Home

T3 Modules User Manual

1. ew o Slave ID is the modbus address of the device Address is the address of the register that will be written Value is the value being written 25 T3 Series 3 Instructions for Updating Devices with Temco ISP For TEMCO devices that utilize the Temco ISP the flash update must be done using the provided NWT3000 To perform a firmware update follow these instructions 1 Download and install the NWT3000 software http Awww temcocontrols com ftp software 9TstatSoftware zip 2 Connect the device to the serial port of your computer using the RS232 485 converter included in the package 3 Power up the device 4 Open the NWT3000 software and select Update Firmware from the Tool menu File View COM Tool Database TstatFile Tstat Option Help 4 amp Tstat Manager LedManager Serial Number Temnerah we 6 For each device that is found you can specify the hex file to be used for the update Do this by clicking in the Hex File column of the row you wish to specify Alternatively you can click Select Hex File and then Copy to All if all devices are to receive the same file You can also choose to save the current settings or to load the default settings by selecting True or False from the Save Settings column 7 At this point simply click Flash All and the software will update each device one by one 26 T3 Series 3 1 Protocol for Dev
2. hand off and auto When switched to hand the corresponding output will be switched on 10V for analog contacts closed for relay or OV for sinking outputs When switched to off the output will be set to OV for analog open contact for relay or open circuit for sinking outputs When switched to auto Analog outputs will be set to the level stored in the correspond ing MODBUS output registers For Digital or Sinking outputs a register value 0 is de activate and register value 1000 is activated The output registers are as follows T3 Model Number of Outputs Register Addresses 3 81160 100 107 amp 116 123 Table 2 Output Register Addresses These registers can be changed using the RS485 serial interface For analog outputs a 0 corresponds to OV Like wise a 1024 corresponds to 10V For relay or sinking outputs the output will be activated by any number greater than 512 The output registers are stored in RAM thus the contents of each register will be lost upon power off Each output has a corresponding LED which will light up if the value of the output is greater than 512 5V For more info on writing the output registers see the section on Serial Communications T3 Series 1 6 3 Analog Output Calibration The 3 8 has an output calibration feature that allows for an adjustment of 1 28V Calibration is controlled via the calibration register located at register address 13 By default
3. hex 05 register 119 reads 138 hex 8A The Pulse Count for Channel is then 1418 pulse hex 058A Writing to register 134 will clear registers 118 and 119 Subsequent registers 135 to 138 are optional memory to store date and time at which Pulse Counts have been cleared 6 T3 Series 1 7 3 Lits of Registers in the T3 321 Note Addressing should be set to Protocol Addresses Base 0 under the Display menu Address 0to3 Bytes a 4 1 1 1 1 1 1 1 1 Address ps t NEN 9 s 1 or 9 7 7 7 119 120 121 122 123 124 125 126 127 128 228 259 1 260 291 Serial Number 4 byte value Register and Description EEPROM hardware Version Number Register 116 117 and 118 hold the position information on each of the hand off auto switches on the T3 modules Each switch has three positions and therefore each switch requires 2 bits to hold the state Modbus registers are 16 bits wide so we can hold the status of 8 switches in register 116 the next 8 are held in register 117 and so on up to the number of switches on the particular T3 module The switch states are as follows 00 off the switch is in the center position 10 auto the switch is positioned towards the terminal block 01 hand manually on The switch is positioned towards the center of the modul
4. manually on The switch is positioned towards the center of the module away from the terminal block k a d o zu 118 119 Input 1 register high word Input 1 register low word 121 Input 2 register high word E EN E 106 Output 7 Register 0 za d N N N Input 2 register low word 11 T3 Series 1 7 6 List of Registers the T3 4AO Continued Address Register and Description 123 Input 3 register high word Input 3 register low word Input 4 register high word Input 4 register low word 127 Input 5 register high word 128 Input 5 register low word 129 Input 6 register high word 130 Input 6 register low word Input 7 register high word 131 132 Input 7 register low word 133 135 Input 8 register high word Input 9 register high word 136 Input 9 register low word 137 134 Input 10 register high word 138 Input 10 register low word 139 143 Date Stamp of Input 1 YEAR MONTH DAY HOUR MINUTE respectively 144 148 Date Stamp of Input 2 YEAR MONTH DAY HOUR MINUTE respectively 149 153 Date Stamp of Input 3 YEAR MONTH DAY HOUR MINUTE respectively 154 158 Date Stamp of Input 4 YEAR MONTH DAY HOUR MINUTE respectively 164 168 Date Stamp of Input 6 YEAR MONTH DAY HOUR MINUTE respectively 169 173 Date Stamp of Input 7 YEAR MONTH DAY HOUR MINUTE respectively 174 178 Date Stamp of Input 8 YEAR MONTH DAY HOUR MINUTE respectivel
5. OxD2 0x12 0x13 OxD3 0x11 OxD1 OxDO 0x10 OxFO 0x30 0x31 OxF1 0x33 OxF3 OxF2 0x32 0x36 OxF6 OxF7 0x37 OxF5 0x35 0x34 OxF4 Ox3C OxFC OxFD Ox3D OxFF Ox3F Ox3E OxFE OxFA 0x3A Ox3B OxFB 0x39 OxF9 OxF8 0x38 0x28 OxE8 OxE9 0x29 OxEB Ox2B 0x2A OxEA OxEE Ox2E Ox2F OxEF Ox2D OxED OxEC 0x2C OxE4 0x24 0x25 OxE5 0x27 OxE7 OxE6 0x26 0x22 OxE2 OxE3 0x23 OxE1 0x21 0x20 OxEO OxAO 0x60 0x61 OxA1 0x63 OxA3 OxA2 0x62 0x66 0xA7 0x67 5 0x65 0x64 4 Ox6C OxAC OxAD Ox6D OxAF Ox6F Ox6E OxAE OxAA Ox6A Ox6B OxAB 0x69 OxA9 OxA8 0x68 0x78 OxB8 OxB9 0x79 OxBB 0 7 0x7A OxBA OxBE Ox7E Ox7F OxBF Ox7D OxBD OxBC 0 7 0xB4 0x74 0x75 OxB5 0x77 OxB7 OxB6 0x76 0x72 0xB2 0xB3 0x73 OxB1 0x71 0x70 OxBO 0x50 0x90 0x91 0x51 0x93 0x53 0x52 0x92 0x96 0x56 0x57 0x97 0x55 0x95 0x94 0x54 Ox9C 0 5 Ox5D Ox9D Ox5F Ox9F Ox9E 5 0x5A Ox9A Ox9B 0x5B 0x99 0x59 0x58 0x98 0x88 0x48 0x49 0x89 Ox4B Ox8B 8 Ox4A 4 Ox8E Ox8F Ox4F Ox8D Ox4D Ox4C Ox8C De 0x84 0x85 0x45 0x87 0x47 0x46 0x86 0x82 0x42 0x43 0x83 0x41 0x81 0x80 X For example to calculate the crc of the data in the message stored in memory location puchMsgunsigned short CRC16 unsigned char puchMsg unsigned char usDataLen unsigned char uchCRCHi OxFF high byte of CRC initialized unsigned char uc
