Home

Honeywell PDF - Lesman Instrument Company

Contents

1. Address Register Channel Number Access Notes hex decimal 2000 48193 Tagged Signal 1 Floating Point in Engineering Units 2002 48195 Tagged Signal 2 NOTE Digital Signal Tags are 2004 48197 Tagged Signal 3 R represented as 0 0 for OFF 1 0 for ON 2006 48199 Tagged Signal 4 R 2008 48201 Tagged Signal 5 R 200A 48202 Tagged Signal 6 R 200C 48205 Tagged Signal 7 R 200E 48207 Tagged Signal 8 R 2010 48209 Tagged Signal 9 R 2012 48211 Tagged Signal 10 R 2014 48213 Tagged Signal 11 R 2016 48215 Tagged Signal 12 R 2018 48217 Tagged Signal 13 R 201A 48219 Tagged Signal 14 R 201C 49021 Tagged Signal 15 R 201E 48223 Tagged Signal 16 R 27CE 50191 Tagged Signal 500 R Example Query Read Signal Tags 3 and 4 from UMC800 at address 1 using Function Code 3 hex codes 03 20 04 00 Response from UMC800 where Signal Tag 3 100 0 and Signal Tag 4 55 32 o1 03 os 42 00 42 sp 47 AE crc 2 01 UMC800 Modbus RTU Serial Communications User Manual 37 Register Map for Process and Operation Type Variables 6 10 Set Point Program Register Maps Summary The SP Programmer parameters are listed according to category related to program status and interaction other p
2. Index Type Use R W Description Ell lu BOOL lo IR event 11 E12 12 BOOL lo R event 12 E13 13 BOOL lo R event 13 E14 14 BOOL lo R event 14 E15 15 BOOL lo R event 15 E16 16 BOOL lo R event 16 STA 17 REAL R program state SEG 18 REAL I R current segment number PGM 19 REAL I R current program number Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 169 Function Parameter Index Reference 8 67 SPP Function Block Description The SPP label stands for Setpoint Programmer This block is part of the Setpoint Program category It looks like this graphically on the Control Builder PVAPV2PVSPVA Dynamic Contained Parameters Table 8 90 SPP Dynamic Contained Parameters status 0 RE C R block status see section 9 2 for code list save req 1 RE C R W save current program request mailbox sta req 2 RE C R W state change request req 3 RE C R W program change request seg req 4 RE C R W segment change request seg ramp 5 BOOL C R TRUE if current segment is a ramp soaksp 6 RE C R soak setpoint eu a duration 7 RE C R segment duration minutes PV 8 RE C R value of PV being controlled by SP program adv req 9 BOOL C R W segment advance request lead
3. block status see section 9 2 for code list GHOLD 1 BOOL R ON if state 1 0 else OFF READY 2 BOOL R ON if state 2 0 else OFF HOLD 3 BOOL R ON if state 4 0 else OFF RUN 4 BOOL R ON if state 8 0 else OFF STOP 5 BOOL R ON if state 16 0 else OFF STFL 6 REAL I R Encoded state input Static Configuration Values None 2 01 UMC800 Modbus RTU Serial Communications User Manual 177 Function Parameter Index Reference 8 71 STSW Function Block Description The STSW label stands for the Setpoint Scheduler State Switch This block is part of the Setpoint Scheduler category It looks like this graphically on the Control Builder 5 51 1 a JOG GHOLD RESET HOLD RUN ADV Dynamic Values Table 8 99 STSW Dynamic Values Parameter Index Type Use Description status 0 R block status see section 9 2 for code list STRQ 1 REAL R Encoded state request output JOG 2 BOOL I R OFF to ON requests jog state GHOLD 3 BOOL I R ON guaranteed hold state ON to OFF and previous state was Run then return to RUN mode RESET 4 BOOL I R OFF to ON requests reset state HOLD 5 BOOL I R OFF to ON requests hold state RUN 6 BOOL I R OFF to ON requests
4. Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list inct 1 number of IN set to ON denc 2 encoded parameter containing Boolean state of each input see note 1 in 16 3 18 R input Static Configuration Parameters None 114 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 24 DEWP Function Block Description The DEWP label stands for Dewpoint Calculation This block is part of the Calculations category It looks like this graphically on the Control builder Probe Input 1 TEMP DEWPT Sco SPHLIM WRLIM LOTEMP Dynamic Parameters Table 8 27 DEWP Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list DEWPT 1 R Calculated dew point output C 2 REAL R Calculated percent carbon output SPHLIM 3 REAL R Control set point high limit for anti soot WRLIM 4 BOOL R Command to write the set point high limit LOTEMP 5 BOOL R ON when TEMP is calculated low temperature dropoff 02 6 REAL I R Oxygen sensor input 0 to 100 TEMP 7 REAL I R Temperature input F or C per USE_METRIC PCO 8 REAL I R Percent carbon monoxide input Static Configuration Parameters Table 8 28 DEWP Static Configuration Parameters L
5. Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list ack 1 BOOL lc R W ON acknowledges the alarm OUT 2 BOOL lo R output PV 3 REAL I R Process variable CV 4 REAL I R Compare value RSP 5 REAL I R Remote setpoint DISABLE 6 BOOL I R ON disables alarm action Table 8 8 ALM Static Configuration Parameters REAL local setpoint in eu 99999 9 to 99999 9 Type Description rem mode 1 BOOL ON selects RSP 2 01 UMC800 Modbus RTU Serial Communications User Manual 95 Function Parameter Index Reference 8 7 2AND Function Block Description The 2AND label stands for the AND Boolean function 2 Inputs This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder Bus OR X1 OUT X1 Fast Logic Dynamic Parameters Table 8 9 2AND Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 BOOL O R output DIG 1 X1 2 BOOL I R input DIG 2 X2 3 BOOL I R input Static Configuration Parameters None 96 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 8 4AND Function Block Description The 4AND label stands for the AND Boolean function 4 Inputs This block is part of t
6. ice eee ne e en eae Ra gene ego He eie 26 6 2 Miscellaneous Register bt ie ee E EHE UE Pe ERR etae bac cea bees 28 6 3 Eoop Value Register Map eee dee te ao detecte 29 6 4 Example for queries using Function Codes 3 6 16 sese 32 6 5 Analog Input Frequency Input Pulse Input Value Register Map eene 33 6 6 Variable Register EE PCR EE Pere etae dope isa 34 6 7 Ime Register Map iere gene e 35 6 8 lt Alarm Status Register ee eie eu eee o e ger eee ia iR 36 6 9 Signal Tag Register Map aee e eene io Receta 37 6 10 Set Point Program Register 38 6 11 Set Point Programmer Value Register Map eren enn rennen 42 UMC800 Modbus RTU Serial Communications User Manual 2 01 6 12 Set Point Programmer Additional Values Register Map sese 43 6 13 Set Point Programmer Segment eene rennen rennen tenen nest nennen 45 6 14 Segment Register Map eni ped ee e e e Deo baec eb e pe ERR eode 45 6 15 Scheduler Value Register Map a e E 47 6 16 Scheduler Segment Register 0202 40 010100000000000 rennen 53 6 17 Segment Register ee eee n A cede e LESE eee AE pce RU ena Er
7. Comunications to the UMC800 slave is intermittent Noise on the communications network Check the COMM A status screen on either the or from the PC software Monitor the number of messages received and the errors accounted Ensure that the communication cable is properly terminated Ensure that no other slave on the network is set with the same station address as the UMC800 that is exhibiting problems 200 UMC800 Modbus RTU Serial Communications User Manual 2 01 Diagnostics and Troubleshooting 11 Appendix CRC 16 Calculation See following function extern void calculate CRC unsigned char message int length unsigned char CRC unsigned char CRCHi CRCLo TempHi TempLo static const unsigned char table 512 0x00 0x00 OxC0O OxCl OxCl 0x81 0x01 0x40 OxC3 0x01 0x03 0 0 0x02 0x80 OxC2 0x41 OxC6 0x01 0x06 0 0x07 0x80 OxC7 0x41 0x05 0x00 0 5 OxCl OxC4 0x81 0x04 0x40 OxCC 0x01 0 0 0 0 0 00 0x80 OxCD 0x41 OxOF 0x00 OxCF OxCl OxCE 0x81 OxOE 0x40 OxOA 0x00 OxCl OxCB 0x81 OxOB 0x40 0 9 0 01 0x09 0 0 0x08 0x80 OxC8 0x41 OxD8 0x01 0x18 0 0 0x19 0x80 OxD9 0x41 OxIB 0x00 OxDB OxCl OxDA 0x81 OxlA 0x40 OxlE 0x00 OxDE OxCl OxDF 0x81 OxIF 0x40 OxDD 0x01 Ox1D 0 0 0 0x80 OxDC 0x41 0x14 0x00 OxD4 OxCl OxD5 0x81 0x15 0x40 OxD7 0x01 0x17 0xC0 0x16 0x80 OxD6
8. EE 95 Device Control Group Register Map Mt 57 ANAK qq 87 tek Lee meee ee 115 Analog sete nv ee 95 Dewpoint Calculation eee 115 analog input re itr inre 33 DI 116 Analog Input O 94 Diagnostics and Troubleshooting EA 200 Analog me 101 Digital Bag oder i ect tI pnus 114 Analog Switch 182 Digital mpi Cohen e RU Stu tS ee 116 Analog System Status eee 102 Digital Output sia pd 119 AND Boolean function 2 Inputs 96 121 AND Boolean function 4 Inputs 97 DI ce Ho eU M MAC 118 AND Boolean function 8 Inputs 98 Division Mathematical 118 AQ ccce Hen 101 DOS s tomes one Rim n eei ei 119 Application Error Codes sess 67 Download a Setpoint 41 INS Y Soie sisse pt ee 102 Download a Setpoint Schedule 49 Downloading Setpoint Programs 40 B Downloading Setpoint Schedules 48 BOD NM AT PEN 104 121 Binary Coded Decimal 104 Duplex Vb FERES TU
9. TE ERES SESPERE TERRY 4 Bit transfer order sese 4 Bit transfer rate eee pee noter 4 E bits per 2 4 Eight Digital 120 Block Number 250 2 4 197 Eight Discrete Inputs eese 117 202 UMC800 Modbus RTU Serial Communications User Manual 2 01 End of message eese entente oas 4 Error checking 4 Event Acknowledge eese 82 Event SUMMA tei eh eei Rees 81 Exception Codes eee 24 25 Exclusive OR 196 F Fast Logic Status Block FSYS 127 FGEN ipentetentete Sepe 122 125 ET onu eria en beatae eels 124 Floating Point Big Endian 8 Floating Point Big Endian with byte swapped 8 Floating Point Little Endian 8 Floating Point Little Endian with byte swapped 8 Force Single 11 18 Free Form Logic eere 105 Free Form Math eere nennen 137 frequency s oe ee dec 33 Frequency Input 124 FSYS Function 127 Function Block Look up Table 68 Function Block parameter tables 88 Function Block Status Types 1
10. 2 01 Function Parameter Index Reference 8 74 4SUB Function Block Description The 4SUB label stands for the Subtraction mathematical operation 4 Inputs This block is part of the Math category It looks like this graphically on the Control Builder Y i 4SUB1 al X1 Ll E OUT Dynamic Parameters Table 8 102 4SUB Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 REAL R output A 2 REAL I R input 1 B 3 REAL I R input 2 C 4 REAL I R input 3 D 5 REAL I R input 4 Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 181 Function Parameter Index Reference 8 75 SW Function Block Description Dynamic Parameters The SW label stands for Analog Switch this graphically on the Control Builder X Sw 1 i SY OUT Table 8 103 SW Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL lo R output X 2 REAL I R Y 3 REAL I R SY 4 BOOL I R select Y when ON Static Configuration Parameters None 182 UMC800 Modbus RTU Serial Communications User Manual This block is part of the Signal Selectors catego
11. R Output X 2 REAL I R Monitored input Y 3 REAL I R Trip point Static Configuration Parameters None 134 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 38 LSEL Function Block Description The LSEL label stands for Low Selector This block is part of the Signal Selectors category It looks like this graphically on the Control Builder Dynamic Parameters OUT Table 8 49 LSEL Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL R primary output YHI YLO 2 BOOL R override indication X 3 REAL I R input Y 4 REAL I R input Static Configuration Parameters None 2 01 UMC800 Modbus Serial Communications User Manual 135 Function Parameter Index Reference 8 39 LTCH Function Block Description The LTCH label stands for Latch This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder OR Fast Logic Dynamic Parameters Table 8 50 LTCH Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 BOOL lo R output L 2 BOOL I R latch command
12. UMC800 Modbus RTU Serial Communications User Manual 21 Modbus RTU Function Codes 4 8 Function Code 17 11h Report UMC800 ID Description Function code 17 11h is used to report the device information which includes information like Slave ID device description and firmware version Query The query message specifies the function code only Query message format for function code 17 11h Slave Function CRC CRC Address Code Example Read Device ID from a slave at address 02 02 11 CRC CRC Response The response is a record format describing the instrument Response message format for function code 17 11h Slave Function Byte Slave Run Device CRC CRC Address Code Count Indicator Specific Status Data ID Slave ID The Slave ID number for the UMC800 is 80 hex one byte byte 3 Run Indicator Status one byte byte 4 00 OFF FFZON Device Specific Data Device Model Device Device Description ID Class Mapping ID Device Description bytes 5 20 16 Character ASCII Message with the following format U IMP IC 8 0 0 up to 9 character version number in zeros are appended for floating point notation the remaining bytes For example A UMCS800 with version number 3 22 would have the following device description U 8 0 KOH us d IM et ras 0 0 0 0 0 Model ID 00 one byte byte 2
13. ii UMC800 Modbus RTU Serial Communications User Manual 2 01 About This Document Abstract This document provides information specific to Honeywell s UMC800 Controller implementing the Modbus RTU Serial Communications protocol It includes a summary of all UMC800 data available primarily floating point for Modbus RTU access read and write including methods for access Contacts World Wide Web The following lists Honeywell s World Wide Web sites that will be of interest to our sensing and control customers Honeywell Organization WWW Address URL Corporate http www honeywell com Sensing and Control http www honeywell com sensing International http www honeywell com Business global asp Telephone Contact us by telephone at the numbers listed below Organization Phone Number United States and Canada Honeywell Asia Pacific Honeywell Asia Pacific Hong Kong Europe Honeywell PACE Brussels Belgium Latin America Honeywell Sunrise Florida U S A 1 800 423 9883 1 888 423 9883 1 800 525 7439 852 2829 8298 32 2 728 2111 954 845 2600 Tech Support Faxed documents Service 2 01 UMC800 Modbus RTU Serial Communications User Manual 1 2 Contents TET En 1 11 Modbus 1 WIRING emer EX n 2 2 1 COMM A
14. 159 Function Parameter Index Reference 8 59 PTMR Function Block Description The PTMR label stands for Periodic Timer This block is part of the Logic category It looks like this graphically on the Control Builder Dynamic Parameters RST EVENT PTMR1 1 Table 8 80 PTMR Dynamic Parameters Static Configuration Parameters None 160 Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list EVENT 1 BOOL lo R output RST 2 BOOL I R reset input UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 60 RCP Function Block Description The RCP label stands for Recipe Selector This block is part of the Setpoint Program category It looks like this graphically on the Control Builder RCP1 1 Dynamic Parameters Table 8 81 RCP Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list NUM 1 REAL I R recipe number LOAD 2 BOOL I R load command Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 161 Function Parameter Index Reference 8 61 RH Function Block Description The RH label stands for Relative Humidity This block is part of the Calculations category It looks like this graphically on t
15. 37 STAMD D E euin 183 zung UR na eer ER 184 third party software essen 38 47 Three Position Step Control 187 Time Proportional Output esses 186 Time Register Map 35 Toggle Flip Flop eere 184 E M 185 Total iu UR RERO IRR 185 Ica eene ena 186 TPSC BPOS serre deett 187 Track and Hold sus etes Rb 183 204 UMC800 Modbus RTU Serial Communications User Manual 2 01 TRIG hibet Pee bte 190 Trigger or 190 troubleshooting information s 200 U UP DOWN 191 UPDN 3 eet aeter tiers 191 Uploading Setpoint Programs 41 Uploading Setpoint Schedules 49 V Variable Register Map Addresses 34 Variables eene 68 197 Variables analog or digital 34 Velocity Rate Limiter eese 192 iiie uper eie 192 Write Alarm Acknowledge 22 76 Write General Reference 11 66 Write Scattered 32 Bit 71 Write Setpoint Program Segment 74 Write Setpoint Scheduler Segment 85
16. Parameter Addr Hex Notes SP Programmer Output 1E00 See Table 6 12 Current Segment Number 1E02 See Table 6 12 Program Elapsed Time 1E04 See Table 6 12 Segment Time Remaining 1E08 See Table 6 12 Current Segment Events 1E0A See Table 6 12 Status 1E0B See Table 6 12 Start write only 1E0C See Table 6 12 Hold write only 1E0D See Table 6 12 Advance write only 1 0 See Table 6 12 Reset write only 1EOF See Table 6 12 Current Program Number 1F00 See Table 6 13 Auxiliary Output 1F04 See Table 6 13 Parameters for the Profile You will also need to define the following for the parameters for the profile Parameter Addr Hex Notes Time Units 1F3A See Table 6 13 Ramp Units segments 1F3B See Table 6 13 Guaranteed Soak Type 1F3C See Table 6 13 Guaranteed Soak Low 1F06 See Table 6 13 Guaranteed Soak High 1F08 See Table 6 13 Prog Save Request 1F02 See Table 6 13 2 01 UMC800 Modbus RTU Serial Communications User Manual 39 Register Map for Process and Operation Type Variables Procedures for Downloading Setpoint Programs These steps are for programmer 1 For programmers 2 3 and 4 adjust the register addresses accordingly Table 6 9 is for downloading using Function Codes 3 4 6 16 Table 6 10 is for downloading using Function Codes 20 and 21 Table 6 9 Steps to Download a Setpoint Program using Modbus Function Codes 3 4 6 16 Step Action 1 Set the programmer to RESET by writing any n
17. Response message format for function code 20 14h Slave Function Byte Reference File File Starting Start Register Register UMC800 CRC CRC Address Code Count Type 00 Number Number Address Address Count Count Configuration High 00 Low 00 High 00 Low 00 High 00 Low 00 Message max 248 bytes ATTENTION For query and response Reference Type File Number Address and Register Count bytes should be set to 0 2 01 UMC800 Modbus RTU Serial Communications User Manual 59 Controller Configuration Messages Function Codes 20 and 21 Example Query with Read Contiguous Use the UMC800 message read contiguous 32 bit to read the PV working setpoint output and mode of the PID function block Assume the function block number of the PID block is 2 Assume a slave address 02 Format of query 02 14 0E 00 00 00 00 00 00 00 o2 o4 00 02 02 09 CRC CRC Contents from left to right Contents of Read Contiguous 32 bit Slave address 02 configuration message See Figure 7 1 Function code 14 read Byte count 14 decimal 0E hex Contents from left to right Reference type Header 00 File number high Function Code 02 File number low Number of values requested 04 Starting address high Filler Byte 00 Starting address low Table 02 parameters are dynamic Register count high see Table 8 77 Register count low Block number 02 In
18. 172 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 68 SPS Function Block Description The SPS label stands for Master Setpoint Scheduler This block is part of the Setpoint Scheduler category It looks like this graphically on the Control Builder SPS1 1 5 5001 STMR NSEG 5 SET PTME PV1 SP1 PV2 SP2 a PV3 SP3 a PV4 SP4 e PVE SP5 a PV6 SP6 a PV SP7 PV8 5 8 STRO STFL STA SEG Dynamic Contained Parameters Table 8 93 SPS Dynamic Contained Parameters Parameter Index Type Use R W Description status 0 C R block status see section 9 2 for code list save req 1 REAL C R W save current program request mailbox sta req 2 REAL C R W state change request pgm_req 3 REAL C R W program change request seg req 4 REAL C R W segment change request soaksp 8 5 12 REAL C R soak setpoint eu duration 13 REAL C R segment duration minutes hours PV 8 14 21 REAL C R value of PV being controlled by SP program adv_req 22 BOOL C R W segment advance request leading edge fGuarLimit 8 30 37 C R W guaranteed soak low high limit flogSeg 38 REAL C R W segment jumped to on a pulse to JOG input 2 01 UMC800 Mod
19. ATOUTHILIM 25 REAL auto tuning output high limit 0 to 100 ATOUTLOLIM 26 REAL auto tuning output low limit 0 to 10096 FUZZY 27 BOOL ON enables fuzzy logic overshoot suppression default OFF TUNESET2 28 BOOL Use tune set 2 default OFF GAIN2 29 REAL proportional gain 0 1 to 1000 or proportional band 0 1 to 1000 Tune Set 2 RATE2 30 REAL derivative time 0 or 0 1 to 10 minutes Tune Set 2 RESET2 31 REAL integration time 0 02 to 50 minutes or repeats per minute 50 to 0 02 repeats Tune Set 2 2 01 Function Parameter Index Reference Parameter Index Type Description use propband 32 BOOL Use Gain 0 or Proportional Band 1 use rpm 33 BOOL Use minutes 0 or repeats per minute 1 for integral constant sp rate dn 34 REAL Set point low rate of change limit 0 off to 99999 eu min sp rate up 35 REAL Set point high rate of change limit 0 off to 99999 eu min RATIO 37 REAL Gain value for Ratio PID 20 to 20 default 1 used when RA BIAS gt 0 LBIAS 38 REAL Bias value for Ratio PID when RA BIAS LOC_BIAS 99999 to 99999 0 devbar hi 39 REAL High scale value for deviation bar graph 0 to 99999 default 100 devbar_low 40 REAL Low scale value for deviation bar graph always devbar_hi deadband 43 REAL adjustable gap between forward and reverse motor operation 5 to 5 2 01 UMC800 Modbus RTU
20. Description status 0 C R block status see section 9 2 for code list OUT 1 REAL R output X 2 REAL I R Y 3 REAL I R Z 4 REAL I R Static Configuration Parameters Table 8 61 MSF Static Configuration Parameters Parameter Index Type Description Kg 0 REAL Orifice Constant 99999 to 999999 Kx 1 REAL Delta Pressure Scaler 99999 to 999999 Ky 2 REAL Pressure Scaler 99999 to 999999 Kz 3 REAL Temperature Scaler 99999 to 999999 Bx 4 REAL Pressure Bias 99999 to 999999 By 5 REAL Delta Pressure Bias 99999 to 999999 Bz 6 REAL Temperature Bias 99999 999999 DROPOFF 7 REAL low dropoff value EU 0 to 99999 default 0 2 01 UMC800 Modbus RTU Serial Communications User Manual 143 Function Parameter Index Reference 8 47 MUL Function Block Description The MUL label stands for Multiplication Mathematical Operation 2 Inputs This block is part of the Math category It looks like this graphically on the Control Builder Dynamic Parameters X MUL1 1 x OUT Table 8 62 MUL Dynamic Parameters Static Configuration Parameters None 144 Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL lo R output X 2 REAL I R input 1 Y 3 REAL I R input 2 UMC800
21. E TE me ACKNOWLEDGE SE UNACKNOWLEDGE 09 Acknowledge 0A Unacknowledge FUNCTION CODE 0A Historical Data Upload 4f response is Unacknowledge then an error code is returned instead of a function code SEQUENCE NUMBER low byte FILLER FOR WORD ALIGNMENT BUFFER OVERFLOW FLAG 0 Controller buffer not full 1 Controller buffer full some historical data is lost SEQUENCE NUMBER high byte FIRST RECORD BUFFER INDEX This designates where in the controller s historical buffer the first TABLE NUMBER historical record was retrieved 0 Alarm Historical Records Event Historical Records E HISTORICAL RECORD LENGTH OF FOLLOWING PACKET Number of bytes 6 per record packet Figure 7 8 Historical Data Upload See Table 7 5 on page 87 See Table 7 3 78 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Description The upload can span several transactions To keep the host and controller synchronized a sequence number is used The sequence number starts at 1 and is incremented by 1 on each additional transaction The controller echoes the sequence number back to the host so that the host knows that it is synchronized The host can request the retransmission of a packet that was not received correctly by asking for the same packet twice The UMC800 indicates the la
22. oo 42 sp 47 AE crc 6 7 Time Register Map Table 6 6 Time Register Map Addresses Address Access Notes hex decimal w oes Ly RW owo RW ins ww ren in ww resi 1 5 47142 Year R W 1970 to 2037 The values read are always in the range of 1970 to 2037 for a write 0 37 represents 2000 2037 70 99 represents 1970 1999 1BE6 47143 Week Day R 0 to 6 0 Sunday ATTENTION Clock registers must be written in a single transaction They can be written in one transaction of registers 47137 through 47142 or one transaction of registers 47137 through 47143 2 01 UMC800 Modbus RTU Serial Communications User Manual 35 Register Map for Process and Operation Type Variables 6 8 Alarm Status Register Map Summary 1BFO 1BF2 1BF3 1BF4 1BF5 1BF6 1BF7 36 The alarm status number is mapped to the position of the alarm in the Alarm Display Tag Group which is assigned with the Control Builder configuration tool starting with Group 1 up through Group 10 Group 1 applies to the first 12 alarms which are numbered starting at the top left position of the display Alarm 1 through to the bottom right position Alarm 12 Successive groups define alarms 13 through 120 Table 6 7 Alarm Status Register Map Addresses Address Register Channel Number Access Notes decimal hex 47153 Alarm Status 1 16 Bit Packed Bit 0 Alarm 1
23. 0x74 0xC0 0x75 0x80 0xB5 0x41 0x77 0x00 0xB7 OxCl 0xB6 0x81 0x76 0x40 0x72 0x00 OxB2 0xC1 0xB3 0x81 0x73 0x40 0xB1 0x01 0x71 0xC0 0x70 0x80 OxBO 0x41 0x50 0x00 0x90 OxCl 0x91 0x81 0x51 0x40 0x93 0x01 0x53 0 0 0x52 0x80 0x92 0x41 0x96 0x01 0x56 0xC0 0x57 0x80 0x97 0x41 0x55 0x00 0x95 0xC1 0x94 0x81 0x54 0x40 0x9C 0x01 0x5C 0xC0 0x5D 0x80 0x9D 0x41 0x5F 0x00 Ox9F OxCl 0x9E 0x81 OxSE 0x40 0x5A 0x00 0x9A OxCl 0x9B 0x81 0x5B 0x40 0x99 0x01 0x59 0 0 0x58 0x80 0x98 0x41 0x88 0x01 0x48 0 0 0x49 0x80 0x89 0x41 0x4B 0x00 Ox8B OxCl Ox8A 0x81 0x4A 0x40 0x4E 0x00 Ox8E OxCl Ox8F 0x81 Ox4F 0x40 Ox8D 0x01 Ox4D 0xC0 Ox4C 0x80 Ox8C 0x41 0x44 0x00 0x84 OxCl 0x85 0x81 0x45 0x40 0x87 0x01 0x47 0 0 0x46 0x80 0x86 0x41 0x82 0x01 0x42 0 0 0x43 0x80 0x83 0x41 0x41 0x00 0x81 0xC1 0x80 0x81 0x40 0x40 CRCHi Oxff CRCLo Oxff while length TempHi CRCHi TempLo CRCLo CRCHi table 2 message TempLo CRCLo TempHi table 2 message TempLo 1 message length CRC 0 CRCLo CRC 1 CRCHi return 2 01 UMC800 Modbus RTU Serial Communications User Manual 201 Index Index Block Parameters eese 68 2 Block Status Types eee 198 DANDI etes 9 BOOTS ed tines 109 DOR QUNM ROCKIN MEL MARINE
24. 149 149 150 151 152 153 154 155 156 157 158 ____158 160 161 162 163 163 164 165 166 167 168 170 171 172 173 174 174 175 176 177 178 179 180 181 182 183 184 185 185 186 187 188 190 191 191 2 01 Table 8 114 VLIM Dynamic Parameters Table 8 115 VLIM Static Configuration Parameters _ Table 8 116 WTUN Dynamic Parameters Table 8 117 WVAR Dynamic Parameters Table 8 118 XFR Dynamic Parameters Table 8 119 Static Configuration Parameters _ Table 8 120 XOR Dynamic Parameters Table 8 121 Variables Table 9 1 Block Status Values Table 10 1 Modbus Communications Troubleshooting 2 01 UMC800 Modbus RTU Serial Communications User Manual 192 192 193 194 195 195 196 197 198 200 xi Figures Figure 2 1 COMM port wiring 2 wire and 4 wire Figure 2 2 RS 485 port wiring 2 wire Figure 3 1 IEEE Floating Point Data format Figure 3 2 IEEE Floating Point Formats Figure 7 1 Read Contiguous 32 Bit Request and Response Message Formats Figure 7 2 Read Scattered 32 Bit Request and Response Message Formats Figure 7 3 Write Scattered 32 Bit Request and Response Message Formats Figure 7 4 Read Setpoint Program Segment Figure 7 5 Write Setpoint Program Segment Figure 7 6 Read Alarm Point Detail Figure 7 7 Write Alarm Acknowledge Figure 7 8 Historical Data Upload Figure 7 9 Historical Data Upload Acknowledge Figure 7 10 Event Summary Figure 7 11 Event Acknowledge Fi
25. 42 BOOL R set when program is in the GHOLD state READY 43 BOOL R set when program is in RESET state RUNI 44 BOOL R set when program is in RUN state HOLDI 45 BOOL R set when program is in HOLD state STOPI 46 BOOL R set when program is in STOP state 2 01 UMC800 Modbus RTU Serial Communications User Manual 171 Function Parameter Index Reference Dynamic Input Parameters Table 8 92 SPP Dynamic Input Parameters PVI 47 REAL 1 process variable EU for deviation check PV2 48 REAL I R 2 process variable EU for deviation check PV3 49 REAL I R 3 process variable EU for deviation check Aux PV 50 REAL I R Auxiliary process variable EU NPGM 51 REAL I R program number when SET is ON NSEG 52 REAL I R starting segment number when SET is ON SET 53 BOOL I R pulse input to load PGM and SSEG numbers JOG 54 BOOL I R pulse input for jog RSTRT 55 BOOL I R pulse input for restart action GHOLD 56 BOOL I R guaranteed soak hold for sync RESET 57 BOOL I R pulse input for reset HOLD 58 BOOL I R pulse input for hold RUN 59 BOOL I R pulse input for run ADV 60 BOOL I R pulse input for advance Static Configuration Parameters None
26. 5250 1 NEWSTART RESTART ALM_ACTIV ALM_UNACK HWOK LOWBTRY HITEMP COMFAIL BAD_BLOCK OFF_LINE Dynamic Parameters Table 8 40 FSYS Dynamic Parameters Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list REAL R number of control block cycles EXCTIME 3 REAL C control block execution time in seconds PK_EXCTIME 4 REAL C R peak control block execution time in seconds EXECFAULT 7 ON executive fault CYCTIME 8 REAL R control block cycle time in seconds CYCMINS 9 REAL R control block cycle time in minutes NEWSTART 10 R ON newstart RESTART BooL O ON warmstart ALM_ACTIV 12 ON active alarm ALM_UNACK 13 BOOL O unacknowledged alarm HWOK 14 BooL O no hardware faults LOWBTRY 15 BooL O battery is low HITEMP 16 BooL O ON highRJ temperature BAD BLOCK 18 O ON oneor more blocks have bad status Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 127 Function Parameter Index Reference 8 32 HLLM Function Block Description The HLLM label stands for High Low Limiter This block is part of the Auxiliary category
27. AUX3 3 REAL R Auxiliary output 3 AUXA REAL R Auxiliary output 4 AUXS 5 REAL R Auxiliary output 5 auxe 16 REAL R Auxiliary output 6 REAL R Auxiliary output 7 auxs ls REAL R Auxiliary output 8 STA 9 REAL I R Program state for configuration cosmetic only SEG 10 REAL I R Current segment number PGM 11 REAL I R Current program number APVI 12 REAL I R 1 Aux process variable EU APV2 13 REAL I R 2 Aux process variable EU APV3 14 REAL I R 3 Aux process variable EU APV4 15 REAL 1 4 Aux process variable EU APVS 16 REAL 1 R 5 Aux process variable EU APV6 17 REAL 1 R 6 Aux process variable EU APV7 18 REAL 1 R 7 Aux process variable EU APV8 19 REAL 1 R 8 process variable EU Static Configuration Parameters None 176 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 70 STFL Function Block Description The STFL label stands for the Setpoint Scheduler State Flags This block is part of the Setpoint Scheduler category It looks like this graphically on the Control Builder STFL1 1 GHOLD READY HOLD RUN STOP a STFL Dynamic Values Table 8 98 STFL Dynamic Values Parameter Index Type Use Description status 0
