S4516-DF1 PROGRAM DEVELOPMENT MANUAL - Sea
Contents
1. When transmitting a message packet the DF1 driver will attach the necessary control symbols and send the data to the Datalink and return with a DONE when finished transmitting When receiving data unnecessary control symbols are stripped from the data stream so that only the raw message packet is returned to the user This allows for a great deal of flexability when sending and receiving message packets with an Allen Bradley PLC This program uses the following variables B3000 B3025 Main Program Control Bytes B3050 B3299 sfunc11 Send Buffer B3300 B3549 sfunc10 Receive Buffer 4516 DF I Program Development Manual SYSTEMS Electronics Group B 1 APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 Init file C PROGRAMS AB DF1NDF1 MAIN LIN KKKKKKKKKKKKKKKKKK KC KC CK Ck CK Ck CC CC CC Ck CC Ck CK Ck Ck KC CK Ck Sk SCC KK KK ko ko ko ko kokok block OwO GOU h w ao eH O A A DU ON B0161 B3000 B3010 B3011 B3023 B3024 B3025 W3000 W3012 W3016 W3018 W7552 W8154 W8156 W8154 W8156 B3023 B161 40H 0 1 110 he 40 qr 0 100 IN Il SysEnF1 RespPnd NumElem FileNum sf11Rtn RespPr RespAc CtrlBts StrtElm TNS STS SlotAdd SlotAdd SlotAdd zt 1 High level amp W7552 sfunc19 1 3 1 B3024 System Waiting Num of A B sfunc19 No Resp No Resp DF1 Startng2. B3059 AppDATA AppData Send DATA B3060 AppDATA AppData Send DATA B3061 AppDATA AppData Send DATA B3062 AppDATA AppData Send DATA B3063 AppDATA AppData Send DATA B3064 AppDATA AppData Send DATA B3065 AppDATA AppData Send DATA B3066 AppDATA AppData Send DATA B3067 AppDATA AppData Send DATA B3068 AppDATA AppData Send DATA W1500 DataSen W1500 Thru W1748 W3002 Temp C Temp calc W3006 Pointer Pointer W3008 Pointer Pointer W3016 INS AppData TNS W3054 App TNS AppData Send TNS W3068 AppDATA AppData Send DATA 4516 DF I Program Development Manual SYSTEMS Electronics Group B 19 APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 2 C PROGRAMS AB DF1 DF1 MAIN L02 KKKKKKKKKKKKKKK KC CC CK Ck CK Ck CC CC Ck SCC CC Ck CC Ck CK Ck KC Ck SK Ck SC Ck Sk E x KA ko ko ko kokokok block 2 High level DF1 AppData User Function File This block contains the code to assemble the APP DATA packets to accomplish reading or writing data to an SLC500 processor General Format DST SRC CMD STS TNS LO TNS HI Command Data Protected Typed Logical Read with Thr Address Fields Command Data Format FCN SIZE FILE NO FIL T TYPE ELEMENT NO 3 SUB ELEMENT NO CMD OfH FCN a2H SIZ Number of Bytes to Read 2 Bytes 1 Element Ed E H Z il ETL FILE O
3. Command 6 if B3306 01H PLC5 Word Range Read 7 Yes 8 W3002 B3309 2 Set FOR LOOP Limit 9 B3015 B3015 B3002 Set Data Bytes to Return L0 Tis else SLC500 Typed Logical Read 125 Yes T3 B3015 B3015 B3307 Set Data Bytes to Return 14 B3002 B3307 Set FOR LOOP Limit 15 16 W3008 amp B3056 Point to Data Buffer 17 for B3004 0 B3004 lt B3002 B3004 18 1 9 B3008 B3006 Load APP DATA Packet 20 W3006 W3008 Increment Data Pointers 23 22 231 24 B3000 3 CMD CMD Recievd CMD CMD B3002 Temp C Temp calc B3004 Temp i Temp i B3006 Pointer Pointer B3008 Pointer Pointer B3015 sfllSen sfuncll sent B3056 App FCN AppData Send FCN THRU W3002 Temp C Temp calc W3006 Pointer Pointer W3008 Pointer Pointer 4516 DF I Program Development Manual B 9 SYSTEMS Electronics Group APPENDIX B SAMPLE SYS dev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DF1 DF1 MAIN L01 KAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKKAKAKKAKKAKKAKKAKKAKKAKK block 4 DF1 comm This bloc from a PL data writ M4500 add FCN OOH aaH NOT E PLC5 o if B3000 f B3000 if B3 f if QOO 050 1o9o014 CP H O PP Dj RO NI els NNNNHHHHH C l9 IP O tio 00 1 0 O1 for N N N N N N O 0 10 01 HS High level User
4. of Bytes to Return SRC DST Reply 00H TNS Recieved PLC5 Read or Write Yes Encoded Yes Assign ADD No Assign ADD Dm duououzuuio HR dmg zi NNUAHB cf Mm Element ADD Pointer Pointer SLC500 Read or Write Yes Encoded Yes Assign ADD No Assign ADD Element ADD Pointer Pointer Address Out of Range Yes Reset CMD Command Num of Bytes to Return STS Code in EXT STS EXT STS Improper ADD SYSTEMS Electronics Group SYS96 User f KKKKKKKKKKKK block 3 DF1 comm APPENDIX B SAMPLE SYSdev PROGRAM CODE unction 1 C PROGRAMS AB DFINDF1 MAIN L01 KKKKKKKKKKKKKK KKK KKK KKK KKK KKK KKK KKK KKK KKK KKK KKK KK KK KK KK KAR High level User Function File This block responds to a Read function command delivered either from a PLC5 or a SLC500 The function will be deciphered and a data block will be formated and added to the reply message packet FCN Description 01H PLC5 Word Range Read Read Block a2H SLC500 Protected Typed Logical Read NOTE B3306 FCN Byte B3307 SIZE bytes SLC500 B3309 SIZE words PLC5 0 PLC5 or SLC500 Read Mode Command 1 if B3000 3 1 CMD Command 2 Yes 33 if B3306 01H B3306 a2H FNC PLC5 or SLC500 Read 4 Yes Ds B3000 3 0 Reset CMD
5. AppData Error 4516DF1 sfunc13 sfunc10 Enable for Elemnts Target Respons TimeOut TimeOut Control Element TNS Code Slot Slave 11 13 4516 DF I Program Development Manual Initialize 54516 Board amp W7552 Slot Address for sfunc13 S4516DF1 Slot Address 02 for sfunc10 11 sta addr 1 net buad 344k user baud 19200 Enabl Slav Mod R spons Initialize DF1 Presets W3000 B3000 B3010 B3011 W3012 W3016 W3018 B3024 B3025 DF1 Control Bits 1 to Initia Num of Elements File Number N7 Starting Element Initialize TNS Co Clear Error Code Initialize Timeou Initialize Timeou Clear Set E 40 unter Bf Flags Respons FileNum Code Preset Acum Bits STS Address SlotAdd SlotAdd B 2 Timer Preset Timer Accumulator s te Command Message Packet Read Write 11 05 10sec SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 Main Program C PROGRAMS AB DFIXDF1 MAIN LMN KKKKKKKKKKKKKK KKK KK KKK KK CK Ck CK Ck CK Ck CC Ck CC Ck CC Ck KC KC KC CC Ck Sk S x KK k ko ko kokokok block 1 High level 0 ufunc01 Call DF1 comm Ts 4516 DF I Program Development Manual SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DFINDF1 MAIN L01 DF1
6. UI ON U oo a 10 to 1F 20 21 22 23 24 25 26 27 28 29 2A S4516 DF1 Program Development Manual Definition Multi Defined Processors on Ring Processor is Already Allocated Processor must be Allocated for this Command Extended Function in Progress Extended Function in Progress Function Not Available in this Processor Command Set Function Not Available in this Processor Mode Processor Number in Program and Hardware Do Not Match Invalid Address Memory Protection Access Violation Invalid Parameter Search Unsuccessful Program Needs to be Stored RAM and PROM Do Not Match External EEPROM is Defective Cannot transfer Contents Correctly Invalid User Program Not Used Device Resource Unavailable Not Used Processor Already Allocated by requesting Node Processor Already Allocated by Another Remote Node Processor Not Allocated Data Length Invalid Data Size Too Large Data Size Too Large Data Size Too Small At Least One of the Addresses Points to a Read Only Area Address Past End of Memory Memory Protected Addresses to Program Area Illegal Memory Protected Address to Processor Status Area Illegal SYSTEMS Electronics Group A 2 APPENDIX A ASYNCHRONOUS LINK STATUS CODES EXT STS Codes for Command Code OE HEX cont Code HEX 2B 2C 2D 2E 2F 30 to 7B 7C 7D 7F 80 to FF S4516 DF1 Program Development Manual Definition Memory Protected Addres
7. Use the second and third bytes for the expanded file address low address byte first Warning You must use one of the following values for this field Do no use any other values doing so may result in unpredictable results 80 83 HEX Reserved 84 HEX Status 85 HEX Bit 86 HEX Timer 87 HEX Counter 88 HEX Control 89 HEX Integer This byte addresses elements 0 254 only For higher addresses setting this byte to FF HEX expands this field to three bytes total Use the second and third bytes for the expanded element address last address byte first This byte addresses elements 0 254 only For higher addresses setting this byte to FF HEX expands this field to three bytes total Use the second and third bytes for the expanded element address last address byte first SYSTEMS Electronics Group 2125 SECTION 3 USING THE SYSTEM FUNCTIONS This section describes using the system functions sfunc10 11 13 for the S4516 DF1 Refer to the M4500 Program Development manual for more detailed information The sfunc10 11 are no longer used for general purpose User Port communications The sfunc10 and sfunc11 are used to receive and transmit data utilizing the embedded Allen Bradley DF1 full duplex protocol The format is the same however the function has changed Refer to the M4500 Program Development Manual Section 5 Programming Language Reference for more information on System Functions 3 1 INITIALIZING T
