Home

Modicon M340 RTU - BMX NOR 0200 H Module - User Manual

1. X lt 45 gt Single command C_SC_NA_ X lt 46 gt Double command C_DC_NA_ X lt 47 gt Regulating step command C_RC_NA_ X lt 48 gt Set point command normalized value C_SE_NA_ X lt 49 gt Set point command scaled value C SE NB X lt 50 gt Set point command short floating point value C_SE_NC_ X lt 51 gt Bitstring of 32 bit C_BO_NA_ X lt 58 gt Single command with time tag CP56Time2a C_SC_TA_ X lt 59 gt Double command with time tag CP56Time2a C_DC_TA_ X lt 60 gt Regulating step command with time tag CP56Time 2a C_RC_TA_ X lt 61 gt Set point command normalized value with time tag C SE TA CP56Time2a X lt 62 gt Set point command scaled value with time tag CP56Time2a SE X lt 63 gt Set point command short floating point value with time tag C SE TC CP56Time2a X lt 64 gt Bitstring of 32 bit with time tag CP56Time2a C BO TA System information in monitor direction X lt 70 gt End of initialization M EI NA 1 System information in control direction X 100 Interrogation command C_IC_NA_ X 101 Counter interrogation command C CINA X 102 Read command C_RD_NA_ X lt 103 gt Clock synchronization command C_CS_NA_ X lt 105 gt Reset process command C RP NA X lt 107 gt Test command with time tag CP56Time2a C TS Parameter in control
2. RJ45 male connector 9 pin SUB D male connector 1 RXD 1 2 TXD 2 RXD 3 RTS 3 TXD 4 4 5 5 6 CTS 6 7 7 RTS 8 Ground 8 CTS Shielding 9 Shielding Connecting Cables and Accessories The table below shows the product references of the cables and adapters to be used according to the serial connector used by the external modem Serial Connector for Data Circuit Wiring terminating Equipment Nine pin SUB D female connector TCS MCN 3M4M3S2 cable 25 pin SUB D female connector TCS MCN 3M4M382 cable TSX CTC 09 adapter E100000000505 04 2014 77 Modem Communications How to work with External Modem Connection Disconnection After an external modem has been connected to a BMX NOR 0200 H module use the website to configure the module The main feature of the modem is the possibility to work in Permanent mode or in On Demand mode e Permanent mode the connection is automatically performed when the BMX NOR 0200 H module is on power On Demand mode the connection or disconnection is performed depending on the command register see page 73 Use the website to set a serial PPP connection NOTE Do not forget to configure the serial port via the Website when the external modem is connected to it NOTE GPRS MODEM does not support server mode Dialing In practice the Dial in Dial out depends of the module mode There are
3. 296 PLC Device Configuration 299 Data Editor Configuration 300 Urhg ld 301 Appendices 303 Appendix A 305 IEC 60870 5 101 Interoperability for 0200 as Master 306 IEC 60870 5 101 Interoperability for BMX NOR 0200 H as Slave 316 IEC 60870 5 104 Interoperability for NOR 0200 H as Client 326 IEC 60870 5 104 Interoperability for NOR 0200 as Server 335 DNP3 Interoperability for BMX NOR 0200 H as Master 344 DNP3 Interoperability for BMX NOR 0200 as Slave 355 Appendix Ethernet Language 5 369 B 1 Language Objects and IODDTs of Ethernet Communication 370 Language Objects and IODDTs of Ethernet Communication 371 Implicit Exchange Language Objects Associated with the Application Specific 2 372 Explicit Exchange Language Objects Associated with the Application Specific 2 373 B 2 Exchange Objects of Type T COM ETH BMX 375 Details of Implicit Exchange Objects of the IODDT Type T BM e qax Peres 376 Details of Explicit Exchange Objects of the IODDT Type ETH BMX eied ece
4. Access Control is Is Jes jis Ilis is is PLC bus Ethernet_NOR_1 The messaging configuration parameters are discussed in detail on the following pages 56 E100000000505 04 2014 Ethernet Communications Messaging Configuration Parameters Accessing Messaging Configuration Parameters Configuration parameters can be accessed in two areas on the Messaging tab screen e the Connection Configuration area e the Access Control area Connection Configuration Area The Connection Configuration area is used to e activate an access control utility e list the remote devices that can connect to the module according to a communication protocol Access Control The Access Control box is used to activate or deactivate control of remote devices that are attempting to open a TCP connection to the module The functionality depends on whether the box is checked or not e checked Access control management is activated and the Access column ofthe table is active no longer grayed out e The module can only communicate to the addresses entered in the 128 available spaces in the IP address column e With the module in client mode it can only connect to remote devices selected by the Access column in the Connection Configuration table e unchecked Access control management is inoperative and the Access column of t
5. Sometimes X Configurable as Only when reporting event data or When reporting event data or multi fragment messages Timeouts while waiting for Data link confirm None j Fixedat Variable Configurable Complete appl fragment X None j Fixedat Variable Configurable Application confirm None Fixedat Variable Configurable Complete appl response X Fixedat Variable Configurable Others Transmission delay configurable Select Operate arm time out configurable Need time interval configurable Unsolicited notification delay configurable Unsolicited response retry delay configurable Unsolicited offline intercal configurable Sends Executes control operations WRITE Binary outputs X Never Always Sometimes Configurable SELECT OPERATE Never X Always Sometimes Configurable DIRECT OPERATE Never X_ Always Sometimes Configurable DIRECT OPERATE NO ACK Never X Always Sometimes Configurable Count gt 1 X Never Always Sometimes Configurable Pulse on Never Always Sometimes Configurable Pulse off X Never Always Sometimes Configurable Latch on Never X_ Always Sometimes Configurable Latch off Never X Always Sometimes Configurable Qeue X Always Sometimes Configurable Clear queue X Never Always
6. Time Stamp None CP24 CP56 CP56 time stamp format for an event Type Buffer Setting Channel by All Channels specifies whether the buffer size is Channel configured by channel or not All Channels Max Event 1 65535 100 supported event count by channel Count in whole up to 100 000 events are supported Max Event 0 65535 1 supported event count by virtual Count n channel n CPU Reg Type AMW AMW status register type in CPU CPU Reg 0 32464 0 address of event status register in Address CPU Event Backup check box unchecked stores events in case of loss of power 242 100000000505 04 2014 Configuration with the Setup Web Pages IEC 60870 5 101 104 Master Client Predefined Master Commands The predefined master command of the IEC 60870 5 101 104 master contains these fields Command Status Meaning sc Yes Single point command C DC Double point command C RC Regulating step command C SE A Set point command normalized value C SE B Set point command scaled value C SE C Set point command short floating value C BO 32 bits Bit string command I Interrogation command CI Counter interrogation command C_RD Read command C CS Clock synchronization command C TS Test command C RP Reset process command NOTE When the C DC address does not received RTU master command its
7. Topic Page DNP3 Master DNP3 NET Client RTU Protocol Parameters 250 DNP3 Slave Server RTU Protocol Parameters 256 DNP3 Channel Configuration Over UDP 262 DNP3 Data Object Mapping Page and Table 266 DNP3 Data Object Mapping 281 DNP3 Event Queue Setting 286 DNP3 Master DNP3 Net Client 288 DNP3 Data Length amp Mapping Orientation 290 DNP3 Data Object Type Mapped to Unity Pro EDT DDT 291 E100000000505 04 2014 249 Configuration with the Setup Web Pages DNP3 Master DNP3 NET Client RTU Protocol Parameters Introduction Add a DNP3 NET master client in the communication setup by selecting DNP3 as Protocol Ethernet as Network Type and Master as Mode Channel Parameters Click Setup Parameters Channel0 Parameters Session Count 5 Advanced Parameters Parameter Value scope Default Description value Session Count 1 32 1 indicates the maximum session number on this channel 250 100000000505 04 2014 Configuration with the Setup Web Pages Configure the module s advanced parameters DNP3 NET Client Channel0 Parameters Advanced Parameters Rx Frame Size 292 Tx Frame Size 292 Rx Frame Timeout ms 15000 Confirm Mode NEVER Confirm Timeout ms 2000 Max Retries 13 Offline Poll Period ms 10000 First Char Wait ms 0 Rx Buffer Size 256 Rx Fragment S
8. IOA Data Count CPU Point Type CPU Point Address 1 1 AMW 0 Add ese 100000000505 04 2014 229 Configuration with the Setup Web Pages This figure shows the dialog box for configuring the M_SP data object mapping for IEC 101 104 server slave M_SP Single point information IOA Point Count CPU Register Type CPU Register Address Variable Name CPU Reg Mapping MW 0 Value only Background scan 3 Groups V Global E Groupt E Groups Group9 7 Group13 E Group2 Group6 E Group10 7 Group14 E Oylic data transmission E Group3 E Group Group11 7 Groupt5 E Group4 Group8 E Group12 7 Groupt6 This figure shows the dialog box for configuring the M_SP data object mapping for IEC 101 104 client master M_SP Single point information IOA Point Count CPU Register Type CPU Register Address Variable Name Store To CPU Event routing Channel Session Sector IOA T Background scan Groups V Global Group Groups Group9 F Group13 Value only lv None Group2 Groupe Group10 Group14 Cylic data transmission Group3 o Group7 T Group11 Group15 Group4
9. Type identification Cause of transmission D 9 gt E o g o o 7 AS o ex s 2 g ao Elo i 2 5 5 c c amp o o V S ele sls A 2 2522 5 c Sis 5 D 5 99 M c o E a 5 5 9 o 5 5 gt TER o Zio o oO ft mw 2 5 0 g mm Salal 5 5 gt 5 8 IS 95 95 SiS lt le gt ie e le 21212 2 552 lt 5 it 3 e lola Oa ele EJE 5 e 5 gt gt gt 515 E 5 caca rca Oc SIS sus x x x A lt lt lt ie ji 72 gt 5 5 1 2 3 4 5 6 7 8 9 10 11 12 13 20 36 37 41 44 45 46 47 lt 1 gt 1 X X X X X X 3 DP NA 1 X X X X X lt 5 gt 1 X X X X X X lt 7 gt M NA 1 X X X X E100000000505 04 2014 329 Interoperability 55 32efqo Jo sseippe uouiuoo UOISSIUISUEJ JO 9sne5 44 45 46 47 lt u gt A
10. 74 100000000505 04 2014 Modem Communications Modem Communication Error Codes Introduction In order to diagnose modem error codes are available in Modem Diagnostic Web page Error Codes The table below describes the modem communication error codes Value Bit Definition 00000100 hex 8 The phone index is not available in your phone list 00000200 hex 9 PPP is not enabled when PSTN GSM GPRS modem is set 100000000505 04 2014 75 Modem Communications Connecting External Modem RS232 General For an external modem the RTS and CTS pins are connected directly not crossed External modems are connected to a BMX NOR 0200 H module by a serial direct cable using an RS232 physical link BMX NOR 0200 H module works with many commercially available modems Application The illustration below shows how a modem is connected to a slave BMX NOR 0200 H module configured with PPP SCADA Master SS SS Modem Modem M340 RTU slave NOTE In case of a PPPoE configuration connect the modem on the Ethernet port of the BMX NOR 0200 H module 76 E100000000505 04 2014 Modem Communications RS 232 Serial Direct Cable The TCS MCN 3M4M3S82 serial direct cable has two connectors RJ45 male e Nine pin SUB D male The illustration below shows the pin assignment for a TCS MCN 3M4M3S2 serial direct cable
11. Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 41 2 16 Bit Analog Output 3 select 17 28 index 129 echo of Block 4 operate response request 5 direct op 6 dir op noack 41 3 short floating point 3 select 17 28 index 129 echo of Analog Output Block 4 operate response request 5 direct op 6 dir op noack 42 1 32 Bit Analog Output 1 read 06 no range or all 129 17 28 Event without Time 07 08 limited qty response index 130 unsol resp 42 2 16 Bit Analog Output 1 read 06 no range or all 129 17 28 Event without Time 07 08 limited qty response index 130 unsol resp 42 3 32 Bit Analog Output 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 42 4 16 Bit Analog Output 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 42 5 short floating point 1 read 06 no range or all 129 17 28 Analog Output Event 07 08 limited qty response index without Time 130 unsol resp 42 7 short floating point 1 read 06 no range or all 129 17 28 Analog Output Event 07 08 limited qty response index with Time 130 unsol resp
12. Ping You can test the routing between your module and another device through a PING request Step Action Comment 1 Enter the IP address of the device for which you want to test communications and press Ping Communication test E x Communication Test 192 168 2 33 Ping Time ms 2 Wait for the request to be processed This window appears Requesting Press ESC to interrupt the request 3 The COMMUNICATION window The COMMUNICATION window informs you that the exchange was successful COMMUNICATION successful 4 Press OK With the successful PING request a value appears in the ms field 172 100000000505 04 2014 Configuration and Debug with Unity Pro Debugging Parameters for TCP IP Utilities Address Information The debugging parameters for TCP IP utilities on the module debugging screen see Modicon M340 for Ethernet Communications Modules and Processors User Manual are grouped together in the Address information window Address information M Froma MAC Address 00 00 54 00 1D B7 se Address 192 168 1 100 Subnetwork mask 255 255 0 0 Gateway Address 0 0 0 0 This window displays the configuration of MAC Address IP Address Subnetwork mask Gateway Address E100000000505 04 2014 173 Configuration and Debug with Unity Pro 174 100000000505 04 2014 Chapter 13 Configuration with the Setup Web Pages
13. E100000000505 04 2014 253 Configuration with the Setup Web Pages Configure the module s advanced parameters DNP3 NET Client Channel1 Session0 5 Advanced Parameters Li ink Status Period ms 0 Auto Integrity Local iv Auto Integrity Timeout Auto Event Poll Auto Delay Measure Auto Time Sync None Auto Unsolicited None Auto Enable Unsol Class1 v Auto Enable Unsol Class2 9 Auto Enable Unsol Class3 v 0 Read Timeout Allowed Parameter Value scope Default Description value Link Status 0 4294967295 0 indicates the duration for sending link Period ms status requests if no DNP3 frames are received on this session Auto check box checked sends integrity data poll after the local ntegrity bit is set and cleared Local Auto check box checked sends integrity data poll on time out ntegrity Timeout Auto Event check box unchecked sends event data poll when class 1 2 or 3 Poll IIN bit is set Auto Delay check box unchecked indicates the usage of delay measurement Measure in time synchronization Auto Time None Serial LAN None performs time synchronization on required Sync time None no time sync Serial sync through serial link LAN sync through LAN 254 100000000505 04 2014 Configuration with the Setup Web Pages Allowed Parameter Value scope Default Descrip
14. 49jSueJ 13 20 36 37 41 44 45 46 47 pw jeso e Aq pesneo 12 pwo e Aq pasneo 11 10 uoneuuguoo uoneAnoeeq 9 uoneAnoeog 8 uoneuuguoo uoneAnoy X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X pejsenbai ysanbay pezijeniu snoeuejuodg ueos punoJBy eg 213 4 5 6 7 1 Type identification M ME TF M IT TB A C SC NA C DC NA C RC NA C SE C SE NB C SE NC C BO NA M EI NA 36 lt 37 gt lt 45 gt lt 46 gt lt 47 gt lt 48 gt lt 49 gt lt 50 gt lt 51 gt lt 70 gt lt 100 gt C IC lt 101 gt C CI NA lt 102 gt C RD lt 103 gt c CS lt 104 gt C TS lt 105 gt C RP NA lt 110 gt P ME NA lt 111 gt P ME NB lt 112 gt P ME NC lt 113 gt 100000000505 04 2014 312 Interoperability Basic Appl ication Functions Station initialization X Remote initialization Cyclic data transmission X Cyclic data transmission Read procedure X Read procedure Sp
15. Append file modes Yes X No Custom status code strings Yes X No Permissions field Yes X File events assigned to class Yes X No File events send immediately Yes X Multiple blocks in a fragment Yes X No Max number of files open 100000000505 04 2014 357 Interoperability DNP3 Implementation Table The following table identifies which object variations function codes and qualifiers BMX NOR 0200 H supports in both request messages and in response messages For static non change event objects requests sent with qualifiers 00 01 06 07 or 08 are responded to with qualifiers 00 or 01 Requests sent with qualifiers 17 or 28 are responded to with qualifiers 17 or 28 For change event objects qualifiers 17 or 28 are always responded to In the following table text in italic and underline indicates Subset Level 3 functionality beyond Subset Level 2 In the following table text in bold indicates functionality beyond Subset Level 3 Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 1 0 Binary Input 1 read 00 01 start stop Any Variation 06 no range or all 07 08 limited qty 17 27 28 index 1 1 default Binary Input 1 read 00 01 start s
16. 100000000505 04 2014 205 Configuration with the Setup Web Pages Parameter Value scope Default value Description Class 1 Polls Count 0 65535 10 indicates the maximum Class 1 polls to this session before next slave tried Class 1 Pending Delay ms 0 65535 For an unbalanced master the minimum delay before a Class request will be sent if an application layer response is pending for this session These parameters may be used to limit the bandwidth used Class 1 Poll Delay ms 0 4294967295 For an unbalanced master the minimum delay before a Class request will be sent These parameters may be used to limit the bandwidth used Class 2 Pending Delay ms 0 4294967295 500 For an unbalanced master the minimum delay before a Class request will be sent if an application layer response is pending for this session These parameters may be used to limit the bandwidth used Class 2 Poll Delay ms 0 4294967295 500 For an unbalanced master the minimum delay before a Class request will be sent These parameters may be used to limit the bandwidth used Sector Parameters IEC 101 Master Channel0 Session0 Sector0 Parameters Common ASDU Address 3 Advanced Parameters Click Setup 5Channelx IEC 101 Master Sessionx Sectorx Parameters Parameter Value scope Default Description value Comm
17. DNP3 Data object type Data length Unity Pro EDT DDT Protocol bits Binary Input 1 WORD master slave Double Input 2 WORD Binary Counter 32 DWORD Analog Input 32 DINT REAL Analog Input Deadband 32 DINT REAL Binary Input Time 1 WORD CP56 Double Input Time 2 WORD CP56 Binary Counter Time 32 DWORD CP56 Analog Input Time 32 DINT REAL CP56 Binary Input Flag 1 WORD WORD Double Input Flag 2 WORD WORD Binary Counter Flag 32 DWORD DWORD Analog Input Flag 32 DINT REAL DWORD Binary Input Flag Time 1 WORD WORD CP56 Double Input Flag Time 2 WORD WORD CP56 Binary Counter Flag Time 32 DWORD DWORD CP56 Analog Input Flag Time 32 DINT REAL DWORD CP56 Binary Output Status 1 WORD Binary Output Status Time 1 WORD CP56 Binary Output Status Flag 1 WORD WORD master Binary Output Status Flag Time 1 WORD WORD CP56 Binary Output Status Flag 8 WORD slave Analog Output Status 32 DINT REAL Analog Output Status Time 32 DINT REAL CP56 master slave Analog Output Status Flag 32 DINT REAL DWORD master Analog Output Status Time 32 DINT REAL DWORD CP56 100000000505 04 2014 291 Configuration with the Setup Web Pages Data object type Data length Unity Pro EDT DDT Protocol bits Analog Output Status Flag 8 WORD slave Binary Output Status 1 WORD WORD master Analog Output Status 32 DINT REAL DWORD Read Class Sta
18. UOISSIUISUEJ JO 44 45 46 47 1 lt u gt Aq lt gt Aq JojsueJ pw jeso e Aq pesneo e Aq pasneo uongeAgov 10 11 12 13 20 36 37 41 uoneuuguoo uoneAnoeeq uoneAnoeeg uoneuuguoo uoneAnoy X X X X X X X X X X X X X X X X X X X X X X X X pa senbai ysanbay pezijeniu snoeuejuodg ueos 112 3 4 5 6 7 8 9 Type identification Cause of transmission C SE C SE TB C SE TC C BO TA M EI NA _ E NB 61 62 63 64 lt 70 gt lt 100 gt C IC NA lt 101 gt C CI NA lt 102 gt C RD lt 103 gt C CS lt 105 gt C RP NA lt 110 gt lt 111 gt lt 112 gt lt 113 gt Basic Application Functions Station initialization Remote initialization Cyclic data transmission Read procedure Cyclic data transmission Read procedure 331 100000000505 04 2014 Interoperabilit
19. WARNING UNINTENDED OPERATION Apply password protection to limit access to the Data Editor Failure to follow these instructions can result in death serious injury or equipment damage 300 E100000000505 04 2014 Web Designer Configuration Transfer Transfer the Project Use the transfer function to transfer the project to the BMX NOR 0200 H module The transfer can run in two directions indicated by your selection in the Direction column of the Transfer Status dialog box You can transfer from the PC to the target or from the target to the PC amp Transfer Status Direction PC Direction Address IP Download BMX NOR 0200 7 192 168 2 65 Target Type NOR 0200 BMX NOR 0200 KR K HTML Version 1 0 1 0 KI Firmware Version 1 0 gi 1 0 K Web Designer Version 2 2 k 2 2 Selection Transfer Website Location Transfer Only Modified Flles Transfer rdt and gdt Files Transfer Configuration Files Transfer Cancel NOTE The Web Designer does not transfer or reset protocols Use the web interface of the BMX NOR 0200 H module E100000000505 04 2014 301 Web Designer Configuration 302 100000000505 04 2014 Appendices 5 Introduction These technical appendices supplement the information in this guide What Is in This Appendix The appendix contains the following chapters Chapter Chapter Name Page A Interoperability 305 B Etherne
20. 10 A to 15 F Tens value for the device name 100 110 120 150 Lower Switch 0 to 9 Ones value for the device name 0 1 2 9 BOOTP switch to A or to receive an IP address from a BOOTP server Stored Set the switch to C or D to use the application s configured stored parameters Clear IP Set the switch to E to use the default IP parameters Disabled Set the switch to F to disable communications 100000000505 04 2014 51 Ethernet Communications Deriving IP Parameters from the MAC Address Introduction If no IP parameters are received from the application when the rotary switch see Modicon M340 for Ethernet Communications Modules and Processors User Manual is set to Stored or Clear IP positions the module is configured at power up with its default IP address The default IP address for the module is derived from its hardware MAC address in accordance with a default IP address format Default IP Address Format The default IP address format is 84 x x x e 84 fixed value e x The last three fields in the default IP address are composed of the decimal equivalents of the last three hexadecimal bytes in the MAC address Example For example with the MAC address of 0000531201C4 you are concerned only with the last three bytes 12 01 C4 Convert these bytes from hexadecimal to decimal See the procedure below if you don t know how to
21. X Background scan Acquisition of transmission delay Acquisition of transmission delay E100000000505 04 2014 315 Interoperability IEC 60870 5 101 Interoperability for BMX NOR 0200 H as Slave Introduction The purpose of this document is to describe the specific implementation of the IEC 60870 5 101 within BMX NOR 0200 H as slave This document and the documents listed below provide detailed information on how to communicate with BMX NOR 0200 Has slave via the IEC 60870 5 101 protocol IEC 60870 5 101 Companion standard for basic telecontrol tasks IEC 60870 5 5 Basic Application Functions IEC 60870 5 2 Link Transmission Procedures IEC 60870 5 4 Definition and Coding of Application Information Elements IEC 60870 5 3 General Structure of Application Data IEC 60870 5 1 Transmission Frame Formats Interoperability This companion standard presents sets of parameters and alternatives from which you select subsets selected to implement particular telecontrol systems Certain parameter values such as the number of octets in the COMMON ADDRESS of ASDUs represent mutually exclusive alternatives This means that only one value of the defined parameters is admitted per system Other parameters such as the listed set of different process information in command and in monitor direction allow the specification of the complete set or subsets as appropriate for given applications This Clause sum
22. uoneuuguoo uoneAnoeeq uoneAnoeog uoneuuguoo uoneAnoy pa senbai 10 ysanbay pezijeniu snoeuejuodg ueos punoJBy eg 2 3 4 5 6 8 9 X X X oipoued 1 X X Type identification A A B M SP NA M SP TA M DP NA M DP TA M ST NA M ST M BO NA TA pom NB pom NC pom M BO M ME MM M ME M M M ME MM M IT NA TA M IT M SP TB M DP TB M ST TB M BO TB M ME TD M ME 1 2 3 4 5 6 T 8 9 10 11 12 13 14 lt 15 gt lt 16 gt lt 30 gt lt 31 gt lt 32 gt lt 33 gt lt 34 gt lt 35 gt 100000000505 04 2014 Interoperability Cause of transmission 55 32efqo Jo sseippe uouiuoo UOISSIUISUEJ JO 9sne5 uoneoynuopi X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X 19 UN09 lt u gt Aq Jequinu Aq
23. 100000000505 04 2014 157 How to Work with Embedded Web Pages Data Editor Data Editor Page Use the Data Editor to create variables animation tables These tables are animated to display the variable values Variables that can be written are accessible only by trained personnel password protect WARNING UNINTENDED OPERATION Apply password protection to limit access to the Data Editor Failure to follow these instructions can result in death serious injury or equipment damage From the Monitoring tab select the Data Editor link to view this screen C 85 6 x 2 2 G Rate 200 IP address 139 160 64 108 Empty Symbol Address Data type Value Format Status MW2 INT DECIMAL 4 test MW1 INT DECIMAL Symbol n Address Type gt Format Value Read only amp Apply Reset The data editor is dynamic Tables can be created on the Web Designer and transferred to the module or they can be directly created in the website by selecting variables from the namespace or user manual inputs Data Editor Lite The Data Editor Lite is similar to the Data Editor The Lite version has restrictions related to available data types and is dedicated to modem connection slow Ethernet connection It allows a faster download than with the data editor From the Monitoring tab select the Data Editor Lite link to view the screen 158 100000000505 04 2014 Part V Configuring the Module
24. 352 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 50 0 Time and Date 50 1 Time and Date 1 read 07 limited qty 1 129 07 limited response 1 2 write 07 limited qty 1 50 3 Time and Date Last 2 write 07 limited qty Recorded Time 51 1 Time and Date CTO 129 07 limited response qty qty 1 130 unsol resp 51 2 Unsynchronized Time 129 07 limited and Date CTO response qty qty 1 130 unsol resp 52 1 Time Delay Coarse 129 07 limited response qty qty 1 52 2 Time Delay Fine 129 07 limited response qty qty 1 60 0 Not Defined 60 Class 0 Data 1 read 06 no range or all 60 2 Class 1 Data 1 read 06 no range or all 07 08 limited qty 20 enbl 06 no range or all unsol 21 dsbl unsol 60 3 Class 2 Data 1 read 06 no range or all 07 08 limited qty 20 enbl 06 no range or all unsol 21 dsbl unsol 100000000505 04 2014 353 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec
25. gt 2 8 gie S 8 D 5 9 18 elo 55 elgsizz2 E 5 lt alala A 0 NN IQNIQNIQIQIQNIOQ E oe E24 bes Eie a Type identification M SP NA M DP NA NA NB NC M ST NA M BO NA M ME M ME M ME M IT NA M SP TB M DP TB M ST TB 1 3 5 T lt 9 gt lt 11 gt lt 13 gt lt 15 gt lt 30 gt lt 31 gt lt 32 gt 100000000505 04 2014 338 Interoperability Cause of transmission 55 yoafqo Jo sseippe uouiuoo UOISSIUISUEJ JO 9sne5 ed A X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X 1 19 UN09 lt u gt Aq Jequinu Aq 49jSUeJ 4 13 20 36 37 41 44 45 46 47 pw jeso e Aq pesneo 12 pwo e Aq pesneo uoneAgov 10 11
26. 1 read 00 01 start stop Any Variation 06 no range or all 07 08 limited qty 17 27 28 index 7 freeze 00 01 start stop 8 freeze 06 no range or all noack 07 08 limited qty 9 freeze clear 10 frz cl noack 20 1 32 Bit Binary 1 read 00 01 start stop 129 00 01 start stop Counter with 06 no range or all response 17 28 see Flag 07 08 limited qty note 2 17 27 28 index 20 2 16 Bit Binary 1 read 00 01 start stop 129 00 01 start stop Counter with 06 no range or all response 17 28 index see Flag 07 08 limited qty note 2 17 27 28 index 20 5 default 32 Bit Binary 1 read 00 01 start stop 129 00 01 start stop seenote Counter without 06 no range or all response 17 28 index see 1 Flag 07 08 limited qty note 2 17 27 28 index 20 6 16 Bit Binary 1 read 00 01 start stop 129 00 01 start stop Counter without 06 no range or all response 17 28 index see Flag 07 08 limited qty note 2 17 27 28 index 21 0 Frozen Counter 1 read 00 01 start stop Any Variation 06 no range or all 07 08 limited qty 17 27 28 index 21 1 32 Bit Frozen 1 read 00 01 start stop 129 00 01 start stop Counter with 06 no range or all response 17 28 see Flag 07 08 limited qty note 2 17 27 28 index 21 2 16 Bit Frozen 1 read 00 01 start stop 129 00 01 start stop Coun
27. Overview This chapter describes how to configure the following module parameters e serial port and Ethernet port parameters configuration modem parameters configuration e IEC 61508 5 101 104 DNP3 protocols parameters configuration What Is in This Chapter This chapter contains the following sections Section Topic Page 13 1 Web Site Configuration Common 176 13 2 Web Site Configuration IEC 201 13 3 Web Site Configuration DNP3 249 100000000505 04 2014 175 Configuration with the Setup Web Pages Section 13 1 Web Site Configuration Common What Is in This Section This section contains the following topics Topic Page Parameter Input Interface in Setup Web Pages Weg Channel Configuration 180 Serial Port Configuration 185 Ethernet Port Configuration 192 Time Zone Configuration 193 RTU Protocol Parameters 195 Module and Protocols Configuration File 196 RTU Protocol Service Reset 199 Upward Compatibility 200 176 100000000505 04 2014 Configuration with the Setup Web Pages Setup Page a Setup El Communication Channel Parameters El Modem Parameters E Serial Port Parameters E PPPoE Parameters El Channel EJ IEC 104 Server Parameters El Session 0 Parameters E Sector 0 Parameters Data Mapping Events Reset Communication Export Import files Security FTP Parameters Input O
28. datalogging A x SMTP server SMTP server address SMTP server port SMTP server port Login Password Sender Sender Reply address Module Maximum size of send queue Time before retry to send in seconds Service Service status variable E mails Properties This table describes the parameters on the Properties tab Field Parameter Description SMTP server SMTP server address This is the address of the SMTP server SMTP server port This is the TCP port used by the SMTP server generally port 25 Secure authentication Select this box if authentication is required to access the SMTP server Login This is the login for SMTP server access Password This is the password to access the SMTP server Sender This is the email address of the message sender Reply Address This is the email address to which a reply will be sent when you click Reply E100000000505 04 2014 131 How to Work with Email SMS Service Field Parameter Description Module Maximum size of send This is the maximum number of emails that can be stored in the buffer s queue memory before being sent Time before retry to send This is the delay before emails stored in the buffer memory are re sent in seconds after the detection of an undelivered email Service Service status variable Use this parameter to determine the status of the email service When the maximum number of mails is reach
29. uoneuuguoo uoneAnoeeg uoneAnoeog uoneuuguoo uoneAnoy X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X pejsenboi ysanbay pezijeniu snoeuejuodg ueos punoibyoeg 213 4 5 6 7 8 9 1 Type identification M ME TD M IT TB C SC NA C DC NA C RC NA C SE NA C SE NB C SE NC C BO NA C SC TA C DC TA C RC TA C SE C SE C SE M EI NA C BO TA 33 34 35 36 lt 37 gt lt 45 gt lt 46 gt lt 47 gt lt 48 gt lt 49 gt lt 50 gt lt 51 gt lt 58 gt lt 59 gt lt 60 gt lt 61 gt lt 62 gt lt 63 gt lt 64 gt lt 70 gt lt 100 gt C IC NA lt 101 gt C CI NA 339 100000000505 04 2014 Interoperability Type identification Cause of transmission D amp lt ao 0 5 x 5 2 96 B ols 2 g OQ a E o E lt 2 5 5 e Po E S c V 2 5 wie 5
30. 17 28 index see note 1 07 08 limited qty note 1 17 27 28 index 3 2 Double Bit Input 1 read 00 01 start stop 129 00 01 start stop with Status 06 no range or all response 17 28 index see 07 08 limited qty note 1 17 27 28 index 4 0 Double Bit Input 1 read 06 no range or all Change Any 07 08 limited qty Variation 4 1 Double Bit Input 1 read 06 no range or all 129 17 28 index Change without 07 08 limited qty response Time 130 unsol resp 4 2 Double Bit Input 1 read 06 no range or all 129 17 28 index Change with 07 08 limited qty response Time 130 unsol resp 4 3 default Double Bit Input 1 read 06 no range or all 129 17 28 index see Change with 07 08 limited qty response note 1 Relative Time 130 unsol resp 10 0 Binary Output 1 read 00 01 start stop Any Variation 06 no range or all 07 08 limited qty 17 27 28 index 10 1 Binary Output 1 read 00 01 start stop 129 00 01 start stop 06 no range or all response 17 28 index 07 08 limited qty note 1 17 27 28 index 1 read 00 01 start stop 100000000505 04 2014 359 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier
31. 2003 10 01 03 48 08 plc plcl height 140 plc plcl length 150 plc plcl width 30 2003 10 01 04 55 10 plc plcl height 220 plc plcl length 280 plc plcl width 80 2003 10 01 06 01 05 plc plcl height 170 plc plcl length 220 plc plcl width 60 Example of an optimized log file Date plc plcl height plc plcl length plc plcl width 2003 10 01 02 44 55 150 200 50 2003 10 01 03 48 08 140 150 30 2003 10 01 04 55 10 220 280 80 2003 10 01 06 01 05 170 220 60 E100000000505 04 2014 125 How to Work with Datalogging Service Recommendation on Datalogging Service Size of the Log File The following table shows you an estimation of the log file size in bytes depending on the number of variables logged and the number of logs Number of logs Number of variables 1 2 5 10 20 50 100 1 65 110 245 470 920 2270 4520 130 220 490 940 1840 4540 9040 325 550 1225 2350 4600 11350 22600 10 650 1100 2450 4700 9200 22700 45200 20 1300 2200 4900 9400 18400 45400 90400 50 3250 5500 12250 23500 46000 113500 226000 100 6500 11000 24500 47000 92000 227000 452000 126 100000000505 04 2014 Chapter 9 How to Work with 5 5 Service Introduction This chapter describes the Email SMS Service and explains how to configure it What Is in This Chapter This chapter contains the following topics Topic Page About the Email Service SMS Service 128 Create an
32. 344 100000000505 04 2014 Interoperability Parameter Description When reporting Event Data When sending multi fragment responses Sometimes Configurable Timeouts while waiting for Data link confirm None Fixed at Variable X Configurable Complete appl fragment X None Fixed at Variable Configurable Application confirm X None Fixed at Variable Configurable Complete appl response X None Fixed at Variable Configurable Sends Executes control operations WRITE Binary outputs Never Always Sometimes Configurable SELECT OPERATE Never Always Sometimes Configurable DIRECT OPERATE Never Always Sometimes Configurable DIRECT OPERATE NO ACK Never Always Sometimes Configurable Count gt 1 X Never Always Sometimes Configurable Pulse on Never Always Sometimes Configurable Pulse off Always Sometimes Configurable Latch on Never Always Sometimes Configurable Latch off Never Always Sometimes Configurable Qeue X Always Sometimes Configurable Clear queue X Always Sometimes Configurable Expects binary input change events Either time tagged or non time tagged for a single event X Both time tagged and non tagged for single event
33. An IEC command status register contains these fields Status Value Description 0 The command has completed successfully 1 A response was received but the requested command is not yet complete 2 The command did not transmit as expected 3 The command has timed out 4 The command has been canceled 244 100000000505 04 2014 Configuration with the Setup Web Pages IEC Data Length amp Mapping Orientation IEC 60870 5 101 104 Only data object values are mapped The quality descriptors for monitoring direction data object and qualifier for control direction data object are not mapped Data object type Data length Orientation Availability bits Master Slave Server 101 104 M_SP 1 Mod gt CPU CPU gt Mod x x M_DP Mod gt CPU CPU gt Mod X x M ST 8 Mod CPU CPU gt Mod x x M_BO 32 Mod gt CPU CPU gt Mod x x M ME A 16 Mod CPU CPU Mod x x M ME B 16 Mod CPU CPU Mod X x M 32 Mod gt CPU CPU gt Mod X x M IT 32 Mod CPU CPU Mod X x C SC 1 CPU Mod Mod CPU x x C RC 2 CPU Mod Mod gt CPU x x C SE A 16 CPU Mod Mod CPU x x C SE B 16 CPU gt Mod Mod CPU x x C SE C 32 CPU gt Mod Mod CPU x x C_BO 32 CPU gt Mod Mod gt CPU x x C IC 16 CPU Mod na x x C CI 16 CPU Mod na x x C_RD 16 CPU gt Mod na X x C CS
34. Configurable Sequential file transfer support Append file modes Yes X No Custom status code strings Yes X No Permissions field Yes X No File events assigned to class Yes X File events assigned poll specifically Yes X Multiple blocks in a fragment Yes X No Max number of files open 100000000505 04 2014 345 Interoperability DNP3 Implementation Table The following table identifies the variations function codes and qualifiers supported by the BMX NOR 0200 H as master in both request messages and in response messages In the following table text in italic and underline indicates Subset Level 3 functionality beyond Subset Level 2 In the following table text in bold indicates functionality beyond Subset Level 3 Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 1 0 Binary Input Any 1 read 00 01 start stop Variation 06 no range or all 1 1 Binary Input 1 read 00 01 start stop 129 00 01 start 06 no range or all response stop 1 2 Binary Input with 1 read 00 01 start stop 129 00 01 start Status 06 no range or all response stop 2 0 Binary Input Change 1 read 06 no range or all Any Variation 07 08 limited qty 2 1 Binary In
35. Group8 Group12 7 Group16 230 100000000505 04 2014 Configuration with the Setup Web Pages Mapping Table Depending on the data object type and the selected protocol profile different configuration fields are required to define a data object mapping item This table describes the parameters Title Value scope Default Description value IOA 1 16777215 1 indicates the Information Object Address of the object Point Count 1 5000 1 indicates the number of objects defined The IOA of each object is in sequence from the first object address CPU Register Type M MW Unlocated MW indicates the register type in CPU to map points CPU Register Address 0 30000 0 indicates start address of the register in CPU field only taken into account for located variables Variable Name indicates the variable name of located or unlocated register Store To CPU Value only Value only indicates the choice if the store time follows the Value with time value in the CPU registers Value with quality Value with quality and time CPU Reg Mapping Value only Value only choice the event time stamp source Value with time module use the module time as time stamp of Value with flag event Value with flag and CPU regs use the time stamp in CPU registers time Event routing Channel None 0 1 None indicates the channel number to route Session 0 0 indicates
36. Sometimes Configurable Attach explanation if Sometimes or Configur able was checked for any operation Reports Binary Input Change Events when no specific variation requested Reports time tagged Binary Input Change Events when no specific variation requested Never Never Only time tagged Binary Input Change with time Only non time tagged Binary Input Change with relative time X Configurable to send one or the other X Configurable Sends unsolicited responses Sends static data in unsolicited responses Never X Never 356 100000000505 04 2014 Interoperability Parameter Description Configurable When device restarts Only certain objects When status flags change Sometimes attach explanation X ENABLE DISABLE UNSOLICITED function codes supported No other options are permitted Default counter object variation Counter roll over at No counters reported No counters reported Configurable Configurable attach explanation Default object 16 Bits Default variation X 32 Bits Point by point list attached Other value Point by point list attached Sends Multi Fragment responses Yes No Configurable Sequential file transfer support
37. pio REIR EHI CIPIT Pod d 377 Details of Explicit Exchange Objects of the Non IODDT Type T COM ETH BMX 379 B 3 Language Objects Associated with BMX NOR 0200 H Module cee es 380 Language Objects for Implicit 381 Language Objects for Explicit 382 Glossary Ris RREREECERERBRARRRERE dss 385 INDEX ge RA Xu be E ESOS 395 2100000000505 04 2014 7 100000000505 04 2014 Safety Information G Important Information NOTICE Read these instructions carefully and look at the equipment to become familiar with the device before trying to install operate or maintain it The following special messages may appear throughout this documentation or on the equipment to warn of potential hazards or to call attention to information that clarifies or simplifies a procedure The addition of this symbol to a Danger safety label indicates that an electrical hazard exists which will result in personal injury if the instructions are not followed hazards Obey all safety messages that follow this symbol to avoid possible injury or death A DANGER DANGER indicates an imminently hazardous situation which if not avoided will result in death or serious injury This is the safety alert symbol It is used to alert you to potential personal injury A WARNIN
38. timer To trigger logging of variables configure an event in the Use of a trigger timer variable This event is either a periodic event use of a timer in which case you need to set a time base an event associated with a variable use of a trigger in which case you need to provide the name of this variable for example plc DeviceO Pressure1 NOTE Select the type of trigger in the drop down menu Erase on restart Selecting this check box deletes the table log files on restart of the module Erase Table on Selecting this check box removes the previous logs in the table after backup so the Backup table restarts empty Timestamp Selecting this box records in the log file Timestamp hour and date for each event Note Timestamps are mandatory if you want to use the log file for a Datalogging History Optimized log Selecting this box compacts the log file format see page 125 of the csv file In this format case the variable name does not appear in each record Maximum record number Configures the maximum of records that can be stored in a log file If that number is reached new records overwrite old records 122 100000000505 04 2014 How to Work with Datalogging Service Log Variables Parameters Fields Function Log variables The variable name part lists the variables PLC devices or Calculation variables that are stored in the log fil
39. 152 NTP see page 150 Upload MIB file see page 154 Modem See the description for the PPP Modem and PPPoE Statistics Page see page 153 Clock See the description for the RTU Connection and Clock Diagnostics see page 157 Memory See the description for the System Memory Statistics Page see page 153 Properties See the description for the Properties Diagnostics see page 155 146 100000000505 04 2014 How to Work with Embedded Web Pages PLC Rack Viewer Page Introduction The Rack Viewer page allows you to carry out diagnostics on the modules in the local rack configuration that includes the BMX NOR 0200 H module Click the module in the configuration to obtain a set of diagnostic information on this module e LED status display module type and the version of the module and its rack position e information that is specific to module functions Rack Viewer Page Follow these steps to access the rack display page from the Home page Step Action 1 Click the Diagnostics link 2 Click the Rack Viewer link The rack display page appears RACK VIEWER E100000000505 04 2014 147 How to Work with Embedded Web Pages Leds Rack 0 Product Range M340 RUN Slot 1 Trade Type Communication ERR Module State Ok Product Type Ethernet Reference Present BMX NOR 0200 Reference Configured BMX NOR 0200 Version 1 5 Parameters IP Address 139 160 64 108 IP Addr
40. 3 Protocol exit Unity Pro Ethernet configuration resets RTU communication through Web site RTU protocol cold warm restart Does not save events when the protocol exits 100000000505 04 2014 107 How to Work with RTU Protocols Signature Authentication Signature authentication is required when events are restored from the Flash memory It checks if the protocol configuration has changed during the power loss and restore If the signature of the XML configuration is different from the record in the Flash all the events are deleted directly NOTE The signature changes if the parameters of the channel session sector or Network Type IP Port Start Reg Addr Connection Count have changed The Modem PPPoE Serial Port Time Zone do not have an effect on the signature Limitations If the events number to save exceeds the size of the Flash memory the BMX NOR 0200 H module saves only the latest events 108 E100000000505 04 2014 How to Work with RTU Protocols Section 7 5 Integrity Poll Command Integrity Poll Command Introduction Command DNP3 and Integrity Poll Integrity poll retrieves all event class 123 and static Class 0 data from the device It is typically sent after device restart loss of communication or on a periodic basis to check data accuracy Command IEC and General Interrogation The General Interrogation command retrieves all or a specified group of static data It is typic
41. 5 A ES See 3 ES EF EERE D elu b 15 S j S 9 5 2 o S S 5 5 S o 5 gt 5 4 D S 5 G E 9 5 PES 59553 52558 58 ESS 2 2 le 5 p GI c c G 9o 2 9 EE 2 2 2 le2ls te ls S o oO Q o E lt lt lt je ji a 15 112 3 4 5 6 7 8 9 10 11 12 13 20 36 37 41 44 45 46 47 1022 C RD X X X X X lt 103 gt C CS NA X X X X X X X 105 C RP NA X X X X X lt 107 gt C TS TA X X X X X X lt 110 gt P ME NA X X X X X X X lt 111 gt P ME NB XIX X X X X X lt 112 gt ME NC X X X X X X X 113 P AC NA X X X X X X X X Basic Application Functions Station initialization X Remote initialization Cyclic data transmission X Cyclic data transmission Read procedure X Read procedure Spontaneous transmission X Spontaneous transmission Double transmission of information objects with cause of transmission spontaneous Single point information Double point information Step position information 340 100000000505 04 2014 Interoperability Bitstring of 32 bit Measure value normalized value
42. C DC NA C SE NA C SE NB C SE NC C BO NA M EI NA 35 36 lt 37 gt lt 45 gt lt 46 gt lt 47 gt lt 48 gt lt 49 gt lt 50 gt lt 51 gt lt 70 gt lt 100 gt C IC NA 101 CI NA 102 C RD NA 103 C CS NA 104 C TS lt 105 gt C RP NA 106 C CD NA 110 P ME NA 111 ME NB 112 ME NC 113 AC NA 100000000505 04 2014 322 Interoperability Basic Application Functions Station initialization X Remote initialization Cyclic data transmission X Cyclic data transmission Read procedure X Read procedure Spontaneous transmission X Spontaneous transmission Double transmission of information objects with cause of transmission spontaneous Double point information Step position information Bitstring of 32 bit Measure value normalized value Measure value scaled value Measure value short floating point number Station interrogation X Global X Group 9 X Group1 Group 10 X Group 2 X Group 11 X Group 3 Group 12 X Group 4 X Group 13 X Group 5 Group 14 X Group 6 Group 15 X Group 7 X Group 16 X Group 8 Clock synchronization Clock synchronization Day of w
43. The BMX NOR 0200 H module uses serial link e as master in case of communication with several slaves with serial RTU protocols e as slave when the module is directly linked with master or a supervisor SCADA for example Master case M340 RTU Master la M340 RTU slave Other RTU equipment M340 RTU slave slave Slave case SCADA Master PUT fer M340 RTU slave M340 RTU slave d 100000000505 04 2014 67 Serial Communications RS 232 Serial Crossover Cable The TCS MCN 3M4F3C2 serial crossover cable has two connectors RJ45 male e Nine pin SUB D female The illustration below shows the pin assignment for a TCS MCN 3M4F3C2 serial cross cable RJ45 male connector 9 pin SUB D female connector 1 RXD 1 2 TXD 2 RXD 3 RTS 3 TXD 4 4 5 5 Ground 6 CTS 6 7 7 _RTS 8 Ground 8 CTS Shielding 9 Shielding Connecting Cables and Accessories The table below shows the product references of the cables and adapters to be used according to the serial connector used by the equipment Serial Connector for Data Terminal Wiring Equipment Nine pin SUB D male connector TCS MCN 3M4F3C2 cable 25 pin SUB D male connector TCS MCN 3M4F3C2 cable TSX CTC 07 adapter TCS MCN 3M4F3C2 cable TSX CTC 10 adapter 25 pin SUB D female connector 68 E10000000050
44. Transmission Frame Formats Interoperability This companion standard presents sets of parameters and alternatives from which you select subsets to implement particular telecontrol systems Certain parameter values such as the number of octets in the COMMON ADDRESS of ASDUs represent mutually exclusive alternatives This means that only one value of the defined parameters is admitted per system Other parameters such as the listed set of different process information in command and in monitor direction allow the specification of the complete set or subsets as appropriate for given applications This Clause summarizes the parameters of the previous Clauses to facilitate a suitable selection for a specific application If a system is composed of equipment stemming from different manufacturers it is necessary that all partners agree on the selected parameters The selected parameters are marked as follows Function or ADSU is not used X Function or ADSU is used System or Device System definition X Controlling station definition master Controlled station definition slave Network Configuration X Point to point X Multipoint part line X Multi point to point X Multipoint star 306 100000000505 04 2014 Interoperability Physical Layer Transmissi
