Home

BL20 - User manual for Modbus TCP (EN)

1. 8 6 Potential COMPENSAtION RC 8 7 Switching InductiveEoads PR RR AAA A ENA AE ER lee spe Ie poc OR RE dee tee eed 8 7 Protection against Electrostatic Discharge ESD eene 8 7 BL20 Approvals for Zone 2 Division 2 Appendix Data image of the technology modules Counter module RSxxx module ate SSI MOQUIL tege EENEG Ident codes of the BL 320 modules cccccossssssssssscessssssscssscccsecccessssssssssscccccccesceessssssssecccccsccecessssssosccese 10 21 Glossary Index D301004 1211 BL20 Modbus TCP Industri A 1 About this Manual 1 1 Documentation Concept s esssssssssssesosssssseosossssesessosossssosososssososossssesessosossssesssssssososssssseseossssssesessssss 2 1 2 Description of Symbols Used e eee e eee eee ee eene een een eee e ee eaae eaae eee e esee eee ee eese eese eese sese seu 3 1 3 General Information M A 1 3 1 Prescribed r w EET 4 1 3 2 Notes Concerning Planning Installation of this Product em meme 4 1 4 iariqud an re 5 D301004 1211 BL20 Modbus TCP 1 1 About this Manual 1 1 1 2 Documentation Concept This manual contains information about the BL20 Ethernet gateway BL20 GW EN with Modbus TCP The following chapters contain a short BL20 system description
2. 5 14 1 Digital input modules E BL20 4DI NAMUR Table 5 10 Byte Bit Parametername Wert Module M parameters Meaning A Default 0to3 0 input filterx 0 deactivate settings input filter 0 25 ms A 1 activate input filter 2 5 ms 1 digital input x 0 normal A input signal not inverted 1 inverted input signal inverted conversion of the effective signal direction for sensors 2 Short circuit 0 deactivate A diagnostics x 1 activate 3 Short circuit 0 deactivate A monitoring x 1 activate 4 Open circuit 0 deactivate A monitoring x 1 activate 5 Open circuit diagnostics x 0 deactivate A 1 activate 6 Input on diagnostic 0 output substitute value A 1 hold current value 7 Substitute value on diagnostic 02 on A 1 2 off 5 14 2 Analog input modules BL20 1AIH 0 4 20MA Table 5 11 Byte Bit Parameter name Value Module M parameters meaning 0 0 current mode 0 0 20 MAA A Default 1 4 20 MA settings 1 value 0 Integer 15 bit sign A representation EEN 1 12bit left justified 2 diagnosis 0 activate A 1 deactivate D301004 1211 BL20 Modbus TCP 5 23 Implementation of Modbus TCP BL20 2AI I 0 4 20MA 1 byte parameter per channel Table 5 12 Byte Bit Parameter name Value Module M parameters mes 0 1 0 current mode 0 0 20 mA A A Defa
3. Set a Exception 3 Invalid 1 Received 9 Enor 0 Norspmse o ne pateims type reme 0 0 0 0 8 0 O 1 0 00 Req 00 09 OO 00 OO O6 FF 04 10 13 00 01 2 1 88 Resp 00 09 OO 00 OO O5 FF 04 02 oo 94 The process image length of all digital input modules of the example station is 0x0A bits 10 bits Table 6 5 Module Process input Processinputdata of digital modules 1 BL20 2DI 24VDC P 2 bits 4 BL20 4DI 24VDC P 4 bits 8 BL20 4DI 24VDC P 4 bits Total 10 bits D301004 1211 BL20 Modbus TCP 6 13 Application example Modbus TCP 6 3 5 Reading out the packet process data inputs In order to assure a largely efficient access to the process data of a station the module data are consistently packed and mapped to a coherent register area The packed input data can be found in registers 0x0000 to 0x01FF of the gateway They can be accessed via function code 03 guiness iBixi Packed input File Yiew Tests Help process data sicSIEX SE NENZI Exchange Control Sent 1 Exception p Invalid 0 Received 1 Error 0 Notesponse 0 ne dateims Type 1 0 00 Req 20 2 2 59 Resp 00 00 OO D1 FS 00 OU O00 00 00 a2 os no o1 o2 pd Ee 00 00 The first 9 registers 18 bytes contain the input data of the intelligent modules A followed by 1 register of digital input data B 6 3 6 Evaluation of the packed process data inputs Intellige
4. scccccccssccssscecccssccsscsseccsscccseccsscsseccesccsseseseccsecsssccssesesecees 7 13 7 4 Extending an Existing Station scssccssssssscsccccssssesccscecssssssccseccsssceseccssccssessssssseccsseccssssssccseccesescsescsecees 7 14 7 5 Firmware Download 7 15 8 Guidelines for Electrical Installation 8 1 General Notes 8 2 SCHEI GSMS Nal vi enee 8 2 812 Cable ROUITIQ serene treni sssesesssstessascatssssaqsvacatssncendss saint scnchasstauss sachs Eeer 8 2 8 1 3 Cable Routing Inside and Outside of Cabinets ENEE 8 2 8 14 Lighting Protetto ose Dette RA ARR RR T vaneditsctgvastesassanshuapaenuaauattunges 8 3 815 TAPASIMISSIOM MO ial cacisacesd 8 3 8 2 Potential Relationships ccecissccccscssceecosss sesonsesoccescessesonserocessocessesonssseceisessdssscdesnocedsessdeseedessocedssesdsseossvendesseesvesses 8 4 Bic Geales eeh 8 4 8 2 2 Electromagnetic Compatibility EM 8 4 8 2 3 Ensuring Electromagnetic Compatibility ENEE 8 4 8 2 4 Grounding of Inactive Metal Components ENEE 8 5 D301004 1211 BL20 Modbus TCP iii 8 2 5 8 2 6 8 2 7 8 3 8 4 8 4 1 8 4 2 10 10 1 10 1 1 10 1 2 10 1 3 10 2 11 12 PE Gene oe E 8 5 Earth FEree Ope ratio nis edel EE es cede 8 5 lettre 8 5 HUInPInpIEIclrm
5. Industrial Automation USER MANUAL FOR Modbus TCP All brand and product names are trademarks or registered trade marks of the owner concerned Edition 02 2011 Hans Turck GmbH Muelheim an der Ruhr All rights reserved including those of the translation No part of this manual may be reproduced in any form printed photocopy microfilm or any other process or processed duplicated or distributed by means of electronic systems without written permission of Hans Turck GmbH amp Co KG Muelheim an der Ruhr Subject to alterations without notice Industri A Safety Notes Before starting the installation Disconnect the power supply of the device Ensure that devices cannot be accidentally restarted Verify isolation from the supply Earth and short circuit Cover or enclose neighboring units that are live Follow the engineering instructions of the device concerned Only suitably qualified personnel in accordance with EN 50 110 1 2 VDE 0 105 Part 100 may work on this device system Before installation and before touching the device ensure that you are free of electrostatic charge The functional earth FE must be connected to the protective earth PE or to the potential equa lization The system installer is responsible for implementing this connection Connecting cables and signal lines should be installed so that inductive or capacitive interfe rence do not impair the automation functions
6. eerte tentent nnne nnn tte notti nint io ttt tttts netto tts notte noto tts notio nonis 6 4 6 2 3 Changing the IP address via PACTware I O ASSISTANT N IER 6 5 6 3 Communication examples Modbus TCP ecce eene eere seen eee ee seen sete stes tenant tn sees senses esteso tenes tense enotns 6 8 6 3 1 Reading out the EE TEE 6 3 2 Reading out the reference module list ee 6 3 3 Reading out the actual module list 6 3 4 Reading out the process image length inputs 6 3 5 Reading out the packet process data inputs 6 3 6 Evaluation of the packed process data Unputsl EEN G37 STIG output m 6 4 Parameterization of modules sessssesorsesoroesossosossosossoesosoesosoesoseososeososeossoroesosoesoseososeososeossoroesosoesoseesosessose 6 19 6 5 Evaluation of module diagnostics 6 5 1 Module diagnosis 0xA000 to 0xA400 ENEE 6 24 7 Guidelines for Station Planning 7 1 Random Module Arrangement 7 4 1 Complete Planning 7 1 2 Maximum System Extension 7 2 uel 7 5 434 Module Bus Refresh succinic eerie re RR rre tie sei A A ene ER ERE HR APR E pus 7 3 2 Creating Potential Groups 7 23 3 Protecting the Service Interface on the Gateway 7 24 e Eed e Eege Tu E dell 7 2 5 Direct Wiring of Relay Modules ENEE 7 3 Plugging and Pulling Electronics MOCUules
7. 0 0 0 0 1 0 00 Req 00 01 00 00 00 Ge FF 06 1 21 2 1 65 Resp DO 01 OO OO O0 O6 FF Of B1 21 19 06 D301004 1211 BL20 Modbus TCP Evaluation of module diagnostics Industri A 6 5 Evaluation of module diagnostics The diagnostic data of the BL20 modules can be found in registers 0xA000 to 0xA400 For each module in the station 64 bytes are reserved for diagnosis information In addition to that a group diagnosis max 32 modules per station is displayed It can be read out either via the packed process data or separately via registers 0x1018 to 0x1014A The group diagnosis contains one diagnostic bit for each module in the station which shows if the respective module sends a diagnostic message or not The meaning of this diagnostic bit has to be read out from the diagnostic data of the module registers 0xA000 to 0xA400 Group diagnosis within the process input data Figure 6 7 lo x Group diagnosis File view Tests Help in the process cHSINXSE NENZZ d ata r Exchange Control 1 Sent 7 Exception p Invalid To A group diagnosis Received 7 Enor o Moespomel o SEENEN 1 0 00 Req 00 O3 OO OO OO O6 FF 04 10 18 00 02 2 1 80 Resp 00 O3 OO 00 OO 07 FF 04 D4 g2 08 00 oo A Group diagnosis message 0x02 0x08 Byte 0 modules 0 to 7 0x08 Bits 3 is set which means module 3 sends a diagnostic message Table 6 10 Bit 7 6 5 4 3 2 1 0 Group diagnosis byte 0 Value 0 0 0 0 1 0 0 0
8. E BL20 E 2CNT 2PWM see separate module manual D301224 E BL20 2RFID S see RFID documentation www turck de 5 50 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules 5 15 Diagnostic messages of the modules 5 15 1 Power supply modules BL20 BR 24VDC D Industri A Table 5 31 Diagnosis Bit Diagnosis BL20 BR 24VDC D byte n 0 Module bus undervoltage warning 1 reserved 2 Undervoltage field supply 3 reserved BL20 PF 24VDC D Table 5 32 Diagnosis Bit Diagnosis BL20 PF 24VDC D byte n 1 reserved 2 reserved 3 undervoltage field supply 4 reserved BL20 PF 120 230VAC D Table 5 33 Diagnosis Bit Diagnosis BL20 PF 120 byte 230VAC D n 0 reserved 1 reserved 2 undervoltage field supply 3 reserved D301004 1211 BL20 Modbus TCP 5 51 Implementation of Modbus TCP 5 15 2 Digital input Modules BL20 4DI NAMUR Table 5 34 BL20 4DI NAMUR Diagnosis Bit Diagnosis byte n 0 short circuit sensor 1 1 open circuit sensor 1 2 short circuit sensor 2 3 open circuit sensor 2 4 short circuit sensor 3 5 open circuit sensor 3 6 short circuit sensor 4 7 open circuit sensor 4 5 15 3 Analog input modules BL20 1AI I 0 4 20MA Table 5 35 BL20 1Al I 0 4 20MA A Only in the measurement Diagnosis Bit Diagnosis byte n 0 measurement value range errorA channel 1 range 4to 20
9. Planned devices Devicepe Online ID_ Busaddress Designation Tag 4 14 D301004 1211 BL20 Modbus TCP Address Setting The IP address as well as the subnet mask of the TURCK Ethernet gateways can be changed according to the application by using the integrated Busaddress Management function in the IO ASSISTANT 3 FDT DTM Note The access of the IO ASSISTANT to the gateway is only possible if the gateway is operated in PGM mode see also Address setting via PGM mode page 4 12 Attention When using Windows XP as operating system difficulties may occur with system integrated firewall It may inhibit the access of PACTware I O ASSISTANT V3 to the Ethernet network In this case please adapt your firewall respectively or deactivate it see also Deactivating adapting the firewall in Windows XP page 6 6 Figure 4 15 Changing the IP address B Go ww iPL iP 3 Busaddress management Online available devices r IndustrialNet 192 168 1 15 255 255 255 0 be Device type Online ID IP address Netmask Gateway Ethernet address Mode 2 Unknown 0 192 168 119 169 255 255 0 0 192 168 1 252 00 07 46 00 04 48 DHCP BL20 GW EN IP 1118110 192 168 1 99 255 255 255 0 192 168 1 1 00 07 46 00 0F CA ROTARY 72 Unknown 0 192 168 250 31 255 255 0 0 192 168 1 252 00 07 46 00 04 04 0 136 129 1 254 136 129 1 1 00 07 46 FF 0A FD sF E 5 0 192 168 1 1 0 192 168 250 254 255 0 0
10. Planned devices Devicetype Online D Busaddress Designation TT sg Device short name D Data set Tdi Disconnected Administrator Note i Please observe that chaning the IP address is only possible via the Ethernet interface at the gateway not via the RS232 interface D301004 1211 BL20 Modbus TCP 4 15 Technical Features 4 6 SET Button The Current Configuration of the station is saved as the Actual Configuration when the SET button on the gateway is pressed for approximately 10 seconds it is also saved to the both the Temp Required Configuration Memory and the Required Configuration Memory The LED GW flashes 4 16 D301004 1211 BL20 Modbus TCP Status Indicators Diagnostic Messages Gateway 4 7 Status Indicators Diagnostic Messages Gateway The gateway sends the following diagnostic messages undervoltage monitoring for system and field supply monitoring of the station status Industri A monitoring of the communication via the internal module bus monitoring of the communication to Ethernet monitoring of the gateway status Diagnostic messages are displayed in two different ways E via the LEDs E via the respective configuration software 4 7 1 Diagnostic Messages via LEDs Every BL20 gateway displays the following statuses via LEDs 2LEDsfor module bus communication module bus LEDs GW and IOs E 2LEDs for the Ethernet communication fieldbus LEDs LINK AC
11. 1 Error 0 No response 0 La cC er 0 00 Req 00 01 00 OO OO O6 FF 04 10 OC OO O1 2 96 Resp 00 Oi 00 OO OO O5 FF 95 02 00 01 Configuration r 04 Read Input Registers r Send Continuously Function Code ps c no Times Starting Address 100C Quantity of registers 0001 With 1 00 ms of Delay m Packet Function Codes List 01 Read Discrete Outputs L1 02 Read Discrete Inputs O 03 Read Multiple Registers 04 Read Input Registers Cancel lt Back Next gt Finish L1 05 Write Single Output O 06 Write Single Register 115 Write Multiple Outputs O 16 Write Multiple Registers Send O 20 Read General Reference O 21 Write General Reference Siggy 122 MASK Write Register 123 Read write Multiple Registers O XX Free Request Close 6 3 1 Reading out the gateway status The gateway status can be read from register 0x100C by using function code 04 Figure 6 10 K Request Data Request gateway status m04 Read Input Registers register Ox100C Function Code or Starting Address 100 Quantity of registers 1l Cancel lt Back Nest Einish D301004 1211 BL20 Modbus TCP 6 9 Application example Modbus TCP Gateway response E BEE Gateway status File Yiew Tests Help sao LEIKIE l CA Exchange Control Sent Tu Exception 9 Invalid To Received 1 Enor 0 Norspmse o Ne _date ms Type 1 0 00 Req DO OB OO O
12. Direction status up The direction is determined by a signal at the physical input B The Signal evaluation parameter A B must be set to pulse and direction SIS DO The DO1 status bit indicates the status of digital output DO1 STS_DI The DI status bit indicates the status of digital input DI STS_GATE 1 Measuring operation running STS_UFLW 1 The lower measuring limit was undershot The bit must be reset with RES_STS 0 1 STS OFLW 1 The upper measuring limit was exceeded The bit must be reset with RES STS 0 1 D301004 1211 BL20 Modbus TCP 10 5 Appendix Table 10 2 Meaning of the data bits process input 10 6 Bits Explanations STS_CMP1 1 Measuring terminated The measured value is updated with every elapsed time interval The end of a measurement expiry of the time interval is indicated with the status bit STS_CMP1 The bit must be reset with RES_STS 02 1 Process output data counter mode The process output data is the data that is output from the PLC via the gateway to the BL20 1CNT 24VDC module The BL20 module allows some parameters to be modified during operation The other parameters must be changed prior to commissioning Note The current count operation is stopped if parameters are changed during operation Note i The parameters modified via the process output data are not retentive The commissioning after a power failure i
13. Figure 2 8 BL20 Economy 2 2 6 End plate An end plate on the right hand side physically completes the BL20 station An end bracket mounted into the end plate ensures that the BL20 station remains secure on the mounting rail even when subjected to vibration Figure 2 9 End plate 2 6 D301004 1211 BL20 Modbus TCP BL20 components 2 2 7 End bracket A second end bracket to the left of the gateway is necessary as well as the one mounted into the end plate to secure the station Figure 2 10 End bracket Note i An end plate and 2 end brackets are delivered together with the gateway 2 2 8 Jumpers Jumpers QVRs are used to bridge a connection level of a 4 wire base module They can be used to connect potentials in relay modules bridging the relay roots thus considerably reducing the amount of wiring Figure 2 11 Jumpers D301004 1211 BL20 Modbus TCP 2 7 BL20 Philosophy 2 2 9 Marking material Labels for labeling BL20 electronics modules Markers for colored identification of connection levels of BL20 base modules Dekafix connector markers for numbering the mounting slots on BL20 base modules Figure 2 12 a Ze M y Yr ze 2 2 10 Shield connection 2 pole for analog modules The 2 pole shield connection can be used to connect signal cable shielding to the base modules of analog input and output modules A special tension clamp operating tool BL20 ZBW5 2
14. Save Modbus connection parameters Registers 0x113E and 0x113F are used for the non volatile saving of parameters in registers 0x1120 and 0x1130 to 0x113B For this purpose write 0x7361 in register 0x113E To activate the saving of the registers write 0x7665 save within 30 seconds in register Ox113F Both registers can also be written with one single request using the function codes FC16 and FC23 D301004 1211 BL20 Modbus TCP 5 17 Implementation of Modbus TCP 5 11 The Service Object The service object is used to execute one time or acyclic services It is an acknowledge service which may serve for example to parameterize an l O module 2000h 2080h 20FFh service request area service response area The service request area allows write access the service response area only read access E Service request area 2000h 2001h 2002h 2003h 2004h 2005h 207Fh service no reserved service index addr data optional data code reg count 0 to122 registers The register service no in the request area can contain a user defined value which is deleted after the execution of the service The register service code specifies which service is requested The register index addr is optional and the meaning depends on the particular service The register data reg count contains depending on the service the number 0 to 122 of the transferred or of the requested data registers Depending on the service th
15. sssssessesseesocccsscososesossossoesosessesosseesossosesososssossosesse 5 21 Error behavior of Outputs issccccscssscsoncscccocecesoossonecocsocesssenus sosecsocsessoossosetecseneysuscsesssnncsentessecsecessncsensssvencsoseecss 5 22 Parameters of the modules 3 03 50 cicsscssssccscesssensssscsesdseosasecasvonssesseconssbasnacdonssesssoesuesbssessoubsseabedbesoutessssbestestesee 5 23 Digital input modules Analog input modules Analog output modules ette tie rte re a eee tit pereant dore titt oet ee Re Ree ne RR AERE 5 32 Technology modules etti tti deti det hiii vede en ett enint sene oc 5 37 Diagnostic messages of the modules eee eee eee e ee eene eee e eene nete seen en senos etse tens eno setas e tens ena setas eene ena 5 51 Power supply modules Digital input Modules Analog input modules Digital oUtpUti tele UE 5 55 Analog output modules ertet eene teen ete ident edet uet eet eet i ete dede tte tete eco 5 57 D301004 1211 BL20 Modbus TCP Industr A 515 6 Technology modules treten tinte vsacassonsd EN E ER E E 5 58 6 Application example Modbus TCP 6 1 AI sSds nire 6 2 6 2 Changing the IP address of a PC network interface card eere eee esee esee en eene tensa atentos sens atnas 6 3 6 2 1 Changing the IP address in Windows 2000 Windows NP 6 3 6 2 7 Changing the IP address in Windows NT
16. 0 2 5 ms 200 kHz A 1 225 ms 20 kHz 4 Sensor input filter DI 0 2 5 ms 200 kHz A 1 225 ms 20 kHz 5 Sensor A 0 normal A 1 inverted 7 Direction input B 0 normal A 1 inverted 14 0 Group diagnostics 0 release A 1 block 4 5 Behavior CPU master STOP 00 switch off DO1 A 01 proceed with operating mode 10 DOT switch to substitute value 11 DOT hold last value 5 38 D301004 1211 BL20 Modbus TCP Parameters of the modules BL20 1CNT 24VDC measurement mode Industri A Table 5 26 Module parameters A Default settings D301004 1211 BL20 Modbus TCP Byte Bit Parameter name Value Meaning 0 Oto5 Measurement mode 100000 frequency measurementA 100001 revolutions measurement 100010 period duration measurement 1 0 Digital input DI 0 normal A 1 inverted 1 Function DI 0 input A5 1 HW gate 2to4 Lower limit Oto 16 777 214 x 10 Lower limit HWORD 0 Ato 255 Unsigned8 Lower limit WORD 0 Ato 65535 5to7 Upper limit 1to 16 777 215 x 10 Upper limit HWORD OAto 255 Unsigned8 Upper limit LWORD 0 Ato 65535 8to9 Integration time n 10ms 1 to 1 000 10A 10to 11 Sensor pulse per revolution 1A to 65535 12 0 Substitute value DO1 OA 1 1 Diagnostic DO1 0 onA 1 off 12 2 3 Function DO1 00 output A 01 outside of limit 10 below lower limit 11 above upper limit 13 0 1 Signal evaluation A B 00 pulse and
17. Control bit Meaning of the data bits process output Explanations A Unlike the physi MODE DO2 cal digital out put DOT output DO2 is only a data value that is indicated with the data bit STS DO2ofthe process input Only valid if LOAD DO PARAM 0 1 The virtual A output DO2 can show the status of the data bit SET DO2 or comparison results if CTRL_DO2 1 MODE DO2 defines which function DO2 is to accept 00 The output DO2 shows the status of the control bit SET DO2 This must be released with CTRL_DO2 1 01 Output DO2 indicates Counter status gt reference value 2 10 Output DO2 indicates Counter status x reference value 2 11 Output DO2 indicates Counter status reference value 2 A pulse is generated for indicating equal values The pulse duration is defined by byte 2 of this process output s MODE DO Only valid if LOAD DO PARAM 0 1 The physical output DO1 can show the status of the data bit SET DO1 or comparison results if CTRL_DO1 1 MODE DO defines which function DO1 is to accept 00 The output DO1 shows the status of the control bit SET DO1 This must be released with CTRL_DO1 1 01 Output DO1 indicates Counter status gt reference value 1 10 Output DO1 indicates Counter status lt reference value 1 11 Output DO1 indicates Counter status reference value 1 A pulse is generated for indicating equal values The pulse duration is defined by byte
18. D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A Table 5 19 Byte Bit Parameter Value Meaning Module name parameters Operation 011110 Pt 1000 200 C 850 C 3 wire B BEES 011111 Pt 1000 200 C 150 C 3 wire B 100000 Ni 100 60 C 250 C 2 wire 100001 Ni 100 60 C 150 C 2 wire 100010 Ni 1000 60 C 250 C 2 wire 100011 Ni 1000 60 C 150 C 2 wire 100100 Ni 1000TK5000 60 C 250 C 2 wire 100101 reserved 100110 reserved 100111 reserved 101000 Ni 100 60 C 250 C 3 wire B 101001 Ni 100 60 C 150 C 3 wire B 101010 Ni 1000 60 C 250 C 3 wire B 101011 Ni 1000 60 C 150 C 3 wire B 101100 Ni 1000TK5000 60 C 250 C 3 wire B 101101 reserved 101110 reserved 101111 reserved 110000 resistance 0 250 Q 110001 resistance 0 400 Q 110010 resistance 0 800 110011 resistance 0 2000 Q 110100 resistance 0 4000 Q 110101 reserved to 111110 111111 channel not active 6 Value 0 Integer 15 bit sign A representation E Kx 12 bit left justified 7 Diagnostics Kx 0 release A 1 block D301004 1211 BL20 Modbus TCP 5 31 Implementation of Modbus TCP 5 14 3 Analog output modules BL20 1AO I 0 4 20MA Table 5 20 Byte Bit Parameter name Value Module M parameters me
19. E Inthe Exceptions tab add the I O ASSISTANT to Programs and Services E Pressing the button Add Program opens the dialog Add a Program Select the I O ASSISTANT from the list of installed programs E f necessary use the button Browse to choose the file IOassistant exe from the installation directory of the software Figure 6 8 Exceptions tab Windows Firewall General Exceptions Advanced Windows Firewall is blocking incoming network co programs and services selectd to work better but might increa Add a Program To allow communications with a program by adding it to the Exceptions list Programs and Services select the program or click Browse to search for one that is not listed Name Programs BOOTP DHCP Server D OfficeScan Client Cl Pie and Printer Sharing OfficeScan Client deinstallieren O Launch4nywhere GUI DPC Configurator 1 00 LeechFTP f OPC Test Client Remote Assistance QF OPC TestClient 1 61 C Remote Desktop Outlook Express SLLGGAGLGGUGGGOGUGnoeO O UPnP Framework Wee S Q Pinball E Reset ctivation 32 Bit 49 RoboHELP Classic x Add Program Path CAProgramme PACT ware Consortium PACT Display a notification wher What are the risks of allowing Despite an active firewall the I O ASSISTANT is now able to browse the network for hosts and the address changing via the software is possible for the connected nodes D3
20. Figure 6 3 GER modulediagnosis Ele view Tests Heb module 9 CA EN Eiki I rE Exchange Control A diagnosis byte Sent 1 Exception 9 It 0 channel 0 Received 1 Error Q0 Noresponse bt B diagnosis byte N Date ms Type Frame channel 1 1 0 00 Req 00 O8 OO OO OO O6 FF 04 A1 20 00 O1 2 1 69 Resp 00 08 OO OO OO 05 FF 04 02 0002 B 6 24 D301004 1211 BL20 Modbus TCP Evaluation of module diagnostics Industri A Table 6 13 Diagnosis Bit Diagnosis BL20 15SI byte n 0 SSI group diagnostics 1 open circuit 2 sensor value overflow 3 sensor value underflow 4 parameterization error D301004 1211 BL20 Modbus TCP 6 25 Application example Modbus TCP 6 26 D301004 1211 BL20 Modbus TCP Industri A 7 Guidelines for Station Planning 7 1 Random Module Arrangement ee eee esee ee eee eee sese ose o sss s nose sss ss Poss sss sess Paese P e eee e eee e eee e eee eee KEE 2 7 1 1 Complete Planning m 2 7 1 2 Maximum System Extension 2 7 2 Power Supp A 5 7 2 1 Module Bus Retres Wing EE 5 7 2 2 Creating Potential Groups cece en eee enne nennen eene nennen 8 7 2 3 Protecting the Service Interface on the Gateway eene 9 7 2 4 C Rail Cross Connection eene menennnnen nennen rennen nere ne nennen 10 7 2 5 Direct Wiring of Relay Modules ener mihi riae ge co e e D LE d e E
21. Pt200 200 850 C 0101 Pt200 200 150 C 0110 Pt500 200 850 C 0111 Pt500 200 150 C 1000 Pt1000 200 850 C 1001 Pt1000 200 150 C 1010 Ni1000 60 250 C 1011 Ni1000 60 150 C 1100 resistance 0 100 Q 1101 resistance 0 200 Q 1110 resistance 0 400 Q 1111 resistance 0 1000 Q 1 3 0 measurement mode 0 2 wire A 1 3 wire D301004 1211 BL20 Modbus TCP 5 25 Implementation of Modbus TCP BL20 2AI THERMO PI 2 byte parameter per channel Table 5 16 Byte Bit Parameter name Value Module M S parameters meaning 0 1 0 mains 0 50HzA A Default epe 0 60Hz settings 1 value 0 Integer 15 bit sign A representation NNUS 1 12 bit left justified 2 diagnosis 0 release A 1 block 3 channel 0 activate A 1 deactivate 7to4 element 0000 type K 270 1370 CA 0001 type B 100 1820 C 0010 type E 270 1000 C 0011 type J 210 1200 C 0100 type N 270 1300 C 0101 type R 50 1760 C 0110 type S 50 1540 C 0111 type T 270 400 C 1000 50 mV 1001 100 mV 1010 500 mV 1011 1000 mV reserved 5 26 D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A BL20 2AIH I Table 5 17 Byte Bit Parameter name Value Module parameters A Default settings 0 0 Channel 0