6. lighting 12 input1 2 input2 Select which input as lighting control disable lighting control 1 input1 2 input2 1 7 6 List of Registers in the T3 4AO Serial Number 4 Bytes value 4 Firmware Version low byte 5 Firmware Version hi byte Modbus device address T Product Model Hardware Revision PIC Version Number 10 12 Reserved Calibration Register Used to calibrate the outputs Reserved Baudrate Setting 0 9600bps 1 19200bps Firmware Update Register used to show the status of firmware updates 17 99 100 101 Reserved Output 1 Register Output 2 Register Output 3 Register 103 104 105 Output 4 Register Output 5 Register Output 6 Register 107 108 109 Output 8 Register Output 9 Register Output 10 Register Output 11 Register 111 112 113 114 115 116 117 Output 12 Register Reserved Reserved Reserved Reserved Register 116 117 and 118 hold the position information on each of the hand off auto switches on the T3 modules Each switch has three positions and therefore each switch requires 2 bits to hold the state Modbus registers are 16 bits wide so we can hold the status of 8 switches in register 116 the next 8 are held in register 117 and so on up to the number of switches on the particular T3 module The switch states are as follows 00 off the switch is in the center position 10 auto the switch is positioned towards the terminal block 01 hand
7. of EEP Update Status Update initialize 7Fh Tell the Tstat to reset and jump into the ISP to be in update mode Update ready fF Tstat is in the ISP and ready to update Erase done __ Erase Flash Memory done OOS S S OS Table 2 EEP_UPDATE_STATUS register value description For the device to jump into update mode a write command of value 7Fh must be sent to the EEP_UPDATE_STA TUS The device will then reset itself and run in ISP mode Note the device will not send any response in this step To verify the T3module is in ISP mode the same write command must be sent again write 7Fh to register 16 at which point the T3module will respond with a regular modbus response This is necessary for clearing the Interrupt vectors and making sure all RAM memory is cleared All Modbus communication commands are always followed by a response This Flash Update Protocol makes use of that criteria and thus only sends a response once the action has been completed Therefore the update initialize and erase flash step require a longer timeout period than the programming step 250ms and 500ms respectively Sending a write command of value 3Fh to EEP_UPDATE_STATUS will force the device to erase its entire flash memory Once the response is received the device is ready to download the data of the new firmware Sending a write command of value 1Fh to EEP_UPDATE_STATUS will let the device know it is about to receive new firmware The devi
8. show how much time is left for a particular override event these are read write registers so that the master can also initiate events and override events under way Finally there is an auto manual bit for each output to override the local T3 logic such as during com missioning or special events 1 The range for each input is configured in registers 183 thru 190 set any input to act as a lighting switch by setting the range to 7 Each input corresponds to one zone Short circuit the input to GND and this will trigger an event If the zone was previously on it will flip to off and vice versa 2 Each Zone has an override time setting which sets how long the lights will be triggered on for a particular hit of the switch The values are in minutes they are read write and are stored in registers 199 thru 206 199 is the time for zone 1 which is controlled by input 200 for zone2 and so on 3 Each zone has a time left register which shows the remaining time left after a particular hit the switch These are read write values in minutes and are stored in registers 207 thru 214 Each time there is a hit on a particular hit on a light switch the time left register will be filled in with this over ride time setting For example a hit on switch 1 will trigger a copy of register 199 to register 207 Then register 207 will start counting down 4 Each output has an auto manual bit so that the lighting control logic and any
9. 1 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 0xCO 0x80 0x41 0x00 1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 0xCO 0x80 0x41 0x00 1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 jn Table of CRC values for low order byte static unsigned char auchCRCLo 0x00 OxCO OxC1 0x01 OxC3 0x03 0x02 OxC2 OxC6 0x06 0x07 OxC7 0x05 OxC5 OxC4 0x04 OxCC 0 0 OxOD OxCD OxOF OxCF OxOE 0x0A OxCA OxCB OxOB 0xC9 0x09 0x08 0xC8 0 08 0x18 0x19 0 09 Ox1B OxDB OxDA Ox1A Ox1E OxDE OxDF Ox1F OxDD Ox1D 0x1C OxDC 0x14 OxD4 OxD5 0x15 OxD7 0x17 0x16 0 06
10. Byte2 Function 10 this is a multiple write command Byte3 Register Start Address Hi 00 starting address we are writing to hi byte Byte4 Register Start Address Lo 01 start address low byte Byte5 Quantity of Registers Hi 00 Number of registers to be written to hi byte Byte6 Quantity of Registers Lo 0A Number of registers low byte Byte Error Check CRC HI byte XX The CRC is calculated using the CRC Byte8 Error Check CRC LO byte XX routine described previously Example of the Multiple Write Command The Master sends the Multiple Write querie Slave Starting Starting Quantity of Quantity of qm om ems 6 CRC Hi Byte CRC Lo Byte 00h 00 0Ah 10 00h 00 0Bh 12 00h 00 OCh 13 Slave Starting Starting Quantity of Quantity of Q3m35 o 3 21 T3 Series 2 3 CRC Error Correcting Details The following is a collection of code snippets to get your application started static unsigned char auchCRCHi 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 0xCO 0x80 0x41 0x00 1 0x81 0x40 0x01 OxCO 0x80 0x41 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x81 0x40 0x00 OxC1 0x81 0x40 0x01 OxCO 0x80 0x41 0x00 OxC1 0x8
