Home

b5-s3,user manual

1. E71 Port No Communication format TCP IP Unpassive Transmission Reception ready ready Ready Open method Unpassive Fixed buffer exchange Random access buffer exchange Read write data in the PLC CPU Exchange is possible at either the connection 1 or connection 2 APPENDICES MELSEC A initial instruction DO Local station IP address DO K1 Local station IP address SET Y19 Initial request 8000 Ky Transmission Open Open Close error end request request impossible instruction detection CON 1 t 1 1 permit 1 WOVP H2000 D10 Local station port No 1 TOP HO K24 D10 Kt Local station port No 1 SET Y8 Open request 1 YB XIF _ r a a Open WDT Exchange request error possible 1 detection 1 18 HO 93 018 K1 Open Open request error 4 code 1 lt gt KO D48 Kt Open error code 1 D100 Open error code 1 731 Close instruction permit 1 FROMIP HO K496 0102 K Exchange instruction for current stop state 1 WORP D102 H8001 D103 Exchange Exchange instruction for instruction for current stop new stop state 1 state 1 TOP HO K496 D103 K1 Exchange instruction tor new stop state 1 initial processing Open processing Connection 1 TCP IP Unpassive open Transmission using fixed buffer ready Exchange using random access buffer ready Read write data in the PLC CPU ready Open e
2. 120 0078 Write data to step 121 40FAx Write data to step 120 1055 Response E71 remote node 10 87 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 2 When changing the set value of the timer T15 to T18 used by the main sequence program of the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node LRA aans apon 2500ms 4 points f cal 04 _ value D5 880A he 717 set value 200 00C 84 T15 FEGFH 716 set value 50 0032 715 set value 100 0064r 10 88 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU b When exchanging using ASCII code Command format Specified number of points x 2 8 words esr tps poe e efe e oaea e oe e efe e ol For sequence program sequence For sequence program Final step No data for the specified step No i For T C set et vaiue Final device No set value for the specified device No For sequence program Data to the specified head step No 1 For T C set value value ae head device No 1 setting value For sequence For sequence e program Data to the Data to the specified he head step No For T C set value Specified head device No set value Number of steps 1 to 256 steps For T C set value ee of device points 1 to 256 points Head step No For T C set value at e k Head device No fo
3. 12 3 Router IP AUOGIeSsS ninen 12 4 S UDNEtTAdArOSS nonias 12 4 SUDE MASK iare A 11 3 Subnet Mask Fjeld csser 11 3 Simultaneous Broadcast Communication UDP IP 1 7 SOS CHICAU ONS eaae eA TEAN 3 1 APPENDICES Subnet AddresSS sesssisrsereresresserssssrsrsress 12 4 Subnet ID aaisa e aa A 11 1 Subnet MaSK oradi aaO TA qizi Subnet Mask SCUING erreari e TAE 11 3 Subnet Mask Fiel auina 11 3 SYDPOMEG SYSTEMS sorire irai na 2 2 SW1 through SW8 DIP Switches 4 4 System Configuration esseere Chapter 2 T E eed pA EAN E A T AE E NE 1 3 Terms and Abbreviations TATEN T 1 12 Transceiver Cable AUI Cable 0 2 4 U GOR teste vente daca ee ease aknaeanes eevee gene 1 3 Unpas ve ODEN enrm oti eienteteananncnpeees 5 16 Usage available Setting ecr 5 15 Exam lE nasa a 5 17 1 10BASE2 Cheapernet Connection aes 4 13 1OBASE5 Ethernet Connection naese 4 12 MELSEC A WARRANTY Please confirm the following product warranty details before starting use 1 Gratis Warranty Term and Gratis Warranty Range lf any faults or defects hereinafter Failure found to be the responsibility of Mitsubishi occurs during use of the product within the gratis warranty term the product shall be repaired at no cost via the dealer or Mitsubishi Service Company Note that if repairs are required at a site overseas on a detached island or remote place expenses to dispatch an engineer shail be charged for Gratis Warran
4. 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 6 2 Functions for Which Continuing Data Exchange is Possible When conducting the setting to exchange data while the PLC CPU is stopped the following shows the functions that make it possible to continue data exchange between a remote node and the E71 even after the PLC CPU of the station installed in the E71 enters the STOP status and the E71 open request Y8 to YF and initial request signal Y19 have turned off Data exchange function Data exchange while the PLC CPU is stopped Fixed buffer exchange with procedure without Pro possible cedure Random access buffer exchange 5 6 3 Relationship between the Setting and Data Exchange during the PLC CPU is Stopped The setting that performs the data exchange while the PLC CPU is stopped after the initial processing and open processing from the PLC CPU is completed is valid After the setting for data exchange while the PLC CPU is stopped is valid the PLC CPU enters the stop status and the E71 initial request signal Y19 and open request signals Y8 to YF are turned off it is possible to continue data exchange from the remote node to the E71 while the PLC CPU is stopped The setting used for the data exchange function while the PLC CPU is stopped the I O signal initial request signal and open request signal with the PLC CPU and the relationship for data exchange while the PLC CPU is stopped are shown below
5. Command remote node gt E71 7 000 Ai0 09 5 2 2 tO OP Oe Ge Oe Oe 2 ak OOS 20 mo se so 30h 30h 30h 44H 304 30H 30x A 35h 32H 324 30H 30 39 304 30H 30H 30 344 36H11 30H 33H 30H 30H Local station ee Block No 2 R70 3 points Response E71 remote node OF Olt 2 3 4 8 7 amp 6 Bes 1 3 F Q4 374130 30K1314 32H 33 34 38 37H 36H 35H 30H 31H 33 46x Block No 2 s Biock No 2 s Block No 2 s R70 contents R71 contents R72 contents 1234H 8765H O13FR 10 43 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 4 Extension File Register Batch Write This section explains the command response format when executing an extension file register batch write af When exchanging using binary code Command format Specified ny number of devices x 2 14 bytes T Final device No data for the specified block No s specified device No Specified device No 1 data for the specifiec block No Specified device No data for the specified block No Number of devices 1 to 256 Block No specification for detans reter to item 10 3 1 Device No for details regarding the specification method refer to Item 10 2 1 or AOP monitor timer unit 250 ms PLZ No e Subheader Set to 00n when specifying the number of devices as 256 Response format i IAZ P EnG code L Subheader Example When the contents of extensio
6. KO D18 Open error code X19 XIF X10 YO Y1 Y8 N21 M31 OVP Initial WDT Open Transmission Reception Open Open Close 7 normal error end request end request impossible instruction end detection CON 1 1 check 4 f siii 2 BOVP MOVP vw e ri e e m H8083 D5 Usable availability setting 1 HeO00 DS Usable availabilty setting 2 0 gt H500 D7 Local station port No 1 1 gt SET Y8 Open request 1 D5 K2 Usable availability setting 1 07 Kt Local station port No 1 Y8 X1 S j S y S Cl Exchange possible 1 018 Ki Open error code 1 K1 Refer to Items 5 3 The reception TCP and Unpassive setting data is written in the connection No 1 usage availability area 2 The transmission TCP and Unpassive setting data is written in the connection No 2 usage availability area 2 The E71 port No is set to 500H Written in the connection No 1 and No 2 exchange address setting area The connection No 1 open error processing 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A mee eee eee eee ES se eS ee es ee eel f napt to 8 Data exchange program i Refer to Chapters 6 i X45 Close Close occurred instruction instruciton 1 petmit 1 Mi a Ka Sa 11 Close request from other node Exchange Close occurred 1 Occurred possible 1 Mi Close occurred 1 Close instruciton petmit 1 431 XO X1 X2 x3
7. 10 30 MELSEC A 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example When X80 to 8F is turned on off and W26 is overwritten to 1234 and C18 s current value is overwrit ten to 50 for the PLC CPU installed in E71 Command remote node gt E71 Response E71 remote node 0 POE 0 078 Alo Spor o 8 6 0 0 30 7 n A 46rd 30H 20H 30 41H1304 33h 30r 304 384 354 30 3CH Local station 2500ms in en ae points Be gy 2 Or a Or Oe 08 0 Bo Z Oe A ON Oe OAs OF 35H 38 324 30H 30H 30H 30H 304 304 304 38h 30H 3 42H 32H 3935H 37H 32H 304 30K 30m 3J 30H 30 30H a X8F 10 X88 x87 tc X80 3 444 34E6E000000 210 0 5 0 9 Sh fh 33H 34H 34H 33H 344 455 Stal 0 90 90 Ok Pon dares ane 30 304 30H 30H N 30H 30H 35H 30K E COC cae CO current value 10 31 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 8 Device Memory Monitor The device No device No registered in the E71 on off status and the contents can be monitored by a remote node by registering beforehand the device and device No that you want to monitor with a remote node in the E71 and then executing a monitor instruction from the remote node Reading using device memory batch read can be processed in continuous device No but by reading using the monitor it is possible to randomly specify a free device and No and conduct the reading 1 Monitor operation procedure The operation procedure when co
8. 4 4 Operation Mode Settings eccerre 4 3 Settings Software Exchange Address Setting crees 5 18 E 1 Or NO pe SSN iesi 5 18 Remote Node Ethernet Address Setting 5 19 Remote Node iP Address Setting 5 19 Remote Node Port No Setting 5 19 Exchange Parameters For Open Processing 5 13 Usage Available Settings ooccccccccos 5 14 Communication Format Protocol Settings 5 16 Destination Existence Check Setting 5 14 Fixed Buffer Exchange Procedure Existence Setting 5 16 Fixed Buffer Usage Availability Setting 5 14 Open Method Setting eee 5 16 Pairing Open Setting cccceesccereens 5 15 Initial Processing Parameters oo 5 5 Destination Existence Check Begin Interval Timer Value 5 6 Destination Existence Check Interval Timer Value 5 7 IP Set Up Timer Value accrescens 5 9 Local Station E71 IP Address 1 a 5 5 Number Retries for Destination Existence Check 5 7 Response Monitor Timer Value 5 7 Special Function Setting Router Relay Function Settings 5 6 TOP Ena Timer Valle wiisscentonawetuns neers 5 7 TOP Retransmit Timer Value 5 7 TCP Zero Window Timer Value 5 7 TOP ULP Time Out Value aare 5 Timer Setting Time UNnitS vc eee 5 6 Instruction Exchange Instruction Area during STOP 5 20 Routing Information For Router Relay FUNCTION oo cee 12 3 Default Router IP Address 000 12 3 Number of Registration Routers
9. Exchange enable Enable i Prohibited prohibit during STOP O A uaeen ay hit TI eran MII a i i l initial end signal X19 O Open request signal Y8 ag 3 i T Open end signa X10 l e a lo t Data Data vata exchange exchange exchange oossible canbe possible continued f Setting when E71 is started up set the buffer memory address 1FOH to 8001H Enable FIN ACK FIN ACK SYN SYNACK ACK Remote node A close request is received from the partner remote node when data is exchanged with the remote node using the data exchange function when the PLC CPU is stopped Close processing is conducted in the open end signal X10 is turned off Data exchange cannot be conducted FIN is transmitted even if the open request signal Y8 is turned off 3 The PLC CPU of the station installed in E71 enters the RUN status and the initial request signal Y19 is turned on Initial processing is not conducted because the exchange enable during STOP is set 4 Open request signal Y8 turns on and open processing is conducted and then the open end signal X10 is turned on Data exchange with the remote node becomes possible Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible Change the setting to exchange prohibited during STOP Set the buffer memory 1FOH to OOOOH Close processing and end processing are
10. ae BSEC Mitsubishi Programmable Logic Controller MITSUBISHI SAFETY PRECAUTIONS Read these precautions before using When using Mitsubishi equipment thoroughly read this manual and the associated manuals introduced in this manuali Also pay careful attention to safety and handle the module properly These precautions apply only to Mitsubishi equipment Refer to the user s manual of the CPU module to use for a description of the PLC system safety precautions These SAFETY PRECAUTIONS classify the safety precautions into two categories DANGER and CAUTION gt DANGER Procedures which may lead to a dangerous condition and cause death or serious injury if not carried out properly Nc AUTION Procedures which may lead to a dangerous condition and cause superfi cial to medium injury or physical damage only if not carried out properly Depending on circumstances procedures indicated by A CAUTION may also be linked to serious results g In any case it is important to follow the directions for usage Store this manual in a safe place so that you can take it out and read it whenever necessary Always forward it to the end user DESIGN PRECAUTIONS When controlling changing data program or operation status remote RUN STOP in particular a PLC while it is running via a device such as a personal computer connected to the special function module configure an interlock circuit in the se
11. Check the on line state of the connection with the exchange remote node Conduct open processing for the subject connection For details refer to item 5 4 is the subject connection open end X10 to X17 is on Read the open error code Buffer memory address 93 103 in the exchange stat storage area and check if an error has occurred NO Repair the error contents based on the q ee S parameter GEFUR parameter error code Refer to item 13 1 YES Read the exchanged error code storage area Buffer memory address 95 105 for th buffer memory of the specified fixed butfe and check if exchange errors have occurred Are there any exchange errors in NO Repair the error contents based on the error log the error log area area exchange error code Refer to Item 13 1 YES Is the parameter s remote node s IP address setting correct _ NO Correct the remote node IP address Make the communication protocol TCP UDP communication protocol TCP UDP with the exchange remote NO with theexchange remote node match for details refer to Item 5 4 13 14 13 TROUBLESHOOTING MELSEC A It is suspected that the data has not been NO sent by the remote node Check the transmission end lf the transmissionend node is also the E71 refer to Item 13 1 s the subject fixed buffer s reception request signal on YES erg sr ates od transmitting end remote node Repair
12. a Set the fixed buffer usage availability for open processing to whether or not to perform destination existence check b Conduct this setting before open processing for each connection Bit position b15 b14 bi b12 bii biIO b9 b8 b7 bE b5 b4 b3 b2 bi bO n eeo epe oo ammo _bololefe orejo Open method Fixed buffer exchange Communication Pairing open Existence check D Fixed buffer usage 00 Active UDPAP 0 With procedure tonne 0 No pairs 0 No check Q For transmission does 10 Unpassive 1 Without procedure Serer 1 Pairs 1 Check RONG Neaie 11 Fullpassive 1 UDP IP 1 For reception Fixed buffer usage availability setting b0 e When conducting exchange using a fixed buffer set whether the fixed buffer will be used for transmission or reception for the particular connection e When conducting transmission and reception using one specific node and fixed buffer two fixed buffers are required for transmission and reception so please set two connections e Specify one of the following setting values O For transmission or not to perform fixed buffer exchange default value 1 For reception e From remote node random access buffer exchange and reading and writing data to the PLC CPU exchange can be conducted by either reception setting or trans mission setting for usage of fixed buffer Destination existence check setting b1 e Set the E71 to check whether the partner remote node
13. A concrete example is shown on the next page 1 Data exchange is possible while the PLC CPU is stopped when exchange enable during STOP is set using the buffer memory s exchange specification during STOP area address 1FOH 2 When exchange enable during STOP is set the change from on to off of the initial request signal Y19 and the open request signals Y8 to YF are ignored ig Af QE71 processing OFF ON ON OFF PE e ae request Signal initia processing is conducted 1 End processing is not conducted Open ignal i ae Aaa cae Open processing is conducted 1 Close processing is not conducted 1 Only when the signal is turned on first Point When the buffer memory s exchange specification during STOP area setting is the default value then data exchange cannot be conducted when the PLC CPU is stopped Conduct data ex change by conducting initial processing open processing close processing and end processing in accordance with the procedure shown in Items 5 1 to 5 4 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A EA When the communication circuit is opened by a setting to allow data exchange through connection No 1 while the PLC CPU is stopped Station installed in E71 PLC CPU status RUN STOP RUN i Enable i i Exchange enable i i Prohibited prohibit during STOP Oi E an A ssassn N aae g initial end signal X19 o D l i l i i Open request sign
14. Initial processing Boots up the E71 installation station turns the power on tc and puts the PLC CPU in the RUN State 2 The initial processing parameters are written in the buffer memory When the initial processing parameters are written it is also all right to write the various setting values Such as exchange parameters and routing information area etc G The PLC program turns the initial request signal Y19 on 4 The E71 executes initial processing The initial processing results are stored in the initial processing status storage area Refer to Item 5 5 1 5 The initial normal end signal X19 turns on when the initial processing is normal end When it is error end the initial error detection signal X1A is turned on End processing 1 The sequence programmer turns the initial request signal Y19 off after the next signal off is checked v2 Transmission request signal reception end check signal YO to Y7 Transmission normal end signal reception end signal XO X2 Transmission error detection signal X1 X3 e Open request signal Y8 to YF open end signal X10 to X17 Open error detection signal X18 Q The E71 executes the end processing The initial normal end signal X19 turns off when the end processing is normal end When it is error end the initial error detection signal X1A turns on 1 This is the end processing when exchange prohibited is set by the Exchange Instru
15. Point 1 Number of nodes that can be exchanged M When using E71 of which software version is K or before The maximum number of remote nodes for which exchange is possible during one initial processig for the E71 is 20 stations The original station is included when a message is sent to several stations at once by UDP IP f this is exceeded an error error code AOOEH AOOFH will occur during open pro cessing When this error occurs initial processing will be reconducted after end processing and close processing of the data exchange for all connection currently opened are con ducted and the initial request signal Y19 turns off 2 When using E71 of which software version is L or later There are no restrictions in number of remote nodes for which exchange is possible during one initial processing for the E71 2 Data exchange during the PLC CPU is in the STOP status D The following data exchange can be continued even when the PLC CPU of the station installed in the E71 is in the STOP status by setting exchange enable at the Exchange Specification During STOP using the E71 buffer memory address 496 Exchange using random access buffer e Read write exchange of the data in the PLC CPU 2 Continue data exchange or conduct reopening in accordance with Item 5 6 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 3 Initial Processing and End Processing This section explains about the E71 ini
16. RAM test method Set the operation mode setting switch on the front of the E71 to the 3 position 2 Set the PLC CPU s RUN STOP key switch to the STOP position When the PLC CPU is reset the RAM test will begin RAM CHK LED is lit Test results The test results can be determined from the LEDs on the front of the E71 If the RAM CHkK s LED is not lit the RAM test is completed The test results can be checked using the RAM ERR s LED When normal rossis The LED is not lit When Error chute colon The LED is lit 3 The following can be suspected as causes of an error E71 hardware error RAM error Operation after the test is completed Reset the PLC CPU after changing the operation mode setting switch on the front of the E71 to either the on line mode or the other test mode Point When there is an error for the test results of the RAM test shown in this item reconduct the same test lf an error occurs a second time then a E71 hardware error can be suspected For details regard ing troubles please consult with you nearest branch or agent 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 6 3 ROM Test This section explains the ROM test that is used to check the E71 s ROM ROM test method Set the operation mode setting switch on the front of the E71 to the 4 position D Set the PLC CPU s RUN STOP key switch to the STOP position 3 The ROM test will begin after the P
17. The end code is stored in the buffer memory exchange state storage area When Binary Code is Specified When ASCII Code is Specified Command Response type undefined error 354304 Command Response type undefined error Head address defective 35H31H Head address defective Number of data words defective 35H32H Number of data words defective For details regarding error codes refer to Chapter 13 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 2 4 Example Command and Response Format Following is an example of the command and response format during random access buffer exchange EN Write to buffer by write request from remote node When binary code specified a Command format Remote node gt E71 Subheader Head address Data length Text 10 words TO _ A A O H L ee oo oo oo oom seen ror sos B00 om Teor oe Uaa a A t E71 random access buffer Ho Logical address oa Physical address 1200H 4608 1201H 4600 664 784 TH 1 12024 4610 SAH BCH 2H 2 to to to 12091 4617 QAH BCH EI G ag a 10 words to to to 1DFFH 7679 17FFH 6143 b Response format Remote node e E71 Subheader End code a om 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA a Command format Remote node E71 Subheader Head address Data length 364 32u 304 30m 30H 30H 30H 30H 30H 30H 30H 41H K Text 20 words 7 Sar A Nee ee ee AD oe 2 ee ee st 32H 33H 34H 35H
18. When the initial request signal Y19 is off or the open request signal Y8 is turned off during open processing closed processing and end processing are performed after the open processing end The open state and error codes during error end are checked by the next buffer memory e The exchange state storage areas information storage area by connection address 89 to 168 open error code area e Error log area address 169 to 179 The error code stored in the open error code area will be cleared n 0 when the open request signal is turned ON again The following is the timing chart of the reopen processing when the open end signal is turned off due to an error in the TCP IP communication When connection No 1 Open request signal Open end signal Open error detection signal Error occurrence i i t i Communication TCP ULP Re open processing Communication _ time outtime a 7 t Y8 D l i X10 A e i t l Fa a X18 l l l Buffer memory l Open error code 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 4 3 Communication Line Close Processing Procedure This section explains the close processing for closing disconnecting the communication line that was connected between the E71 and the remote node by open processing using an example for connec tion No 1 The close processing timing must be conducted by making arrangements with the partner remo
19. eee possible Close occurred 2 occurred pn nm SET M32 Close occurred 2 Close instruction permit 2 u32 RST Y9 Connection No 2 close Open processing request Close Reception Reception Reception instruction end error end check permit 2 detection 2 2 2 SET M22 Open impossible 2 Close instruction permit 2 K5 T2 A time of 500ms is measured Open Open tor reopen after close from a waiting remote node aaa GT M22 Open waiting Open 2 impossible End processing program i Refer to Items 5 3 1 The data exchange shown below can be conducted after setting of usage availability with the value stored in DO and D10 Random Fixed buffer exchan ge acasa but r Read write data With procedure With procedure Without procedure Without procedure exchange in the PLC CPU a ah oan Exchange disabled Exchange enabled Exchange enabled oo oe Exchange disabled Exchange enabled Exchange enabled 5 33 1 Connection No 1 Connection No 2 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 2 When opening pairing meee ee i ee ew El Bw M M GU lc ell SP el Oe SE es eee es ES EB UMU UM SK Connection No 1 and No 2 open processing Unpassive gt _ flor K16 gt tor i K24 10 11 Open Open Open WDT end request error CON 1 CON 2 1 detection x18 Y8 X10 X1F FROMP HO K93 WOT error detection CON 1
20. 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A b Except when a router relay function Refer to Chapter 12 the IP addresses can be freely allocated as described in a above When the router relay function is used please use addresses that conform with the standard iP addresses used on the global scale Standard IP Address IP addresses are divided into classes to allow an address system that corresponds to the size of the network to be selected Refer to Item 11 3 2 Special function setting Default value 0 ssessssesessesssssesseosvresenresassas Address 2H 2 a Sets whether a router relay function is used Static router relay o Validates the buffer memory s subnet mask setting area and routing information area ad dress 448 to 472 setting value when set to use the router relay function Bit Position b15 b14 b13 bi2 bii b10 b9 b8 b7 b6 b5 bM b3 b2 bi bO C Router relay function setting b0 O Not used Default value 1 Used 3 Timer setting time units Default value 7DOH 2000 s cesssesceesseenees Address 3H 3 a The timer value units set to the buffer memory address 7 to 15 can be set to either 500ms unit or 2s unit Default value 7DOH 2000 is shown as the 2s unit b Specify the setting value as 1F4H 500 or other than 1F4H 1F4H 500 500 ms unit Other than 1F4H 2s 2000ms unit c The timer values set by the buffer memory addresses 7 to 15 using the timer set
21. ADH 173 AEH 174 Error log AFH 175 BOH 176 BiH 177 B2H 178 B3H 179 1 The following two areas are storage areas in which the codes that show the error contents are stored Refer to Chapter 13 C When the occurrence origin of the error that occurred cannot be checked IP level error reception data sum check error TCP UDP P check sum error An error that occurred during random access buffer exchange or read write of data in the PLC CPU The error that occurred during the fixed buffer transmission is stored in the fixed buffer transmission error code buffer memory addresses 94 104 114 164 area 2 This error area has an 11 word data area and is configured of ring buffers that can store up to 10 units of error information The next area to be set is normally set to OOOOH and this makes it possibile to determine what data is the newest 3 The value stored in this area is cleared when the power to the station installed in the E71 is turned on or when a reset operation is conducted In addition it can be cleared if the user writes a O It cannot be cleared using initial processing 4 It is not normally necessary to read this area so read it when necessary when conducting mainte nance 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 5 4 Protocol Status Storage Areas This is the area that is used to store the number of times of a protocol level that is used during ex change betwe
22. Application data Subheader TTT ETETLC TELL TOPTLTTLiTeTeeeeeeereeeereeeeeee e ee eee Terre ere errr rrr eerrerrr rere seri rey 2 Open processing can be conducted for a maximum of eight nodes However when translating and receiving with the same remote node using a fixed buffer two fixed buffers are required so the number of nodes to which exchange can be conducted is reduced 3 The following explains the initial processing and the open processing when exchange prohibited is set by the Exchange Specification During STOP using the E71 buffer memory address 496 When an E71 installation station s PLC CPU is in the STOP state the E71 s open request signal Y8 to YF and initial request signal Y19 are also turned off and the line to the remote node is closed When the E71 installed station s PLC CPU is changed from STOP to RUN reconduct initialization process ing and open processing 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A Exchange procedures Initial processing open processing and data exchange PLC programs for the exchange procedure after the E71 s installed station s PLC CPU write processing is completed Refer to tem 4 1 Boot up Refer to tem 5 3 1 Refer to ttem 5 3 3 Initial processing Refer to ttem 5 4 1 seei Refer to item 5 4 2 Open processing 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A Data exchange Refer to Chapter 6 processing
23. Meaning of station symbols shown in the diagram Network system MELSECNET 10 i aoi Station No The remote O network master station s 00 is abbreviated re Net between PLC Contro station Normal station MiP eee tae Control station Ns ee beees Normal station AnUCPU QnACPU i ec Normal station Other than ANUCPU QnACPL Remote O Net Master station Remote station Mik eos es Master station including multiplex master station paraliel master station Me Segaar Remote station Network No a When the E71 installed station is the net between PLC command station normal station and when the remote I O net master station 1N4 1Mp1 E71 Net between PLC Network No 1 INSS INs2 Eri b When the E71 installed station is the remote I O net s remote station 2R4 2Mr Er Remote I O Net Network No 2 2R3 2R2 E71 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A c PLC No when E71 commands are used PLC installed in Exchange possible PLC and PLC No item specification values the E71 Hexadecimal numbers Local Station 1Mp 1Ns2 1Ns3 1N4 2Mr 2R2 2R3 2R4 Access to all devices is possible by setting the subject s PLC No Access to the special function unit buffer memory is possible by set ting the subject PLC No The following devices can be accessed by setting the appropriate PLC No Access possible Output YO to Y7FF Link relay BO to BFFF Link register
24. No 2 Reception for remote node 1 No 3 Reception for remote node 8 to 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A Point 1 When with procedures is selected during opening random access buffer exchange and read ing and writing data to the PLC CPU exchange can be conducted at the same time as fixed buffer exchange transmission or reception with procedure for the subject connection Refer to Item 5 1 1 2 When changing the exchange partner do not conduct pairing setting Refer to Item 5 4 1 b and existence check setting Refer to Item 5 3 1 If these settings are made the E71 will not operate correctly 3 The transmission and reception processing during data transmission and reception is given below 1 During transmission When the transmission request signal YO to Y7 is ON the E71 transfers the subject fixed buffer data to the remote node set in the subject area with a buffer memory address of 18H to 4FH 24 to 79 1 2 During reception If there is reception from the remote node set in the subject area for the buffer memory addresses 18H to 4FH 24 to 79 the E71 will conduct reception processing 1 In addition when the reception data is stored in the subject fixed buffer during reception processing the E71 updates the subject connection s remote node IP address and re mote node port No for the buffer memory addresses 59H to A8H 89 to 168 if there is a reception from a remote node
25. Suoheader For bit unit 3036H 06 For word unit 3037k 07 H Device No For details regarding the specification metnod refer to Item 10 2 1 dead device No in ihe bit device during word unit registration Response format 2 words H L R L End code Subheader For bit unit 3806 86 For wore unit 3837 87 10 34 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 1 Bit unit monitor data registration When setting Y46 M12 and B2C in the PLC CPU installed in the E71 Command remote node E71 0 GAF FIO OO AO 8 0 OS Oe 2 Or 0 0 GO 0 0 ae 30k 36H 46H 46H 304 30m 304 414 30r 334 304 30H 35H 394 32 30H 00H OOH OOH O0R O04 00 344 36x eh te 46 Local station 2500ms 3 points 034 D 2 0 0 0 00 00 0 C4 22 OD OOO OD 0 20 34H 44H 32H 30 30H 304 30H 30H 30H 30H 30H 43H 34H 32H 32H SOK GOH 30H 30K 304 304 30 32H 43 Nn Sra ae ee M12 B2C Response E71 remote node Example 2 Word unit monitor data registration When setting Y50 to 5F D38 and W1E in the PLC CPU installed in the E71 Command remote node E71 6 Tif FLO 0 AIO GIO 0 5 3 2 0 GO 0 0 oO OS Oo 30h 37H mal 46 aS 304 30H 41H 30H 33 30H 30H 35H a S 32 30H 30 30H 30h GOH 30h 30 35H 30H EER 2500ms ie eee aa Be 2 00000 Os Oi 220 sR By FeO Oe Oe ON re Oe ae Ze 34H 34H 32H 30H 30H 30H 30H 30H 30K 30
26. gt Point 7 2 1 1 7 2 2 2 7 3 2 Item 8 2 1 1 8 2 2 1 item 10 1 1 4 10 1 2 1 10 1 3 4 10 6 3 2 Item 11 1 Point 11 2 1 Item 13 1 1 7004H AOOEH 13 2 Appendix 7 2 Program Appendix 7 3 Program Appendix 8 Dec 1998 SH NA 3598 D Contents Appendix pages Item 1 2 6 9 Item 4 5 1 2 Item 5 3 1 page 5 10 2 and 3 5 4 5 Program Appendix 7 2 Program 10 3 Contents Appendix 11 Item 13 2 Point Appendix 11 Pani Dane emanar Number Ron June 2000 SH NA 3598 E Over all program examples SAFETY PRECAUTIONS Item 1 3 Item 2 3 1 Remark 2 Point Item 3 1 3 2 3 5 3 3 6 1 3 6 2 2 7 3 7 2 Item 4 4 4 5 1 Item 5 2 Point 5 3 1 1 for 7 5 4 1 1 2 5 4 2 5 4 3 5 4 4 5 5 2 5 5 5 4 Item 6 2 3 8 Item 8 2 2 8 2 4 Item 9 1 2 4 9 1 38 4 9 2 4 to 7 9 4 7 Item 10 2 1 2 1 10 4 1 2 10 6 7 Item 13 1 1 13 2 Point Addition Item 1 2 10 Item 3 2 Item 5 4 3 2 Remark 5 4 4 Remark 3 Item 6 1 4 Remark 6 1 2 Remark 6 3 1 7 Item 7 1 1 Remark 7 1 2 Remark Item 8 3 1 3 Item 9 4 6 Item 13 271 This manual does not imply guarantee or implementation right for industrial ownership or implementation of other rights Mitsubishi Electric Corporation is not responsible for industrial ownership problems caused by use of the contents of this manual 1998 MITSUBISHI ELECTRIC CORPORATION INTRODUCTION Thank
27. ing end At this time the receiving end follows the TCP zero window timer value to transmission window check packet to the reception end to check the receiving possibility condition c The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 3 of TCP retransmit timer value Default value 5H 5 setting time setting value x Unit essssessossensennnerssnsnasanousnoressevaeosnasse Address DH 13 a if ACK is not retumed during TCP open and data transmission the retransmission time will be set This timer sets retransmission time for ARP request if response to transmitted ARP request is not retumed ARP s retransmission is conducted with TCP retransmission timer value 2 b The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 1 3 10 J TCP end timer value Default value 3H 3 setting time setting value x Unit Address DH 13 a Sets the monitoring time when waiting for FIN to be received from the partner node after the local station has transmitted FIN and ACK has been received from the partner node when the local station closes the TCP connection bo When FIN is not received from the partner node after the TCP end timer time RST is transmitted to the partner node to forcefully close the line c The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 3 E IP set up timer
28. vt Timer TCO to TC2047 ecim Int MO to M8191 Current Smee ae expression i TNO to TN2047 internal value Hexadecimal ser devi Contact Link relay BO to BFFF REET CS0 to CS1023 expression point FO to F2047 Decimal Counter CCO to CC 1023 DO to D6143 expression Internal user device Decimal expression Current ONO to CN1023 value l Hexadecimal Link register WO to WFFF PERRE Special relay 1 M9000 to M9255 device Special register 2 D9000 to 09255 1 Access for SM1000 to SM1255 is set at M9000 to M9255 2 Access for SD1000 to SD1255 is set at D9000 to D9255 5 Conduct program write during RUN when all of the following conditions are met The PLC CPU is A3 ASN ASA A3U or A4U The program is not a program that is running Shows a subprogram when the main program is running The PLC CPU special relay is in the following states a M9050 signal flow exchange point ee eeee ees OFF A3CPU only b M9051 CHG instruction execution prohibited ON 6 Read write cannot be conducted for the A4UCPU subprogram s sub 2 to sub 4 7 The parameter capacity for ANUCPU is 3k byte MELSECNET 10 parameter max 24k byte 9 16 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 3 PLC CPU Operation during Data Exchange This section explains the PLC CPU operation when reading and writing data to the PLC CPU is con ducted PLC CPU
29. 1 Appendix 1 2 2 Sequence Program Utilization sessesssessersserrenerernsenrorrrrinereererrnerseerirerserrs A 2 Appendix 2 Adding the Ethernet Interface Module to the Existing System serseri A 2 Appendix 3 Fe FOCOSSING TINO at cvs inatacv taenhion aes T setae aasienaiusietee aa beaadnd A 3 Appendix 4 POW COGS A E csctses Gat canis atacnsuaid preameaancnce yceuctetie iveete dice eae ease ennsaea aac A 10 Appendix 5 FABIELENICS Documents sacciuiiccnenchows saad aE eNA E E Oa A 10 Appendix 6 Diagram of External DIMENSIONS cccccccscccsseecesceusececuusesseuevsecceessteuenvesavensensesaees A 11 Appendix 7 Dalle Fron aN ii arasia EN S AE R A REAC A 13 Appendix 7 1 Program for Reading Writing Data in the PLO CPU eccccseccsesesensseeeeeneserees A 13 Appendix 7 2 Sequence Programs for All Functions Shared Sequence Program secceee A 21 Appendix 7 3 Program for Reading Writing Data in the PLC CPU Remote Node Side Program A 26 Appendix 8 Difference between Ethernet and IEEE802 3 cc cicceccccssecseeeessesessveseceeesenanrenseuseuees A 31 Appendix 9 EFT SUPON SIM Pi OLOC OM Aries weiss osicavehs a a eceteaan a anenet ean A 31 Appendix 10 When Using the Ethernet Interface Module with a QnA Type PLC ccccccsseesesne ees A 32 Appendix 11 MELSEC Communication Support Software Tool seessssssssssseriseressssssrrsresrrernsrsreres A 33 Appendix 11 1 Outline of basic communication support TOO vo cccccssees
30. 10 8 Table 10 8 Step Nos CStepNow CT Stale S SSS 10 83 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A c Device No specification when reading writing T C set values The device Nos used when reading wnriting T C set values are set using the codes shown in Table 10 9 Reading writing of T C set values is done in the range of TO to 255 and CO to 255 The T256 to 2047 and C256 to 1023 set values cannot be read written To read write setting values conduct a device memory read write Table 10 9 T C Set Value Specification TO s set value T1 s set value to 1255 s set value CO s set value C1 s set value to C255 s set value The relationship between the device No and the setting code is shown below Timer Tm FEQOOH n Counter Cm FFOOH n m Device No n The device No is converted into a hexadecimal value d T C set value contents The T C set value is exchanged in hexadecimal numbers as shown in Table 10 10 When writing over the T C set values from a remote node via a E71 specify the setting data shown in Table 10 10 Example Setting data when the T10 s set value K10 is changed to K20 0014H Setting data when the T11 s set value DSO is changed to D10 8014H Table 10 10 T C Set Value Data Specification KO K1 to K9 K10 to K32767 The relationship between the setting contents and setting data in the program is as fol lows Km 0000
31. 52H 82 A200H Local station E71 s Ethernet address Default value 0H EPET SA TEE BI E E ereindiveste tiie E A E Address 53H to 55H 83 to 85 a After initial processing the E71 s physical address is read from the ROM and stored The Ethernet s physical address cannot be changed o Tne E71 s Ethernet address is stored from the newest address in the L to H order 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 5 2 Excange State Storage Area Buffer memory Address Exchange State Storage Area 119 words Default Value 59H 89 Local station E71 s port No OH 0 SA to SBH 90 to 91 Remote node IP address OH 0 SCH 92 Remote node port No OH 0 SDH Open erore UO o Coa OHO SEH 94 Fixed buffer transmission reception error code Mormation by Connec ate OH 0 5FH 95 Fixed buffer exchange end code 10 words for connection No 1 GAT 0 60H 96 Fixed buffer exchange s ex OH __ 0 61H 97 change time OH 0 62H o8 Curentvaue HCO 63 to 6CH 99 to 108 i 3 Local station E71 s port No Information by connection Games abe For connection No 2 6D to 76H 108 to 118 Locali station E7 t s port No Information by connection Sais as cove For connection No 3 77 to 80H 119 to 128 i i Local station E71 s port No Information by connection Ganea Dve For connection No 4 81 to 8AH 129 to 138 Local station E71 s port No Informat
32. For word devices Specified head device No data Number of device points er device 1 to 40 words Word device 1 to 256 points Head device No For details regarding the specification method refer to Item 10 2 1 ACPU monitor timer unit 250ms PLC No Subheader For bit devices 16 pant portion on off specitication trom the final device No in the specified device Nos For word devices Final device No data in the specified device Nos Set to 3030 when specifying the number of device points as 256 points Response format End code Subheader 10 25 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 1 When writing the X60 to 7F 32 points on off data to the PLC CPU installed in E71 Command remote node E71 la eta Re Oe aN ae eR a eee ee Rn te Fen eee ee ee a ee ee et eee OS ye R0 G 0 Ge Bm FO SO Oe On Oe Br Os Be Or Oi Qu fe ee 8 SE BS A G 30H 33H ce 46m 30H 30 304 411 35 384 32 30 304 30 Ee 30H 30 SOK 36H 39H 30K 324130H 30r 37H 43H 33 41K 36r 35H 414 36H Local station oe a a ee points Y6F X68 X67 X60 Y7F X78 XTT Response E71 remote node pe 2 When writing the 0100 to 102 data to the PLC CPU installed in E71 Command remote node E71 CS F FIO 0 0 A 44 2 0 0 0 OO 0 0 6 40 30 0 23 4 9 8 7 6 0 0 9 30H 334146 4630H 30 304 4 tH 34m m SOK 30H 36H 34H es 33H 304 30 3 14 90 33 344 3
33. H L to ma a ae bas Read byte length 1 to 256 bytes Parameter read head address a 123456H set to GH 34H 12 ACPU monitor timer unit 250ms PLC No Subheader i Set to 00 when specifying the byte length as 256 bytes Example When reading the parameter data 280 to 2834 of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node FEEF FEE be aie atin auntie atl ye ete Local 2500ms station x 4 bytes Parameter address 283H contents Parameter read at head address 000280 Parameter address 282H contents Parameter address 281 contents Parameter address 280 contents 10 78 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Response format Specified read byte length 2 words E a EEE f an je wen m mo we byte A 1 to 256 bytes Final ok contents for the specified Pararneter read nead address aadress ACPU monitor timer unit 250ms Specified head address 1 contents PLC No specified head address contents a Sutter End cede _ _ _ _ _ sudreade Remarks Set to 3030 when specifying the byte length as 256 bytes Example When reading the parameter data 2804 to 283 of the PLC CPU installed in the E71 Command remote node 71 Response E71 gt remote node IESSESsrie EEEE E o
34. O represents executable and the x represents not executable b Parameter addresses The parameter memory area is the 3k bytes from Ou to BFF As shown below the address specification is 3 bytes when exchanging using binary and 6 bytes when exchanging using ASCII Example When specifying address 123 3 byte When exchanging using binary ten m 6 byte When exchanging soir opoje pepe ae oe Point When changing the parameter memory contents be sure to conduct a parameter analysis request after writing all of the data to be changed If this is not done the parameters in the CPU user memory will be changed but the parameter contents stored in the work area used by the PLC CPU for operation will not be changed so processing will be conducted using the parameter contents before the change contents stored in the work area even if the peripheral equipment is installed and operated after the change 10 77 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Batch read This section explains the command response format when reading the PLC CPU parameter memory contents a When exchanging using binary code Response format Specified read byte length 2 bytes fee ieee ees ee ee a oe eed a ee e Final address contents for the specified address Specified head address 1 contents Specified head address contents End code Subheader Command format 8 bytes EERE roo L
35. Response format End code Subheader Example When the contents of extension file register R100 to 102 data are written in the PLC CPU instailed in the E71 are read Command remote node E71 a ae ae 9 3 points em selon Write data to R102 1234 Write data to R101 98767 Write data to Ri00 0190 Response E71 remote node 10 57 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code e Command format Specified number of devices x 2 12 words ooon evas OO C FRE EE CS ooh e oja e ore TUL Specified device No 1 data Specified device No data Le Number of devices 71 to 258 Device No for details regarding the specification method refer to ttem 10 2 1 w ACPU monitor timer unit 250 ms a PLC NO Subheader Final device No data for the specified device No Set to 3030x when specifying the number of devices as 256 Response format 2 words We 42x 434 O b en ee End code Subheader Example When the contents of extension file register R100 to 102 data are written in the PLC CPU installed in the E71 are read Command remote node E71 3 Pe RO Oe A Ge ot i Or OPO OO OB a Oy Oe O 9 9 8 7 6 23 4 33 a 46H 46H 30 30H 30H 41b 35x 32H 32 30 30 304 30H 30H 30K 30H 36H 34H 30 30H 30H 304 304 30H 39 39H 38H 37H 36H ai 32 33H 34 i ma
36. Subheader The subheader format is as shown below For E71 since the E71 can be added or removed the user does not need to make the setting B7 86 865 B4 B3 B2 B1 B 0 0i 0i 0 OOH Responses are not handied Ne st retested The data before conversion to ASCII code when exchange is done using ASCII code Determines between commana and response Command response flag For command 0 For response 1 The subheader data code order when conducting fixed buffer exchange is as follows ie ee Subheader code during exchange For command exchange For response exchange When exchanging binary code 60H OOH EOH When exchanging using ASCII code 36H 30H 30H 30H 45H 30H ES Data length setting and text command The data iength setting shows the text data capacity in number of words The text command shows the data for the data length setting portion that is sent to the exchange partner node Data length setting and text command portion format when exchanging with binary code Example 2 bytes 2 bytes Maximum 1017 words Application data Subheader Data length Text command setting Fixed buffer H L OOK OAH 12H 34H 56 78H Data length setting n n n 2 Transmission n 3 reception data n 9 n 10 n 14 i n shows the target fixed buffer header address 512 1536 n 1023 qt y 6 9 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A Data length sett
37. T C etc are set in 20 points 1 point units Bit unit 08 Monitors the device that con Numbsioi Monitor ducted the monitor data regis strat Word unit 09 tion registrations In the PLC CPU status column in the above table the O represents execution possible and the X represents execution not possible The number for when other than AnA AnU and QnA 2 points are processed for each point for the device X input For example when X is included in the specified device in monitor data registration bit units make it so that X specified number of points x 2 number of points lt other device specified number of points processed during one exchange 10 12 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 Device specification method and range a The device setting method for device memory read write is performed using the device code and device No shown in the diagram below B15 to BO 831 to BO et Device code Device No Specify using hexadecimal number lt eee ia ess se ee oM Example For D100 D 1 00 4420 000000644 Device No hexadecimal l l l l l l Device code i b The device codes and device Nos are shown in Table 10 2 Table 10 2 Device List CPU module without restrictions Access enabled x Access disabled No device Device range 1 WO to ie oware 0000H to 00004 10 OSEFH Link Uinkredister haf eh in eg jos m W400 to 0 WE 04
38. n Dm 8000 2n m Device No n The device No is converted into a hexadecimal number value 10 84 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 Batch read This section explains the command response format when batch reading the sequence pro gram contents machine language timer T and counter C set values a When exchanging using binary code Response format Set number of points x 2 2 bytes fee ee eet ieee te ee ee ol Wyte Command format Number of steps 1 to 256 steps Final step No contents for the specified step No Number of device points 1 to 256 points Final device No contents for the specified device No Head step No Specified head step No 1 Head device No contents for details refer to Item ACPU monitor timer unit 250 ms Specified head device PLC No No 1 contents Subheader Main program OAH Specified head device No Subprogram OBH contents Specified head device No contents End code Subheader Set to OOH when setting the number of steps and Main program 8AH number of device points to 256 points Subprogram 8BH Example 1 When reading the main sequence program 100 to 103 steps for the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node ayy ey ey SS Local station saoe 4 steps Step 103 67H contents 3005 Head ste
39. of the E71 s random access buffer NO Specify the data VES Write the data NO Has the right data been specified on the remote node end Are there any open errors or initial errors in the error log area No Check and repair the error locations YES A E71 hardware error is suspected Although inconvenient please discuss the details of the problem with the branch office or dealer nearest you 13 17 13 TROUBLESHOOTING MELSEC A 13 2 4 Error When Reading Writing Data to the PLC CPU Reception errors Check the on line state of the connectio with the exchange remote node Is the subject connection open ending X10 to X17 is on NO YES Was a command transmitted NO from the remote node YES Was a response retumed to the node that transmitted the command NO YES ts the response end code zero NO Conduct open processing for the subject connection For details refer to Item 5 4 Transmit command to the E71 is the command IP address specification correct NO YES Does the communication protocol TCP UDP with the exchange remote command NO YES It is thought that the remote node on the command transmission end has not transmitted a command to the E71 Check the transmission end Repair the error location based on the end command and error code contents Refer to Item 13 1 13 18 Correct
40. remote node E71 Local station 2500ms 42 points Response E71 remote node om om eey M101 M103 M105 M107 M109 M111 status status status status status status OFF d OFF d OFF ON g OFF OFF M100 M102 M104 M106 M108 M110 status status status status Status status ON OFF ON ON OFF OFF 10 16 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 3 Word Unit Batch Read This section explains the command response format when conducting word device memory batch read and bit device memory 16 unit batch read EH When exchanging using binary code 12 bytes Ta al D Number of device ponts i device 1 to 128 words Word device 1 to 256 points Head device No For detaiis regarding the specification metnod refer to item 10 2 t i ACPU monitor timer funit 259ms PLC No Subheader Set to OOH when specifying the number of device points as 256 points Response format Number of specitied device pointsx2 2 bytes Seo For or bit devices For bit devices 16 point Fond ae on off status from trie final device No in the specified device Nos For For word devices devices Final device No contents in the specified device Nos For bit devices bit For bit devices Point 17 to point 32 on off status in the specified device Nos For word devices Specified head device
41. 1 b for the setting vaiues given in to in this section and during opening processing 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A Example When the setting value is for the number of retries to be 3 the E71 conducts existence checking with the timing shown in the figure below When errors are detected the open error detection signal turns on and stores the error code 108H to the open error code storage area When using fixed buffer No 3 Open request signal YA Open end signal X12 ew Ne faial i Open error detection X18 signal E71 Final Ping Ping Ping exchange command command command Destination Destination Destination existence i existence existence check begin check check interval timer interval interval value timervalue timervalue 38 When changing the set value of the timers make the relation among values as follows Response monitor TCP ULP TCP end TCP retransmit timer value time out value timer value timer value TCP retransmit TCP zero window IP setup timer value timer value gt timer value When connecting to our products E71 AJ71E71 QE71 via a line make the same settings for both nodes When connecting to products of other manufacturers via a line set each timer value so that the following relationship is satisfied in addition to satisfying the above relationship equation Monitor timer value with the TCP retransmission timer TCP re
42. 1 s contents For bit devices 16 point portion on off specification from me specified head device No Specified head device No data Number of device points be device 1to40 words Word device 1 to 256 points Head device No For details regarding the specification method refer to tem 10 2 1 em ACPU monitor timer unit 250ms P_C No Subheader Set to 00 when specifying the number of device points as 256 points Response format End code Subheader 10 23 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 1 When writing the X60 to 7F 82 points on off data to the PLC CPU installed in E71 Command remote node gt E771 Response E71 remote node Local 2500ms station Example 2 When writing the D100 to 102 data to the PLC CPU installed in 71 Command remote node gt E71 Response E71 remote node O Pe espo bo Cie o 9500ms 3 points ioe Dior ome D101 0102 station Write data Write data Write data 1234m 9876m 0109 10 24 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format Number of specified device pointsx2 12 words For bit devices Point 17 to point 32 on off specification in the specified device Nos Specified head device No 1 s data For bit devices 16 point portion on off specification trom the specified head device No
43. 10 2 4 Bit Unit Batch Write This section explains the command response format when conducting bit device memory batch write Ew When exchanging using binary code Command format Number of spec fied device pontsx2 12 bytes device No on off setting the specified device No iets head device No 1 s Cahiers 1 on off specification CFF 0 Specified head device No on off specification gt Number of device points 1 to 256 paints For details regardir ig the spec fication method refer to Item 10 2 1 ACPU monitor timer unit 250ms P_C No OOo SUAE Set to OOK when specifying the number of device points as 256 points Response format End code gt Subheader Example When reading tne M50 to M61 on off status of the PLC CPU installed in E71 Command remote node gt E71 Response E71 remote node Local 2500ms station M51 M53 M55 M57 M59 G1 ON gy ON ON OFF OFF ON M50 M52 M54 M56 M58 MAO OFF ON OFF OFF OFF OFF 10 21 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format Number of specified device pointsx2 12 words re ee A 0 2 H 0 0 eae i 32 aaka Sy L Last device No on off setting for the specified device No Specified head device No 1 s ON 31H on off specification OFE 30K oe ee Specified head
44. 10 6 4 3 Execute main T C set value write When there is no subsequence program Execute subsequence program write Snagit Refer to Item 10 6 4 3 Execute sub T C set value write When there is no main microcomputer program e main mi o ain microcomputer programf Refer to Item 10 6 5 8 When there is no submicrocomputer program Execute submicrocomputer program When there is no comment data Execute comment data write ever Refer to Item 10 6 6 3 pe 10 76 After the write is complete set the PLC CPU to the RUN state using remote RUN refer to Item 10 5 of the PLC CPU etc 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 3 Parameter Memory Read Write and Analysis Request This section explains the control procedure specification contents method and example specification when reading or writing the parameter memory contents of the PLC CPU EN Commands and addresses a The functions used to read write parameters are shown in Table 10 6 Table 10 6 Functions List Numbarct PLC CPU status Command processing response Processing description points con classification ducted in one exchange Batch read Reads the PLC CPU parameter contents Batch write Writes the PLC CPU parameter contents Causes the PLC CPU to recog Analysis request nize and check the switching parameter contents In the PLC CPU status column in the above table the
45. 100 M 8 points b Order during response reception Remote node E71 Applicationdata gt o e data Subheader End code Text response Specified device s on off status 01H OFF M106 ON M105 ON M104 OFF 10H ona end J M100 ON M101 ov M102 ON M103 OFF 10 6 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Format when exchanging using ASCII code a Order during command transmission Remote node gt E71 Application data Subheader PLC No ACPU monitor timer Header Gray ep Wein AE H L 8 o afas P o o p A Local station 2500ms Application data Text command Device name Head device No Number cf device gants H L Text response Specified device s on off status Header Normal end i M100 ON M107 OFF M101 OFF M106 ON M102 ON M105 ON M103 OFF M104 OFF 10 7 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 1 4 Thinking Regarding Transmission Data This section explains the thinking regarding the transmission data that handles the character portions when data is transmitted and received between a remote node and the PLC using commands EE When Exchanging data using binary code a When reading to and writing from bit device memories The bit device memory is sometimes handled in bit units 1 point units and word units 16 points This section explains the thinking regarding t
46. 13 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 4 3 Example Fixed Buffer Exchange Program Without Procedure This section explains the programming method for performing data exchange with a remote node using fixed buffer No 1 with procedure Program Conditions a Set the exchange parameters for each connection as specified in Item 5 4 5 b Set the fixed buffer transmission data to D300 to D399 c Store the fixed buffer reception data in D500 to D599 d The storage destination for the error code and end code are allotted as follows D108 Transmission error code D109 Exchange end code D110 Reception error code Fixed Buffer No 1 Transmission Program X10 Y8 KF Ope Open WDT Exchange request error possible CON 1 1 detection 4 X43 fp Fixed buffer Transmission instruction permit 1 N41 M1 XO X1 YO moms i ar A anan A a A ET N71 Transmission Transmission Transmission Butter CHO dekati Exchange POMA Transmission Tequest 1 ue request possible C error 1 detection 1 u71 M65 M66 87 68 Y1C SET M61 Channel switch for buffer Buffer CHO memory completed Buffer CHO Buffer CH1 mile Butter CH1 eerie Butter CH1 os see Writing to the fixed butter of 4 switching switching connection 1 is possible 5 7 RST M71 Butter CHO switch request 1 frst Yc Butter CH Buffer CH switch switch 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 61 M1 MOV K6 0300 Set th
47. 153 2 Except for the following software development environment the node side has the same execution environment as that described in Appendix 7 1 Item b e Software development environment Microsoft Corporation s visual basic Ver 4 0 is used e The IP Address and port No are allocated free Nos 3 The communication format is TCP IP 2 J Sampie program overview Data is written to DO to D4 5 points worth of the ANUCPU installed station E71 by the E71 command 03 word unit batch write Executing the program in this item displays the message Starting Up Click Please on the screen Clicking the left button on the mouse will begin the data write to the ANUCPU The program shown in Appendix 7 2 is used as the program for the PLC CPU side and the E771 IP address is changed to that above visual basic is a registered trademark of Microsoft Corporation APPENDICES MELSEC A Screen setting file Form1 VERSION 4 00 Begin VB Form Forml AutoRedraw 1 Caption ClientHeight 3645 ClientLeft 1395 ClientTop 3660 ClientWidth 7980 Height 4050 Left 1335 LinkTopic ScaleHeight 3645 ScaleWidth 7980 Top 3315 Width Bs 8100 Begin VB Label Labell BackColor Caption Height Left TabIndex 0 Top Width End End Form Forml amp HOOCOCO00E Starting Up Click Please 375 360 600 3495 Attribute VB_Name Forml Attribute VB_Creatable False
48. 2 to 5 3 The remote node and line opening processing Refer to Item 5 4 To conduct fixed buffer exchange initial processing and open processing must be completed 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 2 When the data received from the remote node by parameter settings is stored in the fixed buffer No 2 the QE71 turns the reception end signal X2 ON The reception data length and reception data are stored in the fixed buffer The reception data length is stored in the subject fixed buffer s first address 1536 The reception data is stored in the subject fixed buffer s first address 1 order The following diagram shows an example of a 200 word reception using fixed buffer No 2 600H 1536 601H 1537 Reception data length storage area The reception data length is stored during reception end Unit is one word t A ey Reception data storage area The reception data is stored in the order from the newest address 6C8H 1736 6CSH 1737 OFFH 2559 The reception data length and reception data stored in the fixed buffer are read by the sequence program s FROM command when the reception end signal is turned ON At the same time the reception end check signal Y1 is turned ON by the sequence program The E71 returns a response to the remote node by the parameter settings when the reception end check signal is turned ON When the response returned is ended the E71 automatically turns OFF
49. 3 Reception for remote node 8 No 4 Reception for remote node 15 No 5 Reception for remote node 15 No 6 Transmission for remote node 19 Transmission for remote T oie No 8 Reception for remote node 28 Point Exchange partner Remote node 1 Remote node 8 Remote node 15 Remote node 19 Remote node 28 Select without procedure and during open the subject connection will be changed to special use for fixed buffer transmission reception without procedure Refer to Item 5 1 1 Fixed buffer exchange with procedure random access buffer exchange and reading and writing data to the PLC CPU exchange cannot be conducted exchange without procedure at the same time as fixed buffer When changing the exchange partner do not perform pairing setting Refer to Item 5 4 1 b or existence check setting Refer to Item 5 3 1 2 lf these are set the E71 will not operate normally 3 The transmission and reception processing during data transmi During transmission ssion and reception is as follows When the transmission request signal YO to Y7 is ON the E71 transmits the subject fixed buffer s data to the remote node set in the buffer memory address 18H to 4FH 24 to 79 subject area 1 During reception lf there is reception from a remote node set in the buffer memory address 18H to 4FH 24 to 79 subject area the E71 will perform reception processing 1 In addition when re cept
50. 414 30H 344 sae 33H 34H 35H 36 37H 38 39H 36H 30H 30HI30H 34 3 i A a BAHI 35H 36H 37 38H a a a ee a a ne oe ee 78 4 96 O0H Local station 2500ms 04 125 Ade 56n 04 12h 34H 56h 78h za 10 109 SPECIAL FUNCTIONS SECTION The special functions section gives a function summary and explains the usage method for the special functions used by the E71 by dividing the section into one chapter per function The user only needs to read the chapter that explains the function to be used 11 WHEN SETTING A SUBNET MASK MELSEC A 11 WHEN SETTING A SUBNET MASK When multiple nodes are connected to one network and that network is divided and managed as virtual multiplie subnetworks then subnet mask must be created for the affected nodes This chapter explains how to set subnet masks 11 1 Subnet Mask Networks build with Ethernet consist of small scale network systems where multiple nodes are con nected to one Ethemet and medium and large size network systems where these smaller networks are connected using multiple routers The IP address of nodes connected to the Ethernet show the nodes address on that network so three classes from class A through class C are provided to make it possible to select the address system that meets the needs of a particular network size and the corresponding IP address is expressed using 32 bit numerals Refer to Item 11 3 subnet masks make it easy to theoretically divide
51. Addresses The function used for reading writing extension file registers are shown in Table 10 3 Table 10 3 Functions List PLC CPU status Number of Command processing Running response Processing description points con Write Write format ducted in one StOPPed cibte impossible exchange setting setting Test random write Batch write 18 TNG extension Me TEISEN PISE aeaa x written to in 1 point unit register R is randomly written to Monitor data registration is con Monitor 1Bx ducted and the extension file register is monitored The block No and device No 40 points x in 1 point unit In the PLC CPU status column in the above table the O represents execution possible and the X Batch read 17H een ie Teosta 3 Is eae 206 points in 1 point unit are specified in the extension file Monitor data registration TAY a oe NO 9 be monies 20 points is registered in 1 point unit represents execution not possible Extension file register address a Number of extension file registers BIOCK ING O uraisi The number of registers specified by the PLC CPU parameter After block No 1 There are 8192 registers for each block b The specifiable block No range varies depending on the PLC CPU memory capacity memory cassette type and the PLC CPU parameter setting For details refer to the SW GHP UTLPLC FN1 Utility Package Operating M
52. Codes Returned to the Remote Node 13 9 Error Codes Stored in the Buffer Memory 13 2 Eror HOG AW Cal osne reta aa 5 38 ELGUAIGL airean E EA 1 2 eternet TOBASE S den ana 1 1 Exchange Address Setting cree 5 18 Exchange Conditions Setting oe 4 4 Exchange Data Code enecens 3 4 4 4 Exchange during CPU is Stopped aaee 5 40 Exchange during STOP accses 5 40 Exchange Parameters ecccccceeeeeesee neers 5 13 exchange Proc QUrOS virsiin a a 5 2 Exchange State Storage Area vo 5 36 Exchangeable Data AMOUNT cece 3 5 EXISTONCO HOCK oc ssi33 iste etenpeiseanurveretencs ants 1 11 FTOCOSSINO l aars i n A 5 9 SSO beree ER anne 5 6 5 14 Fixed Buffer Exchange With Procedure Control Format OEE O EEEE 6 1 DEIC EEEN A AE E EE 6 7 Dales COMOM aae rE a ANA 6 9 End OOGO snn E 6 10 Exchangeable Range scccrcccsircco 6 1 General DESCNDUON esiis 1 6 Header anaren TA A AAEE 6 9 ProcesSsno TINE perasan A 3 TOAN a aer E 6 11 SUO OAC irion er innan E A Anentls 6 9 DE ET E IEE AEE ATAA EA AT 6 9 Transmission Reception Control Method 6 3 Fixed Buffer Exchange Without Procedure CODUO LP ONMAL ansaa a 7 1 PIOUS FOMA ccrevecarsicetus ENN 7 7 Exchangeable Range iyenasi 7 1 General Description sasasih 1 7 BS CIS A E AOE A E EAO TT 7 7 PROCESSING FINE arraira aa A 3 POOL ANNO S EPE E E ET 7 13 Simultaneous Broadcast Communication UDP IP 7 9 EE sess Aes catered pea icing naa a NaN 7 8 Transmission Reception C
53. D The open request signal Y8 is turned off by the sequence program when the open end signal is turned off When reopening the open request signal Y8 is turned on by the sequenc program after a minimum of 500ms Point For the sequence program to recognize the open end from the remote node side the open end signal X10 to X17 on time must be longer than the PLC CPU s scan time Even if there is an open end if a close message is received that is shorter than the ACPU scan time the sequence program may not recognize the open end 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A The E71 performs close processing even if the following signals for the corresponding connection are on when the reception of Close Abort RST has occurred from the partner remote node prior to the completion of data communication performed immediately before Transmission request signal reception completion confirmation signal YO to Y8 Transmission normal completion signal reception completion signal XO X2 Transmission error detection signal reception error detection signal X1 Xs lf close processing is performed for the corresponding connection while the above signals are on turn off the open request signal Y8 to YF after turning off the transmission request signal reception completion confirmation signal at the timing shown below The E71 turns off the above input signals of the corre sponding connection Program exampl
54. Data exchange program Refer to Chapters 6 to 8 I femme Ss ee M M meme eee eee eee me es ee ee eel i Refer to ltem 5 4 5 meme eee ee U UM Ss ee ee M Ml M X47 X10 X11 X18 X19 Y8 Y9 l H AT A OET RST Y19 End processing program End Open Open Open Initial Open Open initial request Tum OFF the initial request signal processing end end error normal request request instruction CON 1 CON 2 detection end 1 2 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 4 Communication Line Open and Close It is possible to exchange data at the same time with a maximum of 8 stations remote nodes for a communication line connected by the sequence program The communication line can conduct fixed buffer exchange random access buffer exchange and reading and writing data to the PLC CPU exchange for open remote nodes However open processing is required when only random access buffer exchange and reading and writing data to the PLC CPU is performed Following is the E71 s communication line open processing and close processing performed by the PLC CPU to exchange data between the E71 and remote nodes Remarks 1 When the PLC program connects a communication line and uses a port to exchange data the communication format for exchanging with the remote node can be selected during open process ing using the following functions For each port please specify whether TCP IP or UDP IP will be used for excha