28. RTU Serial Communications User Manual 2 01 Modbus RTU Exception Codes Table 5 1 Modbus RTU Data Layer Status Exception Codes Exception Definition Description Code 01 Illegal Function The message received is not an allowable action for the addressed device 02 Illegal Data Address The address referenced in the function dependent data section of the message is not valid in the addressed device 03 Illegal Data Value The value referenced at the addressed device location is no within range 04 Slave Device Failure The addressed device has not been able to process a valid message due to a bad device state 06 Slave Device Busy The addressed device has ejected a message due to a busy state Retry later 07 NAK The addressed device cannot process the current Negative Acknowledge message Issue a PROGRAM POLL to obtain device dependent error data 09 Buffer Overflow The data to be returned for the requested number of registers is greater than the available buffer space Function Code 20 only 2 01 UMC800 Modbus RTU Serial Communications User Manual 25 Register Map for Process and Operation Type Variables 6 Register Map for Process and Operation Type Variables What s in this section This section describes all paramters accessible by Function Code 03 04 06 and 10h Section 5 1 gives a global overview of each function and its addresses registers Sections 5 2 through 5 17 contain the details
29. U 3 BOOL I R unlatch command Static Configuration Parameters None 136 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 40 MATH Function Block Description The MATH label stands for Free Form Math This block is part of the Math category It looks like this graphically on the Control Builder Dynamic Parameters MATH1 D E F 6 H Table 8 51 MATH Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 REAL R Result ERR 2 BOOL R Error indication A 3 REAL I R Input 1 B 4 REAL I R Input 2 C 3 REAL I R Input 3 D 6 REAL I R Input 4 E 7 REAL I R Input 5 F 8 REAL I R Input 6 G 9 REAL I R Input 7 H 10 REAL I R Input 8 Static Configuration Parameters None 2 01 UMC800 Modbus Serial Communications User Manual 137 Function Parameter Index Reference 8 41 MBR Function Block Description The MBR label stands for Modbus Read This block is part of the Communications category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 52 MBR Dynamic Parameters Parameter Index Type
30. process variable EU PV8 62 REAL R 8 process variable EU STRQ 63 REAL fee R Encoded state request from STSW block NPGM 64 REAL Program number when SET is NSEG 65 REAL Starting segment number when SET is ON SET 66 BOOL B R Pulse input to load PGM and SSEG numbers 174 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference Static Configuration Parameters Table 8 96 SPS Static Configuration Parameters Parameter Description 0 7 failsafe 8 REAL failsafe setpoint value eu 2 01 UMC800 Modbus RTU Serial Communications User Manual 175 Function Parameter Index Reference 8 69 SPSA Function Block Description The SPSA label stands for Setpoint Scheduler Auxiliary Setpoint Block This block is part of the Setpoint Schedulercategory It looks like this graphically on the Control Builder Dynamic Parameters ST APV1 AUXI 2 AUX2 AUXS3 4 AUXA e APV5 AUXS e APVG AUXG AUX7 APVB AUXS pr SEG GM SPSA1 1 Table 8 97 SPSA Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list 1 REAL R Auxiliary output 1 aux2 2 REAL R Auxiliary output 2
31. segment while in Hold mode Data ignored Signed 16 bit integer Write to location Resets Profile after program is first in Hold mode Data ignored 2 01 Register Map for Process and Operation Type Variables 6 12 Set Point Programmer Additional Values Register Map Table 6 13 Set Point Programmer Additional Values Register Map Addresses Address hex 1F00 47937 Current Program Number R W Floating Point This is optional indicates present profile number in use This also allows entry of a profile number from the UMC800 stored profile memory if profiles have been stored in the controller and will retrieve the profile data for a display showing a SP profile segment table Typically when recipes are downloaded from third party software this will be the number generated by the Program Save Request parameter Register Channel Number Access Notes decimal A write to this register loads the program into the set point programmer function block if O is written the function block s program is cleared Notes 2 1F02 47939 Program Save Request R W Floating Point Assigns profile parameters downloaded to a profile number such as 1 This is required by the UMC800 to be the last parameter downloaded This overwrites what is in this UMC800 SP Profile memory location on each download of a new SP profile Saves the program into the archive Writing to this register is prohibited in the run mode
32. the state of this pin is ignored bypass in 10 BOOL I R ON places block in the Bypass State and forces req out OFF ON to OFF transition returns block to previous state Hand Off Auto 130 UMC800 Modbus Serial Communications User Manual 2 01 Function Parameter Index Reference Static Configuration Parameters Table 8 45 HOA Static Configuration Parameters Description init hoa source 0 ULONG Initial HOA source for new state requests LOCAL REMOTE LOCAL default LOCAL init state 1 ULONG Start up state of the function block OFF HAND AUTO default AUTO feedbackSrcBlockNum 2 ULONG Block Number of the function block the feedback analog signal tag references feedbackSrcOutIndex 3 ULONG Output index of the function block the feedback analog signal tag references 2 01 UMC800 Modbus RTU Serial Communications User Manual 131 Function Parameter Index Reference 8 35 HSEL Function Block Description The HSEL label stands for High Selector This block is part of the Signal Selectors category It looks like this graphically on the Control Builder X HSEL1 ZH Digital Signal OUT Dynamic Parameters Table 8 46 HSEL Dynamic Parameters Parameter Index Type Use Description status 0 R block status see s
33. 0 to 35 0 default 20 0 REM_CO 44 BOOL Use CO input instead of local L CO default OFF FURNACE_FAC 45 REAL Furnace Factor in C 0 5 to 0 5 TOR ANTI SOOT 46 BOOL Anti soot SP limit enable default OFF TEMP LO LIM 48 REAL Trigger value for LOTEMP Boolean output 0 to 2500 F PERCENT H 50 REAL Percent hydrogen 1 to 100 default 40 108 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 16 CAVG Function Block Description The CAVG label stands for Continuous Average This block is part of the Calculations category It looks like this graphically on the Control Builder CAVG1 4 HOLD RST P_AVG Dynamic Parameters Table 8 20 CAVG Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list I AVG 1 REAL R instantaneous calculated average value P AVG 2 REAL R previous calculated average value INPUT 3 REAL I R Analog Input HOLD 4 BOOL I R When ON prevents the input samples from being accumulated and the timer will continue to decrement Outputs are held at their last calculated values RESET 5 BOOL I R OFF accumulate input and calculate average ON no accumulation or averaging hold last output On to Off transition initialize the average output to current input value initialize the periodic timer Stat
34. 152 Aun DENISE 2 Bumpless Analog Transfer Switch 195 C CARB see 106 QUERENS 145 Ean POONA 200 MORE 153 CAY NS 108 181 D LIR Coding system sss 4 8 COMM A erede 2 COMM A wiring eee 2 SAND siepe nere RES 98 Comparison 2 2 7 110 JD 117 Configuration Message Formats 68 joo 120 Configuration Parameters 58 154 Continuous 109 Controlling the Program eese 39 A CPU Option weal eee 2 Abbreviations nnne 88 CRC 16 44 201 91 Absolute Valier erreren danen 91 D VN BI D AE E E E E E eae 92 Data Layer EE TLE E VE ET E MS RE Re 5 Addition Mathematical Operation 2 Inputs 92 EN 111 Addition Mathematical Operation 4 Inputs 93 DEOMP 113 i M 94 114 Alarm Mask Bytes 4 00 40 0 77 Deviation Compare sse 113 Alarm Status Register Map Addresses 36 Device Control seen 111
35. 16 143 8F 16 159 9F 16 175 AF 16 191 BF 15 142 8E 15 158 15 174 15 190 14 141 8D 14 157 9D 14 173 AD 14 189 BD 13 140 8C 13 156 9C 13 172 AC 13 188 BC 12 139 8B 12 155 9B 12 171 AB 12 187 BB 11 138 8A 11 154 9A 11 170 AA 11 186 BA 10 137 89 10 153 99 10 169 A9 10 185 B9 9 136 88 9 152 98 9 168 A8 9 184 B8 8 135 87 8 151 97 8 167 7 8 183 7 7 134 86 7 150 96 2 166 A6 7 182 B6 6 133 85 6 149 95 6 165 AS 6 181 B5 5 132 84 5 148 94 5 164 A4 5 180 B4 4 131 83 4 147 93 4 163 4 179 B3 3 130 82 3 146 92 3 162 A2 3 178 B2 2 129 81 2 145 91 2 161 Al 2 177 Bl 1 128 80 1 144 90 1 160 AO 1 176 BO Slot 13 Slot 14 Slot 15 Slot 16 CH Address CH Address CH Address CH Address Dec Hex Dec Hex Dec Hex Dec Hex 16 207 CF 16 223 DF 16 239 EF 16 255 FF 15 206 CE 15 222 DE 15 238 EE 15 254 FE 14 205 CD 14 221 DD 14 237 ED 14 253 FD 13 204 CC 13 220 DC 13 236 EC 13 252 FC 12 203 CB 12 219 DB 12 235 EB 12 251 FB 11 202 CA 11 218 DA 11 234 EA 11 250 FA 10 201 C9 10 217 D9 10 233 E9 10 249 F9 9 200 C8 9 216 D8 9 232 E8 9 248 F8 8 199 C7 8 215 D7 8 231 E7 8 247 F7 7 198 C6 7 214 D6 7 230 E6 7 246 F6 6 197 C5 6 213 D5 6 229 E5 6 245 F5 5 196 C4 5 212 D4 5 228 E4 5 244 F4 4 195 C3 4 211 D3 4 227 4 243 3 194 C2 3 210 D2 3 226 E2 3 242 F2 2 193 C1 2 209 D1 2 225 E1 2 241 F1 1 192 CO 1 208 DO 1 224 EO 1 240 FO UMC800 Modbus RTU Serial Communications User Manual 15
36. 1F04 47941 Auxiliary Output R Floating Point 1F06 47943 Guaranteed Soak Low R W Floating Point Presets High Deviation setting in engr units Writing to this register is only permissible in the reset or ready mode R W Floating Point Presets Low Deviation setting in engr units Writing to this register is only permissible in the reset or ready mode R W Floating Point Writing to this register is only permissible in the reset or ready mode R W Floating Point Writing to this register is only permissible in the reset or ready mode R W Floating Point Writing to this register is only permissible in the reset or ready mode 1F08 47945 Guaranteed Soak High 1FOC 47949 Display High Range Limit 1FOE 47951 Display Low Range Limit 47947 Restart Ramp Rate 2 01 UMC800 Modbus RTU Serial Communications User Manual 43 Register Map for Process and Operation Type Variables Address Channel Number Access Notes hex Register decimal R W Floating Point Writing to this register is only permissible in the reset or ready mode IFIO 47953 Jog Segment R W Floating Point 0 indicates no loop Writing to this register is only permissible in the reset or ready mode IFI2 47955 Loop Start R W Floating Point 0 indicates no loop Writing to this register is only permissible in the reset or ready mode 1F14 47957 Loop End R W Floating Point 0
37. 2 A BOOL I R input A 3 B BOOL I R input B 4 SA BOOL I R Select A Static Configuration Parameters None 2 01 0 800 Modbus RTU Serial Communications User Manual 121 Function Parameter Index Reference 8 28 FGEN Function Block Description The FGEN label stands for Function Generator 10 Segment This block is part of the Auxiliary category It looks like this graphically on the Control Builder FGEN1 1 F X OUT Dynamic Parameters Table 8 35 FGEN Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 REAL R output X 2 REAL I R input Static Configuration Parameters Table 8 36 FGEN Static Configuration Parameters Parameter Index Type Description xb 0 0 REAL X breakpoint 1 99999 to 999999 xb 1 1 x breakpoint 2 99999 to 999999 xb 2 2 REAL x breakpoint 3 99999 to 999999 xb 3 3 REAL x breakpoint 4 99999 to 999999 xb 4 4 REAL x breakpoint 5 99999 to 999999 xb 5 5 REAL x breakpoint 6 99999 to 999999 xb 6 6 REAL x breakpoint 7 99999 to 999999 xb 7 7 REAL x breakpoint 8 99999 to 999999 xb 8 8 REAL x breakpoint 9 99999 to 999999 xb 9 9 REAL x breakpoint 10 99999 to 999999 xb 10 10 REAL x breakpoint 11
38. 21 BOOL I R Output Track Command OFF BCI 23 REAL I R Back Calculation Input 96 BIAS 24 REAL I R Remote bias value for ratio PID Table 8 78 PID Modes Mode Decimal value TEEE hex value RSP AUTO 0 0 00000000 RSP MAN 1 0 3F800000 RSP IMAN 2 0 40000000 RSP LO 3 0 40400000 LSP AUTO 4 0 40800000 LSP MAN 5 0 40A00000 LSP IMAN 6 0 40C00000 LSP LO 7 0 40E00000 Static Configuration Parameters Table 8 79 PID Static Configuration Parameters Parameter Index Type Description GAIN 0 proportional gain 0 1 to 1000 or proportional band 0 1 to 100046 Tune Set 1 RATE 1 derivative time 0 or 0 1 to 10 minutes Tune Set 1 RESET 2 REAL integration time 0 or 0 02 to 50 minutes or repeats per minute 0 or 0 02 to 50 repeats Tune Set 1 pv_hi 4 REAL pv High Range value 99999 to 99999 default 100 pv_lo 5 REAL pv Low Range value 99999 to 99999 default 0 sp hi lim 11 REAL set point high limit 99999 to 99999 default 100 158 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference Parameter outlolim 15 Index Type Description sp lo lim 12 REAL set point low limit 99999 to 99999 default 0 outhilim 14 REAL output high limit 5 to 105 output low limit 5 to 105 failsafe 16 failsafe output value 5 to 105 default 0 al sp 4 17 20 REAL alarm set po
39. 77 Block number 07 Index 0A WSP See Table 8 77 Block number 07 Index OB output See Table 8 77 Block number 07 Index OC mode See Table 8 77 62 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Example Response of Read Scattered Continuing with the example query above the following response would be returned assuming the following e query was acknowledged e output 500 e PID2 PV 500 2 WSP 520 PID2 output 10 e PID2 mode is LSP AUTO e PID7 PV 200 e PID7 WSP 100 e PID7 output 80 e PID7 mode is LSP AUTO Format of response 02 14 2E 00 00 00 00 00 00 00 Contents of Read Scattered 32 bit CRC CRC configuration message See below Contents from left to right Slave address 02 Function code 14 read Byte count 46 decimal 2E hex Reference type File number high File number low Starting address high Starting address low Register count high Register count low Contents of Read Scattered 32 bit configuration message See Figure 7 2 9 00 0043 00 44 02 00 00 41 2000 0040 0 00 00 4348 0000421 800 00 42 A000 00 40 80 00 00 Contents from left to right Acknowledge 09 Function Code 03 Number of values returned 09 Value of Al1 output 43FA0
40. 8 13 AMB Static Configuration Values pv hi 0 REAL pv High Range value 5 to 10596 pv lo 1 REAL pv Low Range value 5 to 10596 outhilim 5 REAL output high limit 5 to 105 outlolim 6 REAL output low limit 5 to 105 failsafe 7 REAL failsafe output value 5 to 105 default 0 al sp 4 8 11 REAL alarm set points 115 allsp2 al2spl al2sp2 99999 to 99999 default 0 al_hyst 16 REAL alarm hysterysis 0 to 5 100 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 11 AO Function Block Description The AO label stands for Analog Output This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 14 AO Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list IN X 1 REAL I R analog input value eu Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 101 Function Parameter Index Reference 8 12 ASYS Function Block Description The Analog System Status Block ASYS is a function block and is part of the Alarm Monitor category It provides read access to controller status values including those related to the Analog execution cycle The output may be connected to function block inputs The outputs m
41. 8 39 27 8 55 37 7 6 6 7 22 16 7 38 26 7 54 36 6 5 5 6 21 15 6 37 25 6 53 35 5 4 4 5 20 14 5 36 24 5 52 34 4 3 3 4 19 13 4 35 23 4 51 33 3 2 2 3 18 12 3 34 22 3 50 32 2 1 1 2 17 11 2 33 21 2 49 31 1 0 0 1 16 10 1 32 20 1 48 30 Slot 5 Slot 6 Slot 7 Slot 8 CH Address CH Address CH Address CH Address Dec Hex Dec Hex Dec Hex Dec Hex 16 79 4F 16 95 5F 16 111 6F 16 127 7F 15 78 4E 15 94 5E 15 110 6E 15 126 7E 14 77 4D 14 93 5D 14 109 6D 14 125 7D 13 76 4C 13 92 5C 13 108 6C 13 124 7C 12 75 4B 12 91 5B 12 107 6B 12 123 7B 11 74 4A 11 90 5A 11 106 6A 11 122 7A 10 78 49 10 89 59 10 105 69 10 121 79 9 72 48 9 88 58 9 104 68 9 120 78 8 71 47 8 87 57 8 103 67 8 119 77 7 70 46 7 86 56 7 102 66 7 118 76 6 69 45 6 85 55 6 101 65 6 117 75 5 68 44 5 84 54 5 100 64 5 116 74 4 67 43 4 83 53 4 99 63 4 115 73 3 66 42 3 82 52 3 98 62 3 114 72 2 65 41 2 81 51 2 97 61 2 113 71 1 64 40 1 80 50 1 96 60 1 112 70 UMC800 Modbus RTU Serial Communications User Manual Slots 9 through 16 on next page 2 01 2 01 Modbus RTU Function Codes Slot 9 Slot 10 Slot 11 Slot 12 Address Address Address Address Dec Hex Dec Hex Dec Hex Dec Hex
42. 9 2 for code list OUT D 1 REAL R Physical output value IN D 2 BOOL I R Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 119 Function Parameter Index Reference 8 26 8 DO Function Block Description The 8DO label stands for Eight Point Digital Outputs This block is part of the Logic and Fast Logic categories It looks like this graphically on the Control Builder 8001 1 8002 1 Nx e 0000 0000 e 0000 0000 0000 e 0000 0000 OR 4 0000 0000 0000 0000 e 0000 lt 0000 lt 0000 0000 e 0000 Dynamic Parameters Table 8 33 Eight DO Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list Static Configuration Parameters None 120 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 27 DSW Function Block Description The DSW label stands for Digital Switch This block is part of the Logic or Fast Logic categories It looks like this graphically on the Control Builder OR Fast Logic Dynamic Parameters Table 8 34 DSW Dynamic Parameters Index Parameter Type Use R W Description 0 status R block status see section 9 2 for code list 1 OUT BOOL R output
43. CO 0 Local percent carbon monoxide 2 0 to 35 0 default 20 0 REM CO 1 BOOL Use CO input instead of local L CO default OFF FURNACE FACTOR 2 REAL Furnace Factor in C 0 5 to 0 5 ANTI SOOT 3 BOOL Anti soot SP limit enable TEMP LO LIM 5 REAL Trigger value for LOTEMP Boolean output 0 to 2500 F 2 01 UMC800 Modbus RTU Serial Communications User Manual 115 Function Parameter Index Reference 8 22 DI Function Block Description The DI label stands for Discrete Input This block is part of the Logic or Fast Logic categories It looks like this graphically on the Control Builder DM 1 DIZ 2 0000 1 0000 1 55 Fast Logic Dynamic Parameters Table 8 29 DI Dynamic Parameters Description Parameter Index Type Use R W status 0 REAL C R block status see section 9 2 for code list OUT D 1 BOOL O R Static Configuration Parameters None 116 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 23 8 DI Function Block Description The 8DI label stands for Eight Point Digital Inputs This block is part of the Logic and Fast Logic categories It looks like this graphically on the Control Builder Dynamic Parameters SDI1 0000 0000 0000 0000 0000 0000 0000 0000 Table 8 30 Eight DI Dynamic Parameters 1 8012 0000 0000 0000 OR 0000 0000 0000 0000 0000 Paramet
44. Codes 20 and 21 7 4 8 Write Alarm Acknowledge Introduction Figure 7 7 shows the Write request and response format for Function Code 6 Acknowledge Alarms This operation lets you acknowledge one or more alarms in an alarm group Message Formats Header Byte 1 Byte2 Byte3 Byte4 Byte5 Byte6 Reguestmessage JL JL JL JL FILLER BYTE For Word Alignment GROUP NUMBER GROUP NUMBER Most significant byte Least significant byte Response Message irai iis 22 ACKNOWLEDGE EE UNACKNOWLEDGE 09 Acknowledge Unacknowledge FUNCTION CODE 6 Acknowledge Alarms If response is Unacknowledge then an error code is returned instead of a function code READ WRITE 2251 ALARM MASK 80 Write Most significant byte FUNCTION CODE 6 Acknowledge alarms ALARM MASK Least significant byte Figure 7 7 Write Alarm Acknowledge See Table 7 5 on page 87 See Table 7 2 76 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Alarm Mask The bits in the Alarm Mask bytes correspond to the alarms in the group Setting a bit to 1 indicates that the corresponding alarm is to be acknowledged Table 7 2 Contents of Alarm Mask Bytes Contents of Byte 5 least significant byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Alarm 8 Alarm 7 Alarm 6 Alarm 5 Alarm 4
45. Connector aiU ER E p ree sp ean ante ieee seid 2 2 20 RS 485 serial commu tications eee tidie tete ite eer net eevee ea d ge 3 MODBUS MESSAGE FORMAT nnmnnn 4 3 1 Modbus RTU Link Layet etie eret erepti ete tci po tae ti Ei EE e en ED ERR bo scones 4 2222 Modbus REU Data uoo dece de E dte dep leve ee 5 3 3 IEEE 32 bit Floating Point Register 6 MODBUS RTU FUNCTION 5 44 4421 1 1011 nnne 11 4 Function Code 01 Read Digital Output 13 4 2 Function Code 02 Read Digital Input Status esee eren rennen 16 4 3 Function Codes 03 04 Read Data Registers ices eeesceeeeeeeseeeseeesceeseeceaecesecesecnsaecaecsaeenseenes 17 4 4 Function Code 05 Force Single Digital Output eese eene 18 4 5 Function Codes 06 Preset Single 1 enne nen 19 4 6 Function Code 08 Loopback Message sees ener nne 20 4 7 Function Codes 16 10h Preset Multiple Registers seen 21 4 8 Function Code 17 11h Report UMC800 ID sese enne eene entere 22 MODBUS RTU EXCEPTION 5 1 1 nennen nnne 24 REGISTER MAP FOR PROCESS AND OPERATION TYPE VARIABLES 26 6 1 Register Map
46. EN OUT a CNT DN RPRES PREL Dynamic Parameters Table 8 86 RTMR Dynamic Parameters Parameter Index Type Use R W Description status REAL block status see section 9 2 for code list ur p mee fe feen fo r omanneen REAL R W Remote preset 0 0 99999 9 if count up then represents Stop value in seconds if count down then represents Start value in seconds BOOL OFF to ON transition Reset BOOL ENABLE ON run timer is counting OFF timer is stopped output TIMER held at last value PREL Preload if count up then represents Start value in seconds if count down then represents Stop value in seconds Range 0 0 99999 9 CNT DN 7 BOOL ON count down OFF count up 2 01 UMC800 Modbus RTU Serial Communications User Manual 165 Function Parameter Index Reference Static Configuration Parameters 0 8 87 RTMR Static Configuration Parameters Parameter Index index Type Description Ipres Local preset 0 0 99999 9 if count up then Stop value in seconds if count down then Start value in seconds remote 1 BOOL ON use Remote Preset OFF use Local Preset use preload 2 BOOL Use external preload rather than zero for starting or stopping 166 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 65 SCB
47. Format 84 Scheduler Segment Register Map 47 Scheduler Segment Register Map Addresses 53 Scheduler Value Register Map 47 Scheduler Value Register Map Addresses 50 Segment 2 2 222212 46 54 Segment Register Map Addresses 45 47 Set Point Program Register 38 Set Point Programmer Additional Values 43 Set Point Programmer Segment Map Addresses 45 Set Point Programmer Value Register Map 42 Setpoint Programmer esee 170 Setpoint Programmer Segment Data 73 Setpoint Programming Events 168 Signal Tag Register Map 37 Signal ta gs rai ceto eot e Re 37 Slave Device 4 2 2 111 25 Slave Device Failure sese 25 SPEV AREE ote en 168 SPP i ies 170 SORT itd Ua ome BUR HDI gae 179 Square Root peteret 179 Status Type and Definition 198 Status Values eedem oa ite EE e 198 SUB i ah aes 180 193 194 Subtraction mathematical operation 2 Inputs 180 Subtraction mathematical operation 4 Inputs 781 182 Tagged Signal Register Map Addresses
48. Guaranteed Soak Limit 2 RW Floating Point 302E 52335 Guaranteed Soak Limit 3 RW Floating Point 3030 52337 Guaranteed Soak Limit 4 RW Floating Point 3032 52339 Guaranteed Soak Limit 5 R W Floating Point 3034 52341 Guaranteed Soak Limit 6 R W Floating Point 3036 52343 Guaranteed Soak Limit 7 RW Floating Point 3038 52345 Guaranteed Soak Limit 8 RW Floating Point 303A 52347 Jog Segment RW Floating Point Defines segment for schedule to jog based on an enable to an input pin 3049 52362 Current Segment Events R Bit Packed Indicates status of events Bit 0 Event 1 Bit 15 Event 15 0 Event OFF 1 Event ON Bit Packed Bit 0 1 Ready 1 1 1 Hold 1 End 1 Time Units in Seconds 1 Time Units in Minutes 1 Time Units in Hours If bit 2 Set 0 Operator hold 1 Guaranteed soak hold 8 15 Reserved Signed 16 bit integer ACE et Write to location Starts Schedule Data ignored Signed 16 bit integer Write to location Holds Schedule Data ignored UMC800 Modbus RTU Serial Communications User Manual 51 Register Map for Process and Operation Type Variables Address Access Register Channel Number Notes hex decimal 304D 52366 Advance W Signed 16 bit integer Write to location Advances Schedule Data ignored 304E 52367 Reset W Signed 16 bit integer Write to location Resets Schedule Data ignored 304F 52368 T
49. Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 48 4MUL Function Block Description The 4MUL label stands for Multiplication Mathematical Operation 4Inputs This block is part of the Math category It looks like this graphically on the Control Builder Y 4MUL1 al 2 _ OUT Dynamic Parameters Table 8 63 4MUL Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL R output A 2 REAL I R input 1 B 3 REAL I R input 2 C 4 REAL I R input 3 D 2 REAL I R input 4 Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 145 Function Parameter Index Reference 8 49 NEG Function Block Description The NEG label stands for Negate This block is part of the Calculations category It looks like this graphically on the Control Builder Dynamic Parameters NEG1 1 Table 8 64 NEG Dynamic Parameters Static Configuration Parameters None 146 Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 REAL lo R result X 2 REAL I R input UMC800 Modbus RTU Serial Communications User Manual 2 01 Fu
50. Parameter Index Reference 8 52 OFDT Function Block Description The OFDT label stands for the Off Delay Timer This block is part of the Fast Logic category It looks like this graphically on the Control Builder Dynamic Parameters OFDT4 1 RST Table 8 68 OFDT Dynamic Parameters Parameter Index Type Use Description status 0 R block status see section 9 2 for code list OUT 1 BOOL W output RST RUN 2 BOOL I R ON reset OFF run Static Configuration Parameters Table 8 69 ONDT Static Parameters Parameter Index Type Description Delay o REAL Delay Time 0 seconds to 9999 9 2 01 UMC800 Modbus Serial Communications User Manual 149 Function Parameter Index Reference 8 53 ON OFF Function Block Description The ON OFF label stands for the On Off Control function This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Parameters ONOFF1 1 ONOFFOO1 RSP WSP TRV ALI TRC 2 Swi MDROI MODE BCO Table 8 70 ON OFF Dynamic Parameters Parameter Index Type E Use R W Description status 0 REAL R block status see section 9 2 for code list Isp 1 REAL IC RWW local set point eu Isp2 2 REAL local set point 2 eu rem_mode 3 BOOL remote set poin
51. R Input 8 UMC800 Modbus RTU Serial Communications User Manual 105 Function Parameter Index Reference 8 15 CARB Function Block Description The CARB label stands for Carbon Potential This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 18 CARB Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 6 2 for code list Isp 1 REAL C local set point eu Isp2 2 REAL C local set point 2 eu rem mode 3 BOOL remote set point mode request OFF man mode 4 BOOL C manual output mode request OFF man out 5 REAL C manual output value 5 to 105 96 tune req 6 BOOL limit cycle auto tuning request OFF ON rsp_eu 7 REAL C IR remote set point in eu for monitoring deviation 8 REAL C IR Deviation in eu for monitoring PV 9 REAL ES Calculated Process Variable Percent Carbon for monitoring DSP 10 REAL Display Set Point in eu for monitoring OUT 11 REAL O IR control output 5 to 105 96 MODE 12 REAL IR actual mode encoded 13 BOOL O IR Alarm 1 AL2 14 BOOL O R Alarm 2 DEWPT 15 REAL IR Calculated dewpoint replaces BCO ATI 16 BOOL Auto Tune Indicator ON Auto Tune in progress 02 17 REAL I IR Oxygen sensor input 0 to 100 RSP 18 REAL I IR Remote Set Point or eu per sp units 106 UMC800 Modbus RTU
52. R W R W R W R W Notes Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Floating Point Note 1 Number of times to recycle Floating Point Note 2 Floating Point Note 2 Note 1 Writing to this register is not permissible in the run mode Note 2 Writing to this register is only permissible in reset or ready mode 6 17 1 Example for Determining a Segment Register 2 01 To change the ramp value for Output 6 in segment 5 of setpoint scheduler 3 the register address is determined as follows Step 1 Use Table 6 1 to determine the start address for scheduler 3 s schedule The value is 4A00 Hex Step 2 Calculate the offset address for segment 5 in a schedule This is calculated as Segment offset address segment number 1 48 5 1 48 192 or Hex Step 3 Use the table above to determine the register offset for Output 6 ramp value The value is 16 Hex Step 4 Calculate the address by adding the results of steps 1 2 and 3 to determine the register address Register address Schedule program 3 s schedule start address Segment 5 offset address Output 6 ramp value register offset 4A00 C0 16 4AD6 UMC800 Modbus RTU Serial Communications User Manual 55 Register Map for Process and Operation Type Variables 6 18 Hand OFF Auto Control Group R
53. Serial Communications User Manual 2 01 Function Parameter Index Reference Parameter Index Use R W Description FFV 19 1 Feed Forward Value TRV 20 I Output Track Value 96 TRC 21 I Output Track Command OFF BCI 23 I Back Calculation Input 96 BIAS 24 I Remote bias value for ratio PID TEMP 26 I R Temperature input F or per USE METRIC 27 1 R Percent carbon monoxide Static Configuration Parameters Table 8 19 CARB Static Configuration Parameters 2 01 UMC800 Modbus RTU Serial Communications User Manual Parameter Index Type Description GAIN 0 proportional gain 0 1 to 1000 or proportional band 0 1 to 100096 Tune Set 1 RATE 1 REAL derivative time 0 or 0 1 to 10 minutes Tune Set 1 RESET 2 REAL integration time 0 or 0 02 to 50 minutes or repeats per minute 0 or 0 02 to 50 repeats Tune Set 1 pv hi 4 REAL pv High Range value 99999 to 99999 default 100 pv lo 5 REAL pv Low Range value 99999 to 99999 default 0 sp hi lim 11 REAL set point high limit 99999 to 99999 default 100 sp lo lim 12 REAL set point low limit 99999 to 99999 default 0 outhilim 14 REAL output high limit 5 to 105 outlolim 15 REAL output low limit 5 to 105 failsafe 16 REAL failsafe output value 5 to 105 default 0 al sp 4 17 20 REAL alarm set points allspl allsp2 al2spl