22. a description of the field bus system Ethernet exact information about function and structure of the BL20 Ethernet gateways as well as all bus specific information concerning the connection to automation devices the maximum system extension etc The bus independent I O modules for BL20 as well as all further fieldbus independent chapters like mounting labelling etc are described in a separate manual BL20l O modules TURCK Documentation No German D300716 English D300717 Furthermore the manual mentioned above contains a short description of the project planning and diagnostics software for TURCK l O systems the engineering software I O ASSISTANT D301004 1211 BL20 Modbus TCP Description of Symbols Used Industri A 1 2 Description of Symbols Used A Danger This sign can be found next to all notes that indicate a source of hazards This can refer to danger to personnel or damage to the system hardware and software and to the facility This sign means for the operator work with extreme caution A Attention This sign can be found next to all notes that indicate a potential hazard This can refer to possible danger to personnel and damages to the system hardware and software and to the facility Note This sign can be found next to all general notes that supply important information about one or more operating steps These specific notes are intended to make operation easier and avoid un
23. parameters A Default settings Value Meaning 0 3to0 data rate 0000 2 300 bps 0001 600 bps 0010 1200 bps 0100 2400 bps 0101 4800 bps 0110 9600 bps A 0111 14400 bps 1000 19200 bps 1001 28800 bps 1010 38400 bps 1011 2 57600 bps 1100 115200 bps reserved 4 Select RS485 5 reserved 0 parameterization as RS422 1 parameterization as RS485 6 Disable ReducedCtrl Constant setting The diagnosis messages are set in Byte 6 of the process input data independent of diagnostic Byte 6 of the process output data contains two bits which may set to flush the transmit or the receive buffer Byte 7 contains the status or the control byte Bytes 0 to 5 contain the user data 0 7 diagnosis 0 release A 1 block 1 0 stop bits 0 1 bitA 1 2 bit 2 1 parity 00 none 01 odd A The number ofthe bits set data bits and parity bit is odd 10 even The number ofthe bits set data bits and parity bit is even D301004 1211 BL20 Modbus TCP 5 43 Implementation of Modbus TCP Table 5 28 Byte Bit Module parameters A Default settings Parameter name Value Meaning data bits O 7A The number of data bits is 7 1 8 The number of data bits is 8 XON character 0 255 17 A Only in RS422 mode XON character This character is used to start the data transfer of the data term
24. 0 5A P n 0 Overcurrent short circuit channel 1 4 1 Overcurrent short circuit channel 5 8 2 Overcurrent short circuit chnnel 9 12 3 Overcurrent short circuit channel 13 16 4 Overcurrent short circuit channel 17 20 5 Overcurrent short circuit channel 21 24 6 Overcurrent short circuit chnnel 25 28 7 Overcurrent short circuit channel 29 32 D301004 1211 BL20 Modbus TCP 5 57 Implementation of Modbus TCP 5 15 5 Analog output modules BL20 2AOH Table 5 50 Diagnosis byte Bit Diagnosis BL20 2AOH I n 0 Value above upper limit Display of a measurement range exceeding limit values according to parameterization 1 Wire break Shows a wire break in the signal line 2 Invalid val ue The output value exceeds the values which the module is able to interpret 3 Value below lower limit Display of a measurement value underflow limit values according to parameterization 4 HART status error The connected HART device set a bit in the HART status information status polling 5 HART communication error The channel does not allow communication with the HART device 6 Invalid Parameter 7 Hardware error Shows common errors of the module hardware The return analog value in case of an error is O BL20 4AO U I Table 5 51 Diagnosis byte Bit Diagnosis BL20 4AO U I A thresholds n 0 measurement value range error OoR A value represen channel 0 tationofthe
25. 10 9 Module Ident code Module ident codes Digital input modules BL20 2DI 24VDC P 0x210020xx BL20 2DI 24VDC N 0x220020xx BL20 2DI 120 230VAC 0x230020xx BL20 4DI 24VDC P 0x410030xx BL20 4DI 24VDC N 0x420030xx BL20 4DI NAMUR 0x015640xx BL20 E 8DI 24VDC P 0x610040xx BL20 16DI 24VDC P 0x810050xx BL20 E 16DI 24VDC P 0x820050xx BL20 32DI 24VDC P 0xA10070xx Analog input modules BL20 1AI I 0 4 20M A 0x012350xx BL20 2AI I 0 4 20M A 0x225570xx BL20 1AI U 10 0 10VDC 0x011350xx BL20 2AI U 10 0 10VDC 0x235570xx BL20 2AI PT NI 2 3 0x215770xx BL20 2AI THERMO PI 0x215570xx BL20 4AI U I 0x417790xx Digital output modules BL20 2DO 24VDC 0 5A P 0x212002xx BL20 2DO 24VDC 0 5A N 0x222002xx BL20 2DO 24VDC 2A P 0x232002xx BL20 2DO 120 230VAC 0 5A 0x250002xx BL20 4DO 24VDC 0 5A P 0x013003xx BL20 E 8DO 24VDC 0 5 A P 0x610004xx BL20 16DO 24VDC 0 5A P 0x413005xx BL20 E 16DO 24VDC 0 5A P 0x820005xx BL20 32DO 24VDC 0 5A P 0x614007xx D301004 1211 BL20 Modbus TCP 10 21 Appendix Table 10 9 Module ident codes Module Ident code Analog output modules BL20 1AO 1 0 4 20MA 0x010605xx BL20 2AO 1 0 4 20MA 0x220807xx BL20 2AO U 10 0 10VDC 0x210807xx Relay modules BL20 2DO R NC 0x230002xx BL20 2DO R NO 0x220002xx BL20 2DO R CO 0x210002xx Technology modules BL20 1CNT 24VDC 0x014B9
26. 1SSI module to the connected field device The process output data is the data that is output from the PLC to the BL20 1SSI module via a gateway This is transferred in an 8 byte format as follows E 4bytes are used for representing the data that is to be written to the register with the address specified at REG WR DATA 1 byte contains the register address for the data that is to be read with the next response telegram 1 byte contains the register address of the data to be written to bytes 0 to 3 of this telegram and a write request 1 byte is used for controlling the comparison operations 1 byte contains a Stop bit for interrupting communication with the encoder Figure 10 11 Process output Data image data Process output data SPS gt SSI Byte Bit Bit6 Bit5 Bit4 Bit3 Bit 2 Bit 1 BitO Control data CLR CLR EN CMP2 CMP1 CMP1 REG WR ADR D301004 1211 BL20 Modbus TCP 10 19 Appendix Table 10 8 Meaning of the data bits process output Designation Value Meaning REG_WR_DATA 0 237 1 Value to be written to the register with the address stated at REG_WR_ADR REG_RD_ADR 0 63 Address of the register to be read If the read operation is successful REG_RD_ABORT 0 the user data is located in REG RD DATA of the process input data bytes 4 7 REG_WR Default status i e there is no request to overwrite the content of the register with
27. 2 67g 4 Set 9 0 9 0 8 2 8 2 67g 4 6g 4 Adr x 10 Adr x 1 O00 192 168 1 254 1 254 Static rotary 300 BootP 400 DHCP 500 PGM 600 PGM DHCP Note In the PGM mode all network settings IP address subnet mask etc are read from the modules internal EEPROM The settings carried out in the rotary mode are stored in the module s non volatile EEPROM 4 5 7 Addressing via PGM DHCP The addressing of the BL20 Modbus TCP gateway via PGM DHCP is at the moment comparable to the addressing via DHCP see page 4 11 4 12 D301004 1211 BL20 Modbus TCP Address Setting 4 5 8 Address setting via l O ASSISTANT 3 FDT DTM The software l O ASSISTANT enables direct access to the Ethernet network via the Ethernet cable Naturally the access to the single station via the service interface at the gateway is possible as well The IP address as well as the subnet mask of the TURCK Ethernet modules can be changed according to the application by using the Busaddress Management function of the BL Service Ethernet interface in the I O ASSISTANT Note i Please observe the changing the IP Address is only possible by using the gateway s Ethernet interface Select the interface BL Service Ethernet in the DTM and connect the gateway to the PC using the Ethernet port page 4 6 Changing the address using the service interface is not possible Figure 4 12 SC Service Bi PACTware DER Ethernet EDE S Zeg Window
28. 2 of this process output Hysteresis value 0 to 255 The reference value 1 2 can be assigned a hysteresis value in order to generate a response at DO1 DO2 with hysteresis This will prevent the excessive on and off switching of DO1 DO2 if the count value fluctuates too quickly around the reference value Pulse 0 to 255 unit ms duration If the DO1 DO2 outputs are set to indicate counter status reference value 1 2 a longer pulse is sometimes required to indicate equal values EXTF ACK Error acknowledgement The error bits must be acknowledged with the control bit EXTF_ACK after the cause of the fault has been rectified This control bit must then be reset again Any new error messages are not set while the EXTF_ACK control bit is set CTRL DO2 0 The virtualA output DO2 is blocked 1 The virtualA output DO2 is released 10 8 D301004 1211 BL20 Modbus TCP Data image of the technology modules Industri A Table 10 3 Meaning of the data bits process output Control bit Explanations SET DO2 If CTRL_DO2 1 and the virtualA output DO2 is set to indicate the value SET DO2 DO2 can be set and reset directly with SET DO2 DO2 can be set for this function via the process output MODE DO2 00 and LOAD DO PARAM 0 gt 1 The output DO2 can also be set before commissioning via the separate parameter data The default setting for DO2 is to indicate the status of SET DO2 CTRL D
29. 4 potential compensation cable cce eects 8 7 power distribution seen 2 3 power supply seen 7 5 prescribed use seen 1 4 process image length ne 6 12 Process input counter counter mode sse 10 2 counter measurement mode eee 10 4 KE 10 12 SSI EE f i ie de d I e e ad ed ii 10 14 Process output counter counter mode eee 10 6 counter measurement mode eee 10 10 EE 10 14 e 10 19 protection class IP67 2 2 R reference module list cececeseeceeeeeeeetteteeeeeeeneeteees 6 11 S Safety aspects imet cid 1 4 12 1 Index safety measures ssssssssseee eene 1 4 service interface sssseenennnneennnnnnn 4 6 shield connection analog modules 2 8 shielding eerte tete o eu 8 6 Gent 1 3 T TCP Transmission Control Protocol 3 4 TCP IP RiOSE ritate ri rt e re rer ani 3 2 transport appropriate sse 1 4 Type costes I VOIR BO 7 3 Ww WIN 2000 5 55 A ihre iced Bode dat order vat t tion YE 6 3 VOIR CAE 6 4 WINX E 55 diis o voee e aera ts a EE ee ETS 6 3 Z TLEN N IAEE TE T TEE 9 1 12 2 D301004 1211 BL20 Modbus TCP Industrial Automation www turck com Hans Turck GmbH amp Co KG 45472 M lheim an der Ruhr Germany WitzlebenstraBe 7 Tel 49 0 208 4952 0 Fax 49 0 208 4952 264 E Mail moreQturck com Internet www
30. 8 1 Gateway BL20 GW EN l O Modul l O Modul Power Feeding 1 O Modul Bus Refreshing Block diagram of a BL20 station Output Output Intput 8 2 2 Electromagnetic Compatibility EMC BL20 products comply in full with the requirements pertaining to EMC regulations Nevertheless an EMC plan should be made before installation Hereby all potential electromechanical sources of interference should be considered such as galvanic inductive and capacitive couplings as well as radiation couplings 8 2 3 Ensuring Electromagnetic Compatibility The EMC of BL20 modules is guaranteed when the following basic rules are adhered to E Correct and large surface grounding of inactive metal components Correct shielding of cables and devices Proper cable routing correct wiring Creation of a standard reference potential and grounding of all electrically operated devices Special EMC measures for special applications 8 4 D301004 1211 BL20 Modbus TCP Potential Relationships Industri A 8 2 4 Grounding of Inactive Metal Components Allinactive metal components for example switchgear cabinets switchgear cabinet doors supporting bars mounting plates tophat rails etc must be connected to one another over a large surface area and with a low impedance grounding This guarantees a standardized reference potential area for all cont
31. 8 2 7 3 654 Set 901 9 0 1 8 2 2 7 8 8 65 4 67g 4 Adr x 10 Adr x 1 000 192 168 1 254 1 254 Static rotary 300 BootP 400 DHCP 500 PGM 600 PGM DHCP Attention The settings carried out in the rotary mode are not stored in the module s EEPROM Thus they will get lost in case of a subsequent address assignment via a BootP DHCP or PGM Attention After changing the position of the rotary coding switches a voltage reset must be carried out to store the new address 4 5 4 Address setting via BootP mode The address setting is carried out by a BootP server in the network after the start up of the gateway In order to activate the BootP mode the rotary coding switches have to be set to 300 Figure 4 9 BootP mode Adr x 100 9 0 Set 9 0 4 2 8 2 3 654 654 Adr x 10 Adr x 1 000 1 254 300 400 500 600 192 168 1 254 Static rotary BootP DHCP PGM PGM DHCP D301004 1211 BL20 Modbus TCP Address Setting Industri A Note The IP address as well as the default subnet mask assigned to the gateway by the BootP server are stored in the gateway s non volatile memory If the gateway is subsequently switched to rotary or PGM mode the settings carried out via BootP IP address subnet mask etc will be taken from the module s EEPROM 4 5 5 Address setting via DHCP mode The address setting is carried out by a DHCP server in the network after the start up of the
32. Install automation devices and related operating elements in such a way that they are well protected against unintentional operation Suitable safety hardware and software measures should be implemented for the I O interface so that a line or wire breakage on the signal side does not result in undefined states in the automa tion devices Ensure a reliable electrical isolation of the low voltage for the 24 volt supply Only use power supply units complying with IEC 60 364 4 41 VDE 0 100 Part 410 or HD 384 4 41 S2 Deviations of the mains voltage from the rated value must not exceed the tolerance limits given in the specifications otherwise this may cause malfunction and dangerous operation Emergency stop devices complying with IEC EN 60 204 1 must be effective in all operating modes of the automation devices Unlatching the emergency stop devices must not cause restart Devices that are designed for mounting in housings or control cabinets must only be operated and controlled after they have been installed with the housing closed Desktop or portable units must only be operated and controlled in enclosed housings Measures should be taken to ensure the proper restart of programs interrupted after a voltage dip or failure This should not cause dangerous operating states even for a short time If neces sary emergency stop devices should be implemented Wherever faults in the automation system may cause damage to persons or property exter
33. Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable 5 34 D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A Table 5 23 Byte Bit Parameter name Module para meters A Default settings Value 10 HART variable C Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 channel 1 1 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable 11 HART variable D Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 channel 1 1 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable D301004 1211 BL20 Modbus TCP 5 35 Implementation of Modbus TCP BL20 E 4AO U 3 byte per channel Table 5 24 Byte Bit Parameter Value Meaning Module name parameters A Default
34. O module watchdog actual time 0x1020 4128 44129 404129 watchdog predefined time ms 0x1120 4384 44385 404385 watchdog reset register 0x1121 4385 44386 404386 modbus connection mode 0x1130 4400 44401 404401 register modbus connection time outin 0x1131 4401 44402 404402 sec modbus parameter restore 0x113C to 4412 to 44413 to 404413 to 0x113D 4413 44414 404414 modbus parameter save 0x113E to 4414 to 44415 to 404415 to 0x113F 4415 44416 404416 service object request area 0x2000 to 8192 to 48193 to 408193 to 0x207F 8319 48320 408320 service object response area 0x2080 to 8320 to 48321 to 408321 Ox20FF 8447 48448 to 408448 D301004 1211 BL20 Modbus TCP Modbus Registers Industri A Table 5 4 Description Hex Decimal 5 Digit Modicon Mapping of BL20 GW EN Modbus registers holding registers system voltage UL mV 0x2400 9216 49217 409217 load voltage U mV 0x2401 9217 49218 409218 load current I A 0x2405 9221 49222 409222 no of entries in actual module 0x27FE 10238 410239 list no of entries in reference 0x27FF 10239 410240 module list reserved 0x2900 to 0x29A0 actual module list max 74 0x2A00 to 10752 to 410753 to modules per station x 0x2A94 10900 410901 2 registers per module ID reserved 0x4000 to Ox47FF Slot related addressing process data inputs 0x8000 to max 74 modules per station x 0x893F 32 registers per module
35. SIG Exchange Control Sent 1 Exception b Invalid 0 Received 1 Error 0 No response 0 w dateimsi Type I 0 00 Req 00 iO 00 O0 OO O6 FF 03 OO DO 00 20 2 2 37 Resp 00 10 OO 00 OO 43 FF O3 40 00 03 00 O2 OO 00 00 00 OO OC 00 OO OO OO FF FF 01 Fr 2 os oo 00 00 00 oO OO OO OO OO OO OO OO OO 40 OO OO OO OO OO 00 00 OO OO OO OO OO OO OO 00O OO OO OO OO OO OO 6 16 D301004 1211 BL20 Modbus TCP Communication examples Modbus TCP Industri A 6 3 7 Setting of outputs Setting outputs is either done via the packed station process output data or via the module specific process output data 64 byte per module The following example shows the access via the packed process output data registers 0x0800 to OxO9FF Example Module 2 BL20 2DO 24VDC 0 5A P setting the output channels 2 1 Inorderto determine the register to be written firstly the process image length of the intelligent output modules has to be read out Process data length intelligent outputs Function code 04 register 0x1010 Value 0x60 96 bits 6 registers dL d iBixi reading out the File View Tests Help process data cHSINXCGE NENZ length of intelli r Exchange Control gent outputs Set Y Exception Invalid To Received 1 Enor o Norespme o m Dace me Type Frane E 1 0 00 Req DO 12 OO OO OO 06 FF 04 10 10 OO 01 n 1 76 Resp DO 12 00 00 OO OS FF 04 02 o0 Ga Table 6 6 Modul
36. SSI FRAME LEN INVALID BITS MSB INVALID BITS LSB The invalid bits on the MSB side are zeroed by masking the position value INVALID BITS MSB INVALID BITS LSB must always be less than SSI FRAME LEN Default 0 2 Ohex reserved 2 3to0 data rate 0000 1000000 bps 0001 500000 bps A 0010 250000 bps 0011 125000 bps 0100 100000 bps 0101 83000 bps 0110 71000 bps 0111 62500 bps reserved D301004 1211 BL20 Modbus TCP 5 45 Implementation of Modbus TCP Table 5 29 Byte Bit Parameter name Module parameters A Default settings Value Meaning 7to4 reserved 3 5to0 data frame bits 00000 to 100000 Number of bits of the SSI data frame SSI FRAME LEN must always be greater than INVALID BITS Default 25 19hex 6 reserved 7 data format binary coded A SSI encoder sends data in binary code GRAY coded SSI encoder sends data in Gray code 5 46 D301004 1211 BL20 Modbus TCP Parameters of the modules BL20 E 1SWIRE Industri A Bit 7 Bit 6 Bit 5 Bit4 Bit 3 Bit 2 Bit 1 Bito Byte 1 reserved free free MC MNA Configura Disable Cfg free tion Byte 2 free U AUXERR TY Perr TYP Nro FK Zon PKZwro SDege SDinro Byte 3 reserved Byte 4 reserved lifeguarding time up to version VN 01 03 Byte5 D ue BOCSI GC unt BSCRRESSM GC une i BSGRRESSM SC 52 Bem Byte 6 SCpacS16 SCpacS1
37. Value 0x08 Byte 1 modules 8 to 15 0x02 Bit 1 is set module 9 sends a diagnosis message Table 6 11 Bit 7 6 5 4 3 2 1 0 Group diagnosis byte 1 value 0x02 Value 0 0 0 0 0 0 1 0 D301004 1211 BL20 Modbus TCP 6 23 Application example Modbus TCP 6 5 1 Module diagnosis 0xA000 to 0xA400 For each module 64 Bytes 32 registes are reserved for diagnostic messages Module 3 BL20 2AI THERMO PI The module has 2 bytes of diagnosis data these are shown in register 0xA060 register 0xA060 0x0200 open circuit at channel 1 ge OS lolx modulediagnosis Ele view Tests Heb module 3 A EN EIIE RR Exchange Control A diagnosis byte Sent 7 Exception Invalid 5 channel 0 Received 1 Error 0 No response 0 B diagnosis byte ie pacetms Tye Frame channel 1 1 0 00 Req 00 O6 OO OO OO O6 FF O4 40 60 OO 01 Bn 1 50 Resp 00 06 OO OO OO OS FF 04 02 A I R Table 6 12 Diagnosis Bit Diagnosis BL20 2Al byte THERMO PI A threshold n 0 measurement value range error A 1 of the posi tive measure 1 open circuit B ment range end only in temperature measurement ranges value B Threshold 5 Q 2to7 reserved loop resistance E Module 9 BL20 1SSI The module has 1 byte of diagnosis data these are shown in register OxA120 register 0xA120 0x0002 The diagnosis shows an open circuit at channel the SSI module because no SSl encoder is connected I
38. a function block shows that systems function blocks for the general checking of a slave for any diagnostics messages present only check the first byte 0 None No diagnostics message present 1 Present One several diagnostics messages present Byte 2 SDrerr Communication SWIRE slave If the parameter SD is set for group diagnostics this bit indicates an error as soon as only one slave on the bus sets its Scan error bit 0 OK No error is present or diagnostics function has been deactivated via the parameter setting 1 faulty Error DR Zen Overcurrent protective circuit breaker If the parameter PR Zon is set for group diagnostics this bit indicates an error as soon as only one PKZ of a slave has tripped 0 OK No PKZ has tripped or diagnostics function has been deactivated via the parameter setting 1 Tripping At least one PKZ has tripped 5 62 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules Industri A Table 5 56 Designation Value Meaning Meaning of diagnostics data bits TV Bon Configuration If the TYP parameter is set with group diagnostics in the parameter setting this bit indicates an error as soon as a PLC configuration check detects differing slave numbers types or position of an SWIRE slave 0 OK The PLC configuration check was positive the configuration stored in the BL20 E 1SWIRE matches the SET configuration stored in the PLC or the diagnostics function is deactivated
39. activate A channel 1 1 deactivate 1 Short circuit diagnostics 0 block 1 release A 2 Wire Break diagnostics 0 block 1 release A 344 Operation mode 0 0 20 mA HART status polling not possible 1 4 20 mA HART status polling not possible 2 4 20 mA HART aktiv A Cyclic polling of the HART Status is activated 5 6 reserved 7 HART diagnostic 0 release A 1 block 1 0 1 Value representation 0 Integer 15 bit sign A channel 1 1 NE 43 2 Extended Range 2 3 analog to byte 0 1 channel 2 4 HART variable A Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 channel 1 1 2 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable D301004 1211 BL20 Modbus TCP 5 27 Implementation of Modbus TCP Table 5 17 Byte Bit Parameter name Value Module parameters A Default settings 5 HART variable B Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 2 channel 1 1 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable 6 HART variabl
40. connection is closed 1 The write authorization for the respective Modbus connection is already opened during the establishment of the connection The first Modbus connection thus receives the write authorization all following connections don t only if bit 0 1 0 MB OnlyOneWritePermission 0 all Modbus connections receive the write authorization 1 only one Modbus connection can receive the write permission A write permission is opened until a Disconnect After the Disconnect the next connection which requests a write access receives the write authorization 5 8 Register 1131h Modbus connection time out This register defines after which time of inactivity a Modbus connection is closed through a Disconnect 5 9 Register 0x113C and 0x113D Restore Modbus connection parameter Registers 0x113C and 0x113D serve for resetting the parameter register 0x1120 and 0x1130 to 0x113B to the default settings For this purpose write 0x6C6F in register Ox113C To activate the reset of the registers write 0x6164 load within 30 seconds in register Ox113D Both registers can also be written with one single request using the function codes FC16 and FC23 The service resets the parameters without saving them This can be achieved by using a following save service 5 16 D301004 1211 BL20 Modbus TCP Register 0x113E and 0x113F Save Modbus connection parameters Industri A 5 10 Register 0x113E and 0x113F
41. device and contain a definite serial number A label on the TURCK modules shows the respective MAC ID In addition to that the MAC ID can be read out using the software tool I O ASSISTANT IP address Each Ethernet host receives its own IP address In addition to that the node knows its netmask and the IP address of the default gateway The IP address is a 4 byte value which contains the address of the network to which the node is connected as well as the host address in the network The IP address of the gateway BL20 GW EN is predefined as follows IP address 192 168 1 xxx netmask 255 255 255 0 gateway 192 168 1 1 The netmask shows which part of the IP address defines the network as well as the network class and which part of the IP address defines the single node in the network In the example mentioned above the first 3 bytes of the IP address define the network They contain the subnet ID 192 168 1 The last byte of the IP address defines the node s address within the network Note In order to build up the communication between a PC and an Ethernet module both have to be nodes of the same network If necessary the nodes network addresses have to be adapted one to another Please read chapter 6 Changing the IP address of a PC network interface card page 6 3 D301004 1211 BL20 Modbus TCP System Description 3 1 3 Network Classes The available networks are divided into the different network classes
42. directionA 01 rotary sensor single 2 Sensor 0 2 5 ms 200 kHz A input filter A 1225 ms 20 kHz 3 Sensor 0 2 5 ms 200 kHz A input filter B 1225 ms 20 kHz 4 Sensor input filter DI 0 2 5 ms 200 kHz A 1 225 ms 20 kHz 5 39 Implementation of Modbus TCP Table 5 26 Byte Bit Parameter name Value Module parameters Meaning A Default settings 5 Sensor A 0 normal A 1 inverted 7 Direction input B 0 normal A 1 inverted 14 0 Group diagnostics 0 release A 1 block 4 5 Behaviour CPU master STOP 00 turn off DO1 A 10 proceed with operating mode 01 DO1 switch to substitute value 11 DO1 hold last value 5 40 D301004 1211 BL20 Modbus TCP Parameters of the modules BL20 1RS232 Industri A Table 5 27 Byte Bit Module parameters A Default settings Parameter name Value Meaning 0 3to0 data rate 0000 2 200 bps 0001 2 600 bps 0010 1200 bps 0100 2400 bps 0101 4800 bps 0110 9600 bps A 0111 14400 bps 1000 19200 bps 1001 28800 bps 1010 38400 bps 1011 2 57600 bps 1100 115200 bps reserved reserved Disable ReducedCtrl diagnosis Constant setting The diagnosis messages are set in Byte 6 of the process input data independent of diagnostic Byte 6 of the process output data contains two bits which may set to flush the transmit or the receive buffer Byte 7 contains the status or the control