11. Modbus Poll software addressing should be set to Protocol Addresses Base 0 under the Display menu 18 T3 Series 2 2 Modbus Examples 2 2 1 READ Command 0x03 This function is used to read the contents of multiple memory registers The master to the Modbus must specify the device ID it s starting register and quantity of register desired By convention if a data were to contain 2 byte we would first send the Hi byte and then the Lo byte The master to the Modbus network will issue a read command Device ID 11 Read 6 bytes of data Starting at register number 107 6Bh Byte Field Name Hex Data Description Byte1 Slave Address 11 Tstat with ID11 will be read Byte2 Function 03 Read operation Byte3 Starting Address Hi 00 Byte4 Starting Address Lo 6B Reading starting from register 6B Byte5 No of Register to read Hi 00 Byte6 No of Register to read Lo 03 Read a total of 3 registers Byte Error Check CRC HI byte XX The CRC is calculated using the CRC Byte8 Error Check CRC LO byte XX routine described below The slave device with ID 11 will answer the master within a few milliseconds with the following response Byte Field Name Hex Data Description Byte1 Slave Address 11 Slave with ID11 is responding Byte2 Function 03 we re responding to a read command Byte3 Byte Count 06 6 bytes are coming Byte4 Data1 Hi 02 byte1 of the data Byte5 Data1 Lo 2B byte2 of the data Byte6 Data2 Hi 00 byte3 of the d
12. Number 1 _ ADDRESS Modbus device address 9 1 PIC Version Number Calibration register used to calibrate the outputs Baudrate setting 0 will set 9600bps 1 will set 19200bps Register 116 117 and 118 hold the position information on each of the hand off auto switches on the T3 modules Each switch has three positions and therefore each switch requires 2 bits to hold the state Modbus registers are 16 bits wide so we can hold the status of 8 switches in register 116 the next 8 are held in register 117 and so on up to the number of switches on the particular T3 module The switch states are as follows 118 2 00 off the switch is in the center position 10 auto the switch is positioned towards the terminal block 01 hand manually on The switch is positioned towards the center of the module away from the terminal block Clearing Pulse Number Registers Writing to their respective Year registers 134 for ch1 139 for ch2 144 for ch3 will clear the above pulse numbers T3 Series 1 7 5 List of Registers in the T3 81130 continued Address Register and Description 134 138 139 143 144 148 Date stamp of Channel 1 Year Month Day Hour Minute respectively Date stamp of Channel 2 Year Month Day Hour Minute respectively Date stamp of Channel 3 Year Month Day Hour Minute respectively 154 158 159 163 164 168 169 173 174 EUN Assign each channel sampling type 0 an
13. Points _ 3 w Or we write 600 to output 4 module 1 Slave Starting Starting No of Points No of Points More details be found in Modbus Secial Communication Section below 1 7 7 Note about registers when updating the firmware There are two registers that will tell the CPU information about the model and hardware of the T3 module NOTE after updating the firmware you MUST setup these registers first or the module may not function properly Product Model is register address 7 The corresponding values are as follows T3 810 A 20 T3 810 D 21 3 321 Hardware revision is register address 8 The hardware revision can be found by removing the front cover of the module It is written in white silkscreen on the edge of the board 14 T3 Series 1 8 Lighting Control with the 3 81 130 module It is possible to use the module as a lighting control module the logic is embedded directly in the module to make light switching response faster and reduce the polling required for lighting applications The general idea is that each input can be configured as a lighting switch input any or all of the inputs can be configured this way Each input cor responds to one lighting zone Next any or all of the outputs can be assigned to any of the zones And finally each zone has a timer which sets how long the zone will go to occupied mode An additional set of timers
14. T3 Series T3 Modules User s Manual T3 8AI8AO T3 81130 T3 Series 1 Introduction 1 1 About this manual The purpose of this manual is to provide the instructions to simply and quickly install and operate the T3 Module equipment The manual begins with a general description of the product followed by the instructions for a correct hardware installation Its configuration and operation of the device are later described in detail 1 2 General Description of the Product The T3 Series are general purpose input ouput modules for building integrators Available in several input output configurations the T3 Series modules provide convenient termination for field devices and interfacing to your HVAC lighting temperature sensors and other typical building automation applications Each of the analog inputs can be jumper configured for signals of either 0 5V 0 20mA or dry contact The outputs are available in dry contacts 1amp output 0 10V analog and PNP sinking The modules are slave devices that can be easily controlled via the RS485 serial interface using the industry standard Modbus Protocol Highlights Surge protected analog inputs with 10 bit resolution Outputs can individually be switched to ON OFF AUTO High impact plastic enclosure provides durability in com mercial environments Standard modbus protocol allows for up to 254 unique de vices on one RS485 network 1 3 Technical Data T3 8AIAO 8 analog out