55. ES 10 72 106 Seguence Program Read WMO Seeiso ant A E E EE ST A 10 74 10 6 1 Precautions When Reading Writing Programs ccssescsessssnesssesseesersesesecseseenteerene 10 74 10 62 Progam Read NE geanne nar a E E o A 10 75 10 6 3 Parameter Memory Read Write and Analysis Request TOTO T2 unnn 10 77 10 6 4 Sequence Program Read Write cccccscssesssescenevesseseeesseuseees ens OA to OD oses 10 83 10 6 5 Microcomputer Program Read Write aaccess AE O2 T eaa 10 91 10 6 6 Comment REACIVV IMGs cscsetctes ite urtaionev aliens vtoarteanatidneehexwectuasence VG WO A 10 97 10 6 7 Extension Comment Read Write cccccecccccsessecseecsenneeseuaness 39 SA nar 10 102 10 7 Loopback Test Oea 10 107 SPECIAL FUNCTIONS SECTION CHAPTERS 11 AND 12 CHAPTER 11 WHEN SETTING A SUBNET MASK 11 1to11 5 thk SUEEMASK miripis a a T a aaa 11 1 11 2 Data for Setting the Subnet Mask cccsccccssscccsecccsuenessenceccssusescceceseaceteeceseuensessanesceseescateees 11 3 tis Etemon IP Addo SS amaaa aa a taaustoads 11 4 CHAPTER 12 WHEN USING ROUTER RELAY FUNCTIONS 12 1to12 4 TA ROWO May FUNCIONS sinoi drar tera E E a A 12 1 12 2 Exchangeable Functions and Settable Range Using Router Relay FuUnCtiIOnS esenee 12 2 12 3 Summary of Router Relay Processing ssserssssessissnsssrssssvnrrarssvabvroadtttttbtra rests nins prasa roeas tsasni 12 2 12 4 Data for Using Router Relay FUNCIONS aistsinve Geer titans sacdeudesuspa
56. Exchanging when there is with procedure Refer to Chapter 6 for details The E71 protocol transmits and receives data on a 1 1 basis using a handshake be tween the specified node and the PLC CPU Use when transmitting or receiving simple data from the PLC program Remote node Transmission command Transmission j data write 512 0300 kso H Se request Q XO Transmission end m Transmission end e E zata Transmis so n nu Reception Reception eng end ja Reception data read E Reception end check Fig 1 4 Fixed Buffer Exchange With Procedure e When transmitting data After writing the transmission data in the fixed buffer the transmission request signal will turn on and data of the specified number of words will be transmitted When a transmission end response is received from the remote node the transmis sion end signal will turn on When receiving data When the data of the specified number of words is stored in the reception fixed buffer the reception end signal will turn on When the reception data is read from the fixed buffer and the reception end check signal is turned on the reception end check response will be sent and the reception end signal will be turned off 1 GENERAL DESCRIPTION MELSEC A 2 When exchanging without procedure Detailed explanation in Chapter 7 Data transmission is conducted when the specific node and the PLC CPU are 1 1 or 1 n by simultaneous broadcast commun
57. For details refer to ltem 10 2 1 Number of device points 1 to 40 points f Bit device 16 to 640 points Word device 1 to 40 points ACPU monitor timer unit 250ms PLC No Subheader Response format 2 bytes ae BE End code Subheader Example When X80 to 8F is turned on off and W26 is overwritten to 1234 and C18 s current value is overwrit ten to 50 for the PLC CPU installed in E71 Command remote node gt 71 B04 00H 00H 004 20x 7826 09 OOH 00H 205 57 Ja 12 1126 O04 OOH 00h 4EH 43 Loca a5G0ms an 2500ms 3 points X80 W26 1234 C148 current a ee ek Stalion OO OMe Oot Os tt acy be Oana a X80 X8F Response E71 remote node 10 29 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU 2 When exchanging using ASCII code Command format Number of specified device pointsx8 6 words TROPE a BAE E i nn E EE E OE EE eee a a ee ae Eee ote Device No on off specification and setting data Nr arr a A p Number of device points For bit devices 1 10 40 points Sets the 16 point portion on off specification Bit device 16 to 640 points wee device 1 to 40 points J ACPU montor timer unit 250ms PLC Ne Subheader Response format ror word devices Setting data gt Device No specification For datails refer to Item 10 2 1 2 words ees ve aa ee Nn ee M L End code Subheader
58. IP address is divided into three classes of class A through class C to allow selection of the address system that is most suitable for the size of the network system A network manager the person who plans the network manages IP addresses etc must set a 32 bit numerical value for each node following the standard IP address method used on a world wide scale 21 The contents and role of each class network ID and host ID are as follows Class A to Class C Class A is for networks with many hosts class C is for networks with few hosts and class B is for networks of intermediate size Up to 254 hosts can be connected with class C NetID This is used to identify the network to make it possible to handle multiple networks Net works with different network IDs will be identified as separate networks 3 Host ID This ID is used to identify hosts on a network When using the subnet mask described in this chapter the host ID portion can be elimi nated and an extension added to the net ID If the IP address is compared to a telephone number the network ID host ID and port No specified during data exchange wouid play the following roles Net ID long distance number Host ID telephone number Port No extension number if the network IDs long distance numbers are the same then direct exchange is pos sible but if they are different then exchange must be conducted by going through rout ers telepnone exchanges
59. MELSEC A 3 6 2 Detailed Explanation of I O Signals This section explains about the I O signals ON OFF timing and conditions shown in table 3 7 on the previous page The codes in the parentheses are the device numbers that correspond to table 3 7 EE Transmission normal end and reception normal end X0 X2 X4 X6 X8 XA XC XE These signals are used when exchange is conducted with the fixed buffer These signats are not used when exchanging with the random access buffer or when reading and writing data in the PLC CPU Used as the transmit normal end signal when the appropriate fixed buffer trans mission is used Used as the reception end signal when the appropriate fixed buffer reception is used a When used as transmission end signal Data is transmitted when the data request signal YO to Y7 is on The remote node that has received the data returns a response to the E71 The transmit normal end signal is turned on when a response is returned by the remote node 4 The transmit normal end signal is turned off when the transmit request signal YO to Y7 is turned off The transmission normal end signal is not turned on when the end code returned from the remote node is anything other than OOH The transmission error detection signal Xi X3 X5 X7 X9 XB XD XF is turned off When exchanging without procedure O The data is transmitted when the transmission request signal YO to Y7 is turned on The trans
60. MELSECNET the exchange from remote node with the remote station PLC CPU can be done via the MELSECNET Please refer to item 9 1 for details regarding data exchange with remote stations 3 Exchange can be done with remote node that is doing connection open processing end in the Ethernet In addition if the data exchange func tion is used exchange can be done even if the local PLC CPU is stopp Reading and writing data in the Random access buffer exchange Simultaneous broadcast com 3 SPECIFICATIONS MELSEC A Exchang ss Exchange Partner Unit ss Exchange Partner Unit Remote E71 E71 E71 AJ71 E71 QE71 th Description of Functions bA bd an id ea ms 1 Exchanges data via the routers that are connected in the Ethernet network system Do not operate as a router 2 Exchange is possible via a router by data transmission after TCP s active open and UDP open 3 Exchange can be done with the remote node that is ending the con nection open processing in the Ethernet 1 Checks if the partner node is operating correctly when exchange has not been done with the partner node for a specified period of time after connection open processing has ended 2 Closes the line connection forced disconnect if the E71 DIP switch SW1 is off when the partner node is not operating correctly 1 Stores a maximum of 10 sets of error history information such as message subheaders and partner
61. MELSECNET 10 remote VO net master station enn n anne nne Special function module No 04H y y Y Y I O address as seen from 00 20 50 70 the remote I O station to to to to iF OF 6F BF D 2 2 2 pe gt gt 3 oO D co c N re O 5 Sig Remote Ostation G 4 15 3 No 1 unit Qe 8 8 a t a a gt 2S Ill 5 lt O O QO O 32 16 A ponts points Yo A Y Y Y I O address from the 400 420 430 450 470 common parameter to to to to to 41F 42F 44F 46F 48F 10 64 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 4 2 Special Function Module Buffer Memory Read This section explains the command response format when reading data from the special function module buffer memory EN When exchanging using binary code 10 bytes eea ee O es ee el eee Ny ny a ye re ae Special function module No Read byte length 1 to 256 bytes Head address When 123456H set to Benga 124 ACPU monitor timer unit 250ms PLC No Subheader Set to O04 when specifying the byte length as 256 bytes Response format Specified read byte length 2 bytes ne ol aa eat ee et a ed Ea o _ Final address contents for the specified address Specified head address 1 contents Specified head contents End code Subheade i Example When reading 7F0x to 7F3x of the special function module X Y120 to 13F module N
62. Module No installed Special function module model name addrecs hexadecinall Model A616DAI digital analog conversion module Model A616DAV digital analog conversion module Model A616TD temperature digital conversion module Model A62DA S1 digital analog conversion module Mode A68AD S2 analog digital conversion module Model A68ADN analog digital conversion module Model AS8DAV DAI S1 digital analog conversion module Model A68RD3 4 temperature digital conversion module Model A84AD analog digital conversion module Model A81CPU PID control module Model A61LS position detection module Model A62LS S5 position detection module Model AJ71 P T32 S3 MELSECNET MINI master module Model AJ61BT11 CC Link system master local module 2000H 72 Model AJ71C22 S1 multiple drop link module Model AJ71C24 S3 S6 S8 computer link module 1000H Model AJ71UC24 computer link module Model AD51 S3 intelligent communication module Model AD51H S3 intelligent communication module 800H 10 59 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Special function module mode name Buffer memory head Module No installed i address hexadecimal in slot 0 Model AD59 S1 memory card interface module Model AJ711D1 2 R4 ID interface module Model AD70 D S2 positioning module positioning module Model A1SD61 A1SD62 E D S1 high speed counter pH fH 10H O1H module Model A1SJ71
63. Other 01H to 40H 1 to 64 station Except 1 and 2 above Access station s station No 4 Other station on the MELSECNET B 7 2 Sameas 2 and 3 above Point 1 When the station installed in the E71 is a base AnU QnACPU and other station access via the station installed in the E71 is conducted the following parameters are set in the PLC CPU of the station installed in the E71 using the GPP function e Valid units during remote station access setting Sets the unit value which exchange will be conducted for other station access in the settings and the number of unit settings 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 3 The following shows the exchange possible PLC of the other stations in the data link system The exchange possible stations vary according to the stations with E71 installed Master station First level Local station Second level L2 m Local station Second level I l Master station Third level Local station Second level Remote lO station Second level Local station Third level i Local station Third level i Remote O station Third level Loca station Third level i PLC No when using E71 commands Values Hexadecimal Numbers Local Station M L1 L2 m L3 R4 21 22 3 04 ee ae eee aie eee PLC Installed in the E71 Peel cones ARE en SS eee a O x All devices can be accessed by specifying the subjec
64. PLC side port 0xX2000 If connect sock addr Len addr lt gt 0Q Then MsgBox Connect error amp WSAGetLastError Exit Function End If D0 to D4 Batch write request s_buf 03FF000A4420000000000500112233445566778899AA r send sock s_buf Len s_buf 0 If r lt 0 Then Exit Function End if Display transmission data Forml ScaleMode 4 Specify character mode Forml Currentx 4 Forml CurrentYy 5 s_len S Len s buf Forml Print Transmission data s_len byte Forml CurrentX 8 amp 8 Form Currenty 6 Forml Print s_buf Reception response Call Sleep 100 Do r_buf SpaceS ws_MAXMUD r recv sock r_buf LenB r_buf 0 If r gt 0 Then r_buf Left r_buf r The character string portion of the received alpha numeric portion is removed Display reception data Forml ScaleMode 4 Specify character mode Form Currents 4 Forml Currenty 8 r_len Len r_buf Forml Print response r_len byte Forml CurrentX 8 Forml Currenty 9 Formil Print r_buf Exit Do End If Loop Request ciose ws_close closesocket sock Exit normal ws_Sstart sock End Function APPENDICES MELSEC A Appendix 8 Difference between Ethernet and IEEE802 3 The Ethernet header for the data link layer supported by the E71 meets the specifications of the Ethernet frame The E71 does not communicate with anoth
65. READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Response format 8 words Specified byte length 2 bytes Fh ee a Se a A E oe PANE TEE Jew H to L A to L A T o la L H H uf le L A e mee Aa I iwi H N Byte length 1 to 256 bytes Final ah contents for the specified address Head address Specified head address 1 contents ACPU monitor timer unit 250 ms Specified head address contents PLC No End code Sub header Sub header Main program 3145 1EH Main program 3945x 9Ex Sub program 31464 1FH Subprogram 3946H 9FH Set to 3030H when specifying the byte length as 256 pytes Example When reading the microcomputer program 78 to 7Bu of the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node 9 EJO 0 3 4 1 Al7 BIB F TEESE eerie CREE ee ee ee 39H 45430 30H 33n Ste Btn 41u 37n 424424 Ao _ A Aaaa aM Ia 1EH Local station 2500ms Head address 4 bytes 0078 04H Address 7BH contents Address 7AH contents Address 79H contents Address 78H contents 10 94 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 3 f Batch write This section explains the command response format when batch writing the contents of the microcomputer program a When exchaaging using binary code Command format Specified byte length 8 bytes WA Nn CoN ee Ne a feel
66. Reception data length D39 Z1 Reception data tength D31 KOZI Reception data SET Y1 Reception end check 2 RST M62 Buffer CHO switching 2 X3 2 395 m FROMP HO K104 D40 KI Read Read error Exchanged Reception instruction detection possible oC code 2 2 E SET Y1 Reception end check 2 Y1 M2 408 pn RST Y1 Reception Reception Reception Exchange Reception end error detection end check possible end check 2 2 2 2 2 A 25 1 APPENDICES X46 SS SS SS Se Close instruction 2 413 rrr PL F Exchange 415 MELSEC A N32 Close request from locai station Close ocurred instruction permit 2 M12 Close request from other node Close occurred ocurred possible 2 2 12 419 tC et 32 Close occurred Close 2 instruction permit 2 ae FROMP HO K498 Do K Exchange desable while PLC CPU ose WOT Exchange is stopped instruction error instruction for Connection 2 permit detection current stop 2 state 1 WANDP D108 HeOFD D109 Exchange Exchange instruction for instruction for current stop new stop state 1 state 1 HO K496 D109 K1 Exchange instruction for new stop state 1 z k M32 452 X2 X3 Y1 Close Close Reception Reception Reception Y9 Close processing eception Reception Rece n i instruction processing end error end oan Connection 2 permit 2 2 detection check i 2 2 2 N22 Open impossible 2 M32 Close instruction permit 2 457 RST Y1 Reception end ch
67. Sets the data in accordance with the contents of the usage availability setting area s open procedure settings b014 b15 shown nfa when settings are conducted for each con nection refer to key points in Item 3 7 2 Sets these settings before open processing is conducted during TCP open open processing is conducted before UDP open process ing and before data transmission and reception E71 s port No setting Default value OH Address 18H 24 e Sets the local station E71 s port No e The setting values are specified to between 100H and FFFEH As far as possible it is recommended that a port No be set at 401H or later Set to No that is not being used elsewhere e Following are the precaution items for port Nos when multiple connections are made between remote nodes and the local station using open processing In the diagram the nodes are denoted by a square and the port Nos are denoted by the circles Connection State Shows O Port Port No Communica tion Protocol Connection Description Remote node Also sets multiple local station port Nos even though connections are made with multiple nodes Remote node Sets a single local station port No when connec tions are made with multiple nodes However sev eral connections must be opened Do not perform this when the local station is unpassive Also sets multiple E71 port Nos even thoug
68. Storage Area ccccssscsccscusssecssecceccceeessauensesccssavureccseuenusesensusseenans 5 36 OSs ENO LOO ANEA 3 ist rata whan E E a cantante eteuntelrs 5 38 5 5 4 Protocol Status Storage Area cscs docnase ca vsaicgcss sienna bas aaeisusseaeb ated eas dlavanteadaven aesnahabargadeiesean 5 39 Data Exchange during the PLC CPU is Stopped oo ccccsccsssesssssssesecsersvesesneesecessestesaeauunsenens 5 40 5 6 1 Settings for Continuing Data Exchange saisisiccsandinsineicencakeatecstosesvssisamaeasomeenwen 5 40 9 6 2 Functions for Which Continuing Data Exchange is Possible ccccecccccscccecseseeseseeceeenees 5 41 5 6 3 Relationship between the Setting and Data Exchange during the PLC CPU is Stopped 5 41 FIXED BUFFER EXCHANGE SECTION CHAPTERS 6 AND 7 CHAPTER 6 FIXED BUFFER EXCHANGE WITH PROCEDURE 6 1 to 6 15 BEN SO OAMOR BOR erecta icisietee a ceanae cat acial nvat va conte konvianiana divetoseneisec T ee ates 6 1 Gadd Transmission Control MEINOG aurio nana na ae a 6 3 6 1 2 Reception control Method ercan a A a a a a a aa 6 5 e2 DaFan a e E ORE AEE TA 6 7 6 2 1 Format When Exchanging with Binary Code sesssssssssirserserssererrssureerivrrrrereeverrieeerns 6 7 6 2 2 Format When Exchanging with ASCI Code oo cccccceccccsesecesecuseeusueseeesveseanescensensneeas 6 8 O23 Exchange Data tOM COMEN Saes aa ulate ajanteientuat uit Smnieaseuneatle vere engeeenss 6 9 Gio ProgrammiNosassrenri r a oa N N EE E O 6 11 6 3 1 Pr
69. Systems eseessesssersrrressssereererrsrerrerisneennreres 9 11 9 2 List Ert Commands aNd FUNCTIONS cut scxideseieis ett euei iTA 9 12 9 3 PLO CPU Operation Guring Data Exchange niinitecsiicstii incite arene 9 17 94 Data Exchange Proca tOnS i cssesicsisescitanusinasss son ecnanoniiens yarcualstmeatuytu dueadaneeeaui E i diwnueneenetoenet 9 18 CHAPTER10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU10 1 to 10 109 5 1G Fen Data Forma ee ee ren ae ee eee nee ee teen rere tr ear rn rr re 10 1 10 1 1 Format When Exchanging Using Binary Code esessssseresseerseeessrerrererersorussereeresnrerses 10 2 10 1 2 Format When Exchanging Using ASCII Code sessssssrreeserreserrrrrrvererresnritireresrererenes 10 3 10 43 Exchange Data itoni COMentS e eiiieaenii e EA E aeveneeueaats 10 4 10 1 4 Thinking Regarding Transmission Data s sssssssesrensesrrorrsseristsasarervesreetnreneenonrersesanss 10 8 10 2 DEVICE Memory Read Wri siera eai ea a EAE EE DE nomi 10 12 19 27 Command and Device Range rares narena A E E RN 10 12 10 22 Bit Upit Bath ROA aneia a a a E E OD eraun aan 10 15 1029 Wod Unt Bater REA nrar a S A LOA E E 10 17 10 24 Bit Unt Bale Wile arerin en O2 esr 10 21 1052 0 Wa Unt Bat NE sier sea N OS E A 10 23 10 2 6 Bit Unit Test Randon Write ict scsitemisdiomaeea eann Racine OA PEP T ET 10 27 10 2 7 Word Unit Test Random Write sick ecitatsccvenscueateestasdssayoteeactes OB E E 10 29 10 28 Device Mem
70. THE PLC CPU MELSEC A 10 1 2 Format When Exchanging Using ASCII Code Following shows the command and response data item order when exchange ASCII code data for the application data portion of the exchange data when exchanging by reading writing data in the PLC CPU a Transmission reception data order when exchanging using TCP IP a Order during command transmission Headers Application data penn Subheader PLC No ACPU Text command timer L L 14 bytes 20 bytes 20 bytes re bytes 3 2 bytes 7 T Maximum 2040 bytes l u Differs depending on the function b Order during response reception fF sti ders Application data 7 Dand M i H 14 bytes 20 bytes 20 bytes gt wes 5 T w Differs depending on the function 2 Transmission reception data order when exchanging using UDP IP a Order during command transmission Header y Oe Application data cael Willi Shall Pa Bi e timer 14 bytes 20 bytes 8 bytes 3 725 2 Sores z e Maximum 2040 bytes wa Differs depending on the function ee b Order during response reception o Heade S O Application data SSS Subheader End code T response L 14 bytes 20 bytes 8 bytes 2 bytes 3 mes l 4 we Differs depending on the function 1 The data order for each function and the data order when t
71. The function used for exchanging via routers telephone exchanges is the router relay function described in Chapter 12 Example When the local station E71 s IP address is class C Refer to IP address top stage hexadecimal expression bottom stage decimal expres sion C0 00 01 FEH C0 00 01 66H Local station E71 192 00 01 254 Remote node 192 00 01 102 C0 00 01 01H 192 00 01 01 C0 00 01 65H Remote node D 192 00 01 101 aes ie R 192 00 02 99 11 4 11 WHEN SETTING A SUBNET MASK MELSEC A 3 i Shows the IP address allocation for each class When there are many nodes in the same network then there must be many host IDs In addition when there are few nodes in one network but there are many networks then there must be many network IDs a Class A class B and class C are identified by the first 2 bits of the IP address b In the class AIP address the net ID is allocated to the 7th bit and the host ID is allocated to the 24th bit 31 30 to 24 23 to 0 Class A 0 Net ID Host ID c Inthe class B IP address the net ID is allocated to the 14th bit and the host ID is allocated to the 16th bit 16 15 to 0 31 30 29 Class B 1 0 Net ID Host iD d In the class C IP address the net ID is allocated to the 21st bit and the host ID is allocated to the 8th bit 31 30 29 28 to B 7 to 0 Class C 1 ra Net ID HostiD e ID Point Limitations when setting E7 1 s IP address ar
72. U C24 R2 R4 PRF computer link module Model A1SJ711D1 2 R4 ID interface module 80H Model A1SD71 S2 S7 positioning module 02H Model A1SD75P1 P2 P3 S3 positioning module Model A1S64TCRT BW S1 temperature adjustment module 20H 20H 20H 20H 20H 1 Only the memory area for memory card access can be read from written to when the memory card bank is switched by the I O signal Y10 Y11 between the PLC CPU and ADS59 S1 written 10 60 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Thinking regarding a special function module buffer memory Special function module buffer memory is configured of 1 address of 16 bits 1 word and is read from and written to using a FROM TO instruction between the PLC CPU and the special function module When the special function module buffer memory is read from or written to from a remote node via the E71 the read write is conducted using 1 address 8 bits 1 byte units The address hexadecimal specified by a remote node is calculated using the FROM TO in struction address as shown below Specified address hexadecimal FROM TO instruction address x 2 is made hexadecimal each module head address Example When the model AD61 high speed counter module FROM TO instruction address 1 preset value is specified Specified address FROM TO instruction address 1 x 2 Head address B2 2H 80H Following is an explanation of an example using the AD61 for the data forma
73. WSADATA As Integer Declare Function WSACleanup Lib wsock32 dll As Integer Declare Function WSAGetLastError Lib wsock32 d1ll As Integer t t Global Const SOCK_STREAM 1 Global Const SOCK_DGRAM 2 Global Const AF_INET 2 Global Const INADDR_ANY amp O0 amp Type in_addr s_addr As Long End Type APPENDICES MELSEC A e cp ie le e SS Type sockaddr_in sin_family As Integer sin_port As Integer sin_addr As in_addr Sin_zero As String 8 End Type d system call Declare Function bind Lib wsock32 dll ByVal s As Integer aname As sockaddr in ByVal anamelen As Integer As Integer Declare Function closesocket Lib wsock32 dil ByVal s As Integer As Integer Declare Function connect Lib wsock32 dll ByVal s As Integer aname As sockaddr_in ByVal anamelen As Integer As Integer Declare Function recv Lib wsock3Z2 dll ByVal s As Integer ByVal buf As String ByVal buflen As Integer ByVal flags As Integer As Integer Declare Function send Lib wsock32 dll ByVal s As Integer ByVal buf As String ByVal buflen As Integer ByVal flags As Integer As Integer Declare Function socket Lib wsock32 dll ByVal af As Integer ByVal stype As Integer ByVal protocol As Integer As Integer library Declare Function htonl Lib wsock32 dll ByVal hostlong As Long As Long Declare Function htons Lib wsock32 dll ByVal hostshort As Integer As Integer Declare Function ntoh
74. YO Y RST Y8 Connection No 1 and 2 close Close Transmission Reception Reception Transmission Open processing A i ror instruction ig Transmission nd cae ee bag Kesenin Fiii permit error 2 nd 1 g detection check 2 1 SET M21 Open impossible 1 RST M31 Close instruction permit 1 M21 K5 l T1 A time of 500ms is measured for Open Open reopen after close from a impossible wong remote node T1 IMmaMlMtMsMIsl RST n21 Open Open waiting impossible 4 1 nt fe A Ea NE eee ten ee ent tt og tig ee gr eg tg yen gt End processing program Refer to Items 5 3 1 l ke ye e e e e e u eee ae ia i ee se i el 2 The data exchange shown below can be conducted after setting of usage availability with the value stored in DO and D1 Random Fixed buffer exchange Read write data access buffer With procedure With procedure Without procedure Without procedure exchange in the PLC CPU tel hier Exchange disabled Exchange enabied Exchange enabled ale eta Exchange disabled Exchange enabled Exchange enabled 5 34 14 Connection No 1 Connection No 2 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 5 Exchange State Storage Area This section explains about the exchange state storage area where the initial processing state open processing state exchange state for each connection and error log information are stored Each processing result exchange state for e
75. are randomly set Word devices D R T C etc are written in 1 point units and the 40 Points devices and device No are randomly set Bit devices that monitor X Y M etc are registered in 1 point Monitor data z devices that monitor X Y M etc are registered in 16 point oh j e 9 pont 20 Words 320 Points _ registration 99 Word unit miii Word devices that monitor D R T C etc are registered in 1 l 20 Points point unit Monitor Bitunit 08H Device monitors for which monitor data registration was con Number of registrations ducted portion Extension file registers R are read in 1 point unit 256 Points Extension file registers R are written in 1 point unit 256 Points Extensi i i in 1 point uni Test Random write ension is registers R are written in 1 point unit and the block 40 Points No and device No are randomly set The extension fi i hat monitor re registered in 1 Monitor data registration ia SON ME ROSS ANE MONON ANE tedelelee 20 Points Extension file reg point unit ister Menio Monitors the extension file registers R that conduct the monitor data registration R 1 t th fil sters R that are di roct road eads in 1 point unit the extension file registers at are di 256 Points rectly set R i j i ion fil i h ee eads in 1 point unit the extension file registers R that are di 256 Points a eC set Special function Batchread read OEH Reads the contents of the special function
76. becomes 5BH The PLC No station does not exist The PLC No specified by a command is other than the station No specified Change the PLC No to the local station s FF or set station No using 10H PLC No error for the local station FF and the the link parameter and reconduct the MELSECNET link parameter settings exchange Exchange defect between the E71 and PLC CPU After a request from a remote node has been received normally by the E71 for Reconduct the exchange If an error PIA Mode error some reason noise etc normal ex niet sie n iae change cannot be conducted between DN aha i eee the E71 and the PLC CPU Se Functions Unit Error here is no buffer memory with an ex Chanae the contro procedure changeable special functions unit in the 9 x Special functions unit settin l l specified data contents or change the 12H error 3 location specified for the special func special functions unit installation posi tions unit No For example the loca tion has an O unit or an open slot in the location tion and reconduct exchange Sequence program program step No specification error A step No that exceeds the program capacity range set by the PLC CPU parameter has been specified Set a step No that is within the speci fied range or change the PLC CPU pa rameter contents and reconduct com munication Program step No specific
77. buffer exchange either with procedure or without procedure can be selected is conducted Example E71 Buffer memory TCP IP or UDP IP communication Connection No 1 Fixed buffer For reception Reception data Partner remote node No 2 Fixed buffer For transmission Peaner wan dala e When pair opening is set the subject connection No s fixed buffer and the next connection No s fixed buffer are paired When the connection No to be opened is 8 the connection No 8 s fixed buffer and the connection No 1 s fixed buffer are paired When pairing is set the next connection No side usage application setting ex change parameter setting and open processing open request signal is on are not necessary E71 conducts automatically The open end signal for the next connection No is turned on by the open process ing for the connection No that sets the pairing open e The fixed buffer usage application for the next connection No side is determined by tne fixed buffer usage application setting bO of the connection No side that sets the pairing open Poss cope ee Ol Setting buffer usage application SonrecioniNe cide thal seo tne pang one Next connection No side e The open processing image when pairing is set is shown in Item 5 4 4 e Set one of the following pairing open setting b7 setting values QO Pairing open not conducted default value 1 Pairing open conducted 5 PROCEDURES FOR
78. by the sequence program Transmission is ended when the transmission end signal XO when the fixed buffer is No 1 when a response is returned from the remote node after data transmission When exchanging without procedure Data is transmitted by the E71 to the remote node specified by the parameters when the transmission request signal YO to Y7 is turned on by the sequence program Transmission ends when the transmission end signal XO when the fixed buffer is No 1 is turned on after the data is transmitted When fixed buffer number 1 is used With procedure Without procedure Transmission request Transmission request signal YO signal YO Transmission normal Transmission normal end signal X0 end signal X0 g Q rab m O O 0 et ja ae gt ox QO 3 SPECIFICATIONS MELSEC A b When used as reception end check signal When exchanging with procedure The reception end signal X2 when the fixed buffer is number 2 is turned on after the E71 receives data from the remote node Aresponse is returned to the remote node when the reception end check signal YO to Y7 is turned on after the reception end signal X2 when the fixed buffer is number 2 is in the on state after check by the sequence program When exchanging without procedure The reception end signal X2 when the fixed buffer is No 2 is turned on after data is received to the E71 from the remote node Th
79. can be communi cated with a single initial processing 5VDC Internal consumption current A A1SJ71E71 B5 S3 Noise resistance level Voltage resistance Insulation resistance Power unit specifications for the E71 installed station AJ71E71 S3 250 9 84 x37 5 1 48 x1 19 4 69 External dimensions mmi in A1SJ71E71 B2 S3 130 5 12 x34 5 1 36 x93 6 3 69 A1SJ71E71 B5 S3 130 5 12 x34 5 1 36 x93 6 3 69 AJ71E71 S3 0 60 1 32 Hardware version products before B version 0 52 1 44 Hardware version products after C version A1SJ71E71 B2 S3 0 27 0 59 A18J71E71 B5 S3 0 27 0 59 Mass kg lb 3 SPECIFICATIONS MELSEC A The maximum distance between nodes and the segment legs are shown in the following diagram segment length Niode Transceiver N Terminator TE l Repeater x Repeater Segment length 1 O Q Mm Bua uawas Maximum distance between nodes 3 SPECIFICATIONS MELSEC A 3 3 Data Codes during Communication and Exchangeable Data Amount This section explains the data codes used when exchanging between the E71 and remote node or PLC CPU The data codes used during exchange are given below Between E71 and the remote node The data exchange function makes it possible to conduct exchange by selecting either binary code or ASCII code as shown in the table below Switching between binary code and
80. communication between the MELSEC A Series and QnA Series Programmable Logic Controller hereinafter PLC and personal computer the communication program on the personal computer side connected with Ethernet etc can be simplified The following sections describe the outline functions and data link functions of the basic communica tion support tool SWnD5F CSKP E hereinafter CSKP The programming methods on personal com puter side for reading writing data to the MELSEC PLC CPU using CSKP are also described For details on the CSKP refer to the CSKP manual Appendix 11 1 Outline of basic communication support tool This section shows the outline of CSKP The CSKP is installed into the personal computer and used Example Software structure diagram for Ethernet connection Personal computer Application program PLC CPU Data link FROM TO function CSKP System Various communication Call function Socket UDP 1 IP ICMP ARP IP ICMP ARP Ethernet Ethernet 1O0BASE5 1 OBASE2 1OBASES 1 OBASE2 Ethernet 1 The UDP IP communication for using CSKP will be planned in the future 2 Ample support of communication protocols The personal computer side user can easily access the PLC s CPU by designating the con nection type and communication request details using the following CSKP data link function arguments The user does not need to understand the communication syntax unique to the special function
81. communication channel ay mode MODE_DUMMY Dummy fixed to 1 Execute mdOpen and open line oret mdOpen chan mode amp path if oret 0 APPENDICES MELSEC A mode MODE DUMMY Dummy fixed to 1 Execute mdOpen and open line oret mdOpen chan mode amp path iff oret 0 f function fails return error orintf mdOpen error 04x n oret jelsef Continue process only when mdOpen succeeds Set mdReceive argument i stno STNO_ROGIC Logic station No oy deviyp DEVTYPE_D Device type D devno DEVNO_O Read device No O 1 i size SIZE_R_BYTES 2 poini 4 byte word device is 1 point 2 byte data 0 DATA_INITIAL Initialize read data area datal1 DATA_INITIAL Initialize read data area 2i Execute mdReceive and read Use path acquired with mdOpen oF a rret mdReceive path stno devtyp devno amp size amp data iff rret 0 f function fails return error T printf mdReceive error 04x n rret Jeise Display read data orintf dataO 4x n data Q printf datai 4x n data 1 Execute mdClose and close line Use path acquired with mdOpen cret mdClose path if cret 0 f function fails return error a Data display Data display of J i printf mdClose error 04x n cret APPENDICES MELSEC A Appendix 12 Ind
82. conducted because exchange enable during STOP is set Data exchange can be continued Random access buffer exchange and exchange of read write data in the PLC CPU are possible Change the setting to exchange prohibited during STOP Set the buffer memory address 1FOH to OOOOH Communication line close processing is conducted after the setting is changed to ex change prohibit during STOP because the open request signal Y8 is turned off 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A End processing is conducted because the initial request signal Y19 is turned off after the setting is changed to exchange prohibited during stop 8 Change the setting to exchange enable during STOP Set the buffer memory address 1FOH to 8001H 9 The initial request signal Y19 is turned on to reconduct initial processing E71 initial pro cessing is conducted The open request signal Y8 is turned on to reconduct open processing Open processing of the communication line with the remote node is conducted Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 3 When a close request is received from the partner remote node when data is being exchange because the setting allows data exchange through connection No 1 while the PLC CPU is stopped Station installed in E71 PLC CPU status RUN STOP RUN i
83. data word error eS 3534 ASCII conversion error For details regarding error codes refer to Chapter 13 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 3 Programming This section explains programming method for using the fixed buffer to conduct exchange between the E71 and a remote node with procedures 6 3 1 Programming Creation Precautions 1 Fixed buffer exchange can only be conducted when the open request signal Y8 to YF and the open end of signal X10 to X17 is turned ON Initial processing and communication line open orocessing must be completed Refer to Chapter 5 2 The parameter settings are entered into the E71 when the open request signal Y8 to YF turns from OFF to ON during boot up Except for those cases shown in the following diagram 3 the control contents cannot be changed even if the parameter contents are written over while the open end signal X10 to X17 is ON 3 When using a connection opened by UDP the exchange parameters setting area s exchange address setting area setting values can be changed before data is transmitted or received and the exchange partner remote node can be switched Therefore data can be transmitted in order to multiple remote nodes so to prevent exchange trouble from occurring switch the partner remote node and conduct transmission and reception 4 The data link that is specified stored in the buffer memory when exchange with procedures is conducted uses units of o
84. device No Specified device No 1 contents Specified device No contents End code Subheader Example When the contents of extension file register R70 to 72 for the PLC CPU installed in the E71 are read Command remote node gt E771 3 BEF FIO O 0 ANS 2 2 0 0 0 Oe Oe Oa 6 0 SEG 0 33k 42414 E ee 464 30 30H 30r 41H 35H 32H 324 30H 30H 30H 30 SOF 304 30K 34h 36H 3CH 33H 304 30H y TJ 3 points OF 2500s Local station Response E71 remote node amp BjO O 2 3 4 8 7 6 5O 3 F 424 42r 130 30 a 32 33 4 34H 38H 37h 364 35H 30H He 33H 46 R72 contents O13Fx R71 contents 8765H R70 contents 12344 10 56 MELSEC A 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A ESj Extension file register direct write This section explains the command response format when executing an extension file register direct write a When exchanging using binary code Command format Specified numper of devices x 2 12 oytes a cn re re i i ame pi Finai device No data for the specitied device No _ _ Specified device No 1 data Specified device No data Number of devices 1 to 256 Device No for details regarding the specification method refer to item 10 2 1 ACPI monitor timer unit 250 ms PLC No Subheader Set to OOH when specifying the number of devices as 256
85. device No on off specification e Number of device points 1 to 256 points Head device No For details regarding the specification method refer to Item 12 2 1 ACPU maniter timer unit 250ms S FLONO gt Subheader 1 Set to 3030 when specifying the number of device points as 256 points 2 1 byte of dummy data 30 is added to the end of the write data when the number of specified device points is odd For example when 3 points are read the dummy data GO is added to the end Response format End code Subheader Example When writing the M50 to M61 on off data to the PLC CPU installed in E71 Command remote node E71 Local station 2500ms OFF OFF Response E71 remote node 10 22 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 5 Word Unit Batch Write This section explains the command response format when conducting word device memory batch write and bit device memory 16 unit batch write 4 fj When exchanging using binary code Command format Number of specified device pointsx2 12 bytes Len SE I IY For bit devices 16 point portion on of specification trom the final device No in the specified device Nos For word devices Final device No data in the specified device Nos Point 17 to point 32 on off specification in the specified device Nos For word devices Specified head device No
86. ducted in one communication Bit unit Bit devices X Y M etc are 256 points read in 1 point units Bit devices X Y M etc are 128 words Command response classification Processing description Batch read l Nadiri read in 16 point units 2048 points Word devices D R T C etc l l 256 points are read in 1 points units Bit unit Bit devices X Y M etc are 256 points written to in 1 point units Batch write Bit devices X T M etc are 40 words written to in 16 point units 640 points Word unit 034 Word devices D R T C etc are read in 1 points units The device and device No for Bit unit Od bit devices x Y M etc are ran domly specified as set reset in 1 points units The device and device No for bit devices X Y M etc are ran 40 words domly specified as set reset in 640 points 16 points units The device and device No of word devices D R T C etc 256 points 80 points Test random write Word unit O54 are randomly specified as write P O in 1 point units The bit devices to be monitored Bit unit 06 X Y M etc are set in 1 point 40 points units The bit devices to be monitored Monitor data 20 words Y M ete ti registration an VERS VATS SONATO DOIN I 7456 points Word unit 07H The word devices to be moni tored D R
87. eres 80H 41H 42H 43H Eee Physical address a a address 1200H 408 f OH 0 1214H E 14H 20 1215H 4629 56H 78H 15H 21 1216H 4630 94H BCH 16H 22 121DH 4637 SAH BCH 1DH 29 to 1DFFH 7679 10 words to 17FFH 6143 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 3 Programming This section explains the programming for conducting exchange between the E71 and a remote node using the random access buffer 8 3 1 Program Creation Precautions 1 Exchange with a remote node using the random access buffer is conducted asynchronously with the PLC CPU program When synchronous exchange is required conduct exchange by adding a free protocol between the partner remote node to which exchange will be conducted and the PLC CPU 2 For the random access buffer the address specified by the remote node and the address speci fied by the sequence program s FROM TO commands differ so caution is required Phys cal address Butter memory Logical address OS memory 200H 512 E a Fixed buffer A a w No 1 to No8 11FFH 4607 6FFH 307 1 eee id 6k words 1200H 4608 Random access buffer Random access buffer ET a to channel 0 side channel 1 side i 1DFFH 7679 first half 3k words J last half 3k words a on 1 Random access buffer address specified by the remote node The random access buffer can be read from or written to as a 6k word continuous area e The random access buff
88. exchange and reading and writing from the sequence CPU exchange d The open end signal X10 to X17 ON OFF can be checked using the LED display BUF1 to BUF8 on the front of the E71 e The open end signal X10 to X17 is turned off when the open request signal is tumed off by the sequence program In the following case the open end signal X10 to X17 is not turned off Refer to Item 5 4 3 O When an error is generated D When CLOSE or ABORT commands are received from the exchange remote node 3 When a response monitor timer error occurs O When an error occurs with an existence check function Open end signal X10 to X17 EJ Open error detection signal X18 a When the connection open request signal Y8 to YF is turned on by the sequence program the exchange parameters are checked and if an error is detected the open error detection signal is turned on b The open error detection signal is turned on when the open request signal Y8 to YF is turned on and open processing is not performed normally c The open error detection signal is turned on when the TCP or ULP time out error is gener ated when the E71 main unit s DIP switch SW1 line processing selection during TCP time out error is turned off d When the open error detection signal is on the error contents of the connection for which an error has occurred can be checked by reading the error codes such as open error code storage area buffer memory
89. far as possible If this unit is installed be sure to give sufficient consideration to the current capac ity of the main base unit s power unit and the extension cable voltage drop when selecting the extension cable For details to the usable CPU unit s users manual Refer to 1 b The E71 can be installed in the PLC CPU based unit and the MELSECNET 10 remote station It cannot be installed in MELSECNET li and MELSECNET B remote stations 2 SYSTEM CONFIGURATION MELSEC A Accessible PLC This shows the remote station PLC that can be accessed via an E771 installable station from a remote node Each accessible CPU unit has a unit that includes MELSECNET link functions Example In the case of the ASACPU the ASACPUP21 and ASACPUR21 can be accessed PLC CPU PLC CPUs that can be accessed from remote nodes can also be accessed via data link systems and network systems For access refer to Item 9 and Item 0 Al AIN A1S S1 A1SH A1SJH A2N S1 A2A S1 A2U S1 A2SH S1 A2AS S1 P A2CJ A3 ASN A3U A4U Q2AS S1 Q2ASH S1 Q3A Q4AR 2 Remote station Shows the remote stations that can be accessed from a remote node via the data link system and network system The buffer memories of the special functions units of the remote stations that are connected by the link units that are named below can be accessed MELSECNET 10 AJ72QLP25 AJ72QBR15 A1SJ72QLP25 A1SJ72QBR15 AJ72LP25 G AJ72BR15 AJ72LR25 MELSECNET Il AJ72P25 AJ72
90. for data transmission bo ee procedures Communication using random access buffer Refer to Chapter 8 Data is read and written from to the random access buffer of E71 Read write communication with respect to the data within the PLC CPU Refer to 3 Chapters 9 and 10 Data is read and written from to the device memory of PLC CPU When non procedural fixed buffer communication is specified during the open processing When bit 9 of usage setting communication parameter is on non procedural e Communication transmission or reception can be performed only by using the fixed buffer Refer to Chapter 7 e The number of fixed buffers used and the number of communication lines required for data transmission and reception are the same as those required for procedural fixed buffer communication 2 When exchange enable is set using Exchange Specification During STOP using the E71 buffer memory address 496 when the open request signal Y8 to YF and the initial request signal Y19 are off the following data exchange can be continued e Exchange using the random access buffer e Exchange of data read write in the PLC CPU Continue data exchange in accordance with Item 5 6 5 3 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 2 Connecting and Disconnecting Communication Lines The arrangement between the nodes makes it necessary when beginning data exchange to connect a communication line between exchange
91. for the specified block No a aren eee Specified device No contents for the specified block No End code Subheader Example When the contents of extension file register No 2 block s R70 to 72 for the PLC CPU installed in the E71 are read Command remote node gt E71 Response E71 remote node eye A Local 2500ms R70 3 points station Brock No 2 Block No 2 s R72 contents O13FH Block No 2 s R71 contents 8765 Block No 2 s R70 contents 72344 10 42 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format 14 words E amen a d Number of devices 1 to 256 Device No for details regarding the specification method refer to Item 10 2 1 a ale ere O EEE E Block No specification for details refer to item 10 3 1 ACPU monitor timer unit 250 ms PLC No gt Subheader Set to OOK when specifying the number of devices as 256 Response format Specified number of devices x 2 2 bytes Final device No contents for the specified block No s specified device No i Specified device No 1 contents for the specified block No L_____ Specified device No contents for the specified block No amp End code Subheader Example When the contents of extension file register No 2 block s R70 to 72 for the PLC CPU installed in the E71 are read
92. function can be executed regardless of whether or not the data commu nication function for when the PLC CPU is stopped is used 10 69 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 5 2 Remote RUN STOP a Remote RUN STOP control contents a The PLC CPU status from the remote RUN STOP from the remote node or the conditions of the RUN STOP key switch on the front of the PLC CPU are shown in the following table iti Specification contents rom the remote node The PLC CPU will not enter the RUN status when remote RUN is conducted via local station E71 when the corresponding PLC CPU has already been put in the remote STOP status via a special function module such as another E71 2 When conducting a remote RUN whether or not to RUN is determined after the data memory is cleared by the remote relay M9016 and M9017 status oy 17 Data memory status Run without conducting clear OFF ON Clear other than the latch range specified by the parameter However the link X image is not cleared ON OFF RUN after clearing all When conducting remote RUN as described in the above table and the data memory is not cleared it is necessary to reset off the special relay M9016 and M9017 Point When the power supply has been turned from off to on or the PLC CPU has been reset after a remote RUN STOP has been conducted from a remote node delete the remote information 10 70 10 WHEN CONDUC
93. in terms of safety and control system please consult with Mitsubishi and discuss the required specifications MODEL 13J856 _SHINA 3596 0006 MEE MODEL Ethernet U S E ga MITSUBISHI ELECTRIC CORPORATION HEAD OFFICE MITSUBISHI DENKI BLOG MARUNOUCHI TOKYO 100 8310 TELEX J24532 CABLE MELCO TOKYO NAGOYA WORKS 1 14 YADA MINAMI 5 HIGASHI KU NAGOYA JAPAN Specifications subject to change without notice Printed in Japan on recycled paper
94. is operating normally when exchange with the partner remote node for its connection open processing as ended has not been conducted for a specific period of time 2 Refer to Item 5 3 1 e Specify one of the following specification values O Does not check existence no check default value 1 Checks existence has check When existence check is selected the E71 conducts an existence check for the destination at each specified time interval to check whether the connec tion destination partner destination is operating correctly The E71 will con duct the following process if an error occurs during the existence check e Force closes the line and stores the error information in the buffer memory error jog area address 169 to 179 e The open error detection signal X18 is turned on when the open end sig nal X10 to X17 is turned off e When changing the exchange partner remote node during the middle of an opera tion at the UDP IP connection make the setting O no existence check When 1 check existence is set the E71 conducts an existence check on the first exchange partner after UDP IP open An existence check is not performed for exchange partners after the change 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 3 Pairing open setting b7 e Sets whether one of the partner remote nodes ports is connected when the E71 resumption connection and transmission connection are made into one pair when fixed
95. is read from the PLC CPU using a FROM command etc The receive end check signal YO to Y7 is tumed on after the receive data is read using the FROM command etc 4 The receive end signal is automatically turned off when the receive end check signal is turned on The receive end signal is not turned on when following data is transmitted from a re mote node When the fixed buffer number 2 is used With procedure Without procedure Reception end Reception end signa X2 signal X2 Receive end check Receive end check signal Y1 signal Yt Response transmission End PURBLULUOD geg 3 SPECIFICATIONS MELSEC A 2 Transmission error detection signal or reception error detection signal X1 X3 X5 X7 X9 XB XD XF This signal is used when fixed buffer exchange is performed This signal is not used for random access buffer exchange or exchange when reading or writing of data inside the PLC CPU is conducted When the correspongind fixed buffer is used for transmission use it as the transmission error detection signal When the corresponding fixed buffer is used for reception use it as the reception error detection signal a When used as the transmission error detection signa When exchanging with procedure The transmit error detection signal is turned on when the response from the remote node is not retumed within the response monitor time Refer to Item 5 3 1 after data is transmitted from th
96. is turned off b When used as the reception error detection signal G When close processing is performed for the corresponding connection upon receiv ing Close Abort RST from the partner remote node before the completion of the previous data reception processing the reception error detection signal may turn on When Close Abort RST is received from the partner remote node after the comple tion of data reception processing the reception error detection signal does not turn on Ifthe reception error detection signal is on when close processing is performed for the corresponding connection according to 1 above turn off the open request signal Y8 to YF after turning off the reception completion confirmation signal at the timing shown in Remarks in of Item 5 4 3 3 13 3 SPECIFICATIONS MELSEC A EJ Open end signal X10 to X17 a When the connection open request signal Y8 to YF is turned on by the sequence program the exchange parameters are checked and open processing is executed Here if open processing is performed normally the open end signal X10 to X17 is turned on b When the open request signal is turned on and open processing is not performed normally the open error detection signal X18 is turned on In this case the open end signal is not turned on c Only data can be exchanged with the remote node for which the open end signal X10 to X17 is turned on fixed buffer exchange random access buffer
97. link function include file LREREEERAEREE RRR REA AES CE RE RS RO Re AE AK ERS Constant declaration KKK RK kk k k kk kx kx k x k kk k define CHSN_ETHERNET 61 Ethernet communication channel common for B7i OB71 define MODE_DUMMY 1 Dummy fixed to 1 E define STNO_ROGIC 0 Logic station No ay define DEVTYPE_D 13 Device type D a define DEVNO_O 0 Read top device No ee define SIZE_R_BYTES 4 No of read data bytes mi define DATA_INITIAL 0 Read area initial value ie OOOO II IO II IOI IO IOI IO IO III TO IO The logic station No 0 PLC data is read The logic station No is preset with the Ethernet utility EERE HK KK KERKEKK EEE KEKE KEE EKER KEKE EKER ERE KKKEKRKKEKEKEEKEKE void main Declare mdOpen argument ai long path Path save function a i short chan Communication line channel No shortmode Dummy fixed to 1 pore shortoret mdOpen function return value sal Declare mdReceive argument ry shortstno Station No eer shortdevtyp Device type aei shot devno Read top device No Ei short size No of read data bytes i short data 2 Read data buffer short rret mdReceive function return value Declare mdClose argument short cret mdClose function return value ay Declare mdOpen argument setting chan CHSN_ETHERNET Ethernet
98. module buffer memory 256 Bytes 128 Words Module cc a Writes the data to the special function module buffer memory 256 Bytes 128 Words 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A ____Subjeet PLE GPUs tet san Execute Commande rr PLC CPUs that can Subject PLC CPUs that canExecuteCommands sd Commands AJ72 QLP Q2A PLC CPU State Q2AS R25 LP25 Q2ASH During RUN Reference 1 T i Item During PRESS STOP H Lea lt See eee a ee item 10 2 2 Pics a ee ee NA aee e a ce Os gt ee oe Item 10 2 4 Beko ee ee ees Se eee ee ee eoe Item 10 2 7 Ee ee ee ef fof oe a ee m Hro sssaaa eo TSE E TE E oe irae Item 10 3 6 Ce ee Se aa Sa ss z tem 10 3 7 Ae ee ee a pee OO l O ea e aaa SS ee a a a a Men 10 43 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A Number of Processes Description of Processing Performed For 1 Ex change Reads the main sequence program 256 Steps Main OAH Reads the T C set value used by the main sequence program 256 Points Batch set value read Reads the sub sequence program 256 Steps ram Sub ae OBH Reads the T C set value used by the sub sequence program 256 Points set a uen Soauence Writes the main sequence program 256 Steps program re OCH Writes the T C set value used by the main sequence program 256 Points Batch set Ee Writes the sub sequence program 256 Steps an ODH Writes the T C set value used by the sub s
99. module on the PLC side The connection procedure can be changed just by changing part of the program mdOpen argument s communication channel No in the program created by the user Once created the user program can be used effectively APPENDICES MELSEC A DOS V personal computer PC 9800 Series personal computer The CSKP E generates a communication syntax matching the communication request a details from the personal computer side user following the connection procedure between MELSEC data link function the personal computer and PLC It then processes the communication RS 232 C Ethernet RS 232 C 422 CeLSECNETI MELSECNET 10 conversion pitti Care aa j aol sot a 0 i n l a 1 a Computer link connection PLC CPU connection MELSECNET 10 connection MELSECNET I connection 3 Data link functions dedicated for communicating data with PLC are supported e Functions required for communicating data with the PLC such as communication line open close and device read write are prepared as data link functions e Various communication programs can be created easily so development of the commu nication system using Ethernet serial communication etc with the PLC side is easily initializes and opens the designated communication tine channel mdClose Closes the designated communication line channel Writes the data in a batch to the designated device Reads the data in a batch from the designated d
100. node the E71 will send the data written in the aon access buffer to the node from which the request was received as a response Point 1 With random access buffer exchange exchange c can Jay B conducted with the remote node for which the E71 s open end signal X10 to X17 is on 2 Random access buffer exchange i is conducted asynchronously with the sequence program lt When synchronous exchange i is required conduct exchange by putting a free protocol be tween the partner remote node to which communication is being done and the PLC CPU 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 1 2 Control Method When there is a Write Request from a Remote Node This section explains the control mode when data is written by the remote node to the E71 s random access buffer ACK TCP only PUBWLUOD elep IHM ee ee E71 Random access buffer ss ewe ee ewe wee Nn ws S ewe ee ew ewe ee eee ee eB ew ee ee eee ewewew ew eee et eee ew Bee Bk w me ewe ew ewe ezew BZ ee ene eww eN we ete we ew eT puewwoo woy Buisn peey PLC CPU e wen er eee ew eww ee Be ewe eB ew Mw ee ee Be ew eB eee eB ee ee ew Boe ee ee me ewe eee ae ae ee eT 1 Data is written from the remote node to the E71 s random access buffer When the E71 receives data from the remote node a response is returned to the remote node that conducted the transmission 3 The data received by the random access buffer using th
101. node IP address in the buffer memory when a data exchange error occurs 2 This error history infoemation makes it easy to analyze the cause of data exchange troble Router relay exchange Existence error Storage check 1 Conducts a hardware check including E71 transmission and recep tion circuits O Executable x Not executable 1 Procedures must be created using the sequence program 3 4 2 Relationship between Communication Remote Node and Added Func tions for Each Communication Function Shows what partner equipment can be exchanged with and what added functions can be used for each exchange function Table 3 6 Relation between Exchange Partner Nodes and Added Functions Communication For Added Functions mat with Exchange Simulta Se Exchange Partner Nodes neous Paring Exs Dastence when PLC CPU Exchange Functions TCP IP UDP IP es 2 1 sia anes stopped With procedure O O dure Random access buffer exchange Reading and writing Data in the PLC CPU g 2 9 3 tions 1 For information regarding pairing exchange please refer to Item 5 4 1 b and Item 5 4 4 2 Only valid during UDPs without procedure exchange 3 Only valid with nodes opened by the sequence program 3 SPECIFICATIONS MELSEC A 3 5 Send and Receive Processing 3 5 1 Message Division and Data Length The message exchanged between the E71 and the remote node is sometimes allocated by the local node or
102. not conducted because the initial request signal Y19 and open request signal Y8 are turned on Data exchange can be continued 6 Communication circuit close processing is conducted because the open request signal Y8 turns off after the setting is changed to exchange prohibited during STOP QD End processing is conducted when the initial request signal 19 turns off after the setting is changed to exchange prohibited during STOP gt FIXED BUFFER EXCHANGE SECTION The fixed buffer exchange section explains the with procedure data exchange methods and the without procedure data exchange method when data is exchanged with remote node external equipment tnat uses the Ethernet interface module s fixed buffer and with the PLC CPU Fixed buffer exchange is begun after initial processing and open processing that is described in Chapter 5 connects the communication line In addition conduct close processing and end processing during data exchange end on the sub ject communication line When conducting fixed buffer exchange with procedures read Chapter 6 When conducting fixed buffer exchange without procedures read Chapter 7 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 FIXED BUFFER EXCHANGE WITH PROCEDURE This section explains the method used to conduct exchange with a remote node with procedures using the E7 1 s fixed buffer 6 1 Control Format This section explains the control format used for fixed buffer exc
103. of value units during default 2s can be changed to 500 ms Timer value setting value x 2 s or 500 ms EH Local station E71 s IP address Default Value OH cs sssscseeseseee Address OH to 1H 0 to 1 a The local station E71 s IP address is set following the standard IP address Refer to Item 11 3 AO Setit so that the local station E71 and the partner remote node to which exchange is being conducted are set to the same class net ID In the following example the E71 and the partner remote node IP address class net ID is set at C00001 H The host ID can be freely set to any No other than OOH and FFH 2 When the IP address net ID s of the local station E71 and the partner remote node to which exchange is being conducted are not the same a setting for using the router relay function is required Refer to Chapter 12 In the following example the setting values parameters used for the router relay function when exchange is conducted between the E71 and the remote node are set in the local station E71 Example When the local station E71 s IP address is class C upper level displayed in hexadecimal numbers lower stage displayed in decimal numbers C0 00 01 FEH 1 C0 00 01 66H 192 00 01 254 192 00 01 102 C0 00 01 65H 192 00 01 101 C0 00 01 01H 192 00 01 01 Remote node C0 00 02 63H Remote node 192 00 02 99 1 71 s IP address C 0 0o 0 0 1 F E
104. on the front of E71 eeren Set only for AUJ71E71 S3 Setting not necessary for A1SJ71E71 B2 B5 S3 refer to tem 4 3 2 Set using the exchange condition setting switch ee Refer to Item 4 3 2 on the tront of the E71 Perform a seif diagnostic test RAM Test ROM Test Sef Wrap Test P Z Refer to ltem 4 6 Set the operation mode setting switch to 0 on line and reset the sequence for CPU Perform initial processing g Perform open processng lt P Refer to Items 5 2 to 5 5 EERDE Refer to ltem 4 3 1 Se eesse Refer to item 4 8 and Item 10 7 Jse the sequence program to set the E7 1 parameters and use a simple check program to check that the data is transmitted and received normaliy ooer Fixed buffer exchange Chapters 6 and 7 Random access buffer exchange Chapter 8 Reading and writing data in PLC CPU Chapters 9 and 10 e Do not touch the terminals while the electricity is on lt I gt DANGER Do inals e electricity is Doing so could cause erroneous operation e Make sure to switch all phases of the external power supply off before cleaning or re tightening screws If you do not switch off the external power supply it will cause failure or erroneous opera tion of the module lf the screws are loose it may result in fallout short circuits or erroneous operation Tightening the screws too far may cause damage to the screws and or the module resul
105. printf n Transmission data n s n s_buf length recv socketno r_buf BUF_SIZE 0 Response data reception if length SOCKET_ERROR Sockerror ERROR_RECEIVE Error processing return SOCK_NG r_buf length 0 Set NULL for the tail of the reception printf n Reception data ns n xr_buf l te DO to D4 batch read request strcpy s_buf O1LFFO000A4420000000000500 length strien s_buf if send socketno s_buf length 0 SOCKET_ERROR Data transmission Sockerror ERROR_SEND Error processing return SOCK_NG printf n Transmission data n ts n s_buf length recv socketno r_buf BUF_SIZE 0 Response data reception if length SOCKET_ERROR Sockerror ERROR_RECEIVE Error processing return SOCK_NG r_buf length 0 Set NULL for the tail of the reception APPENDICES MELSEC A printf n Reception data nts n r_buf if shutdown socketno 2 SOCK_OK Transmission reception prohibit processing Sockerror ERROR_SHUTDOWN BExrror processing return SOCK_NG Close processing if closesocket socketno SOCK_OK Sockerror ERROR_CLOSE Error processing return SOCK_NG Closeflag FLAG_OFF Connection end flag off WSACleanup Winsock DLL Release printf nAdJ_test End n n Ended normally n printf Program ends Push any key n Dmykeyin getchar Key input wait return SOCK_OK void Sockerror
106. processing can be conducted without procedure for data trans mission from the PLC CPU and data reception from a remote node 1 The exchange processing data flow is shown below E71 Fixed buffer TO command PLC CPU FROM command External equipment QE71 2 Data exchange can be conducted for remote nodes connected in the Ethernet by the E71 and for remote nodes connected by router relay functions Refer to Chapter 12 As shown in the diagram on the following page the fixed buffers No 1 to No 8 are used to set the remote terminals to which exchange will be conducted and the usage availability for transmission reception without procedure with procedure etc to be opened in the E71 s communication line Refer to Item 5 5 and to set the exchange partners for the buffers O The parameter settings fixed buffer exchange partner setting when TCP IP is used is valid when the E71 s open end signa turns from OFF to ON during boot up The exchange partner cannot be changed while the open end signal is ON 7 1 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE 2 The fixed filed exchange partner can be changed after MELSEC A open processing when UDP IP is used The exchange parameter s remote node IP address and remote node port No can be changed but the local station E71 s port No cannot be changed Example Fixed buffer No 1 Transmission for remote node 1 No 2 Reception for remote node 1 No
107. relay and the special regis ter refer to the ACPU programming manual 4 When reading writing file registers to and from the PLC CPU that uses extension file registers use the commands explained in Item 10 3 Extension File Register Reading Writing When using the extension file registers there are times when correct reading and writing cannot be done when processing file registers using device batch read and write 5 Reading writing to the ANUCPU and QnACPU can be done in the AnACPU device range 10 14 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 2 Bit Unit Batch Read This section explains the command response format when conducting bit device memory batch read EN When exchanging using binary code Command format 12 bytes ay R rt a lL Number of device points 1 to 256 points Head device No For details regarding the specification method refer to Item 10 2 1 ACPU monitor timer unit 250ms PLC No Subheader Set to 004 when specifying the number of device points as 256 points Response format Number at specified device points 2 2 bytes ee ee ee eee a ee l w ie ba asi anton aiaa ant bam a Da Last cevice No on off setting for the specified device No Specified head devce No is ON 4 on oif specification OFF 0 Specifiec head device No on off specification End code Subheader Example When reading the M100 to M111 on o
108. required for setting when E71 open processing is conducted when E71 functions are used refer to Point in Item 3 7 2 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A Exchange instruction area during STOP default value 0H E A N E A E A A EE E E Address 1F0H 496 a This is the setting that is used to continus the next data exchange for the E71 from the next remote nodes even when the PLC CPU of the station installed in 71 is in the STOP status and the E71 open request signals Y8 to YF and initial request signal Y19 are off e Random access buffer exchange e Exchange of read write data in the PLC CPU b This specification is conducted using the communication line unit and the setting value can be changed even after communication line open processing Use the system specifi cations to set the exchange enable prohibit during STOP c Conduct the setting to this specification area continuing data exchange and reopen pro cessing in accordance with Item 5 6 d The setting value is specified as follows Bit location 615614 b8 b7 b6 b5 b4 b3 b2 bi a Open request signal i YF connection No 8 Open request signal Y8 connection No 1 0 When the open request signal Y8 to YF is off exchange is prohibited during STOP 1 When the open request signal 8 to YF is off exchange is enabled during STOP Initial request signal C When the initial request signal 19 is off exchange is prohibited dur