43. doing create a large surface contact area The shield rail must have a low impedance for example fixing points of 10 to 20 cm apart and be connected to a reference potential area The cable shield should not be severed but routed further within the system for example to the switchgear cabinet right up to the interface connection Note H Should it not be possible to ground the shield on both sides due to switching arrangements or device specific reasons then it is possible to route the second cable shield side to the local reference potential via a capacitor short connection distances If necessary a varistor or resistor can be connected parallel to the capacitor to prevent disruptive discharges when interference pulses occur A further possibility is a double shielded cable galvanically separated whereby the innermost shield is connected on one side and the outermost shield is connected on both sides D301004 1211 BL20 Modbus TCP Potential Compensation Industri A 8 4 Potential Compensation Potential differences can occur between installation components that are in separate areas and these E are fed by different supplies have double sided conductor shields which are grounded on different installation components A potential compensation cable must be routed to the potential compensation Danger A Never use the shield as a potential compensation A potential compensation cable must have the followi
44. electronic module The gateway and the base modules are either snapped onto a mounting rail or are directly mounted onto the machine frame The electronic modules are plugged onto the appropriate base modules The base modules are designed as terminal blocks The wiring is secured by tension clamp or screw connection After disconnection of the load the standard electronic modules can be plugged or pulled when the station is being commissioned or for maintenance purposes without having to disconnect the field wiring from the base modules D301004 1211 BL20 Modbus TCP BL20 components 2 2 BL20 components 2 2 1 Gateways The gateway connects the fieldbus to the I O modules It is responsible for handling the entire process data and generates diagnostic information for the higher level master and the software tool l O ASSISTANT Figure 2 1 BL20 gateway The BL20 gateways BL20 GW EN offer an integrated power supply unit for feeding the gateway and the connected I O modules It is not necessary to supply each individual module with a separate voltage 2 2 2 Power distribution modules The power supply for gateways and I O modules is fed to the power distribution modules therefore it is not necessary to supply each individual module with a separate voltage Figure 2 2 Power distribu tion module D301004 1211 BL20 Modbus TCP 2 3 BL20 Philosophy 2 2 3 Electronics modules Electronics modules contain
45. ene so sos e enses esses esee eene enu 5 5 Modbu s Registers resistent ebe EES EES SEH 5 6 Structure of the Packed In Output Process Data cssccsscscsscsssescscsccccscsescccscccsccsesccssccssecseserecsesencees 5 11 Packed input process data ettet t e a heo niece Pee ER che EA eR Rede dei Ene ie ep es 5 11 Packed output process data ceste trt nasar eerte deed deett erede Perge tied deed ti cicer tuus 5 12 Data Width of the I O Modules in the Modbus Register Area eereee eere eere een eene en neto ases etn suae 5 13 Register 100Ch Gateway StatUs edicit ves eoevs tese ctos Ute too orso s se Uto tos Vend prae Ute eU TVs UE Ve TS TeSt E Soos oss 5 15 Register 1130h Modbus connection mode eere eere eene ee esee ee ette setas etse aseo stessa sense etas eneens 5 16 Register 1131h Modbus connection time out Leer eere cesse eee eene eene seen eene ns enn sets esas ea setas esos eno 5 16 Register 0x113C and 0x113D Restore Modbus connection parameter ecce eere eene eenen 5 16 Register 0x113E and 0x113F Save Modbus connection parameters esee eere eee eee rennen eene eene 5 17 LI CESTA LCS JT Y hto 5 18 elt ag ae Eege EC 5 19 Indirect writing of registers esito caconkelenniy e i ii E R a a 5 20 Bit Areas Mapping of Input Discrete and Coil Areas
46. gateway In order to activate the DHCP mode the rotary coding switches have to be set to 400 Figure 4 10 Adr x 100 DHCP Modus 9 0 4 8 2 6g 4 Set 9 0 9 0 4 2 8 2 Bei 654 Adr x 10 Adr x 1 000 192 168 1 254 1 254 Static rotary 300 BootP 400 DHCP 500 PGM 600 PGM DHCP Note i The IP address as well as the default subnet mask assigned to the gateway by the DHCP server are stored in the gateway s non volatile memory If the gateway is subsequently switched to rotary or PGM mode the settings carried out via DHCP IP address subnet mask etc will be taken from the module s EEPROM DHCP supports three mechanisms for IP address allocation E n automatic allocation the DHCP server assigns a permanent IP address to a client E In dynamicallocation DHCP assigns an IP address to a client for a limited period of time After this time or until the client explicitly relinquishes the address the address can be re assigned E n manual allocation a client s IP address is assigned by the network administrator and DHCP is used simply to convey the assigned address to the client D301004 1211 BL20 Modbus TCP 4 11 Technical Features 4 5 6 Address setting via PGM mode The PGM mode enables the access of I O ASSISTANTs to the modules network settings In order to activate the PGM mode the rotary coding switches have to be set to 500 Figure 4 11 Adr x 100 PGM mode 0 9 0 8
47. image for the RFID modules can be found in the separate documentation on www turck de 10 1 1 Counter module Process input data counter mode Process input data is data from the connected field device that is transmitted via the BL20 1 CNT 24VDC module to the PLC This is transferred in an 8 byte format as follows E 4bytes are used to represent the counter value 1byte contains the diagnostics data 2bytes contain status information Figure 10 1 PZDE counter counter mode fe reserved 10 2 D301004 1211 BL20 Modbus TCP Data image of the technology modules Industri A Table 10 1 Meaning of the data bits process input Bits Explanations ERR_24Vdc Short circuit sensor supply This diagnostics information must be acknowledged with the EXTF_ACK process output control bit ERR_DO Short open circuit excess temperature at the output DO1 This diagnostics information must be acknowledged with the EXTF_ACK process output control bit ERR_PARA 1 There is a parameter error ERR PARA is a group diagnostics bit With the separate diagnostics message bits 3 to 6 describe the parameter errors in more detail 0 The parameter definition is correct as per specification RES STS A 1 Resetting of status bits running The last process output telegram contained RES STS 1 0 The last process output telegram contained RES STS 0 ERR LOAD
48. is ready for communication D301004 1211 BL20 Modbus TCP Address Setting Industri A 4 5 2 Default setting of the gateway The gateway s default settings are the following IP address 192 168 1 254 subnet mask 255 255 255 000 default gateway 192 168 1 001 Note The gateway can be reset to these default settings by the user at any time To reset the gateway please set the three coding switches at the gateway to 000 followed by a power on reset Figure 4 7 Adr x 100 Decimal rotary ay coding switches 8 2 for the address 7 3 setting 6754 Set 9 0 9 0 4 8 2 8 2 7 3 6754 67g 4 Adr x 10 Adr x 1 000 192 168 1 254 1 254 Static rotary 300 BootP 400 DHCP 500 PGM 600 PGM DHCP Attention After every change of the address mode a voltage reset must be carried out 4 5 3 Address setting via the rotary mode When using the rotary mode the last byte of the gateway s IP address can be set via the rotary coding switches at the gateway Note i All other network settings are stored in the module s non volatile EEPROM and can not be changed in the rotary mode Addresses in the range from 0 to 254 can be allocated The addresses 0 and 255 are reserved for broadcast messages in the subnet D301004 1211 BL20 Modbus TCP 4 9 Technical Features The following example shows the setting of the address 173 Figure 4 8 Adr x 100 Address setting 333
49. is required to mount the shield connection onto the base module Figure 2 13 Shield connection 2 8 D301004 1211 BL20 Modbus TCP Industri A 3 Ethernet 3 1 System Description 2 3 1 1 Ethemet AG Hl EE 2 3 1 2 IS 2 3 1 3 Network e 3 3 1 4 Data tanssien ae TITTEN EMT 3 P nternet Proto c EE 4 TCP Transmission Control Brotocolt nennen nennen nnns 4 Modbus TOP EE 4 3 1 5 Checking the communication via ping signals sssssssse emen 4 3 1 6 ARP Address Resolution Protocolt meer 5 3 1 7 Transmission Medid uenon dt Perret Erbe br OL EE DERE EE ee 5 D301004 1211 BL20 Modbus TCP 3 1 Ethernet 3 1 System Description 3 1 1 3 1 2 3 2 Originally developed by DEC Intel and Xerox as DIX standard for data transmission between office equipment Ethernet stands for the IEEE 802 3 CSMA CD specification published in 1985 The rapid increase of application and the worldwide use of this technology enables problem free and above all cost effective connection to existing networks Ethernet MAC ID The Ethernet MAC ID is a 6 byte value which serves to definitely identify an Ethernet device The MAC ID is determined for each device by the IEEE Institute of Electrical and Electronics Engineers New York The first 3 bytes of the MAC ID contain a manufacturer identifier Turck 00 07 46 xx xx xx The last 3 bytes can be chosen freely by the manufacturer for each
50. open circuit mA BL20 2AHH 0 4 20MA Table 5 36 Diagnosis Bit Diagnosis BL20 2AI I 0 byte 4 20MA A Only in the n 0 measurement value range errorA measurement channel 1 range 4to20mA open circuit n 1 0 measurement value range errorA channel 2 open circuit 5 52 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules Industri A BL20 1AI U 10 0 10VDC Table 5 37 Diagnosis Bit Diagnosis BL20 1AI U byte 10 0 10VDC n 0 measurement value range error channel 1 BL20 2AI U 10 0 10VDC Table 5 38 BL20 2AI U 10 0 10VDC Diagnosis Bit byte Diagnosis n 0 channel 1 measurement value range error n 0 channel 2 measurement value range error BL20 2AI PT NI 2 3 Table 5 39 Diagnosis Bit Diagnosis BL20 2AI PT N 2 byte 3 A threshold n 0 Measurement value range error A 196 of the posi channel Underflow diagnostics in temperature measurement ranges only tive measure 1 ment range end Open circuit value B threshold 2 Short circuit B 5Q loop resis in temperature measurement ranges only tance 3to7 reserved E BL20 2Al THERMO PI Table 5 40 Diagnosis Bit Diagnosis BL20 2Al byte THERMO PI A threshold n 0 measurement value range error A 196 ofthe posi tive measure 1 open circuit ment range end only in temperature measurement ranges value 2to7 reserved D301004 1211
51. operable program or batch file C gt ping 192 168 1 1808 Pinging 192 168 1 180 T4 Rye ote ae Reply from 192 168 1 10 bytes 32 time 1ms TTL 60 192 168 1 100 bytes 32 time lt ims TTL 60 192 168 1 188 bytes 32 time lt ims TTL 68 Reply from 192 168 1 166 bytes 32 time ims TTL 60 Ping statistics for 192 168 1 106 Packets Sent 4 Received 4 Lost z loss Approximate round trip times in milli seconds Minimum ms Maximum ims Average ms KK D301004 1211 BL20 Modbus TCP System Description Industri A 3 1 6 ARP Address Resolution Protocol In each TCP IP capable computer ARP serves to clearly assign the worldwide unique hardware addresses MAC IDs to the single IP addresses of the network nodes via internal tables Using ARP in the DOS prompt every node in a network can be clearly identified via its MAC ID E Write a ping command for the respective station IP address example x ping 192 168 1 100 Via the command x arp a the MAC ID 00 07 46 ff 60 13 for this IP address is determined This MAC ID clearly identifies the network node Figure a3 WINDOWS system32 cmd exe ox Determination of Copyright 1985 2661 Microsoft Corp the MAC ID ofa is not recognized as an internal or external command operable program or batch file BL20 module via C gt pi 192 168 1 100 D ping D Pp ARP Pinging 192 168 1 16 with 32 bytes of data Reply 192 168 1 100 bytes 32 Reply 192 168
52. the current mode to 4 to 20 mA register 0xB000 byte 0 bit 0 has to be set Function Code 06 Write Single Register Figure 6 A BEE Parametrization File View Tests Help ofBL20 2Al l 0 Sao E SSN EEA 4 20MA r Exchange Control A register no B register value D301004 1211 BL20 Modbus TCP Sent 1 Exception p Invalid 0 Received 1 Error 0 Noresponse 0 N Date ms Type Frame 1 0 00 Req 00 18 00 00 OD O6 FF o6 o0 ong 0D 2 2 04 Resp O0 18 OO DO DO 06 FF O6 BO OO 00 01 A 6 19 Application example Modbus TCP 2 Deactivation of channel 1 via parameter channel The structure of the modules parameter data can be found in Table 6 8 Module parameters BL20 2AI I 0 4 20MA Thus bit 3 in byte 1 in register OxBOOO Byte 1 Bit 3 has to be set Function Code 06 Write Single Register Figure 6 5 Parameterization BL20 2AHI 0 4 20MA A register no B register value E Modbus Server Tester E Bl x File View Tests Help A EN Enasi l l rE r Exchange Control Sent 1 Exception h Invalid 0 Received 1 Error 0 Noresponse 0 N Date ms Type Frame 1 0 00 Req 00 18 00 00 00 06 FF 06o os 00 2 2 04 Resp 00 18 OO OO OO O6 FF 06 BO O0 08 00 A B Example B Module 9 Changing the baudrate from 500000 Bit s to 71000 Bit s The parameter of the module 9th slot in the station can be accessed via registers 0XB120 to OxB13F The module shows the following parameter da
53. the functions of the BL20 modules power distribution modules digital and analog input output modules and technology modules Electronics modules are plugged onto the base modules and are not directly connected to the wiring They can be plugged or pulled when the station is being commissioned or for maintenance purposes without having to disconnect the field wiring from the base modules Figure 2 3 Electronics module in slice design Figure 2 4 Electronics module in block design 2 4 D301004 1211 BL20 Modbus TCP BL20 components 2 2 4 Base modules The field wiring is connected to the base modules These are constructed as terminals in block and slice designs and are available in the following variations with either tension clamp or screw connections 2 3 wire 2 channel 4 wire 2 channel and 4x 2 3 wire 4 channel Figure 2 5 Base module with tension clamp connection Figure 2 6 Base module with screw connection Figure 2 7 Base module in block design D301004 1211 BL20 Modbus TCP 2 5 BL20 Philosophy 2 2 5 BL20 Economy With the BL20 Economy modules the electronics and connection technology is integrated into a single housing Thus the selection of a base module is unnecessary Within a station the Economy modules can be combined with the modules with separate electronics connection technology provided that the base modules feature tension spring connections
54. turck com D301004 1211
55. 0 tation of the i59 47 1 wire break WB A module in man ual D300716 channel 7 2 short circuit SC A 3 overflow underflow OUFL A 4to6 reserved 7 hardware error D301004 1211 BL20 Modbus TCP 5 55 Implementation of Modbus TCP 5 15 4 Digital output modules BL20 2DO 24VDC 0 5A P Table 5 44 Diagnosis Bit Diagnosis BL20 2DO byte 24VDC 0 5A P n 0 overcurrent short circuit channel 1 1 overcurrent short circuit channel 2 E BL20 2DO 24VDC 0 5A N Table 5 45 Diagnosis Bit Diagnosis BL20 2DO byte 24VDC 0 5A N n 0 overcurrent short circuit channel 1 1 overcurrent short circuit channel 2 BL20 2DO 24VDC 24A P Table 5 46 Diagnosis Bit Diagnosis BL20 2DO byte 24VDC 2A P n 0 overcurrent short circuit channel 1 1 overcurrent short circuit channel 2 E BL20 ADO 24VDC 0 5A P Table 5 47 Diagnosis Bit Diagnosis BL20 4DO byte 24VDC 0 5A P n 0 overcurrent short circuit 1 ch min BL20 16DO 24VDC 0 5A P Table 5 48 Diagnosis Bit Diagnosis BL20 16DO byte 24VDC 0 5A P 0 Overcurrent short circuit channel 1 4 1 Overcurrent short circuit channel 5 8 2 Overcurrent short circuit chnnel 9 12 3 Overcurrent short circuit channel 13 16 5 56 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules Industri A BL20 32DO 24VDC 0 5A P Table 5 49 Diagnosis Bit Diagnosis BL20 32DO byte 24VDC
56. 0 3 6 9 0to3 Operation 0000 voltage 10 10 V DC standard A settings mode Kx 0001 voltage 0 10 V DC standard 0010 voltage 10 10 V DC PA NE 43 0011 voltage 0 10 V DC PA NE 43 0100 voltage 10 10 V DC extended range 0101 voltage 0 10 V DC extended range 0110 reserved 0111 reserved 1000 current 0 20mA standard 1001 current 4 20mA standard 1010 current 0 20mA NE 43 1011 current 4 20mA NE 43 1100 current 0 20mA extended range 1101 current 4 20mA extended range 1110 reserved 1111 channel not active 4 Value 0 Integer 15 bit sign A representation GENUS Kx 1 12 bit left justified 5 Diagnostics Kx 0 release A 1 block 647 Substitute 00 output substitute value A value options A 01 hold current value X 10 output min value 11 output max value 1 4 7 substitute In Modbus TCP the output of a substitute value in case of an 10 value AXLOW error is not possible page 5 22 byte 2 5 8 substitute 11 value Ax HIGH byte 5 36 D301004 1211 BL20 Modbus TCP Parameters of the modules 5 14 4 Technology modules BL20 1CNT 24VDC Counter mode Industri A Table 5 25 Module parameters A Default settings Byte Bit Parameter name Value Meaning 0 Oto5 Counter mode 100000 continous countA 100001 single action count 100010 periodical count 1 0 gate function 0 abort count procedure A 1 interrupt count procedure 1 digital input DI 0 norm
57. 01004 1211 BL20 Modbus TCP 6 7 Application example Modbus TCP 6 3 Communication examples Modbus TCP The next pages contain descriptions of different examples for Modbus TCP communication as well as for the interpretation of the Modbus TCP telegram The following BL20 example station is used Table 6 1 Module Data width Example station Proc in Proc out Alignment GW BL20 GW EN 0 BL20 2AI 1 0 4 20MA 2 words word by word 1 BL20 2DI 24VDC P 2 bits bit by bit 2 BL20 2DO 24VDC 0 5A P 2 bits bit by bit 3 BL20 2AI THERMO PI 2 words word by word 4 BL20 4DI 24VDC P 4 bits bit by bit 5 empty slot 6 BL20 1AI U 10 0 410VDC 1 word word by word 7 BL20 2AO 1 0 4 20MA 2 words word by word 8 BL20 4DI 24VDC P 4 bits bit by bit 9 BL20 1SSI 4 words 4 words word by word The communication between PC and BL20 gateway is established via a standard network interface card and the software Modbus Server Tester from the Modbus organization www modbus org Note Detailed information concerning the register mapping the implemented modbus functions the module parameters and diagnostic messages can be found in chapter 5 Implementation of Modbus TCP of this manual 6 8 D301004 1211 BL20 Modbus TCP Communication examples Modbus TCP Figure 3 IBixd The software File View Tests Help AA EED i PE r Exchange Control Sent 1 Exception 0 Invalid 0 Received
58. 1 Error with load function Control bits LOAD DO PARAM LOAD CMP VAL2 LOAD CMP VAL1 LOAD PREPARE and LOAD VAL must not be set at the same time during the transfer An incorrect value was transferred with the control bits Example Values above the upper count limit or below the lower count limit were selected for Load value direct or Load value in preparation STS LOAD Status of load function Set if the Load function is running STS DN 1 Status direction down STS UP 1 Status direction up STS DO2 The DO2 status bit indicates the status of digital output DO2 STS DO The DO1 status bit indicates the status of digital output DO1 STS DI The DI status bit indicates the status of digital input DI STS GATE 1 Counting operation running STS ND Status zero crossing Set on crossing zero in counter range when counting without main direction This bit must be reset by the RES STS control bit STS UFLW Status lower count limit Set if the count value goes below the lower count limit This bit must be reset by the RES STS control bit STS OFLW Status upper count limit Set if the counter goes above the upper count limit This bit must be reset by the RES STS control bit D301004 1211 BL20 Modbus TCP 10 3 Appendix Table 10 1 Bits Meaning of the data bits process input Explanations STS_CMP2 Status comparator 2 This status bit indicates a comparison result for comparator 2 if The output DO2 is releas
59. 1 100 byt Reply 192 168 1 18 byt Reply 192 168 1 188 bytes 32 time lt ims TTL 68 Ping statistics for 192 168 1 160 Packet Sent 4 Received 4 Lost z loss Approximate round trip times in milli seconds Minimum ms Maximum ims Average C gt arp a Interface 192 168 1 100 8x3 Internet Address Physical Address Type 192 168 1 108 dynamic SKS 3 1 7 Transmission Media For a communication via Ethernet different transmission media can be used see chapter 8 page 8 3 D301004 1211 BL20 Modbus TCP 3 5 Ethernet 3 6 D301004 1211 BL20 Modbus TCP Industri A 4 Technical Features 4 1 General M 2 4 2 FUNCTION 3 4 3 Incip 4 4 3 1 Gateway Str c TEE 4 4 4 Connection possibilities cce eee eee ee eee eee ente stets eee sese esee esee esee esee esee esses osse esee esses osse sesesoe 6 4 4 1 Field Bus CONMECHON E 6 Ethemet connection EE 6 4 4 2 Power Supply via terminal block with screw connection meme 6 4 4 3 Service Interface Connection female PS 2 connector eene 6 Connection with l O ASSISTANT Connection Cable cceecteeteeeeceeteeecieeeeeecneeeteeeieesieseaes 6 4 5 E 8 4 5 1 LED beli ViOT s secet ton th cuba rr ERR RA S EORR A ERO ORARE EAR EE
60. 24VDC D or BL20 PF 120 230VAC D these being used either for creating potential groups or by insufficient field supply Attention Ensure that a sufficient number of Power Feeding or Bus Refreshing modules are used if the system is extended to its maximum Note H If the system limits are exceeded the software I O ASSISTANT generates an error message when the user activates the Station gt Verify command 7 4 D301004 1211 BL20 Modbus TCP Power Supply Industri A 7 2 Power Supply 7 2 1 Module Bus Refreshing The number of BL20 modules that can be supplied by the gateway or a separate Bus Refreshing module via the internal module bus depends on the respective nominal current consumption of the individual modules on the module bus Attention The sum total of the nominal current consumption of the connected BL20 modules must not exceed 1 5 A The following examples show the calculation for the required number of Bus Refreshing modules Example 1 The BL20 station consists of 20 BL20 1A1 1 0 4 20MA modules The number of additional Bus Refreshing modules required is calculated as follows Gateway 430 mA 20 BL20 1AI I 0 4 20MA 20x41 mA 820 mA Total 1250 mA Maximum permissible current via module bus 1500 mA The calculation shows that no further Bus Refreshing module is required Example 2 The BL20 station comprises 15 BL20 1AI U 10 0 10VDC modules 10 BL20 2AO U 10 0 10VDC module
61. 3 Bit2 Bit 1 BitO 0 reserved MODE DO1 2 3 qe era Tae LOAD 5 SE Dd NEUE Ee lr mees D reserved Structure of the data bytes with Lower limit or Upper limit set Figure 10 6 Structure of the data bytes with Lower limit or Upper limit set Byte Bit Bit6 Bit5 Bit4 Bit3 Bit2 Bit 1 BitO H FFE ECH 10 10 D301004 1211 BL20 Modbus TCP Data image of the technology modules Industri A Structure of the data bytes with Integration time set Figure 10 7 3 Structure of the Data image data bytes with Integration time set Process output data PZDA SPS gt Counter measurement value with Integration time Byte Bit 7 Bit6 Bit5 Bit4 Bit3 Bit 2 Bit 1 Bito 0 Integration tim 1 2 reserved gl reserved 5 reserved 7 reserved Table 10 4 Control bit Explanations Meaning of the data bits process output EXTF_ ACK Error acknowledgement The ERR_DO or ERR_24Vdc error bits must be acknowledged with the control bit EXTF_ACK after the cause of the fault has been rectified This control bit must then be reset again Any new error messages are not set while the EXTF_ACK control bit is set CTRL_DO1 0 The output DO1 is blocked 1 The output DO1 is released SET DO If CTRL_DO1 1 and the physical output DO1 is configured for indicating the value SET DO1 DO1 can b
62. 301004 1211 BL20 Modbus TCP 4 3 Technical Features 4 3 Technical Data Figure 4 1 BL20 GW EN A service interface B module bus LEDs C SET button D rotary coding switches E Ethernet F Ethernet LEDs G power supply GW EN A EM D 10 100 MBit ft ae TM F Usys U l l EM 4 3 1 Gateway structure The BL20 gateway has the following structure Figure 4 2 Gateway struc ture 4 4 Fieldbus Service Controller External interface internal RAM WDG Module bus Internal D301004 1211 BL20 Modbus TCP Technical Data Industri A Table 4 1 Supply voltage Technical data Ethernet gateway field supply U nominal value permissible range 24 VDC 18 to 30 VDC I max field current 10A System supply 24 VDC Us nominal value permissible range 24 VDC 18 to 30 VDC lis max 500 mA Jus Supply of the module bus nodes max 1 2 A Physical interfaces field bus transmission rate 10 100 MBit passive LWL can be connected field bus connection technology current consumption max 100 mA RJ45 female connector field bus shielding connection via Ethernet cable Isolation voltages Ug Ethernet service interface 500 V AC Ug Ethernet module bus 500 V AC LU U to Uys 1000 V DC sys Danger A This device can cause radio disturbances in residential ar
63. 5 SC osepl SCpasS13 SCpmgS12 SCpacS11 BC oaeb l SCp4cS9 Byte 7 reserved Byte 8 reserved Byte 9 24 Type designation slave 1 16 The following table shows the meaning of the parameter bits Table 5 30 Parameter Value Module name parameters Byte 1 A Default Disable Cfg Ifthe physical structure of the SWIRE bus does not match the configuration stored in the settings BL20 E 1SWIRE on power up SW LED flashing the physical structure of the SWIRE bus must be stored in the BL20 E 1SWIRE O inactiveA Manual SWIRE configuration To store the physical structure of the SWIRE bus in the BL20 E 1SWIRE the CFG button of the BL20 E 1SWIRE must be pressed manually only functions if the SW LED is flashing active Automatic SWIRE configuration If the physical structure of the SWIRE bus does not match the configuration stored in the BL20 E 1SWIRE on power up the physical structure is stored automatically in the BL20 E 1SWIRE Configurati on PLC configuration check If the PLC configuration check is activated the configuration stored in the BL20 E 1SWIRE is compared with the SET configuration stored in the PLC 0 active A The configuration stored in BL20 E 1SWIRE is compared with the SET configuration stored in the PLC Only SWIRE slaves in the SWIRE bus are accepted that have a device ID completely matching the SET configuration 1 inactive All slaves are mapped in 4Bit INP
64. 5536 data items and the operations of read or write of those items are designed to span multiple consecutive data items up to a data size limit which is dependent on the transaction function code It s obvious that all the data handled via Modbus bits registers must be located in device application memory Access to these data is done via defined access addresses see Modbus Registers page 5 6 ff The example below shows the data structure in a device with digital and analog in and outputs BL20 devices have only one data block whose data can be accessed via different Modbus functions The acces can be done either via registers 16 bit access or for some of them via single bit access Figure 5 5 Pictureofthe data Gateway data memory memory of the BL20 gateways Modbus Function request Code analog Med ReadRegister FO 4 Write Register FCG Control Status Tl a ReadRegister Write Register Read Bits Coils 5 4 Write Bits Coils D301004 1211 BL20 Modbus TCP Implemented Modbus Functions Industri A 5 2 Implemented Modbus Functions The BL20 gateway for Ethernet supports the following functions for accessing process data parameters diagnostics and other services Table 5 2 Function Codes Implemented functions No Function Description 1 Read Coils Serves for reading multiple output bits 2 Read Discrete Inputs Serves f