15. a significant improvement with the larger rom and ram space 128k versus 64k for the flash space and 3k ram versus 1k of ram space compared to the earlier models This gives more room for developers to add features such as Bacnet PLC type logic logging etc Secondly there s the second serial port currently the port is unued but developers will be able to use the second port to manage a subnet of local sensors keypads and displays for example or use it in repeater mode to extend and isolate the RS485 main network T3 8AI8AO 16 Sinking TRU 12VDC 200mA 13 Relay T3 81130 120V 1A 8 Relay T3 4A0 30V 1A T3 Series 1 5 Wiring Diagram Digital Inputs Digital Outputs Sinking Outputs Analog Inputs Voltage 0 10V Current 4 20mA GND T3 Series 1 6 Standard Operation 1 6 1 Inputs Each input of a T3 module can be jumper configured 1 of ways 0 5V signal 0 20mA signal Dry contact thermistor The value of each input is stored as a 10 bit number in the respective modbus register The registers addresses are as follows Table1 Input Register Addresses A 5V or 20mA would give a reading of 1024 Each input has a corresponding LED which will light up if the value of the input is greater than 512 For more info on reading the input registers see the section on Serial Communications 1 6 2 Outputs The state of each output is determined by its corresponding switch position The switches have 3 states
16. alog 1 pulse channel 1 correspond to bitO and ch2 correspond to bit1 and so on Date stamp of Channel 5 Year Month Day Hour Minute respectively Date stamp of Channel 6 Year Month Day Hour Minute respectively Date stamp of Channel 7 Year Month Day Hour Minute respectively 149 153 Date stamp of Channel 4 Year Month Day Hour Minute respectively Date stamp of Channel 8 Year Month Day Hour Minute respectively 1 175 182 Analog reading from each channel whatever the channel be set as analog or pulse mode 175 correspond to ch1 1 EX Range for each input 183 correspond to ch1 0 raw data 1 10K Celsius 2 10K Fahrenheit 3 0 100 4 ON OFF 5 OFF ON 191 Filter coefficient for input 1 0 through 100 default is 20 192 Filter coefficient for input 2 0 through 100 default is 20 193 Filter coefficient for input 3 0 through 100 default is 20 194 Filter coefficient for input 4 0 through 100 default is 20 195 Filter coefficient for input 5 0 through 100 default is 20 196 Filter coefficient for input 6 0 through 100 default is 20 197 1 Filter coefficient for input 7 0 through 100 default is 20 198 1 Filter coefficient for input 8 0 through 100 default is 20 EHE Timer for input 1 how long time the lightingcontrol take over the outputs 183 190 0 Timer for input 2 how long time the lightingcontrol take over the outputs Timer for input 3 how long time the lightingcontrol take over the outputs 2 Ti
17. ata Byte Data2 Lo 00 byte4 of the data Byte8 Data3 Hi 00 byte5 of the data Byte9 Data3 Lo 64 byte6 of the data Byte10 Error Check CRC HI byte XX Byte11 Error Check CRC LO byte XX The CRC is calculated using the CRC routine described below Example of the Read Command The Master sends the Read querie Slave Starting Starting No of Points No of Points 6Bh The device node sends back the following response EVE Function Byte Count Data1 Hi Data1 Lo Data2 Hi Data2 Lo Address 02h 2Bh 00h 00h 2 43 0 0 00h 64h T3 Series 2 2 2 WRITE command 0x06 This function is used to write to a single memory register The master of the Modbus must specify the device ID its register address to be written and the data desired The master to the Modbus network will issue a write command Device ID 11 Write to address 11 Enter data 3 03h Byte Field Name Hex Data Description Byte1 Slave Address 11 destination address Byte2 Function 06 this is a write command Byte3 Register Address Hi 00 address which will be written to hi byte Byte4 Register Address Lo 01 address which will be written to low byte Byte5 Data Hi 00 data that we are writing hi byte Byte6 Data Lo 03 data we are writing low byte Byte Error Check CRC HI byte XX The CRC is calculated using the CRC Byte8 Error Check CRC LO byte XX routine described below The slave device with ID 11 will answer the master within a f
18. ce is now ready to accept the new hex file and will maintain a running tally of the current program ming location in the EEP_UPDATE_PTR At this point the data must be sent using the multiple write command Packets can be of size 1 data byte toa maximum of 128 data bytes In the event of an interrupted flash update the master can poll the EEP_UPDATE_PTR and begin programming from this location 27 3 1 2 Example of a Programming Routine T3 Series The ISP has been designed using polling vectors rather than Interrupt vectors in order to free up as many interrupts for the program itself Given that polling is now used communications is more susceptible to timing and response delay problems Therefore when sending a write function or multiple write function to the ISP device a short timeout delay is required before receiving a response 20ms If a response was not received during that period of time the FRONT END would need to resend the data once again Below is a diagram representation of the Flash Update Protocol Front End Update Initialize 7Fh Command Write to Update Register Value 7Fh Command Write to Update Register Value 7Fh Erase Flash 3Fh Response Received Command Write to Update Register value 3Fh Start Programming 1Fh Response Received Command Write to Update Register Value 1F Update Ready Ready Update Register Value if value 7Fh umptolSP Send response to w
19. e Field Name Hex Data Description Byte1 Slave Address 11 destination address ID 11 Byte2 Function 10 this is a multiple write command Byte3 Register Start Address Hi 01 this is the address we are currently writing to in the code space of the device Byte4 Register Start Address Lo 23 in this case we want to write to register address 0x0123 Byte5 Quantity of Registers to write Hi 00 We will be writing a variable amount of bytes at a time Byte6 Quantity of Registers to write LOW 10 in this case we want to write to 10H or 16 registers Byte7 Byte Count 20 If byte count is the same as number of Registers dealing with 8 bits If byte count is the same as number of Registers dealing with 16 bits Byte 8 bits Byte 16 bits Byte8 Data 1 Byte8 Data1 Hi Byte9 Data 2 Byte9 Data1 Lo Byte10 Data 3 Byte10 Data2 Hi Byte11 Data 4 Byte11 Data2 Lo leil Byte22 Data 15 Byte38 Data16 Hi Byte23 Data 16 Byte39 Data16 Lo Byte 24 Error Check HI Byte40 Error Check HI Byte 25 Error Check LO Byte41 Error Check LO Notice Byte 7 is used as a byte count Thus if the byte count is the same as the number of registers to write then we know we are dealing with 1 byte registers Similarly if the byte count is double the number of registers we are dealing with 2 byte registers The slave device with ID 11 will answer the master within a few milliseconds with the following response Byte Field Name Hex Data Description Byte1 Slave Address 11 destination node ID