54. Status Bit 1 Alarm 2 Status Bit 15 Alarm 16 Status 0 Alarm OFF 1 Alarm ON 47154 Alarm Status 17 32 Bit Packed Bit 0 Alarm 17 Status Bit 1 Alarm 18 Status Bit 15 Alarm 32 Status 0 Alarm OFF 1 Alarm ON 47155 Alarm Status 33 48 Bit Packed Bit 0 Alarm 33 Status Bit 1 Alarm 34 Status Bit 15 Alarm 48 Status 0 Alarm OFF 1 Alarm ON Alarm Status 49 64 Alarm Status 65 80 Alarm Status 81 96 Alarm Status 97 112 Alarm Status 113 120 Bit Packed Bit 0 Alarm 113 Status Bit 1 Alarm 114 Status Bit 2 Alarm 115 Status Bit 3 Alarm 116 Status Bit 4 Alarm 117 Status Bit 5 Alarm 118 Status Bit 6 Alarm 119 Status Bit 7 Alarm 120 Status Bits 8 15 Unused 0 Alarm OFF 1 Alarm ON UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables 6 9 Signal Tag Register Map Summary Signal tags are connected to output pins of function blocks representing analog or digital parameters and are read only parameters The signal tag number in the table corresponds to the signal tag number in the UMC 800 Control Builder configuration You will need to access the Control Builder configuration Tag Properties printout to identify the Signal Tag numbers desired The Modbus address is also supplied in this printout for each signal tag Function Code Support Read Function Code 3 Table 6 8 Signal Tag Register Map Addresses
55. Switch 8 63 RTMR Resettable Timer 8 64 SCB Scale and Bias 8 65 SPEV Setpoint Programmer Event Decoder 8 66 SPP Setpoint Programmer 8 67 SPS Setpoint Scheduler 8 68 SPSA Setpoint Scheduler Auxiliary Setpoint 8 69 STFL Setpoint Scheduler State Flag 8 70 STSW Setpoint Scheduler State Switch 8 71 SQRT Square Root 8 72 SUB Subtraction 2 Inputs 8 73 4SUB Subtraction 4 Inputs 8 74 SW Analog Switch 8 75 TAHD Track and Hold 8 76 TGFF Toggle Flip Flop 8 77 TOT Totalizer 8 78 TPO Time Proportional Output 8 79 TPSC Three Position Step Control 8 80 TRIG Trigger 8 81 UPDN UP Down Counter 8 82 VLIM Velocity rate Limiter 8 83 WTUN Write Tuning Constant 8 84 WVAR Write Variable 8 85 XFR Transfer Switch 8 86 XOR Exclusive OR 8 87 Variables Assigned Function Block Number 251 8 88 2 01 Function Parameter Index Reference 8 2 ABS Function Block Description The ABS label stands for Absolute Value This block is part of the Calculations category It looks like this graphically on the Control Builder X ABS1 1 OUT Dynamic Parameters Table 8 2 ABS Dynamic Parameters Parameter Index Type Use R W Description block status see section 9 2 for code list Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 91 Function Parameter Index Reference 8 3 ADD Functi
56. Table 9 1 lists the Status Values that could be returned when you request Index Number 0 in a dynamic table for a block in your request message The Status Type and Definition for each is also listed Table 9 1 Block Status Values Floating Point Status Type Definition Value 0 0 UNEXECUTED The block was never executed 100 0 OK Normal successful execution 200 0 FORCED Output is being forced 300 0 DIVBYO Attempted divide by 0 400 0 BAD ICNT The input count passed to the block is greater than the number of inputs for the block 500 0 BAD TYPE 17 block has an illegal control block type assigned o it 600 0 BAD SSR Invalid signal source record 700 0 BAD PV PV is out of range 800 0 BAD PGM Setpoint program is invalid or unused 900 0 BAD SGM Setpoint program segment number is invalid or out of range 1000 0 BAD VPID Illegal variable parameter index 1100 0 BAD CVID Illegal configuration value index 1200 0 BAD BLKNUM Illegal control block number 198 UMC800 Modbus RTU Serial Communications User Manual 2 01 Block Status Types 2 01 Floating Point Status Type Definition Value 1300 0 NEG SQRT Attempted square root of a negative number 1400 0 BAD TUNVAL Bad tuning constant value 1500 0 COMM FAIL cannot communicate with device 1600 0 DEV FAIL Device reports self test failure 1700 0 BAD DEVID Invalid device ID 1800 0 BAD
57. Use R W Description status 0 REAL C R block status see section 9 2 for code list data val 16 1 16 REAL O R last read value from selected address Static Configuration Parameters Table 8 53 MBR Static Parameters Parameter Type Description reg used 16 64 79 BOOL ON register request is assigned to the RDx pin 138 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 42 MBS Function Block Description The MBS label stands for Modbus Slave Status This block is part of the Communications category It looks like this graphically on the Control Builder MBS1 1 5001 NO SCAN BAD COM EN3 WRI RD1 WR2 RD2 1 83 RD3 e WR4 RD4 ADDR Dynamic Parameters Table 8 54 MBS Dynamic Parameters Parameter Index Type Use R W Description status R block status see section 9 2 for code list no scan R ON device is out of scan OFF device is in scan bad_com R ON bad quality or device not defined OFF good communications r_val 4 R last read value from selected address w_val 4 R value to be written to the selected register address enable 4 R ON data value is written once per scan Static Configuration Parameters Table 8 55 MBS Static Parameters Parameter Index Type Description w reg used 4 27 30 BOOL ON r
58. Variables 6 11 Set Point Programmer Value Register Map Table 6 12 Set Point Programmer Value Register Map Addresses Address hex Register decimal Channel Number Access Notes 1 00 47681 Set Point Programmer Output Floating Point in Engineering Units 1E02 47683 Current Segment Number R W Floating Point 1 Max Segment 50 A write changes the segment number 1E04 47685 Program Elapsed Time Floating Point in Minutes Continues to run when in Hold 1 08 47689 Segment Time Remaining Floating Point in Minutes 1E0A 1EOB 1E0C 1 0 1EOE 1EOF 42 47691 Current Segment Events Status Run Hold Advance Reset UMC800 Modbus RTU Serial Communications User Manual Bit Packed Indicates status of events 1 16 in one register Bit 0 Event 41 Bit 15 Event 16 0 Event OFF 1 Event ON Bit Packed Bit 0 1 Ready 1 1 1 Hold 1 End 1 Reserved 1 Time Units in Minutes 1 Time Units in Hours Ramp Units 0 Time 1 Rate 8 Reserved 9 If bit 2 Set 0 Operator hold 1 Guaranteed soak hold 10 0 Current segment is a soak 1 Current segment is a ramp 11 15 Reserved Signed 16 bit integer mg Write to location Starts Profile Data ignored Signed 16 bit integer Write to location Holds Profile Data ignored Signed 16 bit integer Write to location Advances Profile one
59. Write Scattered 32 bit Values e Write Setpoint Program Segment e Write Alarm Acknowledge e Historical Data Upload Acknowledge e Event Acknowledge e Write Setpoint Scheduler Segment Query The query message uses the standard function code 21 header followed by the UMC800 configuration message The Byte Count equals the total number of bytes between the Byte Count and the CRC This number cannot exceed 255 therefore the configuration message content is limited to 248 bytes maximum Query message format for function code 21 15h Slave Function Byte Reference File File Starting Start Register Register UMC800 CRC CRC Address Code Count Type 00 Number Number Address Address Count Count Configuration High 00 Low 00 High 00 Low 00 High 00 Low 00 Message max 248 bytes Response The response is the standard function code 21 header followed by the UMC800 configuration message Byte Count is adjusted to account for the number of bytes in the response Response message format for function code 21 15h Slave Function Byte Reference File File Starting Start Register Register UMC800 CRC CRC Address Code Count Type 00 Number Number Address Address Count Count Configuration High 00 Low 00 High 00 Low 00 High 00 Low 00 Message max 248 bytes ATTENTION In query and response Reference Type File Number Address and Register Count byt
60. X 2 slop aR aa ae INN 195 oat n RERO REPE TRES 196 2 01 UMC800 Modbus RTU Serial Communications User Manual 205 Index 206 UMC800 Modbus RTU Serial Communications User Manual 2 01 HSM8 HONEYWELL SERVICE CENTERS ARGENTINA HONEYWELL S A 1 C BELGRANO 1156 BUENOS AIRES ARGENTINA Tel 54 1 383 9290 ASIA PACIFIC HONEYWELL ASIA PACIFIC Inc Room 3213 3225 Sun Kung Kai Centre 30 Harbour Road WANCHAI HONG KONG Tel 852 829 82 98 AUSTRALIA HONEYWELL LIMITED 5 Thomas Holt Drive North Ryde Sydney NSW AUSTRALIA 2113 Tel 61 2 353 7000 AUSTRIA HONEYWELL AUSTRIA G m b H Handelskai 388 A1020 VIENNA AUSTRIA Tel 43 1 727 800 BELGIUM HONEYWELL S A 3 Avenue de Bourget B 1140 BRUSSELS BELGIUM Tel 32 2 728 27 11 BRAZIL HONEYWELL DO BRAZIL AND CIA Rua Jose Alves Da Chunha Lima 172 BUTANTA 05360 050 SAO PAULO SP BRAZIL Tel 55 11 819 3755 BULGARIA HONEYWELL EOOD 14 Iskarsko Chausse POB 79 BG 1592 Sofia BULGARIA Tel 359 791512 794027 792198 CANADA HONEYWELL LIMITED THE HONEYWELL CENTRE 529 Mc Nicoll Avenue M2H 2C9 NORTH YORK ONTARIO CANADA Tel 416 502 5200 CZECH REPUBLIC HONEYWELL Spol s r o Budejovicka 1 140 21 Prague 4 Czech Republic Tel 422 6112 3434 DENMARK HONEYWELL A S Automatikvej 1 DK 2860 Soeborg DENMARK Tel 45 39 55 56 58 FINLAND HONEYWELL OY Ruukintie 8 FIN 0232
61. as described in Section 5 Modbus RTU Exception Codes Between messages the RS 485 link is in a high impedance state During this time receiving devices are more susceptible to noise generated false start of messages Although noise generated messages are rejected due to address framing and CRC checking they can cause the loss of a good message when they are included in the message stream In the slave the transmitting device enables its transmitter line diver and forces an idle line state onto the link for three character time slots prior to transmitting This forces termination of any noise generated messages and improves message frame synchronization 3 2 Modbus RTU Data Layer 2 01 The data layer includes e Diagnostic loopback e Function code recognition rejection e Busy repoll e Data error code generation Errors detected by the data layer are rejected and the slave responds to the polling device with a Modbus type status exception error A summary of the Modbus status exception codes is listed in Section 5 Modbus RTU Exception Codes UMC800 Modbus RTU Serial Communications User Manual 5 Modbus RTU Message Format 3 3 IEEE 32 bit Floating Point Register Information The Modbus applications support IEEE 32 bit floating point information for several of the function codes 3 3 1 IEEE Floating Point Data Format The formula for calculating the floating point number is 5 t 127 mantissa x 2 exponen 23 bi
62. etapa eie eret rei 98 8 10 AMB Function Block eee ine e eant ELLE SEMPER RESELLER EE Lea perds 99 8 11 AO eet ebore asides yer e age ERR ERR Deo A nae 101 8412 AS YS Function BOCK Cen Raden gebe ted pute dedi boot 102 S213 BLUD BlOCK tee htt te ct ea tese 104 8 14 BOOL Function Block deer 105 CARB Function Block 5 Ce arabo ceu RAT 106 5 16 CAVG Furion Blot 109 CMPR Function Block 110 8 18 DE Function Block hrec e 111 8 19 F nction Block 5 113 8 20 DENG Function Block tete teer tee erit ee ve eet eee ee yes ade ehe eve ee 114 Sar DEWP Function Block ice see eerte cet Pee hee ee e vo ene etae dede ere eene eee PEE 115 2 01 UMC800 Modbus RTU Serial Communications User Manual v 8 22 DI Function Block ett e e vob ite 116 5 238 DI Puncti om BlOCK nace e eed m eee dr dece etude eds 117 8 24 DIV Funcion Block 2 einige ins
63. low 12 REAL Low scale value for deviation bar graph always devbar hi Output 13 REAL Off 0 to 10 of Input Span Hysteresis REAL alarm set points allsp1 allsp2 al2sp1 al2sp2 99999 to 99999 default 0 al sp 4 14 17 al hyst 22 Fail Safe Out 23 REAL alarm hysteresis to 5 BOOL Fail Safe Out On Off 2 01 UMC800 Modbus RTU Serial Communications User Manual 151 Function Parameter Index Reference 8 54 2OR Function Block Description The 2OR label stands for the inclusive OR 2 Inputs Boolean logic function This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder Dynamic Parameters Fast Logic Table 8 72 2 Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 BOOL R output DIG_1 2 BOOL I R input DIG_2 3 BOOL I R input Static Configuration Parameters None 152 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 55 4OR Function Block Description The 4OR label stands for the inclusive OR 4 Inputs Boolean logic function This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder 1 OR x2 xa Fast Logic Dynamic P
64. on each function and each of its parameters Your particular controller may not contain all parameters shown If you see a function that is not on your controller either it is not available for that controller model or it is not in your configuration 6 1 Register Map Overview 26 Start Address End Address Description 0000 0040 Miscellaneous Parameters 6 2 0040 OOFF Loop 1 floating point amp bit packed 6 3 0140 01 Loop 2 floating point amp bit packed 0240 O2FF Loop 3 floating point amp bit packed 0340 0 Loop 4 floating point amp bit packed 0440 04 Loop 5 floating point amp bit packed 0540 05FF Loop 6 floating point amp bit packed 0640 O6FF Loop 7 floating point amp bit packed 0740 07 Loop 8 floating point amp bit packed 0840 O8FF Loop 9 floating point amp bit packed 0B40 OBFF Loop 12 floating point amp bit packed 0C40 OCFF Loop 13 floating point amp bit packed 0D40 ODFF Loop 14 floating point amp bit packed OE 40 OEFF Loop 15 floating point amp bit packed 40 OFFF Loop 16 floating point amp bit packed 1800 187F Analog Input Value 1 64 6 5 1 0 1BE6 Time 6 7 1E00 1 Set Point Programmer 1 6 10 1 10 1E1F Set Point Programmer 2 Table 6 1 describes the global register map for Function Code 03 04 06 and 10h Details on each address are in sections 6 2 th
65. receives the query without a communication error but cannot handle it i e request is to a non existent coil or register The slave will return with an exception response informing the master of the nature of the error Illegal Data Address The exception response message has two fields that differentiate it from a normal response Function Code Field In a normal response the slave echoes the function code of the original query in the function code field of the response function codes have a most significant bit MSB of 0 their values are below 80 hex In an exception response the slave sets the MSB of the function code to 1 This makes the function code value in an exception response exactly 80 hex higher than the value would be for a normal response With the function code s MSB set the master s application program can recognize the exception response and can examine the data field for the exception code Data Field In a normal response the slave may return data or statistics in the data field In an exception response the slave returns an exception code in the data field This defines the slave condition that caused the exception Example Internal slave error reading 2 registers starting at address 1820h from slave at slave address 02 02 03 18 20 00 02 CRC CRC Response 24 Example Return MSB in Function Code byte set with Slave Device Failure 04 in the data field 8304 CRC CRC UMC800 Modbus
66. the registers that are part of a schedule segment To determine the actual register address for a parameter within a segment add the register offset to the start address of the segment Considerations and Methods for Downloading Operating and Reading Status of SP Schedules A SP Scheduler interface can be developed and recipes containing a schedule can be created in third party software using the parameters listed in Table 6 21 In creating a Scheduler interface showing a number of segments and outputs for each segment on a graphic display might include a table referencing the maximum number of segments that you will be using for your process Refer to the Scheduler Segment Register Map Table 6 20 for the range of addresses applied to each scheduler segment Each segment uses 48 registers 30 hex Use the Segment Register Map Table 6 2 for the parameters to be referenced for read write within each segment Application notes for these segment parameters is provided 2 01 UMC800 Modbus RTU Serial Communications User Manual 47 Register Map for Process and Operation Type Variables Procedures for Downloading Setpoint Schedules Table 6 16 is for downloading using Function Codes 3 4 6 16 Table 6 17 is for downloading using Function Codes 20 and 21 Table 6 16 Steps to Download a Setpoint Schedule using Modbus Function Codes 3 4 6 16 Step Action 1 Set the scheduler to RESET by writing any number to 52367 304E This can be don
67. 0 ESPOO 32 FINLAND Tel 358 0 3480101 FRANCE HONEYWELL S A B timent le Mercury Parc Technologique de St Aubin Route de l Orme CD 128 91190 SAINT AUBIN FRANCE Tel from France 01 60 19 80 00 From other countries 33 1 60 19 80 00 GERMANY HONEYWELL AG Kaiserleistrasse 39 D 63067 OFFENBACH GERMANY Tel 49 69 80 640 HUNGARY HONEYWELL Kft Gogol u 13 H 1133 BUDAPEST HUNGARY Tel 36 1 451 43 00 ICELAND HONEYWELL Hataekni hf Armuli 26 PO Box 8336 128 reykjavik Iceland Tel 354 588 5000 ITALY HONEYWELL S p A Via P Gobetti 2 b 20063 Cernusco Sul Naviglio ITALY Tel 39 02 92146 1 MEXICO HONEYWELL S A DE CV AV CONSTITUYENTES 900 COL LOMAS ALTAS 11950 MEXICO CITY MEXICO Tel 52 5 259 1966 THE NETHERLANDS HONEYWELL BV Laaderhoogtweg 18 1101 EA AMSTERDAM ZO THE NETHERLANDS Tel 31 20 56 56 911 HSM8 HONEYWELL SERVICE CENTERS NORWAY HONEYWELL A S Askerveien 61 PO Box 263 N 1371 ASKER NORWAY Tel 47 66 76 20 00 POLAND HONEYWELL Sp z o o UI Domainewksa 41 02 672 WARSAW POLAND Tel 48 22 606 09 00 PORTUGAL HONEYWELL PORTUGAL LDA Edificio Suecia 11 Av do Forte nr 3 Piso 3 2795 CARNAXIDE PORTUGAL Tel 351 1 424 50 00 REPUBLIC OF IRELAND HONEYWELL Unit 1 Robinhood Business Park Robinhood Road DUBLIN 22 Republic of Ireland Tel 353 1 4565944 REP OF SINGAPORE HONEYWELL PTE LTD BLOCK 750E
68. 000 Value of PID2 PV 43FA0000 Value of PID2 WSP 44020000 Value of PID2 output 41200000 Value of PID2 mode 40800000 See Table 8 78 Value of PID7 PV 43480000 Value of PID7 WSP 42C80000 Value of PID7 output 42A00000 Value of PID7 mode 40800000 See Table 8 78 Values are in IEEE format Each value requested uses 4 bytes in the response 2 01 UMC800 Modbus RTU Serial Communications User Manual 63 Controller Configuration Messages Function Codes 20 and 21 Example Query of Read Setpoint Program Segments Use the UMC800 message Read Setpoint Program Segments to read all data associated with segments 1 2 3 and 4 Assume slave address 02 SPP function block 4 Format of query o2 14 oc oo oo 00 oo o5 o4 o Contents from left to right Slave address 02 Function code 14 read Byte count 12 decimal 0C hex Reference type File number high File number low Starting address high Starting address low Register count high Register count low Contents of Read Setpoint Program Segments configuration message See Figure 7 4 Contents of Header 00 Function code 05 Number of consecutive segments 4 Programmer function block number 6 Starting segment number 1 Example Response of Read Setpoint Program Segments Continuing with the example above the following response would be returned assuming the q
69. 0x41 OxD2 0x01 0x12 0xC0 0x13 0x80 0xD3 0x41 0x11 0x00 0xD1 OxCl 0 0x81 0x10 0x40 OxFO 0x01 0x30 0xC0 0x31 0x80 OxFl 0x41 0x33 0x00 0xF3 OxCl OxF2 0x81 0x32 0x40 0x36 0x00 OxF6 OxCl OxF7 0x81 0x37 0x40 OxF5 0x01 0x35 0xC0 0x34 0x80 OxF4 0x41 0x3C 0x00 OxFC OxCl OxFD 0x81 0x3D 0x40 OxFF 0x01 Ox3F 0xC0 0x3E 0x80 OxFE 0x41 OxFA 0x01 0x3A 0 0 0x3B 0x80 OxFB 0x41 0x39 0x00 OxF9 OxCl OxF8 0x81 0x38 0x40 0x28 0x00 OxE8 OxCl OxE9 0x81 0x29 0x40 OxEB 0x01 0x2B 0 0 0x2A 0x80 OxEA 0x41 OxEE 0x01 Ox2E 0 0x2F 0x80 OxEF 0x41 0x2D 0x00 OxED OxCl OxEC 0x81 0x2C 0x40 OxE4 0x01 0x24 0xC0 0x25 0x80 0xE5 0x41 0x27 0x00 0xE7 OxCl OxE6 0x81 0x26 0x40 0x22 0x00 OxE2 OxCl OxE3 0x81 0x23 0x40 0xEl 0x01 0x21 0xC0 0x20 0x80 OxEO 0x41 0 0x01 0x60 0xC0 0x61 0x80 OxAl 0x41 0x63 0x00 OxA3 OxCl OxA2 0x81 0x62 0x40 0x66 0x00 OxA6 OxCl 0xA7 0x81 0x67 0x40 0xA5 0x01 0x65 0xC0 0x64 0x80 OxA4 0x41 0x6C 0x00 0xC1 OxAD 0x81 0x6D 0x40 OxAF 0x01 0x6F 0xC0 0x6E 0x80 OxAE 0x41 0x01 Ox6A 0 0 Ox6B 0x80 OxAB 0x41 0x69 0x00 OxA9 OxCl OxA8 0x81 0x68 0x40 0x78 0x00 OxB8 OxCl 0xB9 0x81 0x79 0x40 OxBB 0x01 0x7B 0 0 0x7A 0x80 OxBA 0x41 OxBE 0x01 0x7E 0 0x7F 0x80 OxBF 0x41 0x7D 0x00 OxBD OxCl OxBC 0x81 0x7C 0x40 0xB4 0x01
70. 1 continued 22 UMC800 Modbus RTU Serial Communications User Manual 2 01 2 01 Modbus RTU Function Codes Device Class ID The Device Classification one byte byte 22 Number of Records Class ID Class 00 Generic Class Fixed Address Mapable Generic Class 00 Device Mapping Describes the I O and feature mapping Record Record Record Record 1 2 boy n Number of Records 1 Byte unsigned value 00 FFh byte 23 Record Description 00 01 02 03 04 Byte Description See Data Element Values Table Below Data Element Values Table 00 01 02 03 04 05 06 07 08 09 10 11 Value Description UMC800 Modbus RTU Serial Communications User Manual 23 Modbus RTU Exception Codes 5 Modbus RTU Exception Codes Introduction Query When a master device sends a query to a slave device it expects a normal response One of four possible events can occur from the master s query e Slave device receives the query without a communication error and can handle the query normally It returns a normal response e Slave does not receive the query due to a communication error No response is returned The master program will eventually process a time out condition for the query e Slave receives the query but detects a communication error parity LRC or CRC No response is returned The master program will eventually process a time out condition for the query e Slave
71. 20 DEWP Dewpoint 821 DI Digital Input 8 22 8DI Eight Digital Inputs 8 23 DIV Division 824 DO Digital Output 825 8DO Eight Digital Outputs 8 26 DSW Digital Switch 8 27 FGEN Function Generator 8 28 FI Frequency Input 8 29 FSS Four Selector Switch 8 30 FSYS System Monitor Fast Logic 8 31 HLLM High Low Limiter 8 32 HMON High Monitor 8 33 Hand Off Auto 8 34 HSEL High Selector 8 35 LDLG Lead Lag 8 36 LMON Low Monitor 8 37 LSEL Low Selector 8 38 LTCH Latch 8 39 MATH Free Form Math 8 40 MBR Modbus Read 8 41 MBS Modbus Slave Status 8 42 MBW Modbus Write 8 43 MDFL Mode Flag 8 44 MMA Min Max Average Sum 8 45 MSF Mass Flow 8 46 MUL Multiplication 2 Inputs 8 47 4MUL Multiplication 4 Inputs 8 48 NEG Negate 8 49 NOT Not Boolean Logic 8 50 ONDT On Delay Timer 8 51 OFDT Off Delay Timer 8 52 ON OFF On Off Control 8 53 89 Function Parameter Index Reference 90 Function Block Type Identification Label See Subsection 20R UMC800 Modbus RTU Serial Communications User Manual OR 2 Inputs 8 54 4OR OR 4 Inputs 8 55 SOR OR 8 Inputs 8 56 PI Pulse Input 8 57 PID Proportional Integral Derivative 8 58 PT Periodic Timer 8 59 RCP Recipe Selector 8 60 RH Relative Humidity 8 61 ROC Rate of Change 8 62 RSW Rotary
72. 25 Illegal Data Value itosi ess 25 Illegal Function beret 25 Implementation 1 L Latch iue eme nta 136 ziehe BAe 133 133 IE dr Dc 4 eie eq iin tines 134 Loop Value Register Map Addresses 29 rrr RR 86 Loopback Message eee 20 Loopback 11 Low 22 22 134 Low Selector tete perderte 135 TESTED weds Aeon e een 135 e aie dete 136 M Mantissa and 0 6 Mass Flow Calculation eese 143 MATH eroe Pep RO rd 137 Ren ette penu 138 MBS ee ien ete eb ied 139 MBW 140 RR ERO 141 message 5 Message Formats recreere onein 4 5 81 142 Miscellaneous Register Map Addresses 28 MMA niit e thier m tts 142 Modbus Communications Troubleshooting 200 Modbus Double Register 8 Modbus Read inen 138 Modbus Slave esee 139 Modbus 140 Mode Fl g certet n 141 MSP onsite e d HERE EORR ees 143 MU einn aote n E NE 144 multipacket tra
73. 3 Scheduler Output 3 R Floating Point in Engineering Units 3006 52295 Scheduler Output 4 R Floating Point in Engineering Units 3008 52297 Scheduler Output 5 R Floating Point in Engineering Units 300A 52299 Scheduler Output 6 R Floating Point in Engineering Units 300C 52301 Scheduler Output 7 R Floating Point in Engineering Units 300E 52303 Scheduler Output 8 R Floating Point in Engineering Units 3010 52305 Scheduler Auxiliary Output R Floating Point in Engineering Units 3012 52307 Scheduler Auxiliary Output2 Floating Point in Engineering Units 3014 52309 Scheduler Auxiliary Ouput3 R Floating Point in Engineering Units 3016 52311 Scheduler Auxiliary Output4 Floating Point in Engineering Units 3018 52313 Scheduler Auxiliary Output5 Floating Point in Engineering Units 301A 52315 Scheduler Auxiliary Output6 R Floating Point in Engineering Units 301C 52317 Scheduler Auxiliary Output7 Floating Point in Engineering Units 301E 52319 Scheduler Auxiliary Output8 R Floating Point in Engineering Units 3020 52321 Current Program Number RW Floating Point This is optional It indicates present schedule number in use This also allows entry of a schedule number from the UMC800 stored schedule memory if schedules have been stored in the controller and will retrieve the schedule data for a display sho
74. 5 Number of consecutive segments which follow 4 Segment 1 Type Ramp Segment 1 Guar Soak Disabled Segment 1 Events 9 16 13 hex Segment 1 Events 1 8 80 hex Segment 1 Time 42200000 in IEEE format Segment 1 Value 42C80000 in IEEE format Segment 1 Aux Value 3F800000 in IEEE format Segment 2 Type Soak Segment 2 Guar Soak Enabled Segment 2 Events 9 16 0B hex Segment 2 Events 1 8 80 hex Segment 2 Time 43200000 in IEEE format Segment 2 Value 44FA0000 in IEEE format Segment 2 Aux Value 3F800000 in IEEE format Segment 3 Type Ramp Segment 3 Guar Soak Disabled Segment 3 Events 9 16 09 hex Segment 3 Events 1 8 00 hex Segment 3 Time 42700000 in IEEE format Segment 3 Value 44FA0000 in IEEE format Segment 3 Aux Value 3F800000 in IEEE format Segment 4 Type Soak Segment 4 Guar Soak Disabled Segment 4 Events 9 16 09 hex Segment 4 Events 1 8 00 hex Segment 4 Time 3F800000 in IEEE format Segment 4 Value 42C80000 in IEEE format Segment 4 Aux Value 00000000 in IEEE format 2 01 UMC800 Modbus RTU Serial Communications User Manual 65 Controller Configuration Messages Function Codes 20 and 21 7 3 Function Code 21 Write General Reference Data Description The UMC800 uses function code 21 15h Write General Reference to implement the write configuration messages These include e
75. 9 RST 5 BOOL I R ON resets the count CNTDN 6 BOOL I R ON counts down Static Configuration Parameters Table 8 113 UPDN Static Configuration Parameters Parameter Index Type Description Ipre 0 REAL local preset 1 to 99999 rem 1 BOOL ON selects remote preset 2 01 UMC800 Modbus RTU Serial Communications User Manual 191 Function Parameter Index Reference 8 83 VLIM Function Block Description The VLIM label stands for Velocity Rate Limiter This block is part of the Auxiliary category It looks like this graphically on the Control Builder x VLIMA 1 EN L OUT Dynamic Parameters Table 8 114 VLIM Dynamic Parameters Parameter Index Type Use Description status 0 REAL R block status see section 9 2 for code list OUT 1 lo R primary output 2 BOOL lo R high rate limit indication L 3 BOOL lo R low rate limit indication 4 REAL I R primary input EN 5 BOOL I R enable input Static Configuration Parameters Table 8 115 VLIM Static Configuration Parameters Parameter Index Type Description irate 0 REAL increase rate limit eu min gt 0 0 to 99999 drate 1 REAL decrease rate limit eu min gt 0 0 to 99999 192 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 84 WTUN Function Block Descrip
76. 98 Function code O1 oe 13 Function code 02 16 Function code 03 2 0 40000000 is 17 Function code 04 17 Function Code 05 18 Function Code 058 20 Function Code 16 10b 21 Function code 17 22 function code 20 14 59 function code 21 158 66 Function Code 24 F ncton C des 11 Function Codes 06 19 function codes 20 and 21 58 Function Codes 20 21 2 0 224 222 2 2 1 Function Generator 10 Segment 122 125 Function Parameter Index Reference 88 G Global Register Map esee 26 H Hand Off Auto Switch esses 130 High Low 128 High Monitors 2 cer iere tes 129 22222 2 132 Historical Data Upload 78 Historical Data Upload Acknowledge 80 Historical Record Format 79 HEEM sic seian cheeses een be 128 HMON e este tee a ek het a 129 Salton onic 130 HOA Control Group Register Map 56 HSE aseo mee eR 132 l J IEEE 32 bit Floating Point Register 6 Illegal Data Address ess
77. 99999 to 999999 yb 0 11 REAL output value at x breakpoint 1 99999 to 999999 yb 1 12 REAL output value at x breakpoint 2 99999 to 999999 yb 2 13 REAL output value at x breakpoint 3 99999 to 999999 122 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 2 01 Parameter Index Type Description yb 3 14 output value at x breakpoint 4 99999 to 999999 yb 4 15 REAL output value at x breakpoint 5 99999 to 999999 yb 5 16 REAL output value at x breakpoint 6 99999 to 999999 yb 6 17 REAL output value at x breakpoint 7 99999 to 999999 yb 7 18 REAL output value at x breakpoint 8 99999 to 999999 yb 8 19 REAL output value at x breakpoint 9 99999 to 999999 yb 9 20 REAL output value at x breakpoint 10 99999 to 999999 yb 10 21 REAL output value at x breakpoint 11 99999 to 999999 UMC800 Modbus RTU Serial Communications User Manual 123 Function Parameter Index Reference 8 29 Function Block Description The FI label stands for Frequency Input This block is part of the Logic category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 37 FAIL FI Parameters ee me me use RW mew status 0 REAL C R block status see section 9 2 for code list OUT 1 REAL R Frequen
78. Alarm 3 Alarm 2 Alarm 1 Contents of Byte 6 most significant byte Bit 15 Bit 14 Bit 13 Bit 12 Bit 11 Bit 10 Bit 9 Bit 8 0 0 0 0 Alarm 12 Alarm 11 Alarm 10 Alarm 9 Example To acknowledge Alarms 5 and 12 of alarm group 7 set bits 4 and 11 to 1 That is bytes 5 and 6 are set to hex values 10 and 8 respectively Contents of Byte 5 least significant byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 0 0 0 1 0 0 0 0 Contents of Byte 6 most significant byte Bit 15 Bit 14 Bit 13 Bit 12 Bit 11 Bit 10 Bit 9 Bit 8 0 0 0 0 1 0 0 0 For the alarm group number Bytes 3 and 4 are set to 7 and 0 respectively 2 01 UMC800 Modbus RTU Serial Communications User Manual 77 Controller Configuration Messages Function Codes 20 and 21 7 4 9 Historical Data Upload Introduction Figure 7 8 shows the Read request and response format for Function Code 10 Historical Data Upload This operation lets you read the historical data of alarms and events that occurred since the last historical data upload request Up to 39 historical records can be returned per message 6 bytes per record Message Formats Header Byte 1 Byte 2 Byte 3 Byte 4 request Message A COCHE 0 Read 0 Alarm 1 Event FUNCTION CODE OA Historical Data Upload SEQUENCE NUMBER high byte SEQUENCE NUMBER low byte Header Byte 1 Byte2 Byte3 Byte4 Byte5 Byte6 Byte7 Bytes Bytes 9 14 eee