65. 6 Designation Value Meaning Meaning of diagnostics data bits Byte 1 SWerr SWIRE MASTER If the physical structure of the SWIRE bus does not match the configuration stored in the BL20 E 1SWIRE this bit indicates an error 0 Data The physical structure of the SWIRE bus was accepted and the exchange SWIRE bus is in operation 1 Offline The physical structure was not accepted the SWIRE bus does not start operation SW LED flashing RDY cap PLC SLAVE This bit indicates an error if the configuration stored in the BL20 E 1SWIRE does not match the SET configuration stored in the PLC 0 OK No error present The SWIRE bus is ready for data exchange 1 Offline The configuration stored in the BL20 E 1SWIRE was not accepted The data exchange is prevented RDY LED flashing D301004 1211 BL20 Modbus TCP 5 61 Implementation of Modbus TCP Table 5 56 Designation Value Meaning Meaning of diagnostics data bits COM gg Communication SWIRE A communication error is present such as a slave is no longer reached its internal timeout has elapsed or communication is faulty The master cannot carry out data exchange with at least one slave 0 OK Error 1 faulty No error Uswerr Voltage Usy Voltage fault in Uy voltage U 17 VDC for supplying the SWIRE slaves 0 OK No error present 1 Undervolta An error is present ge GENERALg Error message i The creation of
66. 85 422 byte n 0 parameterization error 1 hardware failure 2 data flow control error only in RS422 mode 3 frame error 4 buffer overflow BL20 1SSI Table 5 55 Diagnosis Bit Diagnosis BL20 15SI byte n 0 SSI group diagnostics 1 open circuit 2 sensor value overflow 3 sensor value underflow 4 parameterization error 5 60 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules Industri A BL20 E 1SWIRE Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Byten GENEAL Gas Uswerr free COM ean free RDY can free SWerr Byte n 1 free U AUXERR TY Perr free DK Zon free SDerr free TYP erp Field Byte n 2 TYPQ458 TYPeanS7 TYPerrRS6 TYPerRS5 TYPepnS4 TYPeaaS3 TYPerrRS2 TYPepeSl Byte n 3 TYPeagS16 TYP S15 TYPegaS14 TYP erRS13 TYPepeS12 TYP RRS11 TYPegaSl0 TYPraeS9 Slave Diagnostic Byte n 4 SD amp 458 SDerrS7 SDerrS6 SDerrS5 SDerrS4 SDerrS3 SDerrS2 SDegeS1 Byte nt5 SD amp 4516 SDeggS15 SDepeS14 SDegaS13 SDerrS12 SDegaS11 SDegeS10 SDegaS9 PKZ Field Byte n 6 PKZ apS8 PKZegaS7 PKZegaS6 PKZen S5 PKZerRS4 PKZegaS3 PKZepeS2 PKZ rRS1 Byte n 7 PKZ ppS16 PKZerRS15 PKZegnS14 PKZeRRS13 PKZgg S12 PKZegaS11 PKZeg S10 PKZ rRS9 The following table shows the meaning of the diagnostics bits Table 5 5
67. 9xx BL20 1RS232 0x014799xx BL20 1RS485 422 0x024799xx BL20 1SSI 0x044799xx Power supply modules BL20 BR 24VDC D 0x013000xx BL20 PF 24VDC D 0x023000xx BL20 PF 120 230VAC D 0x053000xx 10 22 D301004 1211 BL20 Modbus TCP Industri A 11 Glossary A Acknowledge Acknowledgment of a signal received Active metal component Conductor or conducting component that is electrically live during operation Address Identification number of e g a memory position a system or a module within a network Addressing Allocation or setting of an address e g for a module in a network ARP Used to definitely allocate the hardware addresses MAC IDs assigned worldwide to the IP addresses of the network clients via internal tables Analog Infinitely variable value e g voltage The value of an analog signal can take on any value within certain limits Automation device A device connected to a technical process with inputs and outputs for control Programmable logic controllers PLC are a special group of automation devices B Baud Baud is a measure for the transmission speed of data 1 Baud corresponds to the transmission of one bit per second bit s Baud rate Unit of measurement for measuring data transmission speeds in bit s Bidirectional Working in both directions Bonding strap Flexible conductor normally braided that joins inactive components e g the door of a switchgear cabinet to the cabinet m
68. A B and C Industri A Table 1 Class Network addresses Bytes fornet Bytes for host No ofthe Network classes address address possible networks hosts A 1 XXX XXX XXX 1 3 126 2 126 XXX XXX XXX B 128 0 xxx xxx 2 2 2M 216 191 255 XXX XXX C 192 0 0 xxx 223 255 255 xxx 2 1 256 According to their predefined address 192 168 1 xxx the BL20 gateways are thus nodes of a Class C network 3 1 4 Datatransfer The data are transferred from a transmitter to a receiver via the Ethernet This data transfer uses no acknowledgement of reception which means data telegrams can get lost Data transfer via Ethernet without any protocol implementation can thus not be absolutely safe In order to assure a safe transmission of data frame protocols like TCP IP are used Figure 3 1 Telegram structure LAYER 7 Modbus etc TCP Header TCP DATA TCP Segment IP Header IP DATA IP Package Ethernet Header EtherNet DATA lt D301004 1211 BL20 Modbus TCP EtherNet gt Package 3 3 Ethernet 3 1 5 IP Internet Protocol The Internet Protocol is a connection free transport protocol The protocol does not use acknowledgement messages telegrams can get lost It is thus not suitable for safe data transfer The main functions of the internet protocol are the addressing of hosts and the fragmentation of data
69. AME LEN INVALID BITS MSB INVALID BITS LSB The invalid bits on the MSB side are zeroed by masking the position value INVALID BITS MSB INVALID BITS LSB must always be less than SSI FRAME LEN Default 0 Ohex reserved 2 3to0 data rate 0000 1000000 bps 0001 500000 bps A 0010 250000 bps 0011 125000 bps 0100 100000 bps 0101 83000 bps 0110 71000 bps 0111 62500 bps reserved 7to4 reserved D301004 1211 BL20 Modbus TCP 6 21 Application example Modbus TCP Table 6 9 Byte Bit Parameter name Value Module Meaning parameters BL20 1SSI A Default settings 3 5 to0 data frame bits 00000 to 100000 Number of bits of the SSI data frame SSI FRAME LEN must always be greater than INVALID BITS Default 25 19hex 6 reserved 7 data format binary coded A SSI encoder sends data in binary code GRAY coded SSI encoder sends data in Gray code Thus for setting the baudrate to 71000 Bit s bits O to 3 in byte 2 in register OxB121 have to be set The value 0110 0x06 71000bps has to be written into byte 2 The value 0x1906 is written in register 0xB121 Byte 2 0x06 change in parameters Byte 3 0x19 default setting Figure 00 lolx Parameterization Ele wew Tess Help of BL20 1SSI A register no B register value 6 22 ceo B SSE e Exchange Control Sent H Exception p Invalid 0 Received 1 Error Q Noresponse 0 n patetms Type Frame
70. BL20 8DI x 8 bit bit by bit digital outputs BL20 2DO x 2 bit bit by bit BL20 4DO x 4 bit bit by bit BL20 E 8DO x 8 bit bit by bit BL20 16DO x 16 bit bit by bit BL20 E 16DO x 16 bit bit by bit BL20 32DO x 32 bit bit by bit analog inputs BL20 1AI x 1 word word by word BL20 2AI x 2 words word by word BL20 2AIH I 12 words word by word BL20 4AI x 4 words word by word BL20 E 8AI U I APT NI 8 words word by word analog outputs BL20 1AO x 1 word word by word BL20 2AO x 2 words word by word BL20 2AOH I 8 words 2 words word by word BL20 E 4AO U I 4 words word by word technology modules BL20 1RSxxx 4 words 4 words word by word BL20 1SSI 4 words 4 words word by word D301004 1211 BL20 Modbus TCP 5 13 Implementation of Modbus TCP BL20 1CNT 24VDC 4 words 4 words word by word BL20 E SWIRE A 4 words 4 words word by word BL20 E 2CNT 2PWM 12 words 12 words word by word BL20 2RFID S 12 words 12 words word by word power supply modules BL20 BR x BL20 PF x D301004 1211 BL20 Modbus TCP Register 100Ch Gateway Status 5 6 Register 100Ch Gateway Status Industri A This register contains a general gateway station status Table 5 6 Bit Name Description Register 100Ch gateway status Gateway 15 I O Controller Error The communication controller for the l O system is fa
71. BL20 Modbus TCP 5 53 Implementation of Modbus TCP BL20 2AIH I Table 5 41 Diagnosis byte Bit Diagnosis BL20 2AIH I n 0 Overflow The measured value exceeds the upper measurement range and the module can not process the value 1 Wire break Shows a wire break in the signal line 2 Short circuit Shows a short circuit in the signal line 3 Underflow The measured value is lower than the lower measurement range and the module can not process the value 4 HART status error The connected HART device set a bit in the HART status information status polling 5 HART communication error The channel does not allow communication with the HART device 6 Invalid value 7 Hardware error Shows common errors of the module hardware The return analog value in case of an error is O BL20 4AI U I Table 5 42 Diagnosis Bit Diagnosis BL20 4Al U byte A threshold n ch 0 0 measurement value range error A 1 of the posi to tive measure n 3 1 open circuit B ment range end ch 3 value under flow diagnosis only in value range 4 20 MA B threshold 3 mA only in value range 4 20 mA 2to7 reserved 5 54 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules Industri A BL20 8AI U I APT NI Table 5 43 Diagnosis byte Bit Diagnosis BL20 8AI U 4AI PT NI A thresholds n 0 measurement value range error OoR A value represen channel
72. ERR TREE E EHE Pn e 2 5 1 2 Data Modert 4 5 2 Implemented Modbus Functions eee eee eee eee eerte teen eese esee eee ases sso a pee ee eese soo esee e eese POP e esee eese se 5 5 3 Modbus Registers 6 5 4 Structure of the Packed In Output Process Data cccccccccscccssccscccsccccscccccscccsccccsccccccccscosscces 11 5 4 1 Packed input proceSs Cate EE 11 5 4 2 Packed output process data 12 5 5 Data Width of the I O Modules in the Modbus Register Area eee eee eee netten ones eee eee tnoo 13 5 6 Register 100Ch Gateway StatUs ssseccccecccccccceccccocccccccccocccocccccccccocccoccccccccccoccccccceccscsocccccccccceese 15 5 7 Register 1130h Modbus connection mode 4 eee ee eee eee ee eee eee etes esee esee esee en osse esses eese eese enoo 16 5 8 Register 1131h Modbus connection time out 11 eese eee eee ee eee eee etes sese sees esee sess nosse esses eese e snos 16 5 9 Register 0x113C and 0x113D Restore Modbus connection parameter eese eese eee eerte nne 16 5 10 Register 0x113E and 0x113F Save Modbus connection parameters ccccccccsssscccccsssssecces 17 5 11 UE 18 5 111 Inidireet reading OF registers uio deine t co d xa dn e FG a ec ela ed ait dai 19 5 11 2 Indirect wtitirig of registers meri
73. Heb boje3e awa d P Device for All Devices Device Protocol Vendor Group Device Version a BL Service Ethernet BL Service Ethernet Turck DTM specific 1 0 0 2007 06 12 mem BL Service RS232 BL Service Turck DTM specific 1 0 0 2007 06 12 5 HART Communication HART CodeWrights GmbH FDT 1 0 39 2010 04 12 D BL Service Ethernet Com DTM D301004 1211 BL20 Modbus TCP 4 13 Technical Features Figure 4 13 Busaddress F xxx PW3 PACTware management File Edit View Project Device Extras Window Help nud d 02 90 ag 8 Bas Si 2 x bi i g 2S Connect a i i Disconnect Load from device Store to device Parameter Measured value Simulation Diagnostics Display channels Channels Up Download Manager Print Additional Functions L Compare offline Q Add device Compare online KI Delete device Set va Properties lt TCP IP gt BL Service Ethernet rias Identification About Busaddress management Browser HIMA Export Accessory Preset DTM TAG address tag DTM maintenance 35 o xxx PWS Administrat J Write device data to file Figure 4 14 Search for V Network nodes if D A Search function Di LI rt Busaddress management in the busad Online available devices A dress manage IndustrialNet 192 168 1 15 255 255 255 0 yj ment Devicetype Online ID IPaddress Netmask Gateway Ethernet address Mode
74. I I 0 4 20MA 41 mA BL20 2AI I 0 4 20MA 35mA BL20 1AI U 10 0 10VDC 41 mA BL20 2AI U 10 0 10VDC 35 mA BL20 2AI PT NI 2 3 45 mA BL20 2AI THERMO PI 45 mA BL20 4AI U I 50 mA BL20 2DO 24VDC 0 5A P 32mA BL20 2DO 24VDC 0 5A N 32mA BL20 2DO 24VDC 2A P 33mA BL20 4DO 24VDC 0 5A P 30 mA D301004 1211 BL20 Modbus TCP Power Supply Industri A Table 7 2 Module Supply Nominal current consumption Nominal current consumption of the BL20 modules on the module bus BL20 E 8DO 24VDC P 30 mA BL20 16DO 24VDC 0 5A P 120mA BL20 E 16DO 24VDC P 25 mA BL20 32DO 24VDC 0 5A P 30mA BL20 1A0 1 0 4 20MA 39 mA BL20 2AO 1 0 4 20MA 40 mA BL20 2AO U 10 0 10VDC 43 mA BL20 2DO R NC 28 mA BL20 2DO R NO 28 mA BL20 2DO R CO 28 mA BL20 1CNT 24VDC 40 mA BL20 1RS232 140 mA BL20 1RS485 422 60 mA BL20 1SSI 50 mA BL20 2RFID 30mA BL20 E 1SWIRE 60 mA If the power supply from the module bus is not guaranteed thereby making a further Bus Refreshing module necessary the software l O ASSISTANT generates an error message when the user activates the command Station Verify Note i Bus Refreshing modules which do not supply the gateway with power are to be combined with either a BL20 P3T SBB B or a BL20 P4T SBBC B tension clamp connection base module or with the base modules BL20 P3S SBB B or BL20 P4S SBBC B screw connection D301004 1211 BL20 Modbus TCP 7 7 Guide
75. O 0 The output DO is blocked 1 The output DO1 is released SET DO If CTRL_DO1 1 and the physical output DO1 is set to indicate the value SET DOT DO1 can be set and reset directly with SET DOT DO1 can be set for this function via the process output MODE DO1 00 and LOAD DO PARAM 0 1 The output DO2 can also be set before commissioning via the separate parameter data The default setting for DO1 is to display the value of SET DOT RES STS 0 gt 1 Initiate resetting of status bits Status bits STS ND STS_UFLW SIS OFLW STS_CMP2 STS_CMP1 STS SYN process input are reset Bit RES STS A 1 process input acknowledges that the reset command has been received RES STS can now be reset to 0 CTRL SYN Release synchronization 1 0 gt 1 rising edge at the physical DI input enables the counter value to be set synchronized once periodically to the load value SW GATE 0 gt 1 Counting is started release 1 0 Counting is stopped The starting and stopping of the counting operation with a data bit is implemented with a so called SW gate The HW gate is also provided in addition for stopping and starting the counting operation via the DI hardware input If this function is configured a positive signal must be present at this input in order to activate the SW gate AND logic operation LOAD DO PARAM Parameter definition of the DO1 physical outp
76. O OO O6 FF 04 10 OC OO 01 a 2 02 Resp 00 OB OO 00 OO 05 FF 04 02 oo 6s Status register of the gateway Table 6 2 Byte Value Meaning Register 100Ch gateway status Byte 1 bits 8to 15 0 Byte 0 0 bit 3 1 I O Cfg Modified Warning The actual module list does not correspond to the reference module list stored in the gateway bits 1 and 2 0 reserved bit 0 1 1 0 Diags Active Warning At least one module in the station sends a diagnosis 6 3 2 Reading out the reference module list The reference module list is stored in the register area 0x2800 to 0x2840 It can be read by using function code 03 read multiple registers Figure 6 12 x Reading out the reference module m03 Read Multiple Registers list Function Code 03 Starting Address 2800 Quantity of registers 0020 Cancel Back Next Finish 6 10 D301004 1211 BL20 Modbus TCP Communication examples Modbus TCP Industri A Figure 6 13 Reference module list A Ident no of module 0 Table 6 3 Ident numbers for the example station 5 Modbus server rester BER File View Tests Help oH lt SO gt I FAE r Exchange Control Sent 1 Exception I o Invalid Kgl Received 1 Error Q Noresponse 0 Date ms Type Frame A 00 07 00 06 FF 03 28 00 00 00 07 00 43 FF 03 402 55 70 3941 00 30 10 01 56 21 55 70 38 01 57 44 38 01 56 30 38 61 00 61 40 04 10 21 08 07 38 22 55 70 38 01 47 oo 00 00 00 O
77. O OO OO O0 O0 OO Do 00 00 00 oO 00 00 Each module is clearly identified by a 4 byte ident number Bytes 3 to 1 define module type Byte 0 is reserved for manufacturer specific data Module ident numbers Ident no Module BL20 GW EN 225570xx 0 BL20 2AI I 0 4 20MA 210020xx 1 BL20 2DI 24VDC P 212002xx 2 BL20 2DO 24VDC 0 5A P 215570xx 3 BL20 2AI THERMO PI 410030xx 4 BL20 4DI 24VDC P 00000000 5 empty slot 235570xx 6 BL20 1AI U 10 0 10VDC 220807xx 7 BL20 2AO 1 0 4 20MA 410030xx 8 BL20 4DI 24VDC P 044799xx 9 BL20 1SSI Note i The complete list of BL20 ident numbers can be found in the Appendix of this manual D301004 1211 BL20 Modbus TCP 6 11 Application example Modbus TCP 6 3 3 Reading out the actual module list In order to compare both lists the actual module list can be read from registers 0x2A00 to 0x2A40 using function code 03 again Figure 6 14 x Reading the actual module list 03 Read Multiple Registers Function Code o3 Starting Address zm Quantity of registers 0020 Cancel Back Newt Einish In this case the actual module list shows a deviation from the reference module list at module position 4 No ident no could be read out Module BL20 2AI THERMO PI is not found in the actual station configuration Figure 6 13 BEE Actual module list Ele view Tests Help suc ED i A empty slot mod Exchange Control u
78. RAS 3 8 1 5 TransmissioniM edia ertet bre eaea Re uEFR ETE AEAN a re SERE A ER MER c grdn 3 8 2 Potential Relationships 4 8 2 1 eruc 2 4 8 2 2 Electromagnetic Compatibility EM C 4 8 2 3 Ensuring Electromagnetic Compatibility senem 4 8 2 4 Grounding of Inactive Metal Components eee eee ee eee enemies 5 8 2 5 ugennneqnpme 5 8 2 6 Earth Free Operation oo eee eee eee eene nennen nnne nnne nnne nennen nnne AADUN EE enn 5 8 2 7 Mounting Ralls 2 Bini e cepe i Hd ri ER HE AE RR RE LEE RE ERRARE 5 8 3 HIHGr 6 8 4 IOQCDnurEeJgglrrulp 7 8 4 1 Switching Blue UnL EE 7 8 4 2 Protection against Electrostatic Discharge ERD 7 D301004 1211 BL20 Modbus TCP 8 1 Guidelines for Electrical Installation 8 1 General Notes 8 1 1 General Cables should be grouped together for example signal cables data cables heavy current cables power supply cables Heavy current cables and signal or data cables should always be routed in separate cable ducts or bundles Signal and data cables must always be routed as close as possible to ground potential surfaces for example support bars cabinet sides etc 8 1 2 Cable Routing Correct cable routin
79. SEET 8 4 5 2 Default setting of the gateway 9 4 5 3 Address setting via the rotan mode 9 4 5 4 Address setting via BootP mode gen 5 ede bate tive tei PE E LR dd eiie HR EE 10 4 5 5 Address setting via DHCR mode sess nennen nnne nennen nennen nennen nenne 11 4 5 6 Address setting via P GM mode iud eise de ee e Paper ab Ev v Da E P up v 12 4 5 7 Addressing via PGM DHCP niri nde m Eo e Pret eed cn de apni 12 4 5 8 Address setting via I O ASSISTANT 3 IEDTIDTNT nnn enne nnn 13 4 6 SET S 16 4 7 Status Indicators Diagnostic Messages Gateway 4 eene eee eee eee en nonse e sese sees osos esses esee eee enoo 17 4 7 1 Diagnostic Messages via LEDS sssessessseeeneeem emen 17 D301004 1211 BL20 Modbus TCP 4 1 Technical Features 4 1 General This chapter contains the general technical description of the BL20 gateway for Ethernet The following technical features are independent of the implemented protocol The chapter describes the technical data the connection possibilities the addressing of the gateway etc 4 2 D301004 1211 BL20 Modbus TCP Function Industri A 4 2 Function The gateway is the connection between the BL20 I O modules and the Ethernet network It handles the entire process data traffic between the I O level and the fieldbus and generates diagnostic information for higher level nodes and the software tool I O ASSISTANT D
80. Slot 1 0x8000 32768 z 432769 Slot 2 0x8020 32800 B 432801 Slot 3 0x8040 32832 E 432833 Slot 74 0x8920 35104 435105 process data outputs 0x9000 to max 74 modules per station x 0x993F 32 registers per module Slot 1 0x9000 36864 436865 Slot 2 0x9020 36896 436897 Slot 3 0x9040 36928 436929 Slot 74 0x9920 39200 439201 D301004 1211 BL20 Modbus TCP 5 9 Implementation of Modbus TCP Table 5 4 Description Hex Decimal 5 Digit Modicon Mapping of BL20 GW EN Modbus registers holding registers diagnostics 0xA000 to max 74 modules per station x OxA93F 32 registers per module Slot 1 0xA000 40960 440961 Slot 2 0xA020 40992 440993 Slot 3 0xA040 41034 441035 Slot 74 0xA920 43296 443297 parameters 0xB000 to max 74 modules per station x OxB93F 32 registers per module Slot 1 0xB000 45056 445057 Slot 2 0xB020 45088 7 445089 Slot 3 0xB040 45120 445121 Slot 74 0xB920 47392 447393 D301004 1211 BL20 Modbus TCP Structure of the Packed In Output Process Data Industri A 5 4 Structure of the Packed In Output Process Data In order to assure a largely efficient access to the process data of a station the module data are consistently packed and mapped to a coherent register area The I O modules are divided into digital and intelligent modules analog modules serial interfaces Both module types are mapped in separate register ranges The d
81. T and MS Table 4 3 LED Status LED displays Remedy GW Off CPU not supplied Green Firmware active gateway ready to operate and transmit Green Firmware not active If LED IOs red Firmware flashing download necessary 1 Hz Green Firmware active Replace the gateway flashing gateway hardware defect 4 Hz Red Controller is not ready VCC level is Check wiring at the gateway and not within the required range gt the voltage supply possible reasons Dismount modules too many modules connected to Replace the gateway the gateway short circuit in connected module hardware error in gateway lOs Off CPU not supplied Check the voltage supply at the gateway Green Module bus is running the configured module bus station corresponds to the physically connected station communication is active D301004 1211 BL20 Modbus TCP Technical Features Table 4 3 LED displays LED Status Meaning Remedy lOs Green flashing Station is in the Deactivate the 1Hz l O ASSISTANT Force Mode l O ASSISTANT Force Mode Green flashing Maximum number of modules at Check the number of modules 4Hz the gateway is exceeded connected to the gateway dismount modules Red Controller is not ready V levelis Check wiring at the gateway and not within the required range gt the voltage supply possible reasons Dismount modules too many modules connected t
82. UT 4Bit OUTPUT without checking the device ID D301004 1211 BL20 Modbus TCP 5 47 Implementation of Modbus TCP Table 5 30 Parameter Value Module name parameters Byte 1 MNA Configuration check active Bus or slave oriented configuration check without function if MC 1 assive p O busbased Ifthe PLC configuration check is activated data exchange is only A started if the configuration stored in the BL20 E 1SWIRE fully matches the SET configuration stored in the PLC Modifying the bus during operation causes the system to be aborted 1 slave based If the PLC configuration check is activated data exchange is started with all SWIRE slaves that match the SET configuration stored in the PLC The SWIRE slaves that do not match the SET configuration stored in the PLC do not perform any data exchange MC Moeller conformance from version VN 01 04 Behavior of the BL20 E 1SWIRE in accordance with SWIRE Conformance criteria O inactiveA Default behavior 1 active The BL20 E 1SWIRE master responds according to the Moeller SWIRE Conformance criteria see manual for the IO modules D300717 SDinco Slave error field Activate slave diagnostics info field SD 5x As soon as a slave on the bus sets its error bit this is indicated individually as an error depending on the parameter setting 0 active Single diagnostics is activated 1 inactive Single diagnostics is not activated Byte 2 SDERR G
83. ain body Bus Bus system for data exchange e g between CPU memory and I O levels A bus can consist of several parallel cables for data transmission addressing control and power supply Bus cycle time Time required for a master to serve all slaves or stations in a bus system i e reading inputs and writing outputs Bus line Smallest unit connected to a bus consisting of a PLC a coupling element for modules on the bus and a module D301004 1211 BL20 Modbus TCP 11 1 Glossary Bus system All units which communicate with one another via a bus Ig Capacitive coupling Electrical capacitive couplings occur between cables with different potentials Typical sources of interference are for example parallel routed signal cables contactors and electrostatic discharges Check back interface The check back interface is the interface from the counter module to the internal module bus The bits and bytes are converted by the gateway from the respective type of communication applicable to the fieldbus in to the module specific bits and bytes Coding elements Two piece element for the unambiguous assignment of electronic and base modules Configuration Systematic arrangement of the I O modules of a station Control interface The control interface is the interface from the internal module bus to the counter module The commands and signals directed to the counter module are converted by the gateway from the respective type of c
84. al A 1 inverted 2 3 Function DI 00 input A 01 HW gate 10 Latch retrigger when edge positive 11 Synchronization when edge positive 4 Synchronization 0 single actionA 1 periodical 5 6 Main count dirextion 00 noneA 01 up 10 down 2to5 Lower count limit 2 147 483 648 2 to 0 Lower count limit HWORD 32768 A to 0 Signed 16 Lower count limit LWORD 32 768 to 32 767 Signed16 0 A 6to9 Upper count limit 0 to 2147483647 23 1 Upper count limit HWORD 0 to 32767 A Unsigned16 Upper count limit LWORD 0 to 65535 A Unsigned16 10 Hysteresis 0 Ato 255 Unsigned8 D301004 1211 BL20 Modbus TCP pulse duration DO1 DO2 n 2 ms 0 A to 255 Unsigned8 5 37 Implementation of Modbus TCP Table 5 25 Byte Bit Parameter name Value Module parameters Meaning A Default settings 12 0 Substitute value DO OA 1 1 Diagnostic DO1 0 onA 1 off 2 3 Function DO1 00 output A 01 on when cnt value gt ref value 10 on when cnt value lt ref value 11 pulse when cnt val ref value 5 6 Function DO2 00 2 output A 01 on when cnt value gt ref value 10 on when cnt value lt ref value 11 pulse when cnt val ref value 13 0 1 Signal evaluation A B 00 pulse and direction A 01 rotary sensor single 10 rotary sensor double 11 rotary sensor fourfold 2 Sensor input filter A 0 2 5 ms 200 kHz A 1 225 ms 20 kHz 3 Sensor input filter B