20. e away from the terminal block nput 29 Register nput 30 Register nput 31 Register nput 32 Register Range for each input 228 correspond to ch1 0 raw data 1 10K Celsius 2 10K Fahrenheit 3 0 100 4 ON OFF 5 OFF ON Filter coefficient for input 1 to 32 value is 0 through 100 default is 20 T3 Series 1 7 4 List of Registers in the T3 8 16 Note When using the Modbus Poll software addressing should be set to Protocol Addresses Base 0 under the Display menu Register 116 117 and 118 hold the position information on each of the hand off auto switches on the T3 modules Each switch has three positions and therefore each switch requires 2 bits to hold the state Modbus registers are 16 bits wide so we can hold the status of 8 switches in register 116 the next 8 are held in register 117 and so on up to the number of switches on the particular T3 module The switch states are as follows 00 7 off the switch is in the center position 10 auto the switch is positioned towards the terminal block 01 hand manually on The switch is positioned towards the center of the module away from the terminal block Range for each input 128 correspond to ch1 0 raw data 1 10K Celsius 2 10K Fahrenheit 3 0 100 4 ON OFF 5 OFF ON T3 Series 1 7 5 List of Registers in the T3 81130 Register and Description Serial Number 4 byte value EEPROM hardware Version Number Firmware Version
21. elopers Wanting to Update Devices with Temco ISP All devices programmed with Temco ISP are capable of being updated over the RS485 network The master on the network sends a command to a particular device which forces it to go into a flash update mode The device first resets itself and then jumps to the In System Programming ISP code section Note that all non volatile parameters should be read and saved prior to this for safe keeping NOTE Multiple Write Command of the Modbus protocol is used 3 1 1 Protocol In order for the front end to communicate with the ISP flash a series of registers have been defined which are used as control registers for the Update functions Reading and writing to these registers will allow the Front end to monitor the status of the update process They are stored in the non volatile memory space to keep track of the steps attempted and completed Below is a description of these control status registers Register address EEPROM VERSION NUMBER EEP ADDRESS 6 number of the device EEP UPDATE STATUS Update Register state Table 1 Flash Update Function Registers It is important to note EEP UPDATE STATUS which is located at register address 16 Writing to this register will cause the device to either reset itself erase its flash or start programming depending on the action being taken Below is a description of the values and explanation of the EEP UPDATE STATUS register Description
22. ew milliseconds with the following response Byte Field Name Hex Data Description Byte1 Slave Address 11 destination address Byte2 Function 06 this is a write command Byte3 Register Address Hi 00 address which will be written to hi byte Byte4 Register Address Lo 01 address which will be written to low byte Byte5 Data Hi 00 data that we are writing hi byte Byte6 Data Lo 03 data we are writing low byte Byte Error Check CRC HI byte XX The CRC is calculated using the CRC Byte8 Error Check CRC LO byte XX routine described below Notice In this case the Slave device just sends back the message to let the Master know the query has been prop erly received Example of the Write Command The Master sends the Write querie Slave Starting Starting The device node sends back the following response Slave Starting Starting 1 92 1 20 T3 Series 2 2 3 MULTIPLE WRITE Command 0x10 This function is used to write to multiple memory registers The master of the Modbus must specify the device ID its starting address register the amount of register desired and the data NOTE This is used for firmware update only It is not used to write device registers The master to the Modbus network will issue a multiple write command Device ID 11 Write to address 291 123h Number of Registers 3 Data 1 10 000Ah Data 2 11 000Bh Data 3 12 000Ch Byt
23. hCRCLo low byte of CRC initialized unsigned ulndex will index into CRC lookup table while usDataLen pass through message buffer ulndex uchCRCHi puchMsg calculate the CRC uchCRCHi uchCRCLo auchCRCHi ulndex uchCRCLo auchCRCLo ulndex return uchCRCHi lt lt 8 uchCRCLo 22 T3 Series 2 4 Modbus Poll Software Modbus Poll is a simple modbus communications tool developed by Witte Communications http www modbustools com modbus poll asp that can be used to read and write registers of modbus devices The following is a brief set of instructions for communicating with a device The first time Modbus Poll is used it should be set to base 0 addressing This is done by selecting Protocol Ad dressing Base 0 from the Display menu File Connection Setup Functions Display View Window Help D c eS 1 v Sioned Unsigned x 1154 Err 1021 connection 0101 240 00124 0102 1000 00125 the Setup menu 05 U6 15 16 22 Logging Off At this point the connection to the device needs to be established Select Connect from the Connection menu File Connection Setup Functions Display View Window Help B 05 06 15 16 Disconnect Auto Connect 2 Quick Connect FS Tx 21 ID 255 F 03 SR 23 T3 Series Unless the device has specifically been setup for 9600 baud the default connections settings sh