109. scan time Access to the E71 and PLC CPU is processed once for each request for each END processing when the PLC CPU is running when a request is received from the E71 Therefore this will increase the scan time processing time For information regarding the PLC CPU interrupt time required for communication between the E71 and the PLC CPU refer to Appendix 3 2 Simultaneous access to the PLC CPU Only one request is processed for END processing by the PLC CPU When the same QnACPU is accessed at the same time from a unit and the GPP function the access is made to wait until other processing is completed so the number of scans required for the processing is increased Placing COM commands in the sequence program will increase the COM command s execution time scan time making it possible to process multiple accesses within one scan When set to the PLC System Setting of the QnACPU parameter of the station installed in the E71 If the PS system settings general data processing setting is conducted the QnACPU wili process the requests for general data processing settings using END processing Example If the PLC system setting general data processing setting is 4 the QnACPU can process all of a maximum of 4 access requests from units and GPP functions during the scan s END processing time In addition putting in COM commands increases the COM command execution time s scan time making it possible for the QnACPU to
110. so that the subnet ID and the net ID are handled as the same thing Specify the values in the following table for subnet masks when a subnet is not used c If a subnet mask field value where all of the local station net IDs cannot be masked is specified all of the net IDs will automatically be given masked values Example When the Local Station is Ciass B Following shows an example specification to the subnet mask field and the corresponding actual subnet mask s value Refer to Item 11 3 for the alloca tion of class B IP address TO mask all net IDs subnet mask field of FFFFOOOOH or higher is required d When setting subnet masks perform the following settings besides the setting for the subnet mask setting area e Use router relay function setting in the special function settings address 2 e Settings for the router relay function address 450 to 472 11 3 11 WHEN SETTING A SUBNET MASK MELSEC A 11 3 Ethernet IP Address This section explains in summary the Ethernet IP address and the classes net ID and host ID it contains EN Nodes connected to the Ethernet have both a fixed Ethernet address and a voluntary IP address for just that node Users do not need to be aware of the Ethernet address because it is handled by the ARP Address Resolution Protocol The IP address shows the address on the network for each node connected to the Ethernet so the user must remember this D The
111. specifications The specifications given in the catalogs manuals or technical documents are subject to change without prior notice 6 Product application 1 in using the Mitsubishi MELSEC programmable logic controller the usage conditions shall be that the application will not lead to a major accident even if any problem or fault should occur in the programmable logic controller device and that backup and fail safe functions are systematically provided outside of the device for any problem or fault 2 The Mitsubishi general purpose programmable logic controller has been designed and manufactured for applications in general industries etc Thus applications in which the public could be affected such as in nuclear power plants and other power plants operated by respective power companies and applications in which a special quality assurance system is required such as for Railway companies or National Defense purposes shall be excluded from the programmable logic controller applications Note that even with these applications if the user approves that the application is to be limited and a special quality is not required application shall be possible When considering use in aircraft medical applications railways incineration and fuel devices manned transport devices equipment for recreation and amusement and safety devices in which human life or assets could be greatly affected and for which a particularly high reliability is required
112. switch 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A ME2 N2 FROM HO K1536 D500 K1 The reception data is read to D501 Butter CHO Exchange Reception to when the end of the data length ven or data length is reached when the reception end signa is turned ON D500 K2 D16 Reception Usable data length availability setting D16 D17 Z2 Usable availability setting FROM HO K1537 2501 K0Z2 Reception data SET Y1 Reception end check 2 RST HE2 Bufter CHO switching 2 X3 m2 l FROMP HO K104 D110 Kt Reads an error code when a Reception Exchange Reception reception error occurs error possible error code 2 detection 2 2 SET Yt Reception end check 2 Y1 N2 pe fr Y1 Reception Reception Reception Reception Reception end 2 error end possible ane detection check 2 check 2 2 2 When the I O control method of the PLC CPU of the station installed in the E71 is the refresh method and a fixed buffer read write is performed after the buffer memory channel switching signal Y001C is switched from on off off gt on a read write must be performed after the channel switching signal YO01C is output to the E71 Output the channe switching signal YO01C to the E71 using the tail s 1 of Item 3 6 2 RANDOM ACCESS BUFFER EXCHANGE SECTION The random access buffer exchange section explains the method for exchanging data between the remote node s external equipment and the PLC CPU using the Ethernet in
113. t i a eee a a 2 command etc io oi 1 Exchange parameter setting area Interna processing 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A ag g Initial processing is conducted by the initial request signal Y19 Initial normal end signal X19 turns on Refer to Item 5 3 The TO command etc causes the sequence program to write the setting values param eters in the buffer memory exchange parameter settings area The open request signal Y8 is turned on by the sequence program The E71 executes the open processing 1 For TCP For active open Open request SYN is transmitted For passive open An open request from the partner remote node is waited For UDP Executes internal processing The open end signal X10 is turned on when the open processing internal processing is normal end The open error code is stored in the buffer memory and the open error detection signal X18 is turned on when the open processing internal processing is error end The open end signal X10 does not turn on 2 When the open request signal is turned OFF while an open error is being generated the open error detection signal will be turned OFF if no open errors are generated in other line connections If the open request signal Y8 to YF is off for all connections in which an open error is currently occurring the open error detection signal X18 is tumed off
114. that is instalied in the E71 Command remote node E71 Response E71 remote node wA a ey nein anand Local 2500ms Station No 3 block s R28 contents S 12344 No 2 block s R15 contents E56DF 10 51 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format 2 words Eee a P BAe aaia San Se ASNT SY a ACPU monitor timer unit 250 ms PLC No Subheader Response format Number of registered devicesx2 2 words nk ea ee aae alaaalllllllllllllll ll llMlMMMlM MMMMMM E een E mi ed SS ey N Final registered device No contents for monitor data registration Second registered device No contents for monitor data registration First registered device No contents for monitor data registration End code Subheader Example When No 2 block s R15 and No 3 block s R28 are set using monitor data registration for the PLC CPU that is installed in the E71 Command remote node gt E71 Response E71 remote node 1 BIF F 0 0 A 9 B10 OJE 5 6 Dit 2 3 4 Str 42 464 4630H 30 30 41H 39H 424130 30H45 35 36 44nj31H 32H 33H 34 conan Vanina a pummel 1BH Loca station 2500ms Ne 2 block s No 3 block s RiScontents R28 contents E56D 12344 10 52 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 7 Extension File Register Direct Read Write see SS SS Ss SSS SSS S
115. that is not set in the buffer memory addresses 18H to 4FH 24 to 79 the E71 will ignore the reception data 1 During TCP IP unpassive open data is transmitted to and received from the remote nodes stored in the subject area for the buffer memory addresses 59H to A8H 89 to 168 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 1 1 Transmission Control Method This section explains about the control method when data is transmitted to the remote node by the E71 using an example where the fixed buffer No 1 s data is transmitted to a remote node ee de ee ee indie Transmit request PLO CPU signal YO Transmission normal end signal XO o EENDE EB AET E Bs ogo ee A A EEEE 2 3 3 w gt a j Initial processing end open processing end X E71 Fixed buffer No 1 6 eg UOISSILUSUB puewwon gt A suods ey gt O x The E71 initial processing is conducted Refer to Items 5 2 to 5 3 Line open processing with a remote node is conducted Refer to Item 5 4 2 The sequence program s TO command writes the transmission data length and transmission data in the E7 1 s fixed buffer The transmission data length is written to the subject fixed buffer s first address 512 The trans mission data is written to the subject fixed buffer s first address 1 The following diagram shows an example of a 100 word transmission using fixed buffer No 1 Z200H 5 12 T
116. the IP address and retransmit the commana Make the communication protocol TCP UDP with the exchange remote node match For details refer io Item 5 4 13 TROUBLESHOOTING ls the command IP address specification correct the command YES Are the command format Specifications such as command times NO Correct the command format while referring device specification address to tems 10 1 through 10 7 specification etc correct YES Are there open errors and initial NO errors in the error log area YES A E71 hardware error is suspected Although inconvenient please discuss the details of this problem with the branch office ent nearest you 13 19 NO Correct the IP address and retransmit Check and repair the error locations MELSEC A APPENDICES MELSEC A APPENDICES Appendix 1 Substituting from AJ71E71 Previous Product Data exchange between the PLC CPU and a remote node on the Ethernet conducted by an AJ71E71 previous product can be conducted using the E71 product covered by this manual The following explains the hardware and software compatibility when substituting the AJ71E71 with the E71 ina system that conducts data communication using the AJ71E71 Appendix1 1 Module Compatibility Following is an explanation of the module compatibility when substituting the E71 for the AJ71E71 1 The module hardware specifications for the AU71E71 and the E71 are the same
117. the line can be suspected so change the initial processing setting data e When exchanging with UDP then conduct a retry of the transmission side program Conduct open processing e Check the Ethernet address of the remote node with which exchange is being done e For an ARP function then set the Ethernet address to On FFFFFFFFFFFFR and conduct initial process ing g the E71 port No Refer to Item 5 4 1 c 3 Correct the remote node port No Refer to Item 5 4 1 2 fl c e Correct the exchange address setting area for each connection e Did not specify the port that is open Correct the exchange address setting area for each connection Refer to Item 5 4 1 2 i c Conduct E71 initial processing Set tne remote node IP address to 7 to FFFFFFFEn e Check if open processing has not been done for either of the connections for the pairing open e Change the pairing open combination Refer to Item 5 4 1 1 b Check the operation of the partner remote node e Review and change the set values for existence check Refer to Item 5 3 1 4 to 6 e Check if the connection cable is loose e Check if there s a problem with the connection to the transceiver or with the terminal connection Review and correct the timer set values during initial processing Refer to Item 5 3 1 4 to e Correct the IP address Make the class A B or C Refer to Item 5 3 1 and Item 11 3 e Correct
118. the mounting holes in the base unit before install ing the module Modules in AnS series make sure screws are securely tightened to base unit with specified torques Improper installation may cause erroneous operation failure or the module to fali out Tighten the screw within the range of specified torque If the screws are loose it may result in fallout short circuits or malfunction Tightening the screws too far may cause damage to the screw and or the module resulting in fallout short circuits or erroneous operation Do not touch the electronic parts or the module conducting area it may cause erroneous operation or failure WIRING PRECAUTIONS Do not connect the AUI cable when the module installation station s power is turned on Be sure to fix communication cables and power cables leading from the module by placing them in the duct or clamping them Cables not placed in the duct or without clamping may hang or shift allowing them to be accidentally pulled which may result in a module malfunction and cable damage Perform correct pressure displacement crimp contact or soldering for wire connections using the tools specified by the manufacturers Attach connectors to the module securely Tighten the terminal screws within the range of specified torque if the terminal screws are loose it may result in short circuits or malfunction Tightening the screws too far may cause damage to the screw and or the modu
119. the reception end signal The reception end check signal is turned OFF by the sequence program when the reception end signal is turned OFF Point 1 The reception end signal X2 does not turn ON during error data reception In addition the data is not stored in fixed buffer No 2 2 This shows the processing when the open request signal and initial request signal are turned off during reception when the E71 Function for Data Exchange during the PLC CPU is Stopped Item 5 6 is not used When the open request signal Y9 turns OFF during reception the E71 immediately per forms close processing When the initial request signal 19 turns OFF during reception the E71 immediately conducts close processing and end processing For more details on cases when the reception of Close Abort RST has occurred from the partner remote node prior to the completion of the data communication performed immediately before refer to Remarks in of Item 5 4 3 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 2 Data Format This shows the data item order and contents for exchange data commands and responses between the E71 and a remote node when conducting fixed buffer exchange with procedures As shown below the exchange data consists of a header and application data Header Application data ef _ Maximum 2040 bytes As shown below the data code of the application data can be express
120. the sequence program D The E71 begins close processing The E71 transmits FIN to the partner remote node 4 The partner remote node returns ACK FIN in response to the FIN sent by the QE71 If it is not returned the E71 retransmits the FIN The E71 waits for ACK FIN to be transmitted by the partner remote node The wait time is the TCP end value timer time At this time if ACK FIN is transmitted an ACK will be returned as normal processing If the ACK FIN is not transmitted within the TCP end timer value time ABORT RST command is transmitted to the partner remote node The E71 determines that close processing has ended regardless of the state of the partner remote node and turns the open end signal X10 to off 1 When the above processing is conducted the E71 determines that the partner remote node pro cessing was conducted normally so the close results are not stored in the error log area 2 The above processing is a unique function of the E71 and is not part of the general TCP IP proto col 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 2 When closing from the partner remote node end Open request signal Y8 Open end signal X10 Minimum Receiving close message 500ms l 4 i I 1 t t 4 t t l r l l 1 4 4 Ethernet FIN ACK AO The open end signal X10 is turned off when the close ABORT RST command is re ceived from the partner remote node
121. the subnet mask Refer to Item 11 2 cessing Refer to item 11 2 13 TROUBLESHOOTING MELSEC A Error Code Description Processing There is an error in the router relay function default router IP address set value 302H e The defauit router IP address net ID Net ID after subnet mask defers from the local station E71 IP address net ID 3034 There is an error in the router relay function subnet address set value e There is an error in the router relay function router iP address set value 3044 The router IP address net ID Net ID after subnet mask defers from the local station E71 IP address net ID 4000H to An error occurred at QnACPU 4FFFH 7004 A connection is not established during TCP connec tion open processing 70104 A transmission error has occurred A remote node Ethernet address Buffer memory ad 8001H dress 28 to 30 77 to 79 of 20 digits or more out side the default FFFFFFFFFFFF4 has been registered Correct the default router IP address and reconduct initial processing Refer to Item 12 4 1 J e Make it the same as the local station E71 IP ad dress net ID Refer to Item 11 2 Correct the subnet address and reconduct initial pro cessing Refer to Item 12 4 e Correct the router IP address and reconduct initial processing Refer to item 12 4 J Make it the same as the local station E71 IP ad dress net D Refer to Item 11 2 Refer to the
122. the time from the PLC CPU data read write end time until the remote node returns an ACK Example calculation 1 The minimum transmission delay time scan time is 100ms when reading data register D of 100 points of data while using the TCP IP s ASCII code for the exchange protocol Command data length 24 bytes Response data length 404 bytes PLC CPU process time 100 64 x 100 200 ms Minimum transmission delay time 30 0 018 x 24 0 007 x 404 200 remote node ACK process time 234 remote node ACK processing time ms APPENDICES MELSEC A Example calculation 2 The minimum transmission delay time scanner time is 100ms when writing 100 points of data to the data register D100 using the TCP IP s ASCII code as the exchange protocol Command data length 424 bytes Response data length 4 bytes PLC CPU process time 100 64 x 100 200 ms Minimum transmission delay time 30 0 018 x 424 0 007 x 4 200 remote node s ACK processing time 238 remote node s ACK processing time ms APPENDICES MELSEC A c Exchange time with the PLC CPU scan time extension time In response to a request from the E71 the PLC CPU main unit processes the number of process points for 1 scan of the sequence program for each END when running The interven tion time for this scan time and the number of scans required for processing are shown below PLC CPU processing Maximum number of process
123. the transmission end node s error location A reception end 71 hardware error is suspected Although inconvenient please discuss the details of the problem with the branch office or agent nearest you Is the FROM command executing NO correctly YES is the FROM command ondition setting point in the NO PLC program ls the address specified by the NO being set up FROM command correct YES Correct the specified address Correct the sequence program YES Is the FROM command s O NO address setting correct YES Correct to the correct I O address Is the FROM command s device NO No setting correct YES Is it not possible to execute FROM commands for special function units other than those for the E71 Is there a problem with the NO YES transmitting node YES Correct the transmitting node s error location If the transmission node is also the E71 refer to Item 13 1 NO A PLC CPU unit hardware error is suspected Although inconvenient please discuss the details of this problem with th branch office or agent nearest you A reception end E71 hardware error is suspected Although inconvenient please discuss the details of this problem with the branch office or agent nearest you 13 15 13 TROUBLESHOOTING MELSEC A 13 2 3 Error during Random Access Buffer Exchange Reception errors Check the on line state of the connectio w
124. time to the subject station after link is begun e When conducting exchange to a station except the latest 10 stations to which exchange was conducted e When conducting exchange for the second time when the number of ex change stations is under 10 e When conducting exchange for the second time to the latest 10 stations in which exchange was conducted 3 When the CPU communication timing setting of the E71 communication condition set ting switch is off write prohibited it is added only when data is written from remote node e Reason For Transmission Time T1 Delay When commands that require two scans device write etc when the DIP SW7 SW3 is off are transmitted the vaiue is twice that calculated using the above formula Refer to Item 9 3 for information regarding the necessary number of scans when request access to the same PLC CPU is made at the same time by a remote E71 GPP function etc e Increase the CPU monitoring timer s monitoring time from the other station when exchange to other station is conducted via MELSECNET 10 Refer to the network system reference manual for details regarding network system Example When an E71 is installed in a station on an MELSECNET 10 and read from the other station device memory is conducted on the same MELSECNET 10 Second exchange time when the number of exchange stations is under 16 e Sm Master station sequence scan time 120ms e am Master station link re
125. tinal device No in the specified device Nos For word For word devices Final dev ce No contents in the specified device Nos For bit devices L Point 17 to point 32 on off status in the specified device Nos For word devices Specified head device No 1 s contents For bit devices 16 ee portion on off status from tne specified head device No For word devices For word devices devices Specified nead device No contents End coce Subheader 10 19 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 1 When reading the Y40 to 5F 82 points on off status of the PLC CPU installed in E71 Command remote node E71 O KE PO 0 0 AS O20 6 0 0 0 OO 4 0 0 30 314 464 4641304 30H 304 41H 35H 394 32H 30K 30H 30 30H 30 30H 30H 34h 304 30 30H 30 ee ee Te ee 40 Locai station 2500ms 2 points a bse D 1 Response E71 remote node 8 110 018 2 9 DS 5 3 E 381 31130 304 38 32H 39 44H 35n 35H 334 45H Example 2 When reading the D80 to D82 contents of the PLC CPU installed in E71 Command remote node gt E71 O 11F F 30 314 46 4651304 30 30 41 34H 34 Local station 2500ms D80 3 points Response E71 remote node BO Oe 2 38 ae TE Sro Toa F 38H 311304 30h 31 324 334 344 38H 37H 36H 35 304 314 33H 46r D80 contents D8icontents 082 contents 1234 8765 O13FF 10 20 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A
126. using TCP IP An ACK is not returned from the re mote node when using the TCP protocol Check if the IP address and port No set for the E71 are correct Check if the partner remote node IP address and AO0014 port No are correct Kae Ais PRISM ETOT PAORS IS ceed e Check the partner remote node operation Check if the connection cable is loose Check if there s a problem with the connection with the transceiver or with the terminator connection Check the partner remote node operation A packet could be in the line so transmit after the free time has passed Check if the connection cable is loose Check if there s a problem with the connection to the transceiver or with the terminator connection Correct the partner remote node side IP assembly timer value when there is a time over for the exist ence time An ICMP error packet is received An IP assembly time out occurs at the partner remote node Check the partner remote node operation A packet could be in the line so transmit from the remote node after tne free time has passed Check if the connection cable is loose e Check if there is a problem with the connection to the transceiver or with the terminator connection Correct the IP assembly timer value and reconduct initial processing Refer to Item 5 3 1 An IP assembly time out error occurs The remaining AQO7H allocation data cannot be received and a time out oc curs Review and c
127. version C version B or later or before LL BNC plug Terminator BNC Terminator for 1OBASE2 T Type adapter for 1OBASE2 included in the packaging 1O0BASE2 coaxial cable inquire with a specialized service provider for the devices required Fig 2 3 Example Network System Configuration A1SJ71E71 B2 S3 A1SJ71E71 B2 S3 BNC plug Terminator BNC for 1OBASE2 T Type adapter included in the packaging 10BASE2 coaxial cable Inquire with a specialized service provider for the devices required Fig2 4 Example Network System Configuration 2 SYSTEM CONFIGURATION MELSEC A Point 1 Taking sufficient safety measures is required when installing 10BASE5 and 10BASE2 so please have this work done by a specialist 2 To conform to the EMC directives and low voltage directives by incorporating the E71 into a customer s product install ferrite cores using the method shown in 4 below 3 The following countermeasures are available for communication errors caused by the effect of high frequency noise in a given installation environment e install ferrite cores using the method shown in 4 below Increase the communication retry count when TCP IP communication is performed 4 Ferrite cores should be installed as follows for connecting to a network via the 10BASE2 or 1OBASES Install a ferrite core 1 at the E71 side and at the external device side transceiver side of the AUI cable 1 ZCAT 2032 0930 manufac
128. when the LED is turned on or off varies Item 4 4 for each LED Select from on line off line self diagnostic test or operation mode Normally on line is selected The setting at the time of factory shipment is O on line Selects the start up conditions exchange processing conditions code types during exchange and whether there is TCP time out error processing The setting at the time of factory shipment is that SW1 to 8 SW 1 to 4 are all turned off Power supply terminal for supplying power to the transceiver when used as 10BASE5 Not required when used as 10BASE2 This light confirms that power is being supplied to the transceiver x when used as 10BASES Not necessary when used as 10BASE2 Operation mode setting switch Excharige condi tion setting switch External power supply terminal External power sup ply on indicator light item 2 3 AU cable connec c i ae he 1OBASES item 2 3 tion connector onnector for connecting the E71 to the tem 4 7 2 TOBASES and 10BASE2 6 Use this switch to change the interface between 10BASE5 and 10BASE2 change over switch The setting at the factory shipment time is 1OBASES 10BASE2 connec Item 2 3 ice This connector is used to connect the QE71 to the 1OBASE2 item 4 7 3 O Yes x No 4 3 Switch Settings 4 3 1 Operation Mode Settings Table 4 1 List of Operation Mode Settings and
129. x Response data length ms The unit is a byte The unit is a byte Command data length This is the data length including the subheader data length text data that is set in the command application data portion when reading and writing is conducted to and from the random ac cess buffer The unit is 1 byte ga Command Data Length O a O O e Exchange using binary code ee Oe 6 Data length x 2 Exchange using ASCI code 12 Data length x 4 Response data length This is the data length including the subheader and end code that is set in the response application data portion when reading from and writing to the random access buffer is conducted ee Exchange using ASCII code 6 Data length x 4 DONE MESNI Remote node ACK processing This is the time from when the read write to or from the random buffer ends until the remote node returns ACK Example calculation 1 The minimum transmission delay time when 508 words of data are read from the data register D using the UDP IP s ASCII code exchange as the protocol 30 0 017 x 12 0 006 x 6 508 x 4 43 ms Example calculation 2 The minimum transmission delay time when 508 words of data are written to the data register D using the UDP IP s ASCII code as the exchange protocol 30 0 017 x 12 508 x 4 0 006 x 6 65 ms APPENDICES MELSEC A EJ Minimum transmission delay time when reading writing data to the P
130. 0 36H 34 130 33 o a a a 18H Local station 2500ms Block No 3 R100 Spcints 0 0 0O 99 876 2 3 4 30H 30n D i 30H 3939H 384 374 36 Y 324 33H 34h ae Write data Write data Write data 0109 to 98765 to 1234 to block No 3 s dlock No 3 s block No 3 s Rico R101 8102 Response E71 remote node 9 810 0 39h 38 130 304 10 45 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 5 Extension File Register Test Random Write This section explains the command response format when executing an extension file register random write EE When exchanging using binary code Command format Specified number of devices x 10 6 bytes ooo semuaa OOOO E Pe lees alt oy Block No device No and write data HY L CAD L H eee hes Write data Block No specification Device No specification Number of devices 1 to 40 i ACP monitor timer unit 250 ms e PLC No Subheacer Response format End code Subheader Example When the contents of extension file register No 2 block s R26 and No 3 Block s R19 for the PLC CPU installed in the E71 are written Command remote node gt E71 TAY 00r O04 00a 204 52410 13H OOH O04 O0r 20 52H103H oro 01 Se eee La oms Zo 2500ms 2ponts Wr te data 1234H to block No 2 s R26 Write data 01098 to block No 3 s R19 Response E71 remote node 10 46 10 WHEN CONDUCTING R
131. 00324 T15 set value 100 0064x O CIF F 30H 43H 46H 46 QCh Locai station 2500ms Head device No 4 points T15 FEQFH 044 Response E71 remote node 8 C00 384 434 30H 30H 10 90 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 5 Microcomputer Program Read Write This section explains the control procedure specification contents method and example specification when reading writing a PLC CPU microcomputer program EE Commands and addresses This section explains the command response classification and program addresses when read ing writing microcomputer programs a The functions used to read write microcomputer programs are shown in Table 10 11 Table 10 11 Functions List Number of PLCCPU status ie Command processing response Processing description points con Benio al classification ducted in one Stopped possible impossible exchange setting setting l Reads the main sequence mi Main 1Ey Batch yead crocomputer program Reads the subsequence micro Sub 1FH computer program 256 bytes Batch write comp er program i Sub tn Writes the subsequence micro computer program In the PLC CPU status column in the above table the represents execution possible and the x represents execution not possible All of the following conditions must be met in order to conduct program write during RUN PLC CPU is an A3 ASN ASA AS
132. 00H to O000H orsi 2 J Fle register re Fle register RO to R4095__ 0000H to OFFFH x A ES R4096 to R8191 1000H to 1FFFH XO to XOFF _ X1C 00 te to X1 FF X200 to X3FF X400 to X7FF YO to YOFF Y100 to YIFF Y200 to YSFF Y400 to Y7FF MO to M2047 M2048 to M8191 43H Input be 581 20x Internal relay Latch relay and step i a relay are included a aa B400 to BFFF 0400H to OFFFH woos yn PaaS a eS p 2b 46 20 F256 to F2047 0100H to O7FFH 10 13 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Table 10 2 Device List CPU module with restrictions Access enabled x Access disabled No device A2AS S1 AU Q2A Q2A S1 Q3A S1 A4U Q2AS Q2AS S1 Q4A Device 1 Device DOVICR Device No Q2ASH Q2ASHS1 Q4AR code range 1 Q DO to D6143 OOOOH to 17FFH O m a ame a a A eee eee e m r a a ee i e e Data register Link register File register TE gt Q hy Too 521 20x R8192 or more Current TN _TOto T2047 _ value 54n 4E T2048 or more 0800H or more TS TO to T2047 OOOOH to O7FFH Timer Contact o e 2 p 544 53 T2048 or more O800H or more _T0 to T2047 __ _ 0000H to O7FFH 544 43 T2048 or more O800H or more CO to C1023 _ _ 0000H to O3FFH value 434 4Ex C1024 or more O400H or more Counter CO to C1023 000
133. 0H to O3FFH 43H 53x C1024 or more 0400H or more Coil a CO to C1023 __ _ 0000H to OSFFH 434 43 C1024 or more 0400H or more _XOtoXTFF __ _ 0000H to OTFFAL XO X200toX3FF_ _ 0200H to OSFFH Input 58 20x __ X400 to X7FF__ _ 0400H to O7FFH Output O Including Latch relay L Step relay S MO Internal relay 4D 204 pee ee OO OT ee a _ _ _ _ __ i x Latch relay Depends on the above Access to area relay M even if Latch relay L is specified x Depends on the above Access to Internal relay M even Pee ee ee ee f Step relay 6 is specifie O BO Link relay 42 20 464 20h F2048 or more 0800H or more 1 Refer to Item 9 2 4 for precaution items when reading writing to and from the QnACPU i ee ee 10 13 1 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Point 1 The bit device and word device classifications are as follows Bit device X Y M L B F T contact T coil C contact C coil Word device T current value C current value D W R 2 Be sure to use device Nos that are in multiples of 16 for the bit device s device No for word unit specification 3 The special relay s M9000 to M9255 and special registers D9000 to D9255 are for special read special write and system use Conducting a write in areas outside of the write possible range will cause a PLC CPU error For details regarding the special
134. 1 A1SJ A1SH A1SJH modules GOT series shown below the total number of modules that can be installed includes the number of these modules used and connected A2 S1 2 A2N S1 A1SJ71UC24 R2 A1SJ71C24 R2 A2S S1 A1SJ71UC24 R4 A1SJ71C24 R4 A2SH S1 A1SJ71UC24 PRF A1SJ71C24 PRF A3 ASN A1SD51S EENT A18SJ71E71 B2 B5 S3 A1SJ71E71 B2 B5 A2A S1 AD51 S3 AD51H S3 ASA AD51FD S3 A2U S1 AD57G S3 A3U AJ71C21 S1 For only the BASIC program A4U AJ71C23 S3 A2AS S1 AJ71UC24 AJ71C24 S3 S6 S8 Q2AS 1 gt AJ71P44 Q2ASH S1 AJ71E71 S3 AJ71E71 Q2A S1 A0J2C214 S1 Q3A GOT series Only when bus connection Q4A Q4AR AJ72LP25 When using a computer link module AJ71UC24 etc as a mul AJ72BR15 tiple drop link module it is not included in the above restrictions AJ72LR25 on the number of modules that can be installed Multiole mod AJ72QLP25 ules can be installed within the PLC CPU s I O number of points AJ72QBR15 A1SJ72QLP25 MELSECNET 10 Remote station AiSJ72QBR15 2 installable base units Except where noted below the basic base unit and the extension base unit can be freely used in installation slots of the E71 a Installing the extension base unit models A52B and A55B without a power unit could make the amount of power supply insufficient so doing so should be avoided as
135. 1 S3 and a remote node IBM PC AT connected to the same Ethernet The programs only conduct the minimum processing required to conduct the exchange test Change the IP address and the port No to match those of the system In addition make separate additions when error processing etc is included e PLC CPU side e IBM PC AT side Make additions as explained in Chapters 5 and 13 of this manual Make additions to match the system specifications Appendix 7 1 Program for Reading Writing Data in the PLC CPU The sample program or execution environment and data exchagne contents are shown below EN Sample program execution environment a PLC CPU side 1 installed in the E71 E71 VO signal Ethernet address E71 IP address E71 port No b Remote node IBM PC AT side Operation environment Ethernet interface board name 3 Library 4 Software development environment Ethernet address OH O8 O 6 IP address Port No c Communication protocol Sampling program overview a PLC CPU side PLC program PLC CPU model name of the station ASUCPU X YOOO to X YO1F Setting not required because this is an ARP function C0 00 01 FD 192 00 01 253 2000 8192 Windows 95 Board that supports WINSOCK WSOCK32 LIB Uses Microsoft Visual C Ver 4 0 Setting not required because this is an ARP function Reception when opening Active Reception when opening Act
136. 2 2 12 WHEN USING ROUTER RELAY FUNCTIONS MELSEC QnA 12 4 Data for Using Router Relay Functions This section explains about the parameter setting area used to conduct exchange with remote nodes using the router relay function The network manager the person who plans a network manages IP addresses etc sets the values for the area before initial processing Buffer Memory Address 102 to 1C3H 450 to 451 Registered number of routers 1 Word OH 0 Subnet address 1 2 Words OH 0 ene Subnetaddress 1 2 Words Router IP address 1 2 Words OH 0 E ER Subnet address 2 2 Words OH 0 g Router IP address 2 2 Words OH 0 l Subnet address 3 2 Words OH 0 R tt Router IP address 3 2 Words OH 0 Subnet address 4 2 Words OH 0 Subnet address 4 2 Words pele me tie Router IP address 4 2 Words OH 0 Router 5 settin Subnet address 5 2 Words 9 Router IP address 5 2 Words EN Default router IP address Default value OH Address 1C2H to 1C3H 450 to 451 a Sets the router default router IP address to which exchange will be conducted when exchange with a remote node on a remote Ethernet is done via other than the router to be specified using the following subnet address n and router IP address n Sets the settings value to a value other than 00000000H and FFFFFFFFH Because the default router itself must be on the same network as the local station the default router s subnet ID
137. 3 Products of Hardware version C or later Printed wiring Transceiver power supply See Section 2 3 Remark board A AUI Cable Transceiver Retainer Fig 4 1 AUI Cable Connection Diagram Method for connecting to the AUI cable Transceiver cable od ea A1SJ71E71 Procedure Description of operation Products of HAW ba alia of HAW B2 B5 S3 ver C or later ver B or ba alia Slide the retainer in the A B direction as shown 1 lt A direction B direction B direction in Figure 4 1 Push the AUI cable connector to the back Slide the retainer in the A B direction as show in REES 3 Pewee te B direction A direction A direction Figure 4 1 4 Check that the AUI cable is locked 5 Turn on the transceiver s power ce O A Point When connection to the network is made using the 10BASE5 if countermeasures against high frequency and noise generated in the installation environment of E71 is necessary attach a ferrite core to the transceiver side of the AUI cable to eliminate these effects Refer to the POINT column in Section 2 3 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 7 3 Connecting to 10BASE2 This section explains the method for connecting the E71 to the 1OBASE2 network ATIE TS Products of hardware version B or before AJ71E71 S3 Products of hardware version C or later or A18J71E71 B2 S3 Fig 4 2 10BASE2 Coaxial Cable Connection Diagram 1OBASE2 Coaxial cable connection metho
138. 36H 37H 38H 30H 41H 42H 43H ec 80H 41H 42H 43H ml a a Se E71 random access buffer Physical address H L Logical address 1200H 4608 OH 0 1201H 4609 56H 78H 1H 1 1202H 4610 1 SAH BCH 2H 2 to to 1209H 4617 a 9 10 words to to 1DFFH 7679 b Response format Remote node lt E71 Subheader End code 4 45H 32H 30H 30H 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 2 Read from buffer using read request from remote node When binary code specified a Command format Remote node E71 Subheader Head address Data length L HW A a 61H OOH OAH OOH b Response format Remote node lt E71 Subheader End code Text 10 words on oe L H L KH Ll fH o A A 2 A Etk oo jaa 12H 78n 56H BCH 9AH BCH QAH oS eS A 71 random access buffer Physical address _ E Logical address 1200H 4608 a OH 0 1214H 144 20 1215H 1216H to 121 DH 29 ee 10 words 17FFs 6143 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA When ASCII code specified a Command format Remote node gt E71 Subheader Head address Data length _ __ or Ho E E e E E a 36H STH 30H 30H 304 30H 31H 34H 30H 30H 30H 41H o Response format Remote node e E71 Subheader End code 45 31H GOH 30H ia Text 20 words H L H L H L H ee L a S1H 32H 33H 34H 35H 36H 37H 38H 39H 41H 42H 43H
139. 42MS 256 bytes 128 bytes Batch write Analysis request Remote RUN pg PLC CPU Remote STOP 1 scan name read Point Specified number of bytes 128 1 scan Batch read Decimal point rounded off Maximum 3 scans Specified number of bytes 128 1 scan Decima point rounded off 128 bytes Batch read Extension comment Maximum 3 scans Specified number of bytes 128 1 scan Decimal paint rounded off Batch read Parameter Maximum 3 scans 1 Because the PLC CPU can only process one of the above items during END processing for the corresponding PLC CPU to access the A6GPP E71 etc at the same time it must wait until the other processing is finished This further increases the number of scans required for processing 2 The scan time is extended by approximately 0 2 msec A2AS AnA and AnUCPU are 0 1 msec even when the E71 is not installed and link is not conducted APPENDICES MELSEC A Appendix 4 ASCII Code Table ee ee ee or ae ee of ee o iN ON 2 HOO OT NO ae PO 00007 NOL e ORE SP OO Pe ci toot son pge ea Sa Dae ee O fees POOVON SIX lt 3 DCF ee 0011 3 ooo EOT Oca S 4 DoT gd t 6 oii ENQ NAK 5 E YU ie fT ou 6 oo AcK SYN amp 6 Fo vo f v BEL EB Se ey l a ee a 1s 00 BS CAN a 8 HK EX oh x fe TOO ST M a a a Paes MONO UP SUR nd z Po o d o 1100 B ae eae E nate ta sa
140. 5 Local station 2500ms PLC CFU mode name for ASNCPU 10 73 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 Sequence Program Read Write This function is used to control the read and storage of various programs main sub sequence pro gram main sub microcomputer program parameter data and comment data to and from the PLC GPU by a remote node and to write programs parameter data and comment data from a remote station in accordance with the control contents to the PLC CPU 10 6 1 Precautions When Reading Writing Programs This section explains precautions when reading writing programs 1 When conducting a program read read all of the sequence programs microcomputer programs parameter data and comment data areas in the PLC CPU When writing write all of the read and stored data to the PLC CPU If all areas are not written the PLC CPU will not operate correctly 2 When writing parameter data be sure to write it before writing the program and execute an analysis request If this is not done the parameters in the PLC CPU user memory will be changed but the parameters stored in the work area used for operation by the PLC CPU will not be changed so processing will be conducted with the contents before the change contents stored in the work area even when the peripheral equipment is installed and operated after the change 3 The commands determine the number of processes that can be executed for one exc
141. 93 103 163 or the error log lock in the exchange state storage area e The open error detection signal X18 is turned off when the open request signal Y9 to YF is turned off for the connection for which the open error is occurring f When there are multiple open errors the open error detection signal X18 will not turn off unless all of the corresponding open request signals are turned off Open request signal Y8 to YF Open error detection signal X18 3 SPECIFICATIONS MELSEC A 5 Initial normal end signal X19 a When the initial request signal Y19 is turned on by the sequence program the initial pa rameters are checked and initial processing is executed Here if initial processing is con ducted normally the initial normal end signal X19 is turned on The module s RDY LED will flash after normal end b If the initial processing is not conducted normally the initial error detection signal X1A is turned on In this case the initial normal end signal X19 is not turned on 6 Initial error detection signal X1A a The initial error detection signal X1A is turned on and the initial request signal Y19 is on and initial processing does not end normally b The initial error detection signal turns on when a hardware error occurs after initial process ing ends normally The initial normal end signal is turned off c When the initial error detection signal X1A is turned on the error c
142. 9h 38 374 36H 30r i 30H 39H i mar c aa ocal siation 2500ms D100 Pam points D100 D101 D102 03 Write data Write data Write data 1234H 9876r 0109m Response E71 remote node e Sog 38 334 304 30 10 26 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 6 Bit Unit Test Random Write This section explains the command response format when conducting a random write to a bit device memory EN When exchanging using binary code Command format Number of specified device pointsx7 6 bytes Fa A a rd cA ee ec ced ae a hee nS Vee a ee i Device No and on off specification L On off specification On Q11 off GOH Device No specification For details refer to Item 10 2 1 Number of device points 1 to 80 points ACPU monitor timer unit 250ms mH PLO NC Subheader Response format 2 bytes cn wt i End code Subheader Example When X94 is turned on the M60 is turned off and the B26 is turned on for the PLC CPU installed in ETI Command remote node gt E71 94r OOF OCH D0 20H eo 00 O0r COR 20s 10 06 OOH 00 004 20H 42h a eg gee A te ee yee va Local 2500m8 30 2500ms 3 points station Response E71 remote node 10 27 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format Number of specified device pointsx7 6 words eA
143. ASCII code is done using the dip switches SW2 Data code setting on the front of the E71 For details refer to Item 4 3 2 Selection possible Table 3 3 Codes that can be Selected x Not possible Data Exchange Function Binary Code ASCII Code Function Explanation Item With procedure O O Chapter 6 Fixed buffer exchange Mthprocedure Without procedure O x 1 Chapter 7 Random access buffer exchange he eens ah oo Chapter 8 Reading writing data in the PLC CPU General Pe ee Chapter 9 data exchange Chapter 10 1 Communication can be performed using the binary codes shown in the figure below Between E71 and PLC CPU Communicated binary code Binary code Binary ASCIl ASCII code Conversion Binary code epoOU Jow ebueyoxy wm g X 5 y 7 TE ate So Q D D w Fig 3 1 Exchange Data Code System 3 SPECIFICATIONS MELSEC A 2 When exchanging using the ASCII code the 1 byte binary code data is automatically converted into the 2 byte ASCII code Example Binary code data ASCII code data 15H 31H 35x One byte _ aoe Two bytes 1234 31H 321 33H 34 Two bytes Ml ea Four bytes 3 Jj The amount of data that can be exchanged at one time between the E71 and an external node depends on the function used and the data code setting binary ASCIl selected using the DIP switch SW2 on the E71 front panel The following table shows the maximum amount of exchange data that can be
144. Application data e ER o Subheader PLC No ACPU Text command timer 14 bytes 20 bytes 20 bytes 1 byte 1 byte Te Sas Maximum 2044 bytes i i w Differs depending on the function es b Order during response reception Po Header Application data inne al Mail T 14 bytes 20 bytes 20 bytes 1 byte 1 byte l l I I Differs depending on the function gt Transmission reception data order when exchanging using UDP IP a Order during command transmission OoOo n Headr SOS Application data 1 Pa Subheader PLC No ACPU monitor Text commana timer 14 bytes 20 bytes 8 bytes 1 byte 1 byte z aaa Maximum 2044 bytes i l i te Differs depending on the function b Order during response reception Fs Haader ssid Application data Doni Da e 14 bytes 20 bytes Gbytes 1 byte 1 byte 1 4 t we Differs depending on the function 1 The data order for each function and the data order when the status is normal are shown in each function explanation item from Item 10 2 and later 2 The application data portion data order is as follows when the response end code is 5BH fault end Application data Header Subheader End code Error code 5BH OOH 1 byte 1 byte 1 byte 1 byte 10 2 10 WHEN CONDUCTING READ WRITE OF DATA IN
145. Attribute VB_Exposed False Display contents when setting screen APPENDICES MELSEC A 4 j Main program Formi Private Sub Form_Load Dim r e ws init If r lt gt 0 Then MsgBox wS_init error amp r End If End Sub Private Sub Form_QueryUnload cancel As Integer UnioadMode As Integer r ws_term If r lt gt 0 Thien MsgBox ws_term error amp WSAGetLastError End If End Sub Private Sub Labeli_click ssock ws_start If ssock lt 0 Then WSACleanup Release Winsock DLL Forml ScaleMode 4 Specify character mode Forml CurrentX 4 Forml CurrentY 12 Formi Print Error Bxit Exit Sub End If WSACleanup Release Winsock DLL Forml ScaleMode 4 Specify character mode Formil CurrentX 4 Forml Currenty 12 Forml Print Completed mormal End Sub 5 Subroutine program Module 1 Attribute VB_Name Modulel Declare Sub Sleep Lib kernel32 ByVal dwMilliseconds As Long SiS enes Sse eS e5 declares for Windows Socket API Global Const WSADESCRIPTION_LEN 256 Global Const WSASYS_STATUS_LEN 128 Type WSADATA wVersion As Integer wHighVersion As Integer szDescription As String 257 WSADESCRIPTION_LEN 1 szSystemStatus As String 129 WSASYS_STATUS_LEN 1 1MaxSockets As Integer iMaxUdpDg As Integer lpVendorInfo As Long End Type f Declare Function WSAStartup Lib wsock32 dll ByVal wVerReg As Integer lpWSAdata As
146. COM ERR e Tum off all input signals open error detection signal X18 transmission error detec tion signal X1 etc that are currently on by error detection The addresses shown at left are for e Check the error code and error content Although it depends on the system specifications it is recommended to turn off the X1C of the input output signal and display LED s COM ERR after a corrective ac tion has been taken for the error 2 Be sure to ground the FG terminal and LG terminal of the power supply module in the E71 installed station If it is not grounded correctly you can not exchange with the remote node because the influence of noise close disconnect the communication line Read carefully the PLC CPU User s Manual that describes the procedure for the installa tion or wiring work And then turn off the E71 installed station power supply in order to reset the grounding of the LG terminal and FG terminal Point 1 When the E71 is replaced due to an error occurrence restart the partner nodes listed below and resume data communication e Ail partner nodes that were communicating with the station where the replaced E71 was installed e All partner nodes that were communicating with other PLCs via the station where the replaced E71 was installed 2 Verify the required devices and connection method by referring to the following when connect ing the E71 to Ethernet item 2 3 Verifying the Required Dev
147. CPU A2SCPU S1 A3CPU ASNCPU A1SHCPU A1SJHCPU A2SHCPU A2SHCPU S1 A2ACPU A2UCPU A2ASCPU Q2ACPU Q2ASCPU Q2ASHCPU A2ACPU S1 A2ZUCPU S1 A2ASCPU S1 Q2ACPU S1 Q2ASCPU S1 Q2ASHCPU S1 A3ACPU ASUCPU A4UCPU Q3ACPU Q4ACPU Q4ARCPU AJ72LP25 BR15 AJ72QLP25 QBR15 AOQJ2HCPU A1SCPU A1SCPU S1 A1SJCPU A2CCPU AJ72P25 R25 10 72 Read code hexadecimal 93H 94n QAH Bx 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 Command response format This section explains the command response format for reading the name of the PLC CPU being used from the remote node a When exchanging using binary code Command format Response format eye A ete tin andl ACPU monitor timer unit 250ms a PLC CPU model name PLO No End code Subne ader Subheader Example When the model name of a PLC CPU installed in the E71 is read Command remote node gt E771 Response E71 remote node FHE FEF wA a A Local 2590ms PLC CPU moael name Station for A3NCPU b When exchanging using ASCII code Command format Response format 4 words SS eee 9 5j 0 0 ggn 354 RH isa 30 AC U monitor timer unit 250ms _ is oe name PLC No E Subheader Subheader Example When the model name of a PLC CPU installed in the E71 is read Command remote node E71 Response E71 remote node SIP FIO OO A 9 510 OJA 3 0 31n 354 464 4641304 30H 30 41H 39 354 304 30m4 1H 33H130 30 y Ne Pa ar pene 1
148. CPU S1 A2UCPU S1 A3CPU A3NCPU A3ACPU Maximum 58k bytes for both main and sub 0000 to E7FEn A3SUCPU A4UCPU 2 When exchanging using ASCII code the address is converted to ASCII code with a four digit hexadecimal number 3 When the head address number of bytes 1 lt is not the microcomputer program capacity an error End error 574 will occur 10 92 MELSEC A 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 Batch read This section explains the command response format when batch reading the microcomputer program contents a When exchanging using binary code Command format Response format Specified byte length 2 bytes ieee eet RE NA SY Byte length 1 to 256 bytes Final address contents for the specified address Head address Specitied head address 1 contents ACPU monitor timer unit 250 ms e Specified head address contents PLO No Caa End code Sub header Sub header Main program 1E Main program 9E Sub program 1FH Subprogram 9Fr Set to 00x when specifying the byte length as 256 bytes Example When reading the microcomputer program 78x to 7Bx of the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node a aE a Sa Local 9500ms Station 4 bytes Address 7Bx contents Heac address 00785 Address 7Ax contents Address 79 contents Address 78H contents 10 93 10 WHEN CONDUCTING
149. Descriptions Operation Mode Set Setting No Setting Name Settings Description ting Switches Orire Conducts exchange with remote node in the nor mal operation mode AJ71E71 S3 1 Off line Disconnects the local station from the network pe Test Conducts a self diagnostic test using a self wrap test SEE Conducts an RAM test Conducts a ROM test A1SJ71E71 B2 B5 S3 be Usage Not Possible Ln Z When changing the operation mode reset the PLC CPU after changing the operation mode set ting switch The resetting operation will start up the selected operation mode 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A Exchange Condition Setting AJ71 E71 S3 E71 B2 Setting Items Switch AJ71E7 1 S3 OFF ON 1 2 E 3 E 4 E 5 6 E 7 E 8 E Or A15J71 BS S3 SW1 SW2 SW3 SW4 ajujajujajujaja E71 B2 ON OFF PABA gt Line processing se lection during TCP time out error Data code setting SW3 CPU exchange timing setting SW4 Initial timing setting 4 3 2 Exchange Condition Settings Setting Description Selects the line processing when the TCP or ULP time out error Occurs Off Closes the line when the TCP or ULP time out error occurs On Does not close the line even if a TCP or ULP time out error Occurs Selects the type of data code for exchanging data with the re mote node Refer to item 3 3 Off Conducts exchang
150. E gt Ss cs el aes ae es 2 G Q ian an a E 2 oE DE 2 D eb Q Q rs O N n 6 32 1 32 3 a points points points points points points points points 00 10 30 50 60 80 90 BO to to to to to to to to OF OF 4F SF 7F 8F AF CF Special function module No 13H Power supply module Special function ae nN points paints points DO FO 100 120 140 to to to to to DF FF 1411F 13F 15F b Module Nos of special function modules that occupy 2 slots For special function modules that occupy 2 slots the number of occupied points for each slot of each module is set Special function module Nos for which the final address of a slot allocated as a special function module is expressed in 3 digits only the first 2 digits are used For information regarding the allocation of each slot of each module refer to the Special Function Module Users Manual Module when the first half of the slots are allocated as vacant slots AD72 A84AD etc module aiki Special function module No 02H T 2 77 a O Q 93 w Special function 10 62 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Module when the last half of the slots are allocated as vacant slots A61LS etc module E 2 D is O Q Q WY Q2 M 00 20 tO tO iF 326 Sean Special function module No O1H 3 Module when the special function module allocation I O alloca
151. EAD WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format Specified number of devices x 10 6 words ANN Ea N meo e owe e oe ei ulm a 4 palee s eea e ee a ea e e nE le to L i H to O H to ne Block No device No and write data LIH to L Number of devices a aallar aaIaaaaIIll 4 to 40 he ACPU monitor timer Write data unit 250 ms Device No specification PLC No Block No specification Subheader Response format 2 words 9 9 30 oy O i mar la End code Subheader Example When the contents of extension file register No 2 block s R26 and No 3 Block s R19 for the PLC CPU installed in the E71 are written Command remote node E71 1 9iF Fio 0 0 Alo SO O10 0 Q0 25 2 2 00 0000 00 i Aj1i234 31H 3941464 46H130H 30H 30H 44H G0H 32H 30H 30H 30H 30H 30H 32H 35H 32H 32H 30H 30H 30H 30H 30H 30H 30H 31H 41H131H 32H 33H 34H SS SS eS re 19 Local station 2500ms 2 points Write data 1234 to block No 2 s R26 0 0 0 3 5 2 2 0 0 O 0 0 0 0 31 0 1 90 9 30H 30H 30H 33H 35h 32H 32H 30H 30H 30H 30H 30H 30H 30H ni 334 301 31H 30H 39H CLL ENDS Write data 0109 to block No 3 s R19 Response E71 remote node 10 47 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 6 Extension File Register Monitor The extension file register in the PLC CPU device No register
152. EXCHANGING WITH REMOTE NODES MELSEC A Communication format Protocol settings b8 Sets whether TCP IP or UDP IP is used as the communication protocol for each connection Select one of the following setting values O TCP IP default value 1 UDP IP Fixed buffer exchange procedure existence setting b9 Sets the exchange method used to conduct fixed buffer exchange Specify one of the following setting values O With procedure default value 1 Without procedure When with procedure is selected in the subject connection fixed buffer ex change with procedure random access buffer exchange and reading and writing data to the PLC CPU exchange can be conducted When without procedure is selected the subject connection becomes a with out procedure fixed buffer exchange special use so fixed buffer exchange with procedure random access buffer exchange and reading and writing data to the PLC CPU exchange cannot be conducted at the same time as ex change without procedure Open method setting 014 515 This setting is valid only when the communication format protocol is TCP IP Setting is not required when UDP IP is the communication method so make the setting 00 When opening using TCP IP open the active open node after the Full passive Unpassive open node open processing end PLO CPU E71 E71 PLC CPU Initial Initia Initial Initial processing request request processing ali init
153. F to A8H 159 to 168 Local station E71 s port No Information by connection E TE to For connection No 8 AQH 169 Area 1 1 word OH 0 AAH 170 OH _ 0 ABH 171 Area 3 1 word OH 0 ACH 172 Area 4 1 word OH 0 ADH 173 OH 0 AEH 174 Error log Area 6 1 word OH 0 AFH 175 OH _0 BOH 176 Area 8 1 word OH 0 B1H 177 Area 9 1 word OH 0 B2H 178 Area 10 1 word OH 0 BSH 179 Area 11 1 word OH 0 B4 to 16FH 180 to 367 System area Use prohibited 188 words oo 3 SPECIFICATIONS MELSEC A Address 170H 368 Number of times IP packets received 1 word 474H 369 Number of times received IP packet discarded because of check sum error OH 0 1 word 172H 370 Total number of transmitted IP packets 1 word OH 0 173 to 17FH 371 to 383 System area Use prohibited 13 words _ 180H 384 Total number of received ICMP 1 word 181H 385 Number of times received ICMP packet discarded because of check sum error OH 0 1 word 182H 386 Total number of transmitted ICMP packets 1 word 183H 387 184H 388 Total number of transmitted ICMP echo reply packets 1 word 185H 389 Total number of transmitted ICMP echo request packets 1 word 186H 390 Total number of received ICMP echo reply packets 1 word 187 to 18FH 391 to 399 System area Use prohibited Q words 190H 400 Total number of received TCP packets 1 wor
154. FFER EXCHANGE 8 1 to 8 17 yi CONFINA Gia erm Re Es a ee en ey eee ee 8 1 8 1 1 Control Method When There is a Read Request from a Remote Node ccceesesseeeees 8 2 8 1 2 Control Method When There is a Write Request from a Remote Node eee 8 3 De SU OA aana E tema abate malar ucsiccndnaa E amen 8 4 8 2 1 Format When Exchanging with Binary COG wise ssavacssanasvetinnaansiveaesertneycnctbicevewumberueders 8 4 8 2 2 Format When Exchanging with ASCII Code sssesssesrssesensresrrresrrnsrersrensrerrererresresreeo 8 6 S259 Exchange D ta tern COGS serina ie ar A Na 8 8 8 2 4 Example Command and Response Format cccccsecccesescnereceesreeseenseseeenseeenneessenenenanees 8 10 BS POUAN Gs iaka a T A Satan dae en Riera esos ateue aan 8 14 6 3 Program Creallon PrOCAIONS ahcucraizeiiset tates ya T A N 8 14 amp a 2 Program Creation Procedure nnna a earncaawddtensaticeinn tau E ab eaten aha tus 8 16 READING WRITING DATA IN THE PLC CPU SECTION CHAPTERS 9 AND 10 CHAPTER 9 READING WRITING DATA IN THE PLC CPU EXCHANGE 9 1 to 9 18 9T GOAT IMGT IOC eenean ea E E A apn ease areia ee 9 1 9 1 1 Exchanging with the PLC CPU Installed in the Ethernet Interface Module 9 2 9 1 2 Exchanging with the PLC CPU in the Network System esesssesesererrreerinsnrsererrerererens 9 3 9 1 3 Exchanging with the PLC CPU in the Data LINK System sssseresererersrerrinrreenennnrses 9 8 9 1 4 Exchanging with the PLC CPU in Mixed
155. H e Areas where there are sharp changes in humidity or where condensation forms e Areas where there are corrosive gases or flammable gases e Areas where there are conducting powders such as dust or iron dust and where there is oil mist salt or organic solvents Locations that are struck by direct sunlight Areas where there are strong electric fields or strong magnetic fields Areas where direct vibrations or shocks will be transmitted to the module Use the PLC in the environment given in the general specifications section of this manual Usin A CAUTION ee me the PLC outside the range of the general specifications may result in electric shock fires or erroneous operation or may damage or degrade the product 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 6 Self Diagnostic Test This section explains the self diagnostic test that is used to check the E71 s transmission and reception functions and its hardware 4 6 1 Self Loopback Test This section explains the self loopback test that is used to check the hardware that includes the E71 s transmission and reception lines The self loopback test is a check that transmits a test message to the E71 s own node via a line and that can receive the same message via the network Following is an explanation of the self loopback test This test is conducted in approximately 5 sec onds Self wrap test method Connect the E71 to the line Refer t
156. H 32H 36H 354 37H 32 30H GOH 30H 30H 30H 30H JOH 31h 454 Response E71 remote node 10 35 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 3 fj Bit unit monitor The following section explains the command response format when conducting monitoring of a set bit device which monitor data registration has been conducted a When exchanging using binary code Command format Response format Number of registered devicesx2 2 bytes 4 bytes a EIE EEEE EE gt E L H Final registered device on off status ACPU monitor timer unit 250 ms for monitor data registration PLC No Second registered device on off Subheader status for monitor data registration First registered device on off status far monitor data registration End code Subneader Example When Y46 M12 and B2C are set using monitor data registration for the PLC CPU that is installed inthe E71 Command remote node gt E71 Response E71 remote node 3 a0 B84190 1 011 0 Local ocal 2500ms station B20 on off status On M12 on oft status Off Y46 on off status On 10 36 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCI code Response format Number of registered devicesx2 2 words ee ed 8 8 RAR L H mf fon L SS v L Final registered device on off status for monitor data registration Second registered device or off ON 34H status f
157. ING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2T When exchanging using ASCI code Command format Specified byte lengtn 10 words SEARE 0 F y i Ly LJ F 0 0 y EPN Sa A A rn ee ae a Write data to the final address for the specified address Write data to the specified head address 1 Write data to the specified head address Special function module No Read byte length 1 to 256 bytes Head adress ACPU monitor timer unit 250ms PLC No Subneader Set to 3030 when specifying the byte length as 256 bytes Response format End code Subheader Example When writing 750 to 753 of the special function module X Y120 to 13F module No 134 in the same station installed in the E71 Command remote node gt E71 O F F Or O O Bay 0O O 7 5 aa 4 1 3 0 OJO 112 3 4 5 6 7 BO 46 146H 46 304 30 30H 41mi30H 30H 30H 37H 35H SCH 30H 34 13 1H 334 30H 30H30 3141321 33H 34H 35H136H 37H i i aaam I Aaa IMIM A QF Local station 2500ms Buter memory Module No header address 13 l 0007504 4 bytes Write data to the address 753 04n Write data to the address 7524 Write data to tne address 751 Write data to the address 750 Response E71 remote node 8 FIG Q 38 46 305 30H 10 68 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 5 Remote RUN STOP and CPU Model Name Read This function makes it possible to conduct remote RUN STOP of the PLC CPU from a rem
158. IWO to WFFF to IWO to WFFF Device for e SBO to Internal relay MO to M511 ee eal FF M9000 to M9255 DO to D511 Device for switching SWO to Data register SW1FF D9000 to D9255 Access is not possible 9 READING WRITING DATA IN THE PLC CPU EXCHANGE ESj Transmission time when via network system a The transmission time T1 when data is transmitted to a PLC on a network system in which an E71 is not installed is shown below For net between PLC e Transmission time T1 Transmission delay time E71 installed station 1 scan time x n 1 1 2 3 4 2 3 Refer to the network system reference manual for an explanation of the transmission delay time e When initial exchange is conducted for the subject station when the power is turned on and after the CPU is reset r DiR e When exchange is conducted to the station except the 10 stations most recently exchange with e When exchange is conducted the second time when the number of ex change stations is under 10 n 1 e When exchange is conducted the second time to the first 10 stations When the CPU communication timing setting of the E71 communication condition set ting switch is off write prohibited it is added only when data is written from remote node e Reason for transmission time T1 delay When commands that require two scans device write etc when the DIP switch SW7 SW3 Is off 9 3 etc are executed then the value is ca
159. J3 4 38H 45H 30H 3OH 30H 394314 38 324 30H33 34H eS a _ Address 7F3x contents Address 7F2 contents Address 7F1 contents Address 7FCR contents 10 66 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 4 3 Special Function Module Buffer Memory Write This section explains the command response format when writing data to the special function module buffer memory EH When exchanging using binary code Command format Specified byte length 10 bytes eo a ee ete ee cel ej Jueu e ml fe Te Ie ge eae Way L Write data to the final address for the specified address Write data to the specified head address 1 Write data to the specified head address Special function module No Write byte length 1 to 256 bytes Head address ped 123456 set to 56H 34H 12m J ACPU monitor timer urit 250ms PLC No Subheader Set to 00 when specifying the byte length as 256 bytes Response format End code Subheader Example When writing 7501 to 753 of the special function module X Y120 to 13F module No 13 in the same station installed in the E71 Command remote node gt E71 Response E71 remote node oe be ny yee Local 2500ms l 4 sas Buffer memory Module No Write data to the address 753 Station header address ane Write data to the adaress 752 000750 i gt Write data to the address 7514 Write data to tne address 750 10 67 10 WHEN CONDUCT
160. LC CPU a For TCP IP 30 0 018 x Command data length 0 007 x Response data length The unit is a byte The unit is a byte PC CPU processing time Remote node ACK processing time ms b For UDP IP 30 0 017 x Command data length 0 006 x Response data length ms The unit is a byte The unit is a byte PC CPU processing time Command data length This is the data length including the subheader data length and text data that is specified in the command application data portion when data is read from or writ ten to the PLC CPU The unit is 1 byte The command data length changes depending on the commands used Refer to Items 10 1 and 10 2 through 10 7 Response data length This is the data length including the subheader and the end command that is set in the response application data portion when data is read from or written to the PLC CPU The unit is 1 byte The command data length varies depending on the com mands used Refer to the item 10 1 and Items 10 2 through 10 7 PLC CPU processing time This is the processing time of the request to read write data to the PLC CPU This time is determined by the read write data number of points to process and the PLC CPU scan time Refer to c PLC CPU processing time Specified number of points Number of points processed in one sequence program scan x Scanner time Rounded off below the decima point Remote node ACK processing This is
161. LC CPU send the next command after the completion of the data communication for the transmission of the previous command l Do not change data program or remote control s RUN and STOP while operating with a PC connected to the special function module Please make sure that you have read this manual carefully or you may cause erroneous operation or failure E 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU This section explains the control method and data format used to conduct reading writing from the remote node via the E71 for devices and program data in the PLC CPU 10 1 Data Format Following is shown the exchange data command and response data item order and contents when conducting exchange by reading writing data in the PLC CPU between the E71 and a remote node As is shown below the exchange data consists of a header and application data Header Application data pr eh ee Maximum 2048 bytes 10 1 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 1 1 Format When Exchanging Using Binary Code Following shows the command and response data item order when exchange binary code data for the application data portion of the exchange data when exchanging by reading writing data in the PLC CPU a Transmission reception data order when exchanging using TCP IP a Order during command transmission Heada SES
162. LC CPU RUN ON Writing from the remote node is possible during both PLC CPU RUN STOP Data can be read from and written to the PLC CPU and specia function unit by the remote node by transmitting the E71 commands described in Item 9 2 to the E71 In addition it is also possible to read and write data to the remote station PLC CPU and special functions units on the MELSECNET Point When writing to the special functions unit installed in the remote I O stations in the data link system or network system from the remote node the exchange timing setting switch SW7 SW3 must be set to on The remote O station will change to the normal RUN state You cannot switch between the RUN and STOP Refer to each system reference manual for details regarding the access possible range for remote station PLC on data link system or network system 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 1 1 Exchanging with the PLC CPU Installed in the Ethernet Interface Module 1 j The control method for reading and writing data in the PLC CPU installed in the E71 is as follows Remote node Read Write command Response to the command Response Command g The ACK response is for TCP only OStep END OStep END OStepo END OStep END PLC CPU END Processing END Processing Processing in response to command from the remote node The remote node transmits to the E71 a command command to re
163. LC CPU is reset ROM CHK LED is lit Test results The test results can be determined from the LEDs on the front of the E71 Q If the ROM CHK LED is turned off the ROM test is completed The test results can be checked using the ROM ERR s LED When normal o a LED is turned off When error ee ececeeeeeerteeees LED is turned on G The following can be suspected as causes of an error 71 hardware error ROM error Operation after test is completed Reset the PLC CPU after changing the operation mode setting switch on the front of the E71 to either the on line mode or another test mode Point If there is an error for the test results of the ROM test shown in this item reconduct the same test If an error is again generated then a E71 hardware error can be suspected For details regarding troubles please consult with the branch office or agent nearest you 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 7 Connecting to the Network This section explains the method for connecting the E71 to the 1OBASES5 or 10BASE2 4 7 1 Connection Precautions 1 Sufficient safety precautions are required when installing 1OBASE5 and 10BASE2 Consult with a specialist when installing connection cable terminal processing or trunk line cables etc 2 Use a connection cable that meets the standard shown in Item 2 3 3 The allowable bending radius for coaxial cables is set When bending coaxial cables to conne
164. No s contents For bit devices 16 point portior portion on off status from the specified nead device No For word devices Specified head device No contents mamae End code Suoheader 10 17 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 1 When reading the Y40 to 5F 32 points on off status of the PLC CPU installed in E71 Command remote node gt E71 40H 00 00h 00H 204 59H Local 35 Y40 5 ee ects 2 ponts Response E71 remote node ea oe to t M to M M to 1 M to M Example 2 When reading the D80 to 83 contents of the PLC CPU installed in E71 remote node gt E71 Response E71 remote node a ae a 2500ms 4 points D80 contents D82 contents station 1234 01 3FH D81 contents 083 contents 8765n OC2CH 10 18 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCH code Command format 12 words o Number of device points k device 1 to 128 words Word device lt 1 to 256 points Head device No For details regarding the specification metnod refer to Item 10 2 1 ACPI monitor timer unit 250ms PLC No SS Sunneader Set to 30304 when specifying the number of device points as 256 points Response format Numer of specified device pointsx2 2 words Bay ae ee For bit devices 16 EEA portion on off status from the
165. O Serr art eee cee eer ree 10 5 BEUTE MEMON Srewiinnts cost eicy atte eects EE Rna 3 21 Exchangeable Range secs 9 9 9 3 9 8 a ee a aa meaner os General Description ooo cceccceseeersessesseees 1 9 ee Sa OSS ORG e ao senses ee PICO E a E E O I eennadnaeens 10 4 A D hereier a mat oe List of E71 Command snene 9 12 Exchange State Storage Area 5 36 Processing TIME sesecssscssscssssesssssreesececssese A 5 initial Processing State Storage Area 5 35 Special Function Module List sissi 40 59 BLO Ole ts oll iwode rise Ta SUDNSA OOT aa A 10 4 peeve oa IE Dn canteens Bore ATM a AEA 10 5 Initial nR E Parametar ucenia 5 5 Thinking Regarding Transmission Data 10 8 MSTUCION AGG iiei 5 20 E E PEE 9 6 9 10 Exchange Mstruction Arga aunng STOP x S 20 Default Router as rererere 12 1 PO ORGENO tesa reenter aa eee Default Router IP Address 12 3 pa ees ee BUNI E EE NS 8 8 Dip Switches SW1 through SW8 vesscccceeeces aA ROUTING informato weiss eiees 12 3 FoI E e TE etek E 4 5 Subnet Mask Setting Area uo 11 3 E EF a ae 1 2 1 13 PEROS satis ait nebtesi reiterate Sree E71 COMMANAS n se 9 12 SS na eee een ree End Code Error Code List Chapter 13 aay siecle Nore ecient oer I End Processing ProCedure scecescreeeseeeees 5 10 SA gia nears cnet eRe eae ee End Processing Program Example 5 11 APPENDICES Error Code End Code List Refer to Error Code End Codes Retumed to the Remote Node 13 2 Error
166. OTING aisre a a E N 13 1to 13 19 APPENDICES CONTENTS ABOUT THIS MANUAL AND RELATED MANUALS COMMON SECTION CHAPTERS 1 TO 5 CHAPTER 1 GENERAL DESCRIPTION 1 1to 1 12 tE Sanwar Comguralo eriparia mean dete sence AT oe ieaeanacs 1 3 Vee Fae eann A chante ving E A A A te 1 4 to Compans WITAJ TETT arraina T NS N 1 11 1 4 Terms Abbreviations and Terminology Used in This Manual sssereressirerrsrerirserrrrirreessn 1 12 CHAPTER 2 SYSTEM CONFIGURATION 2 1to2 7 Zk OVERALLS ORAMGUPAUON oenina E cane E aan crea ieee eaaadaasecaleeet a 2 1 Bie SUPPOrned Syse M Euran a EA enna races 2 2 Zc Devices Required for Network Configuration ss ssesseressrerrsrnssnirretrssa itriket rrur on rtn rerrsrrirerirerete 2 4 CHAPTER 3 SPECIFICATIONS 3 1 to 3 27 Bt Gonera SOSCHICANCHS nerui a a E O S 1 Sie Fenormance Specifications a renna a RRE i 3 2 3 3 Data Codes during Communication and Exchangeable Data AMOUN sesssceeneneriensrrireen 3 4 34 FUNCIONS aana Pas achaceas ta a parece A A lla cna E aa 3 6 Seat WISPOMPURCHOM Se sacctit cca ish occas a E N E E 3 6 3 4 2 Relationship between Communication Remote Node and Added Functions for Each CORI MUNICATION FUNCION 5414s case E tanta eeteuae a a dedesttae 3 7 329 Sandan RECANE POC SSSI riasin yin dantec A T AES sued anes Woon ahesweonieeseaeee 3 8 3 5 1 Message Division and Data Leng ins nisssutitisascarnhadecteankna teint 3 8 3 5 2 Continuous Processing Over the Same Connec
167. R25 MELSECNET B AJ72T25B A1SJ72T25B 2 SYSTEM CONFIGURATION MELSEC A 2 3 Devices Required for Network Configuration 1 The equipment shown in Figure 2 2 are required when connecting to 10BASES5 The user will please make the arrangements a Only use 10BASE5 coaxial cable N type connectors N type terminators transceivers AUI cable transceiver cable that meet Ethernet standards Please use transceivers that have signals that are generally called SQETEST or Heartbeat transceiver function that uses a signal to check if the transceiver is operating correctly after transmission SQETEST Signal Quality Error TEST ie ee 10BASES aa Coaxial cable Ethernet standard cable Transmission medium 500 Twisted pair cable with 15 pin D connector E71s 10BASES5 connection connector layout Signal Name Signal Name a Collision detection AUI cable detection _ e Transceiver cable m a e 6 2G 7 Ne e a e a c b Please use cable that meets the transceiver and AUI cable specifications for the transceiver supply power in consideration of the E71 voltage drop maximum 0 8V 2 SYSTEM CONFIGURATION MELSEC A The transceiver power characteristics are e Input terminal voltage 12V to 15V e AU cable direct current resistance 40 Q km or under maximum length 50m 164 04 ft e Maximum current consumption 500mA or less So in consideration of the 0 8V voitage drop of E71 module the transceiver supply power scal
168. Remote Node Access Station PLC No Specified by Remote Node E71 installed station Local station Network control station between PLC on the MELSECNET 10 Other station When the E71 is installed in the write normal sta tion in the network between PLC Remote I O net s master station on the MELSECNET 10 Other station When the E71 is installed and remote O net re mote station si Station on the MELSECNET 10 Except for 1 and 2 01H to 40H 1 to 64 3 above Access station No OH 0 Point 1 When the station installed in the E71 is a base AnU QnACPU and remote station access via the station installed in the E71 is conducted the following parameters are set in the PLC CPU of the station installed in the E71 using the GPP function Valid unit during remote station access setting Set in the number of units setting and set the unit through its exchange will pass during remote station access 2 When multiple network units are installed for the same network No in the E71 installation station remote station access is done via the network module installed in the base unit s slot of the newest No when the network No is specified 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 3 Of the other stations in the network system those for which exchange with a PLC is possible are shown below The exchange possible PLC vary depending on the stations installed with the E71
169. SEG after the buffer memory channel switching signal Y1C is tumed on off Read write is performed after the buffer memory channel switching signal Y1C is direct set reset by the dedicated instruction s DSET DRST 4 Read write is conducted after the signal Y1C is direct output by the dedicated instruction s DOUT after the buffer memory channel switching signal Y1C is turned on off 3 SPECIFICATIONS MELSEC A 3 7 Buffer Memory This section explains about the PLC CPU and the data reception buffer memory in the E71 3 7 1 Buffer Memory Applications The buffer memory is composed of the following user areas and system area EH User area This is the area other than the system areas given below 2 These areas are the areas where the parameter types are set for initial processing and data exchange data exchange areas and areas for storing exchange state and exchange error information The default values used when the E71 is booted up are stored in the parameter settings area for initial processing and data exchange These default values make exchange with a remote node possible but sometimes they need to be changed Before conducting pro cessing write the set values only into the areas that need to be changed When reading from and writing to the user area please follow the detailed instruction items In addition only execute post reading and writing FROMP TOP etc when necessary The data ex
170. See Cee te eee ea 0 4 H i 0 0 304 ELS ms Laren E O ao 30h Number of device points 1 to 80 points ACPU monitor timer unit 250ms PLC No Subheader On off specification On 3031H off 3030H Device No specification For details refer to Item 702 1 Response format a D End code e Subheader Example When X94 is turned on the M60 is turned off and the B26 is turned on for the PLC CPU installed in EZT Command remote node E71 0 Fa ae ces neo Pe Pel gee ee A geo 30x A 46 46n 304 E E re 30H 414 30n 33i 3Gr 30H 35 38H 32m 3Gr 30K 30H 30H ee 30 30 39n ee 30x 7 a ae ae station 2500ms 2 paints Bee OP Oh Ge Oe a as Aa Oe OG OF OO Ga 10 J r 444 324 30H 30H 30x 30h 30H 304 30H 33H 43H 30H 30H 34H 32H 324 30H 30H 30H 30H 30H 30H 30H 32H 364 30H ee M60 Response E71 remote node 8 4 0 3B 34H 30 304 10 28 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 7 Word Unit Test Random Write This section explains the command response format when conducting a random write to a word de vice memory and bit device memory 16 point unit EN When exchanging using binary code Command format Number of specified device pointsx8 6 bytes he eee A rr Device No on off specification and setting data L H I L H For bit devices Sets the 16 point porticn on off Setting data Device No specification
171. TING READ WRITE OF DATA IN THE PLC CPU MELSEC A a Command response format This section explains the command response format when conducting a PLC CPU remote RUN STOP from a remote node a When exchanging using binary code 4 bytes CAR to ey Ay ty bg ACPU monitor timer unit 250ms End code PLO No Subheader Subheader be remote RUN 93H hee remote RUN 13H For remote STOP 94H For remote STOP 14H Example When a remote STOP is conducted for the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node a Local 2500ms station b When exchanging using ASCII code Command format Response format ivoa 2 words ee N oe ol pon SY LT O ACPU monitor timer unit 250ms eae sae For remote RUN 3933 93 Subheader For remote STOP 3934H 944 For remote RUN 3133x 13H For remote STOP 3134 144 Example When remote STOP is conducted for a PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node 1 41F FIO O OA 2 foo 00 Sir 34H 46H 4630 304 30H 444 39k 34x 144 Local station 2500ms 10 71 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU 10 5 3 PLC CPU Model Name Read MELSEC A This function reads the model name of the PLC CPU with which the remote node is communicating via the E71 EH PLC CPU model name and read code PLC CPU name A1CPU A1NCPU A2CPU A2CPU S1 A2NCPU A2NCPU S1 A2S
172. They are com patible S Data can be exchanged using the same wiring as for the AJ71E71 E The data exchange between the PLC CPU and a remote node on the Ethernet that is conducted by the AJ71E71 can be conducted in the same way by the E71 Appendix1 2 Program Utilization The following explains the data communication program compatibility when substituting the E71 for the AJ71E71 Appendix 1 2 1 Remote Node Side Program Utilization The following explains the remote node side data communication program compatibility when the A7 1 is substituted for the AJ71E771 1 The program for the following exchange function portion for the AJ71E71 can be utilized to con duct data exchange for the E71 However the response performance differs somewhat between the AJ71E71 and the E71 so there are times when data exchange cannot be utilized as is The response timeout time between the E71 and the remote node needs to be adjusted Be sure to check the operation when utilizing a remote node side program for the AJU71E71 2 The functions that can be used for exchange for program utilization are as follows The remote node in the table is the node that is conducting data exchange to the AJ71E71 Exchange Partner Utilization program Fixed buffer exchange With procedure Remote Node to E71 E71 to Remote Node E71 to AJ71E71 to AJ71E71 E71 Random access buffer exchange Reading writing data to the PLC CPU O E
173. Transmission Transmission Open processing instruction normal request 1 request permit 1 end 1 Transmission 1 error detection 1 SET a2 1 Open impossible 1 RST N3 Close instruction permit 1 k21 K5 Ti A time of 500ms is measured Open Open for reopen after ciose from a impossibi waiting remote node i 1 T1 Open Open waiting impossible 1 1 Connection No 2 open processing Unpassive 19 TOP HO K1 H8003 K1 The reception TCP and Initial WDT normal error end end detection CON 2 Unpassive setting data is written to the connection No 2 usage availability area settings area 1 OVP 501 015 The E71 port No is set to Local station 501H port No 2 K31 DIS K1 Written to the connection No 2 Local station exchange address settings area port No 2 SET Y9 Open request 2 11 Y9 X1F mn A a Sp Open Open WDT Exchange request error possible CON 2 2 detection 2 x18 Y9 X11 X1F FROM HO K103 D18 Ki Connection No 2 open error Open Open Open WDT Open error processing ertor request end error cogere detection 2 CON 2 detection lt gt KO D19 TOP HO K103 KO Ki Open error code 2 mOVP 019 D101 Open error Open error code 2 code 2 SET M32 Close instruction permit 2 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A i Refer to Chapters 6 to 8 ke eee eee i i ss me ee EB ee l x K M32 Close request from local station Close instruction Close occurred E instruction permit 2
174. U or A4U A program that is not operating Shows the sub program if the main program is running 3 The PLC CPU special relay is in the following status a M9050 Signal flow replacement point 605 Off ASCPU only b M9051 CHG instruction execution prohibited On Point When the PLC CPU is an AnA VAnUCPU the SFC program reads writes the main microcomputer program using the read write functions Write cannot be done while the PLC CPU is running When reading from or writing to the SFC program conduct the read write in the microcomputer program capacity and microcomputer program address range shown in b The microcom puter program capacity is the capacity that is set in the GPP function memory capacity setting or the MELSAP II function s SFC area capacity setting 10 91 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU b Microcomputer program addresses The microcomputer program addresses that are specified by the control procedures are conducted by the contents shown below G The address range that can be specified by each CPU is shown in the following table Microcomputer program capacity Microcomputer program addresses A1SCPU S1 A1ISJCPU A1SHCPU A1SJHCPU Maximum 14k bytes 0000 to 37FEx AOJ2HCPU A2CCPU A2CJCPU A1CPU AINCPU Maximum 10k bytes 0000 to 27FEx A2SCPU S1 A2SHCPU 81 A2ASCPU S1 A2CPU S1 Maximum 26k bytes 0000 to 67FEx A2NCPU S1 A2A
175. UDP IP T With procedures O J O Exchanging using a fixed buffer ENE E A O Exchange using a random access buffer O Reading writing data inside the PLC CPU using requests from O a remote node General data exchange 1 GENERAL DESCRIPTION MELSEC A 2 Data exchange while the PLC CPU is stopped is possible Detailed explanation in Item 5 6 When conducting the following data exchange the data exchange with remote nodes can be continued even if the PLC CPU installed in the E71 is stopped after the communication line is opened by the PLC program Function that makes it possible to continue exchange when in STOP status e Exchange using random access buffer e Writing reading data inside the PLC CPU with a request from a remote node general data exchange in either case exchange can be continued using the communication protocol at the time the communication line is opened 2 Data exchange while the PLC CPU is stopped is conducted by setting the buffer memory s Exchange Instruction Area During STOP address 496 to enable Set for each communi cation line Communication Instruction Setting During STOP O Prohibited 1 Enable Communication line n PLC CPU s STOP status occurs Initial request signal Y19 Open request signal Y8 to F Open end signal X10 to 17 1 t 2 1 Exchange possible range when the exchange instruction during STOP is set to prohibit 2 Exchange poss
176. Z sireki iani rN N ET EA 4 13 1898 0 812 0 GR o a A a a ete Re 4 15 Maintenance ANG NSHECHON sissies aa e a a a aa 4 15 CHAPTER 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES 5 1 to 5 47 5 1 9 2 5 3 Overview Of Exchange Procedu esi ie ssceveverenicciuesstuniiwpiiues iaere RENA 5 1 Connecting and Disconnecting COMMUNICATION LINES cccscceesessetseesseeeeneecereeenecessreneesesees 5 4 initial Processing and ENG FrOCeSSIN Gets snsis este cncc E E EN 5 5 Sic BAAO Initial PrOCeSSING tices a tey ete E AE EAN O 5 5 9 3 2 Initial Processing and End Processing Procedures ccccccessececessssueeeeccsscusaunssvessueeess 5 10 Doi EXAMP Progra ea AAE AEA E wae eee 5 11 Communication Line Open and ClOSE ou cceccssccccsevucsesevevevescecusnenevecevecesueuevesssuvevecetenaanenenauess 5 12 Simtel Daa TOR OPEN a aaa a a AT 5 13 5 4 2 Communication Line Open Processing Procedure ccecccccccccececcceesessecesnseranssseesensneness 5 21 5 4 3 Communication Line Close Processing Procedure uessesssessssrsrrrieserrerrirerrerrroesesreres 5 23 5 4 4 Pairing Open Communication Line Open Processing and Close Processing Procedures 5 27 OHO KAMPE FOO I io a a sale downs ses paieven devo aidea a a 5 31 Exchange State Storage ALCS arenincornuro iie e aia aA T tained Mana umsentenes 5 35 5 5 1 Initial Processing State Storage Area ccccccscccssessuseccvevccsteeseueeseceseseesueaeananaseeensauaas 5 35 9 5 2 Exchange State
177. a 13H 3 tion error Remote RUN STOP can not be con ducted Remote STOP PAUSE has already been conducted by another unit an other E71 etc Check if remote STOP PAUSE is working or not from other units per form a delete and reconduct the ex change 18H Remote error Check if the PLC CPU of the station No specified in the PLC No is parailel off After removing the parallel off cause reconduct exchange 20H ink error The request destination CPU unit is dis connected from the data link The special function unit s memory can not be accessed There is a hardware error in the PLC 4m Special functions unit 1 There is a control bus error with the Sif T unit special functions unit bus error special functions unit C n l i TE onsult with your nearest service cen 2 M s functions unit is dam g Bec AE E 13 9 13 TROUBLESHOOTING 13 2 Troubleshooting Flow MELSEC A Following is a simple troubleshooting flowchart for when exchange cannot be conducted between the E71 and the remote node 1 Data change cannot be performed Check if an error has occurred in the PLC CPU installed in the 71 Has an error occurred that caused thePLC CPU to stop processing YES NO Check the state of the subject E71 Is the E71 s RUN LED lit Me YES s the connection cable tightly connected NO YES For AJ71E71 S3 only Is the 1OBASES5 a
178. a Use prohibited 29 words _ This shows the areas that can be cleared with a O from the sequence program 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 6 Data Exchange during the PLC CPU is Stopped This section explains the settings etc that make it possible to continue data exchange from remote nodes to the E71 even after the PLC CPU in the station installed in the E71 enters the STOP status and the E71 open request signals Y8 to YF are turned off Data exchange while the PLC CPU is stopped can be conducted using the settings shown in Item 5 6 1 after the initial processing and open processing from the PLC CPU are completed Point Be sure to match the system specifications when conducting data exchange while the PLC CPU is Stopped 5 6 1 Settings for Continuing Data Exchange This section explains the settings for using the data exchange function while the PLC CPU is stopped The relationship between the data exchange when the PLC CPU is stopped and this setting is shown in Item 5 6 3 Setting method The setting that uses the data exchange function while the PLC CPU is stopped is done using the buffer memory exchange specification during STOP area address 1FOH 2 Setting value for the exchange specification during STOP area Bit location b15 b14 to b8 b b6 b5 b4 b3 b2 bi bO E ee a eal Woclke oles Open request signal YF connection No 8 Open reque
179. a parameter data analysis request of the PLC CPU The analysis request makes the PLC CPU recognize the parameter changes conducted when the parameter data is changed and is a command that causes the changed parameters to be written to the CPU If analysis request is not conducted the PLC CPU will not operate with the changed parameters a When exchanging using binary code Command format Response format aA IA aA E ACPU monitor timer unit 250ms End code PLC No Subheader Subheader Example When conducting parameter analysis request of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node ha cate oa Loca 2500ms Slaton b When exchanging using ASCI code Command format Response format 4 words Poste a en ae tee ah 1 2 aa aon IIH to Las ACPU monitor timer unit 250ms Ly End code gt PLC No Subheader Subheader Example When conducting a parameter analysis request of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node 1 21F FIO 0 0A 214 324 46 46n 304 304 30k 41H SPR OTN aE Ea is Local staton 2500ms 10 82 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 4 Sequence Program Read Write This section explains the control procedure specification contents method and example specification when reading and writing the PLC CPU s sequence program EH Commands and setting meth
180. aced 5 Failure caused by external irresistible forces such as fires or abnormal voltages and Failure caused by force majeure such as earthquakes lightning wind and water damage 6 Failure caused by reasons unpredictable by scientific technology standards at time of shipment from Mitsubishi 7 Any other failure found not to be the responsibility of Mitsubishi or the user 2 Onerous repair term after discontinuation of production 1 Mitsubishi shall accept onerous product repairs for seven 7 years after production of the product is discontinued Discontinuation of production shall be notified with Mitsubishi Technical Bulletins etc 2 Product supply including repair parts is not possible after production is discontinued 3 Overseas service Overseas repairs shall be accepted by Mitsubishi s local overseas FA Center Note that the repair conditions at each FA Center may differ 4 Exclusion of chance loss and secondary loss from warranty liability Regardless of the gratis warranty term Mitsubishi shall not be liable for compensation to damages caused by any cause found not to be the responsibility of Mitsubishi chance losses lost profits incurred to the user by Failures of Mitsubishi products damages and secondary damages caused from special reasons regardiess of Mitsubishi s expectations compensation for accidents and compensation for damages to products other than Mitsubishi products and other duties 5 Changes in product
181. ach connection and error information can be checked by read ing from this area 5 5 1 Initial Processing State Storage Area Buffer memory Address 50H 80 Initial error code 1 word Orit 0 51 to 52H 81 to 82 Local station E71 s IP address 2 words _ OH 0 53 to 55H 83 to 85 fLocal station E71 s Ethernet address 3 words OH oO After initial process end the corresponding values are stored in order Initial error code Default Value OH cccsssssssscesessesssestssssserseseeessserees Address 50H 80 a Stores the error codes generated during initial processing execution b Please refer to Chapter 13 for details regarding initial processing error codes c Error codes are stored as binary values when the initial error detection signal X1A is on d The error codes are cleared when the initial normal end signal is on but the following process can also be used to clear them PLC CPU reset operation or turning off the PLC power 2 Using the sequence program to write 0 in the initial error code storage error ee Local station E71 s IP address Default value OH PE EA A E E E E E avoles Address 51H to 52H 81 to 82 a Stores the E7 1 s IP address set during the initial processing execution b The E71 s IP address is stored as a binary value Example The data storage condition when the iP address is A2Z0009COH 162 0 9 192 is shown below Adaress Buffer memory 51H 81 O9COH
182. ad write data in the PLO CPU 2 When the E71 receives the command from the remote node it requests the read write of data in the PLC CPU in accordance with the contents of the command 3 When the sequence program s END command is executed the PLC CPU follows the request from the E71 and conducts the data read write and then transmits the processing results to the E71 4 When the E71 receives the processing results from the PLC CPU it sends a response that includes the processing results to the remote node from which the request originated Point When read write from the remote node is conducted during PLC CPU RUN the processing time in response to the command from the remote node and the sequence program s scan time could become longer so caution is required 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 1 2 Exchanging with the PLC CPU in the Network System EN When reading and writing data in the PLC CPU reading and writing to the remote sta tion PLC on the MELSECNET 10 can be done via the PLC CPU installed in the E71 within the network system s specification range Ethernet Control station 1Mp1 CPU LP21 QLP 21 Normal station 1Ns4 Normal station 1Ns2 i i t l i U i I 1 MELSECNET 10 For network No 1 Normal station 1Ns3 2 The PLC that conducts read write is specified in the PLC No FFH 00H to 40H in the command text Eo
183. ader used for TCP IP or UDP IP For the E71 since the E71 is added or removed the user is not required to make the setting 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A Text commana The text command shows the data that is sent to the exchange partner node The data code is expressed in binary code The binary and ASCII setting made using the DIP switch on the front of the E71 is ignored Example Text command portion format during exchange Maximum 2046 bytes Application data Text command Header Fixed buffer H L Data length setting n n i n 2 ng Transmission Number of bytes in the data lengin sett reception data n 10 ee ee n shows the target fixed buffer header address 512 1536 n 1023 This subheader and data length added to the fixed buffer exchange with procedures does not exist when without procedure All the data is handled as valid text 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 3 Simultaneous Broadcast Communication When Using UDP IP When UDP IP is used to conduct fixed buffer exchange without procedure a simultaneous broadcast to all E71 installation stations connected to the same Ethernet as the E71 This makes it possible to write etc the same data to all stations Point 1 For simultaneous broadcast communication the necessity of the reception message must be determined and if unnecessary read and discard processing must be conducted for r
184. ads the comment memory contents Batch write Writes the data in the comment memory In the status column for the PLC CPU in the above table the capital O represents execution possible and the capital x represents execution not possible m SS b Comment memory address The comment data storage area can be controlled using the corresponding address for a head address of 00x For example if the parameter comment capacity is 2k bytes the range that can be specified by the head address is 00H to 7FFu The comment memory has a maximum capacity of 64k bytes The comment data address range is determined by the parameter setting capacity The comment memory address specification is done in hexadecimal numbers 3 If the head address specified number of bytes 1 lt is not the comment memory Capacity an error end code 57 will occur Point The comment data cannot be read or written by specifying the special device or device No Be sure to read write all the data from Ou 10 97 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Batch read This section explains the command response format when conducting comment memory batch read a When exchanging with binary code Command format Response format 8 bytes Specified byte length 2 bytes ed er ime Byte length 1 to 256 bytes Final address contents for the Head address specified address ACPU monitor timer unit 250 ms S
185. al Y8 i i l I Open end signal X10 1 1 gt t 6 Data Continuing data Data exchange exchange exchange possible is possible possible I I nItial Setting when E71 is started up Set 8001H in the buffer memory address 1FOH Enable N pt FIN ACK FIN ACK processing are not performed G Data exchange with a remote node is possible by turning on the open end signal X10 Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible The PLC CPU of the station installed in the E71 enters the STOP status and the initial signal Y19 and open request signal Y8 turn off Close processing and end processing are not performed because exchange enable during STOP is set Data exchange can be continued Random access buffer exchange and exchange of read write data in the PLC CPU are pos sible The PLC CPU of the station installed in the E71 enters the RUN status and the initial request signal Y19 and open request signal Y8 turn on Initial processing and open processing are not conducted because exchange enable during STOP is set Data exchange can be contin ued Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible The open request signal Y8 and initial request signal Y19 are turned off Close processing and end processing are not conducted because exchange enab
186. ally added and removed the user is not required to make the settings The subheader data code order when conducting random access buffer exchange is shown below Subheader code during exchange For reading For writing For response For response For binary code exchange For ASCII code exchange 36H 314 30H 30H 45H 31H S6H 32H 30H 30H 45H 32H a For commands only no responses Command response classification For reading 61H For writing 62H Command response flag For command 0 For response i 3 Head address This shows the random access buffer range head address 1200H to 1DFFH using a logical address OH to 17FFH refer to Item 8 3 1 when reading writing data a Specifies the head address with a binary value when exchanging with binary code b Specifies ASCII code when the head address is expressed using a hexadecimal numeral when exchanging with ASCII code c The random access buffer specification address is as shown below Physical address Buffer memory Logical address OS memory 20044 512 rea butler H 0 No 1 to No 8 11FFH 4607 p OFFH S071 Pen 6k words 1200H 4608 Random access buffer Random access buffer 7 TOH Sa to channe 0 side channel 1 side 1DFFH 7679 first haif 3k words last half 3k words TFH an 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA The random access buffer specified address differs from the address specified by the remote node and the a
187. ange without procedure function si multaneous broadcast of the appropriate data to all remote nodes within the same Ethernet that 71 is installed can be excuted How ever the remote node must be performed read and delete process ing when received message is not required by this simultaneous O10 O 5 O procedure With Fixed buffer exchange procedure broadcast communication Exchange can be done from remote nodes that are ending connec tion open processing in the Ethernet S munication 1 Read and write exchange for the E71 random access buffer memory can be conducted from multiple nodes 2 Random access buffer used to exchange with remote nodes is 6k words A continuous area can be read written from the remote nodes However please refer to Item 3 3 regarding the amount of data that can be exchanged at one time O 3 During random access buffer exchange the random access buffer can be used as a common buffer memory within the network without specifying the memory area for each connection 4 Exchange can be done with remote nodes that are ending the con nection open processing in the Ethernet 1 The data in the PLC CPU such as that for each device file data and special function unit buffer memories etc are read and written in the PLC that is installed in the E71 using request from the remote node 2 When the PLC installed in the E71 is connected to the
188. anual or the AnA AnU Programming Manual Dedicated Instruction Edi tion 10 40 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 2 Precautions When Reading Writing Extension File Registers This section explains the precautions when reading writing extension file registers 1 Extension file registers cannot use A1 and A1NCPU 2 Reading and writing cannot be performed for QnACPU extension file registers 3 An error End code 58H sometimes cannot be detected even when read write is executed for a block No that does not exist In this case the read data is not correct data in addition when write is conducted the PLC CPU s user memory can be corrupted 10 41 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 3 Extension File Register Batch Read This section explains the command response format when executing an extension file register batch read Eu When exchanging using binary code Command format im of devices 1 to 256 Block No specification for details refer to tem 10 3 1 Device No for detaits regarding the specification method refer to item 10 2 1 ACPU monitor timer unit 250 ms PLC No enn SD aee O Set to 00 when specifying the number of devices as 256 Response format SPELET OUM number of devices x 2 devices x 2 2 t Dyies aT 7 Final device No conients for the specified block No s specified device No Specified device No 1 contents
189. ase exchange can be done even if the router relay function is not used 2 The router relay function is not required in systems that use proxy routers 12 1 12 WHEN USING ROUTER RELAY FUNCTIONS MELSEC QnA 12 2 Exchangeable Functions and Settabie Range Using Router Relay Functions This section explains the data exchange functions and settable range used to exchange data with remote Ethernets using router relay functions EH Exchangeable functions When conducting the following data exchange exchange with remote Ethernets can be done using the router relay function e Fixed buffer exchange possible for either with procedure and without procedure e Random access buffer exchange e Reading writing data to the PLC CPU 2 Settable range This makes it possible to exchange with remote nodes connected to Ethernet within the range accessible via the router There is one default router and 5 voluntary routers set in the E71 through which exchange can be conducted 12 3 Summary of Router Relay Processing This section gives an overview of the router relay processing conducted by the E71 when data is transmitted to remote nodes on remote Ethernets via routers The E71 determines the transmission destination of the data at the time data is transmitted using the following procedure EE Checks whether there is a setting that uses the router relay function If the setting does not use the router relay function exchange is done direc
190. at tests whether or not the exchange between a remote node and the E71 is normal The data transmitted from a remote node is returned as a response unchanged to the transmission origination station from the E71 1 The function used for the loopback test are shown in Table 10 14 Table 10 14 Functions List PLC CPU status Number of Command processing Running response Processing description points con Write Write classification ducted in one exchange setting setting The characters received from tne Loopback test 164 remote node are returned un 296 bytes changed to the remote node Point For the transmission reception text during the loopback test for the transmission data portion transmit the following data as the header portion M When exchanging using binary code The maximum 256 byte portion numerical OOH to FFH data 2 When exchanging using ASCII code The maximum 256 character portion half width characters 0 to 9 A to F data 10 107 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A This section explains the command response format when conducting a loopback test a When exchanging using binary code Command format Response format Specified byte length 5 bytes Specified byte length 3 bytes Ue ee Stn ee Z Dic Pel pel dA fon ee ee n ey yy aa a o Final transmission data m Second transmission data Same data as the com
191. ata length 0 023 x Response data length The unit is a byte The unit is a byte Transmission scan Time Reception scan time ms Command data length This is the data length including the subheader data length and text data specified in the command application data portion for fixed buffer data transmission The unit is 1 byte Command Data Length With Procedure Without Procedure Exchange using binary code 4 Data length x 2 Number of text bytes Exchange using ASCII code 8 Data length x 4 Le al Response data length This is the data length that is fixed in the response application data portion and includes the subheader and end code when receiving data using the fixed buffer The unit is 1 byte Response Data Length With Procedure Without Procedure Example calculation The minimum transmission delay time when transmitting 1017 words of data between the E71 and an E71 when TCP IP binary code exchange is used for the protocol The transmission scan time is 100ms and the reception scan time is 80ms 47 0 025 x 4 1017 x 2 0 025 x 2 100 80 278 ms APPENDICES MELSEC A 2 Random access buffer exchange minimum transmission delay time a For TCP IP 30 0 018 x Command data length 0 007 x Response data length The unit is a byte The unit is a byte Remote node ACK processing time ms b For UDP IP 30 0 017 x Command data length 0 006
192. ation Subheader Response format End code Subheader Example When setting the extension file register No 2 block s R15 and No 3 block s R28 of the PLC CPU installed in the E71 Command remote node gt E71 1 AIF F jQO O O ATO 2i0 OO OO 2i5 2 2 0 OO GG OO 0 F 31n 4111464 46HI30 30 30H 41HI30H 32H30 301304 30m 30H 32H135H 32H 32H 30H 30H 30H 30H 30H 30 30H 30 46H am ae Ne pa pe Local station 2500ms 2 points Block No 2 s R15 0O 0 0O 3i5 2 2 000 0 g0 0 0 0 0 C 30H 30H 30H 33H 35H 32H 32H 30 30 30h 304 30 30H 30H 31H 43x O HY oo Block No 3 s R28 Response E71 remote node 10 50 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 3 fj Monitor The following section explains the command response format when conducting monitoring of a set extension file register which monitor data registration has been conducted a When exchanging using binary code Command format ACPU monitor timer unit 250 ms PLC No Subheader Response format Number of registered devicesxz2 2 bytes DERE BA eee ee E T Firai registered device No contents for monitor data registration Secona registered device No contents for monitor data registration First registered device No contents for monitor data registration End code Subheader Example When No 2 block s R15 and No 3 block s R28 are set using monitor data registration for the PLC CPU
193. bytes 2 bytes 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 2f Transmission reception data order when exchanging using UDP IP a When a read request is made from the remote node Order during command transmission Application data Ethernet Subheader g 1 D 36H SiH 14 bytes 20 bytes 8 bytes 4 bytes 4 bytes 4 bytes 2 Order during response reception Application data Ethernet Subheader End code Text command E ot A 45H 31H 14 bytes 20 bytes 8 bytes 2 bytes 2 bytes Maximum 1016 words b When a wnte request is received from remote node Order during command transmission Application data Ethernet subheader Head address Data length setting Text command M F n R t4 bytes 20 bytes 8 bytes 4 bytes 4 bytes 4 bytes Maximum 1016 words Order during response reception Application data Ethernet Subheader sg a 45H 32H 14 bytes 20 bytes 8 bytes 2 bytes 2 bytes 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 2 3 Exchange Data Item Contents This shows the command in response data item contents when conducting random access buffer exchange a Header This header is the header that is used for TCP IP or UDP IP For E71 since this can be added or removed the user is not required to make the settings 2 Subheader The subneader format is as shown below For the E71 since the E71 text is automatic
194. ccecceeveseveveeseuevecsuaunenss A 33 Appendix 11 2 Examples of using basic communication support TOO esesssssessssriresserrerererrrsrses A 35 Appendix 12 NOX cars aired athasce ies tatoanc acho E ehenenansain eden tata eaaach as auntie ae ae eaten A 38 MANUALS Following is a list of manuals related to the Ethernet interface Module Related Manuals Manual No Model AJ71E71 S3 Ethernet Interface Module User s Manual Hardware This manual explains the procedures for setting settings and starting up with a system configuration unit specifications and operation when the module is used and gives the external dimensions of the unit Packaged with the AJ71E71 S3 IB 6668 7 13854 Model A1SJ71E71 B2 S3 A1SJ71E71 B5 S3 Ethernet Interface Module User s Manual Hardware This manual explains the procedures for setting settings and starting up with a system configuration unit specifications and operation when the module is used and gives the external dimensions of the unit Packaged with the A1SJ71E71 B2 S3 A1SJ71E71 B5 S3 IB 66688 13855 MELSECNET and MELSECNET B Data Link System Reference Manual This manual gives an overview and the specifications for MELSECNET II and MELSECNET B and the procedures for setting the link parameters IB 66350 and operation and troubleshooting 13JF70 Please read this manual when accessing other stations via data link sys tems Sold separately nf 66440 MELSECNET 10 Network System Referen
195. ce Manual This system gives an overview of and the specifications for the MELSECNET 10 and the procedures for setting and operating the parameters and ex plains about programming and troubleshooting Please read this manual when accessing remote stations via i IB beret MELSECNET 10 network system or when accessing another station on beret data link instructions Sold separately 1B 66690 QnA Q4AR 13JF78 COMMON SECTION The common edition gives a summary of the functions and explains the features and system configuration module specifications and data exchange when exchanging data with the PLC CPU using a node external device via the Ethernet interface Module Before using the Ethernet Interface Module please read Chapters 1 through 5 once When booting up the system please follow the explanation in Chapter 4 to set the unit switch connect with external devices and check operations Abbreviated procedures for booting up the unit are given in Item 4 1 1 GENERAL DESCRIPTION MELSEC A 1 GENERAL DESCRIPTION This manual explains the Ethernet Interface Module specification handling and programming method for connecting the computer to the A series PLC using Ethernet s TCP IP or UDP IP method Model AJU71E71 S3 Ethernet interface Module hereafter AJ71E71 S3 Both 10BASES5 Ethernet and 10BASE2 Cheapernet are supported and function as nodes on the Ethernet To switch between the 10BASE5 and 10BASE2 inte
196. ce No in the bit device during word unit registration r Number of device points For bit unit n 40 points For word unit 1 to 20 p device 16 to 320 points word device 1 to 20 points S a ACPU monitor timer unit 250 Ts PLC No Subheader For bit unit OG For word unit 07 Response format 2 bytes End code Subheader For bit unit 86H For word unit 87 Example 1 Bit unit monitor data registration When setting Y46 M12 and B2C in the PLC CPU installed in the E71 Command remote node gt E771 1464 00 OOK 00H 20 SOHIOCH 00 00 00 20 4012C 00H 00 004 20 42 ee a a Loa Jeme 30 2500ms 3 points Mt2 B20 staton Response E71 remote node Example 2 Word unit monitor data registration When setting Y50 to 5F D38 and W1E in the PLC CPU installed in the E71 Command remote node gt E71 504 OOH OOH 00n 20H 594126 09 00H 00H 20H 44h 1EH OOH 00H 00H 20 57h a a Ta aa onal boat 2500ms 3 points Y50 station Set Y50 to 55 Response E71 remote node 10 33 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCil code Command format Number of specified device points x 6 6 words a iaaa P Number of device points For bit unit 1 to 40 points For word unit to 20 f bit device 16 to 320 pairts i word device to 20 points ACPU monitor timer unit 250 ms eee ee eee PLC No
197. cene behceraiseries macs Teac renee 12 3 TROUBLE SHOOTINGSECTION CHAPTER 13 CHAPTER 13 TROUBLESHOOTING 13 1 to 13 19 TOG ISOR ENOC OGOS x srrak csascinntsia tin deieis T ye dcuniuni Care TN OOE 13 1 13 1 1 End Codes Returned to the Remote Node during Data Exchange Error Codes Stored in the Bufer Memo aiina ease aaa 13 2 13 1 2 Error Codes Returned to the Remote Node by Reading and Writing Data in the PLC O a E E N T E E EAE E AA T E ee oa 13 9 13 2 Troubleshooting FIOW sssssseseessrsrsarevsescarrnrsererereerinens PEEL E N E E EE tects 13 10 13 2 1 Transmission Error during Fixed Buffer Exchange Common for Both with Procedure without Procedure eesssssreieessrsererssssriseesseres 13 12 13 2 2 Reception Error during Fixed Buffer Exchange Common for Both with Procedure without Procedure esesssesssrrrsrerssrerrsrrsrrrerreer 13 14 13 2 3 Error during Random Access Buffer Exchange cccccssssssecceretteeteeeeessepeceeartane sents 13 16 13 2 4 Error When Reading Writing Data to the PLO CPU oo ceecccccccsseeteenneereersaeceeseuaeess 13 18 APPENDICES A 1 to A 41 Appendix 1 Substituting from AJ71E71 Previous Product sesessessseerrrirrsirernsesssrrrrirrereerrrrrress A 1 Appendix 1 1 Module SG OMY sasra a a NN aueatidiaeeas A 1 ADDENGDE TA Program Juiz alo asarira a e a N ea aetedoetaans A 1 Appendix 1 2 1 Remote Node Side Program Utilization esesssseesssrresseerririsrerreesrerrerrssereerre A
198. change time sometimes becomes long during normal execution System area This is the area used by the E71 in addition to the system areas shown in Item 3 7 2 system areas partially exist in the user areas described in above important Do not write data in the system area in the buffer memory of the special function module If data is written to the system area it may result in the malfunctioning of the PLC system Point The access from PLC CPU is given priority over other special function module processing Therefore if the PLC CPU frequently accesses the buffer memory of a special function module not only the scan time of the PLC CPU is prolonged but each processing of the special function module is delayed Perform access to the buffer memory from the PLC CPU using FROM TO instruction or other means only when it is necessary 3 SPECIFICATIONS MELSEC A 3 7 2 List of Buffer Memory Allocations The buffer memory is comprised of 1 address of 16 bits The overall configuration of the buffer memory is shown below For details regarding each area please refer to the explanation references shown on the right side of each area How to read the buffer memory address Addresses are written using the following method and the same explanation is given hereafter L The address for this area is shown in decimal numbers The address for this area is shown in hexadecimal numbers address Buffer Memory Detailed Expla
199. ct them a space that is larger than the coaxial cables allowable radius is required For information regarding the coaxial cables allowable bending radius please consult the cable manufacturer A CAUTION e When installing AU cables transceiver cable coaxial cables do not bundle them or place them close to main lines or power lines Keep them at least 100mm 3 94 inch away from such cables Noise may cause erroneous Operation Do not connect the AUI cable when the module installation station s power is turned on e Be sure to fix communication cables and power cables leading from the module by placing them in the duct or clamping them Cables not placed in the duct or without clamping may hang or shift allowing them to be accidentally pulled which may result in a module malfunction and cable damage e When detaching the communication cable or power cable from the module do not pull the cable portion For cables with connectors hold the connector at the junction to the module then detach it For connectors without connectors first loosen the screw at the junction then detach the cable Pulling the cable portion while it is connected to the module may cause a malfunction or dam age to the module and cable 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 7 2 Connecting to 10OBASE5 This section explains the method for connecting E71 to a 1OBASES5 network The left diagram shows AJ71E71 S3 AJ71E71 S
200. ction During STOP using the E71 buffer memory address 496 Conduct the end processing when setting exchange enable in accordance with tem 5 6 2 When end processing is requested when the communication line is in the connection connec tion is open state end processing is performed after close processing is executed for the open communication line 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 3 3 Example Program This section explains the sequence program example for conducting E71 initial processing and end processing Example The following is an example program 1 The E71 is installed in the basic base s O slot 2 The initial processing parameters are shown below a The E71 s IP address is A20009COH 162 0 9 192 b Values other than the IP address are used as default values x40 p S is 0 Exchange Initial Start instruction instruction DMOV HOA20009C0 DO Initial processing program Initial WDT error Local station Write the IP address instruction detection IP address DTO HO KO DO K1 Local station IP address SET Y19 Initial request a 0100 KI Read the Initial error code Initial WDT erro Initial error detection error code detection KO K1 Ctear the initial error code RST Y19 initial request Ca a rg ure Ge tT Oe Pe eg a eg ey ee Open processing program Refer to item 5 4 5 Gy eee ee ns a Be epee eguet PO Gee Wy epee Wye A Ge gh gel a Ny
201. d m 1 word 192H 402 Total number of transmitted TCP packets 1 word 198 to 19FH 403 to 415 System area Use prohibited SSSI words 1AOH 418 WE eee eee eee ee l 1 word 1A2H 48 1A3 to 1BFH 419 to 447 System area Use prohibited 29 words 1C0 to 1C1H 448 to 449 Subnet mask field 2 words 1C2 to 1C3H 450 to 451 Default router IP address 2 words 1C4H 452 Registered number of routers 1 word 1C5 to 1C6H 453 to 454 Subnet address 1 2 words 1C7 to 1C8H 455 to 456 Router IP address 1 2 words 109 to 1CAH 457 to 458 1CB to 1CCH 459 to 460 peer eer Router IP address 2 2 words 1CD to 1CEH 461 to 462 Subnet address 3 2 words 1CF to 1DOH 463 to 464 Router IP address 3 2 words 1D1 to 1D2H 465 to 466 1D3 to 1D4H 467 to 468 Router IP address 4 2 words 1D5 to 1D6H 469 to 470 Subnet address 5 2 words 1D7 to 1D8H 471 to 472 on gt Setting Router IP address 5 2 words 1D9 to 1EFH 473 to 495 System area Use Prohibited 23 words 1FOH 496 Communication specification during STOP 1 word OH 0 1FI to 1FFH 497 to 511 System area Use prohibited 15 words 3 SPECIFICATIONS MELSEC A Address 200H 512 Buffer Memory Default Value Transmission data length storage ar can aiiclolage alec Fixed buffer No 1 reception data length storage area Fixed buffer No 5 Transmission data write area l 1024 words receptio
202. d 1 As shown in Figure 4 2 line up and push in the lip 2 into the groove 1 2 Turn the connector 1 4 rotation to the right while pushing it in 3 Turn the connector until it locks 4 Check that the connector is locked 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A Coaxial cable connector connection This section explains the method for connecting the BNC connector coaxial cable connector plug to the cable 1 BNC connector and coaxial cable configuration Fig 4 3 shows the BNC connector and coaxial cable configuration BNC Connector Part Configuration Coaxial Cable Configuration Sy S S External Conductor External Sneath Nut Washer Gasket insulation DO Plug Shell Internal Conductor 3 Clamp Contact Figure 4 3 BNC Connector and Coaxial cable configuration 2 Method for connecting the BNC connector and the coaxial cable The following shows a method for connecting the BNC connector to the coaxial cable a Remove the coaxial cable s external sheath AS vette ett ttteeteen shown in the drawing at right Be careful not to damage the external conductor l External Sheath Removal Dimensions 15mm b Place the nut washer Gasket ANd clamp ON vive ce etter teeter eters the coaxial cable as shown in the drawing at right and then wrap the external conductor Gasket c Cut the external conductor insulator and in oe iama ternal conductor to the dimension as shown Conductor Msulato
203. d buffer s first address Unit byte The transmission request signal YO to Y7 turns ON in response to the fixed buffer in which the transmission data is stored remote node when the turned ON The transmission request signal is turned OFF when the transmission end signal is turned ON in response to the fixed buffer which conducted the data transmission to ON 1 Transmission End The data is transmitted to the transmission request signal is Transmission end automatically turns the transmission end signal Refer to Items 5 2 through 5 3 Fixed buffer exchange changes to an exchange possibie state after initial processing and open processing are completed Refer to Item 5 4 Reception Program The reception end signal is automatically turned ON when data is received from the remote node The reception end signal is automatically turned ON when data is received from the remote node The reception end check signal YO to Y7 turns ON response to the fixed buffer in which the reception data is stored The subject reception end check The reception end signal automatically turns OFF signal is turned OFF when the reception end signal is turned OFF Reception End 1 When the transmission error detection signal is on handle the exchange state storage areas information for individual connection transmission error code as specified in Chapter
204. d with exchange without procedure UDP IP by the fixed buffer As far as possible it is recommended that a port No be set at 401H or later FFFFH is the setting value for the simultaneous broadcast communi cation described above Before setting check tne partner remote node s port No 4 Remote node etnernet address setting Default value FFFFFFFFFFFFH PAEA ENE EEA IANT AEN E EE E E EAA T Address 1CH to 1EH 28 to 30 e When the partner remote node to which exchange is being conducted does not have ARF functions set tne partner remote node s Ethernet address e Set the settings values to those shown below When the partner remote node has ARP functions OH or FEFFFFFFFFFFFH When the partner remote node does not have ARP functions Ae Rear eee eee ce ena a ee tte eee Partner remote node s Ethernet address except l OH and FFEFFFFFFFFFH When specifying other than OH and FFFFFFFFFFFFH check the partner remote node s Ethernet address before making the settings When this setting value is OH or FFFFFFFFFFFFH the E71 conducts processing as if the partner remote node has ARP functions Example The settings data when the Ethernet address is O80070220004H is shown below For connection No 1 Address Buffer Memory 2CH 44 2DH 45 ZEH 46 Point 1 Determine the setting values by consulting with the partner equipment and the system s man agers 2 For information regarding the parameters
205. d writing from word device memory The word device memory is one word of 4 bit units which are displayed from the first bit in order using hexadecimal numbers Example When the stored contents in data registers D350 and D351 are displayed Head device 5 6 A B 1 T 0 F The D350 contents show 56ABH The D351 contents show 170FH 22187 in decimal 5903 in decimal 1 On is shown 0 Off is shown Point 1 Use the capital character codes when alpha characters are specified for the text 2 When other than integers real numbers character strings are stored in the word device memory that will read the data the E71 reads the stored values as integer vaiues Example When real numbers 0 75 are stored in DO to D1 the following integer values are read DO 0000H D1 3F40H When character strings 12AB are stored in D2 to DS the following integer values are read D2 3231H D3 4241H Example 2 The same thinking as used for the word device memory also applies to word data that handles buffer memory reading and writing 10 11 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 2 Device Memory Read Write This section explains the control method for reading from and writing to the device memory 10 2 1 Command and Device Range EN The functions occurring in device memory read and write are shown in Table 10 1 Table 10 1 Function list processing points con
206. ddress PLC No Specified head address 1 contents Subheader specified head address contents End code Subheader set to 3030 when specifying the byte length as 256 bytes Example When reading the comment 1E0x to 1E3x of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node 3 SF FiO 0 O AIO O Q 1 E OJO 4 B 9 0 O B DIC 0 2 DIC 4 33H 39H 46H 46H 30k 30H 30H 41H130H 30H 30H 314 454 30H130H 34H 42H SQHIGOH 30H 42r 44H 43k BOK 3ZH 44H 43H 34H 39H Local station 2500ms Head address 4 byles O1E0H 04x Address 1E3H contents C44 C4H Address 1 24 contents 2D Address 1E1H contents COH Address 1E0H contents BDH 10 104 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Batch write This section explains the command response format when batch writing to the comment memory a When exchanging using binary code Command format Response format Specified byte length 8 bytes Bo ee eo eas Oe te EA ee es Dog Ne aI pad ev eof vl fom han atten aimee ai iaa atten gation cal S7 Write data to the final address for the specified address End code Write data to the specilied head address 1 Subheader Write data to the specified head address Byte length 1 to 256 bytes Head address ACPU monitor timer unit 250 ms PLC No Subheader Set to O0H when specifying the byte length as 256 bytes Example When writing data to the comment a
207. ddress Setting not required Setting not required Remote node port No Setting not required Remote node Ethernet address Default value 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A When not opening pairing meme eee emma ee Se es Ss ss SE Se ee ese I Refer to Items 5 3 fe meme eee i ie i se i ee em ew BMX BX ee ee se PE OE ee eS ee eT OS eo X19 XIF X10 Yo Y8 21 a3 TOP HO K16 e000 Ki The transmission TCP and initial WDT error Open end Transmission Open Open Close Unpassive setting data is written els detection CON 1 ena eee heirge in the connection No 1 usage availability area 1 D10 The E71 port No is set to 500H Local station port No 1 KI Written in the connection No 1 exchange address setting area K1 The connection No 1 open error processing Kt Dt00 Open error code 1 mee i i e T e e i X X eee PM X se Refer to Chapters 6 to 8 l lt e e o o o u O o o M a a a U ie ia UM i i SO UM U M BP UMU eS UM 31 Close request from local Close station occurred instruction permit 1 wit Close request from other Close occurred node occurred f M31 Close occurred Close 1 instruction permit 1 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A M31 x0 KI YO 1 Close RST Y8 Connection No 1 close l _
208. ddress specified by the PLC program FROM TO instruction so practice due caution Physical address Address specified by the PLC program FROM TO instruction Logical address 6 Address specified in the head address in the command for random access buffer exchange 4 Data length setting This shows the number of read write data words in the random access buffer range a When exchanging using binary code the number of words is specified by binary value b When exchanging using ASCII code the number of words is expressed in hexadecimal and is specified by ASCII code Point 1 When binary code has been specified the size of the random access buffer subject to read write is a maximum of 1017 words 2 When ASCII code is specified the size of the random access buffer subject to read write is a maximum of 508 words This is approximately one haif of that when binary code is specified Text This shows the write and read data for the random access buffer a When exchanging using binary code the data code in the random access buffer is trans mitted received as is 0 When exchanging using ASCII code the data in the random access buffer is transmitted received after being converted to ASCII code c For information regarding the data code and order when transmitting receiving data refer to Item 8 2 4 6 End code shows the end code added to the response during random access buffer exchange
209. de To begin data exchange the initial processing and open processing must be used to connect with the exchange partner and the communication line To end data exchange conduct close processing and end processing This disconnects the commu nication line and ends all exchange processing Point 1 When conducting either fixed buffer exchange random access buffer exchange or reading and writing to the PLC CPU open processing must be conducted with an exchange remote node In addition all of the above three types of exchange can be conducted with user opened remote nodes When receiving communication request data from an external node PLC CPU E71 Fixed buffer Tresen Subheader code Reception complete signal ON A E e a Store received data i sae Read reception data with procedure reception Used for reception when N iematinn oj space is available Reception complete confirmation signal ON Request from external node See el ete rN hay ah fai avo Packed Ca oe n 2 gt i Header Random access butter gt 81H 62H Contim c Bi Re Random access i pencil Q ey Data buffer communication as Pes with a Q read write i N lt o eeanes a s subheader E1H E2 PT AEE AOE E A E EEE EEE e see Response for a request 7 OOH to 3CH transmission Data read write d wr i Header Device memory etc communication Header l Data within the PLC CPU ee _
210. de port No Closeflag FLAG_OFF Connection end flag off i Winsock initial processing nErrorStatus WSAStartup wVersionRequested amp wsaData in nErrorStatus SOCK_OK Sockerror ERROR_INITIAL Error processing return SOCK_NG printf Winsock Version is 1d 1d n HIBYTE wsaData wVersion LOBYTE wsaData wVersion printt AJ test Start n socketnoz socket AF_INET SOCK_STREAM 0 TCP IP socket creation if socketno INVALID_SOCKET Sockerror ERROR_SOCKET Error processing return SOCK_NG hostdata sin_family AF_INET hostdata sin_port sec my_port hostdata sin_addr s_addr sc my_addr s_addr Bind if bind socketno LPSOCKADDR amp hostdata sizeof hostdata SOCK_OK Sockerror ERROR_BIND Error processing return SOCK_NG aj7le7i sin_family AF_INET aj7le71 sin_port sc aj_port aj7le71l sin_addr s_addr sc aj_addr s_addr APPENDICES data MELSEC A Connect Active open request if connect socketno LPSOCKADDR amp aj71le71 sizeof aj71le71 SOCK_OK Sockerror ERROR_CONNECT Error processing return SOCK_NG Closeflag FLAG_ON Connection end flag on DO to D4 batch write request strcpy s_buf O03FF000A4420000000000500112233445566778899AA length strlen s_buf if send socketno s_buf length 0 SOCKET_ERROR Data transmission Sockerror ERROR_SEND Error processing return SOCK_NG
211. description error processing and trouble shooting flow for errors detected by the E71 When trouble occurs that prevents normal exchange between the E71 and a remote node then the problem must be limited to whether the cause occurred on the E71 end in the line or at the remote node end When the trouble occurs at the E71 end conduct trouble processing by using tne error codes stored in the buffer memory exchange state storage area Refer to Item 5 5 2 and the error log area Refer to Item 5 5 3 Remarks When a line error etc occurs when equipment from different manufacturers is connected we ask that the user use a line analyzer etc to determine the location of the problem 13 1 List of Error Codes This section explains about the error codes End code Error code error description and error pro cessing that are generated for each process when data is exchanged between the E71 and a remote node The types of errors that occur are shown below Errors that occur during Initial e Setting value error processing e initial processing error 50H 80 Errors that occur during open e Setting value error SDH 93 processing e Open processing error ASH Aeg 3 Errors that occur during fixed e Specified data error SEH 94 buffer transmission e Transmission error SFH 95 4 Errors that occur during field e Specified data error 5FH 95 buffer exchange e Exchange error excluding 3 above 95 Item 13 1 1 e S
212. e Spscied number of ponts 64 1 scan Brecteat 2some 256 ponts 64 points aa fae pore oes a oe S E Monitor Specified number of points 128 scan Batch read FROM FROM instruction instruction Maximum 2 scans process process 256 bytes 128 bytes Specified number of points 128 1 scan ing time ing time Decimal point rounded off i Batch write 1 13ms 0 75 ms EA seo nose during RUN Maximum 3 scans A 8 Monitor Word Maximum 5 scans Special func tion module buffer memory APPENDICES MELSEC A Number of processing points for each sequence program scan PLC CPU processing Maximum time scan extension number of AnSCPU A2ZASCPU processing A1SJCPU AnACPU points between AQJ2ZHCPU AnUCPU the E71 and the remote node Number of scans required for processing Specified number of steps 64 scan Decimal pont rounded off 256 steps 64 steps read Sequence Maximum 4 scans program Specified number of steps 64 1 scan aol 256 steps 64 steps O when set to possible write during RUN Maximum 5 scans computer 256 bytes 128 bytes aoa Batch Comment 256 bytes Batch write 1 53ms 2 60ms Maximum 3 scans Specified number of bytes 128 1 scan 2 3tms Decimal point rounded off 256 bytes 128 bytes Batch write 2 59ms 2
213. e random access buffer exchange and exchange of read write data in the PLC CPU are possible 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A The initial request signal Y19 and open request signal Y8 are turned off 6 Close processing is conducted because the exchange prohibited during STOP is set D End processing is conducted for the same reason as in above Change the setting to exchange enable during STOP Set the buffer memory address 1FOh to 8001H Initial processing and open processing are not conducted because the initial request signal Y19 and open request signal Y8 are turned off The initial request signal Y19 is turned on to reconduct initial processing E71 initial pro cessing is conducted The request signal Y8 is turned on to reconduct open processing Open processing of the exchange circuit with the remote node is conducted Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A b When changing the setting to exchange prohibited after turning the open request signal Y8 and initial request signal Y19 off Station installed in E71 PLC CPU status RUN STOP RUN i Exchange enable Enable Prohibited Enable prohibit during STOP i ee jag NE carer OE on cam g l initial end signal X19 ghar D Open request sig
214. e E ST epeo RS a ae A ast SU le Wen hs ee tel ee ne ee OE Appendix 5 Reference Documents For details regarding TCP IP refer to the DDN Protocol Handbook 3 volumes Publisher DDN Network Information Center SRI International 333 Ravenswood Avenue EJ291 Menlo Park California 94025 RFC No TCP RFC793 UDP RFC768 IP RFC791 ICMP RFC792 ARP RFC826 APPENDICES MELSEC A Appendix 6 Diagram of External Dimensions AJ71E71 S3 Products of hardware version B or before ram iM 42 0 17 IS Sem Ad ek AU71E71 3 4 2 0 17 mn 0 17 mE Rae teen ae 3 B ggi SSERESES i 392 o age 3 I I HHHH Riel 7 taimana aan SS n 4 2 i 106 4 17 PA 37 5 1 48 119 3 4 7 0 47 The connector area radius bending ration during cable connection R1 measured value is cable radius x 4 or larger A 11 APPENDICES MELSEC A A1SJ71E71 B2 3 mm in 15J71E71 B2 3 RIN b QAM CHK Be 130 5 12 10BASE2 AISJ7 E71 B2 3 34 5 0 26 1 36 A1SJ71E71 B5 S3 AtSu71871 B5 S3_ FAM CHK 6 5 93 6 3 69 4 The connector area radius bending ration during cable connection R1 measured value is cable radius x 4 or larger APPENDICES Appendix 7 Sampie Program MELSEC A This shows the sample program between the PLC CPU of the station installed in the E71 and the remote node in order to conduct a connection test between the E71 AJ71E7
215. e IP address OH 0 4CH 76 ene ee ADH 77 Remote node D For connections No 8 7 words 4EH 78 Ethernet to FFFFFFFFFFFFH 4FH 79 Address H 3 SPECIFICATIONS MELSEC A Address 50H 80 Initial error code 1 word 51 to 52H 81 to 82 53 to 55H 83to 85 56 to 58H 86 to 88 System area Use prohibited words 59H 89 Local station E71 s port No a SOnOe OCH 92 Remote node port No Lj Li oje DHC 99 Open eror code U UOU no Coroa SEH 94 Fixed buffer transmission reception error code palace y a ee OH 0 SFH 95 Fixed buffer exchange end code 10 words for connection No 1 OH 0 B0H 96 oH 0 62H 98 oH O 63 3 to 6CH 99 to 108 Local station E71 s port No Information by connection Cireasa For connection No 2 7 1 i i i i 6D to 76H 109 to 118 Locat station E7 1 s port No Information by connection iSamaaeebauel For connection No 3 77 to 80H 119 to 1 i i o 80H 119 to 128 Local station E71 s port No Information by connection eee ears For connection No 4 81 to BAH 12 i o 8AH 129 to 138 Local station E71 s port No Information by connection same asabeve For connection No 6 8B to 94H 139 to 148 Local station E7 t s port No Information by connection Corsa For connection No 6 4 i i 95 to 9EH 149 to 158 Local station E71 s port No Information by connection EARTEN For connection No 7 9
216. e PLC CPU is stopped Exchange data code ASCII code binary code selection Router relay exchange Ags Static router relay Timer setting value Timer value units to be set dur units for data exchange ing initial processing 1 When the module software version is before the Q version When utilizing the remote node program for data communication with previous Ethernet interface mod ules for data communication with this E71 refer to the appendices 1 11 1 GENERAL DESCRIPTION MELSEC A 1 4 Terms Abbreviations and Terminology Used in This Manual EH Module terms and abbreviations This manual uses the following terms and abbreviations for the Ethernet interface module and the PLC CPU unit When display of the model name is required the module name will be returned Abbreviations Terms Descriptions Pertinent Unit The appropriate CPU module shown in Item 2 2 PLC CPU Sometimes shown as CPU in diagrams Including PLC CPUs with MELSECNET data link functions R A2ACPU A2ACPU S1 ABACPU A2ACPUP21 R21 A2ACPU21 R21 S1 and n A3ACPUP21 R21 in ACPU S1 Q2ASHCPU and Q2ASHCPU S1 in ACPU AJ71QLP21 S G AJ710BR11 A1SJ71QLP21 A1SJ71QBR11 2f Other terms and abbreviations This manual uses the following terms and abbreviations to explain the E71 data exchange functions When it is necessary to clearly show what is being explained the name or model name will be written Remote node persona compu
217. e as a router Exchange using the E71 s router relay function is conducted when the buffer memory is given the following settings by the user initial processing e Special function setting vo sets using router relay function e Routing information settings set a default router and a maximum of 5 voluntary routers When exchanging data the E71 conducts router relay exchange with another Ethernet using the following method when the partner station subnet ID in the message differs from the local station subnet ID The subject router relays the exchange when there is a partner station subnet address in the user set routing information 2 Relay exchange is conducted using the default router when there is no partner station subnet address in the user set routing information Remote node 1 seeeeeen ene eee Remote node 2 Ethernet 2 l oe a a w a e ee ee ee Erea Ethemet3 tte Sag re anny ae Default router E71 During transmission the E71 does not trans ocal station mit directly to the partner station but instead Ethernet 4 transmits the data once to the router specified in the routing information The router transmits the received data to the partner station ee M l X Remote node 3 Remote node 4 Point 1 It is not necessary to use the router relay function when the E71 is exchanging with a partner remote node using a router relay in passive open TCP IP in this c
218. e communication line 2 mdOpen Open success Read target PLC s data 3 mdReceive Continue reading End Close communication line oe eet ees 4 rndClose ae 1 Completed Ethernet utility settings Set the module type E71 QE7 1 host name IP address and port No etc of the PLC to be communicated with over an Ethernet connection This information is saved as a logic station No mdOpen This function initializes and opens the Ethernet communication line channel No 61 The path of the opened communication line is returned as the execution results The path is required to execute the function mdReceive for reading the PLC data and the function mdClose for closing the line mdReceive This function reads the PLC CPU s device data The target PLC s logic station No device to be read and No of points are assigned to the argument mdClose This function closes the opened communication line channel The communication line must be closed when reading and writing are completed APPENDICES MELSEC A 2 7 Programming example Using Visual C The DO and D1 values of the target PLC CPU are read over the logic station No O0 communi cation line and are displayed on the screen LE RIL KR Re Soe I Tee RO ee ORY A ee Re ae ke mee Include x FREER ORE EEE SER A Se eR Re ae KEKERE include lt stdio h gt include lt windows h gt Windows include file KY include mdfunc h Data
219. e communication protocol TCP UDP with the exchange remote node match For details refer to Item 5 4 13 12 13 TROUBLESHOOTING Is a transmission request signal for NO the subject fixed buffer on YES Was the transmission data set in the subject fixed buffer by the TO command NO YES Was the transmission data s data NO lengthset in the fixed buffer YES Check the remote node exchange state on the reception end is there a problem with the reception NO end remote node YES is there an open error or initial error NO in the error log area YES A transmission end E71 hardware error is suspected Although inconvenient please discuss the details of the problem with the branch office or agent nearest your Fixed buffer transmission is conducted when the transmission request signal is on Turn on the transmission request signal Write the transmission data into the subject fixed buffer Write the data length For details refer to item 6 1 t and Item 7 1 1 Repair the reception end s remote node error location If the reception end is the E71 refer to Item 13 1 Check for error locations and repair them 13 13 MELSEC A 13 TROUBLESHOOTING MELSEC A 13 2 2 Reception Error during Fixed Buffer Exchange Common for Both with Procedure without Procedure Point Conduct error code read when the open request signal Y8 to YF is on
220. e data length to 6 bytes Butter CHO Exchange Transmission switching possible data length 1 1 MOV K1234 D301 Set the transmission data Transmission data 1 Woy K5678 D302 Transmission data 2 WOY K8901 D303 Transmission data 3 TO HO K512 D300 K4 Writes the data length and Transmission transmission data in the fixed data length buffer No 1 s area SET YO Transmission request t RST m6 1 Buffer CHO switching 1 yo M1 x0 h _ __ _ooo_ R51 YO Transimission Transimission Transmission request normal request 1 Exchange enna possible 1 x1 l FROMP HO Kod D108 K2 Reads an error information when Transmission Transmission a transmission error occurs error error code detection 1 4 RST YO Transmission request 1 Fixed Buffer No 2 Reception Program X11 Y9 X1F Open Open WDT end request error CON 2 2 detection X2 M2 m S i Reception Exchange end 2 possible 2 72 NGS H66 M67 M68 Y1 SET Buffer CHO Buffer CH1 Buffer CH1 Buffer CH1 switch switching switching switching request 2 5 6 T Butter CH1 switching 8 RST lt LEA Buffer CH switch Saase onanan A A o Exchange possible 2 M72 Buffer CHO switch request 2 M62 Channel switch for buffer Bufter CHO memory completed switching Reading from the fixed buffer of E connection 2 is possibte M72 Buffer CHO switch request 2 VIC Bufter CH
221. e fixed buffer The transmission error detection signal is turned on when the specified retry process ing Refer to Item 5 3 1 is conducted when the ACK is not returned after data is sent from the fixed buffer that is using the TCP connection Retry processing is not per formed for UDP The transmission error detection signal is turned on when the finish code response received from the remote node is anything other than OOH after data has been trans mitted from the fixed buffer O When the transmission error detection signal is turned on the error contents can be checked by reading the fixed buffer transmission error code storage area buffer memory 94 104 164 The transmission error detection signal is tumed off when the fixed buffer transmission request signal YO to Y7 is turned of When exchanging without procedure The transmission error detection signal is turned on when the specified retry process ing Refer to Item 5 3 1 is performed when the ACK is not returned after the data has been transmitted from the fixed buffer using the TCP connection Retry process ing is not performed for UDP When the transmission error detection signal is turned on the error contents can be checked by reading the fixed buffer transmission error code storage area buffer memory 94 104 164 The transmission error detection signal is turned off when the fixed buffer transmission request signal YO to Y7
222. e in binary code On Conducts exchange in ASCII code Usage not possible Selects whether to approve or forbid data arriving from an exter nal node when a PLC CPU is running While exchanging data read write in the PLC CPU Off Forbids writing from a remote node when the PLC CPU is running On Conducts writing from the remote node when the PLC CPU IS running Selects the initial processing start up timing Off Quick start starts without a delay time Set when one network is used for the entire configuration On Normal start starts after a delay of 20 seconds Use when the entire configuration is made up of multipie networks 1 Line processing selection using TCP time out error At Time of Factory Shipment A TCP or ULP error occurs when an ACK is not returned even when the specified retry processing is conducted when using the TCP protocol Selects the connection processing at this time When setting the SW1 to on and a TCP ULP timeout error is detected by the E71 when data is exchanged the remote node connection will be closed line disconnected and it cannot be re opened Make a selection after checking the remote node specifications 2 Data code setting Selects the data code type binary ASCII when conducting data exchange with a remote node Refer to item 3 3 3 Initial timing setting Freezes for approximately 20 seconds a connection that has been closed once when using TCP IP protocol Becau
223. e is 14 08V to 15 75V Calculating the voltage drop V of the transceiver supply voltage Voltage drop V AUI cable direct current resistance Q m x AUI cable length m x 2 both direc tions x transceiver consumption current A E71 main body voltage drop V Example 2 8 V 0 04 Q m x 50 m x 2 x 0 5A 0 8 V In this case the target value of the transceiver supply power will be larger than 14 08 V 14 08 V 12 VS 11 28 V 2 8 V AJ71E71 83 or A1SJ71E71 B5 S3 Work station i AUI Cable Transceiver cable DC power supply 1OBASES coaxial cable N Type Connector Terminator for 10 BASE 5 Inquire with a specialized service provider for the devices required Transceiver Fig 2 2 Example Network System Configuration 2 The equipment required when connecting to 10BASE2 is shown in figure 2 4 The user will please arrange any adapters other than the T type a 1OBASE2 coaxial cable Ee 10BASE2 Coaxial cable Transmission VOM 50 Q RGS8A U or RGS8C U b T type adapter for connecting to the AJ71E71 S3 A1SJ71E71 B2 S3 included in the packaging UG 274 U HIROSE ELECTRIC suitable products c BNC plug BNC P 58U DDK ELECTRONICS or UG 88 U HIROSE ELECTRIC suitable products d Terminator for 1OBASE2 Plug type terminator type BNC FUJIKURA LTD suitable products 2 5 2 SYSTEM CONFIGURATION MELSEC A AJ71E71 S3 AJ71E71 S3 Product or Product or hardware J hardware
224. e parameter address 285 10 80 Response E71 remote node an 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Specified write byte length 8 words a 5 M EE Write data to the final address for the specified address t Write data to the specified head address 1 Write data to the specified head address k Witte byte length 1 to 256 bytes Parameter write head address ACPU monitor timer unit 250ms PLC No Subheader Set to 3030 when specifying the byte length as 256 bytes Response format End code Subheader Example When writing data to the parameter memory 285x to 288 of the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node SE ORO 0 0O AO 0O 0O 2 8 BO 413 5E OJA 9 BG 31H 31H 46H 46i 30 30H 30H 41H 30H 30 30n 32H 38H S5H 30H 34H 33H 35HI45 30H d 1H 394 422 434 1 9 110 0 143 394 314 30H 30H SS SY SY Se Sh SS ooo eee ese 11H Local station 2500ms Parameter write 4 bytes f i Era 04n Write data to the parameter address 288x BCH Write data to the parameter address 2874 A9H Write data to the parameter address 286x EOH Write data to the parameter address 285 35r 10 81 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A ESj Analysis request This section explains the command response format when conducting
225. e program in response to a TO command etc which turns on the open request signal Y8 3 The E71 executes open processing for connection No 1 and connection No 2 1 For TCP For active ODEN eseese Transmits open request SYN For passive OPEN esce Waits for an open request from the partner remote node For UDP Internal processing is executed 4 Open end signal X10 X11 is turned on when the open processing internal processing is normal end The open error code is stored in the buffer memory and the open error detection signal X18 is turned on when the open processing internail processing is error end The open end signal X10 X11 is not turned on Refer to Item 5 4 2 2 lf the open request signal is turned off when an open error occurs the open error detection signal turns off unless an open error has occurred in other line connection If the open request signal Y8 to YF for all connections in which an open error is currently occurring is off the open error detection signal X18 is turned off 1 When the initial request signal Y19 is off or the open request signal Y8 is turned off during open processing closed processing and end processing are performed after the open processing end Close processing The open request signal Y8 is turned off by the sequence program 6 The E71 executes close processing for connection No 1 and connection No 2 The open end signal X10 X11 is turned off wh
226. e reception end signal is tumed off when the reception end check signal YO to Y7 is turned on and the reception end signal X2 when the fixed buffer is No 2 is in the on state after check by the sequence program When the fixed buffer number 2 is used With procedure Without procedure Reception end Reception end signal X2 signal X2 Receive end check Receive end check signal Y1 signal Y1 Response transmission end PUBLULUOD geq 10 J Open request signal Y8 to Y7 a This is the on signal for exchanging data fixed buffer exchange random access buffer exchange reading and writing from the PLC CPU exchange between the E71 and the remote node b When each connection open request signal Y8 to YF is turned on by the sequence pro gram the exchange parameters are checked and if normal open processing is conducted lf error is detected the open error detection signal X18 is turned on c When the open request signal is on and open processing is conducted normally the open end signal X10 to X17 is turned on If an error is detected the open error detection signal X18 is turned on d The open error detection signal X18 is tumed off when the open request signal Y8 to YF is turned off When errors occur at multiple connections the open request signal for alll connections where errors are occurring are turned off When the open error detection signal X18 is turned ON be sure to read the open er
227. e sequence program s FROM command is read In addition the data being received to the E71 s random access buffer can be read by the separate remote node Point 1 For random access buffer exchange exchange can only be conducted with remote nodes for which the E71 s open end signal X10 to X17 is on 2 Random access buffer exchange is conducted asynchronously with the sequence program When synchronous is required conduct exchange by adding a free protocol between the partner remote node to which exchange is being conducted and the PLC CPU 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 2 Data Format This shows the exchange data command and response data item order and contents when random access buffer exchange is conducted between the E71 and a remote node As shown below the exchange data consists of a header and application data Header Application data a a a ee a See eye ee ee ee ne ee Maximum 2044 bytes As shown below the data code of the application data can be shown as either binary or ASCII code Use the DIP switch on the front of the E71 to set either binary or ASCII For details regarding the setting method refer to Item 4 3 2 8 2 1 Format When Exchanging with Binary Code Following shows the command in response data item order when exchanging the exchange data application data portion in binary code data when conducting random access buffer exchange a Transmission reception data order wh
228. e shown below There are no net iD limitations 1 Set the class to class A to C 2 For the host ID 1 make it so that all of the host ID range bits are not 0 1 1 When using the router relay function and the subnet mask the host ID masked the net mask will become the subject host ID 3 Use IP addresses that do not overlap with remote node including those on other networks Net addresses A net address is an IP address for which a host ID is 0 St 30 29 286 t 24 623 to 16 15 to Sof to O Class A Q _ Net ID O i l l j Class B 1 0 Net ID 0 ne l l classc 1 o Net ID 0 11 5 12 WHEN USING ROUTER RELAY FUNCTIONS MELSEC QnA 12 WHEN USING ROUTER RELAY FUNCTIONS This section explains when a PLC CPU and a remote node are exchanging via a specified router relay 12 1 Router Relay Functions Normally in an Ethernet that uses IP exchange can only be conducted between the local station and remote nodes connected to the same Ethernet have the same net ID To communicate with a remote node on a different Ethernet different net ID a router relay must be used This router relay function is a static router relay function used for exchange with the remote node of a different Ethernet Different net iD Using this function makes it possible to exchange through routers and gateways using PLC CPU side TCP IP active open and UDP IP transmission The router relay function does not operat
229. e values handled by the items in the command and response by the E71 and the remote node to which exchange is being conducted using the following codes in accordance with the above settings In addition conduct reception using the following codes In the explanations for items here after the values handled by the items in the command and responses will be shown as binary values 1 For Binary Code Exchange Uniess otherwise explained the values shown in the explanations are the binary values and are t i ived in ification r L to H 2 For ASCII Code Exchange Unless especially explained the values given in the explanations are converted into hexadeci mal ASCII code and transmi nd received in th fication order H t Following shows an example specification of the subheader to ACPU monitor timer when data is read written in the PLC CPU under the following conditions Specified value e Target station PLC CPU station installed in the E71 Local station E O FFH e Function used Device memory batch read Bit unit PETE E E N A EEE AT EE onsen adnate OOH E71 commana e ACPU monitor timer value 2500mMS8 sexinsad ir teivccclastginaterssncaceaies OOOAH EN Format when exchanging using binary code a Order during command transmission Remote node E71 Application data Subheader PLC No ACPU monitor Text commana Header niet Head device No Device name Number of L H H device points OAH OOH lt ae 2500ms
230. ead write must be performed after the channel switching signal Y001 C is output to the E71 Output the channel switching signal Y001C to the E71 using the tail s 1 of Item 3 6 2 MEMO 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 FIXED BUFFER EXCHANGE WITH OUT PROCEDURE This section explains the method for exchanging with a remote node without procedure using the E7 1 s fixed buffer Point Following is an overview of the difference from fixed buffer exchange using with procedure During data transmission the data is transmitted to the fixed buffer without the message application adding a subheader or a data length During data reception the header is removed from the received message and ali the data is stored in the fixed buffer A response to the data reception is not transmitted Conducts exchange in binary code regardless of the DIP switch SW2 setting on the front of the EER The application data portion that can be handled by one exchange is a maximum of 2046 bytes The subject connection becomes for fixed buffer exchange without procedure special use Fixed buffer exchange with procedure random access buffer exchange and reading and writing data to the PLC CPU exchange are not conducted at the same time as fixed buffer exchange without procedure 7 1 Control Format This section explains the control format used to conduct fixed buffer exchange without procedure Fixed buffer remote node exchange
231. eck 2 SET 452 Close processing Reception end check 2 A 25 2 APPENDICES MELSEC A M52 K3 464 12 Close Input signat processing OFF 2 waiting 2 T12 RST Y9 Input Opan signal request OFF 2 waiting 2 Open impossible 2 RST 52 Close processing 2 RST t32 Close instruction permit 2 471 T2 Open Open impossible waiting 2 2 T2 Open Open waiting impossible 2 2 X47 X10 X11 X18 X19 XIF Y8 y9 475 so End Open Open Open initial WDT Open Open processing end end error normal eror request request instruction CON 1 CON 2 detection end detection 1 2 RST Y19 Initial request sS itor sO K498 KO KI X48 COM ERR COM ERR extinguish extingish n90 497 an rn Y 7 COM ERR COM ERR extinguish extingish premit request 499 END A 25 3 0 gt End processing Set all communication from PLC CPU in STOP as prohibited COM ERR LED extinguish processing APPENDICES MELSEC A Appendix 7 3 Program for Reading Writing Data in the PLC CPU An example of the remote node side program that reads and writes data inside the PLC CPU is shown below Also the sample program execution environment and data exchange are explained EN Sample program execution environment Except for the E71 IP Address the setting values and switch settings on the PLC CPU side are the same as the execution environment shown in Appendix 7 1 Item a e E71 IP Address 96 21 72 99H 150 33 114
232. ection CON 1 1 permit usage application setting data WOVP 2000 BIG Stores the E71 port No Local station port No 1 TOP HO K24 010 KI Writes the connection No 1 Local station exchange address setting data port No 4 SET 8 Open request 1 X10 y Xt wi Open Open WDT error Exchange end request detection possible CON 1 1 4 APPENDICES MELSEC A u1 NN PLF N11 Exchange Close possible occurred 1 M14 Close occurred instruction permit 1 N31 RST Y8 O instruction ied 1 X10 SET M21 Open Open end impossible CON 1 1 RST 31 Close instruction permit 1 M21 K5 TI Open impossible warting CON 1 4 Tt jn amaaa RST 21 Open Open waiting impossible 1 A 14 1 Close request from other node occurred Close processing A time of 500ms is measured for reopen after close from a remote node APPENDICES MELSEC A Remote node IBM PC AT side program Following is an example remote node program for accessing an ASUCPU while the station installed in the E71 Executing this program displays in order the following exchange message contents Word unit batch write command message Word unit batch write response message Word unit batch read command message 4 Word unit batch read response message 1 Following is a summary of the compiling procedure for the program created using Microsoft Visual C Ver 4 0 O 09000 Oo Boot up Visual C Conduct program crea
233. ection signal X18 3 SPECIFICATIONS MELSEC A Buffer memory channel switching signal Y1C This signal is used to specify the buffer memory channel It is turned on off by the sequence program before the read write to the E71 buffer memory 1 is conducted by the sequence program s FROM TO instruction OFF Channel 0 becomes valid ON Channel 1 becomes valid 1 When the PLC CPU conducts data read write for the fixed buffer address 512 to 4607 and the random access buffer address 4608 to 7679 the buffer memory channel switch ing signal Y1C is turned on off by the PLC CPU Turning the buffer memory channel switching signal Y1C on off conducts data read write to the next area When the buffer memory channel switching signal Y1C is off Fixed buffer No 1 to No 4 area random access buffer first half 3k words When the buffer memory channel switching signal Y1C is on Fixed buffer No 5 to No 8 areas random access buffer last half 3k words When the 1 0 control method of the PLC CPU installed in the E71 is the refresh method one of the following is performed when the above buffer memory read write is conducted after the buffer memory channel switching signal Y1C is turned from on to off off to on 1 The next sequence scan is read written after the buffer memory channel switching Y1C is turned or off Read write is performed after the signal Y1C range is refreshed by the common instruction s
234. ed Set the router relay function to be used and con duct initial processing e Set the correct data in the routing information area and conduct initial processing e Correct the transmission destination remote node IP address and conduct open processing e Check if the net ID is correct When making a change reconduct initial processing Correct the IP address Refer to Item 5 4 1 2 10 e Simultaneous broadcast communication is not pos sible using TCP IP e Check the transceiver and partner remote node op eration e Use a transceiver for which the SQE test can be conducted e There could be a packet in the line so transmit after the free time has passed e Check if the connection cable is loose e Check if there s a problem with the connection to the transceiver or with the terminator connection e Conduct a loopback test Refer to Item 10 7 and check whether there s a problem with the line e Conduct a self diagnostic test and check whether there s a problem with the E71 13 TROUBLESHOOTING MELSEC A The exchange data is sometimes divided and exchanged because of local station and partner station buffer restrictions The divided reception data is restored reassembled by the E71 and is transmitted by the fixed buffer or the random buffer The restoration reassembly of the received data is done based on the data length in the exchange data An error will occur if the exchange data setting value a
235. ed as either binary or ASCII code The DIP switch on the front of the E71 is used to set either binary or ASCII For details regarding the setting method refer to Item 4 3 2 6 2 1 Format When Exchanging with Binary Code The command response data item order for when conducting fixed buffer exchange with procedures when exchanging the application data portion of the exchange data as binary code data are shown below 1 Transmission reception data order when exchanging using TCP IP Order when transmitting receiving commands 7 Header Application data Ethernet Subheader Data length setting Text command L H 60 OOH 14 bytes 20 bytes 20 bytes 2 bytes 2 bytes Maximum 1017 words 2 Order when transmitting receiving responses Header Application data data beer lad P 14 bytes 20 bytes 20 bytes o 1 byte Ethernet 2 Transmission reception data order when exchanging using UDP IP G Order when transmitting receiving commands OoOo Header O O Application data na E tal u tc aal 14 bytes 20 bytes 8 bytes es 2 bytes Maximum 1017 words 2 Order when transmitting receiving responses Application data S 14 bytes 20 bytes 8 bytes 1 byte 1 byte 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 2 2 Format When Exchanging with ASCII Code The command and response data item order when conducting fixed buffer exchange with procedure
236. ed buffer exchange buffer exchange with procedure Random access buffer exchange Reading writing data from the PLC CPU using a request from a remote node Code conversion during exchange is conducted by the E71 and all data received between the E71 and PLC CPU is in binary code For this reason a sequence program for code conversion is not required However the selec tion of exchange data codes is done on a unit basis so selection for each port cannot be done MELSEC A 1 GENERAL DESCRIPTION MELSEC A 8 Router relay function Details explained in Chapter 12 Used when exchanging by relaying the router This function does not operate as a router but is a function to make exchange via routers and gateways Access ongin External equipment T Y E71 Station a E a 10BASE5 10BASE2 10BASE5 10BASE2 E m x External 4 equipment Fig 1 8 Router Relay Function Access destination 9 Other remote node existence check function Details explained in Item 5 3 1 Used to have the E71 regularly check if the other remote node for which the connection was made exists When exchange has not been conducted with the other node for a specified period of time the E71 checks whether the node is operating properly When the other node is not operating properly the E71 closes the line connection forced disconnect 10 Accessing a PLC CPU from a peripheral device for the GPP function through Ethernet connection Details ex
237. ed in the E71 the contents can be monitored by a remote node by registering beforehand the extension file register block No and device No that you want to monitor with a remote node in the E71 and then executing a monitor instruction from the remote node Reading using extension file register batch read can be processed in continuous device No but by reading using the monitor it is possible to randomly specify a free device and No and conduct the reading a Monitor operation procedure The operation procedure when conducting monitor is shown below Register in the E71 the extension file register block No and device No for which monitoring will be conducted using monitor data registration Execute read processing using monitor Change the device to be monitored Point 1 In operation procedures like that above where monitoring will be executed the monitor data registration operation must be conducted If monitoring is executed without conducting moni tor data registration an error End code 574 will occur 2 The monitor data registration contents will be erased if the power is turned off or the PLC CPU is reset 3 The 3 types of monitor data registration device memory bit unit word unit and extension file register can be registered in the E71 4 When monitor data registration is performed from multiple remote nodes to the device memory of the PLC CPU on the same station the registration data wi
238. ed to base unit with specified torques Improper installation may Cause erroneous operation failure or the module to fall out CAUTION Be sure that cuttings wire chips or other foreign matter do not enter the module Foreign matter may start a fire or cause an accident or erroneous operation Do not disassemble or rebuild the module It may cause failure erroneous operation injury or fire Make sure to switch all phases of the external power supply off before mounting or removing the module If you do not switch off the external power supply it will cause failure or erroneous operation of the module Tighten the terminal screws within the range of specified torque If the screws are loose it may result in short circuits or malfunctions Tightening the screws too far may cause damage to the screw and or the module resulting in fallout short circuits or erroneous operation Do not touch the electronic parts or the module conducting area lt may cause erroneous operation or failure When disposing of this product handle it as industrial waste 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 5 2 Installation Environment The following environments should be avoided when installing the QnA series PLC e Areas where the temperature range of the surrounding temperature is outside 0 to 55 degrees Cel Sius e Areas where the surrounding humidity exceeds the range of 10 to 90 R
239. eived including the header is stored in the E71 s OS interna buffer The OS internal buffer capacity is approximately 43k bytes The portion of the reception data that exceeds this capacity will be discarded 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 4 Programming This section explains the programming method for conducting exchange between the E71 and the remote node using the fixed buffer and without procedure 7 4 1 Precautions When Creating Programs a Fixed buffer exchange can be conducted when the open request signal Y 8 to YF and the open end signal X10 to X17 are tumed on The initial processing and communica tion line open processing must be completed Refer to Chapter 5 2f The parameter setting contents are taken into the E71 when the open request signal Y8 to YF is tumed from off to on at the boot up Except for that in below the control contents cannot be changed even if the parameter contents are written over while the open end signal X10 to X17 is on 3 fj When using a connection that is UDP open a The settings values of the exchange parameter setting area s exchange address setting area can be changed before transmission or reception and the exchange partner remote node can be changed Therefore data can be transmitted in order to multiple nodes so conduct transmission and reception by switching the partner remote nodes to prevent exchange trouble from occurring b When transmi
240. emote nodes connected to the same Ethernet 2 For simultaneous broadcast communication the user arranges the simultaneous broadcast transmission reception special port No and specifies the port No 7 3 1 Simultaneous Broadcast Communication Transmission When conducting open processing for the partner remote node IP address to which data will be sent as FFFFFFFFH simultaneous broadcast communication transmission can be conducted During simul taneous broadcast communication transmission the E71 changes the request destination IP address to FFFFFFFFH and transmits the data on the Ethernet Example When connection 1 is used ANONG ee ene Set without procedure 1OH 16 UDP and for transmission to 1BH 24 19H 25 Makes the remote node IP address 1AH 26 to a simultaneous broadcast address 1BH 27 Remote node port No Makes the remote node port No the simultaneous broadcast port No arranged by the user During the situation shown in the figure above the E71 makes the request destination IP addresses equal FF FF FF FF makes the request destination port No equal the remote node port No and transmits the fixed buffer s data 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 3 2 Simultaneous Broadcast Communication Reception Making the partner remote nodes IP address to which the data will be received FFFFFFFH and the port No to FFFFH User arrangement No and conducting open processing will receive pr
241. en TCP IP is used Insufficient internal resources for the UDP transmis 9008H sion request Insufficient transmission buffer Conduct the next transmission request after the trans mission end signal turns on Conduct E71 initial processing Correct the initial processing parameter setting val ues Conduct open processing Execute so that the corresponding connection open request signal Y8 to F and the opened end signal X10 to 17 are on at the same time for fixed buffer transmission Retransmit the same data t is possible that the next transmission is conducted without waiting for a response Conduct the next transmission after receiving a response Check the partner remote node check sum calcula tion e Retransmit the same data it is possible that the next transmission was con ducted without receiving a response Conduct the next transmission after a response is received Reception data check some error when using UDP IP Check the partner remote node check sum calculation 13 5 13 TROUBLESHOOTING MELSEC A End Code ae Error Code Description Processing 9059H e Check the partner remote node operation e Check if the connection cable is loose Check if there is a problem with the connection to the transceiver or with the terminator connection Correct the initial parameter TCP ULP timer value A TCP ULP time out error occurs during exchange
242. en exchanging using TCP IP a When a read request is made from the remote node 1 Order during command transmission Application data Ethernet Subheader fe E y o a 61H 14 bytes 20 bytes 20 bytes 2 sop 2 bytes 2 bytes 2 Order during response reception Fo Header Application data page Subheader End code Text command E1H 14 bytes 20 bytes 20 bytes 1 byte 1 byte Maximum 1017 words b When a write request is received from remote node Order during command transmission oo Header O Application data n Ee Subheader Head address a fet Text command L OOH 14 bytes 20 bytes 20 bytes A bytes 2 bytes 2 bytes Maximum 1017 words Order during response reception Application data Ethernet Subheader End code FH 14 bytes 20 bytes 20 bytes 1 byte 1 byte 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 2 Transmission reception data order when exchanging using UDP IP a When a read request is made from the remote node Order during command transmission Application data Ethernet Subheader Head address a a a 61H L FA 14 bytes 20 bytes 8 bytes 2 ol 2 bytes 2 bytes Order during response reception Header S Application data a eae Subheader End code Text command E1H 14 bytes 20 bytes 8 bytes 1 byte 1 byte Maximum 1017 words b When a write request is received from remote node Order duri
243. en the E71 and a remote node This is the count value controlled by the E71 When the count value exceeds one word the count is stopped at FFFFH 65535 The storage values for all the protocol status storage areas can be cleared by the user writing a 0 in addition they are cleared when the power is turned on to the station installed in the E71 and when a reset operation is conducted They are not cleared during initial processing Normally it is not necessary to read this area so read it when necessary during maintenance Buffer memory Address 170H 368 Ne a ee 1 word 172H 370 173 to 17FH 371 to 383 System area Use prohibited mw 180H 384 OH 0 181H 385 Number of times received ICMP packet discarded because of check sum error 1 word 182H 386 Total number of transmitted ICMP packets 1 word i 183H 387 i 184H 388 i 185H 389 186H 390 187 to 18FH 391 to 399 System area Use prohibited word 190H 400 Total number of received TCP packets 1 word i 191H 401 Number of times received TCP packet discarded because of check sum error i 1 word 192H 402 Total number of transmitted TCP packets 1 word 193 to 19FH 403 to 415 System area Use prohibited I rds 1AOH 416 1A1H 417 Number of times received UDP packet discarded because of check sum error OH 0 1 word 1A2H 418 1A3 to 1BFH 419 to 447 System are
244. en the close processing ends The initial request signal Y19 is turned off by the sequence program Point 1 An exchange parameter setting to correspond to the next connection No of the connection No that was pairing opened is not required ignored For information regarding the exchange parameter setting usage application setting and ex change address setting refer to Item 5 4 1 3 This is the remote node that is connected by the remote node in the Ethernet that is connected by the E71 or by the router relay function Refer to Chapter 12 that sets the remote node range with which exchange can be done using pairing open 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES 1 Following is shown the open processing image when pairing is set Request wait l iaj lt Example 1 gt Pairing between E7 1s PLC CPU Ef Connection 1 Connection 2 reception transmission Passive Passive open open Data Data reception transmission HEN lt Example 2 gt Connection between E71 and partner node PLC CPU E71 Connection 1 Connection 2 reception transmission Passive Open MELSEC A PLC CPU Connection 1 Connection 2 reception Mansiuleson Data Data reception transmission Partner node Data transmission Response data reception 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 2 When conducting fixed buffer exchange using pairing open use one po
245. equence program 256 Points set ae ee ee ee T et Tee ae eee SE ee program Balch wilt Man 20H Writes the main microcomputer program ERNA Extension com Drectread seH Reads me extension commentdata e te Direct write 3AH_ Writes the extension comment data o 256 Bytes Parameter Re nize checks the overwritten parameter contents in Analysis request 12H iis nes p 7 the PLC CPU Remote RUN BH See ia Requests a remote RUN STOP of the PLC CPU PLC CPU Remote STOP PLC model read Reads whether the PLC CPU model is A1N A2N A3N ASH The characters received from the remote node are returned to Loopback test 16H 256 Bytes the remote node 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A Subject PLC CPUs that canExecuteCommands si Subject PLC CPUs that canExecuteCommands si CPUs that can Execute Commands 7 A2C A1S A2U ASU A4U AJ72 QLP Q2A PLC CPU State A2CJ a 1 R25 LP25 Q2ASH otis 1 During aie STOP Setting Possible Eai 10 6 4 k E ee E eS A E E E ees 5 TE TE A Lee ee e aa re oe 5 TE E Oa i e Or ed Or eer i oe ee a Oe See SRNR D H OO WE he _ 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 1 Use the E71 s DIP switch SW07 SW03 to set whether it is possible to write to the PLC CPU during RUN SW07 SWO3 ON Write possible during RUN Possible SW07 SWO3 OFF Write not possible during RUN F
246. equest Read data a Raridom access buffer exchange can be conducted from the remote node shown be low except for E71 AJ71E71 and RE Exchange cannot be done between E71 and E71 AJ71E71 or QE71 Remote nodes on the Ethernet to which the E71 is connected O Remote nodes on the Ethernet that are connected using router relay functions Refer to Chapter 12 8 RANDOM ACCESS BUFFER EXCHANGE _ _ _ _ MELSECQMA 8 1 1 Control Method When there i is a Read Request froma Remote Node This section EEE the control method when data is transmitted from the E71 by a read request from a remote node i are er Remote node pue UID ysenbes peey nn enw we wwe we me ee ew eee wl ee we we ee eS re ae er z BYep pees pue esuodsey t 1 t t i t t t Saa t i a k EIT a i A lt Random access buffer i gt aa Ae 1e DAE i N a a ae 1 saat i oe t i tos x t i 1 r a A a a eee se aes te m c we m m o ee ee l BSL SY Oa oo ei Pee ae ar ean er a a la ace ae Ci a PLO CPU Data i is written to the E71 S random access buffer using the sequence program s TO command In addition data i is written to the E71 s random access buffer from a remote node A read request is transmitted from the remote node that will read the E71 s random access butfer contents tothe E71 l When a read request is Teea from a remote
247. er be sure to turn on the reception end check signal YO to Y7 during reception end at the point the reception end signal turns on Turning on the reception end check signal stores the following reception data in the subject fixed buffer 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 i When using without procedure the message does not have a data length The E71 turns on the reception end signal X0 X2 XE after the received message packet size is stored in the reception data length storage area it is recommended that check steps such as including data length and data type codes in the message application data be used to allow the receiving end to identify the num ber of application data bytes and the data types Example For continuous reception of messages from remote nodes 1 and 2 Remote node 1 200 Remote node 2 Line Ethernet i 200 5 E71 Fixed buffer Reception end signal X0 Reception end check signal YO 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 4 2 Program Creation Procedures This section explains the data transmission and reception program creation procedures using fixed buffer without procedure Program Creation Procedure Conduct initial processing Conduct open processing Transmission Program The TO command writes the transmission data to the E71 s specified fixed buffer The TO command sets the transmission data length in the fixe
248. er address can be specified with the head area as OOOOH 0 and the logical address as OOOOH to 17FFH 0 to 6143 e It is not necessary to recognize the channel switching signal I O signal YOO1C on off be tween the PLC CPU and the E71 2 Random access buffer address specified by the sequence program e The random access buffer can be read from written to as a 3k byte area for each of the channel 0 and channel 1 side e The channe O side and channel 1 side random access buffers can be read from written to after the channel switching signal Y001C on off between the PLC CPU and the E71 Y001C off Read write to the channel O side random access buffer YOO1C on Read write to the channel 1 side random access buffer e Set the random access buffer address to physical address 1200H to 1DFFH 4608 to 7679 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA When the O control method of the PLC CPU of the station installed in the E71 is the refresh method and when random access buffer read write is conducted after the buffer memory channel switching signal Y001C is changed from on gt off off on a read write must be performed after outputting the channel switching signal Y001C to the E71 Output the channel switching signal Y001C to the E71 using the tail of Item 3 6 2 Example When the common instruction s SEG is used RST YIC SEG K4Y00 K4B4 FROM HO K4608 DO K10 3 For command transmission the next c
249. er node whose Ethernet header for data link layer has the IEEE 802 3 ISO IEC 8802 3 specifications Ethemet Destination aadress Source address IEEE802 3 Data 46 to 1500 bytes Destination address Source address Appendix 9 E71 Support s ICMP Protocol Shows the ICMP types and E71 processing supported by the E71 ICMPType ICMP Name Description E71 Processing Echo Request When it receives an Echo Request the E71 0 IP packet echo request transmits an Echo Reply Destination Unreachable When data is received by a connection that The IP packet could not reach the partner has not been opened the E71 transmits an destination error reply When the subject destination existence check is set in the buffer memory the E71 trans mits a command when the existence check is conducted 1 Echo Reply IP packet echo results Ignored by the E71 Not yet supported 1 The E71 can receive 2 ICMP ECHO requests type 8 used for existence check etc at the same time and conducts the corresponding processing When 3 or more ICMP ECHO requests are received at the same time the requests from the third and later are ignored When an ICMP ECHO request is transmitted to the E71 from the remote node and a response is not returned to the remote node retransmit the ICMP ECHO request to the E71 APPENDICES MELSEC A Appendix 10 When Using the Ethernet Interface Module with a QnA Type PLC The followi
250. er of devices 1 te 256 Device No for details regarding the specification method refer to Item 10 2 1 ACPU monitor timer unit 250 ms PLC No Subheader Set to OOK when specifying the number of devices as 256 Response format Specified number of devices x 2 2 bytes iA ae es ich tent elt bia ee jo onje fe e n ai aina aaa ammet i bg Final device No contents for the specified No s specified device No Specified device No 1 contents Specified device No contents End code Subheader MELSEC A extension file register Example When the contents of extension file register R70 to 73 for the PLC CPU installed in the E71 are read Command remote node E71 Response E71 remote node QS 3 TOO mY a a a ES 4 points R73 contents R70 00204 R72 contents 87654 2500ms Locai station 013F R71 contents R70 contents 4234 10 55 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU b When exchanging using binary code Command format 12 words PL ee of devices 1 to 256 Device No for details regarding the specification method refer to Item 10 2 1 ACPU monitor timer unit 250 ms PLC Ne Subneader Set to 00 when specifying the number of devices as 256 Response format Specified number of devices x 2 2 words ah ns le B a S S m Final device No contents for the specified No s specified
251. es are shown in Item 7 2 of Appendix f pairing open has been performed for the corresponding connection the signal that was specified when opening will be the target open request signal for the input output signals shown in the figure below For transmission when closed by the partner node ms oF ae 500 ms of more Open request signal Y8 to YF N Open compietion signal X10 to X17 wet a M Transmission request signal YO to Y7 Te D d Transmission normal completion signa X0 X2 HoT N O O O Transmission error detection signal X1 X3 i When an error has occurred Data ACK FIN command or RST m al ACK SYN For reception when closed by the partner node 300 ms or more 500 ms or more Open request signa Y8 to YF N Open completion signal X10 to X17 M M has occurred Reception completion confirmation signal YO to Y7 Siig nina rig Reception completion signal XO X2 p O A When an error has occurred Reception error detection signal X1 X3 Data An RTS or TCP ULP time out a ACK has occurred ACK Response ACK SYN 5 26 1 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 4 4 Pairing Open Communication Line Open Processing and Close Pro cessing Procedures This section explains the open processing and close processing procedures when connecting a com munication line to one partner remote node port when the E71 s reception connection and transmis
252. ette and PLC CPU parameter setting 10 53 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Device Nos are not allocated for block Nos not existing in the memory cassette However device Nos are automatically allocated skipping the block Nos that do not exist in the memory cassette Device No lO Block No 1 area to Block No 2 area Biock Nos 3 to 9 not exist because of insufficient rnemory Capacity to Biock No 10 area to Block No 11 area Block No 12 area Point 1 The ANACPU dedicated commands can only be used when executing read or write of data in the extension file registers for blocks Nos O to 256 In addition these commands can be used regardless of whether the parameter file register settings are valid 2 When accessing the specified file register R using parameters or when accessing by specify ing the block No use the commands given in Item 10 3 6 3 The calculation method for the header device No specified using the ANACPU dedicated com mands is as follows Given that the device No of the nth block from the header is m O to 8191 then Header device No n 1 x 8192 m 10 54 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU 3 fj Extension file register direct read This section explains the command response format when executing an direct read a When exchanging using binary code Command format 12 bytes BE Li H L to mj o B Numb
253. evice Reads data from a randomly designated device Writes the data to a randomly designated device Sets ON the designated bit device Resets OFF the designated bit device mdControl Carries out remote RUN STOP PAUSE in respect to the designated PLC CPU md yoeread Reads the type of designated PLC CPU 4 Various utilities are enclosed The communication between the PLC and personal computer can be tested and monitored with the communication diagnosis utility and device monitor utility enclosed with the product APPENDICES MELSEC A Appendix 11 2 Examples of using basic communication support too Programming procedures and program examples for connecting to the PLC s Ethernet interface mod ule and computer link module and accessing the PLC s CPU from a personal computer are described in this section For the program example the personal computer reads the data register D in the A QnA Series PLC CPU and displays the results on the screen Programming procedures Outline flow of procedures The flow of the data read process for creating a personal computer side program to access the PLC CPU using CSKP is shown below Outline procedure Set with Utility Open failure Carry out with user program The destination s communication setting can be made without a program Start Start the Ethernet utility and set the destination 1 Ethernet utility settings Open th
254. ex A Closed Processing Procedure ccce 5 12 PARNO ioan tied datednaureewalgtsenaureeeeniones 5 27 A1SJ71E71 B2 Previous Products 1 12 FOP UDP cccccccccsscccccccsssessesseeseessseceeee 5 23 AERAR ae Haa eee wee be Closed Processing Program Example 5 11 a et UET 1S U Giese lees Si acc ite Command List For Exchanging Data in PLC CPU 9 12 A aad at SEO e E E N E 1 1 Comparison with Previous Products acs 1 44 ee aNets EAN ONS anres Pale Compatibility with Previous Products A 1 ACUS ODON orreen eeir a 5 16 AOE E 4 1 A TE APOGUS FOALS acas eo aeaes mele Continuous Processing Using Connection 3 9 lepers ees LE A CPU Exchange Timing Setting SW7 SW3 4 4 AJ71E71 Comparison With ocssccereereas 1 11 AJT TOET BS saei n a 1 12 D Application Data Fixed Buffer Exchange With Procedure 6 7 Data Code Setting SW2 eeeereeeeeeeerens 4 4 Fixed Buffer Exchange Without Procedure 7 7 Data Exchange during the PLC CPU is Stopped 5 40 PLC CPU Data Exchange 10 1 Exchangeable Functions ccecce 5 42 Random Access Buffer Exchange 8 4 SONGS eanna E 5 40 Application Module sesseresrerrrrrrrererrenrse 2 2 Data Read Write in PLC CPU PRP anena Ea a TN 1 3 GONTOLMEOG oniiiuiaan aa 9 1 ASCI COde Tale snie non renea A 10 Dala FORMAL en A 10 1 AUI Cable Transceiver Cable rers 2 4 DEVICE LIST ensuite need aaa 10 13 DEVICE Pande si aero aA 10 13 B nd COGS nini rA 10 5 EO OO
255. ff status of the PLC CPU installed in E71 Command remote node E71 Response E71 remote node 64 00 904 00 20 sooo oor Local 2500ms M100 12 points Station paganong tivil viyy M101 M103 M105 M107 M109 M111 Status status status status amp status status M100 M102 M104 M106 M108 M110 status status status status status status 10 15 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format 12 words 010 Number of device paints 1 to 256 points Head device No For details regarding the specification method refer to Item 10 2 1 ACPU monitor timer unit 250ms PLC No Subheader 1 Set to 3030xH when specifying the number of device points as 256 points 2 1 byte of dummy data 30 is added to the response data when the number of specified device points is odd For example 4 points worth of data is returned when 3 points are read The last 1 byte is the dummy data Response format Number of specified device points 2 2 words a a TE 8 0 a 30x L Last device No on off setting for the specified device No Specified head device No 1 s ON 3TH on off specification OFF 30H Specified head device No on off specification End code Subheader Example When reading the M100 to M111 on off status of the PLC CPU installed in E71 Command
256. fod O L b in data to the final address for the specified address Write data to the specified head address 1 Write data to the specified head address Byte length 1 to 256 bytes Head address ACPU monitor timer unit 250 ms PLC No Subheader Main program 20H Subprogram 21 Set to OOH when specifying the byte length to 256 bytes Response format End code Subheader Main program AQH Subprogram ATH Example When writing the main microcomputer program 1C5x to 1C8 of the PLC CPU installed in the E71 Command remote node E71 Prop b Peet yeaa ee ee Da Write data to the address 1C8x Write data to the address 1C7H Write data to the address 1C6H Write data to the address 10 5x 4 bytes Head address 01C5x 2500 ms Local station Response E71 remote node ojo 10 95 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A o When exchanging using ASCII code Command format Specified byte length 8 words Dr ee hg che ree ee de aa Re TERS Bt ee SRE Pap E TE eg eee ee ae ee ee Oa Se ae Nr pee Are pel any Write data to the final address for the specified address Write data to the specified head address 1 Write data to the specified head address Byte length 1 to 256 bytes Head address ACPU monitor timer unit 250 ms PLC No Subheader Main program 3230H 20H Subprogram 3231H 21H Specify as GO30 when specify
257. fresh time 10ms e ar Remote I O station link refresh time 2ms e LS Link scan time 30ms Because the above Sm gt LS the formula is as follows When there is one master sta tion Transmission Time T1 120 10 x 3 30 x 1 420ms Sm a m LS Point There will be an appropriate delay corresponding to the conditions during data transmission to a PLC in which an E71 is not installed on the MELSECNET 10 The transmission delay time for exchange with the PLC can be reduced by using the E71 installed station PLC No FFx only and using the MELSECNET 10 data link LB LW for exchange with remote station PLC 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 1 3 Exchanging with the PLC CPU in the Data Link System EE When reading and writing in the PLC CPU reading and writing can be done to the other station PLC in the MELSECNET II and MELSECNET B via the PLC CPU in which an E71 is installed within the data link system specification range Ethernet fee 3nerwer ee wee Master station M Remote node Local station L3 Local station L1 For MELSECNET II Local Station L2 2 The PLC that conducts read write is specified in the PLC No FFH 00H to 40H in the command text X Remote Node Access Station When E71 is installed Local station Master station on the MELSECNETI I Other station Ex cept 1 above eee a Local station Remote station on the MELSECNET II
258. h con nections are made with multiple remote node ports Sets a single E71 port No even though connec tions are made with multiple remote nodes How ever several connections must be open Do not perform this when the local station is unpassive Sets multiple E71 port Nos even though connec tion is made to the same remote node port How ever several connections must be open Remote node Multiple settings when the remote node same port and the E71 s same port is only possible for pairing open settings 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 2 Remote node IP address setting Default value OH Hest sh tui ec ean tenaeiea naga ees oe eae ete aad Address 19H to 1AH 25 to 26 e Sets the IP address for the partner remote node to which exchange will be con ducted e Specify the settings value as other than OH and FFFFFFFFH except for when simul taneous broadcast communication is performed exchanged without procedure UDP IP by fixed buffer FFFFFFFFH is the setting value for the simultaneous broadcast communication mentioned above Conduct setting after checking the mutual re mote node s IP address 3 Remote node port No setting Default value OH Address 1BH 27 e Sets the port No for the primary remote node for which exchange will be done e Specify the settings value as between 100H and FFFEH except when simultaneous broadcast communication is performe
259. hange Reading writing data to the PLC CPU O Exchange is possible by diverting as is the program for the AJ71 E71 Exchange Functions When using E71 exchange functions other than those above create a new exchange program 3 Change the E71 IP address class to class A through class C Set tne IP address to be set in tne E71 for the primary remote node and conduct open processing data exchange Appendix 2 Adding the Ethernet Interface Module to the Existing System The E71 and AJ71E71 can coexist in the same Ethernet The wiring used for the AJ71E71 can be used as is in the existing system Ethernet that contains the E71 APPENDICES MELSEC A Appendix 3 Processing Time Use the following formulas to calculate the minimum transmission delay time for each function However the transmission delay time is sometimes increased by the network load rate line connec tions each node window size the number of connections used at the same time and the system configuration The value found using the following formula is used as the transmission delay time mea sure when conducting exchange while using one connection Fixed buffer exchange minimum transmission delay time When exchanging between E71 and E71 a For TCP IP 47 0 025 x Command data length 0 025 x Response data length The unit is a byte The unit is a byte Transmission scan time Reception scan time ms b For UDP IP 47 0 023 x Command d
260. hange When conducting read or write divide the data into several pieces and read or write all areas 4 Conduct read write for the A4UCPU subsequence program for the sub 1 Read and write cannot be conducted for sub 2 to sub 4 10 74 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 2 Program Read Write This section explains the processing procedure when conducting program read write a Read procedure Execute parameter data read oee Refer to Item 10 6 3 2 Execute main sequence program read eree Refer to Item 10 6 4 2 Execute main T C set value read When there is no subsequence program Execute subsequence program read eee Refer to Item 10 6 4 2 Execute sub T C set value read When there is no main microcomputer program Execute main microcomputer program Rafer to Item 10 6 5 read o When there is no submicrocomputer program P submicrocomputer program Fe Refer to Item 10 6 5 2 When there is no comment cata Execute comment data read eree Refer to Item 10 6 6 2 10 75 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU Write procedures Program wite es MELSEC A Stop the PLC CPU using remote STOP refer to Item 10 5 of the PLC CPU etc beforehand Execute parameter data write eee Refer to Item 10 6 3 3 Execute parameter analysis request J Refer to Item 10 6 3 4 Execute main sequence program write oon Refer to Item
261. hange with procedure Remote node exchange processing using the fixed buffer is conducted during the handshake with the remote node for data transmission from the PLC CPU and data reception from the remote node 1 The exchange processing data flow is as follows PLC PU FROM command External equipment ae QE71 2 Data exchange can be conducted with remote nodes in the Ethernet to which E71 is connected and with remote nodes that are connected by a router relay function Refer to Chapter 12 As is shown in the diagram below the various fixed buffers No 1 to No 8 are used to set the remote node with which to exchange and the usage availability for transmission and for reception with procedures and without procedures etc using the E71 s communication line open Refer to item 5 5 to set the exchange partner for each buffer CG When TCP IP is used a fixed buffer exchange partner setting using the parameter settings becomes valid when the E71 s open end signal changes from OFF to ON during boot up The exchange partner cannot be changed while the open end signal is on 2 When UDP IP is used the fixed buffer exchange partner can be changed after open pro cessing It is possible to change the exchange parameter s remote node IP address and remote node port No but is not possible to change the local station s E71 s port No Exchange Pariner Transmission for remote node 1 Fixed Buffer No 1
262. hanging data using ASCII code a When reading to and writing from bit device memory The bit device memory is sometimes handled in bit units 1 point units and word units 16 points The following explains the thinking regarding the various transmission data Bit unit 1 point unit When the bit device memory is handled in bit units and if the specified device number of points portion from the specified head device are turned on in order from the left then 1 31H is displayed and if off then O GOH is displayed Example When the 5 points from M10 are displayed in ON OFF Head device 41DizioioialoioioioioiA 1 30H Expressed with a dummy when the number of points is odd shows that M14 is on Shows that M13 is off shows that M12 is on Shows that M11 is off Shows that M10 is on 2 Word units 16 point units When the bit device memory is handied in word units one word is 4 bit units and the word is displayed in order from the first bit using hexadecimal numbers Example When the 32 points from M16 are displayed in on off Because of the 16 point unit the number of devices becomes 02 Head device A B t 2 3 4 C D MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 1 On is shown 0 Off is shown 10 10 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When reading to an
263. he display LED s LED names will be shown using the AJ71E71 S3 names 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 5 Mounting and Installation This section explains the handling precautions that are common for modules and about the installation environment from the time the E71 is unpacked until installation For details regarding module mounting and installation please refer to the user s manual of the PLC CPU module being used 4 5 1 Handling Precautions This section explains the handling precautions for the E71 module itself For the cautionary items regarding module installation and removal refer to the Safety Precautions described in the beginning of this manual 1 The E71 s case is made of plastic so do not drop it or subject it to strong impacts 2 The tightening torque for module terminal screws and installation screws should be kept within the following range a AU71E71 S3 Tightening Torque Range Power supply line connection terminal screws M4 screws 98 to 137 N cm Module installation screws normally not required M4 screws 78 to 118 N cm b A1SJ71E71 B2 S3 A1SJ71E71 B5 S3 Tightening Torque Range Power supply line connection terminal screws 40 N cm Module installation screws M4 screws 78to 118 N cm insert the tabs at the bottom of the module into the mounting holes in the base unit before installing the module Modules in AnS series make sure screws are securely tighten
264. he error codes that are returned as a response from the remote node during fixed buffer exchange on the subject communication line are stored as binary values b The action to be taken by the end code in the response is conducted in accordance with the arrangements with the remote node c The end code can be cleared by conducting the following operations A reset operation is conducted for the PLC CPU or the PLC s power supply is turned off Fixed buffer exchange s exchange time Each defautt value 0H 60H to 62H 96 to 98 a Each of the fixed buffer exchange processing times maximum value minimum value current value are stored Q Fixed buffer transmission processing time The time from when the transmission request signal turns on to when the E71 con ducts a transmission end The processing time is not stored when the transmission error occurred Fixed buffer reception processing time The time from when the reception end signal turns on to when the E71 ends in re sponse to the response return processing from the remote node b The processing time is stored as a binary value in 1Oms units c Each exchange time is changed to 0 when the subject communication line s open re quest signal Y8 to YF is changed from off to on MELSEC A 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 3 Error Log Area Buffer memory Address AAH 170 Area 2 OH 0 ACH 172
265. he status is normal are shown in each function explanation item from Item 10 2 and later 2 The application data portion data order is as follows when the response end code is 5 B error end Application data B we DORR 2 bytes mes 2 bytes 2 bytes 10 3 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 1 3 Exchange Data Item Contents The following shows the command and response data item contents when conducting exchange by reading writing data in the PLC CPU For the response returned to the remote node by the E71 the E71 automatically sets the data so it is not necessary for the user to make the setting Header The header is the header used by the TCP IP or UDP IP For the E71 it is added or removed by the E71 so the user is not required to do the setting Subheader The subheader format has the configuration shown below B87 B6 B5 B4 B3 B2 B1 BO E Command response classification Differs for each function For details refer to ttem 10 2 or later Command response flag For command 0 For response 4 PLC No This shows for which PLC station the remote node conducts exchange by reading writing data in the PLC CPU Specify the target PLC station s PLC No in accordance with tem 9 1 2 and Item 9 1 3 a When exchanging using binary code the PLC No is shown using a binary value b When exchanging using ASCII code the PLC No is shown using ASCI code when ex pre
266. hese transmission data Bit unit 1 point unit When bit device memory is handled in bit units 1 point is specified as 4 bits and if the specified device number of points portions from the specified head device are turned on in the order from the first bit then 1 is displayed and if off then O is displayed Example When the 5 points from M10 are displayed in on off Head device 1 l t 1 i t t t i l i 10 M Expressed with a dummy when the number of points is odd Shows that M14 is on Snows that M13 is off Shows that M12 is on Shows that M11 is off Shows that M10 is on 2 Word unit 16 point unit When the bit device memory is handled in 1 word units 1 point is specified as 1 bit and the specified device number of points from the specified head device is 16 point units so the bits are expressed in the order from Low bytes L bits O to 7 to the High bytes H bits 8 to 15 Example When the 32 points from M16 are displayed in on off Because of the 16 point unit the number of devices becomes 02 Head device l i l l l t 101 00H 1 00H 1 OOH J t l l l 1 2 A B G D 3 4 MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM 23 22 21 20 19 18 17 16 31 30 29 28 27 26 25 24 39 38 37 36 35 34 33 32 47 46 45 44 43 42 41 40 1 On is shown 0 Off is shown 10 8 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When reading to and writing from the word device
267. hich the read request was transmitted 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 2 J Communication procedure when the remote node reads the data written by the PLC program The sequence program TO command writes data to the E71 s random access buffer A remote node transmits a read request command to the E71 Refer to Item 8 2 for information regarding command and response The E71 transmits as a response the format random access buffer data to the remotes node from which the read request was received E Exchange procedure when the data written by a remote node is read by the PLC program The remote node transmits a write request and write data as command to the E71 Refer to Item 8 2 for information regarding commands and response The E71 retums a response to the format remote node from which the write request was transmitted and stores the write data in the random access buffer The E71 s random access buffer data is read by a sequence program FROM command With random access buffer exchange a handshake cannot be conducted using the E71 s I O signal READING WRITING DATA IN THE PLC CPU SECTION The reading and writing data in the PLC CPU section describes the method for reading and writing device memory and programs in the PLC CPU by the remote node s external devices via the Ethernet interface module and the method for conducting remote control of the PLC CPU The read write of data i
268. ial initial be end end Fullpassive Open unpassive Oren elie request Open Open wait _ request Active end Open open end Specify one of the following settings 00 Active open or UDP IP default value 10 Unpassive open 11 Full passive open 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A Remarks Shows the differences between each open format Active open method Conducts active open processing for the remote nodes that are in the TCP connec tion open passive state Full passive Unpassive open state 2 Full passive open format Conducts TCP connection passive open processing for only the specified nodes that are set in the exchange address setting area Changes to the active open request wait state from the remote node that is set in exchange address setting area Unpassive open format Conducts TCP connection passive open processing for all the remote nodes con nected to the network All the remote nodes in the network change to the active open request wait state c Following is an example of the usage available setting area data setting Bit position b15 b1i4 b13 b12 bii bIO b9 b8 b7 Po T oreol gt O Toro 1 Fixed buffer usage availability 4 Communication format 2 Destination existence check Fixed buffer communication procedure 3 Pairing open setting existence 6 Open method setting Example 1 When set to is 0 Pairing open not done is O With pr
269. ible range when the exchange instruction during STOP is set to enable 3 Data exchange on a 1 1 or 1 n with each remote node exchange using the fixed buffer a This conducts data exchange between the remote node and the PLC CPU ona 1 1 TCP UDP or a 1 n UDP only basis using the E71 s fixed buffer b The E71 has 8 fixed buffers with a memory capacity of 1k words and the partner remote node with which exchange will be done application transmission reception and the pro tocol to be used TCP UDP can be set for each fixed buffer Exchange between an E71 and another E71 is possible When conducting transmission and reception with the same remote node 2 fixed buffers are required Setting pairing open using communication line open processing creates a pair containing a reception fixed buffer and a transmission fixed buffer and connects the partner remote node with 1 port through which data can be exchange Detailed explanation in Item 5 4 4 Example E71 buffer memory Partner remote node Connection No 1 Fixed buffer for reception Reception data Connection No 2 Fixed buffer for transmission Transmission data 1 GENERAL DESCRIPTION MELSEC A d When exchanging with fixed buffers exchange can be done using either the E71 proce dure with procedure or without procedures Please refer to Item 3 3 for details regarding the amount of data that can be transmitted at one time M
270. ication Simultaneous broadcast communica tion function refer to Used to transmit fixed buffer data or to put reception data in the fixed buffer the way it is received Because it is without procedure the handshake with the remote node must be done by the sequence program Remote node Transmission coat Transmission request Transmission end ANST sori E Gaia Transmission end Reception end IG PReororon sata Reception cata reac On Fig 1 5 Fixed Buffer Exchange Without Procedure e When transmitting data After the transmitted data is written in the fixed buffer and the transmission request signal is turned on the data of the specified number of words is transmitted and the transmission end signal is turned on The transmission end response does not wait for a reception signal e When receiving data When the data of the specified number of words is received and stored in the fixed buffer the reception end signal is turned on When the reception data is read from the fixed buffer and the reception end check signal is turned on the reception end signal turns off The reception end response does not wait for a transmission signal EJ Simultaneous broadcast communication Details explained in Item 7 3 User for simultaneous broadcast to all remote nodes on the same Ethernet that is connected to the E71 using the UDP IP functions refer to fixed buffer exchange without procedure This makes it possible t
271. ices Item 4 7 Verifying the Connection Method 13 11 1 13 TROUBLESHOOTING MELSEC A 13 2 1 Transmission Error during Fixed Buffer Exchange Common for Both with Procedure without Procedure Transmission error Check the on line state of the connection with the exchange remote node ls the subject connection open NO ending X10 to X17 is on YES Read the open error code Buffer memory address 93 103 in the exchange state storage area and check whether an error has occurred NO Has a parameter error occurred YES Read the contents of the exchange error code storage area Buffer memory address 94 104 of the buffer memory of the subject fixed buffer and check if any exchange errors have occurred NO Have errors occurred YES Is the parameter s remote node iP NO address setting correct YES Do the communication protocols TCP NO UDP with the exchange node match YES Point Conduct the error code read marked when the transmission re quest signal YO to Y7 is on The error code will become zero when the transmission reception signal is off conduct open processing for the subject connection For details refer to Item 5 4 Repair the error contents based on the error code Refer to item 13 1 Repair the error contents based on the error code Refer to Item 13 1 Correct the remote node IP address Make th
272. ing bo The stored value is not set in the closed state Open error code Default value OH ccsssccsssssscrsessereessveneaase Address 5DH 93 a Stores the open processing results of the subject communication line b The open processing results are stored as binary values O Normal end Other thanOQ Error end refer to Chapter 13 for information regarding error control items c Conducting the operation shown below will clear the error code When reopening the connection for which the open error occurred When the open request signal is turned OFF to ON When a PLC CPU reset operation was conducted or when the PLC power supply was turned off Fixed buffer transmission reception error code Default Value OH Address 5EH 94 a Stores the error code refer to Chapter 13 for details regarding error code items when the error detection signal X1 etc is turned on by the data transmission reception with the remote node during fixed buffer exchange on the corresponding communication line b The transmission error codes are cleared under the following conditions The fixed buffer transmission request reception end check signal for the connection for which an error occurred is tumed off e A reset operation is conducted for the PLC CPU or the PLC s power supply is turned off Fixed buffer exchange end code Default value OH scc08 Address 5FH 95 a T
273. ing AnSCPU A2ASCPU processing points for A1SJCPU AnACPU points between each the E71 and the sequence remote node 256 points Number of Number of scans required for processing 1 scan Specified number of points 32 scan Decimal point rounded off 256 points Bit device 128 words 32 words 2048 points 512 points Maximum 4 scans Other than device R Specified number of points 64 scan Decimal pont rounded off Batch read Word unit Word device Maximum 4 scans Device R Specified number of points 64 1 scan PL NAANA Net lal el al ae al Neal al Sal al ell NE Na Decima point rounded off 1 13ms 256 points 64 points Device Device Maximum 5 scans f i x cata NAY Bit unit 1 13ms 1 06ms 256 points 256 points see Seen wipes Seto posse aut ing Specified number of points 10 1 scan Decimal point rounded cff Bit 40 words 10 words l 1 13ms 2 60ms l l O when set to possible device 640 points 160 points during RUN Maximum 5 scans Other than device R Batch Specified number of points 64 1 scan i ENP PN LOND NANE NINIS ESINAINE Nel Nf eal dl al al ONE write Decimal point rounded off Word l C when set to possible unit during RUN ele 1 13ms 2 60ms 256 points 64 points Ye nea device Specified number of points 64 1 sca
274. ing STOP 1 When the initial request signa Y 19 is off exchange is enabled during STOP Exarnple setting e Set to 0003H to continue exchange between connection No 1 and connection No 2 when the initial request signal Y19 is left on and after the open request signals Y8 Y9 are turned from on to off e Set to 8003H to continue exchange between connection No 1 and connection No 2 after the initial request signal 19 and the open request signals Y8 Y9 are turned from ori to off 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 4 2 Communication Line Open Processing Procedure This section explains the open processing procedure for connecting a communication line from the E71 to a remote node using an example for connection No 1 To conduct open processing initial processing must be completed Open processing procedure using TCP SS Initial normal end x19 signal e Open request signal Y8 ee a PLC P ee Open end signal X10 l Write from the TO command ete Ye ge gr ee E ee E71 Exchange parameter setting area T i Ethernet SYN SYN ACK ACK Initial normal end X19 Me signal Open request signal Y8 Open end signal X10 Write from the TO i 4 1 t i I 1 1 1 4 i i 4 t t t 4 t t L I 1 i i I t 1 i 1 t i i L t t t t i i 4 4 i 1
275. ing and text commana portion format when exchanging with ASCII code Example 4 bytes 4 bytes Maximum 1016 words Application data Subheader Data length setting Text command Conversion between ASCII code and binary code H L Data length setting Transmission N 3 reception data n 9 E 30H 31H Maximum 508 words portion n shows the target fixed buffer header address 512 1536 n 1023 T Point 1 The maximum exchange data capacity that can be handled by the PLC CPU when binary code is specified is 1017 words The data length setting range is 1 to 1017 The unit is a word 2 The maximum exchange data capacity that can be handled by the PLC CPU when ASCII code is specified is 508 words This is an exchange data amount that is approximately one half that of when binary code is specified The data length is communicated using ASCII code 0001 to O1FC when the number of words is expressed in hexadecimal notation The setting range is 1 to 508 The unit is a word End code This shows the end code that is added to the response when conducting fixed buffer ex change The end code is stored in the buffer memory s exchange status storage area When binary code is specified When ASCII code is specified 304301 50H Command response classification un 35H380H Command response classification undefined defined error error Number of data words error 35H32 Number of
276. ing the byte length as 256 bytes Response format End code Subheader Main program 4130H AQH Subprogram 41315 Ath Example When writing the main microcomputer program 1C5x to 1C8x to the PLC CPU installed in the P71 Command remote node E71 2 OIF FO 0O O AIO 1 C 50 410 0 1 2 jA BS Ly C 32H 30l 46H 464 304 30H 30H 41HI30H 31H 43H 35H130H 34HISOH SOHISTH 32H 41H 42H 35H 46H 37H 43H Nn pe pn nt rr 20H Local station 2500ms Head address 4 bytes O1CSx 04H Write data to the address 1C8H Write data to the address 1C7x Write data to the address 1C6xH Write data to the address 1C5h E Response E71 remote node A 01 0 O 414 30H 30 30x 10 96 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 6 Comment Read Write This section explains the control procedure specification contents method and example specification when reading writing PLC CPU comment data EH Commands and addresses This section explains the command response classification and comment data addresses when reading writing comment data a The functions used to read write comment data are shown in Table 10 12 Table 10 12 Function List PLC CPU status Number of Command processing response Processing description points con Write Write classification ducted in one Stopped possible impossible exchange setting setting Batch read 4Cu Re
277. int error_kind Error processing function 1L1f error kind ERROR_INITIAL printf Initial processing is abnormal elsef nErrorStatus WSAGetLastError switch error_kind case case case case case case case ERROR_SOCKET printf Socket could not be created break ERROR_BIND printf Bind could not be done break ERROR_CONNECT printf Connection could not be established break ERROR_SEND printf Transmission could not be conducted break ERROR_RECEIVE printf Reception could not be conducted break ERROR_SHUTDOWN printf Shutdown could not be conducted break ERROR_CLOSE printf Normal close could not be conducted break APPENDICES MELSEC A printf The error code is d n nErrorStatus if Closeflag FLAG_ON nErrorStatus shutdown socketno 2 Shutdown processing nErrorStatus closesocket socketno Close processing Closeflag FLAG_OFF Comnection end flag off printf Ends the program Push any key n Dmykeyin getchar Key input wait WSACleanup Winsock DLL Release return APPENDICES MELSEC A Appendix 7 2 Sequence Programs for All Functions An example of a common sequence program for conducting exchange with procedure using a fixed buffer memory exchange using a random access buffer memory and data read write in the PLC CPU is shown below EN Sample program e
278. into any area of the random access buffer When a read request is received from a remote node the data written in the specified area of the random access buffer and an end response is transmitted e When receiving data When a write request is received from a remote node the received data is stored in the specified area of the random access buffer and a write end response is transmitted The received data is read from the random access buffer e Writing to and reading from the random access buffer from a remote node can be freely done between nodes set in the E71 parameter For this reason the random access buffer can be used to store common data and to receive and relay data between remote nodes There is no need to use the PLC CPU memory 1 GENERAL DESCRIPTION 6 Reading and writing inside the PLC CPU via a request from a remote node general data exchange detailed explanation in Chapters 9 and 10 Use to read and write remote station PLC data via local station PLC installed in the E71 and data link systems network systems from the remote node with MITSUBISHI MELSEC com munication support software tool 1 inserted In addition the PLC CPU state can be con trolled from a remote node using remote RUN STOP etc DLC CPU Remote node Command A sequence program by the user is not Remote node required when reading and writing data Command inside the PLC CPU Response Fig 1 7 Reading a
279. ion by connection Same as above For connection No 5 BB to 94H 139 to 148 i H Local station E71 s port No Information by connection Gamea anes For connection No 6 95 to SEH 149 to 158 i Local station E7 1 s port No Information by connection Canea above For connection No 7 9F to ABH 159 to 168 Local station E7 1 s port No information by connection l Same as above For connection No 8 After processes end from initial processing the corresponding values are stored in order aT Local station E71 s port No Default value OH sssessresssesessssses Address 59H 89 a Stores the port No when the subject communication line was connected by open pro cessing b The storage values are not set during the closed state 2 Remote node IP address Default value OH Address 5AH to 5BH 90 to 91 a Stores the partner remote node s IP address for when the subject communication line was connected using open processing Exampie The following is the data that is stored when the IP address is A20009C0H Address Buffer memory SAH 90 O9CO0H SBH 91 A200H b The stored values are not set that are in the closed state 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES Remote node port No Default value OH ccccsesesssssssssssssnneees Address 5CH 92 a Stores the partner remote node port No for the communication line connected by open process
280. ion contro protocol This protocol retains the data reliability and correctness for the TCP protocol level Establishing a connection creates a theoretical connection as if a special line were created between the nodes A maximum of 8 connections can be established at the same time and communication to multiple buffers can be done at the same time e Data reliability is maintained by using a check sum for PLC control and data read transmit functions using the PLC No The communication data flow can be controlled using window operations Supports a MAX SEGMENT option UDP User datagram protocol This protocol retains the data reliability and correctness on the UDP protocol level However if the data does not reach the target node it will not be retransmitted Because it is connectionless high speed transmission is possible A check sum is used to increase the reliability of the transmitted data However when greater reliability must be maintained use a user application or TOP IP Internet protocol Data transmissions can be sent and received using the datagram format The transmitted data can be divided and reassembled Routing options are not supported ARP Address resolution protocol e A broadcast is used to find the Ethernet physical address from the IP address gt ICMP Internet control message protocol Has a function to transmit IP error messages Please refer to the attachment for informa
281. ion data is stored in the subject fixed buffer by reception processing the E71 updates the buffer memory address 59H to A8H 89 to 168 subject connection s remote node IP address and remote node port No lf there is a reception from remote nodes that are not set in the buffer memory address 18H to 4FH 24 to 79 the E71 will ignore the reception data For details refer to Item 7 3 2 remarks When the TCP IP unpassive open data is transmitted to and received from the re mote node stored in the buffer memory address 59H to A8H 89 to 168 subject area 7 2 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 1 1 Transmission Control Method This section explains the control method for transmitting data to the remote node from the E71 using transmission of the fixed buffer No 1 data to a remote node request signal YO Transmission normal end signal X0 PLC CPU Transmission we es s eo ese ee ew wwe we ew es eee eee BR Ze Vee ee ee eee eee ee ew ajum puewwoo OL a ee ee ee Q Initial processing end open processing end a m n e e ee ewe ewe eee mm r Peet ewe n www eww ee w Fixed buffer a hae csc ce E ss ya hy ses aS a nae cs lca ek way ee er a sy eee ce ea ve eS ae ee as ea es a0 baa mae ew tae eae ea ae ea pe ace A 55 30 ao ACK 3 Only TCP Performs E71 initial processing Refer to Items 5 2 through 5 3 Performs line open processing with the remote node Refer
282. istered device No contents for monitor data registration PLO No _ __ Subheader For bit devices 16 points portion on off status from the second registered device No for monitor data registration For word devices The second registered device No contents for monitor data registration 16 points portion on off status from the first registered device No for monitor data registration For word devices The first registered device No contents during monitor data registration End code Subheader Example When Y50 to 5F D38 and W1E are set using monitor data registration for the PLC CPU that is installed in the E71 Command remote node gt E71 Response E71 remote node 30H 39H 46 gt 464 30H 30 30 41 38 39 130 30H 454 35H 264 444131 32H 33H 34H 35H 36H 37r 38H ko x i mar aa Loca station 2600ms D38 content WIE content 12344 5678H YSF to Y58 YS to Y50 10 39 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 3 Extension File Register Read and Write An extension file register is a file register that uses the empty area of the PLC CPU user memory area as a memory area for storing the data and calculated results required for the various types of data processing This section explains the control procedure specification contents method and an example specifica tion for reading and writing the following extension file register 10 3 1 Commands and
283. ith the exchange remote node Is the subject connection open ending X10 to X17 is on NO YES Was a command transmitted NO from the remote node YES Was a response retumed to the node that transmitted the command NO YES lis the response end code zero NO YES Conduct open processing for the subject connection For detaiis refer to Item 5 4 Transmit command to the E71 is the command IP address specification correct NO YES Does the communication protocol TCP UDP with the exchange remote command NO YES It is thought that the remote node on the command transmission end has not transmitted a command to the E71 Check the transmission end Repair the error location based on the end code Refer to 13 1 contents 13 16 Correct the IP address and retransmit the command Make the communication protocol TCP UDP with the exchange remote node match For details refer to item 5 4 13 TROUBLESHOOTING MELSEC A is the command iP address specification NO Correct the IP address and retransmit the command YES Is the E71 buffer memory address specified in the command settings correct and retransmit the command NO Correct the E71 buffer memory address YES Has data been written from the remote node NO Data read Has the data been set in the specified address
284. ive TCP IP Only conducts initial processing and open processing b Remote node IBM PC AT side program The above library is used to conduct exchange for reading wniting data in the following PLC CPU e Word unit write DO to D4 5 points e Word unit read DO to D4 5 points EAPN Refer to Item 10 2 5 EEES Refer to Item 10 2 3 c When exchanging ASCII code data is exchanged APPENDICES MELSEC A 1 The E71 switch settings are as follows Setting switch Setvalue Setting description Operation mode setting switch 0 JOnine switches during TCP timeout error Set all switches SW3 to SW6 use not possible to off Windows and Microsoft are registered trademarks of the Microsoft Co LTD Other company names and product names are trademarks and registered trademarks in which the corresponding companies have rights Sequence program Following is an example of an exchange partner E71 installed station ASUCPU sequence program PLS wo Initial instruction E71 initial processing DMOV HOC00001FD DO Stores the E71 IP address Local station instruction error IP address detection DTO HO KO DO K1 Writes the E71 IP address Local station iP address SET Y19 Initial request 8000 Ki Connection No 1 open initial WOT Open Open Open Close processing normal error end request impossible instruction Writes the connection No 1 s end det
285. l 46H 46H 304 30H 30 41130 30H 30 32 38 307 30 34 gt 94 30 30H 30H 30 46H 45 44h 4139x1431 42H ee Local station 2500ms Parameter read at 4 bytes yy head ita Dde Parameter address 283 contents 000280 Parameter address 282 contents Parameter address 281 contents Parameter address 280H contents 10 79 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU ES Batch write MELSEC A This section explains the command response format when writing data to the PLC CPU buffer memory a When exchanging using binary code Command format Specified write byte length 8 bytes pene ere es te ee eee ae ke ee es Tb Jeee PL Write data to the specified head address 1 Write data to the specified head address Write byte length 1 to 256 bytes Parameter write head address lee 123456H A ACPU monitor timer unit 250ms PLC No Subheader Set to 00 when specifying the byte length as 256 bytes Write data to the final address for the specified address Response format End code Subheader Example When writing data to the parameter memory 285n to 288 of the PLC CPU installed in the E71 Command remote node E771 OAH OOHI85H O24 00 oso a a IA IA IAA Locai 2500ms i 4 bytes station Parameter write Write data to the parameter address 288H head address Write data to the parameter address 287 000285x Write data to the parameter address 286H Write data to th
286. l Lib wsock32 da1l ByVal netiong As Long As Long Declare Function ntohs Lib wseck32 dll ByVal netshort As Integer As Integer Declare Function inet_addr Lib wsock32 dll1 ByVal cp As String As Long 4 Const wsS_MAXMUD 1024 Global ws_data As WSADATA Function ws_terms MsgBox Exit sample program End Function Function ws_inits Dim r r WSAStartup amp H101 ws_data LE r 0 THEA If ws_data wVersion lt gt amp H101 Then r WSAVERNOTSUPPORTED If WSACleanup lt gt Q Then r WSAGetLastError End If End If End If wS_init r End Function Function ws_ start Dim sock As Integer 16 bitVB is integer Dim sock As Long 32 bitVB is long Dim addr As sockaddr_in Dim s_in As sockaddr_in Dim s_buf r bufs Create soket ws _start 1 sock socket AF_INET SOCK_STREAM 0 If sock lt 0 Then MsgBox Socket error amp WSAGetLastError Exit Function End If APPENDICES MELSEC A Bind s_in sin_family AF_INET s_in sin_addr s_addr htonl INADDR_ANY Personal computer side s_in sin_port htons 0 Personal computer side port 1924 to 5000 If bind sock s_in Len s_in lt gt 0Q Then MsgBox Bind error amp WSAGetLastError Exit Function End If Request connect Active open addr sin_family AF_INET addr sin_addr s_addr inet_addr 150 33 114 153 PLC side addr sin_port htons amp H2000
287. l for up to the rated voltage of 300V is 2500V 2 This index indicates the degree to which conductive material is generated in terms of the environment in which the equipment is used Pollution level 2 is when only non conductive pollution occurs A temporary conductivity caused by condensation must be expected occasionally 3 SPECIFICATIONS MELSEC A 3 2 Performance Specifications This section explains the E71 performance specifications Table 3 2 Performance Specifications 10BASES 10BASE2 Data transmission speed 10Mbps Transmission method Maximum distance between Wiha specifi nodes im tt 2500 8202 10 925 3034 77 one Maximum segment length m ft 500 1640 42 185 606 96 Maximum number of nodes 100 Units Segment 30 Units Segment Minimum node interval m ft 2 5 8 20 0 5 1 64 Transmission and re Fixed buffer 1k Word x 8 ception data storage memory Random access buffer 3k Word x 2 Max 20 stations Refer to Item 5 2 Point More external nodes can be connected by repeating the initial processing AJ71E71 S3 1 50 Hardware version products before B version 0 48 Hardware version products after C version When using 1OBASE2 0 26 Hardware version products after C version When using 1OBASE5 A1SJ71E71 B2 S3 0 52 Hardware version A version 0 57 Hardware version B to D version 0 49 Hardware version products after E version 0 35 Number of external nodes that
288. latest 10 stations to which exchange has been conducted 3 When the CPU communication timing setting of the E71 communication condition set ting switch is off write prohibited it is added only when data is written from remote node e Reason for transmission time 11 delay When commands that require two scans device write etc when the DIP switch SW7 SW3 is off etc are executed then the value is calcuated using the above formula Refer to Item 9 3 for the required number of scans when a remote E71 GPP function etc e Lengthen the CPU monitoring timer s monitoring time from the other station when exchange is conducted with the other station via the data link system Refer to the data link system reference manual for details regarding data links 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A Example When the E71 is installed in the MELSECNET Il master station and the local station s device memory is read Conditions L lt LS lt M M 80ms ai 10ms Transmission Time T1 M x 4 a1 x 4 M x 1 80 x 4 10 x 4 80 x 1 440 TI is 880ms M MELSECNET master station scan time al MELSECNET master station link refresh time LS Link scanner time L 2 MELSECNET local station s scan time Point Depending on conditions a considerable delay can occur in data transmission to the PLC in which an E71 is not installed on the MELSECNET The transmission delay time can be reduced by usi
289. lculated using the above formula Refer to Item for the required number of scans when a remote E71 GPP function etc requests access to the same PLC CPU at the same time e Increase the CPU monitoring timer s monitoring time from the other station when exchange to other station is conducted via MELSECNET 10 Example For details regarding network systems refer to the network system reference manuals When an E71 is installed in the station on the MELSECNET 10 net between PLC and the device memory for a remote system on the same MELSECNET 10 is read Second ex change time when the number of exchange stations is under 10 e ST Transmission scan time 120ms e a T Transmission link refresh time 10ms e SR Receive scan time 100ms e aR Receive link refresh time 5ms e LS Link scan 30ms e Number of simultaneous transient requests 3 e Maximum number of times for transient 2 Using the user set value when for the QnACPU Transmission Time T1 120 x 2 10x24 30x64 100x2 5x2 ST aT LS SR aR 3 Number of simultaneous transient requests 1 x30 x 2 120 x 1 890ms 2 Maximum number of transient times LS ST Adjustment value Decimal round off MELSEC A 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A For Remote O Net H 1 Please refer to the explanation of transmission delay time in the network system reference manual 2 When exchange is conducted for the first
290. ld be set Exchange Parameter Settings Area Buffer Memory Address 10H 16 nH ie 12H 18C 13H 19 Usage available settings area 14H 20 1 word each 1SH 21 16H 22 17H 23 18H 24 mi a Remote node IP address 1BH 27 Exchange address settings area 1CH 28 Remote node D For Connection No 1 7 words 1DH 29 Ethernet n FFFFFFFFFFFFH 1EH 30 A ere 1 1F to 25H 31 to ka aN For connection No 2 7 words a Se For connection No 3_7 words For connections No 4 7 words For connections No 5 7 words For connections No 6_7 words For connections No 7 7 words 26 to 2CH 38 to whey 2D to 33H 45 to a a SaaS 34 to 3AH 52 to so ETE 3B to 41H 59 to 42 to 48H 66 to 72 49H 73 1E 71 s port No A fe Remote node IP address OH 0 4BH 75 Exchange address settings area 4CH 76 l ADH 77 For connections No 8 7 words 4EH 78 FFFFFFFFFFFFH 4FH 79 If the partner remote node connected by the communication line has an ARP function broad cast please make the default value FFFFFFFFFFFH Instruction Area Buffer Memory Address instruction Area 1 Word Default Value 1FOH 496 Communication specification during STOP area 1 word OH 0 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A EN Usage available settings area Default value OH address 10H to 17H 16 to 23
291. le resulting in fallout short circuits or erroneous operation When detaching the communication cable or power cable from the module do not pull the cable portion For cables with connectors hold the connector at the junction to the module then detach it For connectors without connectors first loosen the screw at the junction then detach the cable Pulling the cable portion while it is connected to the module may cause a malfunction or damage to the module and cable CAUTION Be sure that cuttings wire chips or other foreign matter do not enter the module Foreign matter may start a fire or cause an accident or erroneous operation STARTING AND MAINTENANCE PRECAUTIONS Do not touch the terminals while the electricity is on Doing so could cause erroneous operation Make sure to switch all phases of the external power supply off before cleaning or re tightening screws If you do not switch off the external power supply it will cause failure or erroneous operation of the module If the screws are loose it may result in fallout short circuits or erroneous operation Tightening the screws too far may cause damage to the screws and or the module resulting in fallout short circuits or erroneous operation Do not disassemble or rebuild the module It may cause failure erroneous operation injury or fire Make sure to switch all phases of the external power supply off before mounting or removing
292. le during STOP is set Data exchange can be continued Random access buffer exchange and exchange of read write data in the PLC CPU are possible Change the setting to exchange prohibited during STOP Set the buffer memory address 1FOH to OOOOH Exchange circuit close processing is conducted after the open request signal Y8 is turned off after the setting has been changed to exchange prohibit during STOP End processing is conducted after the initial request signal 19 is turned off after the setting is changed to exchange prohibit during STOP 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 2 When initial processing and open processing are reperformed when the setting for data exchange while the PLC CPU is stopped is changed midway for connection No 1 Changed from exchange data while the PLC CPU is stopped to do not exchange data while the PLC CPU is stopped a When the open request signal Y8 and the initial request signal Y19 are turned off after the setting is changed to exchange prohibited station installed in E71 PLC CPU status RUN STOP RUN Exchange enable Enable Prohibited Enable prohibit during STOP O Initial request signal Y19 l a t Initial end signal x19 gnal X19 O O J Open request signal Y8 i Open end signal X10 i i l i i Data Data Data Data exchange exchange exchange exchange possible canbe possible
293. ll be overwritten Thus the device memory last registered will become effective 10 48 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Monitor data registration This section explains the command response format when registering the extension file regis ter device to be monitored a When exchanging using binary code Command format Number of specified devicesx8 6 bytes iL ay Na Block No specification Device No specification For details refer to Item 10 2 1 Number of devices 1 to 29 lt ACPU monitor timer unit 250 ms PLC No Subheader Response format 2 bytes n a Soa E End code Subheader Example When setting the extension file register No 2 block s R15 and No 3 block s R28 of the PLC CPU installed in the E71 Command remote node E71 ine Q0 OF 00 004 G04 20H sr 02s Oo 00H OC 09 20x se On Nm a I a wie 2300ms oc 2500ms 20 points Biock No 2 s R15 Block No 3 s R28 all Response E71 remote node 10 49 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Number of specified devicesx8 6 words Device No and block No H to LICH to t Number of devices 1 to 20 Device No specification ae ACPU monitor timer unit 250 ms For details refer to Item 102 1 PLC No Biock No specific
294. mand fina Head transmission gata transmission data Data length 1 to 256 bytes same data as the command second e ACPU monitor timer unit 250 ms transmission data Subheader Same data as the command nead transmission gata Data length specified by the command End code Set to 00 when specifying the data length as 256 Subheader bytes Example When conducting a loopback test using data 80H 314 414 and 424 Command remote node gt E71 Response E71 gt remote node a Local bytes station 2500ms 10 108 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Response format Specified byte length 5 bytes Specified byte length 3 bytes oe 1 6 F F f t t 4 h onele 1 e efe ofe f ow Se Final transmissor data ame data as the command Second transmission data i am data i Head transmission data Same data as the command Data length 1 to 256 bytes second transmission data ACPU monitor timer unit 250 ms gt Same data as the command Subheader ee i transmission data ess length specified by the command End code Remarks Subheader Set to 3030 when specifying the data length as 256 bytes Example When conducting a loopback test using data 12345678 Command remote node gt E71 Response E71 remote node 6 F F O 0 0 AJO 4 3 415 617 8 9 6 0 0 0 4 4 5 617 8 AA S6HI464 46l 30H 30H 30H
295. manual for the QnACPU of the accessed station and take corrective action Confirm the operation of the other partner node Confirm the open processing of the other partner node Correct the set value for the usage of the communica tion parameter See 1 in Section 5 4 1 Review the port number of the E71 as well as the IP address port number and the open method of other nodes Check to see if the connection cable is securely con nected e Check to see if the transceiver and terminator are correctly connected Same as the corrective action for error code BOOOr See the corrective action for BOOO Be sure to use a default value when using an ARP function End processing has not been conducted Conduct initial processing after conducting end processing The next transmission request was conducted even 8003H though the transmission processing has not been com pleted 8004H A system error has occurred 8005 An initialization error has occurred because of an error M in the initial processing parameter 90011 The open processing for the corresponding connec tion has not been completed A fixed buffer transmission nas been conducted dur ing closed processing Before the open end signal X10 to 17 is turned off because the open request signal Y8 to F turned off Insufficient internal resources for the TCP transmis sion request Insufficient transmission buffer Reception data check some error wh
296. memory The word device memory is specified in one word as 16 bits so the specified device number of bits from the specified head device is in 1 bit units and the bits are displayed in the order from the Low bytes L bits O to 7 to the High bytes H bits 8 to 15 Example When the stored contents in data registers D350 and D351 are displayed Head device SEH 01H 1 00H 1 00H A B 5 i 6 0 i F 1 i 7 7 as B5 B4iB3 B2 B1 Bojas B14 B13 B12 811 B10 B9 88 87 B6 BS B4 B3 B2 B1 Bo Bis ew B13 812811 BIO B9 Bel 1 0 130 1 0 1 21 0 1 0 1 051 1 0 0 0 0 0 131 14 1 0 0 0 1 0515111 1 On is shown 0 Off is shown 5 6 A B 7 i F OLOTO DOLO OTO T TOOTO T HOOO OUR hA The D350 contents show 56ABH The D351 contents show 170FH 22187 in decimal 5903 in decimal Point When other than integers real numbers character strings are stored in the word device memory that will read the data the E71 reads the stored values as integer values Example When real numbers 0 75 are stored in DO to D1 the following integer values are read DO 0000H D1 3F40H Example 2 When character strings 12AB are stored in D2 to D3 the following integer values are read D2 3231H D3 4241H The same thinking as used for the word device memory also applies to word data that handles buffer memory reading and writing 10 9 70 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exc
297. mined as a message by the E71 lt ____ ____ First message _ __ _ Second message gt Subheader Data Subheader This portion is actually not a subheader so a cCOMmand response undefined error occurs 1 if the error mentioned in above is generated an error code is stored for one of the error information storage areas shown below in the E71 buffer memory e Exchange state storage area e Error log area 3 SPECIFICATIONS MELSEC A 3 5 2 Continuous Processing Over the Same Connection The following explains the procedure to transmit data between E71 and other nodes over the same connection and the E71 processing when continuous data transmission is performed from other nodes to the E71 over the same connection Procedure to transmit data between other nodes and E71 When transmitting data between other nodes and E71 perform data transmission after the processing for the previous data transmission is complete For example when data transmissions accompany responses the next data transmission should be commenced after the response to the previous transmission is received if data transmission is continued without following the above procedure an error may be generated on the E71 side the connection may be closed or the open error detection signal X18 may turn on The E71 processing during continuous data transmission is performed from other nodes to E71 The followi
298. mission normal end signal is turned on when the data transmission is com pleted The transmission normal end signal is turned off when the transmission request signal YO to Y7 is turned off 4 The transmission normal end signal is not turned on when a transmission error is gen erated The transmission error detection signal X1 X3 X5 X7 X9 XB XD XF is turned on When fixed buffer number 1 is used With procedure Without procedure Transmission request Transmission request signal YO signal YO Transmission normal Transmission normal End signal XO end signal XO O D D Q 3 3 D Qa 3 SPECIFICATIONS MELSEC A bo When used as reception end signal When exchanging with procedure Turns on when the E71 receives data from a remote node 2 Can be used as the handshake signal when reception data is read from the PLC CPU using the FROM command etc 3 The reception end check signal YO to Y7 is tumed on after the reception data is read using the FROM command etc A response is returned to the remote node that transmitted the data 4 Reception end signal is automatically turned off after a response is sent to the remote node The reception end signal is not turned on when problem data is sent from the remote node When exchanging without procedure AO Turns on when the E71 receives data from a remote node Can be used as the handshake signal when the received data
299. mpleted Closed state Bue Be Connection No6 _ RAM CHK RAM ERR ROMO 1 The TO LED in the above figure is replaced with the FROM TO LED in AJ71E71 S3 hardware version C or later The FROM LED is removed 53 1 For the above LEDs when RUN turns off after the power is turned on a watch dog timer error can be suspected The watch dog timer error detection signal X1F will also turn on 2 The RDY in the above LED flashes when operation is started by the online mode mode setting switch is set to 0 and the initial processing finishes normally 3 Of the above LEDs the BSY exchange processing executing is done during the following times BSY is lit while retrying processing during data transmission a For Transmission Procedure e Until a reception response is received from the command transmission e Until a transmission error occurs from the command transmission until time out b For Reception Procedure e Until a response is returned from the command reception 4 For the LEDs shown in Table 4 2 the BUF1 to BUF8 B1 to B8 communication line connection state shows the line connection state with the partner set by the exchange parameters The open completed signal X10 to X17 ON OFF state can be checked using these LEDs Here data can only be exchanged using connections that are opened 5 The COM ERR LED can be turned off by output signal Y17 Point In the explanation hereafter in this manual t
300. must be the same as the local station s subnet ID 2 Number of registered routers Default value OH ccccesereeees Address 1C4H 452 a Sets the number of subject routers number of valid settings using the following subnet address n and router IP address n when conducting exchange with a remote node on a remote Ethernet via anything other than the default router 1C5 to 1C6H 453 to 454 1C7 to 1C8H 455 to 456 109 to 1CAH 457 to 458 1CB to 1CCH 459 to 460 10D to 1CEH 461 to 462 1CF to 1DOH 463 to 464 1D1 to 1D2H 465 to 466 1D3 to 1D4H 467 to 468 1D5 to 1D6H 469 to 470 1D7 to 1D8H 471 to 472 1C4H 452 O IL 2 os b Sets the setting value to 0 to 5 If a value higher than 6 is set it will be seemed as 5 c Sets the specified numbers portion of the subnet address n and router IP address n in the following and area 12 3 12 WHEN USING ROUTER RELAY FUNCTIONS MELSEC QnA 3 Jj Subnet address n Default value OH c cssccsccsssecsecsssceeceesseresees Address 1C5H 453 a Sets the partner station s subnet address and net address when conducting exchange with a remote node in a remote Ethernet via anything other than the default router b Sets to either of the following when the settings value is other than 00000000H and FFFFFFFFH G Specify the partner station s subnet address when the partner station and the local station are the same class Exam
301. n m Decimal pont rounded off Maximum 5 scans APPENDICES MELSEC A Maximum PLC CPU processing Number of time scan extension number of processing AnSCPU A2ASCPU processing points for Number of scans required for A1SJCPU AnACPU points between each processing the E71 and the sequence remote node program scan Specified number of points 20 1 scan Decimal point rounded off Bit unit 1 13ms 1 06ms 80 points 20 points o when set to possibile during RUN Maximum 5 scans Specified number of points 10 AR scan Decimal point rounded off Bit device 40 words 640 points 10 words 160 points O when set to possible during RUN Tesi random write Maximum 5 scans Other than device R Specified number of points 10 1 scan Decimai point rounded off Word O when set to possible unit during RUN Device memory Word device Maximum 5 scans Specified number of points 10 1 scan Decimal point rounced off 1 13ms 40 points 10 points Device data Maximum 5 scans Monitor data register 2 ee ee eee ee 1 scan for device R only Bit unit _2 02me cre en 2 08ms 47ms 320 points 320 points a 20 words 20 words Word 1 scan d 2 08ms 1 47ms 20 points 20 points devic
302. n Close end end check request impossible Instruction 2 K17 H8001 K1 Open processing Connection 2 TCP IP Unpassive open end detection CON 2 2 2 mais Reception using fixed buffer ready Exchange using random D15 Loca access buffer ready station port Read write data in the PLC No 2 CPU ready Kt Y9 Open request 2 11 Y9 X1F Open Open WDT Exchange request error possible CON 2 2 detection 2 X18 Y9 X11 X1F i 287 FROM K103 D19 Kt Open error processing Open Open Open WDT Open error Connection 2 error request end error ae detection 2 CON 2 detection 2 lt gt KO D19 TOP K103 KO Kt Open error code 2 MOVP D19 D101 Open error Open error code code 2 2 SET W32 Close instruction permit 2 M2 320 FROMP K496 D106 KI Exchange enabled while PLC Exchange Exchange CPU is stopped possible nerumian 1or Connection 2 current stop state 2 0106 H8002 D107 Exchange Exchange instruction tor instruction for current stop new stop state 2 state 2 TOP K496 D107 K1 Exchange instruction for new stop state 2 APPENDICES MELSEC A Read instruction permit 2 u2 l 350 a N72 Fixed buffer reception processing i Butfer CHO Connection 2 switch request 2 354 SET ME Channel switch of buffer memory Buffer cHo completed switching Reading from the fixed buffer of 2 connection 2 is possible RST M72 Butter CHO switch request 2 n GEN YIC Buffer CH switch 366 D30 K1
303. n data storage area Transmission data length storage area E Fixed buffer No 2 reception data length storage area Fixed buffer No 6 Transmission data write area 1024 words reception data storage area 201 to SFEH 513 to 1535 600H 1536 601 to 9FFH 1537 to 2559 AQOH 2560 Transmission data length storage area Fixed buffer No 3 reception data length storage area OH 0 Fixed buffer No 7 Transmission data write area 1024 words reception data storage area nsmission data length stor area rannis ever guis ede Fixed buffer No 4 reception data length storage area Fixed buffer No 8 Transmission data write area 1024 words reception data storage area Buffer for random access ri aac 3072 words A01 to DFFH 2561 to 3583 EOOH 3584 E01 to 11FFH 3585 to 4607 1200 to 1DFFH 4608 to 7679 3 SPECIFICATIONS MELSEC A Point The following table shows the relationship of the parameters and functions that must be set when using the E71 functions Random Reading and Fixed Buffer Exchange With Proce Without Parameters Procedine Access Buffer Writing Data Parameters for initial processing in the PLC CPU Exchange parameters Usage applications Bit Buffer application OCT o J x q o x x Bit 1 Existencecheck a T a T a A o ax Br amg CT CA A A KCK _Bit8 Communication forma Oo o oOo O o x _Bit9 Exchange procedu
304. n file register No 3 block s R100 to 102 for the PLC CPU installed in the E71 are written Command remote node gt E71 reff pa oee 00 004 00h 20H 52 09m O14176 1 Na rp a A at ge SS ea Local 2500ms i 3 points station Block No 3 Wnte data 1234 to plock No 3 s R102 Write data 9876 to block No 3 s R101 brn gt Write data 01094 to block No 3 s R100 Response E71 remote node 10 44 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format Specified number of devices x 2 14 words ee of devices 1 to 256 PCG Device No for details regarding the specification method refer to Item 10 2 1 Block No specification for details refer to ltem 10 3 1 ACPU moniter timer unit 250 ms PLC No Subheader L Fira device No data tor the specified biock No s specified device No specified device No 1 data for the specified block No ees pious Specified device No data for the specified Remarks block No Set to 30304 when specifying the number of devices as 256 Response format End code Subheader Example When the contents of extension file register No 3 block s R100 to 102 for the PLC CPU installed in the E71 are written Command remote node gt E71 F FIO O 0 ALO 0O 0 315 22000 00 0 0 6 410 3 aL a 46H 46Hl 30H 30H 30H 41130 30K 30 324135 32H 324 301 30H 30K 30H 30 BUH 3
305. n in Table 10 13 Table 10 13 Functions List a CPU status Number of Command processing response Processing description points con Stopped Running classification ducted in one 7 P possible ibe exchange setting setting Batch read Reads the extension comment memory contents 256 bytes Seas Writes the data to the extension comment memory In the PLC CPU status column in the above table the capital O represents execution possible and the capital x represents execution not possible b Extension comment memory address Extension comment data storage area can be managed by using the corresponding ad dress for the head address 0O For example when the parameter extension comment Capacity is 2k bytes the range that can be sent by the head address is 00x to 7FFx The maximum capacity of the extension comment memory is 63k bytes The exten sion comment data address range is determined by the parameter setting capacity Extension comment memory address specification is done using hexadecimal num bers If the head address specified number of bytes 1 lt is not the comment memory capacity an error end code 574 will occur Point 1 Read write of the extension comment data cannot be done by specifying the special device or device No Be sure to read all of the data from Ou when reading writing 2 Reading writing of extension comments can only be conducted for the ANACPU and
306. n items contained in the PLC CPU s module s user manual Do not touch the terminals while the electricity is on Doing so could cause erroneous operation lt 1 DANGER Make sure to switch all phases of the external power supply off before cleaning or re tignhtening SCrews if you do not switch off the external power supply it will cause failure or erroneous operation of the module if the screws are loose it may result in fallout short circuits or erroneous operation Tightening the screws too far may cause damage to the screw and or the module resulting in fallout short circuits or erroneous operation Do not disassemble or rebuild the module It may cause failure erroneous operation injury or Z CAUTION fire Make sure to switch all phases of the external power supply off before mounting or removing the module If you do not switch off the external power supply it will cause failure or erroneous operation of the module Do not touch the electronic parts or the unit conducting area lt may Cause erroneous operation or failure r A A A Sy Pf a a aa S m a a o p v a e a a a an a v SS EE a e a a p e a a ae a a pp SSES a ma e me e e A Ny e a a g o g o a a p a a 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES 5 1 Overview of Exchange Procedures This section shows the general procedure used to exchange data between the E71 and a remote no
307. n reception special port No and specify the port No for it 2 The simultaneous broadcast communication transmission message is set to all the nodes on the Ethemet to which the E71 is connected All of the nodes connected to the same Ethemet determine whether the received mes sage broadcast by simultaneous broadcast communication is necessary and when unnecessary must conduct read and discard processing When the transmitted message is unrelated to a particular node the particular node will discard the received message In addition even if a particular node is the subject station do not return a response The E71 will automatically perform this processing 3 J The application data amount that can be handled at one time for transmission or recep tion is a maximum of 2046 bytes If data of 2047 bytes or more must be transmitted or received divide it at the transmission origin When the reception data is read to the PLC CPU when the reception end signal X0 X2 XE is turned on be sure to tum on the corresponding reception end check signal YO to Y7 Turning on the reception end check signal YO to Y7 makes it possible for the E71 to store the received data in the subject fixed buffer Not turning on the reception end check signal Y0 to Y7 could cause the reception data to be discarded During the period between when the reception end signal turns on to when the reception end check Signal is turned on the data to be rec
308. n the PLC CPU can be conducted regardless of the PLC CPU s RUN STOP status when the data exchange function is used while the PLC CPU is stopped After connecting the communication line using the initial processing and open processing shown in Chapter 5 conduct a read write of data in the PLC CPU In addition conduct close processing and end processing when the data exchange ends in the corresponding communication line When conducting read write of data in the PLC CPU first read the explanation regarding common items in Chapter 9 The read write using E71 is explained in Chapter 10 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 READING WRITING DATA IN THE PLC CPU EXCHANGE This section explains the control method command list and data exchange precautions when reading and writing PLC device and program data etc via the E71 from a remote node 9 1 Control Method This section explains the control method when reading and writing data in the PLC CPU EN Reading and writing data in the PLC CPU can be performed regardless of the E71 s 1 0 signal on off state and the existence of the data exchange sequence program 2 When writing to the PLC CPU from a remote node the write approval prohibition during PLC CPU RUN can be selected using the CPU exchange timing setting switch on the front of the E71 Exchange timing setting switch Refer to Item 4 3 2 SW7 SW3 OFF Writing from a remote node is not possible during P
309. n with the timing shown in the diagram below When fixed buffer No 3 is used Transmission request signal Y2 Transmission error detection signal X5 A TCP retransmission timer value The data retransmission time when ACK is not returned after the data is transmitted When removing the retry processing shown above 0 times perform the following setting TCP ULP time out value TCP end timer value TCP retransmission timer value Each timer value should be the same 2 The destination existence check is the function that the E71 uses to check whether the partner remote node is operating correctly when exchange with the partner remote node that is connected by the connection has not been conducted for a set period of time In particular wnen exchange has not been conducted for a set period of time with the remote node an echo request packet is transmitted to the partner node using a PING command ICMP echo request response function to conduct an existence check of whether an echo response packet can be received When the E77 receives a PING command echo request command an echo response packet is automatically transmitted as a response The E71 s existence check range is restricted to remote nodes con nected by the focal station E71 to the Ethernet and to remote nodes opened by the router relay function The E71 conducts existence checks in accordance with the destination existence check settings Refer to Item 5 4
310. nal X10 turns off for either normal close or error close The open request signal Y8 can be turned on immediately after the open end signal X10 turns off Initial request signal Y19 is turned off by the sequence program Point The open end signal X10 to X17 is automatically turned off and the communication line will be closed in the following cases in addition to a close request To reopen first turn off the open request signal Y8 to YF once and then conduct open processing 1 When the DIP switch SW1 is set to off the line is closed by a TCP ULP timeout error the open end signal will turn off when the following timeout occurs Timeout during TOP transmission Partner remote node existence check function timeout At this time the open error detection signal X18 turns on 1 When the DIP switch SW1 is set to on Line does not close the line will not close even when the above timeout occurs The open error detection signal X18 will not turn on However the error code will be stored in the buffer memory described in 1 below 2 The open end signal will turn off when a close or ABORT RST command is received from the partner remote node 3 The open end signal will turn off when transmission of the ABORT command is conducted At this time the open error detection signal X18 will turn on 1 4 When the active open request is received again from the other node during the TCP IP open end state the
311. nal Y8 i l t j l Open end signal X10 i eaaa Coo Data Data Data Data Open exchange exchange exchange exchange processing possible can be possible S aA continued Initial processing Setting during Set the buffer memory address 1FOH to 0000H Prohibited ACK FIN ACK Remote node Data exchange with the remote node can be conducted by turning the open end signal X10 on Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible 2 The PLC CPU of the station installed in the E71 enters the STOP status and the initial request signal Y19 and open request signal Y8 are turned off Close processing and end processing are not conducted because exchange enable during STOP is set Data ex change can be continued Random access buffer exchange and exchange of read write data in the PLC CPU are possible The PLC CPU in the station installed in the E71 enters the RUN status and the initial request signal Y19 and open request signal Y8 are turned on Initial processing and open processing are not conducted because the exchange enable during STOP is set Data exchange can be continued Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible 4 The initial request signal Y19 and open request signal Y8 are turned off Close process ing and end processing are not
312. nation O to FH Oto 15 initial processing parameter settings area 16 words item 5 3 1 10to 4FH 16to 79 5SO0to S5H 80to 85 Exchange parameter setting area 64 words Item 5 4 1 Initial processing state storage System area ae 2 wee _ Exchange state storage area 80 words tem 5 9 2 S6 to 58H 86to 88 59to A8H 89to 168 Exchange state storage area Error log area 11 words Item 5 5 3 System area Pr Ue peed 188 words Each protocol state storage area A9to BS3H 169to 179 B4to 16FH 180to 367 170to 1BFH 368to 447 1COto 1C1H 448to 449 Sub net mask settings area 2 words 10210 1D8H 45010 472 1D9to 1EFH 473 to 495 Systems area Use prohibited 238 words 1FOH 496 Instructions area 1Fito 1FFH 497 to 511 200 to SFFH 512 to 1535 Systems area Use prohibited 15 words _ Fixed puffer No 1 1024 words Fixed buffer No 5 1024 words mn 600 to 9FFH 1536 to 2559 Fixed buffer No 2 1024 words Fixed buffer No 6 1024 words Chapter 6 AOO to DFFH 2560 to 3583 Fixed buffer No 3 1024 words Fixed buffer No 7 1024 words Chapter 7 T Fixed buffer No 4 1024 words Fixed buffer No 8 1024 words Random access buffer Random access buffer Sera First half 3072 words Last half 3072 words ae Access to the fixed buffer and ran dom access b
313. nd 10BASE2 NO changeover switch in the correct YES Is the mode setting on line NO YES Was there a mistake with the exchange data s code binary ASCII setting NO YES Refer to the PLC CPU user manual s troubleshooting and try to recreate the cause of the error Reset the PLC CPU if the E71 s RUN LED is not lit even after being reset then a hardware error is suspected in the E71 Replace the 71 and restart all nodes that were communicating with it Firmly lock the cable Correctly the 10BASE5 and 10BASE2 changeover switch Set to on line 0 If the data code for the reception node and the transmission node are different the command cannot be correctly interpreted so data transmission and reception cannot be performed Change the settings of the exchange conditions setting switches Refer to Item 4 3 2 on the front of the E71 13 10 13 TROUBLESHOOTING MELSEC A O Has initiat processing ended X19 on NO X19 OFF Conduct initial processing Refer to items 5 2 to 5 3 YES is it connected with 10BASE2 Check the grounding condition of the power supply module in the E71 installed station NO Ground the LG terminal and FG terminal and try to exchange with the remote node after starting up the E71 2 Are the LG and FG terminals grounded YES Check for error locations in each exchange processing and repair l l T
314. nd Writing the PLC CPU a When a remote node transmits a request for a read write of data inside the PLC CPU to the E71 the data in all devices programs commands and parameters is transmitted to or received from the E71 b When the PLC CPU installed in the E71 is connected to a data link system or a network system data can be exchanged to and from the remote PLC CPU For details refer to Item 9 1 c Because all data exchange is conducted between the E71 and the remote node data exchange can be conducted by having the sequence program only conduct initial pro cessing and communication line open processing It is not necessary to create a special Sequence program to exchange data Communication programs in the personal computers to be connected to Ethernet or computer link can be simplified by using the following communication support soft ware tools manufactured by Mitsubishi Electric which support communication be tween MELSEC A or QnA series PLC and personal computers e SWnD5F CSKP E type basic communication support too The overview and application examples of basic communication support tools are shown in Section 11 in the Appendix Refer to it as needed Selecting the exchanged data s data code Details explained in Item 3 3 Use the following functions to select an exchange data code ASCI code binary code that matches that of the remote node when exchanging data between the E71 and the remote node e Fix
315. nd actual data length are different EN When the set data length is smaller than the actuat data amount Wait until the data amount set in the data length is transmitted An error will occur if the remaining data is not received within the response monitor timer so close processing will automatically be conducted for the connection 2f When the actuai data amount is larger than the set data length The system will attempt to process as the first data the data amount set in the data length and as the second data the next data Because this second data does not have a subheader a command response undefined error will occur Data sent by a remote node E71 determined data First data Second data U This portion is processed as a subheader The response at this time is to return a code of 1 for the code s first bit position that was processed as a subheader For example if the command subheader portion is 65H the response subheader will become E5H 13 8 13 TROUBLESHOOTING MELSEC A 13 1 2 Error Codes Returned to the Remote Node by Reading and Writing Data in the PLC CPU This section explains about the error codes that are attached to the responses to the data read writes to the PLC CPU using E71 commands Error codes are only attached when the end code is 5B End codes error codes with responses attached are described in Item 13 1 1 Response format Subheader Error code When an error code is stored the end code
316. nd byte length is longer than that pre scribed During data write the specified write data number e Check and reset the command data of points is different from the number of points speci fied value data is not registered e Conduct monitor data registration e Reading and writing cannot be performed after the final address Correct the specified address it was set beyond the parameter setting range s fi nal address e During the extension file register block No specifi e The command head address from a remote node cation a range of block No were specified that ex e Correct the block No ceed the subject memory cassette s capacity head device No address step No from a remote node that exceeds the specifiable range was set Correct all processing to values in the specifiable e A microcomputer program for file register R read range ie that is outside the PLC CPU s parameter set lg The extension file register block No specifications e The bit device s header No is specified at values e A file register R is set for the A1 N CPU e A word device is specified using bit device com tings was specified are for blocks that do not exist Correct the block No e The A1 N CPU cannot use file registers mands e Correct the commands or the specified device other than multiples of 16 using word device com mands An extension file register read
317. nducting monitor is shown below During monitor data registration the device for which monitoring will be conducted is registered in the E71 by a remote node Execute read processing using monitor Change the device to be monitored Point 1 In operation procedures like that above where monitoring will be executed the monitor data registration operation must be conducted f monitoring is executed without conducting moni tor data registration an error End code 57 will occur 2 The monitor data registration contents will be erased if the power is turned off or the PLC CPU is reset 3 The 3 types of monitor data registration device memory bit unit word unit and extension file register can be registered in the E71 4 When monitor data registration is performed from multiple remote nodes to the device memory of the PLC CPU on the same station the registration data will be overwritten Thus the device memory last registered will become effective 10 32 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 Monitor data registration This section explains the command response format when registering devices to be moni tored a When exchanging using binary code Command format Number of specified device points x 6 bytes ee A ae RE a BSL ee ee a IPE ST TE a olin nee Device No For details regarding the specification method reter to ltem 10 2 1 Head devi
318. ne SOCK_NG define BUF_SIZE 8 define ERROR_INITIAL define ERROR_SOCKET define ERROR_BIND define ERROR_CONNECT define ERROR_SEND define ERROR_RECEIVE define ERROR_SHUTDOWN define ERROR_CLOSE typedef struct sck_inf struct in_addr my_addr unsigned short my_port struct in_adder aj_addr unsigned short aj_port hy int nErrorStatus int Dmykeyin int Closeflag int socketno OrRCcCrH SIAN U BP WDH FO End flag off End flag on Normal end Error end Eaffer size Initial error Socket creation error Bind error Connect error Transmission error Reception error Shutdown error Line close error The error information storage variable Dummy key input Connection end flag MELSEC A eae APPENDICES MELSEC A int main WORD wVersionRequested MAKEWORD 1 1 Windows Ver 1 1 Request WSADATA wsaData int length Exchange data length unsigned char s_buf BUF_SIZE Transmission buffer unsigned char r_buf BUF_SIZE Reception buffer struct sck_inf sc struct sockaddr_in hostdata Personal computer side data struct sockaddr_in aj7le7l1 AJ71E71 side data void Sockerror int Error processing function sc my_addr s_addr htonl INADDR_ANY Personal computer side IP address sciamy port htons 0 Personal computer side port No sc aj_addr s_addr inet_addr 192 0 1 253 E71 side IP address C00001FDh sc aj_port htons 0x2000 E71 si
319. ne close when TCP ULP timie out error occurs is selected using the DIP switch SW1 4 When an existence check trouble is detected for the existence check connection When either active or full passive open for performing TCP IP communication has normally been completed an open request is received again from the remote node side Or when an open request with the same port number is received again from the identical remote node while non passive open has normally been ended 3 SPECIFICATIONS MELSEC A 3 6 1 O Signals for the PLC CPU This section explains the E71 I O signals The I O signal allocation shows that the E71 ts installed in the O slot of the basic unit It means that device X receives an input signal from the E71 to the PLC CPU and that device Y receives an output signal from the PLC CPU to the E71 3 6 1 List of I O Signals Table 3 7 List of I O Signals for the PLC CPU Signat Direction E71 to PLC CPU Signal Direction PLC CPU to E71 pore Signal Name iba Signal Name No No Connection number 1 Connection number 2 Connection number 3 Transmission Y3 Connection number 4 request or re Connection number 5 ception end check signal Y5 Connection number 6 Connection number 8 Connection number 1 Y9 Connection number 2 Connection number 4 Open request signa YD Connection number 6 Connection number 7 YF Connection number 8 For connection 1 s fixed buffer exchange For co
320. ne word If the buffer memory transmission data link exceeds the range during transmission there will be an exchange error and the transmission will not be conducted 5 When data is received from a fixed buffer be sure the reception end check signal YO to Y7 is ON during reception end the point at which the reception end signal turns ON A response is returned to the remote node when the reception end check signal turns ON and the following reception data is stored in the subject fixed buffer If the reception end check signal does not come ON a response is not returned to the remote node so an exchange error occurs at the remote node end 6 When receiving data from remote nodes the data length in the command being transmitted from the remote node must not exceed the range shown in Item 6 2 3 Point When the E71 receives a command with a data length that exceeds the settable range it might conduct closed processing for the corresponding connection without transmitting a response Check using the I O signal s open end signal X10 to X17 or the open error code area address SDH 67H error code 71H in the buffer memory s exchange status storage area 7 For data command transmission the next data command should be sent after the completion of data communication such as after the reception of a response for the transmission of the previous data command 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 3 2 Pr
321. net Interface Module Model A1SJ71E71 B5 S3 Ethernet Interface Module t each UG 274 U Point 1 This manual explains the functions and methods of use for the Ethernet Interface Modules AJ71E71 S3 A1SJ71E71 B2 S3 and A1SJ71E71 B5 S3 In regards to the method for con necting to Ethernet please read the explanations corresponding 10BASE2 or 1OBASES 2 Even though hardware specifications for the switches 1OBASE2 connector and other areas of AJ71E71 S3 have been changed in hardware version C or later the functional and perfor rnance specifications in those areas are the same as the conventional products The user can use the product just in the same manner as the conventional one 3 In this manual the general terms for the Ethernet interface module will be E71 TOBASE5 and 1O0BASE2 and the general term for network will be Ethernet 1 GENERAL DESCRIPTION MELSEC A 1 1 Software Configuration 71 supports the TCP IP and the UDP IP protocols pelea ala em a Personal computer workstation 7 77 7777 a oe isi ia PEG FERESTE Spe rane enite User program A Series PLO CPU i ig FROM TO PLC CPU Sues Buffer memory i LERES i Exchanges Exchanges Exchanges signals using a signals usinga the PLC set buffer random CPU data access buffer reads writes TOP UDP r ICMP Ethernet 10BASES5 1OBASE2 a ey Fig 1 3 Software Configuration Diagram TCP Transmiss
322. ng command transmission OoOo Heada S S Application data Ethernet aia Subheader Head address apo m n 14 bytes 20 bytes 8 bytes a sey 2 bytes 2 bytes Maximum 1017 words 2 Order during response reception PF Headers Applicationdata Applicationdata b Pi 14 bytes 20 bytes 8 bytes 1 as 1 byte 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 2 2 Format When Exchanging with ASCII Code The following shows the command in response data item order when exchanging the exchange data application data portion in ASCII code data when conducting random access buffer exchange a Transmission reception data order when exchanging using TCP IP a When a read request is made from the remote node Order during command transmission Po Header Application data ype ES a mae a a n sai e ni 14 bytes 20 bytes 20 bytes 4 4 bytes 4 bytes Order during response reception Po Header Application data Ethernet ae End code Text command a 14 bytes 20 bytes 20 bytes 3 bytes 2 bytes Maximum 1016 words b When a write request is received from remote node O Order during command transmission Headers Application data Ethernet sd ait 2 ar Text command eo 14 bytes 20 bytes 20 bytes 4 aoe 4 bytes 4 bytes Maximum 1016 words Order during response reception Application data Ethernet ne End code pa A 14 bytes 20 bytes 20 bytes 2
323. ng explains the E71 processing when it receives a new message that has no rela tionship to the current processing which is the processing of the message received previously over the same connection a The processing of the message received first is performed b After the processing of the message received first is complete the processing of the next message will be commenced The processing of the next message will be suspended Example When a random access buffer read request is received via connection 1 while the receive processing for fixed buffer exchange is in progress CQ The receive processing for the fixed buffer exchange is continued 1 After the receive processing for the fixed buffer exchange is completed the processing for random access buffer read is executed 1 The receive processing for fixed buffer exchange in progress is defined as the period of time from when the receive end signal XO turns on unti the receive end confirmation signal YO turns off 3 5 3 Conditions for Issuing a Forced Disconnect When the following conditions occur the E71 sends a connection forced disconnect to the remote node to forcefully close the line ABORT RST command transmission 4 When the initial request signal is turned off in the open state 2 When the remaining messages are not received within the response monitoring time when data allocation is being received 3 A TCP transmission error occurs when li
324. ng lists limitations and notes when using the E71 with a QnACPU or remote system on the MELSECNET 10 network EH Availability of data communication function The following table lists the availability of the E71 data exchange function with respect to the PLC to which the E71 is loaded and the stations accessed from other nodes Possibility of data exchange with other nodes E71 loaded Stations accessed from Random access other nodes Local station E71 loaded station Read write of data within the PLC CPU Communication is possible with the device memory within the AnACPU Fixed buffer communication Communication possible buffer communi cation Communication possible range Other station via MELSECNET 10 Communication not possible Communication is possible with the QnACPU station device memory within the ANACPU range For sta Communication ia not possible Communication not possible tions other than the QnACPU all types of communication are pos sible within the specification range Other station via MELSECNET Il MELSECNET B Communication not possible described in Chapter 9 Communication is possible with B W X Y special M9000 s and spe cial D9000 s in the device memory as well as with special function modules Local station Communication E71 loaded station not possible Communication not possibie MELSECNET 10 remote Communication is possible with the sta
325. ng only the E71 installed station PLC No FFH for exchange with the PLC and by using a data link B W for exchange with the other station PLC CPU 9 1 4 Exchanging with the PLC CPU in Mixed Systems Reading and writing cannot be done to the following other station PLC Other station PLC on data link systems via network systems Other station PLC on network systems via data link systems 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 2 List of E71 Commands and Functions This section explains the commands and functions used to read and write data in the PLC CPU from remote nodes Number of Processes Command Re Description of Processing Performed For 1 Ex sponse Types pon ype change Bit devices X Y M etc are read in 1 point unit Bit devices X Y M etc are read in 16 point units Word devices D R T C etc are written in 1 point unit 3 Bitunit 02H Bit devices X Y M etc are written in 1 point unit Batch write a Bit devices X Y M etc are written in 16 point units Word devices D R T C etc are written in 1 point unit pom fee devices X Y M etc are set and reset in 1 point unit and the Bent unit AN Byes E S 80 Points oo ow ie and device No are randomly set Test Random Bit devices X Y M etc are set and reset in 16 point units and Fo a Be A RE P 40 Words 640 Points Device memory write Word unit the devices and device No
326. nge The relationship between the E71 data exchange functions and the selectable communication for mats are shown below Exchange Functions TCPAP UDP IP Fixed buffer exchange With procedure O O Without procedure ak 6 OE Random access buffer exchange Po O Reading and writing data to the PLC CPU General data exchange Exchange via a router Router relay function Cae Beem 2 Normally in networks that use IP address data is exchanged with remote nodes that are part of the same network network ID is the same as that of the local station When data is exchanged with a remote node from a different network different network ID via a router it becomes possible to exchange via a router or gateway using the PLC CPU s TCP IP active open or UDP IP transmis sion When exchange with a partner remote node via a router is done with the E71 in passive open exchange can be done without using router relay functions When using the router relay functions please set the data in the buffer memory routine information area during the communication line open processing in accorandance with the explanation given in Chapter 12 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 4 1 Data for Opening SS ep a I a I I I TS I I DD This section explains about the exchange parameter settings area used to conduct communication line open processing Refer to Point at the end of Item 3 7 2 about whether the parameter shou
327. nnection 2 s fixed buffer exchange For connection 3 s fixed buffer exchange For Connection 4 s fixed buffer exchange For connection 5 s fixed buffer exchange For connection 6 s fixed buffer exchange For Connection 7 s fixed Buffer Exchange For connection 8 s fixed buffer exchange Transmission normal end or reception end signal EE A reception error detection signal X2 Transmission normal end or reception end signal a Transmission error detection signal or ne reception error detection signal Transmission normal end or reception end signal reception error detection signal Transmission normal end or reception end signal reception error detection signal Transmission normal end or reception end signal 0 moons aang a we reception error detection signal Transmission normal end or reception end signal Ea enep a reception error detection signal gt emmenrcnnaga oa reception error detection signal reception error detection signal x10 Usage prohibited Open end signal X17 For connection number 8 Usage prohibited 5 an Usage prohibited E Important Of the output signals directed to the special function module from the PLC CPU do not output switch on the signals that are use prohibited lf output is performed with respect to a use prohibited signal it may result in the malfunctioning of the PLC system 3 10 3 SPECIFICATIONS
328. o 134 in the same station installed in the E71 Command remote node E71 Response E71 remote node peepee aoa ee a a a 2500ms station Unit No Address 7F3 contents 4 bytes Address 7F2 contents Butter memory header address 0007FO Address 7F14 contents Address 7FOx contents 10 65 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 2 When exchanging using ASCII code Command format 1 words Tics See SRG RE a samu o mm eC ooa Special function module No Read byte ength 1 to 256 bytes Head address ACPU monitor timer unit 250ms PLC No Subheader Set to 30304 when specifying the byte length as 256 bytes Response format Specified read byie length 2 words Gere ee pgs Poe etree Seat ee 8 lE yi 4 H TITT L Final address contents for the specified address Specified head address 1 contents amp Specified nead contents End code Subheader Example When reading 7FOx to 7F3x of the special function module X Y120 to 13F moduie No 134 in the same station installed in the E71 Command remote node E71 O EIF FiO O Oa Oe O 0 7 F OIO 4 a 30H 45 46H 404 30H 30H 30H 41H 30H 20h 30 374 464 3OH 30r 34x43 a a t 304 ae EE EE OEH Local station 2500ms Buffer memcry 4 bytes header address 04H 0007FOH Module No 13h Response E71 remote node 8 EIO 0JQO 9 8 2 0
329. o Item 4 7 2 Set the 1OBASE5 and 10BASE2 changeover switch Only for AJ71E71 S3 3 Set the operation mode setting switch on the front of the E71 to the 2 position 4 Set the PLC CPU s RUN STOP key switch to STOP When the PLC CPU is reset the self loopback test will begin The SELFCHECK LED is lit Test results The test results can be determined from the LEDs on the front of the E71 If the SELFCHK LED is turned off then the self loopback test is completed 2 The test results can be checked using the S C ERR s LED When normal u i LED is turned off When there is an error The LED is lit 3 The following can be suspected causes of errors E71 hardware error Ethernet line error External supply power 12VDC s error Only 10BASES5 Operation after test is completed The PLC CPU can be reset after the on line mode or another test mode is changed over using the operation mode setting switch on the front of the E71 Point There will be no hardware interference if the self loopback test is conducted while another mode Is on line If there is a packet in the line this test may not finish within approximately 5 seconds if interference occurs with the packet In this case perform the test after terminating the data ex change with the remote node 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 6 2 RAM Test This section explains the RAM test that is performed to check the E7 1 s RAM
330. o write the same data However the remote node must be performed read and delete processing when received message is not required by this simultaneous broadcast communication 1 GENERAL DESCRIPTION MELSEC A 5 Data exchange from a read write request from a remote node Random access buffer exchange Use when processing the maximum 6k word data quantity with the sequence program and when processing transmission and reception data when the Sequence program and the re mote node are non synchronous Detailed explanation in Chapter 8 Remote node Read request T a Eon T Read end T command Date read Remote node command _ Write request T Writeend Fig 1 6 Random Access Buffer Exchange a The random access buffer can read and write the same address to multiple nodes How ever exchange between the PLC CPU and the remote node is non synchronous so the user must conduct interlock processing b The random access buffer holds 6k words 3k for channel O and 3k for channel 1 The area is not set for each connection as for fixed buffer exchange c The PLC CPU reads and writes data to and from the random access buffer by switching channels in the 3k word unit However communicating nodes use this buffer area as one continuous area of 6k words For details refer to Item 3 3 d The PLC CPU processing when data is transmitted and received is as follows e When transmitting data The transmitted data can be written
331. ocedure Po TCP a Ee Tote ial 8 Active Unpassive Fullpassive UPP Or Ta For transmission 0002H 8002H CO02H 0102H on 10H For reception 8003H C003H 0103H Example 2 When is 0 Pairing open not done is 1 Without procedure ae UDP _ 00 10 11 Active Unpassive Fullpassive O Does not check 0200H 8200H C200H Q300H ae seas 1 Checks 0202H 8202H C202H 0302H 0 1 0 Does not check 0201H 8201H C201H 0301H For reception 0203H 8203H C203H 0303H Example 3 is 1 Pairing open is done is 0 With procedure is set ATA ATA 00 6 10 11 1 Active Unpassive Fullpassive YPP on For transmission cosaH On COSTE For reception 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 2 Exchange address setting area a Sets the local station E7 1 s port No partner remote node IP address port No etc when communication line is connected using open processing When setting the pairing open using the usage application setting bit7 b7 the next con nection No side exchange parameter setting is not required This is automatically con ducted by the E71 The next connection No open end signal is turned on by the open processing for the connection No that sets the pairing open o For the setting values please specify the values set by the network manager
332. ocess ail of the corresponding reception data as simultaneous broadcast communication data Exampie When connection 1 is used Address Buffer memory set without procedure VOH 16 UDP and for Reception to 18H 24 19H 25 Makes the remote node IP address to a simultaneous broadcast address 1AH 26 A H 1BH 27 Makes the remote node port No the simuitaneous broadcast port No FFFFH User arrangement No During the situation shown in the above figure the E71 changes all of the bits in the reception data request destination IP addresses local station class host ID range to 1 and if the request destination port No equals the E71 s port No the reception data is stored in the fixed buffer and the reception end signal X0 is turned on in addition when the reception data is stored in the subject fixed buffer the E71 updates the buffer memory address 59H to A8H 89 168 of the subject area s remote node IP address and the remote node s port No When checking the data transmission origin read the above buffer memory exchange state storage areas information area by connection 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A Following shows an overview of the E71 s internal processing when there is reception using without procedure and reception using simultaneous broadcast communication The values set in the buffer memory address OH to 1H 18H to 4FH are used for local stations E71 s IP address and po
333. od a The functions used for reading writing the sequence program are shown in Table 10 7 Tabie 10 7 Function List PLC CPU status Number of Command processing response Processing description points con Write a classification ducted in one Stopped possible impossib exchange setting by the main sequence program e by the subsequence program Program Writes the main sequence program _ 256 steps O p a ee by the main sequence program 5 Writes the subsequence program _ 256 stepes O O 5 nn ca Writes the T C set values need eaters ts Tesetvaue set value 256 points x by the subsequence program In the PLC CPU status column in the above Table the O represents execution possible and the x represents execution not possible All of the following conditions must be met when conducting program write during RUN The PLC CPU is an A3 ASN ASA ASU or A4U A program that is not operating Shows subprogram when the main program is running 3 The PLC CPU special relay is in the following state M9050 Signal flow replacement point Off ASCPU only 6 M9051 CHG instruction execution prohibited On The A4U subsequence program read write is conducted for sub 1 Read write is not con ducted for sub 2 to sub 4 b Sequence program step No specification The sequence program step Nos are specified using hexadecimal numbers as shown in Table
334. ogram Creation Procedure This section explains the fixed buffer data transmission and reception program creation procedures Program creation procedures Initial processing is performed Refer to Items 5 2 through 5 3 Open processing is conducted For fixed buffer exchange exchange becomes possible when initial processing ends and open processing ends Refer to Item 5 4 Transmission Program Reception Program A TO command writes the he francinission dats ia He ETS The reception data is read by a The reception end signal FROM command from the fixed automatically turns ON buffer when the transmission end when data is received from signal is turned ON the remote node specified fixed buffer The TO command sets the transmission data length in the fixed buffer s first address The reception end check signal A response is returned YO to Y7 that corresponds to the to the remote node fixed buffer in which the reception when the reception end The transmission request signa Data is transmitted to data is stored is turned ON check signal is turned ON YO to Y7 corresponding to the the remote node when fixed buffer where the transmission the transmission request data is stored is turned ON signals turned ON The subject reception end check The reception end signal signal is tumed OFF when the automatically turns OFF reception end signal turns OFF after a response is returned The transmission re
335. ogramming Creation FrecautionS areeni eiaa N E darter ubdon 6 11 032 Program Creaton PhOCOCUIG erennere nire e T N 6 12 6 3 3 Example Fixed Buffer Exchange Program With Procedure cccccesseseecsesesseesesaeneees 6 13 CHAPTER 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE 7 1 to7 17 PA COnTTmMa oroa ETA AA N 7 1 kit Transmission Control Method iaiscactlaxdcoxsdrewndresnteisaacewnsaunche a A a a a tess 7 3 Paine Reception Control Method creiria ie O desta a 7 4 te Data Fma reana a A E Bianchi A A Nai 7 6 Lek Poma duino Exchange eaa a a E 7 6 Wee Exchange Data en Comen S eos ionene A A EN 7 6 7 3 Simultaneous Broadcast Communication When Using UDP IP saessssssessssrsersrirrerrsersrrrerrerrrnrere 7 8 7 3 1 Simultaneous Broadcast Communication Transmission sesssessisererrisererseriirerrerrrresn 7 8 7 3 2 Simultaneous Broadcast Communication Reception sssssrsrerserrrrrresinrsrerttirirerreres 7 9 7 3 3 Precautions When Using Simultaneous Broadcast Communications Functions 7 11 GE Programin eroana Tn E E ota linn ameosent oer wet hones sete Maigret 1 12 7 4 1 Precautions When Creating Program isc scesssidasseescecsaviaciacsa coddssavsdscnanveraavetervinleeceues 7 12 T 42 Program Creation PICGEO UNS risccsstincasaaiccrmitesancasadin duced evi piaautaycentaminuede ta neue Peaeetea aes 7 14 7 4 3 Example Fixed Buffer Exchange Program Without Procedure ccccccecseenseseeeereneees 7 15 CHAPTER 8 RANDOM ACCESS BU
336. ommand should be sent after the completion of data com munication such as after the reception of a response for the transmission of the previous com mand 8 RANDOM ACCESS BUFFER EXCHANGE MELSEC QnA 8 4 2 Program Creation Procedure This section explains about the random access buffer exchange procedure As shown below there are three exchange methods that can be used for random access buffer ex change 4 Remote node A or B reads the data written into the E71 s random access buffer by remote node A 2 Remote nodes A and B read the data written in the E71 s random access buffer by the se quence program The sequence program reads the data written in the E71 s random access buffer by remote node A or B Following is an explanation of the exchange procedure for three exchange methods described above a Exchange method where remote B reads the data written by remote node A Remote Node A Transmits a write request and write data as commands to the E71 Refer to Item 8 2 for information regarding The E71 returns a response to the command and request format remote node from which there was a write request and stores the write data in the random access buffer Remote B transmits a read request command to the E71 Refer to Item 8 2 for information regarding The E71 transmits the random access command and request format buffer data as a response to the remote node B from w
337. on in the buffer memory error log area is cleared deleted Y17 A i COM ERR LED Turn off Tum on and X1C A i t Error y Error y Error y Error occurrence occurrence occurrence occurrence 3 SPECIFICATIONS MELSEC A 12 ji Initial request signal Y19 a This signal is for conducting initialization before the E71 conducts exchange b Turning on the initial request signal Y19 checks the initial parameters and if they are normal executes initial processing If an error is detected the initial error detection signal X1A is turned on Initial normal end signal X18 Maximum 10ms gt t c When the initial request signal is tumed on and initial processing is conducted normally the initial normal end signa X19 is turned on Here if an error is detected the initial error detection signal X1A is turned on d When an E71 system error occurs the initial error detection signal X1A is turned on Please turn off the initial request signal Y19 The error code at this time is stored in the initial error code storage area buffer memory 80 e After checking that the following signals are turned off turn off the initial request signal Transmission request signal reception end check signal YO to Y7 Transmission normal end signal reception end signal XO X2 Transmission error detection signal X1 X3 Open request signal Y8 to YF Open end signal X10 to X17 Open error det
338. one network that has many nodes connected to it into multiple subnetwork units that are easy to manage In particular this is information that uses a part of the host ID as a net ID extension as recognized it as the subnet ID shown below Example using class B IP address Bit position 31 30 29 to 16 15 to O Go eo J e Class we 31 30 29 to 16 15 to 12 11 to O Go new Bme aaee Net ID extension The host ID that forms the IP address is divided and used as subnet ID and host ID Point 1 All nodes on the same subnetwork must have a common subnet mask Refer to Item 12 3 Summary of Router Relay Processing for details on the transmission from E71 when the net ID including subnet ID of the data transmission destination node differs from the local station 2 if not managed as a subnetwork then each node does not have to have a subnet mask 11 1 11 WHEN SETTING A SUBNET MASK MELSEC A For the E71 the subnet mask is set using the buffer memory subnet mask setting area Subnet mask field and is specified how far a host ID like that below is extended The location up to where one subnet mask field is created becomes the net ID subnet ID extension net ID and the E71 handles this portion as a net ID If the subnet IDs differ they will be viewed as separate networks When Ethernets are connected using routers specifying a subnet ID makes it possible to see which router is managing which netwo
339. ontents can be checked by reading the exchange state storage area s initial error code storage area Refer to Item 5 5 1 buffer memory 80 d The initial error detection signal X1A is turned off when the initial request signal is turned off 7 COM ERR LED tumed on signal X1C a The COM ERR LED turned on signal X1C is turned on when the COM ERR LED is turned on when and exchange error occurs Refer to Item 13 2 1 b The COM ERR LED turned on signal X1C is turned off when the COM ERR LED tum off request signal Y17 of the sequence program is tumed on 8 Watchdog timer error detection signal X1F The watchdog timer detection signal X1F is turned on when a watchdog timer approximately 300 ms error occurs when the E71 self diagnostic is used 3 SPECIFICATIONS MELSEC A 9 Transmission request and reception end check signal YO to Y7 This signal is used when fixed buffer exchange is conducted This signal is not used for random access buffer exchange and reading and writing data from the PLC CPU exchange Used as a transmission request signal when the appropriate fixed buffer is used for transmis sion Used as the reception end check signal when the appropriate fixed buffer is used for recep tion a When used as transmission request signal When exchanging with procedure G The E71 transmits data to the node specified by the parameters when the transmission request signal YO to Y7 is turned on
340. ontrol Method 7 3 Forced DISCONNECT aiina E 3 9 Full Passive Open ssesssersreressroesrasressrnsasres 5 16 MELSEC A H aeS P E E r E T E A 11 4 1 I O Signal E E EA N AEEA T E E 3 10 DEANS ania aa A 3 11 OMP aei a a A A N 1 3 A 31 ECESO Z I ronn EN A 31 Initial Processing Parameters cceseseeereens 5 5 Initial Processing Procedure ececcrerer 5 10 Initial Processing Program Example aans 5 11 Initial Processing State Storage Area 9 39 Initial Timing Setting SW8 SW4 oo 4 4 installable Number of Units ees 2 2 Msala INS iena E 2 2 nStrUctOn AI an snn a 5 13 Paoi E NE AN 1 3 P AJI OSS ninka tans tte dea daanitatnatondaniens 11 4 Local Station E71 SettiNg cssrsnrucrisisiss 5 5 Remote Node Setting oo cecccscceeeseeenenes 5 19 L Line Processing Selection during TCP Time out Error SW1 4 4 LIST Ol PUNCUOMS erein n 3 6 Logical Address For Random Access 8 9 M Message Division and Data Length asen 3 8 Moduls Compatibility sssini A 1 N INET AGGICSS aria E N 11 5 NetID enea a AT 11 4 O Open Processing Procedure essees 5 12 EAE E EE T EE T T ET 5 27 TR UDP iruren oa eer eer 5 21 Open Processing Parameter oo cece 5 13 Open Processing Program Example 9 31 Operation Mode Setting 0 insriiies 4 3 APPENDICES P Pairing Open Processing Procedures Closed Processing Procedures 5 27 ODS SONOS a ae sialic 5 15 PLC No For Data Exchange in PLC CPU 10 4 Exam
341. open end signal turns OFF after the RST command is transmitted 5 The open end signal will turn off when the E71 s abort command is transmitted including that described above Refer to Item 3 5 3 There error code during the open status for the error end can be checked using the buffer memory exchange status storage addresses 89 to 168 and error log area addresses 169 to 179 e Error during open processing Open error code area e Error during data exchange When conducting transmission using the fixed buffer Set buffer transmission error code area When conducting transmission using any other than the fixed buffer Error log area The error code stored in the open error code area will be cleared n gt 0 when the open request signal is turned ON again 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A c Processing TCP when error end is done by close Normally when closed by the E71 the E71 transmits an FIN and then ACK FIN are returned from the partner remote node However when ACK FIN are not returned be cause of a partner remote node error the E71 forcefully disconnects the connection trans mission of ABORT RST command Following is an explanation that uses an example of processing for connection No 1 Open request signal return eo Open end signal return X10 TCP end timer value time FIN is not transmitted even when waited for Ethernet A The open request signal Y8 is turned off by
342. or monitor data registration f OFF 30H First registered device on off status for monitor data registration End code Subheader Command format ACPU monitor timer unit 250 ms PLC No Subheader When the monitor registered number of devices is odd dummy data 30 is added when monitor is executed For example when the monitor registered number of devices is 3 points the data portion returned is for 4 points The last 1 byte is dummy data q Example When Y46 M12 and B2C are set using monitor data registration for the PLC CPU that is installed in the E71 Command remote node E71 Response E71 remote node 0 8 F FIO O OA 8 8 0 O 1 0 1 0 OH 38H 46H 46H 30H 30H GOH 41H 38H 38H 30H 30H 31H 30H 34H 30H A ey CA Local station 2500ms B20 on off status On M12 on off status Off Y46 on off status On w x ae IT 10 37 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 4 Word unit monitor The following section explains the command response format when conducting monitoring of a set word device and bit device 16 point unit which monitor data registration has been conducted a When exchanging using binary code Response format Command format 4 bytes iNumber ct egistered devices x 2 2 bytes Se on EAA LE For bit gevices es ACFU monitor timer unit 250 ms PLC No Subheader For word device
343. orbidden 2 For other than A3HCPU AnA AnU QnACPU 2 points worth of points are processed for each point for device X input When X is included in the set device make it as follows Number of specified points x 2 number of points processed number of other device set points per one exchange When only X is specified the number of points that can be processed per exchange is one half the value shown in the table 3 When reading or writing extension file registers use the extension file register s special command 4 The AnUCPU can be accessed using the AnACPU device range Only devices with the same name as the devices existing in the ANACPU can be accessed in the QnACPU using the AnACPU device range Except below The following QnACPU devices cannot be accessed from remote node e Devices newly added to the QnACPU e Latch relay L and step relay S For the QnACPU the latch relay L and step relay S are separete devices from internal relays M but access will be made to internal relays when either one is specified e File register R QnACPU Accessible Devices Accessible with E71 Commands When the Parameter Settings are the Default Device No Decimal Device No Decimal Classification Device Settings Hexadecima Classification Device Settings Hexadecimal range Expression range Expression Hexadecimal Input relay XO to X7FF X i walter TS0 to TS2047 Output relay YO to Y7FF expression point
344. orrect the partner remote node IP ad dress and Ethernet address Refer to Item 5 4 1 2 ic Set the default value when there is an ARP function in the partner remote node or set the partner re mote node Ethernet address when there is no ARP The set IP address remote node does not exist function Check the partner remote node operation There could be a packet in the line so transmit after the free time has passed Check if the connection cable is loose Check if there s a problem with the connection to the transceiver or with the terminator connection Check the partner remote node operation There could be a packet in the line so transmit after AOOBH the free time has passed Check if the connection cable is loose Check if there s a problem with the connection to ae transceiver or with the a connection orrect the partner remote node IP assembly timer e An ICMP error packet that was not supported was value when nee is a time ie aE A time received For the current E71 only support a return signal for AOQOCH echo times stamp and information request Make it so that any request other than these are not trans mitted from the partner remote node e An ICMP error packet was received e Review and transmit the correct value for the check sum transmitted by the partner remote node e Investigate the environment s state in the line Noise environment distance between the line and power lines equipment ground
345. ory MONTO va ceducssebadis cetaceans cormeesndaane 06 to 09 an 10 32 10 3 Extension File Registe Read and Write saeieisnas iin ara aE a eaa 10 40 10 3 1 Commands and AGCISSSOS sis tocisaccatactavatsveideducncouen e IE rene eamiuies 10 40 10 3 2 Precautions When Reading Writing Extension File Registers usecsesececrereesece 10 41 10 3 3 Extension File Register Batch Read sssssesersssssorsrorrsrereessseers CIEL E EET TT 10 42 10 3 4 Extension File Register Batch Write essseessssrissserereresrrrrireersers Oa 10 44 10 3 5 Extension File Register Test Random Write esecssneeernes ko ener eae ee ere 10 46 10 3 6 Extension File Register Monitor ssssssessssssessresrreesseeeussrrerererereree GA TB evideesranecsaaet 10 48 10 3 7 Extension File Register Direct Read Write ceenece ES E 10 53 104 Special Function Module Data Read and Wite acrais eo T aa 10 59 10 4 1 Command and Data Item Specification Method c ccscsssseseccsssesssereseenrenseoeensers 10 59 10 4 2 Special Function Module Buffer Memory Read cceecneeeeeees OE heraa 10 65 10 4 3 Special Function Module Buffer Memory Write o sssrin OF anena 10 67 10 5 Remote RUN STOP and CPU Model Name Read ssissesrisessvesrsrrrisennsereerrrieeurerinirerererseers 10 69 10 5 4 Gommands and FINCIONS nioen iius de awa a a E E nen cies 10 69 10 5 2 Remote RUNS IOP redea aE E ES E aenaccemiceies 10 70 10 5 3 PLOC CPU Model Name Raa rerne a Gis
346. ote node and to read what is the model name of the PLC linked to a remote node This section explains the control procedure specified contents method and example specification when conducting this function 10 5 1 Commands and Functions 1 The commands and functions for remote RUN STOP and PLC model name read are shown in Table 10 5 Tabie 10 5 Functions List eee CPU status Command response classification Processing description art Write stopped possible impossible setting setting Remote RUN Request remote RUN of the PLC CPU COo mes Remote STOP Request remote STOP of the PLC CPU O O O PLC model name read 15 Reads what the PLC CPU is and whether it is a remote station In the PLC CPU status column in the above table the O represents execution possible Point 1 When a remote RUN STOP is conducted for the PLC CPU local station installed in the E71 use the data exchange function for when the PLC CPU is stopped and conduct this function Refer to Item 5 6 If the data exchange function for when the PLC CPU is stopped is not used the initial process request signal Y19 and the open process request signal Y8 to F will turn off when the local station s CPU is stopped which will make it no longer possible to exchange between the remote node and the E71 2 When remote RUN STOP is conducted for a PLC CPU other than one installed in the E71 remote station this
347. p step 100 Step 102 66H contents 101 1h Step 101 65H contents 8002H Step 100 644 contents 40011 Example 2 When directly reading the timer set value T8 to T11 used by the main sequence program of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node yy A ey Local 2500ms Station oe T11 setting value D182 896CH Head address No T8 T10 setting value K50 T9 setting value K291 T8 setting value K 100 10 85 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Response format Set number of points x 2 2 words SS a aa er EEE rA aA aa aal i r Y t Specified head device No contents For T C set value Specified head device No contents Main program 3041H OAH Subprogram 3042H OBH Remarks For sequence program For sequence program Number of steps 1 to 256 steps Final step No contents for Number of device points For T C set value 1 to 256 points Final device No contents for For sequence program the specified device No Head step No For sequence program For T C set value Specified head step No 3 Head device No contents for details refer to Item Z For T C set value ACPU monitor timer unit 250 ms Specified head device PLC No No 1 contents Subheader For sequence program Se
348. partners and when the data exchange is completed to dis connect the communication line between exchange partners Following is an explanation of the connecting and disconnecting of E71 communication lines and of the initial processing setting data for exchanging data between the E71 and a remote node 1 J Connecting communication lines initial processing open processing a Conduct E71 initial processing and open processing with the remote node and connect to the communication line using the parameters and switch settings specified by the user Exchange can only be conducted with the remote mode for which the line was connected using this initial processing and open processing b Exchanging with a remote node using the fixed buffer exchange using the random access buffer and reading writing the data in the PLC CPU is possible using the port No specified during open processing when the communication line is connected Communication line disconnect Close processing end processing When data exchange with a remote node has been completed after a communication line was connected the communication line is disconnected a Disconnection of the communication line by user processing close processing and end processing are conducted by the PLC CPU b Disconnection of the communication line by error occuring If the condition described in Item 3 5 3 occurs the line will be forcefully closed End processing is conducted by the PLC CPU
349. pecified address Write data to the specified head address 1 Write data to the specified head address Data length 1 to 256 bytes Head address ACPU monitor timer urit 250 ms PLC No Subheader Set to 3030 when specifying the byte length as 256 bytes Response format 2 words _ ae 9 D l y Vora End code Subheader Example When writing the comment area 78H to 7BH data of the PLC CPU installed in the E71 Command remote node gt E71 1 DIF FIO 0 0 Aajo O 7 8j0 4 0 O B Dic 0 2 Dic 4 31H 4441464 46l 3O 30H 30 41H130H 304 37H 3BH 3Cr 34 130 304 42h 444143 30H 32H 444 434 34r SS aS LS IA 10 Local station 2500ms Head address 4 bytes 9078 n Write data to address 7BH C4r Write data to address 74H 2DH Write data to address 794 CO Write data to address 78H BD Response E71 remote node 9 DJO 9 39H 44H 30 30H 10 101 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 6 7 Extension Comment Read Write This section explains the control procedure specification contents method contents and example specification when reading writing PLC CPU extension comment data 1 Command and addresses This section explains the command response classification and extension comment data ad dresses when reading writing extension comment data a For functions used to read write extension comment data are show
350. pecified data error ails ae har ee x Errors where the place of origin of the error OANE OE NARE eo cannot be determined 5 Errors for which error codes ASH 169 e Errors occurring during random access buffer are stored in the error log area ees reading writing data to the PLC U Errors returned by fixed buffer exchange End code tem 13 1 1 6 Data exchange errors Errors return to the request originating remote node Errors returned by random access buffer exchange End code e Errors returned by reading writing data to the PLC CPU End cade during E71 command use tem 13 1 1 Error code during E71 command use Item 13 1 2 13 TROUBLESHOOTING MELSEC A 13 1 1 End Codes Returned to the Remote Node during Data Exchange Error Codes Stored in the Buffer Memory This section explains the error contents and error processing for end codes return to remote node and error codes stored in the E7 1 s buffer memory when an error occurs during processing for data ex change between the E71 and a remote node End Code a P Error Code Description rocessing OOH Normal end Olu e The exchange data length exceeds the set range e When the codes are other than those prescribed by the subheader commands and responses Commands Responses 61H 624 OOH SCH During fixed buffer exchange when the actual data quantity is less than the data length setting the re maining data is determined to be
351. pecified head address 1 contents PLC No Specified head address contents Subheader End code t rere Supheader Remarks Set to OO when specifying the byte length as 256 bytes Example When reading the comment 1E0x to 1E34 for the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node FEER FFER wA aAa enn aAA Ata Local 2500ms Station 4 bytes Address 1E34 contents Head address 01E0 Adaress 162 contents Address 1 amp 1 contents Address 1 04 contents 10 98 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Response format 8 words Specitied byte length 2 words cor lr O 080 A eg A A A RAE ENT ET TL IRIS TEL ie 0 0 9 C war MIH to iH to DIH TOR Sga ole L H L e fy Sa A eee L SS 2 Byte LA 1 to 256 bytes Final address contents for the Head address specified address ACPU monitor timer unit 250 ms Specified head address 1 contents PLC No Specified head address contents Subheader End code Subheader Set to 3030 when specifying the byte length as 256 bytes Example When reading the comment 1E0Ox to 1E3 of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node 9 CIO O B DIC 0 2 DIC 4 EEEE EREE 31H FEN 30H 30H 41HI30H 31H 454 30H 39H 43H 30H 30H 42H 44H 43H 30H 32H 4441434 34H Se eee nn queer ane 1Cx Local station 2500m
352. plained in the GPP Manual Access can be made to other station s PLC CPU on the MELSECNET 10 or MELSECNET Ih B via the ACPU of a station equipped with an E71 or via a station equipped with an E71 through Ethernet connection from a peripheral device 1 for the GPP function 1 Indicates a peripheral device for GPP in which the following GPP function software is installed GPPW GPP Function Software Product after SW2D5C F GPPW E 1 10 1 GENERAL DESCRIPTION MELSEC A 1 3 Comparison with AJ71E71 The differences in the specifications between the E71 and the previous Ethernet interface modules AJ71E71 A1SJ71E71 B2 B5 are shown below Functions for which a circle is placed in both the AJ71E71 column and the E71 column shows compat ibility However a some of the communication timing varies so the response timeout time must be adjusted AJ71E71 E71 Date Exchange Functions Specifications Previous This Remarks products product Communication protocol selection function for po fo the partner remote node unit vinnie o foam O oeae S pereoo fixed buffer without procedures pe ye UDPAP open is possible 2 Fixed buffer Exchange is possible using a 4 Simultaneous broadcast exchange Data read write in the PLC CPU General data exchange function Exchange is possible after the port is opened regardless of the PLC CPU s RUN STOP status 7 xchange while th
353. ple The subnet address is as follows when the partner station s IP address is 59010201H 59000000H when the subnet mask is specified as FFOQOQQOOH e 59010200H when the subnet mask is specified as FFFFFFOOH 2 When the partner station and the local station are different classes specify the partner station s net address EE Router IP address n Default value OH s ssssssssessescecsssereeenes Address 1C7H 455 a Specify the IP address of the router to which exchange will be conducted when conduct ing exchange with a remote node on a remote Ethernet via anything other than the default router bo Because the router itself and the local station must be on the same network the router s subnet ID and the local station s subnet ID must be the same Point When using the router relay function set the following settings in addition to settings in the routing information area Set using router relay function address 2H 2 in the initial processing parameter setting area s special function setting area 12 4 TROUBLESHOOTING SECTION The troubleshooting edition explains about the error codes corresponding to errors error contents error processing and troubleshooting flow when trouble occurs during Ethernet interface module use 13 TROUBLESHOOTING MELSEC A 13 TROUBLESHOOTING This section explains about trouble that occurs when using the Ethernet interface module and covers error codes error
354. ple SGUINGS vasaneacmveratnce 9 5 9 9 10 6 Physical Address For Random Access 8 9 Procedures Up to Operation iar tuiiatnnees 4 1 Progra UZAO ase A 1 Protocol Status Storage Areas ee 5 39 Q COE iss E E A EE A N 1 2 R RAM TES eeni aah ane ee eter 4 9 Random Access Buffer Exchange Command Response Format Example 8 10 S BOGUO FONT ar 8 1 Hata FOMA aoa E N A 8 4 Hata Leng iana E casa eee 8 9 ENG COUE ereraa A teense 8 9 Exchange Procedures Chapter 8 Exchageable Range ecer 8 1 General Description swieuxcerariniaadoee 1 8 Head AOCKESS schnicissvedapaiundernennaaasmindnees 8 8 PARI EENEN OTE AEN 8 8 Processing ITE coniisraia ia S A 4 Pr grammiNg nasrin nina A 8 14 SUG NGAE uenn eaten etasaieuins 8 8 TERT aiana EEN 8 9 Related Manuals c Before Chapter 1 Relationship of the Parameters and Functions 3 23 Required DEVICES oo ccsecessesssaseeseerseesenenes 2 4 ROM TeSt eia a aaRS 4 10 Router P AGIOS Suasa n 12 4 Router Relay Function 1 10 Chapter 12 Routing Information Settings eces 12 3 Sample Program ecne P E A aan AAS Selecting Communication Format TCP UDP 5 16 Sel DIAGNOSUNG Tost cosiuse chosen yencdicsleasous 4 8 Sel LOO DaCK TES aine aS ea 4 8 MELSEC A Settings Hardware CPU Exchange Timer Setting SW7 SW3 4 4 Data Code Seting SW 2 anaran eeka 4 4 Initial Timing Setting SW8 SW4 vo 4 4 Line Processing Selection during TCP Time out Error SW1
355. process all of a maximum of 4 access requests from units and GPP functions during the COM command s execution time 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A 9 4 Data Exchange Precautions Following is a list of precaution items for when reading and writing data to the PLC CPU is conducted Conduct read write when the E71 s initial normal end signal X19 and the open end signal X10 to X17 of the connection to be used are turned on If these signals are on then it is possible to conduct read write of data in the PLC CPU from the remote node regardless of whether the PLC program is valid B When writing data when the PLC CPU is running set the CPU exchange timing setting switch dip switch SW7 SW3 on the front of the E71 to on I When conducting a PLC CPU remote stop use the data exchange function Refer to ttem 5 6 while the PLC CPU is stopped f When the usage availability of the connection being opened is without procedure read ing and writing data to the PLC CPU cannot be conducted l B Changing the remote station PLC CPU to which data will be exchanged After the E71 is booted up remote station PLC CPU information is read in and stored To change the remote station PLC CPU to which data will be exchanged after the E71 is booted up reboot the E71 after changing the PLC CPU s model name Local station PLC power reset CPU reset When transmitting a command for reading writing data in the P
356. quence program so that the safety of the overall system is always maintained Especially when performing the above control for a remote PLC from an external device troubles occurring on the PLC side due to data communication error may not be handied immediately Determine error handling methods between the external device and the PLC CPU for when data communication errors occur in addition to configuring a interiock circuit in the sequence pro gram When installing AUI cables transceiver cable coaxial cables do not bundle them or place them close to main lines or power lines Keep them at least 100mm 3 94 inch away from such cables Noise may cause erroneous operation INSTALLATION PRECAUTIONS Use the PLC in the environment given in the general specifications section of this manual Using the PLC outside the range of the general specifications may result in electric shock fire or erroneous operation or may damage or degrade the product Make sure to switch all phases of the external power supply off when installing or placing wiring If you do not switch off the external power supply it will cause electric shock or damage to the product Make sure to switch all phases of the extemal power supply off before mounting or removing the module If you do not switch off the external power supply it may result in electric shock or may damage the product Insert the tabs at the bottom of the module into
357. quest signal is turned OFF when the transmission end signal corresponding to the fixed buff date The transmission end signal automatically turned ON when a response is received from the remote node 1 Reception end 1 When the transmission error detection signal turns ON the information for individual connections in the transmission state storage area transmission error code end code is handled as described in Chapter 13 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 3 3 Example Fixed Buffer Exchange Program With Procedure This section explains the programming method for conducting data exchange with a remote node using a fixed buffer Program Conditions 1 All connection exchange parameters are set to those parameters specified in Item 5 4 5 2 The fixed buffer transmission data is set to D300 to D399 3 4 4 The fixed buffer reception data is stored in D500 to D599 The error code and end code storage destination is allotted as follows D108 Transmission error code D109 Reception end code D110 Reception error code Fixed Buffer No 1 Transmission Program X10 Y8 X1F JJ s E Open Open WDT Exchange request error possible CON 1 1 detection 1 X43 E T PLS M4 Fixed buffer Transmission transmission instruction instruction permit 1 441 1 XO X1 YO nann i 4 naana A A lim Transmission Transmission Transmission Buffer CHO ap N Exchange OMAI Transmission equest 1 ail
358. r in the drawing at right However to cut the externa conductor to the same dimension as eee the clamp s tapered portion place the clamp Clamp and 6mm External on before cutting Conductor i d Solder the connector to the internal conduc rrr terete tetris Solder tor fe Insert the CONGUCTOL SSSEMDIy 1M A MO TE e arinkiri aair plug shield and screw on the plug shield nut Point Take the following precautions when soldering the contact to the internal conductor 1 Be sure that ihe solder does not creep up the soldered area 2 Be sure that there are no gaps in or biting into the conductor and cable s insulation 3 Quickly do the soldering to prevent the insulation from deforming 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 8 Loopback Test The loopback test is a function that tests whether exchange is conducted normally between a node and the local station E71 When a loopback test is conducted the data transmitted from the remote node is then retransmitted as is by the E71 as a response to the originating station A loopback test will be conducted using the function shown in ttem 10 7 after the initial processing and open processing finish normally 4 9 Maintenance and inspection There are no inspection items for the E71 other than the terminator and checking the cable connec tions for looseness In addition to this to keep the system in good condition at all times and conduct the inspectio
359. r Yemen Local station 2500 mis 3 points Write data Write data Write data to R100 to R101 to R102 0109 9876 1234 Response E71 remote node B c10 0 425 43130 30 10 58 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 4 Special Function Module Data Read and Write This section explains the control procedure specification contents method and example specification when reading contents from the special function module buffer memory area or writing data to this buffer memory area This command accesses the special function module buffer memory in byte units 10 4 1 Command and Data Item Specification Method 1 The functions used to read from and write to the special function module are shown in Table 10 4 Table 10 4 Functions List Number of PLC CPU status Command processing Ruming response Processing description points con St Write Write classification ducted in one Stopped possible impossible exchange setting setting 256 bytes 128 words Baichvead Reads the special function mod ule buffer memory contents Bachne OFH Writes data to the special func tion module buffer memory In the PLC CPU status column in the above table the O means execute possible and the x means execute not possible 2 Link possible special function module mode name buffer memory head address and module No Buffer memory head
360. r details refer to Item Pr O O PLC No _ S S ACPU monitor timer unit 250 ms Subheader Main program 3043 OCH Subprogram 3044 ODH Remarks Set to 3030 when specifying the number of steps and number of devices as 256 points Response format End code Subheader Main program 3843 8CH Subprogram 3844H 8D4 10 89 MELSEC A 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Example 1 When writing the main sequence program steps 120 to 123 for the PLC CPU installed in the E71 Command remote node gt E71 O CIF F O O 0O AIO O 7 8 0 4 0 O 1 O 5 5 4 O F Al A O 5 7 0 AS 30n 4346H 46 30 BC OOH 41Hj30 30n 374 38H30 34 30 3031H BOR 35h 35H34 30 464 414 324 41 30H 35H37 30H 41n 38H SS SS Ss ee eee OCr Local station 2500ms Head step No 4 steps z 12000784 04H Write data to step 122 70A8H Write data to step 122 2A05H Write data to step 121 40FAn Write data to step 120 1055 Response E71 remote node Example 2 When changing the set value of the timer 115 to T18 used by the main sequence program of the PLC CPU installed in the E71 Command remote node E71 O O 0 AIF E O FiO 4 0 010 O 6 4 60 0 3 210 0 C 8 8 80A 30H 30H 30H 41H 4G6H 454 30H 46 130 34H130H 30 130 30H 36H 34H 30 30H 33H 32130 30 43H 3BHI38H 38 SOK 41H LS a E T18 set value D5 B80AH amp T17 set value 200 00C8 T16 set vaiue 50
361. r the transmission processing end 2 When the initial request signal Y19 turns off during transmission the E71 conducts closed processing and end processing after transmission processing end For more details on cases when the reception of Close Abort RST has occurred from the partner remote node prior to the completion of the data communication performed immediately before refer to Remarks in 2 of Item 5 4 3 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 1 2 Reception Control Method This section explains the contro method that the E71 receives the data from the remote node receiving to the fixed buffer No 2 as an example Remote node Initial processing end open processing end 71 renra ee ee ee ee ee Ce ee fe ee ee M M M PLC CPU Reception end signal x2 Reception end check signal Y1 a a a a er i ee ee Se ee ee en ee es D Conducts E71 initial processing Refer to Items 5 2 through 5 3 Conducts line open processing to the remote node Refer to Item 5 4 To conduct fixed buffer exchange initial processing and open processing must be completed The E71 will turn on the receive end signal X2 when the reception data is stored as is from the remote node by parameter setting into the fixed buffer No 2 The reception data length and reception data are stored in the fixed buffer The reception data length is stored in the subject fixed buffer first address 1536 The recep
362. ransmission data length storage area including transmission data length POTES The unit is a word Transmission data 100 words Transmission data write area the transmitted data is written in the order from the newest address 264H 6 12 265H 613 5FFH 1535 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A Changing the transmission request signal YQ to ON using the sequence program transmits the data to the node from the parameter settings that is specified by the fixed buffer No 1 When data is received from the E71 by the specified remote node a response is returned to the EF The E71 tums ON the transmission normal end signal X0 when the response is received from the remote node When the transmission normal end signal tums on the sequence program turns OFF the transmis sion request signal YO O 0O The transmission normal end signal is automatically turned OFF when the transmission request signal is turned to OFF Point 1 At the following times the transmission error detection signal X1 turns ON so conduct retrans mission processing when the transmission request signal turns from OFF to ON after the transmission error processing has ended 4 When a response is not received within the response monitoring timer value 2 When the response end code is anything other than OOH This shows the processing when the open request signal and initial request signal are turned off during tran
363. ransmission errors during fixed buffer exchange item 13 2 1 1 Reception errors during fixed buffer exchange tem 13 22 Random access buffer exchange e rrors eens item 13 2 3 Data write read in the PLC CPU errors ce eteeseeeeens Item 13 2 4 13 11 13 TROUBLESHOOTING MELSEC A 1 About turning on both the X1C of the input output signal and display LED s COM ERR 1 The E71 performs the following processing when an error such as a communication error is detected e Stores an error code in one of the following buffer memory areas an area that corresponds to the detected error e Turns on the X1C of the input output signal COM ERR LED on signal e Turns on the display LED s COM ERR communication error detection display Address Hexadecimal Decimal Initial error code storage area SOH 80 aa eee m SHO Aai CEKA SS 2 When the X1C of the input output signal is on and the display LED s COM ERR is on check an error code stored in one of the above buffer memory areas verify the error content according to the description in Item 13 1 1 and take an appropriate corrective action 3 The Y17 of the input output signals COM ERR LED off request signal is used to turn off the X1C of the input output signal and display LED s COM ERR Refer to Item 3 6 2 1 1 After completing the following operation turn off the X1C of the input output signal and display LED s
364. ransmission normal end signal automaticalty turns OFF Point 1 When communicating by UDP IP need attention for the items described below G When the PLC CPU and the remote node are not connected by a communication line due to disconnection of the connection cable the transmission normal end signal XO and transmission error detection signal X1 are not turned ON if data was transmitted to the remote node by the PLC CPU When data is transmitted to the remote node from the PLC CPU conduct the time out check until transmission is ended using the PLC CPU The user can adjust the time out time When a time out occurs turn OFF the transmission request signal YO check the communication line with the partner remote node and conduct connection processing for the troubled location Except 1 in above when the transmission does not end normally the transmission error detection signal X1 turns ON The exchange normal end signal XO does not turn ON In this case reconduct transmission processing by turning the transmission request signal from off to on after the transmission error processing is completed This shows the processing when the open request signal and initial request signal are turned off during transmission when the E71 Function for Data exchange during the PLC CPU is Stopped ltem 5 6 is not used 4 When the open request signal Y8 turns off during transmission the E71 conducts closed processing afte
365. re O Oo x x O Bit14 15 Open method O l CO l O CO Ce a a ee Exchange address 1 i x eed Routing information O Setting is required when using these functions default value change value x Setting not required 1 The parameters are set by the open processing communications format TCP UDP Set with the exchange parameter usage application setting bits 14 15 wnen the communication line is con nected Communication Format Open Method TCP 00 01 11 Active 00 Passive 01 11 SDE O9 Remote Node ARP Remote Node ARP Functions Functions Unpassive Full passive Parameters Yes No ___Yes No _ E7tportNo CT CO CO OO OO OO OT Remote node IP address O OJ x COT COO Remotenode No OJ O x O OJ O Remote node ethernet address OO O x l x O O Please make the default value FFFFFFFFFFFFH MEMO 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 SETTINGS AND PROCEDURES UP TO OPERATION This section explains the procedures and the setting methods for the system that uses E71 up to the point of E71 operation 4 1 Abbreviated Procedures Up to Operation Procedures up tc Operation install the E71 into the base unit Lay out the connection cable and sds Refer to Item 4 7 connect it to the remote node Set the conversion switch for the interlace between 10BASES5 Ethernet and iOBASE2 Cheapernet
366. rea 781 to 7B of the PLC CPU installed in the E71 Command remote node E771 Response E71 remote node SEDSRoSnSSs i a SS a Local 2500ms 4 bytes station Head address Write data to address 7BH CAH 0078H Write data to address 7AH 2DH Write data to address 79H COK Write data to address 78H BOH 10 105 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Specified byte length 8 words a Write data to the final address for the specified address Write data to the specified head address 1 Write data to the specified head address Byte length 1 to 256 bytes Head address ACPU monitor timer unit 250 ms PLC No Subheader Set to 3030 when specifying the byte length as 256 bytes Response format End cade Subheader Example When writing to the comment area 784 to 7Bx of the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node ee aur ee ee ae B AIO 33H 41Hi 46H 46H 30H 30H GOH 41H 30H 30H 30H GOK 37H 3BH 3OH 34H142H 44Hl4 32H 444 43H 34H 42h 414130 30H E a OE aA a S 3AH Local station 2500ms Head address 4 bytes a 044 Write data to address 7BH Write data to address 7A Write data to address 79H Write data to address 78H 10 106 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 10 7 Loopback Test The loopback test is a function th
367. remote node transmission reception buffer capacity Below is shown the message data length when it is allocated and transmitted or received EH When the E71 receives data the message is reconstructed using the following data link hereafter intemal data length when the message is reconstructed from the TCP UDP level G Data length in the data bearing fixed buffer exchange or random access buffer exchange The data length calculated from the command message contents when data is read or written in the PLC CPU 21 The E71 performs the following processing when the internal data length and the data amount that is actually transmitted differ 1 When the transmitted amount is less e Waits until the remaining data is transmitted e if the next data is not sent within the response monitoring time the message currently being received will be ignored and the next processing receive rate form initial message will begin 2 When the transmitted data amount is more e Determined to be a transmission with two or more messages linked together e The data from the first data received until the internal data length is handled as the initial message and that coming immediately thereafter is handled as the next message An error will be generated if there is subheader analysis being conducted or if processing is being conducted for the second message or thereafter Example Message transmitted has one message from the partner node Deter
368. request PS possible i error 1 detection 1 W71 n65 MEE H87 MB yic SET M81 Channel switch for buffer ae CHO om CH1 a CH1 Buffer CHO memory completed switc switching switching switching iti j request Buffer CH1 Butter CH1 g Writing to the fixed buffer of 4 switching switching connection 1 is possible 5 7 RST M71 Buffer CHO switch request 4 a nt RST Yc Buffer CH Buffer CH switch switch 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A j wy KG D300 Set the data fength to 3 words Buffer CHO Exchange Transmission switching possible data length 1 1 KOV K1234 D301 Set the transmission data Transmission data 1 WOY K5678 D302 Transmission data 2 MOV K8901 0303 Transmission data 3 TO HO K512 D300 K4 Writes the data length and Transmission transmission data in the fixed data length buffer No 1 s area SET YO Transmission request 1 RST M61 Buffer CHO switching 1 YO a x0 RST YO Transimission Transimission Transmission request normal request 1 1 Exchange end i possible 1 X1 FROMP HO Ko4 D108 K2 Reads error infromation when a Transmission Transmission transmission error occurs error error code detection 1 1 RST YO Transmission request 1 Fixed Buffer No 2 Reception Program X11 Y9 XIF p E Open Open WDT Exchange end request error possible CON 2 2 detection 2 X2 M2 aa E A M72 Reception Exchange Buffer CHO end 2 po
369. rfaces use the switch on the front of the AJ71E71 S3 2 Model A1SJ71E71 B2 S3 Ethernet Interface Module hereafter A1SJ71E71 B2 S3 Supports the 1OBASE2 Cheapernet and functions as a node on the Ethernet 3 Model A1SJ71E71 B5 S3 Ethernet Interface Module hereafter A1SJ71E71 B5 S3 Supports the 1OBASE5 Ethernet and functions as a node on the Ethernet Including these units in Ethernet makes it possible to exchange data between the A series PLC and the computer and between QnA and A series PLC Remote Node Transceiver 1OBASES5 Coaxial Cable E71 Terminator AU Cable PLC MELSECNET 10 Fig 1 1 Connection Diagram Using 10BASES5 Ethernet Remote Node 1OBASE2 Coaxial Cable Terminator E71 PLO MELSECNET 10 Fig 1 2 Connection Diagram Using 10BASE2 Cheapernet T shape adapter 1 1 1 GENERAL DESCRIPTION MELSEC A When unpacking the Ethernet Interface Module be sure that one of either of the following products is included Please have the user make separate arrangements for parts and materials other than these refer to item 2 3 ___ tem Product in the same package Mode AJ71E71 S3 Product of hardware i i Ethernet interface version B or before ain Moauie Product of hardware Main module version C or later Model BNC T Adapter UG 274 U Main module Model BNC T Adapter Main module Module 1 each Model A1SJ71E71 B2 S3 Ethr
370. rk Example When FFFFFOOOH is used as the class B subnet mask Class Net ID l Host ID 31 30 29 to 16 15 to 12111 to 0 Class B s IP address i cl O O 0 010101010 FH FH FH FH FH gt OH OH OH Conjunction Network 0 0 0 0 0 0 0 0 0 1 i 00000 address i t I 1 1 1 1 1 i i BSH OH W H H OH OH a l Subnet ID Class Net ID Host ID 2 1 The subnet mask sets up bit masked value where the net ID portion and subnet ID portion are 1 and the host ID portion is 0 2 001H to FFEH can be used as the host ID 11 2 11 WHEN SETTING A SUBNET MASK MELSEC A 11 2 Data for Setting the Subnet Mask This section explains the subnet mask setting area which is used to divide the network to multiple virtual subnetworks to make management of one network easier The network manager the person who plans the network or manages the IP addresses etc needs to set the values for creating this area before initial processing Buffer Memory Address Subnet Mask Setting Area Default Value 1CO to 1C1H 448 to 449 Subnet mask field 2 Words Subnet mask field default value OH address 1COH to 1C1H 448 to 449 a Sets the field values used to find the subnet address b Specify the setting values as shown below 1 When using a subnet specify C0000000H to FFFFFFFCH 2 When not using a subnet specify the local station s net ID net mask This will make it
371. ror code storage area buffer memory 93 103 163 before the open request signal is turned ON again 3 SPECIFICATIONS MELSEC A e When turning OFF the open request signal be sure that the O signals and other items related to the corresponding connection to the E71 are in the following status e Transmission request signal receive end check signal YO to Y7 transmission normal end signal reception end signal XO X2 and beyond transmission error detection signal X1 X3 and beyond are all OFF e Open end signal X10 to X17 is ON Or if the open error detection signal X18 is ON the open error code for the corresponding connection is other than O When passive open is specified in the open processing of TCP IP communication the open request signal can be turned OFF before the open end signal or open error detec tion signal turns ON In such cases when reopening processing using passive open turn ON the open request signal OFF ON once 500 ms have passed after the open request signal is turned OFF a COM ERR LED turn off request signal Y17 This signal is used to turn off the COM ERR LED on the front of the E71 that is lit when an exchange error occurs a The COM ERR LED is turned off when the turn off request signal Y17 is turned on b Normally turn off processing is conducted when the turn off request signal Y17 is on c When the turn off request signal Y17 is turned on the error informati
372. rror processing Connection 1 Exchange enabled while PLC CPU is stopped Connection 1 APPENDICES MELSEC A X43 aaan PI wi Fixed buffer transmission 119 Fixed Transmission processing butter instruction Connection 1 transmission permit l instruction 1 H1 M1 xO X1 y 123 SET M71 Transmission Transmission Transmission Butter CHO instruction normal end 1 request switch request permit Exchange Transmission 1 1 possible error detection 4 1 M71 M65 66 N67 M68 YC 129 SET 61 Channel switch of buffer memory Buffer CHO Butter CH1 Buffer CH1 Buffer CH1 Buffer CH1 Buffer CH Butter CHO completed punten switching Writing to the fixed buffer of request 4 7 8 1 connection 1 is possible RST N71 Butter CHO switch request 1 a E YIC Buffer CH Buffer CH switch switch M61 M1 141 NOV K D20 Butter CHO Exchange Transmission switching possibie data length 1 DOV H1234567 D21 Transmission data DHOV HBSABCDEF 023 TO HO K512 D20 K5 Transmission data length SET YO Transmission request 1 RST 481 Buffer CHO switching 1 Y Mt X 173 RST Y Transmission Transmission Transmission request Exchange normal end request 1 possible 1 1 X1 FROMP HO K94 D25 K1 Transmission Transmission error detection error code 1 RST YO Transmission request 1 APPENDICES MELSEC A 190 192 M31 Close request from local station Close occurred instruction permi
373. rt No 102H There is an error with the remote node port No There is an error with the port specified to be opened wor for exchange using TCP IP Multiple connections are set with the E71 port No 104 when exchanging using UDP IP 105x The E71 initial processing is not finished The remote node IP address was set to 0 or 106H FFEFFFFFu Open processing has already been conducted for the 1074 pairing open connection For the next connection An existence check for the partner remote node could not be done within the response monitor timer value There is a set value outside the allowable range in the timer set values during initial processing e There is an error in the E71 IP address set value during initial processing e There is an error in the subnet mask field set value when using the router reiay function 108H 109 201H 3014 set value 13 4 taecia ie cutta Correct the subnet mask and reconduct initial pro MELSEC A Desto Pressing O e Check the partner node operation e Check if the connection cable is disconnected e Check if there s a problem with the connection to the transceiver or with the terminator connection e f the response monitor timer value is small then change it to a large value e Check the transmission data on the partner node side e Correct the data length of the exchange data e When connecting TCP exchange the interference of packets in
374. rt No and remote nodes IP address and port No Local station E71 s IP address NO reception data request destination IP address YES The net ID subnet ID in the local station E71 s IP address NO and the reception data net ID subnet D match and the reception data host ID bits are all 1 YES Local station E71 s port No NO reception data request destination YES NO 1 Remote node IP address FFFFFFFFH YES Simultaneous broadcast Remote node P address NO reception data request source IP address NO Remote node port No FFFFH YES Simultaneous broadcast Remote node port No NO reception data request source port No YES Data reception data application data is stored in the fixed buffer Reception end of signal XO X2 XE is turned ON Reception data is not the local station address so reception data is ignored discarded 1 When all of the bits in the range that represents the reception data request destination IP address host ID are 1 processing is conducted on the yes side 7 10 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 3 3 Precautions When Using Simultaneous Broadcast Communications Functions Following are precautions when conducting simultaneous broadcast communication with fixed buffer exchange without procedures a For simultaneous broadcast communication the user will arrange the simultaneous broadcast transmissio
375. rt each for the E71 and the partner remote node The E71 uses the receive data subheader to determine whether the reception data from the remote node is text or response The remote node also uses the subheader to determine whether the received data is text or response Example For fixed buffer exchange with procedure E71 Partner remote node Subheader For connection No 1 For connection No 2 reception transmission 60 00 Text send Text transmission recy Response reception recy Text reception send Response transmission 3 For more details on cases when the reception of Close Abort RST has occurred from the partner remote node prior to the completion of the data communication performed immediately before refer to Remarks in of Item 5 4 3 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 5 4 5 Example Program This section explains an example sequence program used to do the connection open processing for the E71 and a remote node Example The following is an example program 1 The E71 is installed in the basic bases 0 slot 2 Exchange parameters are shown in the table below bigs Suner exchange Pore Bit 9 O With procedure 10O With procedure dure existence Open method i gt 10 Unpassive 10 Unpassive TXOA alas exchange pieee Bit 9 O With procedure O With procedure dure existence Open method ie 10 Unpassive 10 Unpassive QE71 port No Remote node IP a
376. rtner remote node that is conducting the existence check for the con nection opened by the destination existence check b The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 5 6 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 6 Number retries for destination existence check Default value 3H 3 Address 9H 9 a Sets the number of retries and existence checks when a response is not received from the partner remote node that is conducting the existence check for the connection that was opened by the destination existence check b The setting value is set to 1H to 7FFFH by the timer setting time s unit setting 7 TCP ULP time out value Default value FH 15 setting time setting value x Unit EE E Address AH 10 a Sets the pocket existence time during TCP data transmission This timer receives parameter when sending data and TCP open and works for ARP function s existence time b The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 1 3 ES TCP zero window timer value Default value 5H 5 setting time setting value x Unit Address BH 11 a The window shows the reception buffer on the reception receiving end b When there is no more space in the reception buffer on the receiving end window size 0 the transmitting end waits to transmit data until there is space in the reception buffer on the receiv
377. s AOODx There is an error in the header check sum of the re ceived IP packet 13 6 13 TROUBLESHOOTING MELSEC A End Code Eas Error Code Description Processing The number of communication destination nodes af ter initial processing exceeded 20 stations Refer to Item 5 2 Point e Reduce the number of external nodes to communi cate e End communication with all external nodes and per form the E71 initial processing once again Cannot transmit since no space is available in internal Transmit the same data once again and confirm the buffers such as IP header buffer response returned AOQEH e Reduce the number of remote nodes with which communication is done e Reconduct E71 initial processing after communica The number of partner remote nodes with which ex AOOFH change was done exceeded 20 stations after initial processing Refer to Item 5 2 Point A010H There is an error in the partner remote node side IP AO1414 address setting value e Setting the IP address to FFFFFFFF is not possible when using TCP A transmission error has occurred BOOTH Transmission processing couid not be conducted be cause the cable is not connected or is loose e Transmission was requested to a remote node for which the class net ID differs from that of the local station when the router relay function was not used e There is an error in the routing information setting area 13 7 tion with all remote nodes is complet
378. s The firs registered device No contents during monitor data registration 16 points portion on off status from the final registered device No for monitor data registration For word devices The final registered device No contents for monitor data registration For bit devices 16 points portion on o status from the second registe ed device No for monitor data registration For word devices The second registered device No contents for monitor data registrat on For bit devices 16 points portion on off status from the first registered device No for monitor data registration OO En code Subheager Example When Y50 to 5F D38 and W1E are set using monitor data registration for the PLC CPU that is installed in the E71 j Command remote node E71 Response E71 remote node ofra OOH ae ee Local 2500ms station 89 cose E54 784 564 D38 WIE content content 234 5678r ry y 10 38 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A b When exchanging using ASCII code Command format Response format 4 words Number of registered devices x 2 2 bytes ee SSE a AP a EE 89 AME oh alm o om o ofeefee Se ee Ne a arene errr Ne E ACPU monitor timer For bit devices unit 250 ms 16 points portion on off status from the final registered device No for monitor data registration For word devices The final reg
379. s Head address 4 bytes Q1E0x 04H Address 1E3H contents C44 Address 1E2 contents 2DH Address 1E1 contents COH Address 1E0x contents BDx 10 99 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A EJ Batch write This section explains the command response format when batch writing comment memory a When exchanging using binary code Command format Specified byte length 8 bytes Write data to the finat address for the specified address Write data to the specified head address 1 Write data to the specified head address Data length 1 to 256 bytes Head address ACPU monitor timer unit 250 ms PLC No Subheader Specify to 00 when specifying the byte length as 256 bytes Response format 2 bytes Sos End code Subheader Exampie When writing the comment area 78H to 7BH data to the PLC CPU installed in the E71 Command remote node 771 Response E71 remote node FEEFFE be aia a a aa Oe Oe a P Write data to aadress 7B Write data to address 7AH Write data to address 79 Write data to address 784 4 bytes Head address 00784 2500 ms Locai station 10 100 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A o When exchanging using ASCII code Command format Specified byte length 8 words t Bo ee 0 0 eed a fp r t i a a ttt tr pram a Write data to the final address for the s
380. s SSS a The AnACPU dedicated commands used for extension file register direct read write are shown below These command functions are used to access the extension file registers in block No 0 to No 256 and can specify the addresses from the block No 1 device No 0 as device No without concer for each block No and can access them The usable number of blocks x 8192 extension file registers can be accessed using continuous device Nos Number of re CPU status processing Processing description points con 5 Rumning ducted in one topped possible Drk exchange setting setting Siect read Reads the extension file register 256 points cae R in one point unit rectwre Writes the extension file register 256 points R in one point unit in the PLC CPU status column in the above table the O stands for executing possible and the x stands for execution not possible 2 Extension file register device No a The device No range that can be specified is shown below O to usable number of blocks x 8192 1 Device No Device No 0 Q oO r O Block No 1 8191 8191 0 to Block No 2 area to Block No 2 16383 8191 16383 to 1 word 1 word The device Nos that will be used for direct read write are automatically allocated in order from the smallest device of the block No from those after block No 1 The device Nos that can be specified vary depending on the type of memory cass
381. se there will be a wait when the same IP address and the same port No are reopened the system start up time should be set in anticipation of this This setting will change the time from when the initial request signal Y19 is turned on to when the initial normal end signal X19 is turned on The exchange condition setting switches should be set when the E71 s power is turned off 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 4 Description of Display LED s Display This section explains the signal names and describes the displays of the display LEDs on the top front of the E71 Table 4 2 List of the Display LEDs and the Display Contents AJ71 E71 S3 RUN Normal operation display Normal Error RDY Exchange preparation completed display Flashes after initial processing finishes normally Exchange processing executing display Executing Not executing COM ERR ce ie oe mapay During error detection Normal no error Refer to Item 13 2 1 FROM FROM TO Display during data read FROM display During read write Read write is not TOorFROMTO during data write TO processing execution being processed BURT 61 __ Connection No B2 B2 Connection No 2 Bus jes Connection Nos _ SELFCHECK S C ERR Display LEDs Description of LED Displays When the LED When the LED AJ71E71 S3 BUF4 B4 Communication line in ee Open co
382. second data and processed In this case a subheader command un defined error will occur Exchange Processing Fixed buffer exchange Random access buffer exchange Reading and writing data in the PLC CPU 50x For random access buffer exchange the specified header address from the remote node ts set out side the range of 0 to 6143 51H For random access buffer exchange the speciied header address from the remote node number of wor t during r the ran ji 52H to 6143 e The data text for the specified number of words cannot be transmitted in one frame The transmis sion reception data length value or text amount is not within the acceptable range e When the data code setting using the dip switch SW2 on the front of the E71 is set to ASCII code ASCII code data that cannot be converted to parity code by the remote node was transmitted 54H e When the CPU exchange timing setting is set to write not possible during RUN using the dip switch SW7 SW3 on the front of the E71 and the data write request from the remote node was made while the PLC CPU was running A request from a remote node to write a parameter sequence program or microcomputer program was received while the PLC CPU was running Not re lated to the on off state of the dip switch SW7 SW3 on the front of the E71 55H 56H e There is a device setting error from a remote node rn Correct the
383. sent at one time for each data exchange function Table 3 4 Exchangeable Data Amount Cannot be selected 1017 Words The maximum number of opera tions that can be specified for Maximum 256 points each command instruction The same as simultaneous broadcast communication without orocedure Fixed buffer exchange Without procedure 1023 Words Random access buffer exchange Reading and writing data in the PLC CPU General data exchange Equivalent to 508 words on the PLC CPU 3 SPECIFICATIONS MELSEC A 3 4 Functions 3 4 1 List of Functions Table 3 5 List of E71 Functions Description of Functions Functions E71 AJ71 E71 QE71 E71 be ty Me AN Ad lh cab E71 AJ71 E71 QE71 E71 E71 ooog Shee 1 1 Exchange between the PLC CPU and remote nodes in the Ethernet is done on a 1 1 basis When With Procedure is used exchange is conducted while a handsnake is being done with the remote node 2 When conducting exchange with a remote node the fixed buffer one area for each 1k word has 8 areas nowever please refer to Item 3 3 regarding the amount of data that can be exchanged at one time 3 The exchange partner and usage application transmission re ception for the fixed buffer is set by the exchange parameters 4 Exchange can be done with tne connection and remote node that is in the Ethernet 1 By UDP IP fixed buffer exch
384. sion connections are made into one pair Fixed buffer exchange either with procedure or without procedure is possible is performed by the connection which the pairing open was processed Example E71 Buffer memory TCP IP or UDPAP Communication Reception data Partner remote node Set buffer exchange either with procedure or without procedure is possible is performed Connection No 1 1 Fixed buffer For reception Fixed puffer For transmission 4 Connection No 1 and No 2 s exchange parameter settings Address 10H to 11H Connection No 2 1 Transmission data Connection No 1 exchange parameter setting Address 10H 0081H Connection No 2 exchange parameter setting Address 11H 0000H When the Pairing is Connection No 1 and Connection No 2 Initial request signal Initial normal end signal Open request signal No 1 Open end signal No 1 Open request signal No 2 Open end signal No 2 Open processing Close processing internal processing Internal processing Ethernet FIN FIN 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A Open processing 1 The initial normal end signal X19 is turned on by the initial processing normal end which is pro duced when the initial request signal Y19 is turned on Refer to Item 5 3 2 The setting values parameters are written to the buffer memory exchange parameter settings area by the sequenc
385. smission when the E71 Function for Data Exchange during the PLC CPU is Stopped Item 5 6 is not used 4 The E71 conducts close processing after the transmission processing end when the open request signal Y8 turns OFF during transmission The E71 conducts close processing and end processing after transmission processing end when the initial request signal Y19 turns OFF during transmission For more details on cases when the reception of Close Abort RST has occurred from the partner remote node prior to the completion of the data communication performed immediately before refer to Remarks in of Item 5 4 3 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 1 2 Reception Control Method This section explains the control method that the E71 receives the data from the remote node receiving data from the remote node to the fixed buffer No 2 as an example Remote node ACK TCP only suods y e eov r e auam averne ween wee ese 2 Initial processing end open processing end UOISSHUSUBL DURWUWOD 02g E7 1 Ce eas et hod eres een tet eee a Cae ug Shee oe D O 9p 3 3 aa a a aa ah lc a hel E Q A Reception end PLC CPU signat X2 Reception end check signal Y1 ewe eK er eee a Bee ewe ee Ee Ke ee eee ew eK ee ew ee ew eR ee re ee hw ew ew Mee Ke Ke ee ew ee eK Re ee ee EB ew eB The E71 initial processing is conducted Refer to Items 5
386. ssed using a hexadecimal number c An example specification is shown at the end of this item remarks aT ACPU monitor timer The wait time from when the E71 which has received request data from the other node outputs a read write request to the PLC CPU until the response is returned is indicated by the following value QOOOH O Unlimited wait 0001H to FFFFH 1 to 65535 Wait time units 250ms a When exchange is done using binary code the ACPU monitor time is shown using a binary value ob When exchange is conducted using ASCII code the ACPU monitor time is shown using ASCII code when expressed as a hexadecimal number c An example specification is shown at the end of item remarks 10 4 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Test command The E71 commands etc that show the functions that can be used when a remote node reads writes data in the PLC CPU in the target PLC station The data contents and order for the text command portion differs depending on the functions used The data order for each function is given in the function explanations from Item 10 2 and later Text response This shows the read data processing results etc when a remote node reads writes data in the PLC CPU in the target PLC station The data contents and order of the text response portion varies depending on the functions used The data order during normal end for each function is shown in the func
387. ssible switch request 2 2 a NOS SET W482 Channel switch for buffer Buffer CHO memory compieted switching Reading from the fixed buffer of Buffer CHO Buffer CHt Buffer CH1 Buffer CH1 switch switching switching switching request 2 5 6 7 Butter CH1 connection 2 is possible switching 8 RST M72 Buffer CHO switch request 2 nnn RST YIc Butter CH Buffer CH switch switch 6 FIXED BUFFER EXCHANGE WITH PROCEDURE M6 N2 FROM HO Butter CHO Exchange switching possible 2 2 FROM HO X3 M2 Reception Exchange error possible detction 2 2 Y1 M2 RST Reception Reception Reception Reception end 2 error end possible detection check 2 2 2 K1536 BOY K1537 K104 D500 Reception data length 0500 Reception data length 0501 Reception data RST D110 Reception error code 2 MELSEC A KI The reception data is read to D501 to when the end of the data length is reached when the reception end signal is turned ON 22 K0Z2 Yt Reception end check 2 N62 Buffer CHO switching 2 K1 Reads an error code when a reception error occurs Yt Reception end check 2 Y1 Reception end check 2 When the I O control method of the PLC CPU of the station installed in the E71 is the refresh method and a fixed buffer read write is performed after the buffer memory channel switching signal YO01C is switched from on gt off off gt on a r
388. ssion data need attention for the items described below When the PLC CPU and the remote node are not connected by a communication line due to disconnection of the connection cable the transmission norma end signal XO and transmission error detection signal X1 are not turned ON if data was transmitted to the remote node by the PLC CPU When data is transmitted to the remote node from the PLC CPU conduct the time out check until transmission is ended using the PLC CPU The user can adjust the time out time When a time out occurs turn OFF the transmission request signal YO check the communication line with the partner remote node and conduct connection processing for the troubled location When opened by selecting without procedure the subject connection becomes a fixed buffer transmission reception special use without procedure so fixed buffer exchange with procedure random access buffer exchange and reading and writing data to the PLC CPU exchange cannot be conducted at the same time as fixed buffer exchange without procedure e The data length specified stored in the buffer memory during exchange without proce dure is byte units The data length during exchange with procedure is in word units k When the buffer memory transmission data length exceeds the range during data trans mission an exchange error will occur and transmission will not be conducted EJ When receiving data using the fixed buff
389. st signal Y8 connection No 1 0 When the open request signal Y8 to YF is off exchange is prohibited during STOP 1 When the open request signal Y8 to YF is off exchange is enabled during STOP Initial request signal 0 When the initia request signal Y 19 is off exchange is prohibited during STOP 1 When the initial request signal Y 19 is off exchange is enabled during STOP EJ Specification of the setting value to the exchange instruction area during STOP To continue exchange after the initial request signal Y19 and open request signalis Y8 to YF are turned off because the PLC CPU is stopped etc turn on the bit 15 of the exchange instruction area during STOP Example To continue exchange between connections No 1 and No 2 after the initial re quest signal Y19 and open request signal Y8 Y9 are turned off set 8003 Point 1 When continuing the exchange with remote nodes while the PLC CPU is at the stop state always set the bit 15 of the above exchange instruction area during STOP to 1 on 2 When continuing the exchange when the initial request signal 19 is on and the open request signal Y8 to YF is turned from on to off turn on the bit for corresponding connection No of the exchange instruction area during STOP Example To continue the exchange between connections No 1 and No 2 when the initial request signal Y19 is on and the open request signals Y8 Y9 are off set 0003
390. t 1 att Close request from other node Close occurred occurred 1 N1 196 _ _ _ __ ___ _ _ _ ___ YI W31 Close occurred Close instruction permit 1 M31 XIF 198 FROMP HO K496 D104 KI Exchange desable while PLC Cisis WDT Exchange CPU is stopped instruction error instruction for Connection 1 permit detection current stop 1 state 1 WANDP 0104 H80FE 0105 Exchange Exchange instruction for instruction for current stop new stop state 1 state 1 HO K496 D105 K1 Exchange instruction tor new stop state 1 431 51 X0 Kt YO 225 RST Ye Close processing Close Close Trans Trans Open Connection 1 instruction processing mission mission mission request permit 1 normal error request 1 1 end 1 detection 1 1 SET M21 Open impossible 1 RST M31 Close instruction permit 1 M31 X0 234 RST YO Close Trans Transmissio instruction mission request permit normal 1 x1 SET 51 Trans Close mission processing error detection zi YO Transmission request 1 1 APPENDICES MELSEC A K3 TH input signal OFF waiting 1 RST Y8 Input Open signal request OFF 1 vg SET M21 Open impossible 1 RST 5i Close processing 1 RST M31 Close instruction permit 1 K5 T1 Open wating 1 mf RS T M21 waiting impossible 1 1 A 24 1 APPENDICES MELSEC A X19 252 Initia WDT normal error Open Reception Open Ope
391. t ing in fallout short circuits or erroneous operation fe AUTION e Do not disassemble or modify the module it may cause failure erroneous operation injury or fire e Make sure to switch all phases of the external power supply off before cleaning or re moving the module lf you do not switch off the external power supply it will cause failure or erroneous opera tion of the module 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A 4 2 Names of Parts This section explains the names and setting method for the E71 parts AJ71E71 S3 AJ71E71 S3 eee ee Tp o j n A ere a Products of hardware version B or before Products of hardware version C or later A1SJ71E71 B2 S3 A1SJ71E71 B5 S3 1 It is a seal to show a hardware version and software version of a module Example Software version shows B Hardware version shows A 2 Date column of the rated plate stiows the manufactured date of the module Year last two digits month two Gigits and the function version one digit Example 9809 B t_ Function version one digit Printed only on products of version B or later Month Two digits Year last two digits 4 2 4 SETTINGS AND PROCEDURES UP TO OPERATION MELSEC A Refer ence Item Description and Explanation Displays the operating state data transmission and reception and er ror description The description
392. t PLC s No n The special function unit buffer memory can be accessed by specifying the subject PLC s No Access not possible Point Exchange cannot be done with AOQJ2CPUP23 R23 and AOU2P25 R25 9 READING WRITING DATA IN THE PLC CPU EXCHANGE MELSEC A a Transmission time when done via data link system a The following shows the transmission time T1 when data transmission is conducted to a PLC in which an E71 is not installed in the data link system e Local station Transmission Time T1 Transmission delay time A E71 installed 1 station scan time x n 1 04 19 9 e Remote I O station Transmission time T1 Transmission delay time B Master station 1 scan time x n 1 4 19 43 1 Refer to the explanation on the subject data link system transmission delay time in the data link system reference manual Transmission delay time A Refer to the symbol column for the LRDP command processing time Transmission delay time B Refer to the symbol column for the RFRP command processing time e When exchange is conducted for the first time to the subject system when the power is turned on or when the CPU reset has been conducted e When exchange is conducted with a station other than the latest 10 sta tions to which exchange has been conducted e When exchange is conducted for the second time when the number of exchange stations is under 10 e When exchange is conducted for the second time to the
393. t possible continued i l l Setting for 4 Open Set the buffer memory address 1FOH to 0000H FIN ACK FIN ACK processing Prohibited Remote node Initial processing Data exchange to a remote node becomes possible by turning the open end signal X10 on Fixed buffer exchange random access buffer exchange and exchange of read write data in the PLC CPU are possible The PLC CPU in the station installed in the E71 enters the STOP status and the initial request signal Y19 and the open request signal Y8 turn off Close processing and end processing are not conducted because exchange enable during STOP is set Data ex change can be continued Random access buffer exchange and exchange of read write data in the PLC CPU are possible G The PLC CPU in the station installed in the E71 enters the RUN state and the initial request signal Y19 and open request signal Y8 are turned on Initial processing and open pro cessing are not conducted because the exchange enable during STOP is set Data ex change can be continued Fixed buffer exchange random access exchange and ex change of read write data in the PLC CPU are possible Change the setting to exchange prohibited during STOP Set the buffer memory address 1FOH to OOOOH Close processing and end processing are not conducted because the initial request signal Y19 and open request signal Y8 are turned on Data exchange can be continued Fixed buffer exchang
394. t to 30301 when setting the number of steps and i Mai 3841 number of device points to 256 points ain program 38414 8Ax Subprogram 3842H 8BH Example 1 When reading the main sequence program 100 to 103 steps for the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node 304 41H 46H 46H130H 30H 30H 41H 1308 30H 36H 34HI30H 34H130H 30H 38H 41i 30H 30H 34H 30H 30H 31H 38H 30H 30H 32H13 1H 30H 31H 31HI33H 30H 30H 35H a Np ll a a aD OA Local station 2500ms Head step No 4 steps es ee AP o Aes A step 100 an 64H contents 6SH contents 66H contents 67H contents 00644 400 1H 80024 10111 3005 Example 2 When directly reading the timer set value T8 to T11 used by the main sequence program of the PLC CPU installed in the E71 Command remote node gt E71 Response E71 remote node o AJF FIO 0 0 AIF Eo glo 4jo 0 SOK 41H 46H 46H 30H 30H 30H 44H 46H 45H 30H 3BHIIOH 34H130H 30H 8 AJO 0 0 0 6 4 0 1 2 310 03 21 8 9 6 C 38H 41H 304 30H 30H 30H 36H 34H 30H 31H 32H 33H 30 30H 33H 32H138H 39H 36H 43H OAH Locat station 2500ms Head device No 4 points T8 set value T9 set value T10 set value 111 set value ap 04H 0064H K100 0123H K291 00324 K50 896CH D182 H 10 86 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Batch write This section explains the command response format when batch writing the set val
395. t when the special function module buffer memory is accessed from a remote node via the E71 Command when data is written to the AD61 from a remote node using b nary exchange f AD6 buffer memory as AD61 buffer memory as seen from the PLC CPU i seen from a remote node Address Address Hedda byes 4 bytes Preset value address Low level 000082 Module No oon 40H Middle level Low level E2H 40H Preset value High level O1H Middle level E2H OOH High level The special function module buffer memory contains a read write possible area read only area write only area and an OS user usage not possible area for each module Execute this function in accordance with the explanations given in each module manual Conducting a mistake in read write will cause an error to occur in the PLC CPU or the special function module 10 61 70 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A 4 Thinking regarding special function module Nos occurring in commands a Module Nos of special function modules that occupy one slot For special function module Nos that are specified by control procedures if the special function module I O address final address is expressed in 3 digits then only the first 2 digits are used Special function module No 07H Special function module No OAH Cc 5 Bjo Z 2 ab
396. te node EN For closing from the E71 end initial request signal a ae Y19 a Close processing procedures for TCP PLC lOpenrequest CPU isignal return re Open end signa return AND E71 Ethernet Pete ao E b Close processing procedures for UDP Initial request signal Y Open request signal return Open end signal return Close processing Internal processing 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A AM The open request signal Y8 ts turned off by the Sequence program The E71 executes closed processing lf the transmission request signal reception completion confirmation signal YO Y1 for the fixed buffer communication of the corresponding connection is off when the open request signal Y8 Y9 is turned off the E71 turns off the corre sponding input signal X listed below e Transmission normal completion signal reception completion signal XO X2 e Transmission error detection signal reception error detection signal X1 X3 Exampie For connection 1 If the transmission request signal reception completion confirmation signal YO for connection 1 is off when the open request signal Y8 is turned off the E71 turns off the following input signals x e Transmission normal completion signal reception completion signal X0 e Transmission error detection signal reception error detection signal X1 When close processing ends the open end sig
397. terface module s random access buffer Random access buffer exchange begins after the initial processing and open processing that con nects the communication line as described in Chapter 5 In addition perform close processing and end processing when data exchange is completed for the subject communication line 8 RANDOM ACCESS BUFFER EXCHANGE t cee Seay ye et a r MBEGEC QNA 8 RANDOM ACCESS BUFFER EXCHANGE gt This section Soi the method for conducting exenange with remote nodes using the E71 s random access buffer 8 1 Control Format This section explains the exchange processing y control et using the random access buffer For random access buffer exchange data is written to the random access buffers and read from the random access buffer using commands requests from the remote nodes Writing to and reading from the E71 s random access buffer from the remote nodes is conducted asynchronously with the PLC CPU s sequence program EN The random access buffer is not fixed to the remote node to which exchange i is done but writing and reading can be freely conducted from any remote node except E71 Therefore a common buffer area can be used for all nodes connected to the Ethernet Remote node Remote node Remote node Remote node a zy p i Remote node 2 _ The data flow for exchange processing using the random access buffer is shown below E71 Read r
398. ters computers workstations WS and other E71 AJ71E71 QE7 1s etc connected to the Ethernet to exchange data MELSECNET Network system data link system E71 installed station s PLC EJ Terminology For information on terminology please use the index provided at the end of the appendixes in this manual 1 12 2 SYSTEM CONFIGURATION MELSEC A 2 SYSTEM CONFIGURATION This section explains the system configurations that are possible in combination with the E71 2 1 Overall Configuration Following shows a system configuration with an E71 PLC installed in the Ethernet Please refer to Item 2 3 for information regarding other arrangements that must be made by the user a When connecting the PLC CPU with the Ethernet When MELSECNET 10 Remote station is connected to the Ethernet MELSECNET 10 Network system Connection cable MELSECNET 10 Optical Coaxial cable When PLC CPU is connected to the Ethernet Network Module CPU Module For MELSECNET 10 Remote station Fig 2 1 System Configuration Diagram 2 SYSTEM CONFIGURATION MELSEC A 2 2 Supported Systems The E71 can be used for the system described below af Supported units and installable number of units The following table shows the PLC modules that can be installed in the E71 and the number that can be installed E71 installation Application Number of modules AOJ2H When using both the AnS series and A series special function A1 A1N A1S S
399. the AnUCPU 10 102 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A Batch read This section explains the command response format for batch reading form the extension comment memory a When exchanging using binary code Command format Response format 8 bytes fate a tess ee Fe ot a L H L to ay yy ai yey E E ee ea ee ee oe eee ao 1 IASA AT Z Byte length 1 to 256 bytes Da Final address contents tor the Head address specified address ACPU monitor timer unit 250 ms Specified head address t contents PLC No Specified byte length 2 bytes Specified head address contents Subheader End code Subheader Set to 00 when specifying the byte length as 256 bytes Example When reading the comment 1E0x to 1E3x of the PLC CPU installed in the E71 Command remote node E71 Response E71 remote node Sea oe i aoe gates eaten a Local 2500ms Station 4 bytes Address 1E3H contents Head address 01E0H Address 1E2H contents Address 1E1H contents Address 1E0 contents 10 103 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A bo When exchanging using ASCII code Command format Response format Specified byte length 2 words PS EM a A ETE L H L B 9 dom 3 H D fH ufe fe po L a g a Se ea SN t ee ae Byte iength 1 to 256 bytes t Head address Finat address contents for the ACPU monitor timer unit 250 ms specified a
400. the module If you do not switch off the external power supply it will cause failure or erroneous operation of the module OPERATING PRECAUTIONS Do not write data in the system area in the buffer memory of the special function module Also of the output signals directed to the special function module from the PLC CPU do not output switch on the signals that are use prohibited if data is written to the system area or output is performed with respect to a use prohibited signal it may result in the malfunction of the PLC system Before performing the control of the PLC in operation especially changing data program and operation status remote RUN STOP by connecting a personal computer etc to the special function module read the manual carefully and confirm if the overall safety is maintained Failure to perform correct operations to change data program or the operation status may result in system malfunction machine damage or an accident Remote RUN STOP for the module installation station s PLC CPU is recommended to use the Data Exchange during PLC CPU STOP function after throughly reading the manual If the remote RUN STOP is executed without using the Data Exchange during PLC CPU STOP function the output signal from the PLC CPU to the module goes OFF and the communication line is disconnected close processing As a result all data transmission from other nodes including status control of
401. the PLC CPU becomes impossible DISPOSAL PRECAUTIONS CAUTION When disposing of this product handle it as industrial waste REVISIONS The manual number is given on the bottom left of the back cover Aug 1997 SH NA 3598 B Addition SAFETY PRECAUTIONS Item 4 7 1 CAUTION item 5 3 1 3 Item 5 4 5 2 Item 10 2 8 4 Point 4 ttem 10 3 6 Point 4 item 13 1 1 Error code 7010 H Appendix 7 2 Appendix 7 3 SAFETY PRECAUTIONS CONTENTS MANUALS Chapter 1 Point Item 1 2 4 Item 2 1 item 2 3 4 Remarks 2 item 3 3 4 item 3 4 1 Item 3 7 2 Point Item 4 4 4 5 1 4 6 1 4 7 2 tem 5 2 Point 1 Item 5 3 1 5 4 2 5 4 3 5 4 4 Item 5 4 5 2 Item 5 5 3 5 6 1 5 6 3 7 3 1 7 3 3 10 1 3 10 4 1 10 5 1 10 6 4 Item 13 1 1 Error Code AOOFH Item 13 2 Appendix 3 1 b Appendix 7 1 Appendix 8 Sep 1998 SH NA 3598 C SAFETY PRECAUTIONS Chapter Point 2 Item 2 3 Remark 2 Item 3 2 Item 5 1 1 Item 9 2 PLC CPU model Item 10 4 1 2 10 5 3 10 6 5 1 b Appendix6 Appendix10 SAFETY PRECAUTIONS Chapter 1 Table Item 1 2 9 1 3 1 4 Item 2 2 2 3 1 1 2 Point Item 3 2 3 3 3 4 2 3 5 2 3 6 1 Important 3 4 10 12 3 7 1 Item 4 2 4 3 2 4 4 4 5 1 4 7 2 4 7 3 Item 5 1 Point 5 3 1 Table 2 11 1 3 point 5 3 2 5 3 3 5 4 2 5 4 3 5 4 4 5 5 2 4 7 5 6 3 Item 6 1 2 Point 6 2 1 1 6 2 2 Item 7 1 2
402. through Chapter 12 Close processing T mi Open requ est signal Y8 to F O i gt Refer to Item 5 4 3 sere Refer to item 6 3 2 Conduct after the open end signal turns OFF End Once a communication line is connected the following data communication can be performed between E71 and other destination nodes using the port number specified by the communica tion parameter during the open processing When procedural fixed buffer communication is specified during the open processing When bit 9 of the usage setting communication parameter is OFF procedural Communication using fixed buffers Refer to Chapter 6 a Either transmission or reception is possible This is determined based on the setting for bit O of the usage setting communica tion parameter e When bit O of the usage setting is OFF transmission is enabled e When bit O of the usage setting is ON reception is enabled b Data transmission or reception between the PLC CPU and other nodes is per formed using a fixed buffer buffer memory of the same number as the connection Functions that can be number of the open request signal sent when the communication line was opened communicated using the The connection number of the open request signal is compatible with the fixed applicable connection buffer number a c When transmitting and receiving data between the E71 and other nodes two com munications lines are required Refer to Item 3 5 2
403. tial processing and end processing conducted by the PLC CPU when connecting to a communication line and exchang data with a remote node Connect to the line using the normal online operation 5 3 1 Data for Initial Processing This section explains the parameter setting area for conducting initial processing The network man ager the person who plans the network and manages the IP addresses writes the values to be used in this area before initial processing is conducted Refer to Point at the end of Item 3 7 2 about whether the parameter should be set Buffer Memory Address initial Processing Parameter Setting Area 16 Words Default Values Oto 1H Oto 1 Local station E71 s IP address 2 words OH OQ 2H 2 Special function settings 1 word OH 0 3H 3 Timer setting time units 1 word 7DOH 2000 4to 6H 4to 6 System area Use prohibited 3words TH 7 Destination existence check start interval timer value 1 word 12CH 30071 8H 8 Destination existence check interval timer value 1 word SH 5 1 9H 9 Number of retransmit tries for destination existence check SH 3 AH 10 TCP ULP time out value 1 BH 11 TCP zero window timer value 1 word 5H 571 CH 12 TCP retransmit timer value 1 word 5H 51 DH 13 TCP end timer value 1 word AH 101 EH 14 IP setup timer value 1 word SH 3 FH 15 Response monitoring timer value 1 word FAL Voy 1 The setting
404. ting time units are specified for the following ranges Timer setting time units Timer setting values setting possible range 2s 2000ms 1 to 8191 1 to 1FFFH 2 0s to 16382 0s 1 to 32767 1 to 7FFFH 0 5s to 16383 5s Current timer operation cannot be guaranteed if setting values outside the above range are set d The timer times set in buffer memory addresses 7 to 15 are as follows Timer time Timer setting value x timer setting time units Example When the TCP ULP time out value setting value is 15 O When the timer setting time unit is 2s 15 x 2s 30s 80000ms 2 When the timer setting time unit is 500ms 15 x 500ms 7500ms 4 jj Destination existence check begin interval timer value Default value 12CH 300 setting time setting Value x Unit s sessssssersossrerserosneuessssensaunanussuouns Address 11H 17 a When the exchange with the partner remote node by the connection opened by destina tion existence check is finished until existence check is begun b The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 10 minutes when the default value is 12CH 300 2 5 fj Destination existence check interval timer value Default value 5H 5 setting time setting value x Unit sssuvensenosssessensensesasorssesnavososssusrsa Address 8H 8 a Sets the interval time for conducting retry and existence check when no response is re ceived from the pa
405. tion QnACPU station device memory within the ANACPU range For sta tions other than the QnACPU all types of communication are pos sible within the specification range described in Chapters 9 and 10 Other station Communication Via MELSECNET 10 not possible Communication not possible 2 Maximum number of modules that can be loaded A maximum of six E71 modules can be loaded to a single QnA type PLC Follow the instruc tions provided in Item 2 2 to install the module 3 Data read write communication within the PLC CPU Perform data communication after verifying the usable commands described in Item 9 2 Data read and write is possibie with respect to the QnACPU device memory within the device range of AnACPU It is impossible to read and write the file register Fixed buffer communication random access buffer communication Data exchange between the QnACPU and other nodes by means of the E71 is performed in the same manner as data exchange between the A series PLC CPU and other nodes Point since the function specifications are different between the QnACPU and the A series PLC CPU the response speed from the PLC CPU will vary with respect to read write requests When using a QnA type PLC with an E71 module installed always verify that it operates normally APPENDICES MELSEC A Appendix 11 MELSEC Communication Support Software Tool By using the Mitsubishi communication support software tool for supporting
406. tion 0 0 cecceeseeseetecceereeseetaeesesereees 3 9 3 5 3 Conditions for Issuing a Forced Disconnect sssssrssssensrearsnrsssavrorerosesierasrsesenssrroses 3 9 OO WORSIOM AIS 100 tie FPEO OP U arnan a AE T AA ROS 3 10 FOT TSU ONY SIAS orna a tang eras cts cne dave adem nee ee amet cena 3 10 3 6 2 Detailed Explanation of O Signals wisieticercnsraderacasiisiveddivowsennardhtanneshtpatesiaantieraatiatewsescaees 3 11 Ot BUUS MENON racina e a Nana aA E I A 3 21 Sle Bufer Memor ApDIICatOnS saarnansa a E EEE EE E aa 3 21 Sz Usto Butler Memory AllOCANONS annara a a a a NE 3 22 CHAPTER 4 SETTINGS AND PROCEDURES UP TO OPERATION 4 1 to 4 15 4 1 Abbreviated Procedures Up to Operation sessesssurrereuratnnsssdrtpo etrs s rreo trpe PEUR PEPEEPP EERE hivbeteys 4 1 Ae Nams OPAS ra E O A A aa Aa 4 2 AS SENSEN S ee A AN E a A aehes 4 3 23 4 Ooeration Mode SeuinGs iai e a 4 3 A32 EXChange CONdlor S SUINOS seiri A a cooumemeNaiens 4 4 4A escriouon of Display LED S DISHA i nnee a a OS 4 5 4 8 4 9 VOUT and AS CaCI ciaras cesatiamor sce e A N 4 6 dol IAaMCNNG PIOCAUMONS rionc E E a NES 4 6 A52 INStallation ENONNEN siaii T 4 7 Ell DIAGNOSUG TOST cers E E E E AAN 4 8 AOA SCTELCOPDACK TEST insor a a eee a aaa 4 8 FO PAM OSE agnes n e E a A 4 9 AOS BOMTES gera N A A 4 10 Gomec TO NGIWO naririnig E T A OT 4 11 All CONMEChOn Frec ri a NA 4 11 A fue CONMECING O TOBASE Garren aaan eaa e aN 4 12 At CONNEC 10 TOBASE
407. tion data is stored in order starting from the fixed buffers No 1 to 8 first address 1 The following figure shows an example of a 400 byte reception using fixed buffer No 2 600H 1536 601H 1537 gt Reception data jength storage area 1 The reception data length is stored during reception end unit is a byte Reception data to 400 bytes Reception data storage area The reception data is stored in order from the newest address 6C8H 1736 6C9H 1737 4 The reception data length is the number of bytes When data of an odd number OFFH 2559 of bytes is received the last received data is stored in the final storage area s lower position The upper position byte is OOH 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 3 The received data length and received data stored in the fixed buffer is read by the sequence program s FROM command when the reception end signal turns on At the same time the se quence program turns on the reception end check signal Y1 The E71 automatically turns off the reception end signal The sequence program turns off the reception end check signal when the reception end signal turns off Point 1 The reception end signal X2 does not turn on during error data reception In addition the data is not stored in the fixed buffer No 2 2 This shows the processing when the open request signal and initial request signal are turned off during reception when the E71 F
408. tion explanations in Item 10 2 and later 7 i End code The following values are used to show the processing results when a remote node reads writes data in the PLC CPU to a target PLC station OOH Normai end Other than OOH Error end 01H to BOO1H a When exchanging using binary code the end code is shown as a binary value b When exchanging using ASCII code the end code is shown as an ASCII code when expressed as a hexadecimal number c When an error end occurs check the contents and take countermeasures in accordance with Chapter 13 When the end code is 5BH 5B the error code 10H to 21H data imme diately following and 004 00 are included ts Error code This shows the error contents when the end code is 5B 5B when the processing result is an error when a remote node reads writes data in the PLC CPU to the target PLC station Error code 10H to 21H a When exchanging using binary code the fault code is shown as a binary value b When exchanging using ASCII code the fault code is shown as an ASCII code when expressed as a hexadecimal number c Check the contents and conduct countermeasures in accordance with Chapter 13 10 5 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A The data code ASCll binary used for transmission and reception of commands and responses between the E71 and a remote node are set using the data code setting switch SW2 on the front of the E71 Transmit th
409. tion is mixed For the A81CPU c l i 2 o 3 ey 3 SE Q I n 64 Points 00 40 to to 3F 7F ae Special function module No O3H c MELSECNET II and MELSECNET B remote station special function module s module No Tne remote station special function module s module No is set by the contents of the link parameter set in the master station OF9 15E 215 24F 080 0A3 1B6 214 15F 1B5 0 address as seen 00 from the remote station Remote I O station No 1 unit Power supply module AJ72P25 Output module Y iO address from 400 4 the link parameter to i 20 to 2F Output module paints points Y 20 to 41F 42F 10 63 430 44F 030 04F 010 17F 500 65F 000 15F 050 10F 220 28F 000 06F XY Y Y 30 50 70 to to to 4 6F 8F 5 2 _ 3 O g D D 55 sat i Be 2 8 2 1616 32 32 32 XY Y Y 430 450 470 10 to to 44F 46F 48F SPENE Special function module No 44H 10 WHEN CONDUCTING READ WRITE OF DATA IN THE PLC CPU MELSEC A d MELSECNET 10 remote I O station special function module s module No For remote O station special function module s module Nos when the final address of all of the following I O address as seen from the remote O station are 3 digits then only the first two digits are used Set using the I O addresses as seen from the remote I O station regardless of the common parameter contents set in the
410. tion preparation Select file to new file and create a console application from the project work space screen Open the AJSAMP C file and create a program Refer to the example program on the next page Execute compiling for the program created from the build menu compile screen Link the WSOCK LIB from the build menu setting screen Create an execute file AJSAMP EXE at the build menu build screen End Visual C Execute AJSAMP EXE 2 General procedure for socket routine call Start Create socket sons Bind bind Passive open Active open UDP Open listen connect accept Exchange send recv sendto recvfrom Shutdown shutdown Close closesocket Complete APPENDICES FERRERS EES EEE EASA SE SRL SR ROR RE RR ON ON NR I Ie TO TR Pe Ae ee ef EF JEF EF ur Rr fun FF JES EF Rr AJ71E71 S3 sample program This program is a sample program for conducting connection tests between the AJ71E71 S3 and a personal computer This program accesses the data register installed in the AJ71E71 S3 Copyright C All Rights Reserved 1996 Mitsubishi Electric Corporation AJSAMP C ERA XE kky ERS wy D of the PLC CPU kky we i kf xe we LERRREKRKRKKEKEKEKAEKKKEEE KEE EKER EEE EEE REE EEKREKEEEREE RR EEKEKREREREREREREEEEEREKKEEEEE include lt stdio h gt include lt winsock h gt define FLAG_OFF define FLAG _ON define SOCK_OK defi
411. tion regarding the ICMP option support type ICMP protocol Ethernet is the registered trademark of XEROX CO LTD 10BASE2 is the formal way to say Cheapernet There is no registered trademark for Cheapernet 1 3 1 GENERAL DESCRIPTION MELSEC A 1 2 Features E71 is a unit used to connect the A series PLC to the Ethernet By combining a A series PLC in the Ethernet it is possible to construct a network system tnat combines data link syster network with the Ethernet It is possible to conduct fixed buffer communication with a remote node and to read and write data from the random access buffer exchange area from the PLC CPU Fixed buffer exchange using TCP IP or UDP IP random access buffer exchange and reading and writing data inside the PLC CPU genera data exchange from a remote node is possible The main features of the E71 are explained below EN Selecting the exchange format and exchange node units is possible see Chapter 5 for a detailed explanation C Whether to use the TCP IP or the UDP IP communication protocols can be selected for each remote node that exchanges data and the communication line for the target remote node can be set to open communication line connect 2 Eight communication lines can be open at the same time and data can be exchanged with multipie remote nodes 3 The relationship between the E71 data exchange and the selectable exchange formats is shown below Exchange Function TCP IP
412. tly with the partner remote node 21 Checks whether the partner remote node is connected to the same Ethernet as the local station by using the following two formulas Subnet ID check If they are the same then it is determined that it is the same Ethernet and exchange is done directly with the partner remote node If they are different it is judged that it is a remote Ethernet and exchange to the partner node is conducted via a router Formula 1 Partner station IP address and subnet mask file conjunction Formula 2 Local station ID address and subnet mask field conjunction Ejj When it is recognized that the partner remote node is connected to a remote Ethernet exchange with the partner remote node is conducted via a router a When the partner remote node is the same class as the local station Compares the above formula 1 with the valid subnet addresses 1 to 5 in the routing information lf the settings are the same exchange is conducted to the router supporting the router IP address if the settings are different exchange is conducted to the default router b When the partner remote node and the local station are different classes The partner remote node s net address and the valid subnet addresses 1 to 5 in the routing information are compared if they are the same then exchange is conducted to the router that supports the router IP address If they are different then exchange is con ducted to the default router 1
413. to Item 5 4 The sequence program s TO command writes the transmission data length and transmission data in the E71 s fixed buffer The transmission data link is written to the subject fixed buffer s first address 512 The transmission data is written starting from the subject fixed buffer s first address 1 The following figure shows an example of a 200 byte transmission using the fixed buffer No 1 200H 512 Transmission data length storage area 1 201H 513 Writes the transmission data length unit is a byte fs Transmission data 200 bytes Transmission data write area Writes the transmission data in the order from the newest address 264H 612 re ers 1 Sets the number of bytes BODO for the transmission data length When an odd number of bytes is specified the lower position byte data of the area in which the SFFH 1535 transmission data s final data is written is transmitted 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A When the transmission request signal YO is turned ON by the sequence program the data is transmitted as it is to the specified node by the parameter settings from the fixed buffer No 1 The E71 turns the transmission normal end signa XO ON when the data transmission ends The turning ON of the transmission normal end signal causes the sequence program to turn OFF the transmission request signal YQ 00 When the transmission request signal turns OFF the t
414. transmission data data length Refer to Item 3 3 e Check in correction of the set commands and re sponses at the remote node The E71 automatically adds the commands and responses so the user does not need to set these e Refer to the remarks at the end of this page e Check and correct the data length e Check and correct the specified header address e Check and correct the header address and number of data words Refer to Item 3 3 Correct the number of read write points e Check and correct the remote node transmission data e Conduct data write while the SW7 SW3 is on write allowed during RUN However parameters se quence programs and microcomputer programs cannot be written while the CPU is running e Write the data after stopping the PLC CPU e Correct the device setting 13 TROUBLESHOOTING MELSEC A End Code Error Code 57H 58H 601 62H e The number of comrnand points specified by the remote node exceed that of the maximum process ing number of points for each process number of points processed during one exchange e Correct the specified number of points and the e The header address header address No header header address device No step No e There was a monitor request even though monitor e When a microcomputer program was read written step No to the specified number of points exceeds the maximum address for each process device No step No e The comma
415. transmission timer external node application software value at the other node value on the E71 side lf they are not met there will be a great possibility of frequent communication errors Such as transmission timeout In the above relationship the number of retries for transmission from E71 can be increased or decreased by changing the TCP retransmission timer value refer to 1 By performing the following setting number of retries becomes 0 TCP ULP TCP end timer TCP retransmit time out value value timer value Point 1 It is recommended that the default values are used for each timer value Before changing them consult with the managers of the partner equioment and systems then increase decrease each set value according to the above equation 2 Refer to the Point in Item 3 7 2 for information regarding the parameters necessary for settings during E71 initialization processing when the E71 functions are used 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 3 2 Initial Processing and End Processing Procedures This section explains about the E7 1 s initial processing and end processing procedures E71 power supply 2 E ON X19 Writing from TO commands etc j n e a e A l l gt m n annee nmnm yat _ ee Be ee ee ewe ew e eee ew mm ee T T Y Initial processing parameters initial processing End processing
416. tured by TDK can be used For 1OBASES5 connection AUI cable Coaxial cable Ferrite core gt re Tor A OBASES Transciver MEMO 3 SPECIFICATIONS MELSEC A 3 SPECIFICATIONS This section explains the E71 general specifications performance specifications and transmission specifications 3 1 General Specifications This section explains the E71 general specifications Table 3 1 General Specifications ltem Specification Ambient operating Ambient storage E temperature EN P 10 to 90 RH Non condensing humidity Ambient storage j 10 to 90 RH Non condensing Frequency Acceleration _ Amplitude Under 0 075mm Conforming to intermittent ee 0 003inch 10 times each Vibration resistance JIS B3501 vibration 57 to 150Hz 9 8m s NnXYZ IEC 1131 2 Under 0 035mm directions 10 035 continuous Sen 0 001 inch for 80 min vibration 570160 ame OO oo Conforming to JIS B3501 IEC 1131 2 147m s 3 times in each of 3 directions X Y Z 2000m 6562 feet max Control panel Over voltage category max Pollution level 2 max Shock resistance 1 This indicates the section of the power supply to which the equipment is assumed to be connected between the public electrical power distribution network and the machinery within the premises Category Il applies to equipment for which electrical power is supplied from fixed facilities The surge voltage withstand leve
417. ty Term The gratis warranty term of the product shall be for one year after the date of purchase or delivery to a designated place Note that after manufacture and shipment from Mitsubishi the maximum distribution period shail be six 6 months and the longest gratis warranty term after manufacturing shall be eighteen 18 months The gratis warranty term of repair parts shall not exceed the gratis warranty term before repairs Gratis Warranty Range 1 The range shall be limited to normal use within the usage state usage methods and usage environment etc which follow the conditions and precautions etc given in the instruction manual user s manual and caution labels on the product 2 Even within the gratis warranty term repairs shali be charged for in the following cases 1 Failure occurring from inappropriate storage or handling carelessness or negligence by the user Failure caused by the user s hardware or software design 2 Failure caused by unapproved modifications etc to the product by the user 3 When the Mitsubishi product is assembled into a user s device Failure that could have been avoided if functions or structures judged as necessary in the legal safety measures the user s device is subject to or as necessary by industry standards had been provided 4 Failure that could have been avoided if consumable parts battery backlight fuse etc designated in the instruction manual had been correctly serviced or repl
418. ues for the sequence program contents machine language timer T and counter C a When exchanging using binary code Specified number of points x 2 8 words Response format 2 bytes For sequence program Final steo No data for the specified step NG Final device No set value far the specified device No gt fe aay ee End code Subheader Main program 8CH Subprogram 8D Data to the specified head steo No 1 For T C For T C set value value Specified head device No 1 set value F or sequence program Sata to the oT head step No For T C set value Specified head device No set value For sequence prograrn Number of steps 1 to 256 steps F For T C set value Number of de device points 1 to 236 points For sequence program Head step No For T C set value Head device No for details refer to item i ACPU monitor timer unit ah ms FPLC No Subdneader Main program 0C Subprogram ODH Set 00 gt when specifying the number of steps and number of device points as 256 points Exarnple 1 When writing the main sequence program steps 120 to 123 for the PLC CPU installed in the E71 Command remote node E71 ban aaaea aa anaia eel Np aa aA l Local 2500ms 4 steps Station 04H i Write data to step 123 70A8 Head step No Write data to step 122 2A05
419. uffer by the PLC Access is possible with Y1C OFF Access is possible with Y1C ON CPU Channel O specified Channe 1 specified E00 to 11FFH 3584 to 4607 1200 to 1DFFH 4608 to 7679 3 SPECIFICATIONS MELSEC A Address Oto 1H Oto 1 2H 2 Special function settings 1 word 3H 3 Timer setting time units 1 word 4to 6H 4to 6 System area Use prohibited Bors o o 7H 7 Destination existence check start interval timer value 1 word 8H 8 Destination existence check interval timer value 1 word 9H 9 Number of retransmit tries for destination existence check 1 word AH 10 BH 11 TCP zero window timer value 1 word 5H 5 CH 12 SH _5 DH 13 AH 10 EH 14 IP setup timer value 1 word FH 15 Response monitoring timer value 1 word 10H 16 MH 17 OH _ 0 12H 18 1SH 19 Usage available settings area 14H 20 1 word each SH 21 16H 22 17H 23 18H 24 ny a Remote node IP address OH 0 1BH 27 Exchange address settings area OH 0 1CH 28 Remote node D For Connection No 1 7 words 1DH 29 Ethernet to FFFFFFFFFFFFH 1EH 30 Address H ne For connection No 2 7 words eee For connection No 3 7 words 2D to 33H 45 to 51 Exchange address settings area For connections No 4 7 words For connections No 5 7 words For connections No 6 7 words amie Daingean For connections No 7 7 words 49H 73 oe Remote nod
420. unction for Data Exchange during the PLC CPU is Stopped Item 5 6 is not used If the open request signal Y9 turns off during reception the E71 immediately conducts close processing 2 If the initial request signal 19 turns off during reception the E71 immediately conducts close processing and end processing For more details on cases when the reception of Close Abort RST has occurred from the partner remote node prior to the completion of the data communication performed immediately before refer to Remarks in of Item 5 4 3 7 FIXED BUFFER EXCHANGE WITHOUT PROCEDURE MELSEC A 7 2 Data Format Following shows the exchange data commana data item order and contents for when fixed buffer exchange is performed without procedure between the E71 and a remote node As shown below the exchange data consists of a header and application data 7 2 1 Format during Exchange Following shows the command data item order when fixed buffer communication without procedure is conducted EN Transmission reception data order when exchanging with TCP IP 7 il el 14 bytes 20 bytes 20 bytes Maximum 2046 bytes 2 1 Transmission reception order when exchanging with UDP IP e Sil bel 14 bytes 20 bytes 8 bytes Maximum 2046 bytes 7 2 2 Exchange Data Item Contents Following shows the command data item contents when conducting fixed buffer exchange without procedures a Header The header is the he
421. value Default value 3H 3 setting time setting value x Unit Address EH 14 a Exchange data is sometimes divided and transmitted by IP level due to the transmitting Station s or the receiving station s buffer limitations This sets the time to wait until the following divided data is restored reassembled when the E71 receives the divided data b The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 73 12 J Response monitor timer value Default value FH 15 setting time setting value x Unit nesesssssossossressevennnennrareeenneseorrne Address FH 15 a Sets to the following time The wait time from when a command is transmitted until a response is received 2 When a divided message is transmitted the time from the first message transmission until the final message is received 0 The setting value is set to 1H to 1FFFH 1H to 7FFFH by the timer setting time s unit setting 3 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES MELSEC A 1 When exchange errors occur due to noise change the setting value to a higher number of retries The retry number is determined using the following formula For the default value 2 15 5 1 Number of retries TCP ULP time out value TCP retry timer value 1 Example When data cannot be transmitted when the setting value makes the number of retries 2 the transmission error detection signal will turn o
422. when exchanging the application data portion of exchange data using ASCII code data is shown be low a Transmission reception data order when exchanging using TCP IP G Order when transmitting receiving commands Header Application data TCP Subheader Data lengtn setting Text command 6 ash Q GSi H L 36H 30H 30H 30H 14 bytes 20 bytes 20 bytes 4 bytes 4 bytes Maximum 1016 words Ethernet Order when transmitting receiving responses Header Application data Ethernet iP TCP Subheader End code l O H L 454 30H 14 bytes 20 bytes 20 bytes 2 bytes 2 bytes 2 i Transmission reception data order when exchanging using UDP IP Order when transmitiing receiving commands Header Application data Ethernet Subheader Data length setting Text command 14 bytes 20 bytes 8 bytes 4 bytes 4 bytes Maximum 1016 words Order when transmitting receiving responses Applicaton data tf ES M E 0 H L 14 bytes 20 bytes 8 bytes 2 bytes 2 bytes 45H 30H 6 FIXED BUFFER EXCHANGE WITH PROCEDURE MELSEC A 6 2 3 Exchange Data item Contents The command and response data item contents when fixed buffer exchange with procedure is con ducted is shown below Header Tne header is the header that is used for TCP IP and UDP IP For the E71 since the E71 can be added or removed the user does not need to make the setting 2
423. write request was made to the A1 N CPU e The Ai N CPU cannot use extension file registers Exchange cannot be done between the PLC CPU and the E71 The PLC CPU cannot process requests from remote nodes e Prepare the error location by adding an error code Refer to Item 13 1 2 after the end code The exchange time between the E71 and the PLC CPU exceeds the ACPU monitoring timer value e Lengthen the ACPU monitoring timer value Returns other than 00 normai end to the re e Read and process the response end code Buffer sponse end code from a remote node for fixed buffer memory address 95 105 from the remote node transmission for the fixed buffer transmission 13 3 13 TROUBLESHOOTING End Code Error Code A recurring signal for the response does not arrive 70H within the response monitor timer value e All the data cannot be received by the allocation re ception e The amount of data set in the data length cannot be received within the response monitor timer value e The actual amount of data is smaller than the value set in the date length e The remainder of the text allocated by the TCP UDP level was not received within the response monitor timer value 71H The corresponding connection open processing is not 80H completed An Ethernet address that does not exist is specified Only when the UDP I P was used as a communica tion method B14 101 There is an error with the E71 po
424. xchange is possible by diverting as is the program for the E71 from the remote node When using E71 exchange functions other than those above create a new exchange program Exchange Functions APPENDICES MELSEC A 3 The E71 IP address class must be changed to class A through class C Set the IP address to be set in the E71 and conduct open processing data exchange Appendix 1 2 2 Sequence Program Utilization The following expiains the PLC CPU data exchange program compatibility when substituting the E71 for the AJU71E71 1 Itis possible to conduct data exchange to a remote node from the E71 by utilizing the fixed buffer exchange with procedure function portion of the program for the remote node However the response performance between the AJ71E71 and E71 differs somewhat so there are times the data exchange cannot be utilized as is It is necessary to adjust the response timeout time between the E71 and the remote node Be sure to check the operation when utilizing the AJ71E71 se quence program 2 The functions for which exchange is possible when utilizing the program are as shown below The remote nodes shown in the table are remote nodes with which data exchange is being conducted with the AJ71E7 1 Exchange Partner Remote Node to E71 E71 to Remote Node E71 to AJ71E71 to AJ71E71 E71 Utilization program Fixed buffer exchange With procedure Random access buffer exc
425. xecution environment The execution environment for the PLC CPU side setting value and switch setting etc is the same as the execution environment shown in Appendix 7 1 tem 1a In addition the port No 2001H 8193 is used Freely set the IP Address on the remote node side Use the same No for the port No as for the PLC CPU side 2 Sample program overview Conducts initial processing 2 Conducts open processing Exchange while the PLC CPU is stopped is made possible Two open processes are conducted to make possible exchange transmission reception using a fixed buffer In either case an Unpassive open is conducted and an Active open request from a remote node is awaited Exchange transmission with procedure using a fixed buffer exchange using a random access buffer and read write data in the PLC CPU are conducted from the remote node in addition when not exchanging with the remote node exchange transmission with procedure using a fixed buffer is conducted from the PLC CPU 4 After data exchange is terminated exchange will be prohibited while the PLC CPU is stopped and close processing will be conducted Termination processing is conducted after close processing is completed Connection Connection2 Remark Class C Net ID 1 E71 IP Address C0 00 01 FD Host ID FDH Set the personal computer side to a free No Personal computer side is also TCPAP Personal computer side is Ac tive open
426. you for purchasing the Mitsubishi programmable controller MELSEC A Series Before using your MELSEC A Series please read this manual thoroughly to gain an understanding of the functions and performances of the A Series PLC so that the equipment is used to its optimum OUTLINE OF CONTENTS COMMON SECTION Ts GENERAL DESCRIPTION paranna aE A EAT atte es 1 ito 1 12 2 gt SYSTEM CONFIGURATIONS srm ine E A E 2 1to 2 7 g SPECIFICATIONS miernie A O 3 1to 3 27 A SETHNGS AND PROCEDURES UP TO OPERATION csaiencitinetticsniciniewinpeisocaseeniaes 4 1to 4 15 5 PROCEDURES FOR EXCHANGING WITH REMOTE NODES uo icccseeeeeerreeeererre rere 5 1to 5 47 FIXED BUFFER EXCHANGE SECTION 6 FIXED BUFFER EXCHANGE WITH PROGEDURE saciid cain aipa oE E A a 6 1to 6 15 Te FIXED BUFFER EXCHANGE WITHOUT PROCEDURE saissiiccnisetanivisavscurmmocericeuepeemeeaeies 7 ito 7 47 RANDOM ACCESS BUFFER EXCHANGE SECTION 8 RANDOM ACCESS BUFFER EXCHANGE sctissiuventewincranwngay A AET 8 1to 8 17 READING WRITING DATA IN THE PLC CPU SECTION 9 READING WRITING DATA IN THE PLC CPU EXCHANGE sierereererrrsrrerirerrsrrrerneeree 9 1to 9 18 10 WHEN CONDUCTION READ WRITE OF DATA IN THE PLO CRU 0 eeecsesnstsonsatertsererteceeens 10 1 to 10 109 SPECIAL FUNCTIONS SECTION is WWHERCSETTING A SUBNET IVASIS orrori atetetiest aan E ee nein 11 ito 11 5 t2 WHEN USING ROUTER RELAY FUNCTIONS cocraronieni a a 12 1to 12 4 TROUBLESHOOTING SECTION To TROUBLESHO

b5-s3,user manual

Contents

Download Pdf Manuals

Related Search

Related Contents