85. alone specifies the action If no error occurs related to the Modbus function requested in a properly received Modbus ADU the data field of a response from a server to a client contains the data requested Figure 5 3 Modbus data Client Server transmission acc to Modbus IDA Initiate request Perform the action Ne conii Initiate the response Receive the response Function code Data response If an error related to the Modbus function requested occurs the field contains an exception code that the server application can use to determine the next action to be taken Figure 5 4 Modbus data Client Server transmission acc to Modbus IDA Initiate request error detected in action Initiate error DE code Exception code Receive the response D301004 1211 BL20 Modbus TCP 5 3 Implementation of Modbus TCP 5 1 2 Data Model The data model distinguishes 4 basic data types Table 5 1 Data type Objecttype Access Comment Data types for Modbus Discrete Inputs Bit Read This type of data can be provided by an I O system Coils Bit Read Write This type of data can be alterable by an application program Input 16 Bit Word Read This type of data can be provided by an I O Registers system Holding 16 Bit Word X Read Write This type of data can be alterable by an Registers application program For each of these basic data types the protocol allows individual selection of 6
86. aning 0 0 current mode 0 0 20 MAA A Default 1 4 20 mA settings 1 value 0 Integer 15 bit sign A representation ee 1 12 bit left justified 2to7 reserved 1 substitute value low byte In Modbus TCP the output of a substitute value in case of an error is not possible page 5 22 2 substitute value high byte BL20 2A0 I 0 4 20MA 3 Byte per channel Table 5 21 Byte Bit Parameter name Value Module M A parameters meaning 0 3 0 current mode 0 0 20 mA A A Default 1 4 20 mA settings 1 value 0 Integer 15 bit sign A representation ad 1 12 bit left justified 2 reserved 3 channel 0 activate A 1 deactivate 4to7 1 4 substitute value low byte In Modbus TCP the output of a substitute value in case of an error is not possible page 5 22 2 5 substitute value high byte 5 32 D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A E BL20 2AO U 10 0 10VDC 3 byte per channel Table 5 22 Byte Bit Parameter name Value Module M parameters meaning 0 3 0 voltage mode 0 0 10VA A Default 1 10 410V settings 1 value 0 Integer 15 bit sign A representation mI 1 12 bit left justified 2 reserved 3 channel 0 activate A 1 deactivate 4to7 reserved 1 4 substitute value In Modbus TCP the output of a substitute low byte value in case of an error is not possible page 5 22 2 5 substitute value h
87. are plugged or pulled short interruptions to the module bus communications can occur in the BL20 station This can lead to undefined statuses of individual inputs and outputs of different modules D301004 1211 BL20 Modbus TCP Guidelines for Station Planning 7 4 Extending an Existing Station Attention Please note that extensions to the station mounting further modules should be carried out only when the station is in a voltage free state 7 14 D301004 1211 BL20 Modbus TCP Firmware Download Industri A 7 5 Firmware Download Firmware can be downloaded via the service interface on the gateway using the software tool I O ASSISTANT More information is available in the program s online help Attention AN The station should be disconnected from the fieldbus when downloading Firmware must be downloaded by authorized personnel only The field level must be isolated D301004 1211 BL20 Modbus TCP 7 15 Guidelines for Station Planning 7 16 D301004 1211 BL20 Modbus TCP Industri A 8 Guidelines for Electrical Installation 8 1 iip ce H 2 8 1 1 d ulcm 2 8 1 2 Cable Ii Gszt aana EaD NN 2 8 1 3 Cable Routing Inside and Outside of Cabinet 2 Cable Routing Outside Buildings sessseeeeee emen 3 8 1 4 Lightning Protection 5 iride eicere nio iR Fa c ERR LEE RA UTERE EE E
88. ata Width of the I O Modules in the Modbus Register Area X page 5 13 new modules added Parameters of the modules page 5 23 X Parameters ofthe modules page 5 23 new modules added X Diagnostic messages of the modules page 5 51 new X modules added Chap 9 BL20 Approvals for Zone 2 Division 2 X separate manual D301255 Chap 10 Data image of the technology modules page 10 2 X Note The publication of this manual renders all previous editions invalid D301004 1211 BL20 Modbus TCP 1 5 About this Manual 1 6 D301004 1211 BL20 Modbus TCP Industri A 2 BL20 Philosophy 2 1 The basic concept ccccccccccccccccccccrscccscccccsccccccccccccccccccsccccscccscccccccsccccccccccescccsscccecccsscccssccsccccccssccsses 2 2 1 1 a4sl 2 2 1 2 Convenient handling rane redo a EEEE DEEP Ro eon RR LESE Abe deae ees 2 2 2 IJnnnn 3 2 2 1 ELE 3 2 2 2 Power distribution MOdUIES EE 3 2 2 3 Electronics modules 4 2 2 4 Base modules EE 5 2 2 5 BCEE EHEENUN e TERIS 6 2 2 6 End Plates M 6 2 2 7 End bracket m R 7 2 2 8 BilnIceee EUER 7 2 2 9 Marking Matera ERI TED ITI mm 8 2 2 10 Shield connection 2 pole for analog modules 8 D301004 1211 BL20 Modbus TCP 2 1 BL20 Philosophy 2 1 2 1 1 2 1 2 2 2 The basic co
89. ata mapping always starts with the mapping ofthe intelligent modules Each module occupies as many Modbus registers as necessary depending on it s data width At least one register is occupied A RS232 module for example occupies 4 consecutive registers 8 bytes in the input and in the output area The data byte arrangement is done according to the physical order in the station from the left to the right The data of the intelligent modules are followed by the data of the digital modules also structured according to their physical appearance in the station The Modbus registers for the digital data are filled up to 16 bit This means on the one hand that one Modbus register can contain data of different digital modules and on the other hand that the data of one digital module can be distributed over multiple registers Bit O of a digital module is thus not obligatory located on a word limit Note i An example in chapter 6 page 6 8 ff describes the data mapping Additionally the software l O ASSISTANT offers the possibility to create a mapping table for every station 5 4 1 Packed input process data E input register area 0000h to O1FFh 0000h 01FFh intelligent modules digital input modules status diagnosis free input data Note Independent of the I O configuration an access to all 512 registers is always possible Registers that are not used send O Status diagnosis The area status diagnosis compri
90. bus system Reference potential Potential from which all voltages of connected circuits are viewed and or measured Repeater Amplifier for signals transmitted via a bus Root connecting Creating a new potential group using a power distribution module This allows sensors and loads to be supplied individually RS 485 Serial interface in accordance with EIA standards for fast data transmission via multiple transmitters E Serial Type of information transmission by which data is transmitted bit by bit via a cable Setting parameters Setting parameters of individual stations on the bus and their modules in the configuration software of the master Shield Conductive screen of cables enclosures and cabinets D301004 1211 BL20 Modbus TCP 11 5 Glossary Shielding Description of all measures and devices used to join installation components to the shield Short circuit proof Characteristic of electrical components A short circuit proof part withstands thermal and dynamic loads which can occur at its place of installation due to a short circuit Station A functional unit or UO components consisting of a number of elements TCP Abbreviation for Transmission Control Protocol connection oriented transport protocol within the Internet protocol suite Certain error detection mechanisms i e acknowledgements time out monitoring can guarantee a safe and error free data transport Terminating resistance Res
91. byte Bytes 0 to 5 contain the user data 0 release A Diagnotic activated Concerns the fieldbus specific seperate diagnostic message which is not embedded in the process input data 1 block stop bits O 1bitaA 1 2 bit 2 1 parity 00 none 01 odd A The number of the bits set data bits and parity bit is odd 10 even The number of the bits set data bits and parity bit is even D301004 1211 BL20 Modbus TCP 5 41 Implementation of Modbus TCP Table 5 27 Byte Bit Parameter name Module parameters A Default settings Value Meaning 1 3 data bits O 7A The number of data bits is 7 1 8 The number of data bits is 8 54 data flow control 00 none A the data flow control is deactivated 01 XON XOFF Software Handshake XON XOFF is activated 10 RTS CTS Hardware Handshake RTS CTS is activated 7 6 reserved 2 XON character 0 255 17 A XON character This character is used to start the data transfer of the data terminal device DTE when the software handshake is activated 3 XOFF character 0 255 19 A XOFF character This character is used to stop the data transfer of the data terminal device DTE when the software handshake is activated 5 42 D301004 1211 BL20 Modbus TCP Parameters of the modules BL20 1RS485 422 Industri A Table 5 28 Byte Bit Parameter name Module
92. ccoesatoctosecsssesssdsdeceesecteccncsssessdecsdecescoeccsoss 2 3 ELA CUL mtl 2 3 Power distribution modules 2 3 Electronics Fegdluilee geess geeiert ebe 2 4 Beete IU ERR 2 5 BEZO ECONOMY e 2 6 End plate End bracket Jumpers e Marking triate rial ssssssscsacssssvesscsvscesstscssssssceesvecssevovedeusvteesvedevvedebs veces evedsuscbes cases essosbvdodeuscbesedobsbsnseeecben babes ecberadebvedbenvecbsensdbeess 2 8 Shield connection 2 pole for analog modules EEN 2 8 Ethernet EY EMCUBDITISDLUm 3 2 aora a idis e p R 3 2 E Te e f RR RR ues ee 3 2 Network Glasses erede ramis ed rt LEM D De ADU eat DIE 3 3 Data E IN m 3 3 Checking the communication via PiNg Signals sssccsssssccssssccssesccsseeecsssesecssseecssssecesssecesssecsncsnseecesnssecesseeeesneeecessnecesneeess 3 4 ARP Address Resolution Protocol Transmission Media Technical Features c j ee RR RSEN 4 2 FUNCTION 4 3 Technical Data e M 4 4 GalOWay SUPUCEUIE se 4 4 Connection possibilitie
93. csccsccssessseecseeesseeseecseeeseseeescseeeneess 3 3 subnet lD EE 3 2 system description sssme 3 2 F firmware download eee 7 15 ial 2 2 G gateway addressirig 1 terea 4 8 BOOTP mode 5 4 inii idi etri cc ee 4 10 DHCP mode 4 eene nnns 4 11 PGMemode icai n e ao cre eR 4 12 totaryemode teet te eren 4 9 mec 4 4 technical data seesseeeeneennnnnenn nnn 4 4 GATEWAYS iicet a a deni eei s 2 3 W TEE 6 9 group BE Lu ON 6 23 l ident number eene 6 11 inductive loads protective circuit seser 8 7 IP Internet Protocol eeee e 3 4 IP addiess 5 seme com me cat ea ends 3 2 D301004 1211 BL20 Modbus TCP SPG iistissit asado dtd REIR ER AREE ERANT 6 3 J I njegue 2 7 L EI EE 2 8 M MAKETS daaimatan aaa 2 8 Modbus TEP 4 ica disian 3 4 communication examples see 6 8 Ec nrg ETE 5 2 module diagnosis sn 6 24 module diagnostics evaluation meii aii 6 23 module D GEET 6 12 MOUNTING CU 8 5 N network configuration ssssscssecccecccerissiiii 6 2 oO output behavior oo eee sse 5 22 P parameterization sseeeennnennnnnnnnnnnnn 6 19 PE orinectiort i nri ii n n RA 8 5 pin assignment power supply seeen eene 4 6 planning ir Rm t prp petet 7 2 potential groups ssssseeeeeennnennnn 7 8 potential relationships oo cece see 8
94. dress via PACTware I O ASSISTANT VDL 5 Deactivating adapting the firewall in Windows XP 6 6 3 Communication examples Modbus TCP eee eee ee eee eee ee eee esee eese eese sese esee esee esses eso seso sees ssesooe 8 6 3 1 Reading out the gateway status ssssssssssesee eene nne 9 6 3 2 Reading out the reference module liSt emnes 10 6 3 3 Reading out the actual module list nennen nnne nnns 12 6 3 4 Reading out the process image length Dnpute eee eee eet ttte terete e teeta eeeeetaeeteetiaeeeeeeaas 12 Intelligent MOG EE 12 Digital ue LEE 13 6 3 5 Reading out the packet process data inputs eene 14 6 3 6 Evaluation of the packed process data inputs ssssssseeeeennm ees 14 Intelligent ue 14 spe lee 16 6 3 7 Setting of OUP EE 17 6 4 Parameterization of modules ccccccccccsccccccccsccccccccssccssccccscscccsccccccccccccccccccsccccsccssccccccescccsccescocece 19 6 5 Evaluation of module diagnostics sccccccccsssssscccssccccccccccccccccccsecsccccccccssccscccsscssscccccsssssesescccees 23 6 5 1 Module diagnosis 0xA000 to DsAA00 enne nnne nnne nnne nens 24 D301004 1211 BL20 Modbus TCP 6 1 6 2 Application example Modbus TCP 6 1 Network configuration Note i In order to build up the communication between the BL20 gateway and a PLC PC or a network interface card both devices have to be hosts in the same network The network is already defined b
95. e C Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 2 channel 1 1 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable 7 HART variable D Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 channel 1 1 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable 5 28 D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A E BL20 4AI U I 1 byte parameter per channel Table 5 18 Byte Bit Parameter name Value Module M R parameters meaning 0 to3 0 range 0 0 10 V 0 20 MAA A Default 1 10 10 V 4 20 mA settings 1 value 0 Integer 15 bit sign A representation mI 1 12 bit left justified 2 diagnosis 0 release A 1 block 3 channel 0 activate A 1 deactivate 4 operation mode 0 voltage A 1 current D301004 1211 BL20 Modbus TCP 5 29 Implementation of Modbus TCP BL20 E 8AI U I 4PT NI 1 byte per channel Table 5 19 Module parameters A Defaul
96. e Process output process data length of intelli Words registers gent modules 7 BL20 1AO U 10 0 10VDC 2 9 BL20 1SSI 4 Total 6 registers D301004 1211 BL20 Modbus TCP 6 17 Application example Modbus TCP 2 Now the process data length of the digital outputs is determined Process data length digital outputs Function code 04 register 0x1012 Value 0x02 2 bits Figure 6 2 EE reading out the File View Tests Help process data CA EI EIRE l rE length of digital Geer outputs Stf Exception Invalid To Received 1 Enor o Norspme 0 we dateims tyne Frame 1 0 00 Req 00 i4 00 OO OO O06 FF 04 10 12 OO 01 2 1 72 Resp 00 14 00 OO OO OS FF 04 02 o0 52 In the packed station process output data the output data of the digital modules directly follow the packed output data of the intelligent modules 6 registers They can thus be found in the register area 0x0800 to OxO9FF starting with register 0x0806 Table 6 7 Module Process output Process data length of digital Bit modules 2 BL20 2DO 24VDC 0 5A P 2 bits Total 1 register 3 In order to set the outputs 2 of module 3 the bit 1 of byte 0 in register 0x0806 have to be written Function code 06 Write Single register Value 0x02 0x00 Figure 6 3 EE Setting outputs Elle Yiew Tests Help A register no B register value 6 18 TA FEA mele Exchange Control Sent 1 Exception p Invalid Ip Received 1 Error 0 No re
97. e optional data area can contain additional parameters and or other data to be written E Service response area 2080h 2081h 2082h 2083h 2084h 2085h 20FFh serviceno result service index addr data reg optional data code count 0 to 122 registers After the execution of a request the registers service no service code and index addr in the response area contain a copy of the values in the request area Note The service no is thus used for a simple handshake on the application level The application increases the service no with every request The service is blocked until the service number in the request area matches the service number in the response area The register result shows whether the execution was successful or not The register data reg count contains the number of data registers 0 to 122 The optional Data area can contain depending on the service the requested data D301004 1211 BL20 Modbus TCP The Service Object Industri A Supported service numbers Table 5 8 Service code Meaning Supported service numbers 0x0000 no function 0x0003 indirect reading of registers 0x0010 indirect writing of registers A service request may have the following results Table 5 9 Service code Meaning results of the service request 0x0000 error free execution of service OxFFFE service parameters incorrect inconsistent OxFFFF service code unknown Note T
98. e set and reset directly with SET DO DOT can be set for this function via the process output MODE DO1 00 and LOAD DO PARAM 0 1 The output DO1 can also be set before commissioning via the separate parameter data The default setting for DO1 is to display the value of SET DOT RES STS 0 1 Initiate resetting of status bits The STS_UFLW ST OFLW and STS_CMP1 process input status bits are reset Bit RES STS A 1 process input acknowledges that the reset command has been received RES STS can now be reset to 0 SW_GATE 0 gt 1 Measuring is started software release 1 0 Measuring is stopped LOAD DO Parameter setting of the physical output DO1 PARAM 0 1 DO1 can indicate the status of different data bits as a signal The current telegram byte 0 determines the data bits to which DO1 is to refer D301004 1211 BL20 Modbus TCP 10 11 Appendix Table 10 4 Meaning of the data bits process output Control bit Explanations LOAD INTTIME Parameter setting of the Integration time 0 gt 1 Bytes 0 to 1 of this process output represent a factor for forming the Integration time for frequency measurement and for determining the rotational speed The integration time can be adjusted between 10 ms and 10 s in 10 ms increments and is produced by multiplying the factor x 10 ms With period duration measurement this factor determines the number of periods measured in order to calculate a mean value A facto
99. eas and in small industrial areas residential business and trading In this case the operator can be required to take appropriate measures to suppress the disturbance at his own cost D301004 1211 BL20 Modbus TCP 4 5 Technical Features 4 4 Connection possibilities 4 4 1 Field bus connection Ethernet connection The connection to Ethernet is realized via female RJA5 connector Figure 4 3 female RJ45 connector 12TX ri 2 TX 3 RX 4 n c IN 5 n c 87654321 e m n 8 n c 4 4 2 Power Supply via terminal block with screw connection The power supply is realized via terminal block with screw connection technology Table 4 2 Pin assignment the terminal blocks Signal Description Usys System supply Gateway module bus Usys Ui Field supply max 10 A U 4 4 3 Service Interface Connection female PS 2 connector The service interface is used to connect the gateway to the project planning and diagnostic software UH O ASSISTANT The service interface is designed as a 6 pole Mini DIN connection Two types of cables can be used to connect the service interface to a PC E special l O ASSISTANT connection cable from TURCK IDASSISTANT ADAPTERKABEL BL20 BL67 Ident no 6827133 Commercially available PS 2 cable with adapter cable SUB D PS 2 Connection with I O ASSISTANT Connection Cable Figure 4 4 BL20 gateway connected to PC via spec
100. ed with CTRL_DO2 1 and a comparison is run via MODE DO2 01 100r 11 Otherwise SIS CMP2 simply indicates that the output is or was set SIS CMP2 is also set if DO2 SET DO2 1 when the output is not released This bit must be reset by the RES STS control bit SIS CMP1 Status comparator 1 This status bit indicates a comparison result for comparator 1 if The output DO1 is released with CTRL_DO1 1 and a comparison is run via MODE_DO1 01 10 or 11 Otherwise STS_CMP1 simply indicates that the output is or was set It must be acknowledged with RES STS process output The bit is reset immediately if acknowledgement takes place when the output is still set STS_CMP1 is also set if DO1 SET DO1 1 when the output is not released This bit must be reset by the RES STS control bit SIS SYN Status synchronization After synchronization is successfully completed the STS SYN status bit is set This bit must be reset by the RES STS control bit Process input data measurement mode E 4bytes contain the measurement value 1byte contains diagnosis information E 2 bytes contain status messages Figure 10 2 Ss PZDE counter Data image measurement mode Process input data Measurement mode CNT gt SPS Status information sts_ sTs_ few u x x J v 89 Sic x Sts_ srs x STIS x x x cM P1 i reserved 10 4 D301004 1211 BL20 Modbus TCP Data image of the technology
101. er Supply N Figure 7 2 DI NO Al 2DO2DI PF 2DO Al 2DI NO le f SE Se tial ud Ei WW E groups i SS es mm EM ug 10 100 MBit TS U U ete leol 1 111 2111 1 n E Field 24 2L supply Potential group 1 S Potential group 2 System supply Note The system can be supplied with power independent of the potential group formation described above When using a digital input module for 120 230 V AC it should be ensured that a potential group is created in conjunction with the Power Feeding module BL20 PF 120 230VAC D Attention It is not permitted to use the modules with 24 V DC and 120 230 V AC field supply in a joint potential group gt 7 2 3 Protecting the Service Interface on the Gateway During operation the cover protecting the service interface and the hexadecimal rotary coding switches must remain closed due to EMC and ESD D301004 1211 BL20 Modbus TCP 7 9 Guidelines for Station Planning 7 2 4 X C Rail Cross Connection The C rail runs through all base modules The C rail of the base modules for power distribution modules is mechanically separated thus potentially isolating the adjoining supply groups Access to the C rail is possible with the help of base modules with a C in their designation for example BL20 S4T SBCS The corresponding connection level is indicated on these modules by a thick black line The blac
102. er module 0x9000 to 0x993F rw process data outputs max 74 modules per station x 32 registers per module 0xA000 to OxA93F ro diagnostics max 74 modules per station x 32 registers per module 0xB000 to OxB93F rw parameters max 74 modules per station x 32 registers per module D301004 1211 BL20 Modbus TCP 5 7 Implementation of Modbus TCP The following table shows the register mapping for the different Modbus addressing methods Table 5 4 Mapping of BL20 GW EN Modbus registers holding registers 5 8 Description Hex Decimal 5 Digit Modicon packed process data of inputs 0x0000 to Oto 511 40001 to 400001 to 0x01FF 40512 400512 packed process data of outputs 0x0800 to 2048 to 42049 to 402049 to 0x09FF 2549 42560 402560 gateway identifier 0x1000 to 4096 to 44097 to 404097 to 0x1006 4102 44103 404103 gateway status 0x100C 4108 44109 404109 process image length in bit for 0x1010 4112 44113 404113 the intelligent output modules process image length in bit for 0x1011 4113 44114 404114 the intelligent input modules process image length in bit for 0x1012 4114 44115 404115 the digital output modules process image length in bit for 0x1013 4115 44116 404116 the digital input modules register mapping revision 0x1017 4119 44120 404120 group diagnostics of 0x1018 to 4120 to 44121 to 404121 to I O modules 1to 74 0x101D 4125 44126 404126 1 bit per I
103. format structured as follows E 1 status byte used to guarantee error free data transmission 1byte diagnostic data D301004 1211 BL20 Modbus TCP Data image of the technology modules E 6 byte user data Figure 10 8 Data image PLC Data image input data Process input data RSxxx gt SPS Table 10 5 Designation Value Meaning Meaning of the data bits BufOvfl FrameErr 0 255 Diagnostic information correspond to the diagnostic information process input HndShkErr in the diagnosis telegram HwFailure PrmErr These diagnostics are always displayed and independent to the setting of the parameter Diagnostics STAT 0 1 1 The communication with the data terminal equipment DTE is error free 0 The communication with the data terminal equipment DTE is disturbed A diagnosis message is generated if the parameter Diagnostics is set to 0 release The diagnostic data show the cause of the communication disturbance The user has to set back this bit in the process output data by using STATRES TX CNT ACK 0 3 The value TX_CNT_ACK is a copy of the value TX CNT TX CNT has been transmitted together with the last data segment of the process output data TX ONT ACK is an acknowledge for the successful transmission of the data segment with TX CNT RX_CNT 0 3 This value is transferred together with every data segment The RX_CNT values are sequential 00 gt 01 gt 10 gt 11 gt 00 deci
104. g 12 7 3 Plugging and Pulling Electronics Modules eee e eene etes e eee eee ee etes nnns esee esee ten ss osos eese eese enne 13 7 4 Extending an Existing Station Lecce eee eee Lees eee eee esee e eee et enn nose seas eese en nass s esee eese essen sess sss se eese e ee enoo 14 7 5 Firmware Download 15 D301004 1211 BL20 Modbus TCP 7 1 Guidelines for Station Planning 7 1 Random Module Arrangement The arrangement of the I O modules within a BL20 station can basically be chosen at will Nevertheless it can be useful with some applications to group certain modules together Note The mixed usage of base modules with screw connections and base modules with tension clamp connections requires a further power supply module to be mounted Thereby it must be ensured that the base modules are fitted with the same connection technology screw or tension clamp as the power supply module 7 1 1 Complete Planning The planning of a BL20 station should be thorough to avoid faults and increase operating reliability Attention If there are more than two empty slots next to one another the communication is interrupted to all following BL20 modules 7 1 2 Maximum System Extension A BL20 station can consist of a gateway and a maximum of 74 modules in slice design equivalent to 1 m in length of mounting rail including the end bracket and end plate The maximu
105. g prevents or suppresses the reciprocal influencing of parallel routed cables 8 1 3 Cable Routing Inside and Outside of Cabinets To ensure EMC compatible cable routing the cables should be grouped as follows Various types of cables within the groups can be routed together in bundles or in cable ducts Group 1 shielded bus and data cables shielded analog cables unshielded cables for DC voltage lt 60 V unshielded cables for AC voltage lt 25 V Group 2 unshielded cables for DC voltage 60 V and x 400 V unshielded cables for AC voltage gt 25 V and lt 400 V Group 3 unshielded cables for DC and AC voltages 400 V The following group combination can be routed only in separate bundles or separate cable ducts no minimum distance apart Group 1 Group 2 The group combinations Group 1 Group 3 and Group 2 Group 3 must be routed in separate cable ducts with a minimum distance of 10 cm apart This is equally valid for inside buildings as well as for inside and outside of switchgear cabinets 8 2 D301004 1211 BL20 Modbus TCP General Notes Industri A Cable Routing Outside Buildings Outside of buildings cables should be routed in closed where possible cage type cable ducts made of metal The cable duct joints must be electrically connected and the cable ducts must be earthed Danger A Observe all valid guidelines concerning internal and external lightning protection and grounding specificatio