24. ignificant bit 0 disable 1 enable Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 Select which input as lighting control trigger 0 disable lighting control 1 input1 2 input2 Select which input as lighting control trigger 0 disable lighting control 1 input1 2 input2 Select which input as lighting control trigger 0 disable lighting control 1 input1 2 input2 Select which input as lighting control trigger 0 disable lighting control 1 input1 2 input2 Select which input as lighting control trigger 0 disable lighting control 1 input1 2 input2 Address 208 205 BONN 212 2 2 215 216 217 28 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 2 235 296 297 298 299 20 24 242 24 24 245 26 247 248 Select which input as lighting control trigger 0 disable lighting control 1 input1 2 input2 13 T3 Series For example if we would like to read the input 2 register at module node address 1 Slave Starting Starting No of Points No of Points 1 83 Or we read 8 values after input 2 in module 1 Slave Starting Starting No of Points No of
25. ile This In the case where the device is locked there is still a possibility to reboot the device and upload a new firmware requires to physically link the jumpers of the Flash Update Jumper pins during restart Power down the device Link the jumpers of the Flash Update Jumpers Power up the device Doing the above steps will force the device to be in ISP mode so that new firmware can be loaded In order to return to normal operation once the upload has been done the Jumper needs to be removed and power need to be recycled 31
26. ived once the Device has properly set itself for programming mode PROGRAMMING MODE 5 Extracting data from Intel Hex file A typical line would look like the following 10 0080 00 AF5F67F0 602703E0 322CFA92 007780C3 FD 6 Verify checksum 10 00 08 00 AF FD 900 If two last digits of the sum is zero file is correct 7 Send data using Modbus Multiple Write Command Address 0080h Data length of 10h Data AF5F67F0 602703E0 322CFA92 007780C3 8 Repeat step 5 through 7 until end of Hex file is reached IMPORTANT NOTE to ensure proper reset of the device the value at address register 0000h of the Goal chip must remain as FF Most but not all of Temco s Hex file will contain this line 03 0000 00 020200 F9 Data written to the Goal Flash register MUST be modified from 020200 to FF0200 END OF FILE 9 End of file found in Hex file 00 0000 01 FF Bit 7 and 8 are 01 10 Send Modbus Write Command to address Update Register value 01h This will cause the device to reset itself and boot in normal operation mode 29 T3 Series 3 1 4 To Resume a Previously Interrupted Programming Routine The EEP_UPDATE_STATUS register keeps track of which step is being performed during the update protocol and the EEP_UPDATE_PTR keeps track of which register is currently being written to f the device was the Erase Flash mode the EEP UPDATE STATUS register will read 3Fh The Front End is then required to repea
27. mer for input 4 how long time the lightingcontrol take over the outputs Timer for input 5 how long time the lightingcontrol take over the outputs Timer for input 6 how long time the lightingcontrol take over the outputs Timer for input 7 how long time the lightingcontrol take over the outputs Timer for input 8 how long time the lightingcontrol take over the outputs Input1 timer Left how much time left for the lighting control 8 9 210 211 212 213 Input 2 timer Left how much time left for the lighting control Input 3 timer Left how much time left for the lighting control Address 134 138 139 143 144 148 149 153 154 158 159 163 164 168 169 173 oua 175 182 191 192 193 194 195 1 197 198 20 201 202 203 204 205 206 207 208 20 210 Input 4 timer Left how much time left for the lighting control rug a aa a 3 mg EE Input 5 timer Left how much time left for the lighting control EE a Em EN 3 7 ae px Input 6 timer Left how much time left for the lighting control Input 7 timer Left how much time left for the lighting control 20 201 20 203 204 205 206 207 20 20 214 1 Input 8 timer Left how much time left for the lighting control 215 216 217 218 light control disable enable each bit correspond to one output output1 c
28. orrespond to least significant bit 0 disable 1 enable Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 N e Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 220 2 222 2 2 2 Select which input as lighting control trigger O disable lighting control 12 input1 2 input2 2 223 Select which input as lighting control trigger O disable lighting control 12 input1 2 input2 10 T3 Series 1 7 5 List of Registers in the T3 81130 continued Address Register and Description 224 Select which input as lighting control trigger O disable lighting control 1 input1 2 input2 225 Select which input as lighting control disable lighting 12 input1 2 input2 Select which input as lighting control disable lighting control 1 input1 2 input2 227 1 de 1 Select which input as lighting control disable
29. other future logic embedded in the module can be disabled Register 215 auto manual register 2 byte length 0 manual lighting control disabled 1 7 auto lighting control enabled Each bit corresponds to one output with output 1 starting at the least significant bit Output 13 corresponds to the 13th bit 5 Assign Outputs to Zones in registers 216 thru 228 13 outputs one register for each output which assigns that particular output to a particular zone Since there are 8 zones the these registers will accept a value from 1 to 8 0 7 n a 1 means this output will be linked to zone1 and controlled by input1 2 means this output will be linked to zone2 and controlled by input2 And so on 15 1 9 Installation 1 9 1 Terminal Block Connections T3 81O OUTPUTS 8 7 6 5 4 3 A AFGND1 2 3 4 T3 810 A 1 9 3 Terminal Block Connections T3 8 16 OUTPUTS 8 7 6 5 4 3 2 1 12 12 16 15 14 13 2 10 9 OUTPUTS 485 INPUTS GNDGND A GND1 2 3 4 5 6 16 T3 Series 1 9 2 Terminal Block Connections T3 321 INPUTS 24 23 22 21 20 19 18 17 GNDGND 32 31 30 29 28 27 26 25 INPUTS 485 INPUTS GNDGND A A GND1 2 3 4 5 6 4 WI ox t t t t t t td A A GND9 10 11 12 13 14 15 16 24VAC 485 INPUTS 1 9 4 Terminal Block Connections T3 8 13 OUTPUTS INPUTS ANALOG SIGNAL INPUTS 1915 Vv 8915 T3 Series 1 9 5 Mounting External wiring is connected to a terminal block on the cir c