79. B LSB high low high 100 0 42C80000h 42h C8h 00h 55 32 425D47AEh 42h 5Dh 47h 2 0 40000000h 40h 00h 00h 1 0 3F800000h 3Fh 80h 00h 1 0 BF800000h BFh 80h 00h UMC800 Modbus RTU Serial Communications User Manual Modbus RTU Function Codes 4 Modbus RTU Function Codes The Honeywell Universal Modbus RTU protocol uses a subset of the standard Modbus RTU function codes to provide access to process related information These standard function codes provide basic support for IEEE 32 bit floating point numbers and 16 bit integer register representation of instrument s process data Table 4 1 Table 4 2 and Table 4 3 list the Modbus RTU Function Code definitions the maximum number of Object Addresses and maximum number of registers allowed per request Repolling of data is not supported by this instrument Table 4 1 Modbus RTU Function Codes Definitions Function Code Name Usage 01 Read Coil Status Read the state of a digital output 02 Read Input Status Read the state of a digital input 03 Read Holding Registers Read Data in 16 bit Register Format high low Used to read integer or floating point process data Registers are ps Read Input Registers consecutive and are imaged from the instrument to the host 05 Force Single Coil Write data to force a digital output ON OFF Values of FF 00 forces digital output ON Values of 00 00 forces digital output OFF Values of FF FF releases the
80. BPADDR Illegal backpan address This could indicate that the backpan board is either not installed or the wrong board is installed at the address 1900 0 BAD RECIPE Illegal recipe number 2000 0 BAD CHANID Illegal channel number or module number 2100 0 BAD RANGE PV HI lt PV LO in PID blocks 2200 0 TOO MANY Too many blocks of a restricted type 2300 0 BAD LOOPID Illegal Loop number 2400 0 UNDERFLOW STACK During the equation evaluation an attempt was made to pop an item off the evaluation stack when the stack was empty 2500 0 OVERFLOW STACK During equation evaluation an attempt was made to push an item on the stack when the stack was full 2600 0 NOT EMPTY STACK At the conclusion of the equation evaluation the evaluation stack was not empty 2700 0 LOG OF NEG NUM Attempted log of a negative number 2800 0 UNKNOWN TOKEN An unknown token was encountered during the evaluation of the equation 2900 0 POWER ERR For the power operator x either x is zero and y is less than or equal to zero or x is less than zero and y is not an integer 3000 0 EXP ERR x is large enough to make e overflow 3100 0 LOG ERR Attempted log of 0 3200 0 LOG10 ERR Attempted log10 of 0 3300 0 BAD INTEGRAL Integral for a PID block equals 0 UMC800 Modbus RTU Serial Communications User Manual 199 Block Status Types 10 Diagnostics and Troubleshooting 10 1 Overview This section provides diagnostic and troubleshooting information to help i
81. CHAI CHEE ROAD 06 01 CHAI CHEE IND PARK 1646 SINGAPORE REP OF SINGAPORE Tel 65 2490 100 REPUBLIC OF SOUTH AFRICA HONEYWELL Southern Africa PO BOX 138 Milnerton 7435 REPUBLIC OF SOUTH AFRICA Tel 27 11 805 12 01 ROMANIA HONEYWELL Office Bucharest 147 Aurel Vlaicu Str Sc Z Apt 61 62 R 72921 Bucharest ROMANIA Tel 40 1 211 00 76 211 79 43 RUSSIA HONEYWELL INC 4 Floor Administrative Builiding of AO Luzhniki Management 24 Luzhniki 119048 Moscow RUSSIA Tel 7 095 796 98 00 01 SLOVAKIA HONEYWELL Ltd Mlynske nivy 73 PO Box 75 820 07 BRATISLAVA 27 SLOVAKIA Tel 421 7 52 47 400 425 SPAIN HONEYWELL S A Factory Josefa Valcarcel 24 28027 MADRID SPAIN Tel 34 91 31 3 61 00 SWEDEN HONEYWELL A B S 127 86 Skarholmen STOCKHOLM SWEDEN Tel 46 8 775 55 00 SWITZERLAND HONEYWELL A G Hertistrasse 2 8304 WALLISELLEN SWITZERLAND Tel 41 1 831 02 71 TURKEY HONEYWELL Otomasyon ve Kontrol Sistemlen San ve Tic A S Honeywell Turkey A S Emirhan Cad No 144 Barbaros Plaza C Blok Kat 18 Dikilitas 80700 Istanbul TURKEY Tel 90 212 258 18 30 UNITED KINGDOM HONEYWELL Unit 1 2 amp 4 Zodiac House Calleva Park Aldermaston Berkshire RG7 8HW UNITED KINGDOM Tel 44 11 89 81 95 11 U S A HONEYWELL INC INDUSTRIAL CONTROLS DIV 1100 VIRGINIA DRIVE PA 19034 3260 FT WASHINGTON U S A Tel 215 641 3000 VENEZUELA HONEYWELL CA APAR
82. DIG_7 X7 8 BOOL I R input DIG_8 X8 9 BOOL I R Input Static Configuration Parameters None 98 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 10 AMB Function Block Description The AMB label stands for Auto Manual Bias Function This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Values AMO LR AMBOO1 Table 8 12 AMB Dynamic Values Status 0 REAL C R block status Bias 1 RE AL C R calculated bias 96 Man mode 2 BOOL C R W manual output mode request OFF ON Man out 3 RE AL C R W manual output value 5 to 105 96 Pv 4 RE AL C R Process Variable in for monitoring OUT 5 RE AL O R control output 5 to 105 96 MODE 6 RE AL R actual mode encoded per note 3 ALI 7 BOOL R Alarm 1 AL2 8 BOOL R Alarm 2 PVI 9 RE AL I R Process Variable Input 26 pv lo lt PV lt pv hi TRV 10 RE AL I R Output Track Value 96 TRC 11 BOOL I R Output Track Command OFF 12 RE AL I R External Mode Request encoded per note 4 2 01 UMC800 Modbus RTU Serial Communications User Manual 99 Function Parameter Index Reference Static Configuration Values Table
83. Function Block Description The SCB label stands for Scale and Bias This block is part of the Math category It looks like this graphically on the Control Builder SCB1 1 OUT Dynamic Parameters Table 8 88 SCB Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL R output X 2 REAL I R input Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 167 Function Parameter Index Reference 8 66 SPEV Function Block Description The SPEV label stands for Setpoint Programming Events This block is part of the Setpoint Program and Setpoint Scheduler categories It looks like this graphically on the Control Builder Dynamic Parameters STA SEG PGM Table 8 89 SPEV Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list El 1 BOOL lo R event 1 E2 2 BOOL lo R event 2 E3 3 BOOL o R event 3 E4 4 BOOL lo R event 4 E5 5 BOOL lo R event 5 E6 6 BOOL lo R event 6 E7 7 BOOL lo R event 7 E8 8 BOOL lo R event 8 E9 9 BOOL lo R event 9 E10 10 BOOL lo R event 10 168 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference Parameter
84. Function Parameter Index Reference 8 19 DCMP Function Block Description The DCMP label stands for Deviation Compare This block is part of the Calculations category It looks like this graphically on the Control Builder DCMP1 1 IN1 OUT Dynamic Parameters Table 8 24 DCMP Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 BOOL R output INI 2 REAL I R input 1 IN2 3 REAL I R input 2 IN3 4 REAL I R input 3 IN4 2 REAL I R input 4 IN5 6 REAL I R input 5 IN6 7 REAL I R input 6 REF Y 8 REAL I R reference input Static Configuration Parameters Table 8 25 DCMP Static Configuration Parameters Parameter Index Type Description DEV 0 REAL plus deviation DEV 1 REAL minus deviation 2 01 UMC800 Modbus RTU Serial Communications User Manual 113 Function Parameter Index Reference 8 20 DENC Function Block Description The DENC label stands for Digital Encoder This block is part of the Auxiliary category It looks like this graphically on the Control Builder t 8 j B j E xima mE B F m Hli mami fi il Wa 18 Dynamic Parameters Table 8 26 DENC Dynamic Parameters
85. Honeywell UMCS3S800 Controller Modbus RTU Serial Communications User Manual 51 52 25 87A 2 01 Sensing and Control Copyright Notices and Trademarks Printed in U S A Copyright 2001 by Honeywell Revision A 2 01 Warranty Remedy Honeywell warrants goods of its manufacture as being free of defective materials and faulty workmanship Contact your local sales office for warranty information If warranted goods are returned to Honeywell during the period of coverage Honeywell will repair or replace without charge those items it finds defective The foregoing is Buyer s sole remedy and is in lieu of all other warranties expressed or implied including those of merchantability and fitness for a particular purpose Specifications may change without notice The information we supply is believed to be accurate and reliable as of this printing However we assume no responsibility for its use While we provide application assistance personally through our literature and the Honeywell web site it is up to the customer to determine the suitability of the product in the application Sensing and Control Honeywell 11 West Spring Street Freeport IL 61032 Modbus is a registered trademark of MODICON Inc Windows is an addressed trademark of Microsoft Inc The omission of a name from this list is not to be interpreted that the name is not a trademark Reference Modicon Modbus Protocol Reference Guide PI MBUS 300 Rev
86. It looks like this graphically on the Control Builder X HLLM1 1 HI LI OUT Dynamic Parameters Table 8 41 HLLM Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL lo R primary output 2 BOOL lo R high limit indication L 3 BOOL lo R low limit indication 4 REAL I R input Static Configuration Parameters Table 8 42 HLLM Static Configuration Parameters Parameter Index Type Description hilim 0 REAL high limit 99999 to 999999 for Analog X value lolim 1 REAL low limit 99999 to 999999 for Analog X value 128 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 33 HMON Function Block Description The HMON label stands for High Monitor This block is part of the Alarm Monitor category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 43 HMON Dynamic Parameters Parameter Index Type Use Description status 0 R block status see section 9 2 for code list OUT 1 BOOL R Output X 2 REAL I R Monitored input Y 3 REAL I R Trip point Static Configuration Parameters None 2 01 UMC800 Modbus Serial Communications User Manual 129 Funct
87. LEDGE 09 Acknowledge 0a Unacknowledge FUNCTION CODE 5 Read Setpoint Program Segment If response is Unacknowledge then an error code is returned instead of a function code NUMBER OF SEGMENTS WHICH FOLLOW SEGMENT DATA Segment data is repeated for each segment Figure 7 4 Read Setpoint Program Segment See Table 7 5 on page 87 See Table 7 1 72 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Segment Data Table 7 1 contains the segment data This data is repeated for each consecutive segment requested Table 7 1 Setpoint Programmer Segment Data Byte for Byte for Name Description Read SP Write SP Segment Segment 3 5 Segment Type 1 ramp segment 0 soak segment 4 6 Guaranteed Soak 1 guaranteed soak enabled 0 guaranteed soak disabled Enable 5 7 Events 9 16 Events 9 16 states 1 Enabled Bit packed LSB is event 9 6 8 Events 1 8 Events 1 8 states 1 Enabled Bit packed LSB is event 1 7 10 9 12 Time or Rate Time or Rate value in floating point notation 11 14 13 16 Value Starting value for ramp or soak in floating point notation 15 18 17 20 Aux Value Soak value for auxiliary output in floating point notation See section 3 3 2 01 UMC800 Modbus RTU Serial Communications User Manual 73 Controller Configuration Messa
88. Modbus RTU Function Codes 4 2 Function Code 02 Read Digital Input Status Description Query Function code 02 1X references is used to read a digital input s ON OFF status of the UMC800 in a binary data format All binary data transferred using function code 02 is mapped into bytes Broadcast is not supported The query message specifies the starting input and the quantity of inputs to read The DI address in the message is based on the slot and channel number of the digital input being read Query message format for function code 02 Slave Function Starting Starting Number Number CRC CRC Address Code Address Address Inputs Inputs High Low High Low Example Read inputs for channels 1 to 6 in slot 1 from slave at address 02 02 02 00 00 00 06 CRC CRC Response 16 The input status in the response message is packed as one input per bit of the data field Status is indicated as ON 0 OFF The LSB of the first data byte contains the input addressed in the query The other inputs follow toward the high order end of this byte and from low order to high order in subsequent bytes If the returned input quantity is not a multiple of eight the remaining bits in the final data byte will be padded with zeros toward the high order end of the byte The byte count field specifies the quantity of data bytes returned Table 4 4 shows the Modbus Comm Digital I O Channel to Address Mapping Response message format for functi
89. R OF DATA BYTES WHICH FOLLOW If response is Unacknowledge then an error code is returned instead of a function code Figure 7 14 Loopback Request and Response Message Formats See Table 7 5 on page 87 86 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 16 Application Error Codes List of Codes 2 01 These codes are returned when NAK is received in the response for a request that is rejected Table 7 5 Application Error Codes Error Code Definition 0 No Errors 0 1 0 2 Bad Operation 0 4 Bad data for the Command 0x8 Not Used OxA Busy Doing Command Try Again Later 0x10 Invalid Header Byte 0x11 Bad Message Length 0x20 Bad Database Download Sequence 0x21 Invalid Database Table Number 0x22 Bad Record Number 0x23 Table Number Changed in the Middle of Download 0x24 Database Revision Level Mismatch 0x25 Bad Packet Size 0x26 Incomplete Record 0x27 SPP or SPS Database Table too big 0x30 Setpoint Program or Setpoint Scheduler Segment Overrun 0x31 SPP or SPS Invalid Mode for Editing Not Reset or Hold UMC800 Modbus RTU Serial Communications User Manual 87 Function Parameter Index Reference 8 Function Parameter Index Reference 8 1 Parameter Index Numbers Function Block parameter tables Refer to the tables listed below t
90. Serial Communications User Manual 189 Function Parameter Index Reference 8 81 TRIG Function Block Description The TRIG label stands for Trigger or Shot operation This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder TRIG1 1 TRIG1 1 Tour MS x Tour Fast Logic Dynamic Parameters Table 8 111 TRIG Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 BOOL R output X 2 BOOL I R input Static Configuration Parameters None 190 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 82 UPDN Function Block Description The UPDN label stands for UP DOWN Counter This block is part of the Logic category It looks like this graphically on the Control Builder UPDN1 1 X OUT RPRE PREI RST CNTDN Dynamic Parameters Table 8 112 UPDN Dynamic Parameters Parameter Index Type Use Description status 0 R block status see section 9 2 for code list OUT 1 REAL W output PREI 2 BOOL W preset indicator X 3 BOOL I R positive edge detect count input RPRE 4 REAL I R remote preset 1 to 99999
91. Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 141 Function Parameter Index Reference 8 45 MMA Function Block Description The MMA label stands for Min Max Average Sum This block is part of the Calculations category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 59 MMA Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list MIN 1 REAL R minimum input value MAX 2 REAL R maximum input value AVG 3 REAL R average of input values SUM 4 REAL R sum of input values SDEV 5 REAL R standard deviation of inputs ALM 6 BOOL R deviation alarm X1 X6 7 12 REAL I R inputs Static Configuration Parameters None 142 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 46 MSF Function Block Description The MSF label stands for Mass Flow Calculation This block is part of the Calculations category It looks like this graphically on the Control Builder X delta p MSF1 1 Y pressure 2 temperature gt OUT gas mass flow Dynamic Parameters Table 8 60 MSF Dynamic Parameters Parameter Index Type Use R W
92. TADO 61314 1060 CARACAS VENEZUELA Tel 58 2 239 0211 Honeywell Sensing and Control Honeywell 11 West Spring Street Freeport IL 61032 51 52 25 87A 0201 Printed in USA www honeywell com sensing
93. The PI label stands for Pulse Input This block is part of the Logic category It looks like this graphically on the Control Builder PI1 1 0000 RPRES CLFG PREI HOLD OVFL RST OUT Dynamic Parameters Table 8 75 PI Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list out 1 REAL O R Accumulated EU count fail 2 BOOL O R failed input indication prei 3 BOOL O R ON when the accumulated count gt preset count ovfl 4 BOOL O R ON when the count on the module overflows rpres 5 REAL I R Remote preset count in EU 0 no alarm indication on PREI pin clfg 6 BOOL I R OFF to ON transition clears the fail and ovfl flags to zero hold 7 BOOL I R ON holds the hardware pulse counter at the current value reset 8 BOOL I R OFF to ON transition resets the pulse counter to zero when the hold input is set to ON Also clears the fail and ovfl flags 2 01 UMC800 Modbus Serial Communications User Manual 155 Function Parameter Index Reference Static Configuration Parameters Table 8 76 PI Static Configuration Parameters Pulse addr 0 ADDR 1 Address of physical pulse input channel Pulse weight Number of EU per pulse range 0 99999 default 1 Reset The PREI latches ON until the module acknowledge the Reset ON trig
94. Time for Analog Scan R PV Low Range R PV High Range R Alarm 1 SP 1 R W Alarm 1 SP 2 R W Gain 2 Prop Band 2 if active R W Notes Floating Point in Engineering Units Floating Point in Engineering Units When the remote setpoint source is configured as LSP2 the value can be written Floating Point in Engineering Units On a write to this register the instrument will update the proper set point according to the loop s currently selected set point Floating Point in Engineering Units Floating Point in Engineering Units Floating Point in Engineering Units Floating Point in units per what was configured in the UMC800 Gain or Proportional Band Floating Point 0 0 Direct 1 0 Reverse Floating Point in Repeats Minute or Minutes Repeat Floating Point in Minutes Floating Point in Seconds Floating Point in Engineering Units Floating Point in Engineering Units Floating Point in Engineering Units Floating Point in Engineering Units Floating Point UMC800 Modbus RTU Serial Communications User Manual 29 Register Map for Process and Operation Type Variables Access Address Register Parameter Name Notes hex decimal 0062 40099 Three Position Step Motor R W Floating Point in percent Deadband 0064 40101 Reset 2 R W Floating Point in Repeats Minute or Minutes R
95. __________ Bit8 PET ROE EAE Part MIS M14 M12 M11 M10 M9 M8 Bit 23 Bit 16 Bit 7 Bit 0 E0 M22 M21M20 M19 MI8 M17 MI6 M7 M6 M5 M4 M3 M2 MI MO i REGISTER 1 High Low S Sign E Exponent M Mantissa continued next page 2 01 UMC800 Modbus RTU Serial Communications User Manual 9 Modbus RTU Message Format FP L Floating Point Little Endian Format Bit 15 ________________ Bit8 Bit 31 Bit 24 Y M15 M14 M13 M12 M11 M10 M9 M8 S E7 E6 E5 E2 El Bit Bito Bit 23 Bit 16 M7 M6 M5 M4 M3 M2 MI MO E0 M22 M21M20 M19 M18 M17 M16 REGISTER N lt REGISTER N 1 High Low S Sign E Exponent M Mantissa FP LB Floating Point Little Endian with Byte Swapped Format Bit 7 Bit 0 Bit 23 Bit 16 M7 M6 M5 M4 M3 M2 MI MO E0 M22 M21M20 M19 M18 M17 M16 Bit 15 _____________ Bit 8 Bit 31 Bit 24 S EG ES EA E2 El High Low High Low M15 M14 M13 M12 M11 MIO 9 M8 REGISTER REGISTER 1 ad High Low S Sign E Exponent M Mantissa Figure 3 2 IEEE Floating Point Formats Table 3 2 IEEE Floating Point Number Examples in FP B Format 10 Value IEEE FPB Register N Register N 1 decimal MS
96. a e a 54 6 18 Hand OFF Auto Control Group Register Map sees 56 6 19 Device Control Group Register Map essere ener een nennen nennen nennen 57 7 CONTROLLER CONFIGURATION MESSAGES FUNCTION CODES 20 AND 21 c ccocu secu saecu se sucer esesesece cc e ceca eee ere cure rececur ce eece 58 iege pue nne othe nee eiii 58 7 2 Function Code 20 Read General Reference Data 4 2 2 0 59 7 3 Function Code 21 Write General Reference Data 222 00 0 66 TA Configuration Message Formats eene enne nennen tenerent enne 68 8 FUNCTION PARAMETER INDEX 88 8 1 Parameter Index Numbers nieto ete le Hee eee recte pere HERR Eds 88 8 2 ABS Function Block ou etd aes e Pes Pu 9 8 3 ADD Function Block uiuat e deter eei te Gav cecidi ce eo deer dawns aids 92 8 4 4ADD Punction BIOCK sieht hated ieee Gives een Said eh heeded eee a ikea thea e enatis 93 8 5 XE Runc on Block un uer tide eet ec th deeds erede ta dete 94 86 ALM Function Block n de n ER e OR 95 8 7 Function Block s e E A edi ba Leti ee e eei au onde 96 8 8 JAND Function Block i ce e ceti et ee RDS 97 8 0 SAND Function BIOCK ossa
97. ables Table 6 17 Steps to Download a Setpoint Schedule using Modbus Function Codes 20 21 Step Action 1 Set the scheduler to RESET by writing any number to 52367 304E This can be done either with function code 6 or 16 could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration 2 Clear the schedule by writing a 0 to registers 52321 and 52322 3020 and 3021 This is a floating point register and requires a multiple register write function code 16 This is the safest way to insure that all registers are cleared for the next schedule download could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration 3 Write the header information for parameters relevant to the schedule leave all others at 0 registers 52331 302A 52347 303A and register 52368 304F Registers 52331 52347 are floats and must be written using function code 16 Register 52368 is bit packed and can be written with either function code 6 or 16 could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration 4 Use function code 21 to write each segment required in the profile See Section 7 5 Save the schedule to a schedule number archive by writing a floating point number to register 52329 This will store the downloaded data utilized by the scheduler block to the sched
98. ages Function Codes 20 and 21 Example Query with Read Scattered Use the UMC800 message read scattered 32 bit to read the following e output value PID2 PV working setpoint output and mode PID7 PV working setpoint output and mode Assume a slave address 02 Format of query 02 14 1E 00 00 00 00 00 00 00 Contents of Read Scattered 32 bit configuration message See below CRC CRC Contents from left to right Slave address 02 Function code 14 read Byte count 230 decimal 1E hex Reference type File number high File number low Starting address high Starting address low Register count high Register count low Contents of Read Scattered 32 bit configuration message See Figure 7 2 o9 o0 o2 o1 01 02 09 02 o2 oB 02 OC 07 09 07 07 oB 07 oC Contents from left to right Header 00 Function Code 03 Number of values requested 09 Filler Byte 00 Table 02 parameters are dynamic see Table 8 5 and Table 8 77 Block number of Al 01 Index 01 output See Table 8 5 Block number of PID 02 Index 09 PV See Table 8 77 Block number 02 Index 0A WSP See Table 8 77 Block number 02 Index OB Output See Table 8 77 Block number 02 Index Mode See Table 8 77 Block number of PID 2 07 Index 09 PV See Table 8
99. al2sp2 99999 to 99999 default 0 al hyst 25 REAL alarm hysteresis 0 to 5 96 reset 26 REAL Manual Reset 100 to 100 in output default 0 used for both tune sets FUZZY 28 ON enables fuzzy logic overshoot suppression default OFF TUNESET2 29 Use tune set 2 default OFF GAIN2 30 proportional gain 0 1 to 1000 or proportional band 0 1 to 100096 Tune Set 2 RATE2 31 derivative time 0 or 0 1 to 10 minutes Tune Set 2 RESET2 32 integration time 0 or 0 02 to 50 minutes or repeats per minute 0 or 50 to 0 02 repeats Tune Set 2 107 Function Parameter Index Reference Parameter Index Type Description use propband 33 BOOL Use Gain 0 or Proportional Band 1 use_rpm 34 BOOL Use minutes 0 or repeats per minute 1 for integral constant sp_rate_dn 35 REAL Set point low rate of change limit 0 off to 99999 eu min sp_rate_up 36 REAL Set point high rate of change limit 0 off to 99999 eu min FF_GAIN 37 REAL Feed forward gain 0 0 to 10 0 RATIO 39 REAL Gain value for Ratio PID 20 to 20 default 1 used when RA_BIAS gt 0 LBIAS 40 REAL Bias value for Ratio PID when RA_BIAS LOC_BIAS 99999 to 99999 0 devbar_hi 41 REAL High scale value for deviation bar graph 0 to 99999 default 100 devbar_low 42 REAL Low scale value for deviation bar graph always devbar hi L CO 43 REAL Local percent carbon monoxide 2
100. arameters Table 8 73 4OR Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 BOOL R output DIG 1 2 BOOL I R input DIG_2 3 BOOL I R input DIG_3 4 BOOL I R input DIG_4 5 BOOL I R input Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 153 Function Parameter Index Reference 8 56 8OR Function Block Description The 8OR label stands for the inclusive OR 8 Inputs Boolean logic function This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder OUT OR OUT Fast Logic Dynamic Parameters Table 8 74 8OR Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 BOOL lo R output DIG 1 2 BOOL I R input DIG 2 3 BOOL I R input DIG 3 4 BOOL I R input DIG 4 5 BOOL I R input DIG 5 6 BOOL I R input DIG 6 7 BOOL I R input DIG 7 8 BOOL I R input DIG 8 9 BOOL I R input Static Configuration Parameters None 154 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 57 PI Function Block Description
101. ating point notation 48 51 Aux Value 1 auxiliary value floating point notation 52 55 Aux Value 2 auxiliary value floating point notation 56 59 Aux Value 3 auxiliary value floating point notation 60 63 Aux Value 4 auxiliary value floating point notation 64 67 Aux Value 5 auxiliary value floating point notation 68 71 Aux Value 6 auxiliary value floating point notation 72 75 Aux Value 7 auxiliary value floating point notation 76 79 Aux Value 8 auxiliary value floating point notation 80 Events 9 16 Events 9 16 states 1 Enabled Bit packed LSB is event 9 81 Events 1 8 Events 1 8 states 1 Enabled Bit packed LSB is event 1 82 Unused Set to 0 83 Unused Set to 0 See section 3 3 84 UMC800 Modbus Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 14 Write Setpoint Scheduler Segment Introduction Figure 7 13 shows the Write request and response format for Function Code 18 Write Setpoint Scheduler Segment This operation lets you write one or more consecutive segments to a setpoint scheduler block Up to 2 segments can be written per message 84 bytes per segment requested Note that the data is written to the specified active scheduler in the controller not to a schedule in controller memory Message Formats Bytes Header Byte1 Byte2 Byte3 Byte4 5 88 req
102. atus see section 9 2 for code list 9 BOOL o BankA output l 10 A2 BOOL R Bank output 2 11 BOOL R Bank output 3 12 4 BOOL R Bank A output 4 13 BOOL R Bank B output 1 14 B2 BOOL R Bank B output 2 15 B3 BOOL R Bank B output 3 16 B4 BOOL R Bank B output 4 17 BOOL R Bank C output 1 18 2 BOOL R Bank C output 2 19 BOOL R Bank C output 3 UMC800 Modbus RTU Serial Communications User Manual 125 Function Parameter Index Reference Index Parameter Type Use R W Description 20 C4 BOOL R Bank C output 4 BOOL ID Off to On requests a reset state Static Configuration Parameters None 126 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 31 FSYS Function Block Description The Fast Logic Status Block FSYS is a function block and is part of the Fast Logic category It provides read access to controller status values including those related to the Fast Logic execution cycle The output may be connected to function block inputs The outputs may also be connected to signal tags for operator interface monitoring The FSYS System Monitoring block is assigned block number 250 It looks like this graphically on the Control Builder 5
103. ay also be connected to signal tags for operator interface monitoring The ASYS System Monitoring block is assigned block number 249 It looks like this graphically on the Control Builder ASYS240 1 CYCTIME CYCMINS NEWSTART RESTART ALM_ACTIV ALM_UNACK HWOK LOWBTRY HITEMP COMFAIL BAD BLOCK OFF LINE TIME OFF Dynamic Parameters Analog function block scan cycle time in sec Analog function block scan cycle time in min Logic 1 Hi for one analog scan cycle after a new start of program Program to Run Logic 1 Hi for one analog scan cycle after power up Logic 1 Logic 1 Logic 1 Logic 1 Hi if there is any operator panel alarm is present Hi if there is any operator panel unacknowledged alarm present Hi if a hardware fault is detected Hi if battery is low Logic 1 Hi if internal temperature is too high gt 70C Logic 1 Hi if there is a comm failure to the operator interface Logic 1 Hi if a function block fails to operate properly Logic 1 Hi when the controller mode switch is in the Off Line mode Time controller was off in sec after power loss available for one analog scan cycle Table 8 15 ASYS Dynamic Parameters status 0 REAL R block status see section 9 2 for code list CYC CNT 1 REAL C R number of control block cycles EXCTIME 3 REAL C R control block execution time in seco
104. ble 8 110 TPSC Static Configuration Parameters Parameter Index Type Use R W Description 13 BOOL Alarm 1 AL2 14 BOOL O R Alarm 2 BCO 15 REAL O R Back Calculation Out ATI 16 BOOL R Auto Tune Indicator ON Auto Tune in progress PVI 17 REAL I R Process Variable Input eu pv lo lt PV lt pv hi RSP 18 REAL I R Remote Set Point or eu per sp units TRV 19 REAL I R Output Track Value 96 TRC 20 BOOL I R Output Track Command OFF BIAS 22 REAL I R Remote bias value for ratio PID Parameter Index Type Description GAIN 0 REAL proportional gain 0 1 to 1000 or proportional band 0 1 to 100096 Tune Set 1 RATE 1 derivative time 0 or 0 1 to 10 minutes Tune Set 1 RESET 2 REAL integration time 0 02 to 50 minutes or repeats per minute 0 02 to 50 repeats Tune Set 1 pv hi 3 REAL pv High Range value 99999 to 99999 default 100 pv lo 4 REAL pv Low Range value 99999 to 99999 default 0 sp hi lim 10 REAL set point high limit 99999 to 99999 default 100 sp lo lim 11 REAL set point low limit 99999 to 99999 default 0 failsafe hi 13 BOOL ON sets motor to 100 when in failsafe OFF sets motor to 0 default OFF al sp 4 188 UMC800 Modbus RTU Serial Communications User Manual 14 17 REAL alarm set points allspl allsp2 al2spl al2sp2 99999 to 99999 default 0 al hyst 22 REAL alarm hysteresis 0 to 5 96
105. bus RTU Serial Communications User Manual 173 Function Parameter Index Reference Dynamic Output Parameters Table 8 94 SPS Dynamic Output Parameters Parameter Index Type Use R W Description STA 40 REAL R program state N A RESET RUN HOLD GHOLD STOP SEG 41 REAL R current segment number PGM 42 REAL R current program number SPI 43 REAL R Setpoint 1 output EU SP2 44 REAL R Setpoint 2 output EU SP3 45 REAL R Setpoint 3 output EU SP4 46 REAL R Setpoint 4 output EU SP5 47 REAL R Setpoint 5 output EU SP6 48 REAL R Setpoint 6 output EU SP7 49 REAL R Setpoint 7 output EU 5 8 50 REAL Setpoint 8 output EU STMR 51 REAL R time remaining in current segment minutes STME 52 REAL R time elapsed in current segment minutes PTME 53 REAL R time elapsed in program minutes STFL 54 REAL R current state flag Dynamic Input Parameters Table 8 95 SPS Dynamic Input Parameters Parameter Index Type Use R W Description PVI 55 1 R 1 process variable EU PV2 56 REAL R aM process variable EU PV3 57 REAL 3 process variable EU PV4 58 REAL R 4 process variable EU PV5 59 REAL 1 R 5 process variable EU PV6 60 REAL Hzc 6 process variable EU PV7 61 REAL 7