45. g32v1 32bit Analog In No Time g32v2 16bit Analog In No Time 932v3 32bit Analog In With Time g32v4 16bit Analog In With Time g32v5 Short Float Al No Time g32v7 Short Float Al With Time Analog Output g42v1 32bit Analog Out No Time g42v2 16bit Analog Out No Time g42v3 32bit Analog Out With Time g42v4 16bit Analog Out With Time g42v5 Short Float AO No Time g42v7 Short Float AO With Time 284 100000000505 04 2014 Configuration with the Setup Web Pages This figure shows the data type Analog Input Point Number Point Count CPU Register Type CPU Register Address Variable Name Event Class Mask 1 1 MW 0 Class0 Class1 Class2 M Class3 Deadband 0 0 CPU Reg Mapping Value only Default Static Variation 930 32bit Analog 930v1 32bit Analog Ine Default Event Variation 9302 16bit Analog In 93073 16bit Al No Flag 93074 32bit Al No Flag 930v5 Short Float Al 100000000505 04 2014 285 Configuration with the Setup Web Pages DNP3 Event Queue Setting Event Queue Setting Page This figure shows the dialog box for configuring the event queue setting for an item with the example data type Binary_Input for DNP3 slave server Setup E Communication Channel Parameters Modem Parameters Modem GSM Phone List 5 Port Parameters EIPPPoE Parameters TimeZone Parame
46. response note 1 without Time 130 unsol resp 22 2 16 Bit Counter 1 read 06 no range or all 129 17 28 index Change Event 07 08 limited qty response without Time 130 unsol resp 22 5 32 Bit Counter 1 read 06 no range or all 129 17 28 index Change Event 07 08 limited qty response with Time 130 unsol resp 22 6 16 Bit Counter 1 read 06 no range or all 129 17 28 index Change Event 07 08 limited qty response with Time 130 unsol resp 23 0 Frozen Counter 7 read 06 no range or all Event Variation 07 08 limited qty 0 is used to request default variation 362 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 23 1 default 32 Bit Frozen 1 read 06 no range or all 129 17 28 index see Counter Event 07 08 limited qty response note 1 130 unsol resp 23 2 16 Bit Frozen 1 read 06 no range or all 129 17 28 index Counter Event 07 08 limited qty response 130 unsol resp 23 5 32 Bit Frozen 1 read 06 no range or all 129 17 28 index Counter Event 07 08 limited qty response with Time 130 unsol resp 23 6 16 Bit Frozen 1 read 06 no range or all 129 1
47. 1 session for each slave server up to 5000 point database for slaves data objects including predefined commands DNP3 slave DNP3 NET server up to 5000 point database for data type objects up to 100 000 event queue for all data types supports clock synchronization from a master Service over client IP address validation list up to 10 IP addresses TCP 4 concurrent client connections with configurable TCP service port default port is 20000 Interoperability Lists This implementation of DNP3 is fully compliant with DNP3 Subset Definition Level 3 which suits larger RTU applications and offers practically the complete range of DNP3 functionality This standard defines interoperability between devices from different vendors It includes a device profile that describes the basic protocol functionalities supported by the device and an Implemen tation table that defines information objects and their representation supported by the device E100000000505 04 2014 91 How to Work with RTU Protocols Section 7 2 Clock Synchronization Overview The BMX NOR 0200 H module provides 2 ways to synchronize the clock with the SCADA master and the connected devices e via the RTU protocol facilities e via the NTP protocol NOTE These clock synchronization methods are independent of one another Configure your application to avoid clock synchronization conflicts The clock synchronization servi
48. 100 bit s 2400 bit s X 2400 bit s 200 bit s X 4800 bit s X 4800 bit s X 300 bit s X 9600 bit s X 9600 bit s X 600 bit s X 19200 bit s X 1200 bit s X 38400 bit s 56000 bit s 64000 bit s Link Layer Frame format FT 1 2 single character 1 and the fixed time out interval are used exclusively in this companion standard When using an unbalanced link layer the following ASDU types are returned in class 2 messages low priority with the indicated causes of transmission Link transmission procedure Address field of link x Balance transmission Not present balanced transmission only x Unbalance transmission X One octet Two octets Structured Unstructured 100000000505 04 2014 317 Interoperability Application Layer Frame length 255 Maximum frame length L control direction 255 Maximum frame length L monitor direction Configurable Time during which repetitions are permitted Trp or number of repetitions X The standard assignment of ASDUs to class 2 messages is used as follows Type identification Cause of transmission 9 11 13 21 1 X A special assignment of ASDUs to class 2 messages is used as follows Type identification Cause of transmission 1 3 5 7 9 11 13 20 21 110 111 112 2 Transmission mode for application data Mode 1 least
49. 201 IEC 60870 5 101 Master RTU Protocol Parameters 202 IEC 60870 5 101 Slave RTU Protocol Parameters 209 IEC 60870 5 104 Client RTU Protocol Parameters 217 IEC 60870 5 104 Server RTU Protocol Parameters 222 IEC Data Object Mapping Page and Table 229 IEC Data Object Mapping 239 IEC Event Queue 241 IEC 60870 5 101 104 243 IEC Data Length amp Mapping Orientation 245 IEC Data Object Type Mapped to Unity Pro EDT DDT 246 13 3 Web Site Configuration 249 DNP3 Master DNP3 NET Client RTU Protocol Parameters 250 DNP3 Slave Server RTU Protocol Parameters 256 DNP3 Channel Configuration Over UDP 262 DNP3 Data Object Mapping Page and Table 266 DNP3 Data Object 281 100000000505 04 2014 DNP3 Event Queue 286 DNP3 Master DNP3 Net 288 DNP3 Data Length amp Mapping Orientation 290 DNP3 Data Object Type Mapped to Unity Pro EDT DDT 291 Chapter 14 Web Designer 295 Create a
50. 334 100000000505 04 2014 Interoperability IEC 60870 5 104 Interoperability for BMX NOR 0200 H as Server Introduction The purpose of this document is to describe the specific implementation of the IEC 60870 5 104 within BMX NOR 0200 H as server This document and the documents listed below provide detailed information on how to communicate with BMX NOR 0200 Has server via the IEC 60870 5 104 protocol IEC 60870 5 104 Companion standard for IEC 60870 5 101 over TCP IP IEC 60870 5 101 Companion standard for basic telecontrol tasks IEC 60870 5 101 A2 Addendum 2 for IEC 60870 5 101 IEC 60870 5 5 Basic Application Functions IEC 60870 5 4 Definition and Coding of Application Information Elements IEC 60870 5 3 General Structure of Application Data Interoperability This companion standard presents sets of parameters and alternatives from which you select subsets to implement particular telecontrol systems Certain parameter values such as the choice of structured or unstructured fields of the INFORMATION OBJECT ADDRESS of ASDUs represent mutually exclusive alternatives This means that only one value of the defined parameters is admitted per system Other parameters such as the listed set of different process information in command and in monitor direction allow the specification of the complete set or subsets as appropriate for given applications This Clause summarizes the parameters of the previous Clauses to facilitate
51. Binary Input cleared on demand Double Input Binary Counter Analog Input Binary Output Analog Output Channel 0 255 255 all the specifies the channel number to clear it depends Number channels on channel configuration CPU Register 3MW SMW indicates the register type in the CPU to map Type points to only the MW type is supported CPU Register 0 32464 0 indicates the start address of the register in the Address CPU Effective for the located variables only Variable indicates the name of the located register Name 280 100000000505 04 2014 Configuration with the Setup Web Pages DNP3 Data Object Mapping Introduction Depending on the data object type and protocol profile selection different configuration fields are used in the definitions of different data object mapping items Exchangeable M340 CPU Data Object Located and unlocated variables can both be exchanged between the M340 CPU and the BMX NOR 0200 H module after you have defined and managed the memory map of the M340 CPU to exchange data with the module The M340 CPU data objects are mapped and only linked for the BMX NOR 0200 H module purpose A WARNING UNINTENDED EQUIPMENT OPERATION Do not create an instance of redundant data access Failure to follow these instructions can result in death serious injury or equipment damage Data Exchanging Performance To sustain a high rate of data exc
52. Channe1 at 0 Default Event g2v1 Binary Input g2v1 Binary indicates the default event variation for data point Variation No Time Input No Time 100000000505 04 2014 269 Configuration with the Setup Web Pages Configuring Unsolicited Response The BMX NOR 0200 H supports unsolicited messages to be sent out immediately once events are recorded Configuration of Unsolicited Binary_Input Point Number Point Count CPU Register Type CPU Register Address Variable Name Event Class Mask CPU Reg Mapping Default Static Variation Default Event Variation x 0 MW 0 7 0 Classi Class2 7 Class3 Unsolicited Value only 91 1 Binary In g1v1 Binary Input Tin To check the Unsolicited parameter you must have another Even Class Mask parameter other than class 0 selected The Unsolicited parameter can be configured for Binary Input Double Input Double Input Binary Countand Analog Input Server Unsolicited with routing points Client Binary_Input Point Number Point Count CPU Register Type CPU Register Address Variable Name Store To CPU Static Variation Event routing Channel Session Point number Event Class Mask Default Event Variation x 0 5 10000 rout_bin_class1 Value only v Binary In u un 0 v _____ V Class0 V Class1 Class2 Class3 Unsolicited g2v2 Bina
53. Description Select 0 4294967295 Timeout_ ms 50000 selection is timed out 0 4294967295 6000 specifies the period after which a previously received Default Response Timeout Responses that are no longer relevant are removed from queue For example if the master is turned off before a response is acknowledged and then the master is restarted later this timeout value will be used to delete old responses ACTTERM with CSE Setpoint check box checked specifies if ACT TERM is transmitted upon completion of the set point commands 226 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default value Description ACTTERM with check box checked specifies if the ACT TERM is sent upon completion of Command commands other than the set point commands Clock Valid 0 4294967295 86400000 specifies the period for which the system clock remains Period ms valid after a clock synchronization If this period expires without a clock synchronization all times will be reported invalid Send Clock check box unchecked controls if the spontaneous clock synchronization events Sync Events are sent to the master Max Command 1000 600000 30000 indicates the maximum time delta at which commands are Age ms accepted Delete check box unchecked specifies if the oldest event is removed from the event Oldest Event queue wh
54. M SP Quality Time 1 WORD WORD M DP Quality Time WORD WORD CP56 M ST Quality Time WORD WORD CP56 BO Quality Time 32 DWORD DWORD CP56 M ME A Quality Time 16 INT WORD CP56 M ME B Quality Time 16 INT WORD CP56 M ME C Quality Time 32 REAL DWORD CP56 M IT Quality Time 32 DINT DWORD CP56 master slave 100000000505 04 2014 247 Configuration with the Setup Web Pages Data object type Data length bits Unity Pro EDT DDT Protocols C SC 1 WORD slave C DC 2 WORD C RC 8 WORD C SE A 16 INT C SE B 16 INT C SE C 32 REAL C BO 32 DWORD C SC Status 1 WORD WORD master C DC Status 2 WORD WORD C RC Status 8 WORD WORD C SE A Status 16 INT WORD C SE B Status 16 INT WORD C SE C Status 32 REAL DWORD C_BO Status 32 DWORD DWORD C IC Status 16 WORD WORD C_CI Status 16 WORD WORD C_RD Status 16 WORD WORD C CS Status 16 WORD WORD C TS Status 16 WORD WORD C_RP Status 16 WORD WORD A Status 16 WORD WORD P Status 16 WORD WORD Status 32 REAL DWORD P AC A Status 16 WORD WORD NOTE The DDT format CP56 is derived from IEC60870 5 4 248 100000000505 04 2014 Configuration with the Setup Web Pages Section 13 3 Web Site Configuration DNP3 What Is in This Section This section contains the following topics
55. Received number of messages received from this connection Error Sent error number on this connection E100000000505 04 2014 149 How to Work with Embedded Web Pages NTP Diagnostics NTP Diagnostic Page Use the NTP link on the Diagnostics page to access NTP information NTP Status Status Operational NTP Server Status Linked to NTP server Server address 139 160 65 133 Server Primary NTP Request Statistic NTP requests 2 NTP errors 0 NTP responses 2 Last error 0 NTP Date and Time Date 12 Apr 2010 Time 15 32 15 DST status ON Time zone GMT 01 00 Romance Standard Time Amsterdam CopenHagen Madrid Paris Vilnius Links This page displays the information related to the NTP service e NTP Status The service is correctly configured NTP Server Status This field indicates if the NTP client is connected to the NTP server and if the server is primary or redundant NTP requests This is the total number of client requests sent to the NTP server NTP responses This is the total number of server responses sent from the NTP server NTP errors This is the total number of NTP request that did not get a response Last error This is the last detected error code received by the NTP client Date This is the date format D M Y Time This is the time Time zone This is the time zone according to UTC DST status This is the daylight saving time Error Codes Code Description The component is OK and i
56. The OSI reference model is the abstract seven layer model for establishing logical communications and protocol design The model was developed by the International Standards Organization ISO P packet The unit of data sent across a network PING packet Internet groper PING program tests communications to another network destination PL7 PL7 software from Telemecanique is a programming language for TSX Micro and Modicon Premium PLCs PLC programmable logic controller The PLC is the brain of an industrial manufacturing process It automates a process as opposed to relay control systems PLCs are computers suited to survive the harsh conditions of the industrial environment E100000000505 04 2014 391 Glossary port 502 TCP IP reserves specific server ports for specific applications through IANA Internet Assigned Numbers Authority Modbus requests are sent to registered software port 502 private MIB PUB router RTU Schneider has obtained a private MIB groupeschneider 3833 Under the Groupe Schneider private MIB is a Transparent Factory Ethernet TFE private MIB The Transparent Factory SNMP embedded component controls the Schneider private MIB function This MIB includes a set of data that enables the network management system to supervise all the Transparent Ready services The Transparent Ready private MIB can be downloaded from the Web server A Global Data variable that is published R A router
57. eSession Parameters IEC 101 Master Channel0 Session0 Parameters Sector Count 1 Data Link Address 3 CAA Size 2 IOA Size 2 COT Size 1 Advanced Parameters 204 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default Description value Sector Count 1 5 1 indicates the sectors for this session Data Link 0 65535 3 specifies octets for data link address Address CAA Size 1 2 2 specifies octets for common address of Application Specific Data Unit IOA Size 1 3 2 specifies octets of IOA COT Size 1 2 1 specifies octets of COT Configure the module s advanced parameters IEC 101 Master Channel0 0 a Parameters Advanced Parameters Originator address for COT 1 Default Response Timeout ms 60000 C1 C2 Pending Count 25 Class 1 Poll Count 10 Class 1 Pending Delay ms 0 Class 1 Poll Delay ms 0 Class 2 Pending Delay ms 500 Class 2 Poll Delay ms 500 Parameter Value scope Default Description value Originator address for COT 0 255 1 specifies the originator address for COT if COT length 2 Default Response Timeout ms 0 4294967295 60000 indicates the default timeout for the confirmation of request C1 C2 Pending Count 0 65535 10 indicates Class 1 and 2 polls when an application layer response is pending before next slave tried
58. hex 60 4 Class 3 Data 1 read 06 no range or all 07 08 limited qty 20 enbl 06 no range or all unsol 21 dsbl unsol 80 1 Internal Indications 1 read 00 01 start stop 129 00 01 start response stop 2 write 00 start stop see note 2 index 4 or 7 No Object function code only 13 cold restart No Object function code only 14 warm restart No Object function code only 23 delay meas NOTE 1 For static non change event objects qualifiers 17 or 28 are only responded to when a request is sent with qualifiers 17 or 28 respectively Otherwise static object requests sent with qualifiers 00 01 06 07 or 08 are be responded to with qualifiers 00 or 01 For change event objects qualifiers 17 or 28 are always responded to NOTE 2 writes of Internal Indications are only supported for indexes 4 and 7 Restart and Need Time Il N 354 100000000505 04 2014 Interoperability DNP3 Interoperability for BMX NOR 0200 H as Slave Introduction The purpose of this information is to describe the specific implementation of the Distributed Network Protocol DNP3 within BMX NOR 0200 H as slave This information in conjunction with the DNP3 Basic 4 Document Set and the DNP3 Subset Definitions Document provide detailed information on how to communicate with BMX NOR 0200 H as slave via the DNP3 protocol This implementation of DNP3 i
59. is without acknowledgment e Broadcasting is only supported in TCP UDP e The BMX NOR 0200 H module server receives and accepts the broadcast request but does not respond to any broadcast requests E100000000505 04 2014 265 Configuration with the Setup Web Pages DNP3 Data Object Mapping Page and Table Data Object Mapping Page This figure shows the dialog box for configuring the data object mapping for an item with the example data type Binary_Input for DNP3 slave server Setup 3 DNP3 NET Server Channel0 Session0 Data Mapping El Communication Remove Type Identification Point Number Data Count CPU Point CPU Point Address Parameters E Binary Input 0 1 MW 0 Modem GSM List Port Parameters EIPPPoE Parameters ETimeZone Parameters E Channel EIDNP3 NET Server Parameters Session 0 Parameters Data Mapping Binary Input Add Events Reset Communication Binaryalnput etersfile Double_Input Browse Export Import Bronse J Security Binary_Counter zo Analog Input Analog_Output Analog_Input_Deadband Binary_Output_Flags Analog_Output_Flags 266 E100000000505 04 2014 Configuration with the Setup Web Pages This figure shows the dialog box for configuring the Binary Input data object mapping with DNP3 NET Server Binary_Input Point Number Point Count CPU Register Type CPU Register
60. limited qty 20 enbl 06 no range or all unsol 21 dab unsol 22 assign class 60 3 Class 2 Data 1 read 06 no range or all 07 08 limited qty 20 enbl 06 no range or all unsol 21 dab unsol 22 assign class 100000000505 04 2014 367 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 60 4 Class 3 Data 1 read 06 no range or all 07 08 limited qty 20 enbl 06 no range or all unsol 21 dab unsol 22 assign class 80 1 Internal 1 read 00 01 start stop 129 00 01 start stop Indications response 2 write 00 start stop see note 3 index 4 or 7 No Object function code only 13 cold restart No Object function code only 14 warm restart No Object function code only 23 delay meas No Object function code only 24 record current time NOTE 1 A Default variation refers to the variation responded to when variation 0 is requested and or in class 0 1 2 or 3 scans Default variations are configurable however default settings for the configuration parameters are indicated in the table above NOTE 2 For static non change event objects qualifiers 17 or 28 are only responded to when request is sent with qualifiers 17 or 28 respe
61. point in this configuration is close output and the following point is trip out when outstation receive close or trip command Be sure the point count should be even if enabled Type enum Options None Trip Close Default None Op type field Trigger mechanism Description Close Pulse on any value change pulse on if value change 0 65535 Latch on 0 to 1 latch on Latch off 1100 latch off Close Pulse_on 0 to 1 pulse on for close output Trip Pulse_on 1100 pulse on for trip output e Binary output in DNP3 slave is only updated in CPU register only after receiving command from DNP3 master but not synchronized cyclically Keep the corresponding CPU register not written any more 276 100000000505 04 2014 Configuration with the Setup Web Pages Long and Short Pulses of Binary Outputs This figure shows the pulse duration setting of the master Binary_Output x Point Number 0 Point Count 1 CPU Register Type MW CPU Register Address 0 Variable Name Operation Mode Auto v Control Code Type Latch_On_of _ Pulse Duration 200 Parameter Description This is the duration expressed as the number of milliseconds that the output remains active Type integer Min 0 Max 60000 Default 0 This figure shows the pre configured pulse duration of the slave Unsol Class 2 Max Delay ms 5000 Unsol Class 3 Max Delay
62. 03 Advanced Parameters Old Firmware with New Hardware All features of old firmware are supported on all hardware Web Site Configuration Files Compatibility e New Web site configuration files are not supported in old firmware e Old Web site configuration files can be imported into new firmware SV 1 6 all parameters are effective All new parameters are assigned as default values and configurable after importing the old configuration files 200 E100000000505 04 2014 Configuration with the Setup Web Pages Section 13 2 Web Site Configuration IEC What Is in This Section This section contains the following topics Topic Page IEC 60870 5 101 Master RTU Protocol Parameters 202 IEC 60870 5 101 Slave RTU Protocol Parameters 209 IEC 60870 5 104 Client RTU Protocol Parameters 217 IEC 60870 5 104 Server RTU Protocol Parameters 222 IEC Data Object Mapping Page and Table 229 IEC Data Object Mapping 239 IEC Event Queue Setting 241 IEC 60870 5 101 104 Master Client 243 IEC Data Length amp Mapping Orientation 245 IEC Data Object Type Mapped to Unity Pro EDT DDT 246 E100000000505 04 2014 201 Configuration with the Setup Web Pages IEC 60870 5 101 Master RTU Protocol Parameters Introduction Select 101 104 as Protocol Master as Mode and Raw Serial as Network Type Channel Parameters Click Setup IEC 101 Master Parameters IEC 101
63. 04 2014 Ethernet Language Objects Section B 2 Exchange Objects of Type T COM ETH BMX About this Section The section describes the implicit and explicit exchange objects of type T COM ETH BMX What Is in This Section This section contains the following topics Topic Page Details of Implicit Exchange Objects of the IODDT Type T COM ETH BMX 376 Details of Explicit Exchange Objects of the IODDT Type T COM ETH BMX 377 Details of Explicit Exchange Objects of the Non IODDT Type T COM ETH 379 100000000505 04 2014 375 Ethernet Language Objects Details of Implicit Exchange Objects of the IODDT Type T COM ETH BMX Objects The IODDT of type T COM ETH BMX has implicit exchange objects which are described below This type of IODDT applies to the BMX NOR 0200 H module Standard Symbol Type Meaning Address CH ERROR BOOL the bit is set indicate that a line error 9olr m c ERR has been detected SERVICES STS INT status of the different services IWr m c 0 P502_STATUS_BIT BOOL Port 502 messaging service status Wr m c 0 0 0 1 IOS STATUS BOOL reserved Wr m c 0 1 GLBD_STATUS_BIT BOOL reserved Wr m c 0 2 EMAIL STATUS BIT BOOL e mail service status 0 1 NOK lWr m c 0 3 FDRS STATUS BIT BOOL reserved 9olIWr m c 0 4 NTPC STATUS BIT BOOL NTP Client service status 0 Wr m c 0 5 1 TCPOPEN
64. 1 200 Always ask before opening this type of file harm your computer If you do not trust the source do not open or m While files from the Internet can be useful some files can potentially save this file What s the risk 154 E100000000505 04 2014 How to Work with Embedded Web Pages Properties Properties Page Use the Properties link on the Diagnostics page to access the module properties Exec Version Kernel Version Web Server Version Web Pages Version Physical Media 1 50 1 14 2 1 0 1 00 07 10 100BASE T 100000000505 04 2014 155 How to Work with Embedded Web Pages Section 10 5 Monitoring Web Pages What Is in This Section This section contains the following topics Topic Page Monitoring 157 Data Editor 158 156 100000000505 04 2014 How to Work with Embedded Web Pages Monitoring Monitoring Page From the BMX NOR 0200 H module home page click the Monitoring link to display this page a Monitoring Data Editor Data Editor Lite SS Lu Copyright 2010 Schneider Automation SAS All Rights Reserved Links You can access these pages directly from the Monitoring page e Data Editor Use the Data Editor to access Modicon M340 PLC data e Data Editor Lite This smaller version of the Data Editor loads faster and can access most of the Modicon M340 PLC data
65. 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 34 2 32 bit Analog 1 read 00 01 start stop 129 00 01 start stop Input Deadband 06 no range or all response 17 28 index see 07 08 limited qty note 2 17 28 index 2 write 17 28 index 34 3 short floating 1 read 00 01 start stop 129 00 01 start stop point Analog 06 no range or all response 17 28 index see Input Deadband 07 08 limited qty note 2 17 28 index 2 write 17 28 index 40 0 Analog Output 1 read 00 01 start stop Status 06 no range or all 07 08 limited qty 17 27 28 index 40 1 32 Bit Analog 1 read 00 01 start stop 129 00 01 start stop Output Status 06 no range or all response 17 28 see 07 08 limited qty note 2 17 27 28 index 40 2 default 16 Bit Analog 1 read 00 01 start stop 129 00 01 start stop see Output Status 06 no range or all response 17 28 index see note 1 07 08 limited qty note 2 17 27 28 index 40 3 short floating 1 read 00 01 start stop 129 00 01 start stop point Analog 06 no range or all response 17 28 index Output Status 07 08 limited qty note 2 17
66. 16 CPU Mod na x x C TS 16 CPU Mod na X x C_RP 16 CPU gt Mod na x x P ME A 16 CPU Mod Mod CPU x x P_ME B 16 CPU gt Mod Mod gt CPU x x P ME 32 CPU gt Mod Mod CPU x x PACA 16 CPU gt Mod Mod gt CPU x x 100000000505 04 2014 245 Configuration with the Setup Web Pages IEC Data Object Type Mapped to Unity Pro EDT DDT Introduction The RTU data object is mapped to a Unity Pro variable with EDT DDT while exporting data objects mapping a relationship to an XSY file In addition to the variables you define the XSY file contains predefined DDT types for timestamp formats 246 E100000000505 04 2014 Configuration with the Setup Web Pages IEC 60870 5 101 104 Data object type Data length bits Unity Pro EDT DDT Protocols M_SP 1 WORD M_DP 2 WORD M ST 8 WORD M BO 32 DWORD M ME 16 INT M ME B 16 INT M ME C 32 REAL M IT 32 DINT M SP Quality 1 WORD WORD M DP Quality WORD WORD M ST Quality 8 WORD WORD Quality 32 DWORD DWORD M ME Quality 16 INT WORD M ME B Quality 16 INT WORD M ME C Quality 32 REAL DWORD M SP Time 1 WORD CP56 M DP Time 2 WORD CP56 M ST Time WORD CP56 Time 32 DWORD CP56 M Time 16 INT CP56 M ME B Time 16 INT CP56 M ME C Time 32 REAL CP56 M IT Time 32 DINT CP56
67. 200 ms and OFF for 200 ms 26 100000000505 04 2014 Hardware Presentation Ethernet Port General The BMX NOR 0200 H module has a built in Ethernet port supporting either Ethernet communications a modem communication or Modbus TCP IP communication The following table describes the characteristics of the Ethernet communication channel Characteristic Description Protocols supported RTU protocols e IEC 60870 5 104 client or server e DNP3 NET client or server e Modbus TCP IP client or server Connection RJ45 female connector Physical link Ethernet 802 3 Ethernet The Ethernet port on the BMX NOR 0200 H module is a standard RJ45 connector In an industrial environment use a cable with the following characteristics e shielded twisted double pair e impedance 100 15 Q from 1 to 16 MHz e maximum attenuation 11 5 dB 100 meters e maximum length 100 meters The following straight through ConneXium cables fit these requirements for connecting terminal devices Description Reference Low Smoke Zero Halogen UL CSA CMG Length m ft Straight through cable with RJ45 ends 490 NTW 000 02 490 NTW 000 02U 2 6 6 490 NTW 000 05 490 NTW 000 05 U 5 16 4 490 NTW 000 12 490 NTW 000 12U 12 39 4 490 NTW 000 40 490 NTW 000 40U 40 131 2 490 NTW 000 80 490 NTW 000 80 U 80 262 5 100000000505 04 201
68. 255 255 192 168 0 1 indicates the IP address of remote device Port 0 65535 2404 indicates the TCP port of remote device Sector Count 1 5 1 indicates the sectors for this slave COT Size 2 2 indicates octets of COT Configure the module with advanced parameters IEC 104 Client Channel0 Session0 Parameters Advanced Parameters Originator address for COT 1 Default Response Timeout ms 60000 Parameter Value scope Default Description value Originator 0 255 1 specifies the originator address for Address for COT COT if the COT length is equal to 2 Default Response 0 4294967295 3000 indicates the default time out for Timeout ms confirmation of request 100000000505 04 2014 219 Configuration with the Setup Web Pages Sector Parameters Click Setup 1 104 Client Channel Session0 Sector0 Parameters IEC 104 Client Channel0 Session0 Sector0 Parameters Common ASDU Address 13 Advanced Parameters Parameter Value scope Default Description value Common ASDU 1 65535 3 indicates the common address of ASDU Address 65535 is broadcast address Configure the module with advanced parameters IEC 104 Client Channel1 Session0 Sector0 Parameters Advanced Parameters M EI NA GI v M EL NA Time sync v M EI NA CI Online GI v Online Time Sync v Online Cl 7 ACTTERM With CSE Setpoint ACTTERM W
69. 27 28 index 41 0 Analog Output 00 01 start stop Block 06 no range or all 07 08 limited qty 17 27 28 index 41 1 32 Bit Analog 3 select 17 28 index 129 echo of request Output Block 4 operate 27 index response 5 direct op 6 dir op noack 41 2 16 Bit Analog 3 select 17 28 index 129 echo of request Output Block 4 operate 27 index response 5 direct op 6 dir op noack 100000000505 04 2014 365 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 41 3 short floating 3 select 17 27 28 index 129 echo of request point Analog 4 operate response Output Block 5 direct op 6 dir op noack 42 0 Analog Output 1 read 06 no range or all Event Any 07 08 limited qty Variation 42 1 32 Bit Analog 1 read 06 no range or all 129 17 28 index Output Event 07 08 limited qty response without Time 130 unsol resp 42 2 default 16 Bit Analog 1 read 06 no range or all 129 17 28 index see Output Event 07 08 limited qty response note 1 without Time 130 unsol resp 42 3 32 Bit Analog 1 read 06 no range or all 129 17 28 index Output Event 07 08 limited qty response with Time 130 unsol resp 42
70. 32bit Frozen Counter Analog Input g30v1 32bit Analog In g30v2 16bit Analog In g30v3 32bit Al No Flag g30v4 16bit Al No Flag g30v5 Short Float Al Analog Input Deadband g34v1 16bit Al Deadband g34v2 32bit Al Deadband g34v3 Short Float Al Deadband Analog Input Dband Ctrl g34v1 16bit Al Deadband g34v2 32bit Al Deadband g34v3 Short Float Al Deadband Analog Output g40v1 32bit Analog Output g40v2 16bit Analog Output g40V3 Short Float AO Read Group Freeze Counter Unsolicited Class Time Sync Restart Integrity Poll Gen Events Clear Events 100000000505 04 2014 283 Configuration with the Setup Web Pages Event Variation Name of DNP3 Data object type Event variation Binary Input g2v1 Binary Input No Time g2v2 Binary Input With Time g2v3 Binary Input Relative Time Double Input g4v1 Double Input No Time g4v2 Double Input With Time g4v3 Double Input Relative Time Binary Output g11v1 Binary Out No Time g11v2 Binary Out With Time Binary Counter g22v1 32bit Counter No Time g22v2 16bit Counter No Time g22v5 32bit Counter With Time g22v6 16bit Counter With Time Frozen Counter g23v1 32bit Frozen Ctr No Time 923v2 16bit Frozen Ctr No Time g23v5 32bit Frozen Ctr With Time 923v6 16bit Frozen Ctr With Time Analog Input
71. 4 16 Bit Analog 1 read 06 no range or all 129 17 28 index Output Event 07 08 limited qty response with Time 130 unsol resp 42 5 short floating 1 read 06 no range or all 129 17 28 index point Analog 07 08 limited qty response Output Event 130 unsol without Time resp 42 7 short floating 1 read 06 no range or all 129 17 28 index point Analog 07 08 limited qty response Output Event 130 unsol with Time resp 50 0 Time and Date 50 1 default Time and Date 1 read 07 limited qty 1 129 07 limited gty 1 see response 2 write 07 limited qty 1 366 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 50 3 Time and Date 2 write 07 limited qty Last Recorded Time 51 1 Time and Date 129 07 limited qty qty CTO response 1 130 unsol resp 51 2 Unsynchronized 129 07 limited gty qty Time and Date response 1 130 unsol 52 1 Time Delay 129 07 limited gty qty Coarse response 1 52 2 Time Delay Fine 129 07 limited gty qty response 1 60 0 Not Defined 60 1 Class 0 Data 1 read 06 no range or all 60 2 Class 1 Data 1 read 06 no range or all 07 08
72. 5 Part V Chapter 11 Communication Error RTU Protocols Communication Error How to Work with Datalogging Service About Datalogging Service Create a Datalogging Service Datalogging Properties Datalogging Configuration Datalogging File Format Recommendation on Datalogging Service How to Work with Email SMS Service About the Email Service SMS Service Create an Email Service Email Properties Email Configuration How to Work with Embedded Web Pages Embedded Web Pages Introduction to Embedded Web Pages Home Web Page Home Page Setup Web Pages Module Setup SEGUMI ea FTP Security Page Diagnostics Web Pages Diagnostics PLC Rack Viewer Messaging NTP Diagnostics Clock Diagnostics Statistics Upload MIB File Properties Monitoring Web Pages Monitoring Data Editor Configuring the Configuring the Configuration Methodology 114 114 115 116 118 119 121 125 126 127 128 130 131 133 137 138 138 139 139 1
73. 5 Serial Communications What Is in This Chapter This chapter contains the following topics Topic Page Serial Port 66 Serial Communication Architectures 67 100000000505 04 2014 65 Serial Communications Serial Port Serial Communication Serial mode is a point to point mode of data exchange between two entities This provides communication between master stations substation devices RTUs and Intelligent Electronic Devices IEDs It establishes client server communication between different modules with a serial link The master is the client and the slave modules are the servers The BMX NOR 0200 H serial link module is a asynchronous serial line module that supports RTU Serial master or slave connections Serial communication using the BMX NOR 0200 H module is only possible using the RTU serial protocols e IEC 60870 5 101 master or slave e serial master or slave NOTE The serial port is also used for the communication with an external modem see page 69 If a modem is connected it is possible to perform serial RTU communication or Ethernet RTU communication which depends on the type of modem 66 100000000505 04 2014 Serial Communications Serial Communication Architectures General All equipment connected via serial link to a BMX NOR 0200 H module use either e an RS232 serial crossover cable e an RS485 serial crossover cable Connecting Equipment
74. A B C D E F Therefore the hexadecimal value C has a decimal value of 12 6 Add the second digit 4 to the subtotal Hexadecimal value 196 192 4 192 7 Add the three decimal values to the fixed Default IP address 84 18 1 196 address value of 84 100000000505 04 2014 53 Ethernet Communications Section 4 3 Modbus TCP IP Messaging About this Section This section describes the functions and characteristics of the Modbus TCP IP profile What Is in This Section This section contains the following topics Topic Page Data Exchange 55 The Messaging Configuration Tab 56 Messaging Configuration Parameters 57 54 100000000505 04 2014 Ethernet Communications Data Exchange Exchanges Data exchanges take place in one of two modes server mode All Modbus over TCP requests from the PLC are supported by the BMX NOR 0200 H module e client mode This type of exchange enables Modbus over TCP requests to be sent using the functions e READ_VAR e WRITE_VAR e DATA_EXCH see Unity Pro Communication Block Library NOTE The maximum Ethernet frame size depends on the type of transaction The maximum frame size is 256 bytes for messaging The BMX NOR 0200 H module is used to manage these TCP connections using port 502 messaging servers 32 connections e clients 16 connections Port 502 TCP IP reserves specific server ports for specific app
75. Codes No No Codes hex Codes hex dec dec 10 2 default Binary Output 1 read 00 01 start stop 129 00 01 start stop see Status 06 no range or all response 17 28 index see note 1 07 08 limited qty note 2 17 27 28 index 11 0 Binary Output 1 read 06 no range or all Change Any 07 08 limited qty Variation 11 1 default Binary Output 1 read 06 no range or all 129 17 28 index see Change without 07 08 limited qty response note 1 Time 130 unsol resp 11 2 Binary Output 1 read 06 no range or all 129 17 28 index Change with 07 08 limited qty response Time 130 unsol resp 12 1 Control Relay 3 select 4 17 28 index 129 echo of request Output Block operate 5 response direct op 6 dir op noack 12 2 Pattern Control 3 select 7 limited quantity 129 echo of request Block 4 operate response 5 direct op 6 dir op noack 12 3 Pattern Mask 3 select 00 01 start stop 129 echo of request 4 operate response 5 direct op 6 dir op noack 360 100000000505 04 2014 Interoperability Flag 07 08 limited qty 17 27 28 index Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 20 0 Binary Counter
76. Configurable Time during which repetitions are permitted Trp or numbers of repetitions X The standard assignment of ADSUs to class 2 messages is used as follows Type identification Cause of transmission 100000000505 04 2014 307 Interoperability Application Layer 9 11 13 21 lt 1 gt special assignment of ADSUs to class 2 messages Type identification Cause of transmission Transmission mode for application data Mode 1 least significant octet first as defined in 4 10 of IEC 60870 5 4 is used exclusively in this companion standard Common address of ASDU X One octet X Two octets Information object address X One octet Structured X Two octets Unstructured X Three octets Cause of transmission One octet X Two octets with originator address Set to zero in case of no originator address Process information in monitor direction X lt 1 gt Single point information M SP NA X lt 2 gt Single point information with time tag M SP TA X lt 3 gt Double point information M DP _ X lt 4 gt Double point information with time tag M DP _ X lt 5 gt Step position information M ST NA X lt 6 gt Step position information with time tag M ST TA X lt 7 gt Bitstring of 32 bit N
77. DNP3 serial e DNP3 NET PPP Modem Connection RJ45 female connector Physical link e RS 485 non insulated serial link e RS 232 non insulated serial link Pin Assignment The following illustration shows the RJ45 serial port Pin Signal Pin Signal 1 RXD 5 DO 2 TXD 6 CTS 3 RTS 7 Power supply 4 D1 8 Common Shielding E100000000505 04 2014 29 Hardware Presentation The RJ45 connector has eight pins The pins used differ according to the physical link used The pins used by the RS 232 serial link are as follows e Pin 1 RXD signal e Pin 2 TXD signal e Pin 3 RTS signal e Pin 6 CTS signal The pins used by the RS 485 serial link are as follows e Pin 4 D1 signal e Pin 5 DO signal Pins 7 and 8 are dedicated to the power supply of the man machine interface via the serial link e Pin 7 5 VDC 190 mA network power supply e Pin 8 common of the network power supply 0 V NOTE The RS 232 4 wire RS 485 2 wire and RS 485 2 wire and power supply cables use the same RJ45 male connector 30 100000000505 04 2014 Hardware Presentation Electrical Characteristics Consumed Current The BMX NOR 0200 H module can be inserted into any rack slot on the BMX XB station assembly see page 32 This list shows the current that the BMX NOR 0200 H module consumes from the 24 VDC rack power and
78. IP RTU module Ethernet TCP IP RTU module SPECIFICATIONS Network type RTU on TCTIIP serial and modem connections Structure Physical interface 100baseT RJ45 Serial port configured by Website Data rate 10 100 Mbps Services Message handling Modbus TCP and RTU protocols Web server Integrated web server diagnostic VISUAL INDICATORS LED RUN Module is operating green ERR Module error Normal state red no internal error 166 E100000000505 04 2014 Configuration and Debug with Unity Pro Configuration Screen Module Configuration Screen Use this screen to declare the communication channel 0 and to configure the necessary parameters for the Ethernet port on the BMX NOR 0200 H module Model Family Model Address Model Utilities NOR 0200 Rack Module Channel gg NTP Module IP Address IP Address Subnetwork Mask Gateway Address IP Configuration Messaging SNMP NTP Bandwidth Model Family Configured IPaddress 0 0 0 0 Subnetworkmask 0 0 0 0 Gateway address 0 0 0 0 _ From a server Model Family Ethernet Il 8023 PLC bus E3 0 1 BMX E Ethernet 1 The configuration screen is divided into several zones e Model Family Select the model family for configuration e Module Address When the selected network is associated with a module the rack module and channel appears in this zone e Module Utilities Select the utilities used by the module
79. Incremental Timeout ms 15000 ___ ALWAYS 2000 TH 0 10000 30000 Parameter Value scope Default Description value First Char 0 65535 0 indicates the minimum time between Wait ms reception and transmission Rx Buffer Size 0 256 256 indicates the receive buffer size of serial port bytes One Char Ack check box unchecked allows transmission of one character Allowed E5 instead of the fixed length ACK message One Char box unchecked allows transmission of one character Allowed response instead of the fixed length NACK message when no response data is available Rx Frame 0 4294967295 15000 indicates the timeout of waiting for a Timeout ms complete frame after the receiving frame synchronization 210 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default Description value Confirm Mode NEVER SOMETIMES ALWAYS ALWAYS specifies when to request the link layer confirmation for variable sized frames that contain user data which is not transmitted to the broadcast address Confirm 0 4294967295 2000 indicates the maximum waiting time for Timeout ms link level confirmation if requested Max Retries 0 255 2 indicates the retry count of the link layer confirmation time outs Test Frame 0 4294967295 0 specifies the period for transmitting the Period ms verification messag
80. Introduction This part describes the configuration of the BMX NOR 0200 H module What Is in This Part This part contains the following chapters Chapter Chapter Name Page 11 Configuring the Module 161 12 Configuration and Debug with Unity Pro 163 13 Configuration with the Setup Web Pages 145 14 Web Designer Configuration 295 E100000000505 04 2014 159 Configuring the Module 160 E100000000505 04 2014 Chapter 11 Configuring the Module Configuration Methodology Overview Follow these main steps to configure the BMX NOR 0200 H module Step Action Comment 1 Set up the PLC hardware configuration through Configure the BMX NOR 0200 H module in the Unity Pro PLC rack Set the Ethernet parameters and assign a valid IP address see page 180 2 Log in to the module website and set the module Any configuration parameter changes require a and protocol parameters and the data object module reset mapping 3 Export the module Web site and protocol parameter This creates a backup of the configuration configuration to a local storage media XML file parameters see page 196 4 Export the data object mapping to a local storage Export is done as a XSY file ready for Unity Pro media import see page 196 5 Import the XSY file into the Unity Pro application This allows you to import the RTU data such as unlocated variables as symbols for
81. Module IP Address This field displays the module s IP address e service tabs To configure a particular service select the appropriate tab e Configuration tab see page 49 Declare the communication channel and configure the necessary parameters for an Ethernet port e Messaging configuration tab see page 56 Access on the Connection configuration area and the access control area E100000000505 04 2014 167 Configuration and Debug with Unity Pro Project Settings Check the Data dictionary option when you program the PLC application Otherwise unlocated variables may not be mapped RTU data points Find this checkbox at Tools Project Settings General PLC embedded data However a compiled application consumes more memory when the Data dictionary is included Be aware of this memory constraint when applying unlocated variables in RTU solutions Project Settings E Project Settings General Data dictionary Managment of build messages Upload information Build settings C Project autosaving on download omments PLC embedded data Animation tables PLC diagnostics Upload information management On user request Variables Optimize data on line change Program Languages Common FBD LD lt S18 a Mixed display SFC multi token Operator Screens Controlled Screen Last opened screen v Import ES Export Reset All Apply Cancel Help
82. NA 121 Section ready F SR NA 122 Call directory select file call file call section F SC NA 123 Last section last segment F LS NA 124 Ack file ack section AF NA_ 125 Segment F SG NA 126 Directory F DR TA 320 100000000505 04 2014 Interoperability Cause of transmission SseJppe uoneuuojui 321 Jo sseippe uouiuoo UOISSIUISUEJ JO 9sne5 uoljeoyijuap umouyun 19 UN09 lt u gt Aq jsanbay lt Jaquinu gt Aq pe e6o119 uU JojsueJ 9 14 13 20 36 37 41 44 45 46 47 pw jeso e Aq pesneo 12 pwo e Aq pesneo 10 11 uoneAnoeeq uoneAnoeeg uoneAnov 10 pezijeniul snoeuejuodg ueos 2 3 14 5 6 8 9 X X X X X X ojoKo 1 X X X Type identification B SP M SP TA M DP NA M DP TA M ST NA M ST M BO NA NA pom NB pom NC pom M BO MM MM M ME MM M ME MM M IT NA M IT M
83. Not all master and slave channel combinations are supported by the routing function see page 107 e In the system SCADA cannot communicate with sub slaves The solution uses the logic slave in the BMX NOR 0200 H module to simulate sub slaves so SCADA can only communicate with the logic the slave in the BMX NOR 0200 H module and sub slave can only communication with the logic master in BMX NOR 0200 H module e Some information related to events may be changed Key information related to events like point value flag and timestamp is kept during routing Other information related to events like point number events class and variation is changed according to the slave channel configuration Events Buffer Size The events buffer of the slave must be greater than the events buffer in the sub slave otherwise events are lost E100000000505 04 2014 105 How to Work with RTU Protocols Events Backup Introduction The BMX NOR 0200 H and RTU protocol have a maximal number of events buffer size of 100 000 NOTE The BMX NOR 0200 H module supports the backup of up to 10 000 events into Flash memory on loss of power Only the latest events are saved if the number of events is more than 10 000 The event monitor component e saves up to 10 000 events into Flash memory on loss of power e reads events from the Flash memory when power is restored e saves only the latest events if the size of the saved events exceeds 10 000 e can be co
84. PLC programming 6 Complete the PLC application program Consider your application requirements scan time etc Download the application to the PLC The RTU functionalities are ready to use Click Reset Communication in the Web Page The new configuration is effective NOTE Repeat these steps to refresh the variable definitions in Unity Pro when the data object mapping list is modified NOTE This module does not have an internal RAM backup function The RAM is erased when the power is switched off Optional Configuration Web Designer configuration software is used to setup the M340 device variable list and additional functions such as datalogging email services and data table lists 100000000505 04 2014 161 Configuring the Module 162 E100000000505 04 2014 Chapter 12 Configuration and Debug with Unity Pro Introduction The configuration or debugging the configuration of the BMX NOR 0200 H module relies on the hardware module configuration through Unity Pro software What Is in This Chapter This chapter contains the following sections Section Topic Page 12 1 Configuration with Unity Pro 164 12 2 Debugging with Unity Pro 169 100000000505 04 2014 163 Configuration and Debug with Unity Pro Section 12 1 Configuration with Unity Pro What Is in This Section This section contains the following topics Topic Page Configuring
85. Parameters saving change Modem PSTN Phone List E Serial Port Parameters E PPPoE Parameters 5 TimeZone Parameters Parameter Value scope Default value Description Time Zone Custom timezone GMTO Green The default format is Universal GMT 12 00 Dateline Standard wich Mean Time Coordinated UTC Time Time Optionally it can be configured to GMTO Greenwich Mean Time use a local time zone If it mismatches with the time zone configuration in Unity Pro keep as the Unity Pro setting Automatically check box unchecked the module automatically adjust clock for the time change in the spring and daylight saving fall change 100000000505 04 2014 193 Configuration with the Setup Web Pages Unity Pro Configuration If NTP configuration is enabled in Unity Pro as shown in the figure the parameter in the Web page has the same configuration as NTP when the DNP3 protocol is created This figure shows the time zone in Unity Pro IP Configuration Messaging SNMP NTP Bandwidth NTP Server configuration IP address of Primary NTP Server ill 177 89 143 IP address of Secondary NTP Server 0 0 0 0 Polling period 5 seconds Time Zone GMT 03 00 E South America Standard Time BrasiliaSao_Paulo v Automatically adjust clock for daylight saving change NTP Configuration If NTP configuration is different from time zone in the Web page an indica