30. ould be as follows i Mode RTU ASCII 19200 Baud Response timeout Cancel 8 Data bits foe None Party gt Flow control DTR DSR RTS CTS E Stop Bit v RTS Toggle Port After the connection is established it is necessary to setup the poll definitions This is done by selecting Poll Definition from the Setup menu Loaging Off Reset Counters F12 Use as Default Within the Poll Definitions dialog window there are several parameters that need to be set Slave ID is the modbus address of the device being read or written 255 is the generic address to which all devices will respond Function should be set as 03 HOLDING REGISTER Address is the starting address of the registers to be read Length is the number of registers to be read Scan Rate is the frequency with which the device will be polled _ Function 03 HOLDING REGISTER Cancel EL Read Once Address 101 Length 40 Scan Rate 1000 ms Auto Read Enable 24 T3 Series Once the Poll Definitions have been setup and applied the main window will show a list of each register address and its corresponding value 1441 Err 1302 ID 255 0010 203 00 24 00 00125 00126 00127 00118 00129 00 20 00131 00132 00 33 00134 00135 00136 00127 00 38 00137 00140 Ce
31. puts 0 10VDC 200mA total 8 analog inputs 20 5 0 20 dry t eite reer 32 analog inputs 0 5V 0 10V 0 20mA dry T958 160 tot creche canes ope tenere 16 PNP Sinking outputs 12V 200mA total 8 analog inputs 0 5V 0 20mA T38 O pc 13dry contact relay outputs x1amps 120V 8 analog inputs 0 5V 0 20mA dry Mom 8 dry contact relay outputs x1amps 30V 4 analog outputs 0 10V 10 analog input 0 3 3V 0 10V 0 20mA dry Operating temperature 30 70 C 22 158 F Supply voltage 12 24VAC DC 20956 50 60Hz Power consumption 100mA at 12VDC Relay contacts rating max 1A Ambient humidity esses 10 90 Rh Material Flame proof plastic Enclosure rating IP31 Temperature 10K thermistor 0 5 C Go oU ieee White Off white 1 4 Special Features of T3 4AO The T3 4A0 has a few special features which the other series do not have due to a more advanced CPU For example the faster scan rates for the inputs In on off mode inputs 1 through 8 can count pulses up to 1 khz on each channel In analog mode inputs 1 thru 8 are 12 bits compared to the previous 10 bits inputs 9 and 10 remain as 10 bits and slower at pulse counting For developers there is
32. rite query Erase Done Ready Update Register Value if value 3Fh start to erasing Send response to write query Programming Mode Store point to address in register wa Toe Store version number in register ier N Store Data Programming Mode com end response to write multiple write query Multiple Write Response Received Flash Multiple Write Address Length Data EndofFile 01h End of File found in Hex file Command n Write to Update Register Value 01 Programming Done End of File Received Store remaining data Reset pointer to addr and set update Reg to 01h Jump to firmware code 200h T3 Series 3 1 3 Example of a Programming Routine Front End Side UPDATE INITIALISE 1 Send Modbus Write Command to address Update_Register value 7Fh The device will reset itself Make sure all volatile infomation be saved prior to this step Device will not send a respond 2 Send Modbus Write Command to address Update Register value 7Fh again A response will be received if the Device has properly reset itself and booted under ISP mode ERASE FLASH 3 Send Modbus Write Command to address Update Register value 3Fh A response will be received once the Device has properly Erase all Flash Memory This will step require a longer response timeout period approx 500ms TART PROGRAMMING 4 Send Modbus Write Command to address Update Register value 1Fh A response will be rece
33. section This is a hardware criteria of the Goal Chip and an efficient way to jump to In System Programming mode while clearing all buffers The front end must ensure that only value FF is to be written to address register 0000h When reading the hex file there will be a line such as this Data of the new firmare Modified data to be uploaded 0000 00 020200 F9 need to change to this to 03 0000 00 FF0200 FC Intel Hex format described below 30 T3 Series 3 1 5 Intel Hex File All firmware files produced by our compilers are saved under the Intel Hex file format This format of record can be broken down in its different fields as described below 3 1 5 1 Example of an Intel Hex file Take for instance a typical message such as the following aaaa tt 01020304 05060708 09000102 D3D4D5D6 ee 10 0080 00 AF5F67F0 602703E0 322CFA92 007780C3 61 The first character indicates the start of a record The next two characters indicate the record length 10h The next four characters give the load address 0080h The next two characters indicate the record type 00 Then we have our data The last two characters are a checksum sum of all bytes checksum 00 Record types 00 Data record 01 End of file record 02 Extended segment address record 03 Start segment address record 04 Extended linear address record 05 Start linear address record 3 1 6 Intel Hex F
34. sses Base 0 under the Display menu Address Bytes Register and Description 0to3 Serial Number 4 byte value 4 EEPROM hardware Version Number 5 Firmware Version Number ADDRESS Modbus device address Product Model PIC Version Number 13 Calibration register used to calibrate the outputs 15 Baudrate setting 0 will set 9600bps 1 will set 19200bps 100 Output 1 Register 101 Output 2 Register 102 Output 3 Register 103 Output 4 Register 104 Output 5 Register 105 Output 6 Register 106 Output 7 Register 107 Output 8 Register Register 116 117 and 118 hold the position information on each of the hand off auto switches on the T3 modules Each switch has three positions and therefore each switch requires 2 bits to hold the state Modbus registers are 16 bits wide so we can hold the status of 8 switches in register 116 the next 8 are held in register 117 and so on up to the number of switches on the particular T3 module The switch states are as follows 00 7 off the switch is in the center position 118 2 10 auto the switch is positioned towards the terminal block 01 hand manually on The switch is positioned towards the center of the module away from the terminal block Range for each input 118 correspond to ch1 0 raw data 1 10K Celsius 2 10K Fahrenheit 3 0 100 4 ON OFF 5 125 OFF ON 126 133 Filter coefficient for input 1 to 8 value is 0 through 100 default is 20 Example register 118 reads 5