106. get Print Additional Functions D Q Add device KI Delete device i Properties lt TCP IP gt BL Service Ethernet Scan list Identification aan Aare Busaddress management HIMA Export Accessory Preset DTM TAG address tag a il DTM maintenance 35 o xo PW3 Administrat H Write device data to file D301004 1211 BL20 Modbus TCP 6 5 Application example Modbus TCP Deactivating adapting the firewall in Windows XP If you use Windows XP as operating system problems may occur when changing the IP addresses via the I O ASSISTANT In this case you can deactivate the system integrated Windows XP firewall completely or adapt it to your application Deactivating the firewall Open the Windows Firewall dialog in the control panel of your PC and deactivate it as follows Figure 6 6 Deactivating the Windows firewall General Exceptions Advanced Windows Firewall Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network On recommended This setting blocks all outside sources from connecting to this computer with the exception of those selected on the Exceptions tab Don t allow exception Select this when you connect to public networks in less secure locations such as airports Y ou will not be notified when Windows Firewall blocks programs Selections on the Exce
107. he services indirect reading of registers and indirect writing of registers offer an additional possibility to access any Modbus register Current Modbus masters support only a limited number of register areas that can be read or written during the communication with a Modbus server These areas can not be changed during operation In this case the services mentioned above enables non cyclic access to registers 5 11 1 Indirect reading of registers 1 to 122 Count Modbus registers are read starting with address x Addr service request 2000h 2001h 2002h 2003h 2004h 2005h 207Fh service 0x0000 0x0003 Addr Count reserved no service response 2080h 2081h 2082h 2083h 2084h 2085h 20FFh service no result 0x0003 Addr Count register contents D301004 1211 BL20 Modbus TCP 5 19 Implementation of Modbus TCP 5 11 2 Indirect writing of registers 1 to 122 Count Modbus registers are written starting with address x Addr service request 2000h 2001h 2004h 2005h 207Fh service no 0x0000 Count register contents E service response 2080h 2081h 2084h 2085h 20FFh serviceno result Count reserved 5 20 D301004 1211 BL20 Modbus TCP Bit Areas Mapping of Input Discrete and Coil Areas Industri A 5 12 Bit Areas Mapping of Input Discrete and Coil Areas The digital in and outputs can be read and written for outputs as registers in the data area of the packed
108. his plant to a required state by forcing certain variables on the input and output modules 6 GND Abbreviation of ground potential 0 Ground Expression used in electrical engineering to describe an area whose electrical potential is equal to zero at any given point In neutral grounding devices the potential is not necessarily zero and one speaks of the ground reference Ground connection One or more components that have a good and direct contact to earth Ground reference Potential of ground in a neutral grounding device Unlike earth whose potential is always zero it may have a potential other than zero H Hexadecimal System of representing numbers in base 16 with the digits 0 9 and further with the letters A B C D E and F Hysteresis A sensor can get caught up at a certain point and then waver at this position This condition results in the counter content fluctuating around a given value Should a reference value be within this fluctuating range then the relevant output would be turned on and off in rhythm with the fluctuating signal ES UO Input output Impedance Total effective resistance that a component or circuit has for an alternating current at a specific frequency D301004 1211 BL20 Modbus TCP 11 3 Glossary Inactive metal components Conductive components that cannot be touched and are electrically isolated from active metal components by insulation but can adopt voltage in the even
109. ial cable 4 6 D301004 1211 BL20 Modbus TCP Connection possibilities Industri A The I O ASSISTANT cables have a PS 2 male connector connection for female connector on gateway and a SUB D female connector connection for male connector on PC Figure 4 5 PS 2 male connector on the connection cable 43 to the gateway dT top view H Figure 4 6 5432 1 9 pole SUB D female connector on the cable for Y as y connecting to PC 9876 top view D301004 1211 BL20 Modbus TCP 4 7 Technical Features 4 5 4 5 1 4 8 Address Setting The addressing of the BL20 Modbus TCP gateway can be realized via different modes E rotary mode manual addressing via rotary coding switches E PGM mode manual addressing via software E BootP mode DHCP mode automatic addressing via BootP DHCP server at the boot up of the gateway The setting of the address modes is done via the 3 rotary coding switches at the gateway Note It is not necessary to address the station s internal module bus Attention AN The cover of the decimal rotary coding switches must be closed by tightening the screw after use It serves for protecting against dirt LED behavior During it s start up the module waits for the address setting via the BootP server This is indicated by the red flashing MS LED The LED begins to flash green as soon as the address setting via the server is completed The station
110. igh byte E BL20 2AOH I Table 5 23 Byte Bit Parameter name Value Module para meters A Default settings 0 0 Channel 0 activate A channel 1 1 deactivate 1 Diagnostics 0 block 1 release A 3 4 Operation mode 0 0 20 mA HART status polling not possible 1 4 20 mA HART status polling not possible 2 4 20 mA HART aktiv A Cyclic polling of the HART Status is activated 7 HART diagnostic 0 release A 1 block D301004 1211 BL20 Modbus TCP 5 33 Implementation of Modbus TCP Table 5 23 Byte Bit Parameter name Module para meters A Default settings Value 1 0 1 Value representation 0 Integer 15 bit sign A channel 1 1 NE 43 2 Extended Range 6 7 Behavior module bus error In Modbus TCP the output of a substitute value in case of an error is not possible page 243 Substitute value 5 22 channel 1 4to7 analog to bytes 0 to 3 channel 2 8 HART variable A Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 2 channel 1 1 2 channel 2 647 Mapped variable Vx Defines which HART variable of the connected sensor is mapped into the module s process data 0 PV primary variable 1 SV 2nd variable 2 TV 3rd variable 3 QV 4th variable 9 HART variable B Defines the channel from which the HART variable is read 0 Mapped channel Vx 0 2 channel 1 1 2 channel 2 647
111. in and output process data Note i In the packed process data the digital I O data are stored following the variable in and output data area of the intelligent modules which means they are stored with a variable offset depending on the station s O configuration In order to set for example a single output single coil the following functions are available for reading and writing single bits FCI Read Coils E FC2 Read Discrete Inputs E FC5 Write Single Coil E FC15 Write Multiple Coils Data mapping in the input discrete and coil areas Mapping input discrete area All digital inputs are stored in this area offset 0 Mapping Coil area All digital outputs are stored in this area offset 0 D301004 1211 BL20 Modbus TCP 5 21 Implementation of Modbus TCP 5 13 Error behavior of outputs In case of a failure of the Modbus communication the outputs behavior is as follows depending on the defined time for the Watchdog register Ox1120 page 5 6 Watchdog 0 ms default setting outputs hold the momentary value Watchdog gt 0 ms outputs switch to 0 after the watchdog time has expired Note i Setting the outputs to predefined substitute values is not possible in Modbus TCP Eventually parameterized substitute values will not be used 5 22 D301004 1211 BL20 Modbus TCP Parameters of the modules 5 14 Parameters of the modules Industri A
112. inal device DTE when the software handshake is activated XOFF character 0 255 19 A Only in RS422 mode XOFF character This character is used to stop the data transfer of the data terminal device DTE when the software handshake is activated 5 44 D301004 1211 BL20 Modbus TCP Parameters of the modules BL20 1SSI Industri A Table 5 29 Module parameters A Default settings Byte Bit Parameter name Value Meaning 0 4to0 reserved Encoder data cable test 0 activate A ZERO test of data cable 0 deactivate After the last valid bit a ZERO test of the data cable is not carried out 7 6 reserved 1 3to0 Number of invalid bits LSB 0000 to 1111 Number of invalid bits on the LSB side of the position value supplied by the SSI encoder The meaningful word width of the position value transferred to the module bus master is as follows SSI FRAME LEN INVALID BITS MSB INVALID BITS LSB The invalid bits on the LSB side are removed by shifting the position value to the right starting with the LSB Default 0 bit 0x0 INVALID BITS Map INVALID BITS LSB must always be less than SSI FRAME LEN 1 6to4 Number of invalid bits MSB 000 to 111 Number of invalid bits on the MSB side of the position value supplied by the SSI encoder The meaningful word width of the position value transferred to the module bus master is as follows
113. ing SDINFO is set with individual diagnostics 0 OK No error is present or diagnostics function has been deactivated via the parameter setting 1 Offline The slave has set its diagnostics bit or the slave was in data exchange with the SWIRE master but is not any longer Byte 7 8 PKZppSX Only SWIRE DIL Overcurrent protective circuit breaker slave x Info field for the individual indication of the tripping of a motor protective circuit breaker PKZ as error message If the PKZ nro is set for single diagnostics this bit field indicates the error as soon as the PKZ of the slave Sx has tripped 0 OK The PKZ of the slave has not tripped or diagnostics function has been deactivated via the parameter setting 1 Tripped The PKZ of the slave has tripped Hinweis The error messages U ERR TYPE TV Be DK Zeen HR Zeng SDege and BD can be deactivated via the parameter setting E BL20 E 2CNT 2PWM see separate module manual D301224 E BL20 2RFID S see RFID documentation www turck de 5 64 D301004 1211 BL20 Modbus TCP Industri A 6 Application example Modbus TCP 6 1 Network configuration 2 6 2 Changing the IP address of a PC network interface card ssssecccoeccccccccoccccccccccccccoccoocccccccccoccoccccee 3 6 2 1 Changing the IP address in Windows 2000 Windows Ab 3 6 2 2 Changing the IP address in Windows NT nemen nennen nens 4 6 2 3 Changing the IP ad
114. inst corrosion for example with grease caution use only suitable grease D301004 1211 BL20 Modbus TCP 8 5 Guidelines for Electrical Installation 8 3 8 6 Shielding of cables Shielding is used to prevent interference from voltages and the radiation of interference fields by cables Therefore use only shielded cables with shielding braids made from good conducting materials copper or aluminum with a minimum degree of coverage of 80 96 The cable shield should always be connected to both sides of the respective reference potential if no exception is made for example such as high resistant symmetrical analog signal cables Only then can the cable shield attain the best results possible against electrical and magnetic fields A one sided shield connection merely achieves an isolation against electrical fields Attention AN When installing please pay attention to the following the shield should be connected immediately when entering the system the shield connection to the shield rail should be of low impedance the stripped cable ends are to be kept as short as possible the cable shield is not to be used as a bonding conductor The insulation of the shielded data cable should be stripped and connected to the shield rail when the system is not in operation The connection and securing of the shield should be made using metal shield clamps The shield clamps must enclose the shielding braid and in so
115. istor on both ends of a bus cable used to prevent interfering signal reflections and which provides bus cable matching Terminating resistors must always be the last component at the end of a bus segment To ground Connection of a conductive component with the grounding connection via a grounding installation Topology Geometrical structure of a network or the circuitry arrangement UDP Abbreviation for User Datagram Protocol UDP is an transport protocol for the connectionless data between Ethernet hosts Unidirectional Working in one direction D301004 1211 BL20 Modbus TCP 12 Index A addressing E 4 8 APR Address Resolution Protocol 3 5 B base modules senes 2 5 c C rail cross CONNECTION voice cece cece eeeeeeeeeeseeees 7 10 D DIVISION E 9 1 E earth free operation sss 8 5 electromagnetic compatibility sess 8 4 electronics modules ccccccessssscesseceesesteeesseetsesseecseeenes 2 4 electrostatic discharge sssrin 8 7 9 8 4 ie 7 2 end bracket ous E a dle bc reads 2 7 endplate nutun ama a 2 6 ESD electrostatic discharge sss 8 7 Ethernet casses eite trei rfi Hf cda vu IR TRENDS 3 2 Cata transfer iios idi oc ib ee bw n RR 3 3 P address 3 2 MAG ID NEE 3 2 manufacturer identifier sse 3 2 2n tmask inaani a 3 2 network classes cc
116. itioned at level 7 of the OSI model that provides client server communication between devices connected on different types of buses or networks The industry s serial de facto standard since 1979 Modbus continues to enable millions of automation devices to communicate Today support for the simple and elegant structure of Modbus continues to grow The Internet community can access Modbus at a reserved system port 502 on the TCP IP stack Modbus is a request reply protocol and offers services specified by function codes Modbus function codes are elements of Modbus request reply PDUs It is currently implemented using TCP IP over Ethernet that is used for the BL20 Modbus gateways and described in the following E Asynchronous serial transmission over a variety of media wire RS232 RS422 RS485 fiber radio etc Modbus PLUS a high speed token passing network Schematic representation of the Modbus Communication Stack according to Modbus Application Protocol Specification V1 1 of Modbus IDA Figure 5 1 Schematic repre sentation of the Modbus Commu nication Stack Modbus Application Layer Modbus TCP TCP others Modbus plus Master Slave Client Server Rsxxx Ethernet Physicallayer Physical layer Physicallayer Physical layer 5 1 1 Protocol description The Modbus protocol defines a simple protocol data unit PDU independent of the underlying commu
117. k line is continuous on all I O modules On power distribution modules the black line is only above the connection 24 This makes clear that the C rail is separated from the adjoining potential group to its left Figure 7 3 C rail front view Figure 7 4 C rail side view Danger A It is permitted to load the C rail with a maximum of 24 V Not 230 V The C rail can be used as required by the application for example as a protective earth PE In this case the PE connection of each power distribution module must be connected to the mounting rail via an additional PE terminal which is available as an accessory Note i For information about introducing a BL20 station into a ground reference system please read chapter 8 7 10 D301004 1211 BL20 Modbus TCP Power Supply Figure 7 5 Using the C rail as a protective earth 2DO 2DI 2DO 2DI PF 2DO 2DI 2DO 2DI PE terminal mm ba ei TS BC SBC SBBC SBC SBB SBB SBBS SBB C rails can be used for a common voltage supply when relay modules are planned To accomplish this the load voltage is connected to a Power Feeding module with the BL20 P4x SBBC base module with tension clamp or screw connection All the following relay modules are then supplied with power via the C rail Attention When relay modules are planned and the C rail is used for a common voltage supply a further power distribution module mus
118. le pulled Sent 1 Exception o Invalid 0 Received 1 Enor o Norspme 0 ne Dateims tyne 1 DO 06 FF 03 Z 00 2 00 43 FF 03 40 22 39 01 Of 05 38 41 oo oo go oo oo oo pone oo 00 Dp oo op 6 3 4 Reading out the process image length inputs Intelligent modules The process image length of the intelligent input modules is read via function code 04 from registerO 1011 Figure 6 16 zi Process image File View Tests Help length intelligent ebe g input modules Exchange Control Set Ty Exception 9 Invalid To Received 1 Emr g Norspoe o ne reet type 1 0 00 Req 00 i2 00 00 00 06 FF 04 10 11 QO O1 2 1 82 Resp DO 12 00 00 00 OS FF 04 02 00 90 6 12 D301004 1211 BL20 Modbus TCP Communication examples Modbus TCP Industri A The process image length of the intelligent input modules is 0x90 bits 18 bytes 9 registers Table 6 4 Module Process input Process inputdata of intelligent Words registers modules 0 BL20 2AI I 0 4 20M A 2 3 BL20 2AI THERMO PI 2 6 BL20 1AI U 10 0 10VDC 1 9 BL20 1SSI 4 Total 9 Digital modules The process image length of the digital modules is also read via function code 04 The data are stored in register 0x1013 Figure G7 ini xi Process data File Yiew Tests Help length of digital GH mx ssmmma input modules Exchange Control
119. lines for Station Planning Figure 7 1 Gateway Power supply of the station m Hs gh 10 100 MBit Field supply NA System sypply 2DI 2DO 2DI 2DO 2DI 1AO BR xu Field supply 2DI NO It must be ensured that the same ground potential and ground connections are used If different ground potentials or ground connections are used compensating currents flow via the module bus which can lead to the destruction of the Bus Refreshing module All Bus Refreshing modules are connected to one another via the same ground potential The power to the module bus is supplied via the connections 11 and 21 on the base module Attention A In order to comply with radiation limit values in accordance with EN 55 011 2 000 the supply lines of the BL20 BR 24VDC D module for supplying the gateway with power are to be fed through a ferrite ring PS416 ZBX 405 This is to be placed immediately next to the connection terminals From there on it is not permitted to make connections to further devices 7 2 2 Creating Potential Groups Bus Refreshing and Power Feeding modules can be used to create potential groups The potential isolation of potential groups to the left of the respective power distribution modules is provided by the base modules Attention AN Ensure that the correct base modules are planned for when using Bus Refreshing modules 7 8 D301004 1211 BL20 Modbus TCP Pow
120. llowing IP address and assign an IP address of the network mentioned above to the PC Network interface card see the following figure Figure 6 2 Internet Protocol TCP Changing the PC s IP address General You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings C Obtain an IP address automatically r Use the following IP address IP Address 192 168 1 5 Subnet Mask 255 255 255 0 Default Gateway 192 168 1 1 Obtain DNS server address automatically r C Use the following DNS server addresses Preferred DNS Altemate DNS server D301004 1211 BL20 Modbus TCP 6 3 Application example Modbus TCP 6 2 2 Changing the IP address in Windows NT 1 Open the folder Network in the Control Panel 2 Activate TCP IP connection in the tab Protocols and click the Properties button Figure 6 3 Network configu ration WIN NT Network Identification Services Protocols Adapters Bindings Network Protocols Add Remove ceete Update Description Transport Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Close Cancel 3 Activate Specify IP address and set the address as follows Figure 6 4 Specify IP addres
121. m number of modules is less when using block modules 1 block module is equivalent to 8 modules in slice design 7 2 D301004 1211 BL20 Modbus TCP Random Module Arrangement Industri A The following overview shows the maximum number of channels possible on condition that the entire station is made up of that respective type of channel only Table 7 1 Maximum system extension process data dependent A plus 1 Bus Refreshing module B plus2 Bus Refreshing module C plus 3 Bus Refreshing module D plus 7 Bus Refreshing module Channels Modules Type Max No Type Max no Digital inputs 288 BL20 4DI 24VDC P 72B Digital outputs 288 BL20 4DO 24VDC 0 5A P 72B Analog inputs current 144 BL20 2AI 1 0 4 20MA 72B Analog inputs voltage 144 BL20 2AI U 10 0 10VDC 72B Analog inputs 144 BL20 2AI PT NI 2 3 72B PT Ni Analog inputs 144 BL20 2AI THERMO PI 72B Thermocouple Analog inputs 288 BL20 4AI U I 72B voltage current Analog outputs current 144 BL20 2A0 I 0 4 20MA 72B Analog inputs voltage 144 BL20 2A0 U 10 0 10VDC 72B Counter 72 BL20 1CNT 24VDC 72B RS232 67 BL20 1RS232 67D RS485 422 71 BL20 1RS485 422 71C SSI 72 BL20 1SSI 72B SWIRE 71 BL20 E 1SWIRE 71C D301004 1211 BL20 Modbus TCP 7 3 Guidelines for Station Planning Further limitations can be placed on the maximum possible number of BL20 modules by the use of the Power Feeding modules BL20 PF
122. mal 0 gt 1 gt 2 gt 3 gt 0 Errors in this sequence show the loss of data segments RX_BYTE_CNT 0 7 Number of the valid bytes in this data segment D301004 1211 BL20 Modbus TCP 10 13 Appendix Process output data Process output data are data which are sent from the PLC via the gateway and the BL20 1RSxxx module to a connected field device The data received from the PLC are loaded into the transmit buffer in the BL20 1RSxxx module The transmission is realized in a 8 byte format which is structured as follows 1 control byte used to guarantee error free data transmission 1 byte containing signals to flush the transmit and receive buffer 6byteuser data Figure 10 9 Process output data irs scs oca sz 10 1 3 SSI Modul 10 14 Process input data The field input data is transferred from the connected field device to the BL20 1SSI module The process input data is the data that is transferred to the PLC from the BL20 1SSI via a gateway This is transferred in an 8 byte format as follows E 4bytes are used for representing the data that was read from the register with the address stated at REG RD ADR When necessary 1 byte represents the register address of the read data and an acknowledgement that the read operation was successful E 1bytecan be used to transfer status messages of the SSI encoder This byte also contains an acknowledgement that the write operation to the regis
123. modules Industri A Table 10 2 Meaning of the data bits process input Bits Explanations ERR_24Vdc Short circuit sensor supply This diagnostics information must be acknowledged with the EXTF_ACK process output control bit ERR_DO Short open circuit excess temperature at the output DO1 ERR_PARA 1 There is a parameter error ERR PARA is a group diagnostics bit With the separate diagnostics message bits 3 to 6 describe the parameter errors in more detail 0 The parameter definition is correct as per specification RES_STS_A 1 Resetting of status bits running The last process output telegram contained RES_STS 1 0 The last process output telegram contained RES_STS 0 ERR_LOAD 1 Error with load function The control bits LOAD_UPLIMIT and LOAD_LOLIMIT must not be set simultaneously during the transfer The value of LOAD_UPLIMT and LOAD_LOLIMIT was selected outside of the permissible range Permissible values for LOAD_LOLIMIT 0 to 199 999 999 x10 Hz 0 to 24 999 999 x 10 rpm 0 to 99 999 999 ms Permissible values for LOAD UPLIMIT 1 to 200 000 000 x 10 Hz 1 to 25 000 000 x 10 rpm 1 to 100 000 000 ms STS LOAD Status of load function Set if the Load function is running STS DN Direction status down The direction is determined by a signal at the physical input B The Signal evaluation parameter A B must be set to pulse and direction STS UP
124. n CLR CMP1 1 in the process output data SIS CMP1 A comparison ofthe register contents has produced the following result REG SSI POS z REG CMP1 A comparison of the register contents has produced the following result REG SSI POS REG CMP1 STS STOP The SSI encoder is read cyclically Communication with the SSI encoder is stopped as STOP 1 process output or ERR PARA 1 ERR PARA The parameter set of the module has been accepted Operation of the module is not possible with the present parameter set STS UFLW A comparison ofthe register contents has produced the following result REG SSI POS 2 REG LOWER LIMIT A comparison of the register contents has produced the following result REG SSI POS lt REG LOWER LIMIT 10 18 D301004 1211 BL20 Modbus TCP Data image of the technology modules Designation Value Meaning STS_OFLW 0 A comparison of the register contents has produced the following result REG_SSI_POS x REG UPPER LIMIT 1 A comparison ofthe register contents has produced the following result REG SSI POS REG UPPER LIMIT ERR SSI 0 SSI encoder signal present 1 SSI encoder signal faulty e g due to a cable break SSI DIAG 0 No enabled status signal is active SSI_STSx 0 1 At least one enabled status signal is active SSI STSx 1 Process output data PDout The field output data is transferred from the BL20
125. nal measures must be implemented to ensure a safe operating state in the event of a fault or malfunction for example by means of separate limit switches mechanical interlocks etc The electrical installation must be carried out in accordance with the relevant regulations e g with regard to cable cross sections fuses PE All work relating to transport installation commissioning and maintenance must only be carried out by qualified personnel IEC 60 364 and HD 384 and national work safety regulations All shrouds and doors must be kept closed during operation Industr A Table of Contents 1 1 1 1 2 1 3 1 3 1 1 3 2 1 4 2 1 2 1 1 2 12 22 22 1 222 22 3 224 22 5 2 2 6 2 2 7 2 2 8 2 2 9 2 2 10 3 1 3 1 1 3 1 2 3 1 3 3 1 4 3 1 5 3 1 6 3 1 7 4 1 4 2 4 3 4 3 1 4 4 44 1 4 4 2 4 4 3 4 5 About this Manual DOCUMENTATION CONCEP ge 1 2 Description of Symbols Used eere eee eee Leere ette senes eene n sonas ta sets seas eto seen etas eta sess sess eto sese etas enu 1 3 General Information Prescribed Use Notes Concerning Planning Installation of this Product LASt OF REVISIONS EE E 1 5 BL20 Philosophy TING ET 2 2 Flexibil teen e 2 2 Convenient MANALI P 2 2 BLZO COMPONENUS cece sccscscisssesssccccsesecssscssscedesesscccccvepsoncdssccnscesececcecsseie
126. ncept BL20 is a modular IP20 I O system for use in industrial automation It connects the sensors and actuators in the field to the higher level master BL20 offers modules for practically all applications Digital input and output modules Analog input and output modules E Technology modules RS232 interface A complete BL 20 station counts as one station on the bus and therefore occupies one fieldbus address in any given fieldbus structure A BL20 station consists of a gateway power distribution modules and I O modules The connection to the relevant fieldbus is made via the bus specific gateway which is responsible for the communication between the BL20 station and the other fieldbus stations The communication within the BL20 station between the gateway and the individual BL20 modules is realized via an internal module bus Note Fr The gateway is the only fieldbus dependent module on a BL20 station All other BL 20 modules are not dependent on the fieldbus used Flexibility All BL20 stations can be planned to accommodate the exact number of channels to suit your needs because the modules are available in block and slice design A BL20 station can contain modules in any combination which means itis possible to adapt the system to practically all applications in automated industries Convenient handling All BL20 modules with the exception of the gateway and the Economy modules consist of a base module and an
127. necessary work due to incorrect operation D301004 1211 BL20 Modbus TCP 1 3 About this Manual 1 3 General Information Attention A Please read this section carefully Safety aspects cannot be left to chance when dealing with electrical equipment This manual contains all necessary information about the prescibed use of the TURCK BL20 gateways for Ethernet It has been specially conceived for personnel with the necessary qualifications 1 3 1 Prescribed Use Danger A The devices described in this manual must be used only in applications prescribed in this manual or in the respective technical descriptions and only with certified components and devices from third party manufacturers Appropriate transport storage deployment and mounting as well as careful operating and thorough maintenance guarantee the trouble free and safe operation of these devices 1 3 2 Notes Concerning Planning Installation of this Product Danger A All respective safety measures and accident protection guidelines must be considered carefully and without exception 1 4 D301004 1211 BL20 Modbus TCP List of Revisions Industri A 1 4 List of Revisions In comparison to the previous manual edition the following changes revisions have been made Table 1 1 Chapter Subject new changed List of revisions Chap 4 Address setting via l O ASSISTANT 3 FDT DTM page 4 13 X Chap 5 Modbus registers page 5 7 D
128. ng characteristics E Low impedance In the case of compensation cables that are routed on both sides the compensation line impedance must be considerably smaller than that of the shield connection max 10 96 of shield connection impedance E Should the length of the compensation cable be less than 200 m then its cross section must be at least 16 mm 0 025 inch If the cable length is greater than 200 m then a cross section of at least 25 mm 0 039 inch is required The compensation cable must be made of copper or zinc coated steel The compensation cable must be connected to the protective conductor over a large surface area and must be protected against corrosion Compensation cables and data cables should be routed as close together as possible meaning the enclosed area should be kept as small as possible 8 4 4 Switching Inductive Loads In the case of inductive loads a protective circuit on the load is recommended 8 4 2 Protection against Electrostatic Discharge ESD Attention A Electronic modules and base modules are at risk from electrostatic discharge when disassembled Avoid touching the bus connections with bare fingers as this can lead to ESD damage D301004 1211 BL20 Modbus TCP 8 7 Guidelines for Electrical Installation 8 8 D301004 1211 BL20 Modbus TCP 9 BL20 Approvals for Zone 2 Division 2 Note i The Zone 2 approval certificates for BL20 can be found in a separate man
129. nication layers The mapping of Modbus protocol on specific buses or network can introduce some additional fields on the application data unit ADU Figure 5 2 Modbus telegram acc to Modbus IDA 5 2 MODBUS TCP IP ADU I PDU D301004 1211 BL20 Modbus TCP Common Modbus Description Industri A The Modbus application data unit is built by the client that initiates a Modbus transaction The function indicates to the server what kind of action to perform The Modbus application protocol establishes the format of a request initiated by a client The function code field of a Modbus data unit is coded in one byte Valid codes are in the range of 1 255 decimal 128 255 reserved for exception responses When a message is sent from a Client to a Server device the function code field tells the server what kind of action to perform Function code 0 is not valid Sub function codes are added to some function codes to define multiple actions The data field of messages sent from a clientto server devices contains additional information that the server uses to take the action defined by the function code This can include items like discrete and register addresses the quantity of items to be handled and the count of actual data bytes in the field The data field may be nonexistent of zero length in certain kinds of requests in this case the server does not require any additional information The function code
130. ns when routing cables outside of buildings 8 1 4 Lightning Protection The cables must be routed in double grounded metal piping or in reinforced concrete cable ducts Signal cables must be protected against overvoltage by varistors or inert gas filled overvoltage arrestors Varistors and overvoltage arrestors must be installed at the point where the cables enter the building 8 1 5 Transmission Media For a communication via Ethernet different transmission media can be used E coaxial cable 10Base2 thin koax 10Base5 thick koax yellow cable optical fibre 10BaseF twisted two wire cable 10BaseT with shielding STP or without shielding UTP Note E TURCK offers a variety of cable types for fieldbus lines as premoulded or bulk cables with different connectors The ordering information for the available cable types can be found in the BL20 catalog D301004 1211 BL20 Modbus TCP 8 3 Guidelines for Electrical Installation 8 2 Potential Relationships 8 2 1 General The potential relationship of a Ethernet system realized with BL20 modules is characterized by the following The system supply of gateway and I O modules as well as the field supply are realized via one power feed at the gateway All BL20 modules gateway Power Feeding and I O modules are connected capacitively via base modules to the mounting rails The block diagram shows the arrangement of a typical BL20 station Figure
131. nt modules The input data of the intelligent modules occupy 10 registers register 0x0000 to 0x0008 Abbildung 7 BER Packed process Ele Ven Tests Help input data CA EA Eki l rE Exchange Control Sent 1 Exception TH Invalid In Received 1 Emr 0 Noresponse 0 Ti vate imei te 1 0 00 Req O0 iD OO 00 OO O6 FF 04 OO OO 00 20 2 59 Resp 00 1D OO 00 OO 43 FF O4 40 00 00 OO OO OO Di FS 74 00 00 DO 02 OO OO FF FF 01 FF 42 0S5 00 01 02 08 00 00 00 OO OO OO OO OO OO 40 OO OO OO OO 00 00 00 OO 00 00 OO OO OO OO 00 OO OO OO OO OO 00 DO OO OO 00 OO O0 OO 00 00 BL20 2AH 0 4 20MA 2 registers 0x0000 and 0x0001 channel 0 not used measurement range 0 to 20 mA register 0x0000 0x00 0x00 channel 1 not used measurement range 0 to 20 mA register 0x0001 0x00 0x00 The module shows the lower measurement limit when the channel is not used D301004 1211 BL20 Modbus TCP Communication examples Modbus TCP Industri A E BL20 2AI THERMO PI 2 registers 0x0002 and 0x0003 channel 0 thermo element type K connected register 0x0002 0x00 0xD1 The module shows a measured temperature of 0xD1 21 0 C at channel 0 channel 1 no thermo element connected register 0x0003 OxF5 0x74 As the channel is not used the module shows the minimum value at channel 1 270 C m BL20 1AI U 10 0 10VDC 1 register 0x0004 channel 0 register 0x0004 0x00 0x00 A
132. o Replace the gateway the gateway short circuit in connected module hardware error in gateway Red flashing Non adaptable modification of the Compare the planned BL20 station 1Hz physically connected station with the physical station Check the physical station for defective or incorrectly fitted electronics modules Red flashing A no module bus communication At least one module has to be Hz plugged and has to be able to communicate with the gateway Red green Adaptable modification of the Check the physical station for flashing 1 Hz physically connected station pulled or new but not planned data transfer possible modules LINK Off No Ethernet link Check the Ethernet connection ACT Green Link 100 Mbit Green flashing Ethernet Traffic 100 Mbit Yellow Link 10 Mbit Yellow Ethernet Traffic 10 Mbit flashing MS Green Displays the logical connection to a Master 1 Modbus TCP connection Green flashing Gateway is ready for operation Red Gateway indicates error Red flashing DHCP BootP search of settings D301004 1211 BL20 Modbus TCP Status Indicators Diagnostic Messages Gateway Industri A D301004 1211 BL20 Modbus TCP 4 19 Industri A 5 Implementation of Modbus TCP 5 1 Common Modbus DeScription ccccccccccsscrssssccccccccccscccccccccccsscccccccccccsssccccccscscscscccscssccssscsecsosssces 2 5 1 1 Protocol description erit cie cie LL Re PE FERRE EAE TREE EE
133. ommunicate with the gateway via the module bus which is independent of the fieldbus MSB Most Significant bit Ping Implementation of an echo protocol used for testing whether a particular host is operating properly and is reachable on the network from the testing host D301004 1211 BL20 Modbus TCP Industri A PLC Programmable Logic Controller Potential compensation The alignment of electrical levels of electrical components and external conductive components by means of an electrical connection Potential free Galvanic isolation of the reference potentials in I O modules of the control and load circuits Potential linked Electrical connection of the reference potentials in I O modules of the control and load circuits Protective earth Electrical conductor for protection against dangerous shock currents Generally represented by PE protective earth R Radiation coupling A radiation coupling appears when an electromagnetic wave hits a conductive structure Voltages and currents are induced by the collision Typical sources of interference are for example sparking gaps spark plugs commutators from electric motors and transmitters e g radio that are operated near to conducting structures Reaction time The time required in a bus system between a reading operation being sent and the receipt of an answer It is the time required by an input module to change a signal at its input until the signal is sent to the
134. ommunication applicable to the fieldbus in to the module specific bits and bytes CPU Central Processing Unit Central unit for electronic data processing the processing core of the PC D DHCP Client Server protocol which reduces the effort of assigning IP addresses or other parameters Serves for dynamic and automatic configuration of devices Digital A value e g a voltage which can adopt only certain statuses within a finite set mostly defined as 0 and 1 DIN German acronym for German Industrial Standard E EIA Electronic Industries Association association of electrical companies in the United States Electrical components All objects that produce convert transmit distribute or utilize electrical power e g conductors cable machines control devices EMC Electromagnetic compatibility the ability of an electrical part to operate in a specific environment without fault and without exerting a negative influence on its environment 11 2 D301004 1211 BL20 Modbus TCP Industri A EN German acronym for European Standard ESD Electrostatic Discharge F Field power supply Voltage supply for devices in the field as well as the signal voltage Fieldbus Data network on sensor actuator level A fieldbus connects the equipment on the field level Characteristics of a fieldbus are a high transmission security and real time behavior Force Mode Software mode which enables the user to set
135. or reading multiple input bits 3 Read Holding Registers Serves for reading multiple output registers 4 Read Input Registers Serves for reading multiple input registers 5 Write Single Coil Serves for writing single output bits 6 Write Single Register Serves for writing single output registers 15 Write Multiple Coils Serves for writing multiple output bits 16 Write Multiple Registers Serves for writing multiple output registers 23 Read Write Multiple Registers Serves for reading and writing multiple registers D301004 1211 BL20 Modbus TCP 5 5 Implementation of Modbus TCP 5 3 Modbus Registers Note i The Table 5 5 on page 5 13 shows the register mapping for the different Modbus addressing methods Table 5 3 Address hex Access Description Modbus registers of the gateway fro redd only rw read write 0x0000 to 0x01FF ro packed process data of inputs process data length of modules see Table 5 5 Data width of the I O modules 0x0800 to 0x09FF rw packed process data of outputs process data length of modules see Table 5 5 Data width of the I O modules 0x1000 to 0x1006 ro gateway identifier 0x100C ro gateway status see Table 5 6 Register 100Ch gateway status 0x1010 ro process image length in bit for the intelligent output modules 0x1011 ro process image length in bit for the intelligent input modules 0x1012 ro process image length in bit for
136. packages TCP Transmission Control Protocol The Transmission Control Protocol TCP is a connection oriented transport protocol and is based on the Internet Protocol A safe and error free data transport can be guaranteed by means of certain error diagnostic mechanisms as for example acknowledgement and time monitoring of telegrams Modbus TCP In Ethernet TCP IP networks Modbus TCP uses the Transport Control Protocol TCP for the transmission of the Modbus application protocol All parameters and data are embedded in the user data of the TCP telegram using the encapsulation protocol the client generates a special header MBAP Modbus Application Header which enables the server to clearly interpret the received Modbus parameters and commands The Modbus protocol is thus part of the TCP IP protocol Note chapter 5 contains a more detailed description of Modbus TCP Checking the communication via ping signals You can check the communication between nodes in a network using ping signals in the DOS prompt of your PC For that purpose please enter the command ping and the IP address of the network node to be checked If the node answers the ping signal it is ready for communication and takes part in the data transfer Figure 3 2 ping signal cx C WINDOWS system32 cmd exe a x oft Windows XP Version 5 1 2666 pyright 1985 2081 Microsoft Corp is not recognized as an internal or external command
137. ptions tab will be ignored 9 Off not recommended Avoid using this setting Turning off Windows Firewall may make this computer more vulnerable to viruses and intruders Windows Firewall is using your domain settings What else should know about Windows Firewall Adapting the firewall The firewall remains active the option Don t allow exceptions it deactivated Figure 6 7 Activating the Ta Windows firewall General Exceptions Advanced Windows Firewall ws Firewall is helping to protect your PC Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network Q On recommended This setting blocks all outside sources from connecting to this computer with the exception of those selected on the Exceptions tab Don t allow exceptions Select this when you connect to public networks in less secure locations such as airports You will not be notified when Windows Firewall blocks programs Selections on the Exceptions tab will be ignored 8 Off not recommended Avoid using this setting Turning off Windows Firewall may make this computer more vulnerable to viruses and intruders Windows Firewall is using your domain settings What else should know about Windows Firewall 6 6 D301004 1211 BL20 Modbus TCP Changing the IP address of a PC network interface card
138. r 1 to 1000 1hex to 3E8hex is permissible LOAD UPLIMIT Parameter setting of the upper measuring limit 0 gt 1 The value in bytes 0 to 3 is accepted directly as the new upper measuring limit LOAD UPLIMT 1 to 200 000 000 x 10 Hz 1 to 25 000 000 x 10 rpm 1 to 100 000 000 ms LOAD LOPLIMIT Parameter setting of the lower measuring limit 0A 1 The value in bytes 0 to 3 is accepted directly as the new lower measuring limit LOAD LOLIMIT 0 to 199 999 999 x10 Hz 0 to 24 999 999 x 10 rpm 0 to 99 999 999 ms MODE DO MODE DO is only valid if LOAD DO PARAM 0 gt 1 The physical output DO can show the status of the data bit SET DO1 or comparison results if CTRL DO1 1 MODE DO defines which function DO1 is to accept 00 The output DO1 indicates the status of the control bit SET DOT 01 The output DO indicates a measurement outside of the limits i e above the upper measuring limit or below the lower measuring limit STS_OFLW 1 or STS UFLW 1 process input 10 Output DO1 indicates a value below the lower measuring limit STS_UFLW 1 process input 11 Output DO indicates a value above the upper measuring limit STS_OFLW 1 process input 10 1 2 RSxxx module 10 12 Process input data The incoming data are stored in the receive buffer of the BL20 1RSxxx module segmented and transferred to the PLC via the module bus and the gateway The transmission is realized in a 8 byte
139. r stated at REG_RD_ADR was accepted and executed The content of the register is located in the user data range REG_RD_DATA Bytes 0 3 The reading of the register stated at REG_RD_ADR was not accepted The user data range REG_RD_DATA Bytes 0 3 is zero REG_RD_ADR The reading of the register stated at REG_RD_ADR was not accepted The user data range REG_RD_DATA Bytes 0 3 is zero REG_WR_ACEPT The writing of user data for process output to the register with the address stated at REG_WR_ADR in the process output data could not be executed The writing of user process output data to the register with the address stated at REG_WR_ADR in the process output data was successfully completed REG_WR_AKN No modification of the data in the register bank by process output i e REG_WR 0 A write job would be accepted with the next telegram of process output data handshake for data transmission to the register A modification of the register contents by a process output was initiated i e REG_WR 1 A write job would not be accepted with the next telegram of process output data SSI_STS3 SSI_STS2 SSI_STS1 SSI_STSO These four bits transfer the status bits of the SSI encoder with the status messages of the SSI module With some SSI encoders the status bits are transferred together with the position value STS UP LED UP The SSI encoder values are decremented or the values are cons
140. ransferred together with every data segment The TX_CNT values are sequential 00 gt 01 gt 10 gt 11 gt 00 decimal 0 gt 1 gt 2 gt 3 gt 0 Errors in this sequence show the loss of data segments TX_BYTE_CNT 0 7 Number of the valid user data in this data segment In PROFIBUS DP the data segments contain a maximum number of 6 bytes of user data E 1 byte contains messages concerning the communication status between the BL20 1SSI module and the SSI encoder as well as other results of comparison operations The following table describes the structure of the 8 x 8 bits of the process input data STS or ERR contains non retentive status information i e the bit concerned indicates the actual status FLAG describes a retentive flag that is set in the event of a particular event The bit concerned retains the value until it is reset D301004 1211 BL20 Modbus TCP 10 15 Appendix Figure 10 10 Processinput data Status messages REL FLAG REL FLAG STS CMP2 CMP2 CMP1 CMP1 CMP2 EH ES SSI STS3 STS2 STS1 REG RD ADR MSB to LSB 10 16 D301004 1211 BL20 Modbus TCP Data image of the technology modules Industri A Table 10 7 Designation Value Meaning Meaning of the data bits process REG RD DATA input 0 23 1 Content of the register to be read if REG_RD_ABORT 0 If REG_RD_ABORT 1 then REG RD DATA 0 REG_RD_ABORT The reading of the registe
141. rol elements and reduces the influence of coupled disturbances E Inthe areas of screw connections the painted anodized or isolated metal components must be freed of the isolating layer Protect the points of contact against rust E Connect all free moving groundable components cabinet doors separate mounting plates etc by using short bonding straps to large surface areas E Avoid the use of aluminum components as its quick oxidizing properties make it unsuitable for grounding Danger A The grounding must never including cases of error take on a dangerous touch potential For this reason always protect the ground potential with a protective cable 8 2 5 PEConnection A central connection must be established between ground and PE connection protective earth 8 2 6 Earth Free Operation Observe all relevant safety regulations when operating an earthfree system 8 2 7 Mounting Rails All mounting rails must be mounted onto the mounting plate with a low impedance over a large surface area and must be correctly earthed Figure 8 2 200 mm 7 87 inch Mounting options B A TS35 y x x B Mounting rail C Mounting plate x x x D x HM x H LJ x D A N N N N N N Mount the mounting rails over a large surface area and with a low impedance to the support system using screws or rivets Remove the isolating layer from all painted anodized or isolated metal components at the connection point Protect the connection point aga
142. roup error slave error Activate slave diagnostics SD SX As soon as only one slave on the bus sets its error bit this is indicated as a group error depending on the parameter setting 0 active A Group diagnostics is activated 1 inactive Group diagnostics is not activated PKZ info PKZ error field Activate slave diagnostics info field PKZ p25x As soon as a SWIRE DIL slave on the bus clears its PKZ bit this is indicated as an individual error depending on the parameter setting 0 active A Single diagnostics is activated 1 inactive Single diagnostics is not activated 5 48 D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A Table 5 30 Parameter Value Module name parameters Byte 2 PKZ Err Group PKZ error field Activate slave diagnostics DK on As soon as only one SWIRE DIL slave on the bus clears its PKZ bit this is indicated as an error depending on the parameter setting 0 active A Group diagnostics is activated 1 inactive Group diagnostics is not activated TYP ro Configuration error field As soon as a slave on the bus does not match the set configuration and therefore cannot be started this is indicated as an individual error depending on the parameter set 0 active A Single diagnostics is activated 1 inactive Single diagnostics is not activated TYP RR Group configuration error field Activate slave diagnostics TYPE on As soon as only one sla
143. s Field bus connection Power Supply via terminal block with screw connection Service Interface Connection female PS 2 connector teste tone ttn tonto tests tenente testet tese Sd Address d D uio oo 4 8 D301004 1211 BL20 Modbus TCP i 4 5 1 4 5 2 4 5 3 4 5 4 4 5 5 4 5 6 4 5 7 4 5 8 4 6 4 7 4 7 1 5 1 5 1 1 5 1 2 5 2 5 3 5 4 5 4 1 5 4 2 5 5 5 6 5 7 5 8 5 9 5 10 5 11 5 11 1 5 11 2 5 12 5 13 5 14 5 14 1 5 14 2 5 14 3 5 14 4 5 15 5 15 1 5 15 2 5 15 3 5 15 4 5 15 5 EE behapt eather bin ee EES EE Aere ee 4 8 Default setting of the Gateway ENEE 4 9 Address setting via the rotary mode ENEE 4 9 Address setting via BootP mode Address setting via DHCP mode Address setting via PGM mode T Addressing vidi PGM DAGP i ege eerie eee tee ede e eh eh eee ber debeo deett le ANE Address setting via l O ASSISTANT 3 FDT DTM nee 4 13 yCn 4 16 Status Indicators Diagnostic Messages Gateway eres e esee e eene n etes tests tns snas tosta sets to seen etos ense enetus 4 17 Diagnostic Messages via LEDS eessen 4 17 Implementation of Modbus TCP Common Modbus Description BrotocoldesertGotlont cC PE I Wife C gd AAEE Eed Implemented Modbus Functions eee eee eere eee esee ee eee eene eene senes etate n stesse esos tense
144. s 10 BL20 2DI 24VDC P modules and 5 BL20 2DO 24VDC 0 5A P modules The required number of Bus Refreshing modules is calculated as follows Gateway 430 mA 15 BL20 1AI U 10 0 10VDC 15x41 mA 615 mA 10 BL20 2AO U 10 10x43 mA 430 mA 0 10VDC 10 BL20 2DI 24VDC P 10x28mA 280 mA 5 BL20 2DO 24VDC 0 5A P 5x32mA 160 mA Total 1915mA Maximum permissible current via module bus 1500 mA D301004 1211 BL20 Modbus TCP 7 5 Guidelines for Station Planning The calculation shows that an additional further Bus Refreshing module is required at the latest following the last BL20 2AO U 10 0 10VDC module This Bus Refreshing module is sufficient to supply the remaining modules Note i The power requirements of the BL20 gateway is to be considered when calculating the required number of Bus Refreshing modules The following table offers an overview of the nominal current consumption of the individual BL20 modules on the module bus Table 7 2 Nominal current consumption of the BL20 modules on the module bus 7 6 Module Supply Nominal current consumption Gateway 1500 mA 430 mA BL20 PF 24VDC D 28 mA BL20 PF 120 230VAC D 25 mA BL20 2DI 24VDC P 28mA BL20 2DI 24VDC N 28mA BL20 2DI 120 230VAC 28 mA BL20 4DI 24VDC P 29 mA BL20 4DI 24VDC N 28mA BL20 E 8DI 24VDC P 15mA BL20 16DI 24VDC P 45 mA BL20 E 16DI 24VDC P 15 mA BL20 32DI 24VDC P 30mA BL20 1A
145. s 6 4 Microsoft TCP IP Properties IP Address DNS WINS Address Routing An IP address can be automatically assigned to this network card by a DHCP server If your network does not have a DHCP server ask your network administrator for an address and then type it in the space below Adapter 1 Intel 82557 based 10 100 Ethernet PCI Adapter m Obtain an IP address from a DHCP server Specify an IP address IP Address 182 168 1 5 Subnet Mask 255 255 255 D Default Gateway 192 168 1 1 Advanced Cancel Apply D301004 1211 BL20 Modbus TCP Changing the IP address of a PC network interface card 6 2 3 Changing the IP address via PACTware I O ASSISTANT V3 By means of the DTMs Busaddress Management in the software I O ASSISTANT V3 access via Additonal functions Busaddress Management the entire Ethernet netzwork can be searched for TURCK Ethernet nodes and their IP address as well as their subnet mask can be adapted according to the application see also Address setting via I O ASSISTANT 3 FDT DTM page 4 13 Figure 6 5 BP PACTware CT EIS Busaddress File Edit view Project Device Extras Window Help 8 Bas Management oaa neg 8 Device tag Ad HOST PC rien 2S Connect Bojeje3 awa d ss Disconnect Measured val simulation Diagnostic Display channels Channels D Up Download Mana
146. s based on the parameter data of the configuration tool or default configuration The data is transferred in 8 byte format E Two control bytes contain the control functions for transferring the parameter values for starting stopping the measurement for acknowledging errors and for resetting the status bit E Four bytes provide the parameter values for Load direct Load in preparation Reference value 1 Reference value 2 or Behavior of the digital outputs D301004 1211 BL20 Modbus TCP Data image of the technology modules Structure of the data bytes with Load value direct Load value in preparation Reference value 1 or Reference value 2 Figure 10 3 Structure of the data bytes with Load value direct Load value in prepara tion Reference value or Refer fs ara ers ena ar oxo ence value 2 0 2 3 4 crm set era set CTRL_ sw ACK DO2 poz Do1 bot SYN GATE LOAD LOAD LOAD LOAD DO low CMP_ pre In PARAM VAL2 VALT PARE Structure of the data bytes with Function and behavior of DO1 DO2 Figure 10 4 Structure of the data bytes with Function and behavior of DO1 DO2 SET CTRL_ SET RES_ CTRL_ Sw DO2 Dot Dot SIS SYN GATE LOAD LOAD LOAD LOAD_ LOAD Do CMP_ CMP_ PRE VAL PARAM VAL2 VALT PARE reserved D301004 1211 BL20 Modbus TCP 10 7 Appendix Table 10 3
147. s the module s voltage input is not used no voltage can be measured BL20 1SSI 4 registers 0x0005 to 0x0008 register 0x0006 0x00 0x02 register 0x0007 0x00 0x00 register 0x0008 OxFF OxFF register 0x0009 0x01 OxFF In the SSI module the status and diagnosis information is shown in the first byte of the module s process input data Byte 0 bit 1 the SSI module shows an error in the data image of the Process input data D301004 1211 BL20 Modbus TCP 6 15 Application example Modbus TCP Digital modules The input data of the digital modules occupy 1 register register 0x0009 Value 0x02 0x05 E BL20 2DI 24VDC P 2 bits register 0x0009 byte 0 bits 0 and 1 0x01 input 0 2 bit 0 2 1 E BL20 4DI 24VDC P 4 bits register 0x0009 byte 0 bits 2 and 5 0x04 input 0 2 bit 2 2 1 BER File View Tests Help zu HEX SIE Exchange Control Sent 1 Exception p Invalid 0 Received 1 Error 0 No response 0 1 0 00 Req 00 10 00 00 00 06 FF 03 00 00 00 20 2 2 37 Resp 00 10 OO 00 00 43 FF 03 40 00 03 OD 02 O0 OO OO 00 OO OC OO OO OO OO FF FF O1 FF 02 500 oo oo 00 OO OO OO OO OO OO OO OO OO 40 O0 OO OO OO 00 00 00 00 oO OO OO OO OO OO OO OO OO OO OO 00 OO DO OO 00 OO OO OO OO O0 00 E BL20 4DI 24VDC P 4 bits register 0x0009 byte 0 bits 6 and 7 0x00 input 0 and 1 20 byte 1 bits 0 and 1 0x02 input 3 2 1 sl File View Tests Help zu HX
148. ses a maximum of 9 registers The first register contains a common gateway station status The following registers max 8 contain a group diagnostic bit for each I O module which shows whether a diagnostic message is pending for the relevant module or not Status diagnostic n 0000h n 0008h gateway status group diagnosis O modules 0 127 Reg 100Ch registers 1018h to 101Fh D301004 1211 BL20 Modbus TCP 5 11 Implementation of Modbus TCP 5 4 2 Packed output process data E output register area 0800h to O9FFh 0800h O9FFh intelligent modules outputdata digital output data free Note Independent of the I O configuration an access to all 512 registers is always possible Registers that are not used send 0 answering a read access write accesses are ignored 5 12 D301004 1211 BL20 Modbus TCP Data Width of the UO Modules in the Modbus Register Area Industri A 5 5 Data Width of the I O Modules in the Modbus Register Area The following table shows the data width of the BL20 I O modules within the modbus register area and the type of data alignment Table 5 5 Module Process Process output Alignment Data width of the input I O modules digital inputs BL20 2DI x 2 bit bit by bit BL20 4DI x 4 bit bit by bit BL20 E 8DI x 8 bit bit by bit BL20 16DI x 16 bit bit by bit BL20 E 16DI x 16 bit bit by bit BL20 32DI x 32 bit bit by bit
149. sier ged t Eee wari v dete Hd en 20 5 12 Bit Areas Mapping of Input Discrete and Coil Areas eee ee eee eee eee eee ee ee eee eese eese eese eese esee 21 5 13 Error behavior Of outputs q 22 5 14 Parameters of the modules eee ecce euer eee eee e een een eese eee ee eee e eee ee eee eese eese eee eese ee eese sees eu 23 5 14 1 Digital input modules em ene eene nennen nnne nennen nennen een n 23 5 142 Analog input modules dene co de Uii E ERA LE ERE EXC ELLE LAE RR RE edges 23 5 14 3 Analog output modules A 32 5 14 4 Technology modules nere o e e d die D ER ER a dE uen elc nu LL dE S 37 5 15 Diagnostic messages of the modules eee eee Leere tette ee eene eee ettet n nose sees sese seen sss soos eese e ee eeno 51 St Power Supply modules Liuectir tne o ptc uper e deste tuts eu pL bue read Eve adi neon 51 5 152 Digital Put MOdUl85 TEE 52 5 15 3 Analog Input modules rre rrt Co e ntt deu pt ve n ede e te EE abun ha 52 5 15 4 Digital outp t ue IEN 55 5 15 5 Technology modules Lasst derer tta s oa t Pri do e EENEG re bnt agigede eg 57 D301004 1211 BL20 Modbus TCP 5 1 Implementation of Modbus TCP 5 1 Common Modbus Description Note i The following description of the Modbus protocol is taken from the Modbus Application Protocol Specification V1 1 of Modbus IDA Modbusis an application layer messaging protocol pos
150. sponse 0 ne Datetms type Frame 1 0 00 Req 00 17 00 00 OO 06 FF 068 g t 02 2 1 81 Resp 00 17 00 00 O0 06 FF 06 08 06 00 C2 A B D301004 1211 BL20 Modbus TCP Parameterization of modules Industri A 6 4 Parameterization of modules The parameters of the BL20 modules of one station can be accessed via register range 0xB000 to 0xB400 For each module in the station 64 bytes 32 registers of parameter data are reserved The parameterization of BL20 I O modules is described by means of the following examples Example A Module 0 Changing the measurement range for channel 0 from 0 to 20 mA to 4 to 20 mA Deactivation of channel 1 via parameter channel E Example B Module 9 Changing the baudrate from 500000 Bit s to 71000 Bit s Example A Module 0 The parameter of the module 1 slot in the station can be accessed via registers 0xB000 to OxBOTF 1 Changing the measurement range for channel 0 from 0 to 20 mA to 4 to 20 mA The module shows the following parameter data structure 1 byte of parameters per channel Table 6 8 Byte Bit Parameter Value Module parameters 0 1 0 Current mode 0 0 20mMAA BL20 2Al I 0 4 20MA 1 4 20 mA 1 Measurement value 0 Integer 15bit sign A representation A default n 1 12bit left justified setting 2 Diagnosis 0 release A 1 block 3 Channel 0 activate A 1 deactivate Thus for setting
151. t settings B 3 wire measurment only the first of the used chan nels Kan le has to be parame terized respec tively The parameteriza tion of the second channel is ignored 5 30 Byte Bit Parameter Value Meaning name 0to7 0to5 Operation 000000 voltage 10 10 VDC standard A moge ix 000001 voltage 0 10 VDC standard 000010 voltage 10 10 VDC NE 43 000011 voltage 0 10 VDC NE 43 000100 voltage 10 10 VDC extended range 000101 voltage 0 10 VDC extended range 000110 reserved 000111 reserved 001000 current 0 20mA standard 001001 current 4 20mA standard 001010 current 0 20mA NE 43 001011 current 4 20mA NE 43 001100 current 0 20mA extended range 001101 current 4 20mA extended range 001110 reserved 001111 reserved 010000 Pt 100 200 C 850 C 2 wire 010001 Pt 100 200 C 150 C 2 wire 010010 Pt 200 200 C 850 C 2 wire 010011 Pt 200 200 C 150 C 2 wire 010100 Pt 500 200 C 850 C 2 wire 010101 Pt 500 200 C 150 C 2 wire 010110 Pt 1000 200 C 850 C 2 wire 010111 Pt 1000 200 C 150 C 2 wire 011000 Pt 100 200 C 850 C 3 wire B 011001 Pt 100 200 C 150 C 3 wire B 011010 Pt 200 200 C 850 C 3 wire B 011011 Pt 200 200 C 150 C 3 wire B 011100 Pt 500 200 C 850 C 3 wire B 011101 Pt 500 200 C 150 C 3 wire B
152. t be used for the potential isolation to the following modules The C rail can only again be used as a PE following potential isolation Figure 7 6 Using the C rail as protective earth and for the power supply with relay modules PF 2DO 2DI 2DO 2DI PF NO NC NO NC PE terminal E E C rail PE Grail 24V DC Mapa 14 2414 2414 2414 24 SBBC SBC SBBC SBC SBB SBBC SBCS SBCS SBCS SBCS Cross connecting relay module roots is achieved by the use of jumpers The corresponding connection diagrams can be found in the manuals for the BL20 I O modules German D300716 English D300717 D301004 1211 BL20 Modbus TCP 7 11 Guidelines for Station Planning 7 2 5 Direct Wiring of Relay Modules As well as the options mentioned above relay modules can be wired directly In this case base modules without C rail connections should be chosen to guarantee the potential isolation to the adjoining modules 7 12 D301004 1211 BL20 Modbus TCP Plugging and Pulling Electronics Modules Industri A 7 3 Plugging and Pulling Electronics Modules BL20 enables the pulling and plugging of electronics modules without having to disconnect the field wiring The BL20 station remains in operation if an electronics module is pulled The voltage and current supplies as well as the protective earth connections are not interrupted Attention If the field and system supplies remain connected when electronics modules
153. t of a fault Inductive coupling Magnetic inductive couplings occur between two cables through which an electrical current is flowing The magnetic effect caused by the electrical currents induces an interference voltage Typical sources of interference are for example transformers motors parallel routed network and HF signal cables Intelligent modules Intelligent modules are modules with an internal memory able to transmit certain commands e g substitute values and others IP Abbreviation for Internet Protocol protocol for the packet oriented and connectionless transport of data packets from a transmitter to a receiver crossing different networks Lightning protection All measures taken to protect a system from damage due to overvoltages caused by lightning strike Low impedance connection Connection with a low AC impedance LSB Least Significant bit Mass All interconnected inactive components that do not take on a dangerous touch potential in the case of a fault Master Station in a bus system that controls the communication between the other stations Modbus TCP The Modbus protocol is part of the TCP IP protocol The communication is realized via function codes which are implemented into the data telegram Modbus TCP uses the Transport Control Protocol TCP for the transmission of the Modbus user protocol in Ethernet TCP IP networks Module bus The module bus is the internal bus in a station The modules c
154. ta structure 4 bytes of parameters in total Default Byte 0 0x00 Byte 1 0x00 Byte 2 0x01 Byte 3 0x19 Register 0x0120 0000 Register 0x0121 1901 Table 6 9 Module parameters BL20 1SSI A Default settings 6 20 Byte Bit Parameter name Value Meaning 0 4to0 reserved 5 Encoder data cable test 0 activate A ZERO test of data cable 0 deactivate After the last valid bit a ZERO test of the data cable is not carried out 7 6 reserved D301004 1211 BL20 Modbus TCP Parameterization of modules Industri A Table 6 9 Byte Bit Module parameters BL20 1SSI A Default settings Parameter name Value Meaning 1 3to0 Number of invalid bits LSB 0000 to 1111 Number of invalid bits on the LSB side of the position value supplied by the SSI encoder The meaningful word width of the position value transferred to the module bus master is as follows Sal FRAME LEN INVALID BITS MSB INVALID BITS LSB The invalid bits on the LSB side are removed by shifting the position value to the right starting with the LSB Default 0 bit 0x0 INVALID BITS MSB INVALID BITS LSB must always be less than SSI FRAME LEN 6to4 Number of invalid bits MSB 000 to 111 Number of invalid bits on the MSB side of the position value supplied by the SSI encoder The meaningful word width of the position value transferred to the module bus master is as follows SSI FR
155. tant The SSI encoder values are incremented STS DN LED DN The SSI encoder values are incremented or the values are constant The SSI encoder values are decremented D301004 1211 BL20 Modbus TCP 10 17 Appendix Designation Value Meaning REL_CMP2 A comparison of the register contents has produced the following result REG SSI POS REG_CMP2 A comparison ofthe register contents has produced the following result REG SSI POS REG CMP2 FLAG CMP2 Default status i e the register contents have not yet matched REG SSI POS REG CMP2 since the last reset The contents of the registers match REG SSI POS REG CMP2 This marker must be reset with CLR CMP2 1 in the process output data STS CMP2 A comparison of the register contents has produced the following result REG SSI POS z REG CMP2 A comparison of the register contents has produced the following result REG SSI POS REG CMP2 REL CMP1 A comparison ofthe register contents has produced the following result REG SSI POS lt REG CMP1 A comparison ofthe register contents has produced the following result REG SSI_POS gt REG CMP1 FLAG CMP1 Default status i e the register contents have not yet matched REG SSI POS REG CMP1 since the last reset The contents of the registers match REG SSI POS REG CMP1 This marker must be reset whe
156. ter was successful and indication of an active write operation 1byte contains the results of comparison operations with the SSI encoder value D301004 1211 BL20 Modbus TCP Data image of the technology modules Industri A Table 10 6 Designation Value Meaning Meaning of the data bits RXBUF FLUSH 0 1 This bit is used to flush the receive buffer process output If STATRES 1 The command RXBUF FLUSH 1 is ignored If STATRES 0 RXBUF FLUSH 1 causes the flushing of the receive buffer TXBUF FLUSH 0 1 This bit is used to flush the transmit buffer If STATRES 1 The command TXBUF FLUSH 1 is ignored If STATRES 0 TXBUF FLUSH 1 causes the flushing of the tranceive buffer STATRES 0 1 This bit is set to reset the STAT bit in the process input data With the change from 1 to 0 the STAT bit is reset from 0 to 1 If this bit is 0 all changes in TX_BYTE_CNT TX_CNT and RX_CNT_ACK are ignored Flushing the transmit receive buffer with RXBUF FLUSH TXBUF FLUSH is possible If this bit is 1 or with the change from 0 to 1 the flushing of the transmit receive buffer with RXBUF FLUSH TXBUF FLUSH is not possible RX_CNT_ACK 0 3 The value RX_CNT_ACK is a copy of the value RX_CNT TX_CNT has been transmitted together with the last data segment of the process input data TX_CNT_ACK is an acknowledge for the successful transmission of the data segment with RX_CNT TX_CNT 0 3 This value is t
157. the address stated at REG_WR_ADR with REG_WR_DATA Bit REG_WR_AKN is reset 0 if necessary Request to overwrite the content of the register with the address stated at REG_WR_ADR with REG_WR_DATA REG_WR_ADR 0 63 Address of the register to be written with REG_WR_DATA CLR_CMP2 Default status i e no reset of FLAG CMP2 active Reset of FLAG CMP2 active EN CMP2 Default status i e the data bits REL CMP2 STS_CMP2 and FLAG CMP2 always have the value 0 irrespective of the actual SSI encoder value Comparison active i e the data bits REL CMP2 STS CMP2 and FLAG CMP2 have a value based on the result of the comparison with the SSI encoder value CLR CMP1 Default status i e reset of FLAG CMP1 not active Reset of FLAG CMD active EN CMP1 Default status i e the data bits REL CMP1 STS_CMP1 and FLAG CMP1 always have the value 0 irrespective of the actual SSI encoder value Comparison active i e the data bits REL CMP1 STS_CMP1 and FLAG CMD have a value based on the result of the comparison with the SSI encoder value STOP Request to read the SSI encoder cyclically Request to interrupt communication with the encoder 10 20 D301004 1211 BL20 Modbus TCP Ident codes of the BL20 modules Industri A 10 2 Ident codes of the BL20 modules Each module modul is identified by the gateway with the help of a module specific ident code Table
158. the digital output modules 0x1013 ro process image length in bit for the digital input modules 0x1017 ro register mapping revision always 1 if not mapping is incompatible with this description 0x1018 to 0x101A ro group diagnostics of I O modules 0 to 32 1 bit per I O module 0x1020 ro watchdog actual time ms 0x1120 rw watchdog predefined time ms default 0 see also Error behavior of outputs page 5 22 0x1121 rw watchdog reset register 0x1130 rw modbus connection mode register page 5 16 0x1131 rw modbus connection time out in seconds default 0 never page 5 16 0x113C to 0x113D rw modbus parameter restore page 5 16 Ox113E to Ox113F rw modbus parameter save page 5 17 0x2000 to 0x207F rw service object request area page 5 18 0x2080 to Ox20FF ro service object response area page 5 18 5 6 D301004 1211 BL20 Modbus TCP Modbus Registers Industri A Table 5 3 Address hex Access Description Modbus registers of the gateway TOT Ead Ony rw read write 0x2400 ro system voltage U mV 0x2401 ro load voltage U mV 0x2405 ro load current A 0x27FE ro no of entries in actual module list 0x27FF rw no of entries in reference module list 0x2800 to 0x2840 rw reference module list 74 x 2 registers per module ID 0x2A00 to 0x2A20 ro actual module list 74 x 2 registerss per module ID 0x8000 to 0x893F ro process data inputs max 74 modules per station x 32 registers p
159. ton 3 1 reserved module in man channel 3 ualD300716 2 reserved 3 overflow underflow OUFL A 4to6 reserved 7 hardware error 5 58 D301004 1211 BL20 Modbus TCP Diagnostic messages of the modules Industri A 5 15 6 Technology modules BL20 1CNT 24VDC Table 5 52 Diagnosis Bit Diagnosis BL20 1CNT byte 24VDC n 0 Short circuit open circuit ERR DO Whenbit 1 Short circuit in sensor power supply ERR 24VDC 7 0 2 End of counter range wrong counter mode 3 Start of counter range wrong 4 Invert Dl latch retr not perm It is not permitted to invert the level of the digital input when using the latch retrigger function 5 Main count direction wrong 6 Operating mode wrong 7 Measurement mode Bit 0 Conter mode active n 0 Short circuit open circuit ERR DO Whenbit Short circuit in sensor power supply ERR 24VDC 7 1 2 Sensor pulse wrong measure ment 3 Integration time wrong mode ET 4 Upper limit wrong 5 Lower limit wrong 6 Operating mode wrong 7 Messbetriebsart Bit 1 measurement operation is active E BL20 1RS232 Table 5 53 Diagnosis Bit Diagnosis BL20 1RS232 byte n 0 parameterization error 1 hardware failure 2 data flow control error 3 frame error 4 buffer overflow D301004 1211 BL20 Modbus TCP 5 59 Implementation of Modbus TCP BL20 1RS485 422 Table 5 54 Diagnosis Bit Diagnosis BL20 1RS4
160. ual for approvals D301255 on www turck de D301004 1211 BL20 Modbus TCP 9 1 BL20 Approvals for Zone 2 Division 2 9 2 D301004 1211 BL20 Modbus TCP Industri A 10 Appendix 10 1 Data image of the technology modules cccccccccccccccccsscccccsccccccccccccccccccccecccecccsccccscccssocscccecs 2 101 1 Counter module ia decere duci indiana eT ATHE deena ERRAT Idee CREE CERE AE dU Ee RE ca 2 Process input data counter mode nennen nennen nennen 2 Process input data measurement mode 4 Process output data counter mode nee eene nennen nnn nnne nnns 6 Process output data measurement mode nennen enn nnne nnns 10 101 2 RSocmodule iuu c decis cette ei bra et cita etd ro nt dea ctu Fee HE Era dre pe Ra nde E n ed De Nia NEEN RU 12 Process input data 2 ee der re e a i ended ice ea i ia pee d EC EU Lg aE 12 Process output data 14 NC MT e el BEE 14 Process input data uie trier td Pali iut lest cip bu rab rea ea per beste eigene 14 Process output data PDOUt n en itn cete itte n ice de av eens edd deu 19 10 2 Ident codes of the BL20 modules e eee eee ee ee eee eee esee esso seen eese ases sss s ete eese e sso eee eee eese sese seco 21 D301004 1211 BL20 Modbus TCP 10 1 Appendix 10 1 Data image of the technology modules Note i Tha data image for the module BL20 E 2CNT 2PWM can be found in the separate manual D301224 Note 8 Tha data
161. ult 1 4 20 MA settings 1 value 0 Integer 15 bit sign A representation a 1 12 bit left justified 2 diagnosis 0 activate A 1 deactivate 3 channel 0 activate A 1 deactivate BL20 1AI U 10 0 10V Table 5 13 Byte Bit Parameter name Value Module M parameters meaning 0 0 voltage mode 0 0 10VA A Default 1 10 410V settings 1 value 0 Integer 15 bit sign A representation SIE 1 12 bit left justified 2 diagnosis 0 activate A 1 deactivate BL20 2Al U 10 0 10V 1 byte parameter per channel Table 5 14 Byte Bit Parameter name Value Module M z parameters meaning 0 1 0 voltage mode 0 0 10VA A Default 1 10 410V settings 1 value 0 Integer 15 bit sign A representation SE 1 12 bit left justified 2 diagnosis 0 activate A 1 deactivate 3 channel 0 activate A 1 deactivate 5 24 D301004 1211 BL20 Modbus TCP Parameters of the modules Industri A E BL20 2AI PT NI 2 3 2 byte parameter per channel Table 5 15 Byte Bit Parameter name Value Module M parameters meaning 0 2 0 mains 0 50HZA A Default pe 0 60Hz settings 1 value 0 Integer 15 bit sign A representation orton 1 12 bit left justified 2 diagnosis 0 release A 1 block 3 channel 0 activate A 1 deactivate 7to4 element 0000 Pt100 200 850 CA 0001 Pt100 200 150 C 0010 Ni100 60 250 C 0011 Ni100 60 150 C 0100
162. ulty 14 Force Mode Active Error The Force Mode it activated The state of the outputs may no longer accord to the settings made via the fieldbus 13 reserved 12 Modbus Wdog Error A time out in the Modbus communication occurred Module bus 11 I O Cfg Modified Error The l O configuration has been changed and is now incompatible 10 LO Communication Lost No communication on the l O module bus Error Voltage errors 9 Uys too low System supply voltage too low 18 VDC 8 Uy too high System supply voltage too high 30 VDC 7 U too low Load voltage too low 18 VDC 6 U too high Load voltage too high 30 V DC 5 L too high Overload of the system voltage supply 4 reserved Warnings 3 1 0 Cfg Modified Warning The station configuration has changed 0 I O Diags Active Warning At least one l O module sends active diagnostics D301004 1211 BL20 Modbus TCP Implementation of Modbus TCP 5 7 Register 1130h Modbus connection mode This register defines the behavior of the Modbus connections Table 5 7 Bit Name Description register 1130h Modbus 15to2 reserved Connection Mode i mm MB ImmediateWritePermission 0 With the first write access a write authorization for the respective Modbus connection is requested If this request fails an exception response with exception code 01h is generated If the request is accepted the write access is executed and the write authorization remains active until the
163. ut and the virtualA DO2 output 0 1 DO1 and DO2 can indicate the status of data bit SET DO1 and SET DO2 or comparison results The latest telegram MODE DOT and MODE D0OJ2 indicates the function required for DO1 and DO2 LOAD CMP VAL2 Parameter definition of reference value 2 0 1 The value in bytes 0 to 3 is accepted as a reference value 2 LOAD CMP VAL1 Parameter definition of reference value 1 0 1 The value in bytes 0 to 3 is accepted as a reference value 1 LOAD PREPARE Parameter definition of Load counter in preparation Q 1 The value in bytes 0 to 3 is accepted as the new load value LOAD VAL Parameter definition of Load counter direct 0 1 The value in bytes 0 to 3 is accepted directly as the new count value D301004 1211 BL20 Modbus TCP 10 9 Appendix Process output data measurement mode The data is transferred in 8 byte format E Two control bytes contain the control functions for transferring the parameter values for starting stopping the measurement for acknowledging errors and for resetting the status bit E Four bytes represent the parameter values for Lower limit or Upper limit Function of DO1 or Integration time Structure of the data bytes with Function of DO1 set Figure 10 5 Structure of the data bytes with Function of DO1 set Byte Bit 7 Bit6 Bit5 Bit4 Bit
164. ve on the bus is incorrectly configured this is indicated as an error depending on the parameter setting 0 active A Group diagnostics is activated 1 inactive Group diagnostics is not activated U AUXERR Error message U ux Activate system diagnostics U Auxerr Uauxerr Will generate an error message as soon as the power supply goes below a level at which the function of the relays is not guaranteed 0 active A Error message Unuyere activated 1 inactive Error message Unuyera not activated Byte 3 reserved Byte4 reserved Was up to version VN 01 03 Lifeguarding time of the SWIRE slaves Lifeguardi EE ng time 0x02 OxFF Lifeguarding time of the SWIRE slaves only up to 0x64 A Setting of lifeguarding time timeout time up to automatic reset of the version slaves in the event of communication failure n oo 10ms VNO1 03 Default 1 s OxFF Lifeguarding off Byte 5 6 SD pag Input bit communication error slave x Slave diagnostics message from Byte 1 Bit 7 is accepted in the feedback interface as Bit4 0 active A SDyjcSx is accepted 1 inactive SDbiacSX is not accepted Byte 7 8 reserved D301004 1211 BL20 Modbus TCP 5 49 Implementation of Modbus TCP Table 5 30 Parameter Value Module name parameters Byte 9 bis 24 Device ID TYPE setting for the LIN slave at position x on the SWIRE bus slave x 0x20 SWIRE DIL MTB OxFF OxFF Basic setting no slave
165. via the parameter setting 1 faulty A mismatch was determined in the PLC configuration check U AUXERR Voltage Ui If the Uauyerr parameter is activated Unuyerr will generate an error message as soon as the power supply goes below the level at which the function of the relays is not guaranteed 0 OK Contactor supply voltage is o k gt 20 VDC or diagnostics function has been deactivated via this parameter 1 Undervolta Contactor supply voltage is not o k ge 18 VDC Byte 3 4 TYPE Sx Device configuration slave x Info field for the individual indication of a configuration error as error message If the TYP nro Parameter is set with individual diagnostics the error is indicated in this bit field as soon as a PLC configuration check detects differing slave numbers types or position of an SWIRE slave 0 OK No configuration error is present and the slave is in data exchange mode or diagnostics function has been deactivated via the parameter setting 1 Incorrect No configuration error present and the slave is NOT in data exchange mode D301004 1211 BL20 Modbus TCP 5 63 Implementation of Modbus TCP Table 5 56 Designation Value Meaning Meaning of diagnostics data bits Byte 5 6 SDeppSX Communication slave x Info field for the individual indication of slave offline or slave diagnostics as error message The fault is indicated in this bit field if the parameter sett
166. y the default settings in the BL20 gateways The default IP address for the BL20 gateways is 192 168 1 xxx see also chapter 3 page 3 1 section IP address If necessary please adjust the IP address of the PLC PC or the network interface card D301004 1211 BL20 Modbus TCP Changing the IP address of a PC network interface card 6 2 Changing the IP address of a PC network interface card 6 2 1 Changing the IP address in Windows 2000 Windows XP The IP address is changed in the Control Panel in Network and Dial up Connections 1 Open the folder Local Area Connection and open the dialog Local Area Connection Properties via the button Properties in the dialog Local Area Connection Status 2 Mark Internet Protocol TCP IP and press the Properties button to open the dialog Internet Protocol TCP IP Properties Figure 6 1 gu Local Area Connection Properties q 2 x Local Area General Connection eneral Properties Connect using BI Intel 21140 Based PCI Fast Ethernet Adapter Configure Components checked are used by this connection M al Client for Microsoft Networks M 8 File and Printer Sharing for Microsoft Networks M Y Internet Protocol TCP IP Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in taskbar when connected 3 Activate Use the fo

BL20 - User manual for Modbus TCP (EN)

Contents

Download Pdf Manuals

Related Search

Related Contents