106. bus RTU Serial Communications User Manual 2 01 Table 8 14 Table 8 15 Table 8 16 Table 8 17 Table 8 18 Table 8 19 Table 8 20 Table 8 21 Table 8 22 AO Dynamic Parameters ASYS Dynamic Parameters BCD Dynamic Parameters BOOL Dynamic Parameters CARB Dynamic Parameters CARB Static Configuration Parameters CAVG Dynamic Parameters _ CMPR Dynamic Parameters DC Dynamic Parameters __ Table 8 23 DC Static Configuration Parameters Table 8 24 Table 8 25 Table 8 26 Table 8 27 Table 8 28 Table 8 29 Table 8 30 Table 8 31 Table 8 32 Table 8 33 Table 8 34 Table 8 35 Table 8 36 Table 8 37 Table 8 38 Table 8 39 Table 8 40 Table 8 41 Table 8 42 Table 8 43 Table 8 44 Table 8 45 Table 8 46 Table 8 47 Table 8 48 Table 8 49 Table 8 50 Table 8 51 Table 8 52 Table 8 53 Table 8 54 Table 8 55 Table 8 56 Table 8 57 Table 8 58 Table 8 59 Table 8 60 Table 8 61 Table 8 62 Table 8 63 2 01 DCMP Dynamic Parameters ___ DCMP Static Configuration Parameters DENC Dynamic Parameters DEWP Dynamic Parameters DEWP Static Configuration Parameters DI Dynamic Parameters Eight DI Dynamic Parameters DIV Dynamic Parameters DO Dynamic Parameters Eight DO Dynamic Parameters DSW Dynamic Parameters FGEN Dynamic Parameters FGEN Static Configuration Parameters FI Dynamic Parameters FI Static Configuration Parameters FSS Dynamic Parameters FSYS Dynamic Parameters HLLM Dynamic Parameters HLLM Static Configuration Parameter
107. c Configuration Parameters 2OR Dynamic Parameters 4OR Dynamic Parameters 8OR Dynamic Parameters PI Dynamic Parameters PI Static Configuration Parameters PID Dynamic Parameters PID Modes PID Static Configuration Parameters PTMR Dynamic Parameters RCP Dynamic Parameters RH Dynamic Parameters __ ROC Dynamic Parameters ROC Static Configuration Parameters RSW Dynamic Parameters RTMR Dynamic Parameters RTMR Static Configuration Parameters SCB Dynamic Parameters SPEV Dynamic Parameters SPP Dynamic Contained Parameters SPP Dynamic Output Parameters SPP Dynamic Input Parameters SPS Dynamic Contained Parameters SPS Dynamic Output Parameters SPS Dynamic Input Parameters SPS Static Configuration Parameters SPSA Dynamic Parameters STFL Dynamic Values STSW Dynamic Values Table 8 100 SORT Dynamic Parameters __ Table 8 101 SUB Dynamic Parameters ___ Table 8 102 4SUB Dynamic Parameters Table 8 103 SW Dynamic Parameters Table 8 104 TAHD Dynamic Parameters Table 8 105 TGFF Dynamic Parameters Table 8 106 TOT Dynamic Parameters Table 8 107 Table 8 108 Table 8 109 TOT Static Configuration Parameters __ TPO Dynamic Parameters TPSC Dynamic Parameters Table 8 110 TPSC Static Configuration Parameters Table 8 111 TRIG Dynamic Parameters Table 8 112 UPDN Dynamic Parameters Table 8 113 UPDN Static Configuration Parameters UMC800 Modbus RTU Serial Communications User Manual 146 147 148 148
108. ck Description The TOT label stands for Totalizer This block is part of the Calculations category It looks like this graphically on the Control Builder Accumulated Value Dynamic Parameters Table 8 106 TOT Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list TOT 1 REAL lo R total eu PREI 2 BOOL lo R preset indicator IN 3 REAL I R analog input value eu RPRE 4 REAL I R remote preset in eu 1 to 999999 EN 5 BOOL I R ON enables the totalizer RST 6 BOOL I R ON resets the totalizer Static Configuration Parameters Table 8 107 TOT Static Configuration Parameters Parameter Index Type Description Ipre 1 local preset 1 to 999999 rem 2 BOOL ON selects remote preset decr 3 BOOL ON selects decreasing from preset UMC800 Modbus Serial Communications User Manual 185 Function Parameter Index Reference 8 79 TPO Function Block Description The TPO label stands for Time Proportional Output This block is part of the Loops category It looks like this graphically on the Control Builder TPO1 1 0000 Dynamic Parameters Table 8 108 TPO Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list IN 1 REAL I R analog inp
109. ction Block ni eee ee tides aie te teat eate eda aes 140 5 44 MDEL F ncton Block It etit det in Ere eed et ddan 141 8 45 Function Block nee ette ether eee e 142 8 46 MSF Function Block ee dete ce eaae 143 8 217 MUL Function BIOCK 5 che eet tte ta tee d ee de aetas 144 8 48 4MUL Function Block nete ee eet eee erre dene abides re Fer A ear vea ede ts 145 8 49 NEG Function itte Ete teet et 146 8 50 NOT Function Block Ri e ette Gusta 147 8 51 ONDT Function 148 8 52 OFT Function Block tret et te e toi te te ete ean eet Bes 149 8 53 ONOFF Function Block ettet recette dern 150 8 54 ZOR Function Block oe RR eto 152 554 OR Function errem e tede ed ege ert ete temi dee dene etae ede ere ehe sedans ga deeds 153 8 56 SOR Function BIOCK i tied dei RUM eh ded ee eet ede ere deep te dada bad 154 8 57 PL Runction Block rene ate 155 8 58 PID Furiction Block oe ete tre
110. cy input value eu FAIL 2 BOOL R Failed input indication from hardware module Static Configuration Parameters Table 8 38 Static Configuration Parameters Parameter Index Type Description Address 0 ADDR Filter Time Bias Failsafe Failsafe type EU High EU Low Freq Zero Limit Freq Span Limit Address of physical frequency input channel spare to keep parameters aligned with similar AI parameters filter time constant range 0 0 120 0 seconds default 0 bias value applied to the output range 0 100000 EU default 0 failsafe value default 0 FAILSAFE RANGE HIGH RANGE LO default not checked High range value range 0 0 to 100000 EU default 100 Low range value range 0 0 to 100000 EU default 0 Zero value of the input device 10Hz to 100KHz default 100Hz U M is Hz Highest value of the input device 10 Hz to 100 KHz default 10 KHz must be larger than the lower limit U M is Hz 124 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 30 FSS Function Block Description Dynamic Parameters 2 01 The FSS label stands for Four Selector Switch This block is part of the Logic category It looks like this graphically on the Control Builder Reset 551 Table 8 39 FSS Dynamic Parameters 0 status RE C NE block st
111. de Address Address Data Data High Low High Low Example Force DO Card Slot 1 Channel 6 ON in a slave at address 02 02 05 00 05 FF 00 CRC CRC Response 18 The normal response is an echo of the query returned after the DO state has been forced Response message format for function code 05 Slave Function DO DO Force Force CRC CRC Address Code Address Address Data Data High Low High Low Example Force DO Card Slot 1 Channel 6 ON in a slave at address 02 02 05 00 05 FF 00 CRC CRC Table 4 4 shows the Modbus Comm Digital I O Channel to Address Mapping UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Function Codes 4 5 Function Codes 06 Preset Single Register Description Presets integer value into a single register 4X references The UMC800 does not support Broadcast The registers that are specified in Section 6 with an access type and integer and bit packed data types can be written to via Function Code 06 Query The query message specifies the register references to be preset Registers are addressed starting at zero Register 1 is addressed as 0 Query message format for function code 06 Slave Function Address Address Preset Preset CRC CRC Address Code High Low Data Data High Low Example Set Loop 1 to Auto address to a slave at address 02 02 06 00 FA 00 01 CRC CRC Response The normal response is an echo of the query returned after the register co
112. dex 09 index number of first value requested See Table 8 77 60 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Example Response for Read Contiguous Continuing with the example query above the following response would be returned assuming the query was acknowledged the PV and WSP values are both 100 the output is 0 and the mode is LSP AUTO Format of response 02 14 00 00 00 00 00 00 00 Contents of Read Contiguous 32 bit configuration message See below CRC CRC Contents from left to right Slave address 02 Function code 14 read Byte count 226 decimal 1A hex Reference type File number high File number low Starting address high Starting address low Register count high Register count low Contents of Read Contiguous 32 bit configuration message See Figure 7 1 09 02 04 42 00 00 42 C8 oo 00 00 00 00 00 40 80 00 00 Contents from left to right Acknowledge 09 Function Code 02 Number of values returned 04 Value of PV 42C80000 Value of WSP 42C80000 Value of output 00000000 Value of mode 40800000 See Table 8 78 Values are in IEEE format Each value requested uses 4 bytes in the response 2 01 UMC800 Modbus RTU Serial Communications User Manual 61 Controller Configuration Mess
113. e Formats Coding system 8 bit binary Number of data bits per 10 Bits character start bits 1 data bits 8 parity bits 0 stop bits 1 Parity Not used Bit transfer rate 9600 19200 38400 Selectable Duplex Half duplex Transceiver Error checking CRC cyclic redundancy check Polynomial CRC 16 10100000000001 Bit transfer order LSB first End of message Idle line for 3 5 or more characters gt 1 82 msec for 19200 3 1 Modbus Link Layer The link layer includes the following properties behaviors Slave address recognition Start End of Frame detection a CRC 16 generation checking Transmit receive message time out Buffer overflow detection Framing error detection Idle line detection Errors detected by the physical layer in messages received by the slave are ignored and the physical layer automatically restarts by initiating a new receive on the next idle line detection 4 UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Message Format General Modbus RTU message format Query message format Slave Address Function Code Function code dependent data CRC 16 Response message format Slave Address Function Code Function code dependent data CRC 16 f an error is detected in a valid message the response function code is modified by adding 80 hex and the function code dependent data is replaced by an exception response code
114. e Message HET Y up These 6 bytes repeated for each value ACKNOWLEDGE UNACKNOWLEDGE 09 Acknowledge Unacknowledge for each write value requested FUNCTION CODE 03 Scattered 32 Bit Values If response is Unacknowledge then an error code is returned instead of a function code Figure 7 3 Write Scattered 32 Bit Request and Response Message Formats See Parameter Index tables for Block types in Section 8 See subsection 3 3 See Table 7 5 on page 87 2 01 UMC800 Modbus RTU Serial Communications User Manual 71 Controller Configuration Messages Function Codes 20 and 21 7 4 5 Read Setpoint Program Segment Introduction Figure 7 4 shows the Read request and response format for Function Code 5 Setpoint Program Table This operation lets you read one or more consecutive segments from a setpoint programmer block Up to 15 segments may be read per message 16 bytes per segment returned Note that the data is read from the specified active programmer in the controller not from a profile in controller memory Message Formats Header Byte1 2 Byte3 Byte4 reguestmesage Sawer 0 Read FUNCTION CODE 5 Read Setpoint Program Segment NUMBER OF CONSECUTIVE SEGMENTS TO READ PROGRAMMER FUNCTION BLOCK NUMBER Select from LCB printout STARTING SEGMENT NUMBER Byte 0 1 Byte2 3 18 Response Message O ACKNOWLEDGE UNACKNOW
115. e either with function code 6 or 16 2 Clear the schedule by writing a 0 to registers 52321 and 52322 3020 and 3021 This is a floating point register and requires a multiple register write function code 16 This is the safest way to insure that all registers are cleared for the next schedule download 3 Write the header information for parameters relevant to the schedule leave all others at 0 registers 52331 302A 52347 303A and register 52368 304F Registers 52331 52347 are floats and must be written using function code 16 Register 52368 is bit packed and can be written with either function code 6 or 16 4 Write the information for each segment required in the schedule registers 3200 322F for segment 1 3230 325F for segment 2 etc The first 9 registers are bit packed and can be written with either function code 6 or 10 The rest of the registers are float and must be written using function code 16 5 Save the schedule to a schedule number archive by writing a floating point number to register 52329 This will store the downloaded data utilized by the scheduler block to the schedule number used Schedule numbers may range from 1 50 The schedule is now ready to run Note that the current schedule number register 52321 is automatically set to the saved schedule number 48 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Vari
116. ection 9 2 for code list OUT 1 REAL R primary output YHI YLO 2 BOOL O R override indication X 3 REAL I R input Y 4 REAL I R input Static Configuration Parameters None 132 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 36 LDLG Function Block Description The LDLG label stands for Lead Lag This block is part of the Auxiliary category It looks like this graphically on the Control Builder LDLG1 1 EN Digital Signal OUT Dynamic Parameters Table 8 47 LDLG Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 REAL R output IN 2 REAL I R primary input EN 3 BOOL I R enable Static Configuration Parameters None 2 01 UMC800 Modbus Serial Communications User Manual 133 Function Parameter Index Reference 8 37 LMON Function Block Description The LMON label stands for Low Monitor This block is part of the Alarm Monitor category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 48 LMON Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 BOOL
117. ed program number 40 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables Table 6 10 Steps to Download a Setpoint Program using Modbus Function Codes 20 21 Step Action 1 Set the programmer to RESET by writing any number to 47696 1EOF This be done either with function code 6 or 16 could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration 2 Clear the program by writing a to registers 47937 and 47938 1F00 and 1F01 This is a floating point register and requires a multiple register write function code 16 This is the safest way to insure that all registers are cleared for the next program download could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration 3 Write the header information for parameters relevant to the program leave all others at 0 registers 47943 1F06 47997 1F3C Registers 47943 47968 are floats and must be written using function code 16 Registers 47995 47997 are bit packed and can be written with either function code 6 or 16 could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration Note Display High Range Limit and Display Low Range Limit are not presently used in the UMC800 4 Use function code 21 to write each segme
118. eed Soak Type 1 0004 Guaranteed Soak Type 5 R W See Guaranteed Soak Type 1 0005 Guaranteed Soak Type 6 R W See Guaranteed Soak Type 1 0006 Guaranteed Soak Type 7 R W See Guaranteed Soak Type 1 0007 Guaranteed Soak Type 8 R W See Guaranteed Soak Type 1 0008 Events R W Bit Packed Bit 0 Event 1 Bit 15 Event 15 0 Event OFF 1 Event ON Note 2 000A Time R W Floating Point in seconds Note 1 000C Output 1 Ramp or Soak value R W Floating Point Note 1 000 Output 2 Ramp or Soak value R W Floating Point Note 1 0010 Output 3 Ramp or Soak value R W Floating Point Note 1 0012 Output 4 Ramp or Soak value R W Floating Point Note 1 0014 Output 5 Ramp or Soak value R W Floating Point Note 1 0016 Output 6 Ramp or Soak value R W Floating Point Note 1 0018 Output 7 Ramp or Soak value R W Floating Point Note 1 54 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables Register Parameter Name Offset within segment 001A Output 8 Ramp or Soak value 001C Soak value for Auxiliary Output 1 001E Soak value for Auxiliary Output 2 0020 Soak value for Auxiliary Output 3 0022 Soak value for Auxiliary Output 4 0024 Soak value for Auxiliary Output 5 0026 Soak value for Auxiliary Output 6 0028 Soak value for Auxiliary Output 7 002A Soak value for Auxiliary Output 8 002C Recycle 002E Recycle Segment Access R W R W R W R W R W R W R W
119. eference for the function block index numbers for contained parameters UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 2 Function Code 20 Read General Reference Data Description The UMC800 uses function code 20 14h Read General Reference to implement the read configuration messages These include Read Contiguous 32 bit Values e Read Scattered 32 bit Values Read Setpoint Program Segment Read Alarm Point Detail e Historical Data Upload Event Summary Read Setpoint Scheduler Segment e Loopback Test Query The query message uses the standard function code 20 header followed by the UMC800 configuration message The Byte Count equals the total number of bytes between the Byte Count and the CRC This number cannot exceed 255 therefore the configuration message content is limited to 248 bytes maximum Query message format for function code 20 14h Slave Function Byte Reference File File Starting Start Register Register UMC800 CRC CRC Address Code Count Type 00 Number Number Address Address Count Count Configuration High 00 Low 00 High 00 Low 00 High 00 Low 00 Message max 248 bytes Response The response is the standard function code 20 header followed by the UMC800 configuration message Byte Count is adjusted to account for the number of bytes in the response
120. egister Map Summary This table contains addresses for the Hand Off Auto control group The Modbus HOA number address for a HOA can also be obtained from the Control Builder printout of Tag Properties Function Code Support Reads Function Codes 3 4 Writes Function Code 16 10 hex for preset of multiple registers e g for floating point Writes Function Code 6 for presetting an integer value Table 6 22 HOA Control Group Register Map Source Data Ignored Address Register Parameter Name Access Notes hex decimal 6600 66113 Status R Bit Packed Bits 0 3 Hand Off Auto State Bit 0 OZNO IZ YES Bit 1 Hand OZNO 1Z YES Bit 2 Auto 0 1Z YES Bit 3 Bypass 0 1 YES Bit 4 Request Output 0 OFF 1 ON Bit 5 Local Source ON OZNO 1 YES Bit 6 Remote Source ON OZNO 1 YES Bit 7 Local and Remote ON 0ZNO 1 YES Bit 7 15 Unused 6601 66114 Remote Off state W Unsigned 16 Integer Change Request Data Ignored 6602 66115 Remote Hand state W Unsigned 16 Integer Change Request Data Ignored 6603 66116 Remote Auto state W Unsigned 16 Integer Change Request Data Ignored 6604 66117 Local Source W Unsigned 16 Integer Data Ignored 6605 66118 Remote Source W Unsigned 16 Integer Data Ignored 6606 66119 Local and Remote W Unsigned 16 Integer 56 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operati
121. egister for the information The stuffing order of the bytes into the two registers differs among Modbus hosts To provide compatibility the UMC800 Double register format is configurable To set the controller s double register byte order go to the Set Controller Comm A Port dialog box in the User Utility Control Builder and configure Modbus Double Register Format The selections are Selection Description Byte order Notes See Figure 3 1 FPB Floating Point Big Endian Format 4 3 2 1 UMC800 default FP BB Floating Point Big Endian with 3 4 1 2 byte swapped FPL Floating Point Little Endian Format 1 2 3 4 FPLB Floating Point Little Endian with 2 1 4 3 Modicon and byte swapped Wonderware standard See IEEE Formats starting on next page NOTE Byte Swapping only applies to Function Codes 3 4 and 16 Function Codes 20 and 21 DO NOT support byte swapping They always use FP B 8 UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Message Format IEEE Floating Point Formats FP Floating Point Big Endian Format Bit 0 Bit 31 Y E0 M22 M21M20 M19 M18 M17 M16 M7 M6 M5 M4 M3 M2 MI MO S E7 EG ES E4 E2 El M15 M14 MI2MII M10 M9 M8 REGISTER N lt M REGISTER N 1 gt High Low S Sign E Exponent M Mantissa FP BB Floating Point Big Endian with Byte Swapped Format Bit 31 Bit 24 Bit 15 ____
122. egister request assigned to WRx pin r_reg_used 4 31 34 BOOL ON register request assigned to the RDx pin 2 01 UMC800 Modbus RTU Serial Communications User Manual 139 Function Parameter Index Reference 8 43 MBW Function Block Description The MBW label stands for Modbus Write This block is part of the Communications category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 56 MBW Dynamic Parameters Parameter Use R W Description status 0 REAL C data val 8 2 9 REAL I enable 8 10 17 REAL I block status see section 9 2 for code list value to be written to the selected register address DIJ ON data value is written once per scan Static Configuration Parameters Table 8 57 MBW Static Parameters Parameter index Type Description reg used 8 16 23 BOOL ON register request is assigned to the WRx pin 140 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 44 MDFL Function Block Description The MDFL label stands for Mode Flag This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 58 MDFL Dynamic Parameters Parameter Index Type Use R W Description status 0 block status see section 9 2 for code list i locas
123. egisters 12 Bytes 3 4 127 Registers 63 Floats 1 Digital Output 1 Register 10h 127 Registers 63 Floats UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Function Codes 4 1 Function Code 01 Read Digital Output Status Description Query Function code 01 0X references is used to read a digital output s ON OFF status of the UMC800 in a binary data format All binary data transferred using function code 01is mapped into bytes Broadcast is not supported The query message specifies the starting Digital Output DO and the quantity of DOs to read The DO address in the message is based on the slot and channel number of the digital output being read Table 4 4 shows the Modbus Comm Digital I O Channel to Address Mapping Query message format for function code 01 Slave Function Starting Starting Number Number CRC CRC Address Code Address Address DO DO High Low High Low Example Read DO channels 1 to 6 located in slot 1 from slave at address 02 0201 00 00 00 06 CRC CRC Response 2 01 The DO status in the response message is packed as one DO per bit of the data field Status is indicated as 1 ON 0 OFF The LSB of the first data byte contains the DO addressed in the query The other DOs follow toward the high order end of this byte and from low order to high order in subsequent bytes If the returned DO quantity is not a multiple of eigh
124. en 182 8 76 TAHD Function Block 183 8 71 TOFE Finchon 184 8 78 TOT 185 8 79 TPO Function Block he Eo eee eee 186 8 80 TPSC 3POS Function 4 44 402 22 00000001000000000000000000000000000000004500000 187 8 81 TRIG Function BOCK sess noe ra ee ettet o e 190 8 52 UPDN Function Block e ep eti det een Ere eed td den ee 191 8 83 VLIM Function Block ce ee aber 192 8 84 WTURNFunction BIOCK oido ce eaae leo Ce aate Pe E aa 193 8 85 WV AR Funcion Block te e tee tte te ete tee vie ee Ee E de ae ded Rae bee 194 8 86 XPR Function BOCK Tert saad etre re eee ea e 195 8 57 AOR Function Block iile feet Seer EE 196 8 86 Variables c RE EAE e LEE LE Aer NEU RR eles haa 197 9 BLOCK STATUS TYPES iecore uea aes 198 O gt ere E d PR eee E 198 9 2 Block Status Values and nnne sterne
125. ep 2 Calculate the offset address for segment 8 in a profile This is calculated as Segment 8 offset address segment number 1 8 8 1 8 56 38 Step 3 Use the table above to determine the register offset for the ramp value The value is 4 Step 4 Calculate the address by adding the results of steps 1 2 and 3 to determine the register address Register address Setpoint program 2 profile base address t Segment 8 offset address Ramp value register offset 2 00 38 4 2A3C UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables 6 15 Scheduler Value Register Map Summary The SP Scheduler parameters are listed according to category related to SP Scheduler status plus interaction and scheduler segment mapping section is also provided to aid in configuring a Scheduler and recipe interface for third party software Function Code Support Read Function Code 3 Write Function Code 16 10 hex Scheduler Value Register Map You will need to define the parameters for the Schedule as required by the application Application notes for these parameters are provided and further defined in the Scheduler Value Register Map Table 6 19 Scheduler Segment Register Map Table 6 20 indicates the range of addresses applicable to a scheduler segment Each segment uses 48 registers 30 hex Segment Register Map Addresses Table 6 21 describes
126. epeat as configured in the UMC800 0066 40103 Rate 2 R W Floating Point in Minutes 0068 40105 Cycle Time for Analog Scan R Floating Point in Seconds 006A 40107 LSP 1 R W Floating Point in Engineering Units 006C 40109 LSP 2 R W Floating Point in Engineering Units 006E 40111 Alarm 2 SP 1 R W Floating Point in Engineering Units 0070 40113 Alarm 2 SP 2 R W Floating Point in Engineering Units 0074 40117 SP Low Limit R W Floating Point in Engineering Units Operator Limit 0076 40119 SP High Limit R W Floating Point in Engineering Units Operator Limit 0078 40121 Working Set Point R W Floating Point in Engineering Units On a write to this register the instrument will update the proper set point according to the loop s currently selected set point 007A 40123 Output Low Limit R W Floating Point in Engineering Units 007C 40125 Output High Limit R W Floating Point in Engineering Units 007E 40127 Output Working Value R W Floating Point in Engineering Units 0088 40137 Bias R W Floating Point in Engineering Units Auto Man bias block value is Read Only 008A 40139 Deviation R Floating Point in Engineering Units SP PV 008 40143 Manual Reset R W Floating Point in Engineering Units 0090 40145 Feed forward Gain R W Floating Point in Engineering Units 0092 40147 Local Percent Carbon Monoxide R W Floating Point in Engineering Units 0094 40149 Furnace Fact
127. er Use RW Description REAL c block status see section 9 2 for code list 1 status oUT D 8 18 BOOL O R values of digital card inputs Static Configuration Parameters None 2 01 UMC800 Modbus Serial Communications User Manual 117 Function Parameter Index Reference 8 24 DIV Function Block Description The DIV label stands for Division Mathematical operation This block is part of the Math category It looks like this graphically on the Control Builder OUT Dynamic Parameters Table 8 31 DIV Dynamic Parameters Parameter Index Type Use Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL R output X 2 REAL I R input 1 Y 3 REAL I R input 2 Static Configuration Parameters None 118 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 25 DO Function Block Description The DO label stands for Digital Output This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder D01 1 OR D01 1 00000 we 0000 Fast Logic Dynamic Parameters Table 8 32 DO Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section
128. ere if in the STARTING state then remaining start time If in the STOPPING state then the remaining stop time Otherwise 0 sec RDY 3 BOOL R ON while in the Ready State otherwise OFF PRES 4 BOOL R ON while in the Pre Start State while start delay timer is counting otherwis OFF STRT 5 BOOL R ON while in the Starting state while feedback delay timer is counting or fdbk is ON otherwise OFF RUN 6 BOOL R ON when in the Running state otherwise OFF STOP 7 BOOL R ON while in the Stop state otherwise OFF FAIL 8 BOOL R ON while in the Failed state otherwise OFF DIS 9 BOOL R ON while in the Disabled state otherwise OFF STI 10 REAL R Enumeration representing the different states NOT USED READY PRESTART STARTING RUNNING STOPPING DISABLED FAIL 2 01 UMC800 Modbus RTU Serial Communications User Manual 111 Function Parameter Index Reference Parameter Index Type Use R W Description OUT 11 BOOL fdbk BOOL ON while in the Running and Stopping state otherwise OFF ON Request to transition to the Starting state OFF Request to transition to the Stopping state started OFF device has not started Device Failure ON device reports a failure causes the control to transition to the Failure state OFF z no device failure an OFF to ON transition will manually reset the control when it is in the Fail sta
129. ert pe tete pete aan died 118 8 25 DO Function BIOCK entes esee aee 119 8 26 8 DO Function Block eite ne ere eda nan ee aera de 120 8 27 DSW Function Block er terre e ere dde e tee ve Pe eed etas 121 5 28 FOEN Function Block e o eme ete ERR ERES 122 8 29 BL Function Block ihe eee e 124 8 30 FSS Function Block ecd ean e AE nece ie ea aee 125 8 31 ESYSS Function Block reete det etate ce eee ette dee 127 8 32 HEEEM Functiott Block ee t eret eet terree ere ee ve ee e nce ee ere erre ed tad 128 8 33 HMON Function B lock 129 8 34 HOA Function Block ne cd dae ot aora Pare 130 8 35 HSEE Functi n Blokon mron ed ettet mt rede ed te epe hs Lee 132 5 36 EDILG gt PUNCHOMBIOCK 133 8 37 EMON Function Block gesiene 5 134 8 38 ESEL Function 135 8 39 LICH Euncton Block u a ier t eeter ertt et et ean hance PME Re Ete ed 136 8 40 MATH Function Block eter 137 8 41 MBR Foncion Block etate ero e abe a 138 8 42 MBS Function Block a A A 139 8 43 MBW Fun
130. es should be set to 0 66 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Example Query Use the UMC800 message write scattered 32 bit to write a value of 100 to the LSP of the PID function block and to change to AUTO mode Assume the function block number of the PID block is 2 Assume a slave address 02 Format of query 02 15 18 00 00 00 00 00 80 09 02 00 02 02 01 42 00 00 02 04 00 00 00 00 CRCCRC Contents from left to right Slave address 02 Function code 15 write Byte count 24 decimal 18 hex Reference type File number high File number low Starting address high Starting address low Register count high Register count low Contents of Write Scattered 32 bit configuration message See Figure 7 3 Contents from left to right Header 80 Function Code 03 Number of values requested 02 Filler Byte 00 Table 02 Table 8 77 Block number 02 Index 01 index number of LSP See Table 8 77 Value of LSP in IEEE format 42C80000 Block number 02 Index 04 index number of man_mode See Table 8 77 Value of man_mode 00000000 OFF Example Response Continuing with the example query above the following response would be returned assuming the query was acknowledged 02 15 09 00 00 00 00 00 00 00 09 03 CRC CRC Contents from left t
131. eters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL O W Result 0 to 99 DIG A D1 2 BOOL I R Bit 0 of the BCD lower digit DIG B D2 3 BOOL I R Bit 1 of the BCD lower digit DIG C D4 4 BOOL I R Bit 2 of the BCD lower digit DIG D D8 5 BOOL I R Bit 3 of the BCD lower digit DIG E D10 6 BOOL I R Bit 0 of the BCD upper digit DIG F D20 7 BOOL I R Bit 1 of the BCD upper digit DIG G D40 8 BOOL I R Bit 2 of the BCD upper digit DIG H D80 9 BOOL I R Bit 3 of the BCD upper digit Static Configuration Parameters None 104 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 14 BOOL Function Block Description The BOOL label stands for Free Form Logic This block is part of the Logic category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 17 BOOL Dynamic Parameters Static Configuration Parameters None 2 01 Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 BOOL lo R Result ERR 2 BOOL lo R Error indication A 3 BOOL I R Input 1 B 4 BOOL I R Input 2 C 5 BOOL I R Input 3 D 6 BOOL I R Input 4 E 7 BOOL I R Input 5 8 BOOL I R Input 6 G 9 BOOL I R Input 7 H 10 BOOL I
132. eturned instead of a function code TABLE NUMBER 0 Alarm 1 Event Figure 7 9 Historical Data Upload Acknowledge See Table 7 5 on page 87 80 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 11 Event Summary Introduction Figure 7 10 shows the Read request and response format for Function Code 11 Read Event Summary This operation lets you retrieve the last 10 event occurrences These events are organized from newest to oldest Message Formats Header Byte 1 Request Message READ WRITE 0 Read FUNCTION CODE OB Read Event Summary Header Byte1 Byte2 Byte3 Byte4 Byte5 Byte6 Byte7 Byte8 Byte62 ACKNOWLEDGE zal UNACKNOWLEDGE 09 Acknowledge OA Unacknowledge EVENT RECORD FUNCTION CODE Each event record is 6 bytes Up to OB Read Event Summary 10 records If response is Unacknowledge then an error Each event record has the following code is returned instead of a function code format SEQUENCE NUMBER Byte Suggested Name Description A unique number used as a handshake between the OI 3 EventNumber 0 2 no event occurred and the controller It is passed to the controller in the 1 to 32 event number This number event acknowledgement message Th controller uses is determined by the order of events in the this number to determine which events were configuration from the order o
133. f records acknowledged 4 Spare padding for word alignment 5 8 Time The time in ANSI format when the event entered the active state Figure 7 10 Event Summary See Table 7 5 on page 87 2 01 UMC800 Modbus RTU Serial Communications User Manual 81 Controller Configuration Messages Function Codes 20 and 21 7 4 12 Event Acknowledge Introduction Figure 7 11 shows the Write request and response format for Function Code 12 Event Acknowledge This operation lets you acknowledge the active events that were uploaded in the Event Summary message Message Formats Header READ WRITE 80 Write FUNCTION CODE OC Event Acknowledge Header ACKNOWLEDGE UNACKNOWLEDGE 09 Acknowledge 0A Unacknowledge FUNCTION CODE OC Event Acknowledge SEQUENCE NUMBER If response is Unacknowledge then an error code is returned instead of a function code Byte 1 Byte 2 Request Message pas SEQUENCE NUMBER A unique number used as a handshake between the host and the Controller This number is passed to the host in the Event Summary message The Controller uses this number to determine which events were acknowledged Byte 1 Byte 2 Response message JC See Table 7 5 on page 87 Figure 7 11 Event Acknowledge 82 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 13 Read Setp
134. force of the digital output All other values are illegal and will not effect the digital output 06 Preset Single Register Write Data in 16 bit Integer Format high low ONLY 08 Loopback Test Used for diagnostic testing of the communications port 16 10h Preset Multiple Registers Write Data in 16 bit Format high low Used to write integer and floating point override data Registers are consecutive and are imaged from the host to the instrument 17 11h Report Device ID Read instrument ID and connection information ROM version etc 20 14h Read General Reference Used to Read or upload the instrument s configuration into the host device See Section 7 2 21 15h Write General Reference Used to Write or download an instrument s configuration into the instrument from a host device See Section 7 3 2 01 UMC800 Modbus RTU S erial Communications User Manual 11 Modbus RTU Function Codes 12 Table 4 2 Maximum Number of Object Addresses Loop Segments per Scheduler Schedule Object Name Max No of Object Name Max No of Addresses Addresses Alarms Status 120 Variable Value 150 Analog Input Set Point 4 Programmer Value Analog Output Segments per Set 50 Point Programmer Discrete Input 96 Tagged Signals 500 96 Scheduler Value 1 Output Coil 50 Table 4 3 Maximum Number of Registers Allowable per Request Function Code 1 2 Max No of R
135. ger the hardware module output turns ON for 1 second The PREI turns ON for approx 1 sec see note 6 default ON Local preset Local preset count in EU 0 no alarm indication on PREI pin there are no limits default 0 Remote 4 BOOL Preset action 2 BOOL ON use remote preset count OFF use local preset count OFF latch the hardware module output latches ON until default ON 156 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 58 PID Function Block Description The PID label stands for Proportional Integral Derivative 3 mode control action This block is part of the Loops category It looks like this graphically on the Control Builder INPUT PV OTHER INPUTS Y OTHER OUTPUTS PID1 PIDOO1 Remote Set Point Signal Eng unit or 96 RSP Working Set Point in EU Feed Forward value in ALT Alarm 1 Digital Signal Output Track value in IR AR Alarm 2 Digital Signal Output Track Command ON OFF RC Remote Bias Value for Ratio PID BIAS Switch Inputs from SWO on LPSW function block gt Swi External Mode request from MDSW block MDROI MODE Back Calculation Input for Cascade control Bel Bco Y CONTROL OUTPUT Autotune Indicator ON Autotune in progress A M Output amp Setpoint Mode indication to MDFL block Back Calculation Output fo
136. ges Function Codes 20 and 21 7 4 6 Write Setpoint Program Segment Introduction Figure 7 5 shows the Write request and response format for Function Code 5 Setpoint Program Table This operation lets you write one or more consecutive segments to a setpoint programmer block Up to 15 segments may be written per message 16 bytes per segment Note that the data is written to the specified active programmer in the controller not to a profile in controller memory Message Formats Bytes Header Byte1 Byte2 Byte3 Byte4 21 READ WRITE 80 Write FUNCTION CODE 5 Setpoint Program Table NUMBER OF CONSECUTIVE SEGMENTS TO FOLLOW PROGRAMMER FUNCTION BLOCK NUMBER STARTING SEGMENT NUMBER Select from LCB printout SEGMENT DATA Segment data is repeated for each segment Response Message ACKNOWLEDGE T UNACKNOWLEDGE 09 Acknowledge 0A Unacknowledge NUMBER OF SEGMENTS WRITTEN FUNCTION CODE 5 Setpoint Program Table If response is Unacknowledge then an error code is returned instead of a function code Figure 7 5 Write Setpoint Program Segment See Table 7 5 on page 87 See Table 7 1 74 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 7 Read Alarm Point Detail Introduction Figure 7 6 shows the Read request and response format for Function Code 9 Read Alar
137. gure 7 12 Read Setpoint Scheduler Segment Figure 7 13 Write Setpoint Scheduler Segment Figure 7 14 Loopback Request and Response Message Formats xii UMC800 Modbus RTU Serial Communications User Manual 2 01 Introduction 1 Introduction 1 1 Modbus RTU Implementation Overview This implementation is designed to provide a popular data exchange format connecting the UMC800 Slave Port COM A to both Honeywell and foreign master devices The Modbus RTU allows the instrument to be a citizen on a data link shared with other devices which subscribe to the Modbus RTU RS 485 specification These instruments DO NOT emulate any MODICON type device The Modbus RTU specification is respected in the physical and data link layers The message structure of the Modbus RTU function codes are employed and standard IEEE 32 bit floating point and integer formats are used Data register mapping is unique to these instruments The definition in Table 6 1 is the register mapping for the UMC800 and the corresponding parameter value Function Codes 20 and 21 2 01 Also included in this manual is information concerning function codes 20 and 21 in Section 7 They provide additional functionality not available using the function codes described in Section 4 The additional functionality includes e read write function block dynamic data that is not part of the function code 03 register set e read function block inputs and outputs that are not part of the f
138. h 1 increment only 2 decrement only direction lo 4 REAL 0 both 1 increment only 2 decrement only hysteresis 5 REAL Range 0 999 2 01 UMC800 Modbus RTU Serial Communications User Manual 163 Function Parameter Index Reference 8 63 RSW Function Block Description The RSW label stands for Rotary Switch This block is part of the Signal Selectors category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 85 RSW Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 REAL R output IN1 2 REAL I R input 1 IN2 3 REAL I R input 2 IN3 4 REAL I R input 3 IN4 5 REAL I R input 4 INS 6 REAL I R input 5 IN6 7 REAL I R input 6 IN7 8 REAL I R input 7 IN8 9 REAL I R input 8 SEL 10 REAL R select input to output Static Configuration Parameters None 164 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 64 RTMR Function Block Description The RTMR label stands for Resettable Timer This block is part of the Counters Timers category It looks like this graphically on the Control Builder RTMR1 1 TIMER
139. he Control Builder WET PRES RH Dynamic Parameters Table 8 82 RH Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list peac o r Remie Honig DRY IREAL Dry bulb temperature WET REAL Wet bulb temperature PRES IREAL R Atmospheric Pressure Static Configuration Parameters None 162 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 62 ROC Function Block Description The ROC label stands for Rate of Change This block is part of the Auxiliary category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 83 ROC Dynamic Parameters status 0 REAL C R block status see section 9 2 for code list hi rc 1 BOOL R ON if rate gt setpoint else OFF lo rc 2 BOOL R ON if rate setpoint else OFF rate 3 REAL R Rate of Change in EU min IN 4 REAL I R Analog Input Static Configuration Parameters Table 8 84 ROC Static Configuration Parameters Parameter Index Type Description filt time 0 REAL filter time constant range hi 1 REAL high rate of change setpoint Range 0 off to 99999 9 eu min range lo 2 REAL low rate of change setpoint Range 0 off to 99999 9 eu min direction hi 3 REAL 0 bot
140. he Logic or Fast Logic category It looks like this graphically on the Control Builder x4 OR OUT 5 Fast Logic Dynamic Parameters Table 8 10 4AND Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 BOOL R output DIG 1 X1 2 BOOL I R input DIG 2 X2 3 BOOL I R input DIG 3 X3 4 BOOL I R input DIG 4 X4 5 BOOL I R input Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 97 Function Parameter Index Reference 8 9 8AND Function Block Description The SAND label stands for the AND Boolean function 8 Inputs This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder OUT OR OUT Fast Logic Dynamic Parameters Table 8 11 8AND Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 BOOL R Output DIG 1 X1 2 BOOL I R input DIG 2 X2 3 BOOL I R input DIG_3 X3 4 BOOL I R input DIG 4 X4 5 BOOL I R input DIG_5 X5 6 BOOL I R input DIG_6 X6 7 BOOL I R input
141. i petrae 157 8 59 PTMR Function Block iced tien de eee tee netter tee e alte ele ve re aes 160 UMC800 Modbus RTU Serial Communications User Manual 2 01 8 60 ROP Function Block e Ee 161 5 61 REL Block 55 ne eR ERA ER sedes 162 8 02 ROC Function BIOCK etd eee secet deest pete ete eek edet eere 163 8 63 RSW Function BlOCK icr hcec eee 164 8 64 Function Block 165 8 05 SCB Pinchon Block 2 ede dee ede 167 5 66 SPEY Function Block ri ere ri dee em ere Re EU ERR ERE GR 168 8 67 SPP Fonction Blo keissa iae ee ee nO Nd 170 8 68 SPS Function Block ecc e e daa a dao has ie hain eh 173 8 69 eee ee etae eee eee ipea dete de ee Ne DU edes 176 8 70 STEL Function Block itte ee rere ree eee e Encre eee terre 177 8 71 STSW Function Block te ett ete 178 8 72 SORT Function Block eee tente 179 8 73 SUB Function BIOCK ee epe cedro end 180 85 74 4SUB E ncuon Block rere rete eet etate rr Renee edet ves 181 8 75 SW Funcion Blokai ater eder ta ERR ETE ev
142. ic Configuration Parameters None 196 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 88 Variables Description Assigned Block Number 250 provides a means of reading from and writing to various arrays of variables List Block Number 250 in your request message and the required index number The index numbers 0 to 149 for the various variables can be obtained from the Control Builder variable list printout Digital Variables are represented as a floating point 0 for OFF and a floating point for ON ATTENTION For Communications subtract 1 from the variable index number on the Print out For Example Variable 1 will be Variable 0 for communications purposes Dynamic Parameters Table 8 121 Variables Parameter Index Type Use R W Description Variable Parameter 0 149 REAL C R Array of Variables 0 to 99999 9 2 01 UMC800 Modbus RTU Serial Communications User Manual 197 Block Status Types 9 Block Status Types 9 1 Overview Introduction Table 9 1 lists the Function Block Status Values and definitions for communication reference when Index 0 is requested in a Dynamic I O Table of a function block Common Function Block Status Types These status types are common to all block types UNEXECUTED e OK e BAD TYPE ICNT Input Count e BAD SSR 9 2 Block Status Values and Definitions
143. ic Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 109 Function Parameter Index Reference 8 17 CMPR Function Block Description The CMPR label stands for Comparison Calculation This block is part of the Calculations category It looks like this graphically on the Control Builder CMPR1 Dynamic Parameters Table 8 21 CMPR Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list XGY 1 BOOL lo R X Greater than Y XEY 2 BOOL R X Equals Y XLY 3 BOOL lo R X Less than Y X 4 REAL I R input 1 Y 5 REAL I R input 2 Static Configuration Parameters None 110 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 18 DC Function Block Description The DC label stands for Device Control This block is part of the Auxiliary category It looks like this graphically on the Control Builder DC1 1 001 REQ RDY FDBK PRES ERR STRT RST RUN a DIS STOP FAIL DIS STI Dynamic Parameters Table 8 22 DC Dynamic Parameters status 0 REAL C R block status see section 9 2 for code list req reset 1 BOOL C R W ON request to reset the control if in the Failed State rem time 2 ULONG C R Time in seconds count down wh
144. ime Units R W Bit Packed Bit 0 Reserved 2 hours 3 15 Unused 52 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables 6 16 Scheduler Segment Register Map A schedule can contain up to 50 segments Each segment is made up of 48 30 hex registers The segment mapping for Scheduler 1 is shown below Table 6 20 Scheduler Segment Register Map Addresses Start Address End Address Description 3200 322F Scheduler 1 Segment 1 3230 325F Scheduler 1 Segment 2 3260 328F Scheduler 1 Segment 3 3B30 3B5F Scheduler 1 Segment 50 2 01 UMC800 Modbus RTU Serial Communications User Manual 53 Register Map for Process and Operation Type Variables 6 17 Segment Register Map The table below describes the registers that are part of a schedule segment To determine the actual register address for a parameter within a segment add the register offset to the start address of the segment Table 6 21 Segment Register Map Addresses Register Parameter Name Access Notes Offset within segment 0000 Guaranteed Soak Type 1 R W Bit Packed Bit Packed Bit 0 Off Bit 1 Low Bit 2 High Bit 3 Low amp High Bit 4 15 Unused Note 1 0001 Guaranteed Soak Type 2 R W See Guaranteed Soak Type 1 0002 Guaranteed Soak Type 3 R W See Guaranteed Soak Type 1 0003 Guaranteed Soak Type 4 R W See Guarant
145. indicates loop forever Writing to this register is only permissible in the reset or ready mode 1F16 47959 Repeats 1F3A 47995 Bit 0 Reserved 1 minutes 2 hours 3 15 Unused R W Bit Packed Bit 0 O Time 1 Rate Bit 1 15 Unused Writing to this register is only permissible in the reset or ready mode Ramp Units R W Bit Packed For selection of Soak or Hold guarantee Per Segment requiring selection per segment in a table IF3C 47997 Guaranteed Soak Type Bit 0 per segment 1 all soaks 2 all segments 3 15 Unused None if none of the bits is set Writing to this register is only permissible in the reset or ready mode Time Units R W Bit Packed IF3B 47996 44 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables 6 13 Set Point Programmer Segment Map A profile contains up to 50 segments Each segment is made up of 8 registers The segment mapping for setpoint programmer 1 is shown below Table 6 14 Set Point Programmer Segment Map Addresses Start Address End Address Description 2800 2807 Set Point Programmer 1 Segment 1 2808 280F Set Point Programmer 1 Segment 2 2810 2817 Set Point Programmer 1 Segment 3 2088 208F Set Point Programmer 1 Segment 50 6 14 Segment Register Map The table below describes the registers that are part of a setpoint programmer segment To determine the actual reg
146. ing edge ITimeStamp 16 LONG C R Time of last modification fGuarSoako 17 REAL C R W guaranteed soak low limit fGuarSoakHi 18 REAL C R W guaranteed soak high limit 170 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference Parameter Index Type Use R W Description fRestartRamp 19 REAL C R W ramp rate to use when power down restart is in effect R W segment jumped to on a pulse to JOG input R W first segment in a loop 0 gt no loop R W last segment in a loop 0 gt no loop R W output high limit for display purposes only R W output low limit for display purposes only TRUE ramp time FALSE ramp rate Dynamic Output Parameters Table 8 91 SPP Dynamic Output Parameters Parameter Index Type R W Description STA 34 REAL R program state N A RESET RUN HOLD GHOLD STOP SEG 35 REAL R current segment number PGM 36 REAL R current program number SP 37 REAL R setpoint output EU AUX 38 REAL R auxiliary output EU STMR 39 REAL R time remaining in current segment minutes STME 40 REAL R time elapsed in current segment minutes PTME 41 REAL R time elapsed in program minutes GHOLDI
147. ints allspl allsp2 al2spl al2sp2 99999 to 99999 default 0 al hyst 25 REAL alarm hysteresis 0 to 5 96 man reset 26 REAL Manual Reset 100 to 100 in output default 0 used for both tune sets FUZZY 28 BOOL ON enables fuzzy logic overshoot suppression default OFF TUNESET2 29 BOOL Use tune set 2 default OFF GAIN2 30 REAL proportional gain 0 1 to 1000 or proportional band 0 1 to 100046 Tune Set 2 RATE2 31 REAL derivative time 0 or 0 1 to 10 minutes Tune Set 2 RESET2 32 REAL integration time 0 or 0 02 to 50 minutes or repeats per minute 0 or 50 to 0 02 repeats Tune Set 2 use propband 33 BOOL Use Gain 0 or Proportional Band 1 use rpm 34 Use minutes 0 or repeats per minute 1 for integral constant sp rate dn sp rate up 35 36 Set point low rate of change limit 0 off to 99999 eu min Set point high rate of change limit 0 off to 99999 eu min FF GAIN 37 Feed forward gain 0 0 to 10 0 devbar hi 41 RATIO 39 REAL Gain value for Ratio PID 20 to 20 default 1 used when BIAS gt 0 LBIAS 40 REAL Bias value for Ratio PID when BIAS BIAS 99999 to 99999 0 High scale value for deviation bar graph 0 to 99999 default 100 devbar low 42 REAL Low scale value for deviation bar graph always devbar hi 2 01 UMC800 Modbus RTU Serial Communications User Manual
148. ion Parameter Index Reference 8 34 HOA Function Block Description The HOA label stands for Hand Off Auto Switch This block is part of the Auxiliary category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 44 HOA Dynamic Parameters Parameter Index Type use ww Description status 0 REAL C R block status see section 9 2 for code list current state 1 ULONG R current state of the block OFF HAND AUTO BYPASS local_state_req 2 ULONG R W request to change the hand off auto state Only monitored when bypass in is OFF and HOA Source is set to Local or Local Remote NO REQUEST OFF HAND AUTO remote state req 3 ULONG C R W request to change the hand off auto state Only monitored when bypass in is OFF and HOA Source is set to Remote Local Remote NO REQUEST OFF HAND AUTO HOA source 4 ULONG C R Permitted source for a state change request LOCAL REMOTE LOCAL feedback value 5 ULONG C R Range 0 8 where 0 Undefined hand out 6 BOOL R ON when the current state is hand auto out 7 BOOL R ON when the current state is auto req out 8 BOOL R ON when the current state is Auto and the REQ input is ON or when the current state is Hand otherwise OFF req in 9 BOOL I R When the current state is then Req out equals Req in when not in Auto
149. ister address for a parameter within a segment add the register offset to the start address of the segment Table 6 15 Segment Register Map Addresses Register Parameter Name Access Notes Offset within Segment 0 Ramp Soak Segment R W Bit Packed Guaranteed Soak Bit 0 1 ramp segment 0 soak segment Enable Bit 1 1 2 guaranteed soak enabled 0 guaranteed soak disabled Bit 0 is ignored in the hold mode Writing to this register is not permissible in the run mode 1 Events R W Bit Packed Bit 0 Event 1 Bit 15 Event 16 0 Event OFF 1 Event ON Writing to this register is only permissible in reset or ready mode 2 Time or Rate R W Floating Point in time units configured for the set point programmer Writing to this register is not permissible in the run mode 4 Ramp or Soak value R W Floating Point Writing to this register is not permissible in the run mode 6 Soak value for R W Floating Point auxiliary output use Writing to this register is not permissible in the run mode Time or Rate for duration 2 01 UMC800 Modbus RTU Serial Communications User Manual 45 Register Map for Process and Operation Type Variables 6 14 1 Example For Determining a Segment Register 46 To change the ramp value in segment 8 of setpoint programmer 2 the register address is determined as follows Step 1 Use Table 6 1 to determine the start address for setpoint program 2 profile The value is 2A00 Hex St
150. it 0 1 Diagnostic Bit 1 1 unused Bit 2 1 Maintenance Offline mode Bit 3 1 Program mode Bit 4 1 Reset Unit Force Cold Start Write Only Bit 5 1 On Line Run mode Bit 6 15 Unused 0002 40003 Load Recipe R W Floating Point Read Returns zero Write Loads the recipe identified in the request from the recipe pool 28 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables 6 3 Loop Value Register Map This table contains addresses of Loop 1 see Table 6 1for addresses of other loops Each successive control loop is offset by 256 The loop number corresponds to the PID block entry sequence during Control Builder configuration The Modbus loop number address for a loop can also be obtained from the Control Builder printout of Tag Properties Function Code Support Reads Function Codes 3 4 Writes Function Code 16 10 hex for preset of multiple registers e g for floating point Writes Function Code 6 for presetting an integer value Address hex 0040 0042 0044 0046 0048 004A 004C 004 0050 0052 0054 0056 0058 005 005 0060 2 01 Table 6 3 Loop Value Register Map Addresses Parameter Name Access ie ai Remote Set Point SP2 R W Working Set Point mma RN wooo h Carbon Potential block R temperature Gain 1 Prop Band 1 if active R W Reset 1 R R W x Cycle
151. l from the 8 bit exponent value DECIMAL HEXADECIMAL BINARY 100 42C80000 01000010 11001000 00000000 00000000 Removing the sign and mantissa bits the exponent becomes DECIMAL HEXADECIMAL BINARY 133 85 1000010 12000000 Or 1x2 0x25 Ox2 0x2 Ox2 1 2 0x2 4 1x2 Subtract a bias of 127 decimal from the exponent to determine its value 133 127 6 Mantissa and Exponent Combination Combining the mantissa and exponent from the two previous examples float number mantissa x exponent float number 1 5625 2 15625 x 64 100 0 Below is a list of sample float values in IEEE format DECIMAL HEXADECIMAL 100 0 42C80000 100 0 C2C80000 0 5 3F000000 1 75 00000 0 0625 30800000 1 3 800000 0 00000000 2 01 UMC800 Modbus RTU Serial Communications User Manual 7 Modbus RTU Message Format Reserved Operands Per the Standard certain exceptional forms of floating point operands are excluded from the numbering system These are as follows EXCEPTION EXPONENT MANTISSA Infinity All 1 s All 0 s Not a Number NAN All 1 s Other than 0 s Denormalized Number All 0 s Other than 0 s Zero All 0 s All 0 s 3 3 2 Modbus Double Register Format Each IEEE 32 bit floating point number requires two consecutive registers four bytes starting with the register defined as the starting r
152. m Point Detail This operation lets you see various alarm parameters Message Formats Header Byte 1 Byte 2 request Message ALARM NUMBER REQUESTED 0 Read 1 to 120 1 to 78 hex This number designates the alarm point to be read Alarms 1 12 are assigned to FUNCTION CODE alarm group 1 alarms 13 24 to alarm group 2 etc 9 Alarm Point Detail Header Byte1 Byte2 Byte3 Byte4 Byte5 Byte6 Byte7 Byte8 Byte9 Byte10 Byte11 Byte 12 Responsemessage JL JL JL JL JL IL IL ACKNOWLEDGE UNACKNOWLEDGE 09 Acknowledge Unacknowledge FUNCTION CODE 9 Alarm Point Detail If response is Unacknowledge then an error code is returned instead of a function code ALARM NUMBER RETRIEVED 1 to 120 1 to 78 hex TIME OF OCCURRENCE TIME OF CLEAR SIGNAL STATE Number of seconds since Jan 1 1970 Number of seconds since Jan 1 1970 1 Active The value 0 is reserved to indicate that The value 0 is reserved to indicate that 0 Inactive the time has not been recorded the time has not been recorded ALARM STATUS Bit 0 indicates Alarm State 1 Active 0 Inactive Bit 1 indicates unacknowledged state 1 Unacknowledged 0 Acknowledged Bit 2 indicates latch state 1 Active 0 Inactive Figure 7 6 Read Alarm Point Detail See Table 7 5 on page 87 2 01 UMC800 Modbus RTU Serial Communications User Manual Controller Configuration Messages Function
153. n Block Description The XFR label stands for Bumpless Analog Transfer Switch This block is part of the Signal Selectors category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 118 XFR Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL lo R output X 2 REAL I R Y 3 REAL I R SY 4 BOOL I R select Y when ON Static Configuration Parameters Table 8 119 XFR Static Configuration Parameters Parameter Index Type Description xrate 0 REAL transfer to X rate eu min gt 0 0 to 99999 yrate 1 REAL transfer to Y rate eu min gt 0 0 to 99999 2 01 UMC800 Modbus Serial Communications User Manual 195 Function Parameter Index Reference 8 87 XOR Function Block Description The XOR label stands for the Exclusive OR Boolean operation This block is part of the Logic and Fast Logic category It looks like this graphically on the Control Builder Dynamic Parameters OR Fast Logic Table 8 120 XOR Dynamic Parameters Parameter Index Type Use R W Description status 0 C R block status see section 9 2 for code list OUT 1 BOOL R output DIG 1 2 BOOL I R input DIG_2 3 BOOL I R input Stat
154. n evaluating controller communications operating status and taking actions to correct faults Symptoms are listed as well as the possible cause and recommended user action for correcting fault conditions if necessary Table 10 1 Modbus Communications Troubleshooting Symptom Possible Cause Probable Solution UMC800 slave is not responding to the master s request UMC is not powered up Apply power to the UMC800 800 is missing the communications card Order and install a UMC800 communications card UMC800 Comm card is not installed properly Install the communications cable to COMM A on the UMC800 Install the communications cable to the proper port on the master UMC800 Station Address is incorrect Check the address to which the master is issuing the request and compare it to the UMC800 s actual address Change one to match the other if they are not equal Baud rates do not match Check the baud rate at the master and compare it to the 800 5 baud rate Change one to match the other if they are not equal Noise on the communications network Check the COMM A status screen on either the or from the PC software Monitor the number of messages received and the errors accounted Ensure that the communication cable is properly terminated Ensure that no other slave on the network is set with the same station address as the UMC800 that is exhibiting problems
155. nction Parameter Index Reference 8 50 NOT Function Block Description The NOT label stands for the NOT Boolean logic function or Logic Inverter This block is part of the Logic or Fast Logic category It looks like this graphically on the Control Builder NOT1 NOT1 1 X OUT OR X a 52 OUT Fast Logic Dynamic Parameters Table 8 65 NOT Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 BOOL lo R output X 2 BOOL I R input Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 147 Function Parameter Index Reference 8 51 ONDT Function Block Description The ONDT label stands for the On Delay Timer This block is part of the Fast Logic category It looks like this graphically on the Control Builder ONDT1 1 RUN Dynamic Parameters Table 8 66 ONDT Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list OUT 1 BOOL O W output RUN RST 2 BOOL I R ON run OFF reset Static Configuration Parameters Table 8 67 ONDT Static Parameters Parameter Index Type Description Delay o REAL Delay Time 0 seconds to 9999 9 148 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function
156. nded that an RS 485 to RS 232 converter such as Black Box model IC901A be used to interface with the host PC Also be certain that the Half Duplex Turnaround Delay parameter for the converter set to 1 millisecond or less 2 Wire Shielded 4 Wire Shielded Shield Receive Shield Receive Transmit Transmit Figure 2 1 COMM A port wiring 2 wire and 4 wire 2 UMC800 Modbus RTU Serial Communications User Manual 2 01 Wiring 2 2 RS 485 serial communications When connecting the controller to an RS 485 communication link see Figure 2 2 you must use termination resistors at each end of the link The following cables with the listed resistor values can be used for connecting the controller RS 485 Cables Belden 9271 or equivalent with 120 ohm termination resistors 2 000 ft maximum Belden 9182 or equivalent with 150 ohm termination resistors 4 000 ft maximum Host Computer RS232 RS485 Converter OFFLINE RUN PROGRAM ONFIGURATION 0z 2 Controller with Optional Communications Board 100 240 V 50 60 Hz 100 VA MAX F3 15 AT COMMA COMM B RS 485 communications requires termination resistors To other UMC800 at each end Controllers Figure 2 2 RS 485 port wiring 2 wire 2 01 UMC800 Modbus Serial Communications User Manual 3 Modbus RTU Message Format 3 Modbus RTU Message Format Table 3 1 Modbus RTU Messag
157. nds PK 4 REAL C R peak control block execution time in seconds RES CONSUME 5 C R resources consumed specified in percent CB OVERRUN 6 REAL C R Number of control block cycle overruns EXECFAULT 7 BOOL C R ON z executive fault CYCTIME 8 REAL R control block cycle time in seconds CYCMINS 9 REAL R control block cycle time in minutes NEWSTART 10 BOOL R ON new start RESTART 11 BOOL R ON warm start ALM_ACTIV 12 BOOL O R ON active alarm ALM_UNACK 13 BOOL R ON unacknowledged alarm HWOK 14 BOOL R ON z no hardware faults 102 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference Parameter Index Type Use RW Description LOWBTRY R ON battery is low REALTIME OFF R Number of seconds the controller was powered down Valid for only control block execution cycle after power up Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 103 Function Parameter Index Reference 8 13 BCD Function Block Description The BCD label stands for Binary Coded Decimal Translator This block is part of the Auxiliary category It looks like this graphically on the Control Builder Dynamic Parameters Table 8 16 BCD Dynamic Param
158. ng point and 127 integer values in a single request Response message format for function codes 03 04 Slave Function Byte Data Data 2 CRC Address Code Count Example Analog inputs 1 and 2 as floating point values where AI 1 100 0 and AI 2 55 32 02 04 08 42 C8 00 00 42 5D 47 AE CRC CRC UMC800 Modbus RTU Serial Communications User Manual 17 Modbus RTU Function Codes 4 4 Function Code 05 Force Single Digital Output Description Query Force a single digital output 0X reference to either ON or OFF These are the same digital outputs DO used in Function Code 01 The Modbus Comm Digital I O Channel to address mapping is shown in Table 4 4 The UMC800 does not support broadcast and forcing can only be done in the Run mode The query message specifies the DO to be forced Registers are addressed starting at zero DO 1 is address 0 The requested ON OFF state is specified by a constant in the query data field A value of FF 00 hex requests it to be ON A value of 00 00 hex requests it to be OFF A value of FF FF releases the force ATTENTION Any query ON or OFF causes a force mode of this point in the UMC800 controller The Green force LED goes ON While in this mode internal control of function blocks cannot communicate to this point DON T FORGET to send a query to release this force Query message format for function code 05 Slave Function DO DO Force Force CRC CRC Address Co
159. nsaction 79 Multiplication Mathematical operation 2 Inputs 144 Multiplication Mathematical Operation AInputs 745 2 01 UMC800 Modbus RTU Serial Communications User Manual 203 N NEG iubebit 146 ete ie dere pe P Rees 146 Negative 25 aUe 147 NOT Boolean logic 147 Number of Registers Allowable 12 Object Addresses eg ore Re eet 12 ORD T ne ones 149 Off Delay Timer esee 149 On Delay Tamer 5e eene es 148 die Ire ttr en oed 150 On Off Control function esses 150 ONDE ke tiated ie ete 148 OR 2 Inputs Boolean logic function 152 OR 4 Inputs Boolean logic function 153 OR 8 Inputs Boolean logic function 154 P Q Parameters for the Profile 39 Parity eae petere pee E 4 Periodic Timer 160 155 PID cere 157 Polynomial erret rte nn 4 Preset Multiple 11 21 Preset Single Register 11 19 Programmer Numbers sse 38 Propor
160. nt 0 SP1 1 SP2 Bit 2 Remote Local 0 LSP 1 RSP Bit 3 Tune Set 0 Set 1 1 Set 2 Bit 4 IMAN O Inactive 1 Active Bit 5 LO 0 Inactive 1 Active Bit 6 15 Reserved OOFC 40253 Remote Local Set Point State 2 01 UMC800 Modbus RTU Serial Communications User Manual 31 Register Map for Process and Operation Type Variables 6 4 Example for queries using Function Codes 3 6 16 Example 1 Query Read PV Remote SP Working SP Output for Loop 1 from UMC800 at address 2 using Function Code 3 hex codes This will be accomplished by accessing contiguous registers 02 o2 03 40 00 os Response where PV 1000 0 Remote SP 1000 0 Working SP 1000 0 Output 50 0 10 44 e e 44 7 o m 44 7A 00 00 42 as 00 00 Example 2 Query Write a Local Setpoint address 006A to 100 0 for loop 1 at UMC 800 address 1 using Function Code 16 10 hex Function code 16 is used for presetting multiple registers Registers are addressed starting at zero Register is addressed as 0 10 00 6a 00 02 04 42 00 00 crc Response from preset of LSP 1 address 006A to 100 0 at address 1 01 10 00 00 02 CRC CRC Example 3 or Query Set Loop 1 to Auto register OOFA hex at controller address 1 This is a bit packed single register data type Registers a
161. nt Scheduler Segment 7 4 13 The location or address for data in the UMC800 controller consists of a Table Type a Block Number and an Index Number Table Type identifies whether it s a Dynamic I O parameter or Static configuration parameter Block Number identifies a given function block entered in the Function Block Diagram FBD configuration with a unique assigned number between 1 and 250 The block number assignment can be printed out from the Control Builder Index Number identifies a particular parameter in a given block type that is accessible for communication purposes This index information is available from the tables in Section 8 Function Parameter Index Reference Variables Note that a block number 251 has indices that have been assigned automatically for variables entered in the Function Block Diagram configuration Refer to subsection 8 88 The index number assignments for variables can be printed out from the Control Builder 68 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 2 Read Contiguous 32 Bit Values Introduction Figure 7 1 shows the Read request and response format for Function Code 2 Contiguous 32 Bit values This operation lets you read a list of 32 Bit values from a specific block given the starting index number and the number of values involved Up to 61 contiguous values may be read per message 4 by
162. nt required in the profile See Section 7 5 Save the program to a program profile number archive by writing a floating point number to register 47939 This will store the downloaded data utilized by the programmer block to the program profile number used Profile numbers may range from 1 70 could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration The program is now ready to run Note that the current program profile number register 47937 is automatically set to the saved program number Procedure for Uploading Setpoint Programs Table 6 11 Steps to Upload a Setpoint Program using Modbus Function Codes 3 4 6 16 Step Action 1 Set the programmer to RESET by writing any number to 47696 1EOF This be done either with function code 6 or 16 2 Load the program into the setpoint programmer block by writing the program number to registers 47937 and 47938 1F00 and 1F01 This is a floating point register and requires a multiple register write function code 16 3 Read the header information desired registers 47043 1F06 47997 1F3C using function code 3 or 4 4 Read the information for each segment desired using function code 3 or 4 registers 2800 2807 for segment 1 2808 280F for segment 2 etc 2 01 UMC800 Modbus RTU Serial Communications User Manual 41 Register Map for Process and Operation Type
163. ntents have been preset Response message format for function code 06 Slave Function Address Address Preset Preset CRC CRC Address Code High Low Data Data High Low Example Set Loop 1 to Auto address OOFAN to a slave at address 02 02 06 00 FA 00 01 CRC CRC 2 01 UMC800 Modbus RTU Serial Communications User Manual 19 Modbus RTU Function Codes 4 6 Function Code 08 Loopback Message Description Echoes received query message Query Message can be any length up to half the length of the data buffer minus 8 bytes Query message format for function code 08 Slave Function Any data length limited to approximately half CRC Address Code the length of the data buffer Example 02 08 01 02 03 04 CRC CRC Response Response message format for function code 08 Slave Function Data bytes received CRC CRC Address Code Example 02 08 01 02 03 04 CRC CRC 20 UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Function Codes 4 7 Function Codes 16 10h Preset Multiple Registers Description Query Presets values into a sequence of holding registers 4X references The UMC800 does not support Broadcast The register assignments specified in Section 6 with an access type W be written to via Function Code 16 10h The query message specifies the register references to be preset Registers are addressed starting at zero Register 1 is addres
164. o find the correct Dynamic I O or Static Configuration parameter index number for a given function block that is to be accessed through a communications message Abbreviations The abbreviations used in the tables are REAL Floating Point Analog Numbers BOOL Digital ON and OFF states Contained Parameter I Input Value 0 Output Value R Read Only R W Read Write W Write In this section Refer to Table 8 1for a listing of each function block type and respective reference subsection Table 8 1 Function Block Look up Table Function Block Type Identification Label See Subsection 88 UMC800 Modbus RTU Serial Communications User Manual ABS Absolute Value 8 2 ADD Addition 2 Inputs 83 4ADD Addition 4 Inputs 8 4 AI Analog Input 8 5 ALM Analog Alarm 8 6 2AND 2 Inputs 8 7 4AND AND 4 Inputs 8 8 8 Inputs 8 9 AMB Auto Manual Bias 8 10 AO Analog Output 8 11 ASYS Alarm System Monitor 8 12 BCD Binary Coded Decimal Translator 8 13 BOOL Free Form Logic 8 14 CARB Carbon Potential 8 15 2 01 Function Parameter Index Reference 2 01 Function Block Type Identification Label See Subsection CMPR UMC800 Modbus RTU Serial Communications User Manual Comparison 8 16 DC Device Control 8 18 DCMP Deviation Compare 8 19 DENC Digital Encoder 8
165. o right Contents of Write Slave address 02 Scattered 32 bit Function code 15 write configuration Byte count 9 decimal 09 hex message See Figure Reference type 7 3 File number high File number low Contents from left to Starting address high right Starting address low Acknowledge 09 Register count high Function Code 03 Register count low 2 01 UMC800 Modbus RTU Serial Communications User Manual 67 Controller Configuration Messages Function Codes 20 and 21 7 4 Configuration Message Formats 7 4 4 Overview Introduction This section describes the overall format of the request and response messages for the UMC800 Configuration Message bytes on function codes 20 and 21 Refer to sections 7 2 and 7 3 for an anatomy of a message format Available Messages Below are listed the available message requests that are available in this application Loopback Test 7 4 15 Block Parameters Function Code 20 Read See Function Code 21 Write See section section Read Contiguous 32 bit Values 7 4 2 Write Scattered 32 bit Values 7 4 4 Read Scattered 32 bit Values 7 4 8 Write Setpoint Program Segment 7 4 6 Read Setpoint Program Segment 7 4 5 Write Alarm Acknowledge 7 4 8 Read Alarm Point Detail 7 4 7 Historical Data Upload Acknowledge 7 4 10 Historical Data Upload 7 4 9 Event Acknowledge 7 4 12 Event Summary 7 4 11 Write Setpoint Scheduler Segment 7 4 14 Read Setpoi
166. oint Scheduler Segment Introduction Figure 7 12 shows the Read request and response format for Function Code 18 Read Setpoint Scheduler Segment This operation lets you read one or more consecutive segments from a setpoint scheduler block Up to 2 segments can be read per message 84 bytes per segment returned Note that the data is read from the specified active scheduler in the controller not from a schedule in controller memory Message Formats Header Byte 1 Byte 2 Byte 3 Byte 4 ee ER READ WRITE 0 Read FUNCTION CODE 12 Read Setpoint Scheduler Segment NUMBER OF CONSECUTIVE SEGMENTS TO READ SCHEDULER FUNCTION BLOCK NUMBER STARTING SEGMENT NUMBER ByteO Byte 1 Byte 2 3 86 Response Message uu EN ACKNOWLEDGE BE UNACKNOWLEDGE 09 Acknowledge Unacknowledge FUNCTION CODE 12 Read Setpoint Scheduler Segment If response is Unacknowledge then an error code is returned instead of a function code NUMBER OF SEGMENTS WHICH FOLLOW SEGMENT Figure 7 12 Read Setpoint Scheduler Segment See Table 7 5 on page 87 See Table 7 4 UMC800 Modbus RTU Serial Communications User Manual 83 Controller Configuration Messages Function Codes 20 and 21 Table 7 4 Scheduler Segment Data Format Byte Name Description Index 0 3 Time Time value for the
167. on Block Description The ADD label stands for Addition Mathematical Operation 2 Inputs This block is part of the Math category It looks like this graphically on the Control Builder Dynamic Parameters Y X ADD1 1 2 OUT Table 8 3 ADD Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL R output X 2 REAL I R input 1 Y 3 REAL I R input 2 Static Configuration Parameters None 92 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 4 4ADD Function Block Description The 4ADD label stands for Addition Mathematical Operation 4 Inputs This block is part of the Math category It looks like this graphically on the Control Builder A 4ADD1 1 B Ai a Lnd OUT Dynamic Parameters Table 8 4 4ADD Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 R output A 2 REAL I R input 1 B 3 REAL I R input 2 C 4 REAL I R input 3 D 5 REAL I R input 4 Static Configuration Parameters None 2 01 UMC800 Modbus RTU Serial Communications User Manual 93 Function Parameter Index Reference 8 5 Al Function Block Descri
168. on Code 3 Scattered 32 Bit values This operation lets you read 32 Bit values from a specific block given the index numbers and the number of values involved Up to 61 values may be read per message 4 bytes per value returned Message Formats Header Byte Byte2 Byte3 Byte4 Byte5 Byte6 Request Message Lo EN E READ WRITE NDEX NUMBER Note 1 0 Read Index number of the desired parameter within the selected block FUNCTION CODE 3 Scattered 32 Bit Values BLOCK NUMBER Note 1 Select from LCB Printout TABLE FIELD 1 Function Block Configuration Parameters Static 2 Function Block I O Parameters Dynamic Note Configuration Parameters static and 1 O parameters dynamic cannot be accessed in the same message since both the Static parameters and the Dynamic parameters each start at Index Number 0 NUMBER OF VALUES REQUESTED FILLER BYTE For Word Alignment Note 1 One set of Block and Index for each value requested ACKNOWLEDGE DATA FIELD UNACKNOWLEDGE Four Bytes of data 32 bit IEEE Floating Point 09 Acknowledge for each value returned Response Message 0a Unacknowledge FUNCTION CODE NUMBER OF VALUES RETURNED 03 z Scattered 32 Bit Values If response is Unacknowledge then an error code is returned instead of a function code Figure 7 2 Read Scattered 32 Bit Request and Response Message Formats See Parameter Inde
169. on Type Variables 6 19 Device Control Group Register Map Summary This table contains addresses for the Device Control group The Modbus Device Control number address for a Device Control can also be obtained from the Control Builder printout of Tag Properties Function Code Support Reads Function Codes 3 4 Writes Function Code 16 10 hex for preset of multiple registers e g for floating point Writes Function Code 6 for presetting an integer value Table 6 23 Device Control Group Register Map Address Register Parameter Name Access Notes hex decimal 6B00 67393 Reset Request Unsigned 16 Integer Data Ignored Bits 0 6 Device Control State Bit 0 Ready OZNO 1 YES Bit 1 Prestart O NO 1 YES Bit 2 Starting 0 1 YES Bit 3 Running 0 1 YES Bit 4 Stopping 0 1 YES Bit 5 Disabled OZNO 1 YES Bit 6 Failed OZNO 1 YES Bit 7 Run Request Input State 0 1 ON Bit 8 Device Feedback Started O NO 1 YES Bit 9 Device Failed O NO 1 YES Bit 10 Automatic Reset O2Manual 1 Auto 6B01 67394 Status Indicator Bit Packed Bit 11 15 Unused 67395 Remaining Delay Floating Point in Seconds Time 67397 Start Delay Floating Point in Seconds c E 67399 Stop Delay R W Floating Point in Seconds 67401 Feedback Fail Delay R W Floating Point in Seconds 2 01 UMC800 Modbus RTU Se
170. on code 02 Function Byte Code Count Slave Address Example Inputs for channels 2 and 6 in slot 1 are on all others are off 02020122 In the response the status of inputs 1 6 is shown as the byte value 22 hex or 0010 0010 binary Input 8 is the MSB of this byte and input 1 is the LSB Left to right the status of input 6 through 1 is ON OFF OFF OFF ON OFF Input 8and 7 were not requested and so bit 7or the MSB and bit 6 were padded with a 0 UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Function Codes 4 3 Function Codes 03 04 Read Data Registers Description Query Function code 03 4X references or Function code 04 3X references is used to read the binary contents of input registers in the slave referenced in Section 5 Function codes 3 and 4 are not restricted to inputs They may transmit alarm status control parameters etc If a request is made to an address that does not exist in the map in Section 6 the controller will honor that request and return zeros for that address This behavior will greatly enhance the bandwidth on the link vs making several different requests for non contiguous data elements i e Consider a controller that is configured for AI 1 and AI 3 and for some reason AI 2 is an invalid request The contiguous method would allow the read of AI 1 through AI 3 and the data location for AI 2 would be zeros Broadca
171. or R W Floating Point in Engineering Units 0096 40151 Percent Hydrogen R W Floating Point in Engineering Units 0098 40153 On Off Output Hysterisis R W Floating Point in percent of input span 009A 40155 Carbon Potential Dewpoint R W Floating Point in Engineering Units 009C 40157 Three Position Step Motor Time R W Floating Point in seconds 00F7 40248 Enable Disable Fuzzy R W Bit Packed Bit 0 0 Disable 1 Enable 30 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables Address Parameter Name Access Notes hex Register decimal R W Bit Packed one shot action activates autotuning until autotuning completed Bit 0 0 Off 1 On Bit 1 15 Unused OOF8 40249 Demand Tune Request OOF9 R W Bit Packed Bit 0 0 Off 1 On Bit 1 15 Unused Anti soot set point limit enable 40251 Bit 0 0 Manual 1 Auto Bit 1 15 Unused R W Bit Packed selects either SP1 or SP2 as a local SP if the UMC800 is configured as such in PID setup Bit 0 0 SP1 1 SP2 Bit 1 15 Unused OOFB 40252 Set Point State R W Bit Packed Bit 0 O LSP 1 RSP Bit 1 15 Unused R W Bit Packed selects tuning constant set Bit 0 0 Tune Set 1 1 Tune Set 2 Bit 1 15 Unused 00 40254 Auto Manual State R W Bit Packed Tune Set State OOFE 40255 Loop Status R Bit Packed Bit 0 Mode 0 Manual 1 Auto Bit 1 Set Poi
172. ption The AI label stands for Analog Input This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Parameters Alt 1 59 FAIL Table 8 5 Al Dynamic Parameters Parameter Index Type Use R W Description status 0 Block Status see section 9 2 for code list OUT 1 REAL R analog input value eu FAIL 2 BOOL R Failed input indication Static Configuration Parameters Table 8 6 Al Static Configuration Parameters 94 Parameter Index Type Description filt time 2 filter time constant seconds 0 120 default 0 bias 3 REAL bias eu 99999 99999 default 0 failsafe 4 REAL failsafe value eu default 0 range hi 6 REAL high range value default 0 range lo 7 REAL low range value default 100 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 6 ALM Function Block Description The ALM label stands for the Analog Alarm function This block is part of the Alarms Monitor category It looks like this graphically on the Control Builder Dynamic Parameters ALM 1 PV OUT RSP DISABLE Table 8 7 ALM Dynamic Parameters Static Configuration Parameters Parameter Index 15
173. r 4 Segments 3000 304F Scheduler 1 Value 6 15 3200 Scheduler Segments 6 16 6600 6606 Hand Off Auto 1 6 18 6610 6616 Hand Off Auto 2 6620 6626 Hand Off Auto 3 6630 6636 Hand Off Auto 4 6640 6646 Hand Off Auto 5 6650 6656 Hand Off Auto 6 6660 6666 Hand Off Auto 7 6670 6676 Hand Off Auto 8 6680 6686 Hand Off Auto 9 6690 6696 Hand Off Auto 10 66A0 66A6 Hand Off Auto 11 66 0 66B6 Hand Off Auto 12 66 0 66 6 Hand Auto 13 6600 6606 Hand Auto 14 66 0 66E6 Hand Off Auto 15 66 0 66 6 Hand Off Auto 16 6B00 6B08 Device Control 1 6 19 6B10 6B18 Device Control 2 6B20 6B28 Device Control 3 6B30 6B38 Device Control 4 6B40 6B48 Device Control 5 6 50 6B58 Device Control 6 6B60 6B68 Device Control 7 6B70 6B78 Device Control 8 6B80 6B88 Device Control 9 6 90 6 98 Device Control 10 6BAO 6BA8 Device Control 11 6 0 6 8 Device Control 12 6BCO 6BC8 Device Control 13 6BDO 6BD8 Device Control 14 6BEO 6BE8 Device Control 15 eBFO SBF8 Device Control 16 UMC800 Modbus RTU Serial Communications User Manual 27 Register Map for Process and Operation Type Variables 6 2 Miscellaneous Register Map Table 6 2 Miscellaneous Register Map Addresses Address Parameter Name Access Notes hex 0000 40001 Instrument Mode R W Bit Packed Register decimal Indicators B
174. r Cascade control Dynamic Parameters Table 8 77 PID Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list Isp 1 REAL C R W local set point eu Isp2 2 REAL C R W local set point 2 eu rem mode 3 BOOL R W remote set point mode request OFF man mode 4 BOOL R W manual output mode request OFF ON man out 5 REAL C R W manual output value 5 to 105 96 tune req 6 BOOL R W limit cycle auto tuning request OFF ON rsp_eu 7 REAL C R remote set point in eu for monitoring deviation 8 REAL C R Deviation in eu for monitoring pv 9 REAL C R Process Variable in eu for monitoring WSP 10 REAL R Working setpoint display in eu for monitoring OUT 11 REAL control output 5 to 105 MODE 12 REAL R actual mode encoded See Table 8 78 ALI 13 BOOL R Alarm 1 AL2 14 BOOL R Alarm 2 2 01 UMC800 Modbus RTU Serial Communications User Manual 157 Function Parameter Index Reference Parameter Index Type Use R W Description BCO 15 O R Back Calculation Out ATI 16 BOOL O R Auto Tune Indicator ON Auto Tune in progress PVI 17 REAL I R Process Variable Input eu pv_lo lt PV lt pv hi RSP 18 REAL I R Remote Set Point or eu per sp units FFV 19 REAL I R Feed Forward Value 96 TRV 20 REAL I R Output Track Value 96 TRC
175. re addressed starting at 0 Register 1 is addressed as 0 01 06 00 FA 00 01 Response from preset of LSP 1 address 006A to 100 0 at address 1 01 06 00 00 01 32 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables 6 5 Analog Input Frequency Input Pulse Input Value Register Map Summary Used to access analog input frequency input or pulse input parameters Analog Input Example through AI64 The mapping is with respect to card position starting with the first card slot position numbered 1 through 16 starting at the lower left with an analog input card Since each card has 4 inputs the first card position with analog inputs I O card Type 1 would be thru AIA As an example if the first AI card is in the Slot 1 this would represent through 14 If the next AI card is in slot 2 this would be AI5 thru AI 8 and so on The Frequency Inputs and Pulse Inputs map the same as the Analog Inputs Function Code Support Reads Function Codes 3 and 4 Table 6 4 Analog Input Frequency Input Pulse Input Value Register Map Addresses Address Channel Number Access Notes hex decimal 1800 Analog Input Frequency Input or Pulse Input 1 R 1802 Analog Input Frequency Input or Pulse Input 2 R 1804 Analog Input Frequency Input or Pulse Input 3 R 1806 Analog Input Frequency Input or P
176. re nnns 198 10 DIAGNOSTICS AND 200 10 1 aee ete E 200 11 APPENDIX CRC 16 CALCULATION 42222222 0 201 2 01 UMC800 Modbus RTU Serial Communications User Manual vii Tables Table 3 1 Modbus RTU Message Formats 4 Table 3 2 IEEE Floating Point Number Examples in FP B Format 10 Table 4 1 Modbus RTU Function Codes Definitions 11 Table 4 2 Maximum Number of Object Addresses 12 Table 4 3 Maximum Number of Registers Allowable per Request 12 Table 4 4 Modbus Comm Digital I O Channel to Address Mapping 14 Table 5 1 Modbus RTU Data Layer Status Exception Codes 25 Table 6 1 Global Register Map 26 Table 6 2 Miscellaneous Register Map Addresses _ 28 Table 6 3 Loop Value Register Map Addresses 29 Table 6 4 Analog Input Frequency Input Pulse Input Value Register Map Addresses 33 Table 6 5 Variable Register Map Addresses 34 Table 6 6 Time Register Map Addresses 35 Table 6 7 Alarm Status Register Map Addresses 36 Table 6 8 Signal Tag Register Map Addresses 37 Table 6 9 Steps to Download a Setpoint Program using Modbus Function Codes 3 4 6 16 40 Table 6 10 Steps to Download a Setpoint Program using Modbus Function Codes 20 21 __ 41 Table 6 11 Steps to Upload a Setpoint Program using Modbus Function Codes 3 4 6 16 ___41 Table 6 12 Set Point Programmer Val
177. rial Communications User Manual 57 Introduction 7 Controller Configuration Messages Function Codes 20 and 21 7 1 Overview 58 This section describes function codes 20 and 21 which provide additional functionality not available using the function codes described in the previous sections The additional functionality includes e read write function block dynamic data that is not part of the function code 03 register set e read function block inputs and outputs that are not part of the function code 03 register set e read detail of an alarm point e read the event summary buffer e acknowledge alarms and events e upload historical data for alarms and events For Function Codes 20 and 21 the Byte Swap configuration does not apply All numbers are represented in the FP B byte order Refer to Subsection 3 3 All digital numbers are represented as Floating Point 0 for OFF and Floating Point 1 for ON ATTENTION To access the controller you must have a current Control Builder configuration file available Data is referenced relative to function block number and the index number of the desired parameter It is suggested that you upload the controller configuration using the Control Builder configuration tool to assure that you have a current configuration The Control Builder tool can provide a printout of all function blocks used their number and detail You will also need to use the Control Builder Function Block Reference Guide as a r
178. rogrammer parameters and program segment mapping section is also provided to aid in configuring a SP programmer and recipe interface for third party software Function Code Support Read Function Code 3 Write Function Code 16 10 Hex Considerations and Methods for Downloading Operating and Reading Status of SP Programs A SP programmer interface can be developed and recipes containing a SP profile can be created in third party software using the parameters listed in the following table In creating a SP Programmer interface showing a number of segments a graphic display might include a table referencing the maximum number of ramp soak segments that you will be using for your process The parameters to be referenced for each segment are listed in Table 6 15 Register Map Ramp Soak Segments Programmer Numbers The parameters that follow refer to SP Programmer 1 The offsets starting addresses for SP Programmers 2 3 and 4 are 10 hex or 16 decimal Programmer Number Starting Ending Address Address Hex Hex SP Programmer 1 1E00 1 SP Programmer 2 1E10 1E1F SP Programmer 3 1E20 1E2F SP Programmer 4 1E30 1 38 UMC800 Modbus Serial Communications User Manual 2 01 Controlling the Program For controlling the program the following parameters should be accessed Register Map for Process and Operation Type Variables
179. rough 6 17 Conversion of Address Hex Number to Register Decimal Number To convert the address number to the register number convert the address from hexidecimal to decimal and add 40001 Registers are addressed starting at zero registers 1 16 are addressed as 0 15 To convert the register number to the address number subtract 40001 from the register and convert to hex Table 6 1 Global Register Map See hex hex Subsection 0940 O9FF Loop 10 floating point amp bit packed 0A40 OAFF Loop 11 floating point amp bit packed 18 0 19 Variable Value 1 150 6 6 1E20 1E2F Set Point Programmer 3 1E30 1E3F Set Point Programmer 4 UMC800 Modbus RTU Serial Communications User Manual 2 01 2 01 Register Map for Process and Operation Type Variables Start Address End Address Description See hex hex Subsection 1 00 Set Point Programmer 1 Additional Values 6 12 1F40 1F7F Set Point Programmer 2 Additional Values 1F80 Set Point Programmer 3 Additional Values 1FCO 1FFF Set Point Programmer 4 Additional Values 2000 27CF Tagged Signal 1 1000 6 9 2800 29FF Set Point Programmer 1 Segments 6 13 2A00 2BFF Set Point Programmer 2 Segments 2C00 2DFF Set Point Programmer 3 Segments 2E00 2FFF Set Point Programme
180. run state ADV 7 BOOL I R OFF to ON requests advance state Static Configuration Values None 178 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 72 SQRT Function Block Description The SQRT label stands for Square Root This block is part of the Calculations category It looks like this graphically on the Control Builder Dynamic Parameters SORT1 1 OUT Table 8 100 SQRT Dynamic Parameters Static Configuration Parameters None 2 01 Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 REAL lo result X 2 REAL I input UMC800 Modbus Serial Communications User Manual 179 Function Parameter Index Reference 8 73 SUB Function Block Description The SUB label stands for the Subtraction mathematical operation 2 Inputs This block is part of the Math category It looks like this graphically on the Control Builder Dynamic Parameters X SUB1 1 OUT Table 8 101 SUB Dynamic Parameters Static Configuration Parameters None 180 Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL lo R output X 2 REAL I R input 1 Y 3 REAL I R input 2 UMC800 Modbus RTU Serial Communications User Manual
181. ry It looks like 2 01 Function Parameter Index Reference 8 76 TAHD Function Block Description The TAHD label stands for Track and Hold This block is part of the Auxiliary category It looks like this graphically on the Control Builder Dynamic Parameters TAHD1 1 OUT Table 8 104 TAHD Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL R block status see section 9 2 for code list OUT 1 REAL R output X 2 REAL I R primary input TC 3 BOOL I R track command Static Configuration Parameters None 2 01 UMC800 Modbus Serial Communications User Manual 183 Function Parameter Index Reference 8 77 TGFF Function Block Description The TGFF label stands for Toggle Flip Flop This block is part of the Logic or Fast Logic category looks like this graphically on the Control Builder OR Fast Logic Dynamic Parameters Table 8 105 TGFF Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list OUT 1 BOOL lo R output TOG 2 BOOL I R toggle input RESET 3 BOOL I R reset input Static Configuration Parameters None 184 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 78 TOT Function Blo
182. s HMON Dynamic Parameters HOA Dynamic Parameters HOA Static Configuration Parameters HSEL Dynamic Parameters LDLG Dynamic Parameters LMON Dynamic Parameters LSEL Dynamic Parameters LTCH Dynamic Parameters MATH Dynamic Parameters MBR Dynamic Parameters MBR Static Parameters MBS Dynamic Parameters MBS Static Parameters MBW Dynamic Parameters MBW Static Parameters MDFL Dynamic Parameters MMA Dynamic Parameters MSF Dynamic Parameters MSF Static Configuration Parameters MUL Dynamic Parameters 4MUL Dynamic Parameters UMC800 Modbus RTU Serial Communications User Manual 101 102 104 105 106 107 109 110 111 112 113 113 114 115 115 116 117 118 119 120 121 122 122 124 124 125 127 128 128 129 130 131 132 133 134 135 136 137 138 138 139 139 140 140 141 142 143 143 144 145 Table 8 64 Table 8 65 Table 8 66 Table 8 67 Table 8 68 Table 8 69 Table 8 70 Table 8 71 Table 8 72 Table 8 73 Table 8 74 Table 8 75 Table 8 76 Table 8 77 Table 8 78 Table 8 79 Table 8 80 Table 8 81 Table 8 82 Table 8 83 Table 8 84 Table 8 85 Table 8 86 Table 8 87 Table 8 88 Table 8 89 Table 8 90 Table 8 91 Table 8 92 Table 8 93 Table 8 94 Table 8 95 Table 8 96 Table 8 97 Table 8 98 Table 8 99 NEG Dynamic Parameters NOT Dynamic Parameters ONDT Dynamic Parameters ONDT Static Parameters OFDT Dynamic Parameters ONDT Static Parameters ON OFF Dynamic Parameters ON OFF Stati
183. sed as 0 Query message format for function code 16 10h Slave Function Starting Start Number Number Byte Data CRC CRC Address Code Address Address Addresses Addresses Count High Low High Low Example Preset Variable 1 address 18COh to 100 0 from a slave at address 02 02 10 18 CO 00 02 04 42 C8 00 00 CRC CRC Response 2 01 The normal response returns the slave address function code starting address and the quantity of registers preset The floating point values require two consecutive addresses A request to preset a single floating point value must be for two addresses The byte order of the floating point number is determined by the setting of the byte swap configuration value In this example the byte swap order is FP B Refer to subsection 3 3 The first 16 bits of the response contain the IEEE MSB of the float value The second 16 bits of the response contain the IEEE LSB of the float value The Byte order is configurable See Subsection 3 3 If the master station requests only one address at an address of a floating point value the slave will respond with an illegal data address exception See Section 5 code Response message format for function code 16 10h Slave Function Starting Start Number Number CRC CRC Address Code Address Address Addresses Addresses High Low High Low Example Response from presetting Variable 1 address 18COh to 100 0 from a slave at address 02 02 10 18 CO 00 02 CRC CRC
184. segment in floating point notation 4 Guaranteed Soak Type for Setpoint 1 0 off 1 low 2 high 3 low amp high 5 Guaranteed Soak Type for Setpoint 2 0 off 1 low 2 high 3 low amp high 6 Guaranteed Soak Type for Setpoint 3 0 off 1 low 2 high 3 low amp high 7 Guaranteed Soak Type for Setpoint 4 0 off 1 low 2 high 3 low amp high 8 Guaranteed Soak Type for Setpoint 5 0 off 1 low 2 high 3 low amp high 9 Guaranteed Soak Type for Setpoint 6 0 off 1 low 2 high 3 low amp high 10 Guaranteed Soak Type for Setpoint 7 0 off 1 low 2 high 3 low amp high 11 Guaranteed Soak Type for Setpoint 8 0 off 1 low 2 high 3 low amp high 12 13 Recycle Number of times to recycle 16 bit integer 0 999 14 15 Recycle Segment Recycle segment jump point 16 bit integer 0 50 16 19 Value 1 1 setpoint starting ramp value floating point notation 20 23 Value 2 2 setpoint starting ramp value floating point notation 24 27 Value 3 3 setpoint starting ramp value floating point notation 28 31 Value 4 4 setpoint starting ramp value floating point notation 32 35 5 5 setpoint starting ramp value floating point notation 36 39 Value 6 6 setpoint starting ramp value floating point notation 40 43 7 7 setpoint starting ramp value floating point notation 44 47 Value 8 8 setpoint starting ramp value flo
185. st is not supported The query message specifies the starting register and quantity of registers to be read Registers are addressed starting at zero registers 1 16 are addressed as 0 15 Query message format for function code 03 04 Slave Function Starting Starting Number Number CRC CRC Address Code Address Address Addresses Addresses High Low High Low Example Read analog inputs 1 and 2 in addresses 1800 1803 as floating point values from a slave at address 02 02 04 18 00 00 04 CRC CRC Response 2 01 The register data in the response message are packed as two bytes per register For each register the first byte contains the high order bits and the second contains the low order bits The floating point values require two consecutive registers A request for a single floating point value must be for two registers The byte order of the floating point number is determined by the setting of the byte swap configuration value In this example and the examples that follow the byte swap order is FP B Refer to subsection 3 3 The first 16 bits of the response contain the IEEE MSB of the float value The second 16 bits of the response contain the IEEE LSB of the float value If the master station requests only one register at an address of a floating point value a zero will be returned The Modbus RTU protocol has a single byte count for function codes 03 and 04 therefore the Modbus RTU protocol can only process up to 64 floati
186. st packet with sequence number FF Example of a multipacket transaction Request Response from UMC800 Request Response from UMC800 Request Response from UMC800 indicating last packet Historical Record Format 00 0A 01 00 00 09 0A 01 00 00 0A 02 00 00 09 0A 02 00 00 0A 03 00 00 09 0A FF 00 Each Historical Record packet has the following format Table 7 3 Historical Record Format Byte Contents Signal state 0 Off 120n 10 Event number 1 to 20 hex or Alarm number 1 to 78 hex 11 14 Time seconds since Jan 1 1970 2 01 UMC800 Modbus RTU Serial Communications User Manual 79 Controller Configuration Messages Function Codes 20 and 21 7 4 10 Historical Data Upload Acknowledge Introduction Figure 7 9 shows the Write request and response format for Function Code 10 Historical Data Upload Acknowledge This operation lets you inform the UMC800 that the last packet of the historical data upload was processed properly Message Formats Header Byte 1 Byte 2 Request Message E TABLE NUMBER READ WRITE 80 Write 0 Alarn Event FUNCTION CODE Historical Data Upload Acknowledge Header Byte1 Byte2 response message ACKNOWLEDGE UNACKNOWLEDGE 09 Acknowledge 0A Unacknowledge FUNCTION CODE Historical Data Upload Acknowledge If response is Unacknowledge then an error code is r
187. t the remaining bits in the final data byte will be padded with zeros toward the high order end of the byte The byte count field specifies the quantity of data bytes returned Response message format for function code 01 Slave Function Byte Data Data CRC CRC Address Code Count Example DO channels 2 through 6 located in slot 1 are on all others are off 02010122 CRC CRC In the response the status of DOs 1 6 is shown as the byte value 22 hex or 0010 0010 binary DO 8 is the MSB of this byte and DO 1 is the LSB Left to right the status of DO 6 through 1 is ON OFF OFF OFF ON OFF DO 8 and 7 were not requested and so bit 7 or the MSB and bit 6 were padded with a 0 UMC800 Modbus RTU Serial Communications User Manual 13 Modbus RTU Function Codes 14 Table 4 4 Modbus Comm Digital I O Channel to Address Mapping Slot 1 Slot 2 Slot 3 Slot 4 CH Address CH Address CH Address CH Address Dec Hex Dec Hex Dec Hex Dec Hex 16 15 15 16 31 1F 16 47 2F 16 63 3F 15 14 14 15 30 1E 15 46 2E 15 62 3E 14 13 13 14 29 1D 14 45 2D 14 61 3D 13 12 12 13 28 1C 13 44 2C 13 60 3C 12 11 11 12 27 1B 12 43 2B 12 59 3B 11 10 10 11 26 1A 11 42 2A 11 58 3A 10 9 9 10 25 19 10 41 29 10 57 39 9 8 8 9 24 18 9 40 28 9 56 38 8 7 7 8 23 17
188. t mode request OFF ON man_mode 4 BOOL manual output mode request OFF ON man_out 5 BOOL On Off rsp_eu 6 REAL remote set point in eu for monitoring deviation 7 REAL IC Deviation in eu for monitoring pv 8 REAL IC Process Variable in eu for monitoring WSP 9 REAL lO Working Set Point in eu for monitoring OUT 10 BODL o MODE 11 REAL O R actual mode encoded 12 o Alam AL2 13 BOOL o R Alarm2 BCO 14 REAL O 8 Back Calculation Out 26 PVI 15 REAL a Process Variable Input eu pv lo lt PV lt pv hi RSP 16 REAL R Remote Set Point or eu per sp_units TRV 17 BOOL ik On Off TRC 18 BOOL Manu On Off 150 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference Static Configuration Parameters 8 71 ON OFF Static Configuration Parameters Parameter Index Index Tw Description pv hi pv High Range value 99999 to 99999 default 100 pv lo pv Low Range value 99999 to 99999 default 0 sp hi lim 6 set point high limit 99999 to 99999 default 100 sp lo lim 7 set point low limit 99999 to 99999 default 0 sp rate dn 9 Set point low rate of change limit 0 off to 99999 eu min sp rate up Set point high rate of change limit 0 off to 99999 eu min devbar hi High scale value for deviation bar graph 0 to 99999 default 100 devbar
189. t signed binary with 8 bit biased binary exponent byte 4 byte 3 byte 2 byte 1 3 2 2 1 1 1 4 3 6 5 8 7 0 XXXXXXXX X XXXXXXX XXXXXXX mantissa 23 bits implied binary point for mantissa xponent 8 bit unsigned value ign of the mantissa 0 positive 1 negative Figure 3 1 IEEE Floating Point Data format Mantissa and Sign The mantissa is defined by a sign bit 31 and a 23 bit binary fraction This binary fraction is combined with an implied value of 1 to create a mantissa value which is greater than or equal to 1 0 and less than 2 0 The mantissa is positive if the sign bit is zero reset and negative if the sign bit is one set For example DECIMAL HEXADECIMAL BINARY 100 42C80000 01000010 11001000 00000000 00000000 The sign bit 31 is zero indicating a positive mantissa Removing the sign bits and exponent bits the mantissa becomes HEXADECIMAL BINARY 480000 XXXXXXXX X1001000 00000000 00000000 Add an implied value of one to the left of the binary point BINARY 1 1001000 00000000 00000000 Using positioned notation this binary number is equal to 1 0 1x2 0x2 0x27 1x27 1 0 0 5 0 0 0 0 0 0625 1 5625 6 UMC800 Modbus RTU Serial Communications User Manual 2 01 Modbus RTU Message Format Exponent The exponent is defined by an unsigned 8 bit binary value bits 23 through 30 The value of the exponent is derived by performing a signed subtraction of 127 decima
190. te OFF the device control operates normally ON immediately transitions to the Disabled state prevents the device from starting if in the ready state or immediately shuts down the device if it is currently in the Starting or Running state Static Configuration Parameters Table 8 23 DC Static Configuration Parameters automatic reset 0 BOOL if set to auto then the block will reset itself after the failure Fail input turns off If set to manual a Reset signal input or from the OI station is required to remove the failure condition This parameter is determined when the block is configured ON Automatic Reset OFF Manual Reset default OFF start delay 1 ULONG start delay ON time and output on delay time Range 0 99999 seconds default 0 stop delay an Off request This parameter is configurable from the OI range 0 99999 seconds default 0 ULONG Feedback Fail Delay timers starts in Starting state If fdbk turns ON timer continues in Running state When timer expires in either Starting or Running state and fdbk is OFF block goes to the Fail state If fdbk is ON stays or goes to Running state and the timer is reset to 0 seconds This parameter is configurable from the OI range 0 99999 seconds 2 ULONG Stop Delay time delay before the output turns OFF after default 0 fdbk fail delay 3 112 UMC800 Modbus RTU Serial Communications User Manual 2 01
191. tes per value returned Message Formats Header Byte Byte2 Byte3 Byte4 Byte5 Byte6 Request Message 5554 READ WRITE EE NUMBER 0 Read Index number of the desired parameter within the selected block FUNCTION CODE 2 Contiguous 32 Bit Values BLOCK NUMBER NUMBER OF VALUES REQUESTED Select from LCB Printout TABLE FIELD FILLER BYTE For Word Alignment 1 Function Block Configuration Parameters Static 2 Function Block I O Parameters Dynamic Note Configuration Parameters static and I O parameters dynamic cannot be accessed in the same message since both the Static parameters and the Dynamic parameters each start at Index Number 0 r ACKNOWLEDGE DATA FIELD UNACKNOWLEDGE Four Bytes of data 32 bit IEEE Floating Point 09 Acknowledge for each value returned Unacknowledge FUNCTION CODE NUMBER OF VALUES RETURNED 02 Contiguous 32 Bit Values 4f response is Unacknowledge then an error code is returned instead of a function code Figure 7 1 Read Contiguous 32 Bit Request and Response Message Formats See Parameter Index tables for Block types in Section 8 See Section 3 3 See Table 7 5 on page 87 2 01 UMC800 Modbus RTU Serial Communications User Manual 69 Controller Configuration Messages Function Codes 20 and 21 7 4 3 Read Scattered 32 Bit Values Introduction Figure 7 2 shows the Read request and response format for Functi
192. tion The WTUN label stands for Write Tuning Constants This block is part of the Loops category It looks like this graphically on the Control Builder WTUN1 d e GAIN a RSET RATE EN Dynamic Values Table 8 116 WTUN Dynamic Parameters Parameter Index Type Use R W Description status 0 R block status see section 9 2 for code list GAIN 1 REAL I R proportional gain 0 1 to 1000 RSET 2 REAL I R integration time 0 02 to 50 minutes RATE 3 REAL I R derivative time 0 1 to 10 minutes EN 4 BOOL I R enable Static Configuration Values None 2 01 UMC800 Modbus RTU Serial Communications User Manual 193 Function Parameter Index Reference 8 85 WVAR Function Block Description The WVAR label stands for Write Variable This block is part of the Auxiliary category It looks like this graphically on the Control Builder Dynamic Parameters 2 2 EN Table 8 117 WVAR Dynamic Parameters Parameter Index Type Use R W Description status 0 REAL C R block status see section 9 2 for code list X 1 1 R value to be written or BOOL EN 2 BOOL I enable change Static Configuration Parameters None 194 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 86 XFR Functio
193. tional Integral Derivative 157 PT nane Dp mop ERES 160 pulse e mte eie 33 ted 155 R ROP ERE 161 Read Alarm Point Detail sess 75 Read Coil 5 11 13 Read Contiguous ipee eerte 61 Read Contiguous 32 Bit 69 Read General Reference 11 59 Read Holding Registers esses 11 Read Input Registers 11 17 Read Input Status sess 11 16 Read Scattered eie 62 63 Read Scattered 32 Bit 70 Read Setpoint Program Segment 72 Read Setpoint Program Segments 64 Read Setpoint Scheduler Segment 83 Recipe Selector ungere 161 Register Map for Process 26 Relative Humidity 162 Report Device ID eene 11 22 Reserved Operands sese 8 eue eth adit iin enh iet 162 Rotary Switch esses 163 164 165 RS 485 Modbus RTU sese 2 RS485 to RS232 converter 2 RSWia etie arent etes 163 164 165 S Scale and Bias ete cette 167 SCB E eae 167 Scheduler Segment Data
194. ue Register Map Addresses 42 Table 6 13 Set Point Programmer Additional Values Register Map Addresses 43 Table 6 14 Set Point Programmer Segment Map Addresses 45 Table 6 15 Segment Register Map Addresses 45 Table 6 16 Steps to Download a Setpoint Schedule using Modbus Function Codes 3 4 6 16 2 48 Table 6 17 Steps to Download a Setpoint Schedule using Modbus Function Codes 20 21 __49 Table 6 18 Steps to Upload a Setpoint Schedule using Modbus Function Codes 3 4 6 16 ____ 49 Table 6 19 Scheduler Value Register Map Addresses 50 Table 6 20 Scheduler Segment Register Map Addresses 53 Table 6 21 Segment Register Map Addresses 54 Table 6 22 HOA Control Group Register Map 56 Table 6 23 Device Control Group Register Map 57 Table 7 1 Setpoint Programmer Segment Data 73 Table 7 2 Contents of Alarm Mask Bytes TI Table 7 3 Historical Record Format 79 Table 7 4 Scheduler Segment Data Format 84 Table 7 5 Application Error Codes 87 Table 8 1 Function Block Look up Table 88 Table 8 2 ABS Dynamic Parameters 9 Table 8 3 ADD Dynamic Parameters 92 Table 8 4 4ADD Dynamic Parameters 93 Table 8 5 AI Dynamic Parameters 94 Table 8 6 AIStatic Configuration Parameters __ 94 Table 8 7 ALM Dynamic Parameters 95 Table 8 8 ALM Static Configuration Parameters 95 Table 8 9 2AND Dynamic Parameters 96 Table 8 10 4AND Dynamic Parameters 97 Table 8 11 8AND Dynamic Parameters 98 Table 8 12 AMB Dynamic Values 99 Table 8 13 AMB Static Configuration Values 100 viii UMC800 Mod
195. uery is acknowledged and assuming the following segment data Contents of Segments 1 4 Segment 1 Segment 2 Segment 3 Segment 4 Segment Type Ramp 1 Soak 0 Ramp 1 Soak 0 Guaranteed 0 1 0 0 Soak Enable Events 9 16 0001001 1 00001011 00001001 00001001 LSB is Event 9 Events 1 8 10000000 10000000 00000000 00000000 LSB is Event 1 Time or Rate 40 160 60 1 Value 100 2000 2000 100 Aux Value 1 0 1 0 1 0 0 0 64 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 Format of response 02 14 4A 00 00 00 00 00 00 00 Contents of Read Setpoint Program Segment configuration message See below CRC CRC Contents from left to right Slave address 02 Function code 14 read Byte count 74 decimal 4A hex Reference type File number high File number low Starting address high Starting address low Register count high Register count low Contents of Read Setpoint Program Segments configuration message See Figure 7 4 and Table 7 1 0905 04 01 00 13 80 42 20 00 00 42 C8 00 00 8000 000001 0 80 43 20 00 00 44 00 00 800000 cont d 01 o0 09 00 427000 00 44 FA 00 00 3F 80 00 00 00 00 09 00 180 00 00 42 8100 00 00 00 00 00 Contents from left to right Acknowledge 09 Function code 0
196. uestmessage READ WRITE 80 Write FUNCTION CODE 122 Write Setpoint Scheduler Segment NUMBER OF CONSECUTIVE SEGMENTS TO FOLLOW SCHEDULER FUNCTION BLOCK NUMBER STARTING SEGMENT NUMBER SEGMENT ACKNOWLEDGE ES UNACKNOWLEDGE 09 Acknowledge Unacknowledge NUMBER OF SEGMENTS WRITTEN FUNCTION CODE 12 2 Write Setpoint Scheduler Segment If response is Unacknowledge then an error code is returned instead of a function code Response Message Figure 7 13 Write Setpoint Scheduler Segment See Table 7 5 on page 87 See Table 7 4 on page 84 2 01 UMC800 Modbus RTU Serial Communications User Manual 85 Controller Configuration Messages Function Codes 20 and 21 7 4 15 Loopback Introduction Figure 7 14 shows the Request and Response format for Function Code 250 Loopback Test This operation lets you echo back a string of bytes from the controller to the Host Up to 245 bytes can be requested per message Message Formats Header 1 Byte2 Byte3 Byte 3 N Request Message READ WRITE 0 Read FUNCTION CODE FA Loopback Test NUMBER OF DATA BYTES WHICH FOLLOW Data Data Nth BYTE OF DATA 151 BYTE OF DATA Data Data Response Message BOKNONLEDGE Nth BYTE OF DATA UNACKNOWLEDGE 09 Acknowledge 0a Unacknowledge 1st BYTE OF DATA FUNCTION CODE FA Loopback test NUMBE
197. ule number used Schedule numbers may range from 1 50 Could use a function code 21 scattered write but this requires knowledge of the SPP block number in the configuration Procedure for Uploading Setpoint Schedules Table 6 18 Steps to Upload a Setpoint Schedule using Modbus Function Codes 3 4 6 16 Step Action 1 Set the scheduler to RESET by writing any number to 52367 304E This can be done either with function code 6 or 16 2 Load the schedule into the setpoint scheduler block by writing the schedule number to registers 52321 and 52322 3020 and 3021 This is a floating point register and requires a multiple register write function code 16 3 Read the header information desired registers 52331 802A 52347 3034 and register 52368 304F using function code 3 or 4 4 Read the information for each segment desired using function code 3 or 4 registers 3200 322F for segment 1 3230 325F for segment 2 etc 2 01 UMC800 Modbus RTU Serial Communications User Manual 49 Register Map for Process and Operation Type Variables Table 6 19 Scheduler Value Register Map Addresses Address Register Channel Number Access Notes hex decimal 3000 52289 Scheduler Output 1 R Floating Point in Engineering Units 3002 52291 Scheduler Output 2 Floating Point in Engineering Units 3004 5229
198. ulse Input 4 R 1808 Analog Input Frequency Input or Pulse Input 5 R Floating Point 180A Analog Input Frequency Input or Pulse Input 6 R 2 180 Analog Input Frequency Input or Pulse Input 7 R 180 Analog Input Frequency Input or Pulse Input 8 R 1810 Analog Input Frequency Input or Pulse Input 9 R 1812 Analog Input Frequency Input or Pulse Input 10 R 1814 Analog Input Frequency Input or Pulse Input 11 R 1816 46167 Analog Input Frequency Input or Pulse Input 12 R 187E Analog Input Frequency Input or Pulse Input 64 R Example Read Analog Inputs 1 and 2 from UMC800 at address 2 using Function Code 3 02 03 18 00 00 04 Response from UMC800 where 100 0 and AI 2 55 32 02 03 08 42 C8 00 00 42 5D 47 AE CRC CRC 2 01 UMC800 Modbus RTU Serial Communications User Manual 33 Register Map for Process and Operation Type Variables 6 6 Variable Register Map Summary Variables analog or digital are writeable parameters in UMC 800 attached to input pins of function blocks Digital Variable status is 0 0 for OFF or logic 0 and 1 0 for ON or logic 1 The Variable number in the table corresponds to the Variable number in the UMC 800 configuration You will need to access the UMC 800 Control Builder configuration or corresponding configuration printout of Tag Properties to identify the Variable numbers desired Function Code Support Read Function Code 3 Write F
199. umber to 47696 1EOF This can be done either with function code 6 or 16 2 Clear the program by writing a 0 to registers 47937 and 47938 1F00 and 1F01 This is a floating point register and requires a multiple register write function code 16 This is the safest way to insure that all registers are cleared for the next program download 3 Write the header information for parameters relevant to the program leave all others at 0 registers 47943 1 06 47997 1F3C Registers 47943 47968 are floats and must be written using function code 16 Registers 47995 47997 are bit packed and can be written with either function code 6 or 16 Note Display High Range Limit and Display Low Range Limit are not presently used in the UMC800 4 Write the information for each segment required in the profile registers 2800 2807 for segment 1 2808 280F for segment 2 etc The first 2 registers are bit packed and can be written with either function code 6 or 10 The rest of the registers are float and must be written using function code 16 5 Save the program to a program profile number archive by writing a floating point number to register 47939 This will store the downloaded data utilized by the programmer block to the program profile number used Profile numbers may range from 1 70 The program is now ready to run Note that the current program profile number register 47937 is automatically set to the sav
200. unction Code 16 10 Hex Table 6 5 Variable Register Map Addresses Address Register Channel Number Access Notes hex decimal 18CO 46337 Variable Value 1 R W Floating Point in Engineering Units 18 2 46339 Variable Value 2 RW 18CA 46341 Variable Value 3 RW 18C6 46343 Variable Value 4 R W 18C8 46345 Variable Value 5 RW 18CA 46347 Variable Value 6 RW 18CC 46349 Variable Value 7 RW I8CE 46351 Variable Value 8 RW 1800 46353 Variable Value 9 RW 18D2 46355 Variable Value 10 RW 18D4 46357 Variable Value 11 RW 18D6 46359 Variable Value 12 RW 18D8 46361 Variable Value 13 RW ISDA 46363 Variable Value 14 RW 18DC 46365 Variable Value 15 RW I8DE 46367 Variable Value 16 R W 18E0 46369 Variable Value 17 RW 18 2 46371 Variable Value 18 RW 18E4 46373 Variable Value 19 RW 18E6 46375 Variable Value 20 RW IABE 46847 Variable Value 150 RW continued 34 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables Example Query Read Variables 1 and 2 from UMC800 at address 1 using Function Code 3 hex codes o1 03 18 co o4 Response from UMC800 where Variable 1 100 0 and Variable 2 55 32 or 03 08 42 oo
201. unction code 03 register set e read detail of an alarm point e read the event summary buffer e acknowledge alarms and events e upload historical data for alarms and events ATTENTION To access the controller you must have a current Control Builder configuration file available Data is referenced relative to function block number and the index number of the desired parameter It is suggested that you upload the controller configuration using the Control Builder configuration tool to assure that you have a current configuration The Control Builder tool can provide a printout of all function blocks used their number and detail You will also need to use the Control Builder Function Block Reference Guide as a reference for the function block index numbers for contained parameters UMC800 Modbus RTU Serial Communications User Manual 1 Wiring 2 Wiring 2 1 COMM A Connector The CPU module equipped with the optional communication board provides an RS 485 communications ports with Modbus RTU protocol support COMM A port allows the UMC800 controller to network with up to 31 other slave UMC800 controllers and devices a Modbus link This manual describes the communications for the COM A Port only COM B is a master port described in other product literature Figure 2 1 shows the COMM A connector wiring when using either a shielded twisted pair or 4 wire shielded cable NOTE When using the RS 485 communications it is recomme
202. ut value usually 96 Static Configuration Parameters None 186 UMC800 Modbus RTU Serial Communications User Manual 2 01 Function Parameter Index Reference 8 80 TPSC 3POS Function Block Description The TPSC 3POS label stands for Three Position Step Control operation This block is part of the Loops category It looks like this graphically on the Control Builder Dynamic Parameters Fonward Module and Channel Reverse Module and Channel Table 8 109 TPSC Dynamic Parameters Parameter Index Type Use R W Description status 0 C R block status see section 9 2 for code list 15 1 REAL C R W local set point eu 15 2 2 REAL C R W local set point 2 eu rem mode 3 BOOL C R W remote set point mode request OFF man mode 4 BOOL C R W manual output mode request OFF man out 5 REAL C R W manual output value 0 to 100 tune_req 6 BOOL C R W limit cycle auto tuning request OFF ON rsp_eu 7 REAL C R remote set point in eu for monitoring deviation 8 REAL C R Deviation in eu for monitoring pv 9 REAL C R Process Variable in eu for monitoring fbpct 10 REAL C R Percent feedback estimation for monitoring DSP 11 REAL R Display Set Point in eu for monitoring MODE 12 REAL R actual mode encoded 2 01 UMC800 Modbus RTU Serial Communications User Manual 187 Function Parameter Index Reference Static Configuration Parameters Ta
203. wing a SP schedule segment table Typically when recipes are downloaded from third party software this will be the number generated by the Schedule Save Request parameter A write to this register loads the program into the scheduler function block if 0 is written the scheduler s schedule is cleared Writing to this register is only permissible in reset or ready mode 3022 52323 Current Segment Number RW Floating Point 1 thru Max Segment A write changes the segment number 3024 52325 Program Elapsed Time R Floating Point in Time Units Includes or runs when in Hold 3026 52327 Segment Time Remaining R Floating Point in Time Units 50 UMC800 Modbus RTU Serial Communications User Manual 2 01 Register Map for Process and Operation Type Variables Address Access 304A 2 01 Bit Packed Status Bit Packed B Register Channel Number Notes hex decimal 3028 52329 Schedule Save Request RW Floating point Assigns profile parameters downloaded to a schedule number such as 1 This is required by the UMC800 to be the last parameter downloaded This overwrites what is in this UMC800 SP Schedule memory location on each download of a new SP Schedule Saves the schedule into the archive Writing to this register is prohibited in the run mode 302A 52331 Guaranteed Soak Limit 1 RW Floating Point 302C 52333
204. x tables for Block types in Section 8 See subsection 3 3 See Table 7 5 on page 87 70 UMC800 Modbus RTU Serial Communications User Manual 2 01 Controller Configuration Messages Function Codes 20 and 21 7 4 4 Write Scattered 32 Bit Values Introduction Figure 7 3 shows the Write request and response format for Function Code 3 Scattered 32 Bit values This operation lets you write 32 Bit values to a specific block given the index numbers and the number of values involved Up to 42 values may be written per message 6 bytes per value requested Message Formats Header Byte1 Byte2 Byte4 Byte5 Byte6 Byte7 Byte 8 Byte 9 Byte 10 iis a EE DATA FIELD Note 1 Four Bytes of data 32 bit IEEE Floating Point for each write value READ WRITE 80 Write FUNCTION CODE 3 Scattered 32 Bit Values INDEX NUMBER Note 1 Index number of the desired NUMBER OF VALUES REQUESTED parameter within the selected block FILLER BYTE For Word Alignment TABLE FIELD 1 Function Block Configuration Parameters Static BLOCK NUMBER Note 1 2 Function Block I O Parameters Dynamic Select from LCB Printout Configuration Parameters static and Note 1 One set of Block and Index with VO ic be accessed 2277 ae Four Bytes of data 32 bit IEEE Floating Point in the same message since both the Static parameters and the Dynamic parameters each start at Index Number 0 Respons

Download Pdf Manuals

Related Search

Related Contents

Lenovo 3000 C200  estufas modelos - Portal de Servicio Koblenz  

Copyright © All rights reserved. Failed to retrieve file