35. t this step and follow up from there If the device was in the Programming mode the EEP_UPDATE_STATUS register will read 1Fh The Front Ends then needs to read the EEP_ UPDATE_PTR Thus in order to resume this step the Front End needs to re write to this register again and then follow up from there The following diagram represents the update resume procedure Front End Connect Flash Update Jumper Pins Reset Device Verify State Command Read Update Register Read Update Register Pointer Update Ready Update Ready Response Received ___ Send Response to Read Query Jump to Appropriate Step Update Initialize 7Fh Erase Flash 3Fh Start Programming 1Fh Command Write to Update Register Value TFh Programming Mode Programming Mode Ronted qvem Store point to address in register Store version number in register Multiple Write Response Received Store Data Flash Multiple Write Send response to write multiple write query Address Length Data End of File 01h End of File found in Hex file Command Write to Update Register Value 01h Programming Done End of File Received Store remaining data Reset pointer to addr and set update Reg to 01h Jump to firmware code 200h IMPORTANT In order for the device to jump into the ISP mode it has to reset itself Upon reset if the value at address register 0000h is FF the device will jump to the ISP code
36. this is 128 which corresponds to OV calibration A value of 0 would give a 1 28V offset A value of 255 would give 1 28V offset It is recommended that the calibration be determined while the output is set to 5V The calibration value is located in flash memory and will be restored upon power up 1 6 4 Baudrate All T3 modules have adjustable Baudrates set by MODBUS register 15 By default baud is set to 19 2kbps Value 1 will set the baud to 19200 bps Value 0 will set the baud to 9600 bps 1 7 Accessing T3 Series Registers Via Serial Communications The T3 modules have a built in serial interface for communication over an RS485 network Communication is cur rently implemented using Modbus Protocol However future versions of the T3 modules will work with both BACnet and TCP IP Protocols For detailed information on Modbus Protocol see the chapter entitled Modbus Serial Communications 1 7 1 Connecting the T3 module to a computer The T3 modules connect to a computer serially via the RS485 interface An RS232 to RS485 converter is required in order to communicate with a standard PC Figure 14 shows how the T3 module should be connected to the serial port of a PC T3 COMPUTER CONNECTION GND TX RS232 RS485 Converter 0006000000 OVO Co Computer Serial Port T3 Series 1 7 2 List of registers in the T3 8AIAO Note When using the Modbus Poll software addressing should be set to Protocol Addre
37. uit board The enclosure comprises a base section and a cover The base section can be mounted directly on a wall or ona wall box Length of cables Max 200m area 0 5mm2 47 T3 Series 2 Modbus Serial Communications 2 1 Overview Modbus protocol is a widely used and well documented communications method It provides a simple and effective means of programming our various products A typical Modbus packet looks like this Byte1 Device ID the destination address for a particular message Byte2 Function Byte3 Starting address of the particular storage registers to be read or written hi byte Byte4 Starting address low byte Byte5 of registers to read write hi byte Byte6 No of registers to read write low byte Byte7 CRC hi byte Byte8 CRC low byte During normal operation the slave will immediately send a response to the master request MASTER Send Request Command Data Request Request Received Perform Command Response Received Interpret Data Send Response Interpret Data Notice Most errors during message transfer are timeout errors This is because bytes being distorted or missing will not trigger a response resulting in a timeout error Software tools can be found at http www modbustools com modbus poll asp If your application can read amp write bytes to a separate PC running the Modbus Slave application you will be able to read amp write bytes to theTstat5 Note When using the
38. y 179 183 Date Stamp of Input 9 YEAR MONTH DAY HOUR MINUTE respectively 184 188 Date Stamp of Input 10 YEAR MONTH DAY HOUR MINUTE respectively 189 Assign each input sample type 0 analog 1 pulse Input 1 correspond to BitO input 2 correspond to bit1 and so on 190 Analog inputtoriginal data Analog input2 original data 192 Analog input3 original data 193 Analog input4 original data 194 Analog input5 original data 159 163 Date Stamp of Input 5 YEAR MONTH DAY HOUR MINUTE respectively 195 Analog input6 original data 196 Analog input original data 197 Analog input8 original data 198 Analog input9original data 199 Analog input10 original data Range Setting for each input 183 correspond to input1 184 correspond to input2 etc 1 10K Celsius 2 10K Fahrenheit 3 0 100 4 0N OFF Address 8 oum 8 o9 130 131 132 133 135 1 137 138 139 143 144148 149153 154 158 159 163 164 168 169 173 174 178 179 183 184 188 189 190 192 193 194 195 196 197 1 199 200 201 202 203 204 205 206 200 201 202 203 204 205 206 207 12 T3 Series 1 7 6 List of Registers in the T3 4AO Continued NW 211 212 213 215 216 217 218 219 light control disable enable each bit correspond to one output output1 correspond to least s

T3 Modules User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents