Home

Series 90 PLC Serial Communications User`s Manual

Contents

1. 5 422 5 IC690ACC901 INSIDE D CONNECTORS MINICONVERTER Bi oi SERIAL CABLE SUPPLIED 2 WITH MINICONVERTER rm Cx M 3 gt RD A 12 50 lt rm 13 SD B 50 10 RD A 0 11 Xt LI 1 TO RS 232 9 149 RD gt MASTER DEVICE 2 CTS 6 TX 6 RTS gt CTS B 14 1 7 14 RTS RTS 15 mx UT 15 CTS A gt gt RTS 8 CTS B 5 5V gt ov 7 7 ov 9 PIN FEMALE 9 PIN FEMALE 50 9 tu y 9 PIN MALE 15 PIN 15 PIN 15 PIN MALE FEMALE MALE NOTE ps WHEN WIRING RS 422 485 MULTIDROP CABLES REFLECTIONS ON THE TO EXTERNAL PIN TRANSMISSION LINE CAN BE REDUCED BY CONFIGURING THE CABLE IN 5VDC SUPPLY 2 gt DAISY CHAIN FASHION AS SHOWN BELOW a 3 12 SD A 1 13 SD B MIN FIRST SLAVE LAST SLAVE r1 10 RD A gt PROGRAMMER CONVERTER STATION PLC STATION PLC RD B gt 9 RD PLC 15 CONNECTOR 6 SERIES 90 30 LOCATED ON POWER SUPPLY 4 enin SERIES 90 70 LOCATED THE CPU BOARD 11 8
2. Figure 2 2 Series 90 30 CMM CMM311 Except for the serial port connectors the user interfaces for the CMM311 and CMM711 are the same The Series 90 70 CMM711 has two serial port connectors The Series 90 30 CMM311 has a single serial port connector supporting two ports Each of the user interfaces are dis cussed below in detail LED Indicators GFK 0582D The three LED indicators as shown in the figures above are located along the top front edge of the CMM board Module OK LED The MODULE OK LED indicates the current status of the CMM board It has three states Off When the LED is off the CMM is not functioning This is the result of a hardware mal function that is the diagnostic checks detect a failure the CMM fails or the PLC is not pres ent Corrective action is required in order to get the CMM functioning again On When the LED is steady on the CMM is functioning properly Normally this LED should always be on indicating that the diagnostic tests were successfully completed and the configuration data for the module is good Flashing The LED flashes during power up diagnostics Serial Port LEDs The remaining two LED indicators PORT1 and PORT2 US1 and US2 for the Series 90 30 CMM311 blink to indicate activity on the two serial ports PORTI US1 blinks when port 1 either sends or receives data PORT2 US2 blinks when port 2 either sends or receives d
3. RS 422 485 SERIES 90 30 PLC SERIES 90 30 PLC 550 RS 422 485 SERIES 90 70 PLC RS 422 485 Figure F 3 Example Multidrop System Configuration In the multidrop configuration for SNP or CCM operation one CMM or host device is config ured as the master and one or more CMMs are configured as slaves only master slave operation can be used A CMM configured as the master is capable of initiating communications the slave is not For the RTU operation a host device capable of emulating RTU protocol is the master and one or more CMMs using RTU mode are slaves Idle slave devices continuously monitor the communication link to determine if the line is busy or idle In the SNP protocol when the line is idle the slaves begin looking for a break se quence After a Break is received each slave then looks for the subsequent Attach request Only the slave whose SNP ID matches the SNP ID in the request will respond In the CCM protocol when the line is idle the slaves will begin looking for new enquiry sequences Since there is typically more than one slave device sharing the multidrop line each slave will only recognize enquiry sequences containing its own CPU ID numb
4. continued on next page Series 90 PLC Serial Communications User s Manual November 2000 FST SCN T0001 MOVE S INT CONST 0 8 0001 00000 100001 lt lt RUNG 5 STEP 0004 gt gt 10001 10002 1 TMR 10 103 CONST 00020 R0002 lt lt RUNG 6 STEP 0007 gt gt 10002 70001 BLKMV R INT INT CONST Q RO0005 CONST Q R0012 00007 00000 CONST IN2 CONST IN2 00000 00000 CONST IN3 CONST IN3 00008 00000 CONST IN4 CONST IN4 00000 00000 CONST 5 CONST 5 00000 00000 CONST 6 CONST 6 00000 00000 CONST CONST 07200 00000 lt lt RUNG 7 STEP 0011 gt gt T0002 870003 docui COMM_ 5 INT REQ T0005 CONST 0 80001 80005 FT 00000 100001 CONST SYSID 0002 CONST 00000001 GFK 0582D SNP Service 6 lt lt RUNG 8 STEP 0016 gt gt ALW_ON T0004 1 EQ_ e INT 80001 11 Q t CONST 12 00001 lt lt RUNG 9 STEP 0019 gt gt 10004 T0005 BLKMV BLKMV INT INT CONST IN1 Q R0005 CON
5. 7 7 CCM Master Slave Mode 7 9 Protocol Timing and Retry Specifications 7 11 CCM Protocol State Tables 7 13 CCM Peer State Table ac 7 14 CCM Master State Table 7 16 COM Master ACUODS tU cM pact anon 7 17 CCM Slave State Table 7 18 CEM Slave Actronsy x RE UR 7 19 GFK 0582D Series 90 PLC Serial Communications User s Manual November 2000 ix Contents Section 2 Protocol 7 20 Introduction ihe p ELE Ke pU Ree Eg eee 7 20 Message Format vesan 04 44 wind bh back 7 20 Message Types soe UR AUR N 7 21 Message Fields c da PIRE ES 7 22 Message Length RE Rn E RE 7 24 Character Format 5222 7 24 Message Termination RR 7 24 Timeout Usage sme pct expe e E gea 7 24 Cyclic Redundancy Check 7 25 Calculating the CRC 16 7 26 Example CRC 16 Calculation
6. Programmable Control Products Series 90 PLC Serial Communications User s Manual GFK 0582D November 2000 GFL 002 Warnings Cautions and Notes as Used in this Publication Warning notices are used in this publication to emphasize that hazardous voltages currents temperatures or other conditions that could cause per sonal injury exist in this equipment or may be associated with its use In situations where inattention could cause either personal injury or dam age to equipment a Warning notice is used Caution notices are used where equipment might be damaged if care is not taken Note Notes merely call attention to information that is especially significant to un derstanding and operating the equipment This document is based on information available at the time of its publication While efforts have been made to be accurate the information contained herein does not purport to cover all details or variations in hardware or software nor to provide for every possible contingency in connection with installation operation or maintenance Features may be described herein which are not present in all hardware and software systems GE Fanuc Automation assumes no obligation of notice to holders of this document with respect to changes subsequently made GE Fanuc Automation makes no representation or warranty expressed implied or statutory with respect to and assumes no responsibility
7. ale 77 BT Ibn canta leds ies ap de 1 Lipie LER ee Figure 8 20 Duplex Mode Selection CPU Port 2 Configuration Window The Serial Duplex Mode parameter setting may be made with a Commu nications Request COMMREQ instruction for Port 2 on the CPU351 CPU352 or CPU363 modules Port 1 which is an RS 232 port only does not support a Duplex Mode parameter See the topic Configuring Serial Ports 1 and 2 with a COMMREQ in Chapter 3 for details Chapter 8 Serial Cable Diagrams and Converters 8 15 Section 4 IC693CBL316 Serial Cable Description The IC693CBL316 cable is a 10 foot 3 meter long shielded cable with a 9 pin D shell connector one one end and a 6 pin RJ 11 connector on the other This cable is also known as a Station Manager Cable This cable can interconnect RS 232 ports without the need for a converter Typical Applications Connect a Personal Computer s 9 pin serial port to the RJ 11 faceplate serial port on CPUs 351 352 and 363 for programming configuring firmware updating and monitoring purposes Connect a Personal Computer s 9 serial port to the Station Manager port on an IC693CMM321 or IC697CMM742 Ethernet module or on an IC693CPU364 CPU module which has a built in Ethernet interface Connect a Personal Computer s 9 serial port to an IC693DSM302 module s RJ 11 COMM port for
8. ANA MODEL 70 CMM 711 3X MODULE OK PORT PORT 2 ON OK ACTIVE BLINK oj COMMUNICATING o PUSH TO RESTART APPLICATION jj PORTI 95 232 OR RS 422 i COMPATIBLE T PORT 1 i 2 95 232 OR RS 422 485 COMPATIBLE MODULE FUNCTION SERIES 90 70 COMMUNICATIONS COPROCESSOR PORT 1 amp 2 RS 232 PIN SIGNAL SHIELD TD RD RTS CERTI CTS GROUND 20 PORT 1 amp 2 RS 422 SIGNAL 7 GROUND SD A 10 RTS A PORT 2 CTS A 12 TERMPIN t1 RD A 21 80 22 RTS CTS 24 TERM PIN 25 RD B CONFIGURATION DEPENDENT MODULE 10697 7 11 LABEL 44A726758 124RO1 Figure 2 1 Series 90 70 CMM 711 2 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Modules 44902 COMM OK OK COPROC 061 ust gt A 052 use 5 RESTART PEL l 5 NK COMBINED SERIAL PORT xi PORT L amp PORT2
9. 5 PIN PAIRS PIN cj 50 4 9 13 SD B 21be 1125 lt 13 9 SD A SERIES 90 SERIES 90 25 Fg Vt 21 SD B CMM CMM Fg SLAVE MASTER l 244 411 Fg 24 TERM Lm PORE PORT 1 lt RTS 10 Fg Fg 10 5 E OR RTS B 22 Fg Fg 22 RTS B On 2 CTS A 11 Fg 11 2 CTS 23 23 5 ov 7 7 ov sHip 1 w 1 gt 25 25 ez 2 25 25 FEMALE MALE MALE FEMALE 1 xX x e 13 UP A 6 e 25 RD B MAXIMUM OF 9 SD SERIES 90 4000 21 SD B LIE CMM 1200 METERS SLAVE 24 TERM gt 10 RTS A E 22 RTS B oR 11 CTS A 2 23 CTS 17 ov Em CL D 1 SHLD gt 25 25 1 x MALE FEMALE 10 RD A gt LE 12 SD L5 13 0 SERIES xta 90 CPU 9 TERM RS 485 6 RTS E PORT 14 RTS B 15 CTS A E CTS B E oe 7 ov L Cip se 15 PIN 15 PIN FEMALE MALE TO OTHER DEVICES MAXIMUM OF 8 CMM s ON A MULTIDROP TERMINATE THE RD SIGNAL ONLY AT END OF MULTIDROP CABLE TERMINATE CONNECTION AT FIRST AND LAST DROPS FOR SERIES 90 DEVICES INSTALL J
10. 0002 PNUD S AIS suouporununuo 12425 274 06 5242 10781057 2104 ou ugnomq UIIA SurAqddng aqua 79 9 IMIA d78S0 XAD t and last drops only and last ports only 1 Master PLC i Make connections Slave Device RT 9 inside xe RT gei e D 19 RT 2525 1 9 R A 5 SD B 13 Pair X 13 RD B 8 SD B 13 f Y M Twisted Pair e 11 RD B SD A 12 12 RD A 2 SD A 12 H 10 RD A 11 yc 11 SD B S 11 au 13 SD B 10 10 50 21 RDA 10 12 SD A 5 14 14 CTS B RTS B 14 Thy 8 CTS B 5 6 X 6 CTSA 6 15 CTS A CTS B 8 8 RTS B V CTS B 8 14 RTS B CTS A 15 15 lt CTS A 15 5 5 5 45V 5 7 heH 7 GND GND 7 Hii n 7 GND SHLD 1 2 61 SHLD 1 SHLD 282 52 dirus Se oe be P i 5VDC To device i PS gt lt exemal RT 9 roun power 9 RT RD B 111 11 RD B RD A 10 9 10 RD A 0 1 13 SD B SD 1 Note Do daisy chain 5 pins e 12 SDIA CTS B 8 8 CTS B CTS
11. SNP SNP X SNP X Message Structure This section describes the SNP X messages required to perform each of the SNP X commands An SNP X command is initiated with a single request message X Request If all command data cannot be transmitted within the request message the data 15 sent in a single data buffer message X Buffer A single response message X Response containing all response status and data concludes the SNP X command The SNP X protocol prevents a slave device from returning any response to a broadcast command Each SNP X command conforms to a general protocol format All SNP X messages consist of the following sections Header Command Data Trailer Command Data The contents of these sections vary depending on the message type SNP X Request Message X Request SNP X Response Message X Response or SNP X Data Buffer X Buffer X Request Message Structure GFK 0582D The SNP X Request Message X Request is sent by the master to specify the desired service and parameters Up to two bytes of data can be contained within the X Request message If the command requires more than two bytes of data all data is sent in a separate X Buffer message X Request messages are exactly 24 bytes in length and structured as shown below Header Start of Message Message Type Command Data Request Code Command Specific Data Bytes 3 10 Bytes 12 18 Trailer End of Block Next
12. only If not programmed the master uses the value selected by the Modem Turnaround Delay configuration parameter The optional Transmission Delay field specifies a new Transmission Delay value This time inter val accounts for unusually long time delays in transmission between the master and slave devices Such unusually long delays are typical of communications via satellite The new value is specified in milliseconds and is in effect for this only If not programmed the master uses the value selected by the Timeouts configuration parameter Chapter 6 SNP Service 6 31 s X Write 07102 1BBE Available Modes Master Description Remote command The master establishes a new SNP X communication session with the slave device if the proper session is not already active The master then sends an X Write request with data to the slave device This service is provided to permit quick write access to various reference tables within the slave PLC This command writes the specified number of elements from the master reference table into the slave reference table When the memory types of the slave and master reference tables differ the data will be padded with the value 0 as necessary In multi session operation the broadcast SNP ID may be used to write data to all slave devices on the serial link This X command requires at least 11 words Data Block From 2 to 6 addi tional words may be
13. 0132 Figure 9 2 Values in Value column are in decimal format Serial I O Read Port Status COMMREQ Example Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Serial I O Protocol 9 PLC Memory Type Codes for COMMREQs Two possible parameters of the COMMREQ require the specification of a PLC Memory Type These parameters are used to 1 specify the memory type for data areas read or written and 2 specify the memory type for the COMMREQ status word The following table identifies the valid set of PLC Memory Types the access codes and unit lengths by which each type can be accessed and the valid ranges of each type The valid ranges may vary for different PLC CPU models Table 9 1 Memory Types Unit Lengths and Valid Ranges Registers R maximum units Analog Inputs AI 10 OAh word 1 maximum units Analog Outputs 12 OCh word 1 maximum units Discrete Inputs 1 70 46h maximum units 16 108 byte maximum units Discrete Outputs Q 72 48h bit 1 maximum units 18 12h maximum units Discrete Temporaries 74 4Ah bit 1 maximum units Discrete Internals 76 4Ch bit 1 maximum units 22 16h byte 1 maximum units 20 14h byte maximum units Discretes 5 78 4Eh bit maximum units 24 18
14. 247100 Conn B Conn B Conn C PLCC C P e Ul o IC690CBL714A IC690CBL714A Conn A RS 232 422 Converter Figure H 4 Multidrop Arrangement for Series 90 70 TMR Redundant System H 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Multidrop Conn B Conn C Series 90 30 PLC Series 90 30 PLC Conn A IC690CBL714A Cable L E 690 901 Miniconverter Serial Cable Figure H 5 Multidrop Arrangement for Series 90 30 Redundant System Configuring and Connecting a Programmer to a Multidrop Network GFK 0582D Each slave device on a multidrop system must have its own unique SNP ID identification The SNP ID assignment is made with a programmer running GE Fanuc programming software or with the Hand Held Programmer Logicmaster Control or Versa Pro software packages all can be used for this purpose The following example uses Logicmaster Please see your soft ware user s manual or on line help screens for specific instructions Regardless of what soft ware you use the basic steps are Connect your programmer to each individual PLC or module on the multidrop system and assign each one a unique SNP ID Make sure that each device on the multidrop sys tem is configured for identical communications settings such as baud rate parity etc Connect your programmer to the multidrop system and s
15. slave CCM master amp peer Serial I O Read MegaBasic pro gramming C programming C programmer C Debugger sup port 5 232 ports except for ports Port 2 of PCM300 RS 422 485 Ports 2 and 3 and Ports 2 and 3 and Port 2 of PCM300 Port 2 of Standard SNP port Standard SNP port PCM301 and CMM311 on single port CPUs on single port CPUs PCM311 Both ports of Both ports of CMM711 PCM711 1 Not available for all CPU firmware releases and may not be supported by all releases of Logicmaster VersaPro or Control PLC programming software See Chapter 3 for details on CPU capabilities 2 Only available on Ports 1 and 2 of CPUs 351 firmware release 8 00 and later 352 firmware release 8 00 and later and 363 all versions starting with firmware release 8 00 See Chapter 3 for additional information 3 Requires an application file which can be downloaded free of charge from the GE Fanuc Technical Support web site www gefanuc com support 4 Only available on CPUs 352 and 363 starting with firmware release 10 00 See Chapter 3 for additional information 5 Only available on CPUs 350 and higher Only CPUs 351 352 and 363 have Ports 1 and 2 The Standard SNP port on all Series 90 30 CPUs accessed through the power supply connector only supports SNP slave and SNP X slave protocols 1 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Introduction
16. Command Block is a block of PLC memory that contains addition al information about the communications request This information includes timing parameters a pointer to the Status Word and a Data Block The Data Block describes the direction of the data transfer and location and type of data being transferred The Status Word The Status Word reports on the results of the communications request For more information on the CCM Status Word refer to Chapter 5 CCM Service For more in formation on the SNP Status Word refer to Chapter 6 SNP Service Operation of the Communications Request GFK 0582D The figure and text below describe generally what happens when a serial Communications Re quest is initiated In the example shown a CMM module is used for the serial communications PLC CPU CMM T LADDER SERIAL PROGRAM CCM OR SNP COMMAND BLOCK PROTOCOL SOFTWARE COMMREQ CPU MEMORY DATA STATUS WORD STATUS WORD Figure 4 2 Communications Request Example A Communications Request is initiated when ladder instruction is activated At that time the PLC CPU sends details which are contained in the COMMREQ Command Block of the Communications Request to the target device How the information is trans ferred to the target device depends upon whether the request is a local or remote request Local Requests In a local request communications take place within the PLC fro
17. Example of a Serial Instruction 9 6 The following example is of a Read Port Status Function 4303 In the example when 0021 should be a transition type is a Command Block whose location starts at 0032 specified at the IN input controls communications through Port 2 specified by TASK input 20 14hex of the CPU rack 0 slot 1 specified by SYSID 0001 If an error occurs processing the COMREQ 00110 is set by the FT Fault output data is read the results are placed in two words 32 bits starting at address 0101 When the port status 0021 COMM REQ 00110 0032 FT t3 0001 SYSID 20 14h Port 2 0001 Rack 0 Slot 1 Series 90 30 PLC Rack 0 Slot 1 2 4 5 6 7 8 9 10 COMMREQ Command Block Address Value Description gt 0032 0003 Data Block Length 0033 0000 NOWAIT Mode R0034 0008 COMMREQ Status Word Memory Type R gt COMMREQ R0035 0024 COMMREO Status Word Address 1 9090025 7280025 Status Word 0036 0000 Not Used 0037 0000 Not Used 0038 4303 Read Port Status Command 80039 0076 Port Status Memory Type 26M ge M0101 s 1 R0040 0101 Port Status Memory Starting Location 0101
18. to Source Register Table 15 20 Read Registers RTU message 7 31 Read Scratch Pad Memory RTU Message 7 41 Read String 9 30 Read System Memory SNP Command Read Target to Source Memory CCM Com mand 5 19 Read Task Memory SNP 6 42 Repair product L 2 Repeater Converter N 1 Report Device Type RTU Message 7 40 Response Timeout 631 6 33 7 60 Restart Reset Pushbutton 24 Retries 7 13 Retries 5 7 50 Retrieving a Datagram 7 55 Index Return Control Program Name SNP Com mand 6 48 Return Controller Type ID SNP Command Return Fault Table SNP Command 6 53 Return PLC Time Date SNP Command RS 232 E 6 RS 232 Cable Diagrams 83 RS 422 serial ports Micro PLC described RS 422 RS 485 Cable Diagrams 8 5 RS 449 RS 422 and RS 485 E 7 RS 485 Interface 8 5 2 Wire Operation 5 18 RS 232 CPU 351 Port 1 3 3 3 7 RS 485 CPU 351 Port 2 3 3 3 7 RTS CTS Timing 2 14 RTU 2 Wire 8 10 Duplex Mode parameter 8 10 4 Wire 8 10 defined M 1 function codes M2 RTU Character Format 7 24 Communication Errors 7 44 IC690ACC901 Miniconverter Cable RTU Compatibility D 1 RTU Message Descriptions 7 29 Force Multiple Output Force Single Output 7 33 Loopback Maintenance Preset Multiple Registers Preset Single Register 734 Read Analog Inputs 7
19. Data Block 6 2 SNP Memory Types and Addressing 6 3 Section 2 The SNP Status Word 6 4 SNP Major Error Codes 6 5 SNP Minor Error Codes 6 6 viii Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Contents Section 3 SNP COMMREQ Programming Example 6 16 Ladder Program Example 6 16 SNP Commands s Ee FER 6 20 Clear Diagnostic Status Words 07000 1 58 6 21 Read Diagnostic Status Words 07001 1B59 6 22 Change SNP ID 07002 5 6 24 Set X Status Bits Address 07003 IB5B 6 25 Disable Break Free SNP Slave Operation 07004 5 6 27 Enable Break Free SNP Slave Operation COMMREQ 7005 1B5D 6 29 X Read 07101 6 30 X Wrte 07102 6 32 Attach 07200 1620 22222522 Rr Re DR ec ee 6 34 Change Privilege Level 07201 21 6 38 Read System Memory 07202 1 22 6 40 Write System Memory 07203 123 6 41 Read
20. Genius Global Data G memory configuration PLC Memory Type 70 16 18 74 20 76 22 78 24 80 be 82 28 30 46h 10h 48h 12h 4Ah 14h 4Ch 16h 4Eh 18h 50h 52h 1Ch 1 bit by bit bit number of elements are expressed in bytes not bits Note Valid Range 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units 1 maximum units The maximum addressable ranges for each memory type depends on the model of CPU and When using a byte oriented memory type the corresponding memory address offsets and There is no difference between bit and byte oriented memory types in terms of processing speed message length or message transfer time Special memory type restrictions apply in Datagram Point Formats Chapter 6 SNP Service 6 3 s Section 2 The SNP Status Word 6 4 The SNP COMMREQ Status Word reports on the progress and results of an SNP communica tions request The memory address to which the Status Word is written by the CMM is speci fied in Words 3 and 4 of the Command Block The contents of the SNP Status Wor
21. ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure 8 9 CMM to OIT RS 422 RS 485 Chapter 8 Serial Cable Diagrams and Converters 8 7 44925 sow e Ja 0 lt sSD B 21 I or 25 RXD 1 9 series so 95 RDA 13 EIAS 2 xD 99 CMM 00 S RD 25 22 TXD 00 RTS 10 4112 p PORT Joy lt RTS 22 1 13 CTS PX on 0 TERM 24 tio 9 2 0 j RTS F 9 0 00 11 E 00 05 23 00 0 0 7 7 ov 0 0 00 sub e AJ o0 25 25 m 25 PIN 25 PIN FEMALE MALE TERMINATE CONNECTION ON THE CMM MALE FEMALE JUMPER INTERNAL 120 OHM RESISTOR ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure 8 10 CMM to Series One Series Three DCA RS 422 RS 485 SHIELDED MAKE CONNECTIONS 244926 TWISTED INSIDE D CONNECTORS PIN PAIRS i PIN SD A 9 m XE 13 lt 80 21 Psi ie lt 13 9 SERIES 90 SERIES 90 21 CMM CMM
22. denote inputs Termination resistance for the Receive Data RD signal needs to be connected only on units at the end of the lines This termination is made on the Series 90 PLC products by connecting a jumper between pins 9 and 10 inside the 15 pin D shell with the following exception For Series 90 70 PLCs with Catalog Numbers IC697CPU731J and IC697CPU771G and earlier the termination for RD at the PLC is implemented by a jumper between pins 9 and 11 GFK 0582D Chapter 3 Series 90 CPU Serial Ports 3 1 3 12 Break Free SNP Protocol Break Free SNP has become the default protocol on some of the Series 90 CPUs The table below identifies which products support this feature The purpose of this feature is to improve serial communications when modems are used Break Free SNP simplifies modem communications with Series 90 PLCs by eliminating the requirement for a serial break at the start of each SNP and SNP X session Consequently modem pairs that alter the timing or characteristics of breaks from SNP SNP X masters may be used successfully Break Free operation is completely transparent to the user When normal breaks are received SNP SNP X communications operate identical to standard SNP communications When Attach and X Attach messages are received these are also recognized without a preceding break Modified breaks for example breaks transformed to a single ASCII NUL character with or without a framing error are ignored The B
23. 0 0 2 TI RXD 0 05 CTS 5 4 RIS 00 DTR 20 umi RT 5 CTS 00 PRIMARY PAN 04 GND 7 7 GND 0 PORT 1 10 2 0 DCD 8 20 DTR 0 o ae o 25 Pin 25 Pin 25 Pin 25 Pin FEMALE MALE FEMALE MALE Figure 8 3 CMM to OIT with Handshaking RS 232 GFK 0582D Chapter 8 Serial Cable Diagrams and Converters 8 3 44904 5 21 92 44920 05 S 2 s mo 0 senes MEIST LEES o CMM o cts 5 BEBE I to 0 DCD 8 DE Dd 20 00 PRIMARY PORT 0 20 L Lg I LI 00 PORT 1 siae 25 25 25 25 FEMALE MALE MALE FEMALE Figure 8 4 CMM to OIT without Handshaking RS 232 PIN PIN 242832 C SHLD 0 DCD 1 1 Dx T RD 2 2 99 DTR 4 6 8 DCD gt 0 0 CTS 8 20 9 9 25 25 MALE FEMALE MALE FEMALE Figure 8 5 IC690CBL702 CMM to PC AT Serial Cable PIN PIN 344033 CN 2 3 gt RD 3 TT 12 TD E WORKMASTERII 4 5 CTS AND gt CTS 5 20 DTR 5 2 8 nares 8 DCD gt p DTR 20 e 1 SHLD GND 7 UJ GND 25 Pin 25 Pin 25 Pin 25 Pin MALE FEMALE MALE FEMALE Fig
24. 1 or more fault entries in PLC fault table 0 PLC fault table is empty I O Fault Entry Present 1 One or more fault entries in I O fault table 0 fault table is empty Programmer attachment flag 2 Programmer attachment found 0 No programmer attachment found Front panel ENABLE DISABLE switch setting 1 Outputs disabled 0 Outputs enabled Front panel RUN STOP switch setting 1 RUN 0 STOP OEM protected bit 1 OEM protection in effect 0 No OEM protection CP Changed Not used PLC State 0 Run I O enabled 1 Run disabled 2 Stop disabled 3 CPU stop faulted 42 CPU halted 5 CPU suspended 6 Stop I O enabled s Change Privilege Level 07201 1C21 Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Change Privilege Level request the slave responds This service provides the master with the capability of changing its access privilege level at the slave PLC if the proper password is provided This command is only necessary if the master is not accorded sufficient privileges as a result of the Attach command Example Command Block Request privilege level change at attached slave device to level 2 The Slave device password is PASSI Word 1 00006 0006 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000
25. ALSO IS RECOMMENDED TO MAKE ANY NECESSARY CONNECTIONS 1 7 ov INSIDE THE CABLE CONNECTOR BE MOUNTED ON THE IT IS su NOT RECOMMENDED TO USE TERMINAL STRIPS OTHER TYPES OF FN CONNECTORS ALONG THE LENGTH OF THE TRANSMISSION LINE 3 OTIEA PICS ALS If applicable TERMINATION RESISTANCE FOR THE RECEIVE DATA RD SIGNAL NEEDS TO BE CONNECTED ONLY ON UNITS AT THE END OF THE LINES THIS TERMINATION IS MADE H TO FIRST SLAVE PLC TO SECOND SLAVE PLC ON THE SERIES 90 PLC PRODUCTS BY CONNECTING A JUMPER BETWEEN PIN 9 AND PIN 10 INSIDE THE 15 PIN D SHELL WITH THE FOLLOWING EXCEPTION FOR SERIES 90 70 PLCs CATALOG NUMBERS 1C697CPU731 AND 1C697CPU771 THE TERMINATION FOR RD AT THE PLC IS IMPLEMENTED BY A JUMPER BETWEEN 9 AND PIN 11 GROUND POTENTIAL MULTIPLE UNITS NOT CONNECTED TO THE SAME POWER SOURCE MUST HAVE COMMON GROUND POTENTIALS OR GROUND ISOLATION FOR PROPER OPERATION OF THIS SYSTEM Figure H 2 Custom Made Multidrop Cable Wiring Diagram Appendix H SNP Multidrop SNP Multidrop Examples Conn B Conn C to APM Comm Port Series 90 30 PLC Conn A IC690CBL714A Cable 690 901 Miniconverter Serial Cable Figure H 3 Connecting CPU and APM to Programmer with IC690CBL714A Cable
26. C Send Header Start HEADER ACK TIMER Transition to State 5 D If direction is read Transition to State 7 Else write Get data from PLC memory Send data block Start DATA TIMER Transition to State 6 Iflast block Send EOT Transition to State 1 Else Remain in State 6 If ENQ COUNT lt 32 Increment ENQ COUNT Send Master ENQ Start TIMER Remain in State 2 j Else Send EOT Transition to State 1 GFK 0582D Protocols CCM RTU SNP SNP X If HEADER COUNT lt 3 Increment HEADER COUNT Send Header Start HEADER TIMER Remain in State 5 Else Send EOT Transition to State 1 If DATA BLK COUNT lt 3 Increment DATA BLK COUNT Send data block Start DATA ACK TIMER Remain in State 6 Else Send Transition to State 1 Send EOT Transition to State 1 Transition to State 1 Send Data to PLC Send ACK to Data Block If last block Start EOT TIMER Transition to State 9 Else Start STX TIMER Transition to State 7 Chapter 7 Protocol Definition RTU SNP and SNP X IfDATA COUNT lt 3 Increment DATA COUNT Send NAK to bad block Start STX TIMER Transition to State 7 Else Send EOT Transition to State 1 M If QSEQ COUNT lt 3 Increment 5 COUNT Send Q ENQ seq Start ENQ TIMER Remain in State 10 Else Tra
27. GFK 0582D Protocols SNP SNP X CCM Slave Actions G Send ACK SEND QRSP 1 A DO 1 GFK 0582D Start TIMER While DELAY TIMER 04 If char received DELAY ACK TIMER 0 DO ACK 0 Remain in State 1 If DO ACK 1 Send 3 to ENQ Start TIMER Transition to State 3 Zero DATA BLK COUNT Send Data Block Start DATA TIMER Remain in State 6 If last block Send EOT Transition to State 1 j Else wait for PLC data Remain in State 6 If DATA BLK COUNT lt 3 Increment DATA COUNT Send Data Block Start DATA TIMER Remain in State 6 Else Send EOT Transition to State 1 Send EOT Transition to State 1 Transition to State 1 If read data Start STX TIMER Transition to State 7 j Else write data Get PLC data Send Data Block Start DATA ACK TIMER Transition to State 6 Send Data to PLC Send ACK to Data Block If last block Start EOT TIMER Transition to State 9 Else Start STX TIMER Transition to State 7 If HEADER COUNT lt 3 Increment HEADER COUNT Send NAK Start TIMER Transition to State 3 Else Send EOT Transition to State 1 If DATA BLK COUNT lt 3 Increment DATA COUNT Send NAK to bad block Start STX TIMER Transition to State 7 Else Send EOT Transition to State 1
28. Invalid Query Message Serial Link Time Outs Invalid Transaction Invalid Query Message When the communications module receives a query addressed to itself but cannot process the query it sends one of the following error responses Subcode Invalid Function Code 1 Invalid Address Field 2 Invalid Data Field 3 Query Processing Failure 4 The format for an error response to a query is as follows Exception Error Error Func Subcode Check The address reflects the address provided on the original request The exception function code is equal to the sum of the function code of the query plus 128 The error subcode is equal to 1 2 3 or 4 The value of the subcode indicates the reason the query could not be processed Invalid Function Code Error Response 1 An error response with a subcode of 1 is called an invalid function code error response This response is sent by a slave if it receives a query whose function code is not equal to 1 through 8 15 16 17 or 67 Invalid Address Error Response 2 An error response with a subcode of 2 is called an invalid address error response This error response is sent in the following cases 1 The starting point number and number of points fields specify output points or input points that are not available in the attached Series 90 CPU returned for function codes 1 2 15 2 The starting register number and number of registers fields specify registers that are not availa
29. is TeRM ES USED AS A Tor ond REPEATER 18 TERM 4 7 GND gt 25 PIN 25 PIN x J MALE FEMALE TO OTHER DEVICES MAXIMUM OF 8 DEVICES ON A MULTIDROP TERMINATE THE RD B SIGNAL ONLY AT END OF MULTIDROP CABLE TERMINATE CONNECTION ON FIRST AND LAST DROPS ONLY ON THE CMM INSTALL JUMPER TO CONNECT INTERNAL 120 OHM RESISTOR ON THE ISOLATED REPEATER CONVERTER INSTALL 150 OHM RESISTOR SUPPLIED ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure N 8 Cable D RS 422 Twisted Pair GFK 0582D Appendix N IC655CMM590 Isolated Repeater Converter N 9 N 10 Obsolete Product ji SW CTS J2 PIN PIN fo lt o S i RD 0 00 e e 3 a 2 sD 9 00 1 5 i 5 ISOLATED 0 Dire ca 00 repeater 0 7 rr To o9 CONVERTER 00 0 BRICK 0 1 s 0 0 s 8 DCD 0 lt 20 M 00 lt bg bog 0 0 Fg Fg 0 0 00 sup 2 25 PIN 25 PIN 25 PIN FEMALE MALE MALE Figure N 9 Cable E RS 232 Converter to CMM Series 90 PLC Serial Communications User s Manual November 2000 245239 0 0 o 00 SERIES 90 0 CMM 0 0 PORT 0 0 1 o 0 2 0 0 0 0 0 o 0 x 25 PIN FEMALE GFK 0582D IC690ACC901 Miniconverter and Cable Kit This appendix describes ho
30. or more PLCs configured as slaves The multidrop configuration requires a straight through 1 to 1 cable from the Miniconverter s 5 422 port to the first slave PLC s SNP port Other slaves will require daisy chain connection between slaves maximum of eight devices can be connected an RS 422 multidrop configura tion of the devices must have a common ground If isolation is required IC690ACC903 Port Isolator can be used with the Miniconverter See Appendix G for information When using the Miniconverter with a modem connection it may be necessary to jumper RTS to CTS consult the user s manual for your modem Cable Diagrams Point To Point When connecting the Miniconverter to IBM PC and compatible computers with hardware hand shaking the following cable connections should be used 844982 PIN PIN TXD 2 2 RXD 3 CTS 7 7 RTS RTS 8 8 CTS GND 5 5 1 DCD 6 DSR 4 DTR MINICONVERTER IBM PC AT RS 232 PORT 9 PIN 9 PIN CONNECTOR CONNECTOR Figure O 2 Miniconverter to PC AT 844983 PIN PIN TXD 2 RXD 3 2 TXD CTS 7 4 RTS RTS 8 5 CTS GND 5 7 GND 8 DCD 6 DSR 20 MINICONVERTER WORKMASTER RS 232 PORT IBM PC XT PS 2 9 PIN 25 PIN CONNECTOR CONNECTOR Figure O 3 Miniconverter to Workmaster II PC XT PS 2 GFK 0582D Appendix O IC
31. 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type R address 3 0000 0000 Status word address minus 1 0001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4301 10CD Setup input buffer command address 7 0064 0040 Buffer length in bytes Operating Notes It is not possible to set the buffer length to zero If zero is entered as the buffer length the buff er size will be set to the 2048 byte default If a length greater than 2048 bytes is specified an error is generated GFK 0582D Chapter 9 Serial I O Protocol 9 19 Flush Input Buffer Function 4302 9 20 This operation empties the input buffer of any characters received through the serial port but not yet retrieved using a read command All such characters are lost Example Command Block for the Flush Input Buffer Function VALUE VALUE MEANING decimal hexadecimal address 0001 0001 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type address 3 0000 0000 Status word address minus 1 0001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4302 10CE Flush input buffer command Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol 9 Read Port Status Function 4303 This function returns the current status of the port The following e
32. 13 0Dh Remote error Error processing a remote command The minor error code identifies the specific 2 02h String length exceeds end of reference memory type 3 03h data block length is too small String data is missing or incomplete 4 04h Receive timeout awaiting serial reception of data 48 30h Serial output timeout The serial port was unable to transmit the string Could be due to missing CTS signal when the serial port is configured to use hardware flow control 50 32h COMMREQ timeout The did not complete within a 20 second time lim it 14 0Eh Autodial Error An error occurred while attempting to send a command string to an attached ex ternal modem The minor error code identifies the specific error 1 01h Not used 2 02h The modem command string length exceeds end of reference memory type 3 03h Data Block Length too small Output command string data missing or incomplete 4 04h Serial output timeout The serial port was unable to transmit the modem autodial output 5 05h Response was not received from modem Check modem and cable 6 06h Modem responded with BUSY Modem is unable to complete the requested connection The remote modem is already in use retry the connection request later 7 07h Modem responded with NO CARRIER Modem is unable to complete the requested connection Che
33. 7 26 Calculating the Length of Frame 7 28 Message Descriptions 7 29 Communication Errors 7 44 Inyalid Qu ry Message eL EE PUER RICE e 7 44 Serial Link Timeout 7 45 Invalid Transactions 5 2 30 RERO ERROR Res 7 46 Section 3 SNP Protocol 7 47 Overview of SNP 1 7 47 SNP Master Slave Operation 7 47 SNP DImers serri es eee EI IEEE Ve US 7 50 SNP Datagrams cssc aa a b ees 7 54 x Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Contents Section 4 SNP X Protocol 7 57 Overview of SNP X 1 7 57 SNP X Communication 5 0 7 51 Error Handling De bey Shales ee 7 58 Broadcast Capability 7 58 Modem Support 535 ru E Ru EXP 7 58 Slave PLC Status Word ec 7 59 Slave Memory Access Bits X Status 5 7 59 AERE PES i AA 7 60 Block Check C
34. 82h PLC Status Word 00 00 for this example only Status codes Major and Minor errors Data Length always 0 End of block character 17h marks the beginning of the SNP X message trailer Not used always 0 Computed Block Check Code for this example 7 76 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Protocols CCM RTU SNP SNP X Example of Direct X Write Command More Than 2 Bytes This example shows the message exchange of a direct X Write command to write more than two bytes of data The X Request requires a subsequent transmission of an X Buffer message by the SNP X master After the slave receives the initial X Request the slave returns an Intermediate Response message and waits for the X Buffer message Upon receiving the X Buffer message the SNP X slave processes the write to the PLC reference table The SNP X slave returns an appropriate X Response message to conclude the command Master X Write Request message 1B 58 00 00 00 00 00 00 00 00 02 08 63 00 0A 00 00 00 17 54 1C 00 00 13 X Write Data Buffer 1B 54 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 17 00 00 00 00 58 Slave Intermediate Response 1B 78 82 00 00 00 00 00 00 17 00 00 00 00 03 X Write Response 1B 58 82 00 00 00 00 00 00 17 00 00 00 00 07 Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 79 Explanation of Direct X Write C
35. Chapter 7 Protocol Definition RTU SNP and SNP X Start While T1 0 If char received 0 SEND QRSP 0 Remain in State 1 If SEND QRSP 1 Send Response Remain in State 1 L Start HEADER TIMER Transition to State 4 M Start DATA TIMER Transition to State 8 7 19 Section 2 RTU Protocol This section describes the Remote Terminal Unit RTU serial communications protocol Introduction Since the Series 90 CPUs and CMM modules discussed in this manual can only serve as RTU slave devices this section discusses the slave implementation of the RTU protocol RTU protocol is a query response protocol used for communication between the RTU device and a host computer which is capable of communicating using RTU protocol The host com puter is the master device and it transmits a query to a RTU slave which responds to the master The RTU device as an RTU slave cannot query it can only respond to the master The RTU data transferred consists of 8 bit binary characters with an optional parity bit No control characters are added to the data block however an error check Cyclic Redundancy Check is included as the final field of each query and response to ensure accurate transmission of data Message Format The general formats for RTU message transfers are shown below Slave Turn around Time Master Query Message Slave Query Transaction Master
36. Local command This command clears the SNP Diagnostic Status Words maintained within the module A complete set of Diagnostic Status Words is maintained for each serial port of the module Example Command Block Clear the local Diagnostic Status Words in the module for the serial port specified by the TASK field of the issuing COMMREQ Note The Diagnostic Status Words see next page for a list of these words are for reporting the applicable serial port s communications status and should not be confused with the Status Word below in Words 3 and 4 that reports on the status of the COMMREQ Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Chapter 6 SNP Service 00001 0001 00000 0000 00008 0008 00000 0000 00000 0000 00000 0000 07000 1B58 SNP Data Block Length NOWAIT Mode COMMREQ Status Word Memory Type COMMREQ Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number 6 21 s Read Diagnostic Status Words 07001 1B59 Available Modes Master and Slave CPU 351 and CPU 352 serial ports only support the Mas ter mode Description Local command This command returns the SNP Diagnostic Status Words maintained within the CMM module into the PLC memory area specified by the COMMREQ A complete set of Diagnostic Status Words is maintained for each serial port of the CMM module Example Command Block Read all 20 local Diagnostic Statu
37. Request Response Optional Optional Figure 7 13 Message Flow Request and Response Every SNP message must be acknowledged Once a message has been sent if an acknowledge ment is not received within the T2 time interval the SNP communication is aborted The mas ter must establish a new communication session Every SNP request must receive a response After the master has completed a request all re quest messages have been sent and acknowledged if the first message of the response is not received within the 5 time interval the SNP communication is aborted The master must establish a new communication session When a request or response contains one or more Buffer messages the next Buffer message must follow the previous message in timely fashion If an expected Buffer message 15 not re Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 49 SNP Timers 7 50 ceived within the T5 time interval after the completion of the previous message the SNP communication is aborted The master must establish a new communication session See the SNP Timers section below for additional information on the SNP timers Even when message transmission or integrity errors do not occur the slave device may be un able to successfully complete the action requested by the master The slave device indicates a request failure by returning the appropriate major and minor error codes to the master in a re sponse Mailbox messag
38. gt ISOLATED be POWER lt SE RS 232C 115 SUPPLIES VAC 24 Figure N 2 RS 422 Isolated Repeater RS 232 Converter Logic Diagram Note inputs on the unit are biased to the inactive state Inputs left unconnected will produce a binary 1 OFF state on the corresponding output GFK 0582D Appendix N IC655CMM590 Isolated Repeater Converter N 3 4 Series 90 PLC Serial Communications User s Manual November 2000 Obsolete Product Table N 1 Pin Assignments for the Isolated Repeater Converter J1 RS 422 Port J2 RS 422 RS 232 Port 25 pin female connector 25 pin female connector RD Reeve ms Eres frossa Ground Connection Connection Ground Connection Connection CA Clear to aS to Send Optional Termination Optional Termination CTS A Clear to Send CTS A Clear to Send Optional Termination Optional Termination CTS B Clear to Send RTS B Request to Send CTS A Clear to Send RTS A Request to Send RTS B Request to Send CTS B Clear to Send RTS A Request to Send CTS A Clear to Send RD SDB 17 SDB SendData 000 Data 17 RDB Receive Data Data Data Optional Termination 19 19 Receive Data Optional Termination RI E ET re Data Optional Termination 23 RD A Receive Data 23 SD A Send D
39. 0000 00000 0000 00000 0000 00100 0064 CCM Data Block Length NOWAIT Mode Status Word Memory Status Word Address minus 1 Register 10 Not used in NOWAIT mode Not used in NOWAIT mode Command Number Target CPU ID Slave ID 5 Not used Not used Not used Source Memory Address Register 100 GFK 0582D 8 Single Bit Write 06110 17DE Description Remote Command This command allows the user to set or clear a single bit in the input or out put table of another CPU The target memory types bit write functions are Target Memory Type Type Number Bit Function Input Table 13 Bit Set Output Table 14 Bit Set Input Table 17 Bit Clear Output Table 18 Bit Clear Example Clear Output 000713 in the target Series 90 PLC The target CPU ID is 25 Word 1 00004 0004 Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Register Word 4 00009 0009 Status Word Address minus 1 Register 10 Word 5 00000 0000 Not used in NOWAIT Mode Word 6 00000 0000 Not used in NOWAIT Mode Word 7 06110 17DE Command Number Word 8 00025 0019 Target CPU ID Word 9 00018 0012 Target Memory Type Function Word 10 00713 02C9 Target Memory Address GFK 0582D Chapter 5 CCM Service 5 21 Write to Target from Source 06111 06113 17DF 17E1 Description Remote Command This set of commands is used to write information to the target device f
40. 0100 0000 0000 1000 0100 0010 0001 1000 1100 i110 1110 FINAL CRC 16 INDICATES TRANSMISSION CORRECT EXAMPLE MESSAGE Refer to the example of a transmitted message shown below 1 As stated before the receiver processes incoming data through the same algorithm as the transmitter The example for the receiver starts at the point after all the data bits but not the transmitted CRC have been received correctly Therefore the receiver CRC should be equal to the transmitted CRC at this point When this occurs the output of the CRC algorithm will be zero indicating that the transmission is correct The transmitted message with CRC would then be Flag The MSB and LSB references are to the data bytes only not the CRC bytes The CRC MSB and LSB order are the reverse of the data byte order Chapter 7 Protocol Definition RTU SNP and SNP X 7 27 Calculating the Length of Frame To generate the CRC 16 for any message the message length must be known The length for all types of messages can be determined from the table below Table 7 12 RTU Message Length Query or Broadcast Response Message Function Code And Name Message Length Less Length Less CRC Code Code Not Defined Not Defined Read Output Table 3 3rd byte Read Input Table 3 3rd byte Read Registers 3 3rd byte Read Analog Input 3 3rd byte Force Single Output Preset Single Register Read E
41. 2 12 Chapter Series 90 CPU Serial 3 1 OVERVIEW uL De dre eh al true sant E Ate 3 1 Series 90 30 CPU Serial 3 2 Standard SNP Port Accessed Through Power Supply Connector 3 5 Series 90 70 CPU Serial 3 6 Features Supported on Series 90 70 CPU Serial Ports 3 7 General Series 90 CPU Serial Communication Information 3 9 Configuring Serial Ports 1 and 2 with 3 15 Chapter 4 Initiating Communications The COMMREQ 4 1 Section 1 The Communications Request 4 2 Structure of a Serial Communications 4 2 Operation of the Communications 4 3 Timing for Processing CMM Communications Requests 4 4 GFK 0582D Series 90 PLC Serial Communications User s Manual November 2000 vii Contents Section 2 The COMMREQ Ladder Instruction 4 5 Section 3 COMMREQ Command Block 4 7 Chapter 5 CCM Service ev e A wx EPA 5 1 Section 1 The CCM Data Block 5 2 Structure of the CCM Data Block 5 2 Data Block Summary for CCM
42. 9600 baud typically Parity None Stop Bits 1 and Modem Turnaround Time 1 this is a starting value sometimes a value of 2 or 3 will be better as shown in the example below Module Details Catalog Number IC693CPU351 Description Series 90 30 CPU Model 351 Location Rack O 510 1 Settings Scan Port 1 Port 2 Memory Power Consumption Parameters Passwords Enabled Checksum Words 8 Data Rate bps 9600 Parity None Stop Bits 1 Modem Turnaround Time 01 Sec Count 1 Idle Time Sec 10 x Cancel Help 4 Save the CPUconfiguration and download it to the PLC K 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Modems with VersaPro and Control Installing a Modem in Windows 1 Under the START menu SETTINGS and CONTROL PANEL choose the MODEMS icon Click on the ADD button and install a standard modem typically 9600 The Standard Modem uses a generic communications and configuration driver Note If for some reason a Standard Modem cannot be added which may typically be the case for PCMCIA modems because of the tight integration with Windows then follow these instructions below paying close attention to the notes that start with A modem that is not a Standard Modem will have a name that corre sponds to the make and model of the actual modem being used Because the Win dows communications strategy uses TAPI Telephone Application
43. For installations that must conform to more stringent requirements such as CE Mark see GE Fanuc manual GFK 1179 Installation Requirements for Conformance to Standards A summary of this manual s contents is provided here Chapter 1 Chapter 2 Chapter 3 Chapter 4 Chapter 5 Introduction Provides an overview of the manual Includes a table that matches products with communication features that they support The CMM Description Installation and Configuration Describes how to install and configure the Series 90 Communications Coprocessor Mod ules IC693CMM311 IC697CMM711 Includes a description of the modules and how they operate in the system Series 90 CPU Serial Ports Describes the serial ports on the Series 90 30 models CPU351 352 and 363 CPUs the Series 90 70 models CPX772 782 928 935 and CGR772 and 935 CPUs Initiating Communications The COMMREQ Explains how to initiate communications from the ladder logic The structure of the COMMREQ ladder instruction is described in detail CCM Service Defines the CCM service commands explains how the pa rameters of the service commands are included in the Data Block of the COMMREQ Numerous ladder programming examples are given iii Preface Chapter 6 Chapter 7 Chapter 8 Chapter 9 Appendix A Appendix B Appendix C Appendix D Appendix E Appendix F Appendix G Appendix H Appendix I Appendix J
44. General information on this instruc tion is found in GFK 0467 the Series 90 30 20 Micro PLC CPU Instruction Set Reference Manual and GFK 0265 the Series 90 70 PLC Reference Manual In order to specify what function the instruction will be performing and with what device applicable codes lare specified for the COMMREQ s SYSID and TASK ID inputs For configuring CPU serial ports SYSID must be 0001 which represents the CPU location Rack 00 Slot 01 and the TASK ID either 19 decimal Port 1 or 20 decimal Port 2 Length of the data block is 12 words 24 bytes The format for the data block of the Serial Port Setup is shown in the next table Enable IN Address of Data Block First Word SYSID Rack and Slot Number of CPU Always 0001 hex TASK 19 13hex Serial Port 1 20 14hex Serial Port 2 FT Fault output Goes High for COMMREQ Fault OK Only available on the Series 90 70 Goes high if the COMMREQ passes power flow Figure 3 5 The COMMREQ Ladder Instruction GFK 0582D Chapter 3 Series 90 CPU Serial Ports 3 15 Data Block Table 3 12 Serial Port Setup COMMREQ Data Block The values for these parameters be selected from the choices in the following table Note The SNP ID can also be changed by sending an SNP COMMREQ with the Change SNP ID command 7002 Timing Consideration The Serial Port Setup COMMREQ can be sent any time that th
45. Indicates CPU firmware release in which the feature was first available When CPU363 was initially released it was equipped with firmware release 9 00 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D CPU Serial Ports Standard SNP Port Accessed Through Power Supply Connector GFK 0582D Series 90 30 CPUs have a standard SNP serial port that is accessed through a connector on the PLC power supply This serial port only supports the SNP Slave and SNP X Slave protocols Break Free SNP became the default protocol on this port starting with firmware release 8 20 for CPUs 311 341 and 9 00 for CPUs 350 364 For CPUs equipped with firmware earlier than those two releases the default protocol is standard Break Enabled SNP Break Free SNP protocol is discussed in a later section of this chapter The most common use for this port is communicating with a personal computer running the PLC programming software however it is capable of other uses such as communicating with an operator interface device In either case the personal computer or operator interface device would act as the master and the PLC as the slave because this port only supports the slave versions of the SNP and SNP X protocols Chapter 3 Series 90 CPU Serial Ports 3 5 3 6 Series 90 70 CPU Serial Ports m All Series 90 70 CPUs have at least one built in serial port the standard SNP port It is called Serial Port 3 on
46. N Trailer End of Block Next Message Next Message Not Used Block Check Type Length Code Byte N 1 Byte N 2 Bytes N43 N 4 Byte 5 Byte N 6 The contents of the Header Command Data and Trailer for the X Buffer message are further described below Start of Message 1Bh Start of message character Byte 2 Message Type 54h SNP X Message 54h Command Data Bytes 3 N Optional data Optional data 1 1000 bytes Byte N 1 End of Block End of block character Byte N 2 Next Message Type 0 Next message type always 0 Bytes N 3 4 Next Message Length Next message length always 0 0 Byte N 5 Unused 0 Not used always 0 Byte N 6 Block Check Code Calculated for this message The size of the Optional data field depends upon the amount of data in the message The size of the entire X Buffer message was specified by the Next Message Length field in the preced ing X Request message GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 71 SNP X Commands This section describes the SNP X protocol message exchange for each SNP X command Both directed and broadcast commands are described Examples with actual values are provided for each SNP X command X Attach Command Before any data can be transferred between SNP X devices an SNP X communication session must be established by the master with the slave The master device sends a Long Break waits the T4 time interval and trans
47. Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07200 1C20 SNP Command Number Word 8 20051 4E53 Characters 1 and 2 of Slave SNP ID S 53h 4Eh Word 9 18768 4950 Characters 3 and 4 of Slave SNP ID P 50h I 49h Word 10 12612 3144 Characters 5 6 of Slave SNP ID D 44h 1 31h Word 11 00000 0000 Characters 7 and 8 of Slave SNP ID null null Word 12 00008 0008 Master Memory to store Piggyback Status Word 13 00171 00AB Master Address to store Piggyback Status Register 171 The Slave SNP ID field specifies the SNP ID of the desired slave device The SNP ID field is 8 bytes long For Series 90 30 and Series 90 70 PLCs the SNP ID can be a maximum of 7 bytes followed by a null character 0 and can include any ASCII character A null SNP ID Character 1 0 can be used to Attach to any slave SNP device regardless of its assigned SNP ID It should be noted that a null SNP ID can only be successful in a point to point wiring configuration In a multidrop wiring configuration all SNP slave devices would respond to any Attach specifying a null SNP ID This procedure will produce unpredictable results and should not be attempted The Master Memory Type and Address for Piggyback Status fields are optional If the Piggy back Status memory type and address values are 0 that is a Piggyback area is not specified the Piggyback Status information is ignored and is n
48. The Port Status words are not updated until the read operation is complete either due to timeout or when all the data has been received You can use the Read Port Status Function 4303 to access the status information If the time out interval is set to zero the COMMREQ remains pending until it has received the requested amount of data or until it is cancelled If this COMMREQ fails for any reason no data is returned to the buffer Any data that was al ready in the buffer remains and can be retrieved with a subsequent read request Example Command Block for the Read Bytes Function VALUE VALUE MEANING decimal hexadecimal address 0005 0005 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type address 3 0000 0000 Status word address minus 1 960001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4402 1132 Read bytes command address 7 0030 001E Read time out 30 seconds address 8 0005 0005 Number of bytes to read address 9 0008 0008 Input data memory type address 10 0100 0064 Input data memory address R0101 9 28 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol Return Data Format for the Read Bytes Function GFK 0582D B The return data consists of the number of characters actually read the number of characters stil
49. Word Address Length Address Word 7 Word 10 Word 11 Word 12 Set Q Set Q Response Cd 2 6001 Slave mode only 3 words 1771h x3a x3b Clear CCM Diagnostic 6002 Status Words 1772h Read CCM Diagnostic 6 words Status Words to 2 words 6003 Source Registers unused 1773h Software Configuration See Section 3 for details 15 words Read from Target to 6101 Source Register Table 6 words 17D5h X X X X X Read from Target to 6102 Source Input Table 6 words 17D6h Read from Target to 6103 Source Output Table 6 words 17D7h Read Q Response to 6 words 6109 Source Register Table 3 used 17DDh Single Bit Write 6110 4 words 17DEh Write to Target from 6111 Source Register Table 6 words 17DFh Write to Target from 6112 Source Input Table 6 words 17E0h X X X X X Write to Target from 6113 Source Output Table 6 words 17EIh X X X X X 1 Internal Command no communications across the serial port 2 The Response can be set via command 6001 and the CCM slave will respond to a Sequence Enquiry received from an external device on the serial port For description of the Q Sequence refer to Section 3 of this chapter Data bytes 1 and 2 Data bytes and 4 Source Register Memory address 5 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 8 CCM Memory Types GFK 0582D The tables below list the memory types supported by the Series 90 CCM The m
50. X 58h 3 10 41 42 43 44 45 46 00 00 SNP ID of target slave 11 00 X Attach request code 00h 12 18 00 00 00 00 00 00 00 Not used always 0 19 17 End of block character 17h marks the beginning of the SNP X message trailer 20 23 00 00 00 00 Not used always 0 24 B2 Computed Block Check Code for this example X Attach Response Message 1 Start of message character 1Bh 2 58 SNP X Command X 58h 3 10 41 42 43 44 45 46 00 00 SNP ID of target slave 11 80 X Attach response code 80h 12 18 00 00 00 00 00 00 00 Not used always 0 19 17 End of block character 17h marks the beginning of the SNP X message trailer 20 23 00000000 Not used always 0 24 A2 Computed Block Check Code for this example GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 73 Example of Broadcast X Attach Command This example shows the message exchange of a broadcast X Attach command Note that there is no response message to the broadcast request Master Slave Long Break gt wait T4 time X Attach Request message 1B 58 FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 17 00 00 00 00 79 wait Broadcast Delay time No X Attach Response to before next request broadcast X Attach Explanation of Broadcast X Attach Command Byte Hex Value Description Number X Attach Request Message 1 Start of message character 1Bh 2 58 SNP X Command X 58h 3 1
51. e H Parity he Stop bits n s Flow control None Restore Defaults Cancel HyperTerminal test the connection to the modem by typing AT and hitting ENTER The modem should respond with To dial the modem type ATDT where is the phone number of the remote modem and wait for the connection response CONNECT 9600 Set up the PLC programmer to communicate at the desired port settings but assume a stan dard serial port connection not a modem connection using the desired port setup parame ters The port setup in the CCU will not have an associated modem but will have a mo dem turnaround time To hang up first disconnect the PLC programmer connection this will free up the comm port for use with HyperTerminal Then connect to the modem with HyperTerminal While connected wait at least 1 second then hit 3 plus signs and one second later the modem should respond with an OK Now ATH the hang up command may be en tered The modem should respond again Note The HyperTerminal connection must be set to the same baud rate that the modem is currently using If not the escape sequence will not be recognized Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Appendix Using Modems with VersaPro and Control K Introduction This appendix discusses setting up a serial communications link using modems between a personal c
52. equal to one less than the number of the first input point returned in the normal response to this request The number of points value is two bytes in length It specifies the number of input points returned in the normal response The sum of the starting point value and the number of points value must be less than or equal to the highest input point number available in the attached Series 90 CPU The high order byte of the starting point number and number of bytes fields is sent as the first byte The low order byte is the second byte in each of these fields RESPONSE The byte count is a binary number from 1 to 256 0 256 It is the number of bytes in the normal response following the byte count and preceding the error check The data field of the normal response is packed input status data Each byte contains 8 input point values The least significant bit LSB of the first byte contains the value of the input point whose number is equal to the starting point number plus one The values of the input points are ordered by number starting with the LSB of the first byte of the data field and ending with the most significant bit MSB of the last byte of the data field If the number of points is not a multiple of 8 then the last data byte contains zeros in one to seven of its highest order bits 7 30 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X MESSAGE 03 REA
53. 00944 The target CPU ID is 36 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 00006 0006 00000 0000 00008 0008 00009 0009 00000 0000 00000 0000 06101 1705 00036 0024 00009 0009 00001 0001 00009 0009 00936 03 8 Data Block Length NOWAIT Mode Status Word Memory Type Register Status Word Address minus 1 Register 10 Not used in NOWAIT Mode Not used in NOWAIT Mode Command Number Target CPU ID Target Memory Type Target Memory Address Data Length Source Memory Address Note When using the Input and Output tables the memory address must begin on a byte boundary and the data length must be a multiple of 8 GFK 0582D Chapter 5 CCM Service Read Q Response to Source Register Table 06109 17DD 5 20 Description Remote command This command allows the PLC programmer to read the Q Response buffer of a remote device and store the data into a specific location of the Register Table A Q Response buffer contains exactly 2 registers of data Example Read the Q Response from CCM slave device 5 into registers 00100 00101 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 Series 90 PLC Serial Communications User s Manual November 2000 00006 0006 00000 0000 00008 0008 00009 0009 00000 0000 00000 0000 06109 17DD 00005 0005 00000
54. 0582D 2 CCM Service This chapter describes the CCM serial communications service Before proceeding with this chapter it is important to be familiar with the information presented in Chapter 4 Initiating Communications The COMMREQ This chapter contains the following sections Section 1 The COMMREQ Data Block Section 2 The COMMREQ Status Word Section 3 COMMREQ Programming Examples Comparisons among the Series 90 Series Six Series Five and Series One PLC CCM imple mentations are provided in Appendix C to assist those experienced in the operation of CCM on GE Fanuc programmable controllers The CCM serial communications service is not supported on any Series 90 CPU serial port You must use CMM or PCM modules for CCM support 5 1 Section 1 The CCM Data Block The CCM COMMREQ Data Block is the part of the COMMREQ Command Block that identifies which CCM Command is to be executed and provides specific parameters for that CCM Command In describing the COMMREQ Data Block the following topics are discussed Structure of the CCM Data Block Data Block Summary for CCM Commands Memory Types Memory Addressing and Data Lengths Structure of the CCM Data Block The CCM Data Block has the following structure Command Block Description Word Each of the elements of the CCM Data Block are explained below CCM Command Number Word 7 T
55. 1774 Description Local command This command allows the PLC Ladder application program to reconfigure a 5 18 port with specific settings for timers retry counters This command when issued will override the configuration specified Logicmaster 90 Specifying the value 65535 FFFFh for any parameter will indicate that the current setting for that parameter should re main in effect The initial parameter settings are configured with Logicmaster 90 Example Change the turnaround delay to 1000ms and the ENQ retry count to 16 Word 1 00015 000F CCM Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory R Word 4 00009 0009 Status Word Address minus 1 Register 10 Word 5 00000 0000 Not used Word 6 00000 0000 Not used Word 7 06004 1774 Command Number Word 8 01000 03 8 Turnaround Delay 0 65534ms Word 9 65535 FFFF ENQ ACK TIMER 0 65534ms Word 10 65535 FFFF SOH TIMER 0 65534ms Word 11 65535 FFFF HEADER TIMER 0 65534ms Word 12 65535 FFFF HEADER ACK TIMER 0 65534ms Word 13 65535 FFFF STX TIMER 0 65534ms Word 14 65535 FFFF DATA TIMER 0 65534ms Word 15 65535 FFFF DATA ACK TIMER 0 65534ms Word 16 65535 FFFF EOT TIMER 0 65534ms Word 17 00016 0010 ENQ COUNT 0 50 Word 18 65535 FFFF HEADER COUNT 0 50 Word 19 65535 FFFF DATA BLK COUNT 0 50 Word 20 65535 FFFF RS 485 operating mode 2 4
56. 2 and cannot be changed Level 2 permits read and write of the PLC memory If the master device requires additional privileges see the Change Privilege Level command for further information The Attach command also enables or disables Piggyback Status reporting for the duration of the SNP communication When enabled Piggyback Status data is updated after each successful command particular installation requires configuration parameter values different from those specified with the programming software or the Hand Held Programmer the Long Attach command must be used The Long Attach command adds some overhead to the communications process and should only be used if necessary Examples of cases which may require the Long Attach in clude Satellite communications Modem communications with setup times gt 500ms Communications in high noise environments Specific error detection recovery requirements 6 34 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 6 Example Command Block Attach to a slave device whose SNP ID is SNPID1 Enable Piggyback Status update on this and all following commands store the 6 bytes of Piggyback Status data into master device Register Memory Registers 171 173 Word 1 00007 0007 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1
57. 2000 GFK 0582D Protocols SNP SNP X Scratch Pad Memory Allocation Footnotes 1 0000 Run Enabled 0100 Halted 0001 Run Disabled 0101 Suspended 0010 Stopped 0110 Stopped IO Enabled 0011 Stopped Faulted 2 PLC CPU Major Type Codes 59070 PLC CPU 12 Series 90 70 PLC CPU 59030 PLC CPU 16 10h Series 90 30 PLC CPU b Series 90 70 Minor Types for CPU Possible responses for the Series 90 70 CPUs 84 00 00 for CFR782 80 00 00 for CPU780 24 00 00 for CPU924 Located in the same position as in the Series Six scratch pad Series One Three and Five PLC users who need to determine the node type should note this location and make driver modifications where necessary 3 Scratch Pad Bytes 18h 33h Bytes Length of Memory Size Returned In PR Register Memory Note Four bytes hold the hexadecimal length of each memory type with the most significant word reserved for future expansion For example the CPU 731 default register memory size of 1024 words 0400h would be returned in the following format Least Significant Most Significant o m 5 The amount of program memory occupied by the logic program Also appears on the Logicmaster 90 PLC Memory Usage screen in the User Program field GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 43 Communication Errors Serial link communication errors are divided into three groups
58. 244906 Hos 20 gt COMPUTER nxp lt q SERIES 90 OR WITH SERIES 90 GND CMM WITH CMM Figure E 2 RS 232 Direct Connection Without Flow Control In the above case there is no data flow control that is both devices can transmit at any time and there is no check of the communications line before transmission When modems are used without data flow control both devices can transmit at any time and there is no check of the transmission line or that the carrier is present 244907 Host 22 gt 4 COMPUTER lt SAFN gt SERIES 90 OR RAD MODEM MODEM RAD WITH SERIES90 TELEPHONE GND CMM WITH CMM LINE Figure E 3 RS 232 Modem Connection Without Flow Control When flow control is desired the RTS and CTS control circuits can be used to permit the fol lowing RTS The transmitting device can signal the transmitting modem that data is Requested To be Sent CTS The transmitting modem can signal back to the transmitting device that it is Clear To Send the data Information on modems can be found in Appendices I J and For a complete ex planation of control signal usage with modems as well as the electrical and mechanical characteristics of the interface see your modem manufacturer s user s manual as well as the applicable standard see the topic EIA Standards in Appendix L RS 4
59. 3 ft 4 rent 45 ft 6 rent pt 7 ft 8 Gen rent 2nd rent ft 1 rent Et 2 rent 3 rent ft 4 rent ft 6 Et rent ft 8 Gen Gen Gen Gen Gen Gen Gen Gen Gen TRANSMITTER CRC 16 ALGORITHM Remainder data byte CRC Polynomial CRC Polynomial CRC Polynomial CRC Polynomial CRC data byte CRC Polynomial CRC Polynomial CRC Polynomial CRC Polynomial CRC Polynomial CRC Polynomial Transmitted CRC GFK 0582D MSB2 1111 0000 1 0111 0011 010 001 0100 0010 010 000 0100 0010 010 000 0100 0010 010 1000 0000 1 ag 1 1 0000 1 11 0 0000 0000 000 LSB Flag 0 000 0111 0 00 000 0010 000 0 0000 000 000 0000 000 0001 1 Protocols SNP SNP X MSB2 Rcvr CRC after data 15 byte Trns CRC Current CRC hift hift hift hift hift hift hift hift OR urrent CRC 1 CO Oo 0 0202 0 29 0 RECEIVER CRC 16 ALGORITHM 2nd byte trns CRC hift 1 8 yields 1110 0000 1110 0111 0011 0001 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 ALL ZEROES 0010 0000 0010 0001 1000 1100 1110 OTTI 0011 0001 0000 0000 LSB2 0001 0001 0000 0000 0000 0000 0000 0000 1000 0100 0010 0010 0000 0000 0000 0000 FOR RECEIVER 0100
60. 4 0 a special case occurs when both serial ports on the CMM311 module are configured as SNP slave devices The ID value 1 in a Cancel Datagram request received at either slave device will cancel all established Datagrams on both slave devices in the same CMM There is no interaction between Datagrams established on both ports of a CMM711 module Series 90 70 There is no interaction between Datagrams established in any CMM module and the built in CPU slave device or between different CMM modules This problem was solved in CMM311 version 4 0 released in July 1996 If you have an older version of this module that experiences this problem you can correct this by upgrading to the latest version Contact your GE Fanuc distributor for details 7 56 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols CCM SNP SNP X Section 4 SNP X Protocol This section contains a complete description of the SNP X protocol for users writing an SNP X communications driver Topics covered in this section are Overview of SNP X Protocol SNP X Protocol Sequence SNP X Message Structure SNP X Commands SNP X Slave State Machine Overview of SNP X Protocol The SNP X Protocol is a simple protocol that provides fast data transfer between GE Fanuc PLCs and related equipment SNP X provides significantly faster data transfer than does the SNP protocol However the SNP X protocol does not pr
61. 90 CPU The high order byte of the starting point number and number of bytes fields is sent as the first byte The low order byte is the second byte in each of these fields RESPONSE The byte count is a binary number from 1 to 256 0 256 It is the number of bytes in the normal response following the byte count and preceding the error check The data field of the normal response is packed output status data Each byte contains 8 output point values The least significant bit LSB of the first byte contains the value of the output point whose number is equal to the starting point number plus one The values of the output points are ordered by number starting with the LSB of the first byte of the data field and ending with the most significant bit MSB of the last byte of the data field If the number of points is not a multiple of 8 then the last data byte contains zeros in one to seven of its highest order bits GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 29 MESSAGE 02 READ INPUT TABLE FORMAT Func Starting Number of Error Check Point No Points Address Func Byte Data Error Check 02 Count Normal Response QUERY An address of 0 is not allowed as this cannot be a broadcast request The function code is 02 The starting point number is two bytes in length and may be any value less than the highest input point number available in the attached Series 90 CPU starting point number is
62. 961 Inputs 1 10 Slave device Main Program name _ MAIN Words 12 15 contain the Main Program name of the slave device Word 1 00009 0009 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 Word 7 07205 1C25 Word 8 00001 0001 Word 9 00010 000A Word 10 00070 0046 Word 11 00001 0001 Word 12 16717 414D Word 13 20041 4 49 Word 14 00049 0031 Word 15 00000 0000 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Slave Task Memory Address P1 Number of Master Memory Type elements to write Master Memory Type to write data from I Master Address to write data from Input 1 Characters 1 and 2 4Dh A 41h Characters 3 and 4 I 49h 4Eh Characters 5 and 6 1 31h null Characters 7 and 8 null null The Number of Master Memory Type elements to write field is specified in units consistent with the unit length of the Master Memory Type See Table 6 1 for valid memory types and ad dresses Note The SNP master on the CMM module and CPU 351 and CPU 352 serial ports limit this command to a total data length of 2048 bytes 1024 words GFK 0582D Chapter 6 SNP Service 6 43 s Read Program Block Memory 07206 1C26 Available Modes Master for communication with Series 90 70 slave device only Description Remote comma
63. A 15 15 CTS A RTS B 14 e 14 RTS B 5 GND 7 7 GND SHLD 1 1 SHLD gt lt lt PS PS gt lt gt lt gt lt Slave Device Le ke lt gt lt be lt be Slave Device To Other Slave Devices To Other Slave Devices Maximum OE multidrop Maximum of 8 devices on a multidrop Specifications IC690ACC903 Port Isolator Mechanical RS 485 15 pin D shell male for direct mounting to serial port on the programmable controller 15 pin D shell female for communication cable Installation Hardware Two thread connector thumbscrews Recommended torque 8 in Ibs 0 9 Newton meter These are supplied with Isolator Two user supplied 46 32 4mm thread panel mounting screws Recommended torque 12 in Ibs 1 4 Newton meter Electrical Voltage Supply 5VDC supplied by port Typical Current 25 mA 100 mA available for external equipment Ground Isolation 500 Volts Conformance EIA 422 485 Balanced Line Operating 0 60 32 140 Temperature Baud Rate Those supported by PLC Note This appendix is based upon Data Sheet GFK 1663 Appendix G IC690AC903 Port Isolator G 7 Appendix H SNP Multidrop SNP Multidrop Overview As used in this appendix the term SNP Multidrop refers to a serial communications system that allows a programming device called the master or host such as a personal computer running GE Fan
64. A 3 xii Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Contents Appendix B ASCII Code List B 1 Appendix CCM Compatibility C 1 Appendix D Compatibility 1 Appendix E Serial Line Interface E 1 Information COde s eto veh VELIE E Ee e E 1 Transmission Errors and Detection E 2 NOISe EIOS La aM eet p Es T ERROR E 2 Transmission Timing Errors E 3 Asynchronous Transmission E 4 Serial Communications Line E 5 Modems eine a ete NRI Ne EI ERN aei C red s E 5 Interface Standards E 6 Appendix Communication Networks F 1 Point Point s ce REC AR EERE ERR Bg 8 F 1 MlultidzOp Rp DELE CU PRU RN ERRORI hon F 2 Modem Transmission 3 Appendix IC690ACC903 Port Isolator 1 Appendix H SNP Multidrop HA SNP Multidrop Overview H 1 Cable and Con
65. A programmer computer can be attached to port 1 or port 2 while RTU Slave mode is active on the port For multi drop connections the CPU must have been configured to use an ap propriate PLC ID Note that for a multi drop SNP connection with the port currently config ured for RTU the SNP ID associated with the CPU settings must match the multi drop ID The programmer must use the same serial communications parameters baud rate parity stop bits etc as the currently active RTU Slave protocol for it to be recognized When the CPU recognizes the programmer the CPU removes the RTU Slave protocol from the port and installs SNP Slave as the currently active protocol The SNP ID modem turnaround time and default idletime for this new SNP Slave session are obtained from the configured CPU settings not the port 1 or port 2 configurations Connection should be established within 12 seconds When the programmer connection has been enabled normal programmer commu nications can take place Failure of the programmer to establish communications within 12 seconds is treated as a Loss of Programmer Communications The programmer may send a new protocol via configuration or a Serial Port Setup COMMREQ COMMREQs not supported by SNP Slave protocol are rejected If a new protocol is received it will not take effect until the programmer is disconnected After the programmer is removed there is a slight delay equal to the configured SNP T3 time ou
66. ACK TIMER to listen for an ENQ from the other side before attempting to send another ENQ character A collision is assumed to occur even if an ENQ character is not received from the other device The table below shows the back off times used for collision handling Table 7 6 Collision Back Off Times for ENQ ACK TIMER Data Rate ID Bit 1 Time milliseconds Time milliseconds The illustration below shows the sequence for setting the back off time by comparing the bits of the device IDs Device 1 ID 7 Device 2 ID 3 8 ID Bits 1 8 ID Bits 1 00000111 Bits compared after 1st collision Bits compared after 2nd collision Bits compared after 3rd collision Figure 7 4 Sequence for Setting Back Off Time Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X CCM Master Slave Mode This section describes the normal protocol flow in master slave mode and a special Q sequence protocol exchange available only in master slave mode Normal Sequence Protocol Flow In Normal sequence master slave communications the master ENQ sequence is 3 characters The format and description of the characters is shown below Enquiry Data sent from Target source master to Address target slave 2 Response Data sent from Target target slave to Address source master Target Address 2 Figure 7 5 Enquiry Format Master Slave Normal Sequen
67. BTM Version of the Bus Transmitter Module must be located to the right of all other GE Fanuc boards version B must be located in slot 2 of rack 0 If the PLC system will have more than one rack a Bus Re ceiver Module BRM must be located in slot 1 of each expansion rack The CMM can be placed in any slot not already allocated in any rack with the following cau tions The configuration files created by the Logicmaster 90 configuration software must match the physical configuration of the modules If they do not the controller may not operate as expected Any faults will be logged in the PLC fault table When CMMs are a Series 90 70 rack all the slots between the CMM and the PLC CPU must be occupied If any of these slots are empty the CMM will not be able to communi cate across the backplane to the Series 90 70 PLC CPU The Series 90 30 CMM must be in the main rack baseplate with the PLC CPU Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Modules Installing the CMM in the Rack To install the CMM in the rack follow these steps 1 Setthe PLC CPU to STOP This will prevent the local PLC application program if any from initiating any command that may affect the operation of the module Power down the Series 90 PLC system Locate the desired rack and slot Slide the CMM completely into the slot The three LEDs will be at the top of the board Press down firmly to l
68. Characters 7 and 8 of Local Subblk or Main Pgm name null Word 17 00002 0002 Number of Point Formats to follow Word 18 00008 0008 Slave Point format 1 Memory Type R Word 19 00201 00 9 Slave Point format 1 Address R201 Word 20 00010 000A Slave Point format 1 count 10 registers 201 210 Word 21 00016 0010 Slave Point format 2 Memory Type I in byte mode Word 22 00001 0001 Slave Point format 2 Address byte 1 Word 23 00002 0002 Slave Point format 2 count 2 bytes 16 Inputs 11 16 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 5 The Slave Device Type field specifies whether the slave device is in a Series 90 70 or in a Se ries 90 30 90 20 PLC Unpredictable operation will result if this value specifies the wrong slave device type The Datagram Type field designates the datagram to be established as either a normal or perma nent datagram normal datagram remains established in the slave PLC for the life of the communication that is until another SNP Attach or Update Real Time Datagram service is performed A permanent datagram remains established in the slave PLC for the life of the PLC that is until the datagram is cancelled power is cycled to the PLC or the datagram s control program is deleted The Size of the Datagram area field specifies in bytes the size of the datagram data area This area represents th
69. Commands 5 3 CEM Memory Types RR REA RERO ER A eus 5 5 The CCM Scratch Pad Memory Type 6 5 6 Diagnostic Status 5 8 CCM Memory Addressing and Data Lengths 5 9 CCM Memory Addresses 5 9 CCM Data engin as WR IU 5 10 Section 2 Status Word 5 11 Section 3 CCM COMMREQ Programming Examples 5 14 Ladder Program Example 5 14 CCM Command Examples 5 16 Set Response 06001 1771 5 16 Clear CCM Diagnostic Status Words 06002 1772 5 17 Read CCM Diagnostic Status Words to Source Registers 06003 1773 5 17 Software Configuration Command 06004 1774 5 18 Read Target to Source Memory 06101 06103 1705 1707 5 19 Read Q Response to Source Register Table 06109 17DD Q 5 20 Single Bit Write 06110 17DE 5 21 Write to Target from Source 06111 06113 17DF 17E1 5 22 Chapter 6 SNP Service 525257855 RSS X OR LOGS ROGER OR OE UR 6 1 Section 1 The SNP
70. D s p f D 9 D e p owsoesrnniemss E f p 3 p enemies 2 p sooo f p aw fs p e owes nemici E fs p s p eem u j p e 0 Valid memory types when referencing Series 90 PLCs Bit functions can only be write requests GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 5 7 6 CCM Header Example In the following example the source device ID 02 reads 10 regis ters beginning at Register 00986 from the target device ID 01 Table 7 4 CCM Header Example Data Target ID MSB 0011 0000 Target ID LSB 0011 0001 Data Direction Read 0011 0000 Target Memory Type Register 0011 0001 Target Memory Address MSB 0000 0000 Target Memory Address NMSB 0011 0011 Target Memory Address NMSB 0100 0100 Target Memory Address LSB 0100 0001 Complete Block Count MSB 0011 0000 Complete Block Count LSB 0011 0000 Bytes Last Block MSB 0011 0001 Bytes Last Block LSB 0011 0100 Source ID MSB 0011 0000 Source ID LSB 0011 0010 End Transfer Block 0001 0111 Block Check Character LRC 0000 0001 LRC value is the vertical Exclusive OR result of bytes 2 15 Any like numbers cancel each other to zero Data Transfer After receiving a positive acknowledge ACK to the header sequence data transfer will start Data will be written to or read from the responder depen
71. Halted 0001 Run Disabled 0101 Suspended 0010 Stopped 0110 Stopped IO Enabled 0011 Stopped Faulted 2a PLC CPU Major Type Codes 59070 PLC CPU 12 0Ch Series 90 70 PLC CPU 59030 PLC CPU 16 10h Series 90 30 PLC CPU 2b Minor CPU Type Codes Minor Type Codes for Series 90 70 CPUs 84 54h for CFR782 80 50h for CPU780 24 18h for CPU924 Drammgum 3 Located in the same position as in the Series Six scratch pad Series One Three Five PLC users who need to determine the node type should note this location and make drive modifications where necessary 4 Scratch Pad Bytes 18h 33h Bytes Length of Memory Size Returned In Note Four bytes hold the hexadecimal length of each memory type with the most significant word reserved for future expansion For example the 731 default register memory size of 1024 words 0400h would be re turned in the following format Least Significant Most Significant mim 0 5 The amount of program memory occupied by the logic program Also appears on the Logicmaster 90 PLC Memory Usage screen in the User Program field Chapter 5 CCM Service 5 7 Diagnostic Status Words 5 8 In addition to the CCM Status Word which is automatically transferred from the CMM to the CPU there are 20 Diagnostic Status Words which are maintained and updated within the CMM The Diagnostic Status Words are not automatically transferred to th
72. ONLY PORT 2 CAN SUP TO OTHER CMM s PORT RS 422 RS 485 MAXIMUM OF 8 CMM s ON A MULTIDROP TERMINATE THE RD B SIGNAL ONLY AT END OF MULTIDROP CABLE Figure 8 11 CMM or Host Computer to Multiple CMMs 4 Wire Multidrop Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Cable Diagrams Converters PIN PIN 845237 salo c 13 50 8 21 T 25 RD B gt E RD A 13 i Fg 9 SD A gt 00 SERIES 90 SERIES 9i lt RD B 25 Fg Fg 21 SD B CMM op e 24 E pg 24 rERM E 90 Fg Fg 0 PORT PORT RTS A 10 10 RTS A 00 1 1 RTS B 22 Fg Fg 22 RTS B p 9 OR 5 11 11 2 2 CTS B 23 23 gt 9 ov 7 7 gt o lt su 1 w AJ 1 sup FR 0 25 PIN 25PIN 0 25 PIN 25 PIN FEMALE MALE TERMINATE CONNECTION ON THE CMM MALE FEMALE JUMPER INTERNAL 120 OHM RESISTOR ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure 8 12 CMM to 2 Wire RS 422 RS 485 MAKE CONNECTIONS SHIELDED INSIDE 245238 TWISTED
73. Peer to Peer 7 7 Piggyback Status PLC Status Word 6 37 PLC Major Minor Type 6 51 PLC Short Status SNP Command 646 PLC Status Word 6 37 PLC Sweep calls Serial 9 13 Point Format 6 59 Memory Type Restrictions 6 60 Point To Point F 1 Port 1 pinout 3 9 Port Status read 9 21 Port serial Series 90 standard J 3 10 Ports RS 422 described Preset Multiple Registers RTU message 7 39 Preset Single Register RTU message 7 34 Privilege levels for Serial Port 2 M 3 Privilege Levels in PLC 6 39 Programming Examples CCM Program Example 5 14 SNP Program Example 6 16 Protocol Definition CCM Protocol 7 2 RTU Protocol 7 20 SNP Protocol 7 47 SNP X Protocol 7 57 Protocol Definition CCM RTU SNP SNP X 7 1 Protocol errors 9 13 GFK 0582D GFK 0582D Protocols communication release informa tion Q Q Sequence 7 10 7 20 Quick Guide to the Manual 1 1 R Read Analog Inputs RTU message 7 32 Read Bytes 9 28 Read CCM Diagnostic Status Words to Source Registers CCM Command 5 17 Read Diagnostic Status Words SNP Com mand 6 22 Read Exception Status RTU message 7 35 Read Input Table RTU message 7 30 Read Output Table RTU message 7 29 Read Program Block Memory SNP Com mand Read
74. Point Formats are shown above in Words 18 20 and in Words 21 23 A 3 word Point Format is required for each Point Format counted in Word 17 A maximum of 32 point formats is allowed in a datagram Chapter 6 SNP Service 6 59 6 60 Note It is strongly recommended that byte oriented memory types be used in Point Formats instead of bit oriented memory types A Series 90 70 slave device does not permit bit oriented memory types in a data gram Point Format under any circumstances Bit oriented memory types are permitted in datagram Point Formats for a Series 90 30 slave device with the following restriction The entire bit type Point For mat must fit within a single aligned byte of memory A permissible byte of bit oriented memory contains only 8 memory elements 1 to 8 9 to 16 N 8 1 to N 8 8 etc The Point Format may begin with any element but it length must not extend beyond the same memory byte as the starting element For example a Series 90 30 datagram can contain a 6 bit Point Format contain ing Inputs 20133 to 138 but not Inputs 96137 to 142 The latter Point Format exceeds a single aligned memory byte 76133 to 96140 Note The length of the SNP COMMREQ Data Block varies with the number of Point Formats defined in the Establish Datagram command The Data Block Length Word 1 of the COMMREQ must be equal to 3 Word 17 11 Series 90 PLC Serial Communications User s Manual Novem
75. RD B at the master device end On the CMM311 only Port 2 can support RS 422 RS 485 Figure 8 14 2 Wire RS 422 RS 485 Master to CMM PIN 8 N 10 SD 11 RD B pal ps Fa 12 30 RTU RD B 13 SD i 9 TERM cone muni dius CTS 15 CTS CTS i 14 1 SHLD Connector Depends MALE on RTU Master TERMINATION CONNECTIONS On the CPU end jumper pins 9 and 10 as shown to connect internal 120 ohm resistor If RTU master device does not have internal termination resistor connect 120 ohm resistor across RD A and RD B at the RTU master device end On CPUs 351 352 and 363 only Port 2 supports both RTU and RS 422 RS 485 Port 2 15 PIN FEMALE Figure 8 15 2 Wire RTU RS 422 RS 485 Master to Series 90 30 CPU PIN 244922 fc lt SD A mm e SC 13 RD A 5 0 25 RD B d 0 us 1 1 9 sD 2 SERIES 90 pul ol RD B XX 21 sog 90 om RT y 00 24 9 0 PORT Master 5 0 Lg Lg qo TERM 5 1 Device 9 21 RTS Fg RTS A L 1 0 P 0 Fg Li RTS B L 0 to S pu
76. RS 485 RTS 10 23 RS 485 CTS B RS 485CTS A u X 24 TERMINATION RD TERMINATION CTS 22 25 j RS 485 RD B RS 485 RD A ts Figure 2 3 Serial Port Pin Assignments for the Series 90 70 CMM Note In the figure above SD Send Data and RD Receive Data are the same as TXD RXD used in the Series Six PLC A and B are the same as and and denote inputs and A and denote outputs To terminate the RS 485 CTS input signal jumper pins 11 and 12 to terminate the RD input signal jump er pins 24 and 25 2 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D CCM Modules Serial Ports for the IC693CMM311 The Series 90 30 CMM has a single serial connector which supports two ports Port 1 applica tions must use the RS 232 interface Port 2 applications can select either the RS 232 or RS 485 interface NOTE When using the RS 485 mode the CMM can be connected to RS 422 devices as well as RS 485 devices The connector pin assignments for the Series 90 30 CMM are shown below 244357 SHIELD LON J4 15 232 TD PORT 2 PORT 1 RS 232 TD 5 95 232 CTS PORT 2 PORT 1 RS 232 RD d amp RS 232 RD PORT 2 PORT 1 RS 232 RTS 4 X 7 4 RS 232 DTR PORT 2 PORT 1 RS 232 CTS O Y d amp RS 232 DCD PORT 2 NO CONNECTION 3 1 RS 232 RTS PORT 2 SIGNA
77. Read data 11 RD B In Read data 12 SD A Out Send data 13 SD B Out Send data 14 Request to send 15 CTS In Clear to send Use the termination resistor if the Port Isolator is used in port to port mode or at the end of a multi drop configuration To terminate the RD balanced line place a jumper wire from pin 9 to pin 10 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D IC690ACC903 Port Isolator Logic Diagram Optical Isolation 15 pin male D connector 15 female D connector 11 SDB 4 11 SDA lt 10 paste RD A 9 121 ohms lt RT RD B SB 18 gt 08 RD A Sy 12 gt 80 4 Output Enable Always on single port mode 45V Multidrop Switch RTS Driven nultidrop mode Output Enable CTS B 14 gt RTS CTS A 6 gt RTS A RTS B lt 8 8 lt CTS B 5 lt 15 5 CTS A 5Vde p DC DC 5Vde Converter GND gt lt GND Figure G 2 690 903 Block Diagram GFK 0582D Appendix G IC690AC903 Port Isolator G 3 Installation G 4 The Isolator is packaged in a contoured plastic enclosure designed for either direct attachment to a serial port or through a 12 extender cable for panel mounted applications Two M3 thumb Screws secure the device to its mating connec
78. SNP Protocol provides several timers whose values may be adjusted by the user to allow the serial communication link to run as efficiently as possible for a given situation The default value for each SNP timer is selected by the CMM configuration Timeout parameter Each of the four Timeout selections establishes a set of values for all SNP timers The default SNP timer values for each configuration selection are listed in Table 4 SNP Timer Values for Timeout Selections Non default SNP timer values must be provided by the Long Attach SNP command The Long Attach command issues an SNP Parameter Select message to negotiate new timer values between the master and slave devices SNP timers revert to the configured default values when a new Attach request is sent At tach command Non default SNP timer values must be re established after each new Attach request Previously established SNP timer values are not changed by the Update Real Time Datagram request Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Protocols CCM RTU SNP SNP X Each of the SNP timers is described below Note that Modem Turnaround Delay and Transmis sion Time are not included in the SNP timer values unless specifically stated Modem Turn around Delay and Transmission Delay are described following the timers Table 7 14 SNP Timer Descriptions SNP Timer Timer p Dmm Minimum Turn Minimum MEIN T
79. Send Data Block Increment Send NAK Start DATA TIMER DATA COUNT Start SOH TIMER Remain in State 6 Send data block Transition to State 3 Start x Sua TIMER DATA ACK UMER Else Transition to State 5 Remain in 5 0 Send EOT Transition to State 1 F If direction is read i d EOT Transition to State 1 P IfDATA COUNT lt 3 Else Increment Get data from PLC DATA BLK COUNT Memory K Send EOT Send NAK to bad block Send data block Transition to State 1 Start STX_TIMER Start Transition to State 7 DATA_ACK_TIMER L Transition to State 1 Transition to State 6 Else Send If last block j Transition to State 7 Transition to State 1 Q Start HEADER TIMER Else write data Transition to State 4 Else Remain in State 6 Get PLC Data Send Data Block R Start DATA TIMER IfENQ COUNT lt 32 Start Transition to State 8 Increment ENQ COUNT Send ENQ Start TIMER Transition to State 2 DATA TIMER Transition to State 6 Else Send EOT Transition to State 1 GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 15 CCM Master State Table State Wait for Wait ENQ Event Data for Colli Q RSP sion Send ENQ State 2 10 Receive PLC Data Receive ACK Receive NAK Receive Sen
80. Series 90 PLC Serial Communications User s Manual April 2000 GFK 0582D Appendix GFK 0582D M Series 90 Micro PLC Serial Ports The material in this appendix is based upon information in the Series 90 Micro PLC User s Manual 1065 version F or later Serial Ports Port 1 on the Micro PLC is intended to be used as the programmer serial port second RS 422 compatible serial port to be used by monitoring devices is provided on 23 and 28 point Micro PLCs Serial Communications Protocols Table M 1 Communication Protocols Supported Micro SNP SNPX Slave SNP SNPX Master 4 Wire 2 Wire PLCs Slave Slave 14 point Port 1 not supported Port 1 Port 1 releases Rel 3 00 and later Rel 3 10 and later 23 point Ports 1 and 2 Port 2 Port 2 Port 2 Rel 3 00 and later Rel 3 00 and later Rel 3 00 and later Rel 3 10 and later 28 point Ports 1 and 2 Port 2 Port 2 Port 2 Rel 2 01 and later Rel 3 00 and later Rel 3 00 and later Rel 3 10 and later Also requires the following versions or later hardware IC693UDRO0OILPI IC693UDRO02LP1 IC693UAA003JP1 IC693UDR005JP1 IC693UALO006BPI IC693UAA007HP1 and IC693UDROIOBPI SNP SNPX Protocols The full set of SNP X Master commands as described earlier in this manual in 5 Commands is supported on Port 2 of the 23 and 28 point Micro PLCs RTU Slave Protocol This protocol is described in Chapter 7 RTU
81. Series One Series Three DCA CMM or Host to Multiple CMMs CMM to CMM 2 wire CMM to Multiple CMMs 2 wire Also a section on 2 Wire and 4 Wire connections is included Note The CMM modules do not support hardware flow control in an RS 422 RS 485 connection arrangement Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Serial Cable Diagrams and Converters PIN PIN 344922 esu 9 Ly Ko 0 lt sD B 21 NT e 25 gt 50 SERIES 90 09 lt RD A 13 XU 9 SD A 09 SERIES 90 0 lt 25 21 SD B o 0 CMM of e 1 PORT 00 24 i 74 24 UP 0 lt RTS A 10 10 OR OR 2 0 s RTS B 22 pg Fg 22 pur S E gt 00 2 0 CTS A 11 bg d 11 S LL 00 014 Fg Fg CIS Ks 0 0 CTS B 23 P3 i 23 0 0 0 ov 7 CTS FA lo 0 0 SHLD A AJ ov E gt 0 LO 25 PIN 25 PIN 25 PIN 25 PIN FEMALE MALE TERMINATE CONNECTION ON THE CMM MALE FEMALE JUMPER INTERNAL 120 OHM RESISTOR ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure 8 7 CMM to CMM RS 422 RS 485 PIN 244923 PIN 2 lt 24 us lt RDB 235 7
82. Type to store Datagram Word 14 00201 00C9 Master Address to store Datagram Register 201 Word 15 00008 0008 Master Memory Type to store Piggyback Status R Word 16 00171 00AB Master Address to store Piggyback Status Register 171 The Datagram ID field specifies the particular permanent datagram to retrieve This value was previously returned to the PLC application program upon successful completion of the Establish Datagram command The Slave SNP ID field specifies the SNP ID of the desired slave device The SNP ID field is 8 bytes long For a Series 90 30 or Series 90 70 PLC slave device the SNP ID can be a maxi mum of 7 bytes followed by a null character 0 and can include any ASCII character Note that Logicmaster only supports a 6 byte SNP ID for a Series 90 30 For a Series 90 20 PLC slave device the SNP ID is restricted to a maximum of 6 bytes followed by a null character 0 Chapter 6 SNP Service 6 63 A null SNP ID Character 1 0 can be used to select to any slave SNP device regardless of its assigned SNP ID It should be noted that a null SNP ID can only be successful in a point to point wiring configuration In a multidrop wiring configuration all SNP slave devices would respond to any Long Attach specifying a null SNP ID This procedure will produce unpredict able results and should not be attempted The Master Memory Type and Address fields must be selected to allow enough room to accom modate the
83. Word 6 00000 0000 Word 7 07201 1C21 Word 8 00002 0002 Word 9 16720 4150 Word 10 21331 5353 Word 11 00049 0031 Word 12 00000 0000 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Requested Privilege Level Password bytes 1 and 2 P 50h A 41h Password bytes 3 and 4 S 53h S 53h Password bytes 5 and 6 1 31h Password bytes 7 and 8 null null 6 38 The Requested Privilege Level field is a value between 0 and 4 for Series 90 70 PLCS and be tween and 4 for Series 90 30 or Series 90 20 PLCs In addition the privilege level can be set to a value of 1 When the value of 1 is specified the highest privilege level with the pro vided password is accorded the requestor The Password field specifies the password required for access to the desired privilege level If a password is not entered set all bytes in this field to null 0 Note The CMM module requires privilege level 2 at the PLC CPU for correct opera tion To avoid incompatibility with existing SNP master implementations an SNP slave in the CMM module will accept any privilege level and password in a Change Privilege Level request the CMM slave device will always remain at privilege level 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 6 The following table describes the meanin
84. X Attach Prepare to read X Attach Response Start Response Timeout timer Transition to State 2 Cancel Response Timeout timer If improper X Attach Response message Error Abort all master processing in progress Transition to State 1 Else User Cmd is now complete Transition to State 3 for next cmd User Cmd is now complete always successful Transition to State 3 for next cmd If User X Write fetch data to be written Build and send X Request message to slave If broadcast X Request Start Broadcast Delay timer Else directed X Request Prepare to read Response msg Start Response Timeout timer If X Request with Buffer Transition to State 4 Else X Request without Buffer Transition to State 5 Cancel Response Timeout timer If improper Intermediate Response msg Error Abort all master processing in progress Transition to State 1 Build and send X Buffer message to slave Prepare to read Response msg Start Response Timeout timer Transition to State 5 Cancel Response Timeout timer If improper X Response message or fatal error code returned Error Abort all master processing in progress Transition to State 1 If non fatal error X Response msg contains error code Else successful response If X Read response Distribute data returned from slave device User Cmd is now complete Transition to State 3 for next cmd Cancel Response Timeout timer If improper X Response message or fatal er
85. a few seconds If you cannot connect see the next section SNP Multidrop Troubleshoot ing Connecting your VersaPro Programmer to a PLC on a Multidrop System Connect your programmer to the programmer connection point for the multidrop system From the main VersaPro screen click Tools on the Menu bar Click Communications Setup on the Tools menu The Communications Configuration Utility CCU window will appear You must create a separate communications setup Device for each CPU that you wish to communicate with on the multidrop network Start by clicking the New button The Add New Device window will appear Fill in the following fields Device Name We recommend you choose a name that will help you remember which CPU on the multidrop network it applies to Device Model The model of PLC that you wish to connect to Select from the drop down list Default Port The serial port on your programmer that you will use for your mul tidrop communications such as COMMI for example Select from the drop down list SNP ID The unique SNP ID of the PLC that you wish to connect to Leave the rest of the fields blank Click the OK button to close the Add New Device window and save your device setup Your new setup should appear in the Device Names column of the CCU window If you wish to create setups for other PLCs repeat this Add New Device process for each one Click OK to close the CCU window
86. a Series 90 70 PLC slave device supports this service a Series 90 20 or Series 90 30 slave device will produce unpredictable results Example Command Block Write to the attached slave device Program Block Memory L Words 1 10 from master de vice Register Memory Registers 201 210 Slave device Main Program name MAIN slave device Program Block name PBLOCK1 Words 12 15 contain the slave device Main Program name words 16 19 contain the slave device Program Block name Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 Word 13 Word 14 Word 15 Word 16 Word 17 Word 18 Word 19 00013 000D 00000 0000 00008 0008 00000 0000 00000 0000 00000 0000 07207 1C27 00001 0001 00010 000A 00008 0008 00201 00C9 16717 414D 20041 4E49 00049 0031 00000 0000 16976 4250 20300 4F4C 19267 4B43 00049 0031 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Slave Program Block Memory Address 1 1 Number of Master elements to write Master Memory Type to write data from Master Address to write data from Register 201 Characters 1 and 2 M 4Dh 41h Characters 3 and 4 I 49h 4Eh Characters 5 and 6 1 31h null Characters 7 and 8 null null Characters 1 and 2 P 50h B 42h Characters 3 and
87. and 2 4Dh 41h Characters 3 and 4 I 49h 4Eh Characters 5 and 6 1 31h null Characters 7 and 8 null null The Number of Master Memory Type elements to read field is specified in units consistent with the unit length of the Master Memory Type dresses See Table 6 1 for valid memory types and ad Note The SNP master on the CMM module and CPU 351 and CPU 352 serial ports limit this command to a total data length of 2048 bytes 1024 words 6 42 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Write Task Memory 07205 1C25 SNP Service 5 Available Modes Master for communication with Series 90 70 slave device only Description Remote command The slave device must be attached before executing this command see At tach command master sends a Write request with data the slave responds This service provides the master with the capability to write the Main Data segment reference table of the slave s main control program task When the memory type of the master reference table does not specify word access the slave data will be padded with the value 0 as necessary Only a Series 90 70 PLC slave device supports this service a Series 90 20 or Series 90 30 slave de vice will produce unpredictable results Example Command Block Write to the attached slave device Main Control Program Task Memory P Word 1 from master device Input Memory
88. and any individual slave Un like SNP an SNP X session can also be established simultaneously with each and every SNP X slave device on a multidrop serial link SNP X commands are then addressed to the desired slave device via the slave s SNP ID GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 57 Error Handling Either SNP or SNP X operation can be performed on the same wiring network as determined by the type of communication session SNP or SNP X Only one session SNP or SNP X can be active at any time Either type of session may be established via a Long Break and the ap propriate Attach or X Attach command During an SNP X session only SNP X commands are recognized SNP commands are ignored during an SNP X session Likewise SNP X commands are ignored during an SNP session SNP X provides two types of errors hard errors and soft errors Hard errors are non recoverable These errors occur when the communication session cannot be continued Hard errors include serial transmission errors checksum framing parity or BCC errors and protocol errors message type next message type or length When an SNP X re quest message cannot be received intact that is a serial transmission error has occurred the slave device does not send a response to the master The master times out waiting for the re sponse and aborts the SNP X communication session When the SNP X request message is correctly received and the slave
89. and may optionally contain one additional data buffer message To avoid confusion at the master the slave never sends a response to a broadcasted command Only some SNP X commands can be broadcasted Since a broadcasted command prohibits a response an SNP X command to read data is not viable Both the master and slave examine each received message for errors Serial transmission errors parity framing overrun Block Check Code are fatal since the message was not received in tact no response can be generated Protocol violations message type error next message info error are also fatal but an error response message can be returned The SNP X session is ter minated at once by a fatal error Service request errors invalid request code parameters or data are non fatal an error response is returned and the SNP X session remains active If the slave device detects an error and is able to return a response that is the message from the master was correctly received regardless of content the slave returns an error code within the X Response message If a reportable error is detected during an X Request message which uses a data buffer an X Response message containing the error code is returned in lieu of the normal Intermediate Response message Chapter 7 Protocol Definition RTU SNP and SNP X 7 63 Establish Session To establish an SNP X communication session the master first sends a Long Break waits for the T4 time int
90. another device and documents standard GE Fanuc serial products such as converters isolators and cables The chapter is divided into several sections Section 1 Cable Assembly Specifications Section 2 RS 232 Cables Section 3 RS 422 Cables Section 4 Station Manager Serial cable IC693CBL316 Section 5 Multidrop cable IC690CBL714A Note Information on the IC690ACC903 Port Isolator can be found in Appendix G and information on the IC690ACC901 Miniconverter Cable kit can be found in Appendix 8 1 Section 1 Cable Assembly Specifications The cable assembly presents one of the most common causes of communication failure For best performance construct the cable assemblies according to the recommended connector parts and specifications Connectors Cable connector to CMM ports 1 or 2 Male D Subminiature Type Cannon DB25P sol der pot with DB110963 3 Hood or equivalent standard RS 232 connector Connectors for ports 1 and 2 are located on the Series 90 70 CMM module Both ports are brought out on a single connector on the Series 90 30 CMM module An IC693CBL305 Wye cable is provided with each Series 90 30 CMM module that provides a separate connector for each port Connector to external device specified by external device manufacturer Serial Cable Recommendations Length maximum 50 feet 15 meters for RS 232 50 feet 15 meters for RS 422 RS 485 without isolation at the
91. by GE Fanuc and example applications please see Appendix I The following main topics are covered in this chapter Setting PLC CPU Communications Parameters in Logicmaster Using the Logicmaster Auto Dialer Utility Using Windows HyperTerminal Communications Utility GFK 0582D J 1 Setting PLC CPU Communications Parameters Logicmaster 1 On LM90 Rack Configuration screen zoom into the CPU by placing the cursor on it and pressing F10 The main CPU configuration screen will appear as shown next ER E E LE T gt SERIES 98 38 MODULE IN RACK SLOT SOFTUARE CONFIGURATION SLOT Catalog SERIES 80 38 CPU MODEL 331 1 CPU331 IOScan Stop NO Baud Rate Pur Up Mode LAST Parity Logic Cfg Stop Bits Registers TT 14188 Second Count Passwords ENABLED Idle Time Seconds Chksum Urds 8 Sweep Mode NORMAL Faults DISABLED Sweep Tmr OFFLINE LMS LESSON PRG LESSON CONFIG VALID REPLACE 2 If using a CPU that has ports in addition to the Standard SNP port decide which serial port you will use The main LM90 CPU configuration screen shown above has settings for the Standard SNP port that is accessed through the connector on the PLC power supply in Rack 0 In the case of CPUs that have two additional serial ports these have their own screen for setting communications parameters This additional
92. communication session with the slave device if the proper session is not already active The master then sends an X Read request to the slave device the slave responds with data This service is provided to permit quick read access to various reference tables within the slave PLC This command reads enough data from the slave reference table to fill the specified number of elements in the master reference table When the memory types of the slave and master reference tables differ the data will be trans ferred from the slave reference table beginning with the least significant bit The X Read com mand may not use the broadcast SNP ID This X command requires at least 11 words in the Data Block From 2 to 6 addi tional words may be supplied containing optional parameters The following example establishes a direct single session communication session to the slave device via the null SNP ID then reads slave device Register Memory R register 201 and deposits the 10 least significant bits into master device Input Memory I Inputs 1 10 PLC Status Word returned from the slave device is updated into master device Register Memory Register 32 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 Word 13 Word 14 Word 15 Word 16 Word 17 Word 18 Word 19 Word 20 Word 21 Word 22 Word 23 6 30 Series 90 PLC Serial Communications
93. communications The Communica tions Request is initiated by a Ladder Instruction which has an associated Com mand Block to define the characteristics of the request An associated Status Word reports the progress and results of each request This section describes the structure and operation of the Communications Request Structure of a Serial Communications Request The Communications Request is made up of three main parts which are important to the user These parts are The Ladder Instruction The Command Block The Status Word The figure below illustrates the relationship of these parts 44916 INSTRUCTION INPUTS COMMAND AND BLOCK OUTPUTS FOR COMMREQ INSTRUCTION COMMAND DETAILS BLOCK OF THE POINTER REQUEST STATUS WORD STATUS WORD POINTER Figure 4 1 Structure of the COMMREQ The Ladder Instruction COMMREQ Ladder Instruction is the main structure used to enter specific information about a communications request This information includes the rack and slot location of the device CMM or CPU associated with the request and the port on which to execute the request Also the Ladder Instruction points to the location in memory where the first word of the Command Block is located 4 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Instruction Command Block
94. connected are grounded to a common point Failure to do so could result in damage to the equipment 8 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Cable Diagrams Converters Section 2 RS 232 Cable Diagrams This section provides diagrams for the following RS 232 connections CMM to CMM to 2 Seres Six CMM to OIT PIN PIN 244918 9 Lr o RD SERIES 90 90 3 Ral EU 0 0 SERIES 90 0 RIS 4 8 DCD 0 CMM 0 0 CMM 0 0 CTS 5 20 DTR o PORT 00 8 rt 4 RTS 0 0 PORT 10R2 00 DTR 20 E S 5 CTS 00 10R2 0 GND 7 7 GND 0 o SHLD 1 W 1 SHLD 00 25 25 25 25 FEMALE MALE MALE FEMALE Figure 8 1 CMM to CMM with Handshaking RS 232 only PIN PIN 244919 0 2 CS 3 mo o RD 3 21 2 TxD 1 SERIES 90 0 0 SERIES 0 RIS 4 of Pet 4 ATS Ly 9o CMM 0 CTS 5 Lg ry 5 CTS 0 pus 0 0 DCD 8 Ld Ld LI 0 0 TOR 00 ea fe en pd ES 0 5 0 GND 7 7 GND gt 0 o W 25 Pin 25 Pin 25 Pin 25 Pin FEMALE MALE MALE FEMALE Figure 8 2 CCM2 to CMM RS 232 PIN PIN 844904 0 SHLD 1 T9r 0 SERIES 90 9 RD 3 L1 m 2 op
95. equipment The protocol is a set of rules that establish and maintain a communication link between SNP master and SNP slave devices SNP is a half duplex protocol that uses the RS 485 enhanced version of RS 422 and RS 232 electrical interfaces The built in SNP slave device in each Series 90 PLC CPU uses the RS 485 interface The CMM module provides both RS 485 and RS 232 interfaces See Chap ter 3 for more information on the CMM electrical interface SNP devices may be connected in a direct point to point one master and one slave or multidrop one master and multiple slaves arrangement Only one master may be on a multidrop link When multiple slave devices exist on a multidrop link each slave is addressed by a unique SNP ID SNP Master Slave Operation GFK 0582D SNP is a Master Slave protocol where the master device initiates all communications and the slave device responds to the master s requests SNP does not provide Peer to Peer capability Every Series 90 PLC has a built in standard SNP slave serial port This CPU serial port con nector is located on the CPU board for a Series 90 70 Series 90 20 PLC Series 90 Micro PLC and on the power supply for a Series 90 30 PLC NOTE Several Series 90 70 and Series 90 30 CPUs have two additonal serial ports see Chapter 3 for details Chapter 7 Protocol Definition RTU SNP and SNP X 7 47 7 48 Fanuc SNP DOS Driver is an SNP master device PC application
96. examples under the heading CCM Memory Addressing and Data Lengths later in this section Source Memory Address Word 12 The source memory address specifies the address with in the Series 90 CPU where the data transfer is to begin The address range for each Series 90 memory type and addressing examples are provided later in this section under the heading CCM Memory Addressing and Data Lengths Data Block Summary for CCM Commands GFK 0582D The first word of the Data Block Command Block Word 8 must be a command in the range of 6000 to 6199 decimal and is similar to the commands used by the Series Six CCM mod ules A subrange of 6000 to 6099 is reserved for general utility type functions that only involve local data storage on the CMM local commands and generally are used in all CCM modes master slave peer responder and peer initiator The subrange 6100 to 6199 is used for operations that require initiating communication over the serial line remote commands and are generally restricted to CCM modes of master and peer initiator Chapter 5 CCM Service 5 3 The following table lists the command words and the required parameters for each For more detailed information and examples of each command refer to Section 3 of this chapter Table 5 1 COMMREQ Data Block Summary for CCM Commands Data Block Registers X indicates Required indicates Not Used Command Target Source Description Command Memory Data Memory
97. flow control NONE and HARD WARE Note The CMM modules do not support harware flow control when used with an RS 485 interface The NONE selection makes use of the signals Transmit Data TD and Receive Data RD only The signal Request to Send RTS however is used as a modem keying signal The RTS signal is energized for the Modem Turnaround Delay interval and during the character transmission the RTS signal is then immediately de energized RTS from CMM Figure 2 7 Flow Control NONE MODEM TURNAROUND DELAY 0 TD from CMM RTS from CMM TD from CMM Figure 2 8 Flow Control NONE MODEM TURNAROUND DELAY 100 ms The HARDWARE selection makes use of the Transmit Data TD Receive Data RD Request to Send RTS Clear to Send CTS Data Carrier Detect DCD and Data Terminal Ready The signals are used in the manner specified by the RS 232 and RS 422 RS 485 elec trical standards these signals are described below Chapter 2 The Communications Coprocessor Modules 2 13 5 from CMM of lt 2 CTS to CMM 4 from CMM Figure 2 9 Flow Control HARDWARE Request to Send RTS and Clear to Send CTS These signals are used to control the trans mission of data to the remote device The RTS signal is asserted at the beginning of each trans mission by the CMM The actual characters are not transmitted however until the CTS signal is returned On
98. function block will cause power flow to its fault FT output Otherwise the value one 1 is written to the status word when the command succeeds When unsuccessful one of these values is returned 010Ch WAIT mode COMMREQ is not permitted must use NOWAIT 020Ch Command not supported the port is either not configured as an SNP slave or does not support break free operation Sending this command when break free SNP is already enabled has no effect howev er the status location will be set to 1 indicating success Sending this command to a PLC CPU built in serial port that does not support break free SNP will set the fault output of the COMMREQ Parameters SYSID and Task are set based on the active CPU and Serial Port SYSID CPU311 CPU313 CPU323 0000 CPU331 CPU364 0001 Task Power Supply Port all CPUs 00031 001F hex Port 1 CPUs 351 352 363 only 00019 0013 hex Port 2 CPUs 351 352 363 only 00020 0014 hex Example Command Block Word 1 00001 0001 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07005 1B5D SNP Command Number Enable break free SNP Chapter 6 SNP Service 6 29 s X Read 07101 1BBD Available Modes Master Description Remote command The master establishes a new SNP X
99. greater than 1 The following table lists the CCM error codes that are reported as secondary error codes in the high byte of the CCM Status Word after the execution of a CCM COMMREQ These codes also appear in the low byte of CCM Diagnostic Status Word DSW 1 GFK 0582D Chapter 5 CCM Service 5 11 5 12 Table 5 7 Secondary Error Codes High Byte of Status Word Low Byte of DSW Error Code 1 2019 A timeout occurred on the serial link 2 02 A attempted to write data to a section of the CCM scratch pad that is permanently write protected by CCM A attempted to read or write a non existent I O point A COMMREQ attempted to access more data than is available in a particular memory type 5 05 A attempted to read or write an odd number of bytes to register memory or the diagnostic status words 6 A attempted to read or write one or more non existent registers A specified the transfer of zero data bytes 8 A attempted to write to protected memory A attempted to transfer data to or from an invalid memory type or absolute source address I NUM COMMREQ attempted to read or write or more non existent diagnostic status words to read or write one or more non existent diagnostic status words A attempted to transfer data beginning
100. have not been established 37 25h An invalid next message length value was specified in an Attach Attach Response or Update Realtime Datagram message Communications have not been established 38 26h An unexpected SNP message type was received when an Attach Attach Response or Update Realtime Datagram was required Communications have not been established 39 27h Another Break was received while SNP slave was waiting for an Attach or Update Realtime Datagram message 40 28h An SNP message has been sent and retried the maximum number of times A maxi mum of two retries are permitted A retry is caused by a NAK from from the remote SNP device Chapter 6 SNP Service 6 9 Table 6 5 Minor Error Codes for Major Error Code 12 0Ch Continued Error Status Local SNP SNP X Error Description Decimal Hexadecimal 41 29h A received SNP message has been NAKed the maximum number of two times The NAKed message may be retransmitted a maximum of two times 42 2Ah An unknown message was received when an acknowledge ACK or NAK was re quired 44 2Ch A received SNP message contains bad next message length value 45 2Dh Acknowledge timeout An acknowledge ACK or NAK was not received within the configured T2 time interval A slave device may generate this error if the master device has aborted after maximum response and does not NAK the next response retry 46 2 Response timeout The SNP Master did not receive an SNP Respon
101. implementation only bit 0 and bit 1 have meaning The codes below are for Series 90 70 high byte PLCs Only Parallel Work Station Interface WSTI attached 02h Serial device attached at PLC CPU 01h Non dedicated programmer attached 00h No programmer attached Word3 low byte Byte 5 Auxiliary Status Only the highest bit is defined and only for the Series 90 70 Bit 7 indicates Programmer window status 0 2 Programmer window closed 1 Programmer window open high byte Byte 6 Not used 00h Word4 low byte Byte 7 Control Program Number high byte Byte 8 Current Privilege Level Word5 low byte Byte 9 Last sweep time 0 1 msec units high byte Word6 low byte high byte Last sweep time in 0 1 msec units PLC Status Word bits 0 7 PLC Status Word bits 8 15 GFK 0582D Chapter 6 SNP Service 6 47 s Return Control Program Name 07209 1C29 Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Return Control Program Name request the slave responds with data Example Command Block Read the Control Program name from the attached slave device and store in master Register Memory R Registers 201 205 Word 1 00004 0004 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Me
102. in Windows K 3 Setting Up the Communications Configuration Utility CCU K 6 Connecting to the PLC oo ced eee be MEE K 9 Using HyperTerminal to Establish Connection K 10 Appendix L Getting Help L 1 Getting Additional Help and Information L 1 Series 90 Product Repair L 2 Modem Support s sre irra ESCRIBE EORR UR TES L 2 BIA Standards L 2 Appendix M Series 90 Micro PLC Serial Ports 1 Appendix IC655CMMS90 Isolated Repeater Converter N 1 Description of the Isolated Repeater Converter N 1 System Configurations N 5 Cable Diagrams for IC655CMM590 Converter N 7 Appendix IC690ACC901 Miniconverter and Cable Kit 0 1 xiv Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Chapter Introduction 1 This chapter includes a quick reference to the manual provides summary of the serial communications capabilities of the Series 90 products Quick Guide to the Manual The purpose of this manual is to describe how to use the serial communications features of the Series 90 Communications Coprocessor Modules CMMs and CPUs Hard
103. is able to respond the slave device returns an error code within an SNP X response message See the list of Minor Error Codes for Major Error 15 minor error codes 32 35 Both the slave and master abort the SNP X communication session when a hard error is detected recovery is only possible through the establishment of a new SNP X ses sion Soft errors are recoverable The slave device returns an SNP X response message containing an error code to the master The SNP X communication session remains established further SNP X commands be issued Soft errors include improper request codes service request errors and invalid request memory types or lengths Broadcast Capability Modem Support 7 58 Every SNP X Attach and SNP X request message contains the SNP ID of the slave device that is to receive the message The SNP X protocol also provides a mechanism to broadcast an SNP X Attach or SNP X request to each and every slave device on a multidrop serial link To broadcast SNP X request the special Broadcast SNP ID is speci fied in the request message Requests which are broadcast never invoke a response For this reason only an X Attach or X Write request are meaningful in the broadcast context A broad cast X Attach request establishes an SNP X session with each and every SNP X slave on a multidrop serial link Subsequent SNP X requests may then be addressed as desired A broadcast X Write re
104. is currently using If not the escape sequence will not be recognized GFK 0582D Appendix K Using Modems with VersaPro and Control K 11 Appendix Getting Help L Getting Additional Help and Information There are several ways to get additional help and information GE Fanuc Web Site There is a large amount of information on the Technical Support section of the GE Fanuc Web site Sections such as Technical Documentation Application Notes Revision Histories Frequently Asked Questions and Field Service Bulletins may have the exact information you need You can access this site at http www gefanuc com support Specific information on modems can be found at http www gefanuc com support modems htm GE Fanuc Fax Link System This system lets you choose technical help documents to be sent to you on your fax machine To use this system follow these steps Fax Link at 804 978 5824 on a touch tone type phone rotary dial phones will not work for this application Follow the instructions to have a master list called Document 1 of Fax Link documents Faxed to you A master Fax Link list is also available on the GE Fanuc Web site in the Technical Support section see the GE Fanuc Web Site section above Select desired document s from the master list then call Fax Link and specify the docu ment number s you want to be faxed to you Up to three documents can be ordered per call GFK 0582
105. is selected and the Status Word is assigned to Register 10 00010 Set Q Response 06001 1771 Description Local Command The Set Q Response command is for a CMM configured in slave mode only The command is used to pass four bytes of data in Q sequence format from the PLC CPU to the CMM A remote master device will then poll this slave CMM with a Read Q Sequence com mand to obtain the data The Q Sequence operation avoids the 17 byte header included in Read Write commands this command Words 8 and 9 of the Command Block have a special purpose Word 8 Word 9 Data byte format Example Word 8 Word 9 Data bytes 1 and 2 of Q Response Data bytes 3 and 4 of Q Response High Byte Low Byte Data Byte 2 Data Byte 1 Data Byte 4 Date Byte 3 Set Q response with the numbers 1 2 3 4 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 00003 0003 00000 0000 00008 0008 00009 0009 00000 0000 00000 0000 06001 1771 00513 0201 01027 0403 Data Block Length NOWAIT Mode Status Word Memory Type Register Status Word Address minus 1 Register 10 Not used in NOWAIT Mode Not used in NOWAIT Mode Command Number Data Bytes 1 and 2 Data Bytes 3 and 4 5 16 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 8 Clear CCM Diagnostic Status Words 06002 1772 Description Local Command This command requ
106. loading motion programs 1 10 and firmware Connect a Personal Computer s 9 pin serial port to an IC693DSM314 module s RJ 11 COMM port for loading firmware motion programs for this module are loaded across the PLC backplane Connecting to Port 1 of Series 90 70 CPUs CPX772 CPX782 CPX928 and CPX935 End View of RJ 11 Connector A RJ 11 CONNECTOR 9 PIN D SUB FEMALE End View of CONNECTOR D SUB Connector M Figure 8 21 IC693CBL3164A Serial Cable Table 8 3 IC693CBL316A Pin Out Connections 9 Pin Connector RJ 11 Connector 7 1 2 2 5 3 5 4 3 5 8 6 8 16 Series 90 PLC Serial Communications User s Manual November 2000 a45485A GFK 0582D Serial Cable Diagrams Converters Section 5 IC690CBL714A MultidropCable Purpose This cable has a number of possible applications with Series 90 products To interconnect Series 90 30 PLCs or redundant Series 90 30 PLCs in a multidrop configuration To interconnect a Series 90 30 PLC and APM module in a multidrop configuration with a single personal computer programmer This allows programming and troubleshooting both PLC and APM without moving connection cables To interconnect Series 90 70 or redundant Series 90 70 PLCs in a multidrop configuration Please see the section Application Example fo
107. modem response timeout value is zero modem response checking is disabled the COMMREQ completes as soon as the command string is sent to the modem If the modem response timeout value is non zero modem response checking is enabled the waits for the modem response When the modem re sponse is received it is checked for successful completion of the modem command if the re sponse is not received within this time interval an error code is generated The Number of bytes in command string field specifies the length of the command string to send to the modem This length includes all characters including any spaces and must include the terminating ASCII carriage return character CR The modem command string can be from 1 to 250 bytes in length Examples of commonly used modem command strings issued to a Hayes compatible modem are provided below Function Pulse dial the number 1 503 555 9999 Command String ATDP15035559999 lt CR gt 16 10h ATDT15035559999 lt CR gt 16 10h Tone dial the number 1 503 555 9999 ATDT9 15035559999 lt CR gt 18 12h Tone dial using outside line with pause ATHO CR 5 05h Hang up the phone ATZ CR 4 04h Restore modem configuration to internally saved values Chapter 6 SNP Service 6 69 Chapter GFK 0582D Protocol Definition CCM RTU SNP SNP X This chapter is divided into the following sections Section 1 CCM Protocol Sectio
108. output FT will be energized when the COMM attempts to execute Otherwise the status word is updated based to indicate if the COMM REQ was successful as listed below 0001 Command successful 010Ch WAIT mode is not permitted must use NOWAIT 020Ch Command not supported the port is either not configured as an SNP slave or does not support break free operation Sending this command when break free SNP is already disabled has no effect however the COMMREQ status location will be set to 1 indicating success Sending this command to a PLC CPU built in serial port that does not support break free SNP will set the fault output of the COMMREQ Note Break free SNP on built in slave ports in PLC CPUs uses a small fraction of the CPU processing bandwidth For most applications the impact on CPU perfor mance is negligible However applications that use multi drop SNP or SNP X communication can incur noticeable increases in PLC sweep times because all slave units must examine every received message If your application requires a very small or predictable sweep time and you have a multi drop SNP network you may need to disable break free SNP on the port GFK 0582D Chapter 6 SNP Service 6 27 Parameters SYSID and Task are set based the active CPU and Serial Port SYSID CPU311 CPU313 CPU323 0000 CPU331 CPU364 0001 Task Power Supply Port all CPUs 00031 001F hex Port 1 CPUs 351 352 36
109. point number available in the attached Series 90 CPU It is equal to one less than the number of the output point to be forced on or off first byte of the data field is equal to either 0 or 255 FFH The output point specified in the point number field is to be forced off if the first data field byte is equal to O It is to be forced on if the first data field byte is equal to 255 FFH The second byte of the data field is always equal to zero RESPONSE The normal response to a force single output query is identical to the query Note The force single output request is not an output override command The output specified in this request is ensured to be forced to the value specified only at the beginning of one sweep of the Series 90 user logic GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 33 MESSAGE 06 PRESET SINGLE REGISTER FORMAT Address Func Register Error Check 06 Number Address Func Register Error Check 06 Number Hi Lo Hi Lo Normal Response QUERY An address 0 indicates a broadcast request All slave stations process a broadcast request and no response is sent The function code is equal to 06 The register number field is two bytes in length It may be any value less than the highest register available in the attached Series 90 CPU It is equal to one less than the number of the register to be preset The data field is two bytes in length and conta
110. received or the device is restarted The following diagrams and tables describe the actual protocol transactions involved in estab lishing an SNP X communication session Both the directed and broadcast varieties of the X Attach command are described The key components of an SNP X session establishment are the Long Break and the X Attach command Note that the X Attach request and X Attach response messages both use the same message struc ture the X Request Message Structure In the X Attach response message the response code is returned in the Request Code message field As with other response messages the X Attach re sponse code value is the request code the X Attach request code is Oh with the high order bit set Therefore the X Attach response code is 80h 7 72 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Example of Direct X Attach Command This example shows the message exchange of a direct X Attach command Master Slave Long Break gt wait T4 time X Attach Request message 1B 58 41 42 43 44 45 46 00 00 00 00 00 00 00 00 00 00 17 00 00 00 00 B2 X Attach Response message 1B 58 41 42 43 44 45 46 00 00 80 00 00 00 00 00 00 00 17 00 00 00 00 A2 Explanation of Direct X Attach Command Byte Hex Value Description Number X Attach Request Message 1 Start of message character 1Bh 22 58 SNP X Command
111. refer to the applicable Programmable Controller Reference Manual GFK 0265 for Series 90 70 or GFK 0467 for Series 90 30 Example Command Block Read the attached slave device I O Fault Table Entry 1 only and store in master device Regis ter Memory Registers 201 227 Word 1 00006 0006 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07212 1C2C Command Number Word 8 00001 0001 Selected Fault Table 1 PLC 2 Word 9 00001 0001 Beginning Fault Table Entry I O 1 32 PLC 1 16 Word 10 00001 0001 Number of faults entries requested I O 1 32 PLC 1 16 Word 11 00008 0008 Master Memory Type to store Fault Table Word 12 00201 0001 Master Address to store Fault Table Register 201 The Master Memory Type and Address fields must be selected to allow enough room to accom modate the 12 bytes of data necessary to represent the table header plus 42 bytes for each fault requested from the slave PLC This size requirement applies to both I O and PLC Fault Table retrieval See Table 6 1 for valid memory types and addresses The Fault Table area is re turned in the following format Timestamp of last clear Seconds BCD Word 1 high byte Minutes BCD Word 2 low byte Hours in BCD Word 2 hig
112. section simple multidrop configurations are those where a single Isolated Repeater Converter is used Complex multidrop configurations contain one or more multidrop sections where an Isolated Repeater Converter is included as one of the drops In both simple and complex multidrop configurations the transmitters di rected downstream from the master can be on at all times There will be no contention for the communication line because only one device the master transmits downstream In simple multidrop configurations there will be no contention when transmitting upstream as long as devices tri state their drivers when idle and turn them on only when they have something to transmit This is the case for the Series 90 70 and Series 90 30 CMMs In complex multidrop configurations however special steps must be taken to switch the up stream transmitters of the Isolated Repeater Converter Switching Upstream Transmitters For the RS 422 drivers to be active at the J2 port of the Isolated Repeater Converter the RTS input at J1 must be true The state of the RS 422 drivers at the J1 port depends on the position of the switch on the unit When the switch is in the center position the J1 transmitters will always be turned on When the switch is in the CTS position toward the power cable then either the RS 232 or RS 422 CTS signal must be true to turn on the J1 drivers Note Note the position of the switch on the Isolated Repeater Converter in t
113. selecting Logicmaster 90 Utilities F7 Note The Logicmaster 90 30 20 Micro modem auto dial feature only supports serial ports COMI and 2 iat 7 LOGICMASTER 90 UTILITIES Modem Auto Dialer odem Auto Hangup lt lt Use the Escape key to exit gt gt 1 Press F8 to select the modem auto dial feature Hangup cursor keys to highlight desired item ENTER to select J 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Modems with Logicmaster 2 To set the modem parameters move the cursor to Setup and press the Enter key Dialing Director MoHconi MERLO 1 Type INIT string ZOOM F10 to set other values A Complete the fields on the screen displayed using the Enter key to move among the fields and the right left cursor keys to move within each field Press Zoom F10 to display other values as shown in the following screen Note You can add any non numerical characters that your modem accepts for the dial prefix or suffix e g commas to add pauses particularly useful when trying to connect to a number in a different country See your modem user s manual for acceptable non numerical characters n ialing D Port Port Selection D Dia coc EN come INIT string ZOOM F10 to set other values B Press the Enter key to select a parameter
114. session Communication Session type is selected The broadcast SNP ID all bytes FFh may not be used by this command The Communication Session type field specifies whether the communication session is single session or multi session The master uses this value together with the SNP ID value to deter mine whether the proper communication session is already active or if a new session must be established prior to the actual data transfer For single session operation the communication session is established with only the slave device specified by the SNP ID For multi session operation the communication session is established with all slave devices on the serial link In either case once the proper communication session exists the master sends the data transfer command to the slave specified by the SNP ID When communicating with a single slave de vice single session provides the fastest performance When communicating with multiple slave devices on a multidrop serial link multi session provides the fastest performance The Number of Master Memory Type elements to read field is specified in units consistent with the access mode of the Master Memory Type A maximum of 1000 bytes of data may be transferred in one X Read command use multiple commands to transfer more data Note The following command parameters are optional The COMMREQ Data Block length Word 1 must include all parameters in use The optional Master Memory Type and Addres
115. startup delay This command uses a null Slave SNP ID to permit communication with any slave device Piggyback Status reporting is not enabled Rung 7 activates the to send the SNP command to the CMM module The Com mand Block has been previously setup in registers R0005 and up The SNP Status Word in 0001 is cleared the SNP Status Word will be updated by the CMM when the command is complete Rung 8 monitors the SNP Status Word When the SNP Status Word is changed to 0001 denot ing successful completion one shot T0004 fires to load the repeating SNP command Rung 9 loads the COMMREQ Command Block with a Read System Memory command 07202 when the previous command is complete This command reads register 101 from the slave device into register 102 in the master device In the ladder program example the Ladder Instruction inputs are defined as fol lows The IN input assigns Register 00005 as the beginning of the Command Block The SYSID input indicates that the command is for CMM module in rack 0 slot 2 The TASK input indicates that the command is for port 1 on the CMM module Make sure that the SYSID and TASK values match the system configuration and that the speci fied CMM port is properly configured for operation as an SNP master Chapter 6 SNP Service 6 17 Ladder Program Example lt lt RUNG 4 STEP 0001 gt gt
116. the attached slave device Input Memory I Input 1 to the opposite state Word 1 00003 0003 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07214 1C2E SNP Command Number Word 8 00070 0046 Slave Memory to toggle 1 Word 9 00001 0001 Slave Address to toggle Input 1 The Slave Memory Type and Address fields specify the reference table bit in the slave device to be toggled Only bit oriented memory types are allowed See the following table for the memory types supported by this command 6 56 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 6 The following table lists the valid slave device Memory Types for the Toggle Force System Memory command Table 6 18 Valid Memory Types Memory Type Decimal Hexadecimal I memory in bit mode 72 48h Q memory in bit mode 74 4Ah 96 T memory in bit mode 76 4Ch memory in bit mode 78 4Eh SA memory in bit mode 80 50h SB memory in bit mode 82 52h SC memory in bit mode 84 54h S memory in bit mode 86 56h G memory in bit mode 150 96h override table in bit mode 152 98h Q override table in bit mode 154 9Ah T override table in bit mode 156 9Ch M override table in bit m
117. to read Master Memory Type to store data Master Address to store data Register 201 Characters 1 and 2 4Dh A 41h Characters 3 and 4 I 49h 4Eh Characters 5 and 6 1 31h null Characters 7 and 8 Characters 1 and 2 Characters 3 and 4 Characters 5 and 6 Characters 7 and 8 null null P 50h B 42h L 4Ch 4Fh C 43h 4Bh 1 31b null The Number of Master Memory Type elements to read field is specified in units consistent with the unit length of the Master Memory Type See Table 6 1 for valid memory types and ad dresses Note The SNP master on the CMM module and CPU 351 and CPU 352 serial ports limit this command to a total data length of 2048 bytes 1024 words 6 44 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Write Program Block Memory 07207 1C27 GFK 0582D Available Modes Master for communication with Series 90 70 slave device only Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Write request with data the slave responds This service provides the master with the capability to write the Local Subblock Data segment L refer ence table of a specified Program Block in the slave When the memory type of the master reference table does not specify word access the slave data will be padded with the value 0 as necessary Only
118. to use Do not include these values in the configured or pro grammed T2 value The maximum time the master will wait without activity on the serial line It is started upon completion of an Attach or other SNP re sponse If the master device has sent no SNP message within the T3 time the master will send an Inquiry or Short Status message to the attached slave device to prevent a timeout on the slave The T3 timer is always set to the current T3 timer value minus the time required to transfer 80 characters at the selected data rate mi nus any negotiated Modem Turnaround Time The T3 value is re calculated whenever a new timer value is established If the timer is disabled this timer is also disabled The maximum time the slave device will wait for activity on the serial line It is started after completion of an SNP response and cancelled when a new request is received from the master If no activity occurs within the T3 time the slave aborts the SNP communication The T3 timer default value is specified by the CMM configuration Timeout parameter default values range from 0 disabled to 10 sec The T3 timer value may be optionally negotiated between the mas ter and slave devices via the SNP Parameter Select message part of the Long Attach command The master and slave devices both use the larger of the T3 values from either device Each device adds the separately negotiated Modem Turnaround Time val
119. wires trimmed next CPU or final term flush with jacket Figure 8 23 Wiring Diagram for Multidrop Cable IC690CBL714A 8 18 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Cable Diagrams Converters Application Example for Cable IC690CBL714A 847100 Conn B Conn B Conn C PLCC C P Ul o IC690CBL714A IC690CBL714A Conn A IC690ACC901 RS 232 422 Converter Jumper pins 9 and 10 on Connector A to use the IC690ACC901 s internal termination resistor Figure 8 24 IC690CBL714A Application Example Note Please see Appendix SNP Multidrop for more example applications for the IC690CBL714A cable GFK 0582D Chapter 8 Serial Cable Diagrams and Converters 8 19 Chapter Serial I O Protocol 9 This chapter describes the Serial I O protocol formerly called Custom Protocol or Generic Output which allows you to create a custom protocol in ladder logic to control a variety of communication activities through a CPU serial port Serial I O uses a series of Communica tions Request COMMREQ ladder logic instructions to accomplish this As of this writing the Serial I O function only applies to the following three Series 90 CPUs IC693CPU351 352 an
120. zero the COMMREQ remains pending until it has received the requested string terminated by the specified end character If this fails for any reason no data is sent to the buffer Any data that was already in the buffer remains and can be retrieved with a subsequent read request Example Command Block for the Read String Function VALUE VALUE MEANING decimal hexadecimal address 0005 0005 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type address 3 0000 0000 Status word address minus 1 0001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4403 1133 Read string command address 7 0030 001E Read time out 30 seconds address 8 0013 000D Terminating character carriage return must be between 0 and 255 inclusive address 9 0008 0008 Input data memory type address 10 0100 0064 Input data memory address R0101 9 30 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol Mn Return Data Format for the Read String Function GFK 0582D The return data consists of the number of characters actually read the number of characters still available in the input buffer after the read is complete if any and the actual input characters Address Address 1 Address 2 Number of characters actually read Num
121. 0 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07300 1C84 SNP Command Number Word 8 20051 4E53 Characters 1 and 2 of Slave SNP ID S 53h 4Eh Word 9 18768 4950 Characters 3 and 4 of Slave SNP ID P 50h I 49h Word 10 12612 3144 Characters 5 and 6 of Slave SNP ID D 44h 1 31h Word 11 00000 0000 Characters 7 and 8 of Slave SNP ID null null Word 12 00008 0008 Master Memory Type to store Piggyback Status R Word 13 00171 OOAB Master Address to store Piggyback Status Register 171 Word 14 00005 0005 5 msec default 5 msec Word 15 02000 0700 2 0 disabled 2 sec default 2 sec Word 16 00000 0000 3 0 disabled default 10 sec Word 17 00100 0064 T4 100 msec default 50 msec Word 18 00000 0000 5 0 disabled default disabled Word 19 00010 000A Modem Turnaround Delay 10 msec default 0 msec Word 20 00000 0000 Transmission Time Delay 0 msec default 0 msec Word 21 00256 0100 Maximum SNP Data Size 256 bytes default 1000 bytes The Slave SNP ID field specifies the SNP ID of the desired slave device The SNP ID field is 8 bytes long For a Series 90 30 or Series 90 70 PLC slave device the SNP ID can be a maxi mum of 7 bytes followed by a null character 0 and can include any ASCII
122. 0 FF FF FF FF FF FF Broadcast SNP ID 11 00 X Attach request code 12 18 00 00 00 00 00 00 00 Not used always 0 19 17 End of block character 17h marks the beginning of the SNP X message trailer 202 0000 00 00 Not used always 0 24 79 Computed Block Check Code for this example 7 74 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X X Read Command GFK 0582D The X Read Command permits the SNP X master to make a read request for a single continu ous area of a single reference table in the slave PLC memory The request specifies the seg ment selector offset and data length Every X Read command generates exactly one X Re quest message and returns one X Response message The size of the X Response varies depending on the amount of data to be returned The maximum amount of data that can be read with the X Read command is 1000 decimal bytes If the slave detects an error when proces sing the X Request an X Response message is returned with an appropriate error code Data bytes are always byte aligned Individual bit data to be read are supplied at the proper bit locations within the data bytes For example 14 occurs at the fourth bit within the data byte 0000 1000 08h The X Read command may be directed only to a particular slave device by using the specific slave SNP ID In Point to Point wiring only the Null SNP ID may
123. 00 Series 90 30 CPU340 Not supported Series 90 70 CPU731 927 Series 90 70 CGR772 935 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 0582 CPU Serial Ports Serial I O Protocol The Serial I O protocol allows users to write a custom protocol for communicating with various serial devices such as bar code readers or pagers not all CPUs support both Serial I O modes see table below Serial I O has two modes Read and Write Support for Serial I O is detailed in the table below Chapter 9 of this manual explains how to use this protocol Serial I O can be added to older versions of CPU351 352 and 363 through a firmware upgrade contact your GE Fanuc distributor for information Table 3 10 Products Supporting the Serial I O Feature Product Serial Write Serial I O Read Ports 1 and 2 Supported starting with firm Not available ware release 8 00 CPU352 CPU363 Ports 1 Supported starting with firm Supported starting with firm and 2 ware release 8 00 ware release 10 00 CPU351 CPU352 CPU363 Not supported Not supported Standard SNP port via power supply connector Series 90 30 CPUs 311 341 Not supported Not supported Series 90 70 CPUs Firmware 10 00 required for Serial I O Read will not be made available for CPU351 The Serial I O Read feature requires the use of VersaPro 1 1 or later version PLC programming software It is
124. 000 Chapter 6 SNP Service 6 67 s Autodial Command 07400 1CE8 Available Modes Master Description Local command This command allows a string of data to be output to an external telephone modem attached to the serial port this provides the ability to autodial the attached modem by issuing modem commands The modem command strings follow the Hayes convention Mo dem command strings are not part of the SNP protocol Upon issuing the Autodial command an Escape sequence is transmitted to the attached modem The Escape sequence assures that the modem is returned to the command state The Escape sequence consists of 2 seconds of silence followed by 3 plus characters followed by another 2 seconds of silence The modem command string specified in the Autodial COMMREQ will then be transmitted immediately following the Escape sequence The format of the modem command string is dependent on the attached modem and the desired operation Once the phone connection has been established it is the responsibility of the PLC application program to hang up the phone connection This is accomplished by reissuing the Autodial command and sending the appropriate hang up command string Each modem command string must end with the ASCH carriage return character for proper recognition by the modem This character must be included in the command string data and length The SNP Data Block Length must include the entire modem command s
125. 02 X Write request code 02h 12 08 Segment Selector R in word mode 13 14 63 00 Data Offset 0063h 99 zero based R100 15 16 0A 00 Data Length 000Ah 10 words 17 18 00 00 Not used always 0 19 17 End of block character 17h marks the beginning of the SNP X message trailer 20 54 Next message type Buffer T 54h 2122 1C 00 Next message length in bytes 001Ch 28 23 00 Not used always 0 24 13 Computed Block Check Code for this example X Write Data Buffer Message 1 Start of message character 1Bh 2 54 SNP X Command T 54h 3 22 31 32 33 34 35 36 37 38 39 20 bytes of data to write R100 109 40 41 42 43 44 45 46 47 48 49 50 23 17 End of block character 17h marks the beginning of the SNP X message trailer 24 27 00 00 00 00 Not used always 0 28 58 Computed Block Check Code for this example GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 83 SNP X State Tables This section presents generic state tables for the protocol processing of SNP X master and slave devices These state tables are provided as an aid to those developing their own SNP X master or slave implementations The state tables illustrate the SNP X protocol processing only they are not sufficient to implement complete SNP X devices Separate state tables are provided for SNP X master and slave devices Each state table is a matrix of the device states and the perm
126. 1 The two bytes of the data field are not both equal to 0 for the Force Listen Only request Function Code 8 Diagnostic Code 4 This response is also sent when the data length specified by the memory address field is longer than the data received Query Processing Failure Error Response 4 An error response with a subcode of 4 is called a query processing failure response This error response is sent by a RTU device if it properly receives a query but communication between the associated Series 90 CPU and the CMM module fails Serial Link Timeout GFK 0582D The only cause for a RTU device to timeout is if an interruption to a data stream of 3 character times occurs while a message is being received If this occurs the message is considered to have terminated and no response will be sent to the master There are certain timing consider ations due to the characteristics of the slave that should be taken into account by the master After sending a query message the master should wait approximately 500 milliseconds before assuming that the slave did not respond to its request Chapter 7 Protocol Definition RTU SNP and SNP X 7 45 Invalid Transactions If an error occurs during transmission that does not fall into the category of an invalid query message or a serial link time out it is known as an invalid transaction Types of errors causing an invalid transaction include Bad CRC The data length specified by th
127. 1 and the last bit will be 00132 Figure 9 2 also shows an example of this COMMREQ Example Command Block for the Read Port Status Function WORD Ad VALUE VALUE MEANING dress decimal hexadecimal address 0003 0003 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 COMMREQ Status word memory type R address 3 0000 0000 COMMREQ Status word address minus 1 96R0001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4303 10CF Read Port Status command address 7 0076 004C Port Status memory type address 8 0101 0065 Port Status memory offset 0101 GFK 0582D Chapter 9 Serial I O Protocol 9 21 Port Status Words The port status consists of two words 1 a word reporting the status of various communication functions and 2 a word reporting the number of characters in the input buffer that have not been retrieved by the application characters which have been received and are available The Port Status Words which report specific status information for a serial port should not be confused with the COMMREQ Status Word which reports general COMMREQ status informa tion The COMMREQ Status Word resides in user memory the Port Status Words do not reside in user memory and can only be accessed with this COMMREQ Word 1 Port status word see below Word 2 Characters available in the input buffer
128. 1 6 32 6 35 6 63 6 66 for multidrop Null 6 64 SNP master 9 13 SNP Master Slave Operation 7 47 SNP Message Format 7 48 SNP multidrop overview H 1 SNP Protocol 7 47 SNP Request Response 7 49 SNP Retry and Error Recovery 7 50 SNP Service 6 1 SNP Status Word 64 SNP Timers 7 50 Change via Long Attach 6 65 T147 51 SNP X Commands 7 72 X Attach Command 7 72 X Read Command 7 75 X Write Command 7 77 SNP X Protocol 7 57 SNP X Protocol Sequence 7 63 SNP X State Tables 7 84 SNP X Master State Table 7 84 SNP X Slave State Table 7 86 SNP X Programming Examples 6 20 Set X Status Bits Address 6 25 6 30 X Write 6 32 Software Configuration CCM Command Source Memory Address CCM 5 3 Standards Interface E 6 State Tables CCM 7 13 Station Manager s 8 16 Index Status Word CCM Status Word SNP Status Word Synchronize PLC Time Date 6 55 T Target ID CCM 5 2 Target Memory Address CCM 5 3 Target Memory Type 5 3 Telephone numbers Fanuc help L 2 Timeout Errors 3 Timeouts ccv 7 11 Timeouts RTU 7 24 7 45 Timers SNP X 7 60 Broadcast Delay 7 60 Buffer Timeout Response Timeout Timers SNP Default SNP Timer Values 2 15 SNP Timers 750 Toggle Force Memory Types 6 57 Toggl
129. 18 Ly SERIES 30 lt 13 i 7 9 L5 ONM lt sp B z pl ur 13 a RXD ES lt spu o 14 09 SERIES PORT lt RTS A 10 Fg IM 4 4 L5 SIX 1 lt RTS B 22 Fg Fg 5105 cts L5 CCM2 j crs 4 n1 Fg Fg L lt cts B 23 1 Fg L ov 7 L4 Lt 7 7 sHip 1 e AJ rm 25 PIN 25 PIN 4000 FEET 25 PIN 25 PIN FEMALE MALE 4 T gt MALE FEMALE TERMINATE CONNECTION ON THE CMM JUMPER INTERNAL 120 OHM RESISTOR ON THE CCM2 JUMPERS ARE INSTALLED ON THE PCB FOR TERMINATION JUMPER T2 OR 6 ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure 8 8 CMM to CCM2 RS 422 RS 485 PIN PIN a44924 wel 9 22 LK 2 0 lt spc 21 UR 0 Jo series so 00 RDA 18 EE L5 90 cum 00 RD B 25 Lj o lt 5 10 9 1 PORT 05 22 Vl Loos TERM bs 09 on 0 lt CTS A Fg l 4 RTS Ll 0 11 Fg 0 axx 00 crs B 23 _ 00 lt TERM 24 pg 5 cts m 0 ov 7 7 00 09 smo 1 V W Lo 25 PIN 25 PIN 25 PIN 25 PIN FEMALE MALE TERMINATE CONNECTION ON THE CMM MALE FEMALE JUMPER INTERNAL 120 OHM RESISTOR
130. 3 only 00019 0013 hex Port 2 CPUs 351 352 363 only 00020 0014 hex Example Command Block Word 1 00001 0001 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type R Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07004 1B5C SNP Command Number Disable break free SNP 6 28 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 6 Enable SNP Slave Operation COMMREQ 7005 1B5D Available Modes Slave Description Local command This command enables the break free SNP feature in Series 90 320 CPUs that support this feature see Chapter 3 for feature support information See command 7004 for a discussion of break free SNP Because break free operation is enabled when the PLC is powered on this command has no effect unless command 7004 was previously executed If a communication ses sion is in progress when this command is executed communication will continue and detection of no break Attach X Attach messages will begin when the current session is ended by a link idle The that sends this command may be executed on the first PLC sweep If the COMM REQ status word location specified in words 3 and 4 of the command block is not a valid R AI or WAQ reference power flow into the COMM REQ
131. 32 Read Exception Status 7 35 Read Input 7 30 Read Output Table 7 29 Read Registers 7 31 Read Scratch Pad Memory 7 41 Report Device 7 40 RTU Message Fields 7 22 Error Check Field 7 24 Function 7 22 Information Field Station Address RTU Message Format Index 5 Index 6 Index RTU Message Length 7 28 RTU Message Termination Error Response 7 21 Normal Res ponse 7 21 Query 7 21 RTU Protocol 7 20 RTU Scratch 7 42 RTU slave 9 13 RTU Timeout Usage 7 24 5 Scratch Pad CCM 5 6 Scratch Pad 7 42 Serial Communications Line Serial I O Cancel Operation function 9 24 Flush Input Buffer function 9 20 Initialize Port function 9 18 Input Buffer function 9 19 Overview 3 13 Read Bytes function 9 28 Read Port Status function 9 21 Read String function 9 30 Write Bytes function 9 25 9 27 Write Port Control function 9 23 Serial Line Interface 1 Serial port standard Series 90 CPU 3 10 Standard SNP serial port Series 90 CPU Serial port connector when functional 3 10 Series 90 CPU Serial Ports 2 4 Serial Port Pin Assignments 3 9 5 9 Series 90 Micro PLC M 1 Serial ports protocols supported M 1 Series 90 PLC described 1 Series 90 Micro PLC Serial Ports M 1 Ser
132. 4 L 4Ch 4Fh Characters 5 and 6 C 43h K 4Bh Characters 7 and 8 1 31h null The Number of Master Memory Type elements to write field is specified in units consistent with the Unit Length of the Master Memory Type See Table 6 1 for valid memory types and ad dresses Note The SNP master on the CMM module and CPU 351 and CPU 352 serial ports limit this command to a total data length of 2048 bytes 1024 words Chapter 6 SNP Service 6 45 s PLC Short Status 07208 1C28 Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a PLC Short Status request the slave responds with data This service provides the master with the capability to read the status of the slave PLC Example Command Block Read the attached slave device short status and store in master device Register Memory R Register 201 Word 1 00003 0003 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type R Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07208 1C28 SNP Command Number Word 8 00008 0008 Master Memory Type to store Status R Word 9 00201 00C9 Master Address to store Status Register 201 The Master Memory Type and Address fields must be selected to allow enough room to accom mod
133. 49 Converter N 1 Converters IC690ACC901 CPU_351 Serial Ports Configuring 3 1 352 Serial Ports Configuring 3 1 CPU ID CCM 5 2 CPU serial 1 CPU351 ports 1 and 23 4 CPU352 ports and 23 4 CPU363 ports and 23 4 CPX CPUs comm features 3 7 Cyclic Redundancy Check CRC 725 Calculating the 16 7 26 D Data Length CCM COMMREQ 5 3 Data Length CCM 5 3 Data Lengths CCM Memory Types 5 10 Datagrams 7 54 Cancel Datagram Cancelling a Datagram 7 56 Datagram 6 58 Datagram Lifetime Establish Datagram 6 58 Establishing a Datagram Normal Datagram 6 59 Permanent Datagram 6 59 Point Formats 6 59 Retrieving a Datagram 7 55 Update Datagram 6 61 Update Real Time Datagram 6 63 Diagnostic Status Words CCM 5 8 Diagnostic Status Words SNP 622 Directed SNP X Commands 7 64 Duplex mode configuring 8 12 GFK 0582D Index Error Codes IC655CMM590 isolated converter obso CCM Error Codes 5 12 lete N 1 RTU Error Responses SNP Major Error Codes 6 5 SNP Minor Error Codes 6 6 Autodial Error Codes 6 13 IC690CBL714A multidrop cable H 2 IC690CBL714A cable wiring diagram 8 18 IC693CBL316 Cable 8 16 Local SNP SNP X Error Codes Information odes E 1 Port Configurer Error Codes 6 15 Remote SNP
134. 49 RS 422 and RS 485 RS 449 RS 422 and RS 485 comprise a family of standards reflecting advances in integrated circuit technology These standards permit greater distance between equipment and a higher maximum data rate when compared with RS 232 RS 422 and RS 485 are standards which define electrical interface characteristics RS 485 is an improvement on RS 422 RS 449 is a standard used in conjunction with RS 422 which defines the connector pin assignments cable and connector characteristics and control signal sequences RS 422 and RS 485 are balanced or differential voltage interfaces in which the signal lines are isolated from ground One of the interface options for Series 90 serial communications is based on the RS 422 RS 485 standards The basic characteristics of RS 422 and RS 485 referenced as RS 485 in this manual are Supports multiple devices in a multi drop arrangement Maximum cable length 4000 feet 1200 meters Maximum data rate 1 Megabits second at 4000 feet and 10 Megabits second at 40 feet 12 meters Appendix E Serial Line Interface E 7 Logic assignments differential inputs not referenced to ground Space or logic 0 Circuit is 200 mv to with respect to circuit B Mark or logic 1 Circuit is 200 mv to 6 v with respect to circuit B There are no standard connector for RS 422 or RS 485 This is unlike RS 232 which has standard 25 and 9 D shel
135. 690 903 Port Isolator Data sheet for the Port Isloator product SNP Multidrop Describes various configurations of SNP multidrop for Series 90 products Discusses cables and troubleshooting General Modem Information Modem recommendations operating tips and sample diagram Using Modems with LM90 Describes how to set communications parameters in Logicmaster when using modems Modem Setup with VersaPro and Control Describes how to set communications parameters in VersaPro or Control when using modems Getting Help Lists phone numbers and web addresses where you can obtain help for a variety of serial communications problems Series 90 Micro Serial Ports Describes the capabilities of the Series 90 Micro PLC serial ports GFK 0582D Appendix N Appendix O Related Publications GFK 0255 GFK 0487 GFK 0263 GFK 0265 GFK 0466 GFK 0467 GFK 0402 GFK 0262 GFK 0356 Preface Preface IC655CCM590 Isolated Repeater Converter Obsolete Product Provides a data sheet for this product IC690ACC901 Miniconverter Cable Kit Provides a data sheet for this product Series 907 Programmable Coprocessor Module and Support Software User s Manual Series 907 Programmable Coprocessor Module Reference Manual Logicmaster 90 70 Programming Software User s Manual Logicmaster 90 70 Programmable Controller Reference Manual Logicmaster 90 Series 901 30 20 Programming Software User s Manual Log
136. 690ACC901 Miniconverter and Cable Kit 0 3 0 4 PIN PIN a44984 TXD 2 3 RXD RXD 3 2 TXD CTS 7 4 RTS RTS 8 5 CTS GND 5 7 GND MINICONVERTER WORKMASTER RS 232 PORT 9 PIN 9 PIN CONNECTOR CONNECTOR Figure O 4 Miniconverter to 9 Pin Workmaster or PC XT Computer Additional Adapter Required Table O 3 Miniconverter Specifications Mechanical RS 422 RS 232 Electrical and General Voltage Supply Typical Current Operating Temperature Baud Rate Conformance Ground Isolation 15 pin D shell male for direct mounting to Series 90 serial port 9 pin D shell male for connection to RS 232 serial port of a Workmaster II computer or Personal Computer 5 VDC supplied by PLC power supply Version A IC690ACC901A 150 mA Version B IC690ACC901B 100 mA 0 to 70 C 32 to 158 F 38 4K Baud maximum EIA 422 Balanced Line or EIA 423 Unbalanced Line Not provided Series 90 Serial Communications Manual November 2000 GFK 0582D GFK 0582D Numbers 2 Wire RTU 8 10 4 Wire 8 10 A Acronyms 2 Appendix A Glossary of Terms B ASCII Code List C CCM Compatibility C 1 D Compatibility D 1 E Serial Line Interface F Communications Networks SNP Multidrop H 1 1 7 1 ASCII Code 1151 B 1 Asynchronous Transmission E 1 Attach SNP Command 6 34 Auto dial feature 1 4 Autodial 9 25 A
137. 70 670 670 19200 0 670 670 670 HEADER TIMER Wait on ACK to Header 0 50 1000 2000 STCTIMER f o 109 200 DATA TIMER Wait on End of Data Block 300 33340 33340 33340 60 16670 16670 16670 1200 0 8340 8340 8340 19200 0 8340 8340 8340 DATA ACK TIMER Wait on ACK to Data Block 0 50 10000 20000 DELAY ACK TIMER Delay Slave ACK to master ENQ 10 milliseconds 4 character times The following table defines 4 character times for each data rate selection Data Rate 4 Character Times 147 milliseconds 74 milliseconds 37 milliseconds 2400 19 milliseconds 4800 10 milliseconds 5 milliseconds 3 milliseconds l Value depends upon backoff algorithm detection of bit in CPU ID for example at 19200 bps a 0 bit waits 80 milliseconds 1 bit waits 120 milliseconds Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X CCM Retries The CCM Protocol provides a retry mechanism for different parts of the protocol exchange This mechanism allows one side to retransmit ENQ sequences headers or data blocks if they were previously NAKed The retry mechanism may not be used if an EOT is received for any portion of the protocol ex change The table below lists the default retry values for each portion of the protocol exchange Table 7 11 Retry Values for CCM Protocol Retry Counter Names Description Norma
138. 90 20 PLC CPU211 31 1Fh Minor Type Codes for Series 90 70 CPUs 84 54h for CFR782 80 50h for CPU780 24 18h for CPU924 hse GFK 0582D Chapter 6 SNP Service 6 51 s Return PLC Time Date 07211 1C2B 6 52 Available Modes Master Description Remote command The slave device must be attached before executing this command see Attach command The master sends a Return PLC Time Date request the slave responds with data This service provides the master with the capability to retrieve the current time and date from the slave device The Series 90 70 PLC and Series 90 30 PLC Models 331 340 341 351 and 352 support time date and day of week The Series 90 30 PLC Models 311 313 323 and Series 90 20 PLC do not support time date or day of week Unsupported return values are meaningless and should not be used Example Command Block Read attached slave device PLC Time Date and store in master device Register Memory Registers 201 204 Word 1 00003 0003 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type R Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07211 1C2B Command Number Word 8 00008 0008 Master Memory Type to store PLC Time Date R Word 9 00201 00 9 Master Address to store PLC Time Date Register 201 The Master Memory Type and Address fields m
139. AM 25 Unexpected Interrupt Bad System RAM Bad CRC Checksum Bad Dualport RAM Serial Port 1 Loopback failed Watchdog Timer Expired HER Unspecified Diagnostic Error Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D CPU Serial Ports Configuring Serial Ports 1 and 2 with a COMMREQ Only Ports 1 and 2 on the CPU351 CPU352 CPU363 CPX772 CPX782 CPX928 CPX935 CGR772 and CGR935 CPUs may be configured with a COMMREQ When these CPUs are powered up their serial ports are given a default configuration These default settings remain in effect unless you change them using your programming software configurator function You can also temporarily change the active settings on one of these ports by initiating a Serial Port Setup COMMREQ although this will not permanently change the configuration values set by default or set with configuration software Both serial ports will be returned to their configuration values set by default or with configuration software when power is cycled to the PLC If power is cycled and you have previously initiated to change any serial port settings you will need to again initiate the COMMREQ upon power up if you wish to reinstate the settings commanded by the COMMREQ Using the Serial Port Setup COMMREQ The PLC ladder instruction is a general purpose instruction used for many different communication functions and with a wide variety of devices
140. Appendix K Appendix L Appendix M Series 90 PLC Serial Communications User s Manual November 2000 SNP Service Defines the SNP and SNP X service commands explains how the parameters of the service commands are included in the Data Block of the COMMREQ Numerous ladder programming examples are given Protocol Definitions CCM RTU SNP SNP X Describes the CCM RTU SNP and SNP X Protocols Cable Connection Diagrams Describes how to construct serial communications cables and wire them to serial devices Includes new section on RTU 2 4 wire and data sheets for the IC693CBL316 serial Station Manager cable and the IC690CBL714A serial Multidrop cable Serial I O Protocol Describes how to use this feature to write custom pro tocols for communicating with devices such as bar code readers and pagers Glossary Contains a concise alphabetized listing of communications terms and acronyms ASCII Code List Contains a complete ASCII Code List CCM Compatibility Provides a comparison among the Series 90 Series Six Series Five and Series One PLC CCM protocol implementations RTU Compatibility Provides a comparison among the Series 90 Series Six and Series Five PLC implementations Serial Line Interface Describes the Serial Line Interface as implemented by the Series 90 PLCs Communication Networks Describes the types of communications net works that can be used to interconnect Series 90 PLCs
141. Broadcast Message Slave No Response Broadcast Transaction Figure 7 9 RTU Message Transfers 7 20 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X A distinction is made between two communicating devices The device which initiates a data transfer is called the master and the other device is called the slave The Series 90 Serial Com munications Modules CMM Series 90 Micro PLCs and CPUs 351 352 and 363 can only serve as RTU slaves see Chapter 3 to determine which versions of these products support RTU protocol The master device begins a data transfer by sending a query or broadcast request message A slave completes that data transfer by sending a response message if the master sent a query message addressed to it No response message is sent when the master sends a broad cast request The time between the end of a query and the beginning of the response to that query is called the slave turn around time The turnaround time illustrated above will vary depending on the query the activity on the oth er port and the activity of the PLC application program A value of 500 ms can be used as a reasonable worst case estimate Message Types The RTU protocol has four message types query normal response error response and broad cast Query The master sends a message addressed to a single slave Normal Response After the slave performs the funct
142. C Status Word field contains the PLC Status Word from the slave device For an error X Response this field is set to zero For information on the contents of the Slave PLC Status Word refer to Table 28 in Chapter 6 The Error Status Code field consists of two bytes The first byte byte 6 contains the Major Error code 00 indicates successful completion the second byte byte 7 contains the Minor Error code The meaning of the Minor Error code depends upon the Major Error code value The Data Length field 1s always present this field contains the number of data bytes which im mediately follow in the message This field is set to zero when the message contains no data The Optional data field may not be present The size of this field is indicated by the Data Length field If the Data Length field is zero the Optional data field is not present 7 70 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X X Buffer Message Structure The SNP X Data Buffer Message X Buffer is sent by the master to carry additional data for the command specified in the preceding X Request message The X Buffer message is sent only after an Intermediate Response message is received from the slave X Buffer messages may contain from 1 to 1000 decimal bytes of data and are structured as shown below Header Start of Message Message Type Byte 1 Byte 2 Command Data Optional Data Bytes3
143. C697CPX935 LABEL 44A726758 154R01 Figure 3 2 Example of a Series 90 70 CPU with Three Serial Ports Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D CPU Serial Ports Series 90 70 CPU Serial Ports Details m Port 1 the top port on these CPUs is RS 232 compatible It has 6 pin female RJ 11 connector This connector looks similar to the smaller modular jacks commonly used for telephones and modems GE Fanuc s serial cable part number IC693CBL3106 is a convenient way to connect to this port Chapter 8 of this manual contains a data sheet for cable IC693CBL316 Port 2 the middle port is RS 485 compatible is isolated through an optocoupler It is has 15 pin female D shell connector m Port 3 Standard SNP Port the bottom port is also RS 485 compatible but is not iso lated It has 15 pin female D shell connector Series 90 70 CPU LED Indicators These CPUs have three serial port LED indicators labeled P2 and P3 which enable you to determine the status of serial port activity on the CPUs without having a terminal connected For location of these LEDs please see the previous figure m The P1 LED top LED is ON when data is being transferred through Port 1 m P2 LED middle LED is ON when data is being transferred through Port 2 m The P2 LED bottom LED is ON when data is being t
144. CMM in the desired rack see Chapter 2 and connected a cable between the Logicmaster 90 or Hand Held Programmer and the PLC Performed Rack Configuration and selected the desired communications parameters for the CMM See Chapter 2 Verified that configuration is valid Stored the configuration to the PLC See Chapter 2 Installed the serial communications cable if you are executing a remote command See Chapter 8 for cable diagrams Written and Stored the ladder program below a similar program Ladder Program Example Use the following ladder program to become familiar with programming CCM Commands and to verify that your system is connected and operating properly In the CCM Command examples that follow simply substitute the values of the provided Com mand Block into the BLOCK MOVE instructions of the ladder program example below Then place the PLC in RUN mode You can check the Status Word and appropriate data tables to see if the command executed properly In the ladder program example the inputs are defined as follows The IN input assigns Register 0005 as the beginning of the Command Block The SYSID input indicates that the location of the associated CMM is in rack 0 slot 2 Make sure this value matches your system configuration The TASK input indicates that commands will be executed by port 1 of the CMM 5 14 Series 90 PLC Serial Communications User s Manual Nove
145. CPU350 351 352 YES 9 00 or later CPU360 YES 9 00 or later CPU363 364 YES ALL CMM311 NO N A 90 70 NO 90 70 CPU S OR COMMUNICATIONS MODULES SUPPORT BREAK FREE SNP 90 Micro NO SERIES 90 MICRO PLC S SUPPORT BREAK FREE SNP VersaMax ALL VERSAMAX PLC S SUPPORT BREAK FREE SNP Flow Control Data Compression and Error Correction These should be disabled Flow control must be disabled because SNP uses the CTS signal for cable detection not flow control Data compression and error correction must be disabled be cause they cannot be used without flow control Error correction can modify the character tim ing but with enough of a modem buffer may be able to be used without flow control GFK 0582D General Modem Information Modem Operating Notes GFK 0582D If a communication error occurs while a configuration program or piece of a program is being downloaded to the PLC the PLC will clear itself and go into a STOP FAULT mode as a safety feature Therefore any processes or systems that are running WILL BE SHUT DOWN and a fault to the effect of a PLC Se quence Store Failure or some sort of CPU software fault will be logged into the PLC fault table The program will need to be re downloaded to the PLC or the PLC needs to be power cycled if the program and configuration are stored in FLASH or EEPROM in order to restore operation This possibility should be a serious consideration when com
146. CPUs that have three serial ports CPUs CPX772 CPX782 CPX928 and CPX935 each have two additional serial ports Ports 1 and 2 that were first activated in firmware release 7 80 CPUs CGR772 and CGR775 each have two additional serial ports Ports 1 and 2 that were first activated in firmware release 7 85 The following figure shows the location of these ports 45734 LED P1 LED P2 935 o __ D NEN ie LED P3 PROGRAMMER KEY POSITION FRONT P XX RUN P2 XX EN P3 XX PROTECT OK ENABLED PROTECTED RUN WITH OUTPUTS ENABLED RUN WITH OUTPUTS DISABLED z STOP BATTERY CONNEC TORS INSTALL NEW BATTERY BEFORE UNPLUGGING OLD BATTERY USE 1C697ACC701 Xm PIN 1 SERIAL PORT 1 SERIAL PORT 2 PIN 1 MODULE FUNCTION 96 MHz 32 BIT CENTRAL PROCESSING UNIT SERIAL PORT 1 RS 232 o i SERIAL PORT 2 11 RS 485 COMPATIBLE 55 FACTORY TEST SERIAL PORT 3 1 SERIAL PORT 3 11 RS 485 PING COMPATIBLE 0 USE THIS MODULE IN SLOT 1 ONLY MODULE 1
147. Click PLC on the Menu bar Click Connect on the PLC menu The Connect dialog box will appear In the Device column click the Device Name you created for the PLC you wish to connect to Click the Connect button to connect to the specified PLC SNP Multidrop Troubleshooting If you are having trouble connecting to a PLC or module over the multidrop system check the following GFK 0582D Is there a problem with all PLCs or only one Try connecting to other PLCs over the multidrop system If you cannot connect to any check for a common problem such as a defective cable If you can connect to all but one PLC use the direct connection method described in the next paragraph Also if you only have a problem with the last PLC on the multidrop link the last section of cable may have a problem Or perhaps you can connect to all PLCs up to a certain point but none beyond that point This would also strongly sug gest that there is a problem in a section of cable Appendix H SNP Multidrop 7 SNP ID may be incorrect You may not be able to connect because you are specifying the wrong SNP ID If you are not sure of a PLC s SNP ID and would like to check it you can connect your programmer directly to the PLC s programmer port and read its SNP ID from Logicmaster s ASSIGN PLC ID screen as described in Assigning an SNP ID to a PLC with Logicmaster above or in VersaPro click PLC on the Menu bar then click Status Info An status box
148. Converter Rules for Using Repeater Converters in Complex Networks When designing a complex multidrop network including PLCs and RS 422 repeater converters bricks the following rules apply Rule 1 When using a brick as a repeater port J2 should always be directed toward the host device and Port J1 should always be directed away from the host device The switch located on the side of the brick should always be in the center position ON The only case in which Port J1 is directed toward the host is when the brick is used as a converter RS 232 at the slave The switch is in the right position CTS Rule 2 Ifa Series 90 CMM slave device is located downstream of a brick set the configura tion of the CMM serial port to NONE flow control with a 10 ms Modem Turnaround Delay Applies to CCM SNP and SNP X protocols only Rule 3 Do not place more than 3 bricks in a single communication path between the host and the slave devices Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Obsolete Product 1 655 590 Isolated Repeater Converter Cable Diagrams for IC655CMM590 Converter The cable diagrams below are referred to as Cables A D from the system configurations in the previous figures These diagrams show the principles for constructing your own cables and can be modified to fit your specific application 2844929 PIN PIN J2
149. D L 1 Fanuc Telephone Numbers If you need to speak with a GE Fanuc technical help person use the applicable telephone number from the following list North America Canada Mexico Technical Support Toll Free 800 GE Fanuc Hotline Direct Dial 804 978 6036 Latin America for Mexico see above Direct Dial 804 978 6036 France Germany Luxembourg Switzerland and United Toll Free 00800 433 268 23 Kingdom Other European Countries 352 727 979 309 Asia Pacific Singapore 65 566 4918 Series 90 Product Repair The Series 90 products are for the most part not considered to be field repairable The one major exception are the few products such as certain output modules power supplies and a few option modules that have replaceable fuses GE Fanuc offers repair and product warranty services through your local distributor Contact your distributor for details Modem Support EIA Standards Modem manufacturers such as 3Com makers of US Robotics modems Motorola Boca Research and DATA LINC have web sites where you can find resources such as downloadable manuals and upgrades answers to Frequently Asked Questions application notes and modem cable diagrams The Electronic Industries Alliance formerly called Electronic Industries Association publishes communication standards such as the 232 RS 232 EIA 485 RS 485 interface stan dards Their web site can be found at http www eia org L 2
150. D REGISTERS FORMAT Address Func Starting Number of Error Check 03 Register No Registers Query Address Func Byte Error Check 03 Count Hi Lo Hi Lo Normal Response QUERY An address of 0 is not allowed as this request cannot be a broadcast request The function code is equal to 3 The starting register number is two bytes in length The starting register number may be any value less than the highest register number available in the attached Series 90 CPU It is equal to one less than the number of the first register returned in the normal response to this request The number of registers value is two bytes in length It must contain a value from 1 to 125 inclusive The sum of the starting register value and the number of registers value must be less than or equal to the highest register number available in the attached Series 90 CPU The high order byte of the starting register number and number of registers fields is sent as the first byte in each of these fields The low order byte is the second byte in each of these fields RESPONSE The byte count is a binary number from 2 to 250 inclusive It is the number of bytes in the normal response following the byte count and preceding the error check Note that the byte count is equal to two times the number of registers returned in the response maximum of 250 bytes 125 registers is set so that the entire response can fit into one 256 byte data block The regis
151. E FT 13 se FE 351 352 Device pg pg o TERM or 363 RTS Fg Fg 6 7 RTS B 14 RTS B F CTS 15 CTS 1 Li 8 CTS OVI 7 OV lt mE EE AJ 1 SHLD 15 PIN FEMALE Connector Depends MALE on User Device TERMINATION CONNECTIONS On the CPU end jumper pins 9 and 10 as shown to connect internal 120 ohm resistor If user device does not have internal termination resistor connect 120 ohm resistor across RD A and RD B at the user device end On CPUs 351 352 and 363 only Port 2 supports both Serial I O RS 422 RS 485 Figure 8 19 4 Wire Serial RS 422 RS 485 CPU to User Device Configuring Serial Duplex Mode Parameter Series 90 30 CPUs 351 352 and 363 have supported the Serial I O protocol Write mode since firmware release 8 00 Starting with firmware release 9 00 these modules were given a Duplex Mode parameter that allows 2 Wire or 4 Wire selection Starting with firmware release 10 00 CPUs 352 and 363 support the Serial Read mode also However GE Fanuc does not plan to update CPU351 beyond firmware release 9 11 therefore CPU351 will not support Serial I O Read The following table gives details on product support for Serial I O 8 14 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Serial Cable Diagrams and Converters Table 8 2 Products Supporting th
152. E les ad s ey REDUCED BY CONFIGURING THE CABLE DAISY Cs zd las Deora um PIN SW ON CHAIN FASHION AS SHOWN BELOW 16 RD E MASTER CMM SLAVE 1 17 gt 15 SD A 14 sb E ISOLATED 19 TERM EB REPEATER E gt CONVERTER 18 TERM F BRICK CPU BUILT 150 OHMS rm gt USED AS A q 7 ao FP 25 25 ALSO IT IS RECOMMENDED MAKE NECESSARY MALE FEMALE CONNECTIONS INSIDE THE CABLE CONNECTOR TO BE MOUNTED ON THE CMM IT IS NOT RECOMMENDED TQ USE TERMINAL STRIPS OR OTHER TYPES OF CONNECTORS ALONG THE LENGTH OF THE TRANSMISSION LINE TO OTHER DEVICES MAXIMUM OF 8 DEVICES ON A MULTIDROP TERMINATE THE RD B SIGNAL ONLY AT END OF MULTIDROP CABLE TERMINATE CONNECTION ON FIRST AND LAST DROPS ONLY ON THE CMM INSTALL JUMPER TO CONNECT INTERNAL 120 OHM RESISTOR ON THE ISOLATED REPEATER CONVERTER INSTALL 150 OHM RESISTOR SUPPLIED ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure N 7 Cable C RS 422 Twisted Pair Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Obsolete Product 1 655 590 Isolated Repeater Converter SHIELDED MAKE CONNECT
153. Error Codes 6 12 Information codes E 1 Service Request Error Codes Initialize Port function 9 18 9 19 SNP DOS Driver Error Codes 6 7 SNP X Slave Error Codes 6 14 Input Buffer Flush 9 20 Input Buffer Set Up 9 19 Errors Noise E 2 Butter se p 9 19 Installi d Configuring 2 7 Errors Transmission Timing E 3 PM N QR Installing the Hardware 2 8 Establish Datagram SNP Command 6 58 Interface Standards E 6 Establish SNP X Session 7 64 RS 232 E 6 Establishing a Datagram 7 54 RS 449 RS 422 RS 485 E 7 Establishing SNP Communication 7 48 Internet GE Fanuc site L 1 Isolated Repeater Converter Cable Diagrams N 7 F System Configurations N 5 Fault Table Format 6 54 Fax Link system L 1 L Force Multiple Outputs RTU message 7 38 Ladder Program Example Force Single Output RTU message 7 33 CCM Program Example 3 14 SNP Program Example Framin Errors E 3 LED Indicators 2 3 Function codes M 2 Module OK LED CPU 351 3 3 P2 CPU 351 3 3 3 7 G Serial Port LEDs 2 3 Glossary of Terms A 1 Line Serial Communications E 5 Long Attach SNP Command 6 65 H Long Break 7 61 Loopback Maintenance RTU message 7 36 Hardware Description 2 2 Series 90 30 CPU M LED Indicators 3 3 Serial Ports Master Slave Series 90 70 CPU Memory Addresses figure 3 6 CCM Me
154. FFFF Word 21 65535 FFFF Re enable RS 485 receiver delay 0 65534 ms See Chapter 7 CCM Protocol for a description of the use and value of each CCM timer and counter The RS 485 operating mode parameter allows the RS 485 driver to be configured to operate either as a 2 wire or 4 wire transmittter 4 wire is the default operating mode Specifying 2 wire operation disables the RS 485 receiver while the RS 485 driver is transmitting The RS 485 receiver is re enabled once the transmitter completes and any re enable receiver delay has expired The Re enable receiver delay parameter allows the RS 485 driver to delay the re enabling of the RS 485 receivers once the transmitter completes a transmission The delay is specified in units of milliseconds in the range 0 65534 ms Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 8 Read Target to Source Memory 06101 06103 1705 1707 Description Remote Command This set of commands is used to read information from the target device to one of the three source memory types listed below Source Memory Type Command Number Register Table 06101 Input Table 06102 Output Table 06103 The target memory types which can be accessed are Target Memory Type Type Number Example Register Table Input Table Output Table CCM Scratch Pad Diagnostic Status Words Read from target CCM Diagnostic Status Words 1 9 to source registers 00936
155. FK 0582D 8 Memory Addressing and Data Lengths In order to carry out a data transfer the CCM protocol must be given the address at which the transfer is to begin and the length of the data to be transferred The starting address plus the length must not exceed the end of a table boundary The requirements for specification of the starting address and data length are explained in this section followed by general guidelines for replacing a Series One Three Five or Six PLC with a Series 90 PLC in an application using CCM protocol CCM Memory Addresses The memory addresses in the following table are target addresses when the responding device is a Series 90 PLC These addresses source addresses when the initiating device is a Series 90 PLC Table 5 5 Target Source Memory Addresses Memory Type Description Address Ranges 1 Register Specified the register with which the data 1 Maximum Units transfer is to begin Input Table Specifies the input or output point with which the 1 Maximum Units Output Table data transfer is to begin Source memory address must be on a byte boundary that is 1 9 17 2 Diagnostic Specifies the diagnostic status word with which the Status Words data transfer is to begin 13 Bit Set Input Specifies the input or output point to be set 1 Maximum Units 14 Bit Set Output 17 Bit Clear Input Specifies the input or output point to be cleared 1 Maximum Units 18 Bi
156. Format of Communication Request Function Serial I O is implemented through the use of Communication Request functions The operations of the protocol such as transmitting a character through the serial port or wait ing for an input character are implemented through the function block The COMMREQ requires that all its command data be placed in the correct order in a mand block in the CPU memory before it is executed The should then be execut ed by a contact of a transition one shot coil to prevent sending the data multiple times A se ries of Block Move BLKMV commands should be used to move the words to create a command block in the Register tables The COMMREQ function has three inputs and one output When the function receives power flow a command block of data is sent to the specified module Address of command block first FT Enable COMM REQ Location SYSID Task identifier TASK Parameters of the COMMREQ Function Input Choices Description Output Enable On or Off When the Enable input goes high the communications request is performed IN AQ IN contains the address of the first word of the command block SYSID Q M T G SYSID contains the rack number most significant byte and Al slot number least significant byte of the target device For the constant CPU SYS
157. GFK 0582D O 1 Pin Assignments RS 232 Port The pinout of the Miniconverter is shown in the following two tables The first table shows the pinout for the RS 232 port The direction of signal flow is with respect to the Miniconverter Table O 1 Miniconverter RS 232 Port 1 SD Send Data RD Receive Data GND Ground CTS Clear To Send RTS Request To Send The pinouts were chosen to allow direct connection using a straight through or 1 to 1 cable as provided with kit to the PC AT Most compatible computers equipped with an RS 232 port will provide a pinout compatible with the one shown above Pin Assignments RS 422 Port Table F 2 is the pinout for the Miniconverter s RS 422 serial port The direction of signal flow is also with respect to the Miniconverter Table O 2 Miniconverter RS 422 Port Sir Same SHLD Shield 5 VDC Power 5 Clear To Send GND Ground RTS B Request To Send RT Receive Termination SD A Send Data SD B Send Data RD A Receive Data RD B Receive Data CTS B Clear To Send RTS A Request To Send Series 90 Serial Communications Manual November 2000 GFK 0582D 1 690 901 Miniconverter and Cable o System Configurations The Miniconverter can be used in a point to point configuration as described above or in a multi drop configuration with the host device configured as the master and
158. ID must specify rack 0 slot 1 0001 hex TASK RAI AQ TASK specifies which port on the target device will be used constant task 19 13 Hex for port 1 task 20 14 Hex for port 2 FT High Low FT goes high if an error is detected processing the COMMREQ e specified target address is not present SYSID e specified task is not valid for the device TASK e data length is 0 e The device s status pointer address in the command block does not exist 9 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol 2 Command Block for the COMMREQ Function The Command Block starts at the reference specified in COMMREQ parameter IN The length of the Command Block depends on the amount of data sent to the device The Command Block contains the data to be communicated to the other device plus informa tion related to the execution of the COMMREQ The Command Block has the following basic structure which will vary somewhat for the different COMMREQ commands address Length in words of Data Block address 1 Wait No Wait Flag address 2 COMMREQ Status Word Memory type code address 3 COMMREQ Status Word Pointer Offset value address 4 Idle Timeout Value address 5 Maximum Communication Time address 6 to Data Block Actual Length Depends on Command address 133 Number GFK 0582D Chapter 9 Serial I O Protocol 9 5
159. IONS 244932 TWISTED INSIDE D CONNECTORS SW oN PIN PAIRS i PIN CN m 13 RD gt SD m 121 sp SERIES 90 ISOLATED L1 Lli e RTS CMM REPEATER LI XXL 122 ars CONVERTER PORT BRICK ES 150 OHMS Fg Lt E AN Li J24 F2 2 7 GND 1 SHLD 25 25 25 FEMALE MALE FEMALE WHEN WIRING RS 422 485 MULTIDROPCABLES 1 REFLECTIONS ON THE TRANSMISSION 1 LINE CAN BE REDUCED BY CONFIGURING THE C POS PIN J1 SW CTS J2 CABLE IN A DAISY CHAIN FASHION AS e 15 RD 0 SHOWN BELOW 4 14 RD B 16 SD MASTER CMM SLAVE 1 l 1520 06 ISOLATED 4 13 RTS 0 0 REPEATER 4 12 RTS B CONVERTER D BRICK 0 E USED AS A CPU BUILT IN PORT CMM SLAVE 2 50 OHMS 75 TERM ES 0 CONVERTER WA 23 TERM gt 9 4 7 GND D 1 BFN PN MALE FEMALE ALSO IT IS RECOMMENDED TO MAKE ANY EXXX NECESSARY CONNECTIONS INSIDE THE CABLE CONNECTOR BE MOUNTED THE CMM IS NOT RECOMMENDED TO USE TERMINAL STRIPS OR OTHER TYPES CES PEN 238 EQ 80 OF CONNECTORS ALONG THE LENGTH c SW ON THE TRANSMISSION LINE 4 16 RD 4 17 RD B 15 50 LK 4 14 50 8 ISOLATED t BTS A 90 conventen 10 RTS B 7 BD BRICK
160. IUM SHORT NONE LONG NONE 10 ms 100 ms 500 ms NONE 1 254 1 Modem Turnaround Delay CCM CPU ID Table 2 2 RTU Communications Parameters RTU Enable YES NO Interface RS232 RS485 Data Rate 300 600 1200 2400 4800 9600 19200 19200 Flow Control Parity Station Address NONE HARDWARE NONE ODD EVEN NONE 1 247 Table 2 3 SNP Communications Parameters SNP Enable YES NO YES SNP Mode SLAVE MASTER SLAVE Interface RS485 RS232 RS485 Data Rate 300 600 1200 2400 4800 9600 19200 19200 Flow Control NONE HARDWARE NONE Parity ODD EVEN NONE ODD Stop Bits 1 2 1 Timeout LONG MEDIUM SHORT NONE LONG Modem Turnaround Delay NONE 10 ms 100 ms 500 ms NONE For the CMM311 module port 1 is RS 232 only 2 12 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D CCM Modules Notes on Communication Parameters Interface RTU SNP The Interface field specifies the type of electrical interface used at this serial port Valid selections are RS 485 or RS 232 Note that for the module port 1 operates as RS 232 only Flow Control CCM RTU and SNP The Flow Control field specifies the method of flow control to use at this serial port Valid selections are NONE or HARDWARE timing dia grams below illustrate the state of the flow control lines for
161. L GROUND 7 i 2 RS 232 DTR PORT 1 PORT 1 RS 232 DCD X X 8U RS 485 SD PORT 2 45 RS 485 RD PORT 2 PORT 2 RS 485 SD 9 X 2 22 7 RS 485 RTS PORT 2 PORT 2 RS 485 RTS A 10 Z 23 7 RS 485 CTS PORT 2 PORT 2 RS 485 CTS X Z 24 7 TERMINATION RD PORT 2 PORT 2 TERMINATION CTS 2 72 div PORT 2 RS 485 RD Figure 2 4 Serial Port Pin Assignments for the IC693CMM311 The 5 485 signals for port 2 and the RS 232 signals for port 1 are assigned to the standard connector pins The RS 232 signals for port 2 are assigned to normally unused connector pins IC693CBL305 Wye Cable Wye cable IC693CBL305 is supplied with each Series 90 30 CMM and PCM module The purpose of the Wye cable is to separate the two ports from a single physical connector that is the cable separates out the signals In addition the Wye cable makes cables used with the Se ries 90 70 CMM fully compatible with the Series 90 30 CMM and PCM modules The IC693CBL305 Wye cable is 1 foot in length and has a right angle connector on the end that connects to the serial port on the CMM module The other end of the cable has dual connec tors one connector is labeled PORT 1 the other connector is labeled PORT 2 see figure be low The IC693CBL305 Wye cable routes the Port 2 RS 232 signals to the RS 232 designated pins If you do
162. M memory types supported by the Series 90 Table C 3 Memory Types Supported by Series 90 Type Register Table Input Table Output Table CCM Scratch Pad Diagnostic Status Words Input Table Output Table Input Table Output Table Read Write Read Write Read Write Read Read Bit Set Bit Set Bit Clear Bit Clear Those Series Six memory types which not supported are summarized in the following table Table C 4 Series Six Memory Types NOT Supported by the Series 90 CCM Absolute Input Override Table Output Override Table User Logic Quick Access Buffer Timers Counters Input Override Table Output Override Table Input Override Table Output Override Table Input Override Table Output Override Table Appendix C CCM Compatibility Bit Set Bit Set Bit Clear Bit Clear Bit Toggle Bit Toggle C 3 C 4 The next two tables compare the Series One and Series Five CCM memory types with those supported by the Series 90 CCM Table C 5 Series One Memory Types vs Series 99 CCM Memory Types Series One CCM Series 90 CCM Memory Type Target Table Memory Type Target Table 1 Weile _ 5 23 mens owe __ s qmm C o 3 The addressing scheme for the Series One differs from that of the Series 90 when accessing I O points 2 Scratch pad definitions are not the same in the Series One PLC and the Series 90 PLC See Table 11
163. MREQ status word for exam ple a value of 99 gives an address of 100 for the status word Address 4 0 Only used in Wait No Wait mode Idle Timeout Value Address 5 0 Only used in Wait No Wait mode Maximum Communication Time Address 6 FFFOH Command Word serial port setup Address 7 0001 Protocol 1 SNP Address 8 0000 Slave Port Mode Address 9 7238400 6219200 529600 424800 Data Rate Address 0 None 1 Odd 2 Even Parity 10 Address 1 None Flow Control 11 Address 0 None 1011 2 100ms 3 Turnaround Delay 12 500ms Address 0 Long 1 Medium 2 Short 3 Timeout 13 None Address 1 8 bits Bits Per Character 14 Address 0 1 Stop Bit 1 2 Stop bits Stop Bits 15 Address not used Interface 16 Address not used Duplex Mode 17 Address user provided Device identifier bytes 1 and 2 18 Address user provided Device identifier bytes 3 and 4 19 Address user provided Device identifier bytes 5 and 6 20 Address user provided Device identifier bytes 7 and 8 21 X The device identifier for SNP Slave ports is packed into words with the least significant character in the least significant byte of the word For example if the first two characters are A and B the Address 18 will contain the hex value 4241 9 10 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol Data Block for Configuring P
164. Message Next Message Not Used Block Check Length Code Bytes 21 22 Byte 23 Byte 24 Chapter 7 Protocol Definition RTU SNP and SNP X 7 67 The contents of the Header Command Data and Trailer for the X Request message are further described below Start of Message 1Bh Start of message character Byte 2 Message Type SNP X Message 58h X Command Data Bytes 3 10 SNP ID SNP ID of desired SNP X slave Byte 11 Request Code Desired service request code Bytes 12 18 Command Specific Depends upon command Data Trailer Byte 19 End of Block 17h End of block character Byte20 Message Type Next message type 0 or 54h T Bytes 21 22 Next Message Length Next message length in bytes Byte 23 Unused 0 Not used always 0 Byte 24 Block Check Code Calculated BCC value for this message The SNP ID field contains the SNP ID of the slave device to which this message is sent This field may also contain the special Null SNP ID all 8 bytes 00h or the special Broadcast SNP ID all 8 bytes FFh The Request Code and Command Specific Data fields vary with each SNP X command The trailer portion of the X Request message indicates whether a data buffer message will be used If a data buffer is used the Next Message Type field is set to 54h the message type of the X Buffer message the Next Message Length field is set to the length of the entire X Buffer message header data and tr
165. Only the I Q 96M or T bit oriented memory types permitted see the Memory Type table Table 6 1 If the X Status Bits location is not specified both the memory type and address values are 0 the X Status Bits information is not written to the PLC The layout of the X Status Bits is specified below bitn 2 bit n 1 bit n X WRITE X READ X ACTIVE The ACTIVE bit indicates that an SNP X communication session is active this slave device is able to receive data transmission X requests while this bit is set This bit is set when a new SNP X communication session is established this bit is cleared whenever a Break is received or a fatal error occurs The READ and WRITE bits indicate that a remote X request has been successfully com pleted by this slave device The appropriate bit is set after completion of each successful re Chapter 6 SNP Service 6 25 mote read or write X request PLC application ladder must detect the X READ and X WRITE bits in every sweep Upon detection each bit must be immediately cleared in order to correctly detect the next remote X request completion Note The X Status Bits operate slightly differently for slave devices on CMM mod ules the Series 90 CPU Serial Ports 1 and 2 and on the Series 90 CPU standard SNP serial port For the Series 90 CPU standard SNP port the X Status Bits are located at predefined memory locations and are always updated after SNP X slave op
166. PU is running It is equal to 0 if the Series 90 CPU is not running The data field contains three bytes Possible responses for the Series 90 70 CPUs 84 00 00 for CFR782 80 00 00 for CPU780 24 00 00 for CPU924 7 40 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X MESSAGE 67 READ SCRATCH PAD MEMORY FORMAT Address Func Starting Number of Error Check 67 Byte Number Bytes Query Address Func Byte Data Error Check 67 Count Normal Response QUERY An address of 0 is not allowed as this cannot be broadcast request The function code is equal to 67 The starting byte number is two bytes in length and may be any value less than or equal to the highest scratch pad memory address available in the attached Series 90 CPU as indi cated in the table below The starting byte number is equal to the address of the first scratch pad memory byte returned in the normal response to this request The number of bytes value is two bytes in length It specifies the number of scratch pad memory locations bytes returned in the normal response The sum of the starting byte number and the number of bytes values must be less than two plus the highest scratch pad memory address available in the attached Series 90 CPU The high order byte of the start ing byte number and number of bytes fields is sent as the first byte in each of these fi
167. Program In terface a non generic driver will re configure the modem and essentially ruin any user edited parameters in the modem upon dialing Modems Properties aE General The following modems are set up on this computer Modem Attached To Standard S600 bps Modem COM1 Standard Modem COM2 Add Remove Properties Dialing Preferences Dialing from New Location Use Dialing Properties to modify how your calls are dialed Dialing Properties Close 2 With the standard modem selected click on the PROPERTIES button Under the MAXI MUM SPEED for that modem choose 9600 or other desired baud rate if it is not already selected GFK 0582D Appendix K Using Modems with VersaPro and Control K 3 K 4 Standard 9600 bps Modem Properties Speaker voume 3 Under the CONNECTION tab the Data bits should be 8 Parity should be NONE Stop bits should be 1 Standard 9600 bps Modem Properties ee a Disconnect tanmore TT 4 Click on the ADVANCED button de select the FLOW CONTROL checkbox the modem is not a Standard Modem the USE ERROR CONTROL checkbox may be checked Uncheck it The EXTRA SETTINGS textbox needs to be populated with the AT commands from the modem configuration settings documentation provided either from faxlink or the web The AT commands can be put on a single line by putting the AT fi
168. R TO CONNECT INTERNAL 120 OHM RESISTOR ON THE ISOLATED REPEATER CONVERTER INSTALL 150 OHM RESISTOR SUPPLIED Figure N 6 Cable B RS 422 CMM To Converter GFK 0582D Appendix N IC655CMM590 Isolated Repeater Converter N 7 Obsolete Product SUBSTITUTE APPROPRIATE UP STREAM DEVICE 244931 WITHIN DOTTED BOX PER SYSTEM DIAGRAMS SHIELDED MAKE CONNECTIONS r 1 TWISTEDINSIDE D CONNECTORS PIN PAIRS 4 A lt 50 9 lt 50 8 21 SERIES 90 r1 Il CMM e RD 13 SERIES lt RD B 25 TT 90 IM M 1 Fg 10R2 lt 4 10 Fg Fg PORT CTS A 11 lt RTS 22 ial OR S cts 23 11 pg 2 7 1 4 25 25 fe 2112 25 FEMALE MALE FEMALE A Sp J2 ON PIN H Sw crs J2 p ISOLATED ISOLATED REPEATER REPEATER CONVERTER CONVERTER BRICK BRICK 150 OHMS LI x USED AS DON CONVERTER 117 25 PIN i Fal 25 PIN 25 PIN FEMALE E 7 4 2 MALE FEMALE 1 X x WHEN WIRING RS 422 485 MULTIDROPCABLES REFLECTIONS ON THE TRANSMISSION LINE CAN B
169. RD RS 232 244225 25 PIN FEMALE CONNECTOR 1FOOT gt 2 0 INCH 0 INCH LABEL PORT Na PORT2 PCM COMM CABLE IC693CBL305B b PING RS 232 RS 232 RS 485 PIN 1 25 PIN MALE 25 PIN FEMALE CONNECTOR IC693CBL305 CONNECTOR Figure 2 5 IC693CBL305 Wye Cable Connections Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Modules Section 2 Installing and Configuring the This section explains how to install the CMM the rack Series 90 70 or baseplate Series 90 30 and how to configure the module using Logicmaster 90 or the windows based program ming software Topics covered are What you will Need Installing the CMM Configuring the CMM What you will Need GFK 0582D Before you can begin the installation procedure you must have the following equipment and software packages A Series 90 70 or Series 90 30 Programmable Logic Controller PLC For Series 90 30 the CPU must be a model CPU331 or higher Communications Coprocessor Module to install and test C697CMM111 for a Series 90 70 CMM C693CMM311 for a Series 90 30 CMM If this application uses CCM protocol with standard default settings for a Series 90 30 CMM CMM 311 no other equipment is require
170. RD B 25 NE SLAVE MASTER n m S TERM 24 24 BORT PORT RTS A 10 10 1082 lt RTS 22 Il Il 22 On lt CTS 11 Il 11 2 1 23 4 m 23 ov 7 7 SHLD 1 M 1 25 25 Ul 25 FEMALE MALE 4 N FEMALE LXX lt 13 UP TO A 25 9 SERIES 90 4000 FEET e 21 CMM NOTE 1200 METERS SLAVE WHEN WIRING RS 422 485 MULTIDROPCABLES 24 REFLECTIONS ON THE TRANSMISSION 10 PORT LINE CAN BE REDUCED BY CONFIGURING THE 22 CABLE IN DAISY CHAIN FASHION AS OR SHOWN BELOW 2 MASTER CMM SLAVE 1 7 gt 1 25 FEMALE 1 x x CPU BUILT IN PORT CMM SLAVE 2 JA j PIN q 1 RD A L5 RD ALSO IT IS RECOMMENDED TO MAKE ANY 2 SD A 09 series 90 NECESSARY CONNECTIONS INSIDE THE 13 50 9 pics CABLE CONNECTOR TO BE MOUNTED ON ELIT THE CMM IT IS NOT RECOMMENDED TO 9 TERM o ceu USE TERMINAL STRIPS OR OTHER TYPES RTS A 00 OF CONNECTORS ALONG THE LENGTH OF 14 RTS B 00 port THE TRANSMISSION LINE 15 CTS E 0 CTS 00 e 7 ow 20 0 TERMINATE CONNECTION AT FIRST AND LAST 2 1 9 DROPS THE AND SERIES 90 CPUS Ec INSTALL JUMPER TO CONNECT INTERNAL 120 15 PIN 15 PIN OHM RESISTOR 2 MALE FEMALE ON THE CMM311
171. RS 422 RS 485 Cable Diagrams 8 5 RS 422 RS 485 Interface and Cabling Information 8 5 RS 422 RS 485 Cable Diagrams 8 6 2 Wire and 4 Wire RTU RS422 RS485 Cable Connections 8 10 2 Wire and 4 Wire RS 422 RS 485 Serial I O Connections 8 14 GFK 0582D Series 90 PLC Serial Communications User s Manual November 2000 xi Contents Section 4 IC693CBL316 Serial 8 16 Section 5 IC690CBL714A MultidropCable 8 17 Chapter 9 Serial UO 1 9 1 Overview of Serial I O Protocol Communications 9 2 Serial Communications Sequence of Operations 9 3 Format of the Communication Request Function 9 4 Command Block for the COMMREQ Function 9 5 Example of a Serial Instruction 9 6 Configuring Serial Ports Using the Function 9 8 Slave SNP Slave Operation With Programmer Attached 9 9 COMMREQ Command Block for Configuring SNP Protocol 9 10 COMMREQ Data Block for Configuring RTU 9 11 COMMREQ Data Block for Configuring Serial I O Protocol 9 12 Calling Serial COMMREQs from the PLC Sweep 9 13
172. RTU 2 Wire with any version of the CPU363 or with version 9 00 or later of either CPU351 or CPU352 the Message 08 issue is not a problem GFK 0582D Chapter 8 Serial Cable Diagrams and Converters 8 13 2 Wire and 4 Wire RS 422 RS 485 Serial I O Connections Connection Diagrams He 10 Rb Port 2 d 1 lt SD rt 11 RD RDA L3 L 1 12 5 CPUS 351 User RD Fg Fg 13 r 352 363 Device lt 11 9 mrm RTS A Fg Fg 6 RTS A RTS B Da Vt 14 RTS B CTS 15 gt CTS 8 cTS B ov 7 SHLD UP PENES AJ 1 SHLD 15 Connector Depends on User Device MALE TERMINATION CONNECTIONS On the CPU end jumper pins 9 and 10 as shown to connect internal 120 ohm resistor If user device does not have internal termination resistor connect 120 ohm resistor across RD A and RD B at the user device end On CPUs 351 352 and 363 only Port 2 supports both Serial I O and RS 422 RS 485 Figure 8 18 2 Wire Serial RS 422 RS 485 CPU to User Device SD A c 10 Rb Port 2 peace 0 l l l 90 30 RDA i 12 50 CPUs User MERI BD N
173. S 485 repeater converter catalog number 1 655 590 Horner Electric HE48518O232 can be used as a replacement Broadband Network A network which can handle medium to large size applications with up to several hundred stations as a typical number which might be attached Broadband technology is used in larger networking systems and requires headend remodulator Bus An electrical path for transmitting and receiving data that is usually shared by two or more devices Byte A group of binary digits operated on as a single unit In Series 90 PLCs a byte is made up of 8 bits Carrierband Network A network designed to handle small to medium size applications with 6 20 stations as a typical number of stations which might be attached Carrierband technology is often used in Local Area Networks Communication Control Module CCM2 CCM3 The Communications Control Module provides a serial interface between the Series Six PLC and other devices on the network which can initiate communications based on the CCM protocol Communication Coprocessor Module CMM The Communication Coprocessor Module provides a serial interface between the Se ries 90 70 or Series 90 30 and other devices on the network CMM modules support the CCM RTU and SNP protocols Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Glossary Communication Windows Communication between the ladder logic program and t
174. ST IN1 Q R0012 00006 00008 CONST IN2 CONST IN2 00000 00101 CONST IN3 CONST IN3 00008 00001 CONST IN4 CONST IN4 00000 00008 CONST IN5 CONST IN5 00000 00102 CONST IN6 CONST IN6 00000 00000 CONST IN7 CONST IN7 07202 00000 END OF PROGRAM LOGIC GFK 0582D Chapter 6 SNP Service 6 19 s SNP Commands The following table lists the SNP commands that can be initiated by a COMMREQ Most can be issued only to a serial port configured as an SNP master Remote commands provide com munication between a master and slave Unless otherwise indicated the master may send any remote command to any Series 90 slave certain remote commands are valid only when com municating with a Series 90 70 slave Local commands are executed without communication 6 20 to a remote device Note The first issued to a CMM module after PLC powerup must be delayed the CMM cannot accept COMMREQs when the PLC application is started A delay of 2 seconds past first scan is recommended Table 6 10 SNP Commands SNP Command Local Commands Clear Diagnostic Status Words Read Diagnostic Status Words Change SNP ID Set X Status Bits Address Disable Break Free SNP Slave Operation Enable Break Free SNP Slave Operation Remote SNP X Commands X Read X Write Remote SNP Commands Attach Change Privilege Level Read System Memory Write System Memory Read Task Memory
175. SW ON J1 fac ed 2 a 3 RD o5 of RD i 2 sD 00 5 0 RIS 4 4 NS 59 05 SERIES 90 PTS n LS ISOLATED 0 ow 00 pep 8 na 0 REPEATER 00 001 DTR 20 F 00 converter 90 PORT 0 fi 12 7 00 UM 2 bg bg 59 00 001 Fg 9 00 0 0 04 0 GND 7 7 GND gt 0 0 0 0 1002 smo e ee AJ E gt 0 0 25 PIN 25 PIN 25 PIN 25 PIN FEMALE MALE MALE FEMALE Figure N 5 Cable A RS 232 CMM To Converter 844930 PIN PIN J2 SW ON lt 0 2 4 SD 9 E XX c 16 Go 7 001 spew 21 17 RD B 00 9 00 24 RD A 13 1 15 50 0 0 0 0 0 o SERIES 90 09 RD B 25 12 8048 L o ISOLATED 0 cw 1901 lt 12 LJ E 19 e to 00 lt Fg Fg 18 TERM 00 PORT 0 4 10 Il gt 10 RTS B BRICK 04 10R2 0 CTS A 11 1 12 CTS B gt 00 0 0 0 i lt RIS 22 Fg Fg 11 RTS A o 0 001 S CTs 23 60 04 0 GND 7 7 GND o 00 0 sup 1 L 9 9 0 2 25 PIN 25 PIN 25 PIN 25 PIN FEMALE MALE MALE FEMALE TERMINATE CONNECTION ON THE CMM INSTALL JUMPE
176. Serial COMMREQ Status Word Codes 9 14 Serial COMMREQ Commands 9 16 COMMREQ Overlap Considerations 9 17 Initialize Port Function 4300 9 18 Set Up Input Buffer Function 4301 9 19 Flush Input buffer Function 4302 9 20 Read port status Function 4303 9 21 Port Status Words i i os ee 9 22 Write port control Function 4304 9 23 Cancel COMMREQ Function 4399 9 24 Autodial Function 4400 9 25 Autodial Command Block 9 26 Write bytes Function 4401 9 27 Read bytes Function 4402 9 28 Return Data Format for the Read Bytes Function 9 29 Read String Function 4403 9 30 Return Data Format for the Read String 9 31 Appendix Glossary Ack Commonly used Acronyms and Abbreviations A 2 Glossary of Terms eR epe me RR Ee duce RR RR e durs
177. Series 90 Micro PLC Serial Communications Protocol Support Micro SNP SNPX Slave SNP SNPX Master 4 Wire RTU 2 Wire RTU PLCs Slave Slave 14 point Port 1 not supported Port 1 Port 1 releases Rel 3 00 and later Rel 3 10 and later 23 point Ports 1 and 2 Port 2 Port 2 Port 2 Rel 3 00 and later Rel 3 00 and later Rel 3 00 and later Rel 3 10 and later 28 point Ports 1 and 2 Port 2 Port 2 Port 2 Rel 2 01 and later Rel 3 00 and later Rel 3 00 and later Rel 3 10 and later Also requires the following versions or later hardware IC693UDROO1LP1 IC693UDROO2LPI IC693UAA003JP1 IC693UDRO005JP1 IC693UALO006BPI IC693UAA007HP1 and IC693UDROIOBPI Serial Communications Protocol Overview 0582 SNP and SNP X Protocols The SNP protocol is a proprietary communications protocol developed by GE Fanuc Automa tion It is the native communications protocol for all models of the Series 90 PLC product line The SNP X protocol is a highly optimized extension of SNP While it offers fewer functions than SNP SNP X is simpler to use and provides a significant performance improvement over SNP It does not support PLC programming or configuration operations The SNP and SNP X protocol allows for the following types of operation Master the initiating device in a Master Slave system only available on CMM and PCM modules Slave the responding device in a Master Slave system The SNP m
178. T EPROM ETB ETX American Standard Code for Information Inter change Acknowledge control character Block Check Code Binary Coded Decimal Bus Expansion Module Bus Receiver Module Bus Transmitter Module Bits Per Second Refers to protocol originally developed for the Communications Control Module for the Series Six PLC Communication Configuration Utility Abbreviation of the catalog number of the Communications Coprocessor Module A nickname for that module COMMunication REQuest Central Processing Unit Cyclic Redundancy Check Clear to Send control signal Data Carrier Detect control signal Data Communications Equipment Direct Memory Access Disk Operating System Data Set Ready Data Terminal Equipment Data Terminal Ready control signal Electronics Industries Association Electronically Erasable Programmable Read Only Memory Enquiry control character End of Transmission control character Erasable Programmable Read Only Memory End of Transmission Block control character End of Text control character Series 90 PLC Serial Communications User s Manual November 2000 FCC lo IEEE ISO KB LAN LED LRC MAP MB MODEM MTU NAK PC PCM PLC PROM RTU RTS RD RXD SCADA SNP SNP X SOH STX SD TXD TAPI VME WAP Federal Communications Commission Hexadecimal Input Output Institute of Electrical and Electronics Engineers International Standards Organization 1024 Kiloby
179. Table 6 11 for a description of the Piggy back Status Data area See Table 6 1 for valid memory types and addresses The T1 2 T3 T4 and T5 fields specify the new values of the various SNP timers SNP timer values are specified in milliseconds The T1 T2 and T3 timer values will be negotiated between the master and slave devices See Chapter 7 Protocol Definition Section 3 SNP Pro tocol for an explanation of the SNP timers and their usage In this COMMREQ specifying the value of 0 for any timer disables the timer When a modem is being used the T4 timer should be set to 600 msec or greater to allow the Break to be transmitted correctly The Modem Turnaround Delay field specifies the duration of time required by the modem to turn the communication link around The duration is specified in milliseconds and the default value is 0 The Transmission Delay Time field specifies a time period in seconds to account for unusually long delays in transmission between SNP devices Unusually long delays are typical of communications via satellite This value is specified in seconds and the default value is 0 The Maximum SNP Data Size field provides the ability to reduce the size of SNP data messages transmitted over the wire Communications in noisy environments may require a smaller mes sage size to minimize transmission errors This value must fall in the range of 42 to 1000 bytes and be an even number of bytes The default value is 1
180. Task Memory 07204 1 24 6 42 Write Task Memory 07205 1C25 6 43 Read Program Block Memory 07206 1C26 6 44 Write Program Block Memory 07207 1 27 6 45 PLC Short Status 07208 1 28 6 46 Return Control Program Name 07209 1 29 6 48 Return Controller Type and ID Information 07210 1C2A 6 50 Return PLC Time Date 07211 1 6 52 Return Fault Table 07212 1 2 6 53 Set PLC Time Date 07213 1C2D 6 55 Toggle Force System Memory 07214 1 2 6 56 Establish Datagram 07215 2 6 58 Update Datagram 07216 1C30 6 61 Cancel Datagram 07217 6 62 Update Real Time Datagram 07218 1C32 6 63 Long Attach 07300 1C84 6 65 Autodial Command 07400 1CE8 6 68 Chapter 7 Protocol Definition 8 8 7 1 Section 1 CCM 1 7 2 Overview of CCM 1 1 7 2 CCM Peer to Peer Mode
181. The basic characteristics of RS 232 are Supports direct point to point communications Maximum nominal cable length 50 feet 15 meters Maximum nominal data rate 20 Kilobits sec Logic assignments referenced to signal ground Space or logic 0 3v to 425v Mark or logic 1 3v to 25v Uses 25 pin D type connector 9 also supported but some optional signals not avail able Includes 21 interchange circuits including data transmit and receive data control and tim ing The most commonly used circuits are Note For applications requiring distances longer than 50 feet improved noise immunity and or multi drop connections support for more than two devices inexpensive converters are available to convert RS 232 to RS 485 the GE Fanuc IC690ACC901 miniconverter is de scribed in Appendix Information on 5 485 is provided later in this appendix Table E 3 Standard RS 232 Communication Interface Signals 1 Protective Ground PROT GND s mener mm emer Receive Line Signal Detect RLSD Contro To DTE or Data Carrier Detect or DCD 20 Data Terminal Ready From DTE The RS 232 interface can be used for direct connections not exceeding 50 feet 15 meters The following illustration shows the lines required for both devices to transmit and to receive TS G TR Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Serial Line Interface
182. The following table details the meaning of each bit in Port Status Word 1 Bit Name Definition Meaning 15 RI Read In progress Se Read Bytes or Read String invoked Cleared Previous Read bytes or String has timed out been canceled or finished 14 RS Read Success Se Read Bytes or Read String has successfully completed Cleared New Read Bytes or Read String invoked 13 RT Read Time out Se Receive timeout occurred during Read Bytes or Read String Cleared New Read Bytes or Read String invoked 12 WI Write In progress Se New Write Bytes invoked Cleared Previously invoked Write Bytes has timed out been canceled or finished 11 WS Write Success Se Previously invoked Write Bytes has successfully completed Cleared New Write Bytes invoked 10 WT Write Time out Se Transmit timeout occurred during Write Bytes Cleared New Write Bytes invoked 9 CA Character Available Se Unread characters are in the buffer Cleared No unread characters in the buffer 8 OF OverFlow error Se Overflow error occurred on the serial port or internal buffer Cleared Read Port Status invoked Cleared after port status is read 7 FE Framing Error Se Framing error occurred on the serial port Cleared Read Port Status invoked Cleared after port status is read 6 PE Parity Error Se Parity error occurred on the serial port Cleared Read Port Status invoked Cleared a
183. Timeout parameter selections The T4 timer value may be optional ly specified by the Long Attach command The maximum time that the slave device will delay while preparing response message It is started when the final request acknowl edgement is sent to the master If the response message is not ready to send within the T5 time the slave sends a keep alive message to the master to prevent TS timeout at the master The TS timer usu ally keeps track of the time that the SNP slave waits for the Service Request Processor The T5 timer default value is specified by the CMM configuration Timeout parameter default values range from 0 disabled to 5 sec The T5 value used by the master device may be modified by the Long Attach command The T5 timer value is not negotiated be tween the master and slave devices the slave device always uses its configured T5 timer value The T5 timer is also disabled whenever the T2 timer Acknowledgement Timeout is disabled The T5 timer is always set to the current T5 timer value plus the time required to transfer 80 characters at the selected data rate plus any negotiated Modem Turnaround Time The T5 value is recalcu lated whenever a new T5 timer value is established If the T2 or T5 timer is disabled the 5 timer is also disabled The maximum time a station will wait for the other station to send an expected Buffer message as part of an SNP request or response It is started after acknowl
184. UMPER TO CONNECT INTERNAL 120 OHMS RESISTOR ON THE CMM311 ONLY PORT 2 CAN SUPPORT RS 422 RS 485 Figure 8 13 CMM to Multiple CMMs 2 Wire Multidrop GFK 0582D Chapter 8 Serial Cable Diagrams and Converters 6 9 2 Wire 4 Wire RS422 RS485 Cable Connections The RTU protocol only supports half duplex operation however it may be wired in either a 2 wire or 4 wire arrangement In 4 Wire RTU the four wires are comprised of two transmit wires and two receive wires see the following Wiring Diagrams section In 2 Wire RTU the transmit and receive pins are jumpered together in a parallel connection on the serial port connector at each device so that the two wires are shared by the transmit and receive functions In the 2 Wire figures below notice that SD A is jumpered to RD and SD B is jumpered to RD B Signal Ground Wire and Cable Considerations Note the use of a separate signal ground 0 volt wire in the next several figures Although called 2 Wire RTU and 4 Wire RTU we recommend you use an additional wire for the signal ground connection especially under the following conditions There is a chance of significant electrical noise being introduced into the signal lines The lines are long enough to significantly attenuate the signal or produce a significant difference in ground potential In environments where excessive electrical noise is generated for example near spot weld
185. User s Manual November 2000 00017 0011 00000 0000 00008 0008 00000 0000 00000 0000 00000 0000 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used 07101 IBBD SNP X Command Number 00000 0000 00000 0000 00000 0000 00000 0000 00000 0000 00008 0008 00201 00C9 00010 000A 00070 0046 00001 0001 00008 0008 00032 0020 00000 0000 00000 0000 00000 0000 00000 0000 Characters 1 and 2 of Slave SNP ID null null Characters 3 and 4 of Slave SNP ID null null Characters 5 and 6 of Slave SNP ID null null Characters 7 and 8 of Slave SNP ID null null Communication Session type 0 single session 1 multi session Slave Memory from which to read data Slave Address from which to read data Register 201 Number of Master Memory Type elements to read Master Memory Type to store data 1 Master Address to store data Input 1 Master Memory Type to store Slave PLC Status Word Master Address to store Slave PLC Status Word Register 32 Response Timeout in msec 0 use default Broadcast Delay in msec 0 use default Modem Turnaround Time in msec Transmission Delay in msec GFK 0582D GFK 0582D SNP Service 5 The SNP ID field specifies the slave device from which data will be retrieved The null SNP ID all bytes 00h may be used only when the single
186. Write Task Memory Read Program Block Memory Write Program Block Memory PLC Short Status Return Control Program Name Return Controller Type and ID Return PLC Time Date Return Fault Table Set PLC Time Date Toggle Force System Memory Establish Datagram Update Datagram Cancel Datagram Update Real Time Datagram Long Attach Special Purpose Commands Autodial 7000 7001 7002 7003 7004 7005 7101 7102 7200 7201 7202 7203 7204 7205 7206 7207 7208 7209 7210 7211 7212 7213 7214 7215 7216 7217 7218 7300 7400 Command Number 1B58 1B59 1B5A 1B5B 5 IBSD 1BBD 1BBE 1C20 1 21 22 1 23 1 24 1C25 1C26 4C27 1C28 1C29 1C2A 1C2B 1C2C 1C2D 1C2E 1C2F 1 30 1C31 1 32 1 84 1 8 x x x to 90 70 only to 90 70 only to 90 70 only to 90 70 only X X X lt x x x x x x x x X This Command is valid only when communicating with a Series 90 70 slave device All SNP command examples in this section return the Status Word to Register R00001 Series 90 PLC Serial Communications User s Manual November 2000 x KM 0582 SNP Service 5 Clear Diagnostic Status Words 07000 1B58 Available Modes Master and Slave GFK 0582D Description
187. a appendix provides a table of the standard ASCII American Standard Code for Information Interchange characters 3 24 4 5 lt lt gt G H I J K L M N 0 5 U V W X Y Z GFK 0582D B 1 Appendix CCM Compatibility C This section compares the Series 90 CCM implementation with the CCM implementation of the Series Six Series One and Series Five PLCs The following table lists the CCM Commands supported by the Series 90 PLC Table C 1 Series 90 CCM Commands GFK 0582D C 1 The following table summarizes those Series Six CCM commands not supported by the Series 90 PLC Table C 2 Series Six CCM Commands NOT Supported by the Series 90 CCM 6004 6009 Quick Access Buffer Manipulations 6106 6116 6010 Set CPU Memory Write Protect 6011 Re initialize CCM Task 6012 Set OIU Timers and Counters I O Override Table Manipulations Character String Manipulations unformatted read write 6117 Write to Target from Source User Logic 6130 Set CCM Retries 6131 Set CCM Timeouts 1 Functionality is available in a Series 90 PLC but in a slightly different form See Series 90 CCM command code 6004 Software Configuration Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 05820 CCM Compatibility The following table summarizes the CC
188. a certain message from the remote device be initiated within 5mS of receiving the message this method may not be successful if the PLC sweep time is 5mS or longer Since Serial I O is completely driven by the application program in STOP mode a port config ured as Serial I O automatically reverts to SNP slave to facilitate programmer communication Therefore while in Stop mode Serial I O protocol is not active it is only active when the PLC is in Run mode Protocol Incompatibility The COMMREQ function blocks supported by Serial I O are not supported by other currently existing protocols such as SNP slave SNP master and RTU slave Errors are returned if a Serial is attempted for a port configured for one of those other protocols To avoid this problem you must configure the port for Serial I O There are two ways to do this 1 Using the configuration software configure the protocol for the applicable port to a setting of CUSTOM or Serial Either one or the other will be offered as a choice for ports supporting Serial I O For example in VersaPro 1 1 in the CPU363 Serial Port configuration window the Port Mode parameter choice would be Serial I O However the term CUSTOM is used both in Logicmaster and in the VersaPro 1 1 Seri al Port configuration window for CPU351 2 Activate a COMMREQ that configures the applicable port for Serial I O as discussed in the previous section Chapter 9 Serial I O P
189. ached slave device Register Memory Register 201 from master device Input Memory 961 Inputs 1 10 The least significant 10 bits of R201 in the slave device are filled with data from the master device the remaining bits of R201 in the slave device are set to 0 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 00006 0006 00000 0000 00008 0008 00000 0000 00000 0000 00000 0000 07203 1C23 00008 0008 00201 00C9 00010 000A 00070 0046 00001 0001 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Slave Memory Type to store data Slave Address to store data Register 201 Number of Master Memory Type elements to write Master Memory Type from which to write data 1 Master Address from which to write data Input 1 The Number of Master Memory Type elements to write field is specified in units consistent with the unit length of the Master Memory Type See Table 6 1 for valid memory types and ad dresses Note The SNP master on the CMM module and CPU 351 and CPU 352 serial ports limit this command to a total data length of 2048 bytes 1024 words Note When master and slave memory types do not match zero fill will take place GFK 0582D Chapter 6 SNP Service 6 41 s Read Task Memory 07204 1C24 Available M
190. adecimal A numbering system having 16 as a base represented by the digits O through 9 then A through F Initiating Station The station from which communication originates Input An externally developed signal that provides information to the PLC usually via an input module Inputs may be discrete ON or OFF or analog having a range of val ues Input Module An I O module that converts signals from user devices to logic levels used by the CPU Interface To connect a Programmable Logic Controller with its application devices communica tions channels and peripherals through various modules and cables I O Input Output That portion of the PLC to which field devices are connected Scan A method by which the CPU monitors all inputs and controls all outputs within a pre scribed time ISO Standards The International Standards Organization ISO for Open System Interconnection OSD ISO Reference Model for Open System Interconnection An international standard for network architectures which define a seven layer model The intent is to provide a network design framework to allow equipment from different vendors to be able to communicate Isolation A method of separating field wiring from logic level circuitry Typically accomplished through the use of optical isolation devices An abbreviation for kilo or exactly 1024 as applied to computer based devices Usual ly related to 1024 words of memory Equal to 2 r
191. ader Transfer After receiving a positive acknowledge to the enquire sequence the initiat ing device sends a 17 character message called the header The header block specifies direc tion memory type and address and length of data transfer bytes in the header except for the CCM control characters are in ASCII coded hexadecimal format If the header is correct the target station will respond with a positive acknowledge ACK If the header is incorrect the target will respond with a negative acknowledge NAK The header format and descriptions of the fields within the header are shown below Data No of No of Flow Dir Complete Bytes in amp Data Last Mem Blocks Block 4 10 11 12 13 Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 3 7 4 Table 7 2 Header Block Description Ron CS Target ID Identification number of the target device 1 255 decimal peer peer Value is represented as ASCII coded hexadeci 1 90 decimal master slave mal peer to peer mode a value of FFh 255 decimal is recognized accepted by any device Data Flow Direction Bytes 4 and 5 supply target memory type Byte Will vary depending on target de Target Memory Type 4 also specifies data direction read or write vice See Table 33 Value is represented as ASCII coded hexadeci mal Target Memory Ad This field specifies the starting address for the Will vary depending on target de dress data transfer Va
192. ailer If a data buffer message is not used these fields in the X Request trailer are set to zero 7 68 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X X Response Message Structure GFK 0582D The SNP X slave transmits an SNP X Response Message X Response after processing a di rected X Request message to complete the X Request or to permit the master to send more data The X Response message contains a slave PLC Status Word described earlier an error status word major and minor error code bytes and up to 1000 decimal bytes of data A special X Response message called an Intermediate Response and denoted by a special Mes sage Type value is used to acknowledge the reception of an X Request message which will be followed by a data buffer message The Intermediate Response contains no data the PLC Sta tus Word and Error Status Code fields are not meaningful The only purpose of the Intermedi ate Response message is to acknowledge the X Request message and to permit transmission of the data buffer message When the slave device has detected an error the error is indicated by a non zero Error Status Code The PLC Status Word is set to zero and the message contains no data the Data Length is set to zero X Response messages are structured as shown below Header Start of Message Message Type Byte 1 Byte 2 Command Data Response PLC Statu
193. aised to the 10th power Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Glossary Keep Alive Message A message generated by the SNP master or slave for the sole purpose of preventing a timeout at the attached device that is keep the SNP communication alive Ladder Diagram A representation of control logic relay systems The user programmed logic is ex pressed in relay equivalent symbols LED An acronym for Light Emitting Diode which is a solid state device commonly used as a visual indicator in electronic equipment Local Area Network LAN A communication network covering a limited physical space and having intermediate data transport capability Logic A fixed set of responses outputs to various external conditions inputs possible situations for both synchronous and asynchronous activity must be specified by the user Also referred to as the program Logic Memory In the Series Six PLC dedicated CMOS RAM memory accessible by the user for stor age of user ladder programs Long Attach An SNP Attach message followed by an SNP Parameter Select message Used to es tablish SNP communications and to negotiate non default operating parameters be tween the SNP master and a specific SNP slave device See Chapter 7 Section 3 SNP Protocol for details Manufacturing Automation Protocol MAP MAP communication protocol is specified by the Manufacturing Automation Protoco
194. amming software will essentially communicate as if it were connected directly to the PLC Note This approach MAY NOT WORK for PCMCIA modems 1 HyperTerminal is located under the START menu PROGRAMS ACCESSORIES HYPERTERMINAL In WIN98 HyperTerminal is under ACCESSORIES COMMU NICATIONS In HyperTerminal enter a name for the connection Naming and saving the connection makes it easier to re connect in the future In the Test Properties dialog box for the connection next to CONNECT USING choose the com port that the modem is connected or mapped to as shown in the next figure Make sure you select a physical com and not a port that has the name of a modem test Properties Connect To Settings X County code United States of America 1 Enter the area code without the lona distance Area code 904 Phone number Connect using Configure Use county code and area code busy 2 Click on the CONFIGURE button to configure the communications parameters Set the baud rate to 9600 or other desired baud rate data bits to 8 parity to none stop bits to 1 and flow control to none Click OK to accept the parameters Note Modems auto baud to the settings of the DTE when in command mode This means that any port settings will work to configure the modem and dial it How ever when the modem is in data mode connected to another modem the m
195. and 2 were added over a period of time in various firmware releases Firmware releases pertaining to communications features are documented in the following tables A complete firmware release history is avail able on the technical support section of the GE Fanuc web site http www gefanuc com support PLC GFK 0582D Chapter 3 Series 90 CPU Serial Ports 3 3 3 4 Table 3 1 Features of CPU351 Serial Ports 1 and 2 Feature Firmware Release Firmware Release Firmware Release Firmware Release 6 52 8 00 9 00 10 00 SNP Master Slave Yes Yes Not Available SNP X Master Yes Yes Yes ot Available Slave Indicates CPU firmware release in which the feature was first available When CPU351 was initially released it was equipped with firmware release 6 00 latest firmware available for CPU351 is release 9 11 It is not planned to upgrade the CPU351 beyond that release Table 3 2 Features of CPU352 Serial Ports 1 and 2 Feature Firmware Release Firmware Release Firmware Release Firmware Release 7 00 8 00 9 00 10 00 SNP Master Slave Yes Yes Yes SNP X Master Yes Yes Yes Yes Slave Indicates CPU firmware release in which the feature was first available When CPU352 was initially re leased it was equipped with firmware release 7 00 Table 3 3 Feaures of CPU363 Serial Ports 1 and 2 Firmware Release 9 00 Firmware Release 10 00 SNP Master Slave Yes Yes SNP X Master Slave Yes Yes
196. and Block GFK 0582D The Command Block contains the details of a Communications Request The address of the Command Block is specified by the IN input of the COMMREQ Ladder Instruction This ad dress be in any word oriented area of memory L R AI or Com mand Block structure can be placed in the designated memory area using an appropriate pro gramming instruction the BLOCK MOVE instruction is recommended The Command Block has the following structure Status Pointer Memory Type Word 3 Status Pointer Offset Word 4 Idle Timeout Value Word 5 Maximum Communication Time Word 6 Data Block Words 7 up to 134 When entering information for the Command Block refer to these definitions Data Block Length Word 1 This is the length of the Data Block portion of the Command Block 1 to 128 words The Data Block portion starts at Word 7 of the Command Block The length is measured from the beginning of the Data Block at Word 7 not from the beginning of the Command Block WAIT NOWAIT Flag Word 2 This flag determines whether the Series 90 PLC will wait until the CMM or CPU 351 or CPU 352 serial ports receive intended data before continu ing Valid values are 0 NOWAIT 1 WAIT for reply The request can either send a message and wait for a reply or send a message and continue without waiting for a reply If the Command Block specifies that the program will not wait for a reply the Comm
197. and Block contents are sent to the CMM and ladder program execution re sumes immediately This is referred to as NOWAIT mode If the Command Block specifies that the program will wait for a reply the Command Block contents are sent to the targeted device and the CPU waits for a reply The maximum length of time the PLC will wait for the device to respond is specified in the Command Block If the device does not respond in that time ladder program execution resumes This is referred to as WAIT mode Chapter 4 Initiating Communications The COMMREQ 4 7 When using the CCM Protocol it is recommended that this flag be set to NO WAIT Otherwise the time spent by the CCM Protocol could negatively im pact the CPU sweep When using the SNP Protocol this flag must be set to NOWAIT Any SNP with the WAIT flag set will be immediately returned with an error Status Word Pointer Memory Type Word 3 The Status Word is written into PLC CPU memory at the location specified by Command Block Word 3 and Word 4 The format of this location includes memory type Word 3 and offset Word 4 Abbreviation Memory Type Value to Enter Decimal Hexadecimal Discrete input table 0 Discrete output table R Register memory Analog input table Analog output table Status Word Pointer Offset Word 4 This word contains the offset within the memory type selected The status word pointer offset is a zero based num
198. and slave devices via an Attach or Long Attach The Update Real Time Datagram request differs from the Update Datagram request in that previous com munication to the desired slave device is not required Update Real Time Datagram is a special service where the master establishes a new commu nication to a specified slave device indicates a previously established Datagram ID and then immediately retrieves the Datagram data from the slave device Since a separate Attach request is not required the Update Real Time Datagram service provides the fastest way to poll many slave devices in a multidrop arrangement The Update Real Time Datagram service retrieves only permanent Datagrams from the slave device See the Datagram Lifetime section below for a description of normal and permanent Datagrams The basic SNP message flow for the Update Real Time Datagram service is shown in the figure below Request Response Master T4 delay UpdReal Optional Figure 7 14 Message Flow Update Real Time Datagram Note Any existing SNP communication is aborted when the master sends an Update Real Time Datagram request This request generates a Break sequence which forces all slave devices on the serial link to abort any existing communication and to wait for an Attach or Update Real Time Datagram request Like an Attach request the Update Real Time Datagram request specifies a particular slave de vice The specified slave device acknowledge
199. anual November 2000 GFK 0582D Appendix GFK 0582D D RTU Compatibility This appendix compares the function code set for the Series 90 Series Six and Series Five PLCs and the CIMPLICITY System 3000 Models I and W Table D 1 RTU Function Codes Comparison o9 OX OX OX X pesmem o o3 Dx Dx x x qesmeme o3 Dx x Dx x esee x X X N l gt gt es sin on e DX DX 3x x x u Ee os e xpomep mmm u Ee Series 90 is Read Analog Inputs Series Five and Series Six are Read Registers CIMPLICITY is Read Input Registers Appendix Serial Line Interface E The Serial Line Interface encodes decodes messages according to a particular information code and performs parity checking of each character received over the serial line The drivers for the transmission line are also part of the Serial Line Interface This appendix covers the following topics Information Codes Transmission Errors and Detection Asynchronous Transmission e Serial Communications Line Information Codes An information code is a standard by which numbers letters symbols and control characters are presented for serial transmission In the CCM protocol characters in headers as well as control characters are encoded Other characters such as those occurring in data are uncoded binary data There are a number of different cod
200. apter 7 Section 3 SNP Protocol for details Asynchronous Transmission of data in which time intervals between transmitted characters may be of unequal length Asynchronous transmission is controlled by start and stop bits at the beginning and end of each character Backplane A group of connectors physically mounted at the back of a rack so that printed circuit boards can be mated to them Baud A unit of data transmission speed equal to the number of code elements per second Binary A numbering system that uses only the digits 0 and 1 This system is also called base 2 Appendix A Glossary 3 4 Bit The smallest unit of memory Can be used to store only one piece of information that has two states for example a One Zero On Off Good Bad Yes No etc Data that requires more than two states for example numerical values 000 999 will require multiple bits Break A wake up signal transmitted on the serial line which precedes each new SNP commu nication session See Chapter 7 Section 3 SNP Protocol for details Break Free SNP An updated version of the SNP protocol providing break free operation When normal breaks are received SNP SNP X communication is identical to previous versions of the protocol requiring the long break However this version of the protocol can also recognize an Attach or X Attach message without a preceding break Brick A nickname for the obsolete GE Fanuc isolated RS 232 R
201. ard SNP port is accessed through the power supply connector Ports 1 and 2 are accessed by connectors on the front of the module shown in the figure below For many applications each port serves as an independent window into the PLC for communicating with other devices such as industrial computers pagers and operator interface terminals These serial ports are configurable using GE Fanuc s Logicmaster Control or VersaPro PLC software Ports 1 and 2 can also be configured using a Communications Request COMM REQ Instruction in a ladder logic program PS CPU 363 PIN 1 PIN 1 PIN 1 CPU363 Bue CPU351 352 Connector Figure 3 1 CPU Features CPUs 351 and 352 look identical except for labeling Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D CPU Serial Ports Serial Ports Details These ports can be used for serial interfaces to Operator Interface terminals OIs Human to Machine Interface terminals HMIs pagers programmers modems and other serial commu nications devices Also CPU352 and CPU363 support the Serial I O Read function that en ables them to read input from devices such as bar code readers This function is not supported on the CPU351 Port 1 the top port on these CPUs is a non isolated RS 232 compatible port Port 1 is accessed through a 6 pin RJ 11 connector on the front of the module This connector has female contacts and is similar to modular jacks commonl
202. are not supported by Series 90 70 slave devices Significant restrictions exist when using bit oriented memory types in a Point Format in Series 90 30 or Series 90 20 slave devices The slave memory defined by the Point Format must not exceed a standard byte of slave memory elements 1 to 8 9 to 16 N 8 1 to N 8 8 Since any bit oriented memory can also be referenced as byte oriented memory it is recommended and necessary for Series 90 70 slave devices to use a byte ori ented instead of bit oriented memory type in a Point Format There is no restriction on using byte oriented memory in a Point Format See Chapter 6 SNP Services Table 16 Memory Types Unit Lengths and Valid Ranges for a listing of all memory types This table also shows the byte oriented equivalents for each bit oriented memory type 7 54 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Retrieving Datagram The slave memory areas defined by a Datagram are returned to the master when the master is sues an Update Datagram or Update Real Time Datagram request The SNP master in the CMM stores the response data in the local PLC memory specified by the update command enough local PLC memory must be provided to store the entire response Update Real Time Datagram The Update Datagram request a Mailbox request requires that SNP communication has been established between the master
203. as implemented in the Micro PLC is a subset of the Modbus Remote Terminal Unit serial communications protocol Prior to Release 3 10 RTU protocol is only supported in the 4 wire implementation Support for 2 Wire RTU was added in Release 3 10 Table 1 5 lists the function codes supported by the Micro PLC Table 2 Function Codes Function Code Description 1 Read Output Table 2 Read Input Table 3 Read Registers 4 Read Analog Input 5 Force Write Single Output 6 Preset Single Register 7 Read Exception Status 8 Loopback Maintenance 15 Force Write Multiple Outputs 16 Preset Multiple Registers 17 Report Device Type 67 Read Scratch Pad Memory For the 14 point unit an additional feature is implemented that automatically detects whether the configuration programming software is attached to the Micro PLC The firmware will auto detect the presence of the programmer when RTU is the active protocol so that you only need to begin using the configuration programming software for a 14 point Micro to be able to com municate with it Port 1 All Models 15 D type female connector on the front of the Micro PLC provides the connection to an RS 422 compatible serial port which is used to communicate with Logicmaster 90 30 20 Micro software the HHP or for general purpose communications This port supports SNP and SNPX protocols On 14 point Micro PLCs this port also
204. as not received within the response timeout interval when establishing a new SNP X communication session The master has retried the X Attach message twice without receiving a response Communications have not been established 50h A parity error has occurred on an X Attach Response message when reestablish ing an existing SNP X communication session Communications have not been established Sih A framing or overrun error has occurred on an X Attach Response message when reestablishing an existing SNP X communication session Communications have not been established 52h A BCC Block Check Code error has occurred on an X Attach Response mes sage when reestablishing an existing SNP X communication session Commu nications have not been established 53h An invalid message type was received when an X Attach Response was required when reestablishing an existing SNP X communication session Communications have not been established 54h An invalid next message type value was detected in an X Attach Response mes sage when reestablishing an existing SNP X communication session Commu nications have not been established 55h An invalid response code was detected in an X Attach Response message when reestablishing an existing SNP X communication session Commu nications have not been established 56h An expected X Attach Response message was not received within the response timeout interval when reestablishing an existing SNP X comm
205. ast Delay field specifies a new value for the Broadcast Delay timer This time is the interval that the master must wait for all slave devices to establish an SNP X com munication session or to process a broadcast X command since the slave devices do not return a response to any broadcast message The new value is specified in milliseconds and is in ef fect for this only If not programmed or set to zero the master uses the T2 timer value as selected by the Timeouts configuration parameter The optional Modem Turnaround Time field specifies a new Modem Turnaround Time value This is the time interval required by a connected modem to turn the link around The new value is specified in milliseconds and is in effect for this COMMREQ only If not programmed the master uses the value selected by the Modem Turnaround Delay configuration parameter The optional Transmission Delay field specifies a new Transmission Delay value This time inter val accounts for unusually long time delays in transmission between the master and slave devices Such unusually long delays are typical of communications via satellite The new value is specified in milliseconds and is in effect for this COMMREQ only If not programmed the master uses the value selected by the Timeouts configuration parameter Chapter 6 SNP Service 6 33 s Attach 07200 1C20 Available Modes Master Description Remote command The Attach command establishes a communica
206. ast Sweep Time This value is equal to the time taken by the last complete sweep for the main control program task The value is in 100 microsecond increments and is measured from Start of Sweep 1 to Start of Sweep X PLC Status Word The bits in this word are defined in the following table where bit 0 is the least significant bit and bit 15 is the most significant bit Recalling the convention of byte ordering within a word byte 5 is the least significant byte containing bits O through 7 and byte 6 is the most significant byte containing bits 8 through 15 as shown below The PLC Status Word bit assignments are described in the following table 6 36 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 6 Table 6 13 Slave PLC Status Word Data GFK 0582D Bit Number Description Bit 0 Bit 10 Bit 11 Bits 12 15 Chapter 6 SNP Service Oversweep flag meaningful only when constant sweep mode is active 1 Constant Sweep value exceeded 0 No oversweep condition exists Constant Sweep Mode 1 Constant Sweep Mode active 0 Constant Sweep Mode is not active PLC Fault Entry since last read 1 PLC fault table has changed since last read by this device 0 PLC fault table unchanged since last read Fault Entry since last read 1 T O fault table has changed since last read by this device 0 fault table unchanged since last read PLC Fault Entry Present
207. aster and slave as implemented on the CMM module do not support PLC program ming or configuration functions Logicmaster 90 may be connected to a CMM serial port con figured as an SNP slave for data display and modification only The SNP X protocol does not support PLC programming or configuration under any circumstances The SNP and SNP X protocols can be enabled on none one or both serial ports of the CMM module using either the RS 232 or RS 422 RS 485 electrical standard Essentially any com bination of protocols ports and electrical standards are available with one exception The Se ries 90 30 CMM cannot support RS 422 RS 485 on port 1 Port selection data rate parity flow control number of stop bits timeouts and turnaround delay values can be configured CCM Protocol protocol is included in the EPROM firmware for both the Series 90 70 and Series 90 30 CMM modules The CCM protocol was originally developed for the Series Six Communica tions Control Module CCM and is available on most GE Fanuc PLCs It is available on the CMM and PCM modules but not on Series 90 CPU serial ports The CCM protocol allows for the following types of operation Master the initiating device in a Master Slave system Slave the responding device a Master Slave system Chapter 1 Introduction 1 3 Peer initiates and responds to another Peer device The CCM protocol can be enabled on none one or both of the serial p
208. at an invalid scratch pad address or an input output table address not on a byte boundary that is 1 9 17 Serial communication was aborted after a data block transfer was retried three times or a number spe cified by the configuration 13 Serial communication was aborted after a header transfer was retried three times or a number specified by the configuration 14 Serial communication was aborted after Q Request was retried three times or a number specified by the configuration An attempt was made to set the Q Response data on a device not configured as a slave 20 14 One or more of the following errors occurred during a data block transfer An invalid STX character was received An invalid ETB character was received An invalid ETX character was received An invalid LRC character was received parity framing or overrun error occurred Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 8 Table 5 7 Continued Error Code 15 CM expected to receive character from an external device and did not receive it CCM expected to receive an EOT character from an external device and did not receive it ee eee 1 CCM expected to receive ACK character and did not receive either one to receive an ACK or NAK character and did not receive either one Communication was aborted when CCM did not
209. ata 2 Termination aj xe senda EXC s Data 25 SE Enable RS 232C Not Used SD Send Data and RD Receive Data are the same as TXD and RXD used in the Series NC No Connection Six PLC are the same as and A and B denote outputs and and denote inputs GFK 0582D Obsolete Product 1 655 590 Isolated Repeater Converter The signal ground connections pin 7 on each connector must be made be tween the Isolated Repeater Converter and the PLC for J1 and the Isolated Repeater Converter and the host computer for J2 Pin 7 of the J1 port is connected to the metal shell of the J1 connector Pin 7 of the J2 port is connected to the metal shell of the J2 connector These two sig nal ground connections are isolated from each other and are isolated from the power system ground green wire on the terminal block To maintain proper isolation these signal grounds cannot be tied together System Configurations The figures below show various ways you can connect the Isolated Repeater Converter to con vert signals expand the number of drops and obtain greater distance Any system configura tion can be reduced to a minimum number of cables each covering a part of the overall system configuration The example system configurations below refer to these cables as Cables A D shown in Cable Diagrams later in this section Downstream and Upstream Contention In this
210. ata Chapter 2 The Communications Coprocessor Modules 2 3 Restart Reset Pushbutton If the Restart Reset pushbutton is pressed when the MODULE OK LED is on the CMM will be re initialized from the Soft Switch Data settings If the MODULE OK LED is off hardware malfunction the Restart Reset pushbutton is inop erative power must be cycled to the entire PLC for CMM operation to resume Serial Ports The serial ports on the CMM are used to communicate with external devices The Series 90 70 CMM CMM 1711 has two serial ports with a connector for each port The Series 90 30 CMM CMM311 has two serial ports but only one connector The serial ports and connectors for each PLC are discussed below Serial Ports for the CMM711 The Series 90 70 CMM has two serial ports each of which support both RS 232 and RS 485 modes The pin assignments of the serial ports are identical Note When using the RS 485 mode the CMM can be connected to RS 422 devices as well as RS 485 devices The connector pin assignments for both ports of the Series 90 70 CMM are shown below 242734 SHIELD A 14 RESERVED RS 232 TD Q X 15 RESERVED RS 232 RD 3 16 RESERVED RS 232 RTS H 3 17 RESERVED RS 232 CTS H 3 18 RESERVED NO CONNECTION 3 19 RESERVED SIGNAL GROUND Q 20 RS 232 RS 232 DCD 9 Z 1 RS 485 SD B RS 485 SD 29 Z 22 RS 485 RTS B
211. ate the 12 bytes of short status information returned from the slave PLC The following table describes most of the PLC Short Status information The short status information includes the 6 bytes of Piggyback Status information carried on each response from the slave device See Table 6 1 for valid memory types and addresses See Table 6 13 for a detailed description of the Slave PLC Status Word 6 46 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 6 The table below includes information on the PLC Short Status Table 6 16 PLC Short Status Status Storage Area Word Location Byte Location Word 1 low byte Description Number of Control Programs 0 No program tasks currently defined 1 One program task defined for the PLC CPU Programmer Flags Set of boolean flags indicating which control program tasks have programmers currently attached to them Each bit posi tion corresponds to a control program task 0 no program mer attached 1 programmer attached where bit 0 corre sponds to control program 0 Since at most one control pro gram is currently allowed this byte is either zero or one Word2 low byte Byte 3 Login Types high byte Byte 4 2 bit codes indicating the type of login associated with each control program The 2 bit field beginning at bit 0 corre sponds to control program 0 Since there can be at most one control program in the current
212. aving your settings in a file lets you open the file and use the saved settings in future sessions In the Test Properties dialog box for the connection next to CONNECT USING choose the com port that the modem is connected or mapped to as shown in the next figure Make sure you select a physical com port and not a port that has the name of a modem test Properties 21x Connect To Settings test County code United States of America 1 Enter the area code without the lona distance Area code 804 Phone number e Connect using 1 Configure county cade and area code busy OK 2 Click on the CONFIGURE button to configure the communications parameters Set the baud rate to 9600 data bits to 8 parity to none stop bits to 1 and flow control to none Click OK to accept the parameters Windows is a registered trademark of Microsoft Corporation GFK 0582D Appendix J Using Modems with Logicmaster 7 J 8 Note Modems auto baud to the settings of the DTE when in command mode This means that any port settings will work to configure the modem and dial it How ever when the modem 15 in data mode connected to another modem the mo dem may not respond to the escape sequence unless it is sent at the same baud rate the modem is using COM1 Properties 2 Port Settings Bits per second Data bits
213. ay for the radio transmitter must be added before each transmission The CMM keys the radio transmitter to warm up and wait a short time before actually transmit ting the data The various timeout values for the communication protocol are increased to in clude the added delay When using microwave or radio transmitters the wiring depends on the particular modems and transmitters used Consult your local GE Fanuc Automation salesperson or Application Engi neering for assistance GFK 0582D F 3 Appendix IC690ACC903 Port Isolator G The IC690ACC903 5 485 Port Isolator replaces the IC655CMM590 Isolated Repeater Converter also referred to as the Brick This device features 500 volts of isolation in a compact package servicing all Series 90 30 Series 90 70 and VersaMax PLC product lines The Port Isolator connects either directly to an RS 485 serial port or through an optional 12 inch 30 cm extender cable 690 003 which may be ordered separately extension cable is intended for applications where direct connection to the port is obstructed by surrounding equipment or when it is not acceptable for the Port Isolator to protrude from a PLC module The Port Isolator can operate in either single or multi drop mode selected by a slide switch on the top of the unit see switch in figure below The Port Isolator provides the follow ing features Four opto isolated signal channels SD RD RTS and CTS Electrical c
214. be 0 through 4 or 1 Invalid Fault Table selector Must be 1 for I O Fault Table or 2 for PLC Fault Table 11h Invalid Fault Table starting index Must be 1 32 for I O Fault Table or 1 16 for PLC Fault Table el Invalid fault count Must be 1 32 for I O Fault Table or 1 16 for PLC Fault Table Invalid Set PLC Date Time mode Must be 1 4 20 14h Invalid Set PLC Date Time date time or day of week value Unable to retrieve master device PLC time date from PLC CPU Invalid slave PLC type Must be 0 for Series 90 70 or 1 for Series 90 30 or Series 90 20 Invalid datagram type Must be 01h for normal datagram or 81h 129 for permanent datagram Missing or too many datagram point formats Must be 1 32 Invalid datagram point format data Datagram area size is too small to include data for all specified point formats Invalid number of Control Program Names Must be 1 8 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 5 Table 6 5 Minor Error Codes for Major Error Code 12 0Ch Continued Error Status Local SNP SNP X Error Description SNP X Request exceeds maximum data size 1000 bytes Must use a smaller data length Use multiple COMMREQs if necessary 29 1Dh Invalid SNP X communication session type Must be 0 for a single slave de vice or 1 for multiple slave devices Illegal destination SNP ID specified for SNP X slave Must be 0 7 ASCII charac ters
215. be either CONNECT or OK Note Minor Error Codes 1 21 indicate non fatal errors the SNP X communication session is not terminated GFK 0582D Chapter 6 SNP Service 6 13 Table 6 8 Minor Error Codes for Major Error Code 15 0Fh Error Status SNP X Slave Error Description 1 Olh The service request code in an X Request message is unsupported or invalid at this time This error may occur if an SNP X communication session has not been success fully established at the slave device 2 02h Insufficient privilege level in the slave PLC CPU for the requested SNP X service Password protection at PLC CPU may be preventing the requested service Invalid slave memory type in X Request message a Invalid slave memory address or range in X Request message Invalid data length in X Request message Data length must be non zero and may not exceed decimal 1000 bytes 06h X Buffer data length does not match the service request in X Request message The X Buffer message length is obtained from the Next Message Length field in the X Request message the length of the data within the buffer message is always the message length minus 8 bytes 7 07h Queue Full indication from Service Request Processor in slave PLC CPU The slave is temporarily unable to complete the service request the master should try again later It is recommended that the master wait at least 10 msec before repeating the X Request This error applies to CMM module o
216. be used in lieu of a specific SNP ID the slave device will respond to the Null SNP ID as if its own SNP ID had been speci fied The X Read command may not be broadcast since SNP X slave devices must not re spond to any broadcast command The following diagram and table describe the actual protocol transactions involved in an X Read command Chapter 7 Protocol Definition RTU SNP and SNP X 7 75 Example of Direct X Read Command This example shows the message exchange of an X Read command Master X Read Request message 1B 58 41 42 43 44 45 46 00 00 01 08 00 00 04 00 00 00 17 00 00 00 00 1A Slave X Read Response message 1B 58 81 00 00 00 00 08 00 31 32 33 34 35 36 37 38 17 00 00 00 00 B6 Explanation of Direct X Read Command Byte Hex Value Number X Read Request Message 1 2 58 3 10 41 42 43 44 45 46 00 00 11 01 12 08 13 14 00 00 15 6 0400 1718 00 00 19 17 20 23 00 00 00 00 24 1 X Read Response Message 1 2 58 3 81 45 00 00 67 00 00 8 9 08 00 10 17 31 32 33 34 35 36 37 38 18 17 19 22 00 00 00 00 23 B6 Description Start of message character 1Bh SNP X Command X 58h SNP ID of target slave X Read request code 018 Segment Selector R in word mode Data Offset 0000h O zero based R1 Data Length 0004h 4 registers Not used always 0 End of block character 17h marks the b
217. ber For example if you want as the location of the Status Word you must specify a zero for the offset The offset for 100 would be 99 For information on the contents of the CCM Status Word see Chapter 5 CCM Service For information on the contents of the SNP Status Word see Chapter 6 SNP Service Idle Timeout Value Word 5 The idle timeout value is the maximum time the PLC waits for the CMM to acknowledge receipt of the request For NOWAIT this value is not used Any timeout value is ignored it can be zero If WAIT is selected this word specifies the idle time out period in 100 microsecond increments Maximum Communication Time Word 6 This word contains the maximum amount of time the program should hold the window open when the CMM is busy For NOWAIT this value is not used Any timeout value is ignored it can be zero If WAIT is selected this word specifies the maximum time in 100 microsecond increments Data Block Words 7 134 The Data Block contains information about the request in a for mat that depends on the communication protocol being used For Data Block information on the CCM protocol see Chapter 5 CCM Service The CCM Data Block is a maximum of 6 words long For Data Block information on the SNP protocol see Chapter 6 SNP Service The SNP Data Block length depends upon the particular SNP command Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Chapter GFK
218. ber 2000 GFK 0582D SNP Service 5 Update Datagram 07216 1C30 Available Modes Master Description Remote command The slave device must be attached and a datagram must have been estab lished before issuing this command see Attach and Establish Datagram commands The master sends an Update Datagram request the slave responds with data This service provides the master with the capability to retrieve a pre defined datagram area from the slave device Once the datagram is established the datagram can be retrieved by its Datagram ID as often as neces sary until the datagram is cancelled or if a normal datagram until the slave device is detached If the datagram is a permanent datagram and the slave device 15 detached the datagram does not have to be re established before issuing the Update Datagram command Example Command Block Update the permanent datagram with Datagram ID 1 in the attached slave device and store the returned data in master device Register Memory beginning at Register 201 Word 1 00005 0005 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07216 1C30 SNP Command Number Word 8 00001 0001 Datagram ID Word 9 00129 0081 Datagram Type Normal 1 Permanent 8 1h Word 10 00008 0008 Master Memory Type
219. ber of Break Sequences Received This word indicates the number of Break sequences received by this SNP device Used by slave devices only When a Break sequence is received any existing SNP communication is aborted The Break sequence immediately precedes each new SNP communication SNP Software Version Number This word indicates the version number of the communica tion firmware in this CMM module The version number consists of two hexadecimal numbers high byte low byte Error Data Block These 6 words contain the first 6 words of the COMMREQ Data Block from the most recent failure Used by both master and slave devices slave devices perform local COMMREQ commands only This data can help to identify the which has failed Chapter 6 SNP Service 6 23 s Change SNP ID 07002 1B5A Available Modes Slave Description Local command The slave device in the CMM module defaults to the same SNP ID as the built in slave device in the PLC CPU This command changes the SNP ID of the CMM slave device to a specified value Different SNP IDs are required to differentiate between multiple SNP slave devices in a multi drop arrangement The SNP slave in the CMM module reverts to the default SNP ID that is the SNP ID of the PLC CPU whenever the PLC is powered up or the CMM is manually restarted Example Command Block Change the SNP ID of the SNP slave device in the CMM module to NEWID1 W
220. ber of characters still available in the input buffer if any first two characters first character is in the low byte Address 3 third and fourth characters third character is in the low byte Address n subsequent characters Return Data Block Size The Return Data memory block shown above will consist of One One One word to store the number of characters read word to store the number of characters still in the input buffer word for every two characters actually read for example if 24 characters were read the data block would be 14 words long Be sure to allow sufficient room in user memory for this data block Chapter 9 Serial I O Protocol 9 31 Appendix A GFK 0582D Glossary In the Series 90 PLCs serial communications a number of special terms are used Also many of these terms are referenced by acronyms For example a Programmable Logic Controller PLC computer or other device that connects to a network is called by the general name sta tion This appendix contains a concise alphabetized listing of conventional communications terms and where applicable their associated acronyms Most of these terms but not necessarily all are used in this manual Commonly used Acronyms and Abbreviations ASCII ACK BCC BCD BEM BRM BTM BPS CCM CCU CMM COMM REQ CPU CRC CTS DCD DCE DMA DOS DSR DTE DTR EIA EEPROM ENQ EO
221. ble in the attached Series 90 CPU returned for function codes 4 16 3 The starting analog input number and analog input number fields specify analog inputs that are not available in the attached Series 90 CPU returned for function code 3 4 The point number field specifies an output point not available in the attached Series 90 CPU returned for function code 5 5 The register number field specifies a register not available in the attached Series 90 CPU returned for function code 6 7 44 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X 6 analog input number field specifies an analog input number not available in the at tached Series 90 CPU returned for function code 3 7 diagnostic code is not equal to 0 1 or 4 returned for function code 8 8 The starting byte number and number of bytes fields specify a scratch pad memory address that is not available in the attached Series 90 CPU returned for function code 67 Invalid Data Value Error Response 3 An error response with a subcode of 3 is called an invalid data value error response This re sponse is sent in the following cases The first byte of the data field is not equal to 0 or 255 FFh or the second byte of the data field is not equal to 0 for the Force Single Output Request Function Code 5 or the initiate commu nication restart request function code 8 diagnostic code
222. c web site support area www gefanuc com support PLC has additional informa tion on many PLC subjects including serial communications This site offers such thing as an Chapter 3 Series 90 CPU Serial Ports 3 13 swers to Frequently Asked Questions FAQs product revision histories online versions of re cently revised publications an online version of InfoLink and downloadable files and upgrades CPU Diagnostic Error Codes If any power up diagnostic tests fail one or more diagnostic error codes will be generated On both the Series 90 30 and Series 90 70 CPUS error codes will be displayed on serial port LEDs and P2 will repeatedly flash the number of times that corresponds to the most signifi cant digit of the error code and P2 will repeatedly flash the number of times that corresponds to the least significant digit of the error code For example if P1 flashes two times then pauses then flashes two times etc it indicates that the most significant digit of the error code is two If P2 flashes three times then pauses then flashes three times etc it indicates the least signifi cant digit of the error code is three Therefore the error code 23 would be indicated Table 3 11 Error Code Table Error Code Error Description Bad Processor Flags Bad Processor Register 13 14 Bad Stack Area 15 DMA Channel 0 not working 16 DMA Channel 1 not working 17 DMA Channel 2 not working 24 Bad H8 Cache R
223. can occur if the task on the Instruction is misprogrammed or if a CMM has been configured without a communications protocol enabled on the targeted serial port OK and FT Outputs The function s OK Series 90 70 only and FT outputs can provide power flow to optional logic which can verify successful completion of the Communications Request The OK and FT outputs can have these states OK output ENable FT output Series 90 70 Only active no active yes not active no execution Power Flow Instruction passes power flow without delay to the OK output only the Series 90 70 has an OK output in NOWAIT mode In WAIT mode the function passes power flow to the OK output unless the timeout period is exceeded or if a O timeout period has been specified Then the OK output is set to false and the FT output is set to true WAIT NOWAIT modes are discussed in detail in Section 3 The COMMREQ Command Block The FT output can also be set true and OK set to false if The specified target address is not present The specified task is not valid for the device Data length is 0 In addition to the FT output which is a discrete bit the COMMREQ instruction also has a Status Word that reports fault information codes if a problem occurs Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Instruction Section 3 The COMMREQ Comm
224. cantly faster retrieval of mixed memory types from a slave device than separate reads of each memory type Datagram access differs from direct memory access in that the memory references must be es tablished before use Once the Datagram has been established the defined memory data may be retrieved from the slave device by reading the Datagram When Datagram retrieval is no longer needed the Datagram may be cancelled to free resources at the slave PLC CPU Establishing a Datagram The SNP master device establishes a Datagram by specifying one or more memory areas in the slave device Each slave memory area is defined by a Point Format which specifies the slave memory type memory address and number of memory elements of that memory type The SNP master can define up to 32 separate Point Formats when establishing a Datagram When a Datagram is established the slave device allocates resources in the PLC CPU to collect the various memory areas into one contiguous data area for transfer to the master device upon request If the Datagram is successfully established the slave returns a Datagram ID code to the master The Datagram ID is a single byte which must be used by the master to identify this Datagram in all future requests A Point Format may use any slave memory type available with other Read commands includ ing for Series 90 70 slave devices only Main Program Task and Program Block memory Bit oriented memory types in a Point Format
225. ce The fields in the enquiry sequence are described below Table 7 7 Enquiry Description Master Slave Normal Sequence Description Valid Range ASCII coded N used to specify Normal Sequence 4Eh operation Target Address ID number of target slave 20h 21h through 7Ah Example Slave ID is 37h 37h 20h 57h W Third character of 3 character enquiry sequence Response from slave indicating positive or negative 06h acknowledge 15h GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 9 The first figure below shows a data transfer from the master to the slave data write The next figure shows a data transfer from the slave to the master data read Data sent from Tet E S source device N Add N master Q Full EL O Header Data TR H Block Data sent from target device Tgt E A A slave N Add N C C C Q K K K Figure 7 6 Data Transfer from Master to Slave Write Master Slave Normal Se quence Data sent from Tet E S E O Header T B source device N Add N master Q H A E C K Data sent from A target device A slave N Add C C K K Figure 7 7 Data Transfer from Slave to Master Read Master Slave Normal Se quence AOS Hom Q Sequence Protocol Flow The Q Sequence is a special master slave protocol exchange that allows the master to retrieve 4 bytes of data from a slave without issuing the 17 byte header I
226. ce the characters are transmitted the RTS signal is immediately removed As in the case of NONE flow control a nonzero Modem Turnaround Delay is NOT used to control the operation of the RTS signal It is simply used to adjust the appropriate protocol timers for any delay in receiving the CTS signal once the RTS signal is asserted Data Carrier Detect DCD and Data Terminal Ready DTR These signals are used to con trol the reception of data from the remote device The DCD signal when received from the remote device essentially forms a request to the CMM to prepare for reception of data The CMM in turn asserts the DTR signal when it is prepared to receive the data In the CMM DTR is always asserted it is never turned off Timeout CCM The Timeout field displays the length of timeouts used for CCM on the tar get port Valid selections are LONG MEDIUM SHORT or NONE Timeout SNP The Timeout field specifies a set of values for each of the SNP timers Valid selections include LONG MEDIUM SHORT or NONE The SNP Timeout selections and the related timer values are specified in the following table The timers in the second half of the table are derived from earlier timer values via the specified equation Modem Turnaround Delay CCM and SNP Only The Modem Turnaround Delay field specifies the length of time required by the intervening modems to turn the link around In the case that NONE flow control is selected the Modem Turnaround De
227. character For a Series 90 20 PLC slave device the SNP ID is restricted to a maximum of 6 bytes followed by a null character 0 the 6 bytes must be the ASCII characters 0 through 9 inclusive and upper case A through F inclusive A null SNP ID Character 1 0 can be used to Attach to any slave SNP device regardless of its assigned SNP ID It should be noted that a null SNP ID can only be successful in a point to point wiring configuration In a multidrop wiring configuration all SNP slave devices would respond to any Long Attach specifying a null SNP ID This procedure will produce unpredict able results and should not be attempted 6 66 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 5 The Master Memory Type and Address for Piggyback Status fields are optional If specified an area must be provided which can accommodate the 6 bytes of Piggyback Status information The Piggyback Status information is returned with every SNP response message sent by the slave device Once the Piggyback Status area is specified the Piggyback Status information is written there as each successful SNP response message is received for as long as the connec tion remains established If the Piggyback Status memory type and address values are O that is a Piggyback area is not specified the Piggyback Status information is ignored and is not pro vided to the PLC ladder application program See
228. ck the local and remote modems and the telephone line 8 08h Modem responded with NO DIALTONE Modem is unable to complete the requested connection Check the modem connections and the telephone line 9 09h Modem responded with ERROR Modem is unable to complete the requested com mand Check the modem command string and modem 9 14 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Serial I O Protocol 9 Major Error Code 14 0Eh Continued Minor Description Error continued Code 10 0Ah Modem responded with RING indicating that the modem is being called by another modem Modem is unable to complete the requested command Retry the modem com mand later 11 OBh An unknown response was received from the modem Modem is unable to complete the requested command Check the modem command string and modem The response should be CONNECT or OK 50 32h COMMREQ timeout The did not complete within a 20 second time lim it Chapter 9 Serial I O Protocol 9 15 Serial Commands The following COMMREQs used to implement Serial I O Local COMMREQs perform auxiliary functions Initialize Port 4300 Resets the port Cancels any COMMREQs currently in prog ress and zeroes the internal input buffer Sets the RTS status to inactive Set Up Input Buffer 4301 Changes the size of th
229. clude loading FROM the PLC many times to see if any communication errors occur Another test is see if the modem being used contains a line quality diagnostic setting Many modems will have a feature that can be dis played with an AT command that will show the line quality of the last connection made Some manufacturers also have test modems that can be called and that will download connection sta tistics to the caller Forcing modems to a single baud rate is desirable Because the PLC serial port can only be configured to one rate forcing the PLC modem to it s baud rate ensures that the modems will not negotiate to a different speed Parity Most modems will not pass parity They usually only encode a 10 bit frame typically 1 start bit 8 data bits 1 stop bit not an 11 bit frame 1 start bit 8 data bits 1 parity bit 1 stop bit Turnaround Time The modem turnaround time in the PLC and programmer delays the time from when the device receives transmission to when it responds You may need to have a Turnaround Time value of 1 10ms or greater in the PLC and programmer if a modem is being used Appendix I General Modem Information 1 5 Appendix Using Modems with Logicmaster J Introduction This appendix discusses setting up a serial communications link using modems between a personal computer running GE Fanuc s Logicmaster PLC programming software and a Series 90 PLC For general modem information such as modems recommended
230. code 80h 57 39h SNP X Response message exceeds maximum data size decimal 1000 bytes Data in the Response is ignored Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Table 6 5 Minor Error Codes for Major Error Code 12 0Ch Continued Error Status Local SNP SNP X Error Description Decimal Hexadecimal 64 40h A parity error has occurred on an X Attach Response message when estab lishing a new SNP X communication session Communications have not been established 65 41h A framing or overrun error has occurred on an X Attach Response message when establishing a new SNP X communication session Communications have not been established 66 42h A BCC Block Check Code error has occurred on an X Attach Response message when establishing a new SNP X communication session Communications have not been established 43h An invalid message type was received when an X Attach Response was required when establishing a new SNP X communication session Communications have not been established 44h An invalid next message type value was detected in an X Attach Response message when establishing a new SNP X communication session Commu nications have not been established 45h An invalid response code was detected in an X Attach Response message when establishing a new SNP X communication session Communications have not been established 46h An expected X Attach Response message w
231. ctions Section 1 The SNP COMMREQ Data Block Section 2 The SNP COMMREQ Status Word Section 3 SNP COMMREQ Programming Examples 6 1 s 6 2 Section 1 The SNP Data Block The SNP Data Block is the part of the COMMREQ Command Block that identi fies which SNP Command is to be executed and provides specific parameters for that SNP Command In describing the SNP Data Block the following topics are discussed Structure of the SNP Data Block SNP Memory Types And Addressing Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Memory Types and Addressing GFK 0582D SNP Service 6 Many of the parameters of the require the specification of a PLC Memory These parameters are used to specify the master and slave memory areas read or written The following table identifies the valid set of PLC Memory Types the access codes and unit lengths by which each type can be accessed and the valid ranges of each type The valid ranges may vary for different Series 90 PLC CPU models Table 6 1 Memory Types Unit Lengths and Valid Ranges Registers R Analog Inputs Analog Outputs Discrete Inputs 1 Discrete Outputs Discrete Temporaries Discrete Internals 70M Discretes 96S A Discretes SB Discretes SC Discretes S read only
232. currently not supported by other programming software Serial Communications Problems and Restrictions Known problems restrictions and work around solutions are documented in the Important Product Information IPI sheet that comes with a new CPU module The IPI also documents the latest information on new features and problem corrections that may be too recent to be in this manual It also contains information on upgrading older versions of the product We recommend you read these IPIs then retain them as part of your PLC documentation IPIs can also be found on the GE Fanuc InfoLink PLC documentation CD and on the GE Fanuc web site support area www gefanuc com support PLC Version Support of Product Features As noted in many of the tables in this chapter not all versions of a product and not all versions of the PLC programming software support the various features If you are using older versions of the products or software but need or desire to use a later feature not supported you should contact your GE Fanuc distributor for information on upgrading to a new version The Important Product Information IPI sheet that comes with the product usually contains upgrade information as well see the previous paragraph Some firware upgrades may be downloaded for free from the GE Fanuc web site support area www gefanuc com support PLC Or an upgrade kit can be ordered for a nominal cost Where to Find Additional Information The GE Fanu
233. d For other applications you will also need the following computer with a hard disk Programming software either Logicmaster 90 or windows based programming software Chapter 2 The Communications Coprocessor Modules 2 7 Installing the CMM Hardware 2 6 The first step in the installation procedure is to physically install the CMM hardware and verify that it is working properly Overview In a single rack system CMM resides in the same rack as the CPU In a Series 90 70 mul tiple rack system the CMM can reside in either the CPU rack or in an expansion rack The Series 90 30 CMM must reside in the same rack as the CPU The following illustration shows one possible system configuration for installing a Series 90 70 CMM in local or expansion rack LOCAL RACK CONFIGURATION 844915 n P C C S P M E M CPU RACK EXPANSION RACK P s S R M M M p Figure 2 6 Series 90 70 CMM Configurations The power supply CPU and Series 90 70 Bus Expansion Module must reside in specific slots within the rack The term Bus Expansion Module includes both Bus Transmitter Modules and Bus Receiver Modules The CPU Module must be located in slot 1 of rack 0 The Series 90 70 system usually includes a Bus Transmitter Module
234. d 2 bytes 16 bits 19 17 End of block character 17h marks the beginning of the SNP X message trailer 202 0000 00 00 Not used always 0 24 2D Computed Block Check Code for this example GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 81 Example of Broadcast X Write Command More than 2 Bytes This example shows the message exchange of a broadcast X Write command to write more than two bytes of data This command requires a write request message and a subsequent data buffer message Note that there is neither an intermediate response nor a final response message to the broadcast request Master Slave X Write Request message 1B 58 FF FF FF FF FF FF FF FF 02 08 63 00 0A 00 00 00 17 54 1C 00 00 13 Wait Broadcast Delay time No Intermediate Response to before data buffer broadcast X Request X Write Data Buffer 1B 54 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 17 00 00 00 00 58 Wait Broadcast Delay time No X Write Response to before next request broadcast X Buffer 7 82 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Explanation of Broadcast X Write Command More Than 2 By tes Byte Hex Value Description Number X Write Request Message 1 Start of message character 1Bh 2 58 SNP X Command X 58h 3 10 FF FF FF FF Broadcast SNP ID 11
235. d EOT EOT State 1 I Send EOT State 1 Send data State 6 State 6 7 State 1 D I State 1 5 EOT State 1 G I Send Send EOT EOT EOT State 1 State 1 State 1 I I I Send EOT State 1 I Send EOT State 1 I Send EOT State 1 I Send EOT State 1 Send Send EOT EOT EOT State 1 State 1 State 1 I I I I I Receive Good Header Receive Send Send Send State 8 _ Send STX EOT EOT EOT EOT State 1 State 1 State 1 State 1 I I I N I Receive Send _ Send Send Send Send Char EOT EOT EOT EOT EOT acter State 1 State 1 State 1 State 1 State 1 I I I I I Receive Send State 1 Good ACK Data State 7 9 K J Receive Send _ Send Send Send Send State Bad EOT EOT EOT EOT EOT 1 10 Data State 1 State 1 State 1 State 1 State 1 Header I I I I I Receive Good Q ENQ Time State Send Send Send Send Send State out 1 2 EOT EOT EOT EOT EOT 1 10 State 1 State 1 State 1 State 1 State 1 F I I I I I M 7 16 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D CCM Master Actions A Zero counters If Q seq Send Q ENQ seq Start ENQ ACK TIMER Transition to State 10 Else Send Master ENQ Start ENQ ACK TIMER Transition to State 2 Zero COUNT Send Data Block Start DATA ACK TIMER Remain in State 6
236. d 363 Note that the CPU351 cannot perform Serial I O Read functions CPUs 352 and 363 can perform all Serial I O tasks Serial I O is implemented in a similar man ner in the VersaMax PLC for information see 1503 VersaMax PLC User s Manual This chapter also contains instructions for using COMMREQs to configure the CPU serial ports for SNP RTU or Serial I O protocol and for switching from one protocol to another on a given port Content of this chapter Overview of Serial I O Protocol Communications Format of the COMMREQ function m Configuring Serial Ports Using the COMMREQ Function RTU Slave SNP Slave Operation with a Programmer Attached COMMREQ Command Block for Configuring SNP Protocol COMMREQ Data Block for Configuring RTU Protocol COMMREQ Data Block for Configuring Serial I O Serial COMMREQ Commands Initialize Port Set Up Input Buffer Flush Input Buffer Read Port Status Write Port Control Cancel Operation Autodial Write Bytes Read Bytes Read String GFK 0582D 9 1 Example of Serial Communication In Serial communications a COMMREQ instruction controls data flow between an external device and user memory The example shown in the figure below is for a Read operation data read from an external device is buffered through the Internal Input Buffer The Internal Input Buffer
237. d Address minus 1 Register 1 Not Used Not Used SNP Command Number Slave Memory Type from which to read data Slave Memory Address from which to read data Register 1 Number of Master Memory Type elements to read Master Memory Type to store data 1 Master Address to store data Input 1 The Number of Master Memory Type elements to read field is specified in units consistent with the unit length of the Master s Memory Type See Table 6 1 for valid memory types and ad dresses Note The SNP master on the CMM module and CPU 351 CPU 352 and CPU363 serial ports limit this command to a total data length of 2048 bytes 1024 words 6 40 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Write System Memory 07203 1C23 Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Write request with data the slave responds This service is provided to permit the access to various reference tables within the slave PLC See Table 6 1 for the slave memory types supported This command transfers the specified number of ele ments from the master reference table into the slave reference table When the memory types of the slave and master reference tables differ the slave reference table will be padded with the value 0 as necessary Example Command Block Write to the att
238. d COMMREQ data Chapter 6 SNP Service 6 15 s Section 3 SNP COMMREQ Programming Example This section provides an explanation and example of each SNP command Each example in cludes values for the Command Block A ladder program example is also presented here for convenience Before attempting to execute the SNP command examples make sure that the following steps have been performed The CMM module has been installed in the desired PLC rack see Chapter 2 The rack configuration has been performed and the desired communications parameters have been selected for the CMM module using the Logicmaster 90 configuration software or the Hand Held Programmer see Chapter 2 The rack configuration has been verified and is valid The rack configuration has been stored into the PLC see Chapter 2 If using Logicmaster 90 the configuration in the PLC has been verified equal to the Logicmaster 90 configura tion The serial communications cable has been installed between the master and slave devices for operation of any remote commands See Chapter 8 for cable diagrams The ladder application program below or a similar program has been written and stored into the PLC Note In the examples below the CMM module has been installed in and configured for Rack 0 Slot 2 with SNP operation on Port 1 If your configuration is different than this you will need to change the COMMREQ fields for Rack Slot SYSID f
239. d are de fined as Hex Format High Low 00 00 Minor Error Codes high byte Completion and Major Error Codes low byte There are several points to remember when interpreting the contents of the SNP COMMREQ Status Word 1 The CMM will never send a zero for the SNP Status Word to the PLC CPU If the user program needs to know if the command is complete it can zero the SNP Status Word be fore issuing the and then check it for being non zero 2 status code of 1 in the low byte and 0 in the high byte indicates that the request was com pleted without errors other non zero values indicate errors Refer to the tables below for a complete listing of major and minor error codes for SNP 3 Display the SNP Status Word in hexadecimal form to read the two bytes of data 4 When an error occurs the low byte major error code will be greater than 1 5 The high byte will contain any applicable minor error code The following tables list the SNP error codes that are reported in the SNP Status Word after the execution of an SNP COMMREQ When an error occurs these codes also appear in the first word of the SNP Diagnostic Status Words DSW 1 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 SNP Major Error Codes Table 6 2 Major Error Codes for SNP Error Status Major Error Description Successful Completion This is the expected completion value in t
240. d to the slave specified by the SNP ID When communicating with a single slave device single session provides the fastest performance When com municating with many slave devices on a multidrop serial link multi session provides the fastest per formance The Number of Master Memory Type elements to write field 1s specified in units consistent with the access mode of the Master Memory Type A maximum of 1000 bytes of data may be transferred in one X Write command use multiple commands to transfer more data Note Where data types do not match zero fill will take place The remaining COMMREQ parameters are optional The COMMREQ Data Block length Word 1 must include all parameters in use The optional Master Memory Type and Address to store Slave PLC Status Word fields specify a location in the master PLC memory that is updated with the PLC Status Word from the slave device upon suc cessful completion of this command If both fields are not programmed or are set to zero the slave PLC Status Word is not updated into master PLC memory The optional Response Timeout field specifies a new value for the Response Timeout timer This time is the maximum time that the master will wait for an X response from the slave The new value is specified in milliseconds and is in effect for this COMMREQ only If not pro grammed or set to zero the master uses the T2 timer value as selected by the Timeouts config uration parameter The optional Broadc
241. dancy Checking RTU Block Check Code checking SNP SNP X Protocols Longitudinal Redundancy Checking CCM Protocol and Cyclic Redundancy Checking RTU Protocol are performed in the Com munication Protocol and are discussed in the applicable chapter Parity Checking Parity checking can be generally specified as even odd or none The parity bit derived by the sender and monitored by the receiver is dependent on the number of 1 occurring in the binary character If parity is defined as odd the total number of 15 in the binary character in addition to the parity bit must be odd If the parity is even the total number of 1 in the character in cluding the parity bit must be even If the parity is none no parity checking is performed In the example shown below the ASCII coded contains two 15 therefore the parity bit must be for odd parity The parity bit would be 0 in the case parity were defined as even In the case of no parity the parity bit is not transmitted For CCM protocol the optional parity bit may be odd or none for the SNP SNP X and RTU protocols the parity may be odd even or none If parity checking is employed and one of the bits is transmitted incorrectly the parity bit will reflect the error ASCII character A received correctly Parity Bit Received Data Byte odd 8 7 6 5 4 3 2 1 1 0 1 0 0 0 0 0 1 ASCII character A received with error in the first bit Parity Bit Received Data Byte o
242. data bit and the expected stop bit is not the stop bit but a start or data bit then the framing error will be reported Timeout Errors This type of error checking is performed by the Communication Protocol Timeouts are used to ensure that timely communications exist between devices When a source device initiates a communication the target must respond within a certain amount of time or a timeout will occur causing the communication to be aborted During a CMM communication there are a number of instances in which a timeout can occur For a detailed explanation of these instances refer to Chapter 7 Protocol Definitions Appendix E Serial Line Interface E 3 Asynchronous Transmission E 4 Asynchronous serial transmission is used in CMM communications Although there is no syn chronizing clock used the transmitting and receiving equipment must be operating at the same bit rate or errors mentioned in the previous section will occur The general format for asynchronous communications includes a start bit eight data bits an optional parity bit and a stop bit Table E 2 Serial Data Format Serial Data Format Bit 0 Bit 1 Bit 2 Bit 3 Bit 4 Bit 5 Bit 6 Bit 7 Bit 8 Bit 9 optional START a ACTIVE DATA BITS PARITY When the receiver detects the leading edge of the start bit which is always logic 0 a timer is triggered to allow sampling to occur in the middle of each bit After the last data bit or the pari
243. datagram area returned from the slave This area is of the size specified in the Es tablish Datagram command which defined the size and format of the datagram See Table 6 1 Memory Types Unit Lengths and Valid Ranges for valid memory types and addresses The Master Memory Type and Address for Piggyback Status fields are optional If specified an area must be provided which can accommodate the 6 bytes of Piggyback Status information The Piggyback Status information is returned with every SNP response message sent by the slave device Once the Piggyback Status area is specified the Piggyback Status information is written there as each successful SNP response message is received for as long as the connec tion remains established If the Piggyback Status memory type and address values are O that is a Piggyback area is not specified the Piggyback Status information is ignored and is not pro vided to the PLC ladder application program See Table 6 11 for a description of the Piggy back Status Data area See Table 6 1 Memory Types Unit Lengths and Valid Ranges for valid memory types and addresses Note The Update Real Time Datagram command may be sent to any slave device as specified by the slave SNP ID This command issues a Break sequence which will cancel any previous Attach or Long Attach command and abort any existing SNP communication new Attach or Long Attach command must be issued to re establish normal SNP communicat
244. dd 8 7 6 5 4 3 2 1 1 0 1 0 0 0 0 0 0 The receiver monitors the parity bit and detects the error in transmission because the received character with parity has an even number of 15 instead of an odd number Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Line Interface If on the other hand an even number of bits in a character is transmitted incorrectly the parity bit will not reflect the error ASCII character A received with errors in the first two bits Parity Bit Received Data Byte odd 8 7 6 5 4 3 2 1 1 0 1 0 0 0 0 1 0 The parity bit does not reflect the error because the received character with parity shows an odd number of 1s as it is supposed to Transmission Timing Errors GFK 0582D Timing problems between transmitter and receiver can produce other kinds of errors such as overrun framing and timeout errors Overrun Errors If timing problems between the transmitter and receiver cause characters to be sent faster than the receiver can handle them then this produces a situation known as over run this case the previous character is overwritten and an error is indicated Framing Errors In asynchronous transmission this type of error occurs when the receiver mistakes a logic 0 data bit or a noise burst for a start bit The error is detected because the re ceiver knows which bit after the start bit must be a logic 1 stop bit In the case where the start bit is really a
245. ding on the data direction bit specified in the header If data byte size is less than or equal to 256 bytes data transfer will require only one data block If the data byte size is greater than 256 bytes the transfer will require multiple blocks The data block format and a description of the fields are shown below 256 Data Full data block Bytes except last 256 or Last data block Fewer Data Bytes Figure 7 1 Data Block Format Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Table 7 5 Data Block Description Field 22 Desripion Valid Valid Range Start StrtofTextcontolcharacter Text control character 1 256 data characters ETB End of Block control character used if data block is not last block 17h ETX End of Text Block control character used if final data block 03h Longitudinal Redundancy Check on all data characters in block I Protocol Termination After the final data block is transferred successfully an EOT control character is used to terminate the connection between peer devices or between master and slave In both peer to peer and master slave modes the station transmitting the final data block sends the EOT after receiving the ACK to the final data block In addition in master slave mode the master always sends an EOT to terminate a transaction The EOT control character is also used to abort a connection if an
246. e Retry and Error Recovery When an SNP message is received the message is examined for correctness If a transmission or message integrity error is detected a negative acknowledgement is returned with an error code When a negative acknowledgement indicates a recoverable error the sender retries the mes sage The SNP master permits a maximum of two retries for any message If the message is not correctly sent or received by the master after two retries the master aborts the SNP com munication The master must establish a new communication session When a negative acknowledgement indicates a fatal error both the master and slave immediate ly abort the SNP communication The master must establish a new communication session Fatal SNP Errors Certain local errors indicate fatal errors on the CMM or CPU351 352 363 modules When fatal error occurs the SNP port aborts its end of the SNP communication A new communica tion session must be established Fatal local errors are indicated in the SNP COMMREQ Status Word by Major Error Code 12 0Ch and Minor Error Codes 32 20h and higher See Chapter 6 SNP Service for a listing and description of all SNP major and minor error codes A number of timers are defined to support the SNP Protocol Adjustable timers are provided because different SNP devices can coexist on a given SNP serial link each with its potentially different processor and different processing capability The
247. e Bytes Read Bytes and Read String COMMREQs can be pending when other COMMREQs are executed NEW COMMREQ Currently Auto Write Initial Set Up Flush Read Write Read Read Cancel Serial pending dial Bytes ize Input Input Port Port Bytes String Opera Port COMM 4400 4401 Port Buffer Buffer Status Con 4402 4403 tion Setup REQs 4300 4301 4302 4303 trol 4399 FFFO 4304 Write Yes Yes Yes Yes Yes Yes Yes Yes No tes 4401 Read Bytes No Yes Yes No No Yes Yes No No Yes No 4402 Read No Yes Yes No No Yes Yes No No Yes No String 4403 GFK 0582D Chapter 9 Serial I O Protocol 9 17 Initialize Port Function 4300 This function causes a reset command to be sent to the specified port It also cancels any currently in progress and flushes the internal input buffer RTS is set to inactive Example Command Block for the Initialize Port Function VALUE VALUE MEANING decimal hexadecimal address 0001 0001 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type address 3 0000 0000 Status word address minus 1 960001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4300 10CC Initialize port command Operating Notes Note COMMREQs that are cancell
248. e CPU the internal COMMREQ command 6003 Read Diagnostic Status Words to Source Registers is used to transfer these status words to the CPU An external device can access these status words using a READ command with target memory type 9 The table below explains the purpose of each Diagnostic Status Word When two CCM ports are running concurrently each has its own copy of Diagnostic Status Words Neither can report on the status of the other The Series Six Diagnostic Status Words contained data referring to both ports The Series 90 maintains two separate sets of Diagnostic Status Words as outlined in the following table The software version number remains in the same location as it was in the Series Six PLC Table 5 4 CCM Diagnostic Status Word Definitions Status Word Contents Refer to Section 2 of this chapter for a list of the possible error codes and their definitions Internal commands will not modify this count The term conversation refers to serial communications across the serial port 3 Same as the PCM CMM Firmware Revision Number in the scratch pad This value will always remain in word 12 of the diagnostic status words even when the diagnostic status words are cleared by issuing internal command 6002 or by an external device request Refer to Section 2 of this chapter for a description of the returned Status Word for a CCM COMMREQ Series 90 PLC Serial Communications User s Manual November 2000 G
249. e Force System Memory SNP Com mand 6 56 Transmission Delay 6 31 6 33 7 53 Transmission Errors and Detection 1 2 Transmission Timing Errors E 3 Transmission Asynchronous E 4 Troubleshooting multidrop problems H 6 U Update Datagram SNP Command 6 61 Update Real Time Datagram 7 55 Update Real Time Datagram SNP Com mand 6 63 W WAIT mode 4 7 Web site GE Fanuc 1 1 Wiring Diagrams 8 1 Write Bytes 9 27 Index 7 Index Index 6 Write Program Block Memory SNP Com 6 45 Write Task Memory SNP Command 6 43 Write to Target from Source CCM Com 522 WYE Cable for 311 2 5 Write zd Memory SNP Command X X Buffer Message 5 7 71 X Read SNP X Commands 6 30 X Request Message Structure 7 67 X Response Message Structure 7 69 X Status Bits 6 25 6 27 X Write SNP X Command 6 32 GFK 0582D
250. e PLC and IO fault tables are displayed The Time Of Day clock can be set and its current value displayed Po ON The RUN STOP state of the PLC can be changed either by pressing ALT R or using the PLCRUN screen It is not possible to load and store programs and configuration through Port 2 because the privi lege level is restricted to level 2 by the PLC firmware Autobaud is not supported on Port 2 Port 2 can be configured using the Logicmaster 90 configuration software or by a COMM_REQ function block within a ladder logic program see Configuring Serial Ports in Chapter 5 On release 3 0 and later 28 point Micro PLCs a separate SNP ID for Port 2 can be configured using Logicmaster 90 software release 8 00 or later On earlier releases Port 2 shares the SNP ID with Port 1 and the SNP ID can only be changed through Port 1 For more information about the SNP ID refer to Selecting SNP Connections and CPU Configuration in the Lo gicmaster Series 90 30 20 Micro Programming Software Users Manual GFK 0466 Communication through Port 2 may be lost host may time out while operations that involve writing to flash memory including storing the program are being performed through Port 1 GFK 0582D Appendix M Series 90 Micro PLC Serial Ports M 3 IC655CMM590 Isolated Repeater Converter N Note This product is no longer available It has been replaced by catalog number IC690A CC903 see A
251. e Serial I O Feature Product Serial I O Write Serial I O Read Duplex Mode Configuration CPU351 Ports 1 and 2 Supported starting with Not available Only on Port 2 and only firmware release 8 00 with a COMMREQ CPU352 CPU363 Ports Supported starting with Supported starting with Only on Port 2 using 1 and 2 firmware release 8 00 firmware release 10 00 either a COMMREQ or VersaPro 1 1 or later software CPU351 CPU352 CPU363 Standard SNP Not supported Not supported N A port via power supply connector Series 90 30 CPUs Not supported Not supported N A Series 90 70 CPUs Firmware 10 00 required for Serial I O Read will not be made available for CPU351 The Serial I O Read feature requires the use of VersaPro 1 1 or later version PLC programming software It is currently not supported by other programming software VersaPro Software In VersaPro 1 10 or later version the Duplex Mode parameter for Serial I O on Port 2 can be changed on a CPU352 or CPU363 module s Port 2 configuration screen This Duplex Mode parameter is only supported in VersaPro 1 10 or later it is not sup ported in Logicmaster or Control as of this writing The following figure shows an example of a VersaPro Port 2 configuration screen for a CPU363 Port 1 which only supports RS 232 on these modules does not have a Duplex Mode parameter pna
252. e a section called Global Parameters Below that section name should be a line or key that says PASSWORD XXXXXXXX where XXXXXXXX is a bunch of garbage characters the encrypted non default pass word Deleting the password and garbage characters will clear the password back to its default of netutil CCU Setup Procedure 1 Under the TOOLS menu select COMMUNICATIONS SETUP Enter your password de fault is netutil Once in the CCU click on MODEMS tab Click NEW to add a new modem to the list The Add New Modem dialog box will appear as shown next Add New Modem BE Modem Name newmodem Where to Dial Country Code United States of America 1 Area Code 555 Phone Number 555 5555 How to Dial Use Country Code and Area Code Your Location New Location Calling Card None Direct Dial Dialing Properties Connect Using TAPI Line Standard 3600 bps Modem Phone Numbers Canonical 1 555 555 5555 Dialable T434 1 555 5555555 Displayable 434 1 555 555 5555 OK 2 Give the modem name and enter the area code and phone number Click OK to accept the modem Do NOT click on the Configure Line button because ANY CHANGES MADE WILL NOT BE SAVED There is no fix planned for this problem K 6 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Us
253. e combined sizes of all of the data areas specified by the point formats Each point format defines data whose size depends upon the memory type and element count for that format For example a point format specifying 19 bits of the Input Table requires 3 bytes to represent it Two registers require 4 bytes The Master Memory Type and Address for Datagram ID fields specify the location in the master PLC memory where this COMMREQ returns the 1 byte Datagram ID The Datagram ID is ob tained from the slave device when the datagram 15 successfully established The Datagram ID must be used by the master to identify this datagram in all subsequent commands See 6 1 for valid memory types and addresses If the datagram is designed to access Local Subblock Memory L or Main Program Memory 96P in a Series 90 70 slave device the Local Subblk or Main Pgm name field must contain the Main Program name for or Local Subblock name for L as an ASCII string Otherwise this field is set to null 0 Each datagram consists of one or more Point Formats A Point Format defines a memory range within the slave device The Number of Point Formats field contains the number of Point For mats being defined Each Point Format consists of 3 words the memory type the memory ad dress and the count of memory elements to be read See Table 6 and the Notes below for memory types and address The memory element count may range from 1 to 256 only Exam ples of
254. e consist of the Byte Count field and Data field MESSAGE 01 READ OUTPUT TABLE Information Fields Address Func Starting Number of Error Check 01 Point No Points Query Information Fields Address Byte Data Error Check 01 Count Normal Response Figure 7 10 Information Field Examples Some information fields includes entries for the range of data to be accessed in the RTU Slave It is important to note that the data addresses are 0 based That means you will need to subtract 1 from the actual address when specifying it in the RTU message For message 01 READ OUTPUT TABLE Query used in the example above you would specify a starting data address the Starting Point No field To specify 00001 as the starting address you would place the address 00000 in this field Also the value you place in the Number of Points field would determine how many bits will be read starting with address 00001 For example Starting Point No field 00007 so the starting address is 00008 Number of Points field 16 0010h so addresses 00008 through 00023 will be read Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 23 Error Check Field The error check field is two bytes in length and contains a cyclic redundancy check CRC 16 code Its value is a function of the contents of the station address function code and informa tion field The details of generating the CRC 16 code a
255. e diagnostic code is two bytes in length The high order byte of the diagnostic code is the first byte sent in the diagnostic code field The low order byte is the second byte sent The loopback maintenance command is defined only for the diagnostic code equal to 0 1 or 4 other diagnostic codes are reserved The data field is two bytes in length The contents of the two data bytes are defined by the value of the diagnostic code RESPONSE See descriptions for individual diagnostic codes DIAGNOSTIC Return Query Data Loopback Maintenance CODE 00 loopback maintenance query with a diagnostic code equal to 0 is called a return query data request An address of 0 is not allowed for the return query data request The values of the two data field bytes in the query are arbitrary The normal response is identical to the query The values of the data bytes in the response are equal to the values sent in the query DIAGNOSTIC Initiate Communication Restart Loopback Maintenance CODE 01 A loopback maintenance request query or broadcast with a diagnostic code equal to 1 is called an Initiate Communication Restart request An address of 0 indicates a broadcast request All slave stations process a broadcast re quest and no response is sent 7 36 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X This request d
256. e field in a received X Buffer message The message type of an X Buffer message must be 54h T Invalid Next Message Type field in a received X Buffer message Since an X Buff er message is never followed by another message the Next Message Type must al ways be zero Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 6 Note Minor Error Codes 64 115 indicate fatal errors subsequent SNP X communica tion must be initiated with an X Attach message The SNP X slave device is un able to return an X Response message these error codes are available only in the Diagnostic Status Words maintained for each serial port on the CMM module Table 6 8 Minor Error Codes for Major Error Code 15 0Fh Continued Error Status SNP X Slave Error Description Hexadecimal 64 40h Serial output timeout The slave was unable to transmit an SNP X message from the serial port May be due to missing CTS signal when the CMM mod ule is configured to use hardware flow control An SNP X request was aborted prior to completion due to reception of a Break An X Buffer message was received containing greater than 1000 bytes of data The data is ignored The SNP X slave did not receive a response from the Service Request Processor in the PLC CPU TOU MEME PLC backplane communications error A parity error has occurred in a received X Attach message Sih A framing or overrun error has occur
257. e internal input buffer Flush Input Buffer 4302 7 the internal input buffer Read Port Status 4303 Reads the status of the port as to whether the previous read or write command was completed or whether a time out oc curred Write Port Control 4304 Forces RTS for the port Cancel Operation 4399 Cancels the current COMMREQ It does not reset the port or Zero the internal input buffer Remote COMMREQs receive or transmit data through the serial port Autodial 4400 Dials a modem or sends the hang up command Write Bytes 4401 Writes a specified number of characters up to 250 to a con nected device Read Bytes 4402 Reads a specified number of characters from a port Read String 4403 Reads a character string of unspecified length from a port until a designated terminating character is detected 9 16 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol 2 COMMREQ Overlap Considerations Some of the Serial COMMREQs must complete execution before another COMMREQ can be processed Others can be left pending while others are executed COMMREQs that Must Complete Execution Autodial 4400 Initialize Port 4300 Set Up Input Buffer 4301 Flush Input Buffer 4302 Read Port Status 4303 Write Port Control 4304 Cancel Operation 4399 Serial Port Setup FFFO COMMREQs that Can be Pending While Others Execute The table below shows whether Writ
258. e memory address field is longer than the data received Framing or overrun errors Parity errors If an error in this category occurs when a message is received by the slave serial port the slave does not return an error message rather the slave ignores the incoming message treating the message as though it was not intended for it 7 46 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Section 3 SNP Protocol This section contains a simplified description of the SNP Protocol for users of the SNP master and slave implementations on the CMM module Topics covered include protocol flow master slave operation protocol timing and Datagrams operation The SNP Protocol transfers data using the asynchronous data format For background information on serial data transmis sion and the asynchronous format refer to Appendix E The Serial Line Interface For a more detailed description of the SNP Protocol GFK 0529 SNP Communications Refer ence Manual is available from GE Fanuc That manual completely describes the format of each SNP message with examples of typical service requests and responses This section covers the following topics Overview of SNP Protocol SNP Master Slave Operation SNP Timers SNP Datagrams Overview of SNP Protocol The SNP Protocol is a serial communications protocol developed by GE Fanuc for communica tion between PLCs and related
259. e message is transmitted the receiver will perform the same CRC operation on all the data bits and the transmitted CRC If the information is received correctly the resulting re mainder receiver CRC will be 0 Example CRC 16 Calculation 7 26 device transmits the rightmost byte of registers or discrete data first The first bit of the CRC 16 transmitted is the MSB Therefore in the example the MSB of the CRC polyno mial is to the extreme right The 16 term is dropped because it affects only the quotient which is discarded and not the remainder the CRC characters The generating polynomial is therefore 1010 0000 0000 0001 remainder is initialized to all 1s As an example we will calculate the CRC 16 for RTU message Read Exception Status 07 The message format is as follows qp e YE In this example we are querying device number 1 address 01 We need to know the amount of data to be transmitted and this information can be found for every message type in the section Cal culating the Length of Frame For this message the data length is 2 bytes Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Cur hi hi o ur hi hi OR ur hi hi OR ur hi hi XOR Cur XOR Cur hi ANAKNNAKNNAKNN o ur hi OR ur hi OR ur hi hi OR ur hi hi o ur hi XOR NOKXNNAKNNAKNAKNAKN tial lst rent Ft 1 2 rent Ft
260. e system is running thereby al lowing you to configure a single port without interrupting the other port s current activity Af ter sending a valid Serial Port Setup COMMREQ you should wait a minimum of two seconds before issuing another COMMREQ to the port that has just been configured Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Parameter Description Note CPU Serial Ports The validity of values for various parameters in the table below depends on the type of protocol configured and the availability of options supported by the firmware version of the CPU For example the Series 90 70 CPUs do not support SNP Master so the combination of Protocol parameter 1 SNP and Port Mode 1 Master is not a valid choice The user should consult the tables earlier in this chapter to determine the features supported by the CPU to be targeted by the COMMREQ Table 3 13 Description of COMMREQ Parameters 0 DISABLED Protocol 3 RTU Data Rate 0 300 1 600 3 2400 4 4800 6 19200 Flow Control Turnaround Delay SNP 4 Reserved 0 NONE 3 500ms G E 1 10 ms 0 3 1 MEDIUM Bits Character 027 bits 1 8 bits 22 stop bits 0 RS232 default for Port 1 1 RS485 default for Port 2 Duplex Mode Device Identifier 8 bytes in length 0 2 wire 1 4 wire STA ADDR Note that for devices that
261. ed due to this command executing do not have their respec tive COMMREQ status words updated Caution If this COMMREQ is sent when a Write Bytes 4401 is transmitting string from a serial port transmission is halted The position within the string where the trans mission is halted is indeterminate In addition the final character received by the device the CPU is sending to is also indeterminate 9 18 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial I O Protocol 2 Set Up Input Buffer Function 4301 This function can be used to change the size of the internal memory buffer where input data will be placed as it is received The range of sizes the buffer may be set to is 1 to 2048 bytes By default the buffer is set to its maximum of 2048 2K bytes Retrieving Data from the Buffer Data can be retrieved from the buffer using the Read String or Read Bytes function It is not directly accessible from the application program If data is not retrieved from the buffer in a timely fashion some characters may be lost Data is read from the buffer in a sequential First in First Out FIFO manner As data is read from the buffer it is discarded thus making room for more data Example Command Block for the Set Up Input Buffer Function VALUE VALUE decimal hexadecimal MEANING address 0002 0002 Data block length address 1
262. edgement has been sent and another Buffer message is expected If the Buffer message is not received within the T5 time the SNP communication is aborted The T5 timer is always set to the current TS timer value plus the Transmission Delay value plus twice the time required to transfer the next Buffer message at the selected data rate The T5 value is recalculated whenever a Buffer message is expected If the T2 or T5 timer is disabled the T5 timer is also disabled Series 90 PLC Serial Communications User s Manual November 2000 The maximum time that the master device will wait for the slave de vice to return an expected response message It is started when the final request acknowledgement is received from the slave It is re started when a keep alive message is received from the slave If the response is not received within the T5 time the SNP communica tion is aborted GFK 0582D GFK 0582D Protocols CCM RTU SNP SNP X Modem Turnaround and Transmission Delay The Modem Turnaround Delay and Transmission Delay which are added to certain SNP timers are described in the following table Table 7 15 Modem Turnaround and Transmission Delay Modem Turnaround Delay The length of time required by intervening modems to turn the link around Master and Slave The Modem Turnaround Delay default value is specified by the CMM configuration TurnA Delay parameter default values range from 0 None to 500 milliseconds T
263. efore this time interval the COMMREQ processing is terminated and an error code is returned in the Status Word indicating that a COMMREQ timeout has occurred See the SNP Timers section of Chapter 7 Protocol Definition for a complete description of the SNP timers Chapter 2 The Communications Coprocessor Modules 2 15 Chapter Series 90 CPU Serial Ports 3 Overview This chapter describes the serial communications ports on the Series 90 30 and Series 90 70 CPU models This chapter is divided into the following main topics m Series 90 30 CPU Serial Ports m Series 90 70 Serial Ports m General Series 90 CPU Serial Communication Information Configuring Serial Ports 1 and 2 with a COMMREQ GFK 0582D 3 1 Series 90 30 CPU Serial Ports 3 2 m Series 90 30 CPUs have a built in serial port that is accessed through a connector on the PLC power supply m CPUs 351 352 and 363 each have two additional serial ports that are accessed by connec tors on their faceplates See Figure 2 1 below Serial Communications Features of CPUs 351 352 and 363 This manual only discusses the serial communications features of these CPUs detailed de scription of their other hardware features can be found in the CPUs chapter of the Series 90 30 Programmable Controller Installation and Hardware Manual GFK 0356P or later ver sions These three CPUs IC693CPU351 352 363 have three serial ports The stand
264. eginning of the SNP X message trailer Not used always 0 Computed Block Check Code for this example Start of message character 1Bh SNP X Command X 58h X Read response code 81h PLC Status Word 00 00 for this example only Status codes Major and Minor errors Length of data in response 8 bytes Data R1 R4 End of block character 17h marks the beginning of the SNP X message trailer Not used always 0 Computed Block Check Code for this example 7 76 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X X Write Command The X Write Command permits the SNP X master to make a write request of a single continu ous area of a single reference table in the slave PLC memory The request specifies the seg ment selector the offset the data length and the data If two or less bytes of data is to be writ ten a single X Request message is transmitted up to two bytes of data may be included directly in the message If more than two bytes of data are to be written an X Request message and an X Buffer message must be transmitted by the SNP X master In this case all of the data must reside in the X Buffer message the data field within the X Request message is not used Upon reception of an X Request which uses a data buffer the slave returns an Intermediate Response message to the master the master then transmits the X Buffer message T
265. elds The low order byte is the second byte in each of the fields RESPONSE The byte count is a binary number from 1 to 256 0 256 It is the number of bytes in the data field of the normal response The data field contains the contents of the scratch pad memory requested by the query The scratch pad memory bytes are sent in order of address The contents of the scratch pad memory byte whose address is equal to the starting byte number is sent in the first byte of the data field The contents of the scratch pad memory byte whose address is equal to one less than the sum of the starting byte number and number of bytes values is sent in the last byte of the data field GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 41 Scratch Pad The entire scratch pad is updated every time an external READ request is received by the CMM scratch pad locations read only The scratch pad is a byte oriented memory type Table 7 13 RTU Scratch Pad Memory Allocation CNN RNC CPUCommadStus Command Status Bit pattern same as SP 00 CPU Major hexadecimal 03 hexadecimal OB CPU SNP ID 7 ASCII characters termination character 00h Ee CPU Firmware Revision No Major in BCD 0 Minor in BCD OE CMM Firmware Revision No Major OF Minor 7 42 Series 90 PLC Serial Communications User s Manual November
266. elds The low order byte is the second byte in each of these fields RESPONSE 7 32 Series 90 PLC Serial Communications User s Manual November 2000 The byte count is a binary number from 2 to 250 inclusive It is the number of bytes in the normal response following the byte count and preceding the error check Note that the byte count is equal to two times the number of analog inputs returned in the response A maxi mum of 250 bytes 125 analog inputs is set so that the entire response can fit into one 256 byte data block The analog inputs are returned in the data field in order of number with the lowest number analog input in the first two bytes and the highest number analog input in the last two bytes of the data field The number of the first analog input in the data field is equal to the start ing analog input number plus one The high order byte is sent before the low order byte of each analog input GFK 0582D Protocols SNP SNP X MESSAGE 05 FORCE SINGLE OUTPUT FORMAT Address Func Point Data Error Check 05 Number 00H Hi Lo Hi Lo Query Address Func Point Data Error Check 05 Number 00H Hi Lo Hi Lo Normal Response QUERY An address of 0 indicates a broadcast request All slave stations process a broadcast re quest and no response is sent The function code is equal to 05 The point number field is two bytes in length It may be any value less than the highest output
267. elect Multidrop as the program mer s connection method In the programming software select the SNP ID of the PLC or module you wish to connect to Assigning a PLC SNP ID to a PLC with Logicmaster Take your programmer to the first PLC to be assigned and connect directly to its program mer port From the Logicmaster Main Menu select F2 Logicmaster 90 Configuration Package Select F2 CPU Configuration Put the software in the ONLINE mode Select Assign PLC ID On the ASSIGN PLC ID screen the CURRENT PLC ID field will display an ID if the PLC has one If the PLC does not currently have an SNP ID this field will be blank In the OFFLINE mode it will display a series of asterisks Key in the new PLC ID For newer CPUs it may be from one to seven alpha numeric characters long For older CPUs it is limited to a maximum of six characters For exam ple it could be APMOOI B00001 etc Appendix H SNP Multidrop H 5 Press the Enter key new SNP ID will be written to the PLC and CURRENT PLC ID field on your screen will update to show this new SNP ID Repeat the above steps for each PLC that is on the multidrop system If assigning an SNP ID to a module other than a CPU see the user s manual for that particular module for instructions Assigning an SNP ID Number to a PLC with VersaPro Take your programmer to the first PLC to be assigned and connect directly to its program mer
268. em Inspect the multidrop cable it may be wired incor rectly damaged or disconnected A wire may be loose on one of the connectors Also physically check the status of the PLC you are trying to connect to It may not be powered up it may be stopped or it may have some other problem A quick check can be made of the LED indicator lights on the Rack 0 the CPU rack power supply For example in a Series 90 30 system the PWR OK and RUN LEDs should all be ON Eliminate the PLC itself as a possible problem by connecting your programmer directly to the PLC s programmer port You should be able to communicate with a PLC using this direct connection even if the Logicmaster software is configured for Multidrop as long as the SNP IDs match If you are not sure of the SNP ID of the PLC and are using Logicmaster set your Logicmaster software to Direct connect and it will connect regardless of the PLC s SNP ID unless there is a hardware problem or communications setting mismatch both of which are described above If using VersaPro use a communications setup Device that contains a blank SNP ID field which should let you connect to a directly connected PLC regardless of the PLC SNP ID Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Appendix 1 Introduction General Modem Information This chapter discusses serial communications using modems Some possible Series 90 PLC communications applications that re
269. em Turn around Time the Long Break duration is 400 milliseconds to allow Long Break transmission through modems The Long Break is used identically by the SNP and SNP X protocols GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 61 Block Check Code The Block Check Code BCC is the final byte of each SNP X message and is used as an integ rity check of the contents of the message The BCC value is calculated over all bytes in the message except for the final BCC byte itself Upon reception of any SNP X message the BCC value of the message is recalculated and compared to the BCC value within the message The BCC value over a message range is calculated by successively exclusive OR ing the next message byte and then rotating the cumulative BCC value left one bit this process is repeated for all bytes in the message range to be checked The BCC calculation algorithm is Initialize Temp byte to zero For first to last byte in message range to be checked Exclusive OR Temp BCC byte with message byte Rotate Temp BCC byte left by 1 bit with wrap around Bump to next message byte End for Temp BCC byte now contains final BCC value A sample C procedure to calculate a BCC byte over a message range is provided below byte procedure calc bcc msg len byte msg Pointer to start of SNP X message int len Number of bytes to compute BCC over int i int bcc Temp byte lon
270. emory types for the CCM single bit set and clear are logical memory types They map to the same input and output tables as memory types 1 and 2 but are assigned unique memory type numbers be cause they are used to perform the bit set and bit clear special operations on the input and out put tables Table 5 2 Memory Types Supported by Series 90 CCM CCM Memory Type CCM Target Table Register Table Read Write Input Table Read Write Output Table Read Write CCM Scratch Pad Read Diagnostic Status Words Read Input Table Bit Set Output Table Bit Set Input Table Bit Clear Output Table Bit Clear Chapter 5 CCM Service 5 5 5 6 Scratch Pad Memory 6 The entire scratch pad is updated every time an external READ request is received by CCM scratch pad locations read only The scratch pad is a byte oriented memory type Table 5 3 CCM Scratch Pad Memory Allocation ee LLLI MN 0 CPU Type 2 in hexadecimal 0 Minor in hexadecimal ER 0 0 0 0 Bit pattern same as SP 00 PU omm Minor in BCD TENE NN Revision No Minor in BCD Peer to Peer 1 254 meer wm 30 33 User Program Code See Note 5 1 2 3 D E 2 6 17 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D CCM Service Scratch Pad Memory Allocation Footnotes 1 0000 Run Enabled 0100
271. enerate the the message data bits are fed to the shift register one at a time CRC register contains a preset value As each data bit is presented to the shift register the bits are shifted to the right The LSB is XORed with the data bit and the result is XORed with the old contents of bit 1 the result placed in bit 0 XORed with the old contents of bit 14 and the re sult placed in bit 13 and finally it is shifted into bit 15 This process is repeated until all data bits in a message have been processed Software implementation of the CRC 16 is explained in the next section Calculating the CRC 16 The pseudo code for calculation of the CRC 16 is given below Preset byte count for data to be sent Initialize the 16 bit remainder CRC register to all ones XOR the first 8 bit data byte with the high order byte of the 16 bit CRC register The result is the current CRC INIT SHIFT Initialize the shift counter to 0 SHIFT Shift the current CRC register 1 bit to the right Increment shift count Is the bit shifted out to the right flag a 1 or a 0 If it is a 1 XOR the generating polynomial with the current CRC If it is a 0 continue Is shift counter equal to 8 If NO return to SHIFT If YES increment byte count Is byte count greater than the data length If NO XOR the next 8 bit data byte with the current CRC and go to INIT SHIFT If YES add current CRC to end of data message for transmission and exit When th
272. equential order from the first step to the last Serial Communication A method of data transfer in which individual bits are transmitted sequentially one at a time rather than simultaneously as in parallel transmission Serial I O Serial Input Output This feature lets a user write a custom protocol for reading from or writing to a wide variety of serial devices such as bar code readers or pagers In its GFK 0582D Appendix A Glossary A 11 early implementations Serial I O was sometimes referred to as Custom Protocol Generic Output Series Ninety Protocol SNP SNP Protocol is the native serial communications protocol used by all Series 90 PLCs SNP is a GE Fanuc proprietary master slave protocol Series Ninety Protocol Enhanced SNP X A optimized version of the basic SNP protocol used primarily for applications requiring fast data transfer Significant Bit A bit that contributes to the precision of a number The number of significant bits is counted beginning with the bit contributing the most value referred to as the Most Significant Bit MSB and ending with the bit contributing the least value referred to as the Least Significant Bit LSB Status Word Indicates overall status of the CCM SNP and Serial I O protocols and the communica tion network Also refers to a memory location that holds COMMREQ status data Storage Synonymous with memory Synchronous Transmission in which data bits are transm
273. er For the RTU protocol the Series 90 PLC Serial Communiocations User s Manual November 2000 GFK 0582D Communication Networks slaves will look for a new request Since there is typically more than one slave device sharing the multidrop line each slave will process only requests containing its own Station Address or the broadcast address which is sent to all slaves Additional information on SNP Multidrop can be found in Appendix H Modem Transmission The word modem is an acronym for MOdulator DEModulator modem is a device that converts data from digital to analog for transmitting and from analog to digital for receiving over telephone communications lines In the following figure a computer running GE Fanuc CIMPLICITY software is communicating via modem with a Series 90 70 PLC CIMPLICITY L SERIES 90 70 PLC MODEM MODEM 44910 nv cuo zzo RS 232 1 RS 232 Figure F 4 Example Modem System Configuration Some modems utilize other methods of transmission such as radio or microwave These mo dems are often used when the cables cannot be connected between the modems The FCC normally requires the use of single frequency transmitters with short transmitter on times Therefore a warm up del
274. er of points value must be less than or equal to the highest output point num ber available in the attached Series 90 CPU The high order byte of the starting point num ber and number of bytes fields is sent as the first byte in each of these fields The low or der byte is the second byte in each of these fields The byte count is a binary number from 1 to 256 0 256 It is the number of bytes in the data field of the force multiple outputs request The data field is packed data containing the values that the outputs specified by the starting point number and the number of points fields are to be forced to Each byte in the data field contains the values that eight output points are to be forced to The least significant bit LSB of the first byte contains the value that the output point whose number is equal to the starting point number plus one is to be forced to The values for the output points are ordered by number starting with the LSB of the first byte of the data field and ending with the most significant bit MSB of the last byte of the data field If the number of points is not a multiple of 8 then the last data byte contains zeros in one to seven of its highest order bits RESPONSE 7 36 Series 90 PLC Serial Communications User s Manual November 2000 The description of the fields in the response are covered in query description Note The force multiple outputs request is not an output override command The out pu
275. er the location has been specified via the Set X Status Bits Address COMMREQ 07003 The Session Active bit is always maintained by the slave device and must not be reset by the ladder application The X Read Success and X Write Success bits are only set by the slave de vice the ladder application must examine and then reset these bits every ladder logic scan in order to properly detect the next X Status Bits indication GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 59 Timers 7 60 SNP X protocol uses the following timers Note that the T4 timer is used exactly as in the SNP protocol T4 This is the time interval that the SNP or SNP X master device must wait after sending a Long Break before sending an Attach or X Attach message This allows the slave device to set up the serial port and prepare to receive an attach message This timer is used only by the master de vice The usual value of this timer is 50 milliseconds If modem operation is indicated by configuring a non zero Modem Turnaround Time the T4 timer value is 600 milliseconds Broadcast Delay This is the minimum time interval that the SNP X master must wait after sending a broadcast message before sending any other message This delay is required because the SNP X protocol requires that a slave device not respond to a broadcast request The Broadcast Delay is typical ly encountered after sending a broadcast X Attach request This delay appl
276. eration The X READ and WRITE bits remain set for exactly one sweep and may not be cleared by the PLC ladder application 6 26 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Disable Break Free SNP Slave Operation 07004 1B5C Available Modes Slave Description Local Command This command disables the break free SNP feature in Series 90 30 CPUs that support this feature see Chapter 3 for feature support information Break independent operation improves serial communications using modems as certain modems alter the timing of the break or interpret it as a modem command Break free SNP eliminates the requirement for a serial break at the start of each SNP and SNP X session The following points should be considered when incorporating this COMM REQ command into your control application This command disables break free operation and eliminates its impact on PLC sweep time Break free operation remains disabled until the next time the PLC is power cycled or until command 7005 is executed If acommunication session is in progress when the command is executed communication will continue but detection of no break Attach X Attach messages will stop immediately This COMM REQ command may be executed on the first PLC sweep FST_SCN If the COMM REQ status word location specified in words 3 and 4 of the command block is not a valid R AI or reference the fault
277. error An error occurred within the SNPX task in the remote slave device The minor error code contains the specific error code See the table of Minor Error Codes below Problem with sending mail to the slave Service Request task Series 90 70 PLC CPUs only Problem with getting mail from the slave Service Request task Series 90 70 PLC CPUs only 85 55h Slave SNP task timed out before receiving an SRP response Series 90 70 PLC CPUs only 56h Slave SNP task could not find the requested datagram connection Series 90 70 PLC CPUs only 57h Slave SNP task encountered an error in trying to write the datagram Series 90 70 PLC CPUs only 88 58h Slave SNP task encountered an error in trying to update the datagram Series 90 70 PLC CPUs only GFK 0582D Chapter 6 SNP Service 6 5 s SNP Minor Error Codes 6 6 The meaning of each Minor Error Code depends upon the Major Error Code for which it is de fined Consult the appropriate Minor Error Code table for the indicated Major Error Code Table 6 3 Minor Error Codes for Major Error Code 5 Error Status Service Request Error Description 1 FFh Service request has been aborted FE 3 FDh Unable to perform auto configuration FCR 5 Cannot clear TEXTUS Bk Ri meidukmamemirnzi Invalid sweep state to set FSh 12 F4h Invalid input parameter in request D
278. ers high voltage lines large motors etc or in localities subject to frequent electrical storms Note that the cable shield should only be grounded at one end and the signal lines should be twisted pair For installations where an added degree of reliability and security is desired or where noise is known to be a problem the application of port isolators is recommended see the section Isolators below The use of high quality low capacitance cable can help ensure reliable communications especially over longer distances Some cable manufacturers produce cable that is rated for RS 485 use Also Category 5 Ethernet cable TIA EIA 568 A is sometimes a good lower cost match for this application Check with your cable vendor for recommendations Termination Two termination resistors are required across the RD receive conductors for these wiring schemes whether there are only two devices connected in a point to point arrangement whether there are several devices connected in a multi drop arrangement The resistance value chosen should be close to the characteristic impedance of the cable typically 120 ohms For RTU 2 Wire the termination resistors should be across the extreme ends of the twisted pair In RTU 4 Wire there are two twisted pairs Each twisted pair should have one termination resistor mounted on the receive end across RD and RD B of the twisted pair See the following Wiring Diagrams section
279. erval and sends an X Attach Request message The slave always recognizes a Long Break the slave resets its communication circuits and prepares to receive the expected X Attach Request message If the X Attach Request message is intended for this specific slave device the slave returns an X Attach Response to the master other slave devices ignore the X Attach message The special Null SNP ID is always accepted by any slave device instead of its actual SNP ID The use of the Broadcast SNP ID in an X Attach message is described under Broadcast Commands below The SNP X protocol sequence for the establishment of an SNP X communication sequence is shown below Master Slave Long Break 3 wait T4 time Request gt lt X Attach Response Once an SNP X session has been established SNP X commands may be used to transfer data Directed Commands When the master sends SNP X message s addressed directly to a specific SNP ID only the slave device identified by that SNP ID receives the message that slave returns response mes sage s to the master other slave devices ignore the message The special Null SNP ID is always accepted by any slave device in lieu of its actual SNP ID Any X Read command or an X Write command containing up to two bytes of data fits within a single SNP X request The master sends an X Request message and the slave returns an X Response message to complete the command X Buffer message i
280. es Number of Error Requests Number of Aborts Number of Retries sent Number of sent Number of Break Sequences Received Reserved 00h SNP Software Version Number First 6 words of error COMMREQ Data Block GFK 0582D GFK 0582D SNP Service 5 Error SNP Status Word This word indicates the major and minor error code values of the most recent COMMREQ error or internal SNP error This word follows the format and contents of the SNP Status Word See Section 2 SNP Status Word for complete details Number of Successful Requests Responses This word indicates the number of successful completions or SNP responses For a master device this value indicates the num ber of successful completions this value also includes any additional messages exchanged to keep the SNP communications alive For a slave device this value indicates the number of SNP responses successfully sent to the remote master this value also includes any messages sent to keep the SNP communication alive as well as successful local COMMREQ completions Number of Error Requests This word indicates the number of COMMREQs that have failed at this SNP device This value counts non fatal errors only the SNP communication is main tained For an SNP slave device this value also counts error responses returned to the master Number of Aborts This word indicates the number of fatal errors at this SNP d
281. es RTU ONLY RTU protocol on both ports SNP ONLY SNP and SNP X protocols on both ports SNP CCM SNP and SNP X protocols on port 1 CCM protocol on port 2 CCM SNP CCM protocol on port 1 SNP and SNP X protocols on port 2 SNP RTU SNP and SNP X protocols on port 1 RTU protocol on port 2 RTU SNP RTU protocol on port 1 SNP and SNP X protocols on port 2 A different Soft Switch Data Screen is displayed for each configuration mode The factory default is CCM protocol on both ports Make sure that the proper protocol is se lected If you are using SNP multidrop make sure that the proper SNP ID has been stored to the PLC CPU Note If you change the CMM s SNP ID via the programming software it is necessary to reset the CMM in order for the new SNP ID to take effect Resetting the CMM can be done by either pressing the CMM s Restart pushbutton or by power cycling the PLC rack that contains the CMM Chapter 2 The Communications Coprocessor Modules 2 11 Description of Communications Parameters The tables below describe the communications parameters available for each serial protocol on the CMM module Table 2 1 CCM Communications Parameters Default CCM Enable YES NO YES CCM Mode SLAVE MASTER PEER SLAVE Interface RS232 RS485 RS232 Data Rate 300 600 1200 2400 4800 9600 19200 19200 Flow Control NONE HARDWARE NONE Parity ODD NONE ODD Retry Count Timeout NORMAL SHORT NORMAL LONG MED
282. essage character 1Bh 2 58 SNP X Intermediate Response X 58h 3 82 X Write response code 82h 4 5 00 00 PLC Status Word 00 00 for this example only 6 7 00 00 Status codes Major and Minor errors 8 9 00 00 Data Length always 0 10 17 End of block character 17h marks the beginning of the SNP X message trailer 11 14 00 00 00 00 Not used always 0 15 07 Computed Block Check Code for this example 7 80 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Example of Broadcast X Write Command for 2 Bytes or Less This example shows the message exchange of a broadcast X Write command without a data buffer Note that there is no response message to the broadcast request Master Slave X Write Request message 1B 58 FF FF FF FF FF FF FF FF 02 48 12 00 01 00 04 00 17 00 00 00 00 2D Wait Broadcast Delay time No X Write Response to before next request broadcast X Write Explanation of Broadcast X Write Command 2 Bytes or Less Byte Hex Value Description Number 1 Start of message character 1Bh 2 58 SNP X Command X 58h 3 10 FF FF FF FF FF FF Broadcast SNP ID 11 02 X Write request code 02h 12 48 Segment Selector in bit mode 13 14 12 00 Data Offset 0012h 18 zero based 019 15 16 01 00 Data Length 0001h 1 bit 17 18 04 00 Data to write Max 1 wor
283. evice Place the Datagram ID returned from the slave device into master device Register Memory R Register 161 The slave device Main Program name is not required Set up the datagram for 2 point formats Point format 1 contains slave Registers 201 210 and point format 2 contains slave I Inputs 1 16 Note that the Input memory is accessed in byte mode to overcome bit mode restrictions in Series 90 70 PLCs The total datagram data size for all point formats is thus 10 registers 20 bytes plus 16 in 6 56 puts 2 bytes or 22 bytes Word 1 00017 0011 SNP Data Block Length must include all Point Formats Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07215 1C2F SNP Command Number Word 8 00000 0000 Slave Device Type 90 7020 90 30 90 20 1 Word 9 00129 0081 Datagram Type Normal 1 Permanent 81H Word 10 00022 0016 Size of Datagram area in bytes 22 bytes Word 11 00008 0008 Master Memory Type for Datagram ID R Word 12 00161 00 1 Master Address for Datagram ID Register 161 Word 13 00000 0000 Characters 1 and 2 of Local Subblk or Main Pgm name null Word 14 00000 0000 Characters 3 and 4 of Local Subblk or Main Pgm name null Word 15 00000 0000 Characters 5 and 6 of Local Subblk or Main name null Word 16 00000 0000
284. evice the SNP communication is terminated An abort may occur at either a master or slave device After an abort the master device must establish new SNP communications Aborts may be caused failure to receive an expected message or acknowledgement certain protocol errors failure to read or write to the serial port or a communication failure to the local PLC Inactivity time outs which do terminate SNP communication are not counted as aborts an inactivity timeout occurs at the slave device when the slave receives no further messages from the master Number of Retries Sent This word indicates the number of message retries performed by this SNP device A master or slave device retries a message when the acknowledgement to that message indicates a recoverable transmission error maximum of two retries are permitted to any SNP message if the message is still not correctly acknowledged a fatal error occurs and the SNP communication is aborted For SNP X operation this word indicates the number of X Attach retries to establish the SNP X session as well as any repeated SNP X request after a session has been reestablished Number of NAKs Sent This word indicates the number of negative acknowledgements NAKs returned by this SNP device is sent when an error recoverable or fatal is detected in a received SNP message If the error is recoverable a retry is expected if the error 16 fatal the SNP communication 15 aborted Num
285. f Message 08 with Diagnostic Code 0 or 1 specified is sent to a port wired in a 2 Wire RTU arrangement the port will lock into an endless send receive loop This is because the query and response messages are identical for these two messages so the receive logic continues to treat each of its own responses as another query Message 08 Diagnostic Code 2 does not have this problem since this message does not produce a response For infor mation on configuring 2 Wire 4 Wire RTU see the section 2 Wire and 4 Wire RTU RS422 485 Cable Connections in Chapter 8 This note does not apply to CPUs 351 352 and 363 GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 37 MESSAGE 15 FORCE MULTIPLE OUTPUTS FORMAT Address Func Starting Number of Data Error Check 15 Point No Points Query Address Func Starting Number of Error Check 15 Point No Points Normal Response QUERY An address of 0 indicates a broadcast request slave stations process a broadcast re quest and no response is sent The value of the function code 15 15 The starting point number is two bytes in length and may be any value less than the highest output point number available in the attached Series 90 CPU The starting point number is equal to one less than the number of the first output point forced by this request The number of points value is two bytes in length The sum of the starting point number and the numb
286. f bytes in the data field of the preset multiple registers request Note that the byte count is equal to twice the value of the number of registers The registers are returned in the data field in order of number with the lowest number reg ister in the first two bytes and the highest number register in the last two bytes of the data field The number of the first register in the data field 15 equal to the starting register number plus one The high order byte is sent before the low order byte of each register RESPONSE The description of the fields in the response are covered in the query description GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 39 MESSAGE 17 REPORT DEVICE FORMAT Address Func Error Check 17 Query Address Func Byte Device Slave Data Error Check 17 Count 5 30 70 Light Normal Response QUERY The Report Device Type query is sent by the master to a slave in order to learn what type of programmable control or other computer it is An address of zero is not allowed as this cannot be a broadcast request The function code is equal to 17 RESPONSE The byte count field is one byte in length and is equal to 5 The device type field is one byte in length and is equal to 30 for the Series 90 30 PLC or 70 for the Series 90 70 PLC The slave run light field is one byte in length The slave run light byte is equal to OFFH if the Series 90 C
287. figuration specified by the COMMREO does not take effect until the CPU detects a loss of the SNP SNPX master This occurs the configured T3 time after the master disconnects The status word for the port configuration is updated as soon as the CPU verifies that the specified configuration is valid That means COMMREQ Successful value may be returned by the Port Configuration COMMREQ before the specified configuration is actually installed Sending Another to the Same Port The application program must wait at least 2 seconds after a new serial port protocol is installed before sending any COMMREQs specific to that protocol to the port This applies to a new pro tocol installed by Storing a new hardware configuration or by a port configuration COMMREQ If the port is configured for Serial I O this waiting period must also follow any Stop to Run mode transition of the CPU Invalid Port Configuration Combinations The configurations of both ports must be compatible The CPU rejects the following combina tions Port 1 Port 2 Disabled Disabled Disabled Serial CPU Run Stop switch disabled Serial I O Disabled CPU Run Stop switch disabled Serial I O Serial I O CPU Run Stop switch disabled CPU Run Stop switch disabled 98 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol 9 RTU Slave SNP Slave Operation With Programmer Attached
288. for the Series 90 scratch pad layout Diagnostic status words and error code definitions are different in the Series One PLC and the Series 90 PLC See Table 12 for the Series 90 diagnostic status words and refer to Table 15 for the Series 90 error code definitions Table C 6 Series Five Memory Types vs Series 90 CCM Memory Types Series Five CCM Series 90 CCM Memory en Table Memory Type Type 2 SECUN 227 Table 3 9e 3 emm s meme The Series Five local and special inputs do not exist in the Series 90 input table inputs are equivalent and itis up to the user to determine their functionality The Series Five local and internal outputs do not exist in the Series 90 output table outputs are equivalent and it is up to the user to determine their functionality For example an output to be used as an internal coil must not be tied to a real output The addressing scheme for the Series Five differs from that of the Series 90 when accessing I O points Scratch pad definitions are not the same in the Series Five PLC and Series 90 PLC See Table 11 for the Series 90 scratch pad layout Diagnostic status words and error code definitions are different in the Series Five PLC and the Series 90 PLC See Table 12 for the Series 90 diagnostic status words and refer to Table 15 for the Series 90 error code definitions Series 90 PLC Serial Communications User s M
289. for each field When all the fields are com plete press the Escape key GFK 0582D Appendix J Using Modems with Logicmaster 15 3 edit an entry or enter a new listing in the directory move the cursor to Edit press the Enter key Dialing Director Dialing Directory add neu entry gt ighlight entry to edit Select lt add new entry gt to add entry A Highlight the entry you wish to edit or select lt add new entry gt and press the Enter key to add a new listing B Complete the fields on the screen displayed using the Enter key to move among the fields and the right left cursor keys to move within each field Press Zoom F10 to display the choices for each parameter cursor to one of the choices and then press F10 again or the Enter key to select the parameter When all the fields are com plete press the Escape key 4 dial a number press the Enter key with the cursor on Dial Use the cursor keys to select an entry and then press the Enter key to dial the number 5 Move the cursor to Hangup and press the Enter key to abort the call and hang up the modem 6 To exit the modem cursor to Quit and press the Enter key or press ALT F8 Note computers with modems or add in card or PCMCIA slot modems include communications software You may choose to use one of these packages to dial and connect Logicmaster to a remote PLC especially if you are using COMG or COMA If you
290. for examples of this Isolators Isolators are recommended for high noise environments or for long cable runs to further reduce the chance of noise intrusion or damage due to ground imbalance The GE Fanuc IC690ACC903 Port Isolator is suitable for this purpose For use with RTU protocol this unit will connect directly to the 15 Port 2 connector of the CPU351 352 and 363 modules but will require a custom built cable to adapt to the 25 pin connectors on the CMM modules Appendix has data on the IC690ACC903 isolator 8 10 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Serial Cable Diagrams and Converters 8 RTU Wiring Diagrams PIN a45237 SD A e ai m e 13 RD A E SD 25 RD B e LI Fg 1 2 ze gt SERIES 90 CMM Eg 5 T LU 7 24 gt 1 RTS Fg Fg 10 RTS E Device RTS Fg Fg 22 RTS B gt CTS 4 u Port 2 CTS i3 23 CTS B Fe XJ 7 ov gt lt SHLDI e E 1 SHLD d Connector Depends on 25 PIN ZSPIN MALE FEMALE RTU Master Device TERMINATION CONNECTIONS On the CMM jumper pins 24 and 25 to connect internal 120 ohm resistor If RTU master device does not have an internal termination resistor connect resistor across RD A and
291. for the accuracy completeness sufficiency or usefulness of the information contained herein No warranties of merchantability or fitness for purpose shall apply The following are trademarks of GE Fanuc Automation North America Inc Alarm Master GEnet PowerTRAC Series Six CIMPLICITY Genius ProLoop Series Three CIMPLICITY 90 ADS Helpmate PROMACRO VersaMax CIMSTAR Logicmaster Series Five VersaPro Field Control Modelmaster Series 90 VuMaster FrameworX Motion Mate Series One Workmaster Copyright 1989 2000 GE Fanuc Automation North America Inc Rights Reserved Preface What s new in this Manual Information has been added about the following products and features Series 90 Serial Port Communications Capabilities table Chapter 1 IC693CPU363 and Series 90 70 CPU serial ports Chapter 3 Break Free SNP Chapter 3 Serial I O protocol Chapters 3 and 9 Port Isolator IC690ACC903 Appendix G SNP multidrop Appendix H Use of modems Appendices I J and K RTU wiring methods Chapter 8 Content of this Manual This manual describes serial communications products for the Series 90 Programmable Logic GFK 0582D Controller PLC For a list of product standards refer to the latest version of data sheet GFK 0867 GE Fanuc Approvals Standards General Specifications Installation instructions in this manual are provided for installations that do not require special procedures for noisy or hazardous environments
292. fter port status is read 5 CT CTS is active Se CTS line on the serial port is active or the serial port does not have a CTS line Cleared CTS line on the serial port is not active 4 0 U not used should be 0 9 22 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial I O Protocol 2 Write Port Control Function 4304 GFK 0582D This function forces RTS for the specified port Example Command Block for the Write Port Control Function VALUE VALUE MEANING decimal hexadecimal address 0002 0002 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type R address 3 0000 0000 Status word address minus 1 0001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4304 1000 Write port control command address 7 XXXX Port control word Port Control Word 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 RTS U U U U U U U U U U U U U U U Port Control Word Format see Operating Note 2 below for additional details 1 BR No Signal Description 15 RTS Commanded state of the RTS output 1 activates RTS 0 Deactivates RTS U Unused shoud Operating Notes For CPU port 2 RS 485 the RTS signal is tied to the transmit driver Therefore con t
293. g of each privilege level Table 6 14 Description of PLC Privilege Levels Level 4 Write to all configuration or logic Configuration may only be written in STOP mode logic may be written in STOP or RUN mode Display set or delete passwords for any level Write to any configuration or logic including word for word changes the addition deletion of program logic and the overriding discrete I O Level 2 Write to any data memory except overriding discrete I O The PLC can be started or stopped PLC and I O fault tables can be cleared Level 1 Read any data memory Write to memory is prohibited The PLC cannot be started or stopped Level 0 Series 90 70 PLC only Read and Write of PLC system memory is prohibited The following table indicates the minimum privilege level required at the slave device to per form each request from the SNP master Table 6 15 Required PLC Privilege Levels Minimum Privilege Level Series 90 20 Series 90 70 PLC Series 90 30 or Series 90 Micro PLCs Service Request Change Privilege Level Read System Memory Read Task Memory Read Program Block Memory Write System Memory Write Task Memory Write Program Block Memory Toggle Force System Memory 2 Return Fault Table 1 Return Control Program Name 1 Return Controller Type and ID 1 Return PLC Time Date 1 PLC Short Status 1 Set PLC Time Date 21 Establish Datagram Update Datagram Cancel Datagra
294. ger than byte to handle wrap around during rotate 1 0 bcc 0 while i lt len XOR the Temp byte with message byte bcc bec msgli Rotate Temp BCC byte left by 1 bit bcc bec lt lt 1 Wrap MSB into LSB for rotate bcc bec bec gt gt 8 amp 0x01 Increment i for next msg byte i Return the computed BCC byte return byte bcc 7 62 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X SNP X Protocol Sequence GFK 0582D This section describes the sequence of messages used by the SNP X Protocol to establish an SNP X communication session and to transfer data All message exchanges consist of a request and a response the master device sends requests and the slave device returns a response SNP X commands may be directed or broadcasted Directed SNP X commands are addressed to a specific slave device and are accepted only by that device Directed commands contain both a request and a response A directed SNP X command contains a single request message and may optionally contain one additional data buffer message The response always contains a single response message Broadcasted SNP X commands are addressed to the special broadcast address and are accepted by all SNP X slave devices on a multidrop serial link A broadcasted SNP X command con tains a single request message
295. ght of all other GE Fanuc boards The BTM is required for parallel communications with the programmer or if multiple racks are to be in a system The remaining slots can contain combinations of I O or intelligent modules to suit the applica tion program The CMM can be installed in any slot except for slot 1 in any rack in the sys tem There can be no empty slots to the left of option modules or I O modules using interrupts unless a Blank Slot Interrupt Jumper is installed in the empty slot in a Series 90 70 PLC sys tem If more I O is required in the system than can be contained in a single rack additional racks can be added to the system up to a maximum of eight racks including the CPU rack Series 90 30 PLCs For Series 90 30 PLCs the CMM must reside in the CPU rack baseplate There is a slot for the power supply and slot 1 is reserved for the CPU module the CMM can reside in any other slot There no Bus Expansion Modules as there are for the Series 90 70 PLCs CMM Configuration Modes The CMM configuration mode selects the communication protocol for each serial port on the module There are nine possible configuration modes for the CMM module ONLY CCM protocol on both ports CCM RTU CCM protocol on port 1 RTU protocol on port 2 RTU CCM protocol port 1 CCM protocol on port 2 2 10 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D CCM Modul
296. h byte 1 maximum units Discretes SB 80 50h bit 1 maximum units 26 byte maximum units Discretes SC 82 52h bit 1 maximum units 28 1Ch byte maximum units Discretes 5 read only 84 54h bit 1 maximum units 30 1 maximum units Genius Global Data 86 56h bit maximum units 56 38h 1 maximum units The maximum addressable ranges for each memory type depends on the model of CPU and memory configuration When using a byte oriented memory type the corresponding memory address offsets and number of elements are expressed in bytes not bits Bit type memory does not have to be byte aligned Notes There is no difference between bit and byte oriented memory types in terms of processing speed message length or message transfer time COMMREQ Status Word Pointer memory type is O based The Data Area memory is 1 based Chapter 9 Serial I O Protocol 9 7 Configuring Serial Ports Using the Function The following tables list the command block values required for setting up a Serial Port for SNP RTU and Serial I O All values are in hexadecimal unless otherwise indicated The BLKMV commands that are used to create the command block are described in the example Timing If a port configuration is sent to a serial port that currently has an SNP SNPX mas ter for example the programmer connected to it the serial port con
297. h byte Day in BCD Word 1 low byte Word 3 low byte Month in BCD Word 3 high byte Year in BCD Word 4 Word 5 Word 6 Word 7 27 Word 322 342 Word 658 678 Chapter 6 SNP Service Faults since last clear Faults in the table Faults in this response Fault table entry 1 Fault table entry 16 Fault table entry 432 6 53 6 54 The format of each I O Fault Table entry is described in the following table Byte 1 Spare unused Byte 2 4 Reference address Byte 5 Rack number Byte 6 Slot number Byte 7 I O Bus number Byte 8 Bus address Byte 9 10 Point address Byte 11 Fault group Byte 12 Fault action Byte 13 Fault category Byte 14 Fault type Byte 15 Fault description Byte 16 36 Spare unused Byte 37 Timestamp Seconds in BCD Byte 38 Minutes in BCD Byte 39 Hours in BCD Byte 40 Day in BCD Byte 41 Month in BCD Byte 42 Year in BCD The format of each PLC Fault Table entry is described in the following table Byte 1 4 Spare unused Byte 5 Rack number Byte 6 Slot number Byte 7 Unit number Byte 8 Spare unused Byte 9 Fault group Byte 10 Fault action Byte 11 12 Fault error code Byte 13 36 Spare unused Byte 37 Timestamp Seconds in BCD Byte 38 Minutes BCD Byte 39 Hours in BCD Byte 40 Day in BCD Byte 41 Month
298. he COMMREQ Status Word Insufficient Privilege For Series 90 70 PLC the minor error code contains the privilege level required for the service request Service Request Error The minor error code contains the specific error code See table of Minor Error Codes below The PLC CPU s Service Request T is full The master should retry later It is recommended that the master wait a minimum of 10 msec before sending another service request SNP DOS Driver Error The minor error code contains the specific error code See table of Minor Error Codes below Illegal Service Request The requested service is either not defined or not supported This value is returned in lieu of the actual 01h value passed in the SNP error message to avoid confusion with the normal successful COMMREQ completion Local SNP SNP X Error An error occurred within the SNP task in the CMM module in this PLC This error may occur in either an SNP master or an SNP slave The minor error code contains the specific error code See table of Minor Error Codes below Remote SNP Error An error occurred within the SNP slave task in the CMM module in the remote PLC The minor error code contains the specific error code See table of Minor Error Codes below Autodial Error error occurred while attempting to send command string to an attached external modem The minor error code contains the specific error code See table of Minor Error Codes below SNP X slave
299. he Modem Turnaround Delay value may be optionally negotiated between the master and slave devices via the SNP Parameter Select message part of the Long Attach command The master and slave devices both use the larger of the Modem Turnaround Delay values from either device Transmission Delay The length of time required for the data to transfer from the Master and Slave initiating device to the receiving device This time is also referred to as the wire time This time reflects unusual delays in the data transmission path as when satellite links are used to transfer data The Transmission Delay defaults to 0 milliseconds for all CMM configuration Timeout parameter selections The Transmission Delay value may be optionally negotiated between the master and slave devices via the SNP Parameter Select message part of the Long Attach command The master and slave devices both use the larger of the Transmission Delay values from either device Chapter 7 Protocol Definition RTU SNP and SNP X 7 53 SNP Datagrams The SNP Read and Write Memory requests permit the master device to directly read and write memory within the slave device memory Each read or write request is of a single memory type multiple requests are required to access different memory types SNP also provides the capability to read from several slave memory types in a single request The mixed slave memory reference is called a Datagram Datagrams provide signifi
300. he Transmit time out sets the time out value to the amount of time actually needed to transmit the data plus 4 seconds Caution If an Initialize Port 4300 COMMREQ is sent or a Cancel Operation 4399 COMM REQ is sent in either Cancel or Cancel Write mode while this is transmitting a string from a serial port transmission is halted The position within the string where the trans mission is halted is indeterminate In addition the final character received by the device the CPU is sending to is also indeterminate Chapter 9 Serial I O Protocol 9 27 Read Bytes Function 4402 This function causes one or more characters to be read from the specified port The characters are first read into an internal input buffer then read from there into the data area specified in the COMMREQ s Command Block The function returns both the number of characters retrieved and the number of unprocessed characters still in the input buffer If zero characters of input are requested only the number of unprocessed characters in the input buffer is returned If insufficient characters are available to satisfy the request and a non zero value is specified for the number of characters to read the status of the operation is not complete until either suf ficient characters have been received or the time out interval expires In either of those condi tions the Port Status words indicate the reason for completion of the read operation
301. he X Write command are de scribed The X Write command is shown both with and without the optional X Buffer mes sage GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 77 Example of Direct X Write Command 2 Bytes or Less This example shows the message exchange of a direct X Write Command without a data buffer Master X Write Request message 1B 58 00 00 00 00 00 00 00 00 02 48 12 00 01 00 04 00 17 00 00 00 00 2D Slave X Write Respone message 1B 58 82 00 00 00 00 00 00 17 00 00 00 00 07 Explanation of Direct X Write Command 2 Bytes or Less Byte Hex Value Number Description X Write Request Message Start of message character 1Bh SNP X Command X 58h SNP ID of target slave X Write request code 02h Segment Selector in bit mode Data Offset 00121 18 zero based 019 Data Length 0001h 1 bit Data to write Max 1 word 2 bytes 16 bits End of block character 17h marks the beginning of the SNP X message trailer Not used always 0 Computed Block Check Code for this example X Write Response Message 1 1B 2 58 3 10 00 00 00 00 00 00 00 00 11 02 12 48 13 14 12 00 156 0100 17 18 04 00 19 17 20 23 00 00 00 00 24 2D 1 1B 3 58 3 82 45 00 00 6 7 00 00 8 9 fele 10 17 11 14 00 00 00 00 15 07 Start of message character 1Bh SNP X Command X 58h X Write response code
302. he local interface module which takes place during the PLC scan CPU Central Processing Unit The central device in a PLC that interprets user instructions makes decisions and executes the functions based on a stored program This program specifies actions to be taken to all possible inputs Custom Protocol See Serial I O Data Link The equipment including interface modules and cables that allow transmission of in formation Datagram A serial communications message that combines data from various memory types and or locations Diagnostic Status Words A group of 20 words which provide detailed information about the operation and con figuration of the CMM module and used for monitoring and diagnosing transmission errors The status words are maintained and updated in the CMM module Different sets of Diagnostic Status Words are used for the CCM and SNP Protocols 232 Formerly 5 232 See 5 232 Ethernet A network technology utilizing Carrier Sense Multiple Access with Collision Detection CSMA CD often used in Local Area Networks Firmware A series of instructions contained in ROM Read Only Memory which are used for internal processing functions only These instructions are transparent to the user Generic Output See Serial I O Hardware of the mechanical electrical and electronic devices that comprise a Programmable Logic Controller and its application s Appendix A Glossary 5 Hex
303. he maximum amount of data that can be written in the X Buffer message is 1000 decimal bytes The slave com pletes the command by returning an X Response message to the master If the slave detects an error when processing the X Request or X Buffer an X Response message is returned with an appropriate error code Data bytes are always byte aligned Individual bit data to be written must be supplied at the proper bit locations within the data bytes For example 14 occurs at the fourth bit within the data byte 0000 1000 08h The X Write command may be directed to a particular slave device or broadcast to all attached slave devices on the serial link The X Write command is directed to a specific slave device by using the specific slave SNP ID In Point to Point wiring only the Null SNP ID may be used in lieu of a specific SNP ID the slave device will respond to the Null SNP ID as if its own SNP ID had been specified The X Write command is broadcast by using the broadcast SNP ID The slave does not return any response messages to a broadcast X Write request Therefore the master cannot detect a broadcast X Write failure After sending a broadcast X Write request or its following X Buffer message the master must wait the Broadcast Delay time interval before sending the next mes sage The following diagrams and tables describe the actual protocol transactions involved in an X Write command Both the directed and broadcast varieties of t
304. hesystem configurations below GFK 0582D Appendix N IC655CMM590 Isolated Repeater Converter N 5 Obsolete Product Simple Multidrop Configuration This configuration shows how to connect a single Isolated Repeater Converter for signal con version or greater distance RS 232 RS 422 RS 422 844927 SERIES 90 PLC CABLE A CABLE CABLE D OR BRICK SERIES 90 PLC HOST J2 J1 SW ON SERIES 90 PLC BRICK IS THE NICKNAME FOR THE ISOLATED REPEATER CONVERTER Figure N 3 Simple System Configuration Using the Isolated Repeater Converter Complex Multidrop Configuration This configuration shows how to connect multiple Isolated Repeater Converters for signal con version greater distance and more drops RS 422 a44928 CABLE SERIES 90 PLC SERIES 90 PLC OR HOST SERIES 90 PLC RS 422 RS 422 CABLE D x CABLE D BRICK BRICK SERIES 90 PLC J2 J1 J2 J1 RS 232 SW ON SW ON CABLE _ SERIES 90 PLC RS 422 CABLE B RS 422 RS 422 m CABLE D CABLE D BRICK BRICK SERIES 90 PLC J1 J1 J2 J2 SW ON SW ON SERIES 90 PLC RS 232 CABLE E BRICK SERIES 90 PLC BRICK IS THE NICKNAME FOR THE J2 ISOLATED REPEATER CONVERTER J1 SW CTS Figure N 4 Complex System Configuration Using Isolated Repeater
305. his word identifies which CCM Command is to be executed There are two categories of CCM Commands local commands and remote com mands The local commands take place between the initiating CPU and its associated CMM only They are not sent over the serial line The remote commands Read Write commands are sent over the serial line A complete list of CCM Commands is provided later in this section under the heading Data Block Summary for CCM Commands Target ID Word 8 To execute a transfer of data between CCM devices one CCM device must request the transfer and the other must comply with the request The device requesting or initiating the transfer is the source the device complying with but not initiating the request is the target Data can flow from source to target as well as from target to source The Target ID is the identification number of the target device for Series 90 CCM it is the CPU ID number Each CMM port can be configured with the same or a different CPU ID num ber This number is assigned using GE Fanuc configuration software If not familiar with how to do set this number consult your software s user s manual or on line help system for details On the Series 90 30 if you are using a CPU331 or higher a default CPU ID is assigned by the 5 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 8 PLC s CPU This default CPU ID is value of 1 on both CMM ports CPU ID of val
306. ice on the line may initiate communications The initiating device is called the source and the responding device is called the target Master slave mode is used in a multidrop configuration with one master and one or more slaves Only the master can initiate communications 7 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Protocols CCM RTU SNP SNP X CCM Control Characters The CCM Protocol uses special ASCII control characters for both peer to peer and master slave modes The table below lists the ASCII control characters used by the CCM Protocol Table 7 1 Control Characters Used in CCM Protocol Hex Value Meaning Enquire Acknowledge NAK 15 Negative Acknowledge 01 Start of Header ETB 17 End of Block STX 02 Start of Text End of Text End of Transmission CCM Protocol Flow This section provides an overview of the message exchange that takes place using the CCM Protocol The message flow is the same for both master slave and peer to peer mode however the characters transferred during the ENQ sequence are slightly different These differences will be detailed later in this section Enquiry Sequence The enquiry sequence is a request to initiate communications and is sent from a master or peer device If the target device is not busy it sends a positive acknowledge ACK If it is busy it sends a negative acknowledge NAK He
307. icmaster 90 30 20 Micro Programmable Controller Reference Manual Hand Held Programmer for Series 90 V 50 20 Micro programmable Controllers User s Manual Series 90 V 70 Programmable Controller Installation Manual Series 90 V 30 Programmable Controller Installation Manual Contents Chapter 1 Introduction 1 1 Quick Guide to the Manual 1 1 Series 90 Serial Port Communications Capabilities 1 2 Series 90 Micro PLC Serial Communications Protocol Support 1 3 Serial Communications Protocol Overview 1 3 Chapter 2 The Communications Coprocessor Modules 2 1 Overview of the 2 1 Section 1 Description of CMM Hardware and Operation 2 2 LED Indicators D CU ee wae ieee 2 3 Restart Reset Pushbutton 2 4 Seral es CA ene RUE RS 24 Section 2 Installing and Configuring the 2 7 What you will Need 2 7 Installing the CMM Hardware 2 8 Configuring the CMM b Re bie ed eI ee bb bee 2 10 VO Rack Configuration is ge ERR ERR E 2 10 CMM Configuration Modes 2 10 Description of Communications Parameters
308. ided by the generating polynomial using modulo 2 with no carries The CRC is the remainder of this division Disregard the quotient and add the remainder CRC to the data bits and transmit the mes sage with CRC The receiver then divides the message plus CRC by the generating polynomial and if the remainder 15 0 the transmission was transmitted without error A generating polynomial is expressed algebraically as a string of terms in powers of X such as X3 X X or 1 which can in turn be expressed as the binary number 1101 A generating polynomial could be any length and contain any pattern of 1s and Os as long as both the trans mitter and receiver use the same value For optimum error detection however certain standard generating polynomials have been developed RTU protocol uses the polynomial X16 5 X2 1 which in binary is 1 1000 0000 0000 0101 this polynomial generates is known as CRC 16 The discussion above can be implemented in hardware or software One hardware implementa tion involves constructing a multi section shift register based on the generating polynomial 840473 x2 x15 x16 CRC REGISTER gt 15 14 gt 13 12 11 10 9 8 7 6 5432 1 o EXCLUSIVE OR DATA INPUT Figure 7 11 Cyclic Redundancy Check CRC Register GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 25 To g
309. ield and or Port Number TASK field to match your configuration Ladder Program Example Use the following ladder program to become familiar with programming SNP commands and to verify that the system 15 connected and operating properly The ladder program example below initiates point to point SNP communication with any SNP slave device by issuing a single Attach command shortly after the ladder is started and then repeatedly issues Read System Memory commands to the connected slave device To use other commands in the example ladder simply substitute the example Command Block values provided for each command into the BLOCK MOVE instructions in Rung 6 or Rung 9 of the ladder Rung 6 prepares the initial Attach command Rung 9 prepares the repeated com mand that follows the initial Attach The example ladder loads up to 8 words into the COMM REQ Data Block add BLOCK MOVE instructions into the ladder if the desired command re quires more data 6 16 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 6 Ladder Program Example Operation The first two rungs Rung 4 and Rung 5 provide a 2 0 second delay when the ladder is started This allows more than enough time for the CMM module to initialize upon system powerup When the startup delay is complete one shot T0002 fires to load the Attach command Rung 6 loads the COMMREQ Command Block with an Attach command 07200 after the
310. ies 90 30 CPUs figure 3 2 Session SNP Communication Session 7 48 SNP X Communication Session 7 57 Session Type SNP X 6 31 6 33 Set PLC Time Date SNP Command 6 55 Set Q Response CCM Command 5 16 Set X Status Bits Address SNP X Com mand 6 25 627 Short Status 6 46 Signal names conventions 8 6 RS 422 8 6 Single Bit Write CCM Command 521 Single Slave Session 6 31 Slave Memory Access Bits X Status Bits 7 59 Slave PLC Status Word SNP X J 6 31 5 9 9 SNP Command Examples 6 22 Attach 6 34 Autodial Command 6 68 Cancel Datagram 6 62 Change Privilege Level 6 38 Change SNP ID 624 Clear Diagnostic Status Words 6 21 Establish Datagram 6 58 Long Attach 6 65 PLC Short Status Read Diagnostic Status ME 6 44 Read Program Block Memory Read System Memor 6 40 Read Task 6 42 Return Control Program N ame 6 48 Return Controller Type and ID Informa tion 6 50 Return Fault Table Return PLC Time Date Set PLC Time Date 6 55 Set X Status Bits Address 6 25 Toggle Force System Memory Update Datagram 6 61 Update Real Time 61 16 45 Write Program Block Memor Write System 6 41 Write Task 6 43 X Read 6 30 X Write 6 32 SNP Command Summary GFK 0582D GFK 0582D SNP COMMREQ Programming Examples 16 16 SNP IDj624 6 3
311. ies 90 device using the RS 422 RS 485 standard the non Series 90 device s line receiver must contain fail safe capability This means that in an idle open or shorted line condition the output of the line receiver chip must assume the mark ing state When using RS 422 RS 485 the twisted pairs should both be matched so that both transmit signals make up one twisted pair and both receive signals make up the other twisted pair The CMM is supplied with a 120 Ohm terminating resistor in each RS 422 receiver circuit If the module is at either end of an RS 422 multidrop or point to point link pin 25 the RD B signal must be connected directly to pin 24 the internal 120 ohm terminating resistor If the module is an intermediate drop in the multidrop link this connection should not be made Some older equipment such as the Series Six PLC used the signal nomenclature as shown be low The original nomenclature for this equipment has been retained in the wiring diagrams Chapter 8 Serial Cable Diagrams and Converters 8 5 8 6 Table 8 1 Series Six RS 422 Signal Cross Reference to EIA Standard Signal Name Name SmdGme RB During a mark condition logic 1 B will be positive with respect to A During a space condition logic 0 B will be negative with respect to A RS 422 RS 485 Cable Diagrams Diagrams for the following connections are shown in this section CMM to CMM CMM to Series Six CMM to OIT CMM to
312. ies only to the SNP X master device For the CMM module the Broadcast Delay value defaults to the configured 2 value selected by the Timeout SNP configuration parameter default is 2 seconds This value may be modi fied by the SNP X master user interface The optimal Broadcast Delay value depends upon the PLC scan characteristics of the slowest of all attached slave PLCs that is scan rate commu nication window frequency and length and system load Modem Turnaround Time and Trans mission Delay do not apply to the Broadcast Delay Response Timeout This is the maximum time interval that the SNP X master will wait for an expected message from the slave device Failure to receive an expected message within this time interval causes the master to abort the SNP X communication session the session must be re established for any further SNP X communication This timeout is used when waiting for an SNP X response or intermediate response from the slave device The Response Timeout is not used for broad cast commands This timeout applies only to the SNP X master slave device For the CMM module the Response Timeout value defaults to the configured T2 value se lected by the Timeout SNP configuration parameter default is 2 seconds This value may be modified by the SNP X master user interface The optimal Response Time out value depends upon the characteristics of the slave PLC scan that is scan rate communication window fre quency and
313. ime Master and Slave Acknowledgement Timeout Master and Slave Link Keep Alive Time Master only Link Idle Timeout Slave only device requitee minimum time interval which this device requires between a re ception and the next transmission It allows the half duplex serial line to switch direction It is usually used as the time delay after re ceiving a message until sending its acknowledgement or after an acknowledgement until sending the next message It must elapse before sending a message or acknowledgement The T1 timer defaults to 5 milliseconds for all CMM configuration Timeout parameter selections timer values are always ex changed between the master and slave devices in the Attach request and response messages each device operates with the T1 value ob tained from the other device The maximum time allowed for reception of an acknowledgement after sending a message Failure to receive an acknowledgement within the T2 time causes the SNP device master or slave to abort the SNP communication The T2 timer values can be optionally negotiated between the mas ter and slave devices via the SNP Parameter Select message part of the Long Attach command The master and slave devices both use the larger of the T2 values from either device Each device adds the separately negotiated Modem Turnaround Time and Transmission Delay values to the negotiated T2 value prior
314. imited to eight characters of the control program GFK 0582D Chapter 6 SNP Service 6 49 s Return Controller Type and ID Information 07210 1C2A Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Return Controller Type and ID request the slave responds with data This service provides the master with the capability to retrieve the SNP ID PLC Controller Type number of control programs program name etc from the slave device PLC CPU Example Command Block Read the attached slave device Controller Type and ID information and store in master device Register Memory R Registers 201 220 Word 1 00003 0003 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type R Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07210 2 SNP Command Number Word 8 00008 0008 Master Memory to store Control Information Word 9 00201 00C9 Master Address to store Control Information Register 201 The Master Memory Type and Address fields must be selected to allow enough room to accom modate the 40 byte Control Information Area See Table 6 1 Memory Types Unit Lengths and Valid Ranges for valid memory types and addresses 6 50 Series 90 PLC Serial Communications Use
315. in BCD Byte 42 Year in BCD Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Set PLC Time Date 07213 1C2D Available Modes Master Description SNP Service 5 Remote command The slave device must be attached before executing this command see At tach command The master sends a Set PLC Time Date request with data the slave responds This service provides the master with the capability to set the current system time and date clock of the slave device The master is provided several options The master may specify and set the date and or time explicitly The master may also specify that the master PLC s system date time be used to set the slave This option is useful in synchronizing the slave s date time with the master s date time The Series 90 70 PLC and Series 90 30 PLC Models 331 364 support time date and day of week The Series 90 30 PLC Models 311 313 323 and Series 90 20 PLC do not support time date or day of week Example Command Block Set the date for the attached slave Series 90 70 PLC to Sunday January 19 1992 Word 1 00006 0006 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 Word 7 07213 1C2D Word 8 00003 0003 Word 9 00402 0192 Word 10 00025 0019 Word 11 00000 0000 Word 12 00001 0001 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address m
316. ing Modems with VersaPro and Control After a modem has been created and the OK button on the above window is clicked there will be a Send Break checkbox visible in the Selected Modem Parameter Settings Send Break If this box is checked then the programmer will send the break signal to the remote PLC If the remote CPU has break free SNP this box does not need to be checked See Chapter 3 for infor mation about break free SNP 3 In the CCU click on the PORTS tab Click NEW to add a new port to the list Add New Port Selection 4 r PertSettinas 0 OK newport Stopbits 1 Cancel ele 2 SNP SERIAL 7 T Baudet s Defaul Physical Port 3500 Modem Tumaround 1 Help Time 10 1 SNP Timers in milliseconds Associated newmodem SNP T1 SNP T2 3000 SNPAIS fi 0250 SNP T3P Connect Timeout 40000 SNPT3PP foso SNP T4 600 SNP T5 fi 0000 Part supports Multisession SNP T5P 10100 Mulisession yes SNP T5PP 10250 Timeouts in milliseconds Enter in the name of the port Next to TYPE select SNP SERIAL Next to PHYSICAL PORT select the desired COM port for the modem on your computer Set the PORT SETTINGS to be equal with those that were configured for the PLC CPU Select the ASSOCIATED MODEM that was created in step 1 on C
317. ing schemes used today but the most common and the type used in CMM communications is the American Standard Code for Information Interchange or ASCII code As shown in the illustration below the CMM uses an 8 bit character code plus an optional par ity bit to transfer serial data Data Bits Stop Parity Start optional The table below shows examples of the binary and hexadecimal forms including parity bit of several ASCII characters The parity bit is explained in the section Parity Checking Refer to Appendix B for a complete list of the ASCII character set represented in hexadecimal and deci mal Table E 1 ASCII Information Code Format Binary Form of Hexadecimal Form of Bit Character Character ASCH Character Character odd 0 00000010 0000010 02 2 control character control character Of Text 0107071 1 00010101 15 MEM character px Ack GFK 0582D E 1 Transmission Errors and Detection Noise Errors asynchronous serial protocols use error checking and detection mechanisms to reduce the number of transmission errors and ensure reliable transfer of data The error checking methods employed by the CMM communications protocols are described below The CMM uses four types of noise error checking Parity Checking Block Check Code checking SNP SNP X Longitudinal Redundancy Checking CCM Cyclic Redun
318. ins the value that the register specified by the register number field is to be preset to The first byte in the data field contains the high order byte of the preset value The second byte in the data field contains the low order byte RESPONSE The normal response to a preset single register query is identical to the query 7 34 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X MESSAGE 07 READ EXCEPTION STATUS FORMAT Address Func Error Check 07 Query Address Func Data Error Check 07 Normal Response QUERY This query is a short form of request for the purpose of reading the first eight output points An address of zero is not allowed as this cannot be a broadcast request The function code is equal to 07 RESPONSE The data field of the normal response is byte in length and contains the states of output points one through eight The output states are packed in order of number with output point one s state in the least significant bit and output point eight s state in the most signifi cant bit GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 35 MESSAGE 08 LOOPBACK MAINTENANCE GENERAL FORMAT Address Func Diagnostic Error Check Code 0 1 4 Address Func Diagnostic Error Check 08 Code 0 1 4 Normal Response QUERY The function code is equal to 8 Th
319. intervening modems to turn the serial link around This time defaults to the configured value for Series 90 CMM or CPU modules For CMM mod ules this value is specified by the TurnA Delay SNP configuration parameter For an SNP X master device in the CMM module the configured value may be modified by the SNP X master user interface The Modem Turnaround Time value is also used to specify the time that the RTS signal is acti vated prior to data transmission This provides a keying signal for use with modems and is used by all SNP X master and slave devices Transmission Delay This is the time required for the data to transfer from the initiating device to the receiving de vice This time is usually referred to as wire time This time reflects unusual delays in the data transmission path as when satellite links are used to transfer data For the CMM module this time defaults to zero Fora master device this default value may be modified by the SNP X master user interface Long Break The SNP X master sends a Long Break to signal all slave devices on the serial link to prepare to establish a new communication session Each and every slave device aborts any active commu nication session and prepares to receive an Attach or X Attach message The master asserts a Long Break by holding the transmit line in a space state for at least three character times at the current baud rate If modem operation is indicated by configuring a non zero Mod
320. inus 1 Register 1 Not Used Not Used Command Number Set mode time date 1 time onlyz2 date only 3 synchronize 4 Year low byte month high byte Day of month low byte hours high byte Minutes low byte seconds high byte Day of week low byte 0 high byte The Set mode field specifies what parts of the date and time are to be set in the slave device If time only is selected the values for date and day of week are not used If date only is selected the values for time are not used If synchronize is selected the master PLC s system time and date is used in lieu of the time and date fields in the COMMREQ Command Block The Year Month Day of month Hours Minutes Seconds and Day of week are specified in a packed BCD format The Hours value is entered in 24 hour format 0 23 The Day of week value specifies day of the week where Sunday 1 and Saturday 7 GFK 0582D Chapter 6 SNP Service 6 55 s Toggle Force System Memory 07214 2 Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Toggle Force System Memory request with data the slave responds This service provides the master with the capability to toggle a single status over ride or transition bit in the slave device to the opposite state that is from set to reset or from reset to set Example Command Block Toggle
321. ion after all Update Real Time Datagram commands have been completed 6 64 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Long Attach 07300 1C84 GFK 0582D Available Modes Master Description Remote command The Long Attach command provides the capability to specify a host of additional parameters to fine tune the communications between the master and the slave device The Long Attach command can be issued at any time When issued a Break sequence is initi ated to all slave devices The detection of the Break sequence by a slave device immediately aborts any communication session currently in process and places the slave device into a state waiting for a valid Attach request The master waits the length of the T4 timer before sending the Attach request to the slave devices The master then waits for the Attach response Only the slave device with the matching SNP ID responds The other slaves return to a state waiting for a Break sequence In addition to the exchange of the Attach request response an exchange of an SNP Parameter Select request response also occurs The SNP Parameter Select request is issued by the master SNP device to negotiate the T2 and T3 timer values the Modem Turnaround Delay the Trans mission Time Delay and the Maximum SNP Data Size with the slave SNP device Having negotiated a successful Long Attach to a slave PLC the master device is accorded the defaul
322. ion requested by the query it sends back a normal response for that function This indicates that the request was successful Error Response The slave receives the query but for some reason it cannot perform the requested function The slave sends back an error response which indicates the reason the request could not be pro cessed No error message will be sent for certain types of errors For more information see section Communication Errors Broadcast The master sends a message addressed to all of the slaves by using address 0 slaves that receive the broadcast message perform the requested function This transaction is ended by a time out within the master GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 21 Message Fields The message fields for a typical message are shown in the figure below and are explained in the following sections Station Function Inf ti Error Address Code THORHTTEMOH Check Station Address The station address is the address of the slave station selected for this data transfer It is one byte in length and has a value from 0 to 247 inclusive An address of 0 selects all slave sta tions and indicates that this is a broadcast message An address from 1 to 247 selects a slave station with that station address Function Code The function code identifies the comma
323. ions User s Manual November 2000 Yes No Yes No No GFK 0582D General Series 90 CPU Serial Communication Information 0582 CPU Serial Ports Pin Assignments for CPU Serial Ports 1 and 2 The pin assignments in the next two tables only apply to the following CPUs Series 90 30 CPU351 CPU352 and CPU363 Series 90 70 772 CPX782 CPX928 CPX935 CGR772 and CGR935 Table 3 6 Port 1 Non Isolated RS 232 Signals Pin Signal Number Name Description es Resist Sead See the previous figures for location of pin 1 Table 3 7 Port 2 Isolated RS 485 Signals Pin Signal Number Name Description 6 Dime bimwemidCkwTosmi Resistor Termination See the previous figures for location of pin 1 Note that Pin 5 provides Isolated 5 VDC power 100 mA maximum for powering external options Chapter 3 Series 90 CPU Serial Ports 3 9 Series 90 PLC Standard Non Isolated SNP Serial Port The standard Series 90 PLC serial port has 15 pin D type female connector and is RS 422 485 compatible An RS 232 to RS 422 converter is required to interface to systems that provide RS 232 compatible interfaces It is found an all Series 90 PLCs m Series 90 70 PLC Found on all Series 90 70 CPUs This is the only port on most CPUs On CPUs with three ports this port is called Serial Port 3 m Se
324. ires only the command number Word 7 Example Clear CCM Diagnostic Status Words Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 00001 0001 00000 0000 00008 0008 00009 0009 00000 0000 00000 0000 06002 1772 Data Block Length NOWAIT Mode Status Word Memory Type Register Status Word Address minus 1 Register 10 Not used in NOWAIT Mode Not used in NOWAIT Mode Command Number Read CCM Diagnostic Status Words to Source Registers 06003 1773 Description Local Command There are 20 consecutively numbered CCM Diagnostic Status Words which be read by the PLC CPU transfer of all or part of the Diagnostic Status Words can be made to the CPU as long as they are in a consecutive block Example Read the first five Diagnostic Status Words to source registers 00050 00054 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 GFK 0582D 00006 0006 00000 0000 00008 0008 00009 0009 00000 0000 00000 0000 06003 1773 00000 0000 00000 0000 00001 0001 00005 0005 00050 0032 Chapter 5 CCM Service Data Block Length NOWAIT Mode Status Word Memory Type Register Status Word Address minus 1 Register 10 Not used in NOWAIT Mode Not used in NOWAIT Mode Command Number Not used Not used Target Memory Address Data Length words Source Register Software Configuration Command 06004
325. is required because the PLC CPU and the external device do not run in synchro nization So the data is temporarily stored in the buffer until the PLC CPU is ready to read it The Internal Input Buffer is not a part of user memory Its data can only be accessed by using the appropriate discussed later in this chapter Data written from the PLC to an external device does not pass through the Internal Input Buffer The Internal Input Buffer has a maximum size of 2K bytes the default setting Data is read out of the buffer sequentially on a First In First Out FIFO basis As data is read it is removed from the buffer which makes room for incoming data COMMREQ instruction can specify how much data is to be read from the buffer it doesn t have to read the entire buffer In the figure below the arrow lines indicate that data flows from the Internal Input Buffer to User Data Memory and that this data flow is controlled and directed by the COMMREQ In Serial I O communications COMMREQs must be used to 1 control communications setup functions and 2 to direct the transfer of data either to or from the serial port Several COMMREQs may be required to perform a complete communication cycle see the next section PLC CPU Internal External gt Input Device Buffer Ladder Program User Data Memory Figure 9 1 Serial I O Data Read Overview 9 2 Series 90 PLC Serial Communications User s Manual N
326. isables the listen only mode enables responses to be sent when queries are received so that communications can be restarted The value of the first byte of the data field DATA1 must be 0 or FF Any other value will cause an error response to be sent The value of the second byte of the data field DATA2 is always equal to 0 The normal response to an Initiate Communication Restart query is identical to the query DIAGNOSTIC Force Listen Only Mode Loopback Maintenance CODE 04 A loopback maintenance request query or broadcast with a diagnostic code equal to 4 is called a Force Listen Only Mode request An address of 0 indicates a broadcast request All slave stations process a broadcast re quest After receiving a Force Listen Only mode request the device will go into the listen only mode will not perform a requested function and will not send either normal or error responses to any queries The listen only mode is disabled when the RTU device receives an Initiate Communication Restart request or when the RTU device is powered up Both bytes in the data field of a Force Listen Only Mode request are equal to 0 device never sends a response to a Force Listen Only Mode request Note Upon power up the RTU device disables the listen only mode and is enabled to continue sending responses to queries Operating Note for Message 08 Use with 2 Wire Arrangement In the CMM modules i
327. issible input events an action routine to be performed is identified for each combination of input event and current state Following each state table pseudo code is provided for the action routines used in that state table The timer names used in the pseudo code match the SNP X timer names presented earlier in this chapter SNP X Master State Table The table below defines the actions taken by the SNP X master in each state STATE EVENT User Cmd Establish new SNP X session Receive X Attach Resp msg User X Read X Write Receive Intermediate Resp msg Receive X Response msg Broadcast Delay timer expired Response Timeout timer expired Master Wait for Master Wait for Idle X Att Resp Inter Resp 1 2 3 4 Action State 2 Action B State 3 1 Action D State 4 5 Action E State 5 1 Action G State 3 1 Action C Action H State 3 State 5 ActionI ActionI State 1 State 1 Wait for X Resp 5 Action F State 3 1 Action C State 3 Action I State 1 For any invalid intersection in this table abort all master processing and return to State 1 7 84 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP X Master Actions The following action routines are used by the SNP X Master State Table Build and send X Attach message to slave If broadcast X Attach Start Broadcast Delay timer Else directed
328. itted at a fixed rate with the transmitter and receiver synchronized by a clock This eliminates the need for start and stop bits Terminator A device or load resistor connected to the end of a transmission line to terminate the signals on that line Used to eliminate or reduce undesirable signal reflections Tristate A point that has three states logic 1 logic 0 and disconnected disabled Or it may refer to the third disconnected state The tristate design is used in communications circuits to allow a driver or buffer to be disconnected from its communications line User Memory Term commonly used when referring to the memory circuits within the PLC used for storage of user ladder programs and configuration Application program memory Volatile Memory A memory that will lose the information stored in it if power is removed from it Word A measurement of memory length usually 16 bits long for the Series 90 PLC Write To send data to another device Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Glossary Wye Cable A cable 1 693 305 supplied with each Series 90 30 CMM module which sepa rates serial ports 1 and 2 from the single serial port connector on the module It loose ly resembles the letter Y because one end of the cable has a single connector and the other end has a dual connector GFK 0582D Appendix A Glossary A 13 Appendix ASCII Code List B Thi
329. l MAP specification MAP is a Connection oriented protocol that is stations resid ing on a network are able to transfer information only after establishing a logical con nection much like two people using the telephone system Master Slave Communication between stations where one station always initiates requests and the other station always responds to requests Memory A grouping of physical circuit elements that have data entry storage and retrieval ca pability GFK 0582D Appendix A Glossary 7 Microprocessor An electronic computer processor consisting of integrated circuit chips that contain arithmetic logic register control and memory functions Microsecond s or One millionth of a second 1 x 10 6 or 0 000001 second Millisecond ms or msec One thousandth of a second 1 x 10 3 or 0 001 second Mnemonic An abbreviation given to an instruction usually an acronym formed by combining ini tial letters or parts of words Modules A replaceable electronic subassembly usually plugged in and secured in place but easi ly removable in case of fault or system redesign In the Series 90 PLC a combination of a printed circuit board and its associated faceplate which when combined form a complete assembly Multidrop A serial wiring configuration which connects more than two devices in a daisy chain configuration All devices on a multidrop network must be uniquely addressable Nanoseco
330. l Short Default ENQ COUNT Peer to peer or master slave ENQ Retry Count QSEQ COUNT Q Sequence Retry HEADER COUNT Header Retry Count DATA BLK COUNT Data Block Retry CCM Protocol State Tables The following state tables illustrate the CCM Protocol for peer master and slave devices Pseudo code describes the actions to be performed while in a particular state Separate state tables and actions are provided for peer master and slave implementations The timer and counter names used in the pseudo code match the timer and counter names listed in the Time out and Retry Value tables presented above GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 13 CCM Peer State Table State Idle Wait for Wait for Wait for Wait for Wait for Wait for Wait for Wait for Wait for Event ACK to SOH Header ACK to ACK to STX Data EOT Q RSP ENQ Header Data 1 2 3 4 5 6 7 10 Receive Send State Send Send Send Send ENQ ACK 11 EOT EOT EOT ACK State 3 State 1 State 1 State 1 State 3 A B K K COMM Send E 7 REQ ENQ State 2 Receive 7 Send PLC data Data State 6 D Receive Send Send State State Send ACK Header EOT 6 7 1 6 EOT State 5 State 1 State 1 State 1 State 5 E K F G K K E Receive State Send State State Send NAK 1 2 EOT 1 5 1 6 EOT EOT 1 11 s 1 s 1 e 1 m 5 5 1517 em EOT Receive G
331. l available in the input buffer after the read is complete if any and the actual input characters Address Address 1 Address 2 Address 3 Address n Number of characters actually read Number of characters still available in the input buffer if any first two characters first character is in the low byte third and fourth characters third character is in the low byte subsequent characters Operating Note If the input data memory type parameter is specified to be a word memory type and if an odd number of bytes is actually received the high byte of the last word to be written with the re ceived data is set to zero Chapter 9 Serial I O Protocol 9 29 Read String Function 4403 This function causes characters to be read from the specified port until a specified terminating character is received The function returns both the number of characters retrieved and the number of unprocessed characters still in the input buffer If zero characters of input are requested only the number of unprocessed characters in the input buffer are returned If the terminating character is not in the input buffer the status of the operation is not complete until either the terminating character has been received or the time out interval expires In ei ther of those conditions the port status indicates the reason for completion of the read opera tion If the time out interval is set to
332. l message sent are required on the basis of one word for every two characters written each char acter requires a byte of memory If you have an odd number of characters to write as in the example below which has five characters place zeroes in the unused high byte most signifi cant byte of the last word as seen below in address 11 this is more easily seen in the hexa decimal Value column Example Command Block for the Write Bytes Function WORD VALUE VALUE MEANING decimal hexadecimal address 0006 0006 Data block length in words includes charac ters to send address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type address 3 0000 0000 Status word address 0001 minus 1 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4401 1131 Write bytes command address 7 0030 001E Transmit time out 30 seconds See note be low address 8 0005 0005 Number of bytes to write address 9 25960 6568 h 68h 65h address 10 27756 6C6C T 6Ch 7 6Ch address 11 0111 006F 6Fh Although printable ASCII characters are used in this example there is no restriction on the values of the characters that can be transmitted The numbers in parentheses are the ASCII codes in hexadecimal format A list of ASCII codes can be found in Appendix B Operating Notes Note Specifying zero as t
333. l connector pin outs Therefore each device manufacturer s data sheet should be consulted for pin out information when fabricating cables 30 interchange circuits For a complete explanation of the electrical and mechanical characteristics of these interfaces obtain a copy of EIA Standards RS 422 and RS 485 from the EIA The EIA was formerly called the Electronics Industries Association Their name was changed in 1997 to Electronic Industries Alliance The EIA web site address be found in the Standards section of Appendix L Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Appendix Communication Networks F The term network system configuration refers to the way in which computers terminals and communication equipment are interconnected With Series 90 PLCs the following data com munications system configurations are possible Point to Point Peer to Peer or Master Slave Multidrop Single Master Multiple Slaves Modem Transmission Point To Point Point to Point connection is the simplest type of system configuration when using this method only two devices are connected to the same communication line Either RS 232 or RS 422 can be used They can be connected in peer to peer mode where both devices can initiate commu nications or in master slave mode where only the master can initiate communications The following figures illustrate the point to point configura
334. lay also specifies the length of time that the Request to Send RTS signal is asserted before any characters are trans mitted Valid selections are NONE 10 ms 100 ms or 500 ms Note Timeout values used by Logicmaster 90 software and the Series 90 70 and 90 30 CPUs are also listed for comparison Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Table 2 4 SNP Timer Values for Timeout Selections CCM Modules SNP Timer None Short Medium LM90 90 30 90 70 5 ms 5 ms 5ms 5ms T2 2 sec 500 ms 1 sec 2 sec T3 Disabled 5 sec 10 sec 10 sec T4 50 ms 50 ms 50 ms 50 ms 5 Disabled 2 sec 5 Disabled Transmission Delay 0 sec 0 sec 0 sec 0 sec COMMREQ timeout 30 sec 30 sec 30 sec 30 sec T3 80 character times T3 T3 65 seconds TS T5 80 character times 5 T5 Transmission Delay twice next message transmission time 10 sec 0 sec N A 1 sec 10 sec N A 10 sec 0 sec N A 1 The Transmission Delay specifies the length of time required for the data to transfer from the initiating device to the responding device This duration is also referred to as the wire time Examples where this value may be changed to a non zero value include instances where satellite links are used to transfer data The Timeout specifies the maximum length of time that a COMMREQ can remain in process If the COMMREQ command cannot be completed b
335. length system load and the need to detect and correct communication failures The time required to transmit the largest possible SNP X response message 1015 bytes at the configured data rate is internally added to the Response Timeout value Any non zero Modem Turnaround Time and Transmission Delay values are also internally added to the Response Timeout value Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Buffer Timeout This is the maximum time interval that the SNP X slave will wait for an expected SNP X buffer message from the remote master Failure to receive a buffer message within this time interval causes the slave to abort the SNP X communication session the session must be re established for any further SNP X communication This timeout is used whenever a buffer message is ex pected during both directed and broadcast requests The Buffer Timeout is not configured or specified by the user interface this time interval is internally calculated as 10 seconds plus the time required to transmit the largest possible SNP X buffer message 1008 bytes at the config ured data rate This timeout applies only to the SNP X master device The Modem Turnaround Time and Transmission Delay values used only by the SNP X master device to add to the Response Timeout and Broadcast Delay values are described below Modem Turnaround Time This is the time interval required by
336. lick on the ADVANCED button 10 Next to CONNECT TIMEOUT enter a value in milliseconds of approximately 40000 40 seconds This time may be longer or shorter depending on how long it takes for the mo dem to establish communications Appendix K Using Modems with VersaPro and Control K 7 11 12 13 14 15 16 17 18 19 if the communications lines between the PLC programmer are of very poor quality you may avoid possible future communications problems by configuring the following settings REQUEST TIMEOUT to 10000 SNP T3 to 10250 SNP T3P to 10500 SNP T3PP to 10750 If the baud rate being used is approaching 2400 and below set the SNP to 10500 the SNP T3P to 11000 and the SNP T3PP to 11500 Click OK to accept the port In the CCU click on the DEVICES tab Click NEW to add a new device to the list Add New Device Device Name Selected Device Parameter Settings OK newdevice Device Model 30 30 hd Default Port newport Help Associated S newmodem Device Address SNP ID lt NULL gt IP Address m Enter 1 or more addresses Under DEVICE NAME type in the desired name for the device Next to DEVICE MODEL select from the list the type of CPU to communicate with Next to DEFAULT PORT select from the list the port that was created in step 2 Next to ASSOCIATED MODEM select the modem that was created in step 1 from
337. lue is represented as ASCII vice See Table 13 coded hexadecimal Complete Data Block 10 11 The number of complete 256 byte data 0 255 decimal Count blocks to be transferred Value is represented as ASCII coded hexadecimal Last Block Byte Count The number of bytes less than 256 bytes 0 255 decimal in the final or only data block Value is repre sented as ASCII coded hexadecimal Source ID 14 15 Identification number of source device Value 1 255 decimal peer peer is represented as ASCI coded hexadecimal 1 90 decimal master slave End of Block control character Longitudinal Redundancy Check This is an n a Exclusive Or XOR of bytes 2 through 15 ASCII Coded Hexadecimal Example Most values are expressed as ASCII coded hexadecimal Each hexadecimal digit is converted into an ASCII character For example if the target memory address is 00986 03DAh each hexadecimal digit is converted to ASCII coded hexadecimal as shown below Byte 6 7 6 9 Target Memory Address 0 3 D A hexadecimal Target Memory Address 30 33 44 41 ASCII coded hexadecimal Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols CCM SNP SNP X Table 7 3 Target Memory Types for CCM Services Target Mem Byte 4 Byte 5 Target Memory Type Type Rd Wr Rd Wr Rd Wr Rd Wr mw qw qw 9 4 3088 rf CPU Input Override Table 9 m s p e p D s p 8 oren
338. m Ore VN OF N N HO Update Real Time Datagram 1 For Series 90 30 PLCs with Release 1 x CPU firmware privilege level 3 is required GFK 0582D Chapter 6 SNP Service 6 39 s Read System Memory 07202 1 22 Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Read request the slave responds with the data This ser vice is provided to permit the access to various reference tables within the slave PLC See Table 6 1 for the slave memory types supported This command reads enough data from the slave reference table to fill the specified number of elements in the master reference table When the access modes of the slave and master reference tables differ the data will be trans ferred from the slave reference table beginning with the least significant bit Example Command Block Read attached slave device Register Memory R Register 1 and place the 10 least signifi cant bits into master device Input Memory I Inputs 1 10 Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8 Word 9 Word 10 Word 11 Word 12 00006 0006 00000 0000 00008 0008 00000 0000 00000 0000 00000 0000 07202 1C22 00008 0008 00001 0001 00010 000A 00070 0046 00001 0001 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Wor
339. m module to module They take place over the PLC backplane if the targeted module is in the CPU baseplate Or if the targeted module is mounted in an expansion or remote rack communications take place over the Bus Expansion system No data is commu nicated over a serial port if a local request is used An example of a local request is a that clears the Serial Port buffer e Remote Requests Remote requests result in communication through a serial port In this case COMMREQ Command Block contains instructions that determine the parameters of the communications over the serial port These instructions determine such things as what port will be used if a Read or Write will be performed how much data will be transferred etc At the conclusion of every request the status of the request is reported to a particular memory location indicated by the Status Word Pointer in the Command Block Chapter 4 Initiating Communications The COMMREQ 4 3 Timing for Processing CMM Communications Requests If the CMM receives Communications Requests from the PLC faster than they can be processed by the CMM the CMM may eventually log a QUEUE FULL application fault in the PLC fault table MOD Other S W error COMMREQ MB FULL START This fault can also occur if the CMM has stopped functioning Additionally COMMREQs can be issued so quickly that the PLC CPU cannot send them fast enough This results in the application fault Reque
340. m requires a power cycle It also prevents power loss to equipment using the port for power For this you will need to build a custom cable as shown in Figure G 6 Terminate at first and last drop onl Master PLC Slave Device Make connections 15 pin port Twisted Pairs RT 9 inside D connectors 9 RT 13 X X n 11 RD B 12 10 RD A 11 Vt gt 13 SD B 10 12 SD A 14 RTS A 6 X E X B 8 B CTS A 15 r 6 RTS A 15 pin Male D connector Isolator 15 pin Female D connector 1 45V 5 5 45V GND 7 E X 7 Slave Device 15 pin port 9 4 ic 11 RD B 10 RD A 18 SD B 12 SD A 8 CTS B 15 5 14 RTS B 6 RTS A 1 5 45V 7 Slave Device 25 pin port 24 RT 25 RD B 13 RD A 21 SD B 9 SD A 23 CTS 11 CTS 22 RTS 10 RTS To Other Slave Devices Maximum of 8 devices on a multidrop Figure G 5 Multidrop Configuration Connecting Devices with 15 Ports and 25 Ports Appendix G IC690AC903 Port Isolator G 5 9 0 Terminate at firs Terminate at first
341. male D type connectors solder pot are included for user cabling 115 230 Vac power connection internal 4 position terminal block Fused Amp power protection Power ON green indicator LED Three position toggle switch recessed in the back of the unit is set according to Sys tem Configurations later in this section Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Obsolete Product 1 655 590 Isolated Repeater Converter Logic Diagram of the Isolated Repeater Converter The figure below provides a functional look at the unit Note the 3 position switch for control ling the J1 port transmitters This switch will be discussed in System Configurations later in this section 844782 LT ISOLATION J2 gt gt SD RS 2320 22 14 212 p gt d 15 15 2 4 SD gt CTS A lt 19 amp 17 i gt RD A d i8 lt 30 lt 5 SD B RD A lt 5 gt RTS 232 CTS B 4 9 a gt RD B c RD RS 232C OPTICAL RS 422 RS 232C lt 10 A E ae NEUE u RTS ME 25 17 K SD B lt 16 lt lt lt I gt CTS B RTS B E 13 D RIS A lt CTS A mx CTS RS 232C r N 2
342. mands requiring three COMMREQ command blocks Autodial 04400 1130h Dials the modem Write Bytes 04401 1131h Specifies an ASCII string from 1 to 250 bytes in length to send from the serial port Autodial 04400 1130h It is the responsibility of the PLC application program to hang up the phone connection This is accomplished by reissuing the autodial command and sending the hang up command string Chapter 9 Serial I O Protocol 9 25 Autodial Command Block The Autodial command automatically transmits an Escape sequence that follows the Hayes convention If you are using a modem that does not support the Hayes convention you may be able to use the Write Bytes command to dial the modem Examples of commonly used command strings for Hayes compatible modems are listed below Command String Length Function ATDP15035559999 lt CR gt 16 10h Pulse dial the number 1 503 555 9999 ATDT15035559999 lt CR gt 16 10h Tone dial the number 1 503 555 9999 ATDT9 15035559999 CR 18 12h Tone dial using outside line with pause ATHO CR 5 05h Hang up the phone ATZ CR 4 04h Restore modem configuration to inter nally saved values Example Autodial Command Block This example COMMREQ command block dials the number 234 5678 using a Hayes compat ible modem Word Definition Values 1 0009h CUSTOM data block length includes c
343. mber 2000 GFK 0582D GFK 0582D Ladder Program Example CCM Service lt lt RUNG 4 STEP 0001 gt gt FST SCN 70001 1 MOVE 5 CONST 0 8 0001 00000 100001 lt lt RUNG 5 STEP 0004 gt gt 10001 T0002 4 TMR 10 103 CONST 00020 R0002 lt lt RUNG 6 STEP 0007 gt gt 10002 70001 1 BLKMV R INT INT CONST 0 80005 CONST Q R0012 00006 0000 CONST 2 CONST IN2 00000 0000 CONST IN3 CONST IN3 00008 0010 CONST IN4 CONST IN4 00000 0000 CONST 5 CONST 5 00000 00102 CONST 6 CONST 6 00000 00000 CONST CONST 06101 00000 lt lt RUNG 7 STEP 0011 gt gt T0002 T0003 I MOVE COMM_ 5 INT REQ 70005 CONST 0 80001 80005 FT 00000 1000011 CONST SYSID 0002 CONST 00000001 lt lt RUNG 8 STEP 0016 gt gt ON 870005 1 00001 580001 11 0 EQ E INT CONST I2 Chapter 5 CCM Service END OF PROGRAM LOGIC 5 15 CCM Command Examples Note In each of the following examples NOWAIT mode
344. mits an X Attach request to establish an SNP X session with the slave device The X Attach command may be directed to a particular slave device or broadcast to all slave devices on the serial link The X Attach is directed to a particular slave device by specifying the SNP ID of that device In Point to Point wiring only the Null SNP ID may be specified in lieu of the actual SNP ID of the slave device the slave device will respond as if its own SNP ID had been specified When directed to a specific SNP X slave a properly encoded X Attach request invokes an X Attach response an SNP X communication session is now established with the SNP X slave The X Attach response does not contain an error code in all error cases an X Attach response is not returned An X Attach is broadcast to all slave devices by specifying the broadcast SNP ID The slave does not return any response to a broadcast X Attach request Therefore master cannot detect a broadcast X Attach failure After sending a broadcast X Attach request the master must wait the Broadcast Delay time interval before sending the next X Request An SNP X communica tion session is now assumed to be active Once the SNP X communication session has been established the slave device is able to accept SNP X commands Any number or combination of SNP X commands can be performed The SNP X session remains established in the slave device until either a non recoverable error oc curs a Long Break is
345. mmands Then once the communication has been established data may be transferred between the master and slave On the CMM this is accomplished by the set of remote SNP commands See Chapter 6 SNP Service for descriptions of all SNP commands available on the CMM The SNP master establishes a communication session as follows The master transmits a Break sequence to all devices on the serial link The Break sequence consists of holding the Transmit signal in the space state for greater than two character times at the selected data rate On the CMM the Break sequence is three character times and not less than 5 milliseconds if Modem Turnaround Delay is configured the Break sequence is fixed at 400 milliseconds The CMM sends a Break sequence as part of each Attach Long Attach and Update Real Time Datagram command In response to a Break sequence all slave devices immediately abort any existing SNP commu nication and prepare to receive an Attach message from the master After the end of the Break sequence the master waits for the configured T4 time interval for slave preparation and then sends an Attach message The Attach message contains the SNP ID of the specific slave device with which the master desires to establish the communication ses sion Only the specified slave device responds to the master with an Attach Response message the communication session is now established between the master and a specific slave device othe
346. module on several CPU serial ports and on PCM serial ports using the MegaBasic application file using either the RS 232 or RS 422 RS 485 electrical standard Essentially any combination of protocols ports and electrical standards are available with one exception The Series 90 30 CMM cannot support RS 422 RS 485 on port 1 Port selection station address data rates flow control and parity values can be configured Additional RTU Solutions Horner Electric makes RTU master modules for the Series 90 30 HE693RTM705 Series 90 70 HE697RTM700 PLCs Contact your GE Fanuc distributor or Horner Elec tric see Chapter L for information The Series 90 PCM modules can serve as an RTU master by using the MegaBasic applica tion file that can be downloaded free of charge from the GE Fanuc Technical Support web site www gefanuc com support Modbus is a trademark of Gould Inc Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Chapter The Communications Coprocessor Modules 2 This chapter describes the Communications Coprocessor modules CMM311 CMM711 and explains how to install and configure the modules Also included is a discussion of the system operation of the modules in the Series 90 PLC The chapter is divided into two sections Section 1 Description of CMM Hardware and Operation Section 2 Installing and Configuring the CMM Overview of the CMM The Communicatio
347. mory Addresses LED indicators 7 SNP Memory Addresses 6 3 Serial Ports 3 7 Memory Types Help from GE Fanuc L 1 CCM Memory Types 5 5 GFK 0582D Index 3 Index 4 Index Series Five vs Series 904 C 4 Series One vs Series 904 C 4 Series Six vs Series 904 C 3 SNP Memory Types IC690CBL714A multidrop 8 17 Miniconverter kit cable diagrams O 3 IC690ACC901 O 1 RS 232 port pin assignments O 2 RS 422 port pin assignments O 2 RS 422 SNP to RS 232 O 1 specifications system configurations O 3 Series 90 CPU Serial Port Pin Assignments 3 9 Port 2 pinout 3 9 Modem Hayes comp atible 9 26 support Modem Command via SNP Autodial 6 68 Modem Communications Modes E 5 Modem setup with Windows software K 1 Modem Transmission F 3 Modem Turnaround 1 6 3 146 33 Modems E 5 Modes Communications E 5 Multi Slave Session 6 31 633 Multidrop SNP ID 6 64 system limitations H 2 Multidrop cables specfication table H 2 types H 2 Multidrop SNP connecting examples overview H 1 setting SNP ID H 5 troubleshooting wiring diagram H 3 N Noise Error Checking Parity Checking E2 Noise Errors E2 NOWAIT mode 4 7 O Operation auto dial feature using a modem 7 4 Overrun Errors E 3 Overview of the CMM 2 1 P Parity Checking E2
348. mory Type R Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07209 1C29 SNP Command Number Word 8 00008 0008 Master Memory Type to store Control Program data Word 9 00201 00C9 Master Address to store Control Program data Register 201 Word 10 00001 0001 Number of Control Program Names to retrieve always set to 1 The Master Memory Type and Address fields must be selected to allow enough room to accom modate the data returned in the Control Program Area See Table 6 1 Memory Types Unit Lengths and Valid Ranges for valid memory types and addresses The Number of Control Program Names field should always be set to one When this field is set to one the size of the Control Program area is equal to five words 6 48 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 6 The following table describes the format of the Control Program Area returned by the Return Control Program command Table 6 17 Control Program Area Control Program Area Description Number of Control Programs Characters 1 and 2 of Control Program Name 1 Characters 3 and 4 of Control Program Name 1 Characters 5 and 6 of Control Program Name 1 Characters 7 and 8 of Control Program Name 1 The Number of Control Programs field should always be set to one The Control Program Name words contain the ASCII name l
349. municating via modems because of the distinct possibility that data corruption can occur PCMCIA Modems PCMCIA modems operate differently than external modems One major difference is that some PCMCIA slot drivers will remove power from the modem card when the port is deactivated ie HyperTerminal s connection is removed Removing power from the PCMCIA slot will ob viously hang up the modem This means that dialing with HyperTerminal will not work You must use the modem connect procedure within the programming software in order to keep the com port handle active BAUD Rate The baud rate is a critical setting for reliable communications 19200 baud is the current maxi mum rate for GE Fanuc PLCs but the distance between modems and line quality will dictate what baud rate is acceptable Keep in mind that modem manufacturers recommend that modem speeds do not exceed 2400 baud if error correction is disabled SNP does not use hardware flow control and all data integrity correction features of the modems must be disabled There fore we are relying on an 8 bit checksum to catch transmission errors meaning 1 out of every 256 errors will not be detected Running the modem over low quality analog phone lines with high data rates will increase the chances of transmission errors It is a good idea to find the optimum baud rate by experimenting with the actual line quality and connection rate before fully implementing a system Experimenting would in
350. n 2 RTU Protocol Section 3 SNP Protocol Section 4 SNP X Protocol 7 1 Section 1 Protocol This section contains a complete description of the CCM protocol for users writing a CCM seri al communications driver Topics covered include protocol flow for peer to peer and master slave mode and protocol timing and retry specifications State tables are provided at the end of the section to clearly define what occurs throughout the protocol exchange for peer and master slave modes Separate tables are provided for the CCM Peer CCM Master and CCM Slave The CCM Protocol transfers data using the asynchronous serial data format For background information on serial data transmission and the asynchronous format refer to Appendix E The Serial Line Interface following topics are covered in this section Overview of CCM Protocol CCM Peer to Peer Mode Description CCM Master Slave Mode Description Protocol Timing and Retry Specifications CCM Protocol State Tables Overview of CCM Protocol The CCM Protocol is based on the ANSI Standard X3 28 implementing asynchronous charac ter transfer using an 8 bit binary or ASCII format with optional parity bit Parity may be speci fied as odd or none Modes of Operation The CCM Protocol has two modes of operation Peer to Peer and Master Slave Peer to peer mode is a point to point configuration where only two devices share a single com munication line Either dev
351. n Q Sequence master slave communications the master ENQ sequence is 3 characters long The slave ACK response is 8 characters long The Enquiry Data transfer format and description for the Q Sequence follows Data sent from Tet E source device Q Add N master Q Data sent from Tet Data Data Data Data L A target device Q Add Byte Byte Byte Byte R C slave 1 2 3 4 CK Figure 7 8 Data Transfer from Slave to Master Master Slave Q Sequence Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X The following tables describe the individual fields in the communication blocks Table 7 8 Master Enquiry Description Master Slave Q Sequence grim Ce ee ee ASCII coded Q used to specify Q Sequence operation Target Address ID number of target slave 20h 21h through 7Ah Example Slave ID is 37h 37h 20h 57h W Third character of 3 character enquiry sequence Table 7 9 Slave Response Description Master Slave Q Sequence Byte Description Valid Range ASCII coded Q used to specify Q Sequence operation Sih Target Address ID number of target slave 20h 21h through 7Ah Example Slave ID is 37h 37h 20h 57h W Data in Q Sequence response Longitudinal Redundancy Check This is an Exclusive OR XOR of bytes 3 6 ACK fe contol character Protocol Timing and Retry Specifications The CCM Protocol defines a set of
352. nd The slave device must be attached before executing this command see At tach command The master sends a Read request the slave responds with the data This ser vice provides the master with the capability to read the Local Subblock Data segment L ref erence table of a specified Program Block in the slave Only a Series 90 70 PLC slave device supports this service a Series 90 20 or Series 90 30 slave device will produce unpredictable results Example Command Block Read attached slave device Program Block Memory L Words 1 10 and store to master de vice Register Memory R Registers 201 210 Slave device Main Program name _MAIN slave device Program Block name PBLOCK1 Words 12 15 contain the slave device Main Program name words 16 19 contain the slave device Program Block name Word 1 00013 000D Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 Word 7 07206 1C26 Word 8 00001 0001 Word 9 00010 000A Word 10 00008 0008 Word 11 00201 00C9 Word 12 16717 414D Word 13 20041 4 49 Word 14 00049 0031 Word 15 00000 0000 Word 16 16976 4250 Word 17 20300 Word 18 19267 4 43 Word 19 00049 0031 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Slave Program Block Address L1 Number of Master Memory Type elements
353. nd ns or nsec One billionth of a second 1 x 10 9 or 0 000000001 second Noise Undesirable electrical disturbances to normal signals generally of high frequency con tent Non Volatile Memory A memory capable of retaining its stored information under no power conditions pow er removed or turned off OFF Line Equipment or devices that are not connected to a communications line For example the Workmaster computer when off line operates independent of the Series 90 CPU ON Line Descriptive of equipment or devices that are connected to the communications line Optical Isolation Use of a solid state device to isolate the user input and output devices from internal circuitry of an I O module and the CPU Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Glossary Output Information transferred from the CPU through a module for level conversion for controlling an external device or process There are two basic types discrete and ana log Output Devices Physical devices such as motor starters solenoids etc that receive data from the Pro grammable Logic Controller Output module A module that converts logic levels within the CPU to a usable output signal for con trolling a machine or process Parity The anticipated state either odd or even of a set of binary digits Parity Bit A bit added to a memory word to make the sum of the bits in a word alway
354. nd being issued to the station It is one byte in length and is defined for the values 0 to 255 as follows Illegal Function Read Output Table Read Input Table Read Registers Read Analog Input Force Single Output Preset Single Register Read Exception Status Loopback Maintenance Unsupported Function Force Multiple Outputs Preset Multiple Registers Report Device Type Unsupported Function 7 22 67 68 127 128 255 Series 90 PLC Serial Communications User s Manual November 2000 Read Scratch Pad Memory Unsupported Function Reserved for Exception Responses GFK 0582D GFK 0582D Protocols CCM RTU SNP SNP X Information Fields message fields other than the Station Address field Function Code field and Error Check field are called generically information fields Information fields contain the additional information required to specify or respond to a requested function Different types of messages have different types or numbers of information fields Details on information fields for each message type and function code are found in the section Message Descriptions Some messages Message 07 Query and Message 17 Query do not have information fields Examples As shown in the following figure the information fields for message READ OUTPUT TABLE 01 Query consist of the Starting Point No field and Number of Points field The information fields for message READ OUTPUT TABLE 01 Respons
355. nd using a contact from a transition one shot coil to enable a COMMREQ This is to avoid sending the COMMREQ every scan sending the every scan could cause a fault IN The location of the Command Block It can be any valid address within a word oriented area of memory WL AI or only Series 90 70 supports and L SYSID A hexadecimal value that gives the rack and slot location of the module associated with this Instruction For the Series 90 70 if the SYSID is incorrectly programmed for a rack and slot that does not contain a CMM or applicable CPU the function OK output is not activated The Series 90 30 instruction does not have an OK output SYSID Examples ss ww For Series 90 CPU the SYSID is always 0001h for rack 0 slot 1 GFK 0582D Chapter 4 Initiating Communications The COMMREQ 4 5 46 TASK For a serial communications the TASK parameter specifies the serial port on the CMM module or CPU to be used by this COMMREQ The following table lists the valid task numbers for the CMM modules 1 Port 1 Protocol 2 Port 2 Protocol The next table lists the valid task numbers for the CPU serial ports Task Number Port 1 Port 2 If the task number programmed for the CMM or the CPU serial ports is not valid an application fault will be logged in the fault table COMMREQ BAD TASK ID This
356. nector Specifications H 2 SNP Multidrop Examples 4 Configuring and Connecting a Programmer to a Multidrop Network H 5 SNP Multidrop Troubleshooting H 6 Appendix I General Modem Information I 1 Introduction pu 1 1 Example Modem Application 2 Re 1 2 Modem Recommendations I 3 General Modem Issues I 4 Modem Operating Notes I 5 Appendix J Using Modems with Logicmaster J 1 Introduction ub saa toi E Rashad Se hae ug J 1 Setting PLC CPU Communications Parameters in Logicmaster J 2 Using Logicmaster s Auto Dialer Utility J 4 Using Windows HyperTerminal J 7 GFK 0582D Series 90 PLC Serial Communications User s Manual November 2000 Contents Appendix Using Modems with VersaPro and Control KA Introduction NE Ee MC eR K 1 Contents of this Appendix K 1 PLC CPU ContiguratioD cios sian stk eae es K 2 Installing Modem
357. ng Address 10H Data Block Length Address 1 0 No Wait WAIT NOWAIT Flag Address 2 0008 R register memory Status Word Pointer Memory Address 3 Zero based number that gives Status Word Pointer Offset the address of the COMM REQ status word for exam ple a value of 99 gives an ad dress of 100 for the status word Address 4 0 Only used in Wait No Wait Idle Timeout Value mode Address 5 0 Only used in Wait No Wait Maximum Communication Time mode Address 6 FFFOH Command Address 7 0005 Protocol 0005 Serial IO Address 8 0 Slave Port Mode Address 9 6 19200 5 9600 4 4800 Data Rate Address 10 0 None 1 2 Even Parity Address 11 0 Hardware 1 None Flow Control Address 12 0 None Turnaround Delay 2 point to point Address 13 0 Long Timeout Address 14 0 7 bits 1 8 bits Bits per Character Address 15 0 1 stop bit 1 2 stop bits Stop Bits Address 16 not used Interface Address 17 0 2 wire 1 4 wire Duplex Mode Address 18 21 not used Device Identifier Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol 2 Calling Serial COMMREQs from the PLC Sweep GFK 0582D Implementation of a serial protocol using Serial COMMREQs may be restricted by the PLC sweep time For example if the application protocol requires that a reply to
358. nly 08h Service Request Processor response exceeds 1000 bytes the SNP X slave device cannot return the data in an X Response message This error applies to CMM module only 16 10h Unexpected Service Request Processor error This error applies to CMM module only the unexpected SRP error code is saved in the Diagnostic Status Words in the CMM module 21 15h Requested service is not permitted in a Broadcast request The master must direct the X Request message to a specific SNP X slave device Note Minor Error Codes 32 35 indicate fatal errors subsequent SNP X communica tion must be initiated with an X Attach message The SNP X slave device re turns these error codes in an X Response message Table 6 8 Minor Error Codes for Major Error Code 15 0Fh Continued Error Status SNP X Slave Error Description Decimal Hexadecimal Invalid Message Type field in a received X Request message The message type of an X Request message must be 58h X Invalid Next Message Type or Next Message Length field in a received X Request message If this request does not use a buffer 0 2 bytes of data the Next Message Type must be zero If this request will be followed with a buffer message more than 2 bytes of data the Next Message Type must be 54h T and the Next Message Length must specify the length of the X Buffer message Valid X Buffer message lengths are 9 1008 bytes data length plus 8 bytes Invalid Message Typ
359. not use the Wye cable you will need to make a special cable to connect RS 232 de vices to Port 2 See the following figure for IC693CBL305 cable connection information Chapter 2 The Communications Coprocessor Modules 2 5 2 6 44357 SHIELD ay QAH Rs 232 TD PORT 2 PORT 1 RS 232 TD PORT 1 RS 232 RD Mc rer PORT 1 RS 232 RTS TO pee red PORT 1 RS 232 CTS 49 RS 232 DCD PORT 2 19 RS 232 RTS PORT 2 PORT 1 RS 232 DCD 3 BD dd PORTI ER OPERI 27 _ RS 485 SD B PORT 2 PORT2 RS485RTS A 1 2 5 485 Soe cee FORRA PORT 2 TERMINATION CTS 2 SP TERMINATION Z 07 RS 485RD B PORT2 1 PORT 2 44358 SHIELD p SHIELD LON To RS 232 TD 2 X RS 232 TD 3 X 15 A RS 232 RD i RS 232 RD e e RS 232 RTS v 232 RTS Dad 17 17 RS 232 CTS 5 RS 232 CTS 8 X E 45 4 Ag SIGNAL GROUND zn SIGNAL GROUND oe ORB 20 RS 232 DTR 20 RS 232 2 RS 232 DCD RS 232 DCD 4 fg 2 RS 485 SD B RS 485 RTS P RS 485 RTS 1 V G3 RS 485 CTS B Gis RS 485 CTS n 7 M e 5 7 1 TERMINATION Az TERMINATION CTS ie 7 7 T e RS 485 RD B RS 485 RD 443 72 Wye Connector End
360. nput buffer and available for future reads The serial port is not reset Example Command Block for the Cancel Operation Function VALUE VALUE MEANING decimal hexadecimal address 0001 0001 Data block length address 1 0000 0000 NOWAIT mode address 2 0008 0008 Status word memory type R address 3 0000 0000 Status word address minus 1 R0001 address 4 0000 0000 Not used address 5 0000 0000 Not used address 6 4399 112F Cancel operation command address 7 0001 0001 Transaction type to cancel 1 All operations 2 Read operations 3 Write operations Operating Notes This function does not update the status of words of the cancelled COMMREQs Caution If this is sent in either Cancel or Cancel Write mode when a Write Bytes 4401 is transmitting a string from a serial port transmission is halted The position within the string where the transmission is halted is indeterminate In addition the final character received by the device the CPU is sending to is also indeterminate 9 24 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial I O Protocol 2 Autodial Function 4400 GFK 0582D This feature allows the CPU to automatically dial a modem and send a specified byte string To implement this feature the port must be configured for Serial I O For example pager enunciation can be basically implemented by three com
361. ns Coprocessor Module CMM is a high performance microcomputer de signed to perform communications functions in a Series 90 PLC system The CMM is closely coupled to the Series 90 PLC and may be configured to behave as two independent communications ports For many applications each port behaves like an indepen dent window into the PLC for access by other devices such as industrial computers and color graphic terminals Many applications which accessed the Series Six PLC user reference tables using CCM or RTU protocols can now support the Series 90 PLC with little or no change Many applications which access the Series 90 PLC via the built in serial port on the PLC CPU using SNP protocol can now access the PLC via the CMM module Each CMM occupies a single slot in a Series 90 PLC rack Up to 28 CMMs may be installed in a single Series 90 70 PLC system to improve access to serial I O devices and to access PLC memory In Series 90 30 PLCs up to 4 CMMs may be installed in the main rack baseplate GFK 0582D 2 1 Section 1 Description of CMM Hardware and Operation This section covers the following topics for both the CMM711 for the Series 90 70 PLC and the for the Series 90 30 PLC LED Indicators Restart Reset Pushbutton Serial Connectors System Operation The figures below show the layout of the CMM modules 844901 BD DOOR OK Q PORT 1 NS H 2 RESTART 0 cy
362. nsition to State 1 N Start DATA TIMER Transition to State 8 CCM Slave State Table Wait for Header Wait for ACK to Wait for Wait for Q RSP Receive ENQ Receive PLC Data Receive ACK Receive NAK Receive EOT Receive SOH Receive Good Header Receive STX Receive Char acter Receive Good Data Receive Bad Data Header Receive Good Q ENQ Time out Series 90 PLC Serial Communications User s Manual November 2000 Header a Send ACK EOT EOT State 3 State 1 State 1 A E E Send Send Send data State 6 B Send State Send EOT 1 6 EOT State 1 State 1 State 1 E C E E _ _ Send _ _ State Send _ Send EOT 1 6 EOT EOT State 1 State 1 State 1 E D E E _ State 1 _ _ State 1 State 1 _ State 1 _ State 4 Send Send Send EOT EOT EOT State 1 State 1 State 1 E E E Send ACK State 6 7 22 Send e Send State 8 Send _ State 1 State 1 State 1 E E M E Send Send Send Send EOT EOT EOT EOT State 1 State 1 State 1 State 1 E E E E Send State 1 3 Send Send Send EOT EOT EOT EOT State 1 I State 1 State 1 State 1 E E E E Send Q RSP State 1 K Send EOT Send EOT State 1 Send EOT EOT EOT EOT State 1 State 1 State 1 State 1 E E E E Send Send Send State 1 E E
363. o dem may not respond to the escape sequence unless it is sent at the same baud rate the modem is using K 10 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Modems with VersaPro and Control COM1 Properties 2 x Port Settings Bits per second Data bits s Parity oe l Stop bits hn s Flow control oe Restore Defaults 3 HyperTerminal test the connection to the modem by typing AT and hitting ENTER The modem should respond with To dial the modem type ATDT where is the phone number of the remote modem and wait for the connection response CONNECT 9600 4 Setup the PLC programmer to communicate at the desired port settings but assume a stan dard serial port connection not a modem connection using the desired port setup parame ters The port setup in the CCU will not have an associated modem but will have a mo dem turnaround time 5 hang up first disconnect the PLC programmer connection this will free up the comm port for use with HyperTerminal Then connect to the modem with HyperTerminal While connected wait at least 1 second then hit 3 plus signs and one second later the modem should respond with an Now ATH the hang up command may be en tered The modem should respond again Note The HyperTerminal connection must be set to the same baud rate that the modem
364. o FR 14 F2h Invalid program cannot log in Hs Ri 16 FOh Request only valid in stop mode cr m 18 EEh Could not return block sizes Do m ECh Task unable to be created 2 Eh is not valid 26 E6h CPU model number does not match 27 5 DOS file area not formatted zs ER 29 E3h CPU revision number does not match a ER 31 Elh No I O configuration to read or delete th 33 DFh Invalid datagram connection address c Den 35 DDh Unable to locate given datagram connection ID 36 Unable to find connection address Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 6 Table 6 3 Minor Error Codes for Major Error Code 5 Continued Error Status Service Request Error Description Decimal Hexadecimal n i Invalid Memory Type selector in datagram Null pointer to data in Memory Type selector 39 D9h Transfer type invalid for this Memory Type selector 40 D8h Point length not allowed D7h Invalid datagram type specified 42 D6h Total datagram connection memory exceeded DSi 44 D4h Mismatch of configuration checksum Dah D2h Invalid write mode parameter Er bi 1 Bo One or more PEC modules configured have unsupported sio 5 em device not avaiable inthe Ex em srt Attem
365. o any broadcast message Therefore the master is unable to detect slave errors in response to a broadcast command Since there are no responses from the slave to a broadcast command the master must wait for the Broadcast Delay time interval after sending each message to allow all slave devices to pro cess the message Note that direct commands may be effectively used following a broadcast X Attach request Rapid polling of many slave devices is easily accomplished by using a broadcast X Attach to establish an SNP X session simultaneously with all slave devices on the serial link and then directing X Read or X Write commands to individual slave devices For broadcast X Attach Requests the SNP X protocol sequence is as follows Master Slave Long Break gt wait T4 time Request gt wait Broadcast Delay time no Response Chapter 7 Protocol Definition RTU SNP and SNP X 7 65 For broadcast SNP X commands without a data buffer the SNP X protocol sequence is as fol lows Master Slave X Request gt wait Broadcast Delay time no X Response For broadcast SNP X commands with a data buffer the SNP X protocol sequence is as follows Master Slave X Request gt wait Broadcast Delay time no Intermediate Response X Buffer gt wait Broadcast Delay time no X Response 7 66 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols
366. ock the board in place but do not use excessive force Uv ER uen Power up the PLC rack The top LED MODULE OK of the Series 90 70 CMM will flash during power up diagnostics It continues to flash while waiting for configuration data from the CPU If no signal is received across the backplane for 30 seconds the Series 90 70 CMM will assume the CPU is not there and continue to power up without it Once the CMM is ready this LED should stop flashing and remain ON Note The top LED MODULE OK of the Series 90 30 CMM will not light if the PLC is not present or if the CMM fails its power up diagnostics 7 Repeat this procedure for each CMM Troubleshooting After completing the above steps to install the CMM the MODULE OK BD OK LED should be on continuously If it is not the problem may be either that the LED is burned out or the board has not passed diagnostics Follow this procedure to determine the cause of the problem 1 Make sure that power to the rack is on the PLC is okay and that the CMM 15 seated prop erly 2 Check the PLC fault table using the programming software If there is a bad or missing module fault the board may be defective otherwise contact the GE Fanuc Technical Sup port Hotline for assistance The GE Fanuc PLC Technical Support Hotline can be reached at 1 800 GE FANUC 1 800 433 2682 or International direct dial 804 978 6036 3 Change the CMM config to SNP RS 232 is needed and run
367. ode 166 A6h G override table in bit mode 168 A8h 1 transition table in bit mode 170 AAh 0 transition table in bit mode 172 ACh transition table in bit mode 174 AEh transition table in bit mode 176 BOh 96S A transition table in bit mode 178 B2h SB transition table in bit mode 180 B4h SC transition table in bit mode 98 transition table in bit mode G transition table in bit mode Description 1 Access to these reference tables requires privilege level 3 Since privilege level 3 cannot be attained in the Series 900 CMM modules these reference tables cannot be accessed via the CMM Chapter 6 SNP Service 6 57 s Establish Datagram 07215 1C2F Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends an Establish Datagram request with data the slave responds with a unique Datagram ID The master then sends a Write Datagram request with additional data the slave again responds This service provides the master with the capability to define a datagram an area within the slave device to be used to gather a mixed set of reference table data Once established the datagram area may be retrieved via the Datagram ID by using an Update Datagram or Update Real Time Datagram command Example Command Block Establish a permanent datagram in the attached Series 90 70 slave d
368. ode BCC 7 62 SNP X Protocol Sequence 7 63 Establish Session 7 64 Directed Commands 7 64 Broadcast Commands 7 65 SNP X Message Structure 7 67 X Request Message Structure 7 67 X Response Message Structure 7 69 X Buffer Message Structure 7 71 SNP X Commands 7 72 X Attach Command 2 7 72 X Read Commands saso at aean ties PRA Ota ae 7 15 X Wrte Command 7 77 SNP X State Tables REED ERE ES 7 84 SNP X Master State Table 7 84 SNP X Master Actions ose e Ce ehe UR RR 7 85 SNP X Slave State Table 7 86 SNP X Slave Actions 7 87 Chapter 8 Cable Connection Diagrams 8 1 Section 1 Cable Assembly Specifications 8 2 Section 2 RS 232 Cable Diagrams 8 3 Section 3
369. odes Master for communication with Series 90 70 slave device only Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Read request the slave responds with the data This ser vice provides the master with the capability to read the Main Data segment P reference table of the slave s main control program task Only a Series 90 70 PLC slave device sup ports this service a Series 90 20 or Series 90 30 slave device will produce unpredictable re sults Example Command Block Read attached slave device Main Control Program Task Memory P Word 1 and store in master device Input Memory 961 Inputs 1 10 Slave device Main Program name _MAIN Words 12 15 contain the Main Program name of the slave device Word 1 00009 0009 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 Word 7 07204 1C24 Word 8 00001 0001 Word 9 00010 000A Word 10 00070 0046 Word 11 00001 0001 Word 12 16717 414D Word 13 20041 4 49 Word 14 00049 0031 Word 15 00000 0000 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Slave Task Memory Address P1 Number of Master Memory Type elements to read Master Memory Type to store data 1 Master Address to store data Input 1 Characters 1
370. ommand More than 2 Bytes Byte Hex Value Description Number 1 Start of message character 1Bh 2 58 SNP X Command X 58h 3 10 00 00 00 00 00 00 00 00 SNP ID of target slave 11 02 X Write request code 02h 12 08 Segment Selector R in word mode 13 14 63 00 Data Offset 0063h 99 zero based R100 15 16 0A 00 Data Length 000Ah 10 words 17 18 00 00 Not used always 0 19 17 End of block character 17h marks the beginning of the SNP X message trailer 20 54 Next message type Buffer T 54h 21 22 1 00 Next message length in bytes 001Ch 28 23 00 Not used always 0 24 13 Computed Block Check Code for this example Intermediate Response Message 1 Start of message character 1Bh 2 78 SNP X Intermediate Response x 78h 3 82 X Write response code 82h 459 00 00 00 00 00 00 Not used always 0 10 17 End of block character 17h marks the beginning of the SNP X message trailer 11 14 00 00 00 00 Not used always 0 15 03 Computed Block Check Code for this example X Write Data Buffer Message 1 Start of message character 1Bh 2 54 SNP X Command T 54h 40 41 42 43 44 45 46 47 48 49 50 23 17 End of block character 17h marks the beginning of the SNP X message trailer 24 27 00 00 00 00 Not used always 0 28 58 Computed Block Check Code for this example X Write Response Message 1 Start of m
371. ommand string 2 0000h NOWAIT mode 3 0008h Status word memory type 4 0000h Status word address minus 1 Register 1 5 0000h not used 6 0000h not used 7 04400 1130h Autodial command number 8 00030 001Eh Modem response timeout 30 seconds 9 0012 000Ch Number of bytes in command string 10 5441h A 41h T 54h 11 5444h D 44h T 54h 12 3332h Phone number 2 32h 3 33h 13 3534h 4 34h 5 35h 14 3736h 6 36h 7 37h 15 0D38h 8 88h CR 001 9 26 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Protocol 9 Write Bytes Function 4401 GFK 0582D This operation can be used to transmit one or more characters to the remote device through the specified serial port The character s to be transmitted must be in a word reference memory They should not be changed until the operation is complete Up to 250 characters can be transmitted with a single invocation of this operation The status of the operation is not complete until all of the characters have been transmitted or until a timeout occurs for example if hardware flow control is being used and the remote device never enables the transmission In the example below the message hello is sent The Data block length in this example is six words It consists of the six words starting with address 6 The first three words of the data block are always required Additional words that contain the actua
372. ompatibility with RS 485 Single or multi drop operation A 5V DC DC converter for power isolation Hot insertion is supported E as 3 66 mm 1 IC690ACC903A 5 8 End View End View with pin numbers with pin numbers 15 Male 15 Pin Female 72 30 cm To Port Isolator 15 Pin Male IC690CBL003 Extension Cable 15 Pin Female Figure G 1 IC690ACC903 Port Isolator and Extension Cable GFK 0582D G 1 Connectors The Isolator provides two connectors one 15 pin male D type PL1 and one 15 pin female D type PL2 Note that in the following table A denotes and B denotes Also and B denote outputs and A and denote inputs RS 485 Connectors Pin Pin Name Pin Type Description PLI 1 SHLD Chassis Ground 2 NC 3 4 5 5 5 power 6 CTS In Clear to send 7 OV Signal Ground 8 RTS B Out Request to send 9 NC 10 SD A Out Send data 11 SD B Out Send data 12 RD In Read data 13 RD In Read data 14 CTS In Clear to send 15 RTS A Out Request to send Pin Pin Name Pin Type Description PL2 1 2 3 NC 4 5 5V 5 power 6 Request to send 7 OV Signal Ground 8 CTS In Clear to send 9 RT Termination Resistor 10 RD In
373. omputer running GE Fanuc s VersaPro Series 90 30 only or Control PLC programming software and a Series 90 PLC For general modem information such as modems recommended by GE Fanuc and example applications please see Appendix I Note Although the PLC programming configuration screen examples shown in this appendix use VersaPro screen captures the information generally applies to Control as well since both programs use the Communications Configuration Utility CCU Contents of this Appendix PLC CPU Configuration Installing the Modem in Windows Setting Up the Communications Configuration Utility CCU Connecting to the PLC Using Windows HyperTerminal to Establish Connection Windows is a registered trademark of Microsoft Corporation GFK 0582D K 1 PLC CPU Configuration 1 On the programming software s hardware configuration screen choose the desired PLC CPU type An IC693CPU351 is shown in the example below 2 Select the tab for the serial port you wish to use The Settings tab shown in the figure be low applies to the Standard SNP port that is accessed through the connector on the PLC power supply in Rack 0 In the case of CPUs 351 352 and 363 two additional serial ports are available As shown in the figure below the two additional ports Port 1 and Port 2 each have their own tab for configuring communications parameters 3 In the applicable tab for the port you will be using enter the desired Data Rate
374. ood Header Receive STX Receive Charac ter Receive Good Data Receive Bad Data Header Receive Good Q ENQ Timeout K State 1 State 1 K K EOT PS 1 EOT e 1 State 1 Series 90 PLC Serial Communications User s Manual November 2000 4 vd EOT EOT State 1 State 1 K K Send ACK _ zz EOT State 1 ROT BOT s 1 zum e 1 MS 1 ins 1 Send State 8 Send vus EOT EOT on State 1 State 1 State 1 State 1 K K K K Send Send Send Send Send EOT EOT EOT EOT EOT es 1 e 1 ME 1 State 1 State 1 K K Send EOT State 1 EOT State 1 EOT State 1 State 1 K K K K K K State 1 State 1 GFK 0582D Protocols SNP SNP X CCM Peer Actions A Zero all counters I If HEADER COUNT lt 3 N Send Data to PLC Send ACK to ENQ Increment Send ACK to Data Block Start TIMER HEADER COUNT If last block Transition to State 3 Send Header Start EOT TIMER Start Transition to State 9 TRUE HEADER TIMER Transition to State 11 Remain in State 5 Else C Zero all counters Start 5 TIMER Send ENQ Else Transition to State 7 Start ACK TIMER Send EOE X eL 5 Transition to State 1 Transition to State 2 If HEADER COUNT lt 3 Increment D Zero DATA BLK COUNT J IfDATA COUNT lt 3 HEADER COUNT
375. op Cable 690 901 Miniconverter Serial Cable Programmer master GFK 0582D Figure H 1 Series 90 30 Multidrop Example Multidrop Cables There are two sources of multidrop cables Fanuc cable catalog number IC690CBL714A This pre made cable can be pur chased for applications where the PLCs are mounted in the same cabinet such as in the case of redundant systems The length of this cable is 40 inches 1 meter See Chapter 8 for details about this cable Custom built For PLCs that are more than 40 inches 1 meter apart it is necessary to build a custom length cable The specifications are provide below Limitations The maximum cable length between a master programmer and slave device PLC or Op tion module in a multidrop system is 4 000 feet 1 219 meters The maximum number of slave devices is limited to eight Cable and Connector Specifications Cable assemblies have proven to be among the most common causes of communications prob lems For best performance and highest reliability carefully construct all cable assemblies us ing the recommended connector parts and specifications in the table below Table H 1 Connector and Cable Specifications Connectors Series 90 PLC Serial RS 422 port with metric hardware Connector 15 pin male D Subminiature Type Cannon DAISS solder pot Hood AMP 207470 1 connector shell Hard
376. or Codes for Major Error Code 12 0Ch Error Stu Local SNP SNP X Error Description go WAIT type COMMREQ is not permitted Must use NOWAIT type COMMREQ command is not supported 03h SNP communication is not active Must initiate a new SNP communication by sending an Attach or Long Attach COMMREQ SNP slave did not respond to Attach message from master 5 05h Unable to write SNP Status Word to local PLC memory May be due to invalid Status Word memory type or address 5 w Master device memory type is not valid in this PLC Master device memory address or length is zero 08h Unable to read or write master device memory locations specified in COMMREQ Usually caused by invalid memory address for this PLC SNP message exchange may have taken place 09h Master device memory data length exceeds maximum data size of CMM module 2048 bytes Must use a smaller data length Use multiple COMMREQs if total data length exceeds this maximum value 10 Slave device memory type is missing or not valid Slave device memory address is missing or zero 12 OCh COMMREQ Data Block Length is too small When expected COMMREQ length is 6 words or less an improper length may cause other minor error codes 6 11 13 Invalid Diagnostic Status Word DSW starting word or length Invalid maximum SNP message data size Must be an even value from 42 to 2048 bytes ONE _ Invalid Privilege Level Must
377. ord 1 00005 0005 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07002 1B5A SNP Command Number Word 8 17742 454E Characters 1 and 2 of Slave SNP ID 4Eh E 45h Word 9 18775 4957 Characters 3 and 4 of Slave SNP ID W 57h I 49h Word 10 12612 3144 Characters 5 and 6 of Slave SNP ID D 44h 1 31h Word 11 00000 0000 Characters 7 and 8 of Slave SNP ID null null The Slave SNP ID field specifies the new SNP ID of this slave device The SNP ID field is 8 bytes long For the Series 90 30 and Series 90 70 PLCs the SNP ID can be a maximum of 7 bytes followed by a null character 0 and can include any ASCII character A null SNP ID Character 1 0 is not permitted 6 24 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Set X Status Bits Address 07003 1B5B GFK 0582D Available Modes Slave Description Local Command This command specifies the local PLC bit memory to be updated by the slave device during SNP X operation Three contiguous memory bits called the X Status Bits indicate X command activity by the slave device The X Status Bits may be examined at any time from the PLC ladder application The CMM slave X Status Bits are updated only when a valid PLC memory add
378. orted the RTU slave protocol since firmware release 8 00 In a 2 wire system on Port 2 if equipped with firmware release 8 00 and 8 11 these modules can experience the problem describe earlier for Message 08 Diagnostic Code 0 or 1 this is not a problem in firmware release 9 00 or later For those two messages the query and response are identical so response messages would be read by the input read logic as queries which would result in an endless cycle of queries and responses For CPUs with this older firmware we recommend two possible courses of action Work around solution When using the 2 Wire connection method do not attempt to send a Loopback Maintenance message Message 08 Upgrade solution Upgrade your CPU firmware to a newer version 9 00 or later that can handle Message 08 without a problem The upgrade is accomplished by loading a new Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Cable Diagrams Converters firmware file to your CPU through Port 1 Please call your distributor for upgrade information for these two CPUs IC693CPU351 352 or 363 with Firmware Release 9 00 and Later The Message 08 issue was addressed in Series 90 30 CPU firmware release 9 00 by disabling the modules Port 2 input read circuits when the output write circuits are transmitting CPU363 was equipped with firmware release 9 00 for its initial release as a new product So when using
379. orts of the CMM module using either the RS 232 or RS 422 RS 485 electrical standard Essentially any combination of protocols ports and electrical standards are available with one exception Series 90 30 CMM cannot support RS 422 RS 485 on port 1 Port selection data rate parity flow control timeouts turnaround delay station address CPU ID and retry values can be configured RTU Protocol RTU protocol is available on the Series 90 30 CPU ports 351 352 and 363 serial ports and the Series 90 70 and Series 90 30 CMM modules RTU protocol as implemented on the CMM is a subset of the Modbus Remote Terminal Unit RTU serial communications protocol RTU is a half duplex protocol It is commonly wired in either of two configurations 2 Wire or 4 Wire For details on this subject please refer to the section 2 Wire and 4 Wire in Chapter 7 RTU protocol as implemented the CMMs and CPUs provides for Slave operation only However a MegaBasic application file is available that enables a PCM module to support the RTU Master or Slave implementation This file is available for free download from the GE Fanuc Technical Support site See Appendix Getting Help for information on the GE Fa nuc web site Master the initiating device in a Master Slave system Slave the responding device in a Master Slave system The RTU protocol can be enabled on none one or both of the serial ports of the CMM
380. ot completed you will probably wish to repeat steps 2 and 4 before proceeding to step 6 If the communication completed but you wish to perform another read communication you can repeat step 4 and this step be fore proceeding to step 6 6 After all data is successfully transferred implement an Autodial 4400 to send the hang up command string to disconnect the modem Operating Notes Note that the data placed in the specified user data memory area by a Read Bytes or Read String COMMREQ will be overwritten the next time that runs If the data is to be stored for future use you will need to move the data into another memory area before that COMMREQ runs again Step 5 includes error checking to ensure that data was transferred correctly If not transferred correctly corrective action could be taken by repeating steps 2 and 4 You would need to limit the number of these retries to avoid the possibility of an endless loop To facilitate this you could program each step in a separate subroutine block and call each one in the proper order from the main program block or from another subroutine block This would allow you to more easily repeat portions of the communication cycle by simply calling the applicable blocks Also this modular programing style is generally more easily maintained and understood and it lends itself to a team programming strategy GFK 0582D Chapter 9 Serial I O Protocol 9 3
381. ot obtain a mo dem from the recommended list above For Testing Purposes There are 3 PLC s with modems connected to them on the GE Fanuc Technical Support Hotline for anyone who wants to run testing They are all configured for 9600 baud no parity 8 data bits 1 stop bit modem turn around time of 1 804 978 5871 90 70 915 804 978 5872 90 30 351 without break free SNP 804 978 5938 90 30 351 with break free SNP Note that NO PCMCIA modems have been recommended by Fanuc Technical Support because of mixed results in testing This does not mean that a PCMCIA modem will not work but there will be cases where our PLC s will not communicate through PCMCIA mo dems Appendix I General Modem Information 1 3 General Modem Issues 4 Series 90 PLC Serial Communications User s Manual November 2000 Because of the dynamic nature of the computer communications industry and limited resources for testing modems you may not be able to obtain one of the modems recommended by GE Fanuc In this case there are a few steps that can be taken to see if another modem will work The Chipset The first thing to look at 15 the chipset that the modem uses This infomation can be obtained through the modem manufacturer their web site or occasionally through the computer manufacturer The chipset dictates what AT commands are used to configure the modem The AT command reference will be available from the chipset manufac
382. ot provided to the PLC ladder application program If a Piggyback Status location is specified an area must be provided which can ac commodate the 6 bytes of Piggyback Status information described below The Piggyback Sta tus information is returned with every SNP response message sent by the slave device Once the Piggyback Status area is specified the Piggyback Status information is written there as each successful SNP response message is received for as long as the connection remains established See Table 6 1 for valid memory types and addresses GFK 0582D Chapter 6 SNP Service 6 35 Piggyback Status The table below describes the Piggyback Status information Table 6 12 Piggyback Status Data Piggyback Status Storage Area Description Word 1 low byte Control Program Number Word 1 high byte Current Privilege Level Word 2 low byte Last sweep time Word 2 high byte Last sweep time Word 3 low byte Slave PLC Status Word Word 3 high byte Slave PLC Status Word Control Program Number This value represents the number of the control program task the SNP master is currently logged into The valid values in today s implementations are 1 and 0 as follows SNP master is not logged into a control program task SNP master is logged into control program task 0 Privilege Level Current privilege level of the SNP master device Valid values are 0 through 4 for Series 90 70 PLCs and 1 through 4 for Series 90 30 PLCs L
383. ovember 2000 GFK 0582D Serial Protocol 9 Serial Communications Sequence of Operations A Serial I O communication sequence generally requires several steps The number of steps varies with the application and with the degree of error checking desired The following exam ple lists a sequence for reading data through an external modem Since in this example ap plication this sequence is only used occasionally the modem is connected and disconnected each time the sequence is run Example Serial I O Communication Sequence Ensure that any previous data transfer is complete If not complete determine if com munications are still proceeding If still proceeding delay and retest until complete before proceeding to the next step You could use the Read Port Status COMMREQ 4303 or the COMMREQ s Status Word to determine the communication status 2 Once assured that there is no other communication in progress through this port imple ment a Flush Input Buffer 4302 to ensure buffer is empty If a data transfer was interrupted or if the Internal Input Buffer was only partially read some data may still be in the buffer 3 Implement an Autodial 4400 to connect to the modem 4 Implement a Read Bytes 4402 or Read String 4403 to read the incoming data 5 Implement a Read Port Status COMMREQ 4303 to check whether the read data function was completed If it was n
384. ovide the extensive set of services available with SNP SNP X is a half duplex master slave protocol that uses the RS 485 and 5 232 electrical inter faces SNP X devices may be connected in a point to point one master and one slave or mul tidrop one master and many slaves arrangement Only one master may exist on the serial link When multiple slaves exist on the serial link each slave is addressed by a unique SNP ID The built in serial port in Series 90 20 and Series 90 30 PLC CPUs operate as SNP and SNP X slave devices using RS 485 only When configured for SNP operation a serial port on a Series 90 30 or Series 90 70 CMM module supports both SNP and SNP X operation each serial port can be configured to operate as either a master or slave device utilizing either RS 485 or RS 232 SNP X Communication Session The SNP X protocol requires the establishment of a communication session called the SNP X session To establish an SNP X session the master device first transmits a Long Break After waiting the T4 time interval the master then sends an X Attach request to the slave The prop er slave device returns an X Attach response to the master to complete the establishment of the SNP X session An SNP X session means that the SNP X protocol is now in effect and that data transfer may take place via SNP X commands The SNP X session remains active until the next Long Break An SNP X session can be established between the master device
385. ow Control None External Modem Baud Rate 9600 Data Bits 8 Parity None Stop Bits 1 Flow Control None Telephone Line Modem Cable RS232 RS485 Converter Serial Cable Series 90 PLC Serial Port CPU Configuration Settings Mode Protocol SNP Baud Rate 9600 Parity None Stop Bits 1 Modem TT 1 Figure I 1 Example of Communications ConfigurationUsing External Modems 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D General Modem Information Modem Recommendations GFK 0582D Refer to the setup documents cabling AT commands general setup for your modem on the GE Fanuc website http www gefanuc com support plc modems htm You will find details there on the following modems SIXNET VT MODEM 1 5 Robotics Courier V Everything 56K Business Modem US Robotics 56K Sportster FaxModem Datalinc DLM4000 Leased line dial up modem this modem is pre configured by Datal inc according to your application Datalinc is a GE Fanuc Accompany Program member Contact them at www data linc com You can also obtain modem information on the GE Fanuc Faxlink system This system will send documents that you specify to your fax machine The phone number and instructions are found in Appendix L Getting Help The modems listed above have been tested by GE Fanuc for compatibility with the SNP proto col however it is po
386. plus a terminating null character 00h The Null SNP ID eight bytes of 00h may be used to specify any single device The Broadcast SNP ID eight by tes of FFh may be used to specify all slave devices on the serial link 31 Destination SNP ID does not match SNP X session type The Broadcast SNP ID is not permitted in a single slave SNP X session The Null SNP ID is not permitted in a multiple slave SNP X session Note Minor Error Codes 32 118 indicate fatal errors subsequent communication must be initiated with an Attach or Long Attach or any remote SNP X COMMREQ Table 6 5 Minor Error Codes for Major Error Code 12 0Ch Continued Local SNP SNP X Error Description 32 20h Inactivity timeout T3 The SNP slave has not received any new SNP messages with in the configured T3 time interval 33 21h A Parity error has occurred on an Attach Attach Response or Update Real time Data gram message Communications have not been established 34 22h A BCC Block Check Code error has occurred on an Attach Attach Response or Update Realtime Datagram message Communications have not been established 35 23h A Framing or Overrun serial error has occurred on an Attach Attach Response or Update Realtime Datagram message Communications have not been established 36 24h An invalid SNP message type was received when an Attach Attach Response or Update Realtime Datagram message was required Communications
387. port In VersaPro select Hardware Configuration HWC An image of your PLC rack will ap pear on screen Double click the slot Slot 1 that contains the CPU The configuration window for the CPU will appear Click the Settings tab shown in the next figure Notice the SNP ID parameter If the con nected PLC does not have an SNP ID this field will be blank TEEN Mi Ml Ed yia uh Wm PERAR Eni EIER 77 Jan nr 221215545 Har Zee Par retan cap aA ll Low wy rr meal oda Select the SNP ID Value field then enter a unique value for the SNP ID parameter Save the configuration and store it to the PLC Repeat for each CPU on the multidrop system Connecting your Logicmaster Programmer to a PLC on a Multidrop System Connect your programmer to the programmer connection point for the multidrop system From the Logicmaster Main Menu select F2 Logicmaster 90 Configuration Package Select F7 Programmer Mode and Setup Select Select PLC Connections Inthe SELECTED SNP ID field enter the SNP ID of the PLC or device such as an option module you wish to communicate with H 6 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Multidrop In the PORT CONNECTION field select MULTIDROP Press F6 setup to connect to the selected PLC or device You should connect within
388. ppendix G for details This information is for reference by those alreading using this product This section describes how to use the Isolated Repeater Converter The section covers the fol lowing topics Description of the Isolated Repeater Converter System Configurations Cable Diagrams To purchase this unit please contact your local authorized GE Fanuc PLC distributor or GE Fanuc sales representative Note The catalog number for the Isolated Repeater Converter was previously IC630CCM390 Description of the Isolated Repeater Converter The Isolated Repeater Converter 1 655 590 can be used for the following purposes To provide ground isolation where a common ground cannot be established between com ponents To boost RS 422 signals for greater distance and more drops Toconvert signals from RS 232 to RS 422 or RS 422 to RS 232 GFK 0582D N I Obsolete Product The figure below shows the appearance of the unit and the location of the user elements TOP VIEW 242418 POWER GE Fanuc CORD 15 230 69 69 62 9 69 60 ISOLATED RS232 ADAPTOR UNIT SWITCH UC 7 ODDO R FUSE 1AMP I SIDE VIEW Figure N 1 The Isolated Repeater Converter The user elements of the Isolated Repeater Converter are described below Two 25 pin female D type connectors Two 25 pin
389. pt was made to read a device but no data has been stored on it 52 Data stored on device has been corrupted and is no longer reliable 53 CBh A comm or write verify error occurred during save or restore E 55 C9h Login using non zero buffer size required for block commands E 57 C7h Passwords are set to inactive and cannot be enabled or disabled ED 59 C5h No task level Rack Slot configuration to read or delete 9 61 C3h Text length does not match traffic type The OEM key is NULL inactive Invalid block state transition Table 6 4 Minor Error Codes for Major Error Code 10 0Ah Status SNP DOS Driver Error Description 9h 5 SNP communication Either communication has been lost or a communication ses sion has not been established Bad SNP communication Transmission was aborted after maximum retries due to serial errors that is parity overrun or framing errors Bad SNP BCC encountered Transmission was aborted after maximum retries due to a bad Block Check Code Out of Sequence SNP message SNP message type received was not the type expected PC Serial port configured for SNP Master driver is not open no communication can take place Bad DOS Version Must have DOS 2 0 or later to support the SNP DOS Driver Chapter 6 SNP Service 6 7 6 8 Note Minor Error Codes 1 31 indicate non fatal errors SNP or SNP X communication is not terminated Table 6 5 Minor Err
390. puts 1 through 8 of the source input table will be overwritten with the values of inputs 25 through 32 of the target input table Example 4 read target Series One input 27 into source Series 90 input 3 you must specify a source address of 1 a target address of 4 and a data length of 8 Inputs 1 through 8 of the source input table will be overwritten with the values of inputs 25 through 32 of the target input table CCM Data Lengths 5 10 The data length refers to the length of the data transfer The units are determined by the source memory type and are listed in the following table Table 5 6 Unit Lengths of Series 90 CCM Memory Types Memory Type Unit Length Length Accessible 2 3 Inputs and Outputs 1 Point 1 bit Multiple s of 8 Points 6 Scratch Pad 1 Byte 8 bits Byte s 9 Diagnostic Status Words 1 Word 16 bits Word s 13 14 Bit Set Input Outputs 17 18 Bit Clear Inputs Outputs 1 Point 1 bit Point Examples Example 1 To read 12 bytes of the target Series 90 scratch pad into Series 90 or Series Six registers the data length is 6 since the unit length for the source memory type registers is a register To read 12 diagnostic status words into the registers the data length would be 12 be cause both registers and diagnostic status words have equivalent unit lengths register word 2 bytes Example 2 To read 8 target Series 90 inputs into Series 90 or Series Six inputs the data length is 8 point
391. quest sends the same data to all SNP X slave devices that have established an SNP X session All Series 90 SNP X devices allow the RTS serial port signal to be used as a modem keying signal The RTS signal is always asserted for the Modem Turnaround Time interval prior to each data transmission and is removed after the transmission is complete If the Modem Turn around Time value is non zero the RTS signal will precede the outgoing data Serial ports on the CMM modules may be configured for either hardware flow control full RTS CTS opera tion or no flow control CTS is ignored Series 90 CPU slave devices do not support hard ware flow control the CTS signal is always ignored Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Slave PLC Status Word Each successful SNP X response contains a word which indicates the latest PLC Status Word from the slave device This word conforms exactly to the PLC Status Word contained within the Series 90 PLC Piggyback Status data See the Slave PLC Status Word Data table Among other things this word contains bits that indicate the run stop disabled state of the PLC over sweep conditions and fault presence The Slave PLC Status Word within the SNP X response is valid only during a successful response this word is zeroed in each error response Slave Memory Access Bits X Status Bits The SNP X slave device user interface define
392. quire use of modems are listed next Connecting a programmer running GE Fanuc PLC Programming software to a Series 90 PLC system This is useful for connecting to a remote site for troubleshooting or monitoring purposes If there are multiple PLCs at the remote site they can be con nected in a multidrop arrangement which can be accessed via a modem This would allow a remote programmer to access all PLCs on the multidrop network For more information on multidrop systems see Appendix H Connecting two PLCs for the purpose of sharing data when the PLCs are a long dis tance apart or when the PLCS are in locations where it would be impractical to string serial cabling between them A wireless modem system can be used in a remote PLC installation where there are no telephone lines available DATA LINC www data linc com geschm htm makes suit able modem equipment for this application The following main topics are covered in this chapter GFK 0582D Example modem application Modem Recommendations General Modem Issues Modem Operating Tips 1 Example Modem Application Personal Computer Logicmaster 90 Logicmaster 90 Serial Port Setup COM2 BAUD 9600 Parity None Stop Bits One Modem TT 1 Auto Dial Utility Port COM2 Timeout 40 Init String xxx Dial String xxx COMM2 Serial Port Modem Cable External Modem Baud Rate 9600 Data Bits 8 Parity None Stop Bits 1 Fl
393. r Timeout Usage Timeouts are used on the serial link for error detection error recovery and to prevent the mis sing of the end of messages and message sequences Note that although the module allows up to three character transmission times between each character in a message that it receives there is no more than half a character time between each character in a message that the module transmits After sending a query message the master should wait approximately 500 milliseconds before assuming that the slave did not respond to its request 7 24 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Cyclic Redundancy Check CRC The Cyclic Redundancy Check CRC is one of the most effective systems for checking errors The CRC consists of 2 check characters generated at the transmitter and added at the end of the transmitted data characters Using the same method the receiver generates its own CRC for the incoming data and compares it to the CRC sent by the transmitter to ensure proper transmission A complete mathematic derivation for the CRC will not be given in this section This informa tion can be found in a number of texts on data communications The essential steps which should be understood in calculating the CRC are as follows The data bits which make up the message are multiplied by the number of bits in the CRC The resulting product is then div
394. r Cable IC690ACC714A later in this chapter Specifications m Connector DBISF 15 pin female connector with latchblocks m Connectors B and C DBI5M 15 pin right angle male connector with spring clips m Wire Cable consists of three individually shielded pairs of 22 gauge stranded conductors Belden 8777 or equivalent m Jumpers jumpers are made of 22 AWG UL1061 insulated wire m Length The length from the back of Connector to entry into Connector B is 6 inches 0 5 inch The length from the back of Connector C to entry into Connector is 40 inches 1 0 inch Connector B Connector C Latching Blocks 2 N Connector A Pin 1 pan head screws 2 Screws must not protrude through the end of the Latching Blocks Figure 8 22 IC690CBL714A Cable Drawing GFK 0582D Chapter 8 Serial Cable Diagrams and Converters 8 17 IC690CBL714A Multi Drop Cable Wiring Diagram Connector A 15 pin Female NOTE If Connector A is used at the end node of a multidrop system to other CPU or Adapter termination should be used If connected to a GE Fanuc device with built in termination resistor jumper pins 9 and 10 of Connector A other wise connect a 120 ohm resistor across pins 10 and 11 of Connector A N C Connector B 15 pin male to CPU SNP Port CXXGGGGGQGGCQOOG C99 G2 2 C2 Connector C 15 pin male to NOTE AII drain
395. r device end xx On CPUs 351 352 and 363 only Port 2 supports both RTU and RS 422 RS 485 Figure 8 17 4 Wire RTU RS 422 RS 485 Master to Series 90 30 CPU Handling the 2 Wire Message 08 Issue 2 Wire Message 08 Overview Because the transmit and receive lines are paralleled in 2 Wire configuration a device sees its own response messages its receive input Normally the device would read its own message header data and determine that the message was not a query and therefore would ig nore it However Message 08 Diagnostic Code 0 or 1 whose query and response are identical are read by the receive logic as queries which would result in an endless cycle of queries and responses making the port unusable until the cycle is broken by for example power cycling the PLC The following topic describes how this issue is handled in GE Fanuc products CMM modules No configuration settings are provided for the Duplex Mode parameter A CMM both Series 90 30 and 90 70 can handle either type of connection scheme however to avoid locking its serial port in an endless query response loop we recommend that when using the 2 Wire connection method you do not attempt to send a Loopback Maintenance message Message 08 For details please see the Operating Note item for RTU Message 08 found in the RTU section of Chapter 7 IC693CPU351 or 352 with Firmware Release 8 xx These two CPU modules have supp
396. r s Manual November 2000 GFK 0582D SNP Service 6 The following table describes the format of the Control Information Area returned by the Re turn Controller Type and ID command Control Information Area Description Characters 1 and 2 of SNP ID of PLC CPU Characters 3 and 4 of SNP ID of PLC CPU Characters 5 and 6 of SNP ID of PLC CPU Characters 7 and 8 of SNP ID of PLC CPU Word 5 Series 90 PLC Major Minor Type High byte Low byte Word 6 Number of Control Programs Low byte only Word 7 Characters 1 and 2 of Control Program Name Word 8 Characters 3 4 of Control Program Name Word 9 Characters 5 and 6 of Control Program Name Word 10 Characters 7 and 8 of Control Program Word 11 Number of Control Program Blocks Word 12 Total Length of Program Blocks LSW Word 13 Total Length of Program Blocks MSW Word 14 Sum of Program Block Additive Checksums Word 15 Sum of Program Block CRC Checksums LSW Word 16 Sum of Program Block Checksums MSW Word 17 Length of Configuration Records Word 18 Sum of Configuration Records Additive Checksums Word 19 Sum of Configuration Records Checksums LSW Word 20 Sum of Configuration Records CRC Checksums MSW PCL CPU Major Type Codes Series 90 70 PLC CPUs 12 Series 90 20 and Series 90 30 PLC CPUs 16 10h PLC CPU Minor Type Codes Series
397. r slave devices on the serial link wait for another Break sequence The SNP ID of the built in SNP slave device in each Series 90 PLC CPU is established by the Logicmaster 90 configuration For a SNP slave device on a CMM module the SNP ID defaults to the same SNP ID as used by the PLC CPU This default value may be modified by the Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D Protocols CCM RTU SNP SNP X Change SNP ID COMMREQ command See Chapter 6 SNP Service for details on this com mand The basic SNP message flow for establishing SNP communications is shown in the figure be low Master T4 delay Slave Attach Response Figure 7 12 Message Flow Establish Communications Once established a communication session remains active until the master transmits another Break sequence or until a timeout or other fatal error occurs in either the master or slave de vice Request and Response Once communication has been established between the master and the slave devices the master can send a request to the slave The slave then sends a response to the master A request or response consists of a Mailbox message optionally followed by one or more Buffer messages Both the master and slave perform error checking on all received messages and return an ac knowledgement to the sender of the message The basic SNP message flow for SNP requests and responses is shown in the figure below
398. r starters Programmer A device for entry examination and alteration of the PLC s memory including logic and storage areas PROM An acronym for Programmable Read Only Memory A retentive digital device pro grammed at the factory and not readily alterable by the user Protocol A set of rules for exchanging messages between two communicating processes Q Sequence The Q sequence protocol format is used to poll and transfer 4 bytes of data from a slave to a master without issuing the 17 byte header Used by the CCM protocol Quick Access Buffer QAB The QAB is a 1024 byte buffer resident on the Series Six CCM modules used for faster data transfer than the CPU to CPU transfer RAM An acronym for Random Access Memory solid state memory that allows individu al bits to be stored and accessed This type of memory is volatile that is stored data is lost under no power conditions therefore a memory backup battery is generally used to maintain memory contents when power is off Read To receive data from another device Reference A number used in a program that tells the CPU where data is coming from or where to transfer the data Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Glossary Reference Table Any of the various PLC memory areas addressable from the ladder program or by the communications protocol PLC memory is addressed by memory type and address Register Memory In the Se
399. ransferred through Port 3 Features Supported on Series 90 70 CPU Serial Ports Table 3 4 Serial Port Features for CPX CPUs Serial Port Features Supported on CPUs CPX772 CPX782 CPX928 and CPX935 Ports 1 and 2 Yes starting with Firmware Release 7 80 Feature SNP slave protocol SNP master protocol Break Free SNP protocol SNP X protocol slave or master RTU protocol CCM protocol Serial I O Program Load Store Yes starting with Firmware Release 8 00 o Yes starting with Firmware Release 8 00 Datagrams Yes starting with Firmware Release 8 00 2 MSG Mode for programmer printf support 2 o C Debugger support 5 232 RS 422 485 Configurable with COMMREQ Electrical Isolation Port 1 only Port 2 only Port 2 only No No No Yes GFK 0582D Chapter 3 Series 90 CPU Serial Ports 3 7 3 8 Table 3 5 Serial Port Features for CPUs Serial Port Features Supported on CPUs CGR772 and CGR935 Feature SNP slave protocol SNP master protocol Break Free SNP protocol SNP X protocol slave or master RTU protocol CCM protocol Serial I O Program Load Store Datagrams MSG Mode for C programmer printf support C Debugger support 5 232 RS 422 485 Configurable with COMMREQ Electrical Isolation Ports 1 and 2 Yes starting with Firmware Release 7 85 N es oa Series 90 PLC Serial Communicat
400. re in the section Cyclic Redundancy Check CRC Note that the information field is variable in length In order to properly gener ate the CRC 16 code the length of frame must be determined See section Calculating the Length of Frame to calculate the length of a frame for each of the defined function codes Message Length Message length varies with the type of message and amount of data to be sent Information for determining message length for individual messages is found in the section Message Descrip tions later in this chapter Character Format A message is sent as a series of characters Each byte in a message is transmitted as a charac ter The illustration below shows the character format A character consists of a start bit 0 eight data bits an optional parity bit and one stop bit 1 Between characters the line is held in the 1 state MSB Data Bits LSB Stop Parity Start optional Message Termination Each station monitors the time between characters When a period of three character times elapses without the reception of a character the end of a message is assumed The reception of the next character is assumed to be the beginning of a new message The end of a frame occurs when the first of the following two events occurs The number of characters received for the frame is equal to the calculated length of the frame length of 3 character times elapses without the reception of a characte
401. reak Free feature requires data rates of 1200 baud and higher Breaks are required at 300 and 600 baud rates The PLC s auto baud feature also requires breaks Auto baud permits Series 90 30 CPUs with no stored configuration to communicate at either 9600 or 19 200 baud odd parity and one stop bit Note that auto baud is incompatible with modem communications because a stored configuration is required to set the serial port for NO PARITY Break Free SNP is compatible with existing SNP master units such as computers running PLC programming software or PCM modules In a few applications primarily where a combination of multi drop SNP communications and very short PLC sweep times are used users may desire for performance reasons to disable Break Free SNP Break Free SNP can be disabled and re enabled via Communications Request COMMREQ instructions 7004 and 7005 which are detailed in Chapter 6 of this manual This feature can be added to older versions of the applicable CPUs through a firmware upgrade contact your GE Fanuc distributor for information Table 3 9 Series 90 Products Supporting Break Free SNP Feature Product Break Free SNP Series 90 30 CPU350 364 Supported on all serial communications ports starting with firmware release 9 00 Series 90 30 CPU311 313 323 331 341 Supported starting with firmware release 8 20 Series 90 70 CPX772 782 928 935 Supported only on Ports and 2 starting with firmware release 8
402. receive a valid acknowledge to a master enquire sequence after 32 attempts or a number specified by the configuration Communication was aborted after a peer enquire was NAKed 32 times by the external device or a number specified by the configuration Communication was aborted when CCM did not receive a valid response to a peer enquire after 32 attempts or a number specified by the configuration 26 1A A timeout occurred during an attempt to transmit on a port due to CTS being in an inactive state too long An error occurred when data was being transferred between CCM and the Series 90 CPU A parity framing or overrun error occurred during a serial header transfer A parity framing or overrun error occurred during a serial data block transfer An invalid COMMREQ dat block eng was spected o O Tae COMMRE invalid onapeerpo 2 46 The COMMREQ is invalid on a slave port The is valid only a master port The COMMREQ target ID is invalid The COMMREQ data block values are out of range GFK 0582D Chapter 5 CCM Service 5 13 Section 3 Programming Examples This section provides an explanation and example of each CCM Command Each example cludes values for the Command Block A ladder program example is also presented here for your convenience Before attempting to execute the CCM Command examples make sure you have first done the following Installed the
403. red in a received X Attach message A BCC Block Check Code error has occurred in a received X Attach message An invalid Message Type was received when an X Attach message was required For an X Attach message the message type must be 58h T An invalid Next Message Type value was detected in a received X Attach message For an X Attach message the Next Message Length must be zero 55h An invalid request code was detected in a received X Attach message E eo A parity error has occurred in a received X Request message A framing or overrun error has occurred in a received X Request message D A BCC Block Check Code error has occurred in a received X Request mes sage 2 12 parity error has occurred in a received X Buffer message 12 13 71h A framing or overrun error has occurred in a received X Buffer message 114 72h A BCC Block Check Code error has occurred in a received X Buffer message An expected X Buffer message was not received Table 6 9 Minor Error Codes for Major Error Code 19 13h azar Status Port Configurer Error Description Decimal Hexadecimal Hexadecimal Unsupported COMMREQ These errors are only generated when there is no protocol currently being run on a port and the port receives a COMMREQ The port may be disabled or an error has occurred in processing a new configuration T ui matt cone erg Invalid COMMREQ status word location Invali
404. remote end 4000 feet 1200 meters for RS 422 RS 485 with isolation at the remote end Overall shield 24 AWG minimum wires in a twisted pair arrangement Use plenum rated cable if required by local fire codes Compared to standard cable plenum cable is more fire resistant and emits less toxic fumes in the presence of fire Maximum shunt capacitance of 16 pF foot lower is better characteristic impedence of 100 or 120 ohms Cable manufacturers produce computer communications cables rated for RS 232 422 485 use As an alternative Category 5 Ethernet cable TIA EIA 568 A often meets the above specifications and usually costs less than RS 232 422 485 communications cable See your cable supplier for their recommendations At distances under 50 feet 15 meters almost any twisted pair or shielded twisted pair cable will work as long as the wire pairs are connected correctly When using RS 422 RS 485 the twisted pairs should be matched so that both transmit signals make up one twisted pair and both receive signals make up the other twisted pair If this is ig nored crosstalk resulting from the mismatching will affect the performance of the communica tions system When routing communication cables outdoors transient suppression devices can be used to reduce the possibility of damage due to lightning or static discharge Care should be exercised to ensure that both the CMM module and the de vice to which it is
405. ress has been defined via this command When an error occurs for this the X Status Bits address is undefined X Status Bits data will not be updated into the local PLC memory until this is successfully completed The X Status Bits used by the slave device on the CMM module are similar to the X Status Bits defined in S memory 96817 96819 for use by the slave device on the Series 90 20 and Series 90 30 PLC built in serial port See the Note below The X Status Bits consist of three contiguous bits The address of the lowest bit X ACTIVE is specified in the COMMREQ Data Block the remaining two X Status Bits are always located at the two next higher memory locations The X Status Bits may be defined only in the I 00 or WM bit oriented Memory Types The following example defines the X Status Bits in Discrete Internal Memory 96M bit mode bits 101 103 Word 1 00003 0003 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07003 1B5B SNP X Command Number Word 8 00076 004C Slave Memory Type of X Status Bits 76M bit mode Word 9 00101 0065 Slave Address of X Status bits M101 The Slave Memory Type and Address of X Status Bits fields must be selected to allow enough room for the three X Status Bits
406. ries 90 30 PLC Found on all Series 90 30 CPUs Accessed through connector on PLC power supply on all CPUs see next figure 243832 COMPATIBLE SERIAL PORT Figure 3 3 Series 90 30 CPU Serial Port Connector on Power Supply m This serial port is RS 485 compatible and uses the GE Fanuc SNP Series Ninety Protocol protocol slave only The IC690ACC901 Miniconverter is usually used to connect this port to a personal computer s RS 232 serial port Break Free SNP became the default protocol on all serial ports on the Series 90 30 CPUs starting with Firmware Release 9 00 for CPUs 350 364 and Firmware Release 8 20 for CPUs 311 341 BreakFree SNP is discussed in a later section of this chapter W The serial port connector is only functional in a power supply that is installed in a baseplate that also contains the CPU It is not functional on a power supply that is installed in an expansion or remote baseplate m Any device connected to the serial port that uses 5 VDC power from the Series 90 30 power supply must be included in the calculation for maximum power consumption see the heading Power Supply Loading Calculations in Chapter 12 of GFK 0356 for details Care must be taken that common mode voltage specifications are met for connections to this non isolated serial port Common mode conditions that exceed those specified will result in errors in transmission and or damage to Series 90 PLC components Common mode specifica
407. ries Six PLC dedicated CMOS RAM memory accessible by the user for data storage and manipulation Remote Terminal Unit RTU RTU protocol is a query response mode of operation used for communication between the RTU device and host computer The host computer transmits the query to the RTU slave which can only respond to the master RS 232 A standard specified by the Electronics Industries Association EIA for the mechanical and electrical characteristics of the interface for connecting Data Communications Equipment DCE and Data Terminal Equipment DTE Features a single ended circuit arrangement Renamed EIA 232 in the 1990s by the EIA RS 422 A recommended standard defining electrical interface characteristics to connect Data Terminal Equipment DTE or Data Circuit Transmitting Equipment DCE The RS 422 standard permits longer range and faster transmission rate than the RS 232D standard Features a differential circuit arrangement Renamed EIA 422 in the 1990s by the EIA RS 485 Similar to RS 422 Contains additional protection for receiver circuits Also receiv ers have greater sensitivity which provides the capability for more drops than available with RS 422 Features a differential circuit arrangement Renamed EIA 485 in the 1990s by the EIA Rung A grouping of PLC functions instructions that control one output coil One or more rungs form a ladder program Scan The method of examining or solving all tasks in a s
408. rol of RTS is dependent on the current state of the transmit driver If the transmit driv is not enabled asserting RTS with the Write Port Control COMMREQ will not cause RTS to be asserted on the serial line The state of the transmit driver is controlled by the protocol and is dependent on the current Duplex Mode of the port For 2 wire and 4 wire Duplex Mode the transmit driver is only enabled during transmitting Therefore RTS on the serial line will only be seen active on port 2 configured for 2 wire or 4 wire Duplex Mode when data is being transmitted For point to point Duplex Mode the transmit driver is always enabled Therefore in point to point Du plex Mode RTS on the serial line will always reflect what is chosen with the Write Port Control COMMREQ The Duplex Mode choices are shown in Table 9 4 Configuring the port control status word can be facilitated by entering the value for the Port Control word address 7 in hexadecimal format Use 8000 hex to activate RTS this places a 1 in bit 15 and a 0 in the other bits Use 0000 to deactivate RTS Chapter 9 Serial I O Protocol 9 23 2 Cancel Function 4399 This function cancels the current operations in progress It can be used to cancel all operations read operations or write operations read operation is in progress and there are unprocessed characters in the input buffer those characters are left in the i
409. rom one of the three source memory types listed below Source Memory Type Command Number Register Table 06111 Input Table 06112 Output Table 06113 The target memory types which can be written to are Target Memory Type Type Number Register Table 1 Input Table 2 Output Table 3 Example Write to target registers 00200 00249 from source registers 00001 0050 The target CPU ID is 10 Word 1 00006 0006 Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Register Word 4 00009 0009 Status Word Address minus 1 Register 10 Word 5 00000 0000 Not used in NOWAIT Mode Word 6 00000 0000 Not used in NOWAIT Mode Word 7 06111 17DF Command Number Word 8 00010 000A Target CPU ID Word 9 00001 0001 Target Memory Type Word 10 00200 00 8 Target Memory Address Word 11 00050 0032 Data Length Word 12 00001 0001 Source Memory Address Note When using the Input and Output tables the memory address must begin on a byte boundary and the data length must be a multiple of 8 5 22 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Chapter GFK 0582D 6 SNP Service This chapter describes the SNP serial communications service Before proceeding with this chapter it is important to be familiar with the information presented in Chapter 4 Initiating Communications The This chapter contains the following se
410. ror code returned Error Abort all master processing in progress Transition to State 1 Else non fatal error X Response msg contains error code User Cmd is now complete Transition to State 3 for next cmd Build and send X Buffer message to slave Start Broadcast Delay timer Transition to State 5 Timeout Error Abort all master processing Transition to State 1 Chapter 7 Protocol Definition RTU SNP and SNP X Protocols CCM SNP SNP X 7 85 SNP X Slave State Table The table below defines the actions taken by the SNP X slave in each state STATE Wait for Wait for Wait for Wait for Break X Attach X Request X Buffer EVENT 1 2 3 4 Action Action Action Action Long Break State 2 State 2 State 2 State 2 Receive Action B X Attach msg State 3 1 Action X Request msg State 3 4 1 Receive Action D X Buffer msg State 3 1 Buffer Timeout Action E timer expired State 1 For any invalid intersection in this table abort all slave processing and return to State 1 7 66 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP X Slave Actions GFK 0582D Protocols CCM RTU SNP SNP X The following action routines are used by the SNP X Slave State Table Abort all slave processing in progress Prepare to receive X Attach msg Transition to State 2 If improper X Attach message Error Transi
411. rotocol GFK 0582D Table 9 3 Data Block for RTU Values Meaning Address 10H Data Block Length Address 1 0 No Wait WAIT NOWAIT Flag Address 2 0008 R register memory Status Word Pointer Memory Type Address 3 Zero based number that gives Status Word Pointer Offset the address of the COMMREQ status word for example a value of 99 gives an address of 100 for the status word Address 4 0 Only used in Wait No Wait Idle Timeout Value mode Address 5 0 Only used in Wait No Wait Maximum Communication Time mode Address 6 FFFOH Command Address 7 0003 Protocol 0003 Address 8 0000 Port Mode 0000 Slave Address 9 6 219200 529600 424800 Data Rate Address 10 0 None 1 Odd 2 Even Parity Address 11 0 Hardware 1 None Flow Control Address 12 not used Turnaround delay Address 13 not used Timeout Address 14 not used Bits per Character Address 15 not used Stop Bits Address 16 not used Interface Address 17 0 2 wire 1 4 wire Duplex Mode Address 18 Station Address 1 247 Device Identifier Address 19 21 not used contain all zeroes Device Identifier Chapter 9 Serial I O Protocol 9 11 Data Block for Configuring Serial I O Protocol 9 12 Table 9 4 COMMREQ Data Block for Serial I O Values Meani
412. rotocol 9 13 Serial Status Word Codes A value of 0001 hex is returned in the COMMREQ Status Word upon successful completion of the COMMREQ Any other value returned is an error code where the low byte is a major error code and the high byte is a minor error code In the table below the codes are shown in decimal format with hexadecimal format in parentheses For example a code of OEOC hex has the following meaning The OC the low byte is the major error code and designates a Local error The OE the high byte is the minor error code and designates that data is invalid Major Minor Description Error Code Error Code 1 01h Successful Completion this is the expected completion value in the status word 12 0Ch Local error Error processing a local command The minor error code identifies the specific error 1 01h Wait type command is not permitted Use No Wait command 2 02h command is not supported 5 05h Error writing COMMREQ status word to PLC memory 6 06h Invalid PLC memory type specified 7 07h Invalid PLC memory offset specified 8 08h Unable to access PLC memory 9 09h Data length exceeded 12 0Ch COMMREQ data block length too small 14 0Eh COMMREQ data is invalid 15 0Fh Could not allocate system resources to complete COMMREQ
413. rst and append ing all commands to it on the same line For example AT amp FO amp AI amp BO amp DO amp HO amp IO amp KO amp MO amp NO amp RI Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Modems with VersaPro and Control The 7 50 1 and amp W do not need to be used because they reset the modem set it to answer on one ring and write to the NVRAM in the modem respectively Advanced Connection Settings contra Bj madwar ATSE C 5 Keep clicking OK until you get of the modem control panel GFK 0582D Appendix K Using Modems with VersaPro and Control K 5 Setting Up the Communications Configuration Utility CCU Notes About The CCU 1 The default password for the CCU 15 netutil If the password has been changed see note 4 for details 2 Do not use the same name for a modem port and device in the CCU That will cause problems when saving the information to the initialization file 3 file that contains CCU setup information is called CFG INT It is a standard Windows INI file and can be edited using Notepad or another text edi tor The file is stored in the default Windows directory for NT C WINNT for 95 CNWINDOWS 4 If the password has been changed and needs to be cleared back to the netutil default open the CFG INI file in Notepad At or near the bottom there should b
414. s E bg Fg crsa E 9 Tape oV pg pg E 9 DES SHLD w AJ ov Connector Depends on 25 PIN SM RTU Master Device FEMALE Series 90 30 CPUS 351 352 or 363 TERMINATION CONNECTIONS On the CMM jumper pins 24 and 25 to connect the internal 120 ohm resistor If the RTU master device does not have an internal termina tion resistor connect a resistor across RD A and RD B at the RTU master device end On the CMM311 only Port 2 supports RS 422 RS 485 Figure 8 16 4 Wire RS422 485 Master to CMM Chapter 8 Serial Cable Diagrams and Converters 8 11 8 12 1 Series SD A CY zm 10 RD A Port 2 90 30 SD 1 ri 11 RD B m RDA r3 ri 12 SD 7 CPUs lt RD B 13 SD 351 352 RTU Ls n Master N 9 D or 363 RTS 6 RTS Device lt RTS 14 RTS B lt CTS 15 CTS A CTS B NI 8 ov zw 7 ov suot 1 SHLD 15 ISIPIN FEMALE Connector Depends MACE on RTU Master TERMINATION CONNECTIONS On the CPU end jumper pins 9 and 10 as shown to connect internal 120 ohm resistor If RTU master device does not have internal termination resistor connect 120 ohm resistor across RD A and RD B at the RTU maste
415. s Error Status Data Length Optional Code Word Code Response Data Bytes 3 Bytes 4 5 Bytes 6 7 Bytes 8 9 Bytes 10 N Trailer End of Block Next Message Next Message Not Used Block Check Type Length Code Byte N 1 Byte N 2 Bytes N 3 N 4 Byte N 5 Byte N 6 Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 69 The contents of the Header Command Data and Trailer for the X Response message are fur ther described below Start of Message 1Bh Start of message character Byte 2 Message Type SNP X Message 58h X or 78h x Command Data Byte 3 Response Code Response code Request Code 80h Bytes 4 5 Slave PLC Status Word PLC Status Word from slave device Bytes 6 7 Error Status Code Error status 00 00 success Bytes 8 9 Data Length Data length in bytes 0 1000 Bytes 10 N Optional data Optional data 0 1000 bytes ByeNeNeuMesue Type __0 Nextmessage ype Gays Bytes 3 4 Next Message Length 0 Next message length always 0 Byte Byte N 6Block Check Code Calculated value Tor this message The Message Type field is set to 58h for an X Response message or 78h for an Intermediate Response message The Response Code field corresponds to the Request Code of the X Request that initiated this command The response code value is set to the request code value with the high order bit al ways set For a successful X Response message the Slave PL
416. s Words from the CMM and place them into Register Memory R Registers 181 200 The desired serial port is specified by the TASK field of the issuing COMMREQ Word 1 00005 0005 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 Word 7 07001 1B59 Word 8 00001 0001 Word 9 00020 0014 Word 10 00008 0008 Word 11 00181 00B5 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number First Diagnostic Status Word to read DSW 1 Number of Diagnostic Status Words to read 20 DSWs Memory Type to store Diagnostic Status Words 6R Address to store Diagnostic Status Words Register 181 The Memory Type and Address to store Diagnostic Status Words fields must be selected to accommodate the requested number of Diagnostic Status Words See Table 6 1 Memory Types Unit Lengths and Valid Ranges for valid memory types and addresses SNP Diagnostic Status Words The following table specifies the contents of the SNP Diagnostic Status Words Table 6 11 SNP Diagnostic Status Words Definitions Word Number Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Words 8 13 Word 14 Words 15 20 6 22 Series 90 PLC Serial Communications User s Manual November 2000 Contents Error SNP Status Word Number of Successful Requests Respons
417. s even even parity or always odd odd parity Parity Check A check that determines whether the total number of ones in a word is odd or even Parity Error A condition that occurs when a computed parity check does not agree with the parity bit Peer to Peer Communication between stations where either station can initiate requests or respond to requests Peripheral Equipment External units that can communicate with a PLC for example programmers printers etc Piggyback Status Six bytes of general PLC status information returned within each SNP response mes sage This data may be passed to the master PLC if so requested The master may be aa programmer or a PLC Typically only a programmer master requests Piggyback status PLC Acronym for Programmable Logic Controller Appendix A Glossary A 9 Point to Point A serial wiring configuration which connects only two devices Program A sequence of functions entered into a Programmable Logic Controller to be executed by the processor for the purpose of controlling a machine or process Programmable Logic Controller or Programmable Controller A solid state industrial control device which receives inputs from user supplied control devices such as switches and sensors implements them in a precise pattern determined by ladder diagram based programs stored in the user memory and provides outputs for control of processes or user supplied devices such as relays and moto
418. s not used response data is contained within the single X Response message The SNP X protocol sequence for an SNP X command without data buffer is shown below Master Slave X Request gt 7 64 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X An X Write command containing more than two bytes of data cannot fit within the single SNP X request message The master sends an X Request message and indicates that a buffer mes sage will follow the slave returns a special response message called an Intermediate Response The master then sends the data within an X Buffer message and the slave returns the X Re sponse message to complete the command The SNP X protocol sequence for an SNP X com mand with data buffer is shown below Master Slave X Request gt lt Intermediate Response gt Broadcast Commands GFK 0582D When the master sends an SNP X message X Attach or X Request that is addressed to the special Broadcast SNP ID instead of the specific SNP ID for a particular slave device all slave devices on the serial link receive the message If the message is an X Attach message an SNP X session is established at every slave device If the message is an X Request all slave devices which have previously established an SNP X session receive and process the command SNP X slave devices do not return any messages to the master in response t
419. s since the unit length is the same for each CCM memory types 2 and 3 in puts and outputs can only be accessed in multiples of 8 Example 3 To read 8 target Series 90 registers into Series 90 or Series Six inputs the data length is 8 registers times 16 points per register 128 points Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D 8 Section 2 The Status Word The CCM Status Word reports on the progress and results of a CCM request The memory address to which the Status Word is written by the CMM is specified in Words 3 and 4 of the Command Block The contents of the CCM Status Word are defined as Hex Format 00 00 see Table 15 Secondary Error Codes high byte Completion and Primary Error Codes low byte There are several points to remember when interpreting the contents of the CCM COMMREQ Status Word 1 CCM will never send a zero for the CCM Status Word to the PLC CPU If the user pro gram needs to know if the command is complete it can zero the CCM Status Word before issuing the and then check it for being non zero 2 A status code of 1 in the low byte indicates that the request was completed without errors Refer to the table below for a complete listing of secondary error codes for CCM 3 Display the CCM Status Word in hexadecimal format to read the two bytes of data When an error occurs the low byte will be
420. s that use this driver can communicate with Series 90 PLCs over an SNP communication link Logicmaster 90 uses an SNP master to communicate with and to configure and program Series 90 PLCs Addition ally SNP master devices have been implemented by many other manufacturers to communicate with Series 90 PLCs Each serial port on a Series 90 CMM module can be configured as an SNP master or slave de vice Ports 1 and 2 on CPUs 351 352 and 363 support SNP master or slave however SNP master is not supported in all firware versions check Chapter 3 for details The standard seri al port accessed through the power supply connector on all Series 90 CPUs supports SNP slave The SNP master and slave on the CMM do not support PLC programming or configura tion functions Message Format There are three types of SNP messages Attach type messages Attach Attach Response and Update Real Time Datagram which are always 24 bytes in length Mailbox messages which are always 40 bytes in length and Buffer messages whose length varies with the amount of data The content of each message varies with the message type and data being transferred SNP also returns a 2 byte acknowledgement after each Mailbox or Buffer message to confirm reception of the message Establishing SNP Communication SNP communication consists of two phases First the communication session must be estab lished On the CMM this is accomplished by the Attach or Long Attach co
421. s the Update Real Time Datagram request all other slave devices await the next Break sequence GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 55 Datagram Lifetime An established Datagram may be cancelled at any time via the Cancel Datagram request established Datagrams are automatically cancelled when power is removed from the slave de vice In addition certain Datagrams are automatically cancelled when the SNP communication in which they were established is terminated There are two types of Datagrams Normal and Permanent Datagram type must be speci fied in all Datagram requests The difference between the two Datagram types is the lifetime of the Datagram once it has been established Permanent Datagrams remain established through new SNP communications Normal Datagrams in a CMM711 Series 90 70 slave device or in the built in slave device in any Series 90 PLC CPU are automatically cancelled when the current SNP communication is ended Normal Datagrams in a CMM311 Series 90 30 slave device behave like permanent Datagrams they are not cancelled when the current SNP communication is ended Any Datagram normal or permanent may be cancelled upon request The Datagram ID is used to identify a specific Datagram during a Cancel Datagram request The ID value can be used to specify all established Datagrams of the specified type normal or permanent Note In IC693CMM311 versions prior to
422. s three new contiguous status bits called X Sta tus Bits in the slave device PLC memory These bits are updated by the SNP X slave device to provide SNP X communication information to the slave PLC The X Status Bits are defined as follows Bit 2 Bit n 1 Bit n X Write Success X Read Success The Session Active bit indicates whether an SNP X communication session is established at this slave device The X Read Success and X Write Success bits indicate that an X Read or X Write SNP X command has been successfully completed by this slave device The location and operation of the X Status Bits within the slave device PLC memory differs for the Series 90 CPU and CMM modules In a Series 90 CPU module the X Status Bits always reside at the following locations Location S17 X Status Bit X Write Success X Read Success SNPX_WT SNPX_RD SNPXACT In a Series 90 CPU module the X Status Bits are always updated by the slave device The Ses sion Active bit remains set whenever the SNP X session is active The X Read Success or X Write Success bit is set for exactly one sweep upon successful completion of an X Read or X Write SNP X command respectively In a Series 90 CMM module the X Status Bits reside at a user defined location in a bit oriented reference table in local PLC memory A separate set of X Status Bits must be defined for each CMM serial port configured as an SNP X slave device The X Status Bits are available only aft
423. s to store Slave PLC Status Word fields specify a loca tion in the master PLC memory that is updated with the PLC Status Word from the slave device upon successful completion of this command If both fields are not programmed or are set to zero the slave PLC Status Word is not updated into master PLC memory The optional Response Timeout field specifies a new value for the Response Timeout timer This time is the maximum time that the master will wait for an X response from the slave The new value is specified in milliseconds and is in effect for this COMMREQ only If not pro grammed or set to zero the master uses the T2 timer value as selected by the Timeouts config uration parameter The optional Broadcast Delay field specifies a new value for the Broadcast Delay timer This time is the interval that the master must wait for all slave devices to establish an SNP X com munication session or to process a broadcast X command since the slave devices do not return a response to any broadcast message The new value is specified in milliseconds and is in ef fect for this only If not programmed or set to zero the master uses the T2 timer value as selected by the Timeouts configuration parameter The optional Modem Turnaround Time field specifies a new Modem Turnaround Time value This is the time interval required by a connected modem to turn the link around new value 18 specified in milliseconds and is in effect for this
424. screen can be accessed by pressing the Page Down key from the main CPU configuration screen The configuration screen for the extra ports on a CPU352 are shown in the next example screen CM gt SERIES 98 38 MODULE IN RACK g SLOT SOFTWARE CONFIGURATION SLOT Catalog it RES TERY SERIES 90 30 CPU MODEL 352 1 CPU352 Port 1 Mode SNP Port 2 lode SNP SNP Mode SLAVE SNP SLAVE Data Rate 19200 Data Rate 19208 Flou Contrl NONE Flow Contrl NONE Parity ODD Parity ODD Stop Bits 1 Stop Bits 1 Timeout LONG Timeout LONG Delay 9 Turn Delay 9 SNP ID SNP ID lt lt More Config Data Exists PgDn for Next Page PgUp for Previous Page gt gt OFFLINE 1 490 1 550 7 PRG LESSON CONFIG VALID REPLACE J 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Modems with Logicmaster 3 On the applicable screen for the port you will be using enter choose the following Data Rate 9600 Parity None Stop Bits 1 Modem Turnaround Time 2 this is a starting value sometimes a higher value will be needed 4 Save the CPUconfiguration and download it to the PLC GFK 0582D Appendix J Using Modems with Logicmaster J 3 Using Logicmaster s Auto Dialer Utility Logicmaster 90 30 20 Micro software has a modem auto dial feature that can be accessed from the Logicmaster main menu by
425. scription Hexadecimal Olh Not used 1 02h The modem command string length exceeds 250 characters 3 03h COMMREQ Data Block Length is too small Output command string data is missing or incomplete 4 04h Serial output timeout The CMM module was unable to transmit the modem autodial output from the serial port May be due to missing CTS signal when the CMM is configured to use hardware flow control 5 05h Response was not received from modem Check modem and cable 06h Modem responded with BUSY Modem is unable to complete the requested connection The remote modem is already in use retry the connection request at a later time 07h Modem responded with NO CARRIER Modem is unable to complete the requested connection Check the local and remote modems and the telephone line 08h Modem responded with NO DIALTONE Modem is unable to complete the requested connection Check the modem connections and the telephone line 7 8 09h Modem responded with ERROR Modem is unable to complete the requested command Check the modem command string and modem 10 Modem responded with RING indicating that the modem is being called by another modem Modem is unable to complete the requested command Retry the modem com mand at a later time 11 OBh An unknown response was received from the modem Modem is unable to complete the requested command Check the modem command string and modem The modem response is expected to
426. se message within the configured 5 time interval 47 2Fh Buffer message timeout An expected Text Buffer or Connection Data message was not received within the configured T5 time interval 48 30h Serial output timeout The CMM module was unable to transmit a Break an SNP message or SNP acknowledge ACK or NAK from the serial port May be due to missing CTS signal when the CMM module is config ured to use hardware flow control 49 31h SNP slave did not receive a response from the Service Request Processor in the PLC CPU 50 32h COMMREQ timeout The COMMREQ did not complete within the configured time interval EE An SNP Request or Response was aborted prior to completion due to reception of a Break PLC backplane communications error 53 35h Invalid Piggyback Status data memory type or address Communications have not been established 54 36h Invalid SNP Slave SNP ID Must be a 0 7 ASCII characters plus a terminating null character 00h The Null SNP ID eight bytes of 00h may be used to specify any single slave device 55 37h The SNP master has received an response message containing an unexpected data length Usually indicates a problem with the remote SNP slave device May occur when Series 90 70 commands Task Memory or Program Block Memory Read Write are issued to a Series 90 30 slave device 56 38h Response code in received SNP X response message does not match expected value Response code must equal the request
427. ssage was not received within the response timeout interval Table 6 6 Minor Error Codes for Major Error Code 13 0Dh Error Status Remote SNP Error Description Decimal Hexadecimal 64 40h The requested service is not supported by the SNP slave 65 41 SNP slave on CMM module requires PLC CPU privilege level 2 to operate The SNP slave has rejected a request to change to a higher or lower privilege level 66 42h SNP Request or Response message exceeds maximum data length of the CMM module Total data length for Mailbox and all following Buffer messages is 2048 bytes The master must use a smaller data length Use multiple requests if total data length exceeds the maximum value 67 43h Improper Write Datagram message format Series 90 70 slave devices use a different format for this message than Series 90 30 or Series 90 20 slave de vices The master must use the proper message format for this SNP slave de vice The SNP master in the CMM module sends this message as part of the Establish Datagram COMMREQ command The datagram has been partially established but is not usable the datagram should be cancelled by using the Datagram ID returned by the COMMREQ l8 a A datagram error occurred in a Series 90 70 slave device dual port error Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 6 Table 6 7 Minor Error Codes for Major Error Code 14 0Eh Error Status Autodial Error De
428. ssible that future changes in these modems may affect their SNP compati bility Please check our web site for the latest information Because there have been hundreds of different modem models marketed by over 100 modem manufacturers over the past several years it has not been practical for GE Fanuc to test them all Not all modem models will work with the SNP protocol so if you wish to use a model not listed on our web site some experimentation will be required to determine if it will work This chapter provides guidelines to assist you with setting up your modem If you need additional help you may refer to our web site for general information or call the GE Fanuc Technical Sup port Hotline see Appendix L for Technical Support phone numbers Modem configuration may be accomplished with the Logicmaster Auto Dialer utility or the Windows 95 98 HyperTerminal utility by entering the commands specified by the above documents Both utilities are discussed later in this chapter Some typical parameter settings necessary for SNP to operate across a modem connection are Disabling flow control Disabling error correction Disabling data compression Forcing the modems to only communicate at the desired baud rate Sending a break signal intact only for pre Break Free Ignoring the DTR signal Setting auto answer for remote modem You should choose a modem that allows you to make these settings if you cann
429. st not processed due to PLC memory limitation This will occur in a Series 90 30 system if the is issued every scan Using a contact from a transition coil to enable the COMMREQ will help avoid this problem and a timer instruction can be used to produce a delay between executions The first Communications Request sent to a CMM after a power cycle or ACFAIL must be delayed until the CMM has finished power up initialization A general rule of thumb is to wait five seconds after the first scan before trying to initiate a Communications Request 4 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Instruction Section 2 The Ladder Instruction The Communications Request begins when the COMMREQ Ladder Instruction is activated The COMMREQ Ladder Instruction has four inputs and one Series 90 30 or two Series 90 70 outputs Enable Logic Function OK on Series 90 70 only Command Block Pointer 9292992 Function Faulted logic Rack Slot Location 9292992 Port Number 9999999 Each of the inputs and outputs are discussed in detail below It is important to understand that the Command Block Pointer input points to another location in memory where you must enter additional information about the Communications Request Enable Logic This is a discrete contact input used to enable the COMMREQ As a general rule we recomme
430. supplied containing optional parameters The following example establishes a direct single session communication session to the slave device via the null SNP ID and then writes master device Input Memory I Inputs 1 10 into slave device Register Memory register 201 The PLC Status Word returned from the slave device is updated into master device Register Memory R Register 32 Word 1 00017 0011 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 SNP Data Block Length NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used Word 7 07102 SNP X Command Number Word 8 00000 0000 Word 9 00000 0000 Word 10 00000 0000 Word 11 00000 0000 Word 12 00000 0000 Word 13 00008 0008 Word 14 00201 00C9 Word 15 00010 000A Word 16 00070 0046 Word 17 00001 0001 Word 18 00008 0008 Word 19 00032 0020 Word 20 00000 0000 Word 21 00000 0000 Word 22 00000 0000 Word 23 00000 0000 Characters 1 and 2 of Slave SNP ID null null Characters 3 and 4 of Slave SNP ID null null Characters 5 and 6 of Slave SNP ID null null Characters 7 and 8 of Slave SNP ID null null Communication Session type 0 single session 1 multi session Slave Memory Type to store data Slave Address to store data Register 201 Number of Master Memory Type elements to wri
431. supports Slave proto cols The RS 422 connector is protected by an access door This port be configured using the Logicmaster 90 configuration program or the HHP except for RTU communications which must be configured by COMM REQ function in ladder logic 245451 RS 422 Compatible Serial Port Potentiometers Figure M 1 Micro PLC RS 422 Serial Port Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Series 90 Micro PLC Serial Ports Port 2 23 and 28 Point Models A second RS 422 compatible serial port also protected by an access door is provided on 23 and 28 point Micro PLCs This port can be used for general purpose communications using SNP SNPX and RTU Slave protocol Serial Port 2 can also be configured as an SNP SNPX Master port The following programming configuration software features are supported through Port 2 when there is no programmer connected to Port 1 1 status line correctly displays current information about the PLC If the proper folder is selected and verified the status line will show LOGIC EQUAL 2 You can view any of the reference memories on the TABLES page in Logicmaster 90 and can change individual values 3 When ONLINE and LOGIC EQUAL are displayed in the status line the references will be displayed correctly when you view the program logic You can set the privilege level to 1 or 2 Privilege levels 3 and 4 can not be accessed Th
432. t before the CPU recognizes its absence During this time no messages are processed on the port The CPU detects removal of the programmer as an SNP Slave protocol timeout There fore it is important to be careful when disabling timeouts used by the SNP Slave protocol When the CPU recognizes the disconnect it reinstalls RTU Slave protocol unless a new proto col has been received In that case the CPU installs the new protocol instead Example 1 Port 11 running Slave protocol at 9600 baud 2 programmer is attached to port 1 The programmer is using 9600 baud 3 The CPU installs SNP Slave on port 1 and the programmer communicates normally 4 programmer stores a new configuration to port 1 The new configuration sets the port for SNP Slave at 4800 baud it will not take effect until the port loses communications with the programmer 5 When the CPU loses communications with the programmer the new configuration takes effect GFK 0582D Chapter 9 Serial I O Protocol 9 9 Command Block for Configuring SNP Protocol Table 9 2 COMMREQ Command Block for SNP Values Meaning Address 10H Data Block Length Address 1 0 No Wait WAIT NOWAIT Flag Address 2 0008 register memory Status Word Pointer Memory Type Address 3 Zero based number that gives the address Status Word Pointer Offset of the COM
433. t Clear Output CCM Scratch Pad Specifies the scratch pad byte with which the data 0 255 Memory transfer is to begin The maximum addressable ranges for each memory type depends on the model of CPU and memory configuration For I O references the Series 90 and Series Six CCM implementations use point oriented addressing rather than the byte oriented addressing of the Series One Three and Five PLCs The starting address is interpreted by the Series 90 PLC as the bit number at which the transfer is to begin Series 90 source memory addresses must be on a byte boundary See the examples that follow Software packages which use the byte oriented addressing method to interface with a Series One Three or Five PLC may need to be modified for the Series 90 PLC Scratch pad and diagnostic status words are resident in PCM CMM memory GFK 0582D Chapter 5 CCM Service 5 9 Examples Example 1 To read target Series 90 inputs 9 through 16 into source Series 90 inputs 17 through 24 the source address is 17 the target address is 9 and the data length is 8 Example 2 To read target Series One inputs 9 through 16 into source Series 90 inputs 17 through 24 the source address is 17 the target address is 2 Series One I O addressing is byte oriented and the data length is 8 Example 3 To read target Series 90 input 27 into source Series 90 input 3 you must specify a source address of 1 a target address of 25 and a data length of 8 In
434. t Used Word 6 00000 0000 Not Used Word 7 07217 1C31 SNP Command Number Word 8 00001 0001 Datagram ID Word 9 00129 0081 Datagram Type Normal 1 Permanent 81h The Datagram ID field specifies the particular datagram to cancel This value was returned to the PLC application program upon successful completion of the Establish Datagram command The special value of 1 specifies that all datagrams of the selected datagram type be cancelled The Datagram Type field designates a normal or permanent datagram This value must match the type specified when the datagram was established Note If the slave device is a CMM311 module Series 90 30 with both ports config ured as SNP slaves a Cancel Datagram command with the special Datagram ID of 1 will cancel all datagrams of the specified Datagram Type established on both ports This note does not apply to the CMM711 6 62 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Update Real Time Datagram 07218 1C32 GFK 0582D Available Modes Master Description Remote command permanent datagram must have been established before executing this command This service provides the master with the capability to Attach to the slave and re trieve a specified permanent datagram area by issuing a single command This service differs from the Update Datagram service in that communication with the slave device need not have been previousl
435. t privilege level at the slave device For the built in CPU port in a Series 90 70 PLC the default slave privilege level is Level 0 Level 0 prevents any read or write of the PLC memory For the standard SNP CPU port in a Series 90 30 or Series 90 20 PLC the default slave privi lege level is Level 1 Level 1 permits read but not write of the PLC memory For an SNP slave device on CMM module in any Series 90 PLC the slave privilege is always Level 2 and can not be changed Level 2 permits read and write of the PLC memory If the master device requires additional privileges see the Change Privilege Level command for further information The Long Attach command also enables or disables Piggyback Status reporting for the duration of the SNP communication When enabled Piggyback Status data is updated after each suc cessful command Chapter 6 SNP Service 6 65 Example Command Block Issue Long Attach command to a slave device whose SNP ID is SNP 101 Store the 6 bytes of Piggyback Status data in master device Register memory Registers 171 173 Disable the T3 timer to eliminate keep alive message traffic Change the T4 timer to 100 msec Set all other SNP timers to the default configured values Set the modem turnaround delay to 10 milli seconds for modem communication and reduce the maximum SNP message size to 256 bytes for communication in a noisy environment Word 1 00015 000F SNP Data Block Length Word 2 00000 000
436. te 1024 bytes Local Area Network Light Emitting Diode Longitudinal Redundancy Check Manufacturing Automation Protocol Megabyte 1 048 576 bytes Modulator Demodulator Master Terminal Unit Negative Acknowledge control character Personal Computer IBM compatible Programmable Coprocessor Module Programmable Logic Controller Programmable Read Only Memory Random Access Memory Remote Terminal Unit Ready to Send control signal Receive Data Signal Supervisory Control And Data Acquisition Series 90 Protocol Series 90 Protocol Enhanced Start of Header control character Start of Text control character Transmit Data Signal Telephone Application Program Interface Versa Module European Wireless Application Protocol GFK 0582D Glossary Glossary of Terms Address A series of decimal numbers assigned to specific program memory locations and used to access those locations Analog A numerical expression of physical variables such as rotation distance or voltage to represent a quantity Application program The ladder logic program executing in a PLC or user program in computer ASCII An acronym for the American Standard Code for Information Interchange It is an 8 level code 7 bits plus 1 parity bit that represents characters such as alphabetical numeric and punctuation types Attach An SNP message which establishes communication between the SNP master and a specific SNP slave device See Ch
437. te Master Memory Type from which to write data 1 Master Address from which to write data Input 1 Master Memory Type to store Slave PLC Status Word Master Address to store Slave PLC Status Word Register 32 Response Timeout in msec 0 use default Broadcast Delay in msec 0 use default Modem Turnaround Time in msec Transmission Delay in msec The SNP ID field specifies the slave device s to which data will be written The null SNP ID all bytes 00h may be used only when the single session Communication Session type is se 6 32 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Service 5 lected The broadcast SNP ID all bytes FFh may be used only when the multi session Com munication Session type is selected The Communication Session type field specifies whether the communication session is single session or multi session The master uses this value together with the SNP ID value to determine whether the proper communication session is already active or if a new session must be established prior to the actual data transfer For single session operation the communication session is established with only the slave device specified by the SNP ID For multi session operation the communication session is established with all slave devices on the serial link In either case once the proper communication session exists the master sends the data transfer comman
438. ter State Table 7 16 CCM Peer State Table 7 14 CCM Slave State Table 7 18 CCM Status Word CGR CPUs comm features 3 8 Change Privilege Level SNP Command 58 Change SNP ID SNP Command 6 24 Clear CCM Diagnostic Status Words CCM Command 5 17 Index 1 Index 2 Clear Diagnostic Status Words SNP Com mand 6 21 4402 4403 9 30 for Serial 1 9 4 COMMREQ Command Block 4 2 4 7 COMMREQ Data Block CCM 5 2 Data Block SNP 6 2 COMMREQ Ladder Instruction 4 2 4 5 Status Word CCM Status Word 5 11 Serial 1 019 14 SNP Status Word 6 4 Communication Errors 7 44 Communication Networks Types of Modem Transmission E3 Multidrop F2 Point to Point Communication Request See COMMREQ Communications Line Serial 5 Communications Networks F1 Communications Parameters 2 12 Communications Parameters CPU 351 3 17 Communications Parameters CPU 352 3 17 Communications Protocols for the 1 3 Communications Request COMMREQ 4 2 Compatibility communication protocols Compatibility CCM C 1 Compatibility RTU D 1 Configuration Modes Configuring the 2 10 Rack Configuration 2 10 the CPU 351 Serial Ports 3 1 the CPU 352 Serial Ports 3 1 Connection diagrams 8 1 Control Information Area 6 51 Control Program Areal 6
439. ters are returned in the data field in order of number with the lowest number regis ter in the first two bytes and the highest number register in the last two bytes of the data field The number of the first register in the data field is equal to the starting register num ber plus one The high order byte is sent before the low order byte of each register GFK 0582D Chapter 7 Protocol Definition RTU SNP and SNP X 7 31 MESSAGE 04 READ INPUTS FORMAT Address Func Starting Number of Error Check Address Func Byte Error Check 04 Count Hi Lo Hi Lo Normal Response QUERY An address of 0 is not allowed as this request cannot be a broadcast request The function code is equal to 4 The starting analog input number is two bytes in length The starting analog input number may be any value less than the highest analog input number available in the attached Se ries 90 CPU It is equal to one less than the number of the first analog input returned in the normal response to this request The number of analog inputs value is two bytes in length It must contain a value from 1 to 125 inclusive The sum of the starting analog input value and the number of analog inputs value must be less than or equal to the highest analog input number available in the at tached Series 90 CPU The high order byte of the starting analog input number and num ber of analog input fields is sent as the first byte in each of these fi
440. the list Click OK to accept the device Click OK in the CCU to accept the configuration changes K 8 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Modems with VersaPro and Control Connecting to the PLC 1 Under the PLC menu select CONNECT Device Screen C SNP Serial 6 List All Devices Cancel Device Port d192000ddcom1 deth364 Help p192000ddcom1 peth364 Automatic port selection 2 If not already selected select the DEVICE and PORT that are configured for the modem Click on CONNECT to initiate communications The modem will dial and communica tions will be initialized A common problem reported by a number of users is that the modem hangs up approximately 10 seconds after the connect button has been pressed This is usually because the connect time out setting explained in an earlier section of this appendix has not been changed from the de fault GFK 0582D Appendix K Using Modems with VersaPro and Control K 9 Using HyperTerminal to Establish Connection If the modem will not dial or connect using the built in communications the Windows 95 Hy perTerminal utility may be used as a backup The theory behind using HyperTerminal is that the modem functions dialing hanging up are executed independently of the PLC program ming software Once the modems are connected to each other the PLC progr
441. the programming software through the CMM using either the IC690CBL 702 9 pin or IC690CBL 705 25 pin PS 2 cable GFK 0582D Chapter 2 The Communications Coprocessor Modules 2 9 Configuring the Configuring the CMM through the programming software is a two part procedure Rack Configuration Module Configuration Soft Switch Data I O Rack Configuration The Series 90 I O Rack Configuration software is used to define the type and location of all modules present in the PLC racks This is done by completing setup screens which represent the modules in a rack Specific configuration settings for individual modules can then be se lected The configuration data is saved in a configuration file which is then stored to the Series 90 PLC Series 90 70 PLCs A rack in the Series 90 70 PLC can be used as a main CPU rack or as an expansion rack Racks are available that have either 5 or 9 slots for modules plus provision for a power supply or power supply connection in the leftmost slot The rack shown in the previous illustration has 9 slots for modules The rack in which the CPU resides requires a power supply in slot PS and CPU module in slot 1 Slot 1 in the CPU rack is reserved for the CPU module in an expansion rack slot 1 is reserved for the Bus Receiver Module BRM A Bus Transmitter Module must be installed in slot 2 of rack 0 if it is a version B or later module version A of the BTM must be located to the ri
442. time ranges and retry ranges for various portions of the pro tocol exchange Default values have been defined for the protocol Some devices like the Se ries Six CCM and the Series 90 70 CMM have added capabilities to modify the default values If the default values are to be modified it is important that the values match for both the source and target devices CCM Serial Link Timeouts Timeout conditions are used for error detection and error recovery Whenever a serial link timeout occurs the side detecting the timeout will abort the communications and send an EOT to the other device The timeouts defined for the CCM Protocol are listed in the table below If a turn around delay is used it is added to the CCM timeout for that portion of the protocol exchange Each commu nications driver must adhere to the timeouts defined below GFK 0582D Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 11 Table 7 10 Timeouts for CCM Protocol Timer Name Description None Short Medium Long Default ACK TIMER Wait on ACK NAK to master ENQ 0 50 400 800 Wait on ACK NAK to lstpeerENQ 0 50 400 800 Wait on ACK NAK to retransmitted peer ENQ 300 300 440 300 440 300 440 600 0 140 220 140 220 140 220 1200 0 80120 80 20 80 120 19200 0 80 120 80 120 80 120 SOH TIMER Wait on SOH 0 50 400 800 HEADER TIMER Wait on End of Header 300 0 2670 2670 2670 60 0 1340 1340 1340 1200 0 6
443. tion SERIES 90 70 PLC 44908 1 Programmer nv T C M M RS 232 X3 Figure F 1 Example RS 232 Point To Point Configuration SERIES 90 70 PLC a44909 1A Programmer nv T RS 232 RS 422 485 CONVERTER Figure F 2 Example RS 232 to RS 485 Point to Point Configuration GFK 0582D F 1 Multidrop F 2 The multidrop configuration is a party line structure in which several devices share the same communication line For a hardwired multidrop network all devices must use RS 422 485 If converters or modems are used to connect devices to the network RS 232 or RS 422 485 can be used It is important to note that RS 232 can be used only between two devices whenever any device is physically connected to more than one other device RS 422 485 must be used In a multidrop network only one device is a master and the rest are slaves only the master can initiate communication with other elements in the system The next figure shows a computer running GE Fanuc CIMPLICITY software serving as the master in a multidrop configuration 44911 1 SERIES 90 70 PLC RS 232 SERIAL CABLE coo RS 232 RS 422 485 CONVERTER
444. tion session with a slave device The Attach command can be issued at any time The master sends a Break sequence followed by an Attach request the specified slave responds with an Attach response The Break sequence is initiated to all slave devices sharing the same communication link The detection of the Break sequence by a slave device immediately aborts any communication ses sion currently in process and places all slave devices into a state waiting for a valid Attach re quest The master device waits the length of the T4 timer before sending the Attach request to the slave devices Only the slave device with the matching SNP ID responds with an Attach response The non matching slaves return to a state waiting for a Break sequence The master upon receiving a valid Attach response completes the with a successful status No response or an invalid response completes the COMMREQ with an error status Having negotiated a successful Attach to a slave PLC the master device is accorded the default privilege level at the slave device For the built in CPU port in a Series 90 70 PLC the default slave privilege level is Level 0 Level 0 prevents any read or write of the PLC memory For the standard SNP port in a Series 90 30 or Series 90 20 PLC the default slave privilege level is Level 1 Level 1 permits read but not write of the PLC memory For an SNP slave device on a CMM module in any Series 90 PLC the slave privilege is always Level
445. tion to State 1 If X Attach for another slave device No error Transition to State 1 If not broadcast X Attach Build and send X Attach Response message Prepare to receive next X Request msg Transition to State 3 If reportable error with X Request message Build and send error X Response msg If fatal error Abort all slave processing in progress Transition to State 1 Else non fatal error Remain in State 3 If X Buffer message will follow If not broadcast X Request Build and send Intermediate Resp message Start Buffer Timeout timer Transition to State 4 Perform request service Read Write If not broadcast X Request Build and send X Response message Prepare to receive next X Request msg Remain in State 3 D Cancel Buffer Timeout timer If reportable error with X Buffer message Build and send error X Response message If fatal error Abort all slave processing in progress Transition to State 1 Else non fatal error Transition to State 3 Perform requested service Read Write If preceding X Request was not broadcast Build and send X Response message Prepare to receive next X Request msg Transition to State 3 Buffer Timeout Error Abort all slave processing Transition to State 1 Chapter 7 Protocol Definition RTU SNP and SNP X 7 87 Chapter Cable Connection Diagrams GFK 0582D 8 This chapter provides the information necessary for you to build serial communications cables from the CMM to
446. tions are discussed in Appendix C When the common mode voltage specification is exceeded a port isolator such as the GE Fanuc IC690A CC903 must be used See Appen dix G for details on this port isolator 3 10 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D CPU Serial Ports Series 90 PLC Standard SNP Serial Port Connector Pin Out The figure below shows the serial port orientation and connector layout for the Series 90 CPUs and the following table shows the pin numbering and signal assignment for these connectors SERIES 90 70 PLC SERIES 90 30 PLC 44521 SERIES 90 PLC CONNECTORS USE METRIC HARDWARE Figure 3 4 Series 90 PLC RS 422 Serial Port Connector Configuration Table 3 8 Pin out for Standard SNP Serial Port Connectors Shield No Connection No Connection ATCH Hand Held Programmer attach signal 45V 5V Power for HHP and RS 232 485 Converter RTS A Request To Send Signal Ground Signal Ground OV CTS B Clear To Send RT Terminating Resistor for RD RD Receive Data RD B Receive Data SD A Send Data SD B Send Data RTS B Request To Send CTS Clear To Send Signals available at the Connector but are not included in the RS 422 specification SD Send Data and RD Receive Data are the same as TXD RXD used in the Series Six PLC A and B are the same as and A and B denote outputs and A and
447. to store Datagram R Word 11 00201 00C9 Master Address to store Datagram Register 201 The Datagram ID field specifies the particular datagram to retrieve This value was previously returned to the PLC application program upon successful completion of the Establish Datagram command The Datagram Type field designates a normal or permanent datagram This value must match the type specified when the datagram was established The Master Memory Type and Address fields must be selected to allow enough room to accom modate the datagram area returned from the slave This area is of the size specified in the Es tablish Datagram command which defined the size and format of the datagram See Table 6 1 for valid memory types and addresses Chapter 6 SNP Service 6 61 s Cancel Datagram 07217 1C31 Available Modes Master Description Remote command The slave device must be attached and a datagram established before executing this command see Attach and Establish Datagram commands This service provides the master with the capability to cancel a previously established normal or permanent datagram in the slave device Example Command Block Cancel the permanent datagram with Datagram ID 1 in the attached slave device Word 1 00003 0003 SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type R Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 No
448. tor The device can be easily inserted into an ex isting communication channel with no additional hardware In Figure G 3 the Isolator is shown connected directly to a CPU module Alternatively the Isolator can be mounted separately from the PLC system using the optional IC690CBL003 extender cable For mounting separately to a panel you will need to provide two 46 32 4 mm mounting screws Figure G 4 When installing the Isolator tighten the connector screws and panel mounting screws if used to the following torque values Screws Type Torque Connector Thumbscrews supplied with M3 8 0 9 Newton meter Isolator Panel Mounting Screws user supplied 6 32 4 mm 12 in lbs 1 4 Newton meters PLC 1 PS CPU ES 4000 ft SNP Cable RS 485 Port Isolator PLC2 PS CPU Figure G 3 RS 485 Port Isolator in PLC Network 6 32 4 mm screw 6 32 4 mm screw Figure G 4 Mounting Port Isolator to Panel Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D 1C690ACC903 Port Isolator The RS485 Port Isolator supports both port to port and multi drop configurations shown in the next figure In some cases the Isolator is powered by a source other than the host port This configuration is used to prevent an interrupt in communications if the host syste
449. tring The Data Block Length will vary with the size of the modem command string The COMMREQ Data Block Length Word 1 of the COMMREQ must be equal to Word 9 1 2 3 Command Block Example Dial the number 234 5678 The modem command string used is ATDT2345678 CR maximum modem response time is 30 seconds The modem response will be checked The modem command string data begins at Word 10 Word 1 00009 0009 Word 2 00000 0000 Word 3 00008 0008 Word 4 00000 0000 Word 5 00000 0000 Word 6 00000 0000 Word 7 07400 1CE8 Word 8 00030 001E Word 9 00012 000C Word 10 21569 5441 Word 11 21572 5444 Word 12 13106 3332 Word 13 13620 3534 Word 14 14134 3736 Word 15 03384 0D38 6 68 Series 90 PLC Serial Communications User s Manual November 2000 SNP Data Block Length includes command string NOWAIT Mode Status Word Memory Type Status Word Address minus 1 Register 1 Not Used Not Used SNP Command Number Modem Response Timeout 30 seconds Number of bytes in command string A 41h T 54h D 44h T 54h 2 32h 3 33h 4 34h 5 35h 6 361 7 37h 8 38h CR 0Dh GFK 0582D GFK 0582D SNP Service 5 The Modem Response Timeout field specifies the maximum time interval that the COMMREQ will wait for the entire response string from the modem after the modem command has been sent The time interval is specified in seconds If the
450. ts specified in this request are ensured to be forced to the values specified only at the beginning of one sweep of the Series 90 user logic GFK 0582D Protocols SNP SNP X MESSAGE 16 PRESET MULTIPLE REGISTERS FORMAT Address Func Starting Number of Data Error Check 16 Register No Registers Query Address Func Starting Number of Error Check 16 Register No Registers Normal Response QUERY An address of 0 indicates a broadcast request slave stations process a broadcast re quest and no response is sent The value of the function code 15 16 The starting register number is two bytes in length The starting register number may be any value less than the highest register number available in the attached Series 90 CPU It is equal to one less than the number of the first register preset by this request The number of registers value is two bytes in length It must contain a value from 1 to 125 inclusive The sum of the starting register number and the number of registers value must be less than or equal to the highest register number available in the attached Series 90 CPU The high order byte of the starting register number and number of registers fields is sent as the first byte in each of these fields The low order byte is the second byte in each of these fields The byte count field is one byte in length It is a binary number from 2 to 250 inclusive It is equal to the number o
451. turer typ Rockwell Lucent USRobotics Hayes The Break The long break is a signal from the UART s transmit pin where it is held as 1 for at least 3 character times It is only sent before an SNP attach message when a master is trying to estab lish communications with a slave The slave will be sleeping until it receives a break from a master It will then process the following characters and determine if the message is valid or not The master sends the break to the slave waits for 500ms for the slave to wake up and sends the attach message Note that break free SNP is available on some GE Fanuc CPUs for these the break is not required see table below For those CPU s that require the break to be passed the modem needs to send the break intact without affecting the data being sent This mode is sometimes called non destructive expedited or pass through A destructive break will clear all data in the buffers of the modem which is usually not a problem because the break is sent before any other data It may also force the modem into one of many modes in cluding diagnostic command and remote loopback Typical parameters that configure mo dems to pass the break are the 582 register for most chipsets and amp Y command for USR 90 30 Break Free supported Firmware revision required CPU311 313 323 YES 8 20 or later CPU321 NO N A CPU331 341 YES 8 20 or later CPU340 NO N A
452. ty bit has been received the logic state of the line must be a 1 for at least one bit time be fore receiving the next character If no more characters are to be sent the line will be main tained in the 1 state logic 1 Parity Stop Bit Bit optional logic 0 First Order of transmission Last Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Line Interface Serial Communications Line Modems GFK 0582D The Serial Communications Line is the physical medium over which messages travel The line can be a direct connection between devices or a connection through modems for long distance communications The characteristics of the communications line depend on the requirements of the user and the electrical interface standard to which the line is constructed The word modem is an acronym for MOdulator DEModulator A modem is a device that con verts data from digital to analog for transmitting and from analog to digital for receiving over telephone communications lines Some modems use other methods of transmission such as radio or microwave 44905 FAS FEI COMPUTER mopem I MODEM i TELEPHONE LINE Figure E 1 Modems Used in the Communications Line Modems are generally classified as to the type of telephone line facility that can be connected half d
453. uc programming software to connect to two or more PLCs or intelligent Option modules called slaves via a single connection In this arrangement the programmer is able to program configure test troubleshoot etc any one of the multidropped devices from one connection point Physically a typical SNP multidrop system consists of a personal computer and two or more PLCs interconnected by a daisy chain type cabling arrangement as shown in the figure be low It is necessary to assign each slave device PLC or Option module a unique SNP Series Ninety Protocol address using programming software such as Logicmaster or VersaPro The SNP address is used by the programmer to designate which PLC it will communicate with The SNP protocol uses the RS 422 communications standard Note that the PLCs or Option mod ules do not communicate with each other over the multidrop system They only communicate with the programmer And only one device the one designated by the programmer can com municate with the programmer at a time Multidrop Connector Multidrop Connector Multidrop Connector 15 pin Male 15 pin Male 15 pin Male Series 90 30 PLC slave Series 90 30 PLC slave Series 90 30 PLC slave oj oj OJ Id la la Multidrop Connector 15 pin Fe male Multidrop Cable Multidr
454. ue 1 is also the initial Logicmaster 90 default configuration value The value of the target ID number can be from 1 to 255 in peer to peer mode or from 1 to 90 in master slave mode Target ID O is reserved Any peer CCM device regardless of its ID will respond to target ID 255 Target Memory Type Word 9 This is the type of memory being accessed the CCM target device There are nine accessible Series 90 target memory types 1 2 3 6 9 13 14 17 and 18 The memory types are discussed later in this section under the heading CCM Memory Types Other CCM devices support different types ranges see Appendix D Target Memory Address Word 10 The Target Memory Address specifies the address within the CCM target device where the data transfer is to begin The address range for each Series 90 memory type addressing examples are provided later in this section under the heading CCM Memory Addressing and Data Lengths Note For both target memory type and target memory address the error checking is done by the responding device and not by the initiating CMM Target memory types and target memory addresses which may be invalid for the initiating CPU may be valid for the responding CCM device Data Length Word 11 This is the length of the data transfer The units are determined by the source memory type which is specified by the command number The unit length and ac cessible increment for each memory type is described with
455. ue to the negotiated T3 value prior to use Do not include this value in the configured or programmed T3 value Chapter 7 Protocol Definition RTU SNP and SNP X 7 51 7 52 Attach Link Idle Timeout Slave only Break Processing Time Master only Maximum Processing Time Slave only Processing Timeout Master only Buffer Message Timeout Master and Slave This is a special instance of the T3 timer used only by the slave im mediately after a new Attach request response It allows the master sufficient time to negotiate new timer values by sending an SNP Pa rameter Select request message to the slave device This special timer value is used only until the first message is received after the Attach thereafter the default or negotiated T3 value is used The T3 timer value is always equal to the default T3 value plus a fixed worst case Transmission Delay value of 65 sec If the T3 tim er is disabled this timer value is also disabled This is the minimum time delay the master must wait after comple tion of the Break sequence before it sends an Attach or Update Real Time Datagram message This time interval allows the slave device to activate its receiver circuits and prepare to accept incoming mes sages Used by the master device only This timer is used during the Attach Long Attach and Update Real Time Datagram commands The T4 timer defaults to 50 milliseconds for all CMM configuration
456. unica tion session The master has retried the X Attach message twice without receiv ing a response Communications have not been established oo oo oo oo oo oo Ll GFK 0582D Chapter 6 SNP Service 6 11 Table 6 5 Minor Error Codes for Major Error Code 12 0Ch Continued Error Status Local SNP SNP X Error Description Decimal Hexadecimal 60h A parity error has occurred on an X Response message Ree A framing or overrun error has occurred on an X Response message a 208 A BCC Block Check Code error has occurred on an X Response message An invalid message type was received when an X Response message was required An invalid next message type value was detected in an X Response message ioi 55 An invalid response code was detected in an X Response message 102 66h An expected X Response message was not received within the response time out interval e _ _ _ A parity error has occurred on an Intermediate Response message 113 A framing or overrun error has occurred on an Intermediate Response mes sage 114 72h A BCC Block Check Code error has occurred on an Intermediate Response message 115 73h An invalid message type was received when an Intermediate Response message was required 116 74h An invalid next message type value was detected in an Intermediate Response message An invalid response code was detected in an Intermediate Response message 118 76h An expected Intermediate Response me
457. uplex or full duplex synchronous or asynchronous modulation technique for the analog signal and the maximum data rate in bits per second Modems were originally designed for and most frequently used with the RS 232D interface Communications Modes There are three modes of communication Simplex mode in which information can be sent over a communications line in one direc tion only e Half duplex mode in which information can be sent in both directions over communica tions line but only one direction at a time Full duplex mode in which information can be sent over a communications line in both directions at the same time Appendix E Serial Line Interface E 5 Interface Standards E 6 An interface standard is a set of rules which define the signal characteristics cable and connec tion characteristics connector pin assignments and control sequences for a physical link be tween devices CMM communications are based on the interface standards explained below RS 232 This standard was developed for interconnecting Data Terminal Equipment DTE such as a printer CRT or computer to Data Communications Equipment DCE such as a modem for transmission over a telephone line or network It can however be used over short distances without a modem Electrically RS 232 can be described as an unbalanced or single ended volt age interface This means that all the interchange signals share a common electrical ground
458. ure 8 6 IC690CBL705 CMM to Workmaster II or PS 2 Serial Cable 8 4 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Serial Cable Diagrams Converters Section 3 RS 422 RS 485 Cable Diagrams This section provides information on the RS 485 interface and on constructing RS 422 RS 485 cables RS 422 RS 485 Interface and Cabling Information GFK 0582D The RS 485 Interface The Series 90 PLC family of products are compatible with EIA RS 422 or RS 485 specifica tions RS 485 drivers and receivers are utilized to accomplish communications between sever al system components using multiple driver receiver combinations on a single cable with four twisted pairs The total cable length cannot exceed 4000 feet A multidrop system of a driver and 8 receivers be configured maximum common mode voltage between each additional drop is the RS 485 standard of 12 Volts to 7 Volts The driver output must be capable of 1 5 V minimum into 60 ohms The driver output im pedance must be at least 120 K ohms in the high impedance state The receiver input resistance is 12K ohms or greater Receiver sensitivity is 200 millivolts Care must be taken that common mode voltage specifications are met Com mon mode conditions that exceed those specified will result in errors in transmission and or damage to Series 90 PLC components Constructing RS 422 RS 485 Cables When connecting the CMM to a non Ser
459. use an SNP ID of 1 enter 49 decimal 31 hexadecimal Chapter 3 Series 90 CPU Serial Ports This is an identifier that distinguishes this device from others on the same network for example SNP ID 2 Reserved 5 Serial I O SLAVE 19200 NONE NONE LONG RS232 P1 RS485 P2 4 wire NULL 2 2 EVEN 2 1008 2 SHORT 2 point to point 3 17 Chapter Initiating Communications The COMMREQ 4 This chapter describes how to initiate communications in ladder programs created with Logic master software The chapter is divided into 3 sections Section 1 The Communications Request Section 2 The COMMREQ Ladder Instruction Section 3 The COMMREQ Command Block Section 1 describes the structure and operation of the Communications Request Section 2 de scribes the format and content of the COMMREQ Ladder Instruction Section 3 describes the format and content of the COMMREQ Command Block Note This chapter pertains only to the CCM SNP and SNP X Protocols which proto cols can be used to initiate communications The RTU Protocol as implemented on the CMM is slave only and cannot initiate communications The Serial I O Protocol COMMREQs are discussed in detail in Chapter 9 GFK 0582D 4 1 Section 1 The Communications Request The Communications Request can be used for a wide variety of PLC communications tasks This publication primarily describes its use for serial
460. use other communications software set up the modem to stay con nected 1 NOT to hang up the line when exiting the software so that you can start Logicmaster Usually this means forcing DTR high or telling the modem to ignore DTR After exiting Logicmaster you must re enter the modem software package to send a command such as the command to hang up the line J 6 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Using Windows HyperTerminal Using Modems with Logicmaster This section is for users who want or need to establish modem communications using the Win dows HyperTerminal utility rather than Logicmaster s Auto Dialer Utility Besides the issue of personal preference you may need to use ports not supported by the Logicmaster Auto Dialer utility which only supports ports Com1 and Com2 HyperTerminal supports all Com ports If you use HyperTerminal the modem functions dialing hanging up are executed indepen dently of the PLC programming software Once the modems are connected to each other the PLC programming software will essentially communicate as if it were connected directly to the PLC Note This approach MAY NOT WORK for PCMCIA modems 1 In Windows 95 HyperTerminal is located under the START menu PROGRAMS AC CESSORIES HYPERTERMINAL In Windows 98 HyperTerminal is under ACCES SORIES COMMUNICATIONS In HyperTerminal enter a name for the connection Naming and s
461. ust be selected to allow enough room to accom modate the 8 bytes of data necessary to represent the PLC Time Date returned from the slave PLC See Table 6 1 for valid memory types and addresses All data are returned in a packed BCD format The Day of Week field indicates the day of the week where Sunday 1 and Sat urday 7 The Time Date data is returned in the following format PLC Time Date Area Word Location Byte Location Word 1 low byte Byte 1 Description Year in BCD Word 1 high byte Byte 2 Month in BCD Word 2 low byte Byte 3 Day in BCD Word 2 high byte Byte 4 Hour in BCD Word 3 low byte Word 3 high byte Word 4 low byte Word 4 high byte Minutes in BCD Seconds in BCD Day of Week Sunday 1 Saturday 7 Unused Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D SNP Service 5 Return Fault Table 07212 1C2C GFK 0582D Available Modes Master Description Remote command The slave device must be attached before executing this command see At tach command The master sends a Return Fault Table request the slave responds with data This service provides the master with the capability to retrieve all or any part of the I O or PLC Fault Tables from the slave device The I O Fault Table can contain up to 32 entries the PLC Fault Table can contain up to 16 entries For detailed information on the fault tables
462. utodial SNP Command 6 68 Block Check Code 7 62 Break Sequence 7 48 Broadcast Delay 6 31 16 33 7 60 Broadcast SNP 107 58 Broadcast SNP X Commands 7 65 C Cable IC693CBL316 IC690CBL714A Cable and connections for serial port multi drop cable 2 Cable Assembly Specifications 8 2 Cable Diagrams 8 1 Cable Diagrams for Isolated Repeater Con verer N 7 Cable Diagrams for 3 Index Cables serial comm 8 1 SNP multidrop H 2 Cancel Datagram SNP Command 6 62 Cancelling a Datagram Catalog numbers converters IC690ACC901 CCM Command Examples 5 16 Clear Diagnostic Status Words 5 17 Read CCM Diagnostic Status Words to Source Registers 5 17 Read Q Response to Source Register 5 20 Read Target to Source Memory 5 19 Set Q Response Single Bit Write 5 21 Software Configuration 5 18 Write to Target from Source 522 CCM Command Number CCM Command Summary CCM Programming Examples 5 14 CCM Compatibility C 1 C2 CCM Data Lengths 5 10 CCM Master Slave 7 9 Addresses 5 9 CCM Memory Types 5 5 CCM Operation Memory Types not Sup ported CCM Peer to Peer Mode 7 7 CCM Protocol 7 2 CCM Protocol Timing Retry 7 11 CCM Scratch Pad 5 6 CCM Service 5 1 CCM State Tables 7 13 CCM Mas
463. vents can be detected 1 A read request was initiated previously and the required number of characters has now been received or the specified time out has elapsed 2 A write request was initiated previously and transmission of the specified number of char acters is complete or a time out has elapsed The Port Status data returned by this function indicates the status of various tasks such as whether or not a task was successfully completed Each bit in the status word has a separate meaning so the status of several items can be determined with one of these COMMREQs The table on the next page defines the meaning of each Port Status word bit A second Port Status word reports on the remaining number of characters in the input buffer The Port Status memory type address 7 can specify either bit type i e or word type i e memory Bit type memory does not have to be byte aligned Memory codes found earlier in this chapter Port Status memory consists of two words worth of data So if bit type memory is specified 32 consecutive bits two words worth will be used starting with the bit specified by address 8 of the Command Block If word type memory is specified two consecutive words will be used starting with the word specified by address 8 of the Com mand Block In the example below bit type memory is specified for the Port Status words In this case the first word of Port Status data is 70M0010
464. w to use the RS 422 to RS 232 Miniconverter The following topics are covered Description of the Miniconverter System Configurations Cable Diagrams Description of Miniconverter The Miniconverter Kit IC690ACC901 consists of an RS 422 SNP to RS 232 Miniconverter a 6 foot 2 meter serial extension cable and a 9 pin to 25 pin Converter Plug assembly The 15 pin SNP port connector on the Miniconverter plugs directly into the serial port connector on the Series 90 30 power supply Series 90 70 CPU Series 90 20 CPU Series 90 Micro or Ver saMax The 9 pin RS 232 port connector on the Miniconverter connects to an RS 232 compat ible device 44985 RS 422 RS 232 PORT PORT Figure O 1 Series 90 SNP to RS 232 Miniconverter When used with an IBM PC AT or compatible computer one end of the extension cable plugs into the Miniconverter s 9 pin serial port connector the other end plugs into the 9 pin serial port of the computer The Converter plug supplied with Kit is required to convert the 9 pin serial port connector on the Miniconverter to the 25 pin serial port connector on the GE Fanuc Workmaster II computer or an IBM PC XT or PS 2 Personal Computer The GE Fanuc Workmaster computer requires an additional adapter not supplied with kit please contact your local Fanuc PLC distributor for use with the Miniconverter
465. ware Kit AMP 207871 1 Kit includes 2 metric screws and 2 screw clips Miniconverter For connecting to IC690ACC901 miniconverter Connector 15 pin female DBI5F Hood 207470 1 or equivalent M3 Latchblocks AMP 208101 or equivalent Computer grade 24 AWG 22 11112 minimum with overall shield Catalog Numbers Belden 9505 Belden 9306 Belden 9832 These cables provide acceptable operation for data rates up to 19 2 Kbps as follows RS 422 RS 422 4000 feet 1200 meters maximum length Must not exceed the maximum RS 422 Common Mode specifi cation of 7V to 7V Isolation at the remote end may be used to reduce or eliminate Common Mode voltages When using RS 422 RS 485 the twisted pairs should be matched so that both transmit signals make up one twisted pair and both receive signals make up the other twisted pair If this is ignored cross task resulting from the mismatching will affect the performance of the communications system When routing communication cables outdoors transient suppression devices can be used to reduce the possibility of damage due to lightning or static discharge Care should be exercised that all connected devices are grounded to a common point Failure to do so could result in damage to the equipment H 2 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D GFK 0582D SNP Multidrop Custom Made MultiDrop Cable for use with Miniconverter
466. ware topics include installing the modules and constructing and installing the serial communications cables Software topics include configuring the modules using GE Fanuc PLC Software and programming serial communications requests COMMREQs in ladder diagrams Communications Capabilities Table and Chapter 1 Introduction protocol overview Hardware The Communications Coprocessor Chapter 2 The CMM Description Module CMM Installation and Configuration Description of Series 90 CPU Serial Ports Chapter 3 Series 90 CPU Serial Ports Communications Cables Chapter 8 Serial cables isolators and converters Isolated Repeater Converter Miniconverter Port Isolator Modems Appendix I Modem basics setting modem parameters J and K Software Module Configuration Chapter 2 CMM Configuration Chapter 3 CPU Configuration Ladder Programming COMMREQ Chapter 4 Initiating Communications The COMMREQ Chapter 5 CCM Service Chapter 6 SNP Service Protocol Descriptions Chapter 7 Protocol Definition CCM RTU SNP SNP X Serial I O Protocol Chapter 9 Protocol definition programming example GFK 0582D 1 1 Series 90 Serial Port Communications Capabilities Series 90 Serial Port Communications Capabilities 515590 Serial Port Communications Capabilities Ports 1 and 26 CMMs een SNP X slave RTU slave Yes with Megabasic file RTU master Yes with d file
467. will appear that contains the SNP ID read from the PLC In Logicmas ter make sure you change the programming software s connection method to Direct for this test When set for Direct connection Logicmaster will communicate with a directly con nected PLC without regard to its SNP ID In VersaPro use a communications setup De vice that contains a blank SNP ID field Communications settings may not match If the PLC s serial port communication set tings and the programming software s communication settings do not match they will not be able to communicate These settings include such things as BAUD Rate Parity Stop Bits etc If you suspect this to be the problem try connecting directly to the PLC as de scribed above in SNP ID may be incorrect If you cannot connect directly there may be a communication settings mismatch If so set the programming software to its default communication settings and try again If this doesn t work you may be able to change the programmer s communications settings one at a time until you get it to match the device Multidrop may not be selected as the Logicmaster connection method The default Logicmaster connection method in the programming software is Direct which requires that you be connected directly to a PLC or module s programmer port If this default setting is not changed to Multidrop you will not be able to connect to a selected SNP ID over a mul tidrop system You may have a hardware probl
468. xception Status Loopback Maintenance 0 1 2 3 4 5 6 7 8 Not Defined Force Multiple Outputs 7 7th byte Preset Multiple Registers 7 7th byte Report Device Type 2 Not Defined Not Defined Read Scratch Pad 6 3 3rd byte Not Defined Not Defined Not Defined 3 1 The value of this byte is the number of bytes contained in the data being transmitted 7 28 Series 90 PLC Serial Communications User s Manual November 2000 GFK 0582D Protocols SNP SNP X Message Descriptions The following pages explain the format and fields for each RTU message MESSAGE 01 READ OUTPUT TABLE FORMAT Func Starting Number of Error Check 01 Point No Points Address Func Byte Data Error Check 01 Count Normal Response QUERY An address of 0 is not allowed as this cannot be a broadcast request The function code is 01 The starting point number is two bytes in length and may be any value less than the high est output point number available in the attached Series 90 CPU The starting point num ber is equal to one less than the number of the first output point returned in the normal re sponse to this request The number of points value is two bytes in length It specifies the number of output points returned in the normal response The sum of the starting point value and the number of points value must be less than or equal to the highest output point number available in the attached Series
469. y established by an Attach or Long Attach in order to perform this service Up date Real Time Datagram commands may be issued as desired separate Attach commands to establish communications with the desired slave devices are not required This service is pro vided to allow for the fastest possible retrieval of data from a slave device particularly in a multi drop polling application This command may be used to retrieve permanent datagrams only Example Command Block Update using the Update Real Time Datagram service the permanent datagram with Datagram ID 1 in the slave device whose SNP ID is SNPIDI Store the returned datagram data in master Register Memory beginning at Register 201 Store the 6 bytes of Piggyback Status data in master device Register memory Registers 171 173 Word 1 00010 000A SNP Data Block Length Word 2 00000 0000 NOWAIT Mode Word 3 00008 0008 Status Word Memory Type Word 4 00000 0000 Status Word Address minus 1 Register 1 Word 5 00000 0000 Not Used Word 6 00000 0000 Not Used Word 7 07218 1C32 SNP Command Number Word 8 00001 0001 Datagram ID Word 9 20051 4E53 Characters 1 and 2 of Slave SNP ID S 53h 4Eh Word 10 18768 4950 Characters 3 and 4 of Slave SNP ID P 50h I 49h Word 11 12612 3144 Characters 5 and 6 of Slave SNP ID D 44h 1 31h Word 12 00000 0000 Characters 7 and 8 of Slave SNP ID null null Word 13 00008 0008 Master Memory
470. y portion of the CCM Proto col cannot be completed successfully CCM Peer to Peer Mode GFK 0582D Data sent from source device Data sent from target device This section describes the protocol flow and enquiry collision sequence for CCM peer to peer mode Peer to Peer Protocol Flow The figures below show the general format of a successful communications exchange in peer to peer mode The first figure illustrates a data transfer from the source device to the target device data write The next figure illustrates a data transfer from the target device to the source device data read E 5 Header Q H T A A A K K K K Figure 7 2 Data Transfer from Source to Target Write Peer To Peer This delay is called the back off time This back off time is based on the device s own ID Since each device has a unique device ID one side will eventually be able to transmit the ENQ character without a collision occurring Chapter 7 Protocol Definition CCM RTU SNP and SNP X 7 7 7 8 Data sent from E S source device N O Header Q H Data sent from target device Figure 7 3 Data Transfer from Target to Source Read Peer To Peer Collision Detection and Correction In peer to peer mode a collision may occur when both devices attempt to initiate communica tions at the same time This is known as an Enquiry Collision If this occurs each side delays a certain amount of time
471. y used for telephones and mo dems GE Fanuc s serial cable part number IC693CBL316 is a convenient way to connect to this port Chapter 8 of this manual contains a data sheet on this cable m Port 2 the bottom port is an isolated RS 485 compatible port It is accessed through a female 15 pin D shell connector on the front of the module m Standard SNP Port accessed through the female 15 pin D shell connector on the PLC power supply is a non isolated RS 485 compatible port LED Indicators The CPUs 351 352 and 363 have three LED indicators which enable you to determine the status of the serial port activity on the CPU 351 352 without having a terminal connected m The SNP or PS LED top LED is ON when data is being transferred through the Standard SNP serial port whose connector RS 422 485 is located on the PLC power supply m The P1 LED middle LED will be ON when data is being transferred through Port 1 the RS 232 port m P2 LED bottom LED will be ON when data is being transferred through Port 2 the RS 422 485 port Serial Communications Features and Protocol Support Serial Ports 1 and 2 on CPUs 351 352 and 363 and the standard SNP serial port accessed through connector on PLC power supply have different features and are discussed separately Ports 1 and 2 are accessed by connectors on the front of the CPU Port 3 is accessed through a connector on the PLC power supply Features available on Ports 1

Download Pdf Manuals

Related Search

Related Contents

Installieren der Software Einlegen und Aufladen des Akkus  Internal ATAPI （E-IDE）DVD-RAM ± R/RW Unit  gebruiksaanwijzing mode d'emploi gebrauchsanleitung    本紙 1 - 防衛省  Philips myBathroom Recessed spot light 59905/11/16  Samsung DVD-C643P Manual de Usuario  AT&T U-verse® Voice  

Copyright © All rights reserved. Failed to retrieve file