binary Specifies the file type to be associated with the Counter command Timer Control Integer Float ASCII String Status File String Specifies the PLC 5 Address as a string For example Page 66 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual Parameter Value Description N10 300 Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc Page 67 of 200 July 10 2013 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual Class 3 Client UClient x Commands Controller Tag Access Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read funct
188. t accumulated value for a counter or timer the sub element field should be set to 2 The tables below show the sub element codes for PLC 5 complex data tables Timer Counter Code Description 0 Control 1 Preset 2 Accumulated Control Code Description 0 Control 1 Length 2 Position PD Code Description 0 Control 2 SP 4 Kp 6 Ki 8 Kd 26 PV All PD values are floating point values so they are two words long BT Code Description 0 Control 1 RLEN 2 DLEN 3 Data file 4 Element 5 Rack Grp Slot MG Code Description 0 Control 1 Error 2 RLEN 3 DLEN Page 84 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual 5 4 3 ControlLogix and CompactLogix Processor Specifics In order to exchange data between a Control CompactLogix processor and the gateway the MSG instruction is used There are two basic methods of data transfer supported by the gateway when using the MSG instruction Encapsulated PCCC messages and CIP Data Table messages Either method can be used Encapsulated PCCC Messages This section contains information specific to the Control CompactLogix processor when used with the PCCC command set The current implementation of the PCCC command set does not use functions that can directly interface with the Controller Tag Database
189. t to YES The MULTIHOP tab portion of the dialog box must be completed as shown in the following window a MSG MG13 0 2 Elements x Ins Add Hop Del Remove Hop From Port To Address Type This PLCS 2 1756 ENet LP str 192 168 0 75 ControlLogix Backplane NAA 1756 Backplane Slot dec Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero PLC5 Read Commands Read commands transfer data to the PLC5 processor from the gateway An example rung used to execute a read command is shown in the following diagram z MG12 0 MG13 0 THA 0001 J zm Ee ReadiWrite Message N DN EN Control MG13 0 He Setup Screen Bh MG12 0 U gt DN In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box 74MSG MG13 0 2 Elements General MuliHop This PLC 5 Control Bits Communication Command Ignore if timed out T0 0 Data Table ddress To be retried NR 0 Size in Elements Awaiting Execution EW 0 Port Number Continuous Run C0 o Error ER o m Target Device Message done DN Data Table EE Message Transmitting ST 0 MultiHop Message Enabled EN 0 r Error Error Code Hex 0 Error Description No errors Page 8
190. tem between a Client device and a server or for checking various internal error conditions within a server The function uses a two byte sub function code field in the query to define the type of test to be performed The server echoes both the function code and sub function code in a normal response Some of the diagnostics cause data to be returned from the remote device in the data field of a normal response In general issuing a diagnostic function to a remote device does not affect the running of the user program in the remote device Device memory bit and register data addresses are not accessed by the diagnostics However certain functions can optionally reset error counters in some remote devices ProSoft Technology Inc Page 115 of 200 July 10 2013 MBTCP Protocol PLX30 Series User Manual Ethernet and Serial Gateways A server device can however be forced into Listen Only Model in which it will monitor the messages on the communications system but not respond to them This can affect the outcome of your application program if it depends upon any further exchange of data with the remote device Generally the mode is forced to remove a malfunctioning remote device from the communications system Sub function Codes Supported Only Sub function 00 is supported by the gateway 00 Return Query Data The data passed in the request data field is to be returned looped back in the response The entire response message should b
191. the RS 422 wiring diagram For additional assistance please contact ProSoft Technical Support Page 50 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual 5 EIP Protocol In This Chapter 5 1 EIP Functional Overview 0 cccccccccccceeeeecececeeeceaueeeeseceeeeesuaueeseseeeseeeaueasaseeeeeeuaeanens 52 5 2 leede Ee ait at ade MA eee 54 5 3 ll e le Ee 70 5 4 EIP Hietetefeg ege eege EES Ed HE Eau 77 This chapter contains information specific to PLX30 series gateways with an EtherNet IP EIP protocol driver ProSoft Technology Inc Page 51 of 200 July 10 2013 EIP Protocol User Manual PLX30 Series Ethernet and Serial Gateways 5 1 EIP Functional Overview The PLX30 series EIP gateway can be used to interface many different protocols into the Rockwell Automation family of processors as well as other software based solutions The following illustration shows the functionality of the EtherNet IP protocol Communication Gateways Internal Database Up to 4000 Read Write Registers Client The EIP driver supports the following connections yOMJaN Jau Class Connection Type Number of Connections Class 1 VO Depends on the gateway model PLX31 EIP MBTCP 2 connections PLX31 EIP MBS 2 connections PLX31 EIP MBS4 8 connections PLX31 EIP ASCII 1 connection PLX31 EIP ASCII4 4 connections
