Home

e caution

1. 2 aA N ml 2 v N 5 U uonPAn e p s nb l 35 snoaue uods ues punosbypeq 2Ipolad P_AC_NA_1 lt 112 gt P_ME_NC_1 F_FR_NA_1 SG NA 1 5 1 15 1 5 1 F AF 1 lt 127 gt F SC NB 1 Type identification 1112 P_ME_NB_1 lt 126 gt F TA 1 Blank or X only lt 113 gt lt 120 gt lt 121 gt lt 122 gt lt 123 gt lt 124 gt lt 125 gt MITSUBISHI ELECTRIC B 12 IEC 60870 5 101 104 Device Profile Basic application functions B 6 Basic application functions Station initialization station specific parameter mark Xif function is used Remote initialization Cyclic data transmission station specific parameter mark X if function is only used in the standard direction Rif only used in the reverse direction and B if used in both directions Cyclic data transmission Read procedure station specific parameter mark X if function is only used in the standard direction R if only used in the reverse direction and B if used in both directions X Read procedure Spontaneous transmission station specific parameter mark X if functio
2. a Tab 7 17 Ethernet address BFM field CAUTION IPve is not yet fully supported and cannot be used as communication interface for applications Web User Interface Q L PLC connectivity VPN tunnelling etc 7 10 aa MITSUBISHI ELECTRIC Functions and Buffer Memory 7 3 3 Assignment of buffer memory Protocol data BFM area The protocol data BFM area is used to map the data to the network communication protocol The pro tocol data is divided into two parts 6 Input data is data which is transferred from the PLC to the remote master The following data groups are available in the input protocol data Data group Data type PLC permission Remote master permission Description Binary Input WORD 16 in single WORD R W R Data representing physical digital inputs or program flags Double Binary Input WORD grouped as 2 BOOLs 8 in single WORD Data representing physical digital inputs used by the same device representing 4 states ON OFF and two intermediate States 16 bit Counters INT Data representing 16 bit counters 32 bit Counters DINT Data representing 32 bit counters 16 bit Analog Inputs INT Data representing 16 bit physical analog inputs or internal values 32 bit Analog Inputs DINT Data representing 32 bit physical analog inputs or internal values
3. 6 1 62 User functionalit tesis 6 2 6 2 1 Normal operation at first povver on 6 2 7 Functions and Buffer Memory 7 1 Data storage and TOW adam ama sad ad NDE 7 1 7 2 Supported basic process data typeS 7 1 7 3 Assignment of buffer memory 7 2 7 3 1 DF USC Ole 777 7 2 7 3 2 ME RTU configuration and statuses BFM area 7 3 7 3 3 PROCOC Ol Gata PL oos 7 11 7 3 4 Mapping of the protocol data into the BFM 7 12 7 3 5 Default and maximum data configuration of BFM 7 14 7 3 6 Ber OU eaaa Ea E EE 00 00 7 14 27 lm TTOHIL ONL rse rA damarda barda rd 7 19 7 4 1 ME RTU time synchronization 7 20 7 4 2 Writing time directly to ME RTU BFM with PLC 7 20 7 5 Power down and data retention 7 21 7 6 Windows command line configuration upload download 7 23 8 PLC Data Exchange 8 1 a R Ra ala yarada sd a B r a alar da ay dar 8 1 8 1 1 Raw programing examples 8 1 8 2 L QnUDE series PLC da
4. address oa 20992 AOO 16 bit RO INT 20993 AO1 16 bit RO INT 20994 2 16 bit RO INT RO INT 21503 A0511 16 bit RO INT Tab 7 31 16 bit Analog Outputs BFM mapping BFM PLC Data address deo perm type 22272 DAOO 32 bit RO DINT 22274 DAO1 32 bit RO DINT RO DINT 22782 DAO255 32 bit RO DINT 22783 Tab 7 32 32 bit Analog Outputs BFM mapping BFM PLC Data address dec perm type 23424 RAOO float RO REAL 23426 RAO1 float RO REAL RO REAL 23934 RAO255 float RO REAL 23935 Tab 7 33 Short Floating Point Analog Outputs BFM mapping MITSUBISHI ELECTRIC Functions and Buffer Memory Time synchronization 7 4 Time synchronization The ME RTU has to be time synchronized every time when it turns on and during the operation ME RTU can perform synchronization with any of the following sources PLC server 6 Control station The ME RTU Clock time directly affects the following functionalities Telemetry protocol event data VPN connectivity Telemetry protocols need valid clock in order to generate event Clock is considered valid when clock and date are equal or above 15 January 2013 0 00 00 The VPN connectivity needs valid clock in order to establish VPN connection If SNTP server is selected as time synchronization source user must provide access to SNTP server by setting the cor
5. b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi bo Data address REM CER RES ONL CHA REM CER RES ONL dec perm type 1536 1 flags BIO flags RO WORD 1537 BI3 flags 12 flags RO WORD 1543 115 flags 114 flags RO WORD 1544 117 flags 116 flags R W WORD 1545 BI19 flags 118 fags R W WORD 5631 18191 flags 18190 flags R W WORD Tab 9 4 DNP3 Binary Inputs BFM flags signals structure NOTES All empty grayed flags should always be set to by PLC program The ONLINE flags ONL should be set to 1 by PLC program The ONL flag is set automatically to value 1 when data values are written Value is automatically set to 0 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC Because 16 Bls are group in WORD of 16 bits the ONLINE flags are set for all those 16 BIs which are mapped to the same WORD 9 4 aa MITSUBISHI ELECTRIC DNP3 Functionality DNP3 BFM mapping 9 4 2 Double binary inputs Double Binary inputs are mapped into following variations of Object group 3 6 Variation 1 Double Binary Input single bit in this variation the value of the double digital input is mapped which is located in the double binary input BFM section 6 Variation 2 Binary Input with flags in this variation the value of the double binary input is mapped which is located in the double binary input BFM section and the flags which is located
6. Type identification lt 1 gt lt 2 gt 3 lt 4 gt lt 5 gt lt 6 gt lt gt lt 8 gt lt 9 gt lt 10 gt lt 11 gt lt 12 gt lt 13 gt lt 14 gt lt 15 gt lt 16 gt lt 17 gt lt 18 gt lt 19 gt lt 20 gt lt 21 gt lt 30 gt MITSUBISHI ELECTRIC B 10 IEC 60870 5 101 104 Device Profile Application layer Type identification Cause of transmission u 3 2 3 v A K 1 g 2 x 9 0 o 239 elwul el gy 2 250 3 9 o o o 5 2 q o O amp amp a Yi c d 9 E 2 8 e iz 5508 ta om hn 2090 alajg 5 8 5 2 N x 3s q 2 y y gt 2 o E 33 Qol ua in 5 5 o 5 e m 5 g q iv _ os Ss 6 O z 9 Zi olojo S n le Vu 4239029760 md mxmuc 8 rc n s iig O Ee Bi ii Se ne is is 5 5s 31 8 8B 0220 c c s 9811 o o o S SE wese gigg sl EE S EL cili TU 5 258 5 ols 22 oe e aE 9 nk de QU 9 0 UU lola tg Q 2 N 5 5 20 37 1 2 3 4 5 6 7 8 9 10 11112 13 to to 44 45 46 47 36 41 lt 31 gt 1 X X X X lt 32 gt M_ST_TB_1 lt 33 gt M BOTB1 X X lt 34 gt M_ME_TD_1 lt 35 gt M_ME_TE_1 X X lt 36 gt M_ME_TF_1 X X lt 37 gt M_IT_TB_1 X X lt 38 gt 1 lt 39 gt 1
7. NINT SB BL 7 dec perm yp 1536 BI1 flags BIO flags RO WORD 1537 BI3 flags BI2 flags RO WORD 1543 115 flags 114 flags RO WORD 1544 117 flags 116 flags R W WORD 1545 BI19 flags 118 fags R W WORD 5631 BI8191 flags 18190 flags R W WORD Tab 10 4 IEC 60870 5 Single point information Quality Descriptor BFM mapping 10 4 aa MITSUBISHI ELECTRIC IEC 60870 5 101 104 Functionality IEC 60870 5 101 104 flags BFM mapping NOTES All empty grayed flags should always be set to by PLC program The INVALID flags IV should be set to 0 by PLC program The IV flag is set automatically to value 0 when data values is written Value is automatically set to 1 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC Because 16 BIs are group in WORD of 16 bits the INVALID flags are reset for all those 16 BIs which are mapped to the same WORD when PLC first writes value to this WORD 10 4 2 Double binary inputs Double Binary inputs are mapped as monitored double point information The Quality Descriptors are mapped to the Double Binary Inputs flags BFM section Status Short form Value Description 1 blocked This means that the value of the point is as it was prior to BLOCKED BL being blocked Blocking prevents updating ofthe value of 0 normal the point 1 substituted This is where a value has been substituted or forced by SUBSTITUDED man
8. 015 CRO LOC REM CER RES ONL dec perm type 8704 BC1 flag BCO flag R W WORD 8705 BC3 flag BC2 flag R W WORD 8706 BC5 flag BC4 flag R W WORD 8959 BC511 flag BC510 flag R W WORD Tab 9 8 DNP3 16 bit Counter flags b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b3 b2 b1 bO 7 PLC Data address DIS CRO REM CER RES ONL 015 CRO LOC REM CER RES ONL dec perm type 9472 DBC1 flag DBCO flag R W WORD 9473 DBC3 flag DBC2 flag R W WORD 9474 DBC5 flag DBC4 flag R W WORD 9599 DBC255 flag DBC254 flag R W WORD Tab 9 9 DNP3 32 bit Counter flags 9 6 a MITSUBISHI ELECTRIC DNP3 Functionality DNP3 BFM mapping NOTES All empty grayed flags should always be set to by PLC program The ONLINE flags ONL should be set to 1 by PLC program The ONL flag is set automatically to value 1 when data values is written Value is automatically set to 0 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC 9 4 4 Analog inputs Analog inputs are mapped into following variations of Object group 30 6 Variation 1 32 bit analog input with flag in this variation the values of the 32 bit analog inputs are mapped which are located in the 32 bit analog inputs BFM section and the appropriate flag bits which are located in the 32 bit analog input flag BFM section 6 Variation 2 16 bit analog input with flag in this variation the values of the 16 bit analog inputs are mapped which are located
9. BFM dec 0 ME RTU configuration and statuses 1023 1024 Protocol data 31743 Fig 7 2 BFM user area MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory 7 3 2 ME RTU configuration and statuses BFM area The ME RTU Configuration and statuses area is used to shovv module depending statuses and con trols settings and some diagnostic information This area is not intended to provide an interface to change the module settings for this purpose the Web interface is provided BFM address Description Initial value PLC permission Decimal 0 Module Status 2 R 1 Mode Status 0 R 2 LED Status 3 R 3 DIP Switch Statuses 0 R 4 Digital Input values 0 R 5 Digital Output values 0 R 6 Reserved 0 R 7 PLC RTC Year 0 to 99 lower two digits or 2000 to 2099 0 R W 8 PLC RTC Month 1 to 12 0 R W 9 PLC RTC Day 1 to 31 0 R W 10 PLC RTC Hour 0 to 23 0 R W 11 PLC RTC Minute 0 to 59 0 R W 12 PLC RTC Second 0 to 59 0 R W 13 PLC RTC Day of week 0 Sunday to 6 Saturday 0 R W 14 RTU RTC Year 0 to 99 lower two digits or 2000 to 2099 1970 R 15 RTU RTC Month 1 to 12 1 R 16 RTU RTC Day 1 to 31 1 R 17 RTU RTC Hour 0 to 23 1 R 18 RTU RTC Minute 0 to 59 1 R 19 RTU RTC Second 0 to 59 1 R 20 RTU RTC Day of vveek 0 Sunday to 6 Saturday 4 R 21 Reserved
10. IV NT SB BL OV IV NT 58 BL OV 5 Data dec perm type 10880 DAI1 flags DAIO flags R W WORD 10881 DAI3 flags DAI2 flags R W WORD 10882 DAl5 flags DAIA4 flags R W WORD R W WORD 11007 DAI255 flags DAI254 flags R W WORD Tab 10 12 IEC 60870 5 Bitstring of 32 bit Quality Descriptors BFM mapping NOTES All empty grayed flags should always be set to by PLC program The INVALID flags IV should be set to 0 by PLC program The IV flag is set automatically to value 0 when data values is written Value is automatically set to 1 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC ME RTU Remote Terminal Unit 10 7 Device profile IEC 60870 5 101 104 Functionality 10 4 5 Binary outputs Binary outputs are mapped as single command The value is mapped to the binary output BFM sec tion from where the PLC can read the value and set the physical output 10 4 6 Analog outputs 16 bit Analog Outputs are mapped as set point command scaled value The value is mapped to the 16 bit Analog Outputs BFM section from where the PLC can read the value and set the physical output 32 bit Analog Outputs are mapped as 32 Bitstring The value is mapped to the 32 bit Analog Outputs BFM section from where the PLC can read the value and set the physical output Short Floating Analog Outputs are mapped as set point command short floating point value The
11. L QnUDE PLC Socket TCP communication function block outputs MITSUBISHI ELECTRIC PLC Data Exchange Q series before SN11012 PLC data exchange 8 3 8 3 1 Q series before SN11012 PLC data exchange The Q series PLCs before SN11012 use fixed buffer communication interface to exchange data with the ME RTU The Q series PLCs after SN11012 can use the same interface to exchange data with the ME RTU as the L series socket communication If a Q series PLC before SN11012 is used then the Q system must have an Ethernet communication module QJ71E71 For the Fixed buffer communication interface modified function blocks for IP TCP and IP UDP com munication from the original Mitsubishi Electric library are used Function blocks perform four differ ent operations Send 16 bit WORD data Request request 16 bit WORD data Send 32 bit DWORD data Request request 32 bit DWORD data Next to original IP TCP and IP UDP communication function block inputs and outputs modified func tion blocks have additional input and outputs used for communication with ME RTU Up to 1 kB 512 WORDs for 16 bit data or 256 Double WORDs for 32 bit data of data can be transferred in either di rection The access to data in BFM is limited to single data type or flags per operation E g if user wants to set BIs with flags only the number on 815 setin database settings could be written see Figure 11 20 For more information on Ethernet com
12. ReceiveTimeout TIME ME RTU response time out timer Heartbeat Tab 8 5 Output variables TIME Heartbeat send period max 60 seconds Q PLC before 5 11012 Fixed Buffer UDP communication function block inputs Signal Type Description InitComplete BIT Signals the initialization procedure completion OpenComplete BIT Signals the connection open status ReceiveComplete BIT Signals when a receive operation is completed SendComplete BIT Signals when a send operation is completed WORD Unsigned ReceivedData Bit String 16 bit Head address of the received data storage area Received ID WORD Signed Received data ID Must equal Send ID Send ID WORD Signed ID of request Increments with every sent request for data Signals the cable disconnection betvveen the Ethernet module and the LinkError B T Ethernet hub OpenError B T Signals if a connection open error has occurred ReceiveError B T Signals if a receive error has occurred SendError B T Signals if a send error has occurred 2 Signals if Receive Timeoutexpired before receiving data This can be interpreted ReceiveTimeoutError B T 25 as lag in network slow response from ME RTU or loss of communication link InitErrorcode 777 tUnsignedl Stored the error code in case of a module initialization error Bit String 116 bitl WORD Unsigned OpenErrorCode Bit String 16 bit Stored the error code in case of a con
13. Ethernet Device name used for asynchronous serial communication USB host Baud rate on serial Selectable from Baudrate communication 300 to 1152000 113209 Number of data bits Number of data bits 7 or8 8 Device name String device name dev ttyUSB10 Serial Connection Settings Number of stop bits Number of stop bits 1or2 1 if Serial protocol communication path is selected 0 None Parity Parity 1 Even 2 Odd Type of flovv control Flovv control used vvith the connected device 0 None 1 Hardvvare Initial string sent to connected device at String start up Typically No blanks allovvedl string of AT commands Initial Modem String Tab 11 2 Parameters for General setting 1 ME RTU Remote Terminal Unit 11 19 Settings parameters Settings Subsection Setting name Description Settings and Diagnostics Details Default value Time synchronization Time Synchronization Type Determines the source from vvhere the time is synchronized Control station PLC or SNTP 0 Local PLC 1 5 2 Control station 0 PLC SNTP Server Address IP address or domain name of the SNTP Server String or IP address 0 pool ntp org Time Zone Time zone used to set local time for SNTP synchronization Selectable GMT 1 Ljubljana PLC RTC period Period of PLC RTC synchronization in minutes If set to
14. Ethernet IPv4 address BFM addresses from 51 to 541 On these BFM locations the current Ethernet interface IPv4 address is mapped If DHCP is used and the module hasn t acquired a valid address yet or the address is not valid then this fields have value 0 0 0 0 BFM address Name 51 Ethernet IP address octet 1 52 Ethernet IP address octet 2 Description First octet of the actual IP address Second octet of the actual IP address Third octet of the actual IP address 53 Ethernet IP address octet 3 54 Ethernet IP address octet 4 Fourth octet of the actual IP address Tab 7 16 Ethernet IPv4 address BFM field Ethernet IPv6 address BFM address from 55 to 62 On these BFM locations the current Ethernet interface IPv6 address is mapped BFM address Name 55 Ethernet IPv6 address 56 Ethernet IPv6 address 57 Ethernet IPv6 address 58 Ethernet IPv6 address 59 Ethernet IPv6 address 60 Ethernet IPv6 address 61 Ethernet IPv6 address 62 Ethernet IPv6 address Description Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 of the 128 bit Ethernet IPv6 address Word 1 Word 2 Word 3 Word 4 Word 5 Word 6 Word 7 Word 8
15. Transmission speed control direction Unbalanced interchange Unbalanced interchange Balanced interchange Circuit V 24 V 28 Circuit V 24 V 28 Circuit X 24 X 27 Standard Recommended if gt 1 200 bit s 100 bit s 2 400 bit s 2 400 bit s 56 000 bit s 200 bit s 4 800 bit s 4 800 bit s m 64 000 bit s 300 bit M 9600bit s 9 600 bit s 600 bit s 19 200 bit s 1 200 bit s 38 400 bit s Transmission speed monitor direction Unbalanced interchange Unbalanced interchange Balanced interchange Circuit V 24 V 28 Circuit V 24 V 28 Circuit X 24 X 27 Standard Recommended if gt 1 200 bit s 100 bit s ii 2 400 bit s 2 400 bit s 56 000 bit s 200 bit s iH 4 800 bit s 4 800 bit s m 64 000 bit s 300 bit s 9 600 bit s 9 600 bit s 600 bit s 19 200 bit s 1 200 bit s 38 400 bit s ME RTU Remote Terminal Unit B 3 Link layer B 4 NOTE IEC 60870 5 101 104 Device Profile Link layer Network specific parameter all options that are used are to be marked X Specify the maximum frame length If a non standard assignment of class 2 messages is implemented for unbalanced transmis sion indicate the Type ID and COT of all messages assigned to class 2 Frame format FT 1 2 single character 1 and the fixed time out interval are used exclusively in this com panion standard Link transmission procedure Address field of the link transmission m not present balanced transmission only m Unbalanced transmiss
16. nternet Options E Location and Other Sensors Network and Sharing Center izi Personalization Proqram Download Monitor b zi Recovery RemoteApp and Desktop Connections g Speech Recognition 1 Taskbar and Start Menu BA User Accounts d Windows Firewall image034 Fig 11 1 ME RTU Remote Terminal Unit Control panel 11 3 Configuring ME RTU via integrated vveb server Settings and Diagnostics 11 4 In opening window Change adapter settings is selected CS 12 All Control Panel Items Network and Sharing Center z Search Control Panel File Edit Vievv Tools Help Control Panel Home View your basic network information and set up connections Manage wireless networks A RIB Change adapter setting Internet Change advanced sharing This computer settings See full map View your active networks Connect to a network You are currently not connected to any networks Change your networking settings ha Set up a new connection or network Set up a wireless broadband dial up ad hoc or VPN connection or set up a router or access point Connect to a network Connect or reconnect to a wireless wired dial up or VPN network connection Choose homegroup and sharing options Access files and printers located on other network computers or change sharing settings Troubleshoot problems Diagnose and repair network problems or get troub
17. Fax 49 0 2102 486 1120 Mitsubishi Electric Europe B V Radlick 751 113e Avenir Business Park CZ 158 00 Praha 5 Phone 420 251 551 470 Fax 420 251 551 471 Mitsubishi Electric Europe B V 25 Boulevard des Bouvets F 92741 Nanterre Cedex Phone 33 0 1 55 68 55 68 Fax 33 0 1 55 68 57 57 Mitsubishi Electric Europe B V Westgate Business Park Ballymount IRL Dublin 24 Phone 353 0 1 4198800 Fax 353 0 1 4198890 Mitsubishi Electric Europe B V Viale Colleoni 7 Palazzo Sirio 1 20864 Agrate Brianza Phone 39 039 60 53 1 Fax 39 039 60 53 312 Mitsubishi Electric Europe B V Nijverheidsweg 23a NL 3641RP Mijdrecht Phone 31 0 297250350 Mitsubishi Electric Europe B V ul Krakowska 50 PL 32 083 Balice Phone 48 0 12 347 65 00 Fax 48 0 12 347 65 01 Mitsubishi Electric Europe B V 52 bld 1 Kosmodamianskaya emb RU 115054 Moscow Phone 7 495 721 2070 Fax 7 495 721 2071 Mitsubishi Electric Europe B V Carretera de Rubi 76 80 Apdo 420 E 08190 Sant Cugat del Vall s Barcelona Phone 34 0 93 5653131 Fax 34 0 93 5891579 Mitsubishi Electric Europe B V Scandinavia Fjelievagen 8 SE 22736 Lund Phone 46 0 8 625 10 00 Fax 46 0 46 39 70 18 Mitsubishi Electric Turkey Elektrik r nleri A TURKEY Fabrika Otomasyonu Merkezi Serifali Mahallesi Nutuk Sokak No 5 TR 34775 Umraniye ISTANBUL Phone 90 0 216 526 39 90 Fax 90 0 216
18. IfQ L series PLC is selected as the PLC type see figure 11 9 then the following operation applies When Heartbeat timer runs out the INVALID flags are set After connection is established and value is written to data point the INVALID status must be written by the PLC for this data point 10 4 1 Binary inputs Binary inputs are mapped as monitored single point information The Quality Descriptors are mapped to the Binary Inputs flags BFM section Status Short form Value Description 1 blocked This means that the value of the point is as it was prior to BLOCKED BL being blocked Blocking prevents updating of the value of 0 normal the point 1 substituted This is where a value has been substituted or forced by SUBSTITUDED manual entry or otherwise It means that the value is not 0 normal derived from the normal measurement 1 not topical i NOT TOPICAL p This means that the value vvas not updated successfully at 0 normal last time it vvas due to be updated 1 invalid This indicates that the value cannot be used because it INVALID may be incorrect due to a fault or other abnormal 0 valid condition Tab 10 3 IEC 60870 5 Single point information supported Quality Descriptors b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi bO BFM address IV NT SB eL
19. LOCAL FORCED 1 local 0 normal The state of the binary object has been forced to its current state at the device reporting OVER RANGE 1 rollover 0 normal The digitized signal or calculation is greater than the type specified REFERENCE CHECK Tab 9 10 ME RTU Remote Terminal Unit DNP3 Analog input flags 1 reference ch 0 normal The reference signal used to digitize the signal is not stable and the resulting digitized value may not be correct DNP3 BFM mapping b15 b14 b13 b12 b11 b10 b9 b7 b b5 b4 b3 b2 b1 bo 7 PLC Dat address REC OVR REM RES ONL REC OVR LOC REM CER RES ONL dec perm type 10112 flag AlO flag R W WORD 10113 Al3 flag Al2 flag R W WORD 10114 Al5 flag Al4 flag R W WORD 10367 AI511 flag AI510 flag R W WORD Tab 9 11 DNP3 16 bit Analog Inputs flags BFM mapping b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi bo PLC Dat address REC OVR REM RES ONL REC OVR REM CER RES ONL 5 dec perm type 10880 DAI1 flag DAIO flag R W WORD 10881 DAI3 flag DAI2 flag R W WORD 10882 DAIS flag 14 flag R W WORD 11007 DAI255 flag DAI254 flag R W WORD Tab 9 12 DNP3 32 bit Analog Inputs flags BFM mapping b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 b1 bo 7 PLC Data address REC OVR REM RES ONL REC OVR LOC REM CER RES ONL dec perm type 11520 RAI
20. imited qty unsol resp 32 Bit Counter 22 5 Change Event 1 read ae all 7 17 28 index with Hine 08 limited qty unsol resp 16 Bit Counter 22 6 ChangeEvent 1 tno range oral 129 17 28 index with Time imited qty unsol resp Counter Change 06 no range or all 22 Event Any Variation Hu 07 08 limited qty 00 01 start stop 30 0 Analog Input 1 read 06 no range or all default Any Variation 22 assign class 07 08 limited qty 17 27 28 index 00 01 start stop 32 Bit Analog 06 no range or all 00 01 start stop 3 Input 2 07 08 limited qty 122 response 17 28 index 17 27 28 index MITSUBISHI ELECTRIC DNP V3 0 Device Profile DNP V3 0 implementation table OBJECT REQUEST RESPONSE Library will parse Library will respond with Variation Description Function Codes Qualifier Function Qualifier ber Number dec Codes hex Codes dec Codes hex 00 01 start stop 16 Bit Analog 06 no range or all 00 01 start stop 30 Input 07 08 limited qty 122E PONSE 17 28 index 17 27 28 index 00 01 start stop 32 Bit Analog 06 no range or all 00 01 start stop 20 Input without Flag 1 read 07 08 limited qty 129 response 17 28 index 17 27 28 index 00 01 start stop 16 Bit Analog 06 no range or all 00 01 start stop 30 7 Input without Fla
21. 11 22 Web User Interface DNP3 settings 11 14 aa MITSUBISHI ELECTRIC Settings and Diagnostics 11 3 7 IEC 60870 5 settings Configuring ME RTU via integrated web server In this section IEC 60870 5 protocol is configured Port number ASDU Address Cyclic Period RBE Scan Period Select Timeout Delete Oldest Event Save 2404 5 T T T 0 Enable 9 Disable image054 Fig 11 23 Web User Interface IEC 60870 5 settings 11 3 8 BFM debug In this section Buffered Memory can be monitored Start address and number of data are given in dec imal format BFM Monitoring Start Address Data width Format Show Number of Data 0 100 16 bit 32 bit Decimal Hex image055 Fig 11 24 Web User Interface BFM debug ME RTU Remote Terminal Unit 11 15 Configuring ME RTU via integrated vveb server Settings and Diagnostics 11 3 9 11 16 Mobile In this section GSM parameters needed to establish internet connection via cellular network are in serted Also mobile connection status is available Mobile Network Provider Connection Settings The mobile connection may be active or disabled If SIM card has enabled PIN code then the PIN code is entered and the PIN Check button must be pressed to verify the PIN code Wait few seconds up to 10 seconds for response text before performing any other action or the response text
22. 8 3 Function block for L QnUDE PLC Socket UDP communication ME RTU Remote Terminal Unit 8 3 L QnUDE series PLC data exchange PLC Data Exchange The follovving tables describe inputs and outputs of function block Input variables Signal Type Description ConnectionNo WORD Signed Specify the Socket communication number to be used from 1 to 16 LocalPortNo WORD Signed Local port number from 1 to 4999 or 5010 to 65534 RemotelPAddress DWORD Unsigned Bit String 32 bit ME RTU IP address RemotePortNo Word Signed ME RTU port number refer to General ME RTU settings EnableConnection BIT Signal whether to open or close the Socket communication connection EnableSend BIT Start the data send operation on the rising edge of this signal SendData WORD Unsigned Bit String 16 bit Specify the head address of the memory area storing the send data FromTo BIT Select operation type FALSE Request data TRUE Send data Type 16b32b B T Data type FALSE 16 bit data NoOfData unit is WORD TRUE 32 bit data NoOfData unit is DVVORD NoOfData WORD Signed Number of WORDs to send max value 512 for 16 bit data or 256 for 32 bit data BFM_addr WORD Unsigned ME RTU Buffered Memory head address Flags WORD Signed Set data flags 16 abcd If 16 ab 16 00 don t set flags If 16 ab 16 01 s
23. Configuration files 1 Find the sample configuration files by clicking Windows start menu gt All Programs gt OpenVPN gt OpenVPN Sample Configuration Files Server configuration file Open server ovpn file 2 Find the following lines Ca Ca crt cert server crt key server key and 3 Edit them as follows do not omit double backslashes ca C Program Files OpenVPN config ca crt cert C Program Files OpenVPN config server crt key C Program Files OpenVPN config server key and dh C Program Files OpenVPN config dh1024 pem 4 Save the file as C Program Files OpenVPN easy rsa server ovpn 5 OpenVPN client will authenticate using username and password therefore user has to supply script that will check if username exists and password is correct LDPA authentication can also be used The script for authentication has to be placed in C Program Files OpenVPN config folder In following configuration the script is called CheckUserCredentialsviaFile exe The script should accept file location name as parameter The script must then open the file and read the user name in first line and password from the second line These should then be compared to username s and password s allowed to connect If they credentials pass the script should return 0 otherwise 1 is returned MITSUBISHI ELECTRIC IT Functionality 6 Sample server configuration file H ilihliliihiH
24. Database elements In this section number of each data type is set CAUTION 6 Take caution at setting number of binary inputs The first 16 binary inputs are reserved for ME RTU digital inputs DIO and DI1 which are mapped to first two binary inputs BIO and BI1 Set number of binary inputs at least 32 or higher to possess PLC controlled binary inputs Take caution at setting number of binary outputs He first two binary outputs at BFM address 16384 BOO and BO1 are reserved for RTU digital outputs DOO and DO1 to which they are mapped Number of Binary Inputs 32 Number of Double Binary Inputs 32 Number of 16 bit Binary Counters 4 Number of 32 bit Binary Counters 4 Number of 16 bit Analog Inputs 4 Number of 32 bit Analog Inputs 4 Number of Short Floating Point Analog Inputs 4 Number of Binary Outputs 4 Number of 16 bit Analog Outputs 4 Number of 32 bit Analog Outputs 4 Number of Short Floating Point Analog Outputs 4 image051 Fig 11 20 Web User Interface Database elements ME RTU Remote Terminal Unit 11 13 Configuring ME RTU via integrated vveb server Settings and Diagnostics Data Events settings Data s events can be enabled on disabled in this section If events are enabled size of events buffer must be defined The user should enter maximum value of 65000 If this number is exceeded the num ber is lowered to maximum value Th
25. Fax 356 0 21 697 817 INTEHSIS SRL bld Traian 23 1 MD 2060 Kishinev Phone 373 0 22 66 4242 Fax 373 0 22 66 4280 HIFLEX AUTOM B V Wolweverstraat 22 NL 2984 CD Ridderkerk Phone 31 0 180 46 60 04 Fax 31 0 180 4423 55 KONING amp HARTMAN B V Energieweg 1 NL 2627 AP Delft Phone 31 0 15 260 99 06 Fax 31 0 15 261 9194 Beijer Electronics AS Postboks 487 N0 3002 Drammen Phone 47 0 32 24 3000 Fax 47 0 32 8485 77 Fonseca S A R Jo o Francisco do Casal 87 89 PT 3801 997 Aveiro Esgueira Phone 351 0 234 303 900 Fax 351 0 234 303 910 SIRIUS TRADING amp SERVICES SRL Aleea Lacul Morii Nr 3 R0 060841 Bucuresti Sector 6 Phone 40 0 21 430 40 06 Fax 40 0 21 430 40 02 INEA SR d 0 0 Ul Karadjordjeva 12 217 SER 11300 Smederevo Phone 386 026 4615401 SIMAP SK Z padn Slovensko J na Derku 1671 SK 911 01 Tren n Phone 421 0 32 743 04 72 Fax 421 0 32 743 75 20 INEA RBT d o o Stegne 11 SI 1000 Ljubljana Phone 386 0 1 513 8116 Fax 386 0 1 513 8170 Beijer Electronics Automation AB Box 426 SE 20124 Malmo Phone 46 0 40 35 86 00 Fax 46 0 40 93 23 01 OMNI RAY AG Im Schorli5 CH 8600 Diibendorf Phone 41 0 44 802 28 80 Fax 41 0 44 802 28 28 000 CSC AUTOMATION 4 B M Raskovoyi St UA 02660 Kiev Phone 380 0 44 494 33 44 Fax 380 0 44 494 33 66 LITHUANIA MALTA MOLDOVA
26. ME RTU Remote Terminal Unit 12 VPN services Procedure on server Open server ovpn with text editor located in C Program Files OpenVPN config and add the following lines refer to Figure 12 3 for the meaning of IP addresses client config dir ccd route 192 168 112 0 255 255 240 0 client to client push route 192 168 112 0 255 255 240 0 2 Create folder named ccd in C Program Files OpenVPN config and create file named test3 no extension type Open test3 file with text editor and add the following line iroute 192 168 112 0 255 255 240 0 3 Press Windows Key R and type cmd exe Enter the following command in cmd route add 192 168 112 0 mask 255 255 240 0 172 32 0 2 Procedure on Device PC Q Add the ME RTU s IP address to Device as gateway address On the PC press Windows Key R and a type cmd exe Enter the following command route add 172 32 0 0 mask 255 255 255 0 192 168 112 68 Testing connection from the VPN server side Q On VPN server open the cmd by pressing Windows Key R and typing cmd exe Test connection by pinging the remote Local to ME RTU PC by typing the following command into cmd ping 192 168 112 139 N SNMP 12 2 12 2 1 12 8 IT Functionality SNMP SNMP statuses 6 ME RTU statuses Communication statistics Online time Data volumes Firmware version PLC statuses PLC status Stop Running Error
27. ME RTU Remote Terminal Unit 9 9 DNP3 BFM mapping DNP3 Functionality 9 4 6 Analog outputs Current values of Analog outputs are mapped into following variations of Object group 40 Variation 1 32 bit analog output flag in this variation the current values of the 32 bit analo g p g g inputs are mapped which are located in the 32 bit analog outputs flags BFM section Variation 2 16 bit analog output flag in this variation the current values of the 16 bit analog inputs are mapped which are located in the 16 bit analog outputs flags BFM section 6 Variation 3 short float analog output flag in this variation the current values of the short float analog outputs are mapped which are located in the short float analog outputs flags BFM section Analog outputs are mapped into following variations of Object group 41 6 Variation 1 32 bit analog output block in this variation the values of this variation are mapped to the 32 bit analog outputs BFM section 6 Variation 2 16 bit analog output block in this variation the values of this variation are mapped to the 16 bit analog outputs BFM section 6 Variation 3 short float analog output block in this variation the values of this variation are mapped to the short float analog outputs BFM section Flag Short form Value Description ONLINE ONL 1 online Ifthe point is OFFLINE the returned st
28. hex Class 1 Data 1 read 06 no range or all 07 08 limited qty 20 enbl unsol 21 dab unsol 22 assign class 06 no range or all Class 2 Data 1 read 06 no range or all 07 08 limited qty 20 enbl unsol 21 dab unsol 22 assign class 06 no range or all Class 3 Data 1 read 06 no range or all 07 08 limited qty 20 enbl unsol 21 dab unsol 22 assign class 06 no range or all Internal Indications 1 read 129 response 00 01 start stop 2 write 00 start stop index 4 or 7 Data Set Present Value 1 read 00 01 start stop 06 no range or all 07 08 limited qty 17 27 28 index 2 write 5b free format No Object function code only 13 cold restart No Object function code only 14 warm restart No Object function code only 23 delay meas No Object function code only ME RTU Remote Terminal Unit 24 record current time A 1 DNP V3 0 point list DNP V3 0 Device Profile A 2 A 1 DNP V3 0 pointlist The point list depends on the user implementation In example is used a sample point list for binary inputs Binary Input Points Static Steady State Object Number 1 Change Event Object Number 2 Static Variation reported when variation 0 requested 1 Binary Input 2 without status Change Event Variatio
29. lt 40 gt 1 lt 45 gt C 5 1 XX XXX X XIX XX lt 46 gt 1 lt 47 gt C 1 lt 48 gt 5 1 499 C 5 1 XX XXX X XIX XX lt 50 gt C_SE_NC_1 XX XXX X XIX XX lt 51 gt C_BO_NA_1 x x a x x x xix lt 58 gt SC_TA_1 lt 59 gt C_DC_TA_1 lt 60 gt C_RC_TA_1 lt 61 gt 5 1 lt 62 gt 5 1 lt 63 gt 5 1 lt 64 gt C BO TA 1 TES lt 70 gt M_EI_NA_1 X 1000 C_IC_NA_1 X X XX X 1012 C CI_NA_1 X X X 1022 C_RD_NA_1 c1038 5 1 lt 104 gt 5 1 lt 105 gt 1 lt 106 gt 1 1070 5 1 lt 110 gt P 1 Blank or X only ME RTU Remote Terminal Unit B 11 IEC 60870 5 101 104 Device Profile Application layer ss sppe 3 fqo uonpuso yul uMouyun nusv sseippe uoululo uMouyun UOISSIWISUeJ JO sne umouyun 44 45 46 47 uone ounu pi d4 UMOUyUN ysanba lt u gt dnolb Aq s nb to ca quunus dnoib Aq to Jajsuesl 13 2 pw je gt 0 e Aq p sne o ul uIn 1 1 pw zow e Aq p sne oju uonepuluL uonpAn e
30. 0 R 22 Busy signal 0 R 23 BFM Buffer free space 4000 R 24 Q L PLC heartbeat 0 R VV 25 Reserved 0 R 26 Reserved 0 R 27 Reserved 0 R 28 Reserved 0 R 29 Error status 0 R 30 Model code K1060 R 31 Reserved 0 R 32 Communication Status and Control 0 R 33 DNP3 Error Code 0 R 34 IEC 60870 5 101 Error Code 0 R 35 IEC 60870 5 104 Error Code 0 R 36 Reserved 0 R 37 Reserved 0 R Tab 7 2 ME RTU configuration and statuses mapping 1 ME RTU Remote Terminal Unit 7 3 Assignment of buffer memory Functions and Buffer Memory BFM address Description Initial value PLC permission Decimal 38 Reserved 39 Module version number 40 Number of Binary Inputs 41 Number of Double Binary Inputs 42 Number of 16 bit Counters 43 Number of 32 bit Counters 44 Number of 16 bit Analog Inputs 45 Number of 32 bit Analog Inputs 46 Number of Short float Analog Inputs 47 Number of Binary Output 48 Number of 16 bit Analog Outputs 49 Number of 32 bit Analog Outputs 50 Number of Short float Analog Outputs 51 Ethernet IPv4 address 1 octet 52 Ethernet IPv4 address 2 octet 53 Ethernet IPv4 address 3 octet 54 Ethernet IPv4 address 4 octet 55 Ethernet IPv6 address Word 1 56 Ethernet IPv6 address Word 2 57 Ethernet IPv6 address Word 3 4 4 4 4 4 4 4 4 4 9 1 N O co 58 Ethernet IPv6 address Word 4 59 Ethernet IPv6
31. 0 then it is disabled 0 min 65536 min RTU configuration Upload configuration Upload XML configuration file and read RTU configuration from it XML File Back up configuration Backup configuration to XML file and store it to local hard drive XML File Restore to defaults All ME RTU setting will be set to default values Data Retention Settings Tab 11 2 CAUTION Enable Data Retention Enable or disable data retention functionality Enable Disable Enable Data Retention write interval Time interval in minutes between data retention writes to the SD card Parameters for General setting 2 Integer from to 99999 ME RTU XML configuration is designed to store and copy configuration to other ME RTUs Do not change the content of XML file manually Only use XML file generated directly by ME RTU No safety mechanism is provided to ensure the validity of the configuration written in the file MITSUBISHI ELECTRIC Settings and Diagnostics 11 4 2 Settings Subsection Network settings Setting name Description Details Settings parameters Default value General Communication Settings DNS priority Select communication source for DNS resolving 0 Ethernet 1 Mobile 0 Ethernet Gatevvay priority Choose gateway path 0 Ethernet 1 Mobile 0 Ethernet IPv4 Settings Use DHCP Obtain
32. 12 2 Block 5 direct op 7 limited quantity 129 response echo of request 6 dir op Noack 3 select 4 operate 12 3 Pattern Mask 5 direct op 00 01 start stop 129 response echo of request 6 dir op noack 00 01 start stop 1 read 06 no range or all 22 assign class 07 08 limited qty 20 0 Binary Counter 17 27 28 index default Any Variation 7 freeze ee 7 06 no range or all 07 08 limited qty 10 frz cl noack ae 00 01 start stop 32 Bit Binary 20 1 Counter 1 read pene anger Oral 129 response 09 91 77 stop vvith Flag 07 08 limited qty 17 28 index 17 27 28 index 00 01 start stop 16 Bit Binary 20 2 Counter 1 read Oral 129 response 7 stop with Flag 07 08 limited qty 17 28 index 17 27 28 index 32 Bit Binary 00 01 start stop j 06 no range or all 00 01 start stop 20 5 D 1 read 07 08 limited qty 129 response 17 28 index 17 27 28 index 00 01 start stop 16 Bit Binary 06 no ran i ge or all 00 01 start stop 20 6 D 1 read 07 08 limited qty 129 response 17 28 index 17 27 28 index 0 Counter Change 06 no range or all 22 default 07 08 limited qty Variation f qty 32 Bit Counter 22 1 Change Event 1 read 7 OP 17 28 index without Time imited qty unsol resp 16 Bit Counter 22 2 Change Event 1 read 777 17 28 index without Time
33. 188 198 52 39 VPN tun IP 172 32 0 6 Eth IP 192 168 120 5 Netmask 255 255 240 0 Remote control centre IP 192 168 120 6 Netmask 255 255 240 0 GW 192 168 120 5 Fig 12 8 Connectivity via NAT and VPN to under laying ME RTU 12 12 MITSUBISHI ELECTRIC Online Programming Access 13 Online Programming Access The ME RTU enables the GX IEC Developer hereafter known as GID or GX Works 2 to be remotely con nected to the FX3 PLC via network The ME RTU sends the received data on the port 5551 to the PLC and waits for the response and sends the response back transparent mode ME RTU Remote Terminal Unit 13 1 Online Programming Access MITSUBISHI ELECTRIC DNP V3 0 Device Profile A DNP V3 0 Device Profile The follovving table provides a Device Profile Document in the standard format defined in the DNP 3 0 Subset Definitions Document VVhile it is referred to in the DNP 3 0 Subset Definitions as a Doc ument it is in fact a table and only a component of a total interoperability guide The table in com bination with the Implementation Table provided and the Point List Tables provided in should pro vide a complete configuration interoperability guide for communicating with a device DNP V3 0 DEVICE PROFILE DOCUMENT Also see the DNP 3 0 Implementation Table in section A 1 beginning on page 13 4 Vendor Name INEA d o o Device Name ME RTU Highest DNP Level Supported Device Function
34. 8183 8182 8181 8180 8179 8178 8177 8176 Tab 7 25 Binary Output BFM mapping ME RTU Remote Terminal Unit Assignment of buffer memory Functions and Buffer Memory Binary counters Binary counters are values used for counting events in the application The user has to write the actual value of a counter into an appropriate BFM location The mapping of the binary counter values in the BFM area starts at the address 8192 There are two types of counters 16 bit counters located in one BFM location one word and starts at the address 8192 May be controlled by PLC using TO FROM 16 bit instructions 6 32 bit counters located in two BFM locations two words and starts at the address 8960 May be controlled by PLC using DTO DFROM 32 bit instructions After the data values the flags are mapped in the BFM area which starts at address 8704 for 16 bit counters and 9472 for 32 bit counters User writes the flags of the signal into the appropriate flags bits for specific signal Structure of the flags is protocol dependent For DNP3 flags mapping refer to section 9 4 3 Counters Table 9 8 for 16 bit and Table 9 9 for 32 bit counters For IEC 60870 5 flags mapping refer to section 10 4 3 32 bit Counters Table 10 8 for 32 bit counters 16 bit counters are not supported BFM PLC Data m perm type 8192 BCO 16 bit R VV INT 8193 BC
35. All Rights Reserved image039 Fig 11 6 Web User Interface login window To change password first insert the username and password into login form figure 11 6 then press Password change In the password change form figure 11 7 the username is already inserted and cannot be changed Enter the new password twice and press Change password To abort changing password select one of the tags in the menu tab figure 11 8 Change rtuadmin password User Name rtuadmin required Password TETTEIT required Repeat Password required Change password image040 Fig 11 7 Web User Interface change password Web User Interface menu consists of following tags 6 General BFM Debug 6 Network 6 Mobile 6 Database VPN DNP3 6 Logout 6 IEC 60870 5 ME RTU General Network Database DNP3 IEC HOB 70 5 BFM debug Mobile VPN Logout image040 Fig 11 8 Web User Interface menu a e MITSUBISHI ELECTRIC Settings and Diagnostics Configuring ME RTU via integrated vveb server 11 3 3 General tab General tab contains basic ME RTU operational settings Operating mode The operating mode which affects the telemetry protocols DNP3 and IEC 60870 5 One operating modes are available 6 Slave Only In Slave Only mode the available protocols are DNP3 via Ethernet slave 6 DNP3 via Serial slave IEC 60870 5 101 slave IEC 60870 5 104 slave General ME RTU settings Here us
36. Functionality 10 1 IEC 60870 5 101 104 configuration settings 10 1 10 11 IEC 60870 5 101 channel and session configuration 10 1 10 2 IEC 60870 5 101 104 supported data types 10 2 10 3 IEC 60870 5 101 104 information objects addresses and BFM mapping 10 3 10 4 IEC 60870 5 101 104 flags BFM mapping 10 4 107 Diab WM OES b a a m n om m 10 4 10 4 2 Double binary inputs 10 5 1043 Z bitColntets m ul 10 6 104A AMAIA D Pa aa an 10 6 HOA Ta 70 r a ab ei d n 10 8 10 16 Analod 5ov put a E a a a a balaq 10 8 105 DEV CC POE stent a Za Da a eae oa aaa 10 8 11 Settings and Diagnostics TEI Sewing OVEINVICW css s a qab d a aya DAD 11 1 11 2 Parameter setting and setting procedure 11 2 11 3 Configuring ME RTU via integrated web server 11 3 11 31 Computer network adapter configuration for direct access 11 3 11 3 2 Accessing vveb user interface 11 6 MoS aora 140 aaa oa ao le bree eae Shen 11 7 ERSA Netvoriteb 11 10 11 Database tl 11 13 ONP Set
37. LED ON GSM CONN Green Not connected to GSM network Connecting to GSM network Connected to GSM network GPRS STATUS Green Not connected to GPRS network Connecting to GPRS network Connected to GPRS network PROT 0 Green DNP3 is not active DNP3 is active PROT 1 Green IEC 60870 5 101 104 is not active IEC 60870 5 101 104 is active OUT 0 Green Digital output 0 is OFF Digital output 0 is ON OUT 1 Green Digital output 1 is OFF Digital output 1 is ON IN O Green Digital input is OFF Digital input 0 is ON IN 1 Tab 11 11 ME RTU Remote Terminal Unit Green Digital input 1 is OFF Flags of ME RTU connections Digital input 1 is ON 11 25 DIP switch settings Settings and Diagnostics 11 6 11 6 1 11 26 DIP svvitch settings On the ME RTU there are 4 D P svvitches vvhich are used for different cases ON E m H 12 4 image060 Fig 11 29 DIP switches DIP DIP switch Position Description svvitch name number OFF Boot from internal eMMC ON Boot from SD card OFF SD BOOT 1 DFLT 2 ON Restore on factory default settings OFF ON OFF SVV 3 Restore on factory default setup ON from SD card Tab 11 12 DIP switch position Updating firmware from SD card When updating firmware from SD card the eMMC is
38. NETHERLANDS NETHERLANDS NORWAY PORTUGAL ROMANIA SERBIA SLOVAKIA SLOVENIA SWEDEN SWITZERLAND UKRAINE T00 Kazpromavtomatika KAZAKHSTAN UL ZHAMBYLA 28 KAZ 100017 Karaganda Phone 7 7212 50 10 00 Fax 7 7212 501150 MIDDLE EAST REPRESENTATIVE C SYSTEMS Ltd EGYPT 23 Al Saad Al Alee St EG Sarayat Maadi Cairo Phone 20 0 2 235 98 548 Fax 20 0 2 235 96 625 GIRIT CELADON Ltd 12 H aomanut Street IL 42505 Netanya Phone 972 0 9 863 39 80 Fax 972 0 9 885 24 30 ILAN amp GAVISH Ltd 24 Shenkar St Kiryat Ariet IL 49001 Petah Tikva Phone 972 0 3 922 18 24 Fax 972 0 3 924 0761 CEG LIBAN Cebaco Center Block A Autostrade DORA Lebanon Beirut Phone 961 0 1 240 445 Fax 961 0 1 240 193 AFRICAN REPRESENTATIVE ADROIT TECHNOLOGIES SOUTH AFRICA 20 Waterford Office Park 189 Witkoppen Road ZA Fourways Phone 27 0 11 658 8100 Fax 27 0 11 658 8101 ISRAEL ISRAEL LEBANON Mitsubishi Electric Europe B V FA European Business Group Gothaer Stra e 8 D 40880 Ratingen Germany Tel 49 0 2102 4860 Fax 49 0 2102 4861120 info mitsubishi automation com https eu3a mitsubishielectric com
39. Prepare SD Card Save image046 Fig 11 13 Web User Interface Data retention ME RTU Remote Terminal Unit 11 9 Configuring ME RTU via integrated vveb server Settings and Diagnostics 11 3 4 11 10 Netvvork tab Network tab holds network communication settings such as DNS server settings Gateway settings Dynamic DNS DDNS SNMP settings General communication settings In this section it is possible to select the DNS priority which is either Ethernet or Mobile If former is se lected the DNS servers entered in Local Area Network settings have the priority when resolving host name The Mobile connection interface obtains DNS servers IPs when GPRs connection is established The Gateway priority sets the priority communication route which is either via Ethernet or via cellular network Mobile DNS priority Ethernet Gateway priority Ethernet il Save image047 Fig 11 14 Web User Interface General communication settings Local Network settings Here Ethernet communication is configured If DHCP is enabled and supported by your network then IP address is obtained automatically Otherwise IP address Network mask Gateway address and DNS servers must be inserted manually Tip If DHCP is going to be enabled before doing so change the name of device in SNMP Settings to unique name refer to SNMP settings The SNMP client s not supplied SNMP Agent discovery func tionality usually
40. ReceiveComplete B T Signals when a receive operation is completed successfully SendComplete BIT Signals when a send operation is completed successfully ReceivedData WORD Unsigned Bit String 16 bit Head address of the received data storage area LinkError BIT Signals the cable disconnection between the built in Ethernet port of the QnUDE series or L series PLC system and the Ethernet hub OpenError B T Signals if a connection open error has occurred ReceiveError B T Signals if a receive error has occurred SendError B T Signals if a send error has occurred OpenErrorCode WORD Unsigned Bit String 16 bit Stored the error code in case of a connection open error OpenErrorCode WORD Unsigned Bit String 16 bit Stored the error code in case of a send error ReceiveErrorCode WORD Unsigned Bit String 16 bit Stored the error code in case of a receive error Receive_ID WORD Signed Received data ID equals sent request s Send_ID May be received with delay if ReceiveTimeout is set to low Send_ID WORD Signed ID of request get incremented with every sent request for data ReceiveTimeoutError Tab 8 4 BIT Signals if ReceiveTimeout expired before receiving response one scan long This can be interpreted as lag in network slow response from ME RTU or loss of communication link
41. Short float Analog Inputs Tab 7 18 REAL Input data Data representing short float physical analog inputs or internal values 6 Output data is data which is transferred to the PLC from the remote master The following data groups are available in the output protocol data Data group Data type PLC permission Remote master permission Description Binary Output WORD R W Data representing physical digital outputs or program flags 16 bit Analog Outputs INT R VV Data representing 16 bit physical analog outputs or internal values 32 bit Analog Outputs DINT R VV Data representing 32 bit physical analog outputs or internal values Short float Analog Outputs Tab 7 19 ME RTU Remote Terminal Unit REAL Output data R VV Data representing short float physical analog outputs or internal values Assignment of buffer memory Functions and Buffer Memory 7 3 4 Mapping of the protocol data into the BFM The protocol data is mapped into sections Each data group is mapped into its own section Also each data group has a section reserved for signal flags whose structure is depended on the used protocol Input protocol data starts at address 1024 in the BFM Each section with data is 512 words long The size of data flags is adjusted to number of maximum data point of each type If the PLC is in STOP state then an appropriate flags are set whic
42. The field device that originated the data object has been restarted This device may be the device reporting this data object COMM LOST 1 lost 0 normal The device reporting this data object has lost communication with the originator of the data object REMOTE FORCED 1 remote 0 normal The state of the binary object has been forced to its current state at the originating device LOCAL FORCED Tab 9 14 b15 b14 b13 b12 b11 b10 b9 b8 DNP3 Binary Output flags b7 1 local 0 normal b6 b5 b4 The state of the binary object has been forced to its current state at the device reporting b3 b2 b1 b0 PEM PLC Data address LOC REM C ER RES ONL LOC REM CER RES ONL perm type dec 16896 BO1 flags BOO flags RO WORD Ei RO VVORD 16903 BO15 flags BO14 flags RO VVORD 16904 BO17 flags BO16 flags R W WORD 16905 BO19 flags BO18 flags R W WORD ba z R VV VVORD 20991 BO8191 flag BO8190 flag R VV VVORD Tab 9 15 DNP3 Binary outputs flags BFM mapping NOTES All empty grayed flags should always be set to by PLC program The ONLINE flag ONL should always be set to 1 by PLC program The ONLINE ONL flags should be set to value 1 by PLC program The ONL flag is set automatically to value 1 when data value is written by Master station for the first time
43. address Word 5 60 Ethernet IPv6 address Word 6 61 Ethernet IPv6 address Word 7 62 Ethernet IPv6 address Word 8 Di nD D DD Di D DD Di D Ds Di D DD D DD Di WD 002 Di D DID DD OoO oO o o o oa oa o Tab 7 2 ME RTU configuration and statuses mapping 2 The value of the words and bits which are not used or are reserved is set to 0 Module status BFM address 0 The Module status is allocated as follows Name Description During start up boot time of the ME RTU the Booting signal is ON Booting After the ME RTU has completed the internal start up procedure and all BFMs are initialized the flag is set to OFF During start up boot time of the ME RTU the Ready signal is OFF After the ME RTU has completed the internal start up procedure and all BFMs are initialized the flag is set to ON Data exchange with BFM should start after this flag becomes ON b1 Ready b2 to b15 Reserved Tab 7 3 Module status BFM allocation 7 4 aa MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory Mode status BFM address 1 The Mode Status is allocated as follovvs Name Description b0 DNP3 Serial VVhen signal is ON the DNP3 Serial is active b1 DNP3 Ethernet VVhen signal is ON the DNP3 Ethernet is active b2 IEC 60870 5 101 When signal is ON the IEC 60870 101 is active b3 IEC 60870 5 104 When signal is ON the IEC 60870 104 is active b4
44. address start with 0 The address of each following element is incremented by 1 Special care must be taken for Analog Inputs Counters and Analog Outputs DNP3 addresses where the addresses for 16 bit Al 16 bit Counters and 16 bit AO start at 0 the address of 32 bit Al 32 bit Counters and 32 bit AO continue their address numbering from the end address of 16 bit Als and 16 bit AOs The Short Floating Point SFP Al and SFP AO continue their address numbering from the end of 32 bit Als and 32 bit AOs 9 4 1 Binary inputs Binary inputs are mapped into following variation of Object group 1 6 Variation 1 Binary Input single bit in this variation the value of the digital inputs are mapped which is located in the binary input BFM section 6 Variation 2 Binary Input with flags in this variation the value of the digital input is mapped which is located in the binary input BFM section and the flags which is located in the Digital Inputs flags BFM section CAUTION If FX3 series PLC is selected as the only PLC see Figure 11 9 then the following operation applies If FX3 PLC is in reset or stop mode all flags are automatically set to OFFLINE After the FX3 PLC goes to RUN mode and value is written to data point the ONLINE flag is set for this data point If Q L series PLC is selected as the PLC type see Figure 11 9 then the following operation applies When Heartbeat timer runs out all flags are automatically set to OFFLIN
45. in increase of traffic and slow down the ME RTU If those default values are too small for user application then the number of every data type could be increased in the configuration settings Default number Resulting BFM Maximum number of elements dec Address dec of elements dec Number of Binary Inputs 32 1024 1025 8192 5632 5635 4096 8192 8195 512 8960 8967 256 9600 9603 512 10368 10374 256 11008 11014 256 16384 16894 8192 20992 20996 512 22272 22280 256 23424 23432 256 UJ N Number of Double Binary Inputs Number of Binary Counters 16 bit Number of Binary Counters 32 bit Number of Analog Input 16 bit Number of Analog Input 32 bit Number of Analog Input float Number of Binary Outputs Number of Analog Output 16 bit Number of Analog Output 32 bit B HR HH HR HR A O HY A Number of Analog Output float Tab 7 22 Default and maximum data configuration 7 3 6 Data groups Binary inputs Binary inputs are signals vvhich are represented in the application as physical digital inputs or soft ware flags The user has to write an actual value of the digital input into an appropriate BFM location bits are grouped into vvords The mapping of the digital input values in the BFM area starts at the address 1024 The data points are mapped into 16 bit packed BOOLs Binary inputs located on BFM address 1024 are reserved for binary inputs located
46. in the 16 bit analog inputs BFM section and the appropriate flag bits which are located in the 16 bit analog input flag BFM section Variation 3 32 bit analog input in this variation the values of the 32 bit analog inputs are mapped which are located in the 32 bit analog inputs BFM section 6 Variation 4 16 bit analog input in this variation the values of the 16 bit analog inputs are mapped which are located in the 16 bit analog inputs BFM section 6 Variation 5 short float analog input in this variation the values of the short floating analog inputs are mapped which are located in the short floating analog inputs BFM section and the appropriate flag bits which are located in the short floating analog input flag BFM section Flag Short form Value Description ONLINE ONL 1 online 0 offline If the point is OFFLINE the returned state of this point may not be correct The ONLINE binary input point has been read successfully RESTART 1 restart 0 normal The field device that originated the data object has been restarted This device may be the device reporting this data obiect COMM LOST 1 lost 0 normal The device reporting this data obiect has lost communication with the originator of the data object REMOTE FORCED 1 remote 0 normal The state of the binary object has been forced to its current state at the originating device
47. install OpenVPN for Windows from http openvpn net index php open source dovvnloads html 2 During installation when asked select all components including OpenSSL tools and OpenVPN RSA Certificate Management Script for managing RSA keys as seen on Figure 12 1 3 During installation when asked allow the installation of TAP network adapter this is part of OpenVPN as seen on Figure 12 2 Configuring OpenVPN server on Windows CAUTION Computer acting as a server must have internet access and static public IP address or Domain Name if IP address is dynamic to be accessible over long term If computer acting as a server is behind router port forwarding must be set on the router for selected port the default port in this example is 1194 see the server configuration file on page 12 6 Consult your router s documentation for details on this ME RTU Remote Terminal Unit 12 1 VPN services 12 2 IT Functionality Preparation steps 1 Navigate to C Program Files OpenVPN easy rsa folder if installation path was not changed Press Windows Key R Type cmd exe and press Enter Navigate to the correct folder by typing the following command into cmd cd Program Files OpenVPN easy rsa 2 Initialize the OpenVPN configuration by typing the following command into cmd 3 Open the vars bat in text editor 4 Edit the following lines in vars bat replacing US CA etc with your compan
48. it is only used in the standard direction R if only used in the reverse direction and B if used in both directions lt 110 gt Parameter of measured value normalized value X lt 111 gt Parameter of measured value scaled value X lt 112 gt Parameter of measured value short floating point value lt 113 gt Parameter activation 1 1 1 1 MITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile Application layer File Transfer station specific parameter mark each Type ID X if it is only used in the standard direction R if only used in the reverse direction and B if used in both directions lt 120 gt File ready F_FR_NA_1 lt 121 gt Section ready F_SR_NA_1 lt 122 gt Call directory select file call file call section F SC NA 1 d lt 123 gt Last section last segment 15 1 lt 124 gt Ack file ack section F AF NA 1 lt 125 gt Segment F Sa 1 m lt 126 gt Directory blank or X only available in monitor standard direction F TA 1 lt 127 gt Query Log Request archive file F SCNB1 Type identifier and cause of transmission assignments station specific parameters Shaded boxes are not required Black boxes are not permitted in this companion standard Blank functions or ASDU not used Mark Type ldentificat
49. lo nc about apart aaa ee eat s li 7 8 Ethernet Communication with ME RTU 5 4 WIRING se sn Sager sea T 4 2 F Fixed buffer communication 5 3 F netion o cek a ola aida alla 8 3 E 10 Do oan 5 3 FX series Applicable types 6 1 Communication with ME RTU 5 3 Connection of ME RTU 3 2 Data exchange vvith ME RTU 8 1 ME RTU Remote Terminal Unit IEC 60870 5 10 2 aka aba 1 7 9 OVEIVIOW 10 1 Integrated web server 5 5 IP address ce D ab 5 4 L L series Communication with ME RTU 5 3 Connection of ME RTU 3 2 Data exchange with ME RTU 8 3 M ME RTU Buer MeMO serrer s B 7 2 BUSY SIGN Aliso A DARA 7 7 Communication over Ethernet 5 4 Communication over radio modem 5 5 Connection to FX series PLC 3 2 Connection to MELSEC Q or L series 3 2 Datatola ec o b es 7 1 DIMENSIONS m 2 1 Error status in buffer memory 7 8 kuz ab AR y mu 5 1 PIONE VICW 1 2 FUNCHONANLY z a a 5 2 Grondig easa Le 4 1 nput output wiring 4 3 Integrated
50. no ribbon cable at tached since the PLC connection is made via Ethernet MITSUBISHI ELECTRIC Installation 3 3 1 3 1 1 3 1 2 Mounting Installation Mounting ME RTU can be mounted directly using screws or on DIN rail DIN 46227 Direct mounting ME RTU can be mounted with M4 screws by using direct mounting holes A space of 1 to 2 mm 0 04 to 0 08 between each unit is necessary DIN rail mounting Fig 3 1 ME RTU can be mounted ona DIN rail DIN 46227 35 mm width image009 1 Fit the upper edge of the DIN rail mounting groove Fig A onto the DIN rail 2 Push the unit onto the DIN rail ME RTU Remote Terminal Unit 3 1 Installation location Installation 3 2 Installation location Install the ME RTU in an environment conforming to the generic specifications chapter 3 installa tion precautions NOTE Keep a space of 100 mm 3 94 or more between the unit main body and another device or struc ture Install the unit as far as possible from the high voltage devices and power equipment To prevent temperature rise do not install ME RTU on a floor a ceiling or a vertical surface Install it horizontally on a wall as shown in figure 3 2 When ME RTU is used as an extension device for FX series PLC via FX Bus the ME RTU may be con nected to the right of the PLC or other extension module Additional extension modules can be con nected on the right side of ME RTU In 2 stage configur
51. on ME RTU and their value should not be set by the PLC can only be read using FROM 16 bit or DFROM 32 bit instruction The values of BIO and B 1 are set by module digital inputs Bi nary inputs at BFM address 1025 or higher may be controlled by PLC using TO FROM 16 bit or DTO DFROM 32 bit instructions After the data values the flags of the data points are mapped to address 1536 User writes the flags of the data points into the appropriate flag bit for a specific data point The structure of the flags is pro tocol dependent For DNP3 flags mapping refer to section 9 4 1 Binary Inputs Table 9 5 6 For IEC 60870 5 flags mapping refer to section 10 4 1 Binary inputs Table 10 3 PLC Data dec perm type 1024 815 BI14 B 13 B 12 B 11 B 10 BIQ 818 817 816 815 814 813 812 811 810 RO WORD 1025 BI31 8130 129 B 28 BI27 8126 B 25 B 24 B 23 8122 8121 120 BI19 B 18 B 17 B 16 R VV WORD R W WORD BI BI BI BI BI BI BI BI BI BI BI BI BI BI BI BI 8191 8190 8189 8188 8187 8186 8185 8184 8183 8182 8181 8180 8179 8178 8177 8176 R W WORD 1535 Tab 7 23 Binary Inputs BEM mapping 7 14 aa MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory CAUTION Binary Inputs on BFM address 1024 are used by the system and should not be used on the PLC side The BIO and BI1 are the locations to which module d
52. or access ME RTU as described in section 12 1 3 Including multiple machines on the client side when using routed VPN dev tun ae Celular fietwork Remote ste Mobile IP 188 198 52 39 STT mj 4 21 VPN tun IP 172 32 0 6 k 55 Eth IP 192 168 120 5 Netmask 255 255 240 0 s Remote control centre IP 192 168 112 73 Netmask 255 255 240 0 GW 192 168 120 5 image065 Fig 12 5 Connectivity via NAT and VPN to Q PLC MITSUBISHI ELECTRIC IT Functionality Network Address Translation NAT Transfer Setup EthO CC IE Field Q Series NET II Board Bus Board GOT CC TE Feld CC TE Field MET 10 H Master Local Communication Module Module Head Module Computer Type QJ71E71 Network No 1 Station No 1 IP Address Host Name 172 32 0 6 Station No lt gt IP Information Automatic Response System Other Station m l r Connection Channel List Setting No Specification Other Station Other Station Single Network Co existence Network PLC Direct Coupled Setting Connection Test Time Out Sec 10 Retry Times 2 02 002 Network Tap PLC Type 1 02 0 Communication Route MELSOFT Application r a CC IE Cont CC TE Field Ethernet NET 10 H Co existence Network CC IE Cont CC IE Field Ethernet NET 10 H Accessing Other Station Multiple CPU Setting i Not Specified image066 Fig 12 6 Q PLC MELFSOFT transfer setup
53. packages Minimum user functionality test is described in the last section 6 1 Applicable systems In the follovving chapter the applicable PLC types and softvvare packages are described 6 1 1 Applicable PLC types PLC type Supported interface ME RTU variant FX3G FROM TODFROM DTO FX3GC FROM TODFROM DTO FX3U FROM TODFROM DTO FROM TODFROM DTO TCP UDP Fixed Buffer Ethernet Communication TCP UDP Ethernet Socket Communication Q Series bus non bus 2 L Series bus non bus 2 Tab 6 1 Applicable PLC types When connecting to FX3UC main unit either FX3UC 1 PS 5V or FX2NC CNV IF module is required to connect the FX Bus When bus variant is used with Q or L series PLC use cable tie to affix the FX Bus cable firmly to ME RTU housing if bus ME RTU variant of the unit is used However it is strongly recommended to use a non bus ME RTU in conjunction with Q or L series PLCs 6 1 2 Applicable software packages For configuring the ME RTU the following software is needed 6 A standard web browser like Internet Explorer Chrome or Firefox GX VVorks2 GX Developer or GX IEC Developer CAUTION 6 The DWORD 32 bit DINT REAL data type values cannot be modified with GXworks2 s Batch monitor GX Developer s Buffer memory batch or GX IEC Developer s Buffer memory batch monitor in order to assure that all 32 bits are written to BFM in one piece These programs always use two consecutiv
54. required in the WEB user interface Host or Domain name configured by user on http dyn com DNS server Username Password DDNS system Use of Wildcards Connection port ME RTU Remote Terminal Unit 12 9 Netvvork Address Translation NAT IT Functionality 12 4 12 4 1 NOTE 12 10 Netvvork Address Translation NAT NAT Netvvork Address Translation is a netvvork protocol that allovvs multiple devices to connect to a public network using the same address NAT translates traffic from one IP and port number to another Remote access to Q PLC This example presents the usage of NAT feature for accessing remote site Q series PLC with fixed buff er Ethernet module with GX Works2 via GPRS network and established VPN connection First the ME RTU must be properly configured For configuring VPN connection see section 12 1 VPN services In NAT settings refer to NAT Settings set the Q series PLC MELSOFT connection TCP port number for Q series PLC the TCP connection port number is fixed on 5002 as inbound and outbound port numbers The destination P is the IP of the Q series PLC s Ethernet module 1 e 5002 192 168 112 73 2 ten L image064 Fig 12 4 NAT setting for Q PLC MELFSOFT TCP connection In GX Works2 configure the transfer setup Set the ME RTU VPN tunnel s IP address as destination IP address Consult your system administrator to provide you mechanism to gain access to VPN tunnel IP address
55. settings Signal Level Mobile IP address wwwinea si Not connected Test Connection failed image057 Fig 11 26 ME RTU Remote Terminal Unit Web User Interface Mobile connection test 11 17 Configuring ME RTU via integrated vveb server Settings and Diagnostics 11 3 10 11 18 VPN In this tab Virtual Private Netvvork VPN parameters are inserted and Certificate is uploaded to ME RTU Open VPN settings In this section OpenVPN server address port number username and password are inserted Once VPN tunnel has been established the VPN tunnel IP address is displayed in openVPN IP address window Server address default Port number 194 7 default o Password ada uk Save openVPNIP address Not connected Oo 7 image058 Fig 11 27 Web User Interface Open VPN settings CAUTION In cases when openVPN service is used via GPRS interface and GPRS link is broken the open VPN tunnel may be reported active for undefined time Once the openVPN service detects the loss of connection to openVPN server the closed VPN tunnel will be reported OpenVPN server certificate OpenVPN server certificate must be uploaded to ME RTU client which is done in this section Once certificate is uploaded the basic certificate info is displayed in Loaded Certificate Info text box Certificate Browse_ No file selected 1 Certificate Upload
56. the 16 bit Analog Inputs flags BFM section b15 b14 b13 b12 b11 b10 b9 b7 b6 b5 b4 b3 b2 bl bo IV NT SB BL OV IV NT SB BL OV 75 Sata dec perm type 10112 All flags AlO flags R W WORD 10112 Al3 flags Al2 flags R W WORD 10114 Al5 flags Al4 flags R W WORD 2 R VV VVORD 10367 A1511 flags A1510 flags R W WORD Tab 10 10 IEC 60870 5 Scaled measured values Quality Descriptors BFM mapping Short floating analog inputs are mapped as scaled measured value The Quality Descriptors are mapped to the short floating analog inputs flags BFM section b15 b14 b13 b12 b11 b10 b9 b7 b6 b5 b4 b3 b2 bl bo a V NT SB BL OV IV NT SB BL ov P Data dec perm type 11520 RAI1 flags RAIO flags R W WORD 11521 RAI3 flags RAI2 flags R W WORD 11522 RAI5 flags RAI4 flags R W WORD m X R W WORD 11647 RAI255 flags RAI254 flags R W WORD Tab 10 11 IEC 60870 5 Short Floating Point measured values Quality Descriptors BFM mapping 32 bit Analog Inputs are mapped as bitstring of 32 bit The Quality Descriptors are mapped from the short floating point analog inputs flags BFM section b15 b14 b13 b12 b11 b10 b9 b7 b6 b5 b4 b3 b2 bl b0
57. the device like DHCP IP address DNS DDNS SNMP VPN 6 Cellular network configuration settings for the SIM card such as PIN code and some other mobile operator depending settings e g APN data connection type GPRS EDGE Diagnostic diagnostic information for the ME RTU such as uptime interface flags error and Statistical information about the quantity of data being sent via protocol stacks and cellular network 6 Database Settings for configuring the database elements Protocol settings Settings for configuring the communication protocols to the control center This page also has an option for diagnostic if a remote connection to the master station is established 6 PLC communication settings setting for configuring the PLC interface To dynamically refresh the data on the diagnostic web pages the AJAX technology is being used This enables the status of the module to be automatically refreshed in a specific time period or on an event MITSUBISHI ELECTRIC Settings and Diagnostics 11 3 11 3 1 Configuring ME RTU via integrated web server Configuring ME RTU via integrated web server When accessing web server for the first time ME RTU must be connected locally to computer and ap propriate network configuration must be carried out in order to establish LAN network connection Computer network adapter configuration for direct access In order to directly access web user interface computer s network adapter must
58. the path C User Documents from ME RTU with IP address 192 168 0 10 and password rtuadmin rtuscp pw rtuadmin rtuadmin 192 168 0 10 C User Documents A CAUTION Do NOT upload modified xml file to the ME RTU only use xml files downloaded from ME RTU There is a risk of corruption and improper configuration if xml file is modified ME RTU Remote Terminal Unit 7 23 Windows command line configuration upload dovvnload Functions and Buffer Memory 7 24 aa MITSUBISHI ELECTRIC PLC Data Exchange FX3 PLC data exchange 8 8 1 8 1 1 PLC Data Exchange The following sections describe how FX3 and Q L series PLCs can exchange data with ME RTU FX3 PLC data exchange The FX3 PLC is communicating vvith the ME RTU via the FX Bus be sure to use the bus ME RTU vari ant For transferring 16 bit data the FROM TO instructions are used For 32 bit data DFROM DTO in structions are used Raw programing examples Following are the examples for FX3U PLC data exchange Mapping of binary outputs Binary outputs are commands from the remote controlling station defining in which state the device should be In the program the user must read the value which is in the ME RTU BFM and map it to the actual physical output The binary outputs are located at address 16384 in the ME RTU BFM In the user program the following two steps should be made Using a FROM instruction read the content of the BFM The input parameters t
59. to b15 Reserved Tab 7 4 Mode settings BFM allocation LED Statuses BFM address 2 The LED Status is allocated as follows Name Description bO RUN Value of Led 1 b1 BOOT Value of Led 2 b2 USER Value of Led 3 b3 FXBUS Value of Led 4 b4 HW ERR Value of Led 5 b5 SW ERR Value of Led 6 b6 COM ERR Value of Led 7 b7 GSM ERR Value of Led 8 b8 GSM CONN Value of Led 9 b9 GSM STATUS Value of Led 10 b10 PROT 0 Value of Led 11 b11 PROT 1 Value of Led 12 b12 DO 0 Value of Led 13 b13 DO 1 Value of Led 14 b14 DIO Value of Led 15 b15 DI 1 Value of Led 16 Tab 7 5 LED Statuses BFM allocation DIP Switch Statuses BFM address 3 The DIP switch statuses are allocated as follows Name Description b0 DIP1 Value of DIP switch 1 b1 DIP2 Value of DIP switch 2 b2 DIP3 Value of DIP switch 3 b3 DIP4 Value of DIP switch 4 b4 to b15 Reserved Tab 7 6 LED Statuses BFM allocation ME RTU Remote Terminal Unit 7 5 Assignment of buffer memory Functions and Buffer Memory Digital inputs values BFM address 41 The digital input values are allocated as follows Name Description b0 DIO Current value of digital input 0 b1 DI1 Current value of digital input 1 b2 to b15 Reserved Tab 7 7 Digital inputs BFM allocation Digital output values are BFM address 5 The digital output values are allocated as follows Name D
60. via VPN and NAT 12 4 2 Access to multiple ME RTUs via one GPRS connection With NAT it is possible to access other ME RTUs web interface or SCADA can connect to them with DNP3 Ethernet or IEC 60870 5 104 protocol To enable access to second ME RTU configure NAT as follows No 1 in Figure 12 7 6 Inbound port is the any free TCP port In this example the port number is 8080 Destination P is the static Ethernet IP address of the second ME RTU In this example the IP address is 192 168 120 6 Destination port is a default HTTP destination port For ME RTU this is always 80 In standard web browser type the VPN IP address of the first ME RTU followed by colon and the port number as web address e g 172 32 0 6 8080 Similar principle may be used by SCADA to connect to DNP3 Ethernet or IEC 60870 5 104 The fol lowing example shows the NAT configuration for DNP3 No 2 in Figure 12 7 ME RTU Remote Terminal Unit 12 11 Netvvork Address Translation NAT IT Functionality NOTE Additional connections will create bigger traffic overhead This and the bigger traffic itself may congest the communication channel Network Address Translation and Port Forwarding No Type Inbound port Destination IP Destination port Enable 1 TCP 8080 192 168 120 6 80 2 TCP 20001 192 168 120 6 20000 image067 Fig 12 7 NAT settings for under lying ME RTU access network Remote site Mobile IP
61. web server 5 5 IP address setting 11 5 IT functionality 12 1 Parameter setting 11 2 Real time clock 7 7 Specifications sec aza DA 2 1 SEIAT o EEE a VOE s n 6 2 Svvitch settings 11 26 System configuration 5 2 Time synchronization 7 20 N N y E e 11 11 OpenVPN L aa al a tense wands 12 1 P Protocol data sive aoe aaa ad Ra a araya aaa a a aa cows 7 11 Q Q series Communication vvith ME RTU 5 3 Connection of ME RTU 3 2 Data exchange vvith ME RTU 8 3 R Radio modem 5 5 Real time clock 7 6 S SD card Data retention 7 22 4 6 SDCCINCALIONS ail 4 6 SIM card H EHOR a Ya Menace sk 4 6 Specifications 4 6 adla bon 7 19 Socket communication 5 3 System configuration 5 2 WwW Web browser 6 1 ae MITSUBISHI ELECTRIC Mitsubishi Electric Europe B V EUROPE Gothaer Stra e 8 D 40880 Ratingen Phone 49 0 2102 486 0
62. 00000 12 6 117 7 0 12 8 1201 7 Ci oo l 0 n 12 8 IL r s ii b sli 12 9 12 4 Network Address Translation NAT 12 10 1241 Temote access 10 OP La ada dala a 12 10 12 4 2 Access to multiple ME RTUs via one GPRS connection 12 11 13 Online Programming Access A DNP V3 0 Device Profile A 1 DNP V3 0 implementation table A 4 A2 DI masada a A 10 VIII aa MITSUBISHI ELECTRIC Contents B IEC 60870 5 101 104 Device Profile Bl ASV SRCIINO E aiee EEE RE EEA E wana pn eon B 2 B 2 Network configuration B 2 55 D AIM AY Cbs Mat n lo B 3 BA linoleum ada ea ada an B 4 3ppiealioiie m a B 5 B 6 Basic application functions B 13 C Housing Printings CI 6 hODSCOVER DINU at deat yaa yaaa N C 1 C 2 Top case print top cover removed C 2 ME RTU Remote Terminal Unit IX Contents X aa MITSUBISHI ELECTRIC Overvievv Outline 1 Overvievv This User s Manual specifies the functionality and programming of the Remote Terminal Unit module hereafter known as ME RTU for the FX3 L and Q family of progr
63. 1 16 bit R W INT 8194 BC2 16 bit R W INT srs R VV INT 8703 BC511 16 bit R W INT Tab 7 26 16 bit Binary Counters BFM mapping BFM address PLC Data dec perm type 8960 DBCO 32 bit R VV D NT 8962 DBC1 32 bit R VV DINT R W DINT 9470 9471 DBI255 32 bit R W DINT Tab 7 27 32 bit Binary Counters BFM mapping MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory Analog inputs Analog inputs are values vvhich represent an analog input in the application or a calculation value in side PLC registers The user has to vvrite the actual values into the appropriate BFM locations The mapping in the BFM area starts at the address 9600 At first all the data values are mapped There are three types of analog inputs 6 16 bit analog inputs located in one BFM location 1 word and starts at the address 9600 May be controlled by PLC using TO FROM 16 bit instructions 6 32 bit analog inputs located in two BFM locations 2 word and starts at the address 10368 May be controlled by PLC using DTO DFROM 32 bit instructions 6 Float analog inputs located in two BFM locations 2 word and starts at the address 11008 May be controlled by PLC using DTO DFROM 32 bit instructions After the data values the flags are mapped in the BFM area which starts at address 10112 for 16 bit Analog Inputs 10880 for 32 bit Analog Inputs and 11520 for Float Analog Inputs User writes the flags of the signal into the approp
64. 1 flag RAIO flag R W WORD 11521 RAI3 flag RAI2 flag R W WORD 11522 RAI5 flag RAI4 flag R W WORD m a WORD 11647 RAI255 flag RAI254 flag R W WORD Tab 9 13 DNP3 Short Floating Point Analog Inputs flags BFM mapping NOTES All empty grayed flags should always be set to by PLC program The ONLINE flags ONL should be set to 1 by PLC program The ONL flag is set automatically to value 1 when data values is written Value is automatically set to 0 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC 9 8 aa MITSUBISHI ELECTRIC DNP3 Functionality DNP3 Functionality DNP3 BFM mapping 9 4 5 Binary outputs Binary outputs are mapped into following variations of Object group 10 6 Variation 1 Binary output packed binary in this variation the value of the digital output is mapped to the binary output BFM section 6 Variation 2 Binary Output with flag in this variation the current value of the digital output is mapped which is located in the binary output flag BFM section Flag Short form Value Description ONLINE ONL 1 online 0 offline If the point is OFFLINE the returned state of this point may not be correct The ONLINE binary output point has been set successfully RESTART 1 restart 0 normal
65. 24 Double Binary Input BFM mapping Binary outputs Binary outputs are signals vvhich are represented in the application as physical digital outputs or soft ware flags The user has to read the actual value of a binary output in the BFM and map it into the ap propriate physical output or marker of the PLC The mapping in the BFM area starts atthe address 16384 The data is mapped into a 16 bit packed bi nary From this area the user reads the value of the requested digital output by PLC using FROM 16 bit or DFROM 32 bit instructions Binary outputs BOO and BO1 at BFM address 16384 are mapped to ME RTU module digital outputs DOO and DO1 After the data values the flags of the signals are mapped in the BFM area which starts at address 16896 User writes the flags of the signal into the appropriate flags bit for specific signal Structure of the flags is protocol dependent For DNP3 flags mapping refer to section 9 4 5 Binary Outputs Table 9 15 6 Not supported in IEC 60870 5 ad PLC Data dec perm type 16384 BO15 BO14 BO13 BO12 BO11 BO10 BOO BOS 7 BOS BO4 BO3 BO2 BO1 BOO RO WORD 16385 BO31 BO30 BO29 BO28 BO27 BO26 BO25 BO24 BO23 BO22 BO21 BO20 BO19 BO18 BO17 BO16 RO WORD RO WORD 16305 BO BO BO BO BO BO BO BO BO BO BO BO BO BO BO 8191 8190 8189 8188 8187 8186 8185 8184
66. 39 gt Packed start events of protection equipment with time tag CP56Time2a M EP TE 1 lt 40 gt Packed output circuit information of protection equipment with time tag CP56Time2a M_EP_TF_1 In this companion standard only the use of the set lt 30 gt lt 40 gt for ASDUs with time tag is permitted MITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile Application layer Process information in control direction station specific parameter mark each Type D X if it is only used in the standard direction R if only used in the reverse direction and B if used in both directions X lt 45 gt Single command lt 46 gt Double command lt 47 gt Regulating step command lt 48 gt Set point command normalized value X lt 49 gt Set point command scaled value X lt 50 gt Set point command scaled value X lt 51 gt Bitstring of 32 bit lt 58 gt Single command with time tag CP56Time 2a lt 59 gt Double command with time tag CP56Time 2a lt 60 gt Regulating step command with time tag CP56Time 2a lt 61 gt Set point command normalized value with time tag CP56Time 2a lt 62 gt Set point command scaled value with time tag CP56Time 2a lt 63 gt Setpoint command short floating point value with time tag CP56Time 2a lt 64 gt Bitstring of 32 bit with time tag CP56Time 2a Either th
67. 4 flag R W WORD 8191 DBI4095 flag DBI4094 flag R W WORD Tab 9 6 DNP3 Double Binary Inputs BFM flags signals structure NOTES All empty grayed flags should always be set to by PLC program The ONLINE flags ONL should be set to 1 by PLC program The ONL flag is set automatically to value 1 when data values is written Value is automatically set to 0 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC Because 8 15 are group in WORD of 16 bits the ONLINE flags are set for all those 8 DBls which are mapped to the same WORD ME RTU Remote Terminal Unit 9 5 DNP3 BFM mapping DNP3 Functionality 9 4 3 Counters Counters are mapped into following variations of Object group 20 6 Variation 5 32 bit counter in this variation the values of the 32 bit counters are mapped which are located in the 32 bit Counters BFM section 6 Variation 6 16 bit counter in this variation the values of the 16 bit counters are mapped which are located in the 16 bit Counters BFM section Flag Short form Value Description 1 online If the point is OFFLINE the returned state of this point ONLINE ONL may not be correct The ONLINE binary input point has 0 offli
68. 526 39 95 Mitsubishi Electric Europe B V UK Travellers Lane UK Hatfield Herts AL10 8XB Phone 44 0 1707 28 87 80 Fax 44 0 1707 27 86 95 Mitsubishi Electric Europe B V Dubai Silicon Oasis United Arab Emirates Dubai Phone 971 4 3724716 Fax 971 4 3724721 Mitsubishi Electric Corporation Tokyo Building 2 7 3 Marunouchi Chiyoda ku Tokyo 100 8310 Phone 81 3 3218 2111 Fax 81 3 3218 2185 Mitsubishi Electric Automation Inc 500 Corporate Woods Parkway Vernon Hills IL 60061 Phone 1 847 478 2100 Fax 1 847 478 0328 CZECH REP FRANCE IRELAND ITALY NETHERLANDS POLAND RUSSIA SPAIN SWEDEN UAE JAPAN USA MITSUBISHI A ELECTRIC Changes for the Better GEVA Wiener StraBe 89 A 2500 Baden Phone 43 0 2252 85 55 20 Fax 43 0 2252 488 60 000 TECHNIKON Prospect Nezavisimosti 177 9 BY 220125 Minsk Phone 375 0 17 393 1177 Fax 375 0 17 393 0081 ESCO DRIVES Culliganlaan 3 BE 1831 Diegem Phone 32 0 2 717 64 60 Fax 32 0 2 717 64 61 KONING amp HARTMAN B V Woluwelaan 31 BE 1800 Vilvoorde Phone 32 0 2 257 02 40 Fax 32 0 2 257 02 49 INEA RBT d o o BOSNIA AND HERZEGOVINA Stegne 11 SI 1000 Ljubljana Phone 386 0 1 513 8116 Fax 386 0 1 513 8170 AKHNATON 4 Andrei Ljapchev Blvd PO Box 21 BG 1756 Sofia Phone 359 0 2 817 6000 Fax 359 0 2 9744061 INEA CR Losinjska 4a HR 10000 Zagr
69. 7 28 index 0 01 1 read 07 08 limited qty 129 response 17 28 index 34 2 32 bit Analog 17 27 28 index default Input Deadband 00 01 start stop 2 write 07 08 limited qty 17 27 28 index ME RTU Remote Terminal Unit DNP V3 0 implementation table DNP V3 0 Device Profile OBJECT REQUEST RESPONSE Library will parse Library will respond with Variation Description Function Codes Qualifier Function Qualifier ber Number dec Codes hex Codes dec Codes hex 00 01 start stop 06 no range or all 7 1 read 07 08 limited 129 response start stop Short Floating O 17 28 index 34 3 Point Analog 17 27 28 index Input Deadband 00 01 start stop 2 vvrite 07 08 limited qty 17 27 28 index 00 01 start stop 40 0 Analog Output 1 read 06 no range or all Status 22 assign class 07 08 limited qty 17 27 28 index 00 01 start stop 00 01 32 Bit Analog 06 no range or all 40 l Output Status 1 read 07 08 limited qty 129 response 17 27 28 index 00 01 start stop 2 16 Bit Analog 06 no range or all 00 01 start stop 40 default Output Status 1 read 07 08 limited qty 129 response 17 28 index 17 27 28 index Short floating 5 51 00 01 40 3 point Analog 1 read 1 129 response start stop Output Status 07 08 Uimited qty 17 28 ind
70. Connection Test Tab 11 8 CAUTION Signal Level Mobile connection signal level Bar Mobile IP address Assigned mobile IP address 0 0 0 0 255 255 255 255 Perform PING test to IP address or domain name on GPRS interface Parameters for Cellular settings String www inea si Ping test on domain name depends on DNS priority and or DNS server IP address 11 4 7 VPN settings Settings Subsection Setting name Description Details Default value OpenVPN Settings Server address OpenVPN Server IP or domain name 0 0 0 0 255 255 255 255 or String default Port number OpenVPN port number Integer from 1 to 65535 1194 Username Connection username String default Password Connection password String default openVPN IP address Assigned tunnel IP address 0 0 0 0 255 255 255 255 OpenVPN Server Certificates Tab 11 9 CAUTION Certificate Upload openVPN server certificate File crt Certificate Upload Status Certificate upload status information String No Server Certificate Loaded Certificate Info Display of Loaded certificate Version Serial Number Validity time range Subject information Parameters for VPN settings String In cases when openVPN service is used via GPRS interface and GPRS link is broken the openVPN tunnel may be reported active for un
71. E After connection is established and value is written to data point the ONLINE flag is set for this data point ME RTU Remote Terminal Unit 9 3 DNP3 BFM mapping DNP3 Functionality The flags of Binary Inputs are 1 byte long In the following Table the supported flags are shown Flag Short form Value Description 1 online Ifthe point is OFFLINE the returned state of this point may ONLINE ONL 0 offline not be correct The ONLINE binary input point has been read successfully 1 restart The field device that originated the data object has been RESTART 0 normal restarted This device may be the device reporting this data object 1 lost The device reporting this data obiect has lost COMM LOST 0 normal communication with the originator of the data object 1 remote REMOTE FORCED The state of the binary object has been forced to its 0 normal current state at the originating device 1 local LOCAL FORCED The state of the binary object has been forced to its 0 normal current state at the device reporting 1 chatter This data obiect binary input point has been filtered in CHATTER 0 normal Tab 9 3 DNP3 Binary input supported flags order to remove unneeded transitions in the state of the input
72. E0100 Regulations for the erection of povver installations vvith rated voltages belovv 1000 V VDE 0105 Operation of povver installations VDE0113 Electrical installations vvith electronic equlpment VDE0160 Electronic equipment for use in power installations VDE 0550 0551 Regulations for transformers VDE 0700 Safety of electrical appliances for household use and similar applications VDE 0860 Safety regulations for mains powered electronic appliances and their accessories for house hold use and similar applications 6 Fire safety regulations 6 Accident prevention regulation VBG No 4 Electrical systems and equipment ME RTU Remote Terminal Unit Safety vvarnings in this manual In this manual special warnings that are important for the proper and safe use of the products are clearly identified as follovvs CAUTION Equipment and property damage vvarnings Failure to observe the safety vvarnings identified with this symbol can result in damage to the equipment or other property Il aa MITSUBISHI ELECTRIC General safety information and precautions The follovving safety precautions are intended as a general guideline for using PLC systems together with other equipment These precautions must always be observed in the design installation and op eration of all control systems DANGER Observe all safety and accident prevention regulations applicable to your specific applica tion Always disconn
73. EC 60870 5 104 protocol 6 Ethernet 10 100 is the communication path to connect the ME RTU to the Local network or the remote controlling station On the local network there can also be the Q or L series PLCs USB host type A is used as a backup path if the user wants to connect a custom radio modem Irrespective of which of these data paths is in service the ME RTU can then communicate to the remote controlling station via the DNP3 or IEC 60870 5 101 protocol Device amp Network Other Manage utilities ment Cellular Network RF Link i VPN Private IP Network Private Only specific RF Link equipment will be supported GSM EDGE 3G Fig 5 1 ME RTU example system configuration 50 aa MITSUBISHI ELECTRIC Features Functionality overvievv 5 2 1 5 2 2 PLC communication via FX Bus The ME RTU can communicate with the FX family of PLCs over the FX Bus only bus ME RTU Thaten ables data exchange between the ME RTU and the FX PLC In this configuration the PLC can be ac cessed from the PC to monitor the data online monitoring or transfer a program This can be done using the cellular or the local network image021 Fig 5 2 ME RTU configuration using the FX PLC Q and L series communication The ME RTU can also be used in combination with Q or L series PLC The communication takes place over tvvo different interfaces Socket communication for L series and Q series after SN11012 6 Fixed B
74. For Requests Level 2 L Master For Responses Level 2 Slave Notable objects functions and or qualifiers supported in addition to the Highest DNP Levels Sup ported the complete list is described in the attached table For static non change event object requests request qualifier codes 07 and 08 limited quantity and 17 and 28 index are supported Static object requests sent with qualifiers 07 or 08 will be responded with qualifiers 00 or 01 16 bit 32 bit and Floating Point Analog Change Events with Time may be requested Analog Input Deadbands Object 34 variations 1 through 3 are supported Floating Point Analog Output Status and Output Block Objects 40 and 41 are supported Maximum Data Link Frame Size octets Maximum Application Fragment Size octets Transmitted 292 Transmitted Configurable up to 2048 Received 292 Received 2048 Maximum Data Link Re tries Maximum Application Layer Re tries LI None None Fixed L Configurable L Configurable from to 65535 Requires Data Link Layer Confirmation Never L1 Always L Sometimes L Configurable as Never Only for multi frame messages or Always Requires Application Layer Confirmation Never Always When reporting Event Data Slave devices only When sending multi fragment responses Slave devices only Sometimes Configurable as Only when reporting event data or When reporting event data or multi fragment messages ME RTU Remote T
75. IP settings from DHCP Enable Disable Disable IP address Static IP address 0 0 0 0 255 255 255 255 192 168 0 10 Network mask Subnet mask 0 0 0 0 255 255 255 255 255 255 255 0 Gateway address Default gateway IP address 0 0 0 0 255 255 255 255 192 168 0 1 DNS1 address First DNS server address 0 0 0 0 255 255 255 255 0 0 0 0 DNS2 address Second DNS server address 0 0 0 0 255 255 255 255 0 0 0 0 NAT Settings 16 configurable translations Type Transport layer port type 0 TCP 1 UDP 0 Inbound port Inbound port number 1 65535 Destination IP IP address of the device providing the service application 0 0 0 0 255 255 255 255 Destination port Outbound port number 1 65535 Enable Enable or disable the defined translation 0 Disabled 1 Enabled 0 Disabled DDNS Settings Hostand domain name Dynamic DNS domain name String Name com Username Username registered vvith dynamic name provider String User Passvvord Passvvord registered vvith dynamic name provider String passvvord DynDNS DDNS System Dynamic Static or custom DNS system 0 Dynamic 1 Static 2 Custom 0 5 Use vvildcards Enable or disable wildcards 0 Enable 1 Disable 2 Default 0 E
76. ITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile Basic application functions Maximum number of outstanding format APDUs k and latest acknowledge APDUs w Parameter Default value Remarks Selected value k 12 APDUs Maximum difference receive sequence number to send state 12 APDUs variable VV 8 APDUs Latest acknowledge after receiving w l format APDUs 8 APDUs Maximum range of values k 1 to 32767 2 1 APDUs accuracy 1 APDU Maximum range of values vv 1 to 32767 APDUs accuracy 1 APDU Recommendation vv should not exceed tvvo thirds of k Port number Parameter Value Remarks Port number 2404 Configurable Redundant connections Configurable Number N of redundancy group connections used RFC 2200 suite RFC 2200 is an official Internet Standard which describes the state of standardization of protocols used in the Internet as determined by the Internet Architecture Board IAB It offers a broad spectrum of actual standards used in the Internet The suitable selection of documents from RFC 2200 defined in this standard for given projects has to be chosen by the user of this standard X Ethernet 802 3 X Serial X 21 interface Other selection from RFC 2200 ME RTU Remote Terminal Unit B 17 Basic application functions IEC 60870 5 101 104 Device Profile B 18 aa MITSUBISHI ELECTRIC Housing Printings C Housing Printings C 1 Top cover print Antenna SMA conne
77. Memory utilization 6 other module statuses SNMP client With SNMP client information can be retrieved from ME RTU One possible SNMP client program is NET SNMP available for download at http www net snmp org or http sourceforge net projects net snmp files net snmp 20binaries Important notice Windows binaries from second link have been built with OpenSSL version 0 9 8r Installing Net SNMP on a system with where OpenSSL 1 0 has been installed will fail Usage With Net SNMP it is possible to read BFM values from ME RTU To do this press Windows Key R and enter cmd exe In this example ME RTU IP address is 192 168 112 68 1 Set the desired BFM address in this example the desired BFM address is 2 by typing the following command in cmd snmpset v2c c private 192 168 112 68 1 3 6 1 4 1 1138 1 1 1 0 i 2 2 Request the value by entering the following command into cmd ME RTU returns the value at this BFM address snmpget v2c c public 192 168 112 68 1 3 6 1 4 1 1138 1 1 2 0 MITSUBISHI ELECTRIC IT Functionality DDNS 12 3 DDNS ME RTU supports dynamic DNS entries update for Counterpoints on Dynamic DNS Network Services free DNS service The user has some pre defined DDNS free services where he can create a Counter point and then he has to provide his Counterpoint details into the ME RTU settings The dnsdynam ic org http dyn com DDNS provider is included The following settings are
78. PLC Data Exchange The following tables describe inputs and outputs of function block Input variables Signal Type Description Head Address WORD Unsigned Bit String 16 bit QJ71E71 Ethernet interface module head address ConnectionNo WORD Signed Connection number which must be unique ExistenceCheck BIT Usage of destination existence check LocalPortNo WORD Signed Local port number from 1025 to 5548 or 5552 to 65534 RemotelPAddress DWORD Unsigned Bit String 32 bit ME RTU IP address RemotePortNo Word Signed ME RTU port number refer to General ME RTU settings EnableConnection BIT Open the Ethernet communication connection EnableSend BIT Start the send request data operation SendData WORD Unsigned Bit String 16 bit Head address of the send data storage area BFM_addr WORD Signed ME RTU Buffered Memory head address NoOfData WORD Signed Number of WORDs to send max value 512 for 16 bit or 256 for 32 bit data Type_16b32b BIT Data type FALSE 16 bit data NoOfData unit is WORD TRUE 32 bit data NoOfData unit is DWORD Type_16b32b BIT Select operation type FALSE Request data TRUE Send data Flags WORD Signed Set data flags 16 abcd If 16 ab 16 00 don t set flags If 16 ab 16 01 set flags 16 cd flags values Input data values only
79. R VV VVORD Tab 9 21 DNP3 Short Floating Point Analog Outputs flags BFM mapping 7 PLC Data address dec perm type RAOO float Actual Values R W REAL RAO1 float Actual Values R VV REAL R VV REAL 24574 24575 RAO255 float Actual Values R VV REAL Tab 9 22 DNP3 Short Floating Point Analog Outputs Actual Values BFM mapping NOTES All empty grayed flags should always be set to by PLC program The ONLINE flag ONL should always be set to 1 by PLC program The ONLINE ONL flags should be set to value 1 by PLC program The ONL flag is set automatically to value 1 when data value is written by Master station for the first time 9 5 Device profile The ME RTU contains a device profile which lists the supported functionalities In Appendix A the de vice profile for the ME RTU is provided 9 12 aa MITSUBISHI ELECTRIC IEC 60870 5 101 104 Functionality IEC 60870 5 101 104 configuration settings 10 IEC 60870 5 101 104 Functionality IEC 60870 5 is a general protocol definition developed by the International Electrotechnical Commis sion IEC Technical Committee 57 It is an outline for the structure of a protocol and can only be im plemented with a companion standard profile to specify options such as one of five link layer formats ME RTU IEC 60870 5 101 104 implementation features 6 Supports unbalanced link layer configuration using one address fields 6 Clock
80. RTU IP address RemotePortNo WORD Signed ME RTU port number refer to General ME RTU settings EnableConnection BIT Signal whether to open or close the Socket communication connection EnableSend BIT Start the data send receive operation on the rising edge of this signal WORD Unsigned SendData Bit String 16 bit Specify the Head address of the memory area storing the send data FromTo B T OFF FALSE TO send data ON TRUE FROM receive data operation Type 16b32b Data type OFF FALSE 16 bit data NoOfData unit is WORD ON TRUE 32 bit data NoOfData unit is DVVORD NoOfData WORD Signed Number of WORDs sent requested if Type_16b32b FALSE max value 512 DWORDs sent requested if Type 16b32b TRUE max value 256 BFM_addr WORD Signed ME RTU Buffered Memory head address Flags WORD Signed Set data flags 16 abcd If 16 ab 16 00 don t set flags If 16 ab 16 01 set flags 16 cd flags values Input data values only ReceiveTimeout ME RTU response timeout timer Heartbeat Tab 8 3 ME RTU Remote Terminal Unit Heartbeat send period max 60 seconds L QnUDE PLC Socket TCP communication function block inputs L QnUDE series PLC data exchange Output variables Signal Type PLC Data Exchange Description OpenComplete B T Signals the Socket communication connection open status
81. Status Server Certificate Send Certificate Loaded Certificate Info image059 Fig 11 28 Web User Interface OpenVPN server certificate MITSUBISHI ELECTRIC Settings and Diagnostics Settings parameters 11 4 Settings parameters The follovving chapters describe ME RTU settings their input values and default values 11 4 1 General settings Settings Subsection Setting name Description Details Default value Slave only operating mode DNP3 and ME RTU Operating IEC 60870 5 slave 0 Slave Only Mode protocols or 1 Master and Slave IEC 60870 4 104 master and slave protocol 0 Slave Only Operating Mode 15t Sector Reserved for Reserve first sector for 0 User for IED 0 User for IED PLC Master and Slave PLC write access to operating mode only Input Data BFM area 1 Reserved Communication vvith FX series PLC via PLC type FX Bus or Q L series PLC via Ethernet IP TCP or UDP PLC communication transport layer 0 UDP protocol if Q L series 1 TCP PLC is selected Porton ME RTU for PLC Port number communication if Q L ntegerfrom1 to 65535 9734 series PLC is selected 0 FX series 0 FX series 1 Q L series IP Protocol RTU Module General Settings Communication port DNP3 to SCADA system 1 IEC 60870 5 Protocol Connection path to 0 Ethernet communication path SCADA system 1 Serial Used protocol 0 DNP3 0
82. VOUNCING 44 obada ba a layi 3 1 22 lnstallatton lOCAtlOMN sossar ennen aaa zay bats 3 2 4 VViring 4 1 Power supply wiring a yay lan 4 1 4 2 E H EUVATNSL aa la aba aylara la b NAR 4 2 4 3 Module digital input and output vviring 4 3 43 s 4 4 45 External MeMO eae tin case da RI a awed 4 4 AO Anea H i O aa 4 5 4 7 SIM card and SD card insertion 4 6 5 Features 5 1 COMMUNICATION feat fes aa d 5 1 52 Fueonallb OVEIVICW es iaeiae ba s RA Da Aa 5 2 5 2 1 PLC communication via FX BuS 5 3 5 2 2 Q and L series COMMUNICATION 5 3 5 2 3 Communication with remote controlling station via cellular netvvork 5 4 5 24 Communication with remote controlling station via Ethernet 5 4 5 2 5 Communication with remote controlling station via radio modem 5 5 5 2 6 integratec VV D SCIVER zs vn a a Mia ada Nae T 5 5 ME RTU Remote Terminal Unit V Contents 6 System Configuration 6 1 Applicable sap na 0500057707 LI 7E7 EEE EE REEE 6 1 6 1 1 Applicable PEC YPES ya aba eae 6 1 6 1 2 Applicable softvvare packages
83. ags for multiple data points simultaneously with data values This option can only be used for input data when writing to input data value BFM ar ea The exception is the address BFM 1024 if user wishes to write to this address the Flags and data values for this or any following BFM will not be set Flags can also be set by writing directly to telemetry protocols Flags BFM area Exception is the BFM area ranging from BFM 1536 to BFM 1543 In cases where DNP3 protocol is used and user wants to set the Flags for output data the Flags can only be set by writing directly to output data flags BFM area Excep tion is the BFM ranging from BFM 16896 to BFM 16903 where PLC is blocked from writing the flags Exchanging data with ME RTU When requesting data from ME RTU FROM or DFROM operation the ME RTU may need some time to respond Maximum time to wait for response is defined by ReceiveResponse function block input The request sent from PLC is numbered by sequence number Send D function block output The response from ME RTU is considered valid when Received_ID matches Send_ID If ReceiveResponse timer expires before valid response is received the ReceiveTimeoutError bit is set for one PLC pro gram cycle Only one request at the time can be processed This means that after sending one request the func tion block is blocked from sending second request until the response to first request has been recei ved signalled by ReceiveComp
84. alize error type see Table 11 13 SW ERR COM ERR GSM ERR GC LED no 6 LED no 7 LED no 8 LED no 9 Description Phase no OFF ON ON OFF Installing U Boot Mounting eMMC partition 1 ON OFF OFF OFF Copying kernel image Unmounting eMMC partition 1 Mounting eMMC partition 2 OFF ON ON ON ON OFF OFF ON ON OFF ON OFF Copying Root File System ON ON OFF ON Updating etc fstab ON ON ON Updating etc rc local ON OFF ON ON Updating etc network ON ON ON interfaces OFF OFF Copying settings xml Tab 11 13 Updating firmware from SD card LED phases Restore factory default settings To restore FACTORY DEFAULT SETTINGS ONLY only settings file is restored from SD card DIP switches SD BOOT 1 and DFLT 2 must be switched on SD card must also be inserted To restore on factory default settings the DIP switch DFLT 2 must be switched ON and OFF twice in 5 second intervals If restore to factory default settings procedure is initiated then USER LED third LED start to blink Once writing factory default settings is completed LEDs HW ERR and SW ERR LEDs 5 and 6 start to blink and ME RTU enters re boot phase Once ME RTU is re booted the restore to factory default settings is completed CAUTION If ME RTU is connected to FX series PLC via FX Bus it is recommended to perform the power down up of the PLC ME RTU Remote Terminal Unit 11 27 DIP swit
85. amming PLCs The ME RTU is used to connect the FX3 Q and L family of programing PLCs to a DNP3 or IEC 60870 5 101 104 network Main hardware features are Micro SD card socket SIM card socket Ethernet port 10 100 USB host port GSM GPRS EDGE Quad Band 850 900 1800 1900 MHz Integration with Mitsubishi Electric FX Bus bus variant 2 digital inputs 24 V DC IEC 61131 Type 3 2 digital outputs 24 V DC 100 mA 1 1 Outline A GSM GPRS EDGE Private VPN Internet Private VPN Data server SCADA System RF Radio backup image002 Fig 1 1 Basic netvvork configuration ME RTU Remote Terminal Unit 1 1 Outline Overvievv Fig 1 2 ME RTU vvith top cover attached symbolic picture image006 Fig 1 3 ME RTU vvith top cover removed symbolic picture image007 1 2 aa MITSUBISHI ELECTRIC Specifications External dimensions 2 Specifications Specification Operating 0 C to 55 C temperature 32 F to 131 F 40 C to 85 C 40 F to 185 F Ambient temperature Storage temperature General specification Dielectric withstand voltage between 24 V power and digital circuit 500 V DC 300 V AC for one minute Insulation resistance between digital circuit and earth terminal IP protection IP20 24V DC 20 10 ripple p p less than 5 5 MQ or more by 500 V DC Power supply Power supply specification Current typical 200 mA consumpt
86. ass and enable disable unsolicited response Supports qualifier codes for start stop range 0 x 00 0 x 01 all points 0 x 06 limited quantity 0 x 07 0 x 08 indexed 0 x 17 0 x 28 and free format 0 x 1B Large response messages can consist of multiple data link frames and multiple application layer fragments ME RTU Remote Terminal Unit 9 1 DNP3 configuration settings DNP3 Functionality 9 2 DNP3 configuration settings Parameter Name Description Port number TCP port number when communication via TCP IP Link layer address Device link layer address Enable Unsolicited Messages Enable unsolicited messages to master station Unsolicited confirm timeout Unsolicited messages response timeout from master station Source address ME RTU address Destination address Control station address Delete oldest event Tab 9 1 DNP3 settings If events buffer is full replace oldest event with newly generated event 9 3 DNP3 supported data types The ME RTU DNP3 protocol implementation supports the following data types 6 Digital inputs and outputs 6 Double digital inputs 6 16 and 32 bit counters 6 16 bit 32 bit and short floating point analog inputs and outputs All communications between the DNP master and the PLC takes place through these data types ME RTU implementation of DNP3 also supports generating events and sending events unsolicited mas sages The events are ge
87. ate of this point may not be correct The 0 offline ONLINE binary output point has been set successfully RESTART RES 1 restart The field device that originated the data object has been restarted This device 0 normal may be the device reporting this data object 1 lost The device reporting this data object has lost communication with the COMM LOST CER 0 normal Originator of the data object REMOTE 1 remote The state of the binary object has been forced to its current state at the REM FORCED 0 normal Originating device LOCAL 1 local state or tne binary obyect Nas been Torced to Its Current state at tne device reporting FORCED LOC The state oftheb bject has been forced to it tstate atthed t 1 over OVER RANGE OVR 0 The digitized signal or calculation is greater than the type specified norma REFERENCE REC 1 reference ch The reference signal used to digitize the signal is not stable and the resulting CHECK 0 normal digitized value may not be correct Tab 9 16 DNP3 Analog outputs supported flags b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi 5 PLC Data address REC OVR REM CER RES ONL REC OVR REM CER RES ONL dec perm type 21504 AO1 flag AOO flag R VV VVORD 21504 AO3 flag AO2 flag R VV VVORD H R W WORD 21759 AO511 flag AO510 flag R W WORD Tab 9 17 DNP3 16 bit Analog Outputs flags BFM mapping MITSUBISHI ELECTRIC DNP3 Functionality BFM add
88. ation existence check WORD LocalPortNo Signed Local port number from 1025 to 5548 or 5552 to 65534 DWORD Unsigned RemotelPAddress Bit String 32 bit ME RTU IP address RemotePortNo Word Signed ME RTU port number refer to General ME RTU settings EnableConnection BIT Open the Ethernet communication connection EnableSend BIT Start the send request data operation WORD Unsigned SendData Bit String 16 bit Specify the Head address of the memory area storing the send data NoOfData WORD Signed Number of WORDs sent requested if Type_16b32b FALSE max value 512 DWORDs sent requested if Type 16b32b TRUE max value 256 BFM_addr WORD Signed ME RTU Buffered Memory head address Type 16b32b BIT Data type FALSE 16 bit data NoOfData unit is WORD TRUE 32 bit data NoOfData unit is DWORD FromTo Select operation type FALSE Request data TRUE Send data Flags WORD Signed Set data flags 16 abcd If 16 ab 16 00 don t set flags If 16 ab 16 01 set flags 16 cd flags values Input data values only ReceiveTimeout ME RTU response timeout timer Heartbeat Tab 8 7 ME RTU Remote Terminal Unit Heartbeat send period max 60 seconds Q PLC before 5 11012 Fixed Buffer TCP communication function block inputs Q series before SN11012 PLC data exchange Output variables Si
89. ation with extension cable keep necessary spaces between ME RTU and other equipment or enclosure walls on all sides of ME RTU Configuration Configuration without extension with extension FX3U series base unit FX3U series base unit Extension FX3u 4AD ADP cable 65 Input FXon 30EC output extension unit ES UL Other device 100mm ne image011 image012 image012 1 Fig 3 2 Installation spacing NOTE When used with Q or L series PLC use cable tie to affix the FX Bus cable firmly to ME RTU housing if bus ME RTU variant of the unit is used However it is strongly recommended to use a non bus ME RTU in conjunction with Q or L series PLCs 3 2 aa MITSUBISHI ELECTRIC Installation With QCPU and LCPU connectivity QCPU with built in QCPU QJ71E71 Ethernet port L L L L L L L L L L Ethernet svvitch Fig 3 3 Q L PLC Ethernet connectivity example Installation location LCPU with built in Ethernet port image013 NOTE Direct point to point connection between ME RTU and Q L series PLC is also possible Auto MDI MDIX is supported ME RTU Remote Terminal Unit Installation location Installation MITSUBISHI ELECTRIC VViring Power supply wiring 4 Wiring This chapter describes the wiring of power supply and grounding cables Ethernet module I Os USB and antenna SIM card and micro SD card insertion is also described 4 1 Power supply wi
90. available in SNMP clients may be used to discover each ME RTU After network set tings change ME RTU should be restarted by power OFF ON DHCP Enable 9 Disable IP address 192 166 0 10 Network mask 255 255 2550 I Gateway address 192 168 0 1 DNS1 address 0000 8 DNS2 address 0 000 Save image047 a Fig 11 15 Web User Interface Local Network settings MITSUBISHI ELECTRIC Settings and Diagnostics Configuring ME RTU via integrated vveb server NAT Settings NAT Netvvork Address Translation is a netvvork protocol that allovvs multiple devices to connect to a public network using the same address NAT translates traffic from one IP and port number to another To access NAT settings click Edit NAT settings figure 11 16 in Netvvork tab Edit NAT settings image048 Fig 11 16 Web User Interface open NAT Settings A new page is loaded figure 11 17 Here transmission protocol Type is selected TCP or UDP a con nection Inbound port number which is then translated to Destination IP address and Destination port number The Enable tick allows the translation to be active or disabled without losing previous parameters Network Address Translation and Port Forwarding No Type Inboun Destination IP Destination port Enable 577 epi ea 768 m a EE90 2 epi US GQ BB En 5os brb sX HHN3 7 K En U ERES8 GU B
91. be properly config ured Static IP and subnet mask must be set IP address is set to 192 168 0 11 default ME RTU IP ad dress is 192 168 0 10 and subnet mask must be set to 255 255 255 0 Computer s network adapter configuration Network configuration can be accessed via Control panel In control panel Network and Sharing Center is selected E Action Center He Backup and Restore E Color Management 29 Date and Time g h Device Manager E DivX Control Panel mn Fonts goa Indexing Options 5 lava Mail Notification Area Icons VE Phone and Modem En Program Updates Region and Lanquaqe Fu Run Advertised Programs Sync Center B TOSH BA HDD Protection Windows CardSpace H Windows Mobility Center File Edit View Tools Help Adjust your computer s settings 2 irs r Control Panel All Control Panel Items t q Administrative Tools 207 BitLocker Drive Encryption Configuration Manager Prd Default Programs dh Devices and Printers Ease of Access Center Getting Started Intel R GMA Driver for Mobile 22 Keyboard F Mouse MB Performance Information and Tools b Power Options fa Programs and Features B Remote Control q Sound 184 System b si Troubleshooting il Windows Defender fy Windows Update View by Small icons Eg AutoPlay Bluetooth Local COM Credential Manager Pal Desktop Gadgets E Display Folder Options 44 HomeGroup
92. be set to 0 by PLC program The IV flag is set automatically to value 0 when data values is written Value is automatically set to 1 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC 10 4 4 Analog inputs The Quality Descriptors are mapped to the Analog Inputs flags BFM section Status Short form Value Description 1 overflow i iacti OVERFLOW OV The value of the information obiect is beyond a 0 normal predefined range of value 1 blocked This means that the value of the point is as it was prior to being blocked Blocking prevents updating of the value of the point BLOCKED 0 normal 1 substituted This is where a value has been substituted or forced by manual entry or otherwise It means that the value is not derived from the normal measurement SUBSTITUDED 0 normal 1 not topical This means that the value was not updated successfully at 0 normal last time it was due to be updated NOT TOPICAL 1 invalid This indicates that the value cannot be used because it INVALID i may be incorrect due to a fault or other abnormal 0 valid condition Tab 10 9 IEC 60870 5 Analog inputs supported Quality Descriptors 10 6 aa MITSUBISHI ELECTRIC IEC 60870 5 101 104 Functionality IEC 60870 5 101 104 flags BFM mapping 16 bit Analog Inputs are mapped as scaled measured value The Quality Descriptors are mapped to
93. ce number error Tab 7 14 Protocols error numbers description Module version number BFM address 39 Shows the ME RTU Module Version which is used to identify the supported functionalities ME RTU Remote Terminal Unit 7 9 Assignment of buffer memory Functions and Buffer Memory Internal database configuration BFM addresses from 40 to 501 On these BFM locations the actual ME RTU internal database configuration is allocated BFM address Name Description 40 Number of Binary Inputs The actual number of Binary Inputs 41 Number of Double Binary Inputs The actual number of Double Binary Inputs 42 Number of 16 bit Counters The actual number of 16 bit Counters 43 Number of 32 bit Counters The actual number of 32 bit Counters 44 Number of 16 bit Analog The actual number of 16 bit Analog Inputs Inputs Number of 32 bit Analog Inputs Number of Short float Analog Inputs 45 The actual number of 32 bit Analog Inputs 46 The actual number of Short float Analog Inputs 47 Number of Binary Output Number of 16 bit Analog Outputs Number of 32 bit Analog Outputs The actual number of Binary Output 48 The actual number of 16 bit Analog Outputs 49 The actual number of 32 bit Analog Outputs Number of Short float Analog 29 Outputs The actual number of Short float Analog Outputs Tab 7 15 ME RTU RTC allocation
94. ce signal BFM address 23 The current free size of BFM Buffer is displayed at this location The maximum size of BFM Buffer is 4000 Words This BFM is only accessible by FX3 PLC via FX Bus The value of this BFM is not available to BFM Debug Web page and 5 5 PLC Q L PLC heartbeat BFM address 24 To this BFM location an incrementing value from 1 to 10000 is written by Q L PLC periodically with pe riod configured in function block If the value is not incremented within 60 seconds the PLC Ethernet communication status bit b0 in Table 7 14 is cleared ME RTU Remote Terminal Unit 7 7 Assignment of buffer memory Error Status BFM address 291 Functions and Buffer Memory The Error statuses are allocated as follovvs Name Description General error If this bit is set then a serious error is present one bit is setfrom b1 to b7 b1 Ethernet error If this bit is set then an Ethernet error is present on the ME RTU and for more information the ME RTU should be checked b2 GSM error If this bit is set then a GSM error e g no connection is present on the ME RTU and for more information the ME RTU should be checked b3 Reserved b4 Reserved b5 DNP3 error If this bit is set an error occurred on the DNP3 communication system A detailed description can be found in the DNP3 Error Status register b6 IEC 60870 5 101 error If this bit is set an error occu
95. ch settings Settings and Diagnostics 11 28 aa MITSUBISHI ELECTRIC IT Functionality 12 12 1 12 1 1 VPN services IT Functionality The ME RTU supports many basic and advanced T services VPN services For VPN services the last stable version 2 2 2 of OpenVPN is used http openvpn net The Open VPN features 6 tunnel any P sub network or virtual Ethernet adapter over a single UDP or TCP port 6 configure a scalable load balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients use all of the encryption authentication and certification features of the OpenSSL library to protect your private network traffic as it transits the internet use any cipher key size or HMAC digest for datagram integrity checking supported by the OpenSSL library choose between static key based conventional encryption or certificate based public key encryption use Static pre shared keys or TLS based dynamic key exchange use real time adaptive link compression and traffic shaping to manage link bandwidth utilization tunnel networks whose public endpoints are dynamic such as DHCP or dial in clients tunnel networks through connection oriented stateful firewalls without having to use explicit firewall rules tunnel networks over NAT create secure Ethernet bridges using virtual tap devices Installing OpenVPN server on Windows host Download and
96. configuration upload download For SCADA applications running in Windows environment a command line program RTUSCP exe is available for uploading and downloading xml configuration file from to ME RTU To upload configuration file from SCADA to ME RTU use the following command syntax rtuscp pw lt password gt lt path_to_settings_file gt rtuadmin lt ME RTU_IPaddress gt with the following parameters lt password gt password for command line access The default value is rtuadmin To change the password use the Web user interface xpath to settings the valid xml file containing ME RTU configuration lt ME RTU_ Paddress gt ME RTU IP address The following command will upload settings xml file containing ME RTU configuration to the ME RTU with IP address 192 168 0 10 and command line access password rtuadmin rtuscp pw rtuadmin settings xml rtuadmin 192 168 0 10 A To download configuration file from ME RTU to SCADA PC use the following command syntax rtuscp pw lt password gt rtuadmin lt ME RTU_IPaddress gt lt target gt with the following parameters lt password gt password for command line access The default value is rtuadmin To change the password use the Web user interface lt ME RTU_ Paddress gt ME RTU IP address lt target gt path to the location on SCADA to which the settings xml will be downloaded The following command will download settings xml file to
97. connection RJ45 type modular connector is used The pin configuration of RJ45 connec tor is shown in the following Table 4 1 The ME RTU supports crossover detection for point to point connection The ME RTU uses 10BASE T and 100BASE T Ethernet connection For Ethernet connec tion category 5 cable Cat5 must be used The maximum length of a cable segment is 100 m Signal Direction Contents TD Out side of sending data TD side of sending data RD side of receiving data Not used Not used RD side of receiving data Not used Not used Tab 4 1 RJ45 pinout CAUTION Fix the Ethernet cable so that the connector is not directly stressed 4 2 aa MITSUBISHI ELECTRIC VViring 4 3 Module digital input and output wiring Module digital input and output wiring ME RTU uses positive logic for digital I Os sinking input and sourcing output The example for mod ule digital I O wiring is shown on Fig 4 3 The inputs and outputs are galvanically isolated inside ME RTU There is no internal power supply connection for digital I Os The power supply must be con nected to 24V and GND terminal on I Os connector For module digital input the positive supply is wired to DIO or DI1 terminal via switch or relay and negative supply terminal is wired to the ground For module digital output the positive supply terminal is wired to 24V One load terminal is wired to module
98. ctor Module I Os ME RTU Remote Terminal Unit Top cover print 15t group of status LEDs POWER LED USB Host Type A 2 group of status LEDs Top case print top cover removed 2 Top case print top cover removed Terminal block for power supply 24 V DC Antenna SMA connector Module I Os SIM card slot Housing Printings Micro SD card slot USB host Type A SIM card slot image070 MITSUBISHI ELECTRIC Index Index A Analog 7 17 Analog outputs 7 18 B BINARY COUNTCIS 7 16 BIN aby TDU S lv a 7 14 Buffer memory Pror Stat US a A a Ai 7 8 IEC 60870 5 Error code 7 9 FED StatUS a OA 7 5 ME RTU real time clock 7 7 seas has Orta ne a cee awe 7 2 PLC real time clock 7 6 O LPLC heartbeat 32414 a s bi 7 7 WIS OF ARCA a a D d 7 2 C Cellular network 5 4 D Data retenhionen a a eh eae 7 21 Dale 7 1 11 12 Digital input values 7 6 Distributed Netvvork Protocol 9 1 DNP3 Device profile s a r 13 1 uz a zaba m n 9 1 Double binary inputs 7 15 E ETOTLS US
99. d data ID Must equal Send_ID Send ID WORD Signed ID of request Increments with every sent request for data ReceiveTimeoutError Tab 8 2 BIT Signals if ReceiveTimeout expired before receiving data This can be interpreted as lag in network slow response from ME RTU or loss of communication link L QnUDE PLC Socket UDP communication function block outputs MITSUBISHI ELECTRIC PLC Data Exchange L QnUDE series PLC data exchange 8 2 2 TCP communication For TCP all operations are joined in single function block LQnUDEMeRtu TepSR16b32b 1 LQnUDEMeRtuTcpSR16b32b ConnectionNo LocalPortNo RemotelPAddress RemotePortNo EnableConnection EnableSend SendData FromTo Type_16b32b NoOfData BFM_addr Flags ReceiveTimeout Heartbeat Fig 8 4 Input variables Signal Type OpenComplete ReceiveComplete SendComplete ReceivedData LinkError OpenError ReceiveError sendError OpenErrorCode sendErrorCode ReceiveErrorCode Received ID Send D Receive TimeoutError TTT T T T T image031 Function block for L QnUDE PLC Socket TCP communication Description ConnectionNo WORD Signed Specify the Socket communication connection number to be used from 1 to 16 LocalPortNo WORD Signed Local port number from 1 to 4999 or 5010 to 65534 DWORD Unsigned RemotelPAddress Bit String 32 bit ME
100. d value short floating point value with time tag lt 15 gt Integrated totals lt 16 gt Integrated totals with time tag lt 17 gt Event of protection equipment with time tag lt 18 gt Packed start events of protection equipment with time tag lt 19 gt Packed output circuit information of protection equipment with time tag lt 20 gt Packed single point information with status change detection lt 21 gt Measured value normalized value without quality descriptor lt 30 gt Single point information with time tag CP56Time2a lt 31 gt Double point information with time tag CP56Time2a lt 32 gt Step position information with time tag CP56Time2a lt 33 gt Bitstring of 32 bit with time tag CP56Time2a lt 34 gt Measured value normalized value with time tag CP56Time2a lt 35 gt Measured value scaled value with time tag CP56Time2a lt 36 gt Measured value short floating point value with time tag CP56Time2a lt 37 gt Integrated totals with time tag CP56Time2a lt 38 gt Event of protection equipment with time tag CP56Time2a M_BO_NA_1 M_BO_TA_1 M_ME_NA_1 M_ME_TA_1 1 M 1 M 1 M ME 1 1 1 M 1 M EP 1 1 1 1 M SP 1 M 1 1 M BO 1 M 1 M 1 M ME 1 1 M EP 1 lt
101. defined time Once the openVPN service detects the loss of connection to openVPN server the closed VPN tunnel will be reported 11 24 MITSUBISHI ELECTRIC Settings and Diagnostics 11 5 Basic operation and indication Basic operation and indication The basic status of the ME RTU is visible on the front LEDs There are 17 LEDs located at the front of the ME RTU expansion module divided into two groups The Power LED indicates if the module is con nected to the power supply This will be hardware controlled The first group of LEDs indicates the status of the ME RTU LED name LED color LED off LED flashing LED on RUN Green Module operations are not running Module operations are running BOOT Green Module is off Booting is in progress Boot is done USER Green User defined User defined User defined FXBUS Green Q L series is selected as connected PLC type FX3 series is selected as connected PLC type HW ERR Red Hardware of module is OK Internal error on hardware SW ERR Red No Error Internal error on software COM ERR Red No Error An error occurred on communication GSM ERR Tab 11 10 Flags of the ME RTU Red No Error The second group of LEDs indicates the status of the connections LED name LED color LED OFF LED flashing An error occurred on GSM communication
102. digital output terminal and the other is wired to module negative supply terminal T250 mA 250 V 24V 18 V 33 V Switch 1 External T250 mA 250 V fuse must be used if module I Os power supply is supplied from unprotected power source such as battery or accumulator image018 Fig 4 3 Input and output wiring example CAUTION 6 Connecting cables for module I Os power supply module digital inputs and module digital outputs must be shorter than 3 metres 9 8 Fix the connecting cables so that the connector is not directly stressed ME RTU Remote Terminal Unit 4 3 USB vviring VViring 4 4 USB vviring The serial communication can be used for radio backup connection For serial communication USB port is used Thus it is possible to access certain serial interfaces vvith standard USB converter The ex ternal USB cable maximum length is 3 m 9 8 CAUTION Fix the USB cable so that the connector is not subjected to any mechanical stresses These could lead to long term damage and communication failure Recommended USB to serial converter ATEN USB to Serial Converter Model UC 232A NOTE There is no guarantee that other USB to serial converters will function 4 5 External memory ME RTU uses micro SD or SDHC card for external memory The max capacity is 32 GB Recommended micro SD card Panasonic RP SMKC04 micro SD card 4 4 MITSUBISHI ELECTRIC VViring 4 6 Antenna wiring Ante
103. direction and B if used in both directions X global group 1 group 7 group 13 group 2 group 8 group 14 group 3 group 9 group 15 group 4 group 10 group 16 gen OQIIp Clock synchronization station specific parameter mark X if function is only used in the standard direction Rif only used in the reverse direction and B if used in both directions X Clock Day of week used RES1 GEN time tag substituted not substituted used SU bit Summertime used Optional see 7 6 Command transmission station specific parameter mark X if function is only used in the standard direction R if only used in the reverse direction and B if used in both directions X Direct command transmission X Direct set point command transmission Select and execute command Select and execute set point command C_SE ACTTERM used X No additional definition Short pulse duration duration determined by a system parameter in the outstation Long pulse duration duration determined by a system parameter in the outstation X Persistent output B 14 aa MITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile Basic application functions i Supervision of maximum delay in command direction of commands and set point commands Maximum a
104. e ASDUs of the set lt 45 gt lt 51 gt or of the set lt 58 gt lt 64 gt are used System information in monitor direction C 5 1 1 1 5 1 5 1 5 1 1 C SC 1 DC_TA_1 1 5 1 C 5 1 C SE 1 1 station specific parameter mark with an Xif it is only used in the standard direction Rif only used in the reverse direction and B if used in both directions x lt 70 gt End of initialization ME RTU Remote Terminal Unit M_EI_NA_1 Application layer System information in control direction IEC 60870 5 101 104 Device Profile station specific parameter mark each Type ID X if it is only used in the standard direction R if only used in the reverse direction and B if used in both directions X lt 100 gt Interrogation command X lt 101 gt Counter interrogation command X lt 102 gt Read command lt 103 gt Clock synchronization command option see 7 6 lt 104 gt Test command lt 105 gt Reset process command lt 106 gt Delay acquisition command E E lt 107 gt Test command with time tag CP56time2a Parameter in control direction C_IC_NA_1 C_CI_NA_1 C_RD_NA_1 C_CS_NA_1 C_TS_NA_1 C_RP_NA_1 1 ISTA 1 station specific parameter mark each Type ID X if
105. e Bit Input 06 no range or all 129 response 17 28 index default Change with Time 07 08 limited qty 130 unsol resp Double Bit Input 4 3 Change with 1 read Relative Time 06 no range or all 129 response 07 08 limited qty 130 unsol resp 17 28 index 00 01 start stop Binary Output 1 read 06 no range or all 10 Any Variation 22 assign class 07 08 limited qty 17 27 28 index 00 01 start stop 1 read oeno TNIE Oran 129 response 7 10 1 Binary Output 07 08 limited qty 17 28 index 17 27 28 index i 1 read 00 01 start stop 00 01 start stop 2 Binary Output 06 no range or all 00 01 start stop 19 default Status mea 07 08 limited qty 17 28 index 17 27 28 index 00 01 start stop 06 no range or all 12 0 ic 22 assign class I i Output Block 07 08 limited qty 17 27 28 index 3 select Control Relay 4 7 12 1 Output Block p 17 28 index 129 response echo of request 5 direct op 6 dir op noack ME RTU Remote Terminal Unit A 5 DNP V3 0 implementation table DNP V3 0 Device Profile OBJECT REQUEST RESPONSE Library will parse Library will respond with Ries Variation Hacchiption Function Codes Qualifier Function Qualifier ber Number dec Codes hex Codes dec Codes hex 3 select Pattern Control 4 operate
106. e TO instructions to write DWORD 32 bit values 6 Toidentify the BFM areas to which this rule applies refer to Table 7 18 and Table 7 19 DINT and REAL data types This rule does not apply to data flags ME RTU Remote Terminal Unit 6 1 User functionality tests System Configuration 6 2 User functionality tests The follovving tests define the minimal test procedures to define if the module is vvorking normally 6 2 1 Normal operation atfirst povver on Operation Expected results Insert a SIM card Connect Ethernet cable to the ME RTU and computer EthernetLEDs should turn ON atthe Ethernet connector BOOT LED is blinking until the module initializes Turn the power on up to 30 seconds then the BOOT LED turns ON and then then the RUN LED must turn ON Ping the ME RTU on the default IP address ME RTU must reply Enter the ME RTU default IP address into the web browser An web page should be loaded Configure network related settings and connect the GSM antenna The GSM LED should be ON Write from PLC allowed Bit b1 in is set end of boot procedure Tab 6 2 User testing steps 6 2 aa MITSUBISHI ELECTRIC Functions and Buffer Memory Data storage and flovv 7 7 1 7 2 Functions and Buffer Memory The following sections describe the data storage and direction of data flow the supported data types The assignment of Buffer Memory hereafter known as BFM is expla
107. e a SIM card slot the SIM card needs to be pushed inside about 2 mm from the top case edge A light click sound indicates that SIM card has properly locked Retrieve slowly to prevent unex pected kickback if SIM card hasn t locked properly It is recommended to use flat edged 0 75 mm 0 03 wide non conducting plastic or wooden tool to ease the insertion of SIM card Micro SD card slot accepts micro SD card with external dimensions Lx W x H 15 x 11x 1 mm For the insertion of micro SD card consider the SIM card insertion directions wherein the micro SD card s cut away edge is facing downwards towards the bottom of the micro SD card slot see Fig 4 4 image019 Fig 4 4 SIM card and micro SD card insertion MITSUBISHI ELECTRIC Features Communication features 5 5 1 Features The follovving features are supported in the ME RTU Functionality DNP3 connectivity DNP3 slave Level 2 Ethernet Serial via USB to RS232 converter IEC 60870 5 101 104 connectivity IEC 60870 5 101 104 slave support PLC Q L series connectivity L series and Q after SN11012 Socket communication Q before SN11012 Fixed Buffer communication Time synchronization User defines where the time synchronization should be made from Options are PLC SNTP servers DNP3 or IEC 60870 Master Controlling Stations Integrated I Os 2 module digital inputs and 2 module digital outputs used as an expansion f
108. e size of events buffer is protocol dependant refer to Table 11 1 Binary Input Events Enable Disable 10000 Double Binary Input Events 6 Enable Disable 10000 16 bit Binary Counter Events Enable Disable 5000 32 bit Binary Counter Events 9 Enable Disable 5000 16 bit Analog Input Events Enable Disable 10000 32 bit Analog Input Events Enable Disable 40000 Short floating point Analog Input Events Enable Disable 40000 xe image052 Fig 11 21 Web User Interface Data Events settings Telemetry protocol events buffer maximum value DNP3 IEC 60870 5 101 104 BI 65000 65000 DBI 65000 65000 16 bit Counter Sum of 16 bit Counters Not supported 32 bit Counter and 32 bit Counters lt 65000 65000 Data type 16 bit Al 65000 Sum of 16 bit Al 32 bit 7 Al and Short Floating Point Al 65000 57 SFP Al 65000 Tab 11 1 Data Events buffer maximum values 11 3 6 DNP3 settings In this section DNP3 protocol is configured Port number 0000 Enable Unsolicited Messages Enable Disable Unsolicited Confirm Timeout so00 Link Status Period 0000 Enable Self Address Enable 9 Disable Validate Source Address Enable Disable Source Address Eee Destination Address w 27 Delete Oldest Event Enable 9 Disable Select Timeout 0000 Save image053 Fig
109. e telemetry protocols DNP3 or IEC 60870 5101 104 The BFM shovvs only static current data Supported basic process data types The process data types vvhich are supported in the ME RTU and applicable FX3 PLC access functions are shown in following table Description FX3 PLC access instructions Boolean value TO FROM DTO DFROM 16 bit packed binary TO FROM Signed integer TO FROM Signed double integer DTO DFROM Short floating point DTO DFROM Tab 7 1 Supported data types ME RTU Remote Terminal Unit 7 1 Assignment of buffer memory Functions and Buffer Memory 7 3 7 3 1 Assignment of buffer memory Data transmission and reception between the PLC and the ME RTU is performed via the BFM If the ME RTU is used in combination with a FX3 series PLC then the reading writing of data must be per formed by FROM TO instructions DFROM DTO for certain data types see Table 7 1 Otherwise if the ME RTU is used in combination with a Q L PLC series then the reading writing of data is per formed via the Ethernet Socket or Fixed Buffer Communication BFM user area The BFM user area contains 31744 words of data which is used to exchange the data from to the used PLC In general the BFM user area is divided into two parts ME RTU configuration and statuses which is used to map statuses and configuration parameters 6 Protocol data which is used to map the data to the telemetry communication protocols
110. e values are vvritten by the ME RTU BFM address Name Description RTU RTC Year The RTC year value which isin range from 0 to 99 and is located on the lower 0 to 99 lovver tvvo digits tvvo digits lovver byte 14 15 RTU RTC Month 1 to 12 The RTC month value vvhich is in range from 1 to 12 16 RTU RTC Day 1 to 31 The RTC day value vvhich is in range from 1 to 31 17 RTU RTC Hour 0 to 23 The RTC hour value vvhich is in range from 0 to 23 18 RTU RTC Minute 0 to 59 The RTC minute value vvhich is in range from 0 to 59 19 RTU RTC Second 0 to 59 The RTC second value vvhich is in range from 0 to 59 The RTC day of vveak value vvhich can consist the follovving values 0 Sunday 1 Monday 2 Tuesday 3 Wednesday 4 Thursday 5 Friday 6 Saturday RTU RTC Day of week 0 Sunday to 6 Saturday Tab 7 10 ME RTU RTC allocation Busy signal BFM address 22 BFM Buffer size may fill up after fast multiple successive requests by the FX3 PLC TO DTO are sent to ME RTU via FX Bus The Buffer frees up as the requests are being processed If the size of BFM Buffer drops under 100 WORDs the status bit is set as follows Name Description If this bit is set then a BFM Buffer has less than 100 WORDs free Stop sending request until Buffer is freed b0 BFM Buffer full status b1tob15 Reserved Tab 7 11 BFM Buffer size status BFM Buffer free spa
111. eb Phone 385 0 1 36 940 01 02 03 Fax 385 0 1 36 940 03 AutoCont C S S R O Kafkova 1853 3 CZ 702 00 Ostrava 2 Phone 420 595 691 150 Fax 420 595 691 199 Beijer Electronics A S Lykkegardsvej 17 DK 4000 Roskilde Phone 45 0 46 75 76 66 Fax 45 0 46 75 56 26 HANS F LSGAARD A S Theilgaards Torv 1 DK 4600 K ge Phone 45 4320 8600 Fax 45 4396 8855 Beijer Electronics Eesti OU Parnu mnt 160i EE 11317 Tallinn Phone 372 0 6 5181 40 Fax 372 0 6 5181 49 Beijer Electronics OY Vanha Nurmijarventie 62 FIN 01670 Vantaa Phone 358 0 207 463 500 Fax 358 0 207 463 501 PROVENDOR OY Teliinkatu 8 FIN 28130 Pori Phone 358 0 2 522 3300 Fax 358 0 2 522 3322 UTECO 5 Mavrogenous Str GR 18542 Piraeus Phone 30 0 211 1206 900 Fax 30 0 211 1206 999 MELTRADE Kft Fert utca 14 HU 1107 Budapest Phone 36 0 1 431 9726 Fax 36 0 1 431 9727 AUSTRIA BELARUS BELGIUM BELGIUM BULGARIA CROATIA CZECH REPUBLIC DENMARK DENMARK ESTONIA FINLAND FINLAND GREECE HUNGARY s MITSUBISHI ELECTRIC Beijer Electronics SIA LATVIA Ritausmas iela 23 LV 1058 Riga Phone 371 0 6 784 2280 Fax 371 0 6 784 2281 Beijer Electronics UAB Go taut g 3 LT 48324 Kaunas Phone 370 37 262707 Fax 370 37 455605 ALFATRADE Ltd 99 Paola Hill Malta Paola PLA 1702 Phone 356 0 21 697 816
112. ecify the maximum length of the APDU per system The maximum length of APDU for both directions is 253 It is a fixed system parameter m Maximum length of APDU per system in control direction ii Maximum length of APDU per system in monitor direction Selection of standard ASDUs Process information in monitor direction station specific parameter mark each Type ID X if it is only used in the standard direction R if only used in the reverse direction and B if used in both directions X lt 1 gt Single point information M_SP_NA_1 DE lt 2 gt Single point information with time tag M SP TA 1 x lt 3 gt Double point information 1 ii lt 4 gt Double point information with time tag M TA 1 X lt 5 gt Step position information M_ST_NA_1 lt 6 gt Step position information with time tag MSTTA1 ME RTU Remote Terminal Unit B 5 Application layer MHHH H H H H IEC 60870 5 101 104 Device Profile lt 7 gt Bitstring of 32 bit lt 8 gt Bitstring of 32 bit with time tag lt 9 gt Measured value normalized value lt 10 gt Measured value normalized value with time tag lt 11 gt Measured value scaled value lt 12 gt Measured value scaled value with time tag lt 13 gt Measured value short floating point value lt 14 gt Measure
113. ect all power supplies before performing installation and wiring work or opening any of the assemblies components and devices Assemblies components and devices must always be installed in a shockproof housing fitted with a proper cover and fuses or circuit breakers Devices with a permanent connection to the mains power supply must be integrated in the building installations with an all pole disconnection switch and a suitable fuse 6 Check power cables and lines connected to the equipment regularly for breaks and insulation damage If cable damage is found immediately disconnect the equipment and the cables from the power supply and replace the defective cabling Before using the equipment for the first time check that the power supply rating matches that of the local mains power You are responsible for taking the necessary precautions to ensure that programs interrupt ed by brownouts and power failures can be restarted properly and safely In particular you must ensure that dangerous conditions cannot occur under any circumstances even for brief periods EMERGENCY OFF must be switched forcibly if necessary EMERGENCY OFF facilities conforming to EN 60204 IEC 204 and VDE 0113 must remain fully operative at all times and in all control system operating modes The EMERGENCY OFF facility reset function must be designed so that it cannot ever cause an uncontrolled or undefined restart You must implement both hardware and soft
114. em into the appropriate physical analog outputs or PLC registers The mapping in the BFM area starts at the address 20992 At first all the data is mapped There are three types of analog inputs 16 bit analog outputs located in one BFM location one word and starts at the address 20992 May be read by PLC using FROM 16 bit instruction 32 bit analog outputs located in two BFM locations two words and starts at the address 22272 May be read by PLC using DFROM 32 bit instruction 6 Float analog outputs located in two BFM locations one word and starts at the address 23424 May be read by PLC using DFROM 32 bit instruction After the data values the flags of the signals are mapped The user writes the flags of the signal into the appropriate BFM flags bits for the specific signal Structure of the flags is protocol dependent For DNP3 flags mapping refer to section 9 4 6 Analog outputs Table 9 17 for 16 bit Table 9 19 for 32 bit and Table 9 21 Short Floating Point Analog Outputs 6 Not supported in IEC 60870 5 After the flags the actual values of signals are mapped The user writes the actual values of the signals into appropriate BFM locations Analog outputs actual values are protocol dependant For DNP3 mapping refer to section 9 4 6 Analog outputs Table 9 17 for 16 bit Table 9 19 for 32 bit and Table 9 21 for Short Floating Point Analog Outputs Actual Values Not supported in IEC 608760 5 BFM
115. er selects the PLC type which communicates with ME RTU Supported options are FX series which communicates via FX cable and Q L series which communicate via Ethernet If Q L series is se lected as connected PLC an IP Protocol and Port number become configurable If PLC type is changed ME RTU must be restarted by powering OFF and back ON after 5 seconds SCADA side protocol DNP3 or IEC 60870 5 is set including the protocol communication path Ether net or Serial For Ethernet protocol communication path the Ethernet port interface or mobile GPRS interface can be used depending on network configuration If Serial protocol communication path is selected communication takes place via USB host port PLC type FX series zi IP Protocol Port number 9734 Used protocol 1 60870 5 Protocol communication path Serial Save image042 Fig 11 9 Web User Interface general settings CAUTION If FX3 series PLC is connected to the ME RTU via FX Bus and even though Q L PLC type is selected the FX3 PLC can still communicate with ME RTU This may cause data collision when writing to the same ME RTU BFM address ME RTU Remote Terminal Unit 11 7 Configuring ME RTU via integrated vveb server Settings and Diagnostics 11 8 Serial Connection Settings Here serial connection is configured Serial connection settings become active if Protocol commu nication path is set to Serial see
116. erased partitions are creates and formatted U boot is installed the following are copied kernel image root file system kernel modules All pa rameters are restored to factory default settings To update ME RTU firmware follow these steps 1 Power OFF the ME RTU 2 Insert SD card which holds the Firmware image 3 Switch DIP switches SD BOOT 1 and SW 4 to ON 4 Power ON the ME RTU 5 Updating procedure do nothing After start up BOOT LED LED no 2 stops blinking and stays ON RUN BOOT FX BUS and PO LEDs LEDs no 1 2 4 and 11 turn ON After few seconds USER LED LED no 3 starts blinking LEDs SW ERR COM ERR GSM ERR and GC LEDs no 6 7 8 and 9 provide information about updating firmware phases as presented in Table 11 13 some steps may be undetectable due to their fast execution After firmware update finished successfully USER LED LED no 3 turns OFF FX BUS HW ERR SW ERR COM ERR GSM ERR and GC LEDs LEDs 4 5 6 7 8 and 9 start blinking a e MITSUBISHI ELECTRIC Settings and Diagnostics DIP switch settings 11 6 2 6 Power OFF the ME RTU 7 Switch DIP switches SD BOOT 1 and SW 4 to OFF Remove the SD card 9 Power ON the ME RTU Updating procedure may take up to 10 minutes to complete If there were errors during restoring of factory default setup the FX BUS LED LED no 4 is flashing and the SW ERR COM ERR GSM ERR and GC LEDs LEDs no 6 7 8 and 9 sign
117. erminal Unit A 1 DNP V3 0 Device Profile DNP V3 0 DEVICE PROFILE DOCUMENT Also see the DNP 3 0 Implementation Table in section A 1 beginning on page 13 4 Timeouts vvhile vvaiting for Data Link Confirm Complete Appl Fragment Application Confirm Complete Appl Response LJ LI None None None L1 Others Transmission Delay s Select Operate Arm Timeout configurable Need Time Interval 30 min Fixed at 2 s LI Variable Fixedat L Variable Fixedat10s Variable Fixed at LI Variable Unsolicited Notification Delay 5 s all classes Unsolicited Response Retry Delay 5 s Unsolicited Offline Interval 30 s Binary Change Event Scan Period Always Double Bit Change Event Scan Period Always Analog Change Event Scan Period Always Counter Change Event Scan Period Always Frozen Counter Change Event Scan Period Always Sends Executes Control Operations WRITE Binary Outputs SELECT OPERATE DIRECT OPERATE DIRECT OPERATE NO ACK Count gt 1 Pulse On Pulse Off Latch On Latch Off Queue Clear Queue O L El El x OO x Never Always Never Alvvays Never 1 Always Never Always Never 1 Always Never Always Never Always Never Alvvays Never Alvvays Never L Always Never Always LT Sometimes LI Sometimes LT Sometimes LI Sometimes LT Sometimes LT Sometimes LI Sometimes LT Sometimes LI Sometimes Sometimes Sometime
118. escription b0 DOO Current value of digital output 0 b1 DO1 Current value of digital output 1 b2 to b15 Reserved Tab 7 8 Digital outputs BFM allocation PLC RTC BFM addresses from 7 to 13 On these BFM locations the current PLC real time clock is allocated These values are written by the PLC and are used for synchronizing ME RTU s internal clock on the start up BFM address Name Description PLC RTC Year The RTC year value vvhich isin range from 0 to 99 and is located on the lovver 0 to 99 lovver tvvo digits tvvo digits lovver byte PLC RTC Month 1 to 12 The RTC month value vvhich is in range from 1 to 12 PLC RTC Day 1 to 31 The RTC day value vvhich is in range from 1 to 31 PLC RTC Hour 0 to 23 PLC RTC Minute 0 to 59 PLC RTC Second 0 to 59 7 The RTC hour value vvhich is in range from 0 to 23 The RTC minute value vvhich is in range from 0 to 59 The RTC second value vvhich is in range from 0 to 59 The RTC day of vveak value vvhich can consist the follovving values 0 Sunday 1 Monday PLC RTC Day of vveek 2 Tuesday 0 Sunday to 6 Saturday 3 VVednesday 4 Thursday 5 Friday 6 Saturday Tab 7 9 PLC RTC allocation 7 6 aa MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory RTU RTC IBFM addresses 14 to 201 On these BFM locations the current ME RTU real time clock is allocated Thes
119. ess can be resolved using DDNS To secure the data transfer a VPN connection can also be established Local network 4 OETA me oF aes Aak an 4 Remote control centre image024 Fig 5 5 Communication via Ethernet network CAUTION If ME RTU detects inoperability on Ethernet connection the built in watchdog timer will reset the ME RTU MITSUBISHI ELECTRIC Features Functionality overvievv 5 2 5 Communication vvith remote controlling station via radio modem The ME RTU contains an USB port where an appropriate radio modem can be connected If the mo dem isn t compatible with USB an appropriate USB to serial converter can be used In this case the ME RTU can be accessed via the IEC 60870 5 101 protocol serial version e 4 RF Link modem Fig 5 6 Communication via a radio modem 5 2 6 Integrated web server The ME RTU has an integrated web server which allows a user friendly way for configuring and diag nostic of the device The web server can be accessed via the Ethernet port refer to chapter 11 3 Con figuring ME RTU via Integrated Web Server when configuring ME RTU for the first time or via the cel lular network if VPN is established ME RTU Remote Terminal Unit 5 5 Functionality overvievv Features MITSUBISHI ELECTRIC System Configuration Applicable systems 6 System Configuration The follovving chapter describes the applicable PLC types and softvvare
120. et flags 16 cd flags values Input data values only ReceiveTimeout ME RTU response timeout timer Heartbeat Tab 8 1 Output variables Signal Type Heartbeat send period max 60 seconds L QnUDE PLC Socket UDP communication function block inputs Description OpenComplete BIT Signals the Socket communication connection open status ReceiveComplete BIT Signals when a receive operation is completed successfully SendComplete BIT Signals when a send operation is completed successfully ReceivedData WORD Unsigned Bit String 16 bit Specify the head address of the memory area storing the received data LinkError BIT Signals the cable disconnection between the built in Ethernet port of the QnUDE series or L series PLC system and the Ethernet hub OpenError B T Signals if a connection open error has occurred ReceiveError B T Signals if a receive error has occurred SendError B T Signals if a send error has occurred OpenErrorCode WORD Unsigned Bit String 16 bit Stored the error code in case of a connection open error SendErrorCode WORD Unsigned Bit String 16 bit Stores the error code if a transmission error has occurred ReceiveErrorCode WORD Unsigned Bit String 16 bit Stores the error code if a receive error has occurred Received ID WORD Signed Receive
121. evice Profile DNP V3 0 implementation table REQUEST RESPONSE OBJECT Library will parse Library will respond with IEEE Variation Daschiption Function Codes Qualifier Function Qualifier ber Number dec Codes hex Codes dec Codes hex Baty neue 06 no range or all 2 0 Change Any 1 read 07 08 limit a i Variation 08 limited qty 2 1 BinarylnputChange read 06 no range or all 129 response 17 28 without Time 07 08 limited qty 130 unsol resp index 5 2 Binary Input ited 06 no range or all 129 response 17 28 default Change with Time 07 08 limited qty 130 unsol resp index Binary Input 2 3 Change with 1 read 7 77 7 10775 Pe ee 07 08 limited qty 130 unsol resp index Relative Time 00 01 start stop Double Bit Input 1 read 06 no range or all 3 Any Variation 22 assign class 07 08 limited qty 17 27 28 index 00 01 start stop 1 06 no range or all 7 i tart st 3 default Double Bit Input 1 read 07 08 limited qty 129 response star s op 17 28 index 17 27 28 index 00 01 start stop Double Bit Input 06 no range or all 00 01 start stop 3 2 with Status 07 08 limited qty 17 28 index 17 27 28 index Double Bit Input 4 0 Change Any 1 read Sie nea Variation m a Double Bit Input 4 1 Change without 1 read 7 7 71 1 17 28 index Time 07 08 limited qty 130 unsol resp j 2 Doubl
122. ex 17 27 28 index 00 01 start stop Analog Output 06 no range or all 9 Block 22 assign class 07 08 limited qty 17 27 28 index 3 select 32 Bit Analog 4 operate 17 28 index 41 1 Output Block 5 direct op 27 index 129 response echo of request 6 dir op noack 3 select 16 Bit Analog 4 operate 17 28 index 41 2 Output Block 5 direct op 27 index 129 response echo of request 6 dir op noack 3 select Short floating A 41 3 point Analog 17 27 28 index 129 response echo of request 5 direct op Output Block 6 dir op noack 50 0 Time and Date 07 limited 1 read 07 limited qty 1 129 response 50 l Time and Date P qty 1 default 2 write 07 limited qty 1 Time and Date 50 3 Last Recorded 2 write 07 limited qty Time 51 1 Time and Date 129 response 07 limited qty CTO 130 unsol resp qty 1 Unsynchronized mni 51 2 Time and Date 97 o unsol resp qty 52 1 Time Delay Coarse 129 response uu qty 1 52 2 Time Delay Fine 129 response 2 qty 1 60 0 60Not Defined 60 1 Class 0 Data 1 read 06 no range or all MITSUBISHI ELECTRIC DNP V3 0 Device Profile OBJECT REQUEST Library will parse DNP V3 0 implementation table RESPONSE Library will respond with Variation Number Description Function Codes dec Qualifier Codes hex Function Codes dec Qualifier Codes
123. figure 11 9 For the serial connection Baudrate Number of data bits Number of stop bits Parity and Flow control can be configured The Device name is name of device for asynchronous serial Communication USB Host type A The de fault value is dev ttyUSB10 Initial Modem String is used to initiate Modems connected to USB Host and act as a carrying medium Device name idevittyUSB10 Baudrate 115200 Number of data bits 8 rll Number of stop bits 1 Parity None gt Flow control None e Initial Modem String 0 7 Save image043 Fig 11 10 Web User Interface Serial Connection Settings Time synchronization Time synchronization can be performed using PLC SNTP server or Control Station f SNTP server is used a SNTP address IP or hostname must be provided Time zone is used to set local time and is only used for synchronization with SNTP server Time synchronization with PLC is defined by PLC program which writes time to ME RTU BFM Time synchronization with Control station is performed by the DNP3 or IEC 60870 5 protocol Time Synchronization SNP 2 Type SNTP Address 0 pool ntp org Time Zone GMT 01 00 Liubliana l PLC RTC time 1 1 Save image044 Fig 11 11 Web User Interface Time synchronization MITSUBISHI ELECTRIC Settings and Diagnostics Configuring ME RTU via integrated vveb server NOTE ME RTU Configuration ME RTU configura
124. g 1 Weed 07 08 limited qty 5 17 28 index 17 27 28 index 00 01 start stop short floating 06 no range or all 7 point 07 08 limited qty 127 response 17 27 28 index 0 Analog Change 06 no range or all 32 default event nny 07 08 limited qty Variation i qty 32 Bit Analog 06 no range or all 129 response 32 1 Change Event 1 read 07 08 limited qty 130 unsol resp 17 28 index without Time 16 Bit Analog 32 2 Change Event 5 5775776 O 0 without irme i imited qty unsol resp 32 Bit Analog 06 no range or all 129 response 32 3 Ch Event 1 d 5 17 28 ind ea a iraq 07 08 limited qty 130 unsol resp angen 32 4 1 read Oo Morange or al 129 response 17 28 index with Time 07 08 limited qty 130 unsol resp short floating point Analog 06 no range or all 129 response Change Event 07 08 limited qty 130 unsol resp without Time short floating point Analog 06 no range or all 129 response Change Event 07 08 limited qty 130 unsol resp 1 5 nd n vvith Time Analog Input 00 01 start sto p Deadband 34 0 Variation Ois used 1 read m m a to request default U variation 17 27 28 index a oe 50 1 read 77 129 response start stop l 07 08 limited qty 17 28 index 34 1 16 17 17 27 28 index nput Deadban j 00 01 start stop 2 write 07 08 limited qty 17 2
125. g check box is marked black Direct point to point connection between ME RTU and Q L series PLC is also possible Auto MDI MDIX is supported The selected parameters should be marked in the white boxes as follows Function or ASDU is not used Function or ASDU is used as standardized default Function or ASDU is used in reverse mode Function or ASDU is used in standard and reverse mode 5 p ili Not permitted in this companion standard The possible selection blank X R or B is specified for each specific clause or parameter A black check box indicates that the option cannot be selected in this companion standard ME RTU Remote Terminal Unit B 1 System or device B 1 B 2 IEC 60870 5 101 104 Device Profile System or device System specific parameter indicate the station s function by marking one of the following with X X System definition Controlling station definition Master Controlled station definition Slave Network configuration Network specific parameter all configurations that are used are to be marked X If the text is strike through then this option is not available Point to point Multipoint Multiple point to point 5 Multipoint star MITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile Physical layer B 3 Physical layer Netvvork specific parameter all interfaces and data rates that are used are to be marked X
126. ge 8 2 L QnUDE series PLC data exchange L series of PLC uses the simple socket interface via Ethernet to exchange data vvith the ME RTU The size of data is limited to 1 kB The programing interface is provided through function blocks which manage connection with ME RTU and send receive data The access to data in BFM is limited to single data type or flags per operation E g if user wants to set BIs with flags only the number of BIs set in da tabase settings could be written see Figure 11 20 Depending on direction and data type four op erations are distinguished 6 Send 16 bit WORD data Request 16 bit WORD data 6 Send 32 bit DVVORD data Request 32 bit DWORD data IP TCP or IP UDP protocol may be used for communication 8 2 1 UDP communication For UDP all operations are joined into a single function block The operation type is selected by func tion block inputs LQnUDEMeRtuUdpSR16b32b 1 LQnUDEMeRtuUdpSR16b32b ConnectionNo OpenComplete LocalPortNo ReceiveComplete RemotelPAddress SendComplete RemotePortNo ReceivedData EnableConnection LinkError EnableSend SendData ReceiveError SendError 16b32b OpenErrorCode NoOf fData SendErrorCode ReceiveErrorCode Flags Send ID ReceiveTimeout Received ID Heartbeat Receive TimeoutError CN Fig
127. ge trigger Power down and periodically every Output data commands Internal FLASH 5 minutes Input Events data SD card Periodically user defined Tab 7 34 Data retention The last commands received from SCADA will be restored after the ME RTU recovers just before boot process finished output data commands will be written to the respective outputs BFM area CAUTION 6 Before using the commands PLC should always check the ME RTU status bits BFM 0 bit b1 must be set to ON This only applies to the FX Bus connected FX3 series PLCiry 6 During the ME RTU start up the output data BFMs contain invalid values 6 When communicating with Q L series PLC the communication is not possible before ME RTU stop booting ME RTU Remote Terminal Unit 7 21 Povver dovvn and data retention Functions and Buffer Memory NOTES The events stored on the SD card are written to events buffer after the RTU has synchronized clock The events are sent to SCADA when the connection with SCADA is established The events will keep the original timestamp appended at the time of event being generated CAUTION The events will not be written to the event buffer if 1 ME RTU clock has not been synchronized 2 The timestamp of event is in the future according to ME RTU clock 6 It may occur that some events are sent to SCADA even if they vvere already confirmed by the SCADA The timestamps of such events will match the ti
128. gnal Type PLC Data Exchange Description InitComplete BIT Signals the initialization procedure completion OpenComplete BIT Signals the Socket communication connection open status ReceiveComplete BIT Signals when a receive operation is completed successfully SendComplete BIT Signals when a send operation is completed successfully ReceivedData WORD Unsigned Bit String 16 bit Head address of the received data storage area Receive ID WORD Signed Received data ID equals sent request s Send ID May be received with delay if ReceiveTimeout is set to low Send ID WORD Signed ID of request get incremented with every sent request for data ReceiveTimeoutError B T Signals if ReceiveTimeout expired before receiving response one scan long This can be interpreted as lag in netvvork slovv response from ME RTU or loss of communication link LinkError B T Signals the cable disconnection betvveen the Ethernet module and the Ethernet hub OpenError BIT Signals if a connection open error has occurred ReceiveError BIT Signals if a receive error has occurred SendError BIT Signals if a send error has occurred OpenErrorCode WORD Unsigned Bit String 16 bit Stores the error code in case of a connection open error SendErrorCode WORD Unsigned Stores the error code in case of a send error Rece
129. h indicates that the signals are offline BFM BFM address ie address dec dec 1024 RO 9472 z Binary Input mi R W ags 1535 9599 1536 RO 9600 Binary Inputs 16 bit Analog 1544 Flags R W Inputs 5631 10111 5632 10112 16 bit Analog Double Binary Input R W Inputs Flags R W 6143 10367 6144 10368 Binary Double 32 bit Analog Inputs Flags R Inputs R W 8191 10879 8192 10880 32 bit Analog 3 2 16 bit Counters R W Inputs Flags R W 8703 11007 8704 11008 Short Float 2 4 16 bit Counter Flags R W Analog Inputs R W 8959 11519 8960 11520 Short Float Analog 3 4 2 32 bit Counters R W Inputs Flags R W 9471 11647 Tab 7 20 Mapping of Input protocol data into the BFM First WORD is only accessible by module digital inputs The PLC cannot write to this BFM area PLC cannot set flags for first 16 points The ONLINE VALID flags is set automatically The first bit bO is not settable by PLC This bit is modified automatically when data value is written PLC goes to STOP or communication with PLC is lost Write access only by TO instruction Write access only by DTO instruction 7 12 aa MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory Output protocol data starts on address 16384 in the BFM Each data section is 512vvords long The size
130. igital Inputs DIO and DI1 values are mapped Also take this into consideration when defining number of Binary Inputs in database Double binary inputs Double binary inputs are signals which are represented in the application as physical digital inputs or soft ware flags which have four logical states ON OFF Intermediate and Invalid The user has to write an ac tual value of the double binary input into an appropriate BFM location bits are grouped into words The mapping of the double binary input values in the BFM area starts on the address 5632 The 8 data points are mapped into a word and grouped into 2 bits for each data and may be controlled by PLC using TO FROM 16 bit or DTO DFROM 32 bit instructions After the data values the flags of the data points are mapped in the BFM area which starts at address 6144 User writes the flags of the data points into the appropriate flags bit for a specific data point The structure of the flags is protocol dependent For DNP3 flags mapping refer to section 9 4 2 Double Binary inputs Table 9 6 6 For IEC 60870 5 flags mapping refer to section 10 4 2 Double Binary inputs Table 10 6 PLC Data dec perm type 5632 DBI7 DBI6 DBI5 DBI4 DBI3 DBI2 DB 1 DBIO RO WORD 5633 DBI15 DBI14 DBI13 DBI12 DBI11 DBI10 19 DBI8 R W WORD R W WORD 6143 DBI4095 14094 14093 14092 14091 14090 14089 14088 R VV VVORD Tab 7
131. in the Double Binary Inputs flags BFM section The flags of Double Binary Inputs are 1 byte long In Table 9 5 the supported flags are shown Flag Short form Value Description 1 online If the point is OFFLINE the returned state of this point ONLINE ONL may not be correct The ONLINE binary input point has 0 offline been read successfully 1 restart The field device that originated the data object has RESTART been restarted This device may be the device reporting 0 normal this data object 1 lost The device reporting this data object has lost g 0 normal communication with the originator of the data object COMM LOST 1 remote The state of the binary obiect has been forced to its 0 normal current state at the originating device 1 local The state of the binary object has been forced to its x 0 normal current state at the device reporting 1 chatter This data object the binary input point has been filtered CHATTER in order to remove unneeded transitions in the state of 0 normal the input Tab 9 5 DNP3 Double Binary input supported flags b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi bO SRA PLC Data address CHA LOC REM CER RES ONL REM CER RES ONL dec perm type 6144 DBI1 flag DBIO flag R W WORD 6145 DBI3 flag DBI2 flag R W WORD 6146 DBI5 flag DBI
132. indsa a m s as 11 14 TBF UEC 608705 SCHINGS 11 15 ME RTU Remote Terminal Unit VII Contents H D alay Yar ERA 11 15 PLoS MODIG 77 11 16 110 YPN 11 18 114 Settings Parameters a Arida 11 19 11 41 General settings 11 19 11 4 2 Network settings 11 21 11 43 Database settings 11 22 LLL 11 23 11 45 IEC 60870 5 101 104 settings 2 11 23 11 4 6 Mobile settings 11 24 ILAZ en ala r 11 24 11 5 Basic operation and indication 11 25 ILO UIP SWITCH 3050000000 7 77 11 26 11 61 Updating firmware from SD card 11 26 11 6 2 Restore factory default settings 11 27 12 IT Functionality E E EERS ao 12 1 1211 Installing OpenVPN server on Windows host 12 1 12 1 2 Configuring OpenVPN server on VVindovvs 12 1 12 1 3 Including multiple machines on the client side when using routed MP NCW vce ce 0600000000 00
133. ined including the statuses BFM allocation and data allocation Following is the description for the time synchronization power down and data retention and Windows command line program for configuration transfer Data storage and flow The ME RTU stores its data in the internal database The internal database stores the monitoring and control data protocol specific data and time tags etc This data is exchanged between the PLC and controlling station The data stored can be a basic data type or a structured data e g double bool For the user the internal database structure is hidden and direct access is blocked The user can access the internal database via the buffer memory interface from the PLC or via the protocol data such as DNP3 data objects The data is divided into two groups 6 Input data which represents the data from the process to the controlling station This data is marked as read only for the controlling station 6 Output data which represents the data from the controlling station to the process This data is marked as write only for the controlling station RTU modem Mitsubishi m 7 Control station image026 Electric PLC Output data Fig 7 1 Data flov The input data value is stamped with a time tag in the ME RTU when the value is written into the da tabase if the ME RTU has valid time and protocol events are enabled for the specific data type The time stamped data events can only be accessible by th
134. ion One octet Tvvo octets Frame length Maximum length L number of octets Structured Unstructured VVhen using an unbalanced link layer the follovving ASDU types are returned in class 2 messages lovv priority vvith the indicated causes of transmission The standard assignment of ASDUs to class 2 messages is used as follows Type identification Cause of transmission 9 11 13 21 lt 1 gt In response to a class 2 poll a controlled station may respond with class 1 data when there is no class 2 data available MITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile Application layer B 5 Application layer Transmission mode for application data Mode 1 Least significant octet first as defined in clause 4 10 of IEC 60870 5 4 is used exclusively in this companion standard Common address of ASDU system specific parameter all configurations that are used are to be marked X iH One octet X Two octet Information object address system specific parameter all configurations that are used are to be marked X ii One octet X Structured N Tvvo octets X Unstructured X Three octets Cause of transmission system specific parameter all configurations that are used are to be marked X H One octet X Tvvo octets vvith originator address Originator address is set to zero if not used Length of APDU system specific parameter sp
135. ion Cause of transmission combinations X if only used in the standard direction R if only used in the reverse direction B if used in both directions ME RTU Remote Terminal Unit B 9 IEC 60870 5 101 104 Device Profile Application layer ss sppe 3 fqo uonpuso yul uMouyun nusv sseippe uoululo uMouyun UOISSIWISUeJ JO sne umouyun 44 45 46 47 uone ounu pi d4 UMOUyUN ysanba lt u gt dnolb Aq s nb to ca quunus dnoib Aq to Jajsuesl pw je gt 0 e Aq p sne o ul uIn 1 pw zow e Aq p sne oju uonepuluL uonpAn e 2 aA N ml 2 v N 5 U uonPAn e p s nb l 35 snoaue uods ues punosbypeq X X 2Ipolad X X M_SP_TA_1 M_DP_NA_1 M_DP_TA_1 M_ST_NA_1 M_ST_TA_1 M BO NA 1 M BO TA 1 M 1 M META 1 M ME NB 1 M ME 1 M ME NC 1 M ME 1 M_IT_NA_1 M_IT_TA_1 M_EP_TA_1 M_EP_TB_1 M_EP_TC_1 M_PS_NA_1 M_ME_ND_1 M_SP_TB_1 M_SP_NA_1 lt 3 gt
136. ion at 24V maximum 330 mA USB current limit 200 mA Nominal voltage 24V DC Module digital inputs Input impedance 2 kQ Input signal current 12 mA 24 V DC Nominal load 100 mA 24 V DC Maximum load 250 mA 24 V DC GSM GPRS EDGE frequency bands 850 900 1800 1900 MHz SIM interface 3V SIM Baud rate 100 Mbps 10 Mbps Ethernet communication a Full duplex Communication method Digital outputs Wireless communication Crossover detection External dimensions H x W x Db 98 x 55 x 87 mm 3 86 x 2 17 x 3 43 Tab 2 1 General ME RTU specification with module I Os terminal block attached 2 1 External dimensions image003 Fig 2 1 Housing dimensions ME RTU Remote Terminal Unit 2 1 Variants 2 2 Specifications CAUTION Internal fuse protects internal circuit of ME RTU Internal fuse cannot break due to user s actions Melted internal fuse indicates ME RTU general failure If internal fuse should break user cannot replace the internal fuse by her himself therefore the ME RTU must be sent to the manufacturer for servicing Variants The ME RTU comes in two variants for different applicable PLC series 6 For FX3 PLCs a with cable variant bus ME RTU unit This has the FX extension bus ribbon cable factory attached to the unit For Q and L series PLCs a sans cable variant non bus ME RTU unit This has
137. iveErrorCode Tab 8 8 WORD Unsigned Bit String 16 bit Bit String 16 bit Stores the error code in case of a receive error Q PLC before 5 11012 Fixed Buffer TCP communication function block outputs MITSUBISHI ELECTRIC PLC Data Exchange Q L PLC Data exchange programming examples and rules 8 4 8 4 1 8 4 2 8 4 3 Q L PLC Data exchange programming examples and rules In the following chapters the interaction between ME RTU and Q L PLC is described Heartbeat The heartbeat is used to inform the ME RTU that TCP IP or UDP IP connection between ME RTU and PLC is active The PLC writes heartbeat values into BFM 24 refer to Q L PLC heartbeat BFM address 241 The PLC is considered connected and active b0 in BFM 32 is set refer to Commu nication Control Status BFM address 32 if heartbeat value changes within 60 seconds The Q series before SN11012 and L QnUDE PLC function blocks for TCP and UDP already implement heartbeat sending with send the period defined by function block input heartbeat is not sent if value is set to 0 The heartbeat send is first triggered when the OpenComplete signal rising front is detect ed The SendComplete signal is not set when the heartbeat is sent Sending heartbeat has higher pri ority than sending and requesting data which will be blocked while sending heartbeat Setting flags The Function Block s Flags input may be used to set Fl
138. l 15 Yeplalfi 17 elli B Serre u9 YXVUXXHUG 9G9 9G9 9 9GiEK XxUgUgU9U9UO 117 yep Hali u KB U if s99 u HE elli uu u9u dX U09VG OU O 17 YeP lal wf EE 5 TePlal i ln X G in H Tea b 10 Te Fal fe E ite image049 Fig 11 17 Web User Interface NAT settings configuration ME RTU Remote Terminal Unit 11 11 Configuring ME RTU via integrated vveb server Settings and Diagnostics DDNS settings A Dynamic DNS server may be set up for the ME RTU Here DDNS server login information is inserted For more information about DDNS functionality refer to section 12 3 DDNS Host or Domain Name Name com Username Usr sss Password lll DynDNS DDNS System Dynamic DNS z Use vvildcards Enable Wildcards 1 Connection port HTTP 80 l ae image050 Fig 11 18 Web User Interface DDNS settings SNMP settings Here Simple Network Management Protocol can be configured Community publie UC GK Device name MERTU Location onedesk n Contact email domain oo Save image050 a Fig 11 19 Web User Interface SNMP settings 11 12 MITSUBISHI ELECTRIC Settings and Diagnostics Configuring ME RTU via integrated vveb server 11 3 5 Database tab In this tab a number of each data type in database is configured also data events can be enabled or disabled
139. l Over at LI L1 No Counters Reported Configurable attach explanation 16 Bits 32 Bits Other Value ___ Point by point list attached DNP V3 0 implementation table A 1 DNP V3 0 implementation table DNP V3 0 Device Profile The following table identifies which object variations function codes and qualifiers the ME RTU sup ports in both request messages and in response messages For static non change event objects re quests sent with qualifiers 00 01 06 07 or 08 will be responded with qualifiers 00 or 01 Requests sent with qualifiers 17 or 28 will be responded with qualifiers 17 or 28 For change event objects qualifiers 17 or 28 are always responded OBJECT REQUEST Library will parse RESPONSE Library will respond with Variation Number Description Function Codes Qualifier dec Codes hex Function Qualifier Codes dec Codes hex Binary Input Any Variation 00 01 start stop 1 read 06 no range or all 22 assign class 07 08 limited qty 17 27 28 index 1 default Binary Input 00 01 start stop 06 no range or all 07 08 limited qty 17 27 28 index 00 01 start stop 129 response 17 28 index Binary Input with Status 00 01 start stop 06 no range or all 07 08 limited qty 17 27 28 index 00 01 start stop 129 response 17 28 index MITSUBISHI ELECTRIC DNP V3 0 D
140. l that provides communication across diverse interconnected networks image037 Fig 11 4 Local Area Connection Properties In a window that opens IP address 192 168 0 11 is inserted in IP address field and subnet mask 255 255 255 0 is inserted in Subnet mask field Internet Protocol Version 4 TCP IPv4 Properties LP General You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address IP address Subnet mask Default gateway Obtain DNS server address automatically Use the following DNS server addresses Preferred DNS server Alternate DNS server image038 Fig 11 5 IDP address and subnet mask configuration ME RTU Remote Terminal Unit 11 5 Configuring ME RTU via integrated vveb server Settings and Diagnostics 11 3 2 11 6 Accessing vveb user interface To access vveb user interface computer and ME RTU have to be on the same subnet Connecting to ME RTU is performed by entering the default IP address 192 168 0 10 in internet brovvser After that ME RTU login vvindovv appears The default username rtuadmin and default passvvord rtuadmin must be entered ME RTU Login UserName rtuadm n Passvvord masssusnn Password change Login Copyright G 2013 INEA d o o
141. le Binary Input 1 5632 6143 20000 Double point information Input 32 bit Counters M_IT_NA_1 8960 9471 30000 Integrated totals data 16 bit Analog Inputs M ME NB 1 9600 10111 40000 Measured value scaled value 32 bit Analog Inputs M_BO_NA_1 10368 10879 90000 Bitstring of 32 bit Short float Analog Inputs M NC 1 11008 11519 50000 177 7 short floating point Binary Output C SC NA 1 16384 16895 0000 oS Pont commana scaled value 16 bit Analog Outputs C SE NB 1 20992 21503 76000 ot Point commana scaled value Output bin data 32 bit Analog Outputs C BO 1 22272 22783 100000 inn Set point command 2211100007 C SE NC 1 23424 23935 80000 short floating point Outputs number Tab 10 2 IEC 60870 5 101 104 Information objects Address and BFM mapping ME RTU Remote Terminal Unit 10 3 IEC 60870 5 101 104 flags BFM mapping IEC 60870 5 101 104 Functionality 10 4 IEC 60870 5 101 104 flags BFM mapping The following chapters describe mapping of IEC 60870 5 101 104 flags referred to as Quality De scriptors in IEC 60870 5 101 standard to the BFM CAUTION If FX3 series PLC is selected as the only PLC see figure 11 9 then the following operation applies IfFX3PLCisinreset orstop mode the INVALID Quality Descriptors are set for all data points After the FX3 PLC goes to RUN mode and value is written to data point the INVALID Quality Descriptor must be written by the PLC for this data point
142. leshooting information see also HomeGroup Internet Options Windows Firewall image035 Fig 11 2 Netvvork and Sharing Center Local Area Connection is selected T ii et Network and Internet Network Connections Search Network Connections p File Edit View Tools Adwanced Help Organize v Disable this network device Diagnose this connection Local Area Connection Nokia 5220 XpressMusic Bluetooth Network cable unplugged Modem OTA ae Intel R 1000 PL Network Co Disconnected OSHIBA are Modem OTA Wireless Network Connection A Disconnected Not connected mf TOSHIBA Software Modem x Piil Intel R PRO Wireless 3045AB M image036 Fig 11 3 Netvvork Connections aa MITSUBISHI ELECTRIC Settings and Diagnostics Configuring ME RTU via integrated vveb server IP address and subnet mask window is opened by selecting IPv4 and clicking Properties Networking Connect using a Intel R PRO 1000 PL Network Connection Configure This connection uses the following items OM Client for Microsoft Networks Virtual PC Network Fitter Driver Z 005 Packet Scheduler File and Printer Sharing for Microsoft Networks ntemet P Discovery Mapper Driver Link Layer Topology Discovery Responder Uninstal pipet Description Transmission Control Protocal ntemet Protocol The default wide area network protoco
143. lete bit and Receive_ID matching Send ID or ReceiveResponse timer expired signalled by ReceiveTimeoutError bit ME RTU Remote Terminal Unit 8 11 Q L PLC Data exchange programming examples and rules PLC Data Exchange 8 12 aa MITSUBISHI ELECTRIC DNP3 Functionality DNP3 features 9 DNP3 Functionality DNP3 Distributed Network Protocol is a standards based communications protocol initially designed for the electric utility industry Due to its robustness flexibility and interoperability it is now also being used in water waste water traffic management oil and gas industrial and other applications It is an open protocol that was developed to establish interoperability between RTUs IEDs Intelligent Electronic Devices and master stations DNP3 has been adopted by the Substation Committee of the IEEE Power Society 1379 2000 as a recommended practice for RTU IED communication 9 1 DNP3 features ME RTU DNP3 implementation features Conforms to DNP3 Level 2 Subset Definitions requirements Supports any physical communication network including RS232 with USB to RS232 converter and TCP IP Supports binary input and output analog input and output counter running and frozen and internal indications Supports Unsolicited Responses and or polled Report By Exception RBE for change event objects Supports function codes for confirm read write direct operate freeze freeze and clear cold warm restart assign cl
144. liHiHliHiiHH start of config file H ilihiliihlihiHliHiHiiiHH port 1194 proto udp dev tun ca C Program Files OpenVPN config ca crt cert C Program Files OpenVPN config server crt key C Program Files OpenVPN config server key dh C Program Files OpenVPN config dh1024 pem server 10 8 0 0 255 255 255 0 ifconfig pool persist ipp txt comp zo persist key persist tun status openvpn status log verb 9 auth nocache client cert not required script security 3 username as common name auth user pass verify CheckUserCredentialsviaFile exe via file reneg sec 0 end of config file VPN services Client configuration file is already included in ME RTU Configuration is preformed via VVeb user in terface refer to Open VPN settings Copying the Server and Client files to their appropriate directories 1 Copy these files from C Program Files OpenVPN easy rsa to C Program Files OpenVPN con fig on the server ca crt dh1024 pem server crt server key server ovpn 2 Upload the follovving certificate to ME RTU using VVeb user interface refer to OpenVPN server certificate ca crt ME RTU Remote Terminal Unit VPN services 12 1 3 ExampleV 12 6 IT Functionality Starting OpenVPN Q On server run OpenVPN from Start Menu gt All Programs gt O
145. llowable delay of commands and set point commands Transmission of integrated totals station specific parameter mark X if function is only used in the standard direction R if only used in the reverse direction and B if used in both directions Mode A Local freeze with spontaneous transmission Mode B Local freeze with counter interrogation Mode C Freeze and transmit by counter interrogation commands Mode D Freeze by counter interrogation command frozen values reported spontaneously Counter read Counter freeze without reset Counter freeze with reset Counter reset General request counter Request counter group 1 Request counter group 2 Request counter group 3 Request counter group 4 Parameter loading station specific parameter mark X if function is only used in the standard direction R if only used in the reverse direction and B if used in both directions X Threshold value Smoothing factor Low limit for transmission of measured values High limit for transmission of measured values ME RTU Remote Terminal Unit B 15 Basic application functions IEC 60870 5 101 104 Device Profile Parameter activation station specific parameter mark X if function is only used in the standard direction R if only used in the reverse direction and B if used in both directions Act deact of persistent cyclic o
146. may get de leted The returned text consists of up to three parts PIN is required or not 6 Entered PIN is correct already set or incorrect 6 Number of attempts left If inserted PIN is correct the PIN Save button must be pressed to save PIN number to FLASH The PIN check enters the PIN directly to SIM card and tries to unlock it If the PIN is correct the SIM card will be unlocked and fully functional If ME RTU is powered down and up or restarted any other way the PIN code stored in FLASH will be used to unlock the SIM card CAUTION The PIN Check does not save PIN code to ME RTU memory Always check PIN before saving the configuration After the PIN code has been checked and confirmed press the PIN Save button to keep the PIN code stored in configuration Do NOT change the PIN code and press PIN Save again Normally user has three attempts to insert the correct PIN Every PIN check usage also uses one attempt if incorrect PIN is inserted If PIN check returns Inserted Pin is incorrect it is still possible to press PIN Save and therefore saving wrong PIN to FLASH Consequently SIM card will get locked immediately CAUTION 6 Do NOT change PIN code after it has already been confirmed by the PIN Check function as there is no safety algorithm to prevent user from inserting incorrect PIN code after the correct PIN code has already been confirmed If incorrect PIN code is by any means stored to FLASH
147. mestamp of events already received by the SCADA Data write since the last periodical to the power fail is not guaranteed therefore it is recom mended to use the UPS power supply with the ME RTU The UPS guaranteed power supply time to the ME RTU must be longer than the user defined input events data retention write interval see Figure 11 13 Limitations on saving events The amount of events that can be saved is limited to maximum of 10 days and by the capacity of the SD card Only use fresh unused SD card The SD card memory is limited to the number of erase and write cycles With increased erase and write cycles the probability of data corruption increases In order to ensure the proper functioning of the events data retention the micro SD card must be formatted using ME RTU user interface refer to Data Retention Settings CAUTION DoNOTremove or insert SD card when ME RTU is powered ON Always power OFF ME RTU before inserting or removing SD card for data retention Required hardware 6 Industrial micro SD card with build in wear levelling algorithm and high speed operation The minimum memory capacity of micro SC card should be at least 4 GB 6 ME RTU with hardware v1 23 or higher Recommended micro SD card Panasonic RP SMKC04 micro SD card MITSUBISHI ELECTRIC Functions and Buffer Memory Windows command line configuration upload dovvnload 7 6 Example V Example V Windows command line
148. munication module QJ71E71 see document Art no 130029 UDP communication All send and receive operations described above are supported in single function block The Ethernet communication module must be configured In GX works2 this is done by selecting Project in the Pro ject Navigation pane Expand Parameter section then expand Network Parameter subsection and double click on the Ethernet CC IE MELSECNET option Select Open Settings For the chosen Con nection number in the configuration table select UDP protocol Under Fixed Buffer Communica tion Procedure select No Procedure Under Pairing Open select Enable Under Existence Conformation select No Confirm Fill in the last three columns as shown in Table 8 5 QFixBufMeRtuUdpSR16b32b_ 2 QFixBufMeRtuUdpSR16b32b HeadAddress InitComplete ConnectionNo OpenComplete ExistenceCheck ReceiveComplete LocalPortNo SendComplete RemotelPAddress FecelvedData RemotePortNo Received ID EnableConnection send D EnableSend LinkError SendData OpenError BFM addr ReceiveError NoOfData SendError Type_16b32b Receive TimeoutError FromTo InitErrorCode Flags OpenErrorCode Recelve limeout SendErrorCode Heartbeat ReceiveErrorCode TTTTTT TTT TTT TTT Fig 8 5 Function block for Q PLC before SN11012 Fixed Buffer UDP communication ME RTU Remote Terminal Unit 8 7 Q series before SN11012 PLC data exchange
149. n is only used in the standard direction R if only used in the reverse direction and B if used in both directions X Spontaneous transmission Double transmission of information objects with cause of transmission spontaneous station specific parameter mark each information type X where both a Type ID without time and corre sponding Type ID with time are issued in response to a single spontaneous change of a monitored object The following type identifications may be transmitted in succession caused by a single status change of an information object The particular information object addresses for which double transmission is enabled are defined in a project specific list Single point information M SP NA 1 M SP TA 1 M SP 1andM PSNA1 Double point information M NA 1 M DP TA 1 4 DPTB1 Step position information M ST 1 M ST TA T1andMSsT 1 Bitstring of 32 bitM BO NA 1 M BO TA 1andM BO TB 1 if defined for a specific project Measured value normalized value M 1 M ME TA 1 M ME ND 1andM ME TD 1 Measured value scaled value M 1 M ME 1and M ME TE 1 Measured value short floating point number M 1 M ME TC 1andM 1 ME RTU Remote Terminal Unit B 13 Basic application functions IEC 60870 5 101 104 Device Profile Station interrogation station specific parameter mark Xif function is only used in the standard direction Rif only used in the reverse
150. n reported when variation 0 requested 3 Binary Input Change with Relative Time Default l 7 Change Event Point Index Name Description Assigned Class 1 2 3 or none 0 XX determined by implementation 1 A 10 aa MITSUBISHI ELECTRIC IEC 60870 5 101 104 Device Profile NOTE IEC 60870 5 101 104 Device Profile Interoperability This companion standard presents sets of parameters and alternatives from which subsets must be selected to implement particular telecontrol systems Certain parameter values such as the choice of structured or unstructured fields of the information object address of ASDUs represent mutually exclusive alternatives This means that only one value of the defined parameters is admitted per sys tem Other parameters such as the listed set of different process information in command and in monitor direction allow the specification of the complete set or subsets as appropriate for given ap plications This clause summarizes the parameters of the previous clauses to facilitate a suitable se lection for a specific application If a system is composed of equipment stemming from different man ufacturers it is necessary that all partners agree on the selected parameters The interoperability list is defined as in IEC 60870 5 101 and extended with parameters used in this standard The text descriptions of parameters which are not applicable to this companion standard are strike through correspondin
151. nable Connection method Standard HTTP 80 port or alternate 8245 port or HTTPS port 443 0 HTTP 80 1 HTTP 8245 2 HTTPS 443 0 HTTP 80 Tab 11 3 ME RTU Remote Terminal Unit Community SNMP community name String public Device name SNMP unit name String ME RTU Location Location identification String one desk Contact SNMP contact name Parameters for Netvvork settings String email domain 11 21 Settings parameters Settings and Diagnostics 11 4 3 Database settings Settings Subsection Setting name Description Details Default value Number of binary Binary inputs quantity Binary input signals inputs quantity Double binary inputs Number of double quantity binary inputs 16 bit counters Number of 16 bit quantity counters 32 bit counters Number of 32 bit quantity counters 16 bit Al quantity Number of 16 bit Al Integer from 0 to 512 32 bit Al quantity Number of 32 bit Al Integer from 0 to 256 Integer from 0 to 8192 32 Integer from 0 to 4096 Integer from 0 to 512 Counters quantity Integer from 0 to 256 Analog inputs quantity Short floating point Number of short Al quantity floating point Al Integer from 0 to 256 Binary output signals Binary outputs Number of digital quantity quantity outputs 16 bit AO quantity Number of 16 bit AO Integer from 0 to 512 Analog outputs 32 bit AO q
152. ne been read successfully 1 restart The field device that originated the data object has RESTART been restarted This device may be the device reporting 0 normal this data object 1 lost The device reporting this data obiect has lost SONAE 0 normal communication with the originator of the data object REMOTE FORCED 1 remote The state of the binary object has been forced to its 0 normal current state at the originating device LOCAL FORCED 1 local The state of the binary object has been forced to its 0 normal current state at the device reporting 1 rollover The accumulated value has exceeded its maximum and rolled over to zero The counter value should be set to 0 upon rollover and counting is resumed as normal The Rollover bit should be cleared when the counter value COUNTER and roll over state have been reported ROLLOVER NOTE This maximum value is not necessarily equal to 0 normal 2432 1 for 32 bit counters or 2 16 1 for 16 bit counters It can be different for each counter instance Technical Bulletin TB 2002 001 Counter Objects recommends slave devices do not set the Rollover flag and that host master devices ignore the Rollover flag DISCONTINUITY 1 discontinuous Value cannot be compared against a prior value to 0 normal obtain the correct count difference Tab 9 7 DNP3 Counter supported flags b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 b1 bO 7 PLC Data address DIS CRO REM CER RES ONL
153. nection open error WORD Unsigned SendErrorCode Bit String 16 bit Stored the error code in case of a send error ReceiveErrorCode WORD H nslons 1 Stores the error code in case of a receive error Bit String 116 bitl Tab 8 6 Q PLC before 5 11012 Fixed Buffer UDP communication function block outputs MITSUBISHI ELECTRIC Q series before SN11012 PLC data exchange PLC Data Exchange 8 3 2 TCP communication For TCP all operations are joined in single function block QF xBuffMeHtu TcpSR16b32b 1 QF ixBuffMeRtuT cpSR16b32b HeadAddress ConnectionNo ExistenceCheck LocalPortNo RemotelPAddress RemotePortNo EnableConnection EnableSend SendData NoOfData BFM addr Type 16b32b FromTo Flags Receive Timeout Heartbeat Fig 8 6 InitComplete OpenComplete ReceiveComplete SendComplete ReceivedData Received ID Send ID Receive T meoutError LinkError OpenError ReceiveError SendError InitErrorCode OpenErrorCode SendErrorCode ReceiveErrorCode image033 Function block for Q PLC before SN11012 Fixed Buffer TCP communication Inputs and outputs are described in the following tables Input variables Signal Type Description WORD Unsigned Head Address Bit String 16 bit QJ71E71 Ethernet interface module head address ConnectionNo WORD Signed Connection number from 1 to 15 ExistenceCheck BIT Usage of destin
154. nerated for every input data type on value change or flag status change If control station is not connected or unsolicited messages sending of events is blocked the events are stored is events buffer The size of the buffer is configurable via Web User Interface refer to Data Events settings If the connection to the PLC is lost FX3 PLC goes to STOP or no heartbeat is received Q L PLC then allinput data ONLINE flags are set to OFFLINE The ONLINE flag is automatically set for each data point when PLC writes its value to ME RTU All other flags must be set manually by the PLC MITSUBISHI ELECTRIC DNP3 Functionality DNP3 BFM mapping 9 4 DNP3 BFM mapping In the following Table the supported DNP3 group objects in which the protocol data is mapped from the BFM are shown Default Static DNP3 BFM address Basic data type Object group Variation Start End Binary Input 1 2 1024 1535 Double Binary Input 3 2 5632 6143 16 bit Counters 20 2 8192 8703 32 bit Counters 20 1 8960 9471 16 bit Analog Inputs 30 2 9600 10111 32 bit Analog Inputs 30 1 10368 11519 Short float Analog Inputs 30 5 11008 10879 2 2 1 3 16384 16895 20992 21503 22272 22783 23424 23935 FJ2 Binary Output 10 Output 16 bit Analog Outputs AO data 32 bit Analog Outputs 40 Short float Analog Outputs 40 Tab 9 2 DNP3 supported objects As defined by the DNP3 protocol every data objects group s
155. nna wiring The antenna is connected via standard SMA connector The antenna must meet the requirements specified in the table below Characteristic E GSM 900 DCS 1800 GSM 850 PCS 1900 TX Frequency 880 to 912 MHz 1710 to 1785 MHz 824 to 849 MHz 1850 to 1910 MHz RX Frequency 925 to 950 MHz 1805 to 1880 MHz 869 to 894 MHz 1930 to 1990 MHz Impedance 50 VSVVR TX max 152 1 5 1 Typical Radiated Gain OdBi at least in one direction Tab 4 2 Antenna specifications For antenna cable it is recommended to use RG178 coaxial cable with the following characteristic Static curvature radius 10 mm 0 39 6 Dynamic curvature radius 20 mm 0 79 If GSM antenna cable is longer than 3 m 9 8 external over voltage protection device must be installed Recommended antenna manufacturers and models 6 Delock GSM UMTS SMA Antenna 824 960 1710 2170 MHZ SPK Electronics SPK GSM External Antenna PentaMag Multiband GSM 3G Antenna SMA ME RTU Remote Terminal Unit 4 5 SIM card and SD card insertion Wiring 4 7 SIM card and SD card insertion The SIM card slot accepts ISO IEC 7810 D 000 format international standard mini SIM card with ex ternal dimensions L x W x H 25 x 15 x 0 76 mm The SIM card is pushed directly into SIM card slot wherein the cut off corner of the SIM card is facing upvvards front towards top of the SIM card slot see Fig 4 4 For a SIM card to be properly locked in sid
156. o 13 by using TO instruction Value at BFM address 13 should be written as last The ME RTU synchronization task then modifies the value at the BFM address 13 by adding value 1000 to current value as a notification that time has been taken and ME RTU is synchronized with PLC PLC may use FROM instruction to read modified value at the BFM address 13 as a confirmation 7 20 aa MITSUBISHI ELECTRIC Functions and Buffer Memory Power down and data retention 7 5 Povver dovvn and data retention In the event of power failure the ME RTU can restore the outputs data commands and inputs events data as they were before the power failure The power down and data retention will Save telemetry output data commands DNP3 IEC 60870 5 received from SCADA before the event of power failure The power down failure is detected when 24 V power supply drops below 19 6 V 6 Periodically save telemetry events data that have not yet been sent to SCADA The time interval is defined in Web user interface refet to Data Retention Settings The events are considered as sent when the SCADA replies to the sent event with the reception confirmation telemetry protocol dependent Additionally to power down phase the commands received from SCADA are also saved 6 Periodically every 5 minutes in order to keep the internal FLASH in ready condition At the time of ME RTU configuration changing at the application restart Stored information Storage location Stora
157. o the FROM instruction are ni The ME RTU is at address 4 n2 The BFM address in the ME RTU where the digital outputs are mapped 6 n3 Number of words to be read d Destination where the data should be stored in this case this is a register DO 2 Mapping of the actual value into the physical output We assume that we are using the first binary output 16384 n2 ReadNoBinOutputs m3 image028 Fig 8 1 Reading digital outputs using FROM instruction ME RTU Remote Terminal Unit 8 1 FX3 PLC data exchange PLC Data Exchange Mapping of binary inputs Binary inputs represent the actual state of digital signals in the PLC They are transferred from the PLC into the remote controlling station by writing the value into the ME RTU BFM The binary inputs are lo cated in the BFM at address 1024 In the user program the follovving tvvo steps should be made 1 or copy the data into some working registers which are sent to the ME RTU 2 VVrite the data into the ME RTU using a TO instruction The input parameters to the TO instruction are ni The ME RTU is at address 4 6 n2 1The BFM address in the ME RTU where the binary inputs are mapped 6 n3 Number of words to be written s Source from where the data should be written In this case this is a register DO image029 Fig 8 2 Mapping of digital inputs using a TO instruction MITSUBISHI ELECTRIC PLC Data Exchange L QnUDE series PLC data exchan
158. of flags is adiusted to number of maximum data f the PLC is in STOP state then the PLC flags are ig nored and appropriate flags are set vvhich indicates that the signals are offline P dec perm 16384 Binary Output RO 16895 16896 RO 2 16904 Binary Output Flags 20991 i i 20992 16 bit Analog Outputs RO 21503 21504 16 bit Analog Outputs Flags R W 21759 21760 16 bit Analog Outputs Actual Values 22271 22272 32 bit Analog Outputs RO 22783 22784 32 bit Analog Outputs Flags R W 22911 22912 32 bit Analog Outputs Actual Values R W 23423 23424 Short Float Analog Outputs RO 23935 23936 Short Float Analog Outputs Flags R W 24063 24064 Short Float Analog Outputs Actual Values R W 24576 Tab 7 21 Mapping of Output protocol data into the BFM Write access only by TO instruction Write access only by DTO instruction ME RTU Remote Terminal Unit 7 13 Assignment of buffer memory Functions and Buffer Memory 7 3 5 Default and maximum data configuration of BFM At the first start up all groups have a default configuration of the available points inside a data group The default configuration and maximum number of elements available is shown in following table The amount of data types are quite small because the larger amount of data increase the PLC cycle time Setting number of elements of multiple data types to maximum will result
159. or the PLC IOs Online PLC programming and monitoring Online PLC programming and monitoring via cellular or local network Communication channels Ethernet 10 100 Cellular network GPRS EDGE USB Host type A File transfers FTP SFTP PPP PPP for serial USB modem connections IT functionality DNS DDNS SNMP HTTP VPN functionality Tab 5 1 ME RTU features For secure communications Communication features The ME RTU supports three different communication interfaces for connection to SCADA PLC and programming system Interface To Device Service Protocol used SCADA system DNP3 IEC 60870 5 104 Ethernet interface PLC L series Q series Programing system Transparent mode FX3 PLC only Cellular interface SCADA system DNP3 IEC 60870 5 104 Programing system Transparent mode FX3 PLC only Serial via USB interface Tab 5 2 ME RTU Remote Terminal Unit SCADA system Communication features DNP3 IEC 60870 5 101 Functionality overvievv Features 5 2 Functionality overvievv The ME RTU is an extension module for the Mitsubishi Electric PLCs which enables remote monitoring and controlling of processes It supports the following interfaces GPRS EDGE is the communication path which enables the remote controlling station to connect to the ME RTU via the cellular network and using DNP3 or I
160. outputs 5 NB 1 and C SC 1 6 Bitstring of 32 bit inputs M BO 1 and outputs C BO 1 All communications between the IEC 60870 5 control station and the PLC takes place through these data types ME RTU implementation of IEC 60870 5 101 104 also supports generating events and sending events unsolicited massages The events are generated for every input data type on value change or flag status change If control station is not connected or unsolicited messages sending of events is blocked the events are stored is events buffer The size of the buffer is configurable via Web User Interface refer to Data Events settings If the connection to the PLC is lost FX3 PLC goes to STOP or no heartbeat is received Q L PLC then all input data VALID flags are set to INVALID The VALID flag is automatically set for each data point when PLC writes its value to ME RTU All other flags must be set manually by the PLC MITSUBISHI ELECTRIC IEC 60870 5 101 104 Functionality 10 3 IEC 60870 5 101 104 information objects addresses and BFM mapping IEC 60870 5 101 104 information objects addresses and BFM mapping The data vvhich is in the BFM is mapped to the information Obiects Address space BFM address Start Basic data IEC 60870 5 Information R Description type type Start End object Address Binary Input M SP NA 1 1024 1535 1000o Single point information Doub
161. penVPN gt OpenVPN GUI 2 Double click the icon which shows up in the system tray to initiate the connection The resulting dialog should close upon a successful start Running OpenVPN as a service on Windows host Running OpenVPN as a service will allow to OpenVPN to run from non administrative account 2 OpenVPN can be started automatically on system start up 3 Run the Windows Service administrative tool Press Windows Key R Type the following command into cmd services msc 4 Find the OpenVPN service and set its Start up Type to automatic 5 Optionally start the service novv Including multiple machines on the client side when using routed VPN dev tun Tutorial on the OpenVPN side describes how to accomplish this http openvpn net index php open source documentation howto html scope Connect to PC from OpenVPN server via ME RTU In this example we try to connect to a device PC in our example from OpenVPN server PC is on the same local network as ME RTU System configuration VPN subnet 172 32 0 0 24 ME RTU subnet 192 168 112 0 20 6 ME RTU IP address 192 168 112 68 PC local to ME RTU IP address 192 168 112 139 ME RTU connects to OpenVPN server with username test3 k 192 168 112 139 Local netvvork RTU modem 192 168 112 0 20 192 168 112 68 VPN server nternet image063 Fig 12 3 System configuration example MITSUBISHI ELECTRIC IT Functionality
162. plicable automation technology safety standards and regulations Any operations or modifications to the hardware and or software of our products not specifically described in this manual may only be performed by authorised Mitsubishi Electric staff Proper use of the products The RTU module is only intended for the specific applications explicitly described in this manual All parameters and settings specified in this manual must be observed The products described have all been designed manufactured tested and documented in strict compliance with the relevant safety standards Unqualified modification of the hardware or software or failure to observe the warnings on the products and in this manual may result in serious personal injury and or damage to property Only peripherals and expansion equipment specifically recommended and approved by MITSUBISHI ELECTRIC may be used with the RTU module All and any other uses or application of the products shall be deemed to be improper Relevant safety regulations All safety and accident prevention regulations relevant to your specific application must be observed in the system design installation setup maintenance servicing and testing of these products The regulations listed below are particularly important in this regard This list does not claim to be complete however you are responsible for knowing and applying the regulations applicable to you in your location VDE Standards VD
163. r periodic transmission of the addressed object Test procedure station specific parameter mark X if function is only used in the standard direction R if only used in the reverse direction and B if used in both directions Test File transfer station specific parameter mark X if function is used File transfer in monitor direction Transparent file Transmission of disturbance data of protection equipment Transmission of sequences of events Transmission of sequences of recorded analog values File transfer in control direction m Transparent file Background scan station specific parameter mark Xif function is only used in the standard direction Rif only used in the reverse direction and B if used in both directions m Background Acquisition of transmission delay station specific parameter mark Xif function is only used in the standard direction Rif only used in the reverse direction and B if used in both directions M Acquisition of transmission delay Definition of time outs Parameter Default value Remarks Selected value 30s Time out of connection establishment 30s 15s Time out of send or test APDUs 15s 10s Time out for acknowledges in case of no data messages t gt lt t 10s 20s Time out for sending test frames in case of a long idle state 20s Maximum range of values for all time outs 1 to 255 s accuracy 1 s M
164. rect configuration of SNTP server address refer to Time synchronization gateway and DNS priority refer to General communication settings to enable ME RTU to gain access to SNTP server CAUTION The initial time synchronization with SNTP server is essential to establish VPN connection Time synchronization affects sending of DNP3 and IEC 60870 5 events The events are not registered until RTU RTC is valid Date is considered to be valid when date is equal or above 1 1 2013 0 00 00 6 Time synchronization with Control station using DNP3 or IEC 60870 5 protocol is dependent on protocol settings on Control station If DNP3 or IEC 60870 5 protocol on Control station is configured to use UTC Coordinated Universal Time with time synchronization the day light saving time is not taken into account when setting time on ME RTU ME RTU Remote Terminal Unit 7 19 Time synchronization Functions and Buffer Memory 7 4 1 ME RTU time synchronization STARTUP Server RT SNTP RT Clock synchronization clock synchro DNP3 or IEC nization 60870 5 Request RT Get clock clock synchroni Request RT clock information from synchronization zation with Control Station S NF earner with PLC CONTINUE NORMAL OPERATION image027 Fig 7 3 Time synchronization at start up 7 4 2 Writing time directly to ME RTU BFM with PLC Time synchronization with PLC is performed by having PLC write it s time to BFM addresses ranging from 7 t
165. resent value is 0 IEC 60870 5 101 Error Code BFM address 341 Shows error code returned by IEC 60870 5 101 protocol Error codes are described in Table 7 14 If no error is present value is 0 IEC 60870 5 104 Error Code BFM address 35 Shows error code returned by IEC 60870 5 104 protocol Error codes are described in Table 7 14 If no error is present value is 0 Description No error Intercharacter timeout occurred Remote side of channel closed connection Incoming frame exceeded buffer size Received frame was for an unknown link address Illegal link function code in received frame Invalid checksum or CRC Link has not been reset frame rejected Received invalid frame count bit Did not receive correct starting sync char Entire frame was not received in specified time Link Confirm was not received in specified time Link status response not received in specified time Response was not from expected session Received unexpected reply frame rejected Did not receive correct second sync char Did not receive correct ending sync character Variable length bytes in FT1 2 frame did not match Received invalid dir bit in control octet Confirm of 104 U format APDU not received Acknowledge of 104 l format APDU not received Unknown confirming sequence number in received APDU Received APDU not in sequence with previous APDU Sequen
166. ress dec DNP3 BFM mapping 21760 AOO 16 bit Actual Values 21761 AO1 16 bit Actual Values 21762 AO2 16 bit Actual Values 22271 A0511 16 bit Actual Values PLC Data perm type R W INT R W INT R W INT R W INT R W INT Tab 9 18 b15 b14 b13 b12 b11 DNP3 16 bit Analog Outputs Actual Values BFM mapping b10 b9 b8 b7 b6 b4 b3 b2 b1 b0 7 PLC Data address REC OVR LOC REM CER RES ONL REC OVR LOC REM CER RES ONL perm type dec 22784 DAOT flag DAOO flag R VV VVORD 22785 DAO3 flag DAO2 flag R VV VVORD me R VV VVORD 22911 DAO255 flag 254 flag R W WORD Tab 9 19 DNP3 32 bit Analog Outputs flags BFM mapping 7 PLC Data address fre dec p 32 bit Actual Values R W DINT DAO1 32 bit Actual Values R W DINT R W DINT 23422 23423 DAO255 32 bit Actual Values R W DINT Tab 9 20 DNP3 32 bit Analog Outputs Actual Values BFM mapping ME RTU Remote Terminal Unit 9 11 Device profile DNP3 Functionality b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi bO 7 PLC Dat address 1 REC OVR REM CER RES ONL REC OVR LOC REM CER RES ONL 5 perm type dec 23936 RAO1 flag RAOO flag R VV VVORD 23937 RAO3 flag RAO2 flag R VV VVORD VVORD 24063 RAO255 flag RAO254 flag
167. riate flags bits for specific signal Structure of the flags is protocol de pendent For DNP3 flags mapping refer to section 9 4 4 Analog inputs Table 9 11 for 16 bit Table 9 12 for 32 bit and Table 9 13 for Short Floating Point Analog Inputs 6 For IEC 60870 5 flags mapping refer to section 10 4 4 Analog Inputs Table 10 10 for 16 bit and Table 10 11 for Short Floating Point Analog Inputs 32 bit Analog Inputs are mapped as 32 Bit string refer to section 10 4 4 Analog Inputs Table 10 12 BFM R 5 7 9600 AlO 16 bit R VV INT 9601 AH 16 bit R VV INT 9602 Al2 16 bit R W INT R VV INT 10111 1511 16 bit R W INT Tab 7 28 16 bit Analog Inputs BFM mapping ad ee PLC Data dec perm type 10368 DAIO 32 bit R W DINT 10370 DAI1 32 bit R W DINT R W DINT 10878 DAI255 32 bit R W DINT 10879 Tab 7 29 32 bit Analog Inputs BFM mapping BFM PLC Data perm type 11008 RAIO float R W REAL 11010 RAI1 float R W REAL R W REAL 11518 RAI255 float R W REAL 11519 Tab 7 30 Short Floating Point Analog Inputs BFM mapping ME RTU Remote Terminal Unit 7 17 Assignment of buffer memory Functions and Buffer Memory Analog Outputs Analog Outputs are values vvhich represent an analog output in the application or a value of a soft ware registers like set points The user has to read the values from the BFM and write th
168. ring CAUTION Cut off all phases of the power source externally before starting the installation or wiring work thus avoiding the potential for electric shock or damages to the product Before wiring the unit confirm that the rated voltage and terminal allocation of the unit are correct ExampleV Example of wiring and power supply wiring between FX3U PLC and ME RTU D Grounding T1A 250 V 100 Q or less 424V OV Externally supplied for ME RTU External T250 mA 250 V fuse must be used if power is supplied from unprotected power source such as battery or accumulator Fig 4 1 ME RTU power supply wiring Grounding recommendation FX3 Q L FX3 Q L FX3 Q L PLC PLC PLC Independent grounding Shared grounding Common grounding Best configuration Good configuration Not allowed Fig 4 2 ME RTU grounding towards PLC ME RTU Remote Terminal Unit 4 1 Ethernet vviring VViring CAUTION 6 Connecting cables for power supply to ME RTU must be shorter than 3 metres 9 87 6 Fix the connecting cables for power supply so that the connector is not directly stressed 6 Internal fuse protects internal circuit of RTU gatevvay Internal fuse cannot break due to user s actions Melted internal fuse indicates ME RTU general failure If internal fuse should break user cannot replace the internal fuse by her himself therefore the ME RTU must be sent to the manufacturer for servicing 4 2 Ethernet wiring For Ethernet
169. rred on the IEC 60870 5 101 communication system b7 IEC 60870 5 104 error If this bit is set an error occurred on the IEC 60870 5 104 communication system b8 Reserved b9 FX3 PLC STOP Turns ON if FX3 PLC goes to STOP b10 to b15 Tab 7 12 Module code BFM address 30 Reserved Error statuses BFM allocation Shows the ME RTU Module Code K1060 which is a unique identifier of the module Communication Control Status BFM address 32 The Communication Status and Control status are allocated as follows Name Description b0 PLC Ethernet When signal is ON the Ethernet with PLC connection is active communication with Q and L PLCs via Ethernet b1 GSM When signal is ON the GSM connection is active b2 GPRS EDGE If this bit is set then a GSM error e g no connection is present on the ME RTU and for more information the ME RTU should be checked b3 Reserved b4 Reserved b5 Reserved b6 Reserved b7 PLC FX3 When signal is ON the FX3 PLC is running When signal is OFF the FX3 PLC is in STOP or RESET mode b8 to b15 Tab 7 13 Reserved Communication Control Status BFM allocation MITSUBISHI ELECTRIC Functions and Buffer Memory Assignment of buffer memory DNP3 Error Code BFM address 33 Shows error code returned by the DNP3 protocol Error codes are described in Table 7 14 If no error s p
170. s LI Configurable LI Configurable L Configurable LI Configurable 1 Configurable 1 Configurable 1 Configurable LJ Configurable 1 Configurable LI Configurable 1 Configurable 1 Configurable 1 Configurable L Configurable 1 Configurable Attach explanation if Sometimes or Configurable was checked for any operation MITSUBISHI ELECTRIC DNP V3 0 Device Profile Reports Binary Input Change Events when no specific variation requested LI Never Only time tagged L Only non time tagged L Configurable to send one or the other Reports time tagged Binary Input Change Events when no specific variation requested LI Never Binary Input Change With Time LI Binary Input Change With Relative Time L Configurable Sends Unsolicited Responses LI Never Configurable Only certain objects Sometimes attach explanation ENABLE DISABLE UNSOLICITED Function codes supported LI L1 DNP V3 0 DEVICE PROFILE DOCUMENT Sends Static Data in Unsolicited Responses Never L When Device Restarts When Status Flags Change No other options are permitted Also see the DNP 3 0 Implementation Table in section A 1 beginning on page 13 4 Default Counter Object Variation L No Counters Reported L Configurable L1 Default Object Default Variation Point by point list attached Sends Multi Fragment Responses Yes LI L Configurable ME RTU Remote Terminal Unit Counters Rol
171. se MITSUBISHI ELECTRIC ME RTU User s Manual Remote Terminal Unit Art no 278247 ene ak MITSUBISHI ELECTRIC NDUSTR AL AUTOMATION About this Manual The texts illustrations diagrams and examples in this manual are provided for information purposes only They are intended as aids to help explain the installation operation programming If you have any questions about the installation and operation of any of the products described in this manual please contact your local sales office or distributor see back cover You can find the latest information and answers to frequently asked questions on our website at https eu3a mitsubishielectric com MITSUBISHI ELECTRIC EUROPE B V reserves the right to make changes to this manual or the technical specifications of its products at any time without notice User s Manual Remote Terminal Unit ME RTU Art no 278247 Changes Additions Corrections A 07 2014 pdp First edition Safety Guidelines For use by qualified staff only This manual is only intended for use by properly trained and qualified electrical technicians who are fully acquainted with the relevant automation technology safety standards All work with the hardware described including system design installation configuration maintenance service and testing of the equipment may only be performed by trained electrical technicians with approved qualifications who are fully acquainted with all the ap
172. synchronization commands 6 Supports any applicable physical communication including RS232 with USB to RS232 converter and TCP IP Can be used in event driven or non event driven environments Provides support for statistics of Communication protocol errors such as bad CRC invalid synchro nization byte and incorrect frame sequence number to help identify faulty communication lines 10 1 IEC 60870 5 101 104 configuration settings ASDU Address Device link layer address Delete oldest event If events buffer is full replace oldest event with newly generated event Tab 10 1 IEC 60870 5 configuration settings 10 1 1 IEC 60870 5 101 channel and session configuration When configuring IEC 60870 5 101 master consider the following settings Channel configuration Link mode UNBALANCED Link address size 1 Session configuration ASDU address size 2 Cause of transmission COT size 1 Information object address IOA size 3 Link address 3 ME RTU Remote Terminal Unit 10 1 IEC 60870 5 101 104 supported data types IEC 60870 5 101 104 Functionality 10 2 10 2 IEC 60870 5 101 104 supported data types The ME RTU IEC60870 5 101 104 protocol implementation supports the follovving data types 6 Digital inputs M SP NA 1 and outputs C SC 1 6 Double digital inputs M DP NA 1 6 32 bit counters M 1 16 bit and short floating point analog inputs M ME NB 1 and M ME NC 1 and
173. ta exchange 8 3 8 2 1 UDP COMMUNICA O escien ma su baba saa ma ay heads 8 3 B22 IL L N inten ere 8 5 8 3 Q series before SN11012 PLC data exchange 8 7 8 3 1 UDF COMAN A eines tena nee olo eds 8 7 6 IC COMMUNIC ie er ie eee bab ake eee 8 9 8 4 PLC Data exchange programming examples and rules 8 11 8 4 1 F OBT DO c2ncrcccuseraserasccdcesresenacareeetenseueniwesranaeecae see ancedde 8 11 6210 ce 8 11 8 4 3 Exchanging data vvith ME RTU 8 11 VI aa MITSUBISHI ELECTRIC Contents 9 DNP3 Functionality ele LD Teate r s bl bee eee ear 9 1 9 2 DNP3 configuration settings 9 2 93 UN s pported dataty5e ave das m ei aa Ra ve aad eae ayar 9 2 4 WNP SB EIVE Map DING zada Aaaa pada R ad 9 3 9 4 1 BIN Aly HDUtS ama 9 3 9 4 2 Double binary B t aaa wank A wena ewe hates aeons wane 9 5 9 4 3 COUN CIS Lo aaa ch Aleck ciara ease ened anaes al 9 6 044 Analog INDUS em Ona one Da Dayi 9 7 9 4 5 Binary OULOULS lt 5 ise siesden otek 77777 7 77 ear ales diag 9 9 946 aaa balda she raw bin ba ne soe 9 10 905 Device POE errre aaa ee ee a ba so aa 9 12 10 IEC 60870 5 101 104
174. tes value to this WORD ME RTU Remote Terminal Unit 10 5 IEC 60870 5 101 104 flags BFM mapping IEC 60870 5 101 104 Functionality 10 4 3 32 bit counters Counters are mapped as integrated totals The Quality Descriptors are mapped to the 32 bit counters flags BFM section Status Short form Value Description SEQUENCE This number is incremented vvith each counter read NUMBER Q operation 1 carry Counter overflovv occurs vvhen value increments from CARRY CY 32 32 0 normal 2 1 to or from 2 to COUNTER 1 adjusted This means that the counter value has been adjusted since ADJUSTED 0 normal the last reading 1 invalid This indicates that the value cannot be used because it INVALID may be incorrect due to a fault or other abnormal 0 valid condition Tab 10 7 IEC 60870 8 Integrated totals supported Quality Descriptors b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 bi bO BFM address IV CA SQ IV SQ d 7 perm type dec 9472 DBC1 flags DBCO flags R W WORD 9473 DBC3 flags DBC2 flags R W WORD 9474 5 flags DBC4 flags R W WORD R VV VVORD 9599 DBC255 flags DBC254 flags R VV VVORD Tab 10 8 IEC 60870 5 Integrated totals Quality Descriptors BFM mapping NOTES All empty grayed flags should always be set to by PLC program The INVALID flags IV should
175. the GSM module will lock the SIM card immediately If PIN code is changed or the SIM card with different PIN code is going to be used first delete the PIN code in Web Interface PIN code entry window and press Save After this insert the SIM card and repeat the upper procedure If this procedure is avoided there is a risk of SIM card becoming locked If SIM card is locked the PUK code can NOT be inserted by ME RTU Remove the SIM card and use other means to unlock the SIM card such as standard mobile phone Access Point Name APN Username and Password are supplied by GSM provider Some GSM pro viders do not have Username and or Password defined in this case Enable PAP must be disabled MITSUBISHI ELECTRIC Settings and Diagnostics Configuring ME RTU via integrated vveb server Parameters other than PIN are stored to FLASH vvhen Save button is pressed Mobile Connection PIN PIN Check PIN Save m APN Enable PAP PAP Username PAP Password Save Active internet Enable default Disable image056 Fig 11 25 Web User Interface Mobile parameters settings Mobile Connection Test Under the Mobile Connection Test tag mobile signal strength is displays as a bar It is also possible to check connectivity by using ping test It is possible to IP address or hostname If hostname is used for testing make sure that Mobile is set as DNS priority refer to General communication
176. ting point Al Enable or disable events events Enable Disable Disable Size of buffer to store Short Floating Point Al Integer from 1 to 65000 10000 events Short Floating Point Al events buffer size Tab 11 5 Parameters for Database events settings 11 22 aa MITSUBISHI ELECTRIC Settings and Diagnostics 11 4 4 11 4 5 Settings parameters DNP3 settings Settings Subsection Setting name Description Details Default value TCP port number Port number for protocol Integer from 1 to 65535 20000 communication Enable Unsolicited Enable unsolicited M messages to master Enable Disable Enable essages station Time in milliseconds to wait for Unsolicited Confirm confirmation response Integer from 1 to 65535 5000 Timeout from control station for the unsolicited response Link Status Period Linkstatuscheck ihtegerfrom 11065535 10000 interval milliseconds Common Enable Self Address Enable or disable Enable Disable Disable self address vadare soute Enable or disable validation of source Enable Disable Enable Address address Source Address ME RTU DNP3 address Integer from 0 to 65519 3 Destination Address PRES este SC RUA Integer from 0 to 65519 4 address Enable or disable Delete Oldest Event deleting of oldest Enable Disable Enable event Select timeout select command 10000 timeout milliseconds Tab 11 6 Parameters for DNP3 settings IEC 60870 5 101 104 se
177. tion can be performed using XML configuration file To upload XML configuration file to ME RTU click Browse button and select configuration file from computer Then click Upload configuration to start the configuration process The ME RTU XML configuration file can be down loaded with Backup configuration button ME RTU configuration can be set to default as configured when first powered up by clicking Restore to defaults button Upload configuration Browse_ No file selected 1 Backup configuration Restore to defaults image045 Fig 11 12 Web User Interface ME RTU configuration Data Retention Settings Here the data retention functionality described in section 7 5 Power down and data retention can be enabled A Data retention write interval in minutes defines the period at which the retained data is written to the SD card Prepare SD card formats the SD card and sets up the required SD card memory partitions After pressing the button wait up to 15 seconds for the process to complete message box pops up Only use fresh unused SD card The SD card memory is limited to the number of erase and write cycles With increased erase and write cycles the probability of data corruption increases It is highly recommended to use industrial SD card with built in wear levelling algorithm and high speed operation Enable DataRetention Enable Disable Data retention write interval
178. ttings Settings Subsection Setting name Description Details Default value Common Tab 11 7 ME RTU Remote Terminal Unit TCP port number for Port number protocol Integer from 1 to 65535 2404 communication Common address of ASDU Address the ASDU Integer from 1 to 65534 5 Cyclic data generation period milliseconds RBE Scan Period Event 7 period 0 milliseconds Select timeout select command 0 timeout milliseconds Enable or disable Delete Oldest Event deleting of oldest Enable Disable Enable event TO Timeout of connection establishment T1 Time to wait for ACK to a transmitted APDU Time to wait before T2 sending Supervisory APDU ACK T3 Idle time before sending TEST APDU Parameters for IEC 60870 5 101 104 settings 11 23 Settings parameters 11 4 6 Mobile settings Settings Subsection Setting name Description Settings and Diagnostics Details Default value Mobile Netvvork Provider Connection Settings Mobile Connection Enable or disable GPRS connection Active Disable Active PIN SIM card PIN number if enabled 0 99999999 APN APN identifier check vvith mobile operator String internet Enable PAP Enable PAP authentication for GPRS Enable Disable Enable PAP Username PAP username String default PAP Passvvord PAP passvvord String default Mobile
179. ual entry or otherwise It means that the value is not 0 normal derived from the normal measurement 1 not topical A NOT TOPICAL p This means that the value was not updated successfully at 0 normal last time it was due to be updated 1 invalid This indicates that the value cannot be used because it INVALID may be incorrect due to a fault or other abnormal 0 valid condition Tab 10 5 IEC 60870 5 Double point information supported Quality Descriptors b15 b14 b13 b12 b11 b10 b9 b8 b7 b b5 b4 b3 b2 b1 bO fe NT SB BL 557777 sb st 5777775 a d m dec perm type 6144 DBI1 flags DBIO flags R W WORD 6145 DBI3 flags DBI2 flags R W WORD 6146 DBI5 flags DBI4 flags R W WORD es R W WORD 8191 DBI4095 flags 14094 flags R W WORD Tab 10 6 IEC 60870 5 Double point information Quality Descriptors BFM mapping NOTES All empty grayed flags should always be set to by PLC program The INVALID flags IV should be set to 0 by PLC program The IV flag is set automatically to value 0 when data values is written Value is automatically set to 1 when FX3 series PLC goes to STOP or heartbeat is lost when communicating with Q L series PLC Because 8 15 are group in WORD of 16 bits the INVALID flags are reset for all those 8 DBIs which are mapped to the same WORD when PLC first wri
180. uantity Number of 32 bit AO Integer from 0 to 256 quantity Integer from 0 to 8192 Short floating point Number of short AO quantity floating point AO Integer from 0 to 256 Tab 11 4 Parameters for Database elements settings Settings Subsection Setting name Description Details Default value Binary inputs events Enable Disable Disable events Binary nputs events Size of buffer to store BI buffersize g n Integer from 1 to 65000 10000 Digital signals events Double binary inputs events k Enable Disable Disable Double Binary nputs events Size of buffer to store bu DBI events Integer from 1 to 65000 10000 16 bit counters events Enable Disable Disable 16 bit Counters events Size of buffer to store buffer size 16 bit Counter events Integer from 1 to 65000 2000 Counters events 32 bit counters events Enable or disable Enable Disable Disable events 32 bit Counters events Size of buffer to store buffer size 32 bit Counter events Integer from 1 to 65000 2000 16 bit Al events Enable or disable Enable Disable Disable events Size of buffer to store 16 bit Al events buffer size 16 bit Al events Integer from 1 to 65000 10000 32 bit Al events Enable or disable Enable Disable Disable events Analog inputs events Size of buffer to store 32 bit Al events buffer size 32 bit Al events Integer from 1 to 65000 10000 Short floa
181. uffer communication for Q series before SN11012 The interface allows the series PLC to accesses the internal BFM of the ME RTU 6922 57 E i B a Woes B n LU Boem image022 Fig 5 3 Q L series configuration CAUTION If FX3 series PLC is connected to the ME RTU via FX Bus and even though Q L PLC type is selected refer to Fig 11 9 the FX3 PLC can still communicate with ME RTU This may cause data collision when writing to the same ME RTU BFM address with FX3 series PLC and Q L series PLC ME RTU Remote Terminal Unit 5 3 Functionality overvievv Features 5 2 3 5 2 4 Communication with remote controlling station via cellular network The ME RTU can communicate with the remote controlling station over the cellular network The ME RTU can be accessed using the DNP3 or IEC 60870 5 104 communication protocol If the IP address is dynamically allocated the ME RTU IP address can be resolved using DDNS To secure the data transfer a VPN connection can also be established Cellular network Remote site Remote control centre image023 Fig 5 4 Communication via cellular network Communication with remote controlling station via Ethernet The ME RTU can communicate with the remote controlling station via the Ethernet network The ME RTU can be accessed using the DNP3 or IEC 60870 5 104 communication protocol If the IP address is dynamically allocated the ME RTU IP addr
182. up TAP network adapter setup Building Certificates and Keys 1 The certificate authority CA certificate and key Type and run the following command in cmd When prompted enter your country etc These will have default values which appear in brackets For your Common Name a good choice is to pick a name to identify your company s Certificate Authority For example OpenVPN CA Country Name 2 letter code US State or Province Name full name CA Locality Name eg city SanFrancisco Organization Name eg company OpenVPN Organizational Unit Name eg section Common Name eg your name or your server s hostname OpenVPN CA Email Address mail host domain CAUTION The default validity of certificate is 10 years After certificate validity expires upper procedure must repeat In order to create certificate with longer validity open build ca with text editor and increase the number of days after the days tag ME RTU Remote Terminal Unit 12 3 VPN services 12 4 IT Functionality 2 The server certificate and key Type the follovving command into cmd build key server server When prompted enter the Common Name as server When prompted to sign the certificate enter y When prompted to commit enter y 3 Generate Diffie Hellman parameters This is necessary to set up the encryption by typing the following command into cmd build dh
183. val ue is mapped to the Short Floating Point Analog Outputs BFM section from where the PLC can read the value and set the physical output 10 5 Device profile The device profile for the IEC 60870 5 101 104 is found in the Appendix B 10 8 aa MITSUBISHI ELECTRIC Settings and Diagnostics Settings overview 11 Settings and Diagnostics 11 1 Settings overview The settings of the ME RTU are divided into more main groups Operating mode General settings Network settings Cellular settings Database settings DNP3 settings IEC 60870 5 101 104 settings PLC communication settings Each main group has also different sub sections of settings ME RTU Remote Terminal Unit 11 1 Parameter setting and setting procedure Settings and Diagnostics 11 2 11 2 Parameter setting and setting procedure The ME RTU has an integrated basic webserver which provides a web user interface for configuration of the module and diagnostic of the functionality The web user interface made up of the following sections Header where a logo is located and the name of the device 6 A navigation menu to address different sections 6 Current page vvhere the desired information is listed 6 Footer with Copyright information The vveb user interface has the follovving sections 6 Main page provides basic information about the ME RTU and provides an overvievv of the functionality Local network enables the user to configure the network settings of
184. ware safety precautions to prevent the possibil ity of undefined control system states caused by signal line cable or core breaks ME RTU Remote Terminal Unit NOTE ExampleV Symbols Used in this Manual Use of instructions Instructions concerning important information are marked separately and are displayed as follows Text of instruction Example text A Use of handling instructions Handling instructions are steps that must be carried out in their exact sequence during startup op eration maintenance and similar operations They are numbered consecutively black numbers in white circles Text 2 Text 3 Text Use of footnotes in tables Instructions in tables are explained in footnotes underneath the tables in superscript There is a foot note character at the appropriate position in the table in superscript If there are several footnotes for one table then these are numbered consecutively underneath the ta ble black numbers in white circle in superscript Text Text G Text MITSUBISHI ELECTRIC Contents Contents 1 Overvievv ALA SVU BLM seat ce 0097960770 020700 0072000 0 02 ee mieten ies dust 1 1 2 Specifications 2 1 External dimensions dice ds Khe gah R la aa a A hasan Ro bower aaa 2 1 22 lan S a ou 2 2 3 Installation 3 1 MOUREN ea m sama olu 3 1 3 1 1 a l l 3 1 3 1 2 DIN Tall M
185. y s information place dot if not used instead of blank set KEY_COUNTRY US set KEY_PROVINCE CA set KEY_CITY SanFrancisco set KEY_ORG OpenVPN set KEY_EMAIL mail host domain 5 Save the file and exit text editor 6 Run the following commands in cmd type the following command and press enter vars type the following command and press enter clean all OpenVPN 2 3 0 1001 Setu He pe p Choose Components PE N Choose which features of OpenVPN 2 3 0 1001 you want to install Select the components to install upgrade Stop any OpenVPN processes or the OpenVPN service if it is running All DLLs are installed locally Select components to install OpenSSL Utilities OpenVPN RSA Certificate Management Scripts Add OpenVPN to PATH v Dependencies Advanced OpenSSL DLLs Fala ia Descripton Space required 4 6MB Next gt image061 Fig 12 1 OpenVPN setup components selection MITSUBISHI ELECTRIC IT Functionality VPN services lt Windows Security Would you like to install this device software Name TAP Windows Provider V9 Network adapters A Publisher OpenVPN Technologies nc Always trust software from OpenVPN Install Don t Install Technologies Inc Mi You should only install driver software from publishers you trust How can 1 decide which device software is safe to install image062 Fig 12 2 OpenVPN set

e caution

Contents

Download Pdf Manuals

Related Search

Related Contents