86. RD NA X 103 Set point command normalized value C CS NA X 104 Set point command scaled value C TS NB X 105 Set point command short floating point value C RP NC 106 Bitstring of 32 bit C CD NA Parameter in control direction X 110 Parameter of measured value normalized value P ME NA 1 X 111 Parameter of measured value scaled value P ME NB 1 X 112 Parameter of measured value short floating point value P ME NC 1 X 113 Parameter activation PC AC NA 1 File transfer 120 File ready FR NA 121 Section ready F SR NA 122 Call directory select file call file call section F SC NA 123 Last section last segment F LS NA 124 Ack file ack section AF NA_ 125 Segment F SG NA_ 126 Directory F DR NA 310 100000000505 04 2014 Interoperability Cause of transmission 55 uoneunuojui 311 Jo sseippe uouiuoo UOISSIUISUEJ JO lt u gt Aq Jequinu Aq JojsueJ 4 13 20 36 37 41 44 45 46 47 pw e Aq pesneo 12 pwo e Aq pasneo uinjoy 11 10
87. SP TB M DP TB M ST TB M BO M ME TD 1 2 3 4 5 6 lt 7 gt lt 8 gt lt 9 gt lt 10 gt lt 11 gt lt 12 gt lt 13 gt lt 14 gt lt 15 gt lt 16 gt lt 30 gt lt 31 gt lt 32 gt lt 33 gt lt 34 gt 100000000505 04 2014 Interoperability Cause of transmission 55 Jo sseippe UOISSIUISUEJ Jo lt u gt Aq Jequinu Aq 49jSUeJ 13 20 36 37 41 44 45 46 47 pw jeso e Aq pesneo 12 pwo e Aq pasneo 10 11 uoneuuguoo uoneAnoeeq uoneAnoeog uoneuuguoo uoneAnoy XIX X X X XIX X X X XIX X X X XIX X X X XIX X X X XIX X X X XIX X X X XIX X X X XIX XIX pajsenbai ysanbay snoeuejuodg ueos punoibyoeg 2 3 4 5 6 7 8 9 1 Type identification M IT TB A C SC NA C RC NA
88. The events routing component allows events from sub stations to be routed to SCADA within one BMX NOR 0200 H module To route events one RTU master channel and at least one RTU slave channel are needed inside the M340 system The solution is to create a logic RTU master and slave in a single BMX NOR 0200 H module In the logic master points are created to represent points in sub stations and in the logic slave points are created to simulate the behavior of points in sub stations Events routing component is responsible for collecting events in the logic master These events are sent from sub stations and trigger the same events in the logic slave BMX NOR 0200 H module components Routing component Configuration Configure the BMX NOR 0200 H module for event routing Most of the BMX NOR 0200 H module parameters are configured via Web pages as are the event routing functions There is no dedicated Web page for the events routing function this function is configured inside the data mapping configuration pages NOTE The BMX NOR 0200 H does not detect events for the routing points in slave NOTE With the loss of power management you can specify in the configuration whether or not you want to poll more events from the BMX NOR 0200 H modules fallback to SCADA and prevent events from being lost Channel Configuration For routing events configure one master channel and at least one slave channel One master channel is required so
89. With 96S the range is from 0 to 127 Variable Name indicates the variable name of the located or unlocated register Event Class Mask check box 0 defines the event class of points Unsolicited is 01 2 3 Unsolicited not allowed with class 0 only In client Channel must be at 0 268 100000000505 04 2014 Configuration with the Setup Web Pages Title Value scope Default value Description Store To CPU Client OR CPU Reg Mapping Server Value only Value with time Value with flag Value with flag and time Value only Event time stamp source Value only module time Value with time time in CPU registers Value with flag flag info on the point is taken from CPU registers Value with flag and time flag and time are taken from CPU registers Default Variation Static g1v1 Binary In g1v2 Binary In Flag g1v1 Binary In indicates the default static variation for data point 1 DNP3 Server 8 applies only to binary inputs and 5 only to analog inputs 32 bit analog inputs the CPU mapping does not apply array due to the limits of notrans Unity Pro Event routing Client only g2v1 Binary Input With Time g2v1 Binary Input Relative Time Channel 0 indicates the channel number to route Session 0 0 indicates the session number to route Channel at 0 Point number 0 16777215 0 indicates the point number to route
90. a suitable selection for a specific application If a system is composed of equipment stemming from different manufacturers it is necessary that all partners agree on the selected parameters The interoperability list is defined as in IEC 60870 5 101 and extended with parameters used in this standard The text descriptions of parameters which are not applicable to this companion standard are strike through corresponding check box is marked black The selected parameters are marked as follows Function or ASDU is not used X Function or ASDU is used System or Device System definition Controlling station definition master X Controlled station definition slave E100000000505 04 2014 335 Interoperability Application Layer Transmission mode for application data Mode 1 least significant octet first as defined in 4 10 of IEC 60870 5 4 is used exclusively in this companion standard Common address of ASDU X Two octets Information object address X Three octets X Structured X Untructured Cause of transmission X Two octets with originator address Set to zero in case of no originator address Process information in monitor direction X lt 1 gt Single point information M SP NA X lt 3 gt Double point information M DP _ X
91. communication lost bit 2 0 normal 1 lost remote forced data bit 3 0 normal 1 forced local forced data bit 4 0 normal 1 forced chatter filtered bit 5 0 Not used reserved bit 6 0 state bit 7 0 1 272 100000000505 04 2014 Configuration with the Setup Web Pages Point Flag definition Options Comments Double on line bit 0 0 off line 1 on line Input Flags restart bit 1 0 normal 1 restart communication lost bit 2 0 normal 1 lost remote forced data bit 3 0 normal 1 forced local forced data bit 4 0 normal 1 forced chatter filtered bit 5 0 normal 1 filter on Events are generated when CHATTER FILTER flag is set and cleared but not when it is set state bit 6 0 1 Not used state bit 7 0 1 Analog on line bit 0 O off line 1 on line Input Flags restart bit 1 0 normal 1 restart communication lost bit 2 0 normal 1 lost remote forced data bit 3 0 normal 1 forced local forced data bit 4 0 normal 1 forced over range bit 5 0 normal 1 over range reference error bit 6 0 normal 1 error reserved bit 7 0 Not used Analog on line bit 0 0 off line 1 on line ee restart bit 1 0 normal 1 restart Flags communication lost bit 2 0 normal 1 lost remote forced data bit 3 0 normal 1 forced local forced data bit 4 0 normal 1 fo
92. connected Then the corresponding bit is reset to 0 after the command is sent without the reception of a valid response NOTE If connection status really matters configure parameter Test Frame Period with a none zero value for IEC 60870 5 101 protocol Link Status Period for DNP3 protocol E100000000505 04 2014 113 How to Work with RTU Protocols Section 7 8 Communication Error Codes RTU Protocols Communication Error Codes Introduction In order to diagnose RTU communication error codes are available in RTU diagnostic Web page Error Codes The table below describes the RTU protocols communication error codes Value Definition 00000001 hex Total count of data points in all channels exceeds 5000 00000002 hex Total count of data points event in one protocol exceeds 100 000 00000004 hex The accessed register M S MW SW address exceeds CPU register s range 00000008 hex The size of unlocated variable array exceeds 1000 bytes 00010000 hex Unlocated variable is not defined in CPU 00020000 hex Time zone collision between NTP and RTU 01000000 hex Data base of RTU protocol is not initialized successfully 114 100000000505 04 2014 Chapter 8 How to Work with Datalogging Service Introduction This chapter describes the Datalogging Service and explains how to configure it What Is in This Chapter This chapter co
93. device connects two or more sections of a network and allows information to flow between them A router examines every packet it receives and decides whether to block the packet from the rest of the network or transmit it The router attempts to send the packet through the network on an efficient path Remote Terminal Unit 5 service class SMTP SNMP Transparent Ready service classes make it possible to identify the services provided by each device such as e diagnostic display and control services via Web technologies e Ethernet communication services The Transparent Ready service classes thus simplify the choice of products and check their interoperability within an architecture Simple Mail Transfer Protocol SMTP is a transmission protocol for sending and receiving e mail SMTP messages are usually retrieved from a server with an e mail client such as POP or IMAP simple network management protocol The UDP IP standard protocol used to monitor and manage devices on an IP network SNMP agent The SNMP application that runs on a network device 392 100000000505 04 2014 Glossary SUB A Global Data variable that is defined as a subscription variable subnet The subnet is that portion of the network that shares a network address with the other parts of the network A subnet may be physically or logically independent from the rest of the network A part of an Internet address called a subnet number which
94. direction X 110 Parameter of measured value normalized value P ME NA 1 X 111 Parameter of measured value scaled value P ME NB 1 X 112 Parameter of measured value short floating point value P ME NC 1 X 113 Parameter activation PC AC NA 1 100000000505 04 2014 337 Interoperability File transfer Cause of transmission SseJppe uoneuuojui Jo sseippe uouiuoo UOISSIUISUEJ Jo 9sne5 ed A lt u gt Aq lt Aq JojsueJ 13 20 36 37 41 44 45 46 47 pw jeso e Aq pesneo 12 pwo e Aq pesneo 10 11 uoneAnoeeq uoneAnoeoq uoneAnov uoneAnov pa senbai pezijeniul snoeuejuodg ueos punoJDyoeg 213 4 5 6 8 9 X X X X X ojoKo oipouad 1 X X X uuum c miolmo E E E E E E E E 5 e 2 8 z o o Sg lolis D 9 5 156
95. e g a polling time of 5 s provides better accuracy than a time of 30 s time zone The default format is universal time coordinated UTC Optionally you may configure the service to use a local time zone e g GMT 1 for Barcelona or Paris daylight saving The module automatically adjusts the time change in the spring and fall time leap second To compensate for the deceleration of the earth s rotation the module automatically inserts a leap second in the UTC time every 18 months via an international earth rotation service IERS Leap seconds are inserted automatically as needed When needed they are inserted at the end of the last minute in June or December as commanded by the NTP server E100000000505 04 2014 95 How to Work with RTU Protocols Obtaining and Maintaining Accuracy The time service clock starts at 0 and increments until the Ethernet network time is fully updated from the module Model Starting Date M340 with Unity Pro January 1 1980 00 00 00 00 Clock characteristics e Clock accuracy is not affected by issuing stop run commands on the PLC e Clock updates are not affected by issuing stop run commands on the PLC e Mode transitions do not affect the accuracy of the Ethernet network Re initializing the Time Service Register After a download or an NTP server swap the status clock value associated with the time service register in the CPU is re initialized Two po
96. file You can export RTU data object mapping to an XSY symbol file that can be imported into your application program in Unity Pro Import Export File This figure shows the export data mapping 5 DNP3 NET Client Channel0 Session0 Data Mapping a Remove 71 Type Identification Point Number Data Count CPU Point Type CPU Point Address 7 Binary Output S 0 1 0 Frozen_Counter 0 10 MW 200 Frozen_Counter Import Configuration Parameters file File Name Browse Export Import Right click select Save Tarnet to export Data mapping XML file Open Open in New Tab Open in New Window Save Target As Print Target Copy Shortcut Add to Favorites Properties It provides an interface to edit remove the collision parameter User can edit the parameter by double clicking or remove it directly by clicking remove button 196 E100000000505 04 2014 Configuration with the Setup Web Pages This figure shows the import data mapping Select a type id v Add Import Configuration Parameters file Right click here and select Save Target As to export Data mapping XML file DNP3 Server Channel1 Session0 Data Mapping Import Remove Type Identification IOA Data Count CPU Point Type CPU Point Address 7 Binary Input 0 10 MW 2000 NOTE It checks the consistency of protocols when importing data mapping Onl
97. is ON or OFF after impulse Indeterminate State the final state is 0 after executing any impulse Data Synch Mode Cyclic Synch Synch On Demand Cyclic Synch specifies how the data are synchronized either cyclically or when the slave station receives a request from the master see note itis used only by data oftype C SE NA C SE NB C SE NC and C BO NA NOTE Only MW and 96M control points are supported in the Synch On Demand mode 100000000505 04 2014 215 Configuration with the Setup Web Pages Counter Mode for Local Freeze and Freeze On Demand Configuration for Counter Mode Counter Mode M IT Events Configured M_IT Events Not Configured Local Freeze Mode A Mode B Freeze On Demand Mode D Mode C NOTE In mode Local Freeze and Reset the counter is automatically frozen at the value 0 NOTE If counter events buffer is configured Mode A is set by default A mixed counter event mode is not supported Only one counter event mode is supported at a time The Local Freeze Period parameter can be configured in milliseconds to freeze automatically forMode A orMode B The frozen counter is reported spontaneously with valid events NOTE The Counter event buffer must be configured for Mode A in case of an event loss You can enable to delete oldest events in order to prevent new events from being lost Daylight Saving Time and Summer Standard T
98. is ignored in IP routing distinguishes the subnet subnet mask The subnet mask is a bit mask that identifies or determines which bits in an IP address correspond to the network address and which correspond to the subnet portions of the address The subnet mask comprises the network address plus the bits reserved for identifying the subnetwork switch A network switch connects two or more separate network segments and allows traffic to be passed between them A switch determines whether a frame should be blocked or transmitted based on its destination address TCP IP Transmission Control Protocol Internet Protocol TCP IP is the communication protocol of the Internet TFE transparent factory Ethernet Schneider Electric s open automation framework based on TCP IP TFTP Trivial File Transfer Protocol TFTP is a scaled down version of FTP that uses UDP often to initialize diskless workstations Transparent Device Access Transparent Device Access TDA functionality means that clients that run Unity Pro and that are connected to a USB Ethernet or Modbus terminal port of a communications module can access or download applications to devices on distributed control networks The reverse however is not true In other words a Unity Pro PC connected to the CPU s Modbus port can access devices on other core networks but those remote devices can not access other devices on different networks through the PLC station Transparent Fac
99. is write protected Failure to follow these instructions can result in equipment damage 38 E100000000505 04 2014 Hardware Installation Precautions NOTICE MEMORY CARD DESTRUCTION e Do not touch the memory card connections e Keep the memory card away from electrostatic and electromagnetic sources as well as heat sunlight water and moisture e Avoid impacts to the memory card e Check the postal service security policy before sending a memory card by postal service In some countries the postal service exposes mail to high levels of radiation as a security measure These high levels of radiation may erase the contents of the memory card and render it unusable Failure to follow these instructions can result in equipment damage Without SD Memory Card If no memory card is inserted in the module you cannot access the website The following diagnostic message appears Access Error Site temporarily unavailable Try again No SD card present NOTE The Modicon M340 RTU module works only with a memory card that is present at boot up time A memory card that is inserted during module operations is not recognized Although operation is possible without a valid memory card inserted in the module a valid memory card should be present at all times in the module E100000000505 04 2014 39 Hardware Installation Modicon M340H Hardened Equipment M340H The Modicon M340H hardened eq
100. limited qty response index 130 unsol resp 23 5 32 Bit Frozen Counter 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 23 6 16 Bit Frozen Counter 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 30 0 Analog Input Any 1 read 00 01 start stop Variation 06 no range or all 30 1 32 Bit Analog Input 1 read 00 01 start stop 129 00 01 start 06 no range or all response stop 100000000505 04 2014 349 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 30 2 16 Bit Analog Input 1 read 00 01 start stop 129 00 01 start 06 no range or all response stop 30 3 32 Bit Analog Input 1 read 00 01 start stop 129 00 01 start without Flag 06 no range or all response stop 30 4 16 Bit Analog Input 1 read 00 01 start stop 129 00 01 start without Flag 06 no range or all response stop 30 5 short floating point 1 read 00 01 start stop 129 00 01 06 no range or all response start stop 32 0 Analog Change Event 1 read 06 no range or all Any Variation 07 08 limited qty 32 1 32 Bit Ana
101. mode Local IP Address 0 0 0 0 IP address of the remote device Allow Remote IP Address check box unchecked whether allow calling device to specify its own IP address 190 100000000505 04 2014 Configuration with the Setup Web Pages Phone List Select Communication Phone List E Phone List Remove Add Phone Index Phone Index1 Phone Number Local IP Username Password Comment Phone Index 1 Phone number 000000 Local IP 0 0 0 0 Username USER Password seen Comment Comment Parameter Value scope Default value Description Phone Index 1 64 1 phone number index of the remote device Phone Number 000000 phone number of the remote device Local IP 0 0 0 0 IP address of the local device and IP address is served by provider if specifying 0 0 0 0 only used for modem PPP as server mode Username USER username of the remote device only used for modem PPP as server mode Password USERUSER password of the remote device only used for modem PPP as server mode Comment Comment comments from the user 100000000505 04 2014 191 Configuration with the Setup Web Pages Ethernet Port Configuration PPPoE Setup The Ethernet port is configured via Unity Pro Nevertheless in case of an ADSL modem the PPPoE protocol is used and the Ethernet port is configured via the Web site Click PPPoE setup PPP
102. name select a numeric value from 00 to 159 You can use both switches e On the upper switch Tens digit the available settings are 0 to 15 On the lower switch Ones digit the available settings are 0 to 9 The device name is calculated from the sum of the two switch values For example a BMX NOR 0200 H module with the switch setting in the above figure is assigned the DHCP device name BMX_0200_ 123 The selection on the lower switch of any non numeric BOOTP STORED CLEAR IP DISABLED makes the setting on the upper switch inconsequential e BOOTP To get an IP address from a BOOTP server select either of the two BOOTP positions on the bottom switch e STORED The device uses the Unity Pro application s configured stored parameters CLEAR IP The device uses the default IP parameters e DISABLED The device does not respond to communications The functionality of the rotary switch when used in conjunction with the Unity Pro IP Configuration tab see page 167 is discussed throughout the IP Address chapter see page 48 50 E100000000505 04 2014 Ethernet Communications Switch Labels To assist you in setting the rotary switches to their proper positions a label is affixed to the right side of the module The switch settings are described in this table upper switch Clear 2 o Disabled 9 Ones lower switch Upper Switch 0 to 9 Tens value for the device name 0 10 20 90
103. page e Other built in functions Historical datalogging with time stamping inside the module s SD memory card Email SMS notifications Web server for RTU set up and remote diagnostic and monitoring Advanced TCP IP networking NTP client FTP client or server HTTP server SOAP XML communication server SNMP agent SMTP client NOTE When the BMX NOR 0200 H module works as IEC 104 DNP3 Client the number of connected servers affects the module performance web page access module start up and data exchange through the backplane E100000000505 04 2014 17 About the BMX NOR 0200 H Module 18 E100000000505 04 2014 Part Il BMX NOR 0200 H Hardware Characteristics About this Part This part contains an overview of hardware characteristics for the BMX NOR 0200 H module For Modicon M340 system installation and specifications see the book Modicon M340 using Unity Pro Processors Racks and Power Supply Modules What Is in This Part This part contains the following chapters Chapter Chapter Name Page 2 Hardware Presentation 21 3 Hardware Installation 33 100000000505 04 2014 19 Hardware Characteristics 20 100000000505 04 2014 Chapter 2 Hardware Presentation What Is in This Chapter This chapter contains the following topics Topic Page Physical Description 22 Module Dimensions 24 LED Indicators 25 Ethernet Port 2f Serial Por
104. short floating point value M ME NC_ X lt 14 gt Measured value short floating point value with time tag M ME TC_ X lt 15 gt Integrated totals M IT _ X lt 16 gt Integrated totals with time tag M IT TA lt 17 gt Event of protection equipment with time tag M EP TA_ lt 18 gt Packed start events of protection equipment with time tag EP TB _ 19 Packed output circuit information of protection equipment EP TC with time tag 20 Packed single point information with status change M PS NA detection lt 21 gt Measured value normalized value without quality M ME ND_ descriptor X lt 30 gt Single point information with time tag CP56Time2a M SP TB X lt 31 gt Double point information with time tag CP56Time2A M DP TB X lt 32 gt Step position information with time tag CP56Time2A M ST TB X lt 33 gt Bitstring of 32 bit with time tag CP56Time2A M BO TB_ X lt 34 gt Measured value normalized value with time tag M ME TD CP56Time2A X lt 35 gt Measured value scaled value with time tag CP56Time2A ME TE X lt 36 gt Measured value short floating point value with time tag M ME _ CP56Time2A X lt 37 gt Integrated totals with time tag CP56Time2A M IT TB 38 Event of protection equipment with time tag CP56Time2A EP 39 Packed start events of protection equipment with time tag EP TE CP56time2A 40 Packed output circuit information of protection
105. significant octet first as defined in 4 10 of IEC 60870 5 4 is used exclusively in this companion standard Common address of ASDU X One octet X Two octets Information object address X One octet Structured Two octets Unstructured X Three octets Cause of transmission X One octet X Two octets with originator address Set to zero in case of no originator address Process information in monitor direction X lt 1 gt Single point information M SP NA X lt 2 gt Single point information with time tag M SP TA X lt 3 gt Double point information M DP _ X lt 4 gt Double point information with time tag M DP _ X lt 5 gt Step position information M ST NA X lt 6 gt Step position information with time tag M ST TA X lt 7 gt Bitstring of 32 bit M NA X lt 8 gt Bitstring of 32 bit with time tag M BO TA X lt 9 gt Measured value normalized value M ME NA_ 318 100000000505 04 2014 Interoperability Process information in monitor direction lt 10 gt Measured value normalized value with time tag M ME TA_ X lt 11 gt Measured value scaled value M ME NB_ X lt 12 gt Measured value scaled value with time tag M ME TB_ X lt 13 gt Measured value
106. speed of the serial 9600 19200 38400 port bits per second Data Bits 8 8 bits for data in one transmission unit Stop Bits 1 2 1 bits to stop in one transmission unit Parity None Odd Even None parity mode This chronogram shows the settable delays RTS du I 1 gt 71 2 1 T3 Modem Configuration Select Communication Modem Parameters Modem Parameters Modem Type GSM Connection Type OnDemand Default Phone Index 1 Max Retry 3 Command Reg Address MW 0 PPP Enable q gt a T 186 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default Description value Modem Type None Radio None selects Modem type PSTN GSM GPRS Connection Type Permanent On On Permanent connect modem automatically when module is Demand Demand power up OnDemand connect or disconnect modem according to Reg in CPU Default Phone 1 64 1 phone index in phone list used when connection mode is Index permanent or value in CPU phone index register is invalid Max Retry 1 255 3 indicates the maximum retry Command Reg 0 32464 0 start MW address of 4 CPU modem registers which represent Address MW modem command and status for modem serial link Or start address of 8 MW registers which represent modem command status loca
107. stop 129 00 01 Deadband 06 no range or all response start stop 07 08 limited qty 17 28 17 28 index index see 2 write 17 28 index note 2 34 2 32 bit Analog Input 1 read 00 01 start stop 129 00 01 Deadband 06 no range all response start stop 07 08 limited qty 17 28 17 28 index index see 2 write 17 28 index note 2 34 3 short floating point 1 read 00 01 start stop 129 00 01 Analog Input 06 no range or all response start stop Deadband 07 08 limited qty 17 28 17 28 index index see 2 write 17 28 index note 2 40 0 Analog Output Status 1 read 00 01 start stop Variation 0 is used to 06 no range or all request default variation 40 1 32 Bit Analog Output 7 read 00 01 start stop 129 00 01 start Status 06 no range or all response stop 40 2 16 Bit Analog Output 1 read 00 01 start stop 129 00 01 start Status 06 no range or all response stop 40 3 short floating point 1 read 00 01 start stop 129 00 01 Analog Output Status 06 no range or all response start stop 40 4 short floating point 1 read 00 01 start stop 129 00 01 Analog Output Status 06 no range all response start stop 41 1 32 Bit Analog Output 3 select 17 28 index 129 echo of Block 4 operate response request 5 direct op 6 dir op noack 100000000505 04 2014 351 Interoperability
108. synchronization 92 D Datalogging configuration 121 properties 119 datalogging service 118 recommendation 126 debugging communication 169 diagnostic message without memory card 39 DNP3 Data Object Mapping 266 281 DNP3 Event Queue Setting 286 E email service configuration 128 Ethernet modules communication requirements 19 device name 50 hardware 50 hardware requirements 19 language objects 369 Ethernet Port 27 F frame size Ethernet 55 G grounding 36 IEC Data Object Mapping 229 239 IEC Event Queue Setting 241 Interoperability 305 M340 hardened 40 ruggedized 40 memory card features 38 MIB 59 Modbus TCP messaging 46 Modbus TCP IP messaging 54 N Network Management Protocol 46 Network Time Protocol 47 NMT 46 NTP 47 P parameter settings 370 S SD memory cards 38 Serial Link 29 100000000505 04 2014 395 Index services BootP 47 DHCP 47 FDR 47 FTP 47 Modbus TCP messaging 46 Modbus TCP IP messaging 54 NMT 46 NTP 47 SMTP 47 SNMP 47 58 SOAP 47 SMTP 47 SNMP 47 58 SOAP 47 SOAP Web Services 63 T T COM ETH BMX 375 time stamp 97 time synchronization 92 396 100000000505 04 2014
109. that the system can connect with more sub slaves and more slave channels allow for more SCADA in the system E Communication Channel Parameters Remove Add Channel ID Protocol Mode Network Type IP Address Port Count Channels CPU Type Connection Status Address 0 DNP3 Master Client TCP IP 1 MW 0 1 DNP3 Slave Server TCP IP 255 255 255 255 20000 1 MW 2000 E100000000505 04 2014 101 How to Work with RTU Protocols Master Data Mapping Configuration You must first add data points in the master channel These points represent points in the sub slave which communicate with the master channel Master points mapping Channel Session0 Data Mapping Remove Type Identification Point Number Binary Input 0 Double Input 0 Analog Input 0 Data Count 10 5 10 CPU Point Type 9 MW AMW MW CPU Point Address 10 20 30 When configuring these points in the master channel select the events of the point which needs to be routed and route events to the corresponding slave channel For example if the master channel needs to receives events needs to receive events from the sub slave Binary Input point routed it to the logic slave channel and so that becomes an event of the Binary Input point Master points configuration Binary_Input Point Number Point Count CPU Register Type CPU Register Address Variable Name Store To CPU Static Variation Event routing Channel Session Po
110. the event queue has overflowed The lower word is the number of events in the event queue From the Web site select event mapping Setup IEC 104 Server Channel0 Session0 Sector0 Events El Communication Remove Type Identification Event Store Mode Event Count CPU Reg Type CPU Reg Address El Modem Parameters Modem GSM Phone List El Serial Port Parameters E PPPoE Parameters g Channel GIEC 104 Server Parameters ElSession 0 Parameters Sector 0 Parameters Add Data Mapping EE Events M SP Reset Communication M_ST Export Import files M BO Security M MEA M MEB FTP M ME C MIT NOTE When the events number exceeds the configured buffer size events will be lost or overwritten Increasing Maximal Event Buffer Size You can increase the maximum events buffer size from 10 000 to 100 000 in case of one client connection NOTE All channels can support up to 100 000 events but each point type only supports up to 65 535 events A dialog box is used to configure the maximum event count Binary Input x Event Store Mode Max Event Count CPU Reg Type Parameter Description Max events count for event queue Address fos Type integer Min 1 Max 65535 Event Backup Class1 Default 100 100 E100000000505 04 2014 How to Work with RTU Protocols Events Routing Introduction
111. the residual dissipated power BMX NOR 0200 H Consumed current 95 mA Dissipated power 2 2 W E100000000505 04 2014 31 Hardware Presentation Rack Position Introduction This topic describes the appropriate rack positions of the BMX NOR 0200 H module on a BMX XB station assembly during installation see page 33 Rack Position Mechanically it is possible to position the BMX NOR 0200 H module in any available slot The following rack assembly includes a M340 CPU in this case a BMX P34 2020 and a BMX NOR 0200 H module Rack positions 0 to 8 are indicated The double wide power supply is mounted at the beginning of the rack 0 0 OG BMX P34 2020 at rack position 0 discrete I O module at rack position 1 counter module at rack position 2 3 BMX NOR 0200 module at rack position 3 4 7 available rack positions 8 extension module at rack position 8 Nao NOTE Refer to the Modicon M340 Using Unity Pro Processors Racks and Power Supply Modules Setup Manual for specific part numbers 32 E100000000505 04 2014 Chapter 3 Hardware Installation What Is in This Chapter This chapter contains the following topics Topic Page Installing a Module 34 Grounding of Installed Modules 36 SD M
112. the session number to route Sector 0 1 2 3 4 0 indicates the sector number to route IOA 1 16777215 1 indicates the Information Object Address to route Background scan check box unchecked indicates the background scan is enabled Cyclic data check box unchecked indicates the cyclic data transmission is enabled transmission Groups Global 1 2 3 4 5 6 7 8 9 10 check box Global defines data objects group responding for 11 12 13 14 15 16 C B interrogation command from master client It can be combination of options 100000000505 04 2014 231 Configuration with the Setup Web Pages 5 and SW The configuration supports 5 only for single point input M SP and SW only for analog input M ME NA for IEC slave NOTE For 96S and SW the CPU mapping does not support array due to the limits of the Unity Pro Quality Bit Flag Mapping The Web site configuration supports quality bit flag mapping to CPU register for monitor data points for IEC master slave NOTE Use this feature in ForM SP M DP M ST M ME M B M ME IT The configuration reuses Timestamp Source in slave and Store To CPU in master and expands two choices based on RTU V1 0 Master and slave have similar configuration pages for quality bits and flags NOTE e For master keep the parameter name Store To CPU e For slave change the name from Timestamp Source into CPU Reg Mapping B
113. time 1 64 1 For IEC 104 and DNP3 client maximum number of servers connected to the client at one time Status Reg Type MW MW channel status register type in CPU Status Reg Start 0 32464 0 Start address of channel connection Address status register 32 bits in CPU for server that configured with more than one clients there is an independent status register for each client NOTE When a module is in the slave server mode several clients lt 4 can be connected to the module These clients have the same configuration except for the IP address Configure the client number in the parameter Connection Count At this time 4 channels are displayed on the page But only one is real the others are displayed as virtual When the user adds removes a real channel the operation effects all virtual channels NOTE The choice between IEC 101 and IEC 104 depends on the combination of protocol mode and network in the communication settings NOTE Master slave is used in serial communication but client server is used in Ethernet communication The designation of the protocols are e IEC 60870 5 101 master IEC 60870 5 101 slave IEC 60870 5 104 client IEC 60870 5 104 server DNP3 master DNP3 slave DNP3 Net client DNP3 Net server E100000000505 04 2014 181 Configuration with the Setup Web Pages Multiple Protocols The configuration supports multiple protocols in one module IEC 101 master IEC 104 server IEC 104 cl
114. to a select or an execute did not echo the request The command did not execute The response to a command had bits indicating that command was not executed 100000000505 04 2014 289 Configuration with the Setup Web Pages DNP3 Data Length amp Mapping Orientation DNP3 Data object type Data length Orientation bits Master Slave Server Binary Input 1 Mod gt CPU CPU gt Mod Double Input 2 Mod gt CPU CPU gt Mod Binary Output CPU gt Mod Mod gt CPU Binary Counter 32 Mod gt CPU CPU gt Mod Analog Input 32 Mod gt CPU CPU gt Mod Analog Output 32 CPU gt Mod Mod gt CPU Read Class 16 CPU Mod Read_Group 16 CPU gt Mod Freeze Counter 16 CPU gt Mod Unsolicited Class 16 CPU gt Mod Time Sync 16 CPU Mod Restart 16 CPU Mod Gen Events 16 CPU gt Mod Clear Events 16 CPU gt Mod 290 100000000505 04 2014 Configuration with the Setup Web Pages DNP3 Data Object Type Mapped to Unity Pro EDT DDT Introduction The RTU data object is mapped to a Unity Pro variable with EDT DDT while exporting data objects mapping a relationship to an XSY file In addition to the variables you define the XSY file contains predefined DDT types for timestamp formats
115. two different cases e The module is in Server Slave mode the modem connected to the module is in Dial in mode e The module is in Client Master mode the modem connected to the module is in Dial out mode Radio Modem User Cases Radio Modem M Master Radio Remote Radio IEC DNP3 via radio Modem M340 BMX NOR 0200H 78 100000000505 04 2014 Modem Communications PSTN Modem User Cases PSTN modem PSTN modem VPN Tunnel Internet M340 BMX NOR 0200H hs ils a S TT ILI 100000000505 04 2014 79 Modem Communications GPRS GSM Modem User Cases ADSL Internet communication PPPoE SCADA N Internet VPN Tunnel M340 BMX NOR 0200H APN d ds GSM GPRS MODEM Sas 3 Mobile Phone 80 100000000505 04 2014 Modem Communications ADSL Modem User Cases ADSL Internet communication PPPoE SCADA VPN Tunnel Internet M340 BMX NOR 0200H ADSL Internet communication PPPoE E100000000505 04 2014 81 Modem Communications 82 E100000000505 04 2014 Part IV Functional Description Introduction This part describes the functionality of the BMX NOR 0200 H module What Is in This Part This part contains the following chapters Chapter Chapter Name Page 7 How to Work with RTU Protocols 85 8 How to Work with Datalogging Service 115
116. used in other distributed infrastructures such as water wastewater transportation and oil and gas industries DNP3 is based on the International Electrotechnical Commission Technical Committee 57 Working Group 03 The IEC 57 WG03 has been working on the Enhanced Performance Architecture EPA a protocol standard for telecontrol applications Each of the EPA s 3 layers corresponds to a layer on the OSI reference model DNP3 is specifically developed for inter device communications that use SCADA RTUs The protocol facilitates both RTU to IED Intelligent Electronic Device and master to RTU IED The protocol was originally designed for slow serial communications but the current DNP3 IP version also supports TCP IP based networking Supported Protocol Features These are the main features that DNP3 supports clock synchronization polled interrogations polled report by exception unsolicited report by exception events transmission time stamped or not counter specific treatment master commands Supported Data Types The DNP3 protocol includes these data types e discrete inputs outputs single or double e measured values with different formats e integrated totals e commands 90 E100000000505 04 2014 How to Work with RTU Protocols Protocol Characteristics The table lists the characteristics for the supported RTU protocols Protocol Characteristics DNP3 master DNP3 NET client up to 32 slaves servers
117. wether or not to backup event on loss of power 222 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value Scope Default Description Value Event Restore Mode Main channel All Main indicates on which channel to restore channels Channel events to Events Time Quality Original Quality Original indicates which quality format the Forcing Invalid Quality events will restore to NOTE Limitations T2 S Frame Period lt T1 Ack PeriodandW Value lt 2 3 Value Configure the module s advanced parameters IEC 104 Server Channel0 Parameters Advanced Parameters First Char Wait ms 0 Rx Buffer Size 256 Offline Poll Period ms 10000 DiscardlFramesOnDisconnect Incremental Timeout ms 30000 Parameter Value Scope Default Description Value First Char Wait ms 0 65535 0 indicates the minimum time between reception and transmission Rx Buffer Size 0 256 256 indicates the received buffer size of serial port Offline Poll 0 4294967295 10000 specifies the period of a session that is offline Period ms attempts to re establish communication Discard Frames on check box unchecked Setting this TMWDEFS TRUE on a slave will cause Disconnect received unacked responses Information Frames to be discarded when the TCP connection is broken If a slave has sent responses but has not yet received a link layer ack and the master is restart
118. 0000505 04 2014 Configuration with the Setup Web Pages TCP UDP Client Server Name Description Name Description TCP destination Destination port for TCP TCP local port Local port for TCP port UDP broadcast Port that sends UDP local port Port that receives port broadcasts in TCP UDP broadcasts available for TCP UDP Only one IP is allowed IP and port configuration of DNP3 Net client UDP IP DNP3 NET Client Channel0 Session0 Parameters IP Address 255 255 255 255 Dest Port 20000 Local Port 20000 Local Address 3 Slave Address 4 Default Response Timeout ms 30000 Advanced Parameters IP and port configuration of DNP3 Net client TCP UDP DNP3 NET Client Channel1 0 Parameters IP Address TCP Dest Port UDP Broadcast Port Broadcast Address Local Address Slave Address Default Response Timeout ms 20000 20000 0 0 0 0 Advanced Parameters 255 255 255 255 100000000505 04 2014 263 Configuration with the Setup Web Pages When the BMX NOR 0200 H module works as client in TCP UDP it can send command requests in broadcasts Beside broadcast address configuration it is necessary to specify the destination address Here are the options of broadcast confirmation which are used to specify the destination address for sending broadcast requests Options Definition address
119. 0505 04 2014 23 Hardware Presentation Module Dimensions Dimensions The dimensions of the Modicon M340 BMX NOR 0200 H module conform to the characteristics of the BMX XBP rack 112 8 nm 444 in 94 3 3 71 NORO0200H 103 76 4 08 100 3 93 32 86 1 25 3 38 24 E100000000505 04 2014 Hardware Presentation LED Indicators Introduction The LED indicators are located on the front of the BMX NOR 0200 H module see page 22 LEDs provide information on e the memory card serial communication LED Descriptions communication with the modules communication on the Ethernet network This illustration shows the diagnostic LEDs on the BMX NOR 0200 H module The colors and blink patterns of the LEDs indicate the status and operating conditions of Ethernet communications on the module Label Pattern Indication RUN green operational state on The module is operating and configured flashing The module is blocked by a detected software error off The module is not configured The application is absent invalid or incompatible ERR red detected error on The processor system or configuration detected an error flashing The module is not configured The application is absent invalid or incompatible The module is blocked by a detected software error off Operations
120. 06 no range or all 7 freeze 00 01 start stop 8 freeze 06 no range or all noack 9 freeze clear 10 frz cl noack 20 1 32 Bit Binary Counter 1 read 00 01 start stop 129 00 01 start with Flag 06 no range or all response stop 20 2 16 Bit Binary Counter 7 read 00 01 start stop 129 00 01 start with Flag 06 no range or all response stop 20 5 32 Bit Binary Counter 1 read 00 01 start stop 129 00 01 start without Flag 06 no range or all response stop 20 6 16 Bit Binary Counter 1 read 00 01 start stop 129 00 01 start without Flag 06 no range or all response stop 21 0 Frozen Counter Any 1 read 00 01 start stop Variation 06 no range or all 21 1 32 Bit Frozen Counter 7 read 00 01 start stop 129 00 01 start with Flag 06 no range or all response stop 21 2 16 Bit Frozen Counter 1 read 00 01 start stop 129 00 01 start with Flag 06 no range or all response stop 21 5 32 Bit Frozen Counter 1 read 00 01 start stop 129 00 01 with Time Of Freeze 06 no range or all response start stop 21 6 16 Bit Frozen Counter 1 read 00 01 start stop 129 00 01 with Time Of Freeze 06 no range or all response start stop 21 9 32 Bit Frozen Counter 7 read 00 01 start stop 129 00 01 without Flag 06 no range or all response start stop 21 10 16 Bit Frozen Counter 7 read 00 01 start stop 129 00 0
121. 1 start without Flag 06 no range or all response stop 22 0 Counter Change Event 1 read 06 no range or all Any Variation 07 08 limited qty 22 1 32 Bit Counter Change 7 read 06 no range or all 129 17 28 Event without Time 07 08 limited qty response index 130 unsol resp 348 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 22 2 16 Bit Counter Change 1 read 06 no range or all 129 17 28 Event without Time 07 08 limited qty response index 130 unsol resp 22 5 32 Bit Counter Change 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 22 6 16 Bit Counter Change 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 23 0 Frozen Counter Event 7 read 06 no range or all Variation O is used to 07 08 limited qty request default variation 23 1 32 Bit Frozen Counter 1 read 06 no range or all 129 17 28 Event 07 08 limited qty response index 130 unsol resp 23 2 16 Bit Frozen Counter 1 read 06 no range or all 129 17 28 Event 07 08
122. 168 E100000000505 04 2014 Configuration and Debug with Unity Pro Section 12 2 Debugging with Unity Pro Overview This section describes procedures for debugging the configuration of the BMX NOR 0200 H modules with Unity Pro What Is in This Section This section contains the following topics Topic Page Module Debugging Screen 170 General Debugging Parameters 171 Debugging Parameters for TCP IP Utilities 173 100000000505 04 2014 169 Configuration and Debug with Unity Pro Module Debugging Screen This four zone Unity Pro Debug tab provides options to debug an Ethernet port NOR screen Ethernet 1 Port 10 100 RJ45 Version 1 0 1 sue Run STS BMX NOR 010 Config Debug Fault Channel 0 r Address information NTP Q From a MAC Address 00 00 54 00 1D B7 NTPstatuss Link to the NTP m Server Primary server Address 192 168 1 100 DST status Daylight Saving NTP server IP address 777 10 Subnetwork mask 255 255 0 0 Time zone GMT 05 00 Eastern Standard Time New York Gateway Address 0 0 0 0 Requests 12 Responses 11 16 1 Last error 1680 Messages Open connections T Reset counte
123. 2 121 IEC104 Server CONNECTED 10 177 75 242 0 5a32 0x00000000 3 23 IEC104 Server CONNECTING 10 177 75 61 0 3c2a 0x00003C29 4 25 IEC104 Server CONNECTING 10 177 75 4 0 3c2a 0x00003C29 5 127 IEC104 Server CONNECTING 10 177 75 5 0 3c2a 0x00003C29 6 1290 IECi0MSeer CONNECTING 10177756 0 3 2 _0 00003 29 7 31 104 Server CONNECTING 10 177 75 7 0 3c2a 0x00003C29 152 100000000505 04 2014 How to Work with Embedded Web Pages PPP Modem and PPPoE Statistics Page Use the Statistics link on the Diagnostics page to access the PPP modem and PPPoE statistics Modern PSTN Mode CLIENT Mode CLIENT Connection INACTIVE Connection INATCIVE Local PPPoE Address NA Phone number 8767 InitAT Cmd NA WPaddress Local PPP address Remote PPP address System Memory Statistics Page Use the Statistics link on the Diagnostics page to access the system memory statistics Number of 32634 Number of MW 32464 Free memory size 50486600 E100000000505 04 2014 153 How to Work with Embedded Web Pages Upload MIB File File Download Dialog When you select Upload MIB File the File Download dialog box appears You are asked if you want to save the MIB file or open it File Download Do you want to open or save this file a Name SchneiderTFE zip Type WinZip File 62 0 KB From 192 168
124. 2014 179 Configuration with the Setup Web Pages Channel Configuration Communication Setup Before configuring the ports of the BMX NOR 0200 H module select the link to be configured via the Web site Click Communication Parameters Add 2 Communication Channel Parameters Remove Add 7 Channel ID Protocol Mode Network Type IP Address Port Count Channels CPU Reg Connec 0 DNP3 _ Slave Server TCP IP 255 255 255 255 20000 1 MW 0 Channel1 x Channel ID 1 Protocol w Network Type TCP IP Slave Server IP Address 255 255 255 255 Local Port 20000 Connection Count 1 Status Reg MW lv Status Reg Start Address 0 Parameter Value scope Default value Description Channel ID 0 4 0 index of the channel Protocol IEC DNP3 IEC 101 104 protocol type Network Type TCP IP Raw Serial TCP IP physical port type for DNP3 TCP UDP and UDP IP Mode Master Slave Slave Server role in network IP Address 255 255 255 255 address of remote device multiple address separate by semicolon 180 E100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default value Description Local Port 0 65535 2404 port of remote device Connection 1 4 1 For IEC 104 and DNP3 server Count maximum number of clients connected to the server at one
125. 2100000000505 04 Modicon M340 RTU BMX NOR 0200 H Module User Manual 04 2014 Schneider www schneider electric com Electric The technical characteristics of devices described in this document also appear online access this information online Step Action 1 Go to the Schneider Electric home page www schneider electric com 2 In the Search box type the reference of a product or the name of a product range e Do not include blank spaces in the model number product range To get information on grouping similar modules use asterisks 3 If you entered a reference go to the Product datasheets search results and click on the reference that interests you If you entered the name of a product range go to the Product Ranges search results and click on the product range that interests you 4 If more than one reference appears in the Products search results click on the reference that interests you Depending on the size of your screen you may need to scroll down to see the data sheet To save or print a data sheet as a pdf file click Download XXX product datasheet The characteristics that are presented in this manual should be the same as those characteristics that appear online In line with our policy of constant improvement we may revise content over time to improve clarity and accuracy If you see a difference between the manual and online information use the online inf
126. 295 20000 indicates the maximum time between link polls before the unbalanced slave is declared offline 212 100000000505 04 2014 Configuration with the Setup Web Pages Sector Parameters Click Setup IEC 101 Slave Session Sector Parameters IEC 101 Slave Channel0 Session0 Sector0 Parameters Common ASDU Address Cyclic Message Interval ms Background Period ms DefaultResponse Timeout Send Clock Sync Events Read Time Format C_RD_NA Measurands Time Format C_IC_NA Time Format Advanced Parameters 10000 20000 60000 None None None Parameter Value scope Default Description value Common ASDU Address 1 65535 3 indicates the common address of ASDU 65535 is broadcast address Cyclic Message 0 4294967295 10000 specifies the number of milliseconds Interval ms between cyclic updates Background Period ms 0 4294967295 20000 specifies the period to generate background scan data on this sector Default Response 0 4294967295 60000 indicates the default timeout for the Timeout ms confirmation of request Send Clock Sync Events check box unchecked controls if spontaneous clock synchronization events are transmitted to the master The time format is CP24 Read Time Format None CP24 None specifies the completeness time CP56 format for respond to C RD NA C RD NA Measurands Time None CP24 N