192. through 8931 2 8932 through 8947 3 8948 through 8963 4 8964 through 8979 The content of each server s status data area is structured the same The following table describes the content of each register in the status data area Offset Description O through 1 Connection State 2 through 3 Open Connection Count 4 through 5 Socket Read Count 6 through 7 Socket Write Count 8 through 15 Peer IP Page 72 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series EIP Protocol Ethernet and Serial Gateways User Manual 5 3 3 EIP Error Codes The gateway error codes are listed in this section Error codes returned from the command list process are stored in the command list error memory region A word is allocated for each command in the memory area The error codes are formatted in the word as follows The least significant byte of the word contains the extended status code and the most significant byte contains the status code Use the error codes returned for each command in the list to determine the success or failure of the command If the command fails use the error code to determine the cause of failure A Note The gateway specific error codes not EtherNet IP PCCC compliant are returned from within the gateway and never returned from an attached EtherNet IP PCCC slave device These are error codes that are part of the EtherNet IP PCCC protocol or are extended codes unique to this gateway The most com
193. tion Type Field Bit s 4to7 3 2 1 0 Bit Value 8 4 2 1 Definition Reserved Packet size Intercharacter Message Termination limit used delay timeout timeout used character s used used If none of the bits are set Type 0 the port will be configured for stream mode Any characters received on the port are immediately sent to the processor The processor must buffer and assemble a packet of information if this mode is selected as required by the application If the data can be handled by the processor in this mode and it is appropriate for your application this is the fastest method of communication between the device and the processor ProSoft Technology Inc Page 161 of 200 July 10 2013 ASCII Protocol PLX30 Series User Manual Ethernet and Serial Gateways Any combination of bits is acceptable to the gateway and should be set to match the device on the specific port An example of each termination type is given below Termination character s used Settings Count 1 RTermCnt 1 Termination on 0x0d carriage return character RTermChar Od 00 00 00 Data Received on port A B C Ox0d D E Comment The characters ABC will be sent along with the 0x0d character to the controller after the Ox0d character is received The characters DE will not be sent until the Ox0d character is received Message timeout used Settings Message timeout 1000 mSec Rtimeout 1000 Data Received on port TIME gt 0 1000 mSec 20
194. tion opens the Edit dialog box The IP address shown is the gateway default IP address Edit WATTCP my_ip 192 168 0 250 my_ip netmask 255 255 255 0 gateway 192 168 0 1 Th 168 0 250 Comment Definition Default private class 3 address Reset Tag Reset All OK Cancel 3 Edit the values for my_ip netmask subnet mask and gateway default gateway 4 When you are finished editing click OK to save your changes and return to the ProSoft Configuration Builder window ProSoft Technology Inc Page 29 of 200 July 10 2013 Configuring Your Gateway PLX30 Series User Manual Ethernet and Serial Gateways 2 8 Downloading the Project to the Gateway For the gateway to use the settings you configured you must download copy the updated Project file from your PC to the gateway To download the project file 1 Inthe tree view in ProSoft Configuration Builder click once to select the gateway 2 Right click the Gateway icon to open a shortcut menu From the shortcut menu choose DOWNLOAD FROM PC TO DEVICE Download files from PC to module STEP 1 Select Communication Path Select Connection Type Ethernet DI Browse Device s Ethernet 192 168 0 250 Use Default IP CIPconnect STEP 2 Transfer File s DOWNLOAD bort Test Connection Cancel 3 Click the BROWSE DEVICE S button to launch the ProSoft Discovery Service window which displays the ProSoft
195. top to bottom one after the other until all specified commands are completed and then the polling process begins over again This section defines the EtherNet IP commands to be issued from the gateway to server devices on the network These commands can be used for data collection and or control of devices on the TCP IP network In order to interface the virtual database with Rockwell Automation Programmable Automation Controllers PACs Programmable Logic Controllers PLCs or other EtherNet IP server devices you must construct a command list The following tables describe the command list parameters for each message type ProSoft Technology Inc Page 59 of 200 July 10 2013 EIP Protocol User Manual PLX30 Series Ethernet and Serial Gateways Class 3 Client UClient x Commands SLC500 2 Address Fields Parameter Value Description Enable Enable Specifies if the command should be executed and under Disable what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command executes only if the internal data associated with the command changes Internal 0 to 3999 Specifies the database address in the modules internal Address database to be associated with the command If the command is a read function the data received in the response message is placed at the specified locat
196. tual database for input data transferred to the PLC Input Size 0 248 This parameter specifies the number of Integers being transferred to the PLC s input image 248 integers max Output Data 0 3999 This parameter specifies the starting address within the Address gateway s virtual database for output data transferred to the PLC Output Size 0 248 This parameter specifies the number of integers being transferred to the PLC s output image 248 integers max ProSoft Technology Inc July 10 2013 Page 57 of 200 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual 5 2 3 EIP Class 3 Client UClient x Connection The PLX30 gateway supports two connected Clients and one unconnected Client most devices use connected Clients be sure refer to the user manual of the target device for verification The EIP Class 3 Client x Connections are used when the gateway is acting as a Client Master initiating message instructions to the server slave devices The PLX30 EIP protocol supports three Connected Client Connections Typical applications include SCADA systems and SLC communication The EIP Class 3 UClient Connection is used when the gateway is acting as a Client Master initiating message Instructions to the server slave devices The PLX30 EIP protocol supports one Unconnected Client Connection Unconnected messaging is a type of Ethernet IP explicit messaging that uses TCP IP implementation Certain devices suc
197. unication gateway 1 Ethernet cable RL CBL025 5 straight through cable 4 DB9 to Screw 1454 9F DB9 to screw terminal adapter Terminal Adaptor 4 RJ45 DB9M Serial CABLE14 RJ45 to DB9 male serial adapter cable Adapter Cable 1 Power Connector J180 PLX30 gateway power connector 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway If any of these components are missing please contact ProSoft Technology Support for replacements ProSoft Technology Inc Page 11 of 200 July 10 2013 Start Here PLX30 Series User Manual Ethernet and Serial Gateways 1 3 Mounting the Gateway on a DIN rail 1 99 in 5 05 cm 5 37 in 13 64 cm PLX30 Series of Gateways Page 12 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Start Here Ethernet and Serial Gateways User Manual 1 4 Connecting Power to the PLX30 Gateway Common VDC GND 24 VDC 10 to 36 VDC 600 ma max at 24 VDC A WARNING Ensure that polarity is not reversed when applying power to the gateway This will cause damage to the gateway s power supply ProSoft Technology Inc Page 13 of 200 July 10 2013 Start Here PLX30 Series User Manual Ethernet and Serial Gateways Page 14 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Configuring Your Gateway Ethernet and Serial Gateways Us
198. upply Current Load Operating Temperature Storage Temperature Relative Humidity Dimensions Height x Width x Depth LED Indicators On all gateways Ethernet Port S Serial Port Isolation Shipped With Each Unit Description 24 Vdc nominal 10 Vdc to 36 Vdc allowed Positive Negative GND Terminals 208mA normal 24 Vdc normal 300 mA maximum 36 Vdc maximum 25 C to 70 C 13 F to 158 40 C to 80 C 40 F to 176 5 to 95 RH with no condensation Standard 5 38 in x 1 99 in x 4 38 in 13 67 cm x5 05cm x 11 13 cm Configuration CFG and Error ERR Communication Status Power PWR and Hardware Fault FLT Network Status NS EtherNet IP Class or Class III Connection Status EtherNet IP Only Module Status MS Module Configuration Status EtherNet IP Only Ethernet Communication Port Link Activity and 100mbit Serial Communication Port Receive RX and Transmit TX 10 100Mbit full duplex RJ45 Connector Electrical Isolation 1500 Vrms at 50 Hz to 60 Hz for 60 seconds applied as specified in section 5 3 2 of IEC 60950 1991 Ethernet Broadcast Storm Resiliency less than or equal to 5000 ARP frames per second and less than or equal to 5 minutes duration 2500 Vrms port signal isolation per UL 1577 serial port communication signal uses RF Radio Frequency modulation signal as isolation media IC chip model is Silicon Labs Si844x Si8440 Si8441 Si8442 2 5 mm screwdriver PLX30 DVD
199. us of each slave device on a Master port Slaves attached to a Master port can have one of three states 0 The slave has not defined in the command list for the Master port and will not be polled from the Command List 1 The slave is configured to be polled by the Master port and the most recent communication attempt was successful 2 The Master port has failed to communicate with the slave device Communication with the slave is suspended for a user defined period based on the scanning of the command list Slaves are defined to the system when the gateway loads the Master Command List during start up and initialization Each slave defined will be set to a state value of 1 in this initial step If the Master port fails to communicate with a slave device timeout expired on a command retries failed the Master will set the state of the slave to a value of 2 in this status table This suspends communication with the slave device for a user specified Error Delay Count Page 138 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual When the Master first suspends polling of a particular slave it creates an Error Delay Counter for this slave address and set the value in that counter equal to the Error Delay Counter parameter in the configuration file Then each time a command in the list is scanned that has the address of a suspended slave the delay counter value
200. ver number 11 Adr Func Data Start Reg Hi Data Start Reg Lo Data ofRegsHi Data of Regs Lo Error Check Field 144 04 00 08 00 01 CRC Page 144 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBS Protocol Ethernet and Serial Gateways User Manual Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are 2 bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits Because the server interface is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Each PC will limit the quantity of register contents provided each scan thus for large register quantities multiple PC scans will be required and the data provided will be form sequential scans In the example below the register 3009 contains the decimal value 0 Adr Func ByteCount Data Input Reg Hi Data Input Reg Lo Error Check Field 1 04 02 00 00 E9 Force Single Coil Function Code 05 Query This message forces a single coil either ON or OFF Any coil that exists within the controller can be forced to either state ON or OFF However because the controller is actively scanning unless
201. ver port s status data area is structured the same The following table describes the content of each register in the status data area Offset Description Number of Command Requests Number of Command Responses Number of Command Errors Number of Requests Number of Responses Number of Errors Sent Number of Errors Received Configuration Error Word Current Error Code COIN D HR V JPM O Last Error Code Page 106 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series MBTCP Protocol Ethernet and Serial Gateways User Manual MBTCP Client Status Data The following table lists the addresses in upper memory that hold status data for each MBTCP Client Client Address Range 0 15500 through 15509 1 15526 through 15535 2 15552 through 15561 8 15708 through 15717 9 15734 through 15743 The content of each Client s status data area is structured the same The following table describes the content of each register in the status data area Offset Description Command Request Count total Client commands sent Command Response Count total command responses received Command Error Count Number of Request Packets Number of Response Packets Errors Sent Errors Received Reserved Current Error Last Error O O IN IO or HR oo PM o Offsets 8 and 9 contain information about the most recent communication errors The Curr
202. version 2 2 0 Build 1 tet Ete Module configuration Module Module Type Module Name Default Module Default Module The Default Project and Default Location folders may be renamed in the tree view Select the object and then click the right mouse button to open a shortcut menu From the shortcut menu choose RENAME 4 Untitled ProSoft Configuration Builder File View Project Tools Help Default Project Name Status Information Ga Default Location PLX31 E1P MB54 Configured PLX31 EIP MB54 il Delete PLX30 EIM4 1 00 Comment Values OK Copy EIP Class 3 Server Values OK EIP Class 3 Client 0 Values OK EIP Class 3 Client 1 Values OK EIP Class 3 UClient 0 Values OK MBS Port 1 Values OK Disabled MBS Port 2 Values OK Disabled MBS Port 3 Values OK Disabled Choose Module Type View Configuration lt Export Configuration File s Load Config File Module Information Last Change Never Download from PC to Device ES Download Jul 17 2012 09 17 i Application Rev 1 00 182 GREEN 05 Rev 2 6 30 10 Diagnostics Loader Rev Mac Address 00 00 8D 88 00 16 configedit version 4 0 1 Build 1 Ethernet configuration my_ip 192 168 0 250 netmask z 255 255 255 0 gateway 192 168 0 1 module configuration PLX31 EIP MB54 1 Type the name to assign to the object 2 Click away from the object to save the new name ProSoft Technology Inc Page 23 of 200 July 10 2013 Conf
203. will be from N10 0 to N10 99 If a value of 1000 is selected valid registers will be from N10 0 to N10 999 Accessing the Gateway s Internal Memory Data Type Tag Name Length of Each Array Range for 4000 Element in CIP Element Database Message BOOL BOOLDataf 1 0 to 63999 Bit Array BITAData 4 0 to 1999 SINT SINTData 1 0 to 7999 INT INT_Datal 2 0 to 3999 DINT DINTData 4 0 to 1999 REAL REALData 4 0 to 1999 The following tables define the relationship of the gateway s internal database to the addresses required in the MSG instructions MSG Instruction Type CIP Database CIP Integer CIP Boolean CIP Bit Array CIP Byte CIP DINT CIP Real Address O Int_data 0 BoolData 0 BitAData 0 SIntData 0 DintData 0 RealData 0 999 Int_data 999 BoolData 15984 SIntData 1998 1000 Int_data 1000 BoolData 16000 BitAData 500 SIntData 2000 DIntData 500 RealData 500 1999 Int_data 1999 BoolData 31984 SIntData 3998 2000 Int_data 2000 BoolData 32000 BitAData 1000 SIntData 4000 DiIntData 1000 RealData 1000 2999 Int_data 2999 BoolData 47984 SIntData 5998 3000 Int_data 3000 BoolData 48000 BitAData 1500 SIntData 6000 DiIntData 1500 RealData 1500 3999 Int_data 3999 BoolData 63999 SIntData 9998 Page 54 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Ethernet and Serial Gateways EIP Protocol User Manual MSG Instruction T
204. wo following parameters Reset Tag Reset All OK Cancel Parameter Value Description Float Flag YES or NO This flag specifies if the floating point data access functionality is to be implemented If the float flag is set to YES Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the two following parameters Float Start 0 to 65535 This parameter specifies the first register of floating point data All requests with register values greater than or equal to this value will be considered floating point data requests This parameter is only used if the Float Flag is enabled For example if a value of 7000 is entered all requests for registers 7000 and above will be considered floating point data Float Offset 0 to 3999 This parameter specifies the start register for floating point data in the internal database This parameter is used only if the Float Flag is enabled For example if the Float Offset value is set to 3000 and the float start parameter is set to 7000 data requests for register 7000 will use the internal Modbus register 3000 Output 0 to 3999 When the port is configured as a slave this parameter specifies the Offset internal database address to use as the zero address or starting point for binary output Coil data Coil data is read by Modbus Function Code 1 commands Read Coils and written by Function Codes 5 Force Single Coil or Function Co
205. you to estimate time intervals during a Data Analyzer session The time tick will print at the time interval you specify in the Data Analyzer Setup dialog box For example if you select 10 mS Ticks it will print every 10 milliseconds Data Analyzer Setup Time Tick C No Ticks C 1m5 Ticks C 5m5 Ticks e 10mSTicks 50mSTicks 100 m Ticks Communication Port fe Porti C Port C Fon Format Page 42 of 200 ProSoft Technology Inc July 10 20133 PLX30 Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 9 Ifyou wish to capture the Data Analyzer session to a log file click the Log File button 10 Click the Start Data Analyzer button to start the Data Analyzer Click it again to stop it ala D 11 The example below is part of a capture of standard Modbus data packets It is displayed in hexadecimal number format Data LEAVING the serial port is enclosed in angle brackets lt gt Data ENTERING the port is enclosed in square brackets Each set of brackets holds one word 2 bytes of data lt 2D gt lt 00 gt lt 2E gt lt 00 gt lt 2F gt lt 00 gt lt 30 gt lt 00 gt lt 31 gt lt 16 gt lt E0 gt lt R gt _TT__TT_ 05 10 00 28 00 oa cl 82 _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_TT_ TT TT TT TT TT TT a TTT TT TT TTT TT TT TT TT TT TT TT TT__TT__TT__TT__TT__TT_ lt R gt lt 06 gt lt 04 gt lt 00 gt lt 32 gt lt 00 gt lt 04 gt lt
206. ype PCCC Database Address File size 100 D N10 0 999 N19 99 1000 N20 0 1999 N29 99 2000 N30 0 Database Address 999 1000 1999 2000 File size 100 N10 0 N19 99 N20 0 N29 99 N30 0 EtherNet IP Explicit Messaging Server Command Support The following commands are supported in the PLX30 gateway Basic Command Set Functions Command Function Definition Supported in Server 0x00 N A Protected Write X 0x01 N A Unprotected Read X 0x02 N A Protected Bit Write D 0x05 N A Unprotected Bit Write X 0x08 N A Unprotected Write X PLC 5 Command Set Functions Command Function Definition Supported in Server 0x0F 0x00 Word Range Write Binary Address X 0x0F 0x01 Word Range Read Binary Address X 0x0F Typed Range Read Binary Address X 0x0F Typed Range Write Binary Address X 0x0F 0x26 Read Modify Write Binary Address 0x0F 0x00 Word Range Write ASCII Address X 0x0F 0x01 Word Range Read ASCII Address X 0x0F 0x26 Read Modify Write ASCII Address SLC 500 Command Set Functions Command Function Definition Supported in Server 0x0F OxA1 Protected Typed Logical Read With Two X Address Fields 0x0F OxA2 Protected Typed Logical Read With Three X Address Fields 0x0F 0xA9 Protected Typed Logical Write With Two X Address Fields 0x0F OxAA Protected Typed Logical Write With Three X Address Fields 0x0F 0xAB Protected Typed Logical Write With Mask Three

PLX30 Series - absatraining.com

Contents

Download Pdf Manuals

Related Search

Related Contents