8. description location used B0161 SysEnFl System Enable Flags INI 1 4 B0169 1 sfllErE sfunc11 ErrCode Enable UQA 18 B3000 0 XmitPkt Xmit AppData Packet JO Lev 1 1 1 9 LAZO 2 3 UO1 5 14 7 0 7 2 B3000 1 CMDInit Command Init UQI 1 3 1 213 LADA 6 154 UO1 7 34 B3000 2 RespPnd Waiting for Respons INI 1 84 U01 1 164 5 164 6 0 6 1 B3000 3 CMD CMD Recievd CMD CMD UOI 130 2 1 2 28 3 1 UO1 3 5 4 1 4 3 B3000 4 CMD Rpy Recievd CMD Reply U01 1 32 5 1 5 3 B3000 5 RespTO No Respons TimeOut U01 6 0 7 0 B3002 Temp C Temp calc U01 3 9 SalAx 3217 4 16 UO1 4 22 U02 1 24 1 29 2 9 2 24 4516 DF I Program Development Manual B 23 SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE Addr nicname description location used B3004 Temp i Temp i VOL 317138 3 1 3 174 4 22 U01 4 22 42224 52254 5225 U01 5 254 U02 1 334 1 33 14334 124282 U02 2 28 2 282 B3006 Pointer Pointer UOD 24134 21534 2 204 2222 U01 3 19 4 24 B3007 Pointer Pointer UOl 2 134 2 154 2 204 2 22 B3008 Pointer Pointer U01 3 190 4 24 B3010 NumElem Num of Elemnts INI 19 U01 5 25 UO2 1 10 1223 1 28 1 33 U02 2 8 2 23 2 28 B3011 FileNum A B Target FileNum INI 1 10 U02 1 14 2 10 2 11 B3012 StrtElm Startng Element U02 1 16 2 13 B3013 StrtElm Startng Element U02 1 17 2 14 B3014 MsgPkt Message Packet Number 101 5 17X 5 18 51 94
9. for more information on local remote and extended status error codes 4516 DF I Program Development Manual SYSTEMS Electronics Group B 12 pif 2 3 co 1I 07 OH ib W 9 10 LA s 123 13 14 15 16 ye 18 19 20 21 2 25 23 24 25 26 2 jus 28 29 30 Silk 32 332 34 35 3603 B3000 B3000 B3000 B3004 B3010 B3014 B3018 B3019 B3056 THRU W1750 W3006 W3008 W3016 W3304 0 1 s2 B3000 4 APPENDIX B SAMPLE SYSdev PROGRAM CODE 0 M4500 Reply Message Packet B3000 4 1 CMD Reply Yes B3000 4 0 Reset CMD Reply if B3303 OOH Received With Errors Yes B3018 B3303 Save STS Code if B3303 f0H Error Code in EXT STS Byte B3019 B3306 Yes Save EXT STS Code else No B3019 0 Reset EXT STS Returned else if W3304 W3016 Current TNS Returned Yes B3000 0 1 Set Transmit APP DATA B3000 1 1 Initiate Command B3000 2 0 Reset Response Pending B3014 Incr APP DATA Command Packet if B3014 gt 3 Maximum Number Exceeded B3014 0 Yes Reset Command Packet 4 W3016 Increment TNS if B3056 01H B3056 a2H FCN PLC5 or SLC500 Read Yes W3006 amp W3306 Point to Data Received W3008 amp W1750 Point to Read Data Register for B3004 0 B3
10. 2 15 B3064 AppDATA AppData Send DATA U02 1 15 B3065 AppDATA AppData Send DATA UO2 1 1 6 B3066 AppDATA AppData Send DATA UO2 1 17 B3067 AppDATA AppData Send DATA U02 1 18 B3068 AppDATA AppData Send DATA U02 1 24 B3300 App DST AppData Receive DST U01 1 26 2 6 THRU B3302 6 CMD Rpy Command Reply Indictr U01 1 29 B3549 AppDATA AppData Receive DATA U01 1 26 W1500 DataSen W1500 Thru W1748 UO1 2 26 UO2 1 32 2 271 W1750 DataRcv W1750 Thru W1998 U01 2 26 5 24 W3000 CtrlBts DFI Control Bits INI 1 78 W3002 Temp C Temp calc U01 3 8 4 8 U02 14234 14284 2 8 2 23 4516 DF I Program Development Manual B 25 SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE Addr nicname description location used W3006 Pointer Pointer UO1 2 26 2 26 3 20 4 25 U01 5 23 5 270 5 284 5 28 U02 1 314 1 350 1 364 1 36 U02 2 26 2 300 2 31 2 31 W3008 Pointer Pointer U01 3 16 3 20 4 10 4 12 JO 2 41834 4 20 4 25 5224 U01 5 270 5 29 5 29 U02 1 324 1 350 1 374 1 37 U02 2 274 2 30 2 324 2 32 W3012 StrtElm Startng Element IND bal W3016 INS AppData TNS TNT 1 128 Yl 5 12 55203 1257 U02 1 7 2 7 W3018 STS Error Code STS INI 1 51 33 W3054 App TNS AppData Send TNS Uls 2 9 TO 22 a 2 7 W3064 AppDATA AppData Send DATA U02 2 26 W3068 AppDATA AppData Send DATA UO2 1 31 W3304 App TNS AppData Receive TNS L
11. FCN PKT_Ofst_LO PKT_Ofst_HI ELEM LO EI EM HI ADD 7 DATA CMD OEH FCN OOH DATA Even number of Bytes sent to DST node Reply Format DST SRC CMD STS TNS LO TNS HI CMD 4fH NOTE An EXT STS byte will be added to the data stream if STS f0H STS and EXT STS bytes determine Asynchronous Link Status code This status code is contained within W3018 B3018 STS B3019 EXT STS S4516 DF1 Program Development Manual SYSTEMS Electronics Group B 17 APPENDIX B SAMPLE SYSdev PROGRAM CODE 0 Assemble PLC5 Word Range Read Write APP DATA Packet 1 if B3014 B3014 1 2s 38 B3050 3 pa 4 B3051 0 5 B3052 OfH 6 B3053 00H JA WA W3054 W3016 PA 8 B3057 0 pr 9 B3058 0 10 B3059 B3010 LL B3060 0 E 1 23 B3061 OfH 13 B3062 0 fa 14 B3063 B3011 fx 15 B3064 ffH JA 16 B3065 B3012 JA TS B3066 B3013 18 B3067 0 19 if B3014 0 J 20 f 21 B3015 19 bai E B3056 01H 23 W3002 2 B3010 24 B3068 B3002 J 25 26 if B3014 1 Dyes 28 W3002 2 B3010 18 29 B3015 B3002 fe 30 B3056 00H le W3006 amp W3068 rak W3008 8W1500 33 for B3004 0 B3004 lt B3010 34 f 354 W3006 W3008 pr 36 W3006 W3006 2 375 W3008 W3008 2 38 39 40 41 4516 DF I Program Devel
12. Function File C5 or a SLC500 S4516 DF1 Program Development Manual k responds to a Write function command delivered ither The function will be deciphered and the ten to memory as specified by the PIC as long as the ress is within range Description PLC5 Word Range Write Write Block SLC500 Protected Typed Logical Write W3312 Start of DATA SLC500 Element ADD Not Encoded W3314 Start of DATA SLC500 Element ADD Encoded W3316 Start of DATA PLC5 Element ADD Not Encoded W3318 Start of DATA PLC5 Element ADD Encoded r SLC500 Write Command sa 1 CMD Command Yes ERE Reset CMD Command 306 00H B3306 aaH FCN PLC5 or SLC500 Write Yes B3306 00H PLC5 Word Range Write Yes W3002 B3309 2 Set FOR LOOP Limit TOT TNS if B3310 ffH Encoded Element ADD W3008 amp W3318 Point to Data Received else No W3008 amp W3316 Point to Data Received e SLC500 Typed Logical Write f B3002 B3307 Set FOR LOOP Limit size bytes if B3310 ffH Element Encoded W3008 amp W3314 Point to Data Received else Element not Encoded W3008 amp W3312 Point to Data Received B3004 0 B3004 lt B3002 B3004 f B3006 B3008 Write Data to Memory W3006 W3008 Increment Data Pointers SYST
13. RXD 4 ji li es RXD 5 r 6 DSR RS 422 TXD 6 rye DeD 20 DTR TXD 7 c c em O T 53000 NETWORK COMMUNICATIONS ah illa f dr usen 2 3 S4 Internally the PLC5 should be setup for RS 232 communications Refer to the dip switch setting guide on the side of the processor Additionally Dip switch SW1 on the S4516 DF1 board is the RS 232 RS 422 dip switch and should be set as follows POLE 1 ON POLE 2 off S4516 DF1 Program Development Manual SYSTEMS Electronics Group SECTION 4 PLC5 TO S4516 DF1 COMMUNICATION GUIDE Dip switch SW2 is the slot address This is dependent upon the rest of the cards in the M4500 rack In the above example the board is setup for slot01 POLE 1 ON POLE 2 off 4 2 CHANNEL 0 CONFIGURATION The Channel 0 Serial port on the PLC5 should be setup as shown below Note The communication mode must be set for System point to point Edit Channel Properties Attention lets E SUSLETIT SET 9600 None e pc FH 1 E Full Duplex Modem S4516 DF1 Program Development Manual SYSTEMS Electronics Group 18 SECTION 4 PLC5 TO S4516 DF1 COMMUNICATION GUIDE The Channel 0 Options are set as follows Edit Channel Properties 30 seconds Note The Detect Duplicate Messages should be unchecked S4516 DF1 Program Development Manual SYSTEMS Electronics Group 19 SECTION 4 PLC5 TO S4516 DF1 COMMUNICATION GU
14. data to a SLC500 processor Message Packet Format Protected Typed Logical Read with Three Address Fields Command Format CMD STS TNS FNC BYTE FILE FILE ELEMENT SUB ELMT OfH A2H SIZE NO TYPE NO NO Reply Format CMD 4fH An EXT STS extended status byte will replace the data field if there is an error STS status byte will not be zero DATA TNS up to 240 Bytes STS Message Packet Format Protected Typed Logical Write with Three Address Fields Command Format CMD FNC BYTE FILE FILE ELEMENT SUB ELMT OfH NO STS TNS laH sizE NO TYPE no DATA up to 240 Bytes Reply Format CMD 4fH An EXT STS extended status byte will be attached only if there is an error STS status byte will not be zero EXT STS STS TNS S4516 DF1 Program Development Manual SYSTEMS Electronics Group 1 SECTION 2 DEVELOPING THE MESSAGE PACKET In these message packet formats the CMD STS TNS and FNC fields perform the same typical functions However the remaining fields are described below Field Byte Size File Number File Type Element Number Sub Element S4516 DF1 Program Development Manual Description The size of data to be read in bytes not including the address fields or other overhead bytes This byte addresses files 0 254 only For higher addresses setting this byte to FF expands this field to three bytes total
15. installation operation or adjustment of the equipment The contents of the User Manual are believed to be correct at the time of printing however no responsibility is assumed for inaccuracies In the interests of a commitment to a policy of continuous development and improvement the manufacturer reserves the right to change the specification of the product or it s performance or the contents of the User Manual without notice Copyright O 2002 Systems Engineering Associates Inc All rights reserved CONTENTS 1 General Overview 1 2 Developing the Message Packet 3 2 1 Full Duplex Transmission Characters 4 2 2 Command 8 Reply Message Packet Byte Definitions 5 2 3 Packet Format for Full Duplex Protocol 6 2 44 How the Transmitter Operates 7 2 5 How the Receiver Operates 8 2 6 Message Packet Formats 8 2 6 1 PLC5 Word Range Read Write 9 2 6 2 SLC500 Protected Typed Logical Read Write 11 3 Using the System Functions 13 3 1 Initializing the S4516 DF1 for Communications 13 3 2 Receiving Through the User Port sfunc10 14 3 3 Transmitting Through the User Port sfunc11 15 3 4 Communicating on the S3000 Network sfunc13 16 4 PLC5 to S4516 DF1 Communications Guide 17 4 1 Hardware 17 4 2 Channel 0 Configuration 18 4 3 Using the MSG Instruction sample PLC code 20 44 The Read Instruction 21 4 5 The Write Instruction 22 5 SLC500 to S4516 DF1 Communications Guide 23 5 1 Hardware 23 5 2 Channel 0 Confi
16. 004 lt B3010 B3004 f xW3008 W3006 Load Data Register W3006 W3006 2 W3008 W3008 2 else XmitPkt Xmit AppData Packet CMDInit Command Init RespPnd Waiting for Respons CMD Rpy Recievd CMD Reply Temp i Temp i NumElem Num of Elemnts MsgPkt Message Packet Number STS Error Code STS EXT STS Error Code EXT STS App_FCN AppData Send FCN DataRcv W1750 Thru W1998 Pointer Pointer Pointer Pointer TNS AppData TNS App TNS AppData Receive TNS LO App FCN AppData Receive FCN W3306 4516 DF I Program Development Manual B 13 SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DF1 DF1 MAIN L01 kkxkxkxkxkxkxkxkxkxkxkxkkxkxkxkkkxkxkkkxkxkxkkkxkkxkkkxkkkkkxkxkkxkkxkxkkkkkkkkxkkkkkxkkxkkkxkkkkkxkkkkkxxkxk block 6 Ladder DF1 comm User Function File This block executes the No Response Timeout logic If a command message packet is deliverd and response should be expected within a period of time If a reply is not received then the messag is considered lost and should be sent again Waiting No for Respons Respons Timer TimeOut B3000 2 4 t B3000 5 0 4 1 RespPnd P B3024 RespTO TB 0 10 A B3025 Waiting RespAc for No Resp Respons TimeOut B3000 2 ds Acum 0 4 RespPnd S4516 DF1 Program Development Manual SYSTEMS Electronics Group s B 14 APPENDIX B S
17. 0924 1 1 1 1 1 19 1 26 U02 2 1 2 1 2 16 2 21 B3015 sfllSen sfunc11 sent UOT 1 5 2 4 229 39 U01 3 9 3 134 3 13 0924 121 1298 2 184 2 24 B3018 STS Error Code STS U01 5 6 B3019 EXT STS Error Code EXT STS U01 5 8 5 10 B3020 sf10Rtn sfunc10 NumByte Return UQE 1 26 1 27 B3021 sf11Rtn sfuncll Respons Code JO a L 5 1 6 1 10 1 11 B3022 sf11 Pv sfuncll Respons Prev U01 1 10 B3023 sfllRtn sfunc19 Respons Code ENT 143 B3024 RespPr No Resp TimeOut Preset INI 1 14 1 15 U01 6 0 7 4 B3025 RespAc No Resp TimeOut Acum TNT 14152 U01 6 0 B3050 App DST AppData Send DST U01 1 5 22 58 UOZ2 1 34 2 3 4516 DF I Program Development Manual B 24 SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE Addr nicname description location used B3051 App SRC AppData Send SRC UOLS 26 U02 1 4 2 4 B3052 App CMD AppData Send CMD UO1 2 7 UO2 L 5 2 5 B3053 App STS AppData Send STS U01 2 8 2 30 1024 16 2 6 B3056 App FCN AppData Send FCN U01 2 31 3 16 5 21 5 21 0022 2422 ISSO 2 L9 2 25 B3057 AppDATA AppData Send DATA U02 1 8X 2 9 B3058 AppDATA AppData Send DATA JO 2 1 9 2 104 B3059 AppDATA AppData Send DATA UO2 d L0 2 11 B3060 AppDATA AppData Send DATA 1 02 ci Lae 25127 B3061 AppDATA AppData Send DATA UO2 LATA 25137 B3062 AppDATA AppData Send DATA UAZ 1 13 2 14 B3063 AppDATA AppData Send DATA U02 1 14
18. 10 B3022 B3021 ll if B3021 2 KE 12 Ls 13 if B3000 1 1 Je 14 IER 15 B3000 1 0 J5 16 B3000 2 1 ye 183 19 else JE 20 B3000 0 1 JE 21 2 25 23 24 25 Receive APP DATA from Data Link 26 B3020 sfunc10 250 B3300 JA 27 if B3020 gt 0 JAS 28 1 2 0 if B3302 6 0 JN 30 B3000 3 1 JA Silks else JAS 32 B3000 4 1 33 34 B0169 1 sfllErE sfuncll ErrCode Enable B3000 0 XmitPkt Xmit AppData Packet B3000 1 CMDInit Command Init B3000 2 RespPnd Waiting for Respons B3000 3 CMD CMD Recievd CMD CMD B3000 4 CMD Rpy Recievd CMD Reply B3015 sfllSen sfuncll sent B3020 sf10Rtn sfunc10 NumByte Return B3021 sfllRtn sfuncll Respons Code B3022 sfll Pv sfuncll Respons Prev B3050 App DST AppData Send DST B3300 App DST AppData Receive DST THRU B3302 6 CMD Rpy Command Reply Indictr B3549 AppDATA AppData Receive DATA 4516 DF I Program Development Manual B 6 Xmit APP DATA Packet Yes Command Initiator Assemble APP DATA Packet Transmit APP DATA Packet Done Yes Reset B169 1 MANDITORY Reset Xmit APP DATA Save Xmit Response DLE ACK Received Yes Command Initiator Set Yes Reset Command Initiator Set Response Pending DLE ACK Not Received Resend APP DATA Packet Receive Data From S4516DF1 Message Received Yes Decipher Command Bit CMD
19. AMPLE SYSdev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DF1 DF1 MAIN L01 kkxkxkxkxkxkxkxkxkxkxkxkxkkxkkkkkxkkkkkxkkkxkkxkkkxkxkkkkxkxkkkkxkxkkkkkxkkkxkkxkkkkxkxkkkkkxkkkxkkkkkxxkxk block 7 High level DF1 comm User Function File This block is executed whenever a No Response Timeout condition exists The current transaction number TNS is incremented and the Initiate Transmit bit is set to send a new message packet 0 1f B3000 5 1 amp amp B3000 0 0 No Response Timeout ds Yes 2 B3000 0 1 Set Initiate Transmit 3 B3000 1 1 Set Command Initiator 4 B3024 50 Reset Timeout Timer 5 sec Bu W3016 Increment TNS 6 T B3000 0 XmitPkt Xmit AppData Packet B3000 1 CMDInit Command Init B3000 5 RespTO No Respons TimeOut B3024 RespPr No Resp TimeOut Preset W3016 TNS AppData TNS S4516 DF 1 Program Development Manual SYSTEMS Electronics Group B 15 APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 2 C PROGRAMS AB DF1 DF1 MAIN L02 DF1 AppData User Function File This user function file assembles the APP DATA packet to be transmitted to the destination node NOTE This user function file is only an example of one way to assemble the APP DATA packets The following blocks demonstrate how to read and write to a PLC5 and a SLC500 Bytes B3050 thru B3299 250 bytes are used as a temporary buffer to assem
20. B3012 fe B3062 B3013 JA B3063 0 if B3014 2 f B3015 14 B3056 a2H if B3014 3 f W3002 2 B3010 14 B3015 B3002 fx B3056 aaH JA W3006 amp W3064 J W3008 amp W1500 for B3004 0 B3004 B3010 f W3006 W3008 pa N3006 W3006 2 W3008 W3008 2 S4516 DF1 Program Development Manual APPENDIX B SAMPLE SYSdev PROGRAM CODE Read Write APP DATA Packet ay oy xj A nf es ST RC MD TS NS Num Size S Y D S S T of Bytes Bytes LC500 Command Set 1 Bil File Number File Type Element S 2 Bytes Element Encoded into Next 2 Bytes Element Low Byte Element High Byte Sub Element SLC500 Protected Logical Read Yes Number of APP DATA Packet Bytes FCN SLC500 Protected Logical Write Yes Calculate Number of APP DATA Bytes Number of APP DATA Packet Bytes FCN Point to Data Send Buffer Point to Sto B3004 red Data Load Send Buffer B 21 Register SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE B3002 B3004 B3010 B3011 B3012 B3013 B3014 B3015 B3050 B3051 B3052 B3053 B3056 B3057 B3058 B3059 B3060 B3061 B3062 B3063 W1500 W3002 W3006 W3008 W3016 W3054 W3064 Temp C TNS App TNS AppDATA Temp Temp Num of A B Startng Startng Messa
21. Command Set CMD Command CMD Reply Set Reply CMD SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DF1 DF1 MAIN L01 kkxkxkxkxkxkxkxkxkxkxkxkkkxkkkxkkxkkkkkxkkkxkxkkkkxkkkkkxkxkkkxkxkxkkkkkxkkkxkkxkkkkkxkkkxkxkxkkkxkkkkkxxkxk block 2 High level DF1 comm User Function File This block sets up the reply message packet to respond to a command message received All command message packets received will have the same basic reply message packet format The following is typical for a Write function command DST SRC CMD STS TNS LO TNS HI If the function received is a Read command then message packet will have the following format DST SRC CMD STS TNS LO TNS HI DATA If the starting address is outside the defined limits the reply message packet will have the following format DST SRC CMD STS TNS LO TNS HI EXT STS Where the EXT STS byte will contain the value 06H Address Doesn t Point to Something Usable The starting address should always be verified for proper range because pointers are used to read and write data to memory within the M4500 NOT E When setting up Message Blocks the following elements will determine the starting address in the M4500 PLC5 Message Control Block Element 07 SLC500 Message Control Block Element 05
22. EMS Electronics Group B 10 B3000 B3002 B3004 B3006 B3008 THRU W3002 W3006 W3008 W3312 W3314 W3316 W3318 Temp C Pointer Pointer AppDATA AppDATA AppDATA AppDATA rere rv YH YS DHS Recievd Temp Temp Pointer Pointer Temp Pointer Pointer AppData AppData AppData AppData CMD CMD calc 1 calc Receive Receive Receive Receive 4516 DF I Program Development Manual APPENDIX B SAMPLE SYSdev PROGRAM CODE DATA DATA DATA DATA B 11 SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DF1 DF1 MAIN L01 KKKKKKKKKKKKKKKK KKK KKK KK KKK KKK CC CC SC Ck C Ck KC Ck KC SC CK Ck Sk CC Ck kk KK KA ko ko ko kk kk block 5 High level DF1_comm User Function File This block responsd to a reply message packet received The STS and EXT STS bytes are checked for any message packet errors W3018 contains the STS and EXT STS error code information If the STS and EXT STS bytes indicate that no errors have occurred then action is taken to copy any data returned to memory and then setup for the next command message packet to be delivered B3303 STS Byte B3306 EXT STS Byte W3306 Start of DATA Received Refer to the Allen Bradley Data Highway Data Highway Plus TM DH 485 Communication Protocol and Command Set Reference Manual Chapter 4 1 Asynchronous Link Status Codes
23. Files 0 254 only YPE 80H 84H Reserved 85H Bit 86H Timer 87H Counter 88H Control 89H Integer ELEMENT NO 1 ffH Encoded into the next two bytes ELEMENT NO 2 Lo Byte ELEMENT NO 3 Hi Byte SUB ELEMENT NO 0 Default Reply Format DST SRC CMD STS TNS LO TNS HIJ Data CMD 4fH Protected Typed Logical Write with Thr Address Fields Command Data Format FCN SIZE FILE NO FILE TYPE ELEM NO 3 SUB ELEM NO DATA CMD OEH FCN aaH DATA Even number of Bytes sent to DST node Reply Format DST SRC CMD STS TNS LO TNS HI CMD 4fH NOTE An EXT STS byte will be added to the data stream if STS f0H STS and EXT STS bytes determine Asynchronous Link Status code This status code is contained within W3018 B3018 STS B3019 EXT STS 4516 DF I Program Development Manual SYSTEMS Electronics Group B 20 0 121 f 2 00 1I A OI ib W llos 1125 13 14 15 16 iA 18 19 20 21 2 25 23 24 25 26 2 jus 28 29 3 0 31s 32 33 34 35 363 Assemble SLC500 Typed Logical B3014 B3014 3 B3050 5 B3051 0 f3 B3052 OfH ie B3053 OOH JA W3054 W3016 W3002 2 B3010 J B3057 B3002 J B3058 B3011 B3059 B3011 82H B3060 ffH B3061
24. HE S4516 DF1 FOR COMMUNICATIONS S4516 DF1 is initialized for communications using system function sfunc19 This is typically done in the initialization file of the M4500 The following code is an example of how to initialize the S4516 DF1 for communications S4516 DF1 board located in slot02 W8156 7552 S4516 DF1 Located in slot 02 sfunc19 1 3 1 S4516 DF1 S3000 Network Node 1 S3000 Network Baud Rate 344k User Port Baud Rate 19200 If the S4516 DF1 were to be used as a slave on the S3000 network the board would need to be initialized using the following code B161 6 1 sfunc13 Slave mode Enabled W8154 7552 Slave slot Address for sfunc13 slave mode W8156 W8154 S4516 DF1 Located in slot 02 sfunc19 1 3 1 Initialize S4516 DF1 Board S3000 Network Node 1 S3000 Network Baud Rate 344k User Port Baud Rate 19200 4516 DF I Program Development Manual SYSTEMS Electronics Group 132 SECTION 3 USING THE SYSTEM FUNCTIONS 3 2 RECEIVING THROUGH THE USER PORT sfunc10 The sfunc10 will perform the following functions e Receives message packets e Check for transmission errors using the Block Check Character BCC method e Removes the starting and ending control symbols and any unnecessary DLE characters e Returns a response upon receipt of the message packet General Form sfunclO Zmax dest Parameters max This number is essentially ign
25. IDE 4 3 USING THE MSG INSTRUCTION sample PLC code The following sample RSLogix5 code is used to execute the message control function to allow a PLC5 to communicate with the S4516 DF1 Serial Communications board MSG Read Write Message Contro MG20 0 Setup Screen Read Write Message Contro MG21 0 Setup Screen 4516 DF I Program Development Manual SYSTEMS Electronics Group 20 SECTION 4 PLC5 TO S4516 DF1 COMMUNICATION GUIDE 4 4 THE READ INSTRUCTION The Read message MSG instruction for a PLCS is setup as follows MSG MG20 0 1 Elements General m This PLC 5 r Control Bits Communication Command Ignore if timed out TO 0 Data Table Address To be retried NA 0 Size in Elements Awaiting Execution EW 0 Port Number 5 Continuous Run CO 0 Error ER o Target Device Message done DN o Data Table Address N7 0 Message Transmitting ST 0 Local Station Address oct dec Message Enabled EN D Local Remote Local Error Error Code Hex 0 Error Description No errors Note The Communication Command is PLC3 Word Range Read The Data Table Address N7 0 can be any inter file address The 50 elements read from the M4500 are a set of 50 consecutive words This value can be anything from 1 to 120 The M4500 PLC code can be written to interpret the data ta
26. ING UNIT command button Then select the FREESTANDING model to be configured i e DL2000 K2F Two Serial Interface Ports to A B DH Select the COM PORT that the computer will be using to interface with the Data Link and make sure the serial communications cable is connected Within the DATALINK OPERATING PARAMETERS click the CONFIGURE PARAMETERS command button Under the OPERATING MODE SELECTION select the STANDARD DF1 TO DH option Set the STATION NUMBER to the next available node on the network Set the NETWORK SPEED Typically this is set to 57 6k baud Set the CHANNEL SERIAL SPEED This is the speed at which the S4516 DF1 will communicate to the Data Link If using the S4516 DF1 in conjunction with the S3000 network set the speed to 9600 baud otherwise it can be set to either 9600 or 19 2k baud Click the SET ADVANCED DF1 PROTOCOL PARAMETERS command button Under the DUPLICATE MESSAGE select the ACCEPT option and click the ACCEPT command button Then click the NEXT TO DOWNLOAD TO DL command button at the bottom of the screen Then click CLICK HERE TO DOWNLOAD PARAMETERS TO DL command button Follow the instructions to place the Data Link into a Configuration Mode and download the parameters Then return to the Welcome Screen Then QUIT DL97 Press the Reset to put the Data Link on line 4516 DF I Program Developme
27. NICATION GUIDE The Channel 0 Options are set as follows Channel Configuration X General Chan 1 System Chan 0 System Chan 0 User Driver DF1 Full Duplex y 3 decimal Baud 9600 Parity NONE Stop Bits 1 Protocol Control Control Line No Handshaking ACK Timeout x20 ms 50 Error Detection BCC s Embedded Responses Enabled Duplicate Packet Detect NAK Retries 3 ENG Retries 3 Cancel Apply Help Note The Detect Duplicate Messages should be unchecked S4516 DF1 Program Development Manual SYSTEMS Electronics Group 25 SECTION 5 PLC5 TO S4516 DF1 COMMUNICATION GUIDE 5 3 USING THE MSG INSTRUCTION sample PLC code The following sample RSLogix500 code is used to execute the message control function to allow a SLC to communicate with the S4516 DF1 Serial Communications board Target Device Local Remote Local Control Block N12 0 Control Block Length 14 Setup Screen Peer To Peer Write Target Device 500CPU Local Remote Local Control Block N12 20 Control Block Length 14 Setup Screen 0002 0003 4516 DF I Program Development Manual SYSTEMS Electronics Group 26 SECTION 5 SLC500 TO S4516 DF1 COMMUNICATION GUIDE 5 4 THE READ INSTRUCTION The Read message MSG instruction for a SLC is setup as follows MSG N12 0 14 Elements General This Controller r Control Bits C
28. O 001 2 9 5 12 W3306 App FCN AppData Receive FCN U01 5 23 W3312 AppDATA AppData Receive DATA U01 4 20 W3314 AppDATA AppData Receive DATA U01 4 18 W3316 AppDATA AppData Receive DATA U01 4 12 W3318 AppDATA AppData Receive DATA U01 4 10 W7552 SlotAdd 4516DF1 Slot Address INI 1 1 1 2 W8154 SlotAdd sfuncl3 Slave SlotAdd INI 1 1 W8156 SlotAdd sfunc10 11 13 SlotAdd INI 1 2 4516 DF I Program Development Manual SYSTEMS Electronics Group B 26
29. S4516 DF1 PROGRAM DEVELOPMENT MANUAL M4500 BASED Revised 27 August 2003 Systems Engineering Associates Inc 14989 West 69 Avenue Arvada Colorado 80007 USA Telephone 303 421 0484 Fax 303 421 8108 WWW Sea seg com S4516 DF1 PROGRAM DEVELOPMENT MANUAL M4500 BASED Copyright O 2002 Systems Engineering Associates Inc All Rights Reserved Revised 27 August 2003 WARNING To ensure that the eguipment described by this User Manual as well as the eguipment connected to and used with it operates satisfactorily and safely all applicable local and national codes that apply to installing and operating the eguipment must be followed This includes the National Electrical Code in the USA and other applicable legislation regulations and codes in practice elsewhere Since codes can vary geographically and can change with time it is the user s responsibility to determine which standards and codes apply and to comply with them FAILURE TO COMPLY WITH APPLICABLE CODES AND STANDARDS CAN RESULT IN DAMAGE TO EQUIPMENT AND OR SERIOUS INJURY TO PERSONNEL Persons supervising and performing installation or maintenance must be suitably qualified and competent in these duties and should carefully study the User Manual and any other manuals referred to by it prior to installation and or operation of the equipment The manufacturer accepts no liability for any consequences resulting from inappropriate negligent or incorrect
30. S4516 DF1 Program Development Manual SYSTEMS Electronics Group B 7 APPENDIX B SAMPLE SYSdev PROGRAM CODE 0 Command Messag Toup 25 00 J00 SW 9 10 Tix T2 13 14 15 16 Tie 18 19 20 21 2 25 23 24 25 26 2 jus 28 29 3 0 31s 32 33 34 B3000 B3000 B3006 B3007 B3015 B3050 B3051 B3052 B3053 B3056 B3300 THRU W1500 W1750 W3006 W3054 W3304 Packet Received B3000 3 1 B3000 0 1 B3015 6 B3050 B3301 B3051 B3300 B3052 B3302 40H B3053 00H W3054 W3304 if B3306 01H B3306 00H if B3310 ffH B3006 B3316 B3007 B3315 else B3006 B3314 B3007 B3313 else if B3306 a2H B3306 aaH if B3310 ffH B3006 B3311 B3007 B3312 else B3006 B3310 B300720 vid TE 113006 lt 8W1500 E 0 W3006 gt 8W1750 B3015 7 B3053 f0H B3056 06H XmitPkt Xmit AppData Packet CMD CMD Recievd CMD CMD Pointer Pointer Pointer Pointer sfllSen sfuncll tsent App DST AppData Send DST App SRC AppData Send SRC App CMD AppData Send CMD App STS AppData Send STS App FCN AppData Send FCN App DST AppData Receive DST DataSen W1500 Thru W1748 DataRcv W1750 Thru W1998 Pointer Pointer App TNS AppData Send TNS App TNS AppData Receive TNS LO 4516 DF I Program Development Manual B 8 MD Command Ki Send Message Packet
31. _comm User Function File This user funcion file handles the transmitting and receiving of Application Data to a Datalink Communications Module B3000 B3025 Main Program Control Bytes B3050 B3299 sfuncll Send Buffer B3300 B3549 sfunc10 Receive Buffe ry NOTE This code can be used as either a Command Initiator master or a Command Receiver slave without any modification to the code ufunc02 DF1 AppData is called from this user function file to assemble the Application Data packet B3014 determines which APP DATA packet will be assembled This allows the user to generate any number of different APP DATA packets to be transmitted to the Datalink Once an APP DATA packet has been assembled sfuncll formats the frame and transmits the data to the Datalink and then returns the appropriate response code If the packet sent was a Command Initiator then a reply should be expected If a reply is not returned within a period of time the transaction number TNS is incremented and the message resent sfunc10 is continuously called from this user function This system function returns only the APP DATA received from the Datalink with all formating and framing characters removed The command CMD and function FCN bytes together define th activity to be performed This sample code will allow data to be read or written to a PLC5 or SLC500 based on the following message pack
32. ble address 1 e N7 0 W4300 The Local Station Address is only necessary to define if communications with the S4516 df1 is executed over the Data Highway network via a DataLink module 4516 DF I Program Development Manual SYSTEMS Electronics Group SECTION 4 PLC5 TO S4516 DF1 COMMUNICATION GUIDE 4 5 THE Write INSTRUCTION The Write message MSG instruction for a PLCS is setup as follows MSG MG21 0 1 Elements This PLC 5 Control Bits 1 Communication Command PLC 3 Word Range Write Ignore if timed out TO o Data Table Address To be retried NR 0 Size in Elements Awaiting Execution EW 0 Port Number 05 Continuous Run CO 0 Error ER lo Target Device Message done DN lo Data Table Address Message Transmitting ST 0 Local Station Address oct dec Message Enabled EN 0 Local Remote Error Error Code Hex 0 Error Description No errors Note The Communication Command is PLC3 Word Range Write The Data Table Address N7 50 can be any inter file address The 10 elements written to the M4500 are a set of 10 consecutive words This value can be anything from 1 to 120 The M4500 PLC code can be written to interpret the data table address i e N7 50 W4400 The Local Station Address is only necessary to define if communications with the S4516 df1 is executed over t
33. ble the APP DATA packets The value of B3014 determines which APP DATA packet will be assembled The value of B3015 sets sfunc11 tsent property 4516 DF I Program Development Manual SYSTEMS Electronics Group B 16 APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 2 C PROGRAMS AB DF1 DF1 MAIN L02 kkxkxkxkxkxkxkxkxkxkxkxkkkxkkkxkkxkkkkkxkkkxkkkkkxkxkkkkxkkkkkxkkkkkxkkkkxkkxkkkkxkxkkkkxkkkkxkkkkkxxkxk block 1 High level This block contains the code to assemble the APP DATA packets to accomplish reading or writing data to an A B PLC5 processor General Format DST SRC CMD STS TNS LO TNS HI Command Data Word Range Read Read Block Command Data Format FCN PKT Ofst LO PKT Ofst HI ELEM LO ELEM HI ADD 7 SIZE CMD OfH FCN 01H ADD PLC5 Starting Element of Address to Read ADD 1 Number of Encoded Address Levels ADD 2 Level 1 data table default 0 ADD 3 Level 2 file number 0 1 2 3 4 5 6 7 8 9 999 ADD 4 Level 3 Element Number Encoded into next two bytes ADD 5 Level 3 Element Number LO Byte ADD 6 Level 3 Element Number HI Byte ADD 7 Level 4 Sub Element Number SIZE Number of Bytes to Read 2 Bytes 1 Element Reply Format DST SRC CMD STS TNS LO TNS HI Data CMD 4fH Word Range Write Write Block Command Data Format
34. d A consecutive number of bytes sent is transmitted out the USERPORT starting with this address Variable types B or indirect B Return Values 0 Not Busy Ready 1 Busy 2 Done DLE ACK Received 3 Done Error DLE NAK Received 4 Done Error DLE ENO Time Out 5 Done Error No Response Time Out 6 Done Error Packet too Large Type Simultaneous Valid Files Initialization Main Program and User Functions 4516 DF I Program Development Manual SYSTEMS Electronics Group 15 SECTION 3 USING THE SYSTEM FUNCTIONS 3 4 COMMUNICATING ON THE 3000 NETWORK sfunc13 System function sfunc13 is used to communicate to other S3012s S3014s M4000 modules or other M4500 nodes on the S3000 serial communications network The operation of the sfunc13 is identical to that described in the M4500 Program Development Manual 4516 DF I Program Development Manual SYSTEMS Electronics Group 16 SECTION 4 PLC5 TO S4516 DF1 COMMUNICATION GUIDE 4 1 HARDWARE DF1 communications takes place via the Channel 0 port 25 pin of the PLCS to the RS 232 communications port on the S4516 DF1 Serial Communications board The cable should be constructed as follows SLOT 0 1 SW1 SW2 NO ta S4516 DF1 edi COMMUNICATIONS CHO CO CPU 25 PIN EET A A RXD 0 f 72 man mod ll Hg px i SG 2 I IT 7 SG 3 4 RTS
35. data from the application layer Data Symbol A symbol that represents the data value 10 hex SYSTEMS Electronics Group 4 SECTION 2 DEVELOPING THE MESSAGE PACKET 2 2 COMMAND AND REPLY MESSAGE PACKET BYTE DEFINTIONS The following are the byte definitions for the Command and Reply message packets Refer to the Allen Bradley Data Highway Data Highway Plus DH 485 Communication Protocol and Command Set Reference Manual chapter 3 1 Understanding Application Layer Message Packet Protocol for more information on the basic command set message packet fields DST Destination node where the message packet is to be delivered SRC Source node from where the message packet originated from CMD Command Code STS Status Code TNS Transaction Number 2 bytes FNC Function Code EXT STS Extended Status Code ADDR Starting Address of memory location DATA Data values being transferred by the message packet SIZE Number of data bytes to be transferred by the message packet The allowed value for the SIZE is variable based on the function being executed In some cases the SIZE is the number of Elements being transferred not Bytes NOTE 1 element contains 2 bytes S4516 DF1 Program Development Manual SYSTEMS Electronics Group 25 SECTION 2 DEVELOPING THE MESSAGE PACKET 2 3 PACKET FORMAT FOR FULL DUPLEX PROTOCOL The Data Link layer message packet always begins with DLE STX and e
36. e to Communicate with 1771 rack adapter Adapter Cannot Communicate with Module 1771 Module Response was not valid Duplicated Label File is Open Another Node Owns it Another Node is the Program Owner Not Used SYSTEMS Electronics Group A 4 APPENDIX B SAMPLE SYSdev PROGRAM CODE S4516 DF1 Serial Communications Sample Program Code 02 07 02 SYS96 Init file C PROGRAMS AB DF1ADF1_MAIN LIN DF1 MAIN R01 Initial Release 08 1999 Revised 02 2000 Systems Electronics Group The S4516 DF1 is an application specific serial communications board that has been embeded with the Allen Bradley DF1 communication protocol This allows the M4500 PLC to reside as a node on the Allen Bradley Data Highway network Communication to the Data Highway is done through a Datalink Communication Controller The S4516 Df1 can be setup to communicate to the Datalink at either 9600 baud or 19 2 kbaud At the same time the S4516 DF1 can communicate across the 3000 network allowing for seemless integration of two networks The following sample code is an example of how to read and write data to and Allen Bradley PLC5 or SLC500 The code can be used As IS with very few modifications or if so desired completely modify this program to suit the users needs The embeded DF1 driver uses sfunc11 to transmit the message packets to the Datalink and sfunc10 to receive There are no changes in the format of these two system functions
37. essage will not be sent and an error code will be generated See section 3 3 Transmitting Through the User Port sfunc11 for more details Refer to the Allen Bradley Data Highway Data Highway Plus DH 485 Communication Protocol and Command Set Reference Manual Chapter 3 1 Understanding Application Layer Message Packet Protocol for more information 4516 DF I Program Development Manual SYSTEMS Electronics Group 35 SECTION 2 DEVELOPING THE MESSAGE PACKET 2 1 FULL DUPLEX TRANSMISSION CHARACTERS The following characters are the Full Duplex Transmission Symbols Abbreviation HEX Value STX 02 ETX 03 ENO 05 ACK 06 DLE 10 NAK 15 These characters are combined to create Control Symbols and Data Symbols This is a sequence of one or more bytes having a specific meaning to the link protocol The following are the Data Link Layer message packet fields used with the full duplex protocol DLE STX DLE ETX BCC DLE ACK DLE NAK DLE ENQ MESSAGE DLE DLE S4516 DF1 Program Development Manual Control Symbol Indicates the START ofa message packet Control Symbol Indicates the END of a message packet Response Control Symbol Indicates that a message has be successfully received Response Control Symbol Indicates that a message has not been successfully received Sender Control Symbol Indicates a request for retransmission of a message packet or response symbol Data Symbol Includes
38. et formats PLC5 Word Range Read Read Block PLC5 Word Range Write Write Block SI SI LC500 Protected Typed Logical Read with Three Address Fields LC500 Protected Typed Logical Write with Thr Address Fields Ss WN H Refer to the Allen Bradley Data Highway Data Highway Plus TM DH 485 Communication Protocol and Command Set Reference Manual Unit III Application Layer Message Packet Fields for more information S4516 DF1 Program Development Manual SYSTEMS Electronics Group B 4 APPENDIX B SAMPLE SYSdev PROGRAM CODE SYS96 User function 1 C PROGRAMS AB DF1 DF1 MAIN L01 kkxkxkxkxkxkxkxkxkxkxkxkkkxkkkkkxkkkkxkxkkkxkkkkkxkkkkkxkxkkkkxkxkkkkkkkkxkkxkkkxkkxkkkkkxkkkxkkkkkxxkxk block 1 High level DF1 comm User Function File This block is used to transmit and receive APP DATA from the Datalink Transmitting Data B3000 0 is set when a message packet is to be delivered to the Datalink Once sfuncll is DONE this bit is reset as well as B169 1 Clearing B169 1 allows the sfunc11 response codes to be returned these are as follows Ls Busy 2 Done DLE ACK Received Message Acknowledged 3a Done DLE NAK Received Message Not Acknowledged 4 Done DLE ENQ Timeout Request for Retransmission Timeout br Done No Response Timeout from Datalink 6 Don Message Packet Too Large to Transmit gt 250 Bytes If something other
39. ge sfuncll AppData AppData AppData AppData AppData AppData AppData AppData AppData AppData AppData AppData W1500 Temp Pointer Pointer AppData AppData AppData calc i Elemnts Target Element Element sent Send Send Send Send Send Send Send Send Send Send Send Send Thru calc TNS Send Send 4516 DF I Program Development Manual FileNum Packet Number DST SRC CMD STS FCN DATA DATA DATA DATA DATA DATA DATA W1748 TNS DATA B 22 SYSTEMS Electronics Group APPENDIX B SAMPLE SYSdev PROGRAM CODE Typical Cross reference format for variable file block line usage variable is referenced r in file in block variable is referenced tion file am file rrupt file co cpu com interrupt file ufunc num ion file xx lue altered at referenced location variable used in Assembly block 1 timer accumulator set usage in Assembly block unknown variable used as pointer in High where fil file wher block block numbe lin line number usage sense that file key INI initializa MNF main progr TMD Timed inte COM Uxx User funct Usage key variable va output coi level block if the variable is not altered at location preset tested for value etc con tact timer equal etc or is not associated with variable Addr nicname
40. guration 24 5 3 Using the MSG Instruction sample PLC code 26 5 4 The Read Instruction 27 5 5 The Write Instruction 28 6 Configuring the Data Link 29 APPENDICES Asynchronous Link Status Codes Appendix A Sample SYSdev Program Code Appendix B S4516 DF1 Program Development Manual SYSTEMS Electronics Group i SECTION 1 GENERAL OVERVIEW The S4516 DF1 serial communications board contains one S3000 Serial Network Interface port and one RS 232 RS 422 User Port The S4516 DF1 provides a means for an M4500 module to communicate to other S3000 M4000 or M4500 modules processors via the S3000 serial network The RS 232 RS422 port implements the Allen Bradley DF1 full duplex communication protocol This allows an M4500 module to reside as a node on the Allen Bradley Data Highway Data Highway Plus DH 485 serial networks via a Data Link communication controller or RS232 interface Refer to the M4500 User s Manual Appendix A for more information on the 4516 serial communications board This manual is provided as a programming reference for the S4516 DF serial communications board communicating on the Allen Bradley Data Highway network This in conjunction with the M4500 User s Manual the M4500 Program Development Manual and the Allen Bradley Data Highway Data Highway PlusTM DH 485 Communication Protocol and Command Set Reference Manual provide the necessary documentation to write M4500 programs to communicate to other A
41. he Data Highway network via a DataLink module 4516 DF I Program Development Manual SYSTEMS Electronics Group 2 SECTION 5 SLC500 TO S4516 DF1 COMMUNICATION GUIDE 5 1 HARDWARE DF1 communications takes place via the Channel 0 port 95 pin of the SLC500 to the RS 232 communications port on the S4516 DF1 Serial Communications board The cable should be constructed as follows SLC500 SLOT 0 1 SW1 SW2 PL ON L ON S4516 DF1 COMMUNICATIONS CO CPU an PEDEM RXD O RS 232 TXD 1 SG 2 3 RXD 4 RXD 5 RS 422 TXD 6 TXD 7 Oj ff 53000 NETWORK COMMUNICATIONS 1H f fir USED SLC500 TO S4516 DF1 Additionally Dip switch SW1 on the S4516 DF1 board is the RS 232 RS 422 dip switch and should be set as follows POLE 1 ON POLE 2 off Dip switch SW2 is the slot address This is dependent upon the rest of the cards in the M4500 rack In the above example the board is setup for slot01 POLE 1 ON POLE 2 off S4516 DF1 Program Development Manual SYSTEMS Electronics Group SECTION 5 PLC5 TO S4516 DF1 COMMUNICATION GUIDE 5 2 CHANNEL 0 CONFIGURATION The Channel 0 Serial port on the PLCS should be setup as shown below Note The communication mode must be set for System point to point Channel Configuration S4516 DF1 Program Development Manual SYSTEMS Electronics Group 24 SECTION 5 SLC500 TO S4516 DF1 COMMU
42. l 0 Continuous Run CO 0 i Error ER lo Target Device Message done DN lo Message Timeout Message Transmitting ST 0 Data Table Address N 7 50 Message Enabled EN 0 Local Node Addr dec octal Waiting for Queue Space 0 Local Remote Error Error Code Hex 0 No errors Error Description Note The Communication Command is 500CPU Write The Data Table Address N7 50 can be any inter file address The 10 elements written to the M4500 are a set of 10 consecutive words This value can be anything from 1 to 120 The M4500 PLC code can be written to interpret the data table address 1 e N7 50 W4400 The Local Station Address is only necessary to define if communications with the S4516 df1 is executed over the Data Highway network via a DataLink module 4516 DF I Program Development Manual SYSTEMS Electronics Group SECTION 6 CONFIGURING THE DATA LINK The following instructions are provided as a guideline for setting up the Data Link DL2000 to operate with the S4516 DF1 communications board For more information refer to the DATALINK DL2000 Communication Controller User s Guide With power applied perform the following to configure the Data Link DL2000 With the DL97 Data Link Configuration software running select the FREESTANDING UNIT DL2000 ALL MODELS option and then click the LAUNCH DL97 CONFIGURATION SOFTWARE FOR A FREESTAND
43. llen Bradley PLC processors 4516 DF I Program Development Manual SYSTEMS Electronics Group SECTION 1 GENERAL OVERVIEW This Page Intentionally Left Blank 4516 DF I Program Development Manual SYSTEMS Electronics Group SECTION 2 DEVELOPING THE MESSAGE PACKET This section describes the fundamentals necessary to develop Application Data message packets to send or reply to command messages A command message indicates that some function will be performed by a remote node The reply message is the response to the command message If the remote node is unable to execute the function an error message will be generated and returned For each command message sent a reply message is generated A message may sometimes get lost and a response not returned Ifa reply is not received within a given time period the message should be sent again The minimum number of bytes contained in any one message packet is 6 The maximum number varies however the maximum number of bytes to be sent or received can not be greater than 250 The S4516 DF1 attaches a minimum of 5 additional bytes to every message packet while formatting the frame Additionally it will initiate DLE Doubling This adds an additional DLE 10 HEX character to the data string whenever a DLE character is found Care should be taken when formatting the message packets that additional bytes will be added prior to transmission If a frame is too large to transmit the m
44. nds with DLE ETX BCC control symbols These control symbols as well as DLE Doubling are automatically added to the users message packet as the frame is being prepared for transmission When a message packet is received only the message is returned to the user All other unnecessary control symbols are removed Figure 2 1 shows the format of a typical message packet for Full Duplex protocol Refer to the Allen Bradley Data Highway Data Highway Plus DH 485 Communication Protocol and Command Set Reference Manual chapter 3 2 Message Packet Formats for the Basic Command Set for more information on formatting the message packet DST SRC CMD STS TNS COMMAND DATA DLE STX APP DATA DLE ETX BCC Figure 2 1 Packet Format for Full Duplex Protocol S4516 DF1 Program Development Manual SYSTEMS Electronics Group 6 SECTION 2 DEVELOPING THE MESSAGE PACKET 2 4 HOW THE TRANSMITTER OPERATES When transmitting a message packet the S4516 DFl will first search the data string for any DLE characters 10 HEX and initiate DLE Doubling It will then attach the necessary starting and ending control symbols and calculate the block check character BCC Once assembled the message packet is transmitted typically to a Data Link or some other RS232 interface When the transmission is complete the S4516 DF1 waits for a reply indicating receipt of the message Once a response is returned the S4516 DF1 will return wi
45. nt Manual SYSTEMS Electronics Group SECTION 6 CONFIGURING THE DATA LINK This Page Intentionally Left Blank S4516 DF1 Program Development Manual SYSTEMS Electronics Group 30 APPENDIX A ASYNCHRONOUS LINK STATUS CODES Local STS Error Codes Code HEX 00 01 02 03 04 05 06 07 08 Definition Success No Error Not Used Cannot Guarantee Delivery Link Layer Duplicate Token Holder Detected Local Port is Disconnected Application Layer Timed out waiting for a response Duplicate Node Detected Station is Off Line Hardware Fault Remote STS Error Codes Code HEX 00 10 20 30 40 50 60 70 80 90 A0 BO CO DO EO F0 S4516 DF1 Program Development Manual Definition Success No Error Illegal Command or Format Host has a Problem and Will Not Communicate Remote Node Host is Missing Disconnected or Shut Down Host Could Not Complete Function Due to Hardware Fault Addressing Problem or Memory Protect Rungs Function Disallowed due to Command Protection Selection Processor is in Program Mode Compatibility Mode File Missing or Communication Zone Problem Remote Node Cannot Buffer Command Not Used Remote Node Problem Due to Download Cannot Execute Command Due to Active IPBs Not Used Not Used There is an Error Code in the EXT STS Byte SYSTEMS Electronics Group APPENDIX A ASYNCHRONOUS LINK STATUS CODES EXT STS Codes for Command Code OE HEX Code HEX 1
46. ommunication Command Ignore if timed out TO 0 Data Table Address To be retried NR 0 Size in Elements Awaiting Execution EW o Channel Continuous Run CO lo Error ER lo Target Device Message done DN lo Message Timeout Message Transmitting ST 0 Data Table Address N 7 0 Message Enabled EN 0 Local Node Addr dec octal Waiting for Queue Space 0 Local Remote Error Error Code Hex 0 No errors Error Description Note The Communication Command is 500CPU Read The Data Table Address N7 0 can be any inter file address The 50 elements read from the M4500 are a set of 50 consecutive words This value can be anything from 1 to 120 The M4500 PLC code can be written to interpret the data table address 1 e N7 0 W4300 The Local Station Address is only necessary to define if communications with the S4516 df1 is executed over the Data Highway network via a DataLink module 4516 DF I Program Development Manual SYSTEMS Electronics Group SECTION 5 PLC5 TO S4516 DF1 COMMUNICATION GUIDE 5 5 THE Write INSTRUCTION The Write message MSG instruction for a SLC is setup as follows MSG N12 20 14 Elements General This Controller Control Bits Communication Command lanore if timed out T0 o Data Table Address To be retried NA 0 Size in Elements Awaiting Execution E W 0 Channe
47. opment Manual PLC5 Command Set Yes DST SRC CMD STS TNS Packet Offse Packet Offse Lo Byte Hi Byte Total TNS fElements Lo Byte Total TNS fElements Hi Byte ADD 4 Levels of Encoded W102 ADD Level 1 Default 0 ADD Level 2 File Number ADD Level 3 2 Bytes Encoded ADD Level 3 Low Byte ADD Level 3 High Byte ADD Level 4 PLC5 Word Range Read Yes Set Number of APP DATA Packet Bytes FNC Word Range Read Num of Elements 2 Bytes 1 Element Size Bytes PLC5 Word Range Write Yes Calculate Number of APP DATA Bytes Set Number of APP DATA Packet Bytes FNC Word Range Write Point to Data Send Buffer Point to Stored Data Register B3004 Load Send Buffer SYSTEMS Electronics Group B 18 APPENDIX B SAMPLE SYSdev PROGRAM CODE B3002 Temp C Temp calc B3004 Temp i Temp i B3010 NumElem Num of Elemnts B3011 FileNum A B Target FileNum B3012 StrtElm Startng Element B3013 StrtElm Startng Element B3014 MsgPkt Message Packet Number B3015 sfllSen sfuncll tsent B3050 App DST AppData Send DST B3051 App SRC AppData Send SRC B3052 App CMD AppData Send CMD B3053 App STS AppData Send STS B3056 App FCN AppData Send FCN B3057 AppDATA AppData Send DATA B3058 AppDATA AppData Send DATA
48. ored by the sfunc10 call and should be set to 250 which is the maximum number of bytes that can be returned dest This is the address of the first byte of the sfunc10 receive buffer The receive buffer is where the message packet will be copied to from the S4516 DF1 Variable types B or indirect B Return Value The return value is the total number of bytes contained within the message packet Therefore whenever a message packet is received the format will always be the same These bytes are as follows DST SRC CMD STS TNS 2 bytes DATA Type Simultaneous Valid Files Initialization Main Program and User Functions S4516 DF1 Program Development Manual SYSTEMS Electronics Group 14 SECTION 3 USING THE SYSTEM FUNCTIONS 3 3 TRANSMITTING THROUGH THE USER PORT sfunc11 The sfunc11 will perform the following functions e Assemble the message packet by attaching the starting and ending control symbols and inserting additional DLE characters as needed e Transmit the message packet e Wait for an acknowledge of receipt of transmission e Retry the message if the transmission is unsuccessful e Return with a response indicating the success of the transmission General Form sfuncl 1 sent srce Parameters sent The number of bytes to transmit out the User Port Variable Types Constant 1 250 B or indirect B scre The address where the first byte transmitted is store
49. processors S4516 DF1 Program Development Manual SYSTEMS Electronics Group 8 SECTION 2 DEVELOPING THE MESSAGE PACKET 2 6 1 PLC5 WORD RANGE READ WRITE The Word Range Read Read Block or Word Range Write Write Block are good message packet formats for reading or writing data to a PLCS processor The starting address is either a logical binary address or a logical ASCII address and must point to a word or a file Message Packet Format Word Range Read Command Format CMD OfH T T T T FNC PACKET TOTAL STS TNS 01H OFFSET TNS REN SYSTEM ADDRESS SIZE Reply Format CMD 4fH An EXT STS extended status byte will replace the data field if there is an error STS status byte will not be zero STS TNS DATA up to 244 Bytes y Message Packet Format Word Range Write Command Format T y 1 CMD FNC PACKET TOTAL Db srs TNS Ej OFFSET TNS PLC SYSTEM ADDRESS para Reply Format T CMD EXT 4fH ben ING STS An EXT STS extended status byte will be attached only if there is an error STS status byte will not be zero PACKET OFFSET and TOTAL TNS are in number of Elements DATA is in an even number of Bytes 2 bytes 1 element SIZE is number of DATA Bytes 4516 DF I Program Development Manual SYSTEMS Electronics Group 9 SECTION 2 DEVELOPING THE MESSAGE PACKET The PLC5 System Address use
50. s four levels of encoded addressing The first byte is the Mask Byte This byte is required Setting the bits within this byte sets the number of levels and which levels will be encoded In the sample code that accompanies this manual this byte is set to OfH This sets 4 levels of encoded addressing as follows Address Format LEVEL 2 File Num Elmt Num Defalut 0 999 Output Input Status Binary Timer Counter Control Integer Float O 0 NI O07 4 CIN O 999 User Config ADD Mask Encoded Addressing Byte ADD Level 1 Data Table Default 0 ADD Level 2 File Number 0 8 are Default File Types 9 999 are User Defined File Types If this number is greater than 255 set this byte to FFH which will allow the file number to be encoded into the next two bytes Floating point are two words long 4 bytes ADD Level 3 Element Number 0 through 999 If this number is greater than 255 set this byte to FFH which will allow the element number to be encoded into the next two bytes Address Format LEVEL 2 LEVEL 5 LEVEL 4 FFH 00H ADD Level 4 Sub Element Number Default 0 S4516 DF1 Program Development Manual SYSTEMS Electronics Group 10 SECTION 2 DEVELOPING THE MESSAGE PACKET 2 6 2 SLC500 PROTECTED TYPED LOGICAL READ WRITE The Protected Typed Logical Read or Protected Typed Logical Write are good message packet formats for reading or writing
51. s to Protected Timer or Counter Processor Not in Program Mode Address to Program Area Address Past End of Used Memory Program Valid Bit Not Set in PLC4 Program ID Byte Invalid PLC4 Select Value Not Used PLC4 Ring Disconnected No PLC4 Response Invalid PLC4 Selected Byte Not Used SYSTEMS Electronics Group A 3 APPENDIX A ASYNCHRONOUS LINK STATUS CODES EXT STS Codes for Command Code OF HEX Code HEX 1 ODIA AR gt O Qu D E F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C to FF S4516 DF1 Program Development Manual Definition Not Used A Field Has an Illegal Value Less Levels Specified in Address than Minimum for an Address More Levels Specified in Address than System Supports Symbol Not Found Symbol is of Improper Format Address Doesn t Point to Something Usable File is Wrong Size Cannot Complete Request Situation has Changed Since the Start of the Command Data or File is Too Large Transaction Size Plus Word Address is too Large Access Denied Improper Privilege Condition Cannot be Generated Resource is Not Available Condition Already Exists Resource is Already Available Command Cannot be Executed Histogram Overflow No Access Illegal Data Type Invalid Parameter or Invalid Data Address Reference Exists to Deleted Area Command Execution Failure for Unknown Reason Possible PLC3 Histogram Overflow Data Conversion Error Scanner Not Abl
52. th a DONE Under normal operation a two byte data string acknowledging the receipt of the message will be returned indicating the success of the delivery The S4516 DF1 will automatically retry the message up to 3 times if the communication interface is not responding and up to 10 times if a request for retransmission DLE ENQ is returned If the transmission was not successful the S4516 DF1 will return with DONE indicating a problem with the transmission System function sfunc11 will be used to transmit the users message packet to another node on the Allen Bradley Data Highway The format and function of the sfunc11 has not changed however the Source data will now contain the message packet to be delivered The message packet is developed within the users main program code See section 2 6 Message Packet Formats for additional information on developing an Application Data message packet 4516 DF I Program Development Manual SYSTEMS Electronics Group E SECTION 2 DEVELOPING THE MESSAGE PACKET 2 5 HOW THE RECEIVER OPERATES The receiver continually scans for incoming data Once the start of transmission DLE STX control symbol is received a message packet is assembled and the receiver looks for instances of DLE Doubling and removes any additional DLE characters Once the end of transmission DLE ETX BCC control symbol has been received the Block Check Character BCC is verified If the BCC recei
53. than a 2 is returned the message packet is sent again Additional code could be inserted to keep track of the number of times an error code is returned and then take appropriate action B3000 1 if set allows user function ufunc02 DF1 AppData to be called which will assemble a Command Message Packet B3000 2 if set flags the system to expect a response from a Command Message Packet This enables the No Response Timeout timer to resend the message packet if a reply is not received W1500 through W1748 250 bytes are used as a Read Data buffer This should be modified to suit the users needs W1750 through W1998 250 bytes are used as a Write Data buffer This should be modified to suit the users needs Receiving Data System function sfunc10 is used to retrieve data sent from the Datalink Th ntire message packet is returned with all the necessary transmission symbols removed Bit 6 of the Command byte B3302 is the command reply indicator B3302 6 is set to a 0 in a command message packet and set to a 1 in a reply message packet 4516 DF I Program Development Manual SYSTEMS Electronics Group B 5 APPENDIX B SAMPLE SYSdev PROGRAM CODE 0 Transmit APP DATA to Data Link 1 if B3000 0 1 JE 2 f8 38 if B3000 1 1 JE 4 ufunc02 Jer Bit B3021 sfunc11 B3015 B3050 6 if B3021 1 7 f8 8s B169 1 0 Ar 9 B3000 0 0 JR
54. ved is valid a two byte data string acknowledging the message is transmitted back and the message packet is copied into the sfunc100 receive buffer However if the BCC is not valid a data string not acknowledging the message is transmitted back and the message packet is not returned to the user System function sfunc10 should be continually called from the users program As with system function sfunc11 the format and function have not been changed However when a valid message is received the entire packet along with the size in bytes is returned with all the unnecessary formatting and framing control symbols removed See section 2 6 Message Packet Formats for additional information 2 6 MESSAGE PACKET FORMATS This section provides two examples for developing message packet formats for the PLC5 and SLC500 family processor commands Please refer to the Allen Bradley Data Highway Data Highway PlusTM DH 485 Communication Protocol and Command Set Reference Manual Unit III Application Layer Message Packet Fields for more information on formatting the message packet The S4516 DF1 embedded DF1 driver offers a large flexibility when developing message packets to communicate with other Allen Bradley PLC processors The sample code that accompanies this manual demonstrates only a few ways to develop message packet formats The following sections provide the most common message formats for reading and writing data to PLC5 and SLC500
Download Pdf Manuals
Related Search