127. 3 240 100000000505 04 2014 Configuration with the Setup Web Pages IEC Event Queue Setting Event Queue Setting Page This figure shows the dialog box for configuring the event queue setting for an item with the example data type M_SP for IEC 60870 5 101 104 slave server Setup 53 IEC 104 Server Channel0 Session0 Sector0 Events El Communication Remove Channel Parameters gt Type Identification Event Store Mode Max Event Count CPU Reg CPU Reg Address Modem Parameters Modem GSM Phone List El Serial Port Parameters E PPPoE Parameters g Channel 104 Server Parameters E Session 0 Parameters Sector 0 Parameters Data Mapping Events Add Reset Communication Export Import files MBO Security FTP This figure shows the dialog box for configuring the event management M_SP Single point information x Event Store Mode All v Time Stamp Type CP56 Buffer Setting Max Event Count All Channels Max Event Count 1 Channel By Channel Max Event Count 2 100 Max Event Count 3 100 CPU Reg Type CPU Reg Address 0 Event Backup F E100000000505 04 2014 241 Configuration with the Setup Web Pages Parameter Value scope Default value Description Event Store Mode All Most Recent All stores all events in the queue or only stores most recent events for each object
128. 3 How to Work with RTU Protocols Clock Synchronization with the NTP Protocol Features of the Service The clock synchronization via NTP offers e periodic time corrections obtained from the reference standard for example the NTP server e automatic switchover to a backup time server if a trouble occurs with the normal server system e local time zone configurable and customizable including daylight saving time adjustments Controller projects use a function block to read the clock a feature that allows events or variables in the project to be time stamped Time stamping is accurate to e 5 ms typical e 10 ms worst case Clock Synchronization and Time Stamps The BMX NOR 0200 H module sends a source clock synchronization signal to a M340 CPU The module firmware includes an NTP client which provides clock synchronization The synchroni zation process occurs as follows The NTP Client Result 1 requests a clock synchronization The NTP server sends a signal signal from the NTP server over an Ethernet network Stores the time sends a message to the clock system The CPU updates its internal clock The counter in the CPU clock is now typically within 5 ms of the NTP server with a worst case of 10 ms Before the next clock synchronization signal the CPU s clock is updated each ms by an internal timer Use the R NTPC function block see Modicon M340 for Ethernet
129. 4 27 Hardware Presentation Pin Assignment The following illustration shows the Ethernet port Pinout table Pin Signal TD TD RD not connected not connected RD not connected o oO OINI not connected NOTE If there is a connection via a shielded cable the connector casing on the module is linked up to the ground connection Line Speed These line speeds are available for the BMX NOR 0200 H module 100 Mb in half duplex 100 Mb in full duplex 10 Mb in half duplex 10 Mb in full duplex The user can not configure the line speed Characteristics of speed adaptation are e Auto sensing and auto negotiation allow the BMX NOR 0200 H module to quickly configure itself to the local Ethernet switch s speed and duplex mode e The negotiated speed between two Ethernet devices is limited to the speed of the slower device 28 100000000505 04 2014 Hardware Presentation Serial Port General The BMX NOR 0200 H module has a built in serial port supporting either serial communications serial link or modem communications an external modem device see page 65 The following table describes the serial communication channels Characteristic Description Protocols supported RTU protocols e IEC 60870 5 101 e IEC 60870 5 104 PPP Modem e
130. 4 Hardware Installation Wiring Considerations The Link The following situations can create a temporary disruption in the application or communications The RJ45 10 100 BASE T interface connector gets connected or disconnected when the power is on e Modules are re initialized when the power is switched back on E100000000505 04 2014 41 Hardware Installation 42 100000000505 04 2014 Communications Characteristics About this Part This part describes Ethernet and Serial communications What Is in This Part This part contains the following chapters Chapter Chapter Name Page 4 Ethernet Communications 45 5 Serial Communications 65 6 Modem Communications 69 100000000505 04 2014 43 Communications Characteristics 44 E100000000505 04 2014 Chapter 4 Ethernet Communications What Is in This Chapter This chapter contains the following sections Section Topic Page 4 1 Ethernet Services 46 4 2 IP Parameters 48 4 3 Modbus TCP IP Messaging 54 4 4 SNMP 58 4 5 SOAP Web Services 63 EIO0000000505 04 2014 45 Ethernet Communications Section 4 1 Ethernet Services Ethernet Services Overview Introduction This topic introduces the different Ethernet services available via the BMX NOR 0200 H module e Support of Modbus TCP messaging see page 54 e Support of DNP3 NET and IEC 608
131. 40 141 142 144 145 146 147 149 150 151 152 154 155 156 157 158 159 161 161 100000000505 04 2014 Chapter 12 Configuration and Debug with Unity Pro 163 12 1 Configuration with Unity 164 Configuring with Unity 165 Configuration Screen 167 12 2 Debugging with 169 Module Debugging 170 General Debugging Parameters 171 Debugging Parameters for TCP IP Utilities 173 Chapter 13 Configuration with the Setup Web Pages 175 13 1 Web Site Configuration 176 Parameter Input Interface in Setup Web 177 Channel Configuration 180 Serial Port Configuration 185 Ethernet Port Configuration 192 Time Zone Configuration 193 RTU Protocol Parameters 195 Module and Protocols Configuration 196 RTU Protocol Service Reset 199 Upward 200 13 2 WebSite Configuration
132. 5 04 2014 Chapter 6 Modem Communications What Is in This Chapter This chapter contains the following topics Topic Page Modem Communication 70 Modem Support T1 Modem Register Command 73 Modem Communication Error Codes 78 Connecting External Modem RS232 76 How to work with External Modem 78 100000000505 04 2014 69 Modem Communications Modem Communication Overview The BMX NOR 0200 H module can be used with several external modem types Radio PSTN GSM GPRS ADSL There are three different ways to connect an external modem to a BMX NOR 0200 H module e via the serial port using serial communication protocol IEC 60870 5 101 or DNP3 serial e via the serial port and configuring a Point to Point Protocol PPP connection using ethernet communication protocol IEC 60870 5 104 or DNP3 NET e via the ethernet port and configuring a Point to Point Protocol over Ethernet PPPoE connection using ethernet communication protocol IEC 60870 5 104 or DNP3 NET NOTE PPPoE connection is only used with an ADSL external modem 70 100000000505 04 2014 Modem Communications Modem Support Connection via Serial Link The serial link connection can be used to configure and communicate with an external modem Radio PSTN GSM By default the modem waits for an incoming call Dial in mode When it receives an incoming call try to establish the connection NO
133. 550 Class1 7 Class2 7 53 Default Event Variation 942v1 32bit Analog Out Deadband 0 0 NOTE Floating point values scientific notation can be entered for the deadband 274 E100000000505 04 2014 Configuration with the Setup Web Pages Behavior of a Binary Output The configuration applies latch on off pulse on and close trip pulse on TCC Trip Close Operation type field Control code Point model in outstation Code None pulse on 01 hex activation latch on 03 hex latch complement latch off 04 hex Close pulse on 41 hex two s complement Trip 81 hex This figure shows the selection of control code type Binary_Output x Point Number 0 Point Count 1 CPU Register Type MW CPU Register Address 0 Variable Name Operation Mode Auto Control oe Type Latch_On_Off Paramar ection Pulse Duration Latch On Off This parameter is used to specify which Pulse Trip Close control code is used in CROB The Pulse On CROB is triggered by value for Latch On Off and Pulse Trip Close but by value change for Pluse On The valid value is 0 or 1 Type enum Options Latch On Off Pulse Trip Close Pulse On Default Latch On Off The DNP3 master only provides on time configuration but does not provide configured off time and count The DNP3 slave also only applies pulse on which the count is 1 and the off time value is 0 Two s complement tri
134. 7 28 index Counter Event 07 08 limited qty response with Time 130 unsol resp 30 0 Analog Input 1 read 00 01 start stop Any Variation 06 no range or all 07 08 limited qty 17 27 28 index 30 1 32 Bit Analog 1 read 00 01 start stop 129 00 01 start stop Input 06 no range or all response 17 28 index see 07 08 limited qty note 2 17 27 28 index 30 2 16 Bit Analog 1 read 00 01 start stop 129 00 01 start stop Input 06 no range or all response 17 28 index see 07 08 limited qty note 2 17 27 28 index 30 3 default 32 Bit Analog 1 read 00 01 start stop 129 00 01 start stop see Input without 06 no range or all response 17 28 index see note 1 Flag 07 08 limited qty note 2 17 27 28 index 30 4 16 Bit Analog 1 read 00 01 start stop 129 00 01 start stop Input without 06 no range or all response 17 28 index see Flag 07 08 limited qty note 2 17 27 28 index 30 5 short floating 1 read 00 01 start stop 129 00 01 start stop point 06 no range or all response 17 28 index 07 08 limited qty note 2 17 27 28 index 100000000505 04 2014 363 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No C
135. 70 104 protocols e Built in HTTP server e Other supported IP protocols e NTP client e FTP client server e BootP client DHCP FDR client e SNMP agent see page 58 e SMTP client e SOAP XML server see page 63 Network Time FDR Automatic RTU File Web SOAP gt management synchro reconfiguration services Transfer server Services IS 2909 Applications SNMP DHCP TFTP IEC104 DNP3 HTTP SMTP Modbus ed Eel Ethernet 802 3 Ethernet II MIB 2 Private Schneider Electric Standard MIB 2 Modbus TCP Messaging This service allows the exchange of data between devices supporting Modbus over TCP IP NMT The NMT Network Managemen T protocol provides services for network initialization diagnostic and control and also device status control 46 E100000000505 04 2014 Ethernet Communications NTP The NMT Network Time Protocol is a protocol used for synchronizing the clocks of computer systems The time synchronization service establishes time accuracy among devices clocks over a Ethernet network FTP The FTP File Transfer Protocol is the World Wide Web s file transfer protocol BootP bootstrap protocol A UDP IP protocol that allows an Internet node to obtain its IP parameters based on its MAC address DHCP The DHCP dynamic host configuration protocol is a TCP IP protocol that allows network devices DHCP clients to obtain their IP addresses from a DHCP server through
136. 8 E100000000505 04 2014 Configuration with the Setup Web Pages IEC Data Object Mapping Introduction Depending on the data object type and protocol profile selection different configuration fields are used in the definitions of different data object mapping items Exchangeable M340 CPU Data Object Located and unlocated variables can be exchanged between the M340 CPU and the BMX NOR 0200 H module after you have defined and managed the memory map of the M340 CPU to exchange data The M340 CPU data objects are mapped and only linked for the BMX NOR 0200 H module purpose A WARNING UNINTENDED EQUIPMENT OPERATION Do not create an instance of redundant data access Failure to follow these instructions can result in death serious injury or equipment damage Data Exchanging Performance To sustain a high rate of data exchange we recommend that you define the RTU memory for data objects in a continuous sequence NOTE For each unlocated variable configured length cannot exceed 1000 bytes Module Behavior After Unity Pro Application Transfer NOTE After a Unity Pro application transfer the following behavior occurs e The RTU protocol service is not restarted it is only restarted if the BMX NOR 0200 H module IP address has been modified e Depending on the Unity Pro application settings PLC data could be either reset or not e Unexpected new events may occur in case of data reset after download If you
137. 9 How to Work with Email SMS Service 127 10 How to Work with Embedded Web Pages 137 100000000505 04 2014 Functional Description 84 E100000000505 04 2014 Chapter 7 How to Work with RTU Protocols Introduction This chapter describes the built in RTU protocols characteristics for use in Telemetry and Supervisory Control and Data Acquisition SCADA applications What Is in This Chapter This chapter contains the following sections Section Topic Page 7 1 RTU Protocols 86 7 2 Clock Synchronization 92 7 3 Time Stamping 97 7 4 Events Management 98 7 5 Integrity Poll Command 109 7 6 Transmission Modes 112 7 7 Connection Status 113 7 8 Communication Error Codes 114 100000000505 04 2014 85 86 How to Work with RTU Protocols Section 7 1 RTU Protocols What Is in This Section This section contains the following topics Topic Page Communication Protocols 87 IEC 60870 5 101 104 Protocols Overview 88 DNP3 Protocols Overview 90 100000000505 04 2014 How to Work with RTU Protocols Communication Protocols Introduction This topic describes the characteristics of the supported RTU protocols Functions and Protocols The BMX NOR 0200 H module supports these functions and protocols RTU protocols IEC 60870 5 101 master or slave IEC 60870 5 104 client or server DNP3 serial master o
138. A lt 8 gt Bitstring of 32 bit with time tag M BO TA X lt 9 gt Measured value normalized value NA_ lt 10 gt Measured value normalized value with time tag _ X lt 11 gt Measured value scaled value M NB X lt 12 gt Measured value scaled value with time tag M ME TB X lt 13 gt Measured value short floating point value M ME NC_ X lt 14 gt Measured value short floating point value with time tag M ME TC X lt 15 gt 15 Integrated totals M IT NA 308 100000000505 04 2014 Interoperability Process information in monitor direction X lt 16 gt lt 16 gt Integrated totals with time tag M IT TA lt 17 gt lt 17 gt Event of protection equipment with time tag M EP TA_ lt 18 gt 18 Packed start events of protection equipment with time _ _ tag 19 Packed output circuit information of protection equipment EP TC with time tag 20 Packed single point information with status change M PS _ detection lt 21 gt Measured value normalized value without quality M ME ND_ descriptor X lt 30 gt Single point information with time tag CP56Time2a M SP _ X lt 31 gt Double point information with time tag CP56Time2A M DP _ X lt 32 gt Step position information with time tag CP56Time2A M ST TB
139. Address Variable Name Event Class Mask CPU Reg Mapping Default Static Variation Default Event Variation 7j ClassO 7 Classt 51 Class2 77 Class3 WVaueony M M Cancel 100000000505 04 2014 267 Configuration with the Setup Web Pages This figure shows the dialog box for configuring the Binary Input data object mapping with DNP3 NET Client Binary_Input Point Number Point Count CPU Register Type CPU Register Address Variable Name Store To CPU Static Variation Event routing Channel Session Point number Event Class Mask Default Event Variation Mapping Table Depending on the data object type and the selected protocol profile different configuration fields are required to define a data object mapping item This table describes the parameters Value only g1v1 Binary In None 0 0 v 0 Class1 g2v1 Binary Input No lt 7 Class2 Add Class3 Cancel Title Value scope Default value Description Point Number 1 16777215 0 indicates the start number of the point Point Count 1 65535 1 indicates the number of points CPU Register Type 5 YMW indicates the register type in CPU to map points 1 SW Unlocated CPU Register Address 0 30000 0 indicates start address of the register in CPU This field only taken into account for located variables
140. C application for end user Set Measured Value Support P ME NA 1 P_ME_NB_1 P_ME_NC_1 to set the low limits high limits and threshold of the measured scaled and float value The parameters of the measured points are activated immediately after IEC 101 104 slave receives the request from IEC 101 104 master P ME A P_ME_B and P_ME_C in IEC 101 104 are used to set the parameter of the measured point for M ME A M ME Band M ME In IEC 101 104 master they are command to set parameter of the measured point but in IEC 101 104 slave they are used to store current parameter value It is necessary to specify the qualifier when configuration both in IEC 101 104 master and IEC 101 104 slave This figure shows the parameter point setting of IEC 101 104 master P MEA x IOA 1 Point Count 1 CPU Register Type MW CPU Register Address 0 Variable Name Qualifier of Parameter Threshold Threshold Low Limits High Limits 100000000505 04 2014 235 Configuration with the Setup Web Pages In IEC 101 104 slave its configuration is same as IEC 101 104 master except IOA corresponds to the measure point such as M_ME_A IOA which is used to bind P ME and M ME A This figure shows the parameter point setting of IEC 101 104 slave IOA 1 Point Count 1 CPU Register Type AMW TE Description Specify which M_ME_A points parameter it associates with Type integer Min 1 Max 16777215 Defau
141. Communications Modules and Processors User Manual in either MAST FAST or Interrupt sections to read the clock from the PLC application 94 E100000000505 04 2014 How to Work with RTU Protocols The CPUs on an Ethernet network should be synchronized with the same NTP server NTP Server Ethernet NTP Request Network System Counter NTP Response R_NTPC M340 System N ENO OUT OUT2 STATUS Clock Synchronization Terms Term Description of Service local clock offset Accurate local time adjustments are made via a local clock offset The local clock offset is calculated as T2 T1 TA T3 2 where e T1 when NTP request is transmitted from the module e T2 time when NTP server receives the request provided by the module in response e T3 when the NTP server transmits the response provided to the module in the response e T4 time when NTP response is received by the module time accuracy The local time margin is 10 ms compared to the referenced NTP server s time typical 5 ms worst case 10 ms settling time Maximum accuracy is obtained after 2 updates from the NTP server polling period Accuracy depends on the polling period Less than 10 ms of margin is achieved for polling dependency periods of 120 ms or less To obtain a high degree of accuracy when your network bandwidth allows reduce the polling period to a small value
142. Email Service 130 Email Properties 131 Email Configuration 133 100000000505 04 2014 127 How to Work with Email SMS Service About the Email Service SMS Service Presentation The BMX NOR 0200 H module can automatically and dynamically send email or SMS to alert specified users to alarm notifications maintenance reminders production reports plant status updates other process information The email service enables you to create various email notifications including recipient s names email addresses message subject email body and attached files The body of an email can include fixed text messages hyperlinks file attachments and real time application values that are dynamically integrated into the email at the moment the email is sent by the module The file can be attached to the email for example a datalogging file generated by the datalogging service SMS messages may also be sent to mobile phones if you are using GSM modem or if the client s email server has the capability SMS are a dedicated configuration of the email service Email or SMS are sent when predefined application or process event is triggered NOTE The Email SMS service is configured using Web Designer software Service Requirements The email service provides only an SMTP client interface The email service client connects to a local or remote SMTP server to distribute the mail to its recipients A local SMTP server has
143. G WARNING indicates a potentially hazardous situation which if not avoided can result in death or serious injury A CAUTION CAUTION indicates a potentially hazardous situation which if not avoided can result in minor or moderate injury NOTICE NOTICE is used to address practices not related to physical injury 100000000505 04 2014 9 Electrical equipment should be installed operated serviced and maintained only by qualified personnel No responsibility is assumed by Schneider Electric for any consequences arising out of the use of this material A qualified person is one who has skills and knowledge related to the construction and operation of electrical equipment and its installation and has received safety training to recognize and avoid the hazards involved 10 E100000000505 04 2014 About the Book lt At a Glance Document Scope This guide explains the architectures and features supported by the in rack BMX NOR 0200 H module for the Modicon M340 PAC modular controller platform This guide includes instructions for setting up RTU functions and protocols that are used in various telemetry and supervisory control and data acquisition SCADA applications such as water and wastewater oil and gas power and hydropower other distributed infrastructures Validity Note This document is valid from Unity Pro V8 0 Related Documents Title of Docume
144. HTTP server The installed HTTP server transmits Web pages between a server and a browser providing Ethernet communications modules with easy access to devices anywhere in the world from standard browsers such as Internet Explorer or Netscape Navigator hub A hub device connects a series of flexible and centralized modules to create a network module In a programmable controller system an I O module interfaces directly to the sensors and actuators of the machine process This module is the component that mounts in an I O base and provides electrical connections between the controller and the field devices Normal I O module capacities are offered in a variety of signal levels and capacities Scan List A configuration table which identifies the targets with which repetitive communication is authorized scanning An scan continuously polls modules to collect data bits and status and diagnostics information This process monitors inputs and control outputs ICMP Internet Control Message Protocol ICMP is a protocol within TCP IP that reports detected errors in datagram transmissions IEEE Institute of Electrical and Electronics Engineers Inc The international standards and conformity assessment body for all fields of electrotechnology including electricity and electronics IOA information object access is the exchange protocol carried out over the HTTP HyperText Transfer Protocol channel IODDT inpu
145. JL The maximum time delta in milliseconds C_RD_NA Measurands Time Format t which commands will be accepted If a time tag command is received with a C IC NA Time Format None k older than the current minus Short Pulse Duration 100 the maxCommandAge the command Will get no response Type integer Long Pulse Duration 1000 Min 1000 Max 600000 Default 30000 If a time tagged command is older than this period allows then the control operation is not taken The default value for this field is 30000 milliseconds It ranges from 1000 ms to 600 000 ms The parameter Max Command Age only takes effect on time tagged command The commands without time tag are accepted by IEC 104 server no matter what this parameter is configured E100000000505 04 2014 237 Configuration with the Setup Web Pages This figure shows the command with Time Tag IEC 104 client IEC 104 Client Channel1 Session0 Sector0 Parameters Advanced Parameters M EI NA GI M EI NA Time sync M EI Online Gl Online Time Sync 0 ER amp 3 S Online CI ACTTERM With CSE Setpoint ACTTERM With Command Command With Time Tag Parameter Description Whether the control command follow time tag Default unchecked nge When command with time tag is enabled the IEC 104 master only supports to send control command with time tag otherwise sends control command without time tag 23
146. Log variables Add Remove Backup Parameters use of a trigger INS Status Variable Bi use of a timer second s Minimum is 30mn Log estimated time Media target SD card v Maximum file number 10 Log maximum size 500 Ko Purge parameters use ofa trigger NY Status Variable FTP settings FTP trigger Status Variable EI FTP address Login user Password pem Configuration Properties 100000000505 04 2014 121 How to Work with Datalogging Service Log Tables Parameters Fields Function Log Tables List of the current log tables stored in the module It is possible to Create a new log file using the Add button Remove a log file using the Remove button e Duplicate a log file using the Duplicate button Tables Parameters Fields Function Table name Name of the log file that contains the data you have configured Table status variable Determine the status of the table Enable logging By selecting this check box and defining an associated variable in the Enable logging variable the table can only perform actions such as log data backup purge or FTP when the associated variable is set to a value other than zero and when the trigger is activated NOTE Select the type of trigger in the drop down menu Log Parameters Fields Function Use of a trigger
147. Master Channel0 Parameters DL Address Length 1 Use Balanced Mode 7 Session Count 1 Advanced Parameters Parameter Value scope Default Description value DL Address Length 0 1 2 1 indicates the octets used for data link address Use Balanced Mode check box unchecked indicates the usage of balanced or unbalanced mode Session Count 1 32 1 indicates the maximum number of sessions on the channel 202 100000000505 04 2014 Configuration with the Setup Web Pages Configure the module s advanced parameters IEC 101 Master Channel0 Parameters Advanced Parameters First Char Wait ms 0 Rx Buffer Size 256 One Char Ack Allowed One Char Nack Allowed tJ Rx Frame Timeout ms 15000 Confirm Mode ALWAYS Confirm Timeout ms 2000 Max Retries 2 Test Frame Period ms 0 Offline Poll Period ms 10000 Incremental Timeout ms 30000 Max Queue Size 0 Parameter Value scope Default Description value First Char Wait ms 0 65535 0 indicates the minimum time between reception and transmission Rx Buffer Size 0 256 256 indicates the receive buffer size of serial port bytes One Char Ack Allowed check box unchecked allows transmission of one character E5 instead of the fixed length ACK message One Char Nack Allowed check box unchecked allows transmission of one character response instead of the fixed length NACK me
148. Measure value scaled value Measure value short floating point number Station interrogation x Global x Group1 x Group 7 X Group 13 x Group 2 x Group 8 X Group 14 x Group 3 x Group 9 X Group 15 X Group 4 X Group 10 X Group 16 X Group 5 X Group 11 X Group 6 X Group 12 Clock synchronization x Clock synchronization x Day of week used X RES1 GEN time tag substituted not substituted used X SU bit summertime used Command transmission Direct command transmission Direct set point command transmission Select and execute command Select and execute set point command C SE ACTTERM used X X XxX XxX XK Xx No additional definition Short pulse duration duration determined by a system parameter in the outstation Long pulse duration duration determined by a system parameter in the outstation X Persistent output X Supervision of maximum delay in command direction of commands and set point commands Configurable Maximum allowable delay of commands and set point commands Transmission of integrated totals X Mode A Local freeze with spontaneous transmission Mode B Local freeze with counter interrogation Mode C Freeze and transmit by counter interrogation commands Mode D Freeze by counter interrogation command frozen values reported spontaneously X X X X Count
149. NB 6 IN 9o MWr m c 8 INT R number of useless messages filtered by the Ethernet port per second BW NB MSG FILTER 9o MWr m c 9 INT R number of messages dropped by the Ethernet port per second BW NB MSG DROP MWr m c 11 INT R maximum number of useless messages filtered by the Ethernet port per second BW_MAX_MSG_FILTER MWr m c 12 INT R maximum number of messages dropped by the Ethernet port per second BW_MAX_MSG_DROP MWr m c 13 INT R maximum number of multicast messages received per second BW_MAX_MSG_MC R read only E100000000505 04 2014 379 Ethernet Language Objects Section B 3 Language Objects Associated with BMX NOR 0200 H Module Configuration About this Section This section describes the configuration language objects associated with the Ethernet communication on the BMX NOR 0200 H module What Is in This Section This section contains the following topics Topic Page Language Objects for Implicit Exchange 381 Language Objects for Explicit Exchange 382 380 100000000505 04 2014 Ethernet Language Objects Language Objects for Implicit Exchange Introduction This topic describes the implicit exchange language objects for the BMX NOR 0200 H module Input Bits The following table describes the input bit l language objects Object Description lr m 0 ERR the CH_ERROR bit Input Words The following table describes the
150. New Project B e Target 1 Devices Website B Target 2 8 C3 Website Project RTU Project Step2 Add Device Select the Target from the Target List select the Device from the Device List and press the gt button Remove Device Select the Device and press the button Edit Device Details Click on the Name Address column to edit Target List Device List Selected Target s Device s BMX NOR 0200 Modicon M340 Target Device Name Address Protocol E Efl BMX NOR 0200 module gt mr Modicon M340 0 localhost UMAS Ei 100000000505 04 2014 297 Web Designer Configuration Once the project is created the Web Designer treeview provides the classic menus data tables services and website but without the graphic screens Navigator 14 BMX NOR 0200 Target0 192 168 2 65 2 a Devices g Device0 425 Data Tables 0 Table 2 2 Services B datalogging email Q Website B Namespace B Namespace Write Access 2 UserWebFiles ftp Name of the project Target associated with the project 3 Directories associated with the project N 298 E100000000505 04 2014 Web Designer Configuration PLC Device Configuration Variables List Configuration The BMX NOR 0200 H module supports M340 STU XVM program file imports It allows you to create a cust
151. PU sends a Integrity Poll command to the master channel The master channel send Integrity Poll request to the sub slave The sub slave responds to the request with the value of the latest points The logic slave data base is synchronized while the master channel updates the database Points value are synchronized cyclically between the database of the master channel and CPU registers 100000000505 04 2014 111 How to Work with RTU Protocols Section 7 6 Transmission Modes Overview Introduction With DNP3 or IEC 101 104 protocols the NOR 0200 H module manages different ways of retrieving data with the following transmission modes balanced or unbalanced transmissions polled interrogations report by exception unsolicited messaging mix of the above methods NOTE For transmission modes setup set the Advanced Parameters see page 253 DNP3 Balanced and Unbalanced Mode In the unbalanced transmission mode only the master station can initiate data transfer with the remote devices by polling the slaves In balanced transmission mode both the master and slaves can initiate data transfer Polled Interrogations Polled Interrogations is the basic data exchange method The master station requests data to multiple RTU station devices by polling periodically the remote slaves Report by Exception Report By Exception RBE provides optimized data transfer between master and slaves stations w
152. STATUS BOOL Reserved for L2 for future use 9olIWr m c 0 6 NOTE All objects are read only 376 E100000000505 04 2014 Ethernet Language Objects Details of Explicit Exchange Objects of the IODDT Type T COM ETH BMX System Words The table below shows the meaning of the system word bits Standard Symbol Type Access Meaning Address EXCH STS INT R exchange status MWr m c 0 STS IN PROGR BOOL R reading of status words of MWr m c 0 0 the channel in progress CMD IN PROGR BOOL R command parameter write MWr m c 0 1 in progress ADJ IN PROGR BOOL R adjust parameter 96 MWr m c 0 2 exchange in progress RECONF IN PROGR BOOL R reconfiguration in 96 MWr m c 0 15 progress EXCH RPT INT R channel report MWr m c 1 STS_ERR BOOL R channel status cannot be MWr m c 1 0 read CMD_ERR BOOL R a command cannot be 96 MWr m c 1 1 sent on the channel ADJ ERR BOOL R the channel cannot be MWr m c 1 2 adjusted RECONF_ERR BOOL R the channel cannot be MWr m c 1 15 reconfigured R read only Status Words The table below gives the meanings of the status word bits CH_FLT MWr m c 2 The reading is taken by a READ STS Standard Symbol Type Access Meaning Address INTERNAL FLT BOOL R an internal error has been detected or the self test cannot be completed MWr m c 2 4 APPLI_FLT BOOL an adjustment or configurat
153. Send Clock Sync Events E Max Command Age ms 30000 Delete Oldest Event C_RD_NA Measurands Time Format None Iv C_IC_NA Time Format None v Short Pulse Duration 10 Long Pulse Duration Parameter Description Specify pulse s width in milliseconds Type integer Min 0 Max 4294967295 Default 1000 When client master sends pulse command to server slave the pulse duration is defined by controlled station So the short Long pulse duration needs to be configured on the Web site and they are effective for C_SC C_DC and C_RC e short pulse duration 100ms by default e long pulse duration 1000ms by default When configuring C_SC C_DC and C_RC in server slave their default qualifier needs to be set If you do not specify the client master qualifier is 0 the slave uses the pre defined qualifier above 234 E100000000505 04 2014 Configuration with the Setup Web Pages This figure shows the qualifier configuration the default qualifier is persistent output C_SC Single command x IOA 1 Point Count 1 CPU Register Type MW v CPU Register Address 0 Variable Name Need Select Default Qualifier Persistent Output Short Pulse Long Pulse Persistent Output NOTE C_SC C_DC and C_RC are triggered to update their value into CPU register only when server slave receive command request from master but not synchronized cyclically Keep the corresponding CPU register not written by PL
154. Service Reset Setup Tree After any protocol parameters change either by entering a new value or by importing a new parameter file reset the RTU function in order to implement the changes This figure shows the setup tree for an IEC 60870 5 104 server as an example a Monitoring Control Diagnostics Maintenance Setup Setup Communication P Channel The server is applying the change Please wait for while IEC 104 Server Reset Communication Export Import files Security FTP Copyright 2010 Schneider Automation SAS All rights reserved E100000000505 04 2014 199 Configuration with the Setup Web Pages Upward Compatibility Introduction The BMX NOR 0200 H module supports upward compatibility from V1 0 to V1 5 RTU V1 5 has upwards compatibility including firmware and configuration files All features from previous versions are supported by V1 6 New Firmware with Old Hardware PV 03 or later hardware supports all the new features of the V1 6 firmware NOTE If you are using hardware the user interface allows you to set event backup parameters but they are not applied if a loss of power occurs A message appears on the configuration page indicating that the event backup feature is not supported in PV 03 Check your hardware version if you need this feature Screen of event backup DNP3 NET Server Channel1 Parameters Event Backup Enable o Event backup feature is supported from
155. Special use Optional FFFF hex All call application layer confirmation to clear IIN1 0 is optional Mandatory FFFE hex All call application layer confirmation to clear IIN1 0 is mandatory Never FFFD hex All call application layer confirmation must not be required to clear IIN1 0 Destination address configuration of broadcasts DNP3 NET Client Channel1 Session0 a Parameters Advanced Parameters Link Status Period ms 0 Auto Integrity Local Auto Integrity Timeout Auto Event Poll Auto Delay Measure Auto Time Sync None v Auto Unsolicited None Auto Enable Unsol Class1 v Auto Enable Unsol Class2 v Auto Enable Unsol Class3 Read Timeout Allowed 0 Broadcast Confirmation NEVER NEVER Mandatory Optional 264 E100000000505 04 2014 Configuration with the Setup Web Pages In TCP UDP it depends on whether this command is broadcast or not to the client So it is necessary to enable it explicitly in data mapping setting Unsolicited_Class x CPU Reg Type MW v CPU Reg Address 0 Variable Name Class Mask 7 Class1 1 Class2 E Class3 Operation Mode Enable Broadcast NOTE e Not all commands are supported in broadcast BMX NOR 0200 H module client supports e Restart e Time Sync e Unsolicited Class e Freeze Counter e Binary Output e Analog Output e Freeze Counter Binary Output and Analog Output support broadcast only when operation mode function code
156. State only ON and OFF are valid states the final state is ON or OFF after impulse Indeterminate State the final state is 0 after executing any impulse Data Synch Mode Cyclic Synch Synch On Demand Cyclic Synch specifies how the data are synchronized either cyclically or when the server station receives a request from the master see note it is used only by data of type C_SE_NA C SE NB C SE NC and C BO NA NOTE Only MW and 96M control points are supported in the Synch On Demand mode 228 100000000505 04 2014 Configuration with the Setup Web Pages IEC Data Object Mapping Page and Table Data Object Mapping Page This figure shows the dialog box for configuring the data object mapping for an item with the example data type M_SP for IEC 60870 5 101 104 slave server Setup IEC 104 Client Channel0 Session0 Sector0 Data Mapping El E gj Communication annel Parameters Modem Parameters Modem GSM Phone List Bg Serial Port Parameters PPPoE Parameters ni g Channel IEC 104 Client Parameters Session 0 Parameters g Sector 0 Parameters Data Mapping Reset Communication EX port Import files Security FTP Remove E Type Identification E ins qc gt gt gt UJ Co CO CO Z0 C2
157. TE In the Dial out mode the serial link connection via modem can be created in the Permanent mode automatic connection at startup at reboot or after connection loss or in the On demand mode by an internal register command NOTE In the On demand mode Dial out is prior to Dial in and Dial out may interrupt established connection in Dial in mode Connection Point to Point Protocol via Serial Link The BMX NOR 0200 H module supports PPP connections over serial links via a modem PSTN GSM GPRS With a PPP connection once a telephone connection has been established the modem link is treated as a TCP IP link A PPP connection enables two specific modes e Server mode which is the Dial in mode e Client mode which is the Dial out mode NOTE In the Client mode the PPP connection via modem can be created in the Permanent mode automatic connection at startup at reboot or after connection loss or in the On demand mode by an internal register command NOTE For PPP connection authentication the identification uses the Password Authentication Protocol PAP Use PAP to configure any device that has a modem PPP connection with the BMX NOR 0200 H module The Challenge Handshake Authentication Protocol CHAP is not implemented on the module For an accepted connection the PAP Username and Password of the remote device must be known The BMX NOR 0200 H module password and user name used by the PAP protocol are the same as those of the H
158. TE Limitations T2 S Frame lt 1 Ack PeriodandW Value lt 2 3 Value E100000000505 04 2014 217 Configuration with the Setup Web Pages Configure the module s advanced parameters IEC 104 Client Channel0 s Parameters Advanced Parameters First Char Wait ms 0 Rx Buffer Size 256 Offline Poll Period ms 10000 Incremental Timeout ms 30000 Max Queue Size 0 Parameter Value scope Default Description value First Char 0 65535 0 indicates the minimum time between Wait ms reception and transmission Rx Buffer 0 256 256 indicates the received buffer size of serial Size port Offline Poll 0 4294967295 10000 specifies the period an offline attempts to Period ms re establish communication Incremental 0 4294967295 30000 indicates the incremental application Timeout ms layer time out Max Queue 0 65535 0 indicates the maximum request message Size number with specific Application Specific Data Unit type in the transmission queue 218 E100000000505 04 2014 Configuration with the Setup Web Pages Session Parameters Click Setup IEC 104 Client Session0 Parameters IEC 104 Client Channel0 Session0 a Parameters IP Address 192 168 0 1 Port 2404 Sector Count 1 COT Size 2 Advanced Parameters Parameter Value scope Default Description value IP Address 255 255
159. TTP server by default USER USER The local IP address of the BMX NOR 0200 H module can be configured using the IP address either e specified by the User directly from the website This is mandatory if the module is in Server mode e obtained from the PPP server if specifying 0 0 0 0 as local IP when establishing connection in Client mode The IP can then be a static or a dynamic address NOTE In Server mode and no IP address is given by the User the Server assigns a fixed IP to the remote device with local IP 1 For example if the server IP is 90 0 0 2 remote device IP is then 90 0 0 3 NOTE GPRS does not support server mode E100000000505 04 2014 71 Modem Communications Connection PPPoe via Ethernet Link The Ethernet link connection can be used to configure and communicate with an external modem type ADSL PPPoe connection is only available using Client mode Server mode not supported NOTE In the Client mode the PPPoe connection via modem can be created in the Permanent mode automatic connection at startup at reboot or after connection loss or in the On demand mode by an internal register command NOTE For PPPoe connection authentication the identification uses the Password Authentication Protocol PAP Use PAP to configure any device that has a modem PPPoe connection with the BMX NOR 0200 H module The Challenge Handshake Authentication Protocol CHAP is not implemented on the module For an accept
160. V1 0 The DNP3 master and DNP3 slave have similar configuration pages for quality bits and flags 100000000505 04 2014 271 Configuration with the Setup Web Pages Behavior e Input and output point types apply this feature e Ifthe end user configures the flag in the CPU register in the slave the module no longer manages the flags internally The BMX NOR 0200 H module generates events following in the CPU register otherwise the BMX NOR 0200 H module generates them automatically e In the DNP3 Net server DNP3 slave the change of flags in CPU can trigger the generation of events just like value changes e The length of the flag is 1 byte no matter how many bytes are mapped in the CPU register the least byte is valid Refer to memory allocation This table shows the flag definition Point Flag definition Options Comments Binary on line bit 0 0 off line 1 on line Input Flags restart bit 1 O normal 1 restart communication lost bit 2 O normal 1 lost remote forced data bit 3 O normal 1 forced local forced data bit 4 0 normal 1 forced chatter filtered bit 5 0 normal 1 filter on Events are generated when the CHATTER FILTER flag is set and cleared but not when CHATTER FILTER is set reserved bit 6 0 Not used state bit 7 0 1 Binary on line bit 0 0 off line 1 on line restart bit 1 0 normal 1 restart Flags
161. X lt 33 gt Bitstring of 32 bit with time tag CP56Time2A M BO TB X lt 34 gt Measured value normalized value with time tag M ME TD CP56Time2A X lt 35 gt Measured value scaled value with time tag CP56Time2A ME TE X lt 36 gt Measured value short floating point value with time tag M ME _ CP56Time2A X lt 37 gt Integrated totals with time tag CP56Time2A M IT TB 38 Event of protection equipment with time tag CP56Time2A EP TD 39 Packed start events of protection equipment with time tag EP TE CP56time2A 40 Packed output circuit information of protection equipment EP TF with time tag CP56Time2a Process information in control direction X lt 45 gt Single command C SC NA X lt 46 gt Double command C DC NA X lt 47 gt Regulating step command C RC NA X lt 48 gt Set point command normalized value C SE NA X lt 49 gt Set point command scaled value C SE NB X 50 Set point command short floating point value C SE NC X lt 51 gt Bitstring of 32 bit C BO NA 100000000505 04 2014 309 Interoperability System information in monitor direction X lt 70 gt End of initialization M EI NA 1 System information in control direction X 100 Single command C IC NA X 101 Double command C CINA X 102 Regulating step command C
162. a request to the server FDR The FDR faulty device replacement service offers a method of handling device replacement without disrupting the system nor interrupting service SNMP The SNMP simple network management protocol is a UDP IP standard protocol used to monitor and manage nodes on an IP network The SNMP agent supports both the MIB II and the Transparent Ready Private MIB see Modicon M340 for Ethernet Communications Modules and Processors User Manual SMTP The SMTP simple mail transfer protocol is a transmission protocol for sending e mail SMTP messages are usually retrieved from a server with an e mail client such as POP or IMAP SOAP XML server The SOAP Single Object Access Protocol carried via the HTTP Hyper Text Transfer Protocol channel E100000000505 04 2014 47 Ethernet Communications Section 4 2 IP Parameters About this Section This section describes the assignment of IP parameters to the BMX NOR 0200 H module Each network address must be valid and unique on the network What Is in This Section This section contains the following topics Topic Page Methods for IP Addressing 49 Rotary Switches 50 Deriving IP Parameters from the MAC Address 52 48 100000000505 04 2014 Ethernet Communications Methods for IP Addressing Overview You should establish a standard procedure for assigning valid and unique IP addresses for each M340 module an
163. agram below shows the different types of explicit exchanges that can be made between the application and module application BMX P34 20x0 BMX NOE 01 01 MWr m c objects or MWr m MOD r objects 1 Status parameters READ STS Status parameters Command parameters WRITE CMD Command parameters WRITE PARAM Current adjustment READ_PARAM parameters ___5 _ Current adjustment parameters Initial adjustment RESTORE parameters gt 1 Only with READ_STS and WRITE CND instructions Managing Exchanges During an explicit exchange check performance to see that the data is only taken into account when the exchange has been correctly executed To do this two types of information is available e information concerning the exchange in progress see Unity Pro I O Management Block Library e the exchange report see Unity Pro I O Management Block Library The following diagram describes the management principle for an exchange Execution of an Exchange in Exchange explicit exchange progress report NOTE In order to avoid several simultaneous explicit exchanges for the same channel it is necessary to test the value of the word EXCH STS MWr 0 ofthe IODDT associated to the channel before calling any EF addressing this channel 374 100000000505
164. ailable when using a timer Log maximum size Provides the maximum log size this field can be changed via the backup parameters in the datalogging Properties Screen see page 119 Purge Parameters Fields Function Use of trigger Specifies the event that triggers the purge Status Variable Determine the status of the Purge action The status is set to 0 when the service starts to 1 when the purge action begins and to 2 when the purge action completes 100000000505 04 2014 123 How to Work with Datalogging Service FTP Settings Fields Function FTP trigger Specifies the event that triggers sending the selected table log files CSV file via FTP FTP address The address of the remote FTP server Status Variable Determine the status of the FTP action The status is set to 0 when the service starts to 1 when the FTP action begins and to 2 when the FTP action completes Login and Password Login parameters for the remote FTP server access 124 100000000505 04 2014 How to Work with Datalogging Service Datalogging File Format Summary The file format is fixed and cannot be modified by the user The file is encoded in pure ASCII format in a text file with a csv extension Microsoft Excel can open csv files Examples Example of a log file 2003 10 01 02 44 55 plc plcl height 150 plc plcl length 200 plc plcl width 50
165. ally sent after device restart loss of communication or on a periodic basis so that no changes are missed in the spontaneous data reporting Communication Behavior The BMX NOR 0200 H module has three communication ports one serial port one ethernet port and a BMX M340 backplane interface The serial port and the ethernet port are mainly used to communicate with the remote master or slaves with RTU protocols The backplane interface is used to communicate with the M340 CPU The main activity of the backplane interface is synchronizing data between CPU registers and the RTU point database inside the module The synchronization cycle can be one or more M340 PLC application scan cycles depending on the data amount and backplane load E100000000505 04 2014 109 How to Work with RTU Protocols When Master Channel Receives Events from Sub Slave When something significant changes in sub slave such as a value of a point the sub slave sent out an event The M340 system receives this event and the event needs to be routed to SCADA system Events routing p 5 51915 69 jeuueuo eres ube 1 Sub slave sends out events to the master channel 2 Master channel updates the point values in the module and the database of the logic slave channel and synchronizes the value to CPU registers Events are routed to slave channels according to point configuration 4 Slave channel buffers these eve
166. ame length in the data link layer bytes Max Queue Size 0 2048 0 indicates the maximum request message number with specific Application Specific Data Unit type in the transmission queue Channel Response 0 4294967295 10000 specifies how often to reestablish Timeout ms communication for an offline session 252 100000000505 04 2014 Configuration with the Setup Web Pages Session Parameters Click Setup Session Parameters DNP3 NET Client Channel Session Parameters IP Address 255 255 255 255 Dest Port 20000 Local Address 3 Slave Address 4 Default Response Timeout ms 30000 Advanced Parameters Parameter Value scope Default Description value IP Address 0 255 255 255 255 192 168 0 1 indicates the source address for this session Dest Port 1 65534 20000 indicates the destination address for this session IP Address of remote device multiple address separate by semicolon If configure as client only one IP address should given here Local Address 1 65520 3 indicates the source address for this session Slave Address 1 65520 and FFFC hex 4 indicates the slave address for this session Default 0 4294967295 30000 indicates the absolute maximum amount Response of time this device will wait for the final Timeout ms response to a request This time starts as soon as the request is put into the transmit queue
167. amp Co KG ConneXview makes it possible to manage Schneider Electric Transparent Factory devices using HiVision 6 0 or newer ConneXview is built on the widely used simple network management protocol SNMP 386 100000000505 04 2014 Glossary D default gateway The IP address of the network or host to which all packets addressed to an unknown network or host are sent The default gateway is typically a router or other device device name A user defined unique logical personal identifier for a network device After the Ethernet communications module is configured with a valid device name the DHCP server uses it to identify the rack at power up DHCP dynamic host configuration protocol DHCP is a TCP IP protocol that allows network devices DHCP clients to obtain their IP addresses from a DHCP server through a request to the server E EFB elementary function block EFBs are the elementary functions and function blocks based on C language that can be user customized and stored in different block libraries embedded Web pages Embedded Web pages accessed by an installed HTTP server provide Ethernet communications modules with easy access to devices anywhere in the world from standard browsers such as Internet Explorer or Netscape Navigator EMC electromagnetic compatibility Devices that meet EMC requirements can operate within a system s expected electromagnetic limits Ethernet A LAN cabling and signaling specifi
168. anagement of a buffer of events time stamped or not overall buffer queue size can be up to 100 000 events the maximum value is 100 000 from RTU 1 5 NOTE One dedicated event buffer is managed per client master application up to 4 client master applications are supported e Automatic event backfill to the SCADA or the master station via RTU protocol facility on DNP3 and IEC 101 104 For RTU slave configuration DNP3 slave IEC 60870 5 101 slave and IEC 60870 5 104 server each object type has an independent event queue setting To generate an event set an event queue for the corresponding object type Event Generation A dialog box is used to configure the event generation Object Group Clear_Events x Object Group All Objects v Channel Number Binary Input Double Input CPU Register Address Binary Counter Variable Name Analog Input Binary Output Analog Output Point Count Gen_Events x Object Group Binary Input Start Point Number 0 Point Count 5000 Parameter Description 7 Number of points to generate events OPU 0 the maximal value 5000 means infinite Variable Name 5 point count Min 1 5000 Default 5000 E100000000505 04 2014 99 How to Work with RTU Protocols Event Queue Setting Page The user can map event queue status to CPU registers The status for each event queue is a 32 bit register 2 words in CPU A higher word 1 means
169. anguage Objects Associated with the Application Specific Function 372 Explicit Exchange Language Objects Associated with the Application Specific Function 373 370 100000000505 04 2014 Ethernet Language Objects Language Objects and IODDTs of Ethernet Communication General Ethernet communication has the following IODDT e T COM ETH BMX specific to modules with Ethernet communication IODDTs are predefined by the manufacturer and contain input output language objects belonging to the channel of an application specific module NOTE IODDT variables can be created with e the I O objects tab e the Data Editor Types of Language Objects Each IODDT has a set of language objects that is used to control and check the operation of the IODDT There are two types of language objects e implicit Implicit exchange objects are exchanged automatically on each cycle turn of the task associated with the module These exchanges concern the states of modules communication signals slaves etc e explicit Explicit exchange objects are exchanged at the request of the application using explicit exchange instructions These exchanges set parameters and diagnose the module Elsewhere in this guide are detailed descriptions for the IODDT types see Modicon M340 for Ethernet Communications Modules and Processors User Manual E100000000505 04 2014 371 Ethernet Language Objects Implicit Exchange Language Objects Asso
170. apter This chapter contains the following topics Topic Page Create a Project 296 PLC Device Configuration 299 Data Editor Configuration 300 Transfer 301 100000000505 04 2014 295 Web Designer Configuration Create a Project Web Designer Project Creation Wizard Once the project is created the Web Designer treeview provides the classic menus data tables services and website but without the graphic screens e Web Designer Project Creation Wizard Web Designer Project Wizard E Creation of a new Web Designer Project 2 029 New Project E Target 1 Website i E Go oste y Website 1 Project RTU Project Step1 Add Target Select the Target and press the gt button Remove Target Select the Target and press the lt button Edit Target Details Click on the Name Address column to edit Target List Selected Target s FactoryCast __ Target _____ Name Address FactoryCast 0 1 BMXNORO200 RTU module FactoryCast Gateway psu RTU Ea BMX NOR 0200 v1 5 T E EH E 296 E100000000505 04 2014 Web Designer Configuration When you select the BMX NOR 0200 H module in the Target List the Modicon M340 is available as a device in the Device List iss Web Designer Project Creation Wizard Web Designer Project Wizard Navigator Creation of a new Web Designer Project 2 122
171. are normal no detected errors DL red download firmware on Firmware download is in progress upgrade off Firmware download is not in progress SER COM yellow serial data status flashing Data exchange send receive on the serial connection is in progress off There is no data exchange on the serial connection CARDERR red memory card on The memory card is missing detected error The memory card is not usable bad format unrecognized type off The memory card is valid and recognized 100000000505 04 2014 25 Hardware Presentation Label Pattern Indication ETH ACT green Ethernet on Communication activity is detected communication off No communication activity is detected transmission reception activity ETH STS green Ethernet on Communication is OK communicaon Status 2 flashes MAC address is not valid 3 flashes The link is not connected 4 flashes There is a duplicate IP address 5 flashes The module is waiting for a server IP address 6 flashes The module is in secure and safe mode with default IP address 7 flashes There is a configuration mismatch between the rotary switches and the internal configuration ETHLNK green Ethernet link status on An Ethernet link is detected off An Ethernet link is not detected NOTE 1 Rapid flashing is defined as ON for 50 ms and OFF for 50 ms NOTE 2 Slow flashing is defined as ON for
172. are read only Their lifetime is consistent with peer point configuration in the master E100000000505 04 2014 103 How to Work with RTU Protocols Slave points configuration Binary_Input x Point Number 0 Point Count 10 Event Class Mask Classo V 1 Class2 Class3 Default Static Variation g1v1 Binary In Default Event Variation 9271 Binary Input No Tir v Ce Channel Combination for Events Routing To route events inside the BMX NOR 0200 H module follow the configuration instructions see 101 to combine the master channel and slave channel The supported combinations are Master channel Slave channel DNP3 net client DNP3 net server DNP3 serial master DNP3 net server IEC 104 client IEC 104 server IEC 101 master IEC 104 server 104 E100000000505 04 2014 How to Work with RTU Protocols Limitations e Events are routed inside the module This means that it is not possible to route events between two or more modules and also that the PLC application in the CPU cannot get and process the events the CPU can still get the point value in events just like the standalone master channel e Events and static points are routed Requests commands from SCADA are not routed to the sub slave This means that inside the BMX NOR 0200 H module there is no other data exchange or communication between the master channel and the slave channel except for events e
173. assigned IP address can then be obtained from either a BOOTP or DHCP server STORED BOOTP Set the lower rotary switch to one of its STORED positions Select From a server on the IP Configuration tab see page 167 Leave the Device Name field empty DHCP Setthe lower rotary switch to one of its STORED positions Select From a server on the IP Configuration tab see page 167 Enter a valid device name in the Device Name field Note The M340 Ethernet modules will not receive an IP address from a BOOTP DHCP server on application download if the IP configuration has not changed disabled Communications are disabled Note A mismatch can occur when the assigned address is a mismatch for the address in the application E100000000505 04 2014 49 Ethernet Communications Rotary Switches Introduction The BMX NOR 0200 H operates as a single node on an Ethernet LAN and possibly other networks The two rotary switches on the back of the module provide a simple way to assign a unique IP address NOTE Set the arrow firmly into the desired position If you do not feel the switch click into place the value of the switch may be incorrect or undetermined Summary of Valid IP Address Settings Each rotary switch position that you can use to set a valid IP address is marked on the module The following information summarizes the valid address settings e device name For a switch set device
174. aster This information in conjunction with the DNP3 Basic 4 Document Set and the DNP3 Subset Definitions Document provide detailed information on how to communicate with BMX NOR 0200 H as master via the DNP3 protocol This implementation of DNP3 is fully compliant with DNP3 Subset Definition Level 3 DNP3 Device Profile The following table provides a Device Profile Document in the standard format defined in the DNP3 Subset Definitions Document While it is referred to in the DNP3 Subset Definitions as a Document it is only a component of a total interoperability guide This table provides a complete interoperability guide for BMX NOR 0200 H as master Parameter Description Vendor name Schneider Electric Device name BMX NOR 0200 H Highest DNP3 level supported Device function For requests Level 3 X Master For response Level 3 Slave Maximum data link frame size octets Maximum application fragment size octets Transmitted 292 Transmitted 2048 Received 292 Received 2048 Maximum data link re tries Maximum application layer re tries None X None Fixed at Configurable X Configurable from 0 to 65535 Requires data link layer confirmation Never Always Sometimes X Configurable as Never or Always Requires application layer confirmation X Never Always
175. ation If this period expires without a clock synchronization all times will be reported invalid 214 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default value Description Delete Oldest check box unchecked specifies if the oldest event is removed from the Event event queue when buffer is full and a new event comes Checked Remove the oldest event Unchecked Ignore the new event Short Pulse 0 4294967295 100 specifies the width of the pulse in milliseconds Duration Long Pulse 0 4294967295 1000 specifies the width of the pulse in milliseconds Duration Counter Mode Local Freeze Only Freeze on specifies the mode of freezing counter Local Freeze and Demand Reset Freeze on Demand Local Freeze 500 31536000 20000 specifies the period in milliseconds at which to Period ms freeze counter automatically on the sector It takes effect only on local freeze Summer Bit check box unchecked specifies whether to manage the summer bit of timestamp which comes from an external edive or CPU Effective only when Daylight Saving Time is enabled CMD Queue Size 1 128 1 specifies the size of the command queue to process in parallel for each point type C DC Impulse Indeterminate State Determinate State Determinate State specifies whether the final state is in valid state or Indeterminate state Determinate State only ON and OFF are valid states the final state
176. aturated The highest values have the priority The service value 12 has the priority but becomes 11 subsequently The service value 11 disappears once the email has been sent correctly E100000000505 04 2014 129 How to Work with Email SMS Service Create an Email Service Procedure This table describes the creation of an email service Step Action 1 Click the name of your project in the browser 2 To add the new service you can Click Project New Service or e Right click Services in the browser then click New Service Result the following window appears 58 Web Designer Service Creation Wizard Creation of new service in RTU Project E New service is created supported by the given the target cc PNEEEEEEEEEEEEEN Name of the service email Select Email in the Service Type list box Enter a service name or click on Finish to keep the name by default The email service has been created Security The email service supports SMTP server authentications The SMTP server allows PLAIN or LOGIN authentication Other authentication protocols are not supported This optional login password is authenticated by the SMTP mail 130 100000000505 04 2014 How to Work with Email SMS Service Email Properties Properties Tab This figure shows the available properties on the email tab Device0 Premium Unity Device0 Modicon M340 gt
177. cation used to connect devices within a defined area e g a building Ethernet uses a bus or a star topology to connect different nodes on a network Ethernet A frame format in which the header specifies the packet type Ethernet 15 the default frame format for STB NIP 2212 communications F FactoryCast FactoryCast is an open automation framework based on Internet technologies that is designed to provide seamless communication between plant floor and business systems Its main capabilities include e Modbus TCP IP for client server messaging e O scanner for handling I O devices 100000000505 04 2014 387 Glossary embedded web services for diagnostics and configuration e a full set of Internet protocols FAST The fast FAST task is a periodic high priority task of a short duration that is run on a processor through its programming software The fast speed of the task keeps it from interfering with the execution of lower priority master MAST tasks A FAST task is useful when fast periodic changes in discrete inputs need to be monitored FDR The faulty device replacement service offers a method of handling device replacement without disrupting the system nor interrupting service Flash memory Flash memory is nonvolatile memory that can be overwritten It is stored on a special EEPROM that can be erased and reprogrammed frame A frame is a group of bits that form a discrete block of information Frames contain n
178. ce establishes time accuracy among devices clocks over a network What Is in This Section This section contains the following topics Topic Page Clock Synchronization with the RTU Protocol Facilities 93 Clock Synchronization with the NTP Protocol 94 92 100000000505 04 2014 How to Work with RTU Protocols Clock Synchronization with the RTU Protocol Facilities Overview One of the main feature of the RTU is to manage events with time stamping Time stamping requires effective time synchronization Slave Server When acting as an IEC 60870 5 101 104 or DNP3 slave or server the BMX NOR 0200 H module can synchronize its clock with a master or client station SCADA When the module receives the clock synchronization it updates its internal clock and posts the new value to the M340 CPU This maintains a consistent time on the local rack Master Client When acting as an IEC 60870 5 101 104 or DNP3 master or client the BMX NOR 0200 H module sends clock synchronization commands to connected slaves As with the case above the clock is initialized from the CPU when it starts up It will get new time from CPU every time master client send time synchronization command Slave Server and Master Client When acting as both a master client or slave server the BMX NOR 0200 H module periodically synchronizes its local time with that of the M340 CPU through the rack E100000000505 04 2014 9
179. ch as the choice of structured or unstructured fields of the INFORMATION OBJECT ADDRESS of ASDUs represent mutually exclusive alternatives This means that only one value of the defined parameters is admitted per system Other parameters such as the listed set of different process information in command and in monitor direction allow the specification of the complete set or subsets as appropriate for given applications This clause summarizes the parameters of the previous clauses to facilitate a suitable selection for a specific application If a system is composed of equipment stemming from different manufacturers it is necessary that all partners agree on the selected parameters The interoperability list is defined as in IEC 60870 5 101 and extended with parameters used in this standard The text descriptions of parameters which are not applicable to this companion standard are strike through corresponding check box is marked black The selected parameters are marked as follows Function or ADSU is not used X Function or ADSU is used System or Device System definition Controlling station definition master Controlled station definition slave 326 100000000505 04 2014 Interoperability Application Layer Transmission mode for application data Mode 1 least significant octet first as defined in 4 10 of IEC 60870 5 4 is used exclusively in this compan
180. ch they are attached NOTE Network management systems are available from a variety of vendors Schneider Electric provides an SNMP based diagnostics tool called ConneXview Simple Network Management Protocol Ethernet communication modules support SNMP the standard protocol for managing local area networks LANs SNMP defines exactly how a manager communicates with an agent SNMP defines the format of e requests that a manager sends to an agent e replies that the agent returns to the manager The MIB The set of objects that SNMP can access is known as a Management Information Base MIB Ethernet monitoring and management tools use standard SNMP to access configuration and management objects included in the device s MIB providing that objects that SNMP can access are defined and given unique names manager and agent programs agree on the names and meanings of fetch and store operations Transparent Ready products support two SNMP network management levels e Standard MIB II This first level of network management can be accessed via this interface It lets the manager identify the devices that create the architecture and retrieve general information on the configuration and operation of the Ethernet TCP IP interface e MIB Transparent Ready interface Schneider has obtained a private MIB groupeschneider 3833 see Modicon M340 for Ethernet Communications Modules and Processors User Manual This MIB includes a set of data
181. ciated with the Application Specific Function At a Glance An integrated application specific interface or the addition of a module automatically enhances the language objects application used to program this interface or module These objects correspond to the input output images and software data of the module or integrated application specific interface Reminders The module inputs 1 and IW are updated in the PLC memory at the start of the task the PLC being in RUN or STOP mode The outputs 30 and QW are updated at the end of the task only when the PLC is in RUN mode NOTE When the task occurs in STOP mode either of the following are possible depending on the configuration selected e outputs are set to fallback position fallback mode e outputs are maintained at their last value maintain mode Figure The following diagram shows the operating cycle of a PLC task cyclical execution Intemal processing Y Acquisition of inputs RUN STOP Y Execution of the program Y Update of outputs 372 E100000000505 04 2014 Ethernet Language Objects Explicit Exchange Language Objects Associated with the Application Specific Function Introduction Explicit exchanges are performed at the user program s request using these instructions READ_STS see Unity Pro I O Management Block Library read status words WRITE CMD see Unity Pro I O Manage
182. cope Default value Description Online GI check box checked specifies if general interrogation is performed whenever determines that a remote device has come online available for devices that do not generate M NA EOImessage Online Time Sync check box checked specifies if Clock Sync is performed whenever determines that a remote device has come online available for devices that do not generate M EI NA EOI message Online CI check box unchecked specifies if counter interrogation is performed whenever determines that a remote device has come online available for devices that do not generate M EI NA EOI message ACTTERM with CSE Setpoint check box unchecked specifies whether to expect ACTTERM from slave upon completion of set point commands CSENA CSENB and CSENC ACTTERM with Command check box unchecked specifies whether to expect ACTTERM from slave upon completion of commands other than set point commands 208 100000000505 04 2014 Configuration with the Setup Web Pages IEC 60870 5 101 Slave RTU Protocol Parameters Introduction Select IEC101 104 as Protocol Slave as Mode and Raw Serial as Network Type Channel Parameters Click Setup IEC 101 Slave Parameters IEC 101 Slave Channel0 Parameters DL Address Length Use Balanced Mode Event Backup Enable Event Time Quality Session Count E
183. corresponding status register is following Status Reg Start Address each status occupies two words This figure shows the IP address and port configuration DNP3 NET Client Channel Session0 Parameters IP Address 255 255 255 255 Dest Port 20000 Local Address 3 Slave Address 4 Default Response Timeout ms 30000 Advanced Parameters Only one IP is allowable in this panel This figure shows the session count Channel0 Parameters Session Count 5 Advanced Parameters The session count may be up to 32 with same IP address for only one channel For more than one connection the session counter is same as the number of connections E100000000505 04 2014 183 Configuration with the Setup Web Pages This figure shows the share channel parameters DNP3 NET Client Channel0 Parameters Advanced Parameters Rx Frame Size 22 Tx Frame Size 292 Rx Frame Timeout ms 15000 Confirm Mode NEVER M Confirm Timeout ms 200 ____ Max Retries Offline Poll Period ms 10000 First Char Wait ms 0 Rx Buffer Size 6 ____ Rx Fragment Size 2048 Tx Fragment Size 2048 Max Queue Size 0 Channel Response Timeout ms 10000 All connections clients to different servers share the common channel parameters listed above 184 E100000000505 04 2014 Configuration with the Setup Web Pages Serial Port Configuration Introduction To configure the module in ser
184. ctively Otherwise static object requests sent with qualifiers 00 01 06 07 or 08 are responded to with qualifiers 00 or 01 For change event objects qualifiers 17 or 28 are always responded to NOTE 3 Writes of Internal Indications are only supported for indexes 4 and 7 Need Time IIN1 4 or Restart IIN1 7 368 100000000505 04 2014 Appendix Ethernet Language Objects About this Chapter This chapter describes the language objects associated with the Ethernet communication modules There is also a discussion of IODDTs The IODDT Input Output Derived Data Type is a data type associated with a PLC channel or module Expert modules are associated with specific IODDTs What Is in This Chapter This chapter contains the following sections Section Topic Page B 1 Language Objects and IODDTs of Ethernet Communication 370 B 2 Exchange Objects of Type T COM ETH BMX 345 B 3 Language Objects Associated with BMX NOR 0200 H Module Configuration 380 100000000505 04 2014 369 Ethernet Language Objects Section B 1 Language Objects and IODDTs of Ethernet Communication About this Section This section provides a general overview of language objects and IODDTs of Ethernet communication What Is in This Section This section contains the following topics Topic Page Language Objects and IODDTs of Ethernet Communication 371 Implicit Exchange L
185. d CPU on a network This topic explains the different IP addressing methods available Addressing Methods The BMX NOR 0200 H module can have its IP address set through the rotary switches see page 50 the Unity Pro IP Configuration tab see page 167 or combinations of the two Address Description Method STORED The lower rotary switch is set to STORED manufacturer default setting and the module uses the Unity Pro application s configured parameters device name There are two components of the device name over DHCP e default device name of the module BMX 0200 xxy numeric value between 00 and 159 set on the rotary switches see page 50 For the default device name xx is the value of the upper rotary switch and y is the value of the lower rotary switch Example For a BMX NOR 0200 H module values of 120 12 x 10 and 6 6 x 1 on the respective upper and lower rotary switches indicate a value of 126 The value is appended to the default device name BMX 0200 xxy to create the valid DHCP device name of BMX 0200 126 CLEAR IP The lower rotary switch is set to CLEAR IP and the module uses its MAC based default IP address see page 52 BOOTP Set the lower rotary switch see page 50 to one of its BOOTP positions to get an address over BOOTP see note Note To configure the module in the application to get its address from a BOOTP server see from a server below from a server A server
186. do this The hexadecimal values 12 01 and C4 have corresponding decimal values of 18 1 and 196 respectively These values are combined with the default IP address format 84 x x x to yield a default IP address of 84 18 1 196 Hexadecimal to Decimal Conversion Convert the hexadecimal values in the MAC address to decimal notation to derive default IP addresses The easiest ways to convert values in a MAC address from hexadecimal to decimal is with a calculator in scientific mode or through one of the many conversion charts easily accessed on the Internet You can also convert hexadecimal values in MAC address to decimal values for default IP address by following these steps Step Action Comment 1 Ignore the first 3 bytes of the 6 byte MAC For a MAC address of 0000531201C4 concern yourself address only with the last three bytes 12 01 C4 2 In the most significant byte 72 multiply Subtotal 16 1 x 16 16 the value of the leading digit 1 by 16 3 Add the value of the second digit 2 to Hexadecimal value 18 16 2 the subtotal 16 4 Convert the second byte 01 in the Hexadecimal value 01 0 x 16 0 1 1 same manner 52 100000000505 04 2014 Ethernet Communications Step Action Comment 5 In the third byte C4 multiply leading Subtotal 192 The sequence of base 16 hexadecimal digit C hex 12 decimal by 16 values is 1 2 3 4 5 6 7 8 9
187. e It is possible to Create a new log variable using the Add button e Remove log variable using the Remove button Backup Parameters Fields Function Use of a trigger timer To trigger logging of variables configure an event in the Use of a trigger timer variable This event is either a periodic event use of a timer in which case you need to set a time base an event associated with a variable use of a trigger in which case you need to provide the name of this variable for example calculation calculation1 Pressure1 The use of a trigger and use of a timer fields are greyed out depending whether the Global backup check box from the datalogging properties windows see page 119 is ticked or not NOTE Select the type of trigger in the drop down menu Media target Use to define the media target to use Maximum file number Defines the maximum number of CSV files to use for each table By default it is set to 10 The maximum authorized value is 100 The last file is the csv file the previous is the 0 file and the oldest is the 8 file Status variable Determine the status of the Backup action The status is set to 0 when the service starts to 1 when the backup action begins and to 2 when the backup action completes Log estimated time Provides information on the time length of the log based on the maximum file number the logging and backup period It is only av
188. e to prove that the remote device is still online in the balance mode Offline Poll 0 4294967295 10000 specifies the period to re establish Period ms transfer of an offline session Incremental 0 4294967295 30000 indicates the incremental application Timeout ms layer time out Session Parameters Click Setup IEC 101 Slave Session Parameters IEC 101 Slave Channel0 Session0 Parameters Data Link Address CAA Size IOA Size COT Size Sector Count Advanced Parameters Parameter Value scope Default Description value Data Link 0 65535 3 indicates octets for the data link address Address CAA Size 1 2 2 specifies octets for common address Application Specific Data Unit IOA Size 1 3 2 specifies octets of IOA 100000000505 04 2014 211 Configuration with the Setup Web Pages Parameter Value scope Default value Description COT Size 12 2 1 specifies octets of COT e Sector Count 1 indicates sectors for this session Configure the module s advanced parameters IEC 101 Slave Channel0 Session0 Parameters Advanced Parameters Max ASDU Size 252 Poll Delay ms 20000 Parameter Value scope Default Description value Max ASDU Size 0 252 252 indicates the maximum size of an Application Specific Data Unit Max Poll Delay ms 0 4294967
189. e 0 Valid Time e 1 Invalid Time SU 0 1 Indicates the present valid time The summer bit SU may be used as additional information e 0 Standard Time 1 Summer Time RES1 0 1 Indicates Genuine Time or Substituted Time RES1 bit may be used in the monitor direction e to indicate wether or not the time tag was added to the information object when it was acquired by the RTU Genuine Time or e The time tag was substituted by intermediate equipment such as concentrator stations or e The controlling station itself Substituted Time RES2 Not in use RES3 RES4 The Summer Bit parameter is supported in the timestamp IEC60870 and can be set in the CPU mapping register with the DDT CP56Time2a parameter NOTE BMX NORO200H uses the summer bit to determine the time in the time zone The SCADA must also set the summer bit for time synchronization 100000000505 04 2014 293 Configuration with the Setup Web Pages 294 100000000505 04 2014 Chapter 14 Web Designer Configuration Introduction This chapter describes the Web Designer configuration software for setting up the M340 device variable list and additional functions such as datalogging and email services and data table lists Refer to the M340 RTU Web Designer for BMX NOR 0200 H Module User Manual see Modicon M340 RTU Web Designer for BMX NOR 0200 H User Manual for a detailed Web Designer presentation What Is in This Ch
190. e designed for installation and operation in harsh environments and extended operating temperature ranges see page 40 The Modicon M340 PAC controller platform offers these features for telemetry applications operations in extended temperature ranges and harsh environments in rack RTU module with support for IEC 60870 5 101 104 DNP3 and Modbus TCP specialized function blocks AGA flow calculations expandable rack based modular I O configurations and remote I O capabilities high density discrete analog and I O counting modules isolated input power supply various voltage ranges available 24 24 48 VDC 125 DC 1000 240 VAC built in CPU and modules with serial and Ethernet communication ports support for Modbus TCP e local or remote downloading of operating system firmware 100000000505 04 2014 15 About the BMX NOR 0200 H Module The BMX NOR 0200 H module addresses a wide range of telemetry requirements conformal coating and extended operating temperature ranges various communications methods serial and TCP IP networks e intranet e WAN modem connections various modem connections e serial and radio modems e GSM and PSTN modems e P modems GPRS ADSL upstream communications with SCADA master stations for polling interrogation of data backfilling of time stamped event data receiving master commands downstream communications with other RTU substations slave field devices and IEDs for data collection
191. e duration duration determined by a system parameter inn the outstation Long pulse duration duration determined by a system parameter inn the outstation Persistent output nsmission of integrated totals Mode A Local freeze with spontaneous Mode B Local freeze with counter Mode C Freeze and transmit by counter interrogation Mode D Freeze by counter interrogation command frozen values reported Counter read Counter freeze with reset counter freeze without reset Counter reset General request counter Counter reset Request counter group 1 Request counter group 2 Request counter group 3 XX X X X XxX XxX x Xx Request counter group 4 Parameter loading X Threshold value Smoothing factor X Low limit for transmission of measured value X High limit for transmission of measured value Parameter activation X Act Deact of persistent cyclic or periodic transmission of the addressed object Test procedure X Test procedure File transfer File transfer in monitor direction Transparent file Transmission of disturbance data of protection Transmission of sequences of events Transmission of sequences of recorded analog value 314 100000000505 04 2014 Interoperability File transfer in control direction Transparent file Background scan
192. e module per minute NTP displays the status of the NTP server 170 100000000505 04 2014 Configuration and Debug with Unity Pro General Debugging Parameters Introduction The general debugging parameters on the module debugging screen see page 170 are grouped into two windows e the Message traffic window e the Messages window Message Traffic The Message traffic window looks like this Message trafic msg sec Teg he Min 453 849 7206 Reset It graphically shows the number of Ethernet packets per second handled by the module sent and received The Reset button resets the Min Av and Max counters to 0 Messages The Messages window looks like this Messages Open connections 0 Reset counters Non authorized 0 Messages refused Ping Bandwidth Messages received Messages sent M This window reports the number of e open TCP IP connections the combined number of server client and Transparent Device Access connections that are open non authorized TCP IP connections refused TCP IP messages received TCP IP messages sent TCP IP messages E100000000505 04 2014 171 Configuration and Debug with Unity Pro This window includes three buttons e Reset counters Press this button to reset the counters to 0 e Ping see below e Bandwidth see below
193. e supported in the Synch On Demand mode 100000000505 04 2014 261 Configuration with the Setup Web Pages DNP3 Channel Configuration Over UDP Communication Setup Select which communication needs to be configured via the Web site before configuring the ports of the BMX NOR 0200 H module The BMX NOR 0200 H module supports UDP in two ways UDP IP and TCP UDP When it is TCP UDP the BMX NOR 0200 H module supports the sending receiving of broadcast requests Set DNP3 NET client DNP3 NET server over UDP Channel0 x Channel ID 0 Protocol DNP3 v Network Type TCP IP v Mode TCP IP UDP IP IP Address TCP UDP Local Port Raw Serial Connection Count 1 Status Reg Type 9c MW v Status Reg Start Address 0 Configuration For UDP IP and TCP UDP it is necessary to set special ports and IP address according to DNP3 specifications UDP IP Client Server Name Description Name Description Destination port Destination port for UDP Local port Local port for UDP it must be unique Local port Local port for UDP IP it Destination port Destination port for UDP 0 must be unique in is allowed which means current channel thatthe server uses the port Exception 0 means that from which the master sent the local port is the request automatically Unsol Port that the server uses to y the system destination port send initial unsolicited responses in UDP IP 262 E10000
194. ed 100 no further messages are stored Limitation The number of messages you can configure in the project is restricted to 100 NOTE The SMTP server allows PLAIN or LOGIN authentication Other authentication protocols are not supported 132 E100000000505 04 2014 How to Work with Email SMS Service Email Configuration Configuration Tab Email configuration screen 21 Premium Unity Device0 Modicon M340 3 datalogging SendSMS E mail description Identifier Trigger Type Destination Subject Contents e Source Path Identifier Destination Subject Trigger Type E mails Properties This table describes the parameters on the Configuration tab Parameter Description SendSMS Check this box to indicate that the service can be configured to send an SMS message Identifier The email address of the message sender Trigger The event that triggers the email Type NY notify triggered by a bit status change or word value change RE rising edge triggered by a bit s rising edge or an increasing word value FE falling edge triggered by a bit s falling edge or a decreasing word value bad quality triggered when the trigger status is of poor quality Destination Email address es of the receiver s of the message Subject A brief summary of the message s contents Contents Type the co
195. ed and reconnects the old unacked responses will be resent Incremental 0 4294967295 30000 indicates the incremental application layer time out Timeout ms 100000000505 04 2014 223 Configuration with the Setup Web Pages Session Parameters Click Setup Channelx IEC 104 Server Sessionx Parameters IEC 104 Server Channel Session0 Parameters COT Size 2 Sector Count 1 Advanced Parameters Parameter Value Scope Default Description Value COT Size 2 2 indicates the octets for COT Sector Count 1 5 1 indicates sectors for this slave Configure the module with advanced parameters IEC 104 Server Channel0 Session0 Parameters Advanced Parameters Max ASDU Size 249 Parameter Value Scope Default Description Value Max ASDU Size 0 249 249 indicates the maximum size of an Application Specific Data Unit 224 100000000505 04 2014 Configuration with the Setup Web Pages Sector Parameters Click Setup Channelx IEC 101 Server Sessionx Parameters IEC 104 Server Channel0 Session0 Sector0 Parameters Common ASDU Address 3 Cyclic Message Interval ms 10000 Background Period ms 20000 Read Time Format None Advanced Parameters Parameter Value Scope Default Description Value Common ASDU 1 65535 3 indicates the common address of Address ASDU 65535 is br
196. ed connection the PAP Username and Password of the remote device may be configured in PPPoe panel from the website The configuration of IP address is not available for users The BMX NOR 0200 H module obtains a static or dynamic IP address when the PPPoe connection is established 72 100000000505 04 2014 Modem Communications Modem Register Command Introduction Modem register commands are specified memory area allocated on the M340 CPU This memory area is used to send commands from CPU to the BMX NOR 0200 H module via the M340 rack to control the connection or disconnection of the modem using logic functions Register Command The commands are composed of 4 registers YMW Register Parameter Definition Value number 0 Command Logic function to establish close 1 connect a connection 2 65535 disconnect Disconnect command takes effect if it changes between 2 and 65535 1 Index Value in phone list in which are range from 1 64 set telephone number IP password and user name not used for GPRS and PPPoE 2 Command status Execution status of Reg 0 0000 hex idle command while establishing a 0001 hex on going connection 0002 hex OK 8001 hex detected error Invalid phone index 8002 hex detected error unable to initialize 8003 hex detected error unable to dial out 8004 hex detected error unable to make a PPP connection 3 Connection status Stat
197. ed in the standard which facilitates the transfer of data over Ethernet and serial lines Supported Protocol Features Features of the 60870 5 101 104 protocols general interrogation clock synchronization events transmission time stamped or not balanced and unbalanced communications counter interrogation command transmission modes select and execute mode Supported Data Types The IEC 60870 5 101 104 protocols include these data types e discrete inputs outputs single or double e measured values with different formats e integrated totals e commands 88 100000000505 04 2014 How to Work with RTU Protocols Protocol Characteristics The table lists the characteristics for the supported RTU protocols Protocol Characteristics IEC 60870 5 101 master up to 32 slaves 1 session for each slave and up to 5 sectors per session individual database definition for each sector up to 5000 point database for all sectors including predefined commands IEC 60870 5 101 slave up to 5000 point database for data objects of all supported types up to 100 000 event queue for all data types supports clock synchronization from a master CPU or NTP configurable data link address CAA Common ASDU Address and IOA event time stamping configurable by type None CP24 CP56 IEC 60870 5 104 server client IP address validation list up to 10 IP addresses up to 4 concurrent client connect
198. ed with ground connection contacts at the rear for grounding purposes ground connection contact by screw tightening ground connection contact by CEM clip 1 ground connection contact by CEM clip 2 These contacts connect the grounding bus of the modules to the grounding bus of the rack E100000000505 04 2014 37 Hardware Installation SD Memory Card Introduction The Secure Digital SD memory card slot is located on the front of the BMX NOR 0200 H module see 22 The BMXRWS128MWF memory card is delivered with the module WARNING RISK OF LOST APPLICATION Do not remove the memory card from the module while the PLC is running Remove the memory card only when the power is off Failure to follow these instructions can result in death serious injury or equipment damage Card Functionality This table describes the functionality of the BMXRWS128MWF memory card when inserted into the BMX NOR 0200 H module SD Memory Card Data Storage Functionality BMXRWS128MWF 128 MB Memory for Web pages Storage of Datalogging files CSV Card Services NOTICE INOPERABLE MEMORY CARD Do not format the memory card with a non Schneider tool The memory card needs a structure to contain program and data Formatting with another tool destroys this structure Do not use a write protected memory card with the module Some services do not operate properly when the memory card
199. eek used X RES1 GEN time tag substituted not substituted used X SU bit summertime used 100000000505 04 2014 323 Interoperability Command transmission Direct command transmission X Select and execute command Direct set point command X Select and execute set point command transmission X C SE ACTTERM used X No additional definition X Short pulse duration duration determined by a system parameter in the outstation X Long pulse duration duration determined by a system parameter in the outstation X Persistent output Transmission of integrated totals X Mode A Local freeze with spontaneous transmission X Mode B Local freeze with counter interrogation X Mode C Freeze and transmit by counter interrogation commands X Mode D Freeze by counter interrogation commands frozen values reported spontaneously X Counter read X Counter freeze without reset X Counter freeze with reset X Counter reset General request counter X Request counter group 1 4 Parameter loading X Threshold value X Smoothing factor Low limit for transmission of measured value X High limit for transmission of measured value Parameter activation x Act Deact of persistent cyclic or periodic transmission of the addressed object Test procedure X Test procedure File transf
200. ehavior e Only monitor point type support this configuration on Web site except M IT server slave e f end user configures flag quality bit in CPU register in slave module does not manage the quality bits flags internally any more BMX NOR 0200 H module generates event following quality bit flag in CPU register otherwise BMX NOR 0200 H generates them automatically e In server slave the change of quality bits or flags in CPU can trigger to generate events just like value change e Thelength of quality bits orflag is 1 byte no matter how many bytes itis mapped in CPU register the least byte is valid Refer to memory allocation Quality bit definition Point Flag Options Comments definition M SP SIQ single point bit 0 0 off 1 on not used information reserved bit 1 0 not used bit 2 0 bit 3 0 blocked bit 4 0 not blocked 1 blocked substituted bit 5 0 not substituted 1substituted not topical bit 6 0 topical 1 not topical invalid bit 7 0 valid 1 invalid 232 E100000000505 04 2014 Configuration with the Setup Web Pages Point Flag Options Comments definition M_DP DIQ double point bit 0 1 off not used information bit 1 1 on reserved bit 2 0 not used bit 3 0 blocked bit 4 0 not blocked 1 blocked substituted bit 5 0 not substituted 1substituted not topical bit 6 0 topical 1 not topica
201. emory Card 38 Modicon M340H Hardened Equipment 40 Wiring Considerations 41 100000000505 04 2014 33 Hardware Installation Installing a Module Introduction A WARNING MODULE DESTRUCTION LOSS OF APPLICATION Disconnect all power to the rack before the installation of the BMX NOR 0200 H module Failure to follow these instructions can result in death serious injury or equipment damage This topic provides steps for installing the BMX NOR 0200 H module on the BMX XB rack of a Modicon M340 PLC Modicon M340 modules are powered by the rack bus Fitting operations installation assembly and disassembly are described below Installing a module A BMX NOR 0200 H module is installed on the BMX XB rack in slot marked 01 08 The following diagram shows a BMX NOR 0200 H module mounted on a BMX XB rack in the slot marked 01 address 1 NOTE Before installing a module take off the protective cap from the module connector located on the rack NOTE The total number of communication modules such as BMX NOE 01 0 or BMX NOR 0200 H modules cannot exceed two The maximum Ethernet port for M340 system is 3 including the port on PLC Therefore a maximum of two BMX NOR 0200 H modules can be inserted in a M340 system 34 100000000505 04 2014 Hardware Installation Mounting Instructions To mount a module on the BMX XB rack Step Action Illustration 1 Position the two pin
202. en buffer is full and a new event comes Checked Remove the oldest event Unchecked Ignore the new event C RD NA None CP24 CP56 None specifies the time format for responding to C RD NA Measurands Time Format C IC NA Time 24 56 specifies the time stamp format in response of C IC NA Format Short Pulse 0 4294967295 100 specifies the width of the pulse in milliseconds Duration Long Pulse 0 4294967295 1000 specifies the width of the pulse in milliseconds Duration Counter Mode Local Freeze Only Reset Freeze specifies the mode of freezing counter Local Freeze on Demand Reset Freeze on Demand Local Freeze 500 31536000 20000 specifies the period in milliseconds at which to freeze Period ms counter automatically on the sector It only takes effect on local freeze Summer Bit check box unchecked specifies whether the summer bit of timestamp which comes from external device or CPU is managed Effective only if Daylight Saving Time is enabled CMD Queue 1 128 1 specifies the size of a command queue to process in Size parallel for each point type 100000000505 04 2014 227 Configuration with the Setup Web Pages Parameter Value scope Default value Description C_DC Impulse Indeterminate State Determinate State Determinate State specifies whether the final state is in valid state or Indeterminate state Determinate
203. equipment EP TF with time tag CP56Time2a Process information in control direction X lt 45 gt Single command C SC NA 1 X lt 46 gt Double command C DC NA 1 X lt 47 gt Regulating step command C RC NA 1 X lt 48 gt Set point command normalized value C SE NA 1 100000000505 04 2014 319 Interoperability Process information in control direction X lt 49 gt Set point command scaled value C_SE_NB 1 X lt 50 gt Set point command short floating point value C SE NC 1 X lt 51 gt Bitstring of 32 bit C BO NA 1 System information in monitor direction X lt 70 gt End of initialization M EI NA 1 System information in control direction X 100 Interrogation command C_IC_NA_ X 101 Counter interrogation command C CINA X 102 Read command C RD NA X 103 Clock synchronization command C CS NA X 104 Test command C TS NB X 105 Reset process command C RP NC X 106 Delay acquisition command C CD Parameter in control direction X 110 Parameter of measured value normalized value P ME NA 1 X 111 Parameter of measured value scaled value P ME NB 1 X 112 Parameter of measured value short floating point value P ME NC 1 X 113 Parameter activation P AC NA 1 File transfer 120 File ready FR
204. er File transfer in monitor direction Transparent file Transmission of disturbance data of protection Transmission of sequences of events Transmission of sequences of recorded analog value 324 100000000505 04 2014 Interoperability File transfer in control direction Transparent file Background scan X Background scan Acquisition of transmission delay Acquisition of transmission delay E100000000505 04 2014 325 Interoperability IEC 60870 5 104 Interoperability for BMX NOR 0200 H as Client Introduction The purpose of this document is to describe the specific implementation of the IEC 60870 5 104 within BMX NOR 0200 H as client This document and the documents listed below provide detailed information on how to communicate with BMX NOR 0200 H as client via the IEC 60870 5 104 protocol IEC 60870 5 104 Companion standard for IEC 60870 5 101 over TCP IP IEC 60870 5 101 Companion standard for basic telecontrol tasks IEC 60870 5 101 A2 Addendum 2 for IEC 60870 5 101 IEC 60870 5 5 Basic Application Functions IEC 60870 5 4 Definition and Coding of Application Information Elements IEC 60870 5 3 General Structure of Application Data Interoperability This companion standard presents sets of parameters and alternatives from which you select subsets to implement particular telecontrol systems Certain parameter values su
205. er The managed trap systems are as follows Coldstart Trap e On the BMX NOR 0200 H modules the event is transmitted following a module supply Reset a processor Reset or the downloading of an application to the PLC e Authentication Failure Trap event is transmitted indicating that a network element cannot be authenticated The Community Name field in the received message is different to the one configured on the module This trap can be enabled during module configuration 62 E100000000505 04 2014 Ethernet Communications Section 4 5 SOAP Web Services Designing a SOAP Client Interface Introduction A server interface enables a SOAP Simple Object Access Protocol client application to communicate directly with a BMX NOR 0200 H Web server module SOAP XML Communications SOAP Web services are fully compliant with the W3C WS l Web services standards These services provide an open and standard communication means for control level devices to interact directly with information management applications using non proprietary SOAP protocol Web services are based on standards such as SOAP the exchange protocol carried out over the HTTP HyperText Transfer Protocol channel e WSDL Web Services Description Language in XML format e XML eXtensible Markup Language the universal data exchange standard BMX NOR 0200 H SOAP Web services act as SOAP server interfaces They allow developers to easily design clien
206. er has obtained a private MIB groupeschneider 3833 Modbus Modbus is an application layer messaging protocol Modbus provides client and server communications between devices connected on different types of buses or networks Modbus offers many services specified by function codes There are two types of Modbus transmission based on information in the physical layer e MB serial the Modbus type that transmits data over serial RS 232 and RS 422 485 e MB TCP the Modbus type that transmits data over Ethernet 390 E100000000505 04 2014 Glossary multicast Multicast communications send packets from a single source to a predefined multicast group of network destinations usually through a router or switch Sending messages to just the group members relieves unnecessary traffic created by broadcast communications and does not require a separate unicast transmissions to each recipient See broadcast unicast GMRP multicast filtering Multicast filtering is a process for deciding that multicast messages are delivered only to the stations that are registered members of the appropriate multicast group N NMT network management NMT protocols provide services for network initialization diagnostics and device status control NTP network time protocol NTP synchronizes the time of one client or server to the time of another server or referenced source such as a satellite receiver OSI model Open Systems Interconnection model
207. er read E100000000505 04 2014 341 Interoperability Counter freeze without reset Counter freeze with reset Counter reset General request counter Request counter group 1 Request counter group 2 Request counter group 3 Request counter group 4 Parameter load ng X Threshold value Smoothing factor X Low limit for transmission of measured values X High limit for transmission of measured values Parameter activation X Act Deact of persistent cyclic or periodic transmission of the addressed object Test procedure X Test procedure File transfer File transfer in monitor direction Transparent file Transmission of disturbance data of protection equipment Transmission of sequences of events Transmission of sequences of recorded analog values File transfer in control direction Transparent file Background scan X Background scan Definition of time outs Parameter Default Value Remarks Selected Value t4 15s Time out of send or test APDUs Configurable t2 10s Time out for acknowledges in Configurable case of no data messages t lt t t3 20s Time out for sending test frames Configurable in case of a long idle state Accuracy 1s Maximum range of values for all time outs 1 255s 342 100000000505 04 2014 Inte
208. ess 255 255 252 0 Gateway139 160 64 108 Name MAC Address 0 80 f4 1 fd ff Services Status Counter Port 502 Yes Generic faults No Refused port 502 connections 0 IO Scanner No Ethernet interface disabled No Received messages sec 25 Global data No Duplicate IP Address No Filter messages sec 10 Emails No Configuration mismatch Dropped messages sec 0 Server FDF Obtaining IP address No Max received messages sec 2893 Self test fault No Max Filter messages sec 10112 Application faults No Max dropped messages sec 46132 Nb of Multicast sec 9 Nb of Broadcast sec 2893 Reset 148 E100000000505 04 2014 How to Work with Embedded Web Pages Messaging Diagnostics Page Click this link to see the current information on the open TCP connection on port 502 MESSAGING DIAGNOSTIC Number of Messages sent 38 Number of Messages received 183 Conn Remoteaddress RemotePort LocalPort Mess Sent Mess Received Error Sent 1 192 160 10 20 1920 502 20 12 0 2 139 160 235 90 2020 502 0 30 02 3 192 160 10 21 502 3000 3 60 0 4 139 160 234 20 1050 502 15 42 0 5 139 160 234 18 5120 502 0 39 1 The number of sent received messages on the port can be found at the top of this page A table provides for each connection numbered from 1 to 64 Remote address remote IP Address Remote Port remote TCP port Local Port local TCP port Mess Sent number of messages sent from this connection Mess
209. etwork control information or data The size and composition of a frame is determined by the network technology being used framing type Two common framing types for Ethernet are Ethernet I and IEEE 802 3 FTP File Transfer Protocol FTP is the World Wide Web s file transfer protocol G gateway A device that connects networks with dissimilar network architectures and which operates at the Application Layer of the OSI model This term may refer to a router Global Data Global Data provides the automatic exchange of data variables for the coordination of PLC applications GMRP GARP multicast registration protocol GMRP is a GARP Generic Attribute Registration Protocol application that allows switches and bridges to dynamically manage the membership of multicast groups GMRP is defined by IEEE 802 1D H half duplex HDX A method of data transmission capable of communication in either of two directions but in only one direction at a time 388 E100000000505 04 2014 Glossary HMI human machine interface An operator interface usually graphical for industrial equipment hot swapping Replacing a component with a like component while the system remains operational When the replacement component is installed it begins to function automatically HTTP HyperText Transfer Protocol HTTP is the protocol for the formatting and transmission of files on the world wide web HTTP runs on top of TCP IP Internet protocols
210. f integrated totals Mode A Local freeze with spontaneous transmission Mode B Local freeze with counter interrogation X Mode C Freeze and transmit by counter interrogation commands Mode D Freeze by counter interrogation command frozen values reported spontaneously Counter read Counter freeze without reset Counter freeze with reset Counter reset General request counter XX X Request counter group 1 4 Parameter loading X Threshold value Smoothing factor X Low limit for transmission of measured values X High limit for transmission of measured values Parameter activation X Act Deact of persistent cyclic or periodic transmission of the addressed object Test procedure Test procedure File transfer File transfer in monitor direction Transparent file Transmission of disturbance data of protection equipment Transmission of sequences of events Transmission of sequences of recorded analog values File transfer in control direction Transparent file Background sca n X Background scan 100000000505 04 2014 333 Interoperability Definition of time outs Parameters Default Remarks Selected Value Value t4 15s Time out of send or test APDUs Configurable t2 10s Time out for acknowledges in case of no Configurable data messages t lt t4
211. g 100000000505 04 2014 221 Configuration with the Setup Web Pages IEC 60870 5 104 Server RTU Protocol Parameters Introduction Select IEC 101 104 as Protocol Slave as Mode and TCT IP as Network Type Channel Parameters Click Setup IEC 104 Server Parameters IEC 104 Server Channel0 Parameters T1 Ack Period ms T2 5 Frame Period ms T3 Test Period ms K Value W Value Event Backup Enable Event Restore Mode Event Time Quality 15000 10000 20000 12 8 v Main Channel Original Quality Event backup feature is supported from PV 03 Advanced Parameters Parameter Description Specify what quality is used for backup events when power recover Original Quality use original quality Invalid force to set invalid bit in time stamp Default Original Quality Change Parameter Value Scope Default Description Value Tl Ack Period ms 0 4294967295 15000 specifies the waiting time for ACK toa transmitted APDU T2 S Frame 0 4294967295 10000 specifies the waiting time before Period ms sending supervisory APDU ACK T3 Test Period ms 0 4294967295 20000 specifies the idle time before sending TEST APDU K Value 1 12 12 indicates the maximum transmitted APDUS that are not acknowledged W Value 0 32767 8 indicates the maximum received APDUS that are not acknowledged Event Backup Enable check box unchecked indicates
212. ging v Name of the service datalogging Select datalogging in the Service Type listbox Enter the service name or click Finish to keep the name by default The datalogging service has been created 118 E100000000505 04 2014 How to Work with Datalogging Service Datalogging Properties Properties Tab Initiate datalogging with a right click on the service folder then scroll to create a new service Enter a name for the new datalogging service 1 Modicon M340 7 datalogging Backup Parameters Global backup use of a trigger v use of a timer Media target Log maximum size Path SD card 500 Ko Y Purge parameters use of a trigger service properties Service status variable Configuration Properties Backup Parameters Fields Function Global backup When checked the tables use the same event to trigger a backup When not checked each created table has its own event to trigger a back up NOTE When a Global backup check box is ticked the fields use of a trigger and use of a timer become available use of a trigger Provide the name of a variable to trigger variable logging on an event associated to this variable NOTE Select the type of your trigger in the drop down menu available on the left use of timer Provide a periodic time base to trigger variable logging on an event Media target SD card to st
213. hange we recommend that you define the RTU memory for data objects in a continuous sequence NOTE For each unlocated variable the configured length cannot exceed 1000 bytes Module Behavior after Unity Pro Application Transfer NOTE After a Unity Pro application transfer the following behavior occurs e The RTU protocol service is not restarted it is only restarted if the BMX NOR 0200 H module IP address has been modified e Depending on the Unity Pro application settings PLC data could be either reset or not e Unexpected new events may occur in case of data reset after download To avoid this behavior uncheck the Initialize MWi on cold start option in the PLC configuration screen of the Unity Pro application If you wantto resetthe RTU protocol service use the menu Reset Communication in the Web site It is recommended in case of modification of the number or MW variables in Unity Pro application 100000000505 04 2014 281 Configuration with the Setup Web Pages Dialog Box This figure shows the dialog box for configuring the data object mapping for an item with the example data type M_SP for the DNP3 slave server 3 DNP3 NET Server Channel0 Session0 Data Mapping a Setup 2 Communication Channel Parameters Modem Parameters Modem GSM Phone List ElSerial Port Parameters EIPPPoE Parameters ElTimeZone Parameters E Channel EIDNP3 NET Server Parameters ElSession 0 Parameters Data Mappi
214. hange Password Data Editor Write Password Change Write Password Copyright 1998 2010 Schneider Automation SAS AII Rights Reserved 142 E100000000505 04 2014 How to Work with Embedded Web Pages Modify the HTTP access rights Step Action 1 Enter the new username The default value of this field is USER 2 Enter the new password The default value of this field is USER 3 Confirm the new password by entering it again 4 Confirm the modification using the Change Password button Modify the Data Editor Write Password Step Action 1 Enter the current password case sensitive The default value of this field is USER 2 Enter the new password default is USER Confirm the new password by entering it again 4 Confirm the modification with the Change Write Password button E100000000505 04 2014 143 How to Work with Embedded Web Pages FTP Security Page Introduction You can modify the username and password for FTP access rights on this page NOTE You can download Web pages to the C type memory card over FTP FTP Page The Setup page see page 141 has a link to the FTP password page FTP access rights Username 1 40 chars fs New password 8 40 chars Delete Password Copyright 2000 2008 Schneider Automation SAS All rights reserved Follow these steps to modify the FTP username and password Step Act
215. hannel n Count n CPU Reg Type 969MW MW status register type in CPU CPU Reg 0 32464 0 address of event status register in CPU Address Event Backup checked unchecked what is backed up in event of power loss unchecked NOTE When BMX NOR 0200 H module uses IEC DPN3 server or slave the events status is mapped into CPU Register Address One event status occupies two MW The first MW is for event number and the second is used to save overflow bits If the number of channels is more than one the events of virtual channel follows the first channel event status Example of the setting of the event status Channel Count 2 CPU Reg Address 1000 Channel 0 Event Status MW1000 MW1001 Channel 1 Event Status MW1002 MW1003 100000000505 04 2014 287 Configuration with the Setup Web Pages DNP3 Master DNP3 Net Client Predefined Master Command The predefined master command of the DNP3 master contains these fields Command Status Meaning Read Class Yes read class command Read Group Yes read group command Freeze Counter Yes freeze counter command Unsolicited Class Yes class unsolicited command Time Sync Yes time synchronization command Restart Yes restart command Command Implementation Method Commands can be mapped to the CPU memory either e 32 bit CPU register command and status through Mw Both the command and status are 16 bits e 64 bit CPU register c
216. he table is not active grayed out e With the module in server mode remote third party devices can connect as clients before communicating with the module without being declared in the table NOTE Access control is only effective on the TCP IP profile and assists module operations in server and client mode NOTE If you select the Access Control check box but do not enter addresses in the IP address column messaging will stop working E100000000505 04 2014 57 Ethernet Communications Section 4 4 SNMP About this Section This section describes the Simple Network Management Protocol SNMP What Is in This Section This section contains the following topics Topic Page SNMP and Schneider Private MIB Overview 59 SNMP Communication 60 SNMP Operations Example 62 100000000505 04 2014 Ethernet Communications SNMP and Schneider Private MIB Overview Introduction An SNMP agent runs on e Ethernet communication modules e CPUs with embedded Ethernet communications ports Network management systems use SNMP to monitor and control Ethernet architecture components for the rapid network diagnosis Network management systems allows a network manager to e monitor and control network components e isolate troubles and find their causes query devices such as host computer s routers switches and bridges to determine their status e obtain statistics about the networks to whi
217. here only changes of data are reported whereas in Polled Interrogations the master station periodically requests data to the slaves devices RBE is particularly useful when using low rate communication media PSTN GSM GPRS by reducing traffic overhead and transmission costs Unsolicited Messaging Unsolicited Messaging is the basic data exchange method The slave station initiates data transmission even though the master station does not send poll interrogations 112 E100000000505 04 2014 How to Work with RTU Protocols Section 7 7 Connection Status Overview Introduction The connection status of each channel of the module is put in a double word descriptor that is mapped to the M340 CPU s memory of your PLC program facility Word Mapping You assign a valid M340 CPU memory address to which the connection status descriptor is to be mapped NOTE For IEC 60870 5 104 and DNP3 server witch configured to connect with more than one client each client has an independent connection status and they store in sequence in CPU memory The descriptor occupies 2 consecutive M340 CPU memory words The following tables show the information that the connection status descriptor contains Bit 31 Bit 30 Bit 1 Bit 0 Session 31 session 30 session 1 session 0 For the IEC 60870 5 101in balanced mode and the DNP protocol the connection status descriptors are set to 1 to indicate that all slaves are
218. ial mode select Setup Serial Port Parameters NOTE To configure a modem in serial link serial mode or PPP it is mandatory to configure the serial port Serial Configuration Serial Port Parameters Physical Line RS232 v Signals Rx Tx Delay Before Transmission 0 Delay After Transmission 0 Delay Between Transmissions 10 Baud Rate 19200 Data Bits 8 Stop Bits 1 Parameter Value scope Default value Description Physical Line RS232 RS485 RS232 selects physical connection lines Signals Rx Tx selects signal lines for Rx Tx communication Rx Tx RTS CTS Rx Tx RTS CTS DCE Delay Before 0 65535 as the unit is 0 only used with DCE flow control Transmission T1 10 ms the range is algorithm transmission delay 0 655 35 s after RTS is set Delay After 0 65535 as the unit is 0 only used with DCE flow control Transmission T2 10 ms the range is algorithm time to reset RTS after 0 655 35 s transmission end E100000000505 04 2014 185 Configuration with the Setup Web Pages Parameter Value scope Default value Description Delay Between 0 65535 as the unit is 0 only used with DCE flow control Transmissions 10 ms the range is algorithm min time between RTS T3 0 655 35 s reset and next RTS set the delay depends on the application Baud Rate 300 600 1200 2400 4800 19200 transmission
219. ient IEC 104 server DNP3 master DNP3 Net server DNP3 Net client DNP3 Net server only this combinations table is allowed Do not run IEC and DNP3 at the same time within one module Case 1 2 Protocol Max count Protocol Max count 1 DNP3 master 1 2 DNP3 NET master 1 3 IEC 101 master 1 4 IEC 104 master 1 5 DNP3 slave 1 6 DNP3 NET server 1 7 IEC 101 slave 1 8 IEC 104 server 1 9 DNP3 master 1 DNP3 NET server 1 10 DNP3 NET client 1 DNP3 NET server 1 11 IEC 101 master 1 IEC 104 server 1 12 IEC 104 client 1 IEC 104 server 1 Multi server for IEC 104 client and DNP3 IP client Only one client channel is allowed to configure in communication setting but it can support up to 64 servers in 64 sessions IEC 104 and 32 servers in 32 sessions DNP3 Each session corresponds to one server All sessions share the configuration of the common channel parameter The feature is supported by both of IEC 104 client and DNP3 NET client This figure shows the communication configuration Channel0 x Channel ID 0 Protocol DNP3 Network Type __ _ Master Client lv Connection Count 1 Status Reg Type MW dv Status Reg Start Address 0 182 100000000505 04 2014 Configuration with the Setup Web Pages IP Address and port are set in session panel instead of communication setting When Connection Count is more than 1 the
220. ile of the TFE private MIB see Modicon M340 for Ethernet Communications Modules and Processors User Manual is available on modules and CPUs that support Ethernet communications The MIB can be uploaded from the module s web page by selecting Upload MIB File see page 154 This file may be compiled by the major SNMP managers on the market 60 100000000505 04 2014 Ethernet Communications The SNMP Protocol The SNMP protocol defines 5 types of messages between the agent and the manager These messages are encapsulated in UDP datagrams Messages from the manager to an agent e Get Request message used to obtain the value of one or more variables e Get Next Request obtains the value of the next variables e Set Request sets the value of a variable Messages from an agent to the manager e Get Response allows the agent to re send the value of the requested variable e Trap allows asynchronous event signaling by the agent E100000000505 04 2014 61 Ethernet Communications SNMP Operations Example Modicon M340 Example The SNMP manager transmits read or write requests Set Request Get Request Get Next Request etc for objects defined in the MIB II SNMP and the SNMP agent of the Modicon M340 module responds E SNMP manager SNMP agent Modicon M340 Get Response trap Set Request Get Request Get Next Request The module s SNMP agent transmits events traps to the Manag
221. ime The Daylight Saving Time DST is an optional feature which can be configured in the time zone web page disabled by default TimeZone Parameters Time Zone GMT Greenwich Mean Automatically clock for daylight saving change NOTE The Summer Bit is not supported in CP24Time2a 216 100000000505 04 2014 Configuration with the Setup Web Pages IEC 60870 5 104 Client RTU Protocol Parameters Introduction Select IEC101 104 as Protocol Master as Mode and TCP IP as Network Type Channel Parameters Click Setup IEC 104 Client Parameters IEC 104 Client Channel0 Parameters T1 Ack Period ms 15000 T2 5 Frame Period ms 10000 T3 Test Period ms 20000 K Value 12 W Value 8 Session Count 1 Advanced Parameters Parameter Value scope Default Description value Tl Ack Period ms 0 4294967295 15000 specifies the waiting time for ACK toa transmitted APDU T2 S Frame 0 4294967295 10000 specifies the waiting time before transmitting Period ms the supervisory APDU ACK T3 Test Period ms 0 4294967295 20000 specifies the idle time before transmitting the TEST APDU K Value 1 12 12 indicates the maximum transmitted APDUs that are not acknowledged W Value 0 32767 8 indicates the maximum received APDUs that are not acknowledged Session Count 1 32 1 indicates the maximum number of sessions on the channel NO
222. initialization value is 0 and it is invalid value in C DC NA 1 control command by default When the master control this address to switch on or off the value is 1 or 2 Command Implementation Method Commands can be mapped to the CPU memory either e 32 bit CPU register command and status through Mw Both the command and status are 16 bits e 64 bit CPU register command and status through Mw Both the command and status are 32 bits Commands are implemented each time when the value in the configured CPU memory changes This allows the user to control easily the command implementation by changing the value in the CPU memory 100000000505 04 2014 243 Configuration with the Setup Web Pages Command Status Register Certain commands have a status register that lets the user know if the command was successfully executed The status register is a 16 bit word or 32 bit word For example if a command is mapped to CPU register MW1 the corresponding status register is automatically mapped to MW2 NOTE When a command is mapped to a register and the command has a command status the status register is automatically mapped to the following register If a command has a result the low byte of the status register increment by 1 to indicate that the status is for the command The high byte is the status of the command NOTE If the high byte of command status has a result 0 this means that it has completed successfully
223. input word IW language objects Object Description Wr m 0 0 status of Ethernet services bit 0 port 502 messaging service status 0 1 NOK bit 1 reserved bit 2 reserved bit e mail service status 1 NOK bit 4 reserved bit 5 BMX NOR 0200 reserved for future use e BMX P34 20 0 reserved for compatibility with the BMX NOR 0200 bit 6 reserved for future use bit 7 reserved Wr m 0 1 lWr m 0 4 reserved Wr m 0 5 lWr m 0 8 reserved E100000000505 04 2014 381 Ethernet Language Objects Language Objects for Explicit Exchange Introduction This topic describes the explicit exchange language objects for the BMX NOR 0200 H module System Words The following table describes the system word MW READ language objects Object Description MWr m 0 0 exchange status EXCH STS bit 0 1 reading of status words of the channel in progress STS IN PROGR bit 1 1 command write in progress CMD IN PROGR MWr m 0 1 exchange report EXCH_RPT bit 0 1 the channel status cannot be read STS_ERR bit 1 1 a command cannot be written to the channel ERR Note Always 0 for the BMX P34 20 0 Status Words The following table describes the status word MW MD READ language objects Object Description 9e MWr m 0 2 CH FLT bits bit 4 MWr m 0 2 4 1 inter
224. int Number Event Class Mask Default Event Variation 10 1 sd 0 Value only _ giv1 Binary In v 1 m Tm v Class 7 Class1 7 Class2 9271 Binary Input No Tiri Class3 102 100000000505 04 2014 How to Work with RTU Protocols NOTE e When the user specifies one point in the master for event routing such as the binary input point one corresponding point configuration is automatically generated in the logic slave channel The point configuration is read only in the logic slave channel and cannot be changed or removed in its DB mapping panel e f the channel number session number or point number mismatches in the slave channel an error page appears e fthe user chooses the route to the channel as None this means that this point does not need to be routed to a slave Slave Points Configuration After configuring the points in the master channel the corresponding point is listed in the slave channel Slave points mapping C NET Server Channel1 Session0 Data Mapping a Remove Type Identification Point Number Data Count CPU Point Type CPU Point Address Binary Input 10 MW 100 Double Input 0 5 MW 200 Analog Input P 1 MW The points used to route are different from the normal points of the slave The parameters CPU type CPU address variable name and time stamp of CPU mapping are no longer available and the available parameters
225. ion Comment 1 Enter the Username The default is USER 2 Enter the New password The default is USER 3 Confirm the New password Enter the new password again 4 Confirm the modification using the Change Password button 144 E100000000505 04 2014 How to Work with Embedded Web Pages Section 10 4 Diagnostics Web Pages What Is in This Section This section contains the following topics Topic Page Diagnostics 146 PLC Rack Viewer Page 147 Messaging 149 NTP Diagnostics 150 Clock Diagnostics 151 Statistics 152 Upload MIB File 154 Properties 155 E100000000505 04 2014 145 How to Work with Embedded Web Pages Diagnostics Diagnostics Page Links From the BMX NOR 0200 H module Home page click the Diagnostics link to display this page 4 Diagnostics RTU Protocol Rack viewer Ethernet Messaging Statistics NTP Upload MIB file Modem Memory Clock Properties Copyright 2010 Schneider Automation SAS All Rights Reserved From the BMX NOR 0200 H Diagnostics page you can access the following pages RTU Protocol See the description for the RTU Connection and Clock Diagnostics see 151 Rack viewer See the description for the Rack Viewer page see 147 Ethernet You can diagnose the status of Ethernet services through these links e Messaging see page 149 Statistics see
226. ion error has been detected MWr m c 2 7 R read only 100000000505 04 2014 377 Ethernet Language Objects The table below shows the result of a READ STS call Standard Symbol Type Access Meaning Address ETH_STATUS INT R Ethernet port global MWr m c 3 status IP_ADDR DINT R IP address 96 MDr m c 4 P502 NB CONN DENIED INT R number of denied Port MWr m c 6 502 connections BW_MAX_MSG_IN INT R maximum number of MWr m c 10 received messages on the Ethernet port per second BW_MAX_MSG_BC INT R maximum number of MWr m c 14 broadcast messages received per second reserved INT R reserved for future use MWr m c 15 R read only Command Words This table shows the available command words Standard Symbol Type Access Meaning Address ETH_RESET BOOL Ethernet component MWr m c 16 0 reset BW_CNT_RESET BOOL max message counters MWr m c 16 1 reset P502_CNT_RESET BOOL messaging counters MWr m c 16 2 reset W write only 378 100000000505 04 2014 Ethernet Language Objects Details of Explicit Exchange Objects of the Non IODDT Type T COM ETH Status Words The table below shows the result of a READ STS call for non IODDT objects Address Type Access Meaning MWr m c 7 INT R number of received messages on the Ethernet port per second BW
227. ion standard Common address of ASDU X Two octets Information object address X Three octets X Structured X Unstructured Cause of transmission X Two octets with originator address Set to zero in case of no originator address Length of APDU The maximum length of APDU for both directions is 253 It is a fixed system parameter Process information in monitor direction X lt 1 gt Single point information M SP NA X lt 3 gt Double point information M DP NA X 5 Step position information M ST NA X lt 7 gt Bit string of 32 bit M NA X 9 Measured value normalized value M ME NA X lt 11 gt Measured value scaled value M ME NB X lt 13 gt Measured value short floating point value M ME NC X lt 15 gt Integrated totals M IT NA 20 Packed single point information with status change detection M PS NA lt 21 gt Measured value normalized value without quality descriptor M ME ND X lt 30 gt Single point information with time tag CP56Time2a M SP TB X lt 31 gt Double point information with time tag CP56Time2a M DP TB X lt 32 gt Step position information with time tag CP56Time2a M ST TB X lt 33 gt Bitstring of 32 bit with time tag CP56Time2a M BO TB X lt 34 gt Measured value normalized value with time tag CP56Time2a M ME TD_ X lt 35 gt Measured value scaled va
228. ions with configurable TCP service port standard is 2404 up to 5000 point database for data objects of all supported types up to 100 000 event queue for all data types in all clients each client has a dedicated event buffer event time stamping configurable by type None CP56 configurable CAA common ASDU address and IOA IEC 60870 5 104 client up to 5000 point database for all sectors including predefined commands up to 64 servers connections supported connections share common channel configuration dedicated connection for each session and sector configuration dedicated destination IP address and port settings for each connection Interoperability Lists The interoperability list defined by the standard facilitates interoperability between devices from different manufacturers In the list the function range is described for each device by marking the applicable functions NOTE You can find BMX NOR 0200 H IEC interoperability list in Appendices see 306 E100000000505 04 2014 89 How to Work with RTU Protocols DNP3 Protocols Overview Introduction The distributed network protocol DNP3 protocol was developed to achieve an open standard interoperability for communications between master stations substation devices RTUs and Intelligent Electronic Devices IEDs DNP3 has been used primarily by utilities such as the electric power industry in North America and has become widely
229. ith Command Command With Time Tag Parameter Description Whether the control command follow time tag Default unchecked age 220 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value Default Description scope value M EI NA GI check box checked specifies if the general interrogation is performed after receiving the M EI NA EOI message M EI NA Time sync check box checked specifies if the clock synchronization is performed after receiving the M EI NA EOI message M EI NA CI check box unchecked specifies if the counter interrogation is performed after receiving M EI NA EOI message Online GI check box checked specifies if the general interrogation is performed whenever the M EI NA EOI message is received Online Time Sync check box checked specifies if the clock synchronization is performed whenever the M EI NA EOI message is received Online CI check box unchecked specifies if the counter interrogation is performed whenever the M EI NA EOI message is received ACTTERM with CSE check box unchecked specifies if ACTTERM is expected from slave upon Setpoint completion of set point commands ACTTERM with Command box unchecked specifies if ACTTERM is expected from slave upon completion of commands other than set point commands Command with Time Tag check box unchecked specifies if the control command follows the time ta
230. ize 2048 Tx Fragment Size 2048 Max Queue Size 0 Channel Response Timeout ms 10000 Parameter Value scope Default Description value Rx Frame Size 0 292 292 indicates the maximum received message frame size in the data link layer bytes Tx Frame Size 0 292 292 indicates the maximum Transmit message frame size in the data link layer bytes Rx Frame 0 4294967295 15000 indicates time out while waiting Timeout ms for a complete frame after receiving frame synchronization Confirm Mode NEVER NEVER specifies when to request for link SOMETIMES layer confirmation ALWAYS E100000000505 04 2014 251 Configuration with the Setup Web Pages Parameter Value scope Default Description value Confirm 0 4294967295 2000 indicates the maximum time to Timeout ms wait for link level confirmation if requested Max Retries 0 255 3 indicates the retry count of link layer confirmation time out Offline Poll 0 4294967295 10000 specifies the period to re Period ms establish communication for an offline session First Char 0 65535 0 indicates the minimum time Wait ms between reception and transmission Rx Buffer Size 0 65535 256 indicates the received buffer size of the serial port Rx Fragment 0 256 2048 indicates the maximum message Length frame length in the data link layer bytes Tx Fragment 0 20486 2048 indicates the maximum message Length fr
231. l invalid bit 7 0 valid 1 invalid M ST overflow bit 0 0 no overflow 1 overflow M BO reserved bit 1 1 on not used M ME A M ME B bit 2 0 M ME C QDS bit 3 0 blocked bit 4 0 not blocked 1 blocked substituted bit 5 0 not substituted 1 substituted not topical bit 6 0 topical 1 not topical invalid bit 7 0 valid 1 invalid M IT sequence sequence bit 0 4 0 31 If the counter is frozen notation number once the sequence number increments 1 carry bit 5 0 no overflow 1 overflow not supported in slave counter bit 6 0 not adjusted 1 adjusted adjusted invalid bit 7 0 valid 1 invalid Input Float Value as Scientific The input float values as Scientific are supported 100000000505 04 2014 233 Configuration with the Setup Web Pages Long and Short Pulses The protocol specification defines a qualifier value that is set by the master to determine the duration of the sort or long pulse This parameter defines the number of milliseconds to be associated with a short or long pulse command The configuration supports C SC C RC for IEC server slave This figure shows the pulse duration configuration IEC 104 0 Session0 Sector0 a Parameters Advanced Parameters Select Timeout ms 5000 Default Response Timeout 60000 ACTTERM With CSE Setpoint v ACTTERM With Command v Clock Valid Period ms 86400000
232. l and remote IP address for modem PPP link PPP Enable check box checked if enabled PPP protocol is used for the modem connection NOTE When using RTU protocol IEC 104 DNP3 via PSTN GPRS or ADSL mode the gateway IP address is replaced after connection is established GSM Condition GSM has been selected in the Modem screen Select Communication Modem GSM Modem GSM Parameters Init AT CMD 0 050 1 amp 00 amp PIN Code 0000 SMS Service Center SMS Type 7bits Parameter Description Select SMS type 7 bits PDU encode or 8 bits PDU encode Default PDU 7bits E100000000505 04 2014 187 Configuration with the Setup Web Pages Parameter Value scope Default value Description Init AT CMD ATE0Q0S0 1 amp D0 custom AT commands specified by user AT commands amp S0 amp CO amp WO to initialize modem which is an AT command string starting with AT PIN Code 4 8 number 0000 PIN code for the SIM card SMS Service number of the service center for the SMS server Center International format number of the service center for the SMS server set symbol if not specify it SMS Type PDU 7bits PDU 7bits PDU 7bits the message is encoded on 7 bits and it is PDU 8bits used to send text message composed of ASCII characters It is supported in most of mobile phones PDU 8bits the message is encoded as 8 bits and it is used to send data message It de
233. lications through IANA Internet Assigned Numbers Authority Modbus requests are sent to registered software port 502 Port 502 messaging paths e server path e Port 502 messaging can process up to 8 incoming requests from the network Requests are received during the previous scan and sent to the Modbus server in the IN section e Port 502 messaging can process up to 8 responses from the Modbus server in the IN section including writing the data into the socket e client path e Port 502 messaging can process up to 16 outgoing requests from the application in the OUT section including writing the data into the socket e Port 502 messaging can process up to 16 incoming responses from the network in the IN section Responses are sent to the application E100000000505 04 2014 55 Ethernet Communications The Messaging Configuration Tab Introduction To limit access to the BMX NOR 0200 H module set the access control parameters on the Messaging tab Messaging Tab The following procedure shows how to access the Messaging page from the index page Step Action 1 Access the module configuration screen 2 Select the Messaging tab see illustration below The Messaging tab is shown below NOR configuration screen IP Configuration Messaging SNMP Address Server NTP r Connection configuration 4 Access IP address a E
234. lling periods elapse before an accurate time is reestablished 96 E100000000505 04 2014 How to Work with RTU Protocols Section 7 3 Time Stamping Event Time Stamping Overview BMX NOR 0200 H module provides two ways for time stamping of events e Time stamping done at source in the M340 CPU requires PLC programming e Time stamping done in the RTU module no PLC programming required NOTE Improved time stamping resolution can be obtained when performing the time stamping in the PLC CPU Time stamping resolution is basically depending on the CPU scan time and I O modules type Supported Time Formats In IEC 101 the Time Format for events time stamping may be set to one of the following options e CP56 56 bit default e CP24 24 bit The 56 bit Time Format is an absolute time format whereas the 24 bit Time Format is an incremental time format that only specifies minutes and milliseconds The IEC 104 protocol uses 56 bit time format 100000000505 04 2014 97 How to Work with RTU Protocols Section 7 4 Events Management What Is in This Section This section contains the following topics Topic Page Overview 99 Events Routing 101 Events Backup 106 98 100000000505 04 2014 How to Work with RTU Protocols Overview Introduction The BMX NOR 0200 H module generates events on changes of state handles events lists and provides the following services e The m
235. log Change 7 read 06 no range or all 129 17 28 Event without Time 07 08 limited gt response index 130 unsol resp 32 2 16 Bit Analog Change 1 read 06 no range or all 129 17 28 Event without Time 07 08 limited response index 130 unsol resp 32 3 32 Bit Analog Change 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 32 4 16 Bit Analog Change 1 read 06 no range or all 129 17 28 Event with Time 07 08 limited qty response index 130 unsol resp 32 5 short floating point 1 read 06 no range or all 129 17 28 Analog Change Event 07 08 limited qty response index without Time 130 unsol resp 32 7 short floating point 1 read 06 no range or all 129 17 28 Analog Change Event 07 08 limited qty response index with Time 130 unsol resp 350 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 34 0 Analog Input 1 read 00 01 start stop Deadband Variation 0 06 no range or all is used to request 07 08 limited qty default variation 17 28 index 34 1 16 bit Analog Input 1 read 00 01 start
236. lt 1 CPU Register Address 0 Variable Name Qualifier of Parameter Threshold P AC A also need to bind a special IOA It is different from P ME A P ME B P ME C which may be set as any IOA for all monitor pointtypes P AC Ais only used to activate deactivate cyclic or period data transmission which is pre defined in outstation If outstation has no set neither of them cyclic data transmission is activated or deactivated by default This figure shows the parameter point setting of IEC 101 104 slave PACA IOA 1 Point Count 1 Parameter Description Specify which points cyclic or period transmission is activated or deactivated Type integer Min 1 Max 16777215 Default 1 CPU Register Address 0 Variable Name 236 E100000000505 04 2014 Configuration with the Setup Web Pages Time Tag Parameter Support control command with time tag C_SC_TA C_DC_TA C_RC_TA C_SE_TA C_SE_TB C_SE_TC C_BO_TA on IEC 104 server IEC 104 client This figure shows the max command age setting IEC 104 server IEC 104 Server Channel0 Session0 Sector0 a Parameters Advanced Parameters Select Timeout ms 5000 DefaultResponse Timeout 60000 ____ ACTTERM With CSE Setpoint v ACTTERM With Command v Clock Valid Period ms 86400000 Send Clock Sync Events E Max Command Age ms 130000 Delete Oldest Event Parameter Description
237. lt 5 gt Step position information M ST NA X lt 7 gt Bitstring of 32 bit M NA_ X lt Measured value normalized value M ME NA_ X lt 11 gt Measured value scaled value M NB X lt 13 gt Measured value short floating point value M ME NC X lt 15 gt Integrated totals M IT NA 20 Packed single point information with status change detection M SP NA lt 21 gt Measured value normalized value without quality descriptor M ME ND X lt 30 gt Single point information with time tag CP56Time2a M SP TB X lt 31 gt Double point information with time tag CP56Time2a M DP TB X lt 32 gt Step position information with time tag CP56Time2a M ST TB X lt 33 gt Bitstring of 32 bit with time tag CP56Time2a M BO TB X lt 34 gt Measured value normalized value with time tag CP56Time2a M ME TD_ X lt 35 gt Measured value scaled value with time tag CP56Time2a M ME TE X lt 36 gt Measured value short floating point value with time tag CP56Time2a ME TF X lt 37 gt Integrated totals with time tag CP56Time2a M IT TB lt 38 gt Event of protection equipment with time tag CP56Time2a M EP TD 39 Packed start events of protection equipment with time tag CP56time2A EP TE 40 Packed output circuit information of protection equipment with time tag EP TF CP56Time2a 336 100000000505 04 2014 Interoperability Process information in control direction
238. lue with time tag CP56Time2a M ME TE X lt 36 gt Measured value short floating point value with time tag CP56Time2A M ME _ X lt 37 gt Integrated totals with time tag CP56Time2a M IT TB 100000000505 04 2014 327 Interoperability Process information in monitor direction lt 38 gt Event of protection equipment with time tag CP56Time2a M EP TD 1 lt 39 gt Packed start events of protection equipment with time tag CP56time2a M EP TE 1 40 Packed output circuit information of protection equipment with time tag M EP TF 1 CP56Time2a Process information in control direction X lt 45 gt Single command C SC NA X lt 46 gt Double command C DC NA X lt 47 gt Regulating step command C RC NA X lt 48 gt Set point command normalized value C SE _ X lt 49 gt Set point command scaled value C SE NB X lt 50 gt Set point command short floating point value C SE NC X lt 51 gt Bitstring of 32 bit C BO NA X lt 58 gt Single command with time tag CP56Time2a C SC TA X lt 59 gt Double command with time tag CP56Time2a C DC TA X lt 60 gt Regulating step command with time tag CP56Time2a C RC TA X lt 61 gt Setpoint command normalized value with time tag CP56Time2a C SE TA X lt 62 gt Setpoint command scaled value with time tag CP56Time2a C SE TB X lt 63 gt Setpoint command short floating point
239. marizes the parameters of the previous Clauses to facilitate a suitable selection for a specific application If a system is composed of equipment stemming from different manufacturers it is necessary that all partners agree on the selected parameters The selected parameters are marked as follows Function or ADSU is not used X Function or ADSU is used System or Device System definition Controlling station definition master X Controlled station definition slave Network Configuration X Point to point X Multipoint part line X Multi point to point X Multipoint star 316 E100000000505 04 2014 Interoperability Physical Layer Transmission speed control direction Unbalanced interchange Unbalanced interchange Balanced interchange Circuit V 24 V 28 Circuit V 24 V 28 Circuit X 24 X 27 Standard Recommended if gt 1200 bit s 100 bit s X 2400 bit s X 2400 bit s 200 bit s X 4800 bit s X 4800 bit s X 300 bit s X 9600 bit s X 9600 bit s X 600 bit s X 19200 bit s X 1200 bit s X 38400 bit s 56000 bit s 64000 bit s Transmission speed monitor direction Unbalanced interchange Unbalanced interchange Balanced interchange Circuit V 24 V 28 Circuit V 24 V 28 Circuit X 24 X 27 Standard Recommended if gt 1200 bit s
240. ment Block Library write command words WRITE PARAM see Unity Pro I O Management Block Library write adjustment parameters READ PARAM see Unity Pro I O Management Block Library read adjustment parameters SAVE PARAM see Unity Pro I O Management Block Library save adjustment parameters RESTORE PARAM see Unity Pro I O Management Block Library restore adjustment parameters These exchanges apply to a set of MW objects of the same type status commands or parameters that belong to a channel These objects can e provide information about the module for example type of error detected in a channel e have command control of the module for example switch command e define the module s operating modes save and restore adjustment parameters in the process of application NOTE To avoid several simultaneous explicit exchanges for the same channel it is necessary to test the value of the word EXCH_STS MWr m c 0 ofthe IODDT associated to the channel before calling any EF addressing this channel NOTE Explicit Exchanges are not supported when Modicon M340 Analog and Digital I O modules are configured behind a M340 Ethernet Remote I O adapter module in a Quantum EIO Ethernet Configuration As a consequence it is not possible to setup a module s parameters from the PLC application during operation E100000000505 04 2014 373 Ethernet Language Objects General Principle for Using Explicit Instructions The di
241. ms 2000 Cold Restart Delay ms 5000 Allow Multi CROB Requests 9 Max Control Requests 10 Unsol Allowed 9 Send Unsol When Online Unsol Class 1 Max Events 5 Unsol Class 2 Max Events 5 Unsol Class 3 Max Events 5 Unsol Class 1 Max Delay ms 5000 Unsol Class 2 Max Delay ms 5000 Unsol Class 3 Max Delay ms 5000 Unsol Max Retries 3 Unsol Retry Delay ms 5000 Unsol Offline Retry Delay ms 30000 Delete Oldest Event Pulse Duration 1000 Counts to Class0 Poll Count Value v Data Synch Mode Cyclic Synch Parameter Value scope Default Description value Link Status 0 4294967295 0 indicates the period to send link status requests if no Period ms DNP3 frames are received on this session Validate Source check box unchecked specifies if the source address is validated in Address received frames Enable Self check box unchecked responds with its own address so that the master can automatically discover the slave address 100000000505 04 2014 259 Configuration with the Setup Web Pages Max Events Parameter Value scope Default Description value Multi Frag Resp check box checked specifies if the application is allowed to send multi Allowed fragment responses Multi Frag check box checked specifies if the application layer confirmations are Confirm requested for no final fragments of a multi f
242. ms 5000 Unsol Max Retries 3 Unsol Retry Delay ms 5000 Unsol Offline Retry Delay ms 30000 Delete Oldest Event Pulse Duration 100 Parameter Description Specify pulse s width in milliseconds Type integer Min 0 Max 4294967295 Default 100 NOTE The outstation uses the entered pulse duration The value 0 indicates that the device uses a pre configured value E100000000505 04 2014 277 Configuration with the Setup Web Pages Set Measured Value Apply analog input dead band obj34 to set deadhead of measured value The parameters of the measured points are activated immediately after the DNP3 slave receives the request from the DNP3 master For DNP3 obj34 there is no qualifier to set as it only applies the parameter deadband Set the static variation and point number at the same setting of the analog input Analog input deadband is applied both on the DNP3 master and the DNP3 slave DNP3 master uses it to store the current value which is reported in the response of read requests the DNP3 slave uses it to display the current deadband value which can be controlled by the master through the analog input deadband control block This figure shows the parameter point setting of deadband Analog_Input_Deadband x Point Count 1 CPU Register Type MW CPU Register Address 0 Variable Name This figure shows the parameter point setting of deadband control block Ana_Input_DBand_Ctrl x Point N
243. n 12 The URL specified for FTP cannot be accessed 13 The internal flash is full 14 The internal RAM is full 15 The module cannot write on the media specified 16 The module cannot access the namespace 17 The maximum number of tables has been reached 10 maximum in your xml file 18 The maximum number of variables has been reached in a table 19 The service is empty no table defined NOTE e The datalogging service code 2 should be considered as a status e The highest values have the priority The datalogging service code 17 has priority over the datalogging service code 12 When the datalogging service code17 has been corrected the datalogging service code 12 can then be sent to the variable declared for the status of the database service e The values of the table status variable are identical to the values of the datalogging service status variable E100000000505 04 2014 117 How to Work with Datalogging Service Create a Datalogging Service Procedure Follow these steps to create a datalogging service Step Action 1 Click the name of your project in the browser 2 To add the new service click Project New Service or e right click Services in the browser then click New Service Result the following window appears Web Designer Service Creation Wizard Creation of new service in RTU Project New service is created supported by the given the target Service type datalog
244. n unsolicited response is generated Unsol Class 3 0 4294967295 5000 specifies the maximum amount of time after an Max Delay ms event in the corresponding class is received before an unsolicited response is generated Unsol Max 0 65535 3 specifies the maximum number of unsolicited retries Retries before changing to the offline retry period Unsol Retry 0 4294967295 5000 specifies the time to delay after an unsolicited Delay confirmation time out before retrying the unsolicited response Unsol Offline 0 4294967295 30000 specifies the time to delay after an unsolicited time Retry out before retrying the unsolicited response after Delay ms UnsolMaxRetries are attempted Delete Oldest check box unchecked specifies if the oldest event is removed from the Event event queue when buffer is full and a new event comes Checked Remove the oldest event Unchecked Ignore the new event Pulse Duration 0 4294967295 1000 indicates the width of the pulse in milliseconds Counts to Count Value Count specifies whether static counter data Count Value Class0Poll Frozen Value Value or static counter frozen data Frozen Value is returned in polls of classO data Data Synch Mode Cyclic Synch Cyclic specifies how the data are synchronized either Synch On Synch cyclically or when the slave station receives a Demand request from the master see note it is used only by Analog Outputs NOTE Only MW and M output points ar
245. nal error detected or self test cannot complete INTERNAL FLT bit 7 MWr m 0 2 7 1 application cannot be run APPLI FLT MWr m 0 3 Ethernet Port Global status ETH_PORT_STATUS MDr m 0 4 IP address IP_ADDR MWr m 0 6 number of denied Port 502 connections P502_NB_CONN_DENIED MWr m 0 7 number of received messages on the Ethernet port per second BW_NB_MSG_IN MWr m 0 8 number of useless messages filtered by the Ethernet port per second BW_NB_MSG_FILTER MWr m 0 9 number of messages dropped by the Ethernet port per second BW_NB_MSG_DROP MWr m 0 10 maximum number of received messages on the Ethernet port per second BW_MAX_MSG_IN MWr m 0 11 maximum number of useless messages filtered by the Ethernet port per second BW_MAX_MSG_FILTER MWr m 0 12 maximum number of messages dropped by the Ethernet port per second BW_MAX_MSG_DROP 382 100000000505 04 2014 Ethernet Language Objects Object Description MWr m 0 13 maximum number of Multicast messages received per second BW_MAX_MSG_MC MWr m 0 14 maximum number of broadcast messages received per second BW_MAX_MSG_BC MWr m 0 15 reserved for future use Command Words The following table describes the command word MW WRITE language objects Object Description MWr m 0 16 Ethernet command word ETH_CMD bit 0 1 for Ethernet Component Reset ETH RESET bit 1 for Ma
246. ndicates the minimum time between reception and Wait ms transmission 100000000505 04 2014 257 Configuration with the Setup Web Pages Parameter Value scope Default Description value Rx Buffer Size 0 256 256 indicates the received buffer size of serial port bytes Rx Fragment 0 2048 2048 indicates the maximum message frame length in the Length data link layer bytes Tx Fragment 0 2048 2048 indicates the maximum message frame length in the Length data link layer bytes Session Parameters Click Setup DNP3 NET Server Session Parameters DNP3 NET Server Channel0 Session0 Parameters Local Address Master Address Advanced Parameters Parameter Value scope Default Description value Local Address 1 65520 4 indicates the source address for this session Master Address 1 65520 3 indicates the destination address for this session 258 100000000505 04 2014 Configuration with the Setup Web Pages Advanced Parameters Configure the module with advanced parameters Address Link Status Period ms 0 Validate Source Address Enable Self Address Multi Frag Resp Allowed v Multi Frag Confirm v Respond Need Time Clock Valid Period ms 1800000 Application Confirm Timeout ms 10000 Select Timeout ms 5000 Warm Restart Delay
247. nfigured to decide which events or data types need to be saved on loss of power Web Configuration Event backup is a configurable feature for users It can be enabled or disabled on the Web site as shown in the picture below and it is disabled by default This feature is set individually for each channel and each data type Only the events of the main channel are saved on loss of power After power restoration the saved events can be restored into the main channel and also the virtual channels which depend on Event Restore Mode configuration in the Web site These configurations take effect after a communication reset in the Web site or power recycle Configuration of event backup DNP3 NET Server Channel0 Parameters Event Backup Enable 9 Event Restore Mode All Channels EventS Time Quality Original Quality v Event backup feature is supported from PV 03 Parameter Description Specify what quality is used for backup events when power recover Original Quality use original quality Invalid force to set invalid bit in time stamp Default Original Quality Advanced Parameters Event restore mode e Event backup enable Specifies whether the channel IEC or DNP3 server slave supports event backup if the module does not power up It is only effective for the main channel e Event restore mode It has two options main channel and all channels Select the main channel option if you want to add saved events into the e
248. ng Events Reset Communication Remove Type Identification Point Number Data Count CPU Point Type CPU Point Address Binary Input 0 Binary Input Binary_Input Double_Input Export Import files Binary_Output Security Binary_Counter FTP Import Export Analog Input Analog Output Analog Input Deadband Binary Output Flags Analog Output Flags 1 MW 0 Add eters file Browse Export Import Data object Mapping items can be exported see page 196 as a profile in the XSY format Such files can be imported into Unity Pro software Predefined Command List The required input fields are requested to define a predefined command item for DNP3 master DNP3 NET client see page 288 Static Variation Name of DNP3 Data object type Static variation Binary Input g1v1 Binary In g1v2 Binary In Flag Double Input g3v1 Double In g3v2 Double In Flag 282 100000000505 04 2014 Configuration with the Setup Web Pages Data object type Static variation Binary Output g10v1 Binary Out g10v2 Binary Out Flag Binary Counter g20v1 32bit Counter g20v2 16bit Counter g20v5 32bit Ctr No Flag g20v6 16bit Ctr No Flag Frozen Counter g21v1 32bit Frozen Ctr Flag g21v2 16bit Frozen Ctr Flag g21v5 32bit Frozen Ctr Flag Time g21v6 16bit Frozen Ctr Flag Time g21v9 32bit Frozen Counter g21v10
249. nse index 130 unsol resp 4 3 default Double Bit Input 1 read 06 no range or all 129 17 28 see Change with Relative 07 08 limited qty response index note 1 Time 130 unsol resp 10 0 Binary Output Any 1 read 00 01 start stop Variation 06 no range or all 10 1 Binary Output 1 read 00 01 start stop 129 00 01 06 no range orall response start stop 1 write 00 01 start stop 10 2 Binary Output Status 1 read 00 01 start stop 129 00 01 start 06 no range or all response stop 11 0 Binary Output Change 1 read 06 no range or all Any Variation 07 08 limited qty 11 1 Binary Output Change 1 read 06 no range or all 129 17 28 without Time 07 08 limited qty response index 130 unsol resp 11 2 Binary Output Change 1 read 06 no range or all 129 17 28 with Time 07 08 limited qty response index 130 unsol resp 12 1 Control Relay Output 3 select 17 28 index 129 echo of Block 4 response request 5 direct op 6 dir op noack 100000000505 04 2014 347 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 20 0 Binary Counter Any 1 read 00 01 start stop Variation
250. ntains the following topics Topic Page About Datalogging Service 116 Create a Datalogging Service 118 Datalogging Properties 119 Datalogging Configuration 121 Datalogging File Format 125 Recommendation on Datalogging Service 126 100000000505 04 2014 115 How to Work with Datalogging Service About Datalogging Service Service Description The datalogging service allows application data archiving events alarms process data devices status measures etc in the internal memory of the BMX NOR 0200 H module This service allows you to log data into CSV files in the ASCII format CSV files are stored locally in the SD memory card of the BMX NOR 0200 H module Datalogging can be performed either periodically or when a specific event configured by the user occurs CSV files are directly usable by an MS Excel spreadsheet or a database management system DBMS The CSV files can also be sent through FTP or attached to an email using the email service that is automatically sent to specified users CSV files can also be accessed by an FTP client Any FTP client can access the module s file system You can specify a URL to automatically send information to a remote FTP server NOTE The datalogging service is configured using Web Designer software Service Principles Datalogging is performed in the RAM memory of the BMX NOR 0200 H module to backup the SD card memory The datalogging ser
251. ntation Reference Number Modicon M340 using Unity Pro Processors Racks and Power 35012676 Eng 35012677 Fre Supply Modules 35013351 Ger 35013352 Ita 35013353 Spa You can download these technical publications and other technical information from our website at www schneider electric com Product Related Information WARNING UNINTENDED EQUIPMENT OPERATION The application of this product requires expertise in the design and programming of control systems Only persons with such expertise should be allowed to program install alter and apply this product Follow all local and national safety codes and standards Failure to follow these instructions can result in death serious injury or equipment damage 100000000505 04 2014 11 12 100000000505 04 2014 Part The RTU Module for M340 Platforms 100000000505 04 2014 The RTU Module for M340 Platforms 14 E100000000505 04 2014 Chapter 1 About the BMX NOR 0200 Module Introducing the BMX NOR 0200 H Module Overview The BMX NOR 0200 H module brings Remote Terminal Unit RTU functionality to the M340 PAC platform The M340 RTU system provides an extensive set of control and communications features including industry and telemetry standard protocols such as IEC 60870 5 101 IEC 60870 5 104 DNP3 and Modbus TCP About the Module The M340 PAC controller and its built in RTU module ar
252. ntent of the message in this area Source Select the source from which the attached file comes Path Specify the path of the file These parameters are required to record and save an email 100000000505 04 2014 133 How to Work with Email SMS Service Dynamic Data The email service enables you to include dynamic data in the body of the email You can include dynamic data manually or automatically manual Place brackets before and after the variable name For instance to learn the value of the value1 variable created in the device service type write plc plcl valuel You can include comments before and after the brackets e automatic Double click the location to which you want to include dynamic data When the lookup table appears you can select the variables that will appear in the email Configuring European SMS Format Before sending an SMS you must configure the parameters from the Modem GSM window as shown below Modem GSM Parameters Init AT CMD PIN Code SMS Service Center SMS Type ATE0Q0S0 1 amp D0 amp S 0000 PDU_7bits v Parameter Description Select SMS type 7 bits PDU encode or 8 bits PDU encode Default PDU_7bits 134 100000000505 04 2014 How to Work with Email SMS Service The Modem GSM parameter settings available Parameter Value Scope Default Value Description Init AT CMD ATEOQO0S 1 amp D0 amp S0 amp C0O amp WO A cus
253. nts and sends events to SCADA if communication link is established When Slave Channel Receives Request from SCADA In the RTU system SCADA sends requests commands like an Integrity Poll to slaves connected to it The slave channel receives this request and sends a response to SCADA In the routing system the behavior of the slave channel is exactly the same as a standalone without events routing slave channel the master channel and sub slaves are not involved in this case Response to the request from SCADA RTU Module jeuueuo Sub Slave 1 SCADA sends an Integrity Poll request to the slave channel 2 Points values are synchronized cyclically between the database of the slave channel and CPU registers 3 The slave channel responds to the SCADA request with the points value in the database 110 100000000505 04 2014 How to Work with RTU Protocols When Master Channel Sends Request to Sub Slave The master channel can send requests to a sub slave connected to it and a sub slave sends the response back to as the master channel The behavior of the master channel in this case is exactly the same as a standalone master channel The points in the logic slave channel should be synchronized with the updated point in the master channel Send request to sub slave RTU Module 1249 25815 no gt c gt jauueyo e e c PLC application in the M340 C
254. oE Parameters Enable PPPoE v Connection Type OnDemand CPU Reg Address 0 Username for Server USER Password for Server Local Address 0 0 0 0 Parameter Value scope Default value Description Enable PPPoE check box unchecked enable PPPoE on modem connection Connection Type Permanent On Demand Permanent Permanent connect modem automatically when module is power up e On Demand connect or disconnect modem according to CMD Reg in CPU CPU Reg 0 32264 0 start address of 8 MW registers Address which represent modem command status local and remote IP address Username for USER username to connect with this PPP Server Server Password for USERUSER password to connect with this PPP Server Server Local IP address 0 0 0 0 specify PPPoE client IP address and IP address is served by provider if specifying 0 0 0 0 192 100000000505 04 2014 Configuration with the Setup Web Pages Time Zone Configuration Web Site Configuration The time zone is configurable only for the DNP3 master and slave which have the same options as NTP configurations in Unity Pro The purpose is to set time zone when the BMX NOR 0200 H module has not specified a time zone in the NTP configuration or the NTP is disabled Setup Parameters 5 Communication Channel Parameters Time Zone GMT 03 00 E South Ai E Modem Automatically clock for daylight v
255. oadcast address Cyclic Message 0 4294967295 10000 specifies the number of milliseconds Interval ms between cyclic updates Background Period 0 4294967295 2000 specifies the period to generate background scan data on this sector Read Time Format None CP24 CP56 None specifies the completeness time format for responding to C RD NA 100000000505 04 2014 225 Configuration with the Setup Web Pages Configure the module with advanced parameters IEC 104 Server Channel0 Session0 Sector0 Parameters Advanced Parameters Select Timeout ms Default Response Timeout ACTTERM With C_SE Setpoint ACTTERM With Command Clock Valid Period ms Send Clock Sync Events Max Command Age ms Delete Oldest Events Short Pulse Duration Long Pulse Duration Counter Mode Summer Bit CMD Queue Size C DC Impulse Data Synch Mode 5000 160000 v v 86400000 30000 100 1000 FeezeOnDemand V 39 L Determinate State Cyclic Synch Parameter Description Specify the mode to synchronize data between CPU and NOR module Cyclic Synch the data synchronization is executed cyclically Synch On Demand the data synchronization occurs only when controlled station receive a request from controlling station The parameter only takes effect on C_SE_NA C_SE_NB C_SE_NC and C_BO Default Cyclic Synch Parameter Value scope Default value
256. odes hex Codes hex dec dec 32 0 Analog Change 1 read 06 no range or all Event Any 07 08 limited qty Variation 32 1 default 32 Bit Analog 1 read 06 no range or all 129 17 28 index see Change Event 07 08 limited qty response note 1 without Time 130 unsol resp 32 2 16 Bit Analog 1 read 06 no range or all 129 17 28 index Change Event 07 08 limited qty response without Time 130 unsol resp 32 3 32 Bit Analog 1 read 06 no range or all 129 17 28 index Change Event 07 08 limited qty response with Time 130 unsol resp 32 4 16 Bit Analog 1 read 06 no range or all 129 17 28 index Change Event 07 08 limited qty response with Time 130 unsol resp 32 5 short floating 1 read 06 no range or all 129 17 28 index point Analog 07 08 limited qty response Change Event 130 unsol without Time resp 32 7 short floating 1 read 06 no range or all 129 17 28 index point Analog 07 08 limited qty response Change Event 130 unsol with Time resp 34 0 Analog Input 1 read 00 01 start stop Deadband 06 no range or all Variation O is 07 08 limited qty used to request 17 28 index default variation 34 1 16 bit Analog 1 read 00 01 start stop 129 00 01 start stop Input Deadband 06 no range or all response 17 28 index see 07 08 limited qty note 2 17 28 index 2 write 17 28 index 364
257. omized list of variables that can be used in other services such as datalogging or email services and in data table animations Connect to local Simulator Device0 Modicon M340 GDEEditor No Symbol Address Type Access Persistant Value Comment Remove 1 variable INT R 2 variable MW2 INT R Duplicate 4 variable MW4 INT R Import PLC symbols 5 variables MW5 INT R variables INT R Import From CSV lt Export to CSV Variables Properties NOTE Check the Persistent box for the variables used in datalogging or email services E100000000505 04 2014 299 Web Designer Configuration Data Editor Configuration Create Data Editor Tables After the variable repository is created you can import the variables to the Data table editor It allows you to create tables that monitor values on the website These tables need to be transferred to the target to be used online 1 Device Modicon M340 2917170778 4 GDEEditor A Variable Name Address Data Type Plc Device0 variable1 DECIMAL Plc Device0 variable2 DECIMAL Plc Device0 variable3 DECIMAL Plc Device0 variable4 DECIMAL Plc Device0 variable5 DECIMAL Plc Device0 variable6 DECIMAL Address Format Readonly OK Variables that can be written are accessible only by trained personnel password protect
258. ommand and status through MW Both command and status are 32 bits Commands are implemented each time when the value in the configured CPU memory changes This allows the user to control easily the command implementation by changing the value in the CPU memory Command Status Register Certain commands have a status register that lets the user know if the command was successfully executed The status register is a 16 bit word For example if a command is mapped to CPU register MW1 the corresponding status register is automatically mapped to MW2 NOTE When a command is mapped to a register and the command has a command status the status register is automatically mapped to the following register If a command has a result the low byte of the status register increments automatically to indicate that the status is for the command The high byte is the status of the command NOTE If the high byte of command status has a result 0 this means that it has completed successfully A DNP3 command status register contains these fields Status value Description 0 The command has completed successfully 1 A response was received but the requested command is not yet complete 2 The command did not transmit as expected 288 100000000505 04 2014 Configuration with the Setup Web Pages Status value Description The command has timed out The command has been canceled The response
259. on ASDU 1 65535 3 indicates the common address of Address ASDU 65535 is broadcast address 206 100000000505 04 2014 Configuration with the Setup Web Pages Configure the module with advanced parameters IEC 101 Master Channel0 Session0 Sector0 Parameters Advanced Parameters Clock Sync Mode Propagation Delay ms M EI NA GI M EI NA Time sync M El NA CI Online Gl Online Time Sync Online Cl ACTTERM With CSE Setpoint SYNC ONLY ACTTERM With Command E Parameter Value scope Default Description value Clock Sync Mode ACQUISITE sync only indicates the clock synchronization mode this LOAD parameter only applies to actions performed SYNC ONLY automatically ACQUISITE Delay acquisition followed by load delay followed by clock sync LOAD Load delay followed by clock sync SYNC ONLY Clock sync only Propagation 0 65535 0 indicates the propagation delay if Clock Sync Delay ms Mode is set to LOAD M EI NA GI check box checked specifies if general interrogation is performed after reception of M El NA EOI message M EI NA Time sync check box checked specifies if Clock Sync is performed after reception of M El NA EOI message M EI NA CI check box unchecked specifies if counter interrogation is performed after reception of M El NA EOI message 100000000505 04 2014 207 Configuration with the Setup Web Pages Parameter Value s
260. on speed control direction Unbalanced interchange Unbalanced interchange Balanced interchange Circuit V 24 V 28 Circuit V 24 V 28 Circuit X 24 X 27 Standard Recommended if gt 1200 bit s 100 bit s X 2400 bit s X 2400 bit s 56000 bit s 200 bit s X 4800 bit s X 4800 bit s 64000 bit s X 300 bit s X 9600 bit s X 9600 bit s X 600 bit s X 19200 bit s X 1200 bit s 38400 bit s Unbalanced interchange Unbalanced interchange Balanced interchange Circuit V 24 V 28 Circuit V 24 V 28 Circuit X 24 X 27 Standard Recommended if gt 1200 bit s 100 bit s X 2400 bit s X 2400 bit s 56000 bit s 200 bit s X 4800 bit s X 4800 bit s 64000 bit s X 300 bit s X 9600 bit s X 9600 bit s X 600 bit s X 19200 bit s X 1200 bit s 38400 bit s Link Layer Frame format FT 1 2 single character 1 and the fixed time out interval are used exclusively in this companion standard When using an unbalanced link layer the following ASDU types are returned in class 2 messages low priority with the indicated causes of transmission Link transmission procedure Address field of link X Balance transmission X Not present balanced transmission only X Unbalance transmission X One octet X Two octets Structured Unstructured Frame length 255 Maximum frame length L control direction 255 Maximum frame length L monitor direction
261. one not all mobile phones support it Username USER username of the APN given by the service provider Password USER password of the APN given by the service provider set symbol if not specify it Local IP address 0 0 0 0 Local IP address for PPP client and IP address is served by server if specifying 0 0 0 0 PSTN Condition PSTN has been selected in the Modem screen Select Communication Modem Modem PSTN Modem PSTN Parameters Init AT CMD 00050 1 amp 00850 Parameter Value scope Default value Description Init AT CMD ATE0Q0S0 18 amp D0 custom AT commands specified by user AT commands amp S0 amp CO amp WO to initialize modem which is an AT command string starting with AT E100000000505 04 2014 189 Configuration with the Setup Web Pages PPP Server Conditions in the Modem screen the modem type GSM or PSTN has been selected and the box PPP Enable has been checked Select Communication PPP Server PPP server Parameters Username for Server Password for Server Local IP Address Allow remote IP address 10 0 0 2 v Parameter Value scope Default value Description Username for Server USER username of the remote device only used for modem PPP as server mode Password for Server USERUSER password of the remote device only used for modem PPP as server
262. one specifies the time format for respond Format CP56 toC RD NA C IC NA Time Format None CP24 None specifies the time stamp format in CP56 response of C IC NA 100000000505 04 2014 213 Configuration with the Setup Web Pages Configure the module with advanced parameters IEC 101 Slave Channel0 Session0 Sector0 Parameters Advanced Parameters Select Timeout ms ACTTERM With C_SE Setpoint ACTTERM With Command Clock Valid Period ms Delete Oldest Event Short Pulse Duration Long Pulse Duration Counter Mode Summer Bit CMD Queue Size C DC Impulse Data Synch Mode 5000 v v 86400000 100 1000 Freeze On Demand 1 Determinate State Cyclic Synch Parameter Value scope Default value Description Select 0 4294967295 5000 specifies the period after which a previously Timeout ms received selection is timed out An execute command must be received before the time out in order to be valid ACTTERM with check box checked specifies if ACT TERM is transmitted upon CSE Setpoint completion of the set point commands C_SE_NA C_SE_NB C_SE_NC C_SE_TA C_SE_TB C_SE_TC ACTTERM with check box checked specifies if ACT TERM is transmitted upon Command completion of commands other than the set point commands Clock Valid 0 4294967295 86400000 specifies the period for which the system clock Period ms remains valid after a clock synchroniz
263. ontaneous transmission X Spontaneous transmission Double transmission of information objects with cause of transmission spontaneous Single point information M SP NA 1 M SP TA 1 M SP TB 1andM PS NA 1 Double point information M DP NA 1 M DP TA 1andM DP TB 1 Step position information M ST NA 1 M ST TA 1 M ST TB 1 Bitstring of 32 bit M BO NA 1 M BO TA 1 and M BO TB 1 Measure value normalized value M ME NA 1 M ME TA 1 M ME ND 1 and M ME TD 1 Measure value scaled value M ME NB 1 M ME TB 1andM ME TE 1 Measure value short floating point number M ME NC 1 M ME TC 1 M ME TF 1 Station interrogation X Global X Group1 X Group 7 X Group 13 X Group 2 X Group 8 X Group 14 X Group 3 X Group 9 X Group 15 X Group 4 X Group 10 X Group 16 X Group 5 X Group 11 X Group 6 X Group 12 Addresses per group have to be defined Clock synchronization Clock synchronization X Day of week used X RES1 GEN time tag substituted not substituted used X SU bit summer time used Command transmission X Direct command transmission X Select and execute command X Direct set point command X Select and execute set point command transmission 100000000505 04 2014 313 Interoperability X C SE ACTTERM used No additional definition Short puls
264. ore the information on the SD card of the module Log maximum size Specify the maximum size of memory allocated to the backup files The maximum log file size is defined for each media via the drop down menu but the value can be changed For more information refer to Datalogging Limitations Path Provide the destination path for the media selected E100000000505 04 2014 119 How to Work with Datalogging Service Purge Parameters Fields Function Use of a trigger If checked this event triggers a purge of the current backup files on all media currently in use NOTE Select the type of your trigger in the drop down Service Properties Parameters Fields Function Service status Selects the variable with the associated event that is to be used as a trigger to check variable the status of the Datalogging service 120 E100000000505 04 2014 How to Work with Datalogging Service Datalogging Configuration Configuration Tab This figure shows the Configuration tab for datalogging 7 Device0 Modicon M340 datalogging X Log tables TABLEO Add Remove Duplicate Table parameters Table TABLEO Table status variable Enable logging Log parameters O use of a trigger IN 5 Erase on restart Maximum records 5 7 use of a timer 500 millisi Erase Table on Backup Optimized log format Timestamp
265. ore user decide to change effective by click Change or Add button e Ifthe value of the parameters does not abide by consistency checking a parameter conflict dialog is popped up It is only to show user the problem Choose Cancel to cancel this configuration and choose OK to go on this operation e The invalid parameter dialog is popped up to reject the configuration of the user Parameter conflict page for consistency checking P_AC_A x IOA 1 Point Count 1 Association IOA 1 CPU Register Type 9 MW CPU Register Address Parameter conflict x Variable Name 2 CPU address is already occupied Are you sure to continue OperationMode 178 E100000000505 04 2014 Configuration with the Setup Web Pages Detected invalid input page for consistency checking Binary_Input x Point Number 0 Point Count 1 CPU Register Type MW CPU Register Address 300 Variable Name Event Class Mas Invalid Parameter i CPU Reg Mappit Default Static Va The point number must be unique for this kind of point type in this session Default Event Va Gray Out Option Automatically For the parameters conflicting with other parameters they are disabled automatically once the relative parameter is enabled Screen of gray option Modem Parameters Modem Type Radio Connection Type OnDemand Default Phone Index 1 Max Retry 3 Command Reg Address MW 10000 PPP Enable 7 E100000000505 04
266. ormation as your reference The information provided in this documentation contains general descriptions and or technical characteristics of the performance of the products contained herein This documentation is not intended as a substitute for and is not to be used for determining suitability or reliability of these products for specific user applications It is the duty of any such user or integrator to perform the appropriate and complete risk analysis evaluation and testing of the products with respect to the relevant specific application or use thereof Neither Schneider Electric nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein If you have any suggestions for improvements or amendments or have found errors in this publication please notify us No part of this document may be reproduced in any form or by any means electronic or mechanical including photocopying without express written permission of Schneider Electric All pertinent state regional and local safety regulations must be observed when installing and using this product For reasons of safety and to help ensure compliance with documented system data only the manufacturer should perform repairs to components When devices are used for applications with technical safety requirements the relevant instructions must be followed Failure to use Schneider Electric software or approved software with our hardware
267. p and close are provided for a single index in the DNP3 master but two separately physical outputs in the DNP3 slave For example a close pulse on request for a specific DNP3 index is mapped to a specific relay output whereas a trip pulse on request for the same DNP3 index is mapped to another different relay output which follows the specific relay output close in the BMX NOR 0200 H module CROB sent in DNP3 master Point number in DNP3 master Point number in DNP3 slave Pulse on 0 0 Trip Pulse on 0 1 Close Pulse on 2 2 100000000505 04 2014 275 Configuration with the Setup Web Pages CROB sent in DNP3 master Point number in DNP3 master Point number in DNP3 slave Trip Pulse on 2 3 Close Pulse on n 2 n 2 Trip Pulse on n 2 2 1 In the DNP3 slave it is decided by configuration whether the point index applies trip close request As the trip close need to bind a couple of points the point count is even in the configuration This figure shows the selection of TCC Binary_Output Point Number 0 Point Count 1 CPU Register Type MW CPU Register Address 0 Variable Name 7 Classo Event Class Mask 1 1 Class2 Class3 TCC None Default Static Variation None Parameter Description Default Event Variation Trip_Close lt is used to support Trip Close Control e CROB usage in master Code of CROB If it is enable the odd
268. pends on the brand of mobile phone not all mobile phones support it GPRS Condition GPRS has been selected in the Modem screen Select Communication Modem GPRS Modem GPRS a Parameters Initial AT command 0008008508 08 Access Point APN PIN Code 0000 SMS Service Center SMS Type 7bits Username USER Password tran Local IP Address 0 0 0 0 Parameter Value scope Default value Description Init AT Command ATE0Q0S0 1 amp D0 custom AT commands specified by user AT commands amp S0 amp CO amp WO to initialize modem which is an AT command string starting with AT Access Point Name name of the access point given by the service provider for APN GPRS PIN Code 4 digits at least 0000 PIN code for the SIM card 188 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default value Description SMS Service number of the service center for the SMS server Center International format number of the service center for the SMS server set symbol if not specify it SMS Type PDU 7bits 7bits PDU 7bits the message is encoded on 7 bits and it is PDU 8bits used to send text message composed of ASCII characters It is supported in most of mobile phones PDU 8bits the message is encoded as 8 bits and it is used to send data message It depends on the brand of mobile ph
269. products may result in injury harm or improper operating results Failure to observe this information can result in injury or equipment damage 2014 Schneider Electric All rights reserved 100000000505 04 2014 Table of Contents Safety Information About the Book Part The RTU Module for M340 Platforms Chapter 1 About the BMX NOR 0200 H Module Introducing the BMX NOR 0200 H Module Part Il BMX NOR 0200 H Hardware Characteristics Chapter 2 Hardware Presentation Physical Description Module LED 5 Ethernet Port eer ER Ra ex Ee ura POM uus sa di ER PR UE deu oco Rayo d dades ba Electrical 5 Rack POSItIOn Bach ade Chapter 3 Hardware Installation Module Roe acad iom come Grounding of Installed Modules oD Memory Card ex tie on eoe Bot can meee ok EROR ax eee Modicon M340H Hardened Equipment Wiring Part 1 Communications Characteristics Chapter 4 Ethernet Communications 4 1 Ethernet Services Ethe
270. put Change 1 read 06 no range or all 129 17 28 without Time 07 08 limited qty response index 130 unsol resp 2 2 Binary Input Change 1 read 06 no range or all 129 17 28 with Time 07 08 limited qty response index 130 unsol resp 2 3 Binary Input Change 1 read 06 no range or all 129 17 28 with Relative Time 07 08 limited qty response index 130 unsol resp 3 0 Double Bit Input Any 1 read 00 01 start stop Variation 06 no range or all 3 1 default Double Bit Input 1 read 00 01 start stop 129 00 01 see 06 no range or all response start stop note 1 3 2 Double Bit Input with 1 read 00 01 start stop 129 00 01 Status 06 no range or all response start stop 4 0 Double Bit Input 1 read 06 no range or all Change Any 07 08 limited qty Variation 346 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Varia Description Function Qualifier Codes Function Qualifier No tion No Codes hex Codes Codes dec dec hex 4 1 Double Bit Input 1 read 06 no range or all 129 17 28 Change without Time 07 08 limited qty response index 130 unsol resp 4 2 Double Bit Input 1 read 06 no range or all 129 17 28 Change with Time 07 08 limited qty respo
271. q Jequinu Aq JojsueJ pw jesoj e Aq pesneo e Aq pesneo uoneAgov 10 1112 13 20 36 37 41 uoneuuguoo uoneAnoeeq uoneAnoeog uoneuuguoo uoneAnoy X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X pa senbai ysanbay pezijeniu snoeuejuodg ueos punoibyoeg 2 3 4 5 6 8 9 X X X 1 X X X Type identification Cause of transmission M ME M ME M ME M IT NA M SP DP ST BO ME ME T M M M M C SC NA C DC NA C RC NA C SE NA C SE NB C BO NA C SE NC C SC TA C DC TA C RC TA lt 9 gt lt 11 gt lt 13 gt lt 15 gt lt 30 gt lt 31 gt lt 32 gt lt 33 gt lt 34 gt lt 35 gt lt 36 gt lt 37 gt lt 45 gt lt 46 gt lt 47 gt lt 48 gt lt 49 gt lt 50 gt lt 51 gt lt 58 gt lt 59 gt lt 60 gt 100000000505 04 2014 330 Interoperability SseJppe j2efqo Jo sseippe
272. r slave DNP3 NET client or server Main RTU Protocol time synchronization through a protocol facility or NTP Features balanced and unbalanced transmission mode events management with time stamping events queue stored in RAM memory up to 100 000 events for all clients events data backfill to SCADA application via protocol facility report by exception data exchanges unsolicited messaging data exchanges protocol setup via Web page NOTE The RTU protocol parameters are configured using the embedded Web pages Limitations The BMX NOR 0200 H module does not support multiple RTU protocols instances Only one instance at a time of an RTU protocol IEC DNP3 can be launched to work with Modbus TCP WARNING UNINTENDED EQUIPMENT OPERATION e Use different address values for each session in a channel or for each section in a session e Channel parameters must meet IEC60870 5 104 protocol requirements with these limitations T2 S Frame Period lt T1 Ack Period Value lt 2 3 Value e f you are using the DNP3 protocol use successive DB mapping starting at 0 Failure to follow these instructions can result in death serious injury or equipment damage E100000000505 04 2014 87 How to Work with RTU Protocols IEC 60870 5 101 104 Protocols Overview Introduction IEC 60870 5 is an international standard released in the early 1990s by the Interna
273. ragment response Respond Need check box unchecked specifies if this device sets the need time IIN bit in Time response to this session at startup and after the clock valid period has elapsed Clock Valid 0 4294967295 1800000 specifies the period for which the clock remains valid Period ms after receiving time synchronization Application 0 4294967295 10000 specifies the period for which the slave DNP3 device Confirm waits for the application layer confirmation from the Timeout ms master Select 0 4294967295 5000 specifies the maximum amount of time that a Timeout ms selection remains valid before the corresponding operation is received Warm Restart 0 65535 2000 indicates that the master should wait after receiving Delay ms a response to a warm restart request Cold Restart 0 65535 5000 indicates that the master should wait after receiving Delay ms a response to a cold restart request Allow Multi check box checked determines if the objects of the Multiple Control CROB Requests Relay Output block are allowed in a single request Max Control 0 10 10 determines if the maximum number of controls are Requests allowed in a single request Unsol Allowed check box checked determines if the unsolicited responses are allowed Send Unsol When check box unchecked determines if the unsolicited null responses are Online transmitted when the session comes online Unsol Class 1 check box unchecked specifies the initial new sta
274. rced over range bit 5 0 normal 1 over range reference error bit 6 0 normal 1 error reserved bit 7 0 Not used Counter on line bit 0 0 off line 1 on line Flags restart bit 1 0 normal 1 restart communication lost bit 2 0 normal 1 lost remote forced data bit 3 0 normal 1 forced local forced data bit 4 0 normal 1 forced roll over bit 5 0 Not used discontinuity bit 6 0 normal 1 discontinuity reserved bit 7 0 Not used 100000000505 04 2014 273 Configuration with the Setup Web Pages Binary Output Status and Analog Output Status The Binary_Output_Status and Analog_Output_Status are applied in the master which are used to save the latest value state flag and timestamp This figure shows the binary output status Binary_Output_Status x Point Number 0 Point Count 1 CPU Register Type MW v CPU Register Address 0 Variable Name Store To CPU Value only Static Variation Value only Value with time Event routing Value with flag Channel Value with flag and time Session Point number Event Class Mask Default Event Variation This figure shows the analog output status Analog_Output_Status x Point Number 0 Point Count 1 CPU Register Type MW CPU Register Address 0 Variable Name Store To CPU Value only lv Static Variation 940v 32bit Analog Out v Event routing Channel ____ Session 0 Point number Event Class Mask
275. ridge A bridge device connects two or more physical networks that use the same protocol Bridges read frames and decide whether to transmit or block them based on their destination address broadcast Broadcast communications send packets from a one station to every network destination Broadcast messages pertain to every network device or only one device for which the address is not known See multicast and unicast CAN controller area network The CAN protocol ISO 11898 for serial bus networks is designed for the interconnection of smart devices from multiple manufacturers in smart systems for real time industrial applications CAN multi master systems provide high data integrity through the implementation of broadcast messaging and advanced error detection mechanisms Originally developed for use in automobiles CAN is now used in a variety of industrial automation control environments CANopen CANopen is higher level protocol that is used in automation networks It is based on the CAN application layer CAL in accordance with CiA DS 301 EN 50325 4 channel A logic RTU master or slave in an RTU module configuration The arrangement and interconnection of hardware components within a system and the hardware and software selections that determine the operating characteristics of the system ConneXview ConneXview is a set of configuration files to be used with HiVision 6 x network management software from Hirschmann Electronics GmbH
276. rnet Services Overview 4 2 IP Parametens aoe ee ace EE Eee be koe ema ee Methods for IP Addressing Rotary Switches xx ure eum ee abe woh eka ROS Deriving IP Parameters from the MAC Address 4 3 Modbus TCP IP Messaging Data Exchange The Messaging Configuration Tab Messaging Configuration Parameters 100000000505 04 2014 T WE 58 SNMP and Schneider Private MIB 59 SNMP 60 SNMP Operations 62 4 5 SOAP WebServices 63 Designing a SOAP Client Interface 63 Chapter 5 Serial Communications 65 Serial Port ioci MER qc Den e pesti 66 Serial Communication Architectures 67 Chapter 6 Modem Communications 69 Modem 70 Modem Support 71 Modem Register 73 Modem Communication Error 75 Connecting External Modem 5232 76 Ho
277. roperability Maximum number of outstanding format APDUs k and latest acknowledge APDUs w Parameter Default Value Remarks Selected Value k 12 APDUs Maximum difference receive Configurable sequence number to send state variable w 8 APDUs Latest acknowledge after Configurable receiving w l format APDUs Maximum range of values k 1 12 APDUs Accuracy 1 APDU Maximum range of values w 1 8 APDUs Accuracy 1 APDU Recommendation w should not exceed two thirds of k Portnumber Parameter Value Remarks Portnumber 2404 In all cases Redundant connections 0 Number N of redundancy group connections used RFC 2200 suite RFC 2200 is an official Internet Standard which describes the state of standardization of protocols used in the Internet as determined by the Internet Architecture Board IAB It offers a broad spectrum of actual standards used in the Internet The suitable selection of documents from RFC 2200 defined in this standard for given projects has to be chosen by the user of this standard X Ethernet 802 3 Serial X 21 interface Other selection from RFC 2200 100000000505 04 2014 343 Interoperability DNP3 Interoperability for BMX NOR 0200 H as Master Introduction The purpose of this information is to describe the specific implementation of the Distributed Network Protocol DNP3 within BMX NOR 0200 H as m
278. rs Non authorized Messages 0 __ Ping Messages received T 10 Scanning ____o HW Messages sent U Bandwidth Not configured 161 1 scanned 32000000 000000017 veis m Unscanned 488 44 1538 Message traffic Faulty 49 3 2000 msglsec Function Global data ONot configured 46r 0000000000000 1 Task Im SUB variable 320 000000000000000117 MAST 5 Global Data Default SUB 8CIEICICICIEIEETEIEIEIEIEETET33 enabled PUB variable 64000000000049 Network link nor gt This table describes the zones in the configuration screen Zone Function 1 Module module description zone Run on module is operating For details refer to LED off PLC not configured Indicators see page 25 Err on configuration or system error has been detected off operation is normal STS on communication is OK e flashing communication error detected 2 Channel channel selection zone 3 Parameters general parameters zone 4 Debug tab Address information e displays TCP IP utility configuration tests communication of the TCP IP profile Messages displays the number of open connections and the number of messages that are unauthorized refused received and sent Message traffic displays the number of messages processed by th
279. ry Input with Tv 270 100000000505 04 2014 Configuration with the Setup Web Pages In events generation Unsolicitedmessages are sent when one of the following conditions are met 1 Unsolicited messages are enabled and the number of events in the buffer exceeds the minimum amount 2 Unsolicited messages are enabled and the delay timeout to report expires 3 Events are generated for the point that is set for immediate Unsolicited message reporting regardless if the two conditions above are met or not 4 Events are generated for a point that is set for immediate Unsolicited message reporting then all events in the buffer will be immediately reported Quality Bit Flag Mapping The configuration applies quality bit flag mapping to the CPU register for monitoring datapoints for the DNP3 master DNP3 slave NOTE Use this feature for Binary_Input Double_Input Binary_Counter Analog_Input Binary Output and Analog Output This figure shows the flag configuration Binary Input Point Number Point Count CPU Register Type CPU Register Address Variable Name Event Class Mask CPU Reg Mapping Default Static Variation Default Event Variation 4 Classo Class Class2 Class3 Value only Value only Value with time Value with flag Value with flag and time The configuration reuses Timestamp Source in the slave and Store To CPU in the master and expands two choices based on RTU
280. s executing There is either too much traffic or a server overload Incorrect configuration parameters were detected A disabled component was detected An incorrect IP address was detected The Time zone file is missing There was detected syntax error in the custom rules file 150 100000000505 04 2014 How to Work with Embedded Web Pages Clock Diagnostics RTU Clock Use the Diagnostics page to access the RTU clock information CLOCK DIAGNOSTICS L Synchronized No __ Current Date and Time Date 11 11 2011 Time 065628 Latest Time Synchronization Date 11 11 2011 Time 06 12 51 Time Source CPU Module Example of RTU clock Type Name Value scope Description Clock Status Synchronized yes no 10 0 0 1 Current Data and Date 4 12 2010 RTU date Time Time 18 06 59 RTU time Latest Time Date 4 12 2010 timestamp of Synchronization synchronization Time 18 06 59 timestamp of synchronization Time Source Controlling Station CPU Module NTP server time source of synchronization Time Source This page displays the information related to the clock status e None If no RTU protocol is configured the BMX NOR 0200 H clock is free running its time is from 1970 1 1 from the CPU when the RTU protocol starts restarts time source is the Controlling Station the NTP server when it
281. s fully compliant with DNP3 Subset Definition Level 3 DNP3 Device Profile The following table provides a Device Profile Document in the standard format defined in the DNP3 Subset Definitions Document While it is referred to in the DNP3 Subset Definitions as a Document it is only a component of a total interoperability guide This table provides a complete interoperability guide for BMX NOR 0200 H as slave Parameter Description Vendor name Schneider Electric Device name BMX NOR 0200 H Highest DNP3 level supported Device function For requests Level 3 Master For response Level 3 X Slave Maximum data link frame size octets Maximum application fragment size octets Transmitted 292 Transmitted Configurable up to 2048 Received 292 Received 2048 Maximum data link re tries Maximum application layer re tries None X None Fixed Configurable X Configurable from 0 to 65535 Requires data link layer confirmation Never Always Sometimes X Configurable as Never Only for multi frame messages or Always Requires application layer confirmation Never Always 100000000505 04 2014 355 Interoperability Parameter Description When reporting Event Data Slave devices only When sending multi fragment responses Slave devices only
282. s on the The following diagram describes steps 1 and 2 reverse side of the module at the bottom in the corresponding slots on the rack Note Before positioning the pins remove the protective cover 2 Incline the module towards the top ofthe rack so that the module sits flush with the back of the rack It is now set in position NA 3 Tighten the safety screw so that The following diagram describes step 3 the module is held in place on the rack peut TEE The recommended tightening torque is between 0 4 and 1 5 Nm E100000000505 04 2014 35 Hardware Installation Grounding of Installed Modules General The grounding of Modicon M340 modules is crucial to avoid electric shock Grounding Processors and Power Supplies A DANGER HAZARD OF ELECTRIC SHOCK EXPLOSION OR ARC FLASH Ensure ground connection contacts are present and not bent out of shape If they are do not use the module and contact your Schneider Electric representative Failure to follow these instructions will result in death or serious injury WARNING UNINTENDED EQUIPMENT OPERATION Tighten the clamping screws of the modules A break in the circuit could lead to an unexpected behavior of the system Failure to follow these instructions can result in death serious injury or equipment damage 36 E100000000505 04 2014 Hardware Installation All Modicon M340 modules are equipp
283. sending commands and synchronizing distributed control remote programming and downloading of control program with Unity Pro software through Ethernet or modem connections remote diagnostic and monitoring with a built in Web server RTU Architecture This illustration shows the RTU architecture from SCADA to RTU substations through various means of communication SCADA Communication Remote Control Center Infrastructure Sub Stations LAN WAN or Serial SCADA Twisted Pair RTUS Master station Fiber Optics i Remote Terminal Units EL ee 16 100000000505 04 2014 About BMX 0200 Module Functions and Protocols The BMX NOR 0200 H module supports these functions and protocols e RTU protocols Built in RTU protocols for serial or Ethernet communications IEC 60870 5 101 master or slave IEC 60870 5 104 client or server DNP3 serial master or slave DNP3 IP client or server Modbus TCP client or server e Main RTU Protocol Features Time synchronization through protocol facility or NTP Data synchronization on demand of the SCADA Balanced and unbalanced transmission mode Events management with time stamping Sequence of Events SOE Events queue stored in RAM memory up to 100 000 events for all clients Events data backfill to SCADA application via protocol facility Report by exception data exchanges Unsolicited messaging data exchanges Protocol setup via Web
284. ssage when no response data is available Rx Frame Timeout ms 0 4294967295 15000 indicates the maximum waiting time for a complete frame after receiving frame sync 100000000505 04 2014 203 Configuration with the Setup Web Pages Parameter Value scope Default Description value Confirm Mode NEVER NEVER specifies when to request the link layer SOMETIMES confirmation for variable sized frames that ALWAYS contain user data which is not transmitted to the broadcast address Confirm Timeout ms 0 4294967295 2000 indicates the maximum waiting time for link level confirmation if requested Max Retries 0 255 2 indicates the retry count of the link layer confirmation timeouts Test Frame Period ms 0 4294967295 0 specifies the period for transmitting the verification message to prove that the remote device is still online in the balance mode Offline Poll 0 4294967295 10000 specifies the period to re establish Period ms transfer of an offline session Incremental 0 4294967295 30000 indicates the incremental application layer Timeout ms timeout Max Queue Size 0 65535 0 indicates the maximum request message number with a specific Application Specific Data Unit type and destination matching an outstanding request that will be queued on a master 0 disabled queue 65535 unlimited queue Session Parameters Click Setup Channel IEC 101 Master
285. synchronize the BMX NOR 0200 H module clock CPU Module If the RTU protocol is configured the BMX NOR 0200 H can get the initial time Controlling Station If SCADA or master synchronizes time with the BMX NOR 0200 its NTP server If the NTP client is enabled and connected with the NTP server its time source is 100000000505 04 2014 151 How to Work with Embedded Web Pages Statistics Ethernet Statistics Page The statistic page displays Ethernet informations from the module such as state transmit statistics collision receptions Use the Statistics link on the Diagnostics page to access the Ethernet statistics Status Host Name Reference MAC Address 0 80 14 01 fd ff Rack o IPAddress 39 160 64 108 Slot Subnet Mask Transmit Speed Gateway Address 139 160 64 1 Transmit Statistics Receive Statistics Functioning Errors Transmits Receives Missed Packets Transmit Retries Fighting Errors Collision Errors Lost Carrier Late Collision Overflow Errors CRC Errors Receive Buffer Errors Transmit Timeouts Memory Errors Transmit Buffer Errors Silo Underflow Net Interface Restarts RTU Connection Page Use the Diagnostics page to access the RTU protocol statistics RTU PROTOCOL DIAGNOSTICS Channel Protocol State Remote IP Remote Port Local Port Error Code 1 9 IEC104 Server CONNECTING 10 177 90 244 0 3c2a 0x00003C29 5
286. t 29 Electrical Characteristics 31 Rack Position 32 100000000505 04 2014 21 Hardware Presentation Physical Description External Features The BMX NOR 0200 H module lt So 0000 000 Callouts Item Description Description 1 LED display see page 25 diagnostic indications 2 MAC Address unique address for each module defined by the manufacturer Memory card slot see page 38 SD card can store Web site files and datalogging CSV files 4 Ethernet port RJ45 connector Functions include 10BASE T 100BASE TX Ethernet TCP IP network connection see page 27 Modbus TCP protocol support IEC 60870 5 104 DNP3 NET protocols support Unity Pro remote programming 5 Serial port RS 232C RS 485 non Functions include isolated see page 66 serial communications IEC 60870 5 101 or DNP3 external modem management e PPP Modem communication IEC 60870 5 104 or DNP3 NET protocol 22 100000000505 04 2014 Hardware Presentation Item Description Description Ground connection contact by screw tightening Ground connection contact by CEM clip 1 Rack connector plug to the a M340 rack Rotary switches see 50 two rotary switches to provide a simple way to select an IP address Ground connection contact by CEM clip 2 10000000
287. t Language Objects 369 100000000505 04 2014 303 304 E100000000505 04 2014 Appendix Interoperability About this Chapter This chapter describes the specific implementation of protocols with the BMX NOR 0200 H module What Is in This Chapter This chapter contains the following topics Topic Page IEC 60870 5 101 Interoperability for BMX NOR 0200 H as Master 306 IEC 60870 5 101 Interoperability for BMX NOR 0200 H as Slave 316 IEC 60870 5 104 Interoperability for BMX NOR 0200 H as Client 326 IEC 60870 5 104 Interoperability for BMX NOR 0200 H as Server 335 DNP3 Interoperability for BMX NOR 0200 H as Master 344 DNP3 Interoperability for NOR 0200 as Slave 355 100000000505 04 2014 305 Interoperability IEC 60870 5 101 Interoperability for BMX NOR 0200 H as Master Introduction The purpose of this information is to describe the specific implementation of the IEC 60870 5 101 within BMX NOR 0200 H as master This information and the documents listed below provide detailed information on how to communicate with BMX NOR 0200 H as master via IEC 60870 5 101 IEC 60870 5 101 Companion standard for basic telecontrol tasks IEC 60870 5 5 Basic Application Functions IEC 60870 5 2 Link Transmission Procedures IEC 60870 5 4 Definition and Coding of Application Information Elements IEC 60870 5 3 General Structure of Application Data IEC 60870 5 1
288. t applications that can exchange data directly with BMX NOR 0200 H Web servers Applications such as Microsoft NET SQL Server Microsoft Office Excel IBM WebSphere SUN Java Eclipse Lotus Oracle SAP MES ERP and so forth can be interfaced directly with BMX NOR 0200 H using SOAP Web services Two kinds of Web services are provided in BMX NOR 0200 H modules as SOAP server interfaces e ModbusXMLDA Web service to implement data access to Modbus variables SymbolicXMLDA Web service to implement Symbolic data access The Web services provided by BMX NOR 0200 Hare compatible with the WS I basic profile 1 1 E100000000505 04 2014 63 Ethernet Communications A SOAP Client Interface The following table describes the process of designing a SOAP client interface Stage Action 1 Create the client application The development environment for example Visual Studio net connects to a WEB server module where it can access a list of available WEB services The WEB server returns descriptions of the requested services as WSDL objects 2 Develop the client application The developer integrates the WEB service APIs using the code retrieved in the previous stage as a WEB reference and generates the client application 3 Execute the client application In run mode the client application communicates in real time with the WEB server module using the SOAP protocol 64 100000000505 04 2014 Chapter
289. t output derived data type ODDT is a structured data type representing a module or a channel of a PLC module Each application expert module possesses its own IODDTs 100000000505 04 2014 389 Glossary IP Internet protocol That part of the TCP IP protocol family that tracks the Internet addresses of nodes routes outgoing messages and recognizes incoming messages IP address Internet protocol address This 32 bit address is assigned to hosts that use TCP IP L LAN local area network A short distance data communications network layer In the OSI model a layer is a portion of the structure of a device that provides defined services for the transfer of information LED light emitting diode An indicator that lights up when electricity passes through it It indicates the operation status of a communications module MAC address media access control address A 48 bit number unique on a network that is programmed into each network card or device when it is manufactured MAST A master MAST task is a processor task that is run through its programming software The MAST task has two sections e IN Inputs are copied to the IN section before execution of the MAST task e OUT Outputs are copied to the OUT section after execution of the MAST task MIB management information base The MIB is an object database that is monitored by a network management system like SNMP SNMP monitors devices that are defined by their MIBs Schneid
290. t3 20s Time out for sending test frames in case Configurable of a long idle state Maximum range of values for all time outs 1 255 s Accuracy 1 s Maximum number of outstanding format APDUs k and latest acknowledge APDUs w Parameters Default Remarks Selected Value Value k 12 APDUs Maximum difference receive sequence Configurable number to send state variable w 8 APDUs Latest acknowledge after receiving w l Configurable format APDUs Maximum range of values k 1 12 APDUs Accuracy 1 APDU Maximum range of values w 1 8 APDUs Accuracy 1 APDU Recommendation w should not exceed two thirds of k Server Connections Support X supports connection of up to 64 servers when BMX NOR works as a client Portnumber Parameter Value Remarks Portnumber 2404 In all cases Redundant connections Configurable Number N of redundancy group connections used RFC 2200 suite RFC 2200 is an official Internet Standard which describes the state of standardization of protocols used in the Internet as determined by the Internet Architecture Board IAB It offers a broad spectrum of actual standards used in the Internet The suitable selection of documents from RFC 2200 defined in this standard for given projects has to be chosen by the user of this standard X Ethernet 802 3 Serial X 21 interface Other selection from RFC 2200
291. te of the unsolicited event mask only RTU V1 0 Unsol Class 2 check box unchecked specifies the initial new state of the unsolicited event mask only RTU V1 0 Unsol Class 3 check box unchecked specifies the initial new state of the unsolicited event mask only RTU V1 0 Unsol Class 1 0 255 5 If unsolicited responses are enabled UnsolClassXMaxEvents specifies the maximum number of events in the corresponding class to be allowed before an unsolicited response is generated 260 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default Description value Unsol Class 2 0 255 5 If unsolicited responses are enabled Max Events UnsolClassXMaxEvents specifies the maximum number of events in the corresponding class to be allowed before an unsolicited response is generated Unsol Class 3 0 255 5 If unsolicited responses are enabled Max Events UnsolClassXMaxEvents specifies the maximum number of events in the corresponding class to be allowed before an unsolicited response is generated Unsol Class 1 0 4294967295 5000 specifies the maximum amount of time after an Max Delay ms event in the corresponding class is received before an unsolicited response is generated Unsol Class 2 0 4294967295 5000 specifies the maximum amount of time after an Max Delay ms event in the corresponding class is received before a
292. ter with 06 no range or all response 17 28 see note 2 100000000505 04 2014 361 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 21 5 32 Bit Frozen 1 read 00 01 start stop 129 00 01 start stop Counter with 06 no range or all response 17 28 index see Time Of Freeze 07 08 limited qty note 1 17 27 28 index 21 6 16 Bit Frozen 1 read 00 01 start stop 129 00 01 start stop Counter with 06 no range or all response 17 28 index see Time Of Freeze 07 08 limited qty note 1 17 27 28 index 21 9 default 32 Bit Frozen 1 read 00 01 start stop 129 00 01 start stop see Counter without 06 no range or all response 17 28 index see note 1 Flag 07 08 limited qty note 2 17 27 28 index 21 10 16 Bit Frozen 1 read 00 01 start stop 129 00 01 start stop Counter without 06 no range or all response 17 28 index see Flag 07 08 limited qty note 2 17 27 28 index 22 0 Counter Change 1 read 06 no range or all Event Any 07 08 limited qty Variation 22 1 default 32 Bit Counter 1 read 06 no range or all 129 17 28 index see Change Event 07 08 limited qty
293. ters El Channel E 0 NET Server Parameters ElSession 0 Parameters Data Mapping Events Export Import files Security FTP Reset Communication DNP3 NET Server Channel0 Session0 Events Remove Type Identification Event Store Model Max Event Count CPU Reg CPU Reg Address Binary Input Binary Input Double Input Binary Output Binary Counter Forzen Input Add This figure shows the dialog box for configuring the event queue setting Binary Input Event Store Mode Buffer Setting Max Event Count Max Event Count 1 Max Event Count 2 Max Event Count 3 CPU Reg Type CPU Reg Address Event Backup All Channel By Channel lt 100 100 100 100 0 Class 7 Class2 7 Class3 x 286 100000000505 04 2014 Configuration with the Setup Web Pages Parameter Value scope Default Description value Event Store All Most All stores all event in queue or only stores most Mode Recent recent event for each object Buffer All Channels All specifies whether the buffer size is configured Setting By Channel Channels by channel or not all channels support up to 10 000 events Max Event 1 65535 100 supported event count by channel in whole Count up to 100 000 events are supported Max Event 0 65535 1 supports event count for virtual c
294. that enables the network management system to supervise the Ethernet services The Transparent Ready private MIB can be downloaded from the Web server on any Transparent Ready module in a PLC E100000000505 04 2014 59 Ethernet Communications SNMP Communication Overview SNMP defines network management solutions in terms of network protocols and the exchange of supervised data The SNMP structure relies on the following elements Manager The manager allows entire or partial network supervision e Agents Each supervised device has one or more software modules named Agent that are used by the SNMP protocol e MIB The Management Information Base is a database or collection of objects The SNMP agent is implemented on the BMX NOR 0200 H module This allows a manager to access MIB II standardized objects from the Modicon M340 agent through the SNMP protocol The MIB II allows management of TCP IP communication layers On the modules that support Ethernet communications it is possible to access objects from the MIB Transparent Factory which provides specific information about Messaging The following figure shows the tree structure of the TFE Ethernet MIB VE private Aa enterprise 21 56 groupeschneider 3833 X transparentFactoryEthernet EC switch H 0 port502Messaging E C ioScanning H 0 globalData A web 17 addressServer E C equipmentProfile H 0 timeManagement H 0 email H E tfeMibVersion The source f
295. tion value Auto None Enable Disable None automatically send unsolicited command Unsolicited upon remote device startup None do not send unsolicited command Enable send enable command Disable send disable command Auto Enable check box checked indicates which event classes is enabled Unsol Class1 for unsolicited reporting Auto Enable check box checked indicates which event classes is enabled Unsol Class2 for unsolicited reporting Auto Enable check box checked indicates which event classes is enabled Unsol Class3 for unsolicited reporting Read Timeout 0 255 0 specifies number of times a read request is allowed to time out before the session is considered offline 100000000505 04 2014 255 Configuration with the Setup Web Pages DNP3 Slave Server RTU Protocol Parameters Introduction Select DNP3 as Protocol an Ethernet network as Network Type and Slave server as Mode Channel Parameters Click Setup DNP3 NET Server Parameters DNP3 NET Server Channel0 gt Parameters Event Backup Enable Event backup feature is supported from PV 03 Advanced Parameters NOTE There is no basic channel parameter to configure in the DNP3 slave server case Parameter Value scope Default Description value Event Backup check box unchecked Refer to the DNP3 Event Queue Setting Enable see page 286 topic to specify which events to configure as backup or turned off when a po
296. tional Electrotechnical Commission IEC This standard provides a communication profile for telecontrol teleprotection and associated telecommunications characteristics for electric power systems It is widely used today for other infrastructures including water applications in Europe and Asia The IEC 60870 5 101 and IEC 60870 5 104 protocols are companions to the IEC 60870 5 standards that relate to transmission protocols IEC 60870 5 101 The IEC 60870 5 101 protocol is based on the EPA Enhanced Performance Architecture This protocol defines only the physical link and application layers of the OSI model IEC 60870 5 101 is used primarily on serial links with relatively slow transmission media This standard conforms to baud rates of up to 9600 bit s although much higher baud rates 115200 bit s are being used IEC 60870 5 104 The IEC 60870 5 104 protocol is an extension of the IEC 60870 5 101 protocol There are changes in transport network link amp physical layer to open networking IEC 60870 5 104 enables communication between control stations and substations in a standard TCP IP network The TCP protocol is used for connection oriented data transmission To have connectivity to LANs and routers with different facilities frame relay etc connect it to the WAN The application layer of IEC 104 is the same as that of IEC 60870 5 101 except that some data types and facilities are not used There are separate link layers defin
297. to Embedded Web Pages Overview The BMX NOR 0200 H module has a built in Web server that provides various Web pages offering setup diagnostic and monitoring features NOTE Access Web pages with Internet Explorer 6 0 or higher running Java Runtime Environment 1 4 1_04 or higher 138 E100000000505 04 2014 How to Work with Embedded Web Pages Section 10 2 Home Web Page Home Page Introduction Access the BMX NOR 0200 H module Home page by entering the IP address or URL of the module in a web browser No password is required to display the Home page Home Page Schneider BMX NOR 0200H Electric a Home E Language English French German Italian Spanish we Copyright 2010 Schneider Automation SAS All Rights Reserved From the Home page you can access the following pages e Monitoring see page 157 e Diagnostics see page 146 e Setup see page 141 100000000505 04 2014 139 How to Work with Embedded Web Pages Section 10 3 Setup Web Pages What Is in This Section This section contains the following topics Topic Page Module Setup 141 Security 142 FTP Security Page 144 140 100000000505 04 2014 How to Work with Embedded Web Pages Module Setup Setup Overview Setup Web pages allow the configuration of the following functions Serial port setup Modem setup RTU protocol setup Security pass
298. to be installed at the site where the BMX NOR 0200 H module is installed A remote SMTP server may be available from your email provider The BMX NOR 0200 H module supports authentication functions in order to connect to the SMTP server of the provider The module can communicate directly through SMS to a destination mobile phone without the installation of specific devices on the network Service Operation The email service acts as an SMTP client When the preconfigured event trigger occurs the BMX NOR 0200 H module uses SMTP over TCP port number 25 to send the email notification to the SMTP server That server is connected to the plant s network or to the Internet thereby allowing the message to reach the destination recipients NOTE Even though notifications are sent automatically after an event is triggered there may be a significant delay before the recipient gets the message A notification sent to a mobile phone is received only when the phone is on and within the coverage area Therefore this service should only be used for non critical notifications such as maintenance reminders or production reports 128 100000000505 04 2014 How to Work with Email SMS Service Email and SMS Service Values Value Comment 0 The service is in stop mode 1 The service is in run mode 10 e mail refused by SMTP server 11 e mail not sent due to a connection interruption 12 No more connections or queue s
299. tom AT command is specified by user This command initializes the modem PIN Code 4 8 digits 0000 PIN code for the SIM card SMS Service phone number The number of the SMS service center Center whose length depends on service supplier SMS Type PDU 7bits PDU 7bits Specifies how the SMS message will be NOTE This PDU 8bits encoded and sent parameter is supported from firmware V1 6 If encoded as 7bits the message will be sent as a text message f encoded as 8bits the message will be sent as a data message NOTE This parameter is supported on most mobile telephones 100000000505 04 2014 135 How to Work with Email SMS Service 136 100000000505 04 2014 Chapter 10 How to Work with Embedded Web Pages Introduction This chapter discusses the embedded web pages that are hosted by the BMX NOR 0200 H Web serve The built in HTTP server Hyper Text Transfer Protocol allows remote and local access to the embedded Web pages through standard browsers such as Internet Explorer or Firefox Navigator What Is in This Chapter This chapter contains the following sections Section Topic Page 10 1 Embedded Web Pages 138 10 2 Home Web Page 139 10 3 Setup Web Pages 140 10 4 Diagnostics Web Pages 145 10 5 Monitoring Web Pages 156 100000000505 04 2014 137 How to Work with Embedded Web Pages Section 10 1 Embedded Web Pages Introduction
300. top 129 00 01 start stop see 06 no range or all response 17 28 index see note 1 07 08 limited qty note 2 17 27 28 index 1 2 Binary Input with 1 read 00 01 start stop 129 00 01 start stop Status 06 no range or all 17 28 see 07 08 limited qty note 2 17 27 28 index 2 0 Binary Input 1 read 06 no range or all Change Any 07 O8 limited qty Variation 2 1 Binary Input 1 read 06 no range or all 129 17 28 index Change without 07 08 limited qty response Time 130 unsol resp 2 2 Binary Input 1 read 06 no range or all 129 17 28 index Change with 07 08 limited qty response Time 130 unsol resp 2 3 default Binary Input 1 read 06 no range or all 129 17 28 index see Change with 07 08 limited qty response note 1 Relative Time 130 unsol resp 358 100000000505 04 2014 Interoperability Object REQUEST Library may send Function Codes Library will Parse Obj Variation Description Function Qualifier Codes Function Qualifier Codes No No Codes hex Codes hex dec dec 3 0 Double Bit Input 1 read 00 01 start stop Any Variation 06 no range or all 07 08 limited qty 17 27 28 index 3 1 default Double Bit Input 1 read 00 01 start stop 129 00 01 start stop see 06 no range or all response
301. tor label displays explicitly in the Web page NOTE The NTP configuration has higher priority which means that the BMX NOR 0200 H module uses the time zone of NTP not the setting configured in the Web page if they mismatch with each other This figure shows the time zone in the Web site Parameters Time zone conflicts with NTP configuration in Unity Pro Time Zone GMT 06 00 Central Stat Automatically clock for daylight v saving change 194 E100000000505 04 2014 Configuration with the Setup Web Pages RTU Protocol Parameters Introduction You can enter values for protocol parameters in the input fields on the Web page Protocol parameters are either basic or advanced e Parameters basic parameters can be modified in each user application e Advanced Parameters it is not recommended to change advanced parameters unless a change is required by a specific application requirement These parameters allow you to set up RTU applications with the BMX NOR 0200 H module IEC 104 Server Channel0 Parameters Advanced Parameters 100000000505 04 2014 195 Configuration with the Setup Web Pages Module and Protocols Configuration File Introduction Using this utility the user exports or imports configuration parameters and data mapping files You can save the module and protocols configuration parameters in an XML file to a local storage media or upload a previously saved configuration
302. tory See TFE Transparent Ready Schneider Electric s Transparent Ready products based on universal Ethernet TCP IP and Web technologies can be integrated into real time data sharing systems with no need for interfaces E100000000505 04 2014 393 Glossary U UDP user datagram protocol UDP is an Internet communications protocol defined by IETF RFC 768 This protocol facilitates the direct transmission of datagrams on IP networks UDP IP messages do not expect a response and are therefore ideal for applications in which dropped packets do not require retransmission such as streaming video and networks that demand real time performance unicast Unicast communications send point to point packets from a single source to a specific network destination It is an efficient means of communication between hosts that has a minimal impact on network traffic See broadcast and multicast Unity Pro Unity Pro is the programming software for all Unity PLCs It includes 5 IEC languages that comply with IEC 61131 3 Depending on requirements the application may use a mixture of different languages USB universal serial bus USB is a nearly universal hardware interface for connecting peripheral devices V variable A variable is a memory entity of the type BOOL WORD DWORD etc whose contents can be modified by the program during execution 394 E100000000505 04 2014 Index A B BMXRWS128MWF 38 C clock
303. tus 16 WORD WORD Read Group Status 16 WORD WORD Freeze Counter Status 16 WORD WORD Unsolicited Class Status 16 WORD WORD Time Sync Status 16 WORD WORD Restart Status 16 WORD WORD Gen_Events 16 WORD WORD Clear Events 16 WORD WORD Integrity Poll Status 16 WORD WORD Analog Input Dband Status 32 DINT REAL DWORD NOTE The DNP type of analog I O data objects can be converted to REAL according to your application requirements NOTE The BMX NOR 0200 H module only supports to send Integrity Poll command periodically It can be realized by programming in PLC application It is recommended that the period in PLC scan period be longer than 200 milliseconds CP56Time2a CP56 Element Type ms milliseconds WORD minute BYTE hour BYTE monthday BYTE month BYTE year BYTE reserved BYTE 292 100000000505 04 2014 Configuration with the Setup Web Pages Standard structure bit 8 bit 7 bit 6 bit 5 bit 4 bit 3 bit 2 bit 1 Range decimal MILLISECONDS Least significant byte 0 59999 ms MILLISECONDS Most significant byte IV RES1 MINUTES 0 59 min SU RES2 HOURS 0 23 h DAY OF WEEK 1 7 DAY OF MONTH 1 31 1 31 day of month RES3 MONTH 1 12 month RES4 YEAR 0 99 year Element Value Description IV 0 1 Indicates the validity of the time stamp when time synchronization is lost
304. type is supported CPU Register 0 32464 0 indicates the start address of the register in the Address CPU Effective for the located variables only Variable indicates the name of the located register Name Analog input supports events in either Class1 Class2 or Class3 options If the value of Gen Events register has changes the BMX NOR 0200 H will record the events for the Analog Input specified in the configuration although its value has no change It is possible to control Gen 1 Output Events in SCADA after mapping the CPU register with Binary 100000000505 04 2014 279 Configuration with the Setup Web Pages Clearing Events on Demand Clear Events supports a new point type which clears the event buffer in the DNP3 Server Slave It enables the user to clear the events buffer in a local or remote SCADA through mapping memory Clear Events can be created only for DNP3 Slave Server select Data Mapping Clear Events Object Group All Objects Channel Number All Objects n Binary Input Double Input CPU Register Address Binary Counter Variable Name Analog Input Binary Output Analog Output When the value of Clear Events register has changes the BMX NOR 0200 will clear the events of the object group in configuration Parameter Value Scope Default Value Definition Object Group All Objects All Objects specifies the object group whose event must be
305. uipment is a ruggedized version of M340 equipment It can be used at extended temperatures 25 70 C 13 158 F and in harsh chemical environments This treatment increases the isolation capability of the circuit boards and their resistance to condensation e dusty atmospheres conducting foreign particles e chemical corrosion in particular during use in sulphurous atmospheres oil refinery purification plant and so on or atmospheres containing halogens chlorine and so on The M340H equipment when within the standard temperature range 0 60 C 32 140 F has the same performance characteristics as the standard M340 equipment At the temperature extremes 25 0 C and 60 70 C 13 32 F and 140 158 F the hardened versions can have reduced power ratings that impact power calculations for Unity Pro applications If this equipment is operated outside the 25 70 C 13 158 F temperature range the equipment can operate abnormally CAUTION UNINTENDED EQUIPMENT OPERATION Do not operate M340H equipment outside of its specified temperature range Failure to follow these instructions can result in injury or equipment damage Hardened equipment has a conformal coating applied to its electronic boards This protection when associated with appropriate installation and maintenance allows it to be more robust when operating in harsh chemical environments 40 100000000505 04 201
306. umber 0 Point Count e CPU Register Type AMW CPU Register Address 0 Variable Name Default Static Variation 934v1 16bit Al Deadb anc v g34v1 16bit Al Deadband g34v2 32bit Al Deadband g34v3 Short Float Al Deadband 278 E100000000505 04 2014 Configuration with the Setup Web Pages Generating Events on Demand This feature generates events on demand regardless of value and state Data is pushed to the event queue even if the tag value has not changed It generates events for any specified point type Gen_Events can be created only for DNP3 Slave Server select Data Mapping Gen_Events x Object Group Binary Input Start Point Number 0 Point Count 5000 ___ Parameter Description SPU Register Tyr ey point Ed a Ue TE n Object group Min 0 Max 16777215 CPU Register Address 0 WEE 0 p Variable Name Parameter Value Scope Default Value Definition Object Group Binary Input Binary Input specifies the object group whose event must be Double Input generated on demand Binary Counter Analog Input Binary Output Analog Output Start Point 0 16777215 0 specifies the start point number of the specified Number object group Point Count 1 5000 5000 specifies the point number to generate events 5000 the actual count depends on the point number of the object group s configuration CPU Register SMW SMW indicates the register type in the CPU to map Type points to only the MW
307. us of the connection 0 closed 1 open NOTE The command register are exchanged via the M340 rack then the performances are dependent on PLC scan period the workload of the RTU protocol and the number of BMX NOR 0200 H module plugs in the rack For PPP Modem and PPPoE Link another 4 registers Y MW following above registers are used to show local IP and remote IP address Register number Parameter Definition 4 5 Local IP IP address is stored as MSB 6 7 Remote IP IP address is stored as MSB For example MW100 OAOB hex MW101 OCOD hex which means this IP is 10 11 12 13 100000000505 04 2014 73 Modem Communications Example for modem register Register 3 Register 2 Reg 1 Reg 0 Comment Case Connection Command status Index Command status 0 0000 hex 0 0 original 0 0001 hex on going 1 1 connect dial out OK 1 0002 hex command Ok 1 1 0 0001 hex on going 1 1 connect dial out NOK 0 8001 hex 8002 hex 8003 hex 8004 hex 1 1 1 0001 hex on going 1 2 disconnect hang up OK 0 0002 hex command Ok 1 2 0 0000 hex idle 1 2 1 0001 hex on going 1 2 disconnect hang up NOK 0 8001 hex 8002 hex 1 2 1 0001 hex on going 1 3 disconnect repeat hang up OK 0 0002 hex command Ok 1 3 0 0000 hex idle 1 3 1 0001 hex on going 1 3 disconnect repeat hang NOK 0 8001 hex 8002 hex 1 3
308. value with time tag 56 2 SE TC X lt 64 gt Bitstring of 32 bit with time tag CP56Time2a C BO TA System information in monitor direction X lt 70 gt End of initialization M EI NA 1 System information in control direction X lt 100 gt Interrogation command C_IC_NA_ X 101 Counter interrogation command C CINA X 102 Read command C_RD_NA_ X 103 Clock synchronization command C CS NA X 105 Reset process command C RP NA 107 Test command with time tag CP56time2a C TS TA 328 100000000505 04 2014 Interoperability Parameter in control direction X 110 Parameter of measured value normalized value P ME NA 1 X 111 Parameter of measured value scaled value P ME NB 1 X 112 Parameter of measured value short floating point P ME NC 1 value X 113 Parameter activation PC AC NA 1 File transfer 120 File ready F FR NA 121 Section ready F SR NA 122 Call directory select file call file call section F SC NA 123 Last section last segment F LS NA 124 Ack file ack section F AF NA_ 125 Segment F SG NA 126 Directory DR TA 127 Query log Request archive file F SC NB
309. vent backup feature is supported Ero Valid Advanced Parameters v Original Quality v Quel Parameter Description Specify what quality is used for backup events when power recover Original Quality use original quality Invalid force to set invalid bit in time stamp Default Original Quality Parameter Value scope Default Description value DL Address Length 1 2 1 indicates the octets used for data link address Use Balanced Mode check box unchecked indicates the usage of balanced or unbalanced mode Event Backup Enable check box unchecked indicates whether to backup event on loss of power Event Time Quality Invalid Original Original When restoring backup events after power Quality Quality restoration the time quality is forced to e invalid with Forcing Invalid e the original quality with Original Quality NOTE The box Event Backup Enable must be checked beforehand Session Count 1 32 1 indicates the maximum number of sessions on the channel 100000000505 04 2014 209 Configuration with the Setup Web Pages Configure the module s advanced parameters IEC 101 Slave Channel0 Parameters Advanced Parameters First Char Wait ms Rx Buffer Size One Char Ack Allowed One Char Nack Allowed Rx Frame Timeout ms Confirm Mode Confirm Timeout ms Max Retries Test Frame Period ms Offline Poll Period ms
310. vent buffer of the main channel when power restores ignoring the virtual channel Select the option all channels if you want to add saved events into both the main channel and virtual channels when power restores 106 100000000505 04 2014 How to Work with RTU Protocols Events Time Quality When restoring backup events after power restoration the time quality is forced to e invalid with Forcing Invalid e the original quality with Original Quality NOTE The box Event Backup Enable must be checked beforehand Configuration of event backup for DNP3 Analog Input Event Store Mode Max Event Count CPU Reg Type CPU Reg Address Event Backup Configuration of event backup for IEC 101 and IEC 104 100 MW Iv 0 E Classi Class2 Class3 M SP Single point information Event Store Mode Time Stamp Type Max Event Count CPU Reg Type CPU Reg Address Event Backup NOTE When restoring events from the Flash into the event buffer after power restores the BMX NOR 0200 H module sorts the events according to the timestamps of the events Event Backup Behavior All CP56 100 MW v The RTU has different backup behaviors in different cases The type of case is defined from the user point view Case Event 1 Loss of power power lost Saves events in non volatile memory on loss of power 2 Power start power on restore Restores events when the RTU protocol starts
311. verview Parameter Input Interface in Setup Web Pages D 1 Sect Copyright 2010 Schneider Automation SAS All Rights Reserved Each parameter input field contains these basic parts e Parameter Title The Parameter Title contains the name of the parameter It includes the value unit within brackets if applicable e Input Field Enter the desired parameter value in this field e Parameter Description Provides a brief description of the parameter It includes the data type of the parameter valid scope setting and default value NOTE A reset parameter or reboot of the module is necessary to take into account any configuration changes see page 199 100000000505 04 2014 177 Configuration with the Setup Web Pages By default the parameter description is hidden The description appears only when you place the cursor over the input field 1 Ack Period ms 15000 T T2 S Frame Period ms 10000 Berane pm E Time to wait for ACK to a transmitted APDU Type integer Min 0 Max 4294967295 Default 15000 K Value 12 1 T3 Test Period ms 20000 W Value 8 Configuration Files Compatibility The BMX NOR 0200 H module supports upward compatibility with previous version Consistency Checking Support consistency checking in web configuration including uniqueness checking of CPU register address relationship checking of relative parameters The consistency checking is processed bef
312. vice can manage up to 10 groups of datalogging files tables This allows for the archiving of several different tables of data each associated with a different logging period Datalogging files can be backed up periodically or on event from the RAM memory to non volatile memory of the module on the SD memory card into history files in the CSV format For example Table n csv represents the last backup file and history files are renamed as Table n cs0 Table 1 CSV files be purged the SD memory by an event trigger Characteristics Remember e To prolong the life of the SD card Schneider Electric recommends you not to backup datalogging files more frequently than every 30 minutes e The time that each data logging instance occurs is not precise e Back up any log files that are stored in the module s volatile memory to enable the restoration of lost data e When power is lost during datalogging the file that is being backed up is lost 116 100000000505 04 2014 How to Work with Datalogging Service Datalogging Service Codes Value Comment 0 OK 2 The current file csv is renamed cs0 10 The module cannot reach a variable that should be logged because e the variable does not appear in the namespace e the variable is not write enabled e the preceding value has not been updated yet 11 FTP transfer interruptio
313. w to work with External 78 Part Functional Description 83 Chapter 7 How to Work with RTU Protocols 85 11 RIU Protocols 86 Communication Protocols 87 IEC 60870 5 101 104 Protocols 88 DNP3 Protocols 90 7 2 Clock 5 92 Clock Synchronization with the RTU Protocol Facilities 93 Clock Synchronization with the NTP 94 7 3 Time Stamping cce esl e I ne 97 Event Time 97 7 4 Events Management 98 OVEIVIEW E E REA S RR Ure OE noa x 99 Events cece 101 Events 2 106 7 5 1 109 Integrity Poll 109 7 6 Transmission Modes 112 aul Bante eRe OSA 112 7 7 Connection Status 0 0 0 0 eee eee 113 OVGRVICW cic sion x ES ADR rd ee A eee 113 100000000505 04 2014 7 8 Chapter 8 Chapter 9 Chapter 10 10 1 10 2 10 3 10 4 10
314. want the system to behave differently uncheck the Initialize MWi on cold start option in the PLC configuration screen of the Unity Pro application If you want to reset the RTU protocol service use the menu Reset Communication in the Web site It is recommended in case of modification of the number of M or variables in the Unity Pro application E100000000505 04 2014 239 Configuration with the Setup Web Pages Dialog Box This figure shows the dialog box for configuring the data object mapping for an item with the example data type M_SP for IEC 60870 5 101 104 slave server Setup IEC 104 Client Channel0 Session0 Sector0 Data Mapping a gi Communication Remove SINE Type Identification OA Data Count CPU Point Type CPU Point Address P rantes C M SP 1 1 MW 0 Modem GSM Phone List E Serial Port Parameters g PPPoE Parameters gj Channel E IEC 104 Client Parameters Session 0 Parameters E Sector 0 Parameters Data Mapping Add Reset Communication M SP Export Import files M_DP Security M_ST M_BO FTP M ME A 3 M ME B M ME C MIT C SC C DC C RC CSEA C SEB C SEC C BO M Import Export Data object mapping items can be exported see page 196 as a profile in the XSY format Such files can be imported into Unity Pro software Predefined Command List The required input fields are requested to define a predefined command item for IEC 60870 5 101 104 see page 24
315. wer loss occurs Event Restore Main Channel All Main indicates which channel the events restore Mode Channels Channel 256 E100000000505 04 2014 Configuration with the Setup Web Pages Configure the module s advanced parameters DNP3 NET Server Channel0 Parameters Advanced Parameters Rx Frame Size 292 Tx Frame Size 292 Rx Frame Timeout ms 15000 Confirm Mode NEVER Confirm Timeout ms 2000 Max Retries 3 Offline Poll Period ms 10000 First Char Wait ms 0 Rx Buffer Size 256 Rx Fragment Size 2048 Tx Fragment Size 2048 Parameter Value scope Default Description value Rx Frame Size 0 292 292 indicates the maximum received message frame size in the data link layer bytes Tx Frame Size 0 292 292 indicates the maximum Transmit message frame size in the data link layer bytes Rx Frame 0 4294967295 15000 indicates the time out while waiting for a complete Timeout ms frame after receiving frame synchronization Confirm Mode NEVER NEVER specifies when a link layer confirmation can be SOMETIMES requested ALWAYS Confirm 0 4294967295 2000 indicates the maximum time to wait for link level Timeout ms confirmation if requested Max Retries 0 255 3 indicates the retry count of link layer confirmation time outs Offline Poll 0 4294967295 10000 specifies the duration to re establish communication Period ms for an offline session First Char 0 65535 0 i
316. with Unity Pro 165 Configuration Screen 167 164 100000000505 04 2014 Configuration and Debug with Unity Pro Configuring with Unity Pro Module Reference Find the module reference BMX NOR 0200 H in Unity Pro v5 0 Step Action 1 Open the PLC Bus view 2 Right click on an empty slot and select New Device 3 In the Part Number column expand Communication to see the available modules including the BMX NOR 0200 H The total number of Ethernet communication ports such as BMX NOE 01 0 or BMX NOR 0200 H modules can not exceed three Therefore a maximum number of two BMX NOR 0200 H modules can be inserted on a M340 system New Device The module is referenced as a BMX NOR 0200 in Unity Pro V5 0 It is available under Communication in the New Device menu New Device Topological Address Part Number Description E Modicon M340 local drop FE Analog E Communication BMX NOE 0100 Ethernet 1 Port 10 100 RJ45 BMX NOE 0100 2 Ethernet 1 Port 10 100 RJ45 BMX NOE 0110 Ethernet 1 Port 10 100 RJ45 BMX NOE 0110 2 Ethernet 1 Port 10 100 RJ45 BMX NOM 0200 Bus Module 2 RS 485 232 port BMX NOR 0200 Ethernet 1 Port 10 100 RJ45 Counting Discrete Motion E100000000505 04 2014 165 Configuration and Debug with Unity Pro Only Ethernet port channel 0 is configurable in Unity Pro Serial port is configured through the Web The Unity Pro description for this module is Ethernet TCP
317. word setup Export import setup files Setup Page From the BMX NOR 0200 H module Home page click the Setup link to display this page d s Sei E Communication 2 E Parameters Se El Serial Port V Parameters E PPPoE q Parameters ah E Channel EI IEC 104 Server Parameters E ElSession 0 EE Parameters 1 a E Sector 0 f Parameters Data Mapping Events 1 4 Reset Communication Export Import files Security EIE Copyright 2010 Schneider Automation SAS All Rights Reserved NOTE The user name and password must be typed when the first time log on setup page e user name USER e password USER Links You can access these pages directly from the Setup page e Export Import files see page 196 e Security see page 142 e FTP see page 144 NOTE The Setup menu is explained in the Configuration with the Web Site see page 180 topic E100000000505 04 2014 141 How to Work with Embedded Web Pages Security Introduction Access this page with the Security link on the Setup page see 141 Use the Security page to modify the user name and the password for accessing the index page modify the password for writing variables in the data editor You can read the data editor values without a password The maximum size of the user name or passwords is 15 characters non extended ASCII Security Page The security page appears HTTP access rights C
318. x Message Counters reset BW_CNT_RESET bit 2 1 for Messaging counters reset P502_CNT_RESET MWr m 0 17 reserved for modulo 4 address alignment 100000000505 04 2014 383 Ethernet Language Objects 384 100000000505 04 2014 Glossary X 0 9 1 Represents input bit Represents input word register M Represents a memory bit MW Represents a memory word register QW Represents an output word register S Represents a system bit SW Represents a system word register 10 100 Base T An adaptation of the IEEE 802 3 Ethernet standard the 10 100 Base T standard uses twisted pair wiring with a maximum segment length of 100 m 328 ft and terminates with an RJ 45 connector A 10 100Base T network is capable of transmitting data on normal Ethernet 10 Mbit s and Fast Ethernet 100 Mbits s networks 802 3 frame A frame format specified in the IEEE 802 3 Ethernet standard in which the header specifies the data packet length A ASN 1 Abstract Syntax Notation One ASN 1 is a method for encoding decoding messages sent between systems of different types that use different languages It is defined by ISO standards 8824 ITU X 208 and 8825 ITU X 209 100000000505 04 2014 385 Glossary B BOOTP bootstrap protocol A UDP IP protocol that allows an Internet node to obtain its IP parameters based on its MAC address bps bits per second b
319. y Spontaneous transmission X Spontaneous transmission Double transmis sion of information objects with cause of transmission spontaneous Single point information Double point information Step position information Bitstring of 32 bit Measure value normalized value Measure value scaled value Measure value short floating point number Station interrogation X Global X Group1 X Group 7 X Group 13 X Group 2 X Group 8 X Group 14 X Group 3 X Group 9 X Group 15 X Group 4 X Group 10 X Group 16 X Group 5 X Group 11 X Group 6 X Group 12 Clock synchronization X Clock synchronization X Day of week used X RES1 GEN time tag substituted not substituted used X SU bit summertime used Command transmission X Direct command X Select and execute command transmission X Direct set point X Select and execute set point command command transmission X C SE ACTTERM used X Short pulse duration duration determined by a system parameter inn the outstation X Long pulse duration duration determined by a system parameter inn the outstation X Persistent output X Supervision of maximum delay in command direction of commands and set point commands Configurable Maximum allowable delay of commands and set point commands 332 100000000505 04 2014 Interoperability Transmission o
320. y these combinations are allowed DNP3 Net client server lt gt DNP3 Net client server DNP3 master slave lt gt DNP3 master slave DNP3 Net client server lt gt DNP3 master slave IEC 101 master slave lt gt IEC 101 master slave IEC 104 client server lt gt IEC 104 client server IEC 101 master slave lt gt IEC 104 client server Exporting Locally Follow these steps to export the configuration profile to a local place Step Action Comment 1 Right click the hyperlink Right click here 2 Scroll to Save Target As The dialog box appears 3 Select the local location to which the profile is stored E100000000505 04 2014 197 Configuration with the Setup Web Pages Importing to the Module Follow these steps to import a saved configuration profile to the BMX NOR 0200 H module Step Action Comment 1 Click Browse This helps you select and save the configuration profile in an open dialog box Click Import The uploads the file and imports it NOTE The newly imported configuration profile is not implemented until you reset the RTU services on the module Export of Data Mapping File for Unity Pro You can export RTU data object mapping to unlocated variables to an XSY symbol file that can be imported into your application program in Unity Pro 198 100000000505 04 2014 Configuration with the Setup Web Pages RTU Protocol

Modicon M340 RTU - BMX NOR 0200 H Module - User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents