Home
User`s Manual Template - Triangle Research International
Contents
1. Write Timer COmtacts 16 24 16 1 Write Counter Contacts 16 25 Write Timer Present Value P V cccccssseceeessseceenseseeeenseeeeeenseseeeseseseeeseseeenenenseeeenens 16 11 16 26 NEEN 16 1 Write Timer Set Valeur N hanert 16 27 Write Counter Present Value P V ccccesssseceeeseseceenseeeeeenseseeeenseseenseseeeensenseeeenes 16 12 16 28 16 2 Write Counter Set Value S V 16 29 16 2 Write Variable Integers A tO Z 16 30 16 13 Write Variable Strings A to Z 16 31 16 3 2 Write Variable Float
2. Setting the RTC Using TBASIC 12 5 12 3 5 Setting the RTC from Internet Time 12 6 annann na 12 3 Setting up an Alarm Event in TBASIC 12 7 RTC 921181211011 BE 12 3 12 8 12 4 Troubleshooting the RUG 12 9 LCD DISPLAY PROGRAMMING 13 1 13 13 1 enue ce SETLCOD Command enee 13 1 13 1 Special Commands For LCD Display 13 2 13 1 Displaying Numeric Variable With Multiple Digits 13 3 13 2 Displaying 13 4 SERIAL COMMUNICATIONS 14 1 14 14 1 2 2 2 2
3. 0 23182061818 Using Potentiometer to Set 5 2 3 Reading Analog Input Data 5 4 5 2 4 EEn EESE Ennn nnan 5 5 Moving Average 5 2 5 Scaling Ee gu ee HR E KEE 5 5 526 5 6 Temperature Measurement Using Analog INPUtS 5 3 Thermistor Temperature Gensors 5 6 5 3 1 5 7 00 600 5810561 Using LM34 Semiconductor 5 3 2 EE 5 8 1116190666 D 3 3 gt Using 5 8 Using 21100 Temperature Sensor 5 3 4 5 9 2 21212 2 2 2 2 2 2 2 12 1 12121 1 1 1 1 Analog 5 4 5 0 00 The Benefits of Current Source Analog 5 4 1 5 11 006006606060606 Programming The Analog Output 5 4 2 5 12 Calibration of ADC and DAC amp Moving Average Definition 5 5 ADG Cali EE 5 2 551 5 13
4. Read Variable Integers A tO Zi 16 12 16 6 Read Variable Strings A to Z8i 16 13 5 Ga t TRIANGLE m URA RESEARCH Page viii INTERNATIONAL USER MANUAL 16 6 2 Read Variable Floating Point A to 16 14 16 7 Read Variable Single Data Memory DM 1 to DM 4000 16 15 Read Variable Multiple Data Memory DM 1 to DM 4000 ssseeeeseeseeees 16 7 16 16 16 8 Read Variable Single Floating Point Array FP 1 to FP 1000 0 es 16 17 16 8 Read Variable Multiple Floating Point Data FP 1 to FP 1000 16 18 16 8 Read Variable System Variables 16 19 Read Variable High Speed Counter HSCPV J c s ecccseeesseeeesseeenseeeeeseeseseeeeseeeenseaess 16 9 16 20 Write Ile 16 10 16 21 Write Outpt sei 10101010101011 16 10 16 22 Write RELAYS ii sines 100010101010100 16 10 16 23 16 0
5. Read Digital Output Channels 16 4 16 3 Read Internal Relay Channels 16 5 16 3 Definition of Internal Relay Channel Numbers 16 5 1 16 6 Read Timer COmtacts esiisa eanna anaana AAAA EREET S AAE AEEA AARAA EARRAN 16 3 16 6 1 Definition of Timer Contact Channel Numbers 16 4 16 4 ease Read Counter Contacts 16 7 Definition of Counter Contact Channel Number 16 4 16 7 1 16 8 Read Timer Present Value P V ccseececssceecesesecceeesesceeeesesceeseseseeeseseeeceeseseeceeensseeenes 16 4 16 5 Read Timer Set Value GM 16 9 NN 16 5 Read Counter Present Value DN 16 10 16 5 Read Counter Set Value S V 16 11 16 6
6. Multiple Communication Protocols 15 1 15 1 220106015 Native Mode Communication 15 2 15 1 Point To Point Communication Format 15 3 Command Response Frame Format Point to Point 15 2 15 3 1 Error Response Format einir des denned assailed dened 15 2 15 3 2 15 3 MULTI POINT COMMUNICATION 15 4 15 3 0 2 0 0 Command Response Frame Format Multi point 15 4 1 15 4 Calculation Of FCS 15 4 2 15 4 Communication Procedure 15 4 3 Framing Gate CT 15 5 15 4 4 15 5 Command EMOS cskern ep eene ERNE ENP 15 4 5 SHOULD YOU USE POINT TO POINT OR MULTI POINT PROTOCOUH 15 5 15 4 6 15 5 1585488 d EE 15 6 15 5 1 RS485 Network Interface Hardware 15 6 15 5 2 Protection of RS485 Interface 15 6 15 5 3 Single
7. 01156 OC eren 552 NR ee ET 5 3 55 3 5 14 DAG Zero Offset trenan en aeae a 55 4 AD Moving AVG oie E S a E S 5 14 590 5 Ca TRIANGLE Lied RESEARCH Page v INTERNATIONAL USER MANUAL SPECIAL DIGITAL 5 6 1 6 HIGH SPEED COUNTERS 7 1 7 Introductton 0000 7 1 7 1 72 0 Enhanced Quadrature 7 2 72 Interfacing to 5V type Quadrature Encoder 7 3 FREQUENCY SPEED MEASUREMENT 8 1 8 8 1 Programming Of PM Input 8 1 8 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 1212 212 2 2 121 2 2 12121212 2 12 12 1212 2 2 2 2 2 2 2 2 2 1212 1 2 1212 2 1 1 1 1 ADDI CAt ONS aise 8 2 Measuring RPM Of A Motor 8 2 8 2 1 8 2 6006600660066 0 Measuring Transducer with VCO Outputs 8 2 2 8 2
8. Setting Up A FTP Server Behind a Windows Firewall 18 7 18 15 Uploading File From PLC to FileZilla FTP Server Director 18 8 Overview of The FTP Protoco ennnen 18 15 18 8 1 PLC FTP Upload Procedure ssessseeeesseeeseeeseessressrressnsstnrstntstnnssnnstnnstnnsnnntnnnnnnnnnnnna 18 16 18 8 2 18 6 Monitoring The FTP Upload Progress 18 8 3 18 8 Setting Up A FTP Server Behind a Windows Firewall 18 9 USING PLC AS A MODBUS TCP GATEWAY 19 1 19 PQ lee D Vu EE 19 1 19 1 Application Ideas for Modbus TCP Gateway 19 2 19 1 Configuring The PLC As Modbus TCP Gateway 19 3 Ca TRIANGLE URA RESEARCH Page x INTERNATIONAL USER MANUAL 19 2 Fine Tuning The Modbus TCP Gateway Function 19 4 19 3
9. EZWire1616 PLC PWM Outputs 11 2 11 2 Increasing Output Drive Current Opto lSolated 11 3 5 Ca TRIANGLE URA RESEARCH Page vi INTERNATIONAL USER MANUAL 11 3 Position Control Of RC Servo Motor 11 4 Using EZWire1616 PWM Output To Control RC Servo Non lsolated 01000e00e 11 4 11 4 1 Using EZWire1616 PWM Output To Control RC Servo Opto lsolated 00100000 11 5 11 4 2 11 5 8 RC Servo Positioning 11 4 3 REAL TIME CLOCK 12 1 12 12 1 000 12 1 12 1 15685 0 variables Used for Real Time ClOCK 12 2 12 1 RTC Error Status On Ladder Loge 12 3 12 2 Setting the RTC Using TRILOGI Gottware 12 4 12 2
10. 00660060 0 60 Advance Sequencer AVSEQ 4 4 2 4 6 00066006600 0 5556 Resetting Sequencer 4 4 3 4 6 Setting Sequencer to Step N StepN 4 4 4 4 6 000 Reversing a SEQUENCE 4 4 5 eege deed aai aoaia uncupeleedsateevieceesunepeevebaateads 4 6 4 64 Program 4 4 6 4 7 Programming Sequencers in Custom Function 45 ANALOG INPUTS AND OUTPUTS 5 1 5 5 1 _ __ Analog Power Gupply 5 1 5 2 0800006595 10100000 1 1 52 AMD HV te EE 5 2 52 1 5 3 00 6006 0 6066 56175015 Interfacing to two wire 4 20MA 5 2 2 5 4
11. Write EEPROM Integer Data 16 45 16 8 WRITE EEPROM String Data iain 16 46 16 9 Force Set Clear Single UO 16 47 16 9 Using OMRON Host Link Commandes 16 48 16 0 8560151818 Read IR 16 48 1 16 0 0 516815 8 WRITE IR 16 48 2 TR RESEARCH Page ix INTERNATIONAL USER MANUAL 16 21 Read Data Memory DM 1 to DM 4000 eres etree eee 16 48 3 16 1 WRITE Data Memory DM 1 to DM 4000 0 cece 16 48 4 16 2 Testing of Host Link Commande 16 49 16 3 12 121212414121241 1 1 1 Visual Basic Sample Program
12. Modbus TCP Gateway Sample Program 19 5 c TRIANGLE i RESEARCH Page xl INTERNATIONAL Lied Chapter 1 Installation Guide Chapter1 Installation Guide For EZWire1616 PLC 2 TRIANGLE Ir RESEARCH Chapter 1 Installation Guide 1 INSTALLATION GUIDE FOR EZWIRE1616 PLC Digital Outputs Analog Inputs Analog Outputs 1 16 24VDC NPN Ch 5 8 0 5V Ch 3 4 4 20mA eer ec We cre RS232 COM1 DB9 Female Ethernet 10 100Mbps gt Kerger E 3 Level UO Terminals Power Supply Quick Connect Spring Cage 12 24V DC Bottom Level 0V GEES ate 2 Middle Level 5 24V Top Level Signal RS232 COMM2 089 Male gt Battery Backup for RTC gemeet Expansion Port Digital Inputs Analog Inputs Analog Outputs Digital 1 0 1 16 24VDC NPN Ch 1 4 0 5V Ch 1 2 4 20mA Figure 1 1 1 1 Overview The EZWire1616 PLC is a new generation of PLC based on the F series PLC and designed to easily wire into a control panel or machine It features high end 3 level quick connect spring cage I O terminals from Phoenix Contact Each UO point has a rail voltage 5V DC for Analog Input and 24V DC for Digital UO and Analog Output on the middle level a common OV voltage on the bottom level and a signal terminal on the top level EZWire1616 uses the same SmartTILE Fx CPU board as the Fx PLCs hence it supports all the floating point TBASIC commands available in I TRiLOGI version 7
13. Chapter 15 Host Link Communication Protocol withstand wrong voltages of up to 60V The LT1785AIN8 is a 1 4 power RS485 driver which means up to 128 PLCs can be connected together Unfortunately this IC is much more expensive than 75HVD3082 and hence it is not provided as standard component on the PLC You can purchase the IC from any major electronic catalog company such as www digikey com 2 When using non fault tolerant RS485 drivers such as SN75176 or SN75HVD3082 we strongly recommend the following protection circuit to be added between every PLC s RS485 and the twisted pair multi drop network cable RS485 Network 10 1 2 0 1A Fuses Ground the Shield Figure 15 3 Note As can be seen from the circuit the two 9V Zener diodes clamp the signal voltage on the PLC s RS485 interface to between 9V and 0 7V If the high voltage persists the 0 1A fuse will blow effectively disconnecting the PLC from the offending voltage on the network Even if you choose to replace the RS485 driver by an LT1785AIN8 IC instead of using the zener fuse pair wiring you should still use shielded twisted pair cables as the multi drop network backbone and connect the shield to the OV DC ground power terminal of every PLC The grounded shield then provides a common ground reference for all the different PLCs power supplies Even though the RS485 network may still work without a common ground reference becaus
14. Ti aes 8 3 INTERNATIONAL Chapter 9 Interrupts Chapter 9 Interrupts Tr v TRIANGLE 17 RESEARCH INTERNATIONAL Chapter 9 Interrupts 9 INTERRUPTS 9 1 Input Interrupts During normal PLC ladder program execution the CPU scans the entire ladder program starting from the first element progressively solving the logic equation at each circuit until it reaches the last element After which it will update the physical Inputs and Outputs I O at the end of the scan Hence the location of a logic element within the ladder diagram is important because of this sequential nature of the program execution When scanning the ladder program the CPU uses some internal memory variables to represent the logic states of the inputs obtained during the last I O refresh cycle Likewise any changes to the logic state of the outputs are temporarily stored in the output memory variable not the actual output pin and will only be updated to the physical output during the next I O refresh You can see that the CPU will only notice any change to the input logic state when it has completed the current scan and starts to refresh its input variables The input logic state must also persist for at least one scan time to be recognized by the CPU In some situations this may not be desirable because any response to the event will take at least one scan time or more An interrupt input on the other hand may occur randomly and the CPU will have
15. 0 Measuring Transducer with PWM Outputs 0 0 000 8 2 3 8 3 Frequency Measurement on High Speed Counter INPut 8 3 INTERRUPTS 9 1 9 9 1 00000 1 1 9 1 E 9 2 _ _ Periodic Timer Interrupt PTI 9 2 Power Failure Interrupt PRN eege adden 9 2 9 3 STEPPER MOTOR CONTROL 10 1 10 Nun 10 1 Technical Specifications 10 1 10 1 Stepper Motor Driver 10 2 Stepper Motor Wiring Types ccccccceeeeeeseeceeeeeecaeeeeaaeceeeeeceaeeesaaeeseaaeseeeeeseeeeseeeeenees 10 1 10 2 1 Damping Circuits Inductive Bypass cccceeesceeeeeeeceneeeeeseeceeeeseaeeeeaeeseeeeseaeeeeeaeeeeaes 10 2 10 2 2 10 3 Stepper Motor Controller 10 3 Interfacing to 5V Stepper Motor Driver INputs ccceceeeeeseeeeeeeeeseeeeeseeeeeeaeeeeeeeeee
16. Input o NPN sensor OV OV Input logic l when objectissensed Input logic 1 when Limit Switch is closed Input Voltage for Logic 0 Open Circuit or 10V to 24VDC Input Voltage for Logic 1 OV to 2 5V DC Figure 1 8 Interfacing to Limit Switch and NPN Sensor 1 5 Digital Output Circuits 1 5 1 Electrical Specifications Output 1 to 16 N Channel power MOSFET with low tp 0 05 Q V Output Driver type Maximum Breakdown Voltage Maximum Output Current on Z Continuous Output Current Output Voltage when OFF Resistor pulled up to 24V power rail Output Voltage when ON 0 1V 1A Inductive Back EMF Bypass Yes for every output Flyback Diode 30A peak inductive pulse current All outputs have red color LED indicators The EZWire1616 PLC employs sinking NPN type power transistors or MOSFET outputs that turn ON by sinking current from the load to the OV terminal All 16 outputs are grouped together into a single row of screwless spring cage terminals Figure 1 6 shows the wiring diagram of the digital outputs 6 TRIANGLE 5 TRY RESEARCH 1 9 INTERNATIONAL Chapter 1 Installation Guide Note Output 1 to 16 can each sink up to 4A peak or 1A continuous current 24VDC Every output point has a built in flyback diode to protect against up to 30A of peak inductive pulse current This is for protection only DO NOT attempt to sink more current than is spec
17. 16 50 16 3 Inter DLC Networking Using NETCMD Command 16 51 16 4 Inter PLC Networking Using MODBUS Protocols 16 52 LIGHT DIMMER CONTROL 17 2 17 introductio 0cce 000 17 2 17 1 17 3 Control of 120V 240V AC TRIAC 17 2 17 4 Zero crossing Detection 17 3 17 4 Programming Light Dimmer Control 17 4 17 4 Enable Zero Crossing Interrupt 17 4 1 Programming Individual Dimmer Channel 17 4 17 4 2 Programming Example ccccccccsssececessneceeeesneeeeeseaeeececeaeeeeseaeeeeecaeeeesesaeeessesieeeeeesaaes 17 5 17 4 3 EXTENDED FILE SYSTEM 18 2 18 AGA Tee D Vu EE 18 2 18 3 600 600 6666 060006600060606 630 Advantage of Using Da
18. 750 mV AT 75 F 500 mV AT 50 F R LM34 Vom 10 0 mV F i Vs bg Full Range Fahrenheit Temperature Sensor Figure 5 7 The LM34 is a wonderful low cost semiconductor temperature sensor with a range of 50 F to 300 F It is extremely easy to use for measuring temperature above 0 F You simply connect one pin to the Ca TRIANGLE 0 URA RESEARCH 5 7 INTERNATIONAL Chapter 5 Analog I Os positive voltage 5 to 30V and the other pin to OV and the signal pin will output a voltage that is directly proportional to the ambient temperature in F The output voltage is 10mV per degree F So at room temperature of 72 degrees F the device will output a voltage of 72 x 0 01 0 72V If you connect this to the PLC s analog input you can obtain the temperature in degree F or degree C using the formula F ADC 1 500 4096 in degree F OR C 09 in degree C Although another part number LM35 can output temperature in 10mV per degree C the output falls into even lower ADC range for ambient temperature measurement since the same 72 degree F is only 22 degree C which means LM35 only outputs 22 x 0 01 0 22V Hence for better accuracy and resolution we recommend using LM34 instead of LM35 and if need be then convert it to degree C using TBASIC Another advantage for using LM34 instead of LM35 is that you can measure down to 0 F 17 degree C without using a negative voltage source as show
19. Computer POWERPNT EXE GE Connect To calc exe Control Panel hotopnt exe 5 P P Default Programs filezilla exe Help and Support ei WindowsPhotoGallery exe Windows Security el notepad exe 2 Open Network and Sharing Center In the Network window click on the Network and Sharing Center option on the top pane as in the below picture JIG gt Network gt X 5 File Edit View Tools Help 9 Jus Wer tenner pease Aeren 5 By Organize m Views v SG Network and sharing Center s Add a printer a OH e TRIANGLE 8 Toi RESEARCH 2 3 INTERNATIONAL Chapter 2 Ethernet Port 3 Manage Network Connections In the Network and Sharing Center window click on the Manage network connections option under the tasks pane on the left side of the window as in the below picture Oe SS gt Control Panel Network and Sharing Center File Edit View Tools Help coe Network and Sharir View computers and devices Connect to a network Set up a connection or network L SES Manage network connections TRI RICHM 4 Follow steps 2 5 in the Windows XP Ethernet Configuration section above to complete the setup as it is the same process Windows 8 Ethernet Configuration 1 Open the Network Window The first thing you will need to do is open the Control Panel from the Start menu by right clicking in the bottom left corner of the
20. Figure 2 2 1 When the Login To TLServer screen pops up enter the IP address port the username and the password that you have defined for the FServer earlier using the configuration software and click on the Detect ID button to detect the PLC s ID If TRILOGI is able to connect to the EZWire1616 via the Ethernet network then the PLC s ID will appear in the ID box When you click the OK button the on line monitoring screen should appear and you should see the Activities LED on the RJ45 connector blinking away You have now successfully connected to the FServer and you can run all the commands under the Controller menu including transferring your new program to the PLC or setting the PLC s Real Time Clock etc For more details on using these commands please refer to i TRILOGI Programmer s Reference Likewise to transfer your new program to the PLC you can click on the Controller menu and select Program Transfer to PLC or press the lt Ctrl T gt keys If TRILOGI is already connected to the FServer the program transfer will begin immediately after you ve confirmed your action Otherwise the same Login to TLServer screen as shown on Figure 2 2 1 will appear for you to complete the login sequence Note 1 Unlike the TLServer which allows unlimited connection time the FServer on the PLC will disconnect the client if there is no activity for more than 10 minutes The current v
21. 16 47 Force Set Clear Single UO Bit This new Wbnnnnxx command allows you to change a single I O bit on the PLC You can force set or clear any single input output relay timer or counter bit This has an advantage over other write commands such as WI WO etc that affects the entire group of 8 or 16 bits organized into channels Command Format w jebfjnj njnjn x x o UO Bit address 00 Clear I O bit OFF Hex FF SET I O bit ON Response Format WII IO IO Type Bit address nnnn Hex Input 1 to 256 0000 to OOFF Output 1 to 256 0100 to 01FF Timer 1 to 256 0200 to 02FF Counter 1 to 256 0300 to O3FF Relay 1 to 256 0400 to 04FF Relay 257 to 512 0500 to O5FF E g To force output 1 to ON send wb0100FF To turn it OFF send wb010000 16 48 Using OMRON Host Link Commands Since the PLCs also support OMRON C20H Host Link commands which are very similar in construct to our multi point command response format you can also make use of OMRON commands to supplement the native host link commands We will only discuss four of the OMRON host link commands RR WR RD and WD in this section because these commands can be used by users to read write to multiple I O registers and data memory in a single command Note maximum length of command string should be lt 80 characters Ti aes 16 19 INTERNATIONAL Chapter 1
22. A D 1 8 10K Thermistor Internal Connecting 10K Thermistor to ADC 1 5 Figure 5 6 Note that since the thermistor resistance value vs temperature change is a non linear function you cannot simply use a formula to calculate the temperature from the voltage value For better accuracy you need to use a look up table plus a linear interpolation technique to determine the temperature based on the ADC readings The look up table and interpolation method can be implemented using TBASIC quite easily For your convenience we have provided a sample TBASIC program that you can download from the following web page http www tri plc com appnotes F series ThermistorSensorFPLC zip This example uses the R T Resistance Temperature graph of the Precon Type Ill thermistor to implement the temperature look up We have provided an Excel file that computes the ADC reading vs ambient temperature for this thermistor type The TBASIC program uses these ADC readings to determine the temperature The sample program is structured such that the lookup table values are stored in the FRAM and you can readily adapt it to other types of thermistors with a different R T graph The program only implements lookup for a temperature range of 10 F to 100 F but you can also easily change the temperature range of interest 5 3 2 Using LM34 Semiconductor Sensor Vs Vs 5V to 30V CHOOSE Ry Vs 50 A LM34 Vout Vout 3 000 mV AT 300 F
23. Moving Backwards STEPMOVE 11 300 101 channel 1 would send 300 pulses to a motor and then turn on relay 101 STEPMOVE 12 1000 102 channel 2 would send 1000 pulses to a motor and then turn on relay 102 STEPMOVE 13 7500 103 channel 3 would send 7500 pulses to a motor and then turn on relay 103 10 4 5 3 Example PLC as a Half Step Motor Driver Moving Forwards STEPMOVE 21 8000 101 channel 1 to send 8000 forward pulses to motor and turn on relay 101 STEPMOVE 22 50 102 channel 2 to send 50 forward pulses to a motor and turn on relay 102 STEPMOVE 23 900 103 channel 3 to send 900 forward pulses to motor and turn on relay 103 Moving Backwards STEPMOVE 21 300 101 channel 1 to send 300 backward pulses to motor and turn on relay 101 STEPMOVE 22 1000 102 channel 2 to send 1000 backward pulses to motor and turn on relay 102 STEPMOVE 23 7500 103 channel 3 to send 7500 backward pulses to motor and turn on relay 103 10 4 6 Using the STEPMOVEABS Command This command allows you to move the stepper motor ch to an absolute position indicated by the position parameter At the end of the move the relay r will be turned ON Position can be between 27 to 2 i e about 2 x 10 The absolute position is calculated with respect to the last move from the HOME position The HOME position is set when the STEPHOME command is executed The speed and acceleration profile are determined by the STEPSPEED command as in the origi
24. TABLE OF CONTENTS Page INSTALLATION GUIDE FOR EZWIRE1616 PLC 1 1 1 1 21212 2 2 12 1 2 2 1 1 12 1 1 1 OV OVO WW oi 1 1 1 3 Physical Mounting amp Wiring 12 1 3 Wiring Procedure 1 2 1 1 6 Analog W O Ports 1 2 2 Digitall O eu EE 1 7 123 EENEG 1 7 121212 2121212 2 2 2 1 212 1 21 1 2 1 2 1 1 1 3 dee deeg 1 8 Doig 1 4 Digital Output ei lte TEE 1 9 1 5 ee e 1 9 6 5 166111681 1 51 1 10 1 1 1 1 1 1 1 1 1 1 1 Digital Output 1 5 2 vg 1 11 ID INGUCHIVE LOAD 1 11 9 001103 2 0 LCD Display Tu ices 1 6 Programming The LCD Display 1 11 1 6 1 Program and Data MCMoOry scccceccecceceseeeeeeesneeeeeeeneeeeeenneeeeenneeeseenseeeeeenseeeeensneeeeeenseeeeeenees 1 11 1 7 gedet SSES eeneg ek 1 11 1 1 LGT Program 1 2 Non Vola
25. TRY TRIANGLE 15 2 Chapter 15 Host Link Communication Protocol Host Computer The F Series PLC Send Ctrl E 05H and wait for echo Ready to process command return Ctrl E 05H Send Command string to controlle Wait for response Lam Execute command Return Response string to host Accept Response Check for errors Figure 15 1 15 4MULTI POINT COMMUNICATION SYSTEM In this system one host computer may be connected to either a single PLC via either RS232 or RS485 or multiple PLCs on an RS485 network 15 4 1 Command Response Frame Format Multi point ekeke pepe py fe Nyt Fer y eee ker Device ID Header Data FCS Terminator Each command frame starts with the character and two byte hexadecimal representation of the controller s ID 00 to FF and ends with a two byte Frame Check Sequence FCS and the terminator FCS is provided for detecting communication errors in the serial bit stream If desired the command frame may omit calculating the FCS simply by putting the characters 00 in place of the FCS Note we call 00 the wildcard FCS which is available when the PLC is in auto protocol mode This is to facilitate easy testing of the multi point protocol However the wildcard FCS can be disabled if the PLC has executed the SETPROTOCOL n 5 to put its COMM port n into pure native mode In that case you will have to supply the actual FCS to your command
26. The EZWire1616 features a special NS command tag lt TCPCONNECT xxx xxx xxx xxx portno gt that allows you to connect to any server to download data However since the PLC does not have a lot of memory for storing incoming text data it is not suitable for downloading information from a commercial website that sends many kilobytes of data in a single download It can however be very useful to connect to some servers that send small amounts of information For example there are many Internet Time Servers on the Internet that allow users to synchronize their computer clocks via the Internet The service responds to time requests from any Internet client in several formats including the DAYTIME TIME and NTP protocols The simplest are those that send responses in ASCII data and you can extract the date and time information from the response ASCII string once you know the format You can search on the Internet for a suitable timeserver and use the TELNET program on your PC to access them to examine their display format Most timeservers listen either on port 13 or port 123 so you need to specify the port number together with their IP address when sending the lt TCPCONNECT gt command Format lt TCPCONNECT IP address portno of time server gt Response none Successfully connected to the Modbus TCP server of the specified IP address ERR 05 Prev Conn ON Another NS command has been executed and left the client socket opened but did no
27. The following subsections describe the various Network Service commands available to the EZWire1616 Ti aes 2 17 INTERNATIONAL Chapter 2 Ethernet Port 2 4 1 Get our IP Address Format lt IP gt Response Xxx Xxxx xxx xxx nnnn IP address port of FServer Example PRINT 4 lt IP gt SETLCD 1 1 Our IP INPUT 4 Note This IP address is returned instantly so there is no need to wait for INPUT 4 2 4 2 DNS command Resolving Domain Name into IP Address In order to use this command successfully you must first correctly define the DNS Server IP address mentioned in Section 2 1 4 Format lt DNS domain name gt Response XXX XXX XXX XXX IP address string returned by DNS server ERR 07 DNS Unresolved Either DNS server not properly defined or the domain name does not exist Response xxx xxx xxx xxx IP address string returned by domain name server STATUS 3 This function returns 1 on success and 0 on failure Example PRINT 4 lt DNS tri plc com gt FOR I 1 to 10000 AS INPUTS 4 IF LEN AS lt gt 0 SETLCD 1 1 IP A RETURN ENDIF NEXT Notes a There is no need for the closing tag lt gt to end this command b If your DNS server has been correctly defined the above program should return the IP address as a string such as 130 94 216 144 You can then use this IP address string in all the other NS commands to be described in the fo
28. ER om ijijiji Timer Set Value in Decimal The Set Value S V of the specified timer is returned in decimal form as four byte ASCII text characters from 0000 to 9999 Note that this command header contains small letter m instead of M in the RM command 16 10 Read Counter Present Value P V Command Format Re we nn Counter1 00 _ Counter16 0F Counter64 3F Response Format ER u ijijiji J Counter present value in Decimal The Present Value of the specified counter is returned in decimal form as four byte ASCII text characters from 0000 to 9999 16 11 Read Counter Set Value S V Command Format PR put atr fo Seen green nn Counter1 00 _ Counter16 0F Counter64 3F Response Format 2 TRIANGLE 8 URA RESEARCH 16 5 LI Ki INTERNATIONAL Chapter 17 IR Remote Control poli Counter Set Value in Decimal The Set Value of the specified counter is returned in decimal form as four byte ASCII text characters from 0000 to 9999 Note that this header contains small letter u instead of U in the RU command 16 12 Read Variable Integers A to Z Command Format 8 apne gt A B C Z Response Format PR v 1 16 16 16 16 3 8 Hexadecimal Digit for 32 bit integer E g To read the value of the variable K send host link command RVIK If variable K contains t
29. ERR 04 Not Connected Failed to connect to remote Fserver or TLServer This TBASIC function returns 1 if the connection is active and returns 0 if the connection has ended You can test the connection status to determine if the connection is still alive This service allows your PLC to log in to another TRi Super PLC such as another Fx FMD or Nano 10 PLC connected via TLServer through the Internet You execute this command by first sending the string lt CONNECT XXX XXX XXX XXX 9080 gt using the PRINT 4 command where XXX XXX XXX XXX is the IP address of the remote FServer or TLServer followed by sending the username and password needed to log in to the remote server Each line should be terminated with a CR carriage return character The PRINT 4 command automatically appends the CR character Once a connection with the remote server is established the CPU will return the response string lt CONNECTED gt to the user program which can read it using the INPUT 4 function The STATUS 3 function can also be used to test if the connection is successful and alive When the program gets the confirmation of connection it can then use the TBASIC NETCMD 4 x command to read or write data to the remote PLCs as if the remote PLC is locally connected to COMM4 port of this PLC as shown in the following example A NETCMD 4 01RI00 Multiple NETCMD commands can be executed as long as the connection is alive You
30. INTERNATIONAL Chapter 2 Ethernet Port 2 1 13 Advanced Configuration The Advanced Configuration button lets you configure other more advanced beyond the basic Ethernet configuration but less often used features of the PLC This includes definition of the Trusted IP addresses see Section 2 4 2 as well as calibrations of the PLCs Analog I Os see Section 5 5 2 1 14 Standalone Version of Ethernet Configuration Software The standalone version of the Ethernet Configuration software that was previously the only option for configuring the Ethernet port and advanced settings on the F series can still be downloaded from our website at the following URL http www tri plc com download FserverConfig index htm Please download and run the SetupFPLCConfig exe file from the above URL to install the F series Ethernet Configuration Utility program After you have installed the configuration program please click on the Windows Start button and open the F series PLC Configuration group and select the Ethernet Configuration Utility program The following screen should appear The configuration program communicates with the PLC via the RS232 serial port so your PC should have a RS232 port Otherwise you should F Series Ethernet Basic Configuration Seems De bh Factory purchase a USB to RS232 converter Subnet Mask 255 255 255 o Default Gateway IPAddr Dez fiee fi 1 First click on the
31. Serial Setup button and set the RA PC s COM port to the same settings as the PLC s RR 0 85232 port Default settings are 38 400bps 8 DNS Server 0 lo lo 0 See s S H data bit 1 stop bit and no parity It is important F Server Port 9080 Node FSever that you select a valid COM port on the PC SC SE otherwise the program will crash and exit when it Absa DE Ge H fails to open the COM port The selected COM port EEN number is shown in a small text box below the Serial Setup button so that you can see the Username Tee Usemame Password currently selected COM port readily Password Access Level 1 Programmer PLC so that you can capture a copy of the current coms configuration in the PLC You can then selectively a modify the parameters of interest Reset PLC L Save Parameters FPLC Aer Save Exit Successfully Retrieved Setup Data LA No Next click on the Retrieve Parameters from F Firmware See Figure 2 1 4 The main difference between this standalone version of the F series Ethernet Configuration software and the built in version is that it communicates directly with the PLC via the serial port whereas the built in version requires TLServer or the FServer in order to create a connection However the standalone version can only communicate through the PLCs serial port whereas the built in version can connect to the PLC through a serial or Ethernet connection OH o TRIANGLE
32. Skype Extres Manager Skype4 Sling Player Test_USB_ML_CF_Hardware UPnP Framework Visual Cafe Executable M Windows Home Server Connector Windows Live Call M Windows Live Messenger MA Wiindawe Maeeenner ait LE Display a notification when Windows Firewall blocks a program What are the risks of allowing exceptions Add a Port Use these settings to open a port through Windows Firewall To find the port number and protocol consult the documentation for the program or service you want to use Name FTP Server Port Port number 21 TcP UDP What are the risks of opening a pot 18 8 Uploading File From PLC to FileZilla FTP Server Directory 18 8 1 Overview of The FTP Protocol The FTP protocol requires two socket connections between the devices performing the file transfer One connection is the command channel where FTP commands such as STOR or DELE and the responses are sent as plain ASCII text strings between the FTP client and the FTP server The second connection is the data channel where only the file content or the file directory data are being transferred TRI RESEARCH 18 15 INTERNATIONAL Chapter 18 Extended File System There are two transfer modes Active mode and Passive mode Active mode requires that the server establish a data connection back to the client Passive mode on the other hand requires that the client also be the one to establish the data con
33. 1 4096 SetDAC value 0 1 2 3 4094 4095 Figure 5 8 Note that the D A 1 to 4 are all current source outputs that source 0 to 20mA of current Each output has an associated 12 24V supply terminal same as PLC power that can be used to supply power to the device being controlled However 24V DC is the compliance voltage recommended for the power supply if the analog outputs will be converting to 0 10V at the control input of the device being interfaced to This is because 12V may not be enough drive the full 0 10V range when taking voltage drops into consideration The sum of the voltage drops must not exceed the source voltage The line itself will have a small resistance proportional to the distance it runs and this will create a voltage drop to consider Any other resistors added at the destination control input to convert the current signal to a voltage will also need to be considered c _ 2 TRIANGLE 8 Li RESEARCH 5 9 LI INTERNATIONAL Chapter 5 Analog I Os EZWIRE PLC CONTROL DEVICE 0 20mA 0 5V 0 10V DC PLC Output Analog Input DAC Rline1 0 20mA F Wiring Ri oad Resistance Vec Ki Vioad Rline2 VR2 Vcc gt VrR1 Vr2 Vioad Figure 5 9 5 4 1 The Benefits of Current Source Analog Outputs Current source outputs are especially useful for industrial applications because of their high noise immunity ability to
34. 16 Support Function 15 16 Will request for IP address from DHCP server if IP 0 0 0 0 Digital I Os Analog Outputs I O terminals Program memory Programming software Floating point math Floating point variables Modbus support for floating point vars Hostlink commands for floating point vars DIP Switch 3 ON Support multiple DM Read command DM volatility READMODBUS READMB2 WRITEMODBUS WRITEMB2 DHCP IP address The EZWire1616 PLC features an Ethernet port that can be connected directly to a network router switch or hub for access to the LAN or to the Internet The Ethernet port supports the FServer for remote programming or monitoring and a Modbus TCP server for access by third party devices with up to 10 simultaneous connections The user s program can also easily connect to another PLC or Modbus TCP slave devices via the Internet email real time data to any email address es or connect to the Internet Time Server to get the most accurate real time information The Ethernet port also supports Web Services allowing enterprise software such as a database program or MS Excel to query for information from multiple PLCs instantaneously The basic EZWire1616 unit comprises 8 analog inputs 12 bit 0 5VDC 4 analog outputs 12 bit 0 20mA DC 16 digital Inputs and 16 digital outputs Every output point has a built in flyback diode to protect against u
35. Data 8 Hexadecimal Digit in 32bit IEEE format 16 16 16 16 16 16 16 J 16 IO Last data E g To read the value of FP 101 to FP 110 send host link command RVF0065000A 16 19 Read Variable System Variables This command allows you to read all the Fx PLC s 16 bit system variables such as the inputs outputs relays counters timers timers P V counters P V CLK and DATE Although inputs outputs etc are also accessible via the RI RO RR commands the RVS command can access them as 16 bit words instead of as 8 bit bytes in those commands For the 32 bit system variable HSCPV use the RVH command described in the next section to access it It may be more conventional for some SCADA software driver to use a single header command RVS to access all the I O varying only the type number to access different I O types 2 TRIANGLE 5 URA RESEARCH 16 8 INTERNATIONAL Chapter 17 IR Remote Control The RVS command also can be used to access the internal variables used to store ADC DAC and PWM values obtained during the latest execution of the ADC setDAC or setPWM statement These are however not system variables in the TBASIC sense E g it is illegal to use ADC 2 to access the ADC channel 2 in TBASIC you have to use the ADC 2 function instead An 8 bit hexadecimal number is used to denote the type
36. FTP data transfer completed STATUS 4 TR RESEARCH 18 16 INTERNATIONAL Chapter 18 Extended File System STATUS 20 gt 0 Number of bytes uploaded to FTP Server Transfer is in progress lt 0 Total number of bytes uploaded Transfer completed For example If 2 345 bytes has been uploaded to the server and the transfer has ended STATUS 20 will return the number 2345 Since file transfer can take substantial amount of time to complete it is not wise to run a loop to wait for the file transfer to complete since this will block the PLC from processing any other part of the program The demo ExtendedFileSystem PC6 shows you how to setup a monitoring function to periodically monitor the progress of the file transfer and report the transfer status on the LCD display Please refer to the comments in the custom function fnConnFTP and fnMonFTP of the ExtendedFileSystem PC6 program for more detailed descriptions of each command involved in the FTP file transfer TRIANGLE 1 8 TR RESEARCH INTERNATIONAL Chapter 18 Extended File System 18 9 Setting Up A FTP Server Behind a Windows Firewall Please refer to the following Microsoft document describing issues and solutions related to FTP server behind the Windows Firewall http technet microsoft com en us library dd421710 WS 10 aspx Microsoft focuses mainly on the FTP server in their IIS server for obvious reasons inste
37. Now your Ethernet port has been configured and you can try to connect to your PLC from I TRiILOGI 2 12 using your PLCs IP address and port number TRIANGLE RESEARCH INTERNATIONAL TR Chapter 2 Ethernet Port Note a Connecting the PC s Ethernet port directly to the PLC only establishes a private network connection between the two devices That is to say the PLC connected this way is ONLY accessible to this PC Even if the PC is connected to a LAN e g via Wi Fi connection the PLC connected to this PC via direct Ethernet connection will not be accessible by any other devices on the same LAN and the PLC will not be able to open network connection to any other devices beyond the PC that it is connect to this way Sometimes the PC that is connected directly to the PLC via Direct Ethernet Connection may lose its Internet connection via Wi Fi This is because the O S thinks that the direct Ethernet connection to the PLC is a real network connection and attempt to route TCP IP packets through it That will result in a connection failure If this occurs and you need to access the Internet then please temporarily remove the Ethernet cable from the PLC and the PC should then be able to access the Internet again Windows 7 Ethernet Configuration 1 Open the Network Window The first thing you will need to do is open the Network window from the Start menu by selecting Network as shown here
38. The ISP usually provides the SMTP server in domain name form such as mail sbcglobal net but you should also be able to request the numerical IP address of the SMTP server from the ISP For Windows XP or Vista users you can resolve the IP address as follows First launch the Command Prompt window Then enter the command nslookup lt smtpserver name gt to get the IP address An example is shown below where the IP address of mail sbcglobal net is resolved to the IP address 207 115 36 120 tver Pde mail lobal net WK Shawcable net erver ddress Figure 2 1 3 Windows users may also search the Internet for a free host exe tool that lets you resolve the IP address from a given domain name one host exe tool that we found to work was downloaded from http pigtail net LRP dig For example executing the command line host mail sbcglobal net will resolve its IP address Of course you can only use this smtp server provided your ISP is SBC almost no SMTP server will relay emails from a client that is not its one of its own subscribers If you do not plan to use the FServer to send out emails yet then you can leave the default SMTP Server IP Address 0 0 0 0 You can change the settings anytime later when you need it TRIANGLE 5 Tat RESEARCH 2 3 INTERNATIONAL Chapter 2 Ethernet Port 2 1 4 DNS Server IP Address DNS Domain Name Server allows the FServer to contact a remote se
39. The above shows the wiring diagram of using an external opto isolator to provide the zero crossing signal to the PLC s NPN input 6 17 4 Programming Light Dimmer Control 17 4 1 Enable Zero Crossing Interrupt Before programming any of the light dimmer channels you first need to enable the zero crossing interrupts for the zero crossing signal fed into input 6 This is accomplished using the following command SETSYSTEM 22 1 Enable zero crossing interrupt 17 4 2 Programming Individual Dimmer Channel You can program up to 12 of the EZWire1616 PLC s outputs 5 to 16 to control SSR for dimmer control purposes using the SETDIMMER command available only on i TRiILOGI version 6 23 onwards The syntax is as follows Ti Bees 17 4 INTERNATIONAL Chapter 19 Zigbee Communication SETDIMMER ch value ch Light dimmer channel 1 to 12 This is mapped to the EZWire1616 PLCs outputs as follows ch F series Output 1 5 2 6 3 7 4 8 5 9 6 10 7 11 8 12 9 13 10 14 11 15 12 16 value Integer multiplier of an internal timer resolution approximately 53 microsecond to schedule the next firing time from the last zero crossing For 50Hz AC signal range 1 to 188 For 60Hz AC signal range 1 to 156 The lamp will be fully ON 100 brightness when value 1 and fully OFF 0 brightness when value is near the maximum stated above DO NOT set any of the dimmer channel with value greater than
40. This function returns 1 on success and 0 on failure Note that this function only returns the email status after the closing tag lt gt has been sent If the function is polled before the last closing tag is sent the status is indeterminate Description You can use this command to send out an email for you at any time The FServer uses the defined SMTP server and Gateway IP addresses See Section 2 1 to perform this task If it encounters any errors it will send back an error string which begins with the ERR followed by the reason for the error Although the sender s email address does not have to be a valid email address it is good to at least use a valid domain name as the sender address Otherwise the SMTP server may refuse to send the email because it may deduce that an email with an invalid domain name is likely to be a Spam mail Example Please refer to the fnEmail function in the TestEthernet PC6 file Ti aes 2 19 INTERNATIONAL Chapter 2 Ethernet Port 2 4 4 Open Connection to Remote FServer or TLServer to Use NETCMD lt CONNECT IP address port of TLServer or XServer gt username string password string lt CONNECTED gt Successfully connected to remote FServer TLServer or XServer at the IP address ERR 05 Prev Conn ON Another NS command has been executed and left the client socket opened but did not execute the PRINT 4 lt gt to close the client socket
41. You need to use 6 PCB standoffs or screws and nuts to support the controller and fasten it to a console box Alternatively you can mount it on the optional DIN KIT 2 and clip it onto the standard DIN rail The following subsections show how to wire as well as some hardware details of the I Os that are available on the EZWire1616 PLC model Separate chapters in this manual will be devoted to discussing the programming methods for this hardware 1 2 1 Wiring Procedure All of the terminals are on a 3 level quick connect spring cage terminal block They are from top to bottom level 1 Signal 2 Supply Voltage either 5V or 24V 3 OV common Ca TRIANGLE 1 3 Ind RESEARCH INTERNATIONAL Chapter 1 Installation Guide Insert flathead screwdriver here max 1 8 4mm width Wiring Point Level 3 Wiring Point Level 2 Wiring Point Level 1 Figure 1 2 Terminal Wiring Details Wiring the I O is highly simplified with the quick connect spring cage terminals from Phoenix Contact There are no time consuming screws to handle The wiring technician simply needs to perform the following steps 1 Insert a flathead screwdriver 1 8 wide by 1 2 long tip into the spring cage release hole with some pressure 2 Tilt the screwdriver up to act as a lever which will open the associated terminal and allow for the wire to be inserted 3 Insert the wire in the open terminal 4 Once the wire is in place
42. char times char times The following Function Codes are supported 06 Preset Single Word Register Preset Multiple Word Registers 14 8 3 OMRON Host Link Command Support Command Type Level of Support d IR Area READ RR_ Fulllsupport 0000to 1000 Cd e HR AR LR Area RH Dummy always returns O000 amp TC Status READ n DM AREA READ RD _ Fullsupport o PV READ Dummy always returns 0000 Dummy always OK TR RESEARCH 14 12 INTERNATIONAL Chapter 14 Serial Communications D IR Area WRITE Full Support j HR AR LR Area WH WJ Dummy always Ok amp TC Status WRITE WL WG k DM Area WRITE Full Support from DM0001 DM4000 KRCIO Dummy for other areas for Channel or Bit QQIR Dummy for other areas always 0000 Some OMRON host link commands are described in Section 16 40 For other commands please refer to the Omron C20H C40H PLC Operation manual published by OMRON Corporation If your purpose is only to use the PLC s OMRON mode with SCADA or HMI then there is no need to learn the actual command response format 14 8 4 Application Example Interfacing to SCADA Software SCADA software or MMI systems also known as LCD Touch Panels normally use an object oriented programming method Graphical objects such as switches indicator lights or meters etc are picked from the library and then assigned to a certain I O or internal data address of the PLC When designing a SCADA system first
43. 1 Toi RESEARCH 2 6 INTERNATIONAL Chapter 2 Ethernet Port The standalone version can be useful for OEM designers who want to provide their customers with a way to configure the Ethernet settings and or calibrate the ADC and RTC settings but don t want to provide access to the programming software OH o TRIANGLE 1 Toi RESEARCH E INTERNATIONAL Chapter 2 Ethernet Port 2 2 Connecting Ethernet to the PLC Introduction All EZWire1616 PLC can connect to the PC running TRILOGI many ways as follows a Wired connection to a router that the PC is also connected to PC connection can be wired or wireless b Direct connection to the PCs wired Ethernet port via crossover cable c Wireless connection to a wireless router if the PLC is connected to a wireless bridge adapter Only the first two options which are most common will be described here 2 2 1 Connecting the PLC to a Local Area Network In a typical local area network LAN there would be one router wired or both wired and wireless that the network devices connect to one modem that provides Internet to the router and the devices connected to the router such as the PLC and PC Before You Begin The first thing you need to do is configure the network settings in the PLC to match those of the LAN This is typically done as follows 1 Find out what your routers gateway address is typically 192 168 1 1 or 192 168 0 1 and what static IP address
44. 1 xxx where xxx is anything from 1 255 except 2 Once you have set the IP address and Subnet mask you can click on OK and then click on OK again to close the Local Area Connection Properties window shown in Figure 2 8 5 Note When using direct Ethernet connection you should leave the Default gateway field empty This can prevent the PC from trying to access the Internet through its Ethernet port which can cause the PC to lose internet connection HS ax You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for Advanced Cancel Internet Protocol TCP IP Properties General Altemate Configuration the appropriate IF settings et 280 an Use the following IP address Obtain DNS server address automatically Use the following DNS server addresses Prefered DNS server Altemate DNS server Figure 2 8 4 5 Sample Configuration Internet Protocol TCP IP Properties ace General the appropriate IP settings Obtain an IP address automatically s N IP address Subnet mask Default gateway Use the following DNS server addresses Preferred DNS server Altemate DNS server Figure 2 8 5
45. 2 1 Click on the Advanced button on the Basic Configuration screen and open the F series Ethernet Advanced Configuration screen The bottom half of the screen contains ADC and DAC calibration constants that you can enter and transfer to the PLC as shown below ADC Calib Chi Ch2 Ch3 Ch4 ChS Ch7 Ch8 Zero Offset g 0 0 P 0 i 2 IIo DAC Calib 20 000 10 0 0 0 0 o Ip II Zero Offset g g 0 0 0 0 0 0 ADC Moving Avg o RTC Calib 0 of data points SES Figure 5 11 5 5 1 ADC Calib These fields are used to apply a multiplication factor to the value returned by ADC function The multiplication factor 1 x 10000 Example 1 If you apply 2 500V to ADC 1 you would expect the value returned by ADC 1 to be 2048 But the actual average reading centers around 2060 Proportional Error 2060 2048 1 005859 Multiplication factor required to correct this error 1 1 005859 0 9942 1 58 10000 gt X 58 You should therefore enter a value of 58 into the ADC Calib field for Ch 1 and save it to the PLC After the PLC has rebooted the CPU would apply the multiplication factor of 0 9942 to the readings it received which would correct the reading to 2060 x 0 9942 2048 Example 2 If you apply 4 000V to ADC 8 you would expect the ADC 8 function to return a value of 4 000 5 000 x 4096 3277 However your program returned a value of 3230 from ADC 8 Proportional Error 323
46. 6 3 Monitoring The FTP Upload Progress Once the file transfer begins the PLC firmware will handle the rest of the file transfer until either the file has been completely transferred or the transfer is aborted due to a network or server trouble You can monitor the progress of the file transfer using either the STATUS 4 or STATUS 20 functions STATUS 4 0 FTP client was idle or last FTP failed 1 FTP data transfer just started 2 1st FTP segment transferred now transferring the rest 3 FTP data transfer completed STATUS 20 gt 0 Number of bytes uploaded to FTP Server Transfer is in progress lt 0 Total number of bytes uploaded Transfer completed For example If 2 345 bytes has been uploaded to the server and the transfer has ended STATUS 20 will return the number 2345 Since file transfer can take substantial amount of time to complete it is not wise to run a loop to wait for the file transfer to complete since this will block the PLC from processing any other part of the program The demo ExtendedFileSystem PC6 shows you how to setup a monitoring function to periodically monitor the progress of the file transfer and report the transfer status on the LCD display Please refer to the comments in the custom function fnConnFTP and fnMonFTP of the ExtendedFileSystem PC6 program for more detailed descriptions of each command involved in the FTP file transfer 18 7 Setting Up A FTP Server Be
47. C TRiLOGI TL6 usr samples HighSpeedCtr PC6 O TRIANGLE 7 1 NR RESEARCH LI e INTERNATIONAL Chapter 7 High Speed Counters 7 2 Enhanced Quadrature Decoding The default method in which the PLC handles quadrature signals as described above is somewhat simplistic It does not take into consideration the jiggling effect that occurs when the encoder is positioned at the transition edge of a phase Mechanical vibration could cause multiple counts if the rotor shaft jiggles at the transition edge of the phase resulting in multiple triggering of the counter This simplistic implementation however does have the advantage that the HSC can also be used for single phase high speed counting For the EZWire1616 an enhanced quadrature decoding routine is provided which will lock out multiple counting by examining the co relationship between the two phases You can configure the EZWire1616 to use the enhanced quadrature counting by using the SETSYSTEM command as follows SETSYTEM 4 n The value of n at bit 0 1 and 2 respectively defines if the HSC channel 1 2 and 3 is to run in Simple when the bit is 0 or Enhanced when the bit is 1 mode As such N bit 2 1 0 HSC 3 HSC 2 HSC 1 Simple Simple Simple Simple Simple Enhanced Simple Enhanced Simple Simple Enhanced _Enhanced Enhanced Simple J Simple Enhanced Simple Enhanced Enhanced Enhanced Simple Enhanced
48. Conversion of EZWire1616 outputs to 5V logic level Ti Bass 10 4 INTERNATIONAL Chapter 10 Stepper Motor Control 10 4 Programming Stepper Control Channel 10 4 1 Introduction Any of the 3 stepper motor channels can be configured as either a Controller direction pulse or a Driver and as a Driver can drive in FULL STEP mode or HALF STEP mode The stepper channels are controlled by the PLC program using the STEPMOVE and STEPMOVEABS commands These commands have the same parameters as they did when they were used on M Series PLCs For example STEPMOVE ch count r STEPMOVEABS ch position r The ch parameter is the channel This is how the PLC knows which stepper motor channel to turn on Now this parameter is also used to set the stepper motor channel to controller mode full step driver mode or half step driver mode To set the stepper motor channel to controller mode the ch parameter should be a 1 2 or 3 This is the same as for the M Series PLCs except that channel 3 is now available To set the stepper motor channel to driver mode the ch parameter needs to have a 1 prefixed to it for full step mode and a 2 prefixed for half step mode 10 4 2 Full Step Driver Mode STEPMOVE 11 100 1 Stepper channel 1 will be driven 100 full steps STEPMOVE 12 100 1 Stepper channel 2 will be driven 100 full steps STEPMOVE 13 100 1 Stepper channe
49. IP 192 168 1 1 RJ45 terminated straight through CAT5 Ethernet Cable ral Super PLC IP 192 168 1 5 IP 192 168 1 100 2 2 2 Setting up Ethernet Communication Directly Between a PC and a F series PLC It is possible for your PC to communicate directly with a F series PLC through the Ethernet port This means that you can have a peer to peer connection between the F series PLC and your PC without an Internet connection or any additional network equipment The PC being used would need a spare Ethernet port in order to do this What You Will Need 1 A PC with a spare Ethernet port RJ45 connection 2 An Ethernet cable 3 A F series PLC There are two types of Ethernet cables A standard straight through cable which is used in most situations and a crossover cable which is required when there is no auto switching hardware in either of the two Ethernet ports PC and PLC The F series PLC does NOT have auto switching capabilities so it OH TRIANGLE TRY RESEARCH 2 9 INTERNATIONAL Chapter 2 Ethernet Port will depend on the PCs Ethernet port whether or not a crossover cable is required If you are not sure if your PC s Ethernet port is able to perform auto switching most modern PC has auto switching built in then it is best to use a crossover cable A crossover Ethernet cable will work in both situations but a straight through Ethernet cable will only work if one or both of the Ethernet ports can perform auto
50. Master RS485 Networking Fundamentals ssseeseeeseeesinesenssinssrrssrnssrrssrresrns 15 7 15 5 4 Multi Master RS485 Networking Fundamentals 15 8 15 8 Multiple Access with Collision Detection 15 5 4 1 15 9 0 Token Awarding Scheme 15 5 4 2 15 9 Rotating Master Signal 15 5 4 3 15 5 5 TROUBLE SHOOTING AN DRGAOpNETWOnk 15 9 16 HOST LINK PROTOCOL FORMAT 16 1 16 1 Device ID Read iss 16 1 16 2 Device ID Witte vcssssccctsasscccsadssecctsastecevasavecvtevicccastsastcarcasasadcdivaudescucaecstvaanderenvasadaccaiuseccreieetes 16 1 Read Digital Input Chantnels ccccsseceseeesseeeeeseeeeeeneesneeseneeeeneeeeseeseseaeenseeesseeeseseenenseaeees 16 1 16 3 16 2 Definition of Input Channels 16 3 1 16 2
51. SETPROTOCOL n 5 to configure its serial port into pure native mode then wildcard FCS will not be accepted and you must use the actual FCS with your command The FCS button makes it much easier than computation by hand If you have changed some data using the write command then activate On Line Monitoring and examine the changes made using the View Variables window 16 50 Visual Basic Sample Program To help users get started writing their own Visual Basic program to communicate with the PLC we have created a sample Visual Basic program with full source code listing Please visit the following web page to download the visual basic sample program http www tri plc com applications VBsample htm 16 51 Inter PLC Networking Using NETCMD Command All Fx PLCs are able to send out host link commands to other Fx PLCs M series or H series PLCs using the built in TBASIC function NETCMD This function accepts host link commands in multi point format and automatically computes the Frame Check Sequence FCS characters appends them to the command string and sends out the whole command string together with the terminators The function then waits for a response string and checks the integrity of the received response string for errors This TR RESEARCH 16 23 INTERNATIONAL Chapter 17 IR Remote Control function returns a string only if a proper response string has been received Please refer to the TBASIC Reference for a de
52. To transmit a command the master controller must first enable its RS 485 transmitter and then send a multi point command to the network of controllers After the last stop bit has been sent the master controller must relinquish the RS485 bus by disabling its RS485 transmitter and enabling its receiver At this point the master will wait for a response from the slave controller that is being addressed Since the command contains the ID of the target controller only the controller with the correct ID would respond to the command by sending back a response string For the network to function properly it is obvious that no two nodes can have the same ID You can use the Setup Serial Port command in TLServer to set the ID for each EZWire1616 You can also use the IW Host Link command to set the device ID Also all nodes must be configured to the same baud rate and communication format Care should be taken to ensure that the power supplies for all the controllers are properly isolated from the main so that no large ground potential differences exist between any controllers on the network 15 5 4 Multi Master RS485 Networking Fundamentals Since the EZWire1616 is capable of sending out network commands the obvious question is whether multiple masters are allowed on the RS485 network It is possible to have multiple masters on a single RS485 network provided the issues of collision and arbitration are taken care of There are several means to ac
53. accepted by the PLC HTM JPG GIF CSS JS BIN TXT JAR ZIP XLS Any other extension names will be replaced by The MIME extension are respected by the web browser when you download a file from the built in web server so you should always only store files with one of the above extension The file O yyy occupies the first 4K byte slot 1 yyy occupies the second slot the Y yyy occupies the 35 slot Ti Bees 18 3 INTERNATIONAL 1 2 Chapter 18 Extended File System 4 The next 400 files can only use the file name Zxxx yyy where the xxx part of the filename is a 3 digit decimal number which can be any number from 000 to 399 The yyy part is an extension and the same as what s described in 2 above 5 Z000 yyy occupies the 36 slot Z001 yyy occupies the 37 slot and the file Z399 yyy occupies the last 4K slot 6 Any file may occupy more than 1 slot so you can specify O yyy to occupy the entire 1740K bytes of the file space Or you can configure Z000 yyy to occupy 20K 5 slots from the 36 slot and the next valid file should only start from Z005 yyy i e If you want to allocate 20K bytes of file space to file Z000 yyy you cannot use any file name Z001 Z002 Z003 and Z004 otherwise these file will corrupt the file space of 2000 7 This means that the programmer will have to design the file space carefully and determine how to be
54. and is designed to connect directly to the PC s serial port without the need for a null modem cable COMM1 communicates with the host computer at a default baud rate of 38 400 bit per second with 8 data bits 1 stop bit and no parity The communication baud rate can be changed in software from 1200 bps to 115 2K or 230 4K bps which is compatible with most PCs and industrial equipment The COMM1 port is the main communication port used by the PLC configuration software See Chapter 2 1 as well as for program transfer and on line monitoring of the PLC program when it is not connected to an Ethernet router or hub The pin connections with the host PC are shown below Rx Ss Ee i 815 015 Host PC RS232 or ee oe S USB RS232 Converter EE S Male DB9 7 8 9 Figure 14 1 Connecting COMM1 with PC However to connect COMM1 to another DCE device e g a modem you need to make a special cable which swaps the transmit and receive signals as follows 3 RESEARCH INTERNATIONAL CO TRIANGLE IR 14 1 Chapter 14 Serial Communications Modem Female DB9 EZWire1616 COMM1 Female DB9 Figure 14 2 Connecting COMM1 to a MODEM Pin 4 and 6 are handshaking signals whose presence may be required by some modems to work properly so these pins are connected as shown in the diagram 14 3 COMM2 RS232C Port with Male DB9 Connector This port is configured as a DTE Data Terminal Equipment and is designed to connect di
55. any web browser anywhere in the world This allows you to carry out analysis of past logged data file for performance or diagnostic analysis at any time without having to physically access the PLC to retrieve the logged data Ti Bees 18 2 INTERNATIONAL Chapter 18 Extended File System 18 1 1 Advantage of Using Data Uploading Although it is possible to directly access the PLC s internal web server to download the data file it has created this does require active action by the user and to ensure that the data are retrieved before the file is full and deleted by the PLC to create space to log new data By programming the PLC to upload the data periodically the PLC can delete the file after it has successfully uploaded the data file to free up space to accept new data In other words the PLC will never run out of data space to log data since it can store the logged files on any server including the Cloud To directly access the file stored on the PLC from outside of the LAN you will need to setup the router or firewall to forward the PLC s server port e g 9080 to the PLC If you have multiple PLCs logging data then each PLC will need to have a different port number in order to properly forward the data This not only complicates the setup but also is often frown upon by System Administrator and may not even be permitted by the corporate network security policy The PLC is designed to upload data to any web server via F
56. as shown in the following diagram I O numbers 48 33 32 17 16 1 Bit 15 0 15 0 15 0 TIMERBIT 3 TIMERBIT 2 TIMERBIT 1 CTRBIT 3 CTRBIT 2 CTRBIT 1 4 3 3 Changing The Timer and Counter Set Values in a Custom Function You can use the SetTimerSV and SetCtrSV functions to change the Set Value SV for a timer and counter respectively An example of this is shown below SetTimerSV 1 500 Define Timer 1 to have a Set Value of 500 SetCtrSv 10 1000 Define Counter 10 to have a Set Value of 1000 4 3 4 Controlling a Timer or Counter in a Custom Function You can activate a timer or a counter directly from within a custom function simply by assigning their present value counter to a desired value E g To start a 50 seconds timer TIMERPV 2 500 Timer 2 will time out 50 0 seconds later E g To decrement a counter or a Sequencer CTRPV 10 CTRPV 10 1 Counter 10 is decremented by 1 Ca TRIANGLE 8 Lied RESEARCH 4 4 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers 4 4 Programming Sequencers on Ladder Logic 4 4 1 Introduction TRILOGI Version 6 amp 7 support eight sequencers of 32 steps each Each sequencer uses one of the first eight counters Counter 1 to Counter 8 as its step counter Any one or all of the first eight counters can be used as sequencers Seq1 to Seq8 To use a sequencer first define the sequencer name in the Counter table by pressing the lt F2 gt key a
57. can use the TBASIC READMOBUS and WRITEMODBUS commands as well as READMB2 and WRITEMB2 to send out MODBUS ASCII or RTU commands to access any other F series FMD or Nano 10 PLCs or any third party MODBUS slave devices The READMODBUS or READMB2 commands use MODBUS Function 03 this can be changed to function 04 using SETSYSTEM 6 4 command to read from the slave and WRITEMODBUS or WRITEMB2 use MODBUS Function 16 to write to the slave Note that when using the READMODBUS or WRITEMODBUS commands the 40001 address stated in Table 14 1 should be interpreted as address 0000 and 40002 as address 0001 and 41001 as address 1000 etc This is in accordance with the specifications stated in MODBUS protocol MODICON defined zero offset addresses for the MODBUS protocol yet in their holding register definition these are supposed to start from address 40001 hence the unusual correspondence But to maintain compatibility with the MODBUS specifications we have to adhere to their definitions 14 9 1 EZWire1616 PLC As MODBUS RTU Master The EZWire1616 PLC can also act as a MODBUS RTU master The same READMODBUS and WRITEMOBUS commands can be used to send and receive MODBUS RTU commands What you need to do is add 10 decimal to the COMM port number to signal to the processor that you wish to use MODBUS RTU instead of MODBUS ASCII to talk to the slaves In other words you should specify port 11 to use RTU commands on COMM1 and specify port 13 to use RTU c
58. can test the connection status by checking the result of the STATUS 3 function Once all the command exchanges have been completed you should send a lt gt tag to close the client connection to the remote server so that other NS commands can be executed in other parts of the program Please refer to the fnConnect and fnNetCmd custom functions in the demo program TestEthernet PC6 2 20 Format Response STATUS 3 Description Example TRIANGLE RESEARCH INTERNATIONAL UR Chapter 2 Ethernet Port 2 4 5 Remote File Services Format lt REMOTEFS IP Address of remote TLServer 2 1 amp above gt File Service tag for TLServer lt REMOTEFS gt Response The response strings sent by the remote TLServer in response to the File Service tag sent by this PLC Or ERR 04 Not Connected Failed to connect to remote TLServer Example Please refer to the fnRFS1 and fnRFS2 custom functions in the demo program TestEthernet PC6 Description This commands allows the EZWire1616 to connect to a remote TLServer to perform any of the Files amp Email Services that a TLServer normally provides to PLCs that are connected to it This includes creating text files on a remote TLServer and writing or appending data to it anytime This makes it very convenient for the PLC to collect large amounts of data and save them to the easily access
59. clear the corresponding line 2 A quick and lazy way to do it is to add a few more characters to the back of the string to be displayed which will wipe out old characters that could be present adjacent to the new string DI E g SETLCD 1 1 Money Sir STRS D 3 If there is data to the right of the currently displayed string that you cannot overwrite with spaces then you can restrict the number of digits that a numeric variable may be converted to using the two parameters from the STR or HEX command E g SETLCD 1 1 Temp STRS T 4 The STR T 4 function will always return 4 digits of the data stored in T If T is less than 4 digits then one or more preceding O s will be added E g if T 12 then this function will return the string 0012 Note that for negative numbers the negative sign is counted as part of the digit count so you need to provide enough spaces to take care of the sign if you need to handle both positive and negative numbers 13 4 Displaying Floating point The STR x and STR x n can convert a floating point number x into a text string which can therefore be displayed immediately using the SETLCD command Please refer to the STR command in the TL7 Programmer s Reference guide for details If you wish to control the number of digit being displayed then you could use the MID command to extract the number of significant digits and the exponents from the string return
60. commands for reading writing to its serial ports including built in commands for communicating with devices that use the MODBUS ASCII or RTU protocols 14 4 3 Interfacing Other Devices to Modbus Host or to the Internet Since the EZWire1616 supports MODBUS protocols it can operate as a master PLC and serve as a gateway to interface non MODBUS enabled PLCs such as the E10 PLCs or the l 7000 analog modules to third party SCADA software or MMI hardware that speaks MODBUS The EZWire1616 also makes it easy for these devices to be controlled or monitored over the Internet The master EZWire1616 will use its RS485 port to pull data from these devices into its data memory The data memory in the EZWire1616 is in turn accessible by a SCADA program using the Modbus serial or Modbus TCP protocol Through the EZWire1616 these other connected devices are also accessible from the Internet using the i TRiLOGI client server software 14 4 4 Distributed Control Another important use of the RS485 port will be to connect a EZWire1616 to other F series FMD series Nano 10 H series or E10 PLCs One EZWire1616 will act as the master and all other PLCs will act as slaves Each PLC must be given a unique ID The master will send commands to all the slaves using the NETCMD or READMODBUS WRITEMODBUS READMB2 WRITEMB2 statements and coordinate information flow between the PLCs In this way a big system can be built by employing multiple units of the above re
61. file in passive mode At this point you can use the PRINT 4 command to send any valid FTP command to the server including changing directory CWD command make sure the directory exist deleting a file DELE command beware of what you are deleting etc When the PLC is ready to start a file transfer to the FTP server the server will in turn provide the PLC with the port number that it has opened for the PLC to connect to establish a data connection Upon receiving this port number the PLC will make a second TCP connection to the given port and then the actual file transfer will begin A new network service command tag named FTPUPLD handles the negotiation between the FTP Server and the PLC as well as handling of the data transfer from the PLC to the FTP server The following is the syntax PRINT 4 lt FTPUPLD Zxxx yyy destination file name gt Where Zxxx yyy is the file name of the extended file that the PLC has access to The destination file name can be any legal name acceptable to the server so you can attach a date or time stamp to the file name for easy identifications When the above lt FTPUPLD gt command is run the PLC will send the actual STOR command in the background to the FTP server and then obtain the port number from the server and it will then make a data connection to it and file transfer can then begin TR RESEARCH 18 12 INTERNATIONAL Chapter 18 Extended File System 18
62. input is 6V and when the PLC output is ON the Control input is pulled to low The 1N4001 diode is to prevent the 24V weak pullup signal at the PLC output from entering the servo s Control input As such when the PLC output is ON the Control input is pulled down to about 1 diode drop about 0 7V In other words the RC Servo connected above are controlled by the PLC s PWM output but the duty cycle is inverted Le To send a 5 positive PWM control pulse to the Servo you can run the following statement SETPWM 2 9500 50 Set PWM 2 output to 95 duty cycle at 50 Hz Ti aes 11 4 INTERNATIONAL Chapter 11 Pulse Width Modulated Outputs Likewise to send a 10 positive PWM control pulse to the Servo you will need to run the following statement SETPWM 2 9000 50 Set PWM 2 output to 90 duty cycle at 50 Hz 11 4 2 Using EZWire1616 PWM Output To Control RC Servo Opto lsolated You can also use the PLC s PWM output to drive an optocoupler such as 4N35 and the output from the optocoupler is use to provide control pulse to the RC Servo as shown in Figure 11 5 4N35 4 8V to 6V Optoisolator DCPower For Servo OUTPUTS Figure 11 5 Opto lsolated Interace to RC Servo In the opto isolated interface shown above the power supply to the PLC and that to the RC Servo are completely isolated no common ground required Also since the interface inverts the output signal from the PLC no software in
63. is that since each of the EZWire1616 PLC digital output already has a built in diode to bypass the inductive kick to its 24V power supply there is no need for additional diodes to be installed across the coils if the coils draw their current from the PLC s 24V terminals Note that if the stepper motor uses a separate power supply from the PLC and if the supply voltage were lower than the PLC s power supply then connecting the output to the stepper motor coil directly would cause the PLC s output LED to light up even when the output driver is off This is because the PLC s output LED is internally pulled up to the PLC s power supply and a lower voltage at the load s power supply would cause current to flow out of the PLC s output terminal into the load s power supply and therefore turning on the output LEDs Although this should not affect the driver s function it can be misleading to the user as to the PLC s output state Hence we recommend connecting a diode in series with each of the PLC s outputs to block such reverse current flow Stepper V O EZWire1616 Built in diodes NPN output drivers external diodes to block reverse current flow Figure 10 3 If V is lower voltage than PLC s power supply voltage 10 3 Stepper Motor Controller If the built in stepper driver is not suitable for your application e g if you need micro stepping or you need to drive a very high power stepper motor then you can
64. jet Gran 0 015 Clock 0 025 Clock 0 055 Clock 0 1s Clock 0 25 Clock 0 5s Clock 1 0s Clack 1 min Clock RTC Error The Special Bits table is located after the Counters table and before the Inputs table Click on the SeqN x item to insert a sequencer bit You will be prompted to select a sequencer from a pop up menu Choose the desired sequencer 1 to 8 and another dialog box will open up for you to enter the specific step number for this sequencer Each step of the sequencer can be programmed as a contact on the ladder diagram as SeqN X where N Sequencers 1 to 8 and X Steps 0 31 e g Seq2 4 Step 4 of Sequencer 2 Seq5 25 Step 25 of Sequencer 5 TRIANGLE S 2 _ URA RESEARCH 4 5 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers Although a sequencer may go beyond Step 31 if you define a larger SV for it only the first 32 steps can be used as contacts to the ladder logic Hence it is necessary to limit the maximum step number to not more than 31 Quite a few of the ladder logic special functions are related to the use of the sequencer These are described below 4 4 2 Advance Sequencer AVseq Increment the sequencer s step counter by one until it overflows This function is identical to and hence interchangeable with the UpCtr function 4 4 3 Resetting Sequencer RSseq The sequencer can also be reset to become inactive by the RSseq function at any time N
65. known as firing of the TRIAC Since the TRIAC is latched ON and cannot be turned OFF regardless of what voltage or no voltage is applied to the Gate it will be quite useless for switching DC current as the switch cannot be turned OFF However when a TRIAC is used to switch AC current since at every half cycle the AC voltage must change polarity that means the TRIAC will be switch OFF automatically during zero crossing Once the TRIAC is switched off it can only be switched ON again by applying a triggering voltage pulse also known as firing pulse to the Gate again and this process must be repeated every half cycle This is illustrated in the following two figures TAG Triac ie Firing 9 90 deg Zero Zero Crossing Crossing Triac Triac Triac Triac Triac Firing OFF Firing OFF 45 deg 90 deg Figure 18 1 a Figure 18 1 b In Figure 18 1 a the TRIAC is triggered at the phase angle 45 degree whereas in Figure 18 1 b the TRIAC is fired at phase angle 90 degree The TRIAC conducts the AC current immediately upon receiving the firing pulse and will only turn itself OFF at the next zero crossing In the next half cycle the TRIAC needs to be fired again in order to conduct and this process repeats itself indefinitely You can easily see that the TRIAC in Figure 18 1 a is turned ON earlier compared to the TRIAC in Figure 18 1 b This means that when a load such as an incandescent lamp is connected to the TRIA
66. mode to another he she often will be changing the serial connector from one device to another During this time there is no data received by the COMM port which presents an opportunity for it to reset its COMM mode However the surest way to reset the specific COMM mode is to cycle the power to the PLC so that its COMM port will be reset to AUTO mode and ready to communicate with any supported protocols 5 If you wish to use the COMM port for serial data input only you can use the SETPROTOCOL command to set the COMM port to NO PROTOCOL This can prevent the PLC from erroneously 3 CO TRIANGLE 8 Ind RESEARCH 14 6 INTERNATIONAL Chapter 14 Serial Communications treating some serial data as the header of an incoming communication protocol and respond to it automatically The SETPROTOCOL command can also be used to set the PLC to a specific protocol This may be desirable if the COMM port has a specific role and you do not want it to enter other modes by mistake Please refer to the TBASIC Programmers Reference manual for a detailed description of the SETPROTOCOL command Note If you fix a COMM port to a non native non auto mode TRILOGI will not be able to communicate with the PLC anymore You may have to power cycle the PLC to reset the COMM mode If you use the 1st Scan contact to activate the SETPROTOCOL command then you will need to cycle the power to the PLC with DIP switch 4 set to ON to halt the execution
67. nonetheless is very simple to implement and can be used for non time critical applications You only need to execute SETSYSTEM 19 t once and INPUTS n will block for the same t x 10 millisecond every time it is executed until SETSYSTEM 19 t is run again To return the INPUT n to non blocking mode run SETSYSTEM 19 0 PRINT n The PRINT statement transfers its entire argument to a 256 byte serial out buffer which is separate from the serial in buffer The PRINT statement therefore does not affect the content of the serial buffer for incoming characters The operating system handles the actual transfer of each byte of data out of the serial out buffer in a timely manner Again each COMM port has its own independent 256 byte serial out buffer and hence the two serial ports can operate totally independently of each other Note that the PLC automatically enables the RS485 transmit driver when it sends serial characters out of its COMM 2 and 3 ports When the stop bit of the last character in the serial out buffer has been sent out the operating system immediately disables the RS485 driver and enables the receiver This greatly eases the use of the RS485 port since there is no need for a user to bother with the often critical timing of controlling the RS485 driver receiver direction OQUTCOMM This command sends only a single byte out of the serial COMM port without going through the serial out buffer For RS485 port it enables the RS485 t
68. of a COMM port that conflicts with i TRiILOGI In such cases you can turn ON DIP Switch SW1 4 and perform a power on reset for the PLC The PLC will not execute the bad program that causes communication problems and you can then transfer a new program into the PLC to clear up the problem Note that when the PLC has been power reset with DIP Switch 4 set to ON all 3 serial port will boot up with default baud rate and communication format of 38 400 8 n 1 This differs from the T100M PLC 1 9 Real Time Clock Battery The EZWire1616 PLC has a built in battery backed Real Time clock RTC On the EZWire1616 CPU board there is a battery holder that takes a single CR1632 lithium primary battery Due to certain international aviation safety restrictions on shipping of products that contain lithium cells by airfreight or air courier your PLC may or may not be supplied with the battery If the battery is not included you can purchase the battery from a local electronics component supplier such as www futureelectronics com for US or Canadian users and simply press it into the battery holder The PLC s RTC consumes about during power down A Ranata CR1632 lithium battery has a charge capacity of 125 mAh This means that theoretically the battery should be able to supply the RTC for 125 1000 hours or about 5200 days gt 10 years Since this Lithium battery has a shelf life of 10 years providing for a safety factor of 2 would mean th
69. of system variable as shown in the following table Variable 06 7 System type Variable Not a system variable in ctrPV 0 TBASIC but readable Command Format PR vis in fn jie ie o Ne type Index type 01 to 0D denotes the type of system variable to access index 01 to 1F index into the array starting from 01 Response Format R 1 5 16 167 16 e 4 Hexadecimal Digit for 16 bit integer Example To read the value of DATE 2 which represents the month of the RTC send command RVS0902 and if the PLC responds with Rvs0005 it means the month is May 16 20 Read Variable High Speed Counter HSCPV Command Format oe Wee ee toe Channel 1 or 2 Response Format PR v H 16 16 16 ie 16 16 16 te 8 Hexadecimal Digit for 32 bit integer E g To read the value of HSCPV 2 send hostlink command RVH2 If variable HSCPV 2 contains the value 123456 1E240i the PLC will send the response string as RVHO001E240 Ten Resear 16 9 INTERNATIONAL j Chapter 17 IR Remote Control 16 21 Write Inputs Command Format Winter oe enee Channel Data 00 to OF Response Format 16 22 Write Outputs Command Format pwtotn yn fie ie KT Channel Data 00 to OF Response Format E g 16 23 Write Relays Command Format
70. of the SETPROTOCOL command Also remember that when the PLC is reset this way its COMM1 will power up at default format of 38 400 8 n 1 only so you will need to configure TLServer s serial port to 38 400bps to communicate with it 14 7 Accessing the COMM Ports from within TBASIC Besides responding automatically to specific communication protocols described in section 14 5 all three serial ports COMM 1 2 and 3 are fully accessible by the user program using the TBASIC commands INPUT INCOMM PRINT and OUTCOMM It is necessary to understand how these commands interact with the operating system as follow When a COMM port receives serial data the operating system of the EZWire1616 automatically stores them into a 256 bytes circular buffer so that user programs can retrieve them later The serial data are buffered even if they are incoming commands of one of the supported protocols described in section 14 5 In addition processing of a recognized protocol command does not remove the characters from the serial buffer queue so these data are still visible to the user s program Each COMM port has its own separate 256 byte serial in buffer As long as the user program retrieves the data before the 256 byte buffer is filled up no data will be lost If more than 256 bytes have been stored the buffer wraps around and the oldest data is overwritten first and so on The following describes how INCOMM and INPUT PRINT and OUTCOMM functions
71. peripherals such as a serial LCD message display unit e g MDS100 BW external analog modules e g l 7018 touch panel HMI or for inter communication between PLCs Up to 255 RS232 RS485 peripheral devices may be linked together in an RS485 network on COMMS The RS485 port is available on 2 way screw terminals between the RS232 COMM1 and COMM2 ports please refer to Chapter 1 Installation Guide For successful communication with the RS485 port you need to correctly connect the and terminals to the RS485 equipment using a twisted pair cable If you are using the PC as the network host you will need an RS232C to RS485 converter such as the Auto485 or USB to RS485 converter such as the U 485 The following describes some possible uses of the RS485 port 14 4 1 PROGRAMMING AND MONITORING The EZWire1616 can be programmed via its RS485 port on a one to one or multi drop manner Since most PCs only have RS232 port s or USB ports for which USB to RS232 and USB RS485 converters are readily available you need to purchase an RS232 to RS485 or USB RS485 converter in order to program the PLC via its COMMS port The most commonly available types of RS485 converters today use the RTS signal to control the RS485 transmitter direction which is supported by the TLServer software However we strongly recommend an auto turnaround type of converter such as the Auto485 adapter configured in Auto mode for use with Windows pr
72. response string is correct Pros and Cons This method does not incur any hardware cost but it requires careful programming and strict checking of the response string and hence requires more effort to program It is also the least desirable if the network traffic is moderately high as many collisions will occur and there is danger of some undetected error being allowed to pass through D TRIANGLE 1 5 8 Ind RESEARCH INTERNATIONAL Chapter 15 Host Link Communication Protocol 15 5 4 2 Token Awarding Scheme A token is a software means of telling a PLC that it has been given the right to temporarily act as the master An EZWire PLC or a host PC can serve as the token master An internal relay bit or a variable of the PLC can be defined as the token The token master will begin by giving the token i e by setting the token relay bit to 1 or the token variable to some fixed value to the first PLC on the list The PLC that has the token can then send host link commands to other PLCs When it has finished the job it can then send a command to the token master to relinquish its token If it is based on a fixed timing scheme the master can assume that the PLC will complete its job after a fixed time say 0 1 seconds and turn off its corresponding token relay bit The token master then passes the token to the next PLC on the list and so on until the last PLC has relinquished its token and the token is passed back to
73. s 3 level terminal block The EZWire1616 PLC also supplies a 24V sensor actuator supply output for each digital I O point along the middle level and a digital ground OV for each digital I O point along the bottom level as shown below Although wires may be connected directly to the screw terminal insulated crimp ferrules should be used to provide a good end termination to multi stranded wires Use of ferrules reduces the possibility of stray wire strands short circuiting adjacent terminals and their use is therefore highly recommended 1 3 Power Supply The EZWire1616 PLC requires a single regulated 12 to 24V 5 ripple DC power supply for the CPU The CPU typically consumes less than 250mA so most of the current budget calculation should be allocated to driving the output load It is recommended that whenever possible use a higher voltage Th v TRIANGLE 7 ire RESEARCH INTERNATIONAL Chapter 1 Installation Guide power supply since the voltage difference between ON and OFF state is wider for operation at higher voltage If the actuator loads require higher current Such as driving stepper motors then it is recommended that a separate power supply be used for the output load Note that if you choose to use two separate power supplies their OV terminals should be tied together to provide a common ground reference for the two power supplies The two power supplies are also recommended to be of the same output voltage
74. screen where the Start Menu is accessed below left screenshot 4 E gt Control Panel Programs and Features Mobility Center Power Options Adjust your computer s settings Event Viewer SEN ech System and Security Device Manager wa Review your computer s status Disk Management Save backup copies of your files with File History Computer Manag Find and fix problems Command Prompt G _ Network and Internet Command Prompt Admin D View network status and tasks s Choose homegroup and sharing options Task Manager S J Hardware and Sound S View devices and printers File Explorer Add a device Search Adjust commonly used mobility settings am 5 Programs Desktop 1 Uninstall a program TRI RESEARCH 2 14 INTERNATIONAL Chapter 2 Ethernet Port 2 Open View Network Status and Tasks Window Next you need to click on the View network status and tasks link under the Network and Internet category above right screenshot which will bring up the Network and Sharing Center window below screenshot e ff 30 Network and Internet Network and Sharing Center Co Sei View your basic network information and set up connections Control Panel Home View your active networks Change adapter settings Change advanced sharing canadatri 2 settings Private network Access type Int HomeGroup Joi Connections Ett 3 Click on the Change Adapter Settings Link This will bring up the Network Conne
75. shown above can be read from and written to just like any other integer variable The data for these registers are in integer format DATE 1 may contain four digits e g 1998 2003 etc DATE 4 1 for Monday 2 for Tuesday 7 for Sunday 12 3 RTC Error Status On Ladder Logic There is a special bit available in TRILOGI that allows you to notify the PLC program if the RTC Error event occurs and the RTC Error status light is turned on The RTC Error event occurs if the RTC is corrupted or damaged see section 12 8 for more detail or if the battery is not installed The special bit is called RTC Err and can be obtained from the Special Bits I O Table The RTC Err contact can be used Ti Bees 12 INTERNATIONAL Chapter 12 Real Time Clock to activate an alarm of some kind The following ladder logic circuit is an example of this using the RTC Err bit as an input that controls an output called RTC_Alarm RTE EI RTC_Alarm OUT In the circuit above RTC Err is a special bit that cannot be renamed in your program The output RTC_Alarm is a user defined output that could be named to anything If the RTC Error event occurs for any reason the HTC Err bit would activate the RTC_Alarm output 12 4 Setting the RTC Using TRILOGI Software The RTC date and time can be easily set within TRILOGI by selecting Set PLC s Real Time Clock from the Controller menu A
76. string d Ggs TRIANGLE 15 3 Ind RESEARCH INTERNATIONAL Chapter 15 Host Link Communication Protocol 15 4 2 Calculation of FCS The FCS is 8 bit data represented by two ASCII characters 00 to FF It is a result of performing an Exclusive OR on each character in the frame sequentially starting from in the device number to the last character in the data An example is as follows Device ID Header Data FCS 0100 0000 XOR 0 0011 0000 XOR 4 0011 0100 XOR R 0101 0010 XOR V 0101 0110 XOR 0100 1001 XOR A 0100 0001 0100 1000 48 Value 4846 is then converted to ASCII characters 4 0011 0100 and 8 0011 1000 and placed in the FCS field FCS calculation program example The following C function will compute and return the FCS for the string passed to it unsigned char compute_FCS unsigned char string unsigned char result result stringt first byte of string while string result stringt XOR operation return result A Visual Basic routine for FCS computation is included in the source code of a sample communication program you can download from http www tri plc com applications VBsample htm VB6sample 15 4 3 Communication Procedure Unlike the point to point communication protocol the host computer must NOT send the CTRL E character before sending the command frame After the host computer has sent out the multi point host link command fra
77. switch to be mapped to the 0x space then you can use MODBUS register space 1 0258 and 0 0258 for the output 2 mapping with identical result Ti Bass 2 22 INTERNATIONAL Chapter 2 Ethernet Port Table 2 5 1 Memory Mapping of F series CPU Internal Data to MODBUS Regisiter MODBUS Holding UO Register Mapping Modicon convention MODBUS Bit Addr Mapping EZWire161 6 PLC Timer on O 0033 1 to 40033 16 13 to 528 0034 1 to 40034 16 29 to 544 0035 1 to 40035 16 45 to 560 49 to 64 0036 1 to 40036 16 61 to 576 A 17 to 32 40050 1 to 40050 16 33 to 48 40051 1 to 40051 16 49 to 64 40052 1 to 40052 16 17 to 832 Relay on 1024 n 0065 1 to 40065 16 0066 1 to 40066 16 0067 1 to 40067 16 0069 1 to 40069 16 Counter n 40049 1 to 40049 16 0070 1 to 40070 16 0071 1 to 40071 16 0072 1 to 40072 16 0073 1 to 40073 16 0074 1 to 40074 16 161 to 176 0075 1 to 40075 16 1185 to 1200 177 t0192 400761 to 40076 16 193 to 208 40077 1 to 40077 16 209t0224 40078 1 to 40078 16 C 497 to 512 40097 1 to 40097 16 1521 to 1536 TRIANGLE RESEARCH 2 23 INTERNATIONAL d IR j Chapter 2 Ethernet Port PLC Modicon convention Binary address Timer 1 to 64 40129 to 40192 _ to 191 Present Values Counter 1 to 64 40257 to 40320 WE to 319 Present Values TIME 1 TIME 2 TIME 3 DATE DATE DATE DATE 4 Data Memory DM 1 DM 2 DM 4000 Floating point Array FP 1
78. switching How to Set Up Your PC Before you can communicate with the PLC you will need to configure the Ethernet port on your PC to match the settings that you configured in the PLC For more information on configuring the PLC Ethernet settings see section 2 1 Configuring The Ethernet Port Once you have configured your PLC s Ethernet settings you will need to set your PCs Ethernet port to have a static IP address that is on the same subnet as the IP address you had set for your PLC How you do this is a bit different depending on your operating system so the following sections will show step by step instructions for configuring your PCs Ethernet settings on Windows XP and then on Windows Vista Windows XP Ethernet Configuration 1 Open Network Connections The first thing you will need to do is open the Network Connections window from the Start menu by selecting Show all connections from the Connect To menu as shown here g HyperTerminal GJ My Documents ve My Pictures Internet 5 eae Gi My Music a E mail a Outlook E 43 My Computer ae My Network Places pe Calculator gt ei Control Panel Set Program Access and Defaults a Connect To Help and Support pP Search SCH Run KD wireless Network Connection All Programs gt Log Off g Turn Off Computer Figure 2 8 1 2 Local Area Network Properties Next the Network Connections window should open
79. the EZWire1616 s operating system to perform a number of network related functions client connection via the Ethernet port These commands allow the PLC to connect remotely to another PLC in another building or another part of the world via the Internet This allows peer to peer networking or so called M2M machine to machine communication to take place between the PLCs Notes 1 In the case of the TLServer the PLC typically communicates with these external hardware or software servers via its COMM1 serial port and thus TBASIC statements and functions such as PRINT 1 INPUT 1 and NETCMD 1 are used since the NS commands are sent through the serial port 1 2 Since the Ethernet is already built in on the EZWire1616 you do not need to send NS commands via any of its serial ports this also means that no serial port is sacrificed in order to have access to Ethernet communication However to help users of the XServer and TLServer migrate easily to the EZWire1616 Ethernet port we implement the NS commands using similar command format as that on the XServer and TLServer But instead of sending the commands through COMM1 you will interact with the O S through COMM port 4 Of course since the EZWire1616 doesn t have 4 serial ports COMM port 4 is therefore only a virtual comm port and its creation is merely to simplify implementation of the NS commands 3 The TestEthernet pc6 download from http Awww tri plc c
80. the company s security policy Most corporate LANs would not allow incoming packets from reaching an internal server until the System Administrator has given the permission to do so Some company s network may not even allow devices such as the PLC to open a connection to the Internet to access external data If your application requires the PLC to access the Internet or to be accessible from the Internet then you would need to consult your system administrator on the required procedure TR RESEARCH 2 32 INTERNATIONAL Chapter 2 Ethernet Port 2 9 Installing a Control Web Page Into the EZWire PLC The EZWire PLC web server space can host up to 1 7M bytes of data files which can be HTML JPG JS javascript files etc Thanks to its support of the web services commands a programmer can create its own sophisticated control webpages using only standard HTML and Javascript TRi has created an example control webpage which can be downloaded from http www tri plc com download webapp webapp02 zip When you have successfully unzipped all the files from the Webapp02 zip into your hard disk you will need to transfer the files to the PLC s web server using a FTP client program The following sections describe how to use the free FileZilla FTP program to transfer these files and section 2 10 will describe how to customize the control web pages NOTE The M JS JavaScript file used with the new preloaded 0 HTM file is no long
81. the first PLC on the list again This way at any one time there will only be one active network master the one with the token and hence there is no danger of conflicting signals or garbled messages to handle Pros and Cons This method also does not incur any hardware cost but it requires the programmer to draw up a plan on what internal relay or variable to use as the token and how the PLC can relinquish its token to the token master It could be by fixed timing or by returning a message to relinquish the token It is a challenging job for programmers unfamiliar with networking schemes but with some experimentation it can be achieved readily 15 5 4 3 Rotating Master Signal In this scheme we make use of the digital inputs of the Fx PLCs to grant the PLC the right to act as the network master Lets call this input the Be the Master input We can use a low cost H series PLC running a sequencer to activate the Be the Master input line of each PLC one at a time Each PLC is given a fixed amount of time to be the master e g 0 15 each Only when the Be the Master input is ON can the EZWire PLC start sending out host link commands to other PLCs So at any one time there will only be one master on the network and no conflict will occur as a result Pros and Cons This method is the easiest to program since there is no need to handle the token with the token master or perform extensive error check on the response string However thi
82. the screwdriver can be lowered and removed from the actuation hole The wire is now securely held in place with an excellent electrical contact Each of these steps are illustrated below Push screwdriver in to engage spring lever Figure 1 3 Terminal Wiring Step 1 Tr v TRIANGLE 1 4 ire RESEARCH INTERNATIONAL Chapter 1 Installation Guide Push screwdriver up to open wire terminal Figure 1 4 Terminal Wiring Step 2 Insert Wire Figure 1 4 Terminal Wiring Step 3 Th v TRIANGLE 1 5 17 RESEARCH INTERNATIONAL Chapter 1 Installation Guide Remove Screwdriver Figure 1 4 Terminal Wiring Step 4 1 2 2 Analog I O Ports The 8 channels of analog inputs and 4 separate channels of analog outputs are available along the top level of the PLC s 3 level terminal block The EZWire1616 PLC also supplies a 5V analog reference voltage output for each analog input point and a 24V supply for each analog output point along the middle level and an analog ground OV for each analog I O point along the bottom level as shown below e Sunne on Figure 1 5 1 6 INTERNATIONAL V TRIANGLE 17 RESEARCH Chapter 1 Installation Guide The specifications and programming methods for the analog I Os are detailed in Chapter 5 of this manual 1 2 3 Digital I O Ports The 16 channels of digital inputs and 16 separate channels of digital outputs are available along the top level of PLC
83. to set D A n to a 12 bit value x x 0 to 4095 EZWire PLC 0 20mA PLC Output DAC 0 20mA 2 ov COM Control Device 0 5VDC Analog Input Figure 5 10 EZWire PLC 0 20mA PLC Output DAC 0 20mA 2 ov COM 5 4 2 Programming The Analog Output You can use the TBASIC command SETDAC n x You only need to execute the SETDAC statement once and the D A output will be set to a current 5 11 proportional to the given set value E g SETDAC 1 1000 The D A 1 will output 1000 4096 20mA 4 88mA TRIANGLE RESEARCH INTERNATIONAL TR Chapter5 Analog I Os 5 5 Calibration of ADC and DAC amp Moving Average Definition The ADC and DAC are factory calibrated such that a voltage of 2 500V should return a value of 2048 when read by the ADC n function Likewise an output current of 10 00mA should be present at the DAC pin when you SETDAC to 2048 However if there is a need to re calibrate the ADC and DAC you can follow the procedure outlined below To perform calibration of an ADC channel you need to supply a precise DC reference voltage to the ADC channel and then check the analog readings obtained via the ADC n function and compare it to the expected value If there is an error you can apply a correction factor to it To perform the ADC or DAC calibration you would need to use the F Series Ethernet Configuration software mentioned in Chapter
84. to suspend whatever it is doing as soon as it can and start servicing the interrupt Hence the CPU responds much faster to an interrupt input In addition interrupts are edge triggered meaning that the interrupt condition occurs when the input either changes from ON to OFF or from OFF to ON Consequently the input logic state need not persist for longer than the logic scan time for it to be recognized by the CPU The EZWire1616 PLC supports up to 10 interrupt inputs Any one or all of digital inputs 1 to 6 and 9 to 12 can be defined as interrupt inputs using the INTRDEF statement The Interrupt inputs may also be defined as either rising edge triggered input goes from OFF to ON or falling edge triggered input goes from ON to OFF When the defined edges occur the defined CusFn will be immediately executed irrespective of the current state of execution of the ladder program A simple interrupt test function is as follow FE TRILOGI Version 6 14 D TESTINTRDEF PC6 Lea ll tzend File Edit Controller Simulate Circuit Help Circuit 1 QAQA quick tags 1st Scan dCusF ES Custom Function 1 fnINTRDEF INTRDEF ERR Define input 9 as interrupt and Custom Fn 10 to service it Custom Function 10 A Atl Variable A will be incremented on every rising edge sensed on Input 9 Note Since inputs 1 to 6 can also be used as other special inputs such as High
85. to the list by clicking Add program and searching for FileZilla in its installation directory Here is a picture of the Windows Firewall status window and the Change settings window with the Exceptions tab INTERNATIONAL OH TRIANGLE R RESEARCH 2 35 Chapter 2 Ethernet Port x SW Windows Firewall Settings 5 General Exceptions Advanced Windows Firewall 5 3 5 sad Exceptions control how programs communicate through Windows Firewall Add a Windows Firewall can help prevent hackers or malicious software from gaining access to program or part exception to allow communications through the firewall ogram through your computer through the Internet or network Firewall Windows Firewall is currently using settings For the public network location What are the risks of unblocking a program gi Windows Firewall is helping to protect your computer To enable an exception select its check box Program or port OBITS Peercaching Inbound connections that do not have an exception are blocked M Bonjour No Clou Network Access Core Networking O Distributed Transaction Coordinator What are network locations File and Printer Sharing Filezilla FTP Server Diiscsi Service iTunes Okey Management Service ONetlogon Service ist D eee en D Windows Firewall is on Change settings ma Display a notification when a program is blocked Network location Public networ
86. twisted pair cables Since the Fx PLCs are fitted with a 1 8 power RS485 driver such as the 75HVD3082 up to 256 devices can be connected together The twisted pair cable goes from node to node in a daisy chain fashion and should be terminated by a 120 ohm resistor as shown below o 5V Terminating resistor FMD FX1616 Nano10 RS 485 or RS485 RS485 RS485 FX PLC Figure 15 2 Note that the two wires are not interchangeable so they must be wired the same way to each controller The maximum wire length should not be more than 1200 meters 4000 feet RS 485 uses balanced or differential drivers and receivers which means that the logic state of the transmitted signal depends on the differential voltage between the two wires and not on the voltage with respect to a common ground As there will be times when no transmitters are active which leaves the wires in floating state it is good practice to ensure that the RS 485 receivers will indicate to the CPUs that there is no data to receive In order to do this we should hold the twisted pair in the logic 1 state by applying a differential bias to the lines using a pair of 560Q to 1KQ biasing resistors connected to a 9V at least 5V and OV supply as shown in Figure 15 2 Otherwise random noise on the pair could be falsely interpreted as data The two biasing resistors are necessary to ensure robust data communication in actual applications Some RS485 converters may already have biasin
87. use an external stepper motor driver and use the PLC to send direction and output pulses to the stepper motor driver When configured as a Stepper Motor Controller the PLC would generate the required number of pulses and sets the direction signal according to the defined acceleration and maximum pulsing rate specified by STEPSPEED and STEPMOVE commands The pulse and direction outputs are not meant to be connected directly to the stepper motor Instead you will need a stepper motor driver which you can buy from the motor vendor Depending on the power output the number of phases of the stepper motor and whether you need micro stepping the driver can vary in size and cost Most stepper motor drivers have opto isolated inputs which accept a direction signal and stepping pulse signal from the Stepper Motor Controller In this case the EZWire1616 is the Stepper Motor Controller which will supply the required pulse and direction select signals to the driver Note that the digital outputs 5 9 and 13 automatically become the direction select signals for the Stepper controller channels 1 2 and 3 respectively when the stepper controllers are being used Tai aes 10 3 INTERNATIONAL Chapter 10 Stepper Motor Control The direction pin is turned ON when the motor moves in the negative direction and turned OFF when the stepper motor moves in the positive direction The STEPMOVEABS command makes it extremely simp
88. will be used Secunty settings Rules for welcome messages Miscellaneous Please enter only 75 characters per line additional characters will be removed Admin Interface sett Empty lines at the top or bottom of the message will be removed Logging Custom welcome message GSS Settings Speed Limits Filetransfer compres SSL TLS settings Autoban K vl Format specifiers kv Displays version of FileZilla Server C Hide welcome message in log XY the character 6 Click Edit lt Users in order to setup a user name and password for your test The ExtendedFileSystem PC6 program uses a username PLC and password 1234 so fora quick test you may like to setup the same username and password 7 At the General page of the setup screen click Add button at the Users pane to add a username PLC Since no group has been defined simply leave the default as lt none gt in the second text box as shown in the following diagram Add user account Please enter the name of the user account that should be added PLC User should be member of the following group 8 Next click Shared folders page and you must setup a folder that is to be used to receive uploaded file Click Add at the Directories pane to add the folder You can choose any folder on your PC to be used for the FTP upload and you just have to remember the location so that you can look for the u
89. window will pop up with default values entered as shown below in Figure 12 1 All of these values can be edited and then written to the PLC by clicking on Set PLC s Clock KE Set Target PLC s Real Time Clock Month Day Year 1 7day fo fz28 2008 D n fe 2 Hour Mi n Sec Set PLC s Clack Cancel Figure 12 1 Set Real Time Clock 12 5 Setting the RTC Using TBASIC The PLCs RTC can be set from TBASIC using the DATE and TIME registers shown in section 12 2 Figure 12 2 Set Date amp Time in TBASIC shown below is an example of a custom function where the date is set to October 17 2008 the day of the week is Wednesday and the time is 14 30 01 2 30 01 pm K Custom Function 1 SET_RTC Year Month Day Day of Week 1 Hour Minute 1 Second Figure 12 2 Set Date amp Time in TBASIC TR RESEARCH 12 2 INTERNATIONAL Chapter 12 Real Time Clock 12 6 Setting the RTC from Internet Time Server Please refer to Section 2 6 for more detailed information on how your PLC may be able to automatically set its own real time clock using the timeserver data available on the Internet A sample program is also included in that section 12 7 Setting up an Alarm Event in TBASIC Since to the TBASIC program the RTC data are simply integer arrays DATE 1 to DATE 4 and TIME 1 to TIME 3 they are fully accessible at any time by your PLC program Therefore if you want your program to execute a certai
90. with the Modbus TCP server is established the CPU will return the response string lt CONNECTED gt to the users program which can Ti aes 2 26 INTERNATIONAL Chapter 2 Ethernet Port read it using the INPUT 4 function The STATUS 3 function can also be used to determine if the connection is successful and alive When the program gets the confirmed connection it can then use any one of the four TBASIC commands READMODBUS WRITEMODBUS READMB2 WRITEMB2 to read or write data to the remote devices via the virtual comm port 4 as if a Modbus slave device has been locally connected to a COMM4 port of this PLC You do not need to distinguish between Modbus ASCII and RTU in this case simply use comm port 4 in your all your commands Multiple Modbus master commands can be sent as long as the connection is live You can test the connection status by checking the result of the STATUS 8 function at any time Once all the command exchanges have been completed you should send a lt gt tag to close the client connection to the remote server so that other NS commands can be executed in other parts of the program Please refer to the fnMBTCP fnRdMBTCP and fnWrtMBTCP custom functions in the demo program TestEthernet PC6 2 2 Example TRIANGLE RESEARCH INTERNATIONAL TR Chapter 2 Ethernet Port 2 6 Getting data from Internet Connecting to The Internet Time Server
91. you need to define the PLC type You can choose the MODBUS ASCII MODBUS RTU or OMRON C20H Once a graphical object has been created you will need to edit its connection and at this point you will be presented with a selection table that corresponds to the memory map of that PLC type Example 1 To connect an indicator lamp to Input 9 of the PLC You will need to program the switch to connect to IR00 8 for the OMRON protocol However If you have defined the PLC as MODBUS type then this indicator lamp should be connected to bit address 1 0265 In either case there is no need to learn about the actual command format of the protocol itself as the SCADA software will automatically generate the required commands to access the input address that has been chosen for the object Example 2 To display readings from ADC 3 as a bar graph on SCADA Since the data from ADC 8 is not directly mapped to MODBUS or OMRON in Table 14 1 you need to add a statement in the custom function that reads ADC 3 and copies it into a data memory e g DM 100 ADC 3 Now you can program the bar graph on the SCADA screen to be connected to DM 100 if you use the OMRON protocol For the MODBUS protocol the object should be connected to the address 4 1100 i Tri es 14 13 INTERNATIONAL Chapter 14 Serial Communications 14 9 Using The PLC As a Modbus Master The EZWire1616 support for the MODBUS protocol goes beyond being a MODBUS slave only You
92. 0 3277 0 985658 Multiplication factor required to correct this error 1 0 985658 1 0146 1 146 10000 gt X 146 RESEARCH INTERNATIONAL TR TRIANGLE 5 12 Chapter 5 Analog I Os To compensate for this error enter a value of 146 in the ADC Calib for Ch 8 and save it to the PLC After the PLC has rebooted the CPU would apply the multiplication factor of 1 0146 to the readings it received which would correct the reading to 3230 x 1 0146 3277 Notes 1 We have created an MS Excel spreadsheet file AnalogCalibration xls to facilitate the computations of the correction factor X used in the ADC and DAC Calibration This file can be downloaded from the following web page http www tri plc com appnotes F series AnalogCalibration xls 2 Changes to the ADC calibration data only take effect after the PLC has been cold booted You can either power cycle the PLC or simply check the Reboot PLC After Save checkbox and the PLC will re boot after you have transferred the parameters to it 5 5 2 ADC Zero Offset ADC n value 4095 4094 4093 3 Zero 1 Offset 0 Input Voltage 5 00 Figure 5 12 The zero offset error can be corrected by entering a value into the ADC Zero Offset field Any number between 100 and 100 can be entered here The ADC n function would add the zero offset value that you entered here to the measured value and return
93. 14 1 Note that input and output bits are always mapped according to Table 14 1 whether it is MODBUS function 01 02 or 05 However 32 bit variables and string variables are not mapped since they are fundamentally quite different in their implementation among different PLCs Internal variables that are not mapped can be still be accessed by copying the contents of these variables to unused data memory DM n this can be easily accomplished within a CusFn so that they can be accessed by these third party protocols 14 8 1 MODBUS ASCII Protocol Support The EZWire1616 support MODBUS ASCII protocols with the following command and response format START LRC Check CRLF chars 2chars oe 2chars Zones The following Function Codes are supported 06 Lroset Single WordRegister 5 Preset Multiple Word Registers The exact command response format of the MODBUS protocol can be found at http Awww modbus org However if your only purpose is to interface the PLC to other MODBUS hosts such as an LCD touch panel or SCADA software then there is no need to know the underlying protocol command format All you need to know is which PLC s system Variable is mapped to which MODBUS register as shown in Table 12 1 3 TR RESEARCH 14 9 INTERNATIONAL Chapter 14 Serial Communications 14 10 Table 14 1 PLC I O amp Variable to Modbus Address Mapping EZWire1 MODBUS Holding Register S 616 VO Modicon Convention MODBU
94. 14 9 14 8 14 9 006060060660606 MODBUS ASCII Protocol Support 14 8 1 14 1 00000 BIT ADDRESS MAPPING 14 8 1 1 nn ene 14 2 00000 WORD ADDRESS MAPPING 14 8 1 2 14 2 MODBUS RTU Protocol Gupport 14 8 2 14 2 0 OMRON Host Link Command Support 14 8 3 Application Example Interfacing to SCADA Software 14 13 14 8 4 14 14 Using The PLC As a Modbus Master 14 9 EZWire1616 PLC As MODBUS RTU Master 14 14 14 9 1 5 Ca TRIANGLE 1 URA RESEARCH Page vii INTERNATIONAL USER MANUAL 14 10 Using Modem to Remotely Program Monitor The PLC 14 15 ai a O A 1 1 110001000100010 14 15 T4102 LE Lulu Le DEE 14 15 15 HOST LINK PROTOCOL INTRODUCTION 15 1 15 1
95. 151515116111 Channel Data Response Format E 7 16 24 Write Timer contacts Command Format kee kee Channel Data 00 to 07 Response Format oa TRIANGLE 16 10 URA RESEARCH LJ Le INTERNATIONAL Chapter 17 IR Remote Control 16 25 Write Counter contacts Command Format KT KT Channel Data 00 to 07 Response Format 16 26 Write Timer Present Value P V Command Format a Timer1 00 New timer PV Timer64 3F Hex Response Format Please note that the timer number starts from 00 which represent timer 1 then 01 represents timer 2 and so on 16 27 Write Timer Set Value S V Command Format Timer1 00 New timer SV Timer64 3F Hex Response Format Note the 2nd character is a lower case m instead of the upper case M of WM command Ca TRIANGLE URA RESEARCH 16 11 LJ 9 INTERNATIONAL Chapter 17 IR Remote Control 16 28 Write Counter Present Value P V Command Format Counter1 00 New PV Counter64 3F Hex Response Format 16 29 Write Counter Set Value S V Command Format Counter1 00 New Counter SV Counter64 3F Hex Response Format Note the 2nd character is a lower case u instead of the upper case U of the WU command 16 30 Write Variable Integers A to Z Command Format A B C Z 8 Hexadecimal Digit for 32 bit integer Response Format
96. 18 5 INTERNATIONAL Chapter 18 Extended File System can start to retrieve ASCII data from the file line by line using the INPUT 8 command A line is either a string that is terminated with a Carriage Return character ASCII 13 or is a 70 character long string which is the maximum length of any string variables A to Z without carriage return In either case the return string does not contain the CR character itself The PLC can check if a file has been successfully opened for reading using the STATUS 2 function AFTER executing the PRINT 8 lt READ gt command STATUS 2 will only return a 1 if a file has been successfully opened The PLC can determine if the End of File EOF has been reached using the STATUS 2 function after every INPUT 8 command has been executed STATUS 2 returns a 255 if the EOF has been reached The PLC should then close the file by executing the PRINT 8 lt gt command A lt READ Z STRS F 3 txt gt S STATUS 2 IF S lt gt 0 SETLCD 1 1 Failed to Open File GOTO 100 ENDIF c 0 PRINT 8 AS SETLCD 1 1 5 WHILE 1 AS INPUTS 8 S STATUS 2 IF S 255 EXIT ENDIF S 255 means EOF SETLCD 25 DELAY 50 So that reader can read from the screen C Ctl ENDWHILE SETLCD 1 1 Read STRS C lines 100 PRINT 8 lt gt close the opened file Ti Bees 18 6 INTERNATIONAL Chapter 18 Extended File System 18 5 Setting Up The Fi
97. 2 212 2 2 2 2 2 2 2 2 12 1 1 1 1 14 1 COMM1 852320 Port with Female DBO Connector 14 2 14 2 COMM2 852320 Port with Male DBO Connechor 143 14 3 COMMS Two wire 85485 Port 14 4 14 3 0 PROGRAMMING AND MONITORING 14 4 1 14 4 Accessing 3 Party RS485 based Devices 14 4 2 14 4 Interfacing Other Devices to Modbus Host or to the Internet 14 4 3 aeaii EER EEEE EARE RAEAN 14 4 Distributed ere ri te 14 4 4 Changing Baud Rate and Communication Formats Use of the SETBAUD Statement 14 4 14 5 14 6 Support of Multiple Communication Protocols 14 6 14 7 Accessing the COMM Ports from within TBASIC 14 7 Using The PLC As a Modbus Omron Slave SCADA HMI Applications
98. 2 using this command send 01WR0256xxxxyyyyff where xxxx and yyyy are the hex values to be written to CtrPV 1 amp 2 16 48 3 Read Data Memory DM 1 to DM 4000 Command Format 21 5 1551 5 oe ee SS NT Device ID Header DM Address Dec DM count Hex L FCS Response Format be Ne Device ID Header Status 17 Data Hex 00 OK 16 Fre Fe Last data FCS E g To read DM 112 to 130 19 words send 01RD0112001357 The PLC will send return a response O01RDOOxxxxyyyy222Zz 16 48 4 WRITE Data Memory DM 1 to DM 4000 Command Format f t aja jwiotn n n n 16 16 16 16 i Device ID Header DM Start Addr Dec 1t data 16 ee Last data FCS TS TRIANGLE 8 URA RESEARCH 16 21 INTERNATIONAL Chapter 17 IR Remote Control Response Format f ata wi o s strffyr o Fer Fer Fer Device ID Header Status FCS 00 OK E g To Write to DM 1200 to 1201 using this command send 01WD1200xxxxyyyyff where xxxx and yyyy are the values to be written to DM 1200 amp DM 1201 16 49 Testing of Host Link Commands You can try out all the Host Link commands using TLServer s Serial Communication Setup However TLServer is designed to accept only multi point protocol commands except the IR command which is necessary to obtain the device ID from the PLC You therefore
99. 21 10 OupP What are the risks of opening a port TR RESEARCH 18 19 INTERNATIONAL Chapter 21 Using PLC As a Modbus TCP Gateway Chapter 19 PLC As A Modbus TCP Gateway TRIANGLE RESEARCH INTERNATIONAL oO DA Chapter 19 Using PLC As A Modbus TCP Gateway 19 USING PLC AS A MODBUS TCP GATEWAY 19 1 Introduction An EZWire PLC can be configured to act as the MODBUS TCP GATEWAY for other Modbus serial devices while continue to function as a Super PLC A Modbus TCP gateway essentially translates a Modbus TCP command packet it receives from its Ethernet port into a Modbus RTU serial command and sends it out of its serial port RS232 or RS485 If the Modbus RTU slave sends back a serial response the gateway will in turn translate the RTU response data back to Modbus TCP response packet and return to the client via the Ethernet port As such the Modbus TCP gateway enables any non Ethernet equipped both TRi or 3rd party serial Modbus slave device to be directly accessible by a Modbus TCP client via the Ethernet or the Internet In addition the user PLC program does not need to handle the gateway function at all as the CPU performs the translation functions automatically and transparently to the PLC s program Best of all while acting as a gateway the PLC program can simultaneously act as a Modbus masier PLC and read write to any registers inside any of the attached Modbus RTU slave The C
100. 300 seconds using the FileZilla s Edit gt Settings menu item so that it will not time out automatically too quickly You should always select disconnect after a file transfer to properly close the connection and then the PLC will be properly disconnected and is ready to accept new connection Problem Using FileZilla To Transfer Files to Multiple PLCs Configured To The Same Default IP Address Even Though Only One PLC Is Connected To The Router At A Time When you connect FileZilla to a PLC with a particular IP address e g 192 168 1 5 for the first time Windows will memorize the MAC ID address of that PLC and associate it with this IP address in its ARP cache ARP Address Resolution Protocol So when you power off one PLC and immediately plug another PLC with the same IP address to the network then Windows will pass to FileZilla the MACID of the PREVIOUS PLC instead of the new PLC using data in its ARP cache memory When FileZilla tries to connect to the right IP address but a wrong MACID it of course would not be able to connect properly In such a scenario you must clear the Windows ARP cache first using a command prompt as follow e Command Prompt Microsoft Windows XP Version 5 1 2606 lt C Copyright 1985 2661 Microsoft Corp C Documents and Settings Owner gt arp d C Documents and Settings Owner gt _ The arp d command tells windows to delete its ARP cache data So when you use FileZilla to connect t
101. 45001 amp 45002 5000 amp 5001 FP 2 45003 amp 45004 5002 amp 5003 Note available only on Fx model FP 501 46001 amp 46002 6000 amp 6001 FP 1000 46999 amp 47000 6998 amp 6999 2 5 1 2 Word Address Mapping As shown in Table 2 5 1 to access the PLC s DM 1 you use MODBUS address space 4 1001 Modicon use 1000 for binary addressing and so on To access the Real Time Clock Hour data TIME 1 use 4 0513 The I O channels can also be read or written as 16 bit words by using the addresses from 4 0001 to 4 0320 Some MODBUS drivers such as National Instruments Lookout software even allow you to manipulate individual bits within a 16 bit word So it is also possible to map individual I O bits to the 4x address space E g Input bit 1 can be mapped to 4 0001 1 and output bit 2 is mapped to 4 0257 2 etc This is how it is shown in Table 2 5 1 However if you do not need to manipulate the individual bit then you simply use the address 4 0001 to access the system variable INPUT 1 and address 4 0257 to access the system variable OUTPUT 1 Note that INPUT 1 and OUTPUT 1 are TBASIC system variables and they each contain 16 bits that reflect the on off status of the actual physical input and output bits 1 to 16 2 5 2 MODBUS TCP Access Security If a EZWire1616 is to be accessible only on the local area network then the direct connections offered by MODBUS TCP provide simplicity without time consuming lo
102. 50KHz Relevant TBASIC commands SETPWM Unlike in the T100M PLCs which only support 8 fixed frequencies settings the PWM channels in the EZWire1616 PLC can generate pulses with frequency ranging from 1112 all the way to 50KHz At the TR RESEARCH 11 1 INTERNATIONAL Chapter 11 Pulse Width Modulated Outputs lower frequency range the output frequency can be extremely accurate less than 0 01 error Even at 10KHz the output frequency error is less than 0 5 This makes it possible to use the PWM channels to generate square wave pulses of a certain frequency For example in Section 17 4 3 we show you how to use the PWM output to generate the 38KHz carrier wave pulses for sending encoded IR remote commands This enables the PLC to control your home TV DVD player and air conditioner Usually it is better to select as high a frequency as possible because the resulting effect is smoother for higher frequencies However some systems may not respond properly if the PWM frequency is too high in such cases a lower frequency should be selected The TBASIC SETPWM statement controls the frequency and duty cycle settings of the PWM channel The EZWire1616 PLC features four channels of PWM on its digital outputs 5 PWM channel 1 to output 8 PWM channel 4 please see Chapter 6 for the pin assignment Since all four PWM outputs are high voltage high current outputs 24V 4A peak 1A continuous they can be used to directly co
103. 7 IR Remote Control Note EZWire PLC native protocol command set now includes reading and writing of multiple DM and FP that are not available on F2424 F1616 BA FMD and Nano 10 PLCs To maintain backward compatibility with FMD and Nano 10 PLCs that only support read write of single DM there is no FP in these PLCs these OMFRON host link commands may be used to read write multiple DM locations in a single command 16 48 1 Read IR Registers This command refers to Table 14 1 in Chapter 14 to map the PLC s I Os to OMRON IR register space from IRO to IR519 Command Format jafjajR R n njn njce cefecelc y y Device ID Header IR Address Dec IR count Hex ee FCS Response Format y Sr go Device ID Header Status 17 Data Hex 00 OK 15 Bad 16 em Last data FCS E g To read Timer PV 1 to 7 using this command send 01RRO12800074D The PLC will send return a response 01RROOxxxxyyyyzz2zZ 16 48 2 WRITE IR Registers This command refers to Table 14 1 in Chapter 14 to map the PLC s I Os to OMRON IR register space from IROOO to IR519 Command Format f a a w R n natn n 6 16 16 16 yee ee oe Device ID Header IR Start Addr Dec 1 data 16 yu Last data FCS 35 TARS 16 20 INTERNATIONAL Chapter 17 IR Remote Control Response Format Device ID Header Status FCS E g To Write to CtrPV 1 to
104. 740K bytes of file space that can be used for storing up to 435 web page control files More importantly an EZWire PLC can open local data files in this file space and write append data to it The PLC can therefore log a large amount of data into one or more data files which can be retrieved for analysis anytime There are two ways to retrieve the stored data files from the PLC 1 Download the file from the PLC s built in web server The file created by the PLC can be downloaded from the PLC s built in web server using any web browser This allows the user to access the data file at any time of the day 2 Automatic FTP upload from the PLC to an external web server You can program the F series PLC to make a FTP client connection to any web server on the local network or on the Internet Cloud and upload the data file it has created to the web server using any filename Imagine what the EZWire1616 can do with this new uploading capability The ability to log data locally and automatically upload the data to a web server transforms the PLC into a potent data logger The PLC can be programmed to capture daily weekly or monthly data and then periodically upload the data file to an Internet web server with a unique time stamped filename E g temperaturelog2012 01 01 xls This allows the PLC to log data completely unattended The data uploaded by the PLC to the external web server can therefore be viewed or downloaded into a PC using
105. 8 1 can be fabricated economically When the motor turns the sensor will generate a series of pulses The frequency of this pulse train directly measures the rotational speed of the motor RPM Frequency x 60 and can be used to provide precise speed control Note that the above setup can also double as a low cost position feedback encoder when used with the high speed counter since the number of pulses counted can be used to determine the displacement With the EZWire1616 the pulses can be both counted and measured simultaneously on the same input 8 2 2 Measuring Transducer with VCO Outputs Some transducers incorporate a Voltage Controlled Oscillator VCO type of output that represents the measured quantities in terms of varying frequency of the output waveform Such transducers may be used conveniently by the EZWire1616 using the pulse measurement capability However the frequency of such signals should be below the maximum input pulse rate 8 2 3 Measuring Transducer with PWM Outputs Some transducers may output the readings of their measurands the quantity that is being measured in the form of pulse width modulated outputs This means that the transducer would send rectangular pulses with varying duty cycles that are proportional to the measured quantities You can then easily use the PULSEWIDTH and PULSEPERIOD functions to compute the duty cycle of the incoming PWM pulses and readily convert it to the actual units of the measurand
106. 8416 Note The response to WVD command in the Nano 10 FMD and F series was simply WVD without the variable count Ca TRIANGLE 5 URA RESEARCH 16 13 LI Ki INTERNATIONAL Chapter 17 IR Remote Control 16 34 Write Variable Multiple Data Memory DM 1 to DM 4000 Note This new command is available only to Fx PLC Command Format 16 bit Index to array 17 16 bit Integer 2 16 bit Integer to OFAO MOO cl 0001 211151181161161 __ NT last 16 bit integer Response Format wf ev 16 16 t6 je NT Number of DMs written to the PLC 16 35 Write Variable Singe Float Array FP 1 to FP 1000 Note This new command is available only to Fx PLC Command Format 16 bit Index to array 8 hexadecimal digit 0001 to 0358 1000 0 in 32 bit IEEE format Response Format WITT keng Number of FP written to the PLC 1 E g To write the value 6 265599F9 4FBABABABA in IEEE to FP 1000 send hostlink command WVF03E8 4FBABABABA 16 36 Write Variable Multiple Float Array FP 1 to FP 1000 Note This new command is available only to Fx PLC Command Format 16 bit Index to array 1 IEEE float data 2 float Ton Bakes K INTERNATIONAL Chapter 17 IR Remote Control 16 16 16 16 16 16 16 16 last IEEE float data Response Format ke Number of
107. 95 25 38400 06 46 66 86 ce ES 16 56 76 96 D6 57600 07 47 67 87 C7 E7 17 57 77 97 D7 1006 08 48 68 88 C8 Es 18 58 78 98 88 1i5K2_ 09 49 69 89 Co Eg 19 59 79 99 DO E g To set the baud rate of COMMS to 19200 7 data bit 1 stop bit and even parity execute the statement SETBAUD 3 amp HC4 B 0 D E F C1 C2 C3 C4 B 0 E F 41 42 43 44 45 47 72 0 FB FC FD FE FF F1 F2 F3 F4 F5 F6 F7 F8 F9 FA Important Since the three COMM ports are independent they can be set to different formats and baud rates from each other Please note that if you change the baud rate or communication format to something that is different from that set in the TLServer then both the TLServer and TRILOGI will no longer be able to communicate with the PLC via this COMM port You will have to either configure the TLServer s serial port setting using its Serial Communication Setup routine to match the PLC or you can cycle the power to the PLC to reset the COMM port to the default format 38 400 8 n 1 If you had used 1st Scan contact to activate the SETBAUD command than you will need to cycle the power to the PLC with DIP switch 4 set to ON to halt the execution of the SETBAUD command When j 0 a TRIANGLE 14 5 DA RESEARCH INTERNATIONAL Chapter 14 Serial Communications the PLC is reset this way it
108. A al a2 a2 x1 x2 x1 a2 al Note that since x1 x2 a1 and a2 are all constants the actual formula is much simpler then it appears above E g Temperature measurement Temp ADC n 30 200 100 3000 So for any ADC readings A the temperature is X 70 A 200 2800 30 Note To get better resolution you can represent 30 degree as 300 and 100 degree as 1000 so if X 123 it means 12 3 degree 5 3 Temperature Measurement Using Analog Inputs 5 3 1 Thermistor Temperature Sensors A thermistor is a kind of resistor whose resistance decreases when its surrounding temperature increases It is a very low cost and stable device that can be used to measure a wide range of ambient temperature from freezers to hot water boilers which are commonly used in HVAC applications In order to convert the resistance changes into voltage readings to be read by the PLC s analog input you can use it to form an arm of a voltage divider circuit which would present a variable voltage to the analog input when the temperature changes A type of thermistor that measures 10 0K ohm at 25 degree C simply called 10K thermistor is especially suitable for use with the EZWire1616 PLC as illustrated below For ADC 1 to 8 you only need to connect the 10K thermistor directly to the analog input since there is already an internal resistance of 20 00K ohm 0 1 accuracy RESEARCH INTERNATIONAL TR TRIANGLE 5 6 Chapter 5 Analog I Os
109. A z 0220 FileZilla Server version 0 9 48 beta 8 0 d not logged in 192 168 1 168 gt Connected sending USER PLC o 331 Password required for plc PASS 1234 e 31 01 AM not logged in 192 168 1 168 gt 230 Logged on 9 01 AM not logged in 192 168 9 M not logged in 192 168 1 168 gt 220 FileZilla Server not logged in 192 168 1 168 gt gged in 192 168 1 168 logged in 192 168 1 16 011 10 31 09 A t logged in 192 168 1 168 gt PA 3 2011 10 31 09 192 168 1 168 gt 230 Logged on ID Account IP Transfer 000009 plc 192 168 1 168 52 bytes reen 2 Once you get the 230 Logged On message you know that the FTP setup is done correctly Note that the welcome message from the FTP Server shows only one line 220 FileZilla Server Version x xx which is what we have set it up to be You can now disconnect from the FTP server by typing Quit at the command prompt 3 There is one more things you need to do before you proceed to test the FTP upload features of the PLC to avoid connection problem that is to temporarily TURN OFF the Windows Firewall and any Tai es 18 10 INTERNATIONAL Chapter 18 Extended File System software firewall setup by anti virus software during your test You can always re enable your software firewall s after the test if you wish PC operating system are designed to run client program normally instead of acting as a server so Windows F
110. ADMODBUS WRITEMODBUS READMB2 and WRITEMB2 operating on virtual comm port 4 to send MODBUS commands and receive processed responses from a remote MODBUS TCP Server This greatly simplifies your programming task since it is very similar to communicating with a Modbus RTU slave that is connected to the serial port 1 2 or 3 Although in this case the Modbus TCP device could be located in the other hemisphere and connected via the Internet The full syntax for the lt MBTCPCONNECTS tag is described below Format lt MBTCPCONNECT IP address 502 of another Modbus TCP Server gt Response lt CONNECTED gt Successfully connected to the Modbus TCP server of the specified IP address ERR 05 Prev Conn ON Another NS command has been executed and left the client socket opened but did not execute the PRINT 4 lt gt to close the client socket ERR 04 Not Connected Failed to connect to the targeted Modbus TCP Server STATUS 3 This TBASIC function returns 1 if the Modbus TCP connection is live and returns 0 if the connection has ended You can test the connection status to determine if the connection is still alive Description This service allows your PLC to log in to any device that supports a Modbus TCP server and is connected to the same LAN or to the Internet Of course you may also use it to connect to another F series PLC on the Internet since every F series PLC has a MODBUS TCP server too Once the connection
111. BIT OUTPUT 1 7 This will turn off the 8th output using the output register 2 Using SETIO labelname CLRIO labelname SETIO oun This will turn on the output out1 CLRIO out5 This will turn off the output outS In this case out and out5 would need to be entered in the I O Table as an output Otherwise there will be a compilation error 3 3 4 Example 2 Toggle an Output TOGGLEIO light This will change the output light from off to on or on to off The output light would need to be entered into the I O Table as an output as well and could represent any desired output 3 3 5 Example 3 Test the Status of an Output This can be done using both the TESTBIT v n and TESTIO labeiname command Using TESTBIT v n X TESTBIT INPUT 2 1 status of input 10 on 1 off 0 is stored in variable X Using TESTIO labelname X TESIO button status of input button defined in the I O table is stored in variable X cD TRIANGLE 8 Da RESEARCH 3 4 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers Chapter A Timers Counters amp Sequencers TRIANGLE RESEARCH INTERNATIONAL 9 Lied Chapter 4 Timers Counters amp Sequencers 4 TIMERS COUNTERS AND SEQUENCERS 4 1 Introduction 4 1 1 Timer Coils A timer is a special kind of relay that when its coil is energized must wait for a fixed length of time before closing its contact The waiting time is dependent on the
112. C it will be turned ON a greater proportion of time using the firing angle shown in Figure 18 1 a and therefore will appear brighter compared to the that in Figure 18 1 b By controlling the firing angle applied to the TRIAC you can achieve the objective of controlling the brightness of the lamp The lamp will be brightest when the firing angle is near 0 degree and will be dimmest when the firing angle is near 180 degree Controlling lamp brightness this way is highly efficient Unfortunately the transfer function is non linear i e the brightness is neither proportional non inversely proportional to the firing angle and therefore it has limited applications in precision digital control system But it can provide low cost control for devices such as lamps since the operator who receives instant visual feedback can vary the firing angle manually until a satisfactory brightness is obtained Tai es 17 2 INTERNATIONAL Chapter 19 Zigbee Communication In a commercial light dimmer a potentiometer is typically used with a capacitor to vary the timing 0 where the TRIAC is allowed to start conducting as shown in the example circuit in Figure 18 2 120VAC Figure 18 2 Commercial Light Dimmer Circuit On the EZWire1616 we will make use of the computational power of the CPU to control the firing angle and therefore achieving the same effect as light dimmer control 17 2 Control of 120V 240V AC TRIAC Since 120V 240V A
113. C could be corrupted or damaged This could happen if there was any damage to the components on the board such as I O drivers communications drivers or any of the IC s or PCB circuitry Also if a voltage spike came into the PLC through its I O power supply or communications ports that could cause some corruption even if there was no component damage If the RTC is only corrupted then you should only have to reset the RTC to resolve the problem This can be done most easily by using the TRILOGI method of setting the RTC that was described in section 12 4 After setting the RTC the PLC should be powered off and then powered on again The RTC Error light should be off at this point but if it isn t then there is a possibility of damage to the PLC At this point you should contact Triangle Research tech support or if you have purchased the unit from a local distributor then you should contact the distributor for assistance TRIANGLE 12 4 TR RESEARCH INTERNATIONAL Chapter 13 LCD Display Programming Chapter 13 LCD Display Programming TRIANGLE RESEARCH INTERNATIONAL a 9 Lied Chapter 13 LCD Display Programming 13 LCD DISPLAY PROGRAMMING There is no LCD display port on the EZWire1616 so it cannot drive a physical LCD screen however it is still possible to display information on a virtual screen such as the online monitoring variables window or the web interface All of the information in this chapter w
114. C using the ADC n statement which will return readings of between 819 and 4095 5 2 3 Using Potentiometer to Set Parameters A potentiometer can provide a very low cost means for users to input parameters to the PLC such as temperature settings timer or counter preset values etc The diagram above shows how easy it is to implement such a device using the 5V reference output and an analog input Very accurate parameters can be set if the LCD display is used as visual feedback of the settings AD 1 to 8 10KQ Potentiometer Figure 5 4 5 2 4 Reading Analog Input Data The 8 analog input signals are read by the TBASIC command ADC 1 to ADC 8 The ADC n function will return a number between 0 and 4095 12 bit resolution which corresponds to the measured voltage at any of the analog inputs n The resolution of a 12 bit ADC is 1 4096 this means that for the 0 5V ADC range the resolution is 5 4096V 1 22mV That means that if you apply a 2 500V to the PLC s analog input 3 ADC 3 should return a value of 2 500 5 000 x 4096 2048 Note that the CPU only accesses the analog input n when the TBASIC function ADC n is called Hence in order to monitor the analog input you have to execute the ADC function periodically The frequency that the ADC function is called is known as the sampling rate and it depends on how fast the analog data changes If the analog data changes slowly such as room temperature then there may be no need
115. C voltages power most incandescent light bulbs it is essential to provide galvanic isolation between the AC lamp power and the PLC s low voltage electronics What you should use is an opto isolated TRIAC that can be controlled by a low DC voltage between 3 and 30V These kinds of TRIACs are commonly known as Solid State Relay SSR as illustrated in the following diagram 24V Opto isolated TRIAC SSR ane is l Outputs Glo E 7 0 8l ea i Figure 18 3 In the above circuit if the PLC turns on its output 8 it will provide continuous trigger voltage to the TRIAC gates and therefore the lamp can be switched on at 100 brightness When the PLC turns off its output 8 the lamp will be turned OFF completely To achieve light dimming control the PLC must determine the precise moment that the AC voltage crosses the zero voltage point and the PLC will then schedule a time delay and then send a short firing pulse via its digital output to the TRIAC to turn it on for the rest of the half cycle Since the TRIAC will turn itself OFF in the next zero crossing the PLC must do this repeatedly at every zero crossing in order to maintain the fractional power being applied to the lamp The EZWire1616 is capable of controlling up to 12 SSR for light dimmer control using its digital outputs 5 to 16 Section 18 4 explains how to use a new i TRILOGI function to readily program these light dimmers Important Note The
116. E g To assign variable K to number 56789 5 0 send hostlink command WVIKOOOOODD5 Ca TRIANGLE URA RESEARCH 16 12 LJ 9 INTERNATIONAL Chapter 17 IR Remote Control 16 31 Write Variable Strings A to Z Command Format 7 5 aphabet Tel Cool A B C Z ASCII characters of the string variable length Response Format pwtvtst oO E g To assign the string Super PLC to the string variable P send hostlink command 752 Super PLC 16 32 Write Variable Floating point A to Z Command Format wv apna Te Tepe De Telefe Tey A B C Z 8 Hexadecimal Digit in 32bit IEEE format Response Format E g To write to A the value 6 265599E9 send command WV A4FBABABABA where AFBABABABA is the IEEE 32 bit representation of the floating point number 6 265599E9 See TL7 Programmer s Reference on how float number are represented using 32 bit integer in IEEE single precision format in TRiLOGI 16 33 Write Variable Singe Data Memory DM 1 to DM 4000 Command Format w v 16 16 16 16 16 16 16 16 NT 16 bit Index to array 16 bit Integer Data 0001 to OFAO 400010 Response Format 1 31 O oe 831 551 153 Number of DMs written to the PLC 1 E g To write the value 12341 4D2 to DM 1000 send hostlink command wvD03E804D2 100010 3E
117. Enhanced Enhanced 7 3 Interfacing to 5V type Quadrature Encoder If you have a choice you should select an encoder that can produce 12V or 24V output pulses so that they can drive the inputs 1 2 3 4 5 or 6 directly If you have a 5V type of encoder only then you need to add a transistor driver to interface to the PLC s inputs The simplest way is to use an IC driver ULN2003 connected as shown in Figure 7 2 ULN2003A Input 3 1 1 1 1 EZWire PIC Figure 7 2 Interfacing 5V type Rotary Encoder o TRIANGLE 0 Toi RESEARCH 7 2 INTERNATIONAL Chapter 8 Frequency Speed Measurement Chapter 8 Frequency Speed Measurement TRIANGLE URA RESEARCH INTERNATIONAL Chapter 8 Frequency Speed Measurement 8 FREQUENCY SPEED MEASUREMENT The EZWire1616 provides a very straightforward means to measure the pulse width of the ON cycle the frequency or the period of a rectangular wave pulse train arriving at its Pulse Measurement PM inputs 1 2 3 4 5 or 6 Which are mapped to digital inputs 1 to 6 see Chapter 6 8 1 Programming of PM Input To use the PM input to measure pulse width or frequency execute the PMON statement ONCE to configure the relevant input to become a pulse measurement input You usually put the PMON statement in the init custom function and execute it with a 1st Scan pulse Thereafter the pulse width in us or the pulse f
118. FP written to the PLC 16 37 Write Variable System Variables Variable timerPV Io 0D ctrPV Not a system variable in TBASIC Command Format eme OS type Index 16 bit Integer Data type 01 to0D denotes the type of system variable to access index 01 to 1F index into the array starting from 01 Response Format E g To set clk 1 which represents the hour of the RTC to 14 send the command wVS08010008 to the PLC 16 38 Write Variable High Speed Counter HSCPV Command Format 12 8 Hexadecimal Digit for 32 bit integer Response Format o_O TRIANGLE URA RESEARCH 16 15 LJ 9 INTERNATIONAL Chapter 17 IR Remote Control E g To clear the value of HSCPV 2 send hostlink command wVH200000000 Wi V H 8 16 39 Halting the PLC Command Format When the PLC receives this command it temporarily halts the execution of the PLC s ladder program after the current scan However the PLC continues to scan the I Os and processes host link commands sent to it and will report the current I O data and internal variables to the host computer 16 40 Resume PLC Operation Command Format Response Format When the PLC receives this command it will resume execution of the ladder program if it had been halted previously by the C2 command Otherwise this command has no effect 8 E 0 16 41 Read Analog Input This command forces
119. FTP client and the FTP server The second connection is the data channel where only the file content or the file directory data are being transferred There are two transfer modes Active mode and Passive mode Active mode requires that the server establish a data connection back to the client Passive mode on the other hand requires that the client also be the one to establish the data connection i e For passive mode both the command and the data connections are performed by the client the PLC in this case The PLC has been designed to use only passive mode to transfer file to the FTP server Passive mode is preferred because that is the only way to transfer file if the FTP Server is located on the Internet The alternative active mode transfer requires the server to make a data connection back to the PLC that is sitting behind a router firewall and that can be problematic unless the router is specifically configured to forward the data port to the PLC 18 6 2 PLC FTP Upload Procedure In order to upload file to the FTP Server the PLC would use the PRINT 4 lt TCPConnect XXX XXX XXX XXX 21 gt command tag to connect to the FTP server port 21 to establish the command connection to the FTP Server The PLC uses its PRINT 4 to send and INPUT 4 to receive ASCII text strings from the FTP server via the command channel The PLC would then send the command PASV to inform the FTP server that it wants to transfer a
120. If an unknown command is received or if the command is illegal such as an attempt to access an unavailable channel the following error response will be received Error Response Format Device ID Header FCS Terminator The host computer program should always check the returned response for possibilities of errors in the command and take necessary action 15 4 6 SHOULD YOU USE POINT TO POINT OR MULTI POINT PROTOCOL Although at first the point to point protocol appears simpler in format having no ID and no FCS computation the communication procedure is actually more complex since it involves the need to synchronize the two communicating devices by exchanging the Control E character The lack of error checking also makes the protocol less reliable especially in noisy environment In fact the TLServer software will only accept multi point communication protocol from the client software with the exception of the IR command which is needed to obtain the ID of a PLC with unknown ID Hence if you were to write your own communication program to talk to the PLCs we would strongly recommend using only the multi point protocol exclusively due to its simplicity and built in error checking capability Ti Bees 15 5 INTERNATIONAL Chapter 15 Host Link Communication Protocol 15 5RS485 Primer 15 5 1 RS485 Network Interface Hardware The built in RS 485 interface allows the Fx PLCs to be networked together using very low cost
121. MODBUS TCP server simultaneously This means that all F series PLCs are ready to interface directly with many third party industrial control devices that support the MODBUS TCP protocol These include the SCADA software HMI hardware OPC Server HVAC controllers and many other industrial control devices In addition the EZWire1616 can be used both as a MODBUS TCP SERVER as well as a MODBUS TCP CLIENT simultaneously This means that the EZWire1616 can readily read data from any device that has a MODBUS TCP server such as flow meters AC DC drives HVAC elements RTUs network sensors etc Itis also possible to perform peer to peer networking with other MODBUS TCP controllers e g another F series PLC over a LAN or over the Internet 2 5 1 Connecting To The PLC s MODBUS TCP Server By default the F series CPU supports up to 3 simultaneous MODBUS TCP connections You can change the number of simultaneous MODBUS TCP connections from 2 to 5 using the F series Ethernet Basic Configuration program as described in Section 2 1 The PLC will listen on the default well known MODBUS TCP port 502 for one or all of the connections However it is also possible to define a secondary port number as described in Section 2 1 7 Note that if you define a secondary port number then only one of the MODBUS TCP connection will listen on port 502 and the remaining connections will only be listening on the secondary port number If you have a MODBUS TCP c
122. Main htm 16 52 Inter PLC Networking Using MODBUS Protocols The PLCs may also pass data to each other using special MODBUS commands which are even simpler to use than NETCMD but are restricted to accessing variables that are mapped into MODBUS address structure Please refer to the Section 14 7 and 14 8 as well as the TBASIC Reference manual for details on using the READMODUS WRITEMODBUS READMB2 and WRITEMB2 commands TR RESEARCH 16 24 INTERNATIONAL Chapter 17 Light Dimmer Control Chapter 18 Light Dimmer Control TRIANGLE RESEARCH INTERNATIONAL q 9 URA 1 Chapter 19 Zigbee Communication 17 LIGHT DIMMER CONTROL 17 1 Introduction You may have used one of those commercial light dimmers to control the brightness of incandescent light bulbs Modern light dimmers are mostly based on controlling the firing angle of a type of semiconductor switch known as TRIAC which stands for AC transistor A TRIAC is a semiconductor switch that conducts current when a trigger voltage is applied to its Gate terminal However what makes the TRIAC different from a typical transistor is that once the TRIAC starts conducting current it cannot be switched off even if the voltage to the gate is removed Le The TRIAC switch is latched once it is turned ON That also means that you only need to apply a very short trigger pulse to the Gate to turn it ON In control term this is often
123. Name You can assign up to 16 ASCII characters any character in naming a PLC The node name is currently not used by the network router so it is merely a convenient name for user to identify a PLC 2 1 10 Username and Password FServer only You can use the username and password feature to prevent unauthorized access to the FServer It adopts the same proprietary encryption scheme used in the TLServer and TRILOGI software to encrypt the password transmission However unlike the TLServer that allows you to define unlimited number of usernames and passwords the FServer only permits a single set of username password and this is limited to a length of 16 characters Although you may define the passwords for a USER and a VISITOR privilege 2 1 11 Use Username Password Yes No In applications where there is no danger of unauthorized access to the PLC via FServer you can elect not to use the username password With the No option selected the TRILOGI client can log in to the FServer using whatever username and password since FServer will bypass the username and password authentication and allow the client to log in 2 1 12 Access Level You can define the access level that the TRILOGI client is permitted to operate under on the PLC Three access levels are currently defined 1 for Programmer 2 for User and 3 for Guest Please see the i TRILOGI Programmer s Reference manual for the definition of the access levels Ti aes 2 6
124. Otherwise if the voltage of the load power is lower than the voltage of the CPU power the output LED will light up even when the output driver is not energized This is because the current could flow out of the PLC s output into the lower voltage load power supply and therefore light up the LED This can be very confusing to users even though it should not damage the LED Should this happen you will need to add a series diode to the output terminal to block the output LED currents from flowing through the load and back to the load power Please use only an industrial grade linear or switching regulated power supply from established manufacturers Using a poorly made switching power supply can give rise to a lot of problems if the noisy high frequency switching signals are not filtered properly Always place the power supply as close to the PLC as possible and use a separate pair of wires to connect the power to the PLC Keep the power supply wires as short as possible and avoid running them along side high current cables in the same cable conduit The EZWire1616 PLC will be reset when the power supply voltage dips below 9V In a high noise enviroment you may consider connecting a 470uF to 1000uF 50V electrolytic capacitor near the power supply connector to suppress any undesirable voltage glitches from conducting into the PLC If other high current devices such as a frequency inverter were to affect the operation of the PLC you should then also
125. PU firmware automatically schedules the order of the command response packets whether it is originated from the client or from the PLC itself so that the Modbus TCP command from the client will be responded to in the correct order and in a timely manner 19 2 Application Ideas for Modbus TCP Gateway The Modbus TCP gateway function can be very useful for many large area control systems such as a building automation system A master EZWire PLC is linked to many Modbus RTU slave controllers via RS485 bus distributed across an entire building The master PLC can perform sophisticated control functions since it has read write access to ALL the Modbus RTU slaves it connects to At the same time a Modbus TCP client software such as a Building Management System BMS can access any registers in the master PLC or ANY of the slave Modbus RTU controller directly via the master PLC acting as a gateway for the slave PLCs 19 3 Configuring The PLC As Modbus TCP Gateway The command used to define a serial port to become Modbus TCP Gateway serial port is as follow SETSYSTEM 12 n Where n 1 2 or 3 for COMM1 COMM2 and COMM port This statement must be run once could be during start up via 1st Scan pulse to configure the serial port n to be used to send out RTU commands and received RTU responses If SETSYSTEM 12 n is not run then the Modbus gateway function will be disabled Here is how it works A Modbus TCP client such as a SCADA HMI etc
126. R at the modem end are tied together This is often required to inform the modem that the device is ready for operation so that the modem can work properly A modem may also be connected to COMM2 or COMMS for multi drop remote programming and monitoring using TRiLOGI 6 or 7 software However you will need to purchase an auto turnaround type RS232 to RS485 converter such as the Auto485 hittp www tri plc com auto485 htm 14 10 2 Programming Please refer to the Internet i TRILOGI version Programmers Reference guide Chapter 3 for programming details for the PLC to communicate with the PC via modem ow TRIANGLE 14 15 URI RESEARCH INTERNATIONAL i Chapter 15 Host Link Communication Protocol Chapter 15 Host Link Communication Protocol TRIANGLE RESEARCH INTERNATIONAL a 9 URA T Chapter 15 Host Link Communication Protocol 15 HOST LINK PROTOCOL INTRODUCTION While a EZWire1616 is running it may receive ASCII string commands that read or write to its inputs outputs relays timers counters and all the internal variables from a host computer or another F series FMD or Nano 10 PLC These ASCII commands are known as the Host link commands and are to be serially transmitted via RS232C or RS485 port to and from the controller The default serial port settings of the EZWire1616 for host link communication are 38400 baud 8 data bit 1 stop bit no parity The baud rate and the communication forma
127. RTC in the EZWire1616 is battery backed so that time will continue to run if PLC power is lost with or without warning On the FMD Series and Nano 10 PLCs it is not possible to keep the RTC running after power loss unless either the FRAM RTC O or FRAM RTC 256 module is installed However the FRAM RTC modules are not compatible and are not required with the EZWire1616 because a battery is used to power the on board RTC Due to safety restrictions by air transportation the battery may or may not be included with your EZWire1616 If included it may not be installed on the PLC in the factory and in that case you will need to install it yourself Please refer to Section 1 9 for information on both purchasing and installing the RTC battery NOTE If the RTC battery is not installed or the battery is removed for more than 15 seconds when the PLC is powered down then the PLC will lose its real time clock data when it is powered up again When this happens the RTC Error status LED on the CPU board will light up and the RTC Err bit in the ladder logic special bit will be ON so that user program can use it to alert the operator 12 2 TBASIC variables Used for Real Time Clock Date Time YEAR DATE 1 HOUR TIME 1 MONTH DATE 2 MINUTES TIME 2 DAY DATE 3 SECOND TIME 3 Day of Week DATE 4 There are 7 registers available in TBASIC that are used to access and configure the date and time These registers which are
128. RiILOGI to the PLC and run the On Line Monitoring program You will be informed of the reason that caused the PAUSE condition Except for condition i and iv you can release the PLC from the PAUSE state by clicking on the Pause button or by pressing the lt P gt key during On Line Monitoring If the PLC s program is corrupted then you must re transfer your program to the PLC 1 10 3 Run Error Red LED When this indicator turns ON it shows that a run time error has occurred during execution of a TBASIC command The system will halt at the CusFn where the error took place If the programmer now executes the On Line Monitoring command in TRiLOGI the cause of the run time error and the CusFn where the error occurred will be reported on TRILOGI screen If you have installed an LCD display the PLC will take over the LCD screen and display the cause of the runtime error and the function where it occurred The TBASIC simulator captures many possible run time errors including out of range values but in the EZWire1616 PLC only a few most important run time errors are reported The remaining errors are ignored The following are the few run time errors that will be reported in EZWire1616 PLC Divide By Zero FOR NEXT loop with STEP 0 Call Stack Overflow Circular CALL suspected Illegal Opcode Please inform manufacturer System Variable Index out of range This is normally caused by using an unavailable subs
129. S BI Addr Input om NT 1 to 16 40001 1 to 40001 16 11016 oupi n O di en moe NSS Counter on o o en 49 to 64 40052 1 to 40052 16 817 to 832 Oon ee 1024 49 to 64 40068 1 to 40068 16 1073 to 1088 65 to 80 40069 1 to 40069 16 1089 to 1104 81 to 96 40070 1 to 40070 16 1105 to 1120 97 to 112 40071 1 to 40071 16 1121 to 1136 113 to 128 40072 1 to 40072 16 1137 to 1152 129 to 144 40073 1 to 40073 16 1153 to 1168 145 to 160 40074 1 to 40074 16 1169 to 1184 161 to 176 40075 1 to 40075 16 1185 to 1200 177 to 192 40076 1 to 40076 16 1201 to 1216 Relay 193 to 208 40077 1 to 40077 16 1217 to 1232 209 to 224 40078 1 to 40078 16 1233 to 1248 EE EE eS 49710 512 40097 1 to 40097 16 1521 to 1536 U 0 MODBUS is a registered trademark of Groupe Schneider OMRON is a registered trademark of OMRON Corporation TRIANGLE RESEARCH INTERNATIONAL i 0 DA Chapter 14 Serial Communications Modicon convention Binary address Timer 1 to 64 40129 to 40192 to 191 Present Values Counter 1 to 64 40257 to 40320 to 319 Present Values TIME 1 TIME 2 TIME 3 DATE DATE DATE DATE 4 Data Memory DM 1 DM 2 DM 4000 Floating point Array FPH 45001 amp 45002 5000 amp 5001 FP 2 45003 amp 45004 5002 amp 5003 FP 501 46001 amp 46002 6000 amp 6001 FP 1000 46999 amp 47000 6998 amp 6999 14 8 1 1 BIT ADDRESS MAPPING All the EZWire1616 I O bits are ma
130. Set Value SV of the timer Once the delay time is up the timer s N O contacts will be closed for as long as its coil remains energized When the coil is de energized i e turned OFF all the timer s N O contacts will be opened immediately However if the coil is de energized before the delay time is up the timer will be reset and its contact will never be closed When the last aborted timer is re energized the delay timing will restart and use the SV of the timer rather than continue from the last aborted timing operation 4 1 2 Counter Coils A counter is also a special kind of relay that has a programmable Set Value SV When a counter coil is energized for the first time after a reset it will load the value of SV 1 into its count register From there on every time the counter coil is energized from OFF to ON the counter decrements its count register value by 1 Note that the coil must go through an OFF to ON cycle in order to decrement the counter If the coil remains energized all the time the counter will not decrement Hence a counter is suitable for counting the number of cycles an operation has gone through When the count register hits zero all of the counter s N O contacts will be turned ON These counter contacts will remain ON regardless of whether the counter s coil is energized or not To turn OFF these contacts you have to reset the counter using a special counter reset function RSctr 4 1 3 Sequencers A sequencer
131. Speed Counter HSC inputs and or Pulse Measurement PM as described in Chapter 6 7 and 8 if these inputs are defined as interrupts using the INTRDEF statement then they will lose their other special function l e they can only be defined either as a HSC PM or as an interrupt input and not both Inputs 9 to 12 on the other hand o TRIANGLE 8 Toi RESEARCH al INTERNATIONAL Chapter 9 Interrupts are not shared with other special functions Hence these can be used either as ordinary digital inputs or as interrupt inputs 9 2 Periodic Timer Interrupt PTI The Periodic Timer Interrupt PTI not available on T100M PLC lets you define a custom function that will be executed by the CPU precisely every x number of milliseconds ms The syntax for setting up a PTI is as follow INTRDEF 18 cfnum x Interrupt 18 is reserved for PTI cfnum custom function number to execute when PTI event takes place x The period in number of milliseconds between two PTI events E g INTRDEF 18 101 15 call function 101 every 15 ms The Periodic Timer Interrupt runs independently of the ladder logic and its execution is therefore not affected by the total PLC program scan time When the PTI timer times up the CPU will suspend the execution of the ladder logic or a non interrupt TBASIC function and immediately calls up the custom function defined by the INTRDEF 18 statement However if the CPU is current
132. TL7 just like the Fx2424 and Fx1616 BA All of the same I O special functions are supported which means in many cases the Fx2424 users can simply transfer their PC6 or PC7 file to the EZWire1616 unmodified For existing users of F2424 who have not used the updated Fx2424 and are switching to EZWire1616 the following summarizes the main difference between the two PLC models Tr v TRIANGLE 1 1 ire RESEARCH INTERNATIONAL Chapter 1 Installation Guide EZWire1616 F2424 24Dl 24100 0 5V x 4 1 level screw terminal carries the I O signal only 16K words TL6 Only e No change in IP address e Bypass username password and trusted IP Only via OMRON command Only DM 300 to DM 4000 can be non volatile SETSYSTEM 6 n Support Function 03 04 Support Function 03 04 Support Function 06 16 Support Function 16 Not supported 16 DI 16 DO 0 20mA x 4 3 level Quick Connect spring cage terminal carry signal power and OV 23 5K words TL7 and TL6 32 bit Single precision IEEE754 A to Z FP 1 to FP 1000 Mobdus memory mapping for FP 1 to FP 1000 New commands added RVF and RV A to RV Z e Default IP 192 168 1 15 9080 e Bypass username password and trusted IP New modified RVD command DM 1 to DM 4000 can be non volatile SETSYSTEM 6 n__ n function Support Function 01 02 03 04 Support Function 01 02 03 04 Support Function 05 06
133. TP passive mode by providing the login username and password Using FTP passive mode allows the PLC to open a network connection to an external web server to upload a file and then close the connection immediately It does not require opening a port on your router to permit external access to the PLC from the Internet Hence there is no complicated router setup involved as there is no port forwarding required It also eliminates the security risk from someone trying to take control of the PLC from outside of your LAN and is generally much more acceptable to the System Administrator 1 If you have multiple PLCs in use you can program each PLC to upload data to a different directory or append a different file name prefix or to a different server and once programmed all PLCs will happily log data unattended indefinitely File Structure and File Naming of The Extended File System 18 2 EZWire1616 uses a very simple file system where the 1740K bytes of file space are divided into 435 slots of 4K bytes each The file system does not use any kind of file allocation table hence it must follow a strict naming scheme because the file name directly relates to where it is stored in the file space The followings describe how the files are named and where they are stored The first 35 files are named O yyy 1 yyy X yyy Y yyy The yyy part of the file name is the extension and only the following MIME extension are
134. TT 2 TRIANGLE R RESEARCH INTERNATIONAL EZWire1616 With floating point support Ladder BASIC Super PLC USER S Revision 0 MANUAL USER MANUAL Copyright Notice amp Disclaimer All rights reserved With the exception of legitimate TRi PLC users who may print or make copies of this manual for reference purposes no parts of this manual may be reproduced in any form without the express written permission of TRi Triangle Research International Inc TRi makes no representations or warranties with respect to the contents hereof In addition information contained herein are subject to change without notice Every precaution has been taken in the preparation of this manual Nevertheless TRi assumes no responsibility for errors or omissions or any damages resulting from the use of the information contained in this publication Windows is a trademark of Microsoft Inc MODBUS is a trademark of Mobdus org All other trademarks belong to their respective owners Revision Sheet Release No Date 2 Revision Description 11 15 2014 First Release eS Ss SE o_O TRIANGLE j URA RESEARCH Page i INTERNATIONAL j USER MANUAL Conditions of Sale and Product Warranty Triangle Research International Inc TRi and the Buyer agree to the following terms and conditions of Sale and Purchase 1 The TRi Products are guaranteed against defects in materials or workmanship for a period of one year fro
135. V sensor supply voltage same as the PLC supply voltage since they are current source outputs and most current controlled devices would require 12 24V instead of 5V The reference voltage outputs are available on the middle row of the analog I O terminals for each analog UO point and may be used as the source voltage for connecting to potentiometers The 5V reference points total current is limited to 50mA only Thus if you need more current for your analog device you will need to supply your own quiet 5V DC source The analog reference voltage is may be trimmed via a small trimmer pot using a small flathead screwdriver that fit a slot length of 2 5mm and slot width of 0 5mm You can find such screw driver easily in any hardware store similar to the following picture JIL Hows 0 Ji RR ed Ka ez Lulu Ge Sec 1 CR Ni 133 i 5 0VDC Reference Adjustment Potentiometer Figure 5 1 Transfer Function for 12 bit ADC Tr TRIANGLE 5 1 ire RESEARCH INTERNATIONAL Chapter 5 Analog I Os 5 2 Analog Inputs Each EZWire1616 PLC is equipped with 2 independent 12 bit A D Analog to Digital converters Each A D converter multiplexes with up to 4 Analog input pins giving a total of 8 analog input channels The 2 A D converters run simultaneously and thus save conversion time even when all 8 analog channels are used All analog input channels operate in the range of 0 5V full scale The pin assignmen
136. a battery compartment that takes one CR1632 primary lithium cell which powers the battery backed real time clock to the CPU The second PCB is the EZWire1616 carrier board that carries the power elements drivers and active components to interface to the SmartTILE Fx CPU board The expansion board connector is also located on the carrier board The SmartTILE Fx board is plugged into the EZWire1616 carrier board via two 40 pin IDC headers and a one 10 pin IDC header The third PCB is the EZWire1616 wiring board that contains all the I O interfaces and connectors including the power connector the RS232 and RS485 terminals It also contains the LED indicators for the digital I O and a power indicator LED so that the user knows power has been transferred from the carrier board to the wiring board The EZWire1616 carrier board is plugged into the bottom level wiring board via two 10 pin IDC headers and one 40 pin IDC header IMPORTANT At no time must the CPU board be unplugged from the carrier board when the PLC is powered ON Doing so can cause serious damage to either or both PCBs and is not covered by warranty We discourage unplugging the CPU board from the carrier board except for repair purpose as doing so may expose the CPU header pins to high voltages or electrostatic discharge that can damage sensitive components on the CPU board The assembled EZWire1616 PLC can be easily installed in many kinds of plastic or metal enclosures
137. ad of Filezilla If you are setting Filezilla as a permanent FTP server behind a software firewall you can try to make the following configuration setup 1 You must specifically setup a range of port number for Passive mode use These are the port number that Filezilla will assign to the PLC to make a data channel connection when it attempts to transfer a file using passive mode The following is an example where two port numbers are assigned so that two PLCs may connect to the Filezilla simultaneously You can add a larger port range if more PLCs may connect to the FTP Server simultaneously FileZilla Server Options General settings BRS Welcome messi IP bindings V Use custom port range 41001 1 65535 IP Filter D IPv4 specific Securty settings Miscellaneous External Server IP Address for Use custom PASV settings if you Admin kene ai passive mode transfers are operating the server from Ke Default behind a NAT router or a firewall going In that case the IP address of GSS Settings O Use the following IP the server is not accessible from Speed Limits outside of the router so you Filetransfer compres should fill in the correct address SSL TLS settings You can also enter hostnames i erg eeh on eg F iii v O Retrieve external IP address from SS router Information for users with dynamic IPs If your external IP changes it might take up to 5 minutes af
138. al outputs 5 to 16 Each stepper motor requires 4 digital outputs so a total of 12 digital outputs are required to drive 3 stepper motors All these outputs are capable of driving stepper motors of up to 1A per phase continuous Note that any outputs that have been defined for use with a particular stepper channel would no longer be available as regular digital outputs in the ladder or TBASIC program Please refer to Chapter 6 for a definition of the list of special digital I Os 10 2 1 Stepper Motor Wiring Types 4 wire Bipolar driver 5 wire Unipolar or bipolar driver 6 wire Unipolar or bipolar driver Figure 10 1 TR RESEARCH 10 1 INTERNATIONAL Chapter 10 Stepper Motor Control The most commonly available stepper motors today are either 4 wire 5 wire or 6 wires types and their windings are as shown in Figure 10 1 e 4 wire stepper motors require drivers that can reverse current flow from coil terminal 1 to 2 or from 2 to1 as well as from terminal 3 to 4 or from 4 to 3 These kinds of drivers are known as bipolar drivers e 5 wire stepper motors typically connect the common terminal 5 to the power e g 24V DC and 4 current sink drivers are connected to terminals 1 to 4 to sink the current to OV The sequence in which the four coils are activated controls the rotation of the stepper motor These kinds of drivers are known as unipolar drivers e 6 wire stepper motors are the most flexib
139. als Validation 2 Text to Columns PivotTable and PivotChart Report Get External Data Ki Run Saved Query ic New Web Query 4 New Database Query Import Text File Figure 2 6 1 OH e TRIANGLE 0 Toi RESEARCH 2 29 INTERNATIONAL Chapter 2 Ethernet Port Next please enter the text as shown in the following diagram and then click OK This will command the Excel spreadsheet to send the web query string RIOO to the EZWire PLC that is connected to the network with IP address 192 168 1 5 and port 9080 The query string RIOO is for reading the status of 8 bit input channel 0 which covers the logic states of input bit 1 to 8 If the FServer is accessible by the PC from the network router it will send the response data which will be displayed on the selected spreadsheet cell where the New Web Query was defined earlier The response data shown on the cell could be 8100 The response data includes the command header RI as defined in the HostLink Command protocol described in Chapter 15 The data 00 indicates that none of the inputs 1 to 8 are currently turned ON 5 New Web Query La 1 Enter the address for the Web page that contains the data you want If browsing switch back to Excel once you have located the Web page in your browser http 192 168 1 5 9080 HOSTLINK RI00 Browse Web 2 Choose the part of the Web page that contains t
140. as 10 4 10 3 1 10 5 Programming Stepper Control Channel 10 4 10 5 1 0 10 4 1 Full Step Driver Mode AAA 10 5 10 4 2 10 5 Half Step Driver Mode 10 4 3 nnn 10 5 Setting the Acceleration 10 4 4 10 6 Using the STEPMOVE Command 10 4 5 10 6 0 0 0000 Example PLC as a Motor Controller 10 4 5 1 10 4 5 2 Example PLC as a Full Step Motor Driver 10 7 10 4 5 3 Example PLC as a Half Step Motor Driver 10 7 Using the STEPMOVEABS Commande 10 7 10 4 6 10 8 0 Example PLC as a Motor Controller 10 4 6 1 10 4 6 2 Example PLC as a Full Step Motor Driver 10 8 10 4 6 3 Example PLC as a Half Step Motor Driver 10 8 10 4 7 Demo Program for Stepper Motor Control 10 8 PULSE WIDTH MODULATED OUTPUTS 11 1 11 vesecwa eu Shea aired detec re uboeey esecdaeecetuee 11 1 000100000 Juge CIC TOI secs 11 1 11 1
141. at the single Ranata CR1632 should be able to power the PLC s RTC for at least 5 years and could be for as long as 10 years if the PLC is never powered down 5 Tpi eae 1 13 INTERNATIONAL Chapter 1 Installation Guide 1 10 CPU Status Indicators There are three LED indicators on SmartTILE Fx board with the markings shown on the right a D Run Pause RTC Err Err All these indicators will light up for about 0 5 seconds during power on Thereafter they should go off and if any one of them remains lit it represents the various operating status of the PLC as follows 1 10 1 RTC Error Green LED If this indicator is turned ON it indicates the PLC s real time clock RTC has lost track of date and time The RTC Err flag in the Special Bit menu will also be turned ON This indicator will be turned OFF automatically after you have set the PLC s date and time using the Set PLC s Real Time Clock command in the Controller pull down menu For more information about using the RTC please refer to Chapter 12 1 10 2 Pause Red LED This indicator will be turned ON if one of the following has occurred 1 The PLC s program is corrupted 2 APAUSE statement has been executed 3 The user halts the PLC by pressing the lt P gt key during On Line Monitoring 4 DIP Switch SW1 4 is turned ON which halts the program If this light is ON please connect the host computer running i T
142. ata from the Internet meant for the PLC the router would know that and automatically routes the return packet back to the PLC The router performs what is known as Network Address Translation NAT and such routers are called NAT routers However the same FServer and Modbus TCP servers on the PLC are typically inaccessible from the public Internet This is because the router has a built in firewall that does not permit external TCP IP packets from the public Internet to reach the devices on the private LAN In other words the NAT router allows the PLC outgoing access to the Internet but by default does not allow incoming access Most small NAT routers for home use such as those produced by Linksys Netgear D Link or Belkin do allow you to configure the router to open and forward a specific port number to a specific device on the private network For example if your PLC static IP address is 192 168 1 5 and you wish to open its FServer port 9080 but not its Modbus TCP port 502 to the public internet you would configure your router such that it will forward the incoming TCP IP packet destined for port number 9080 to the device at IP address 192 168 1 5 Once you have done that you will then be able to access the FServer from the Internet using the router s public IP address this is typically assigned by the Internet Service Provider and the port number 9080 However the Modbus TCP port is not accessible from the Internet since
143. ave by running SETSYSTEM 1 w Where w number of serial port wait states for each COMM port as follow Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Ethernet COMM3 COMM2 COMM1 Thus each COMM port could be configured to wait from 0 to 3 wait states for a response The default settings for w amp H55 or 01010101 binary which means each COMM port as well as the Ethernet port uses 1 wait state of about 150ms 3 You can change the number of retries default 2 the gateway will attempt to get a response from the Modbus RTU slave by running SETSYSTEM 2 n Ti aes 19 2 INTERNATIONAL Chapter 19 Using PLC As A Modbus TCP Gateway Where n number of retries for each COMM port as follow Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Ethernet COMM3 COMM2 COMM1 Thus each COMM port could be configured to re attempt to send the command from 0 to 3 times if it does not get a response from a Modbus RTU slave The default settings for n amp HAA or 10101010 binary which means each COMM port as well as the Ethernet port will retry twice making a total of 3 attempts E g If you run SETSYSTEM 2 0 the gateway will not resend the RTU command on any of its COMM port if does not receive a response on the first attempt This can help to reduce the CPU scan time if a Modbus RTC slave does not respond 4 We strongly recommend that the s
144. connect a diode before the capacitor to prevent reverse current which might flow back to the power supply as shown in the following diagram Surge suppressor 470uF 50V Recommended OV Figure 1 7 If the AC main is affected by nearby machines drawing large amounts of current such as large three phase motors you should use a surge suppressor to prevent any unwanted noise voltage from being coupled into the EZWire1616 power supply The required current rating for the power supply depends mainly on the total output current taking into consideration the peak current demand and the duty cycle of the operation 1 4 Digital Input Circuits All inputs have green color LED indicators All 16 inputs are grouped together into a single row of screwless spring cage terminals All inputs are NPN type meaning that to turn ON an input you should connect it to the low voltage rail OV terminal of the I O terminal block as shown in the following diagram The input numbers are marked on the PCB below their terminals AD TRIANGLE 1 8 URA RESEARCH LI INTERNATIONAL Chapter 1 Installation Guide All digital inputs are directly programmable in Ladder Logic as well as in TBASIC custom functions Some programming examples are detailed in Chapter 3 Digital I Os and Internal Relays NPN Sensor Normally Open Limit Switch Normally Open 24V EZWire1616 EZWire1616 Limit Switch Normally Open i i
145. control scheme described above is the open loop type and does not regulate the speed with respect to changing load torque Closed loop speed control is attainable if a tachometer either digital or analog is used which feeds back to the CPU the actual speed Based on the error between the set point speed and the actual speed the software can then adjust the PWM duty cycle accordingly to offset speed variation caused by the varying load torque A PID function may also be invoked to provide sophisticated PID type of speed control 3 The EZWire1616 s PWM can be used to control the speed of small motors only up to the maximum current limit that the PLCs output can safely drive For larger motors industrial grade variable speed drives should be used instead 11 4 Position Control Of RC Servo Motor RC Servo is a class of DC servo motor commonly used in remote control hence the term RC for positioning a device at a desired location It is often termed proportional control because the position where the motor will turn to is directly proportional to the pulse width of the control signal When chosen appropriately RC Servo can provide an extremely inexpensive and versatile solution for positioning a device For example for controlling the percentage opening of a HVAC damper or to rotate the angle of window blinds or to position a solar panel to track the sun light There are many sizes of RC Servo available in the market from those that weigh
146. cript E g DM 0 INPUT 1 DM 5000 etc Check the subscript value especially if it contains a variable e g DM X if X 0 this will lead to a runtime error OS All run time errors should be identified and corrected before you proceed any further RESEARCH INTERNATIONAL TR TRIANGLE 1 14 Chapter 2 Ethernet Port Chapter 2 Ethernet Port CO TRIANGLE Ind RESEARCH INTERNATIONAL Chapter 2 Ethernet Port 2 ETHERNET PORT Ethernet ee port Every EZWire1616 PLC has a single built in 10 100 Base T wae N Ethernet port that uses the standard RJ45 connector on its F CPU board You can easily connect the EZWire1616 PLC to your network router switch or hub using the straight CAT 5 cable When a connection is made the yellow Connection LED on the RJ45 connector will light up indicating that the PLC has been connected to the network router Connection Activity LED LED Figure 2 1 1 Once connected to the network the TRILOGI programming software and TRi ExcelLink works instantaneously with the PLC allowing remote programming and process monitoring over the LAN or the Internet In addition the Ethernet facility at this port can host web pages and Java applets so that users of the equipment can control monitor their equipment using their web browser from anywhere Before connecting the PLC s Ethernet port you should configure it using the configuration tool that is now bui
147. ctions window where you can configure the necessary network settings for the local adapter Follow steps 2 5 in the Windows XP Ethernet Configuration section above to complete the setup as it is the same process 2 3 On line Monitoring Programming via FServer If you have used the I TRiILOGI software to connect to TLServer previously the procedure is identical To test TRILOGI communication with the F series PLC click on Controller gt On Line Monitoring or simply press lt CTRL M gt keys E i TRILOGI Version 7 0 C Program Files TRiLOGINTL 7 usr samplesWemo PC7 Sou File Edit Controller Simulate Circuit Help Circuit Select Controller Ctrl 1 as VO Table Connect to Server ort il On Line Monitoring CM phy un Duration ia Program Transfer to PLC CT ti TIM Transfer COS file to PLC Open Matching Source File Run Seql A Get PLC s Hardware Info pot Set PLC s Real Time Clock Reboot PLC Power ON reset EEPROM FRAM Manager Seql 5 S Outl E Ethernet ADC Configuration ol LOUT Auto Calibrate Analog Outs ch Q OUT Seql 2 Outz SS OUT TR RESEARCH 2 15 INTERNATIONAL Chapter 2 Ethernet Port Login To TLSever 3 Servers IP Address port 192168159080 8 Detect ID 1 PLC Only ID Hex localhost 127 0 0 1 9080 1 Use Http Proxy Server Username Samples Password vV Memorize Username amp Password Cancel OK
148. current source into 0 5V or 1 5V voltage signal you should use a 253 16 ohm resistor which when paralleled with the 20K ohm of internal impedance will yield a 250 0 ohm total resistance You can obtain 253 16 ohm by combining a 250 ohm and a 3 16 ohm metal film resistor for simplicity you can use a single 253 ohm resistor connected between the ADC input and OV to convert the 20mA into 5V Note that if the sensor has its own power supply then you must connect the sensor ground to analog AVss terminal to provide a common ground All the analog inputs to the EZWire1616 PLC are internally current limited to guard against transient over voltage damage However care should be taken to prevent applying excessive over voltage to the analog inputs for a prolonged period of time which can lead to permanent damage of the ADC input 5 2 2 Interfacing to two wire 4 20mA sensors Many 4 20mA analog sensors only have two wire connections and are designed to be powered by the 4 20mA output current that flows through it These types of sensors can be interfaced easily to the 0 5V analog inputs of the PLC as shown in the following diagram Tpi ae 5 3 INTERNATIONAL j Chapter 5 Analog I Os PLC s V V 12 or 24V P S for PLC And Sensors ADC Input PLC s 7 253 16 ohm resistor are instead of 250 ohms as explained in 5 2 2 The sensor output will be converted to a 1 5V analog voltage and can be read by the PL
149. custom function number to execute when PTI event takes place E g INTRDEF 17 256 1 call function 256 when power failure occur Ti aes 9 2 INTERNATIONAL Chapter 10 Stepper Motor Control Chapter 10 Stepper Motor Control TRIANGLE 2 _ IRR RESEARCH Chapter 10 Stepper Motor Control 10 STEPPER MOTOR CONTROL 10 1 Technical Specifications No of Channels full driver Max Pulse Rate pps 10000 single channel running Continuous Current per phase 1A 24V DC Peak Current per phase 4A 24V DC Driver Breakdown Voltage 55V Velocity Profile Trapezoidal Defined by STEPSPEED accelerate from 1 8 max pps to max pps decelerate from max pps to 1 8 max pps Maximum number of steps 2 2 2 1 x 10 TBASIC commands STEPSPEED STEPMOVEABS STEPCOUNTABS STEPMOVE STEPSTOP STEPCOUNT It is essential to understand the difference between a stepper motor Controller and a stepper motor Driver A stepper motor Driver comprises the power electronics circuitry that provides the voltage current and phase rotation to the stepper motor coils Unlike the FMD PLCs the EZWire1616 have both the stepper motor driver and controller hardware Now a stepper motor can be driven directly from the PLC or the PLC can simply supply the control signals to an external stepper motor driver 10 2 Stepper Motor Driver The EZWire1616 can drive up to 3 stepper motors directly using digit
150. d Outputs 11 PULSE WIDTH MODULATED OUTPUTS 11 1 Introduction Pulse Width Modulation PWM is a highly efficient and convenient way of controlling output voltage to devices with large time constants such as controlling the speed of a DC motor the power to a heating element or the position of a proportional valve The PWM works by first turning on the output to full voltage for a short while and then shutting it off for another short while and then turning it on again and so on in consistent and accurate time intervals This can be illustrated with the following diagram Load Voltage P V ful Average a i a b XV Ful Figure 11 1 The average voltage seen by the load is determined by the duty cycle of the PWM waveform The duty cycle is defined as follow a D le 9 uty Cycle ENT x 100 Period a b Frequency 1 period Hz Average voltage duty cycle multiplied by the full load voltage Since the voltage applied to the load is either Fully ON or Fully OFF it is highly efficient because the switching transistors are working in their saturated and cut off region and dissipate very little power when it is fully turned ON 11 2 EZWire1616 PLC PWM Outputs Technical Specifications No of Channels Duty Cycle range 0 00 to 100 00 Worst case resolution Available Frequencies Hz 1Hz to 50 KHz Frequency Errors lt 0 01 100Hz gt 0 5 10KHz gt 2
151. dress 2 1 3 DNS Server IP Address 2 4 2 1 4 2 4 No of Connections FServer Modbus TCP 2 1 5 FServer Port No EE 2 4 2 1 6 Modbus TCP Secondary Port No 2 5 2 1 7 LAN Speed ue 2 5 2 1 8 ai aaiae ad uiaiia 2 5 Node Name 2 1 9 Username and Password FServer ov 2 5 2 1 10 2 5 Use Username Password YeS NO 2 1 11 aana aidie nienie 2 5 Access Level 2 1 12 nnana 2 6 606 311013 Advanced 2 1 13 2 6 Standalone Version of Ethernet Configuration Software 2 1 14 Page Iii CA TRIANGLE URA RESEARCH INTERNATIONAL 1 j USER MANUAL 2 8 Connecting Ethernet to the PLC 2 2 2 8 Connecting the PLC to a Local Area Network 2 2 1 Setting up Ethernet Commu
152. e Multiple Data Memory DM 1 to DM 4000 Note This new command is available only to Fx PLC Command Format R_ Vv D 16 16 16 16 16 16 t6 16 Starting DM address Number of DM 0001 to OFAO 400010 0001 to 0032 50 Dec Response Format ER v b 16 16 fie SS Header 17 Data Hex 4 Hexadecimal Digit for 16 bit integer 16 eM Last data E g To read the value of DM 3600 to DM 3609 send host link command RVDOE10000A o_O TRIANGLE Z URA RESEARCH 16 7 LI Ki INTERNATIONAL Chapter 17 IR Remote Control 16 17 Read Variable Single Floating Point Array FP 1 to FP 1000 Note This new command is available only to Fx PLC Command Format PR v F jejeje jie o Sy ege 0001 to OFAO 400010 index to FP variable Response Format Pedy Te eee e e e e 15 8 Hexadecimal Digit in 32bit IEEE format E g To read the value of FP 20 send host link command RvF0014 If variable FP 20 contains the value 1 2345E 2 0 012345 PLC will send the response string as RVF3C4A42AF 16 18 Read Variable Multiple Floating Point Data FP 1 to FP 1000 Note This new command is available only to Fx PLC Command Format PR v F 16 16 16 16 16 TI NT ST Starting FP index Number of FP 0001 to 038 1000410 0001 to 0019 25 Dec Response Format Pe Lv Lr eere ele re Deler ee Header 1
153. e string data stored at EEPROM address 10 send host link command RXS000A The response string will contain string data stored in the EEPROM maximum 40 characters ro hn 16 17 INTERNATIONAL Chapter 17 IR Remote Control 16 44 Write Analog Output Upon receiving this command the PLC updates the value of its DAC data at the analog output channel i e no need for PLC to execute SETDAC to update the analog output Command Format 01151251951515 16 16 16 jie jiejie o a eme beggen Starting Analog channel DAC output data DAC output data channel 01 02h count for 1 channel for subsequent ch Hex Response Format KT channel count Hex 16 45 Write EEPROM Integer Data Command Format Starting EEPROM count Hex data for starting Address 0001 xxxx 01 10h EEPROM address 165116711611601 16 16 data for subsequent EEPROM addresses Response Format Maximum allowable word count per command is 16 01 to 10 Hex 16 46 WRITE EEPROM String Data Command Format wt x stntntntateta f te o EEPROM String ASCII characters Address Hex max 40 characters 35 2 TRIANGLE 16 18 D ef Dr 4 RESEARCH LI Ki INTERNATIONAL Chapter 17 IR Remote Control Response Format wjxjs gt o E g To write the string data Hello TRI at EEPROM String address 12 send host link command RX 000CHello TRi
154. e the signal wire pair will somehow pull all the RS485 devices to some reference point Failure to provide a common ground is a potential source of serious trouble as signal wires with a floating ground easily induce large voltage differences between nodes when subjected to electromagnetic interference Hence for reliable operation it is important to provide the common ground A grounded shield also has the additional advantage of shielding the electrical signals from EMI 15 5 3 Single Master RS485 Networking Fundamentals RS485 is a half duplex network i e the same two wires are used for both transmission of the command and reception of the response Of course at any one time only one transmitter may be active The EZWire1616 implements a master slave network protocol The network requires a master controller which is typically a PC equipped with an RS485 interface In the case of a PC you can purchase an RS 485 adapter card or an RS232C to RS485 converter and connect it to the RS232C serial port A EZWire1616 can also be programmed to act as the master it can communicate with other PLCs by executing the NETCMD function or the READMODBUS or the WRITEMODBUS commands the latter two are for communicating using MODBUS protocols only and are covered in Section 14 8 RESEARCH INTERNATIONAL TRI TRIANGLE 15 7 Chapter 15 Host Link Communication Protocol Only the master can issue commands to the slave PLCs
155. eb Control 2 39 2 10 1 PROGRAMMING I O AND INTERNAL RELAYS 3 1 3 ITO CHOI cca 000 3 1 3 1 3 1 Programming DIO with Ladder Logic 3 2 S231 For Physical VO EE 3 1 3 1 For Internal Relays NOn Latching 3 2 2 For Internal Relays atching cee eeeeaeeeeeeeeceaeeesaaeeseaeeseeeesaeeeeeneeeed 3 1 3 2 3 Programming Examples 3 1 3 2 4 3 1 Example 1 Editing Label Names 3 2 4 1 3 2 6 0660 0 6066 Example 2 Creating a Simple Ladder Logic Cireun 3 2 4 2 3 2 600 Example 3 Creating a Latching Relay 3 2 4 3 3 2 2 121412121412 1 Programming DIO in a CUSTOM FUNCTION cceseeeeesece 3 3 3 3 Editing Label Names 3 3 1 3 3 Controlling UO from Custom Functions 3 3 2 Example 1 Turn on off an Output 3 4 3 3 3 Example 2 Toggle an Output 3 4 3 3 4 Example 3 Test the Status of a
156. ecifies which internal relay will be activated once the motor has moved count number of steps This relay would be cleared when the STEPMOVE command is executed in case it was already activated 10 4 5 1 Example PLC as a Motor Controller In this example the PLC would be a controller and would send the control pulse and direction pulse to a driver board Moving Forwards STEPMOVE 1 500 101 channel 1 would send 500 pulses to a driver and then turn on relay 101 STEPMOVE 2 750 102 channel 2 would send 750 pulses to a driver and then turn on relay 102 STEPMOVE 3 200 103 channel 3 would send 200 pulses to a driver and then turn on relay 103 Moving Backwards STEPMOVE 1 500 101 channel 1 would send 500 pulses to a driver and then turn on relay 101 STEPMOVE 2 750 102 channel 2 would send 750 pulses to a driver and then turn on relay 102 STEPMOVE 3 200 103 channel 3 would send 200 pulses to a driver and then turn on relay 103 Ti aes 10 6 INTERNATIONAL Chapter 10 Stepper Motor Control 10 4 5 2 Example PLC as a Full Step Motor Driver Moving Forwards STEPMOVE 11 8000 101 channel 1 would send 8000 pulses to a motor and then turn on relay 101 STEPMOVE 12 50 102 channel 2 would send 50 pulses to a motor and then turn on relay 102 STEPMOVE 13 900 103 channel 3 would send 900 pulses to a driver and then turn on relay 103
157. ed and listen to all serial data coming through the COMM ports The CPU tries to determine if the serial data conforms to a certain protocol and if so the COMM mode is determined automatically 2 Once the protocol is recognized the CPU sets that COMM port to a specific COMM mode which enables it to process and respond only to commands that conform to that protocol Error detection data such as the FCS LRC or CRC are computed accordingly which method is used to verify the integrity of the received commands If errors are detected in the command the CPU responds in accordance with the action specified in the respective protocols 3 When the COMM port enters a specific COMM mode it will regard commands of other protocol as errors and will not accept them Hence for example if COMM 1 has received a valid MODBUS RTU command which puts it in an RTU mode it will no longer respond to TRiLOGI s attempts to communicate with it using the NATIVE mode You will receive a communication error if you try to use TRILOGI to access a PLC COMM port that has just been communicating in other protocol modes 4 To improve the flexibility of switching from one COMM mode to another The EZWire1616 incorporates a COMM mode self reset timer such that a specific COMM mode will time out automatically and enters into AUTO mode after 10 seconds if no more commands are received from that COMM port When a user wants to switch from one COMM
158. ed by STR x n function TR RESEARCH 13 2 INTERNATIONAL Chapter 14 Serial Communications Chapter 14 Serial Communications Le v TRIANGLE DA RESEARCH LJ INTERNATIONAL Chapter 14 Serial Communications 14 SERIAL COMMUNICATIONS 14 1 Introduction There are 3 serial ports on the EZWire1616 including 1 RS485 port and 2 RS232 ports All three of these serial ports have full Modbus ASCII RTU and Host Link Protocol drivers so that all three serial ports can be used independently All three serial ports on this PLC can also be programmed to accept or send ASCII or binary data using the TBASIC built in commands such as INPUT n INCOMM n PRINT m OUTCOMM n d The first serial port COMM1 is an RS232C port female which is compatible with most PC s 552320 ports The second serial port COMM2 is also a RS232C port same as COMM1 except it uses a male connector The third serial port COMMS is a two wire RS485 port that allows multiple PLCs to be connected to a single host computer or a master PLC for networking or to implement a distributed control system Note Each of the 3 serial ports has its own pair of comm LED indicators that will light up whenever the corresponding serial channel sends or receives data This makes it extremely convenient for troubleshooting serial communication problems 14 2COMM1 RS232C Port with Female DB9 Connector This port is configured as a DCE Data Communication Equipment
159. ed for the PLC to connect to establish a data connection Upon receiving this port number the PLC will make a second TCP connection to the given port and then the actual file transfer will begin A new network service command tag named FTPUPLD handles the negotiation between the FTP Server and the PLC as well as handling of the data transfer from the PLC to the FTP server The following is the syntax PRINT 4 lt FTPUPLD Zxxx yyy destination file name gt Where Zxxx yyy is the file name of the extended file that the PLC has access to The destination file name can be any legal name acceptable to the server so you can attach a date or time stamp to the file name for easy identifications When the above lt FTPUPLD gt command is run the PLC will send the actual STOR command in the background to the FTP server and then obtain the port number from the server and it will then make a data connection to it and file transfer can then begin 18 8 3 Monitoring The FTP Upload Progress Once the file transfer begins the PLC firmware will handle the rest of the file transfer until either the file has been completely transferred or the transfer is aborted due to a network or server trouble You can monitor the progress of the file transfer using either the STATUS 4 or STATUS 20 functions 0 FTP client was idle or last FTP failed 1 FTP data transfer just started 2 1st FTP segment transferred now transferring the rest 3
160. ed in the PLC The user guide describing how you can modify the control webpage can be downloaded directly from http www triplc com documents WebApp UserGuide pdf 2 10 1 Next Generation of Super PLC Web Control These web files can be accessed from any standard web browser that supports AJAX technology Internet Explorer Firefox Chrome Safari locally as long as your EZWire PLC is connected to the LAN local area network or from anywhere in the world as long as your EZWire PLC is connected to the Internet Even the iPhone Android phones and other smartphones that support AJAX can be used to access these web pages which means your application can be controlled and monitored from anywhere while on the go This new version makes use of the newer Jquery UI and no longer utilizes the M JS JavaScript file Instead it calls the Jquery file remotely no longer stored inside the PLC Either way the web files are only accessible from standard browsers that support AJAX technology However the HTML files are designed to be easily modified by anyone even if you don t have any programming experience The purpose is to be able to easily customize the web page layout for your specific application by defining some label names and a background image without having to worry about the programming required to interface to the PLC which is already taken care of The basic HTML file O HTM is the file where simple modifications can be made All o
161. er provided in the new web app download because it is loaded remotely In the past M JS had been stored inside the PLC and was available directly for editing However now the user modifications in the HTML file are more expanded and in order to save space for additional files as well as protect against accidental modification of the M JS file it is now stored outside PLC memory If you are an experienced web programmer or you plan to outsource web programming services to customize your PLCs web interface then you may obtain a copy of this file for more advanced editing by writing to support triplc com and providing your purchase references purchaser s name company name invoice etc Of course you may also like to build your own HTML and JavaScript Jquery control structure which is entirely feasible for any experience web programmer 2 9 1 Installing the FileZilla program First please download the FileZilla client from http filezilla project org Once you have gone to the web page from the above link you will need to select the client version to download Then you need to select the software version for your computers platform typically the Windows version and download it to your computer This is the installation setup file which you will need to execute after it has downloaded Please perform a default installation by following the installation steps 2 9 2 Configure FileZilla to Communicate with the EZWire1616 After install
162. erial port n that is to be used as a gateway serial port be configured to be No protocol by running the SETPROTOCOL n 10 statement once This is to ensure that the serial data returned from the RTU slaves will never be interpreted wrongly by the master PLC as incoming commands which could lead to errors The same advise applies to PLC programs that use the serial port to run READMODBUS WRITEMODBUS READMB2 and WRITEMB2 commands 19 5 Modbus TCP Gateway Sample Program Please download the following self explanatory TRiLOGI sample program that demonstrates the new Modbus TCP Gateway capability via any of the selected COMM port http Awww tri plc com trilogi modbusgateway zip Ti aes 19 3 INTERNATIONAL
163. ersion of the TRILOGI program may not detect that the connection has been closed and it may instead think that the PLC is not present When this happens you should click on Controller menu and select Disconnect to properly shut down the connection that has already been reset by the PLC 2 If you are unable to connect to the PLC then check that both the PLC and the PC running your TRILOGI software are connected to the same network and are on the same subnet Generally for a subnet mask of 255 255 255 0 if the PC s IP address is 192 168 1 xxx then the PLC should have an IP address of 192 168 1 yyy and it will not work if the PLC has IP address such as 192 168 0 yyy or 192 168 2 yyy since this means that the two devices are on different subnets Likewise if your PC s IP address is 192 168 0 xxx then please change your PLC s IP address to 192 168 0 yyy Also ensure that the PLC s IP address is not already assigned to another device on the same network otherwise a conflict would occur and communication is not possible 2 4 Using F series PLC Network Services Commands The EZWire1616 implements a list of Network Services commands similar to what you may have read in the User s Manual of the X Server NS commands and TLServer Files and Email Services Ti aes 2 16 INTERNATIONAL Chapter 2 Ethernet Port These Network Services or NS in short can be used to instruct
164. es are free to use with your PLC NOTE if the routers gateway address is 192 168 1 1 the default PLC IP address 192 168 1 5 will most likely work unless it is already used by another device on the same network If it is free to use the next two steps can be skipped as the PLC will already be able to connect to the LAN 2 Connect to the PLCs serial port from the PC with TRILOGI and TLServer 3 Edit the PLC network settings using the Ethernet amp ADC Configuration tool from the Controller menu in TRILOGI Only the IP address is necessary to configure for basic connection to the LAN Please refer to the Quick Connection guide in appendix 1 of the i TRiLOGI Programmers Reference Manual to connect the PLC to your PC via serial port Please refer to section 2 1 of this manual for more detailed information on network configuration Network Wiring You will likely already have a network available that consists of an Internet modem that provides Internet to a wired or wireless router which has at least one PC connected to it In this case all that needs to be done is connect the PLC to the router with standard Ethernet cable The final network configuration will likely resemble the below simple network diagram Tai aes 28 INTERNATIONAL Chapter 2 Ethernet Port If you are on a corporate network then you will need to consult the IT administrator to get the PLC connected to the network Modem Router
165. et OT a Device ID 00 to FF The device ID is to be used for the multi point communication protocol so that the host computer can selectively communicate with any controller connected to a common RS485 bus see Chapter 3 for details The ID has no effect for point to point communication The device ID is stored in the PLC s non volatile memory and therefore will remain with the controller until it is next changed 16 2 Device ID Write Command Format EE BR EAs Ba now Deve Device ID 00 to FF TEE Format E g To set the PLC s ID to OA send command string won to PLC 16 3 Read Digital Input Channels Command Format o oo 8 bit Channel Hex 35 Ten Resear 16 1 INTERNATIONAL Chapter 17 IR Remote Control Response Format A 33 1 8 ES 8 bit Data Hex 16 3 1 Definition of Input Channels The following table shows the input numbers as defined in TRiILOGI s Input entry table corresponding to the input channel number Bit7 deen Numbers Bito CHOO CHO1 CHO2 CHO3 CH04 CHO5 CHO6 CHO7 CHO8 CHO9 CHOAie CHOBie 95 94 CHOCie 104 103 102 101 100 95 98 97 B E COHEN CHiF ie The 8 bit inputs of each channel are represented by a two byte ASCII text expression of its hexadecimal value For example if inputs 1 to 3 are logic Oe inputs 4 to 10 are logic 1 s and all other inputs are lo
166. f the provided HTML files are actually 0 HTM because only the first character of the name is used so 0 C001 02 HTM becomes 0 HTM The first release of this new Web control application accepts up to 16 I O buttons linked to Relay 128 to 144 16 floating point FP variables 16 DM variables and 8 sliders that can be attached to display and or control any of the FP 1 to FP 16 or DM 1 to DM 16 variables Any of these control elements can be selectively displayed and their position size and color are all user customizable using a simple text editor with no programming required at all See below for a screenshot of 0 C001 02 HTM Ti Bees 2 39 INTERNATIONAL Chapter 2 Ethernet Port Continuous Update Refresh Loc x 396 y 460 Motor Heater E RLY131 oos e 234500 Fr S ch eum egjs G Ov 2 Gun EW FP 1o DEIER Fro EE au 2 Ga 0 1000 A ell Refer to the user guide linked above for more information on the available user modifications TR RESEARCH 2 40 INTERNATIONAL Chapter 3 I O and Internal Relays Programming UO and Internal Relays Programming Chapter 3 TRIANGLE RESEARCH INTERNATIONAL 92 URA j Chapter 3 I O and Internal Relays Programming 3 PROGRAMMING I O AND INTERNAL RELAYS 3 1 Introduction The EZWire1616 will have a certain no of physical digital inputs and outpu
167. ferenced PLCs connected in a network This results in more elegant implementation of complex control systems and simplifies maintenance jobs 14 5Changing Baud Rate and Communication Formats Use of the SETBAUD Statement The EZWire1616 PLC s COMM ports are highly configurable All 3 COMM ports can be set to a wide range of baud rates You can also program them to communicate in either 7 or 8 data bits 1 or 2 stop bits odd even or no parity The baud rate and communication formats of the serial ports are set by the following command SETBAUD ch baud_no ch represents the COMM port number 1 2 or 3 only The baud_no parameter takes a value from 0 255 amp HO to amp HFF which allows for additional configuration of the communication format The upper 4 bits of baud_no specify the communication format number of data bits number of stop bits and parity and the lower 4 bits represent the baud rate Hence the baud_no for 8 data bit 1 stop bit and no parity is the same as the old models providing compatibility across the PLC families Once the new baud rate has been set it will not be changed until execution of another SETBAUD statement The baud rate is not affected by a software RESET but the settings will be lost when the RESEARCH INTERNATIONAL CO TRIANGLE Ia 14 4 Chapter 14 Serial Communications power is turned OFF The available baud rates and their corresponding baud rate numbers for COMM1 2 and 3 are sh
168. fications all Modbus TCP servers must listen on port 502 However Modbus org also permits the device to be assigned a different secondary port number As such the Modbus TCP server will always listen on port 502 for all of its connections by default Should you choose to define a secondary port number then the Modbus TCP server will only listen on port 502 on one connection while the additional connections 1 to a maximum of 4 would be listening on the secondary port You may specify any port number between 1024 and 65535 except for the port number already used by the FServer to be the secondary port number Please see the TRILOGI programmer s manual for an explanation of the use of the port number One reason why you may want to change the port number is to use the port forwarding capability of an NAT router so that different F series PLCs may be accessible from the Internet using the same public IP address of the router but with different port numbers 2 1 8 LAN Speed You can set the LAN speed of the EZWire1616 to be either 10 Mbps or 100 Mbps default per second using this menu option Most modern Ethernet switch or router will automatically connect to the PLC using its default LAN speed and there is usually no need for user to configure this option except in very special application where the devices are connected via a 10Mbps Ethernet hub which demands all connected device to be set to the same 10Mbps LAN speed 2 1 9 Node
169. g built in so the biasing resistors may not be needed However if the master is a EZWire1616 then you should use the biasing resistor to fix the logic states to a known state Although in a lab environment the PLCs may be able to communicate without the biasing resistors their use is strongly recommended for industrial applications 15 5 2 Protection of RS485 Interface The simple direct multi drop wiring shown in Figure 15 2 will work well if all the networked PLCs are in close proximity and they all share a common power supply They will even work for long distance as long as there are no wiring errors However in an industrial environment the PLCs are most likely far apart and may each have their own power supply Since processes are often modified regularly should somebody on one occasion by mistake short one of the PLC s RS485 to high voltage all the PLCs connected to the same RS485 wiring will be fried simultaneously This can result in very costly down time for the whole process because all of the PLCs connected to the network will need to be repaired Hence for networking over long distances and involving more than a few PLCs it is important to either strengthen or protect the RS485 interface as described below 1 You can replace the standard RS485 driver 75HVD3082 on the PLC with a fault tolerant RS485 driver IC part number LT1785AIN8 This 8 pin IC is made by Linear Technology and can Tri eee 15 6 INTERNATIONAL
170. ghout your program code 1 7 4 Extended Data File Storage EZWire1616 supports extended data file storage for storing web pages and some are directly accessible from within the PLC program For more information please refer to Chapter 20 of this manual RESEARCH INTERNATIONAL TRI TRIANGLE 1212 Chapter 1 Installation Guide 1 8 DIP SWITCHES DIP Switch OFF Low SW1 1 All outputs relays timers and DM 1 to DM 4000 data are non volatile and counter values are non retentive will not be reset Swe SW1 3 e Disable the use of username password and Trusted IP for FServer and Modbus TCP Server e PLC IP address defaults to 192 168 1 15 9080 SW1 4 Normal Run mode Suspends execution of the ladder logic program But host communication remains active 1 8 1 Usefulness of SW1 4 We have taken every effort to ensure that the host communication is always available even when the user program ends up in a dead loop This allows the user to re transfer a new program to the PLC and overwrite the bad program However you may still encounter a situation whereby after transferring a new program to the PLC you keep encountering communication errors and you are unable to erase the bad program This is especially common if you have been experimenting with the communication commands such aS SETBAUD SETPROTOCOL PRINT or OUTCOMM These commands may modify the communication baud rate format or protocol or set the PLC to send data out
171. gic 0 s then if you send command 5200 you will get the response RIF8 1111 1000s 16 4 Read Digital Output Channels Command Format RSR 8 bit Channel Hex Response Format PR o ie ie oe 8 bit data Hex 35 2 TRIANGLE 16 2 Dr 4 RESEARCH LI Ki INTERNATIONAL Chapter 17 IR Remote Control Please refer to the Input Output vs Channel Number table described in the section 16 3 Read Digital Input Channels for details 16 5 Read Internal Relay Channels Command Format PRE REn fof o KT 8 bit Channel Hex Response Format PR R te te O KT 8 bit data Hex 16 5 1 Definition of Internal Relay Channel Numbers All Fx PLCs support 512 internal relays the channel definition of the first 256 internal relays is the same as the inputs and the outputs The remaining relays and their assigned channels are shown in the following table bit7 Relay numbers bm CH2016 CH21 ei CH2246 CH23 16 CH24 46 CH25 16 CH26 6 CH27 16 CH28 16 CH29 46 CH2A 6 CH2B 6 488 496 504 512 fee J el aJ e J ee e CH3Ai6 8 030 6 496 CHE 504 2 16 6 Read Timer Contacts Command Format EVES ERE EARS oe 8 bit Channel Hex Ca TRIANGLE 2 URA RESEARCH 16 3 LI Ki INTERNATIONAL Chapter 17 IR Remote Control Response Format Te ie fd 8 bit data in He
172. gin sequences As such Modbus TCP 35 tree 2 24 INTERNATIONAL Chapter 2 Ethernet Port protocol is itself inherently insecure and not meant to be exposed directly to the Internet where malicious attacker can take control of the equipment Typically Modbus TCP devices are deployed in a local area network and protected by the network firewall A SCADA or OPC server program is used to connect to the Modbus TCP devices on LAN and the PC running the SCADA OPC server software can then be the only device exposed to the Internet where secured access can be implemented by the server software External HMI client software can then make connection to the SCADA OPC server which will in turn access the Modbus TCP devices such as the F series PLCs However if you only have a single Modbus TCP device and need to expose it to the public Internet for external access then you ought to consider the security issues associated with MODBUS TCP connections Since a MODBUS TCP connection does not require a username password login sequence unlike the FServer login the only way to protect against unauthorized access is through the Trusted IP addresses defined using the F series Ethernet Configuration software To define a list of Trusted IP addresses please click on TL7 s Controller menu and select Ethernet amp ADC Configuration Next click on the Advanced button on the FServer Basic Configuration and you shou
173. have to enter all your host link commands in multi point format Since the multi point protocol requires a FCS frame check sequence character to be appended to the end of the command string you may be able to get around it by using the wildcard FCS 00 in place of the actual FCS E g To read input channel 02 from a PLC with ID 01 you can enter the command string as 01RI0200 For TLServer version 2 1 and above there is an FCS button that lets you compute the actual FCS for the string in the command string text field You can then use the actual FCS with the command string to completely test your command E g If you type in the string 01R1I02 in the command string but do not press Enter and then click on the FCS button the FCS for this string will be computed and shown as FCS 58 as shown in the following figure TR RESEARCH 16 22 INTERNATIONAL Chapter 17 IR Remote Control ES Serial Communication Setup amp Test J Port Name com D Baud Rate gt Data Bits 8 sl Stop Bits d Parity None Time Out ms 500 Open Port Close Port Connect Modem Auta Answer Phone Wo Command String Press Enter to Send ER Response Strings amp Modem Messages Hang Up Spec Change PLCID Close You now can enter the complete command string as 6012720258 and it will be accepted by TLServer Note If the PLC has executed a
174. he FServer listens on the default ports 9080 and 9081 Port 9080 is also the default port that i TRILOGI uses to connect to TLServer a PC based server program that is needed for programming the PLCs via RS232 or RS485 serial ports One FServer connection is always reserved for port 9081 and the remaining FServer connections are allocated to port 9080 This allows the user to supply multiple connections for the webpage control or TRILOGI or ExcelLink as well as one dedicated connection for maintenance or programming or special user access 2 A MODBUS TCP server that listens on port 502 and supports the industry standard MODBUS TCP protocols e These two servers share the same Ethernet port and therefore the same IP address and gateway addresses described in the following sections e EZWire PLC host both the FServer and Modbus TCP Server each providing multiple simultaneous connections to external clients This means that it is possible to connect multiple TRILOGI ExcelLink and Modbus TCP clients to the PLC all at the same time Section 2 1 5 shows you how you can change the maximum number of connections for each server 2 1 1 IP Address One of the most important parameters that you must define here is the IP Address field By default every F series PLC is shipped with the static IP address 192 168 1 5 You will need to assign the PLC s with an IP address that is unique on your network and yet is accessible from your PC If yo
175. he data you want Note that pre formatted sections are treated as tables The entire page Only the tables C One or more specific tables on the page Enter table name s or number s separated by commas 3 Choose how much formatting from the Web page you want your data to keep Ze None C Rich text formatting only C Full HTML formatting Save Query Advanced oe Cancel Figure 2 6 2 To see how the response data changes in response to the actual PLC s input please turn on some of PLC s digital inputs 1 to 8 then right click on the cell where the web query was defined and select te Refresh Data command You should see a new RIXX string appear at the selected cell where XX is the hexadecimal representation of the 8 input bits 1 8 E g if only inputs 2 and 8 are turned ON then the binary pattern is 1000 0010 which in hexadecimal form is 82 and the response string would therefore be RI82 You can then write an excel formula to extract the data 82 and use it for your other computation purpose By using a different Host Link command the Excel spreadsheet can read and write to the PLC s internal data very easily Notes 1 If you have enabled Use Username Password for the FServer you will be prompted by your Excel program to enter the Username and password before you can receive the response data 2 We have provided a more complete Excel spreadsheet example ExcelQuery xl
176. he quadrature signals therefore provide an indication of the direction of rotation The EZWire1616 handles the quadrature signals as follows if the pulse train arriving at input 1 leads the pulse train at input 2 the High Speed Counter HSC 1 increments on every pulse If the pulse train arriving at input 1 lags the pulse trains at input 2 then the HSC 1 decrements Note that if input 2 is OFF then pulse trains arriving at input 1 are considered to lead the input 2 and HSC 1 will be incremented Likewise if input 1 is OFF then pulse trains arriving at input 2 will decrement HSC 1 Inputs 3 and 4 form the inputs for High Speed Counter channel 2 and Inputs 5 and 6 form the inputs for High Speed Counter channel 3 HSC 2 and HSC 3 operate in the same way as HSC 1 described above The fact that the EZWire1616 automatically takes care of the direction of rotation of the quadrature encoder greatly simplifies the programmer s task of handling high speed encoder feedback The HSCDEF statement can be used to define a CusFn to be executed when the HSC reaches a certain pre defined value Within this CusFn you can define the actions to be taken and define the next CusFn to be executed when the HSC reaches another value Please note that the HSDDEF statement will also activate the Pulse Measurement hardware as described in the Pulse Measurement section A programming example of the HSC can be found in your iTRiILOGI program folder
177. he value 12345640 1E240 the PLC will send the response string as RVI0001E240 16 13 Read Variable Strings A to Z Command Format 8 7 5 rea A B C Z Response Format BIV LO ASCII characters of the string variable length E g To read the value of the string variable M send host link command Rv m If variable M contains the string Hello World the PLC will send the response string as RVSHello World 16 14 Read Variable Floating Point A to Z Command Format y A B C Z Response Format tree 16 6 INTERNATIONAL Chapter 17 IR Remote Control ER v 167 16 16 t6 16 16 16 Det Kg Header 8 Hexadecimal Digit in 32bit IEEE format E g To read the value of the string variable M send host link command Rv m If variable M contains the string Hello World the PLC will send the response string as RVSHello World 16 15 Read Variable Single Data Memory DM 1 to DM 4000 Command Format PR v ijijiji SS 0001 to OFAO 400010 Address of DM Response Format R v jiejie Dei 4 Hexadecimal Digit for 16 bit integer E g To read the value of DM 3600 send host link command RVDOE10 If variable DM 3600 contains the value 1234510 303946 PLC will send the response string as RVD3039 16 16 Read Variabl
178. hieve these objectives 15 5 4 1 Multiple Access with Collision Detection There is nothing to stop any PLC from sending out host link commands to other PLCs However if more than one PLC simultaneously enables their transmitters and send out host link commands then the signals will conflict and the messages will be garbled up If the network traffic is low then the solution may be a matter of having the master check for the correct response after sending out a command string If there is error in the response string the master should back off the network for a short while use different timing for different PLCs and then re send the command until a correct response string is obtained Fortunately the NETCMD function of Fx series PLC automatically senses the RS485 lines until they are free before sending out the command string to reduce the chance of a collision It also checks the integrity of the response string for correct FCS Frame Check Sequence characters before returning the string Please refer to the Programmer s Reference for detail description of the NETCMD function However the program must still check the following items in the response string to verify that the string returned from NETCMD function indeed comes from the PLC that it had talked to and not from another PLC which tries to send a command to someone else i The ID is correct ii The header is identical to the command string iii The length of
179. hind a Windows Firewall Please refer to the following Microsoft document describing issues and solutions related to FTP server behind the Windows Firewall http technet microsoft com en us library dd421710 WS 10 aspx Microsoft focuses mainly on the FTP server in their IIS server for obvious reasons instead of Filezilla If you are setting Filezilla as a permanent FTP server behind a software firewall you can try to make the following configuration setup 1 You must specifically setup a range of port number for Passive mode use These are the port number that Filezilla will assign to the PLC to make a data channel connection when it attempts to transfer a file using passive mode The following is an example where two port numbers are assigned so that two PLCs may connect to the Filezilla simultaneously You can add a larger port range if more PLCs may connect to the FTP Server simultaneously TRI RESEARCH 18 13 INTERNATIONAL Chapter 18 Extended File System FileZilla Server Options General settings A IEN TC Welcome mess IP bindings IP Filter Security settings FileZilla Server Use custom port range 41000 41001 1 65535 IPv4 specific Use custom PASV settings if you are operating the server from behind a NAT router or a firewall In that case the IP address of the server is not accessible from outside of the router so you should fill in the correct address here Use
180. ible virtually limitless hard disk storage space that is available in today s PCs For detailed descriptions of the available File Service Tags please refer to TRiLOGI programmer s reference manual under the chapter File amp Email Services All TLServer s File amp Email Services tags such as lt Email gt lt WRITE gt lt APPEND gt lt READ gt and lt READ RTC gt are available to the F series PLC through the use of the lt REMOTEFSs tag You simply have to wrap the abovementioned command tags between the lt REMOTEFS IPAddr port gt and lt REMOTEFSs tag where IPAddr port is the IP address and listening port of the remote TLServer E g through the lt READ RTC gt tag the PLC can synchronize its Real Time clock with a remote TLServer As you will later see this feature is probably not very useful for the EZWire1616 anymore since EZWire1616 has the ability to connect to the NIST Time Server to update its real time clock to Atomic clock accurately Note Only TLServer version 2 1 or above can handle the lt REMOTEFS gt command tag sent by the Fx PLC 2 4 6 Other Network Services Tags We will describe two more Network Services commands lt TCPCONNECT gt and lt MBTCPCONNECTS in separate sections later in this manual Ti Bees 2 21 INTERNATIONAL Chapter 2 Ethernet Port 2 5 MODBUS TCP Server and Client Connection The EZWire1616 supports both the FServer and the industry standard
181. ified for the output on the EZWire1616 datasheet Output 5 to 8 can also be configured as PWM outputs to drive heating elements or proportional valves using the SETPWM command please see Chapter 6 for more information 1 5 2 Digital Output Wiring Diagram Signal 24V Load EZWire1616 PLC co 24V DC Power Supply EE Figure 1 9 Transistor Output Interfacing to Load TR RESEARCH 1 10 INTERNATIONAL Chapter 1 Installation Guide All digital outputs are directly programmable in Ladder Logic as well as in TBASIC custom functions Some programming examples are detailed in Chapter 3 Digital I Os and Internal Relays 1 5 3 Inductive Load When switching inductive loads such as a solenoid or a motor always ensure that a bypass diode is connected to absorb inductive kicks which will occur whenever the output driver is turned OFF User will be glad to know that every digital output on the EZWire1616 PLC already incorporate a flyback protection diode to protect the driver The Diodes are internally connected to the 24V power terminal as shown in the following diagram 24V a Inductive bypass diode DC only Diode s reverse break down voltage should be at least 2 x load voltage PLC NPN Digital Output Figure 1 7 Protecting Solid State Output Against Inductive Kick 1 6 LCD Display Port The EZWire1616 PLC does not have a LCD port built in like some other Super PLC boards This
182. ign the mix of maximum connections between the two servers as long as the no of Modbus TCP connections does not exceed 5 and the no of FServer connections does not exceed 8 This means that you can define 5 to 8 FServer connections and 2 to 5 Modbus TCP connections When you change the number in one box the other box will change automatically so that the total number of possible connections remains at 10 2 1 6 FServer Port No The Port number is a 16 bit integer range 0 to 65535 that needs to be specified on top of the IP address when accessing the FServer from across the network The default value is 9080 which is the same default value used by the TLServer and TRiLOGI client software A second port with a value of the main port 1 is automatically defined for a single FServer connection Port 9081 is defined by default The purpose is to allow for a dedicated access port in case the connections on the other port are used up Please see the TRILOGI programmer s manual for an explanation of the use of the port number One reason why you may want to change the port number is to use the port forwarding capability of an NAT OH o gt TRIANGLE 8 Toi RESEARCH 2 4 INTERNATIONAL Chapter 2 Ethernet Port router so that different F series PLCs may be accessible from the Internet using the same public IP address of the router but with different port numbers 2 1 7 Modbus TCP Secondary Port No According to MODBUS ORG speci
183. ill apply to the EZWire1616 PLC virtual display output 13 1 SETLCD Command The SETLCD y x string TBASIC command allows you to easily display any string of up to 20 characters on the y line starting from the x column E g to display the message EZWire1616 on the 3 line starting from the 5th character position from the left end of the screen you use the command SETLCD 3 5 EZWirel616 Normally y 1 2 3 4 x 1 2 20 Integers must be converted to strings using the STR or HEX function before they can be displayed using SETLCD You can use the concatenation operator to combine a few components together in the command E g SETLCD 1 1 Rm Temp STR ADC 1 100 3 CHRS 223 07 The function STR ADC 1 100 3 reads the content of ADC channel 1 divides it by 100 and converts the result into a 3 digit string The CHR 223 appends a special character which corresponds to the symbol E g if ADC 1 returns the value 1234 the final string being displayed will be Rm Temp 012 C 13 2 Special Commands For LCD Display If you use the SETLCD command with line 0 then the strings will be treated as special instructions to be sent to the LCD module to program it for various modes of operation This includes blinking cursor underline cursor or no cursor as well as display shift mode You have to refer to the LCD manufacturer s data sheet for the detailed co
184. in order to save space since this board is typically installed in industrial control panels that either incorporate HMIs or have no display interface 1 6 1 Programming The LCD Display Even though the EZWire1616 can t output to a physical display it can still use the built in TBASIC commands to output text and data to a virtual display such as online monitoring or the web interface Some programming examples for the LCD display are presented in Chapter 13 1 7 Program and Data Memory 1 7 1 Program Memory The EZWire1616 has by default 23 5K words 16 bit of program memory stored in the CPU Flash memory area Each ladder logic element contacts or coils takes up 1 word of memory A TBASIC statement or function takes up half a word to four or five words depending on the number of parameters the statement or function has The program memory can be erased and reprogrammed more than one hundred thousand times which is a limit that you are unlikely to ever reach Tpi Bae 1 INTERNATIONAL Chapter 1 Installation Guide 1 7 2 Non Volatile FRAM Memory The EZWire1616 PLC employs 6K words of a high tech memory product called Ferromagnetic RAM FRAM FRAM is non volatile memory that has no practical limit on how often it can be overwritten In fact since they are really RAM memory in nature there is no erase and program time penalty and you can read and write to them at full speed Also accessing the FRAM freq
185. ing When you run the ADC n function the PLC firmware would return the average of these past readings instead of the instantaneous new reading You can define a moving average of 1 to 9 points using the procedure described in Section 5 4 5 Defining a larger moving average can better help to even out fluctuations in ADC readings that can be caused by interference from digital noise However the larger the moving average the slower the ADC n function can detect a sudden change in the amplitude of the analog signal due to the averaging effect For a system that needs to quickly detect a signal change consider using either a smaller number of moving average points or call the ADC n function more frequently so that a sudden change can be detected earlier 5 2 6 Scaling of Analog Data The 12 bit analog inputs on the EZWire1616 return data in the range of 0 to 4095 which corresponds to the full range of the voltage input presented at the analog pin However very often a user needs a formula to translate this numeric data into units meaningful to the process e g degree C or F psi etc To do so you need to know at least two reference points of how the native unit maps to the PLC s ADC reading Reference Point ADC Reading x1 al x2 a2 OH o TRIANGLE 8 Toi RESEARCH 9 9 INTERNATIONAL Chapter 5 Analog I Os Hence for any reading A ADC 1 the corresponding X is derived from X x1 A al gt X x2 x1
186. ing Data To The End Of The File Syntax PRINT 8 lt APPEND Zxxx yyy gt where Zxxx yyy is the file name If successfully executed the lt APPEND gt command will open the file and set the file pointer to the end of the file Thereafter any string data following a PRINT 8 command will be appended to the end of the file When the PLC has completed appending data it must close the file by executing the command PRINT 8 lt gt As per the lt WRITE gt command the CPU should also use the STATUS 2 command to check whether the lt APPEND gt command has been successfully executed before begin writing data to it Example PRINT 8 lt APPEND Z STRS F 3 txt gt S STATUS 2 Status 2 returns 1 if successful IF S lt gt 1 RETURN ENDIF FOR I 1 to 100 PRINT 8 STRS I 4 This is the Appended first line PRINT 8 STRS I 4 This is the Appended second line SETLCD 1 1 Append STRS I 4 NEXT PRINT 8 lt gt close the file 18 4 3 Delete A File Syntax PRINT 8 lt DELETE Zxxx yyy gt where Zxxx yyy is the file name of the file to be deleted There is no need to close a deleted file 18 4 4 Open A File For Reading Syntax PRINT 8 lt READ Z2xxx yyy gt where Zxxx yyy is the file name of the file to be opened for reading If the file has been successfully opened for reading after execution of the PRINT 8 lt READ gt command the PLC Ti Bees
187. ing point A tO 16 32 Write Variable Singe Data Memory DM 1 to DM 4000 cssseceeessseeeeees 16 13 16 33 16 14 Write Variable Multiple Data Memory DM 1 to DM 4000 16 34 16 14 Write Variable Singe Float Array FP 1 to FP 1000 16 35 Write Variable Multiple Float Array FP 1 to FP 1000 ccsssssceeeessseeeeees 16 14 16 36 16 15 Write Variable System Variables 16 37 16 15 Write Variable High Speed Counter HSCPV J 16 38 Halting the PLC 1 1 1 aaaea aa aSa aa asa Saa aaa aapa cus aa aaa daa aE 16 16 16 39 ennn nnnn nnmnnn nnn 16 6 2 2 2 2 2 12 2 2 2 2 12 2 2 2 1 2 2 1 1 1 12 1 1 1 1 1 1 1 1 1 Resume PLC 16 40 Read Analog Input 1 001010101 16 16 16 41 16 7 Read EEPROM Integer Data 16 42 ennnen nnna 16 7 2 2 2 2 2 1212 14121212 1 1 1 1 1 Read EEPROM String Data 16 43 EE 16 18 Write Analog 16 44 16 8
188. ing the FileZilla client please open it from the start menu or desktop icon and then go to the File menu and select Site Manager The following menu will then pop up Ti Bees 2 33 INTERNATIONAL Chapter 2 Ethernet Port Under the default General tab you will need to enter the Host IP address and Manager Select Entry ETER ETET General Advanced Transfer settings charset configure the Logontype Host 192 168 1 5 Port Servertype FTP File Transfer Protocol H eelere EE GN of e Ire efault is shown in the Logontype Baal example The Port can be left blank and the Servertype can be left as the default User samples as shown Password i Account The Logon type should be set to Normal Simens and the User and Password should be set to the same as for the login to the F New Site New Folder server New Bookmark Rename 5 77 Leed z Nothing else needs to be configured in this area Next go to the Transfer 7 settings tab Connect OK Cancel Figure 2 10 1 AH e 0 Under the Transfer settings tab you Select Entry need to set the Transfer mode to Erre General Advanced Active and check the box to Limit F series Transfer mode number of simultaneous connections Defauk Active Passive The maximum number of connections V Limit number of simultaneous connections should be 1 Maximum number of connec
189. ing to DAC 1 and save it to the PLC After the PLC has rebooted when you execute the statement SETDAC 1 2048 the PLC will apply the multiplication factor of 0 9940 to 2048 before it writes to the DAC hardware The actual DAC output 10 060mA x 0 994 10 000mA 5 5 4 DAC Zero Offset If you plot the line graph for the output current versus the DAC set value the line should normally pass through the origin But if there were any zero offset error then the line would be above or below the origin The DAC output on the EZWire1616 should not have any zero offset error and you normally should just leave these fields set to O However if for any reason there is a need to apply a Zero offset error correction you can enter a value between 100 to 100 into the DAC Zero Offset field The CPU would add the zero offset value you enter into this field to the X in the SETDAC n x statement and only send the sum to the actual DAC hardware 5 5 5 A D Moving Avg This field lets you define the number of points of moving average that the EZWire1616 CPU firmware uses to compute the value returned by the ADC n function Please see explanation of moving average in Section 5 2 5 A larger number of moving Average points has the positive effect of filtering out large noise spikes seen at the analog input but the disadvantage is that the PLC would be slower in noticing a sudden step change at the analog input If you specif
190. interact with the serial buffer a INCOMM n Every execution of the INCOMM n function removes one character from the circular buffer When no more data is available in the buffer this function returns a 1 The data removed by INCOMM will no longer be available for the INPUT command b INPUT n When the INPUT n function is executed the CPU checks the COMM n buffer to see if there is a byte with the value 13 the ASCII CR character which acts as a terminator for the string If a string is present all the characters that make up the string will be removed from the COMM buffer If a completed string is not present then the COMM buffer will not be affected and INPUT n returns a null string This ensures that before a complete string is received the serial characters will not be lost because of the unsuccessful execution of the INPUT n function c INPUT n in Blocking Mode INPUT n is designed to be non blocking and to return immediately i e either it returns a complete string or it returns an empty string This means that INPUT n will not suspend the CPU and wait for a valid string from the COMM port However in real world communication very often you will need d a TRIANGLE 14 7 URI RESEARCH INTERNATIONAL i Chapter 14 Serial Communications to send a command to a device and it takes a while for the device to be able to send back a response string The most efficient way of handling such serial c
191. irewall by default is to block all incoming connections to the FTP Server Thus it can give you a lot of headache when you are trying to connect to the FTP server operating behind the Windows Firewall Notes a The main purpose of Windows Firewall is to protect your PC when you are connected to say a public wi fi network But if your PC is connected to the Internet via a router at work or at home the router hardware itself would act as a firewall to isolate your PCs and a software Firewall is actually redundant If a hacker tried to connect to a port to your public Internet IP address what he reached would be the port on the router and he would not be able to reach your PC unless you have specifically set up to forward all TCP IP messages sent to that port to a specific PC b If you really want to use the Filezilla FTP Server as a permanent server on a PC to receive files and still want to have the Windows Firewall enabled you can refer to the last section in this chapter which describes how to do it TRIANGLE 1 8 1 TR RESEARCH INTERNATIONAL Chapter 18 Extended File System 18 6 Uploading File From PLC to FileZilla FTP Server Directory 18 6 1 Overview of The FTP Protocol The FTP protocol requires two socket connections between the devices performing the file transfer One connection is the command channel where FTP commands such as STOR or DELE and the responses are sent as plain ASCII text strings between the
192. is a highly convenient feature for programming machines or processes that operate in fixed sequences These machines operate in a fixed clearly distinguishable step by step order starting from an initial step progressing to the final step and then restarting from the initial step again At any moment there must be a step counter to keep track of the current step number Every step of the sequence must be accessible and can be used to trigger some action such as turning on a motor or solenoid valve etc As an example a simple Pick and Place machine that can pick up a component from point A to point B may operate as follow Step Action Wait for Start signal Forward arm at point A Close gripper Retract arm at point A Move arm to point B Forward arm at point B Open gripper Retract arm at point B Move arm to point A 0660 NO AIIN oO Tpi eae 41 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers 4 2 Programming timers and counters on Ladder Logic The timers and counters can be programmed in ladder logic in a few simple steps 4 2 1 For Timers Edit the label names Place the input contact s into the ladder logic circuit Place the timer coil at the end of the ladder logic circuit Place the timer contact in one or more ladder logic circuits SONS 4 2 2 For Counters Edit the label names Place the i
193. just a few grams to those for controlling an industrial scale unmanned vehicle e g UAV or unmanned submarine A small self contained RC servo typically cost less than 20 retail price and is incredibly easy to control using the PWM output on the EZWire1616 m rY 0 l o r Figure 11 3 RC Servo and Control Signal RC Servo typically only have 3 wires Power typically 4 8 to 6V anda Control input To position the RC Servo to a position within its range of travel Some are 0 to 90 degree and there are those that can go from 0 to 180 degree you send a positive pulse with pulse width between 1 00 ms to 2 00 ms to the Control input once every 20ms The servo will position the actuator to one end when it receives a pulse of 1 00ms and the other end when it receive a pulse of 2 00ms If you send it a pulse of 1 50ms it will position the actuator to the center Tai es 11 3 INTERNATIONAL Chapter 11 Pulse Width Modulated Outputs In PWM term 1 00ms pulse width every 20ms means a duty cycle of 1 00 20 00 5 00 2 00ms pulse width every 20ms means a duty cycle of 2 00 20 00 10 00 duty cycle So to control the position of the actuator one only needs to send it a positive PWM signal with frequency 1 0 02 50Hz and duty cycle between 5 and 10 The gear and servo feedback mechanism within the RC Servo produces a huge amount of torque relative to its weight for positioning the actuator to the p
194. k Add program l Add port Properties Delete E Notify me when Windows Firewall blocks a new program See also Figure 2 10 4 2 9 3 Transferring and Retrieving Files from the PLC Web Server Now that you have a connection to the PLC s web server and can view the directory listing you should be able to see any files that have been preloaded into the PLC Downloading Files The first thing to do is to download the preloaded files from the web server and store them somewhere on your computer To do this you will need to open up the folder on your computer that you want to store the files in Then you can drag the files from the web server via FileZilla into your destination folder It is best to make a copy of these files as a backup on your computer so that you have the original copies available in case you need them Uploading Files When you are ready to transfer your own web pages or applet to the PLC you just need to drag it from the folder it is saved to on your computer into the bottom right window of FileZilla where the current files are shown If you didn t change the filename you can tell the new file to overwrite the old file Otherwise you will need to manually delete the old file from the PLC s web server in FileZilla by right clicking on it and selecting Delete TR RESEARCH 2 36 INTERNATIONAL Chapter 2 Ethernet Port 2 9 4 Troubleshooting FileZilla File T
195. l 3 will be driven 100 full steps 10 4 3 Half Step Driver Mode STEPMOVE 21 100 1 Stepper channel 1 will be driven 100 half steps STEPMOVE 22 100 1 Stepper channel 2 will be driven 100 half steps STEPMOVE 23 100 1 Stepper channel 3 will be driven 100 half steps The same format should be used for STEPMOVEABS except that the count parameter is changed to the position parameter more details provided in the Programmers Reference manual and also in the program examples section of this chapter 10 4 4 Setting the Acceleration Properties Whether the stepper motor channels are being used to control a stepper motor driver or to drive the motor directly the STEPSPEED command must be executed first in order to define the acceleration settings Once this command has been executed the acceleration settings will not change until another STEPSPEED command is executed with different settings or if the PLC is powered down If the PLC is powered down the STEPSPEED command will need to be executed again before the stepper motor channels can be used However if a software reset executed from online monitoring or within the program the STEPSPEED command does not need to be re executed STEPSPEED ch pps acc Ti aes 10 5 INTERNATIONAL Chapter 10 Stepper Motor Control The ch parameter should be a value betwee
196. l site that you would like to save the files to f Right click on a file in the PLC directory such as 0 HTM and select download You should see the file in the folder on your local site g To move files from the PC to the PLC open the folder in the local site where the file is located and right click it to select upload You should see it in the PLC or you will be asked to overwrite it if the same file name is there already Tai aes 2 37 INTERNATIONAL Chapter 2 Ethernet Port 2 FileZilla Can Connect The First Time But Could Not Re connect After Time Out FileZilla is normally setup to time out after 1 minutes of no activity However Since the PLC s FTP server can only handle a single FTP connection at a time it is good to avoid letting FileZilla time out due to no activity This is because when FileZilla times out it cutoff the connection to the PLC But if for whatever reason the PLC were to miss the disconnection information it will be left in a half open state and will not be able to accept a new connection When this happens and if you try to reconnect to the PLC again after the connection has been dropped by FileZilla you will most likely be unable to connect to the PLC again until after the PLC time out its FTP connection due to no activity The only quick fix is to power on reset the PLC so that it starts up fresh and can accept new connection again You can set the FileZilla timeout settings to a larger number e g
197. ld see the following Advanced Configuration screen The first thing you should do is to click on the Retrieve Parameters from PLC so that you can capture a copy of the Factory Default ema MAC ID 00 1F 2E 01 02 03 ead current configuration in the PLC and you can then modify selectively Advanced Configuration Trusted IP 1 192 168 1 25 2 0 0 0 0 Trusted IP 3 0 0 0 0 4 0 0 0 0 You can define a list of up to 6 Trusted Trusted IP 5 Tonng 6 0 0 0 0 IP addresses in this panel To enable the Modbus TCP Trusted IP click on Mobdus TCP UseTrusted IP FServer UseTrusted IP the Yes button next 10 the en dk hr Au Modbus TCP Use Trusted IP ADC Calib Chi Ch2 Ch4 Ch5 ChB Ch7 Ch8 Long 0 0 Note The FServer can also be enabled Zero Offset p to only allow connections from devices that match one of the Trusted IP defined in this panel This is on top of the username password login sequence that can be enabled disabled from the Basic Configuration screen In other words you can choose either security ADC Moving Avg p method to access the FServer or implement both security methods at the DAC Calib 0 000x Zero Offset ofdatapoints 17 same time Basic Config Retrieve Parameters from PLC ieee After you have defined the list of trusted SaeParameterstoPLO Close IP addresses and checked the Use Trusted IP radio button click
198. le to position the motor at an absolute location while the STEPMOVE command lets you implement incremental moves in either direction for each channel 10 3 1 Interfacing to 5V Stepper Motor Driver Inputs Some stepper motor drivers accept only 5V signals from the stepper motor controller In such a case you need to determine whether the driver s inputs are opto isolated If they are then you can simply connect a 2 2K current limiting resistor in series with the path from the PLC s output to the driver s inputs as shown in Figure 10 4 Stepper Motor Driver Direction Select Input i 12 24v DC _ EZWire PLC P i Power for PLC OUTPUTS Calculation Ir 1 OmA R V 5 0 01 e g for V 24V R 24 5 0 01 1 9K Select R 2K2 Rating 19 2200 0 16W Use 0 5W resistor Figure 10 4 However if the stepper motor driver input is only 5V CMOS level and non opto isolated then you need to convert the 12 24V outputs to 5V This can be achieved using a low cost transistor such as a 2N4403 A better way is to use an opto isolator with a logic level output as shown in Figure 10 5 This provides a galvanic isolation between the PLC and the stepper motor driver 5V OV Steppers supply Logic output oo 12 24V DC LAN Optoisolator Power Supply oy H11L2 or H11L3 _for PLC KEN Quality Technology OUTPUTS To 5V CMOS stepper driver input 2162 resistor 5mA max 2 2K Figure 10 5
199. le and may be connected either to bipolar drivers leaving terminals 5 and 6 unconnected or to unipolar drivers connecting terminals 5 amp 6 together to terminal Since all the EZWire1616 digital outputs are NPN current sink type only 5 or 6 wire type stepper motors can be used If you have a stepper motor with 6 wires most common but you do not have the wiring diagram you may be able to figure out which wire is which terminal by using a multi meter to measure the resistance between coils E g the resistance between terminals 1 and 2 will be twice the resistance between terminals 1 and 5 or between 2 and 5 likewise for terminals 3 4 and 6 There will be no connectivity between terminal 1 and 3 and between terminal 2 and 4 It will however be more tricky to figure out the actual wiring of a 5 wire stepper motor since it is difficult to figure out which is the coil 1 2 and which is the coil 3 4 so some trial and error may be required to get the motor working 10 2 2 Damping Circuits Inductive Bypass PLC s 24V EZWire1616 Power terminals Stepper output terminals Figure 10 2 Since the stepper motor windings are all inductors when a coil is turned OFF an inductive kick will be generated by the collapsing magnetic field which should be bypassed with damping diode or TVS as shown in Figure 10 2 to protect the output driver Ti aes 10 2 INTERNATIONAL Chapter 10 Stepper Motor Control The good news
200. leZilla FTP Server One important capability of the new PLC with r77 firmware is the ability to upload file created by the PLC to an external server on a local area network or on the Internet via the FTP protocol If you have access to a FTP username and password on your company s server or if the SysAdmin is authorized to set up an account for you you can certainly use your own account for testing If not you can download the free Filezilla FTP Server and set it up for testing The ExtendedFileSystem PC6 has a FTP upload demo and it was configured to work with a FileZilla FTP server Using Filezilla has the advantage that you can see the login sequence performed by the PLC when it attempts to connect to the FTP Server so that it is easier to troubleshoot connection problem For professional grade troubleshooting one handy program to have is the Wireshark program which is a TCP IP packet sniffer that allows you to look at the actual TCP IP packets sent between your PC and the PLC However it is important to setup the Filezilla server program properly to minimize connection trouble 18 5 1 Download and Setup FTP Server 1 First download the FileZilla server installer from the following website http filezilla project org download php type server 2 Run the FileZilla Server Interface program which is meant for managing the FTP Server settings Connect to Server V FileZilla Server 127 0 0 1 File Server Edit Serve
201. lient program e g you can download a trial version of Modbus Poll from http www modbustools com for testing you simply specify the F PLC s IP address and connect to it Once connected you will then be able to read from or write to most of the EZWire1616 s internal data from the MODBUS TCP client The PLC s I O and internal variables are mapped to the MODBUS device space according to table 2 5 1 2 5 1 1 Bit Address Mapping All the F series I O bits are mapped identically to both the MODBUS Ox and 1x space The bit register offset is shown in the last column of Table 2 5 1 Although MODBUS names the Ox address space as Coil which means output bits and the 1x address space as Input Status which means input bits only the EZWire1616 treats both spaces the same Some MODBUS drivers only allow a read from 0x space and a write to 1x space but you still use the same offset shown on Table 2 5 1 Example 1 To map an element to the PLC Input 5 you select the MODBUS register address 0 0005 You can also map the element to the PLC s output 2 In that case you should map it to MODBUS register address 0 0258 2 To map an HMI toggle switch symbol to the PLCs input 5 if you are restricted to select only MODBUS 1x address space then you will have to map the switch to 1 0005 and likewise you can map the switch to output 2 using the MOBDUS address 1 0258 However if the driver allows the
202. llowing sub sections c The DNS server may take some time to resolve the domain name If it is unable to resolve the domain name then it will return an error string so your program should test to see if it receives the ERRO7 error message to determine whether the returned string is useable d Although it is possible to embed the domain name directly in the NS command in place of IP address it is usually much more efficient to use the IP address directly if it is known in advance This is because the DNS server may take some time to resolve the domain name into IP address each time it is called and there is a possibility that the domain name server may be overloaded Ti aes 2 18 INTERNATIONAL Chapter 2 Ethernet Port or down momentarily when it is needed and hence complicating the attempt for the PLC to connect to a remote server Therefore we recommend that you use the lt DNS domain gt tag to resolve the domain name into IP address first and then use the resulting IP address for all Network Services commands via the Internet 2 4 3 Send Email Format lt EMAIL recipient email address gt SENDER sender email address SUBJECT whatever text string body of the email line 1 body of the email line 2 lt gt Response lt OK gt Email successfully sent ERR 04 Not Connected Failed to connect to SMTP server Section 2 1 3 ERR 06 Email Failure Failed to complete email transmission STATUS 3
203. logi ExtendedFileSystem zip to download that demonstrates all these new capabilities 18 4 1 Open A File For Writing New Data Syntax PRINT 8 lt WRITE Zxxx yyy gt where Zxxx yyy is the file name If successfully executed the lt WRITE gt command will open the file and set the file pointer to the beginning of the file Thereafter the PLC can start writing ASCII data to the file using the PRINT 8 lt string data gt command Note the PRINT 8 command automatically appends a carriage return to the end of the string data unless the string data is terminated with a semi colon Ti Bees 18 4 INTERNATIONAL Chapter 18 Extended File System When the PLC has completed writing data it must close the file by executing the command PRINT 8 lt gt E g PRINT 8 lt WRITE Z005 TXT gt PRINT 8 The current Greenwich Mean Time is PRINT 8 STRS TIME 1 STRS TIME 2 00 PRINT 8 lt gt The CPU should use the STATUS 2 command to check whether the lt WRITE gt has been successfully executed before begin writing data to it STATUS 2 command returns a 1 if lt WRITE gt operation is successful and returns a 0 if the operation failed The CPU can only write or access to a single file at a time so any opened file must be closed by the PRINT 8 lt gt command before another file can be opened for writing 18 4 2 Open A File For Append
204. lt into the 6 3x or higher version of i TRILOGI programming software Previously a standalone Ethernet Configuration program was required to setup the basic and advanced Ethernet ADC and RTC Real Time Clock options This standalone version is still available and more information on this program including where to download it is available at 2 14 Standalone Version of Ethernet Configuration Software Now these settings can be configured directly from the TRILOGI programming software as described next 2 1 Configuring The Ethernet Port This tool which is located in the Controller Menu of TRILOGI allows you to configure the Ethernet Port and ADC RTC calibration settings on a TRi s PLC with built in Ethernet port such as the Fx PLCs When the Ethernet amp ADC Calibration is selected from the Controller menu you will see the following screen The configuration program communicates with the PLC Ethernet Configuration BASIC the same way as i TRiLOGI which is through the serial TLServer or the Ethernet FServer If your i TRiLOGI is not yet connected to a TLServer software or directly to the PLC s built in hostlink command server known as F Server for all F series PLCs then you will need to login the standard way from the Controller menu See the i TRiLOGI Programmers Reference Manual for more information on this If you are communicating through TLServer which is via Factory Default Node Name FSe
205. ly executing a user interrupt service routine e g an input interrupt or HSC interrupt then the CPU will have to complete the current interrupt service routine before it will run the PTI interrupt function Notes 1 Limit the use of PTI only for critical code that requires precise timing between two evenis Program bugs that occur due to problems in the PTI interrupt routine may be quite hard to debug 2 For normal periodic routines such as checking for temperature or checking serial port for incoming bar code data every few seconds it is better to use the system clock pulses e g Clk 1 0s to trigger a dCusF 3 Always try to keep your interrupt service routine short and ensure that it will not end up in an endless loop The TBASIC custom function execution time should be much shorter than the period of the PTI events Otherwise you may find that the CPU will be spending most of its time servicing the PTI interrupt routine leaving very little time for scanning the ladder program and that will have an adverse impact on the CPU performance 9 3 Power Failure Interrupt PFI The EZWire1616 CPU has a power failure sensing circuit that will call a custom function when it detects an impending power failure This allows you to save critical data to the PLC s non volatile memory see Section 1 7 2 just before power failure The syntax for the PFI is as follow INTRDEF 17 cfnum 1 Interrupt 17 is reserved for PFI cfnum
206. m the date of registered purchase Any unit found during this time to have manufacturing defect s will at the discretion of TRi be repaired or replaced TRi will not be responsible for the repair or replacement of any unit damaged by user modification negligence abuse improper installation or mishandling TRi is not responsible to the Buyer for any special consequential indirect or similar damages including any lost profits or loss data arising from the use or the loss of use of TRi products In no case shall TRi s liability exceed the purchase price for the products TRi products are NOT certified to be FAILSAFE and hence must NOT be used in applications where failure of the product could lead to physical harm or loss of human life The Buyer is responsible to conduct his her own tests to meet the safety regulation of the respective industry Products distributed but not manufactured by TRi carry the full original manufacturers warranty Such products include but are not limited to power supplies sensors I O modules and battery backed RAM TRi reserves the right to alter any feature or specification at any time with each product revision release Notes to Buyer If you disagree with any of the above terms or conditions you should prompily return the unit to the manufacturer or distributor within 30 days from date of purchase for a full refund o_O TRIANGLE 0 URA RESEARCH Page ii INTERNATIONAL j USER MANUAL
207. me only the controller with the correct device ID will respond Hence it is essential to ensure that every controller on the RS485 network assumes a different ID If a master PLC is used then Ti aes 15 4 INTERNATIONAL Chapter 15 Host Link Communication Protocol the master PLC should also have a different ID from all the slaves Otherwise contention may occur i e two controllers simultaneously sending data on the receiver bus resulting in garbage data being received by the host On the other hand if none of the controller IDs match that specified in the command frame then the host computer will receive no response at all The PLC automatically recognizes the type of command protocols point to point or multi point sent by the host computer and it will respond accordingly If a multi point command is accepted by the controller the response frame will start with a character followed by its device ID and the same header as the command This will be followed by the data requested by the command a response frame FCS and the terminator 15 4 4 Framing Errors When the controller receives a multi point host link command frame it computes the FCS of the command and compares it with the FCS field received in the command frame If the two do not match then a framing error has occurred The controller will send the following Framing Error Response to the host Device ID Header FCS Terminator 15 4 5 Command Errors
208. mmands Some of the most useful commands are listed below Action 13 3 Displaying Numeric Variable With Multiple Digits The SETLCD y x string command only overwrites the exact number of characters in the string parameter to the LCD display and thereafter the cursor is placed back to the location specified by the x and y parameters Thus if there exists some old characters right after the last character it can cause confusion especially if you are displaying a number E g If you first display the following string at row 1 and column 1 Pressure 12345 And if you subsequently display the string Pressure 983 at the same location without first clearing the line then you will see the following string being displayed Ti aes 13 1 INTERNATIONAL Chapter 13 LCD Display Programming Pressure 98345 What happens is that the string Pressure 983 is correctly displayed but the two old characters 45 left over from previous display would appear to be part of the new data This can cause confusion There are several ways you can eliminate such a display problem 1 Clear the line first before overwriting with a new string You can create a custom function just to clear a particular line E g if you pass the parameter DM 100 to the custom function and inside the custom function you do the following SETLCD DM 100 1 Hence calling this custom function with DM 100 1 2 3 or 4 would
209. n 1 and 3 Speed pps is based on the no of pulses per second pps output by the pulse generator The pps parameter should be set to a value between 1 and 10000 max rated pps for the EZWire1616 The acceleration acc determines the total number of steps taken to reach full speed from a standstill and the number of steps from full speed to a complete stop The stepper motor controller calculates and performs the speed trajectory according to these parameters when the STEPMOVE or STEPMOVEABS commands are executed To set stepper motor channel 3 to a speed of 100 pps in 50 steps the command would be as follows STEPSPEED 3 100 50 This would be equivalent to an acceleration of 100 pulses s2 which can be calculated using the following expression A V 2S 1007 2 50 100pps 10 4 5 Using the STEPMOVE Command Once the STEPSPEED command is executed the STEPMOVE command can be used to move the stepper motor forwards or backwards The STEPMOVE command is also used to specify whether the PLC is a motor controller a full step motor driver or a half step motor driver STEPMOVE ch count r The ch parameter specifies which stepper motor channel is being used and whether it is being used as a controller full step driver or half step driver The count parameter specifies how many pulses the motor will move If the motor were in half step driver mode then count would be in half steps The r parameter sp
210. n Output 3 4 3 3 5 Ca TRIANGLE i Li RESEARCH Page iv INTERNATIONAL USER MANUAL TIMERS COUNTERS AND SEQUENCERS 4 1 4 tte e UCONN 5 000 4 1 4 1 4 1 000000000000000 002 AVA TIME 4 1 00115211 01010161 41 2 ENEE 4 1 413 4 2 0016 Programming timers and counters on Ladder 4 2 42A For lu 4 2 WINTER 4 2 422 4 2 000066006600060 Example 1 Creating a Simple Timer Circuit in Ladder Logic 4 2 3 Example 2 Creating a Simple Counter Circuit in Ladder Loge 4 3 4 2 4 4 4 Programming timers and counters in Custom Functton 4 3 4 4 Timers and Counters Present Values 4 3 1 4 4 Inputs Outputs Relays Timers and Counters Contacts 4 3 2 4 4 0 6600 01 Changing The Timer and Counter Set Values in a Custom 4 3 3 4 4 0 Controlling a Timer or Counter in a Custom FUNCTION 4 3 4 NEEN un 4 5 1212121212 1 1 1 1 1 Programming Sequencers On 4 4 nr tele ele EE 4 5 4 6
211. n in the circuit on the right in Figure 5 7 5 3 3 Using Thermocouple Thermocouples are very rugged devices that are widely used in the industry because of their stability accuracy and wide functional temperature range They are commonly used in measuring temperature in ovens that may go up to several hundred degrees C However thermocouple output signals are in the range of tens of microvolts to mille volts which is too small to be measured by the EZWire1616 s analog input directly You will need a signal conditioner that can amplify the thermocouple output to 0 5V which can then be connected to the PLC s analog input 5 3 4 Using PT100 Temperature Sensor PT100 is a positive temperature coefficient thermistor that is made from platinum It has the advantage of being very stable and highly accurate It is usually connected to a signal conditioner in a balanced bridge configuration and the signal conditioner will convert temperature changes to 0 5V output for the PLC Ca TRIANGLE z URA RESEARCH 5 8 INTERNATIONAL Chapter 5 Analog I Os 5 4 Analog Outputs The EZWire1616 PLC features 4 channels of 0 20mA DC 12 bit analog outputs Digital to Analog Converters or D A These 4 D A outputs each have their own dedicated pins and therefore do not take up any Analog input pins The pin assignment of these analog outputs is described in Section 1 2 1 DAC Output AVcc 4095 4096 4094 4096 2 4096
212. n routine on a specific date and or time you would need to periodically check these variables against the desired settings and activate the action when the RTC variable s reach the set value Example Setup a1 minute clock pulse to monitor the RTC as follows Clk dmin CheckClock dCusF Lsd Custom Function 1 CheckClock So turn on LAMP at 6pm every day except Sunday IF TIME 1 18 AND TIME 2 gt 0 AND DATE 4 lt gt 7 THEN SETIO LAMP ENDIF turn OFF LAMP off at 11 30pm every day IF TIME 1 23 AND TIME 2 gt 30 THEN CLRIO LAMP ENDIF Figure 12 3 Using Real Time Clock Example 12 8 RTC Calibration The EZWire1616 PLC uses a battery back real time clock that derived its clock from a 32 768KHz crystal which should provide reasonably good accuracy for normal use Note that the RTC does not compensate for temperature variation hence its accuracy is temperature dependent If you require the PLC s RTC to be very accurate you should keep the PLC under a constant operating temperature If your EZWire1616 is connected to a LAN then you also have the option of having the RTC periodically set itself using the very accurate RTC data that can be obtained from a time server on the Internet See Section 12 6 fe o TRIANGLE 2 Toi RESEARCH 12 3 INTERNATIONAL Chapter 12 Real Time Clock 12 9 Troubleshooting the RTC If the RTC Error light comes on and the battery is properly installed then the RT
213. nal command set This command automatically computes the number of pulses and the direction required to move the stepper motor to the new position with respect to the current location The current location can be determined at any time by the STEPCOUNTABS function Once the STEPMOVEABS command is executed re execution of this command or the STEPMOVE command will have no effect until the entire motion is completed or aborted by the STEPSTOP command The STEPMOVEABS command is also used to specify whether the PLC is a motor controller a full step motor driver or a half step motor driver STEPMOVEABS ch position r The ch parameter would specify which stepper motor channel is being used and whether it is being used as a controller a full step driver or a half step driver The position parameter specifies how many pulses the motor will move relative to its home position If the motor were in half step driver mode then position would be in half steps Ti aes 10 7 INTERNATIONAL Chapter 10 Stepper Motor Control The r parameter specifies which internal relay will be activated once the motor has moved to its new position This relay would be cleared when the STEPMOVEABS command is executed in case it was already activated 10 4 6 1 Example PLC as a Motor Controller In this example the PLC would be a controller and would send the co
214. nd scroll to the Counter Table Any counter to be used as sequencer can only assume label names 5601 to 5608 corresponding to the counter numbers For e g if Sequencer 5 is to be used Counter 5 must be defined as Seq5 Next enter the last step number for the program sequence in the Value column of the table A circuit that uses the special function Advance Sequencer AVSeq will need to be constructed The first time the execution condition for the AVseq function goes from OFF to ON the designated sequencer will go from inactive to step 1 Subsequent changes of the sequencer s execution condition from OFF to ON will advance increment the sequencer by one step This operation is actually identical to the UPctr instruction The upper limit of the step counter is determined by the Set Value SV defined in the Counter table When the SV is reached the next advancement of sequencer will cause it to overflow to step 0 At this time the sequencer s contact will turn ON until the next increment of the sequencer This contact can be used to indicate that a program has completed one cycle and is ready for a new cycle Accessing individual steps of the sequencer is extremely simple when programming with TRiLOGI Simply create a contact NC or NO in ladder edit mode When the I O window pops up for you to pick a label scroll to the Special Bits table as follow KE 1 0 Labels al Special Bits vib Label Name Seqn x Normally ON
215. ne controller may be connected to the host computer The host link commands do not need to specify any controller ID code and are therefore of a simpler format as shown below RESEARCH INTERNATIONAL TRY TRIANGLE 15 1 Chapter 15 Host Link Communication Protocol 15 3 1 Command Response Frame Format Point to Point Header Data Terminator Each command frame starts with a two byte ASCII character header followed by a number of ASCII data and ends with a terminator which is comprised of a character and a carriage return ASCII value 13 The header denotes the purpose of the command For example RI for Read Input WO for Write Output etc The data is usually the hexadecimal representation of numeric data Each byte of binary data is represented by two ASCII characters 00 to FF To begin a communication session the host computer must first send one byte of ASCII character Ctrl E 05Hex via its serial port to the controller This informs the controller that the host computer wishes to send a point to point host link command to it Thereafter the host computer must wait to receive an echo of the Ctrl E character from the controller Reception of the echoed Ctrl E character indicates that the controller is ready to respond to the command from the host computer At this moment the host computer must immediately send the command frame to the controller and then wait to receive the response frame from the controlle
216. nected after this node become inaccessible by the master If the RS485 interface of one of the PLCs has short circuited because of component failure then the entire network goes down with it too This is because no other node is able to assert proper signals on the two wires that are also common to the shorted device Hence when trouble shooting a faulty RS485 network it may be necessary to isolate all the PLCs from the network Thereafter reconnect one PLC at a time to the network starting from the node nearest to the host computer Use the TRILOGI program to check communication with each PLC until the faulty unit has been identified Tri eee 15 10 INTERNATIONAL Chapter 16 Host Link Command Response Format Chapter 16 Host Link Protocol Format TRIANGLE RESEARCH INTERNATIONAL oO URA T Chapter 17 IR Remote Control 16 HOST LINK PROTOCOL FORMAT This chapter describes the detailed formats of the command and response frames for all EZWire PLC host link commands Only the formats for the point to point communication protocol are presented but all these commands are available to the multi point protocol as well To use a command for multi point system simply add the device ID nn before the command header and the FCS at the end of the data See Chapter 3 for detailed descriptions of multi point communication command format 16 1 Device ID Read Command Format eae oe Response Format pt TR te f
217. nection i e For passive mode both the command and the data connections are performed by the client the PLC in this case The PLC has been designed to use only passive mode to transfer file to the FTP server Passive mode is preferred because that is the only way to transfer file if the FTP Server is located on the Internet The alternative active mode transfer requires the server to make a data connection back to the PLC that is sitting behind a router firewall and that can be problematic unless the router is specifically configured to forward the data port to the PLC 18 8 2 PLC FTP Upload Procedure In order to upload file to the FTP Server the PLC would use the PRINT 4 lt TCPConnect XXX XXX XXX XXX 21 gt command tag to connect to the FTP server port 21 to establish the command connection to the FTP Server The PLC uses its PRINT 4 to send and INPUT 4 to receive ASCII text strings from the FTP server via the command channel The PLC would then send the command PASV to inform the FTP server that it wants to transfer a file in passive mode At this point you can use the PRINT 4 command to send any valid FTP command to the server including changing directory CWD command make sure the directory exist deleting a file DELE command beware of what you are deleting etc When the PLC is ready to start a file transfer to the FTP server the server will in turn provide the PLC with the port number that it has open
218. nication Directly Between a PC and a F series PLC 2 9 2 2 2 2 15 On line Monitoring Programming Via FGerver 2 3 2 6 Using F series PLC Network Services CommandS 2 4 Get our IP Address 2 8 2 4 1 2 8 DNS command Resolving Domain Name into IP Address 2 4 2 Ond E ET EE 2 19 243 Open Connection to Remote FServer or TLServer to UseNETCMD 2 20 2 4 4 Remote File Services ccccecsccsssssecssssssecsssssseceesssnsecsessnseceessnseceesensecesssnaeceesseaeceeesenaes 2 21 2 4 5 2 1 Other Network Services Tags 2 4 6 2 22 MODBUS TCP Server and Client Connection 25 2 2 Connecting To The PLC s MODBUS TCP Servet 2 5 1 Bit Address Mapping 29290 0201 ENEE REENERT 2 22 2 5 1 1 2 24 Word Address Mapping 2 5 1 2 MODBUS TCP Access Ceci 2 24 2 5 2 Making a Modbus TCP Client Connection to Other Modbus TCP Se
219. nput contact s into the ladder logic circuit Place the counter coil at the end of the ladder logic circuit Place the counter contact in one or more ladder logic circuits optional OMS 4 2 3 Example 1 Creating a Simple Timer Circuit in Ladder Logic You can place components in the circuit by clicking in the green area to the right of the red arrow as shown in Figure 4 1 below This will bring up the component tool bar in the gray area above the green circuit area KS TRILOGI Version 6 13 Untitled File Edit Controller Simulate Circuit Help Circuit 1 QAQA Gene quick Tags Figure 4 1 Creating Timer Circuit Once the component toolbar is shown you can place your activating contact by selecting the 1 component from the toolbar AF and then selecting the activating contact from the I O Table The contact will then be automatically placed in the ladder logic circuit The same can be done for the timer coil by selecting the 7 component from the toolbar a and then selecting a timer that has been entered into the I O Table Then a timer contact needs to be added as an input to a ladder logic circuit This contact will activate once the timer counts down This could be used to turn on an output a certain amount of time after the timer coil is activated Placing a timer contact in a circuit is the same as placing any contact in a ladder circuit except that the corresponding timer should be selected from the Timers section of
220. ntrol pulse and direction pulse to a driver board STEPMOVEABS 1 500 101 Stepper 1 to move fwd 500 steps from home and turn on relay 101 STEPMOVEABS 2 75 102 Stepper 2 to move back 75 steps from home and turn on relay 2 STEPMOVEABS 3 200 103 Stepper 3 to move fwd 200 steps from home and turn on relay 103 10 4 6 2 Example PLC as a Full Step Motor Driver STEPMOVEABS 11 300 101 Stepper 1 to move fwd 300 pulses from home and turn on relay 101 STEPMOVEABS 12 100 102 Stepper 2 to move fwd 100 pulses from home and turn on relay 102 STEPMOVEABS 13 90 103 Stepper 3 to move back 90 pulses from home and turn on relay 103 10 4 6 3 Example PLC as a Half Step Motor Driver STEPMOVEABS 21 300 101 Stepper 1 to move fwd 300 pulses from home and turn on relay 101 STEPMOVEABS 22 10 102 Stepper 2 to move back 10 pulses from home and turn on relay 102 STEPMOVEABS 23 50 103 Stepper 3 to move fwd 50 pulses from home and turn on relay 103 10 4 7 Demo Program for Stepper Motor Control A demo program for programming the Stepper Motor Controller and Driver Stepper Motor F2424 PC6 can be found in the FPLCsamples zip file which can be downloaded from http www tri plc com trilogi FPLCsamples zip Ti Bass 10 8 INTERNATIONAL Chapter 11 Pulse Width Modulated Outputs Chapter 11 Pulse Width Modulated Outputs TRIANGLE URA RESEARCH INTERNATIONAL Chapter 11 Pulse Width Modulate
221. ntrol the speed of a small DC motor They can also directly drive proportional variable position valves whose opening is dependent on the applied voltage Note When using the PWM output to drive a motor or solenoid valve please take note of the need to add a bypass diode to absorb the inductive kick that will occur when the output current to the load is turned OFF as mentioned in Chapter 1 5 3 11 3 Increasing Output Drive Current Opto lsolated The advantage of using the PWM is that you can easily amplify the drive current to a larger load such as a larger permanent magnet DC motor by using a power transistor or power MOSFET to boost the current switching capability If the load is of a different voltage and the load current is high you should use an opto isolator to isolate the PLC from the load as in Figure 11 2 Flyback Diode Bridge Rectifier 4N35 12 24V DC GM Optoisolator E ess any N channel Power MOSFET Voltage divider to obtain approx e g IRF530 can sink 12A DC 10V DC at gate G For DC48V at up to DC100V max load choose R1 3 9K R2 1K Figure 11 2 PWM Speed Control of a large DC Motor Tai aes 11 2 INTERNATIONAL Chapter 11 Pulse Width Modulated Outputs Note 1 The opto isolator must be able to operate at a frequency matching that of the PWM frequency otherwise the resulting output waveform will be distorted and effective speed control cannot be attained 2 The simple PWM speed
222. o a new PLC Windows will do the necessary to properly connect to the new PLC that has a different MACID from the previous PLC Note that the same issue applies to using I TRiLOGI to transfer program to multiple PLCs that are all set to the same default IP address even though only one PLC will be connected to the network at a time You will need to clear the ARP cache after every transfer to avoid problem Or else you have to wait for windows to expire its ARP cache data before connecting the next PLC TIUS 2 38 INTERNATIONAL 3 Chapter 2 Ethernet Port 2 10 Accessing and Customizing the HTML Web Interface for Control and Monitoring The second generation of Web control application is now available free for any TRi PLC user to download and install into their PLC In the previous section 2 9 Installing a Control Web Page Into the EZWire PLC you were shown how to transfer html files to the FServer Click on the following link to download this new web application http www tri plc com download webapp webapp02 zip The Webapp02 zip file you downloaded above or in Section 2 9 for EZWire PLC contains the following e Four sample control web pages 0 C001 02 HTM 0 C002 02 HTM 0 C002 02 NoLCD HTM and 0 C003 02 HTM e Areadme file Readme txt e A download link UserGuide htm for the quickstart modification guide e PLC program files for TRILOGI 6 and 7 webAppTest PC6 and webAppTest PC7 that can be load
223. ode to 1 and send back an exception code OB hex 2 The CPU firmware is designed to handle only one Modbus gateway translation for each Modbus TCP connection per ladder logic scan This is to ensure that the CPU is not completely bogged down by its Modbus gateway job and will have time to run its own program If the Modbus TCP clients attempt to overload the PLC with more requests than it can handle the PLC will frequently return SLAVE DEVICE BUSY error response packets back to the client i e It will set the 7 bit of the function code to 1 and send back an exception code 06 19 4 Fine Tuning The Modbus TCP Gateway Function It is important to know that every time the PLC runs a Modbus TCP to Modbus RTU translation its own program scan time increases due to the need for the CPU to wait for a response from the slave Modbus RTU devices The delay becomes much more pronounced when a Modbus slave device fails to respond e g not online The system designer must therefore take this into consideration when designing the system 1 The Modbus TCP client should not overload the Modbus gateway with unnecessarily frequent Modbus requests Whenever the PLC report a TARGET DEVICED FAILED TO RESPOND function the client program should back off for a while before re trying communication with the Modbus RTU slaves again 2 You can change the number of wait states the gateway will wait for a response from the Modbus RTU sl
224. ograms Under Windows the application software does not have very deterministic control of the RTS pin at precise timing and that can contribute to the occasional loss of communication when the RS485 transceiver is not switched at the proper moment Programming via COMMS is particularly useful if COMM1 and COMM are already assigned to other tasks such as interfacing to modem bar code readers a SCADA system or MMI The programmer can continue to program and monitor the PLC using its RS485 port while its COMM1 COMN2 is actively communicating with other devices This makes it much easier to troubleshoot communication problems at COMM1 COMMz2 since you can continuously monitor the data exchange between the PLC and the external devices connected to these ports i RESEARCH INTERNATIONAL ma TRIANGLE E IR 14 3 Chapter 14 Serial Communications Of course since the EZWire1616 PLC has a built in Ethernet port you can always program it via the local area network But the fact that all 3 serial ports can be programming ports makes them truly flexible for many industrial applications 14 4 2 Accessing 3 Party RS485 based Devices There are more and more industrial devices such as electric power meters analog I O modules e g the l 70xx modules by ICPDAS variable frequency drives etc that allows data communication via their RS485 port The EZWire1616 PLC can use COMMS port to access these devices The PLC has many built in
225. om trilogi FPLCsamples zip includes all examples of how to use the NS commands via virtual comm port 4 which serves as a good starting point for you to learn these simple but yet powerful methods for making a client connection over the LAN or the Internet 4 The PLC reserves only a single client socket to implement the Network Services If you use any of the NS commands listed below please ensure that the command is completed so that the client socket can be closed before issuing a different NS command All NS commands begin with a string enclosed within the angle bracket called a tag e g lt EMAIL gt lt CONNECT gt Most NS commands end with a closing tag lt gt except the lt REMOTEFS gt tag which ends with a lt REMOTEFSs gt closing tag Depending on the command type the F series CPU may return one or more response strings via virtual comm port 4 from which the PLC can read to determine if the NS command has been executed properly The PLC can operate the Ethernet port by means of TBASIC INPUT and PRINT commands operating on COMM 4 It uses the PRINT 4 command to send out NS commands and the INPUT 4 command to receive response data via the Ethernet port Notes 1 Only PRINT 4 and INPUT 4 are implemented on virtual COMM port 4 The EZWire1616 currently DOES NOT support the INCOMM 4 and OUTCOMM 4 commands Note that any non zero ASCII data can be sent using the PRINT 4 command
226. ommands on COMMS E g the statement DM 10 READMODBUS 13 8 16 will access via COMMS the slave with ID 08 and read the content of register 16 This register corresponds to MODICON address 40017 and is the OUTPUT 1 of the slave PLC The ability to speak MODBUS RTU greatly extends the type of peripherals that can be used with a EZWire1616 PLC You can now make use of many off the shelf third party RTU devices to extend the PLC capability 3 Toi ss 14 14 INTERNATIONAL Chapter 14 Serial Communications 14 10Using Modem to Remotely Program Monitor The PLC TLServer 3 x supports remote dial up to M series and F series PLCs via standard off the shelf modems It takes two modems to communicate between two devices The host end of the modem setup and configuration is handled by the TLServer software itself whereas on the PLC side the PLC has to configure the modem so that it can successfully communicate with the host computer running TRILOGI 14 10 1 Wiring The modem is often connected to the PLC s COMM1 Since the serial port on most modems are DCE type you will need a make a special cable also known as null modem to connect them as shown in Figure 14 2 H the modem only has a DB25 connector you can connect the wires as shown in the following diagram F1616 BA Female DB9 Modem Female DB25 Figure 14 3 Connecting EZWire1616 s COMM1 to a modem s DB25 port Note that pin 6 DSR and pin 20 DT
227. ommunication exchange with other devices is to send a command string using the PRINT n and then start a timer and let the PLC program continue to scan the ladder program When timer times out the timer contact is used to activate a custom function and use INPUT n to read the return message from the device This is most efficient use of the CPU time since the program will not have to waste time to wait for response string from the device and that s the reason for INPUT n to default to non blocking mode Another way to deal with this is to use the NETCMD function terminated with NETCMD sends a command string and will return immediately when it receives a response string or if more than 0 15s has passed If the device is slow to response the CPU basically sits in a loop to wait for the response for up to a maximum of 0 15s NETCMD function also re tries the communication several times if it does not receive a response in the first try A third way of handling serial exchange with other devices is to use the INPUT n command in blocking mode Starting from CPU firmware r72 and above if you run the command SETSYSTEM 19 t This will configure the INPUT n command to block the CPU for up to maximum of t x 10 milliseconds to wait for a valid string from 3 party device Although this command also wastes CPU cycles to wait for a response and hence it is not as efficient compared to using the timer activated method mentioned above it
228. on the vi Reboot PLC after Save Save Parameters to FServer to save RARAAARARARARARAARK Done your data to the PLC s non volatile memory Figure 2 4 1 OH c TRIANGLE Toi RESEARCH 2 25 INTERNATIONAL Chapter 2 Ethernet Port When MODBUS TCP Use Trusted IP is enabled it means that only TCP IP packets that come from a client whose IP address matches one of the Trusted IP would be allowed connection to the MODBUS TCP server 2 5 3 Making a Modbus TCP Client Connection to Other Modbus TCP Server By using the Network Services commands described in Section 2 4 it is unbelievably easy for the EZWire1616 to be used as a MODBUS TCP client to access any industrial control or HVAC device and sensors that support a MODBUS TCP server Best of all you can do it without learning any specifics of TCP IP programming To open a client socket and connect to a Modbus TCP Server that is listening on port 502 default Modbus TCP port you only need to send the command tags lt MBTCPCONNECT xxx xxx xxx xxx 502 gt to the CPU via virtual COMM port 4 E g PRINT 4 lt MBTCPCONNECT 192 168 1 105 502 gt If connection is successful the system will return the string lt CONNECTED gt on virtual comm port 4 which you can check with the INPUT 4 command Once the connection is successfully established you can begin to use the built in TBASIC commands RE
229. osition determined by the pulse width at the control input Yet once it is in the correct position the servo draws only minimum current required to maintain its position Hence being a closed loop controller an RC Servo is actually a much more efficient and effective positional control device for a limited range than a stepper motor which relies on a constant current in its winding to provide the holding torque for positioning The open loop nature of stepper motor means that it does not know if the device is actually being knocked out of its desired location whereas in the Servo any deviation from its desired location is instantly being corrected by the servo mechanism 11 4 1 Using EZWire1616 PWM Output To Control RC Servo Non lsolated As you probably have realized by now that you can use a single PWM output to very easily position the RC Servo to whatever position within its range of travel However since the EZWire1616 power supply is 12 to 24V vs 4 8 to 6V on the typical RC Servo and the PWM output is NPN current sink type the signal to the servo is actually inverted if you connect the PLC s output to the Servo s control input directly 4 8V to 6V DCPower For Servo OUTPUTS 1N4001 Figure 11 4 Non isolated Interace to RC Servo As shown in the above figure we use a 1K ohm resistor to pull up the Control input to the RC Servo s power supply so that when the PLC s output is OFF the Control
230. ote that a sequencer that is inactive is not the same as sequencer at Step 0 as the former does not activate the SeqN 0 contact To set the sequencer to step 0 use the StepN function described next 4 4 4 Setting Sequencer to Step N StepN In certain applications it may be more convenient to be able to set the sequencer to a known step asynchronously This function will set the selected sequencer to step N regardless of its current step number or logic state The ability to jump steps is a very powerful feature of the sequencers 4 4 5 Reversing a Sequencer Although not available as a unique special function a sequencer may be stepped backward by decrementing its step counter using the DNctr command on the counter that has been defined as a sequencer This is useful for creating a reversible sequencer or for replacing a reversible drum controller 4 4 6 Program Example Assume that we wish to create a running light pattern which turns on the LED of Outputs 1 to 4 one at a time every second in the following order LED1 LED2 LED3 LED4 LED4 LED3 LED2 LED1 all LED OFF and then restart the cycle again This can be easily accomplished with the program shown in Figure 4 5 The 1 0s clock pulse bit will advance increment Sequencer 2 by one step every second Sequencer 2 should be defined with Set Value 8 Each step of the sequencer is used as a normally open contact to turn on the desired LED for the step A Stop input re
231. own below Format beud ng 820 onix Format 1001 xxxx 1101 xxxx 1111 xxxx Where xxxx represents the baud rate of the comm port as follow xxxx 0000 0001 0010 0011 0100 0101 0110 0111 2400 2400 4800 9600 19200 31250 38400 57600 xxxx 1000 1001 1010 1011 1100 1101 1110 1111 Baud Rate 100K 115 2K_ 230 4K 110 150 300 600 1200 A table of all the available baud rates and COMM formats is shown in the following page The communication format written as 7 2 e which means 7 data bits 2 stop bits and even parity Likewise 8 1 n means 8 data bits 1 stop bit and no parity You can use the table to select the baud number for a certain baud rate and COMM format Baud No Table All numbers in Hexadecimal amp H00 to amp HFF in are ato zan 73e 210 aan ape a20 110 y 08 48 6B 88 CB EB 18 58 7B 9B DB 300 20 OD 4D 6D 8D CD ED 1D 5D 7D 9D DD 600 OE 8 CE EG 1 7E 96 1200 OF 4F OF BF CF EF 1 SF OOF ODF 2400 ot 41 61 81 c1 Et 11 51 71 91 D1 4800 02 42 62 82 C2 E2 12 52 72 92 D2 9600 03 43 63 83 C3 E3 13 53 73 93 D3 19200 04 44 64 84 C4 E4 14 54 74 94 84 31250 05 45 65 85 C5 25 15 55 75
232. p to 30A of peak inductive pulse current This is for protection only DO NOT attempt to sink more current than is specified for the output on the EZWire1616 datasheet Tr TRIANGLE T RESEARCH INTERNATIONAL Chapter 1 Installation Guide All 16 of the digital outputs can each sink up to 4A peak and 1A continuous 24VDC current from the load and can be used to drive up to 3 small stepper motors directly saving you the expense of buying separate stepper motor drivers In addition 6 of the digital inputs can be used for decoding and measuring pulses received from up to 3 digital encoders allowing you to measure position and velocity of a moving object in real time 10 of the digital inputs can also be defined as interrupt inputs allowing fast events to be handled in the shortest possible time and to not be constrained by the program scan time The EZWire1616 is expandable up to a total of 128 digital inputs and 128 digital outputs using optional expansion modules EXP1616R and EXP2424 It has two RS232 ports one male DB9 and one Female DO and one RS485 port all of them are conversant in MODBUS protocols Note that there is no built in LCD port as on the Fx and FMD PLCs 1 2 Physical Mounting amp Wiring The EZWire1616 PLC comprises three PCBs that are stacked together in a very compact form factor There is a SmartTILE Fx CPU board that carries the RJ45 Ethernet port socket the DIP switch and the status LEDs There is also
233. ploaded file later in the test However make sure that you check all the check boxes for Read Write Append etc as shown in the diagram TR RESEARCH 18 8 INTERNATIONAL Chapter 18 Extended File System Page Shared folders Files General Directories Aliases Z Read Shared folders Kitenge Get Speed Limits H Rss Ries M Write IP Filter M Delete V Append Directores V Create V Delete M List Add Remove Rename Set as home dir A directory alias will also appear at the specified location Aliases must contain the full local path Separate multiple aliases for one directory with the pipe character 1 f using aliases please avoid cyclic directory structures it will only confuse FTP clients 9 Click OK to complete the setup The FTP server should now be waiting for connection 18 5 2 Testing Connection To The FTP Server Using Telnet You can now test the FTP Server using the FileZilla client as mentioned in Chapter 2 9 of the PLC User s Manual But a better way to test is to use the Telnet program on your PC if you are running Windows Vista or Windows 7 you may need to enable the Telnet program since it is disabled by default do a quick Google search on how to enable the Telnet client software on your PC Also you may want to find out the IP address of your PC that is running the FileZilla Server If you have TLServer running on your PC
234. pped identically to both the MODBUS Ox and 1x space The bit register offset is shown in the last column of Table 14 1 Although MODBUS names the 0x address space as Coil which means output bits and the 1x address space as Input Status which means input bits only the EZWire1616 treat both spaces the same Some MODBUS drivers only allow you to read from Ox space and write to 1x space but you still use the same offset shown on Table 14 1 Example To map a lamp symbol to PLC Input 5 you select the MODBUS register address 0 0005 You can also map a lamp symbol to the PLC s output 2 In that case you should map it to MODBUS register address 0 0258 To map a toggle switch symbol to the PLC input 5 if you are restricted to select only MODBUS 1x address space then you will have to map the switch to 1 0005 and likewise you can map the switch to output 2 using MOBDUS address 1 0258 But if the driver allows the switch to be mapped to 0x space then you can use MODBUS register space 0 0005 and 0 0258 for the mapping with identical results TR RESEARCH 14 11 INTERNATIONAL Chapter 14 Serial Communications 14 8 1 2 WORD ADDRESS MAPPING As shown in Table 14 1 to access DM 1 from the PLC you use MODBUS address space 4 1001 Modicon convention 1000 in binary address and so on To access the Real Time Clock Hour data TIME 1 use 4 0513 The I O channels can also be read or written as 16 bit
235. r The entire communication session is depicted in Figure 15 1 After the controller has received the command it will send a response frame back to the host computer and this completes the communication session If the controller accepts the command the response frame will start with the same header as the command followed by the information that has been requested by the command and the terminator As you can probably see proper handshaking using the Ctrl E character between the host and the PLC is important to communicate successfully using the Point to point protocol Although the Multi point format discussed in the next section seems more complex the communication exchange using multi point protocol is actually simpler than point to point since it involves only a single exchange of command response string We therefore recommend using the multi point format if you are writing your own communication program Note TBASIC has a built in command NETCMD that lets a EZWire1616 access another slave PLC using the multipoint Host link protocol format very easily If an unknown command is received or if the command is illegal such as access to an unavailable output or relay channel the following error response will be received 15 3 2 Error Response Format The host computer program should always check the returned response for possibilities of errors in the command and take necessary actions RESEARCH INTERNATIONAL
236. r Address Port Z GB jee EI 127 0 0 1 14147 FileZilla Server version 0 9 40 beta Copyright 2001 2011 by Tim Kosse tim kosse Gfilezilla project org Connecting to server Administration password Connected waiting for authentication Ir Logged on C Always connect to this server Account IP Transfer gt 0 bytes received 3 If the FileZilla Server is running on the same PC that you are running the FileZilla Server Interface program then you can use the localhost IP address which is 127 0 0 1 the Port can be anything since this is a client port that the Interface program is using to interact with the FTP Server don t be confused with the FTP Server listening port which is by default 21 4 lf this is the first time you run the program after setting up Filezilla FTP Server there will be no Administration password so you can leave it blank Click OK to connect 5 Click Edit gt Settings and then General Settings gt Welcome message leave only one line of welcome message so that the PLC has less work to do Then click OK to accept the change Ti Bees 18 7 INTERNATIONAL Chapter 18 Extended File System FileZilla Server Options E General settings A Fil Welcome messi IP bindings On this page you can modify the welcome message that will be sent to each IP Filter connected client Passive mode sellin H you enter no custom message the default message
237. ransfer Problems 1 FileZilla appears to have connected to the PLC s FTP server but it cannot list the directory or transfer any file to the PLC The reason almost always have something to do with the PC s software firewall You need to configure the Windows Firewall and any software anti virus firewall on your PC to allow incoming connections to the FileZilla program You can try to disable the firewall temporarily to test the connection and if does work you can then be sure that it is the firewall configuration issue that need to be resolved The following paragraphs explain how the firewall can affect the FTP communications for those who are interested The File Transfer Protocol is unique in that it requires two socket connections between two devices that are communicating via FTP When FileZilla is connected to the PLC s FTP server on port 21 it establishes a command channel and it is through this command channel that FTP commands are being sent However once the command channel is established FileZilla is connected to the FTP Server a second socket connection known as the data channel needs to be made between FileZilla and the PLC All data such as the directory information and content of any files to be transferred between FileZilla and the PLC will need to go through the data channel They are two possible ways of establishing this data channel one is called the Active Transfer and the other is kno
238. ransmitter before sending the character and disables it immediately after the stop bit has been sent out i To RESEARCH 14 8 INTERNATIONAL i Chapter 14 Serial Communications 14 8Using The PLC As a Modbus Omron Slave SCADA HMI Applications The EZWire1616 supports a subset of the OMRON C20H and MODBUS Both ASCII and RTU modes are supported compatible communication protocols so that it can be easily linked to third party control software hardware products such as SCADA software LCD touch panels etc The PLC automatically recognizes the type of command format and will generate a proper response These are accomplished without any user intervention and without any need to configure the PLC at all Both MODBUS and Omron protocols use the same device ID address 00 to FF as used by the native Hostlink Command protocol described in Chapter 15 Since the addresses of I O and internal variables in the EZWire1616 are organized very differently from the OMRON or Modicon PLCs we need to map these addresses to the corresponding memory areas in the Modbus address space so that they can be easily accessed by their corresponding protocols All I Os timers counters internal relays data memory DM 1 to DM 4000 and floating point data FP 1 to FP 1000 are mapped to the Modbus Holding Registers space The Inputs Outputs Relays Timers and Counters bits are mapped to the MODBUS Bit address space as shown in Table
239. re are two types of SSR on the market one type is called Zero Crossing SSR which only switches ON when the AC voltage crosses the zero volt line Zero crossing type SSR CANNOT be used by the PLC for light dimmer control Instead you must purchase the Non Zero Crossing type of SSR for this purpose Ti aes 17 3 INTERNATIONAL Chapter 19 Zigbee Communication 17 3 Zero crossing Detection As explained in 18 2 the EZWire1616 CPU must know the precise moment the zero crossing occurs so that it can schedule the time interval when it needs to send out the firing pulse to turn on the SSR This can be accomplished by feeding the AC power through a bi directional opto isolator and the output would drive input 6 of the EZWire1616 PLC The falling edge of the signal detected at input 6 would send an interrupt to the CPU to start the scheduling of the various time slots that each light dimmer output is to fire a triggering pulse This means that if you want to use the light dimmer control you must configure input 6 as an interrupt input for capturing the zero crossing signal and therefore input 6 will no longer be available for other functions Such as for HSC or Pulse Measurement Note that since all EZWire1616 inputs are 24V NPN only you will need to construct the following interface circuits to feed the AC signal into the PLC s input 6 EZWire1616 PLC Input 6 AC24V H1 1AA814 Figure 18 4
240. rectly to DCE configured devices such as other PLCs modems barcode scanners Servo Controller Driver etc without the need for a null modem cable COMM2 communicates with the host computer at a default baud rate of 38 400 bit per second with 8 data bits 1 stop bit and no parity The communication baud rate can be changed in software from 1200 bps to 115 2K or 230 4K bps which is compatible with most PCs and industrial equipment The COMM2 port is the secondary communication port and would typically be used to interface to other control equipment The pin connections with the host PC require you to make a special cable which swaps the transmit and receive signals as follows Host PC 25232 or USB RS232 Converter Male DB9 EZWire1616 COMM1 Male DB9 Figure 14 3 Connecting COMM2 to a PC However to connect COMM2 to DCE device e g a modem you can use a straight through cable connection just like connecting COMM1 to a PC j a TRIANGLE 14 2 URI RESEARCH INTERNATIONAL i Chapter 14 Serial Communications Tx Tx Bal RTS CTS Modem Com Female DB9 Male DB9 OO Joo ob Figure 14 4 Connecting COMM2 to a Modem Pin 4 and 6 are handshaking signals whose presence may be required by some modems to work properly so these pins are connected as shown in the diagram 14 4COMM3 Two wire RS485 Port This half duplex RS485 port is meant for serial bus type networking or for connecting to optional
241. requency in Hz can be easily obtained from the PULSEWIDTH n or PULSEFREQUENCY n functions You can also obtain the pulse period inverse of frequency using the PULSEPERIOD function E g A PULSEWIDTH 1 B PULSEPERIOD 1 C PULSEFREQUNCY 1 All PM inputs by default return the measured pulse width and pulse period in unit of microsecond However for those who desire better resolution you can define PM 1 to 4 to return the measured pulse width and pulse period in 0 1 microsecond resolution by executing the following command once only during initialization SETSYSTEM 20 1 Once the above statement is executed if PUSLEWIDTH 1 PULSEWIDTH 4 returns the value 1234 it means the measured pulse width is 123 4 us However PULSEWIDTH 5 and PULSEWIDTH 6 would still only return the measured width in microsecond 1 2 3 A sample program can also be found on your i TRiLOGI installation folder at C TRiLOGITL6 usr samples PulseMeasurement PC6 Ti aes 8 1 INTERNATIONAL Chapter 8 Frequency Speed Measurement 8 2 Applications 24V a pe yee a yore ve NPN type Optical Sensor Input 3 EZWire PLC Figure 8 1 Setting Up a Simple Tachometer or Encoder 8 2 1 Measuring RPM Of A Motor One useful application of the PM capability is to measure the speed of rotation RPM of a motor A simple optical sensor coupled with a rotating disk with slots fitted to the shaft of a motor See Figure
242. rosoft Networks Hoos Packet Scheduler Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected M Notify me when this connection has limited or no connectivity Figure 2 8 3 4 Configure IP Address and Gateway INTERNATIONAL TRI RESEARCH 2 11 Chapter 2 Ethernet Port By default your Ethernet settings will be configured to be obtained automatically in this case only the IP settings are set to be obtained automatically This setting will not work since the F series PLC does not have the ability to assign IP address to the PC s Ethernet port So you need to manually set the IP address and the Subnet mask The IP address should be on the same subnet as the IP address you have set for your PLC For example if your PLCs IP address is set to the default address of 192 168 1 5 then you should set your PCs IP address to be 192 168 1 xxx The xxx can be any number between 1 and 255 except for 5 your PC can t have same IP address as your PLC The Subnet mask should be set to 255 255 255 0 no matter what and the other settings should be left blank because you won t be connecting this Ethernet port to the Internet Here is an example of a configuration that will work if your PLC has an IP address of 192 168
243. rupts Special Outputs Output Stepper Pulse Dir outputs Stepper Driver Outputs PWM output Ch 1 Direction Ch 1 Pulse Ch 2 Direction Ch 2 Pulse Ch 3 Direction Ch 3 Pulse These special I Os therefore share the same electrical specifications as the ON OFF type I Os which have already been described in the Chapter 1 Installation Guide We will describe each of these special I Os in greater details in the following chapters 5 Ca TRIANGLE S Lied RESEARCH o INTERNATIONAL Chapter 7 High Speed Counters Chapter 7 High Speed Counters CO TRIANGLE URA RESEARCH INTERNATIONAL Chapter 7 High Speed Counters 7 HIGH SPEED COUNTERS Technical Specifications No of Channels Maximum acceptable pulse rate 10KHz per channel Quadrature signal decoding Relevant TBASIC Commands HSCDEF HSCOFF HSCPVI 7 1 Introduction Digital inputs 1 2 3 4 and 5 6 form three channels of high speed counter inputs which can interfaced directly to a rotary encoder that produces quadrature outputs A quadrature encoder produces two pulse trains at a 90 phase shift from each other as follows Direction of Rotation 90 Phase A Phase B 4 90 Direction of Rotation Figure 7 1 When the encoder shaft rotates in one direction phase A leads phase B by 90 degrees When the shaft rotates in the opposite direction phase B will lead phase A by 90 degrees T
244. rver a naassenensseaaa 2 26 2 5 3 Getting data from Internet Connecting to The Internet Time Server ceseeeee 2 28 2 6 2 9 Web Service Accessing PLC s data from MS Excel 2 7 2 31 Accessing The PLC from Internet 28 2 31 Small Local Area Network Using Consumer Grade Network Router 2 8 1 Large Corporate Local Area Network ssssssssssssssisssissrissrissriesrissrinssrnesrnnsrnnstnnnnnnnnnnnnnnnt 2 32 2 8 2 2 33 Installing a Control Web Page Into the EZWire PL 2 9 2 33 Installing the FileZilla program 2 9 1 2 33 Configure FileZilla to Communicate with the EZWire1616 2 9 2 Transferring and Retrieving Files from the PLC Web Server sssssenseesseessesserrernen 2 36 2 9 3 2 37 Troubleshooting FileZilla File Transfer Problems 2 9 4 Accessing and Customizing the HTML Web Interface for Control and Monitoring 2 39 2 10 Next Generation of Super PLC W
245. rver Number of 1 q Connections Fserver MBTCP v Use username password T00Mbps IP Address Subnet Mask Gateway IP Addr SMTP Server IP DNS Server FServer Port MBTCP Port LAN Speed Username Password yes No the RS232 or RS485 serial port your PC should have an I ep RS232 RS485 port Otherwise you should purchase a 5 USB to RS232 or USB to RS485 converter in order to run Ji Reboot PLC after Save 5 this program AccessLevel 1 Programmer Retrieve Parameters from PLC Figure 2 1 2 Advanced Config glat Before you make any changes to the PLC s Ethernet configuration parameters it is a good idea to retrieve the current settings You can do this by clicking on the Retrieve Parameters from PLC button and answer Yes when prompted If your i TRiLOGI is not yet connected to a TLServer software or directly to the PLC s F Server then you will see the standard login popup window 2 Tr v TRIANGLE T RESEARCH INTERNATIONAL Chapter 2 Ethernet Port After you have retrieved the existing parameters from the PLC you will see that various fields in the configuration software screen are filled up Note that the EZWire1616 PLC has two built in Server programs that listen on a few different ports on the PLC for incoming TCP IP request packets 1 The FServer supports the TRi proprietary programs such as the i TRiLOGI software and TRi ExcelLink program T
246. rver by means of domain name instead of IP Address The DNS takes in the given domain name such as yahoo com and returns the IP address of the target server You will need to fill in the DNS IP Address if you intend to ask the Fserver to resolve a domain name into an IP address or you intend to contact a client directly by using domain name instead of using IP Address The DNS server IP address could be the same as the Gateway IP Addr described in section 2 1 3 But it will be more efficient to define the actual DNS server IP address that your ISP provides You can use the global DNS server IP address 8 8 8 8 or obtain the DNS server IP address by going to the Administrator page of your router and pull up information on the WAN E g The DNS server address you can see from the following screen is 64 59 144 92 Connection Type DHCP Client QoS Engine Active Cable Status Connected Network Status Established Connection Up Time 4 Day 16 Hour 58 Min 51 Sec MAC Address 00 0F B0 01 0D 1D IP Address 4 Subnet Mask 255 255 252 0 Default Gateway 1 Primary DNS Server 64 59 144 92 Secondary DNS Server 64 59 144 93 2 1 5 No of Connections FServer Modbus TCP The EZWire1616 CPU assigns sufficient memory to support up to a maximum of 10 simultaneous TCP IP connections to the FServer and Modbus TCP server By default each server is assigned a maximum of 5 connections each However to improve flexibility you can re ass
247. s which can be downloaded from http www tri plc com appnotes F series ExcelQuery xls The macro in this file converts the RIXX data it receives into ON OFF indicators on the Excel Spreadsheet cells Note that this spreadsheet file uses the HEX2DEC function that is not normally available when you first install the Excel program But you can add it in by installing the Analysis Toolpak Please search your Excel Help file for the specific method of adding in this toolpak as it may change from one version of Excel to another On Excel 2000 you can click on the Tools gt Add Ins check the Analysis Tookpak check box and then click OK MS Excel will automatically install the toolpak for you fe o TRIANGLE 8 Toi RESEARCH 2 30 INTERNATIONAL Chapter 2 Ethernet Port 2 8 Accessing The PLC from Internet 2 8 1 Small Local Area Network Using Consumer Grade Network Router When you connect a F series PLC to your home Ethernet router the PLC would have joined a private local area network LAN It is accessible through its private static IP address by other devices on the same LAN as long as each device is on the same subnet See section 2 1 for an explanation of subnet settings The PLC is also able to access the Internet through the router because the router would translate a private TCP IP packet sent from the PLC into a public TCP IP packet out of the Internet and if there is any return d
248. s The EZWire1616 PLC should be able to measure with reasonable accuracy the pulse width of incoming pulses not exceeding 10KHz Although the PLC should be able to measure incoming pulse frequency of up to 20KHz the 100pF noise filtering capacitors used at the digital inputs 1 16 would distort the signal at high frequency such that the measured pulse width would be of somewhat poor accuracy OH o TRIANGLE 0 Toi RESEARCH 8 2 INTERNATIONAL Chapter 8 Frequency Speed Measurement 8 3 Frequency Measurement on High Speed Counter Inputs For applications that require frequency measurement and pulse counting of the same signal you only need to feed the pulse input into any pair of the inputs 1 amp 2 or inputs 3 amp 4 or inputs 5 amp 6 and define it as a High Speed Counter see Chapter 7 This is because an input pin that has been defined as an HSC will automatically be enabled for pulse measurement In other words if you need to use the HSC and the Pulse Measurement on the same channel then you don t need to execute both the HSCDEF and PMON you only need to execute the HSCDEF The HSCDEF function will automatically start the Pulse Measurement hardware so it is not necessary to use the PMON function However if you use only the PMON function it would not enable the HSC function However if you execute the HSCDEF function and then execute the PMON function the HSC will be disabled even though it was previously enabled
249. s COMM1 will power up at the default format of 38 400 8 n 1 only so you will need to configure TLServer s serial port to 38 400bps to communicate with it 14 6Support of Multiple Communication Protocols The EZWire1616 is a real communication wizard It has been designed to understand and speak many different types of communication protocols some of which are extremely widely used de facto industry standards as follows NATIVE HOST LINK COMMAND MODBUS ASCII Trademark of Modbus org MODBUS RTU Trademark of Modbus org OMRON C20H protocols Trademark of Omron Corp of Japan The command and response formats of the NATIVE protocols are described in detail in Chapter 15 and 16 The other protocols and their address mapping to the EZWire1616 are described in Section 14 7 The three independent COMM ports 1 2 amp 3 support all of the above protocols Each COMM port can communicate using the same or different protocols independent of the other The most wonderful feature of EZWire1616 is that the support of all the above mentioned protocols can be fully automatic and totally transparent to the users There is no DIPswitch to set and no special configuration software to run to configure the port for a specific communication protocol The following describes how the automatic protocol recognition scheme works 1 When the PLC is powered ON all three COMM ports are set to the AUTO mode which means that they are open mind
250. s method uses one input of each PLC and as many outputs on the master signal generator PLC as there are PLC masters It also requires wiring the PLCs to the master signal generator PLC 15 5 5 TROUBLE SHOOTING AN RS485 NETWORK 1 Single faulty device If a single device on the RS485 network becomes inaccessible problems can be isolated to this particular device Check for loose or broken wiring or wrong DIP switch settings Also double check the device ID using the host link command IR sent via the RS232C port of the PLC If all attempts fail either replace the entire PLC or the SN75176 chip that handles the RS485 interfacing and try again 2 Multiple faulty devices If all the PLCs are inaccessible by the host computer it may possibly be due to a faulty RS232C to RS485 converter at the PC If this is the case disconnect the RS485 converter from the network and check it using a single PLC Replace the converter if it is confirmed to be faulty Next check the wire from the converter to the beginning of the network A broken wire here can lead to the failure of the entire network Since an RS485 network links many PLCs together electrically and in a daisy chain fashion problems occurring along the RS485 network sometimes affect the operation of the entire network For example a TR RESEARCH 15 9 INTERNATIONAL Chapter 15 Host Link Communication Protocol broken wire at the terminal of one node may mean that all the PLCs con
251. server You can find out the IP address assigned to the PLC by sending the command PRINT 4 lt IP gt and then read the response using INPUT 4 Ti Bass 2 2 INTERNATIONAL Chapter 2 Ethernet Port see example in C TRILOGIKTL7 usr samples Ethernet TestEthernet PC7 and the address can then be displayed on the PLC s LCD display using SETLCD command 2 1 2 GateWay IP Addr The Gateway IP address lets the EZWire1616 communicate with other LAN segments or connect to the Internet The gateway address is usually the local IP address of the router where the PLC is connected For small local networks with no plan for connection to the Internet the Gateway IP Address is not needed and can be set to 0 0 0 0 But if you plan to use the Fserver s email capability or making the PLC connect to an Internet web server then you must fill in the correct Gateway IP Address Ask your system administrator if you have any question about this 2 1 3 SMTP Server IP Address The SMTP Simple Mail Transport Protocol Server field lets you define the IP address of the email server that the PLC can use to send out emails from user s program please see section 2 3 3 for more details on how to program the PLC to send emails This is the same SMTP server that your normal email client software such as Thunderbird or MS Outlook uses to send out email You can ask your Internet Service Provider ISP for the IP address of their SMTP server
252. sets the sequencer asynchronously When the sequencer counts to eight it will become Step 0 Since none of the LEDs are turned ON by Step 0 all LEDs will be OFF Ca TRIANGLE 8 Lied RESEARCH 4 6 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers Clk1 Os Seq2 SS _ _ rvs Seq LEID OUT Seq2 8 Seq2 2 LED2 yO Seq Seq2 3 LED3 al Seq2 6 Seq2 4 LED4 OUT Seq2 5 Sto Seq cy gt Figure 4 5 4 5 Programming Sequencers in Custom Function You can change the current step of Sequencer easily from within a Custom Function by changing the present value of their equivalent counter E g Sequencer 3 is the same as Counter 3 thus if you wish to assign Sequencer 3 to Step 10 you can achieve it as follows 4 7 CTRPV 3 10 TRIANGLE RESEARCH INTERNATIONAL TR Chapter 5 Analog I Os Chapter 5 Analog Inputs and Outputs TRIANGLE RESEARCH INTERNATIONAL 9 Lied Chapter5 Analog I Os 5 ANALOG INPUTS AND OUTPUTS 5 1 Analog Power Supply The analog power of the PLC is derived from the same 12 to 24VDC power supply as the CPU It will generate a stable 5V 41 accuracy regulated DC voltage source that will be used internally as voltage reference and is available externally on the middle row of the analog input terminal blocks for use by other analog input devices The 20mA analog outputs have a 12 24
253. st use the file structure to provide the right balance between the number of data files and the amount of data space allocated to each data file Note The file name restriction only applies to files stored on the PLC s internal file space When you use the FTP upload function described later you can specify any destination filename as long as they are acceptable to the external FTP server 18 3 Transferring Files To The PLC s Web Server If you are only using the extended file space for the purpose of storing additional web pages on the built in web server then you can use the FTP client software such as FileZilla client to transfer the program to the PLC as described in Section 2 10 18 4 Accessing The Extended Data Files Using TBASIC TBASIC program on a F series PLC with r77 firmware can directly access any data file with names from Z000 yyy to Z399 yyy File with names from O yyy to Y yyy are reserved for storing web pages only and hence are not accessible by TBASIC The PLC can open a new file for writing new data essentially deleting the old file content or open an existing file and append data to the end of the file It can also open a file and read data from the file as ASCII strings It can achieve this by using the PRINT 8 and INPUTS 8 functions which will be described in details in the following sections We have created a sample program ExtendedFileSystem PC6 click here http Awww tri plc com tri
254. t execute the PRINT 4 lt gt to close the client socket ERR 04 Not Connected Failed to connect to the targeted server STATUS 3 This TBASIC function returns 1 if connected or 0 if connection fails Description Once a connection is made you can then interact with the remote server using the PRINT 4 and INPUT 4 command You use the INPUT 4 command to read CR terminated text strings sent by the server You can also send data to the remote server using the PRINT 4 command Example Please refer to the fnTCPconn1 custom function in the demo program TestEthernet PC6 to see an example of how the PLC can connect to an NIST timer server and use the returned data to update the PLC s real time clock Note Some NIST time servers have strict policy against abuse so you should avoid sending repeated request within a short period of time otherwise further connections may be denied once you are considered to have violated their connection policy Ti Bees 2 28 INTERNATIONAL Chapter 2 Ethernet Port 2 7 Web Service Accessing PLC s data from MS Excel The FServer provides an extremely useful feature called Web Service You can actually use your web browser to access the EZWire1616 internal data by specifying the following URL lt IP Address portno of FServer gt HOSTLINK lt Point to point hostlink command without gt E g Please enter the following URL into your
255. t for these analog inputs is described in Section 1 2 1 Input Voltage 8 12 bit 20 00K Ohms 1 to 9 points user definable gt 2 us for one channel gt 6 us for all 8 channels 2 A D converters run simultaneously Electrical Characteristics No of A D channel Resolution Input Impedance Ch 1 to 8 Moving Average Conversion Time ADC n value 5 00 Figure 5 2 Transfer Function for 12 bit ADC 4095 4094 4093 o M 5 2 1 A D 1 to 8 The DC input impedance of Analog inputs 1 to 8 are all 20 00K ohms This is not a problem when connected to a 0 5V low impedance analog source However if you need to connect to 0 10V inputs or 4 20mA analog source to A D 1 to 8 you have to take into consideration the low A D input impedance in your design The following figures show how to connect 4 20mA current source signals and 0 10V signals to the A D inputs 1 to 8 5 2 ara TRIANGLE UR RESEARCH INTERNATIONAL j Chapter 5 Analog I Os AD 1 8 AD 1 8 0 20mA or 4 20mA Current loop 2502 1 Internal 20 00K 3 1691 Converting 20mA current loop to 0 5V Converting 0 10V signal to 0 57 Figure 5 3 You can see that interfacing to 0 10V analog signal is extremely simple since all you need is to add a 20 0K ohm series resistor and it will be divided into 0 5V when it enters the AD 1 to 8 However to convert 0 20mA or 4 20mA
256. t may be changed using the SetBAUD TBASIC command described in the i TRiLOGI Programmer s Reference 15 1 Multiple Communication Protocols The EZWire1616 supports many different communication protocols to allow maximum application flexibility In addition to its own native set of communication protocols the EZWire1616 also understands and speaks the following protocols a MODBUS ASCII mode compatible communication protocol b MODBUS RTU mode compatible communication protocol c OMRON Host Link Commands for the C20H PLC family Note all trademarks belong to their respective owners The native host link command protocol will be described in detail in this and the next chapter The MODBUS and OMRON compatible protocols have already been discussed in Section 14 7 15 2Native Mode Communication Protocols When the EZWire1616 receives a native host link command via COMM1 COMM2 or COMMS it will automatically send a response string corresponding to the command This operation is totally transparent to the user and does not need to be handled by the user s program All EZWire1616 support both the point to point one to one and multi point one to many communication protocols Each protocol has a different command structure as described below 15 3 Point To Point Communication Format In a point to point communication system the host computer s RS232C serial port is connected to the PLC s COMM1 At any one time only o
257. t was used and then adding the 3 contact HF as shown in Figure 3 4 below KS TRILOGI Version 6 13 Untitled File Edit Controller Simulate Circuit Help Circuit 1 Ary HHAH lk Je SF ng HF ng Relay1 Input Relay1 RLY Figure 3 4 Completed Latching Circuit 3 3 Programming DIO in a Custom Function In order to program digital I O or anything in a custom function a custom function must be created in the 0 Table and added in a ladder logic circuit Custom functions act the same way as coils in ladder logic in that that they need a contact to activate them Once they are activated the code inside them will execute To create a custom function circuit follow these 3 steps INTERNATIONAL fe TRIANGLE 8 Toi RESEARCH 3 2 Chapter 3 I O and Internal Relays Programming 1 Edit the name of the custom function in the I O Table 2 Place the activating contact in the ladder logic circuit 3 Place the custom function at the end of the circuit 3 3 1 Editing Label Names This is the same as for the digital I O except that the I O table window needs to be scrolled to the custom function area for editing custom function names Placing the custom function in the circuit is done the same way as other ladder logic contacts and coils by selecting the za and then choosing the Differential custom function dCusF from the pop up D CusFn Custom Function E dCusF Diff Up Cus
258. ta 18 1 1 18 3 File Structure and File Naming of The Extended File System 18 2 18 4 Transferring Files To The PLC s Web Server 18 3 18 4 Accessing The Extended Data Files Using TBASI C 18 4 Open A File For Writing New Data 18 4 18 4 1 18 5 Open A File For Appending Data To The End Of The 18 4 2 18 5 0000000 Delete 18 4 3 18 5 0 0 2 121212 121 12 wenn 1 12121 1 1212 121 12 1 1 12 1 1 12 1 Open A File 18 4 4 18 7 Setting Up The FileZilla FTP Geer 18 5 tnt 18 7 Download and Setup FTP 18 5 1 Testing Connection To The FTP Server Using Telnet AA 18 9 18 5 2 18 12 Uploading File From PLC to FileZilla FTP Server Directory 18 6 Overview of The FTP Protoco kukkaan EnaA KANKEN A ERREK K KRAAK NAAKKA RREAK ER 18 12 18 6 1 AEEA E AEAEE 18 2 2 2 2 2 2 1212121212 12121212 12121 121 1 1 21 12 1 1 1 1 1 1 PLG 18 6 2 Monitoring The FTP Upload Progress A 18 13 18 6 3 18 3
259. tailed explanation of this command The NETCMD function therefore greatly simplifies the programming tasks for handling networking between PLCs The programmer only needs to construct the correct command string according to the formats described in this chapter pass the formatted string to the NETCMDS function and then check for the response string An EZWire PLC may use the NETCMD to map the I O of another PLC into its internal relays and use the other PLC as its remote I O There are some programming examples in your TRILOGI TL6 usr samples folder that illustrate the use of NETCMDS to map I Os of a slave PLC to the master Please study the two examples RemotelO Hseries PC6 and RemotelO Mseries PC6 carefully to understand the mechanism of mapping I Os between the PLCs The TRILOGI program REMOTE Hseries PC6 will work on the H series M series or F series PLCs as slaves whereas the program REMOTE Mseries PC 6 will only work with F series FMD or Nano 10 This is because the Super PLC host link command set is a superset of the H series host link command set and this example uses the more efficient M series host link commands to read write 16 bit data for networking between M series PLCs An application note and example programs demonstrating how to use our other PLC models as slave remote I O for the Super PLC can be found at the following web page http www tri plc com appnotes Appnote
260. ter the next failed transfer until FileZilla Server recognizes the changed IP In most cases the IP is updated within 30s after a failed transfer Don t use external IP for local connections Next open up Windows Firewall and add to the Exception list the port 21 command port and ports 41000 to 41001 or whatever range limit you have set to in the FileZilla Setup screen This should allow the FTP Server to receive connection from these ports that the PLC will be using to make the command and data connections TR RESEARCH 18 18 INTERNATIONAL Chapter 18 Extended File System Windows Firewall General Exceptions Advanced Windows Firewall is blocking incoming network connections except for the programs and services selected below Adding exceptions allows some programs to work better but might increase your security risk Programs and Services Name Skype Skype Eres Manager Skype4 Sling Player Test_USB_ML_CF_Hardware UPnP Framework Visual Cafe Executable Windows Home Server Connector Windows Live Call Windows Live Messenger MI Wiindawe Meceeanner Display a notification when Windows Firewall blocks a program What are the risks of allowing exceptions Add a Port Use these settings to open a port through Windows Firewall To find the port number and protocol consult the documentation for the program or service you want to use Name FTP Server Port Port number
261. the maximum allowed for the corresponding AC frequency as it will lead to poor interrupt timing of the CPU and can affect all the dimmer channel if you see the light flickering repeatedly then some of the dimmer channel could have been set with an out of range value Note Since the CPU needs a minimum amount of time delay to fire the TRIAC after the last zero crossing the minimum value cannot equal 0 Also please be reminded again that the voltage applied to the load is non linear with respect to the firing angle controlled by the value parameter 17 4 3 Programming Example Please find the demo program SetDimmer PC6 in the zip file that you can download from http www tri plc com trilogi FPLCsamples zip The demo program lets you experiment with turning a lamp slowly ON Fade ON effect and slowly OFF Fade OFF effect as well as letting you experiment with manual control of the lamp s brightness using two push buttons Tri ss 17 5 INTERNATIONAL 5 Chapter 18 Extended File System Chapter 18 Extended File System TRIANGLE RESEARCH INTERNATIONAL O DA Chapter 18 Extended File System 18 EXTENDED FILE SYSTEM Before you begin please download a sample I TRiLOGI program that will be referred to throughout this manual from our website http www tri plc com trilogi ExtendedFileSystem zip 18 1 Introduction All EZWire PLCs support up to 1
262. the I O table After creating a ladder circuit that contains one input and one timer output and another ladder circuit that contains one timer contact and one output the ladder logic circuit should like something like Figure 4 2 below OH o TRIANGLE IRA RESEARCH 4 2 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers KE TRILOGI Version 6 14 Untitled File Edit Controller Simulate Circuit Help Circuit 2 ie lt wd ml Cal Jr EI Input Time TIM all Timert Output OUT Figure 4 2 Completed Timer Circuit 4 2 4 Example 2 Creating a Simple Counter Circuit in Ladder Logic You can place components in the circuit by clicking in the green area to the right of the red arrow as shown in Figure 4 3 below This will bring up the component tool bar in the gray area above the green circuit area K TRILOGI Version 6 13 Untitled File Edit Controller Simulate Circuit Help Circuit 1 DEED eine quick Tags Figure 4 3 Creating Ladder Circuit Once the component toolbar is shown you can place your activating contact by selecting the 1 component from the toolbar EIS and then selecting the activating input from the I O Table The contact will then be automatically placed in the ladder logic circuit The same can be done for the counter coil by selecting the 7 component from the toolbar O and then selecting a counter that has been entered into the I O Table Then a counter contact needs
263. the PLC to refresh the value of its ADC data at the analog channel before returning its value in the response string i e no need for the PLC to execute ADC n function to refresh the analog input Command Format PREAtTntnte te Oo Starting Analog Channel count Channel 01 08h 01 to 08h Response Format 35 Ten Met 16 16 INTERNATIONAL Chapter 17 IR Remote Control LR LA 16 16 te te 1621161161 o Starting channel 35 Ending channel 16 bit Data Hex 16 bit Data Hex E g To read 4 channels of Analog inputs starting from Ch 2 Send RA0204 The response string will contain 4 sets of data for channel 2 3 4 and 5 16 42 Read EEPROM Integer Data Command Format EEPROM starting Word Count Address Hex 01 to 20h Response Format ER x 1 16 16 16 o 16 16 16 4 EEPROM Integer si Last EEPROM 16 bit Data Hex 16 bit Data Hex Maximum allowable word count per command is 32 01 to 20 Hex If count is gt 32 only the first 32 words will be returned E g To read the 10 words of EEPROM data starting from address 100 send host link command RXI00640A The response string will contain 10 sets of 16 bit data 4 ASCII hex digit per set 16 43 Read EEPROM String Data Command Format NT EEPROM String starting Address Hex Response Format PRUX staftatal fataltal Oo E g To read th
264. the port range to limit External Server IP Address for passive mode transfers Default Use the following IP You can also enter hostnames Miscellaneous Admin Interface seti Logging GSS Settings Speed Limits Filetransfer compres SSL TLS settings i 5 the number of ports that will need v O Retrieve external IP address from eigenen 9 filezilla project ora ip ohr router Autoben Information for users with dynamic IPs If your external IP changes it might take up to 5 minutes after the next failed transfer until FileZilla Server recognizes the changed IP In most cases the IP is updated within 30s after a failed transfer Don t use external IP for local connections Next open up Windows Firewall and add to the Exception list the port 21 command port and ports 41000 to 41001 or whatever range limit you have set to in the FileZilla Setup screen This should allow the FTP Server to receive connection from these ports that the PLC will be using to make the command and data connections 18 14 INTERNATIONAL TE v TRIANGLE T RESEARCH Chapter 18 Extended File System Windows Firewall General Exceptions Advanced Windows Firewall is blocking incoming network connections except for the programs and services selected below Adding exceptions allows some programs to work better but might increase your security risk Programs and Services Name Skype
265. the total sum to the calling routine 5 5 3 DAC Calib A value x entered in each of these fields represents the multiplication factor 1 x 10000 that the PLC will apply to the value parameter which is executed by the command SETDAC n value before actually writing to the DAC output This allows the user to apply a correction factor to the DAC output if there is a problem with the DAC current Example 1 If you execute SETDAC 1 2048 you would expect the DAC 1 to output 10 000mA but instead you only get 9 920mA c _ 2 TRIANGLE _ Ind RESEARCH 9 13 INTERNATIONAL Chapter 5 Analog I Os Proportional Error 9 920 10 000 0 992 Multiplication factor required to correct the DAC output 1 0 992 1 0081 1 81 10000 You can therefore enter the value 81 into the DAC Calib field corresponding to DAC 1 and save the parameters to the PLC After the PLC has rebooted when you execute the statement SETDAC 1 2048 the CPU would apply the multiplication factor of 1 0081 to the actual digital value it sends to the DAC output The actual DAC output 9 920mA x 1 0081 10 00mA Example 2 Same as Example 1 but you measure 2 515V when you expect 2 500V Proportional Error 10 060 10 000 1 006 Multiplication factor required to correct the DAC output 1 1 006 0 9940 1 0 0060 You should therefore enter the value 60 into the DAC Calib field correspond
266. this port number is not opened and not mapped by the router You should read your router s User s Manual to find out how to configure the router to perform the port forwarding described above since each router model has a different user interface For example on the D Link DI 624 router you configure the router by clicking on the Advanced tab and selecting Virtual Server from the router configuration page as shown below D Link Building Networks for People High Speed 2 4GHz Wireless Ro DI 624 Home A Tools Status Virtual Server is used to allow Internet users access to LAN services Enabled Disabled Name Clear Applications Private IP Protocol Type TCP e Filters Private Port WI TR RESEARCH 2 31 INTERNATIONAL Chapter 2 Ethernet Port On the Linksys WRT54G router you would configure it from the Applications amp Gaming menu under the Port Range Forward tab as shown below LiNnKSYS A Division of Cisco Systems Inc Wireless G Broad Applications H F Access Applications amp Gaming Setup Wireless Security iat a Camini Port Range Forward Port Triggering DMZ Port Range Forward Port Range 2 8 2 Large Corporate Local Area Network In the case of a medium to large corporate LAN whether incoming and outgoing TCP IP packets are allowed to go through the corporate firewall is entirely decided by the System Administrator according to
267. tile FRAM Memonm 1 7 2 eine edie Wandin ieee ees 1 12 1 1 3 Extended Data File Storages si ti inniinn a aiaia aaa aiaa a aAA EANA AE KARARKA Ea 1 12 1 7 4 1 13 100101010101018 DIP SWITCHES 1 8 Usefulness Of SWIA ENEE 1 13 1 8 1 1 13 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 12 1 12 1 1 1 1 1 1 1 1 1 1 Real Time Clock Batter 1 9 1 14 CPU Status Indicators 1 10 SEA 1 14 RTC Error Green LED 1 10 1 STE WEE KEE 1 14 1 10 2 aniseed ak eens 1 14 R n Error Redi LED 1 10 3 ETHERNET PORT 2 1 Configuring The Ethernet Port ccccscccsseeeeseeeeeeeeesceseseeeeeeeeeeeeeeeseaeseseeeeseeesessaeseneeeenseees 2 1 2 1 IP ADA EEN 2 2 2 11 2 3 0 GateWay IP Addr 2 1 2 2 3 SMTP Server IP Ad
268. tions 1 This is everything that needs to be configured so you can now click on connect New Site New Eolder New Bookmark Rename Delete Copy Connect OK l Cancel Figure 2 10 2 TRIANGLE 8 Toi RESEARCH 2 34 INTERNATIONAL Chapter 2 Ethernet Port F series samples 192 168 1 5 FileZilla x If Fi ezi lla h as made a File Edit View Transfer Server Bookmarks Help H successful connection the Mre inl 2 008 gei status should be Host Username Password Port uickconnect e o rm z 2 S Connected and Directory Status Connected H ae Pane Retrieving directory listing listing successful d Command ch Command PORT 192 168 1 160 227 126 Also you should be able to Response 200 OK Command D see the preloaded files in the Deng ee remote site directory which is US irectory listing successful D 8 3 Local site v Remote site X the bottom right window Computer p m 09 m Hm F RECOVERY H Gi Filename Filesize Filetype Last modified Filename Filesize Filetype Last modified Permissiot amp c Local Disk F RECOVERY Local Disk ei 0 HTM 3 228 Firefox Doc 1 1 2007 TWX aac CD Drive B nus 10 783 JScript Scri 1 1 2007 pstaa lt m 0 4 w D 5 directories 2 files Total si
269. to be added as an input to a ladder logic circuit This contact will activate once the counter counts down This could be used to turn on an output after a certain count is reached Placing a counter contact in a circuit is the same as placing any contact in a ladder circuit except that the corresponding counter should be selected from the Counters section of the I O table After creating a ladder circuit that contains one input and one counter output and another ladder circuit that contains one counter contact and one output the ladder logic circuit should like something like Figure 4 4 below KS TRILOGI Version 6 14 Untitled DER File Edit Controller Simulate Circuit Help Counter1 CTR Counter1 Output OUT Figure 4 4 Completed Counter Circuit 6 TRIANGLE TRY RESEARCH 4 3 INTERNATIONAL Chapter 4 Timers Counters amp Sequencers 4 3 Programming timers and counters in Custom Function 4 3 1 Timers and Counters Present Values The present values PV of the 64 timers and 64 counters in the PLC can be accessed directly as system variables timerPV 1 to timerPV 64 for timers present value ctrPV 1 to ctrPV 64 for counters present value 4 3 2 Inputs Outputs Relays Timers and Counters Contacts The bit addressable I Os elements are organized into 16 bit integer variables TIMERBIT n and CTRBIT n so that they may be easily accessed from within a CusFn These I Os are arranged
270. to sample the analog at high frequency 5 Tri 5 4 INTERNATIONAL Chapter 5 Analog I Os A very simple example of sampling the analog input 1 to 4 every second and converting the data into voltage readings of 0 to 5000 which represents 0 to 5 000V is shown as follow fea TRILOGI Version 6 14 D ReadADC PC6 File Edit Controller Simulate Circuit Help Minimize Circuit 1 DEED define quick Tags Clk 1 0s ReadADC dCusF 3 Custom Function 1 ReadADC DM 11 to DM 14 contains readings from Analog input 1 to 4 I gt FOR I 1 to 4 DM I 10 ADC I 5000 4096 NEXT Figure 5 5 You can examine the readings of DM 11 to DM 14 from the Online Monitoring View Variables DM n screen These readings represent the voltages measured at the analog input pins You can also read the raw ADC readings which will change in the range between 0 to 4095 from the View Variables integer screen You can off course also use the floating point variables to directly store the computed readings as floating point number E g V ADC 1 4096 0 5 0 5 2 5 Moving Average The EZWire1616 PLC offers a built in Moving Average computation routine for each ADC channel When moving average is enabled the PLC firmware would store the past analog readings for each channel in its own historical memory array and each new instantaneous reading would overwrite the oldest read
271. tom Funcs F MaRST Master Reset The circuit should look something like below window Dei TRiLOGI Version 6 13 Untitled File Edit Controller Simulate Circuit Help Figure 3 5 Circuit with custom function dCusF 3 3 2 Controlling I O from Custom Functions An empty custom function looks like this KE Custom Function 1 func__1 Select Function Edit Fn Name Insert Keyword lt q lt gt gt gt TBASIC code is entered into the custom function which allows the possibility of total control of all of the PLCs functions and hardware There are 7 TBASIC functions available to control all of the digital I O which are SETIO labelname CLRIO abelname TOGGLEIO labelname TESTIO abelname SETBIT v n CLRBIT v n TESTBIT v n F Ome Oe Each function has its own advantage depending on what needs to be done to a digital I O Each of these functions is explained in the programmer s reference manual which should be referred to for further information Here are some examples of how to control digital UO using these functions INTERNATIONAL O TRIANGLE TRY RESEARCH 3 3 Chapter 3 I O and Internal Relays Programming 3 3 3 Example 1 Turn on off an Output This can be done using both the SETBIT v n CLRBIT v n command and the SETIO abeiname CLRIO labelname command 1 Using SETBIT v n CLRBIT vn SETBIT OUTPUT 1 0 This will turn on the first output using the output register CLR
272. transmit over long distances and versatility of converting to any voltage range on the control input side at the signal destination Current signals are much more resilient against noise when compared to voltage outputs since any noise accumulated on the line would not affect the signal This is because the current will remain constant at the value determined by the PLC DAC Since many industrial environments have direct and indirect sources of noise nearby this is very beneficial It is possible to interface to control devices more than 1000m away as long as the sum of the line drops do not exceed PLC power This allows you to potentially control 4 devices in completely separate and potentially hazardous locations that are miles apart while the PLC is installed in a protected environment It is possible to convert a current signal to any of the standard voltage input ranges such as 0 5V or 0 10V at the destination control device analog input Only a resistor needs to be added at the destination in order to convert to the desired input voltage If you are converting 0 20mA to 0 5V you simply add a 250 Ohm resistor across the signal input and common OV If you are converting 0 20mA to 0 10V you simply add a 500 Ohm resistor across the signal input and common OV Here are examples of such conversions RESEARCH INTERNATIONAL TR TRIANGLE 5 10 Chapter5 Analog I Os Control Device 0 10VDC Analog Input
273. ts depending on the particular model but all will have 512 internal relays available in both ladder logic and BASIC 3 2 Programming DIO with Ladder Logic The physical I O and internal relays can be programmed in ladder logic in a few simple steps 3 2 1 For Physical UO 1 Edit the label names 2 Place the input contact s into the ladder logic circuit 3 Place the output coil at the end of the ladder logic circuit 3 2 2 For Internal Relays Non Latching Edit the label names Place the relay contact s into the ladder logic circuit Place the relay coil at the end of the ladder logic circuit a N 3 2 3 For Internal Relays Latching Edit the label names Place the activating input relay contact into the ladder logic circuit Place the latching relay in parallel with the activating contact Place the relay coil at the end of the ladder logic circuit 3 2 4 Programming Examples ES 1 0 Labels 3 2 4 1 Example 1 Editing Label Names Fa inputs ai Label Name The Digital I O can be named by selecting I O Table from the Edit menu ES input and choosing the particular digital UO that you want to name In Figure 3 1 physical input 1 is being named Input1 Em LG EW MO 11 row Figure 3 1 I O Table Tat RESEARCH 3 1 INTERNATIONAL 1 Chapter 3 I O and Internal Relays Programming 3 2 4 2 Example 2 Creating a Simple Ladder Logic Circuit You can place componen
274. ts in the circuit by clicking in the green area to the right of the red arrow as shown in Figure 3 2 below This will bring up the component tool bar in the gray area above the green circuit area FE TRILOGI Version 6 13 Untitled DER File Edit Controller Simulate Circuit Help circuit 1 MAAA cetine cuick Tags Figure 3 2 Creating Ladder Circuit Once the component toolbar is shown you can place your input relay contact by selecting the 1 component from the toolbar ES and then selecting the digital input from the I O Table The contact will then be automatically placed in the ladder logic circuit The same can be done for the output coil by selecting the 7 component from the toolbar O and then selecting an output that has been entered into the I O Table After selecting one input and one output the ladder logic circuit should like something like Figure 3 3 below KE TRILOGI Version 6 13 Untitled File Edit Controller Simulate Circuit Help cireuit 1 SR JAR JAE 9 94 Foto gt Inputt Figure 3 3 Completed Ladder Circuit 3 2 4 3 Example 3 Creating a Latching Relay Circuit The first part of the circuit follows the same procedure as the previous example except that the 7 coil should be a Relay coil So it should look similar to the circuit in Figure 3 3 The next part requires a parallel contact to be added to the Input contact This is done by selecting the Input contact or whichever contac
275. u are on a company network then you must consult your company s system administrator to assign you a useable IP address However if your PC is connected to a small local area network then most likely you will have a LAN IP address of 192 168 XXX YYY For proper networking you should set the PLC s IP address to 192 168 XXX ZZZ i e The first three numbers should match each other The fourth number ZZZ should be an IP address that is not used by any other devices on your network Note that majority of small LANs are built using a network router that assigns dynamic IP addresses called DHCP server to the PC You should enter the administrator page of the router and define the range of DHCP for use by the PCs and then you may assign the PLC with any IP address that is outside of the DHCP range E g If you define the DHCP address range to be 192 168 1 100 to 192 168 1 150 then you may assign the PLC with any IP address between 192 168 1 2 to 192 168 99 Usually the router itself would have the IP address 192 168 1 1 so that address is not available and also between 192 168 151 to 192 168 1 254 again making sure that 192 168 1 254 is not already used by your router DHCP IP Address New on Fx and EZWire PLC Only For the EZWire1616 PLC if you set the IP address to 0 0 0 0 then the PLC will send DHCP request to the DHCP server to request for an IP address The DHCP server is assumed to have the same IP address as the Gateway
276. uently would not have any adverse effect on serial communications which was sometimes the case with previous M series technology Since the FRAM are in fact a replacement of the legacy EEPROM data memory you can use the same TBASIC commands LOAD_EEP LOAD_EEP SAVE_EEP and SAVE_EEP in TRILOGI version 6 or 7 to read and write to the FRAM memory 1 7 3 Volatile Data Memory All the TBASIC variables used in the EZWire1616 PLC A to Z A to Z FP 1 to FP 1000 DM 1 to DM 4000 and string A to Z EMINT 1 to EMINT 16 and EMLINT 1 to EMLINT 16 are in the category of volatile data memory meaning when you turn off power to the PLC the memory content will be lost and they will be reset to zero when the PLC is powered up again However the memory array DM 1 to DM 4000 as well as FP 1 to FP 1000 can be made non volatile by turning on DIP switch 1 This is because internally DM 1 to DM 4000 as well as FP 1 to FP 1000 are actually implemented in FRAM rather than regular RAM however they are not part of the 6K words available for use mentioned in Section 1 7 2 You can therefore use these DMs as safe memory locations whose content will be preserved in the case of a power failure Of course you can also use the SAVE_EEP and LOAD_EEFP to achieve the same result as using DM 1 to DM 4000 It may be just a little more natural to use DM in your program instead of sprinkling LOAD_EEP and SAVE_EEP commands throu
277. version is necessary i e When the PLC NPN output is OFF the control input to the RC Servo will be OFF and when the PLC NPN output is ON the control input to the RC Servo 6V Hence to send a 5 positive PWM control pulse to the Servo you can run the following statement SETPWM 2 500 50 Set PWM 2 output to 5 duty cycle at 50 Hz Likewise to send a 10 positive PWM control pulse to the Servo you can run the following statement SETPWM 2 1000 50 Set PWM 2 output to 10 duty cycle at 50 Hz Of course you can replace the duty cycle with a value e g DM 1 and run statement such as SETPWM 2 DM 1 50 Set PWM 2 output to DM 1 100 duty cycle at 50 Hz 11 4 3 RC Servo Positioning Resolution Since the resolution on the EZWire1616 PLC s PWM output is precise to 0 01 at 50112 this means that you can get a maximum of 500 discrete positions within the travel range of the RC Servo This should be sufficiently accurate for many applications such as HVAC damper control or control of proportional valves The actual positioning accuracy and precision however will depend on the quality of the RC Servo Ti aes 11 5 INTERNATIONAL Chapter 12 Real Time Clock Chapter 12 Real Time Clock Ti v TRIANGLE 17 RESEARCH INTERNATIONAL Chapter 12 Real Time Clock 12 REAL TIME CLOCK 12 1 Introduction A Real Time Clock RTC is a device that keeps accurate date and time information down to the second The
278. web browser URL address space 192 168 1 5 9080 HOSTLINK IR You will see the following data appear on your browser screen IRO1 IR is one of the many host link commands that allows a host computer to read or write to the PLC s internal data space using ASCII strings This particular command IR is for reading the PLC s ID and in this case the PLC returns 01 by default For more details on the list of host link commands please refer to Chapter 15 of this manual Normally the host link commands are sent to the PLC via the serial port as per all other PLC models produced by TRi The Fserver however permits these host link commands to be sent using the HTTP protocol which enables the EZWire1616 to be easily accessible by enterprise software using what is known as Web Query methods The enterprise software only needs to know the format of the host link command required to read the target data and then they can use their web query capability to query the PLC and extract the required data from the response string One example which you can try immediately is to use the Microsoft Excel 2000 or later version spreadsheet program First open a blank spreadsheet then click on the Data menu and select Get External Data gt New Web Query as shown below Microsoft Excel Bock SI File Edit View Insert Format Tools Data Window Help Adobe PDF ER 2 BS SRY amp 85 3 2 sor Sein SC i A1 ubtot
279. which will display all of your network connections fe o gt TRIANGLE 8 Toi RESEARCH 2 10 INTERNATIONAL Chapter 2 Ethernet Port WNewokcnnectiong L leg Now you can either right click on the Local Area Connection and select File Edit View Favorites Tools Advanced Help Properties or highlight it and click on Back E JO search Folders E Change settings of this connection from the Network Tasks sidebar as E LAN ortigi Speed Interset shown above When you do this the following window will open Create a new connection Setup a home or small Wireless Network Connection Connected Shared Broadcom 802 11b g WLAN office network Change Windows Network c Firewall settings sg a Realtek Disable this network device 1394 Connection si Rename this connection Connected 1394 Net Adapter Change settings of this z connection Figure 2 8 2 3 Edit TCP IP Properties Now you want to highlight the Internet Protocol TCP IP item and click on Properties This will General Advanced open up a new window that allows you to change 7 the network settings for the Ethernet port that you ai selected The Ethernet hardware you are ID Realtek RTL8139 810x Family Fast Configure configuring is shown under Connect using in the current window This connection uses the following items S Client for Microsoft Networks S File and Printer Sharing for Mic
280. wn as Passive Transfer FileZilla is able to operate in either transfer mode but the PLC FTP Server can only operate in Active Transfer mode Active Transfer mode requires that the client FileZilla provides a listening socket for the server PLC and the server PLC will then try to connect to this socket to establish the data connection So if the FileZilla program sits behind the software firewall and no exception has been configured then the PLC FTP Server will not be able to make a connection to the FileZilla data socket because it is blocked by the firewall and the connection will therefore fail This explains why FileZilla seemingly able to connect to the PLC but yet is unable to send any data or list the directory because there is no data channel connection for it to do so However sometimes the problem could persist after disabling all firewalls and in that case the only option is to revert to an older version of FileZilla and then transfer the files by doing a right click download or right click upload if drag and drop doesn t work You can do this as follows a Download the FileZilla client version 3 1 5 1 from http Awww oldapps com filezilla php b Remove the current version and then install version 3 1 5 1 c Connect to the PLC d There should be two directories same as always local site your PC and remote site the PLC You should see your files in the PLC directory e Open the folder in the loca
281. words by using the addresses from 4 0001 to 4 0320 Some MODBUS drivers such as National Instruments Lookout software even allow you to manipulate individual bit within a 16 bit word So it is also possible to map individual I O bits to the 4x address space E g Input bit 1 can be mapped to 4 0001 1 and output bit 2 is mapped to 4 0257 2 etc This is how it is shown in Table 14 1 However if you do not need to manipulate the individual bit then you simply use the address 4 0001 to access the system variable INPUT 1 and address 4 0257 to access the system variable OUTPUT 1 Note that INPUT 1 and OUTPUT 1 are TBASIC system variables and they each contain 16 bits that reflect the on off status of the actual physical input and output bits 1 to 16 14 8 2 MODBUS RTU Protocol Support The EZWire1616 also support the MODBUS RTU protocol The difference between the ASCII and RTU protocols is that the latter transmits binary data directly instead of converting one byte of binary data into two ASCII characters A message frame is determined by the silent interval of 3 5 character times between characters received at the COMM port Other than that the function codes and memory mappings are identical to the MODBUS ASCII protocol Table 14 1 therefore applies to the MODBUS RTU protocol as well MOBBUS RTU has the ee command and response format Address Function Data CRC 16 St of 3 5 1 byte 1 byte byte 2 bytes of 3 5
282. would send a Modbus TCP request with a specific 8 bit Modbus slave ID to the gateway PLC If the ID matches the native ID that is assigned to the gateway PLC then the PLC will react normally by sending its own Modbus TCP response packet back to the client The PLC will not send any RTU command out of the gateway serial port This means that the client can access the master PLC s own register as per normal Ti aes KH INTERNATIONAL Chapter 19 Using PLC As A Modbus TCP Gateway However if the client send a Modbus TCP packet with a different ID from that of the gateway PLC s ID then the gateway PLC will translate the command into a Modbus RTU command and send it out of the gateway serial port n defined by the SETSYSTEM 12 n statement The PLC will also wait for a response from the RTU slave via the gateway serial port and if it does receive a response it will translate it into Modbus TCP response packet and return to the client Note 1 If the Modbus RTU slave being addressed does not respond to the RTU command then the gateway PLC will wait till time out default is about 150ms and then resend the Modbus RTU command and wait for a response again By default the gateway PLC will repeat this procedure twice and if it still doesn t receive a response after repeated attempts it will send back a TARGET DEVICE FAILED TO RESPOND error packet back to the Modbus TCP client i e It will set the 7 bit of the function c
283. x 16 6 1 Definition of Timer Contact Channel Numbers A timer contact is a single bit of memory and 8 timer contacts are grouped into one 8 bit channel similar to that of the inputs outputs etc The following table shows the timer numbers defined in TRiLOGI s Timer entry table and their corresponding channel numbers bit7 Timer Contact numbers bitO CHO 7 5 4 3 CHi 16 15 14 13 12 n 10 9 CH2 CH3 CH4 CH5 CH6 CH7 64 63 62 61 60 59 58 57 16 7 Read Counter Contacts Command Format Benn KT 8 bit channel Hex Response Format PR cc ie ie O oe 8 bit data in Hex_ 16 7 1 Definition of Counter Contact Channel Numbers The 64 counter contacts are assigned channel s in exactly the same way as the 64 timers Please refer to the last section 16 6 Read Timer Contacts for details 16 8 Read Timer Present Value DV Command Format PR vllt o nn Timer1 00 Timer16 0F Timer64 3F Response Format EO TRIANGLE 8 URA RESEARCH 16 4 LI Ki INTERNATIONAL Chapter 17 IR Remote Control ER M to tof 10 to Timer present value in Decimal The present value PV of the specified timer is returned in decimal form as four byte ASCII text characters from 0000 to 9999 16 9 Read Timer Set Value S V Command Format PR Emp o to t ol a oe nn Timer1 00 Timer16 OF Timer64 3F Response Format
284. y a moving average of 1 point that means no moving average will be used and the ADC n function will return the most recently sampled data at the analog input n Ca TRIANGLE _ Ind RESEARCH 5 14 INTERNATIONAL Chapter 6 Special Digital I Os Chapter 6 Special Digital 5 TRIANGLE RESEARCH INTERNATIONAL a 9 URA 1 Chapter 6 Special Digital I Os 6 SPECIAL DIGITAL I Os 12 of the first 16 ON OFF inputs of the EZWire1616 can be configured as special inputs such as High Speed Counters Interrupts and Pulse Measurement 12 of the 16 outputs can also be configured as PWM or stepper motor controller driver pulse outputs If these special I Os are not used then they can be used as ordinary ON OFF type I O in the ladder diagram The High Speed Counters and Pulse measurement inputs share physical inputs but they can be used simultaneously as HSC and PMON unlike M Series Note that if any other two special functions share the same I O then only one of them can be active at any one time The location of these special I Os are tabulated as follows Special Inputs 1 Ch t PhaseA 2 Chit 2 Chit PhaseB Ch 2 Ch 2 3 Ch 2 PhaseA Ch 3 5 3 O 4 Ch 2 PhaseB Ch 4 Ch 4 6 Ch 3 PhaseB_ os Ch 6 ee ee o ea EE EECH Note While inputs 1 6 can be used simultaneously as High Speed Counters and Pulse Measurement pins any pins defined as interrupts can only be inter
285. your IP address is reported on the TLServer s front panel You can also get the IP address from the Windows Network Connection Status as shown below Our test PC has an IP address 192 168 1 168 which will be used in the following tests as well as used in the PLC program to connect to the FTP Server INTERNATIONAL Thi BS 18 9 Chapter 18 Extended File System Ve PLC WebServer i Wireless Network Connection 4 Status PS General Support Internet TRILOGI Server Connection status IP Addresst 192 168 1 168 9080 eects Padmed by DHCP IP Address 192 168 1 168 Subnet Mask 255 255 255 0 Default Gateway 192 168 1 1 Configure Users i Setup Emails Windows did not detect problems with this pair ons eee E connection If you cannot connect click Copyright c Triangle Research Int l Inc Repair 2001 2011 All Rights Reserved Helo Version 3 16 E 1 First open a command prompt window and then type telnet 192 168 1 168 21 this will open a telnet connection to the FTP server on our test PC with IP address 192 168 1 168 and listening at port 21 Please replace the IP address with the actual IP address of your PC The following screen shot captures the test sequence Note that the same command response sequence with the server is also shown on the FileZilla Server Interface program front panel USER PLC FileZilla Server 127 0 0 1 PASS 1234 File Server Edit cx Telnet 192 168 1 168 7 C
286. ze 14 011 bytes Server Local file Direction Remote file Size Priority Status Queued files _ Failed transfers Successful transfers D Queue empty ee Figure 2 10 3 If you are not able to connect to the PLC s web server or if you can t get a successful directory listing then you should first double check the settings you have configured for FileZilla compared to the settings configured in the F Server The next thing to check is your Windows firewall which must allow the PLC to make a connection back to the PC due to the use of active transfer settings You can disable the firewall temporarily to check if it is affecting your FileZilla connection If you have confirmed that disabling the firewall allows you to successfully connect to the PLC server and view the directory listing then you can add the PLC s IP address as well as FileZilla program to the firewall exception list so that you can leave your firewall enabled if you wish To add FileZilla to the Windows firewall exception list you will need to open the Windows firewall from your network settings configuration area Then you will need to click on Change settings which will open up a new window You will need to go to the Exceptions tab in the new window and look for FileZilla in the list of programs If you see FileZilla in the list then you will need to check the box beside it to add it to the exception list Otherwise you will need to manually add it
Download Pdf Manuals
Related Search
Related Contents
to the WHOLE Service Kit User`s Manual Manual de instrucciones Owner`s Manual Samsung BF64CCST User Manual Insignia NS-BDLIVE01 User's Manual Remote Display True-rms Clamp Meter Phottix Mitros+ TTL Transceiver Flash for Nikon Parts Copyright © All rights reserved.
Failed to retrieve file