Home

T200 & Flair 200C & R200-ATS100

1. Internal value 0 10000 357 80000 552000 700 5000 75000 Invalid Min Max Value parameters 0 0 TM16 0 10000 357 700 5000 0x8000 0 0 TM32 0 0 0 0 7 0 0 1 0x8000 0 4000 0 Ox7FFF 2924 Ox7FFF Ox7FFF 0x8000 0x8000 0x8000 0x8000 0 400000 0 819 29 6553 Ox7FFF 0x8000 0x8000 0x8000 0x8000 4000 4000 0 Ox7FFF 2924 Ox7FFF Ox7FFF 5734 0x8000 0x8000 0x8000 4000 400000 32119 30496 32061 19141 Ox7FFF 32232 0x8000 0x8000 0x8000 400000 400000 0 818 28 6553 Ox7FFF 57 410 6144 0x8000 32768 32767 0 10000 357 Ox7FFF Ox7FFF 700 5000 0x8000 0x8000 Scaling example for a full scale at 400 amperes Max value an internal TM value of 8192 0x2000 corresponds to 8192 400 32767 0 100 A with Max 400 and Min 0 54 Schneider P Electric NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 8 2 MODBUS functions MODBUS is a master slave protocol It is used to read or write one or more words 16 bits as well as diagnostic counters Functions available 1 read n output bits 2 read n input bits 3 read n output words 4 read n input words a 5 write a bit 6 write a word 8 read diagnostic counters 16 write several words Exchanges are carried out at the master s initiative and comprise a request from the master followed by the reply from the
2. NT00188 EN 06 Schneider 61 Easergy T200 F200C R200 Personal notes NT00188 EN 06 Schneider 62 lectric Schneider Electric Industries SAS As standards specifications and designs develop from time to time always ask for confirmation of the information given in this Schneider Electric Telecontrol publication 839 chemin des Batterses Z I Ouest F 01700 St Maurice de Beynost Tel 33 0 4 78 55 13 13 Fax 33 0 4 78 55 50 00 http www schneider electric com E mail telecontrol schneider electric com Publication production and printing Schneider Electric NT00188 EN 06 01 2014 Telecontrol Made in France Europe
3. Address 57344 Table length events 50 There are some slight differences e Report by exception modes are not available e TM Read Mode This parameter does not exist The R200 acts as it is set to Direct e Event configuration The legacy type corresponds to the event management described on chapter 4 2 The TI 086 type corresponds to another format described in the technical invariant T1086 This format is not detailed in this document and should be used only if the scada or master is also handling this format e Modbus TCP configuration The TCP server port and connection timeout can be modified under Settings SCADA communication Ethernet Port 20 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication TCP Port Parameters Modbus Unk Modbus TCP parameters Server port 502 Connection Timeout x1ms 60000 Save Cancel e Digital variables address format The T200 and F200C are using a Word DI with Word between 0 and 4095 and Bit between 0 and 15 The R200 works with bit address between 0 and 65535 decimal format which corresponds to 16 Word Bit Name Local Remote Access SPS_9 Class Substation ei Rank EI Source Built in External address 8000 The hexadecimal value and the Word Bit format are indicated when the value is changed by the user General Name Local Remote Access Display v Class Substation v Rank SPS_9 8001 Source Bui
4. MV voltage presence Far23DM_ D SPs 8052_ 1e74h MV voltage presence Vi or U13 Paan A ses 8053 1F75h MV voltage presence V2 or U13 Far23DM_ A SPs apen MV voltage presence V3 or U23 Flair23DM A ses s055 1F77h Residual voltage presence Far23DM_ D SPs 8056 1F7 h MV voltage absence Paan D 057 iF 79h MV voltage absence V1 or U13 Paan A 8058 1F7Ah MV voltage absence V2 or U13 Paan A 8059 Tee MV voltage absence V3 or U23 Flar23DM_ A B060 1F7Ch Max Current Reset Indication Far23DM_ O m a ma Protection 50 51 I gt delayed vimo Oo as Protection 60 51 1 gt gt delayed VIPO Oo ia Protection 50 51 Ka delayed 1 Mea Oo as wa Protection 50 51 T gt pickup VIPATO o as wa Protection 50 51 I gt gt pickup MIPATO Oo as wa Protection 50 511 gt gt gt pickup vimo gt as ma Protection 50N 51N lo delayed Mea O as wa Protection 50N 51N lo gt gt delayed Mea O wa wa Protection 50N 51N lo gt pickup VIPO na wa Protection 50N 51N To gt gt pickup Mea O as wa Protection 49 RMS thermal alam Mea O as ma NT00188 EN 06 Schneider 43 Easergy T200 F200C R200 Modbus communication ubicle 1 data rotection 49 RMS thermal tripping xternal trip by external input ripping rip by test menu rip Indication hase peak demand values reset indication Operation counter rip counter hase earth fault
5. DVD ojo ojo cyc cc t m m O O TIO CIS CIC e r NO Po o o Q o ojo GO 3 2 3 2 Se e 5 2 5 3 o oa 4 40 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 7 6 R200 ATS100 Indexes for digital object type SPS DPS SPC DPC are bit addresses refer to chapter 4 4 Object type cross reference table Object type T200 F200C Designation Comment SPS TSS DI Single Point Status DPS TSD DDI Double Point Status SPC TCS DO Single Point Control Possibly associated to an SPS DPC TCD DDO Double Point Control Possibly associated to a DPS MV TM Al Measured Value On 16 and 32 bits APG AO Analogue Point Control On 16 and 32 bits INC CNT Integer Control On 16 and 32 bits used for presettable counters Access A Administrator ADMIN O Operator EXPL M Monitoring VISU 7 6 1 RTU data Index Index Dec Hex RTU Specific Data Equipment start R200 ATS100 Automatism Data ATS100 fo DPC 7212 1c2ch Goto parae L uo O DPC 7216 1030h Goto St aso o oe 728 ICR Seet aso o ore ziel Goss aso o Dre 7222 ee Segen o DPG 7224 1038h Automatism stas atso D DPs 9292 244ch Automatism has stared Am p sp s015 1FaFh Automatism locked Am Db sp Tanson Digital ouput P o De 720 ic2n Digitalouiput2 Ro o Dre aen
6. The Supervisor interrogates each T200 in succession so that it may return its information R Reading The Supervisor works by Reading or Writing data to or from the remote terminal units NT00188 EN 06 Schneider 25 Easergy T200 F200C R200 Modbus Communication Report By Exception Can be used to manage a specific MODBUS protocol or the T200 which is the slave can take the initiative of dialogue to send an alarm Mode often used in place of Supervisor polling to avoid overloading the communication media S Select then Execute Select then Operate In this command execution mode the command when it is authorized is executed in two stages The T200 first receives a selection message It then receives an execution message It then checks that the same device is involved If this check is satisfactory it executes the command sequence Throughout the command s duration checks are performed Any detected anomaly causes immediate stoppage of the command Moreover if after receiving the selection message an excessive time elapses without the T200 receiving the execution message the command is cancelled This time is configured in the Selection Timeout section Slave Refers in a MODBUS communication system to the device that merely replies to the requests of a master Squelch Occupancy signal provided by analogue type radio equipment 7 TCD T l commande telecontrol coded on 2 bits Time synchronization field Contains t
7. However this has its limits since two devices may see the network free and start sending simultaneously Even apart from this case there is always a time lag for detection of network occupancy Let us consider a device going into sending mode Throughout the time needed for detection of this state another device will consider the network as free and will therefore be enabled to send To overcome this collision avoidance can be used Depending on the transmission medium there will be several possible options Non activated or Standard Non activated Standard squelch used for busy state Standard CD used for busy state The first group of options is proposed when the transmission medium can provide the occupancy state via the CD signal This is the case when the sent frames are delimited by a signal generally RTS said signal being linked to the CD or causing its activation case in which the RTS signal causes rising of a carrier detected on CD by the other device The second group of options is proposed when using a radio medium There are generally 2 signals the CD Carrier Detect signal and the Squelch signal When the squelch signal is available it should be preferred to the CD signal This is because carrier detection can be caused by noise on the line whereas the squelch is generally more secure and gives more reliable information In the second option when collision avoidance is activated an additional window appears in t
8. 14 1SS546 visu Binary input Digital input 15 UIS p47 visu Binary input Digitalinuiis ISS548 visu Binary input Digital input 17 TSS549 visu Binary input Digital input 18 rss550 visu Binary input Digital input 19 D So visu Binary input Digitalinnut20o A rsssis visu Binary input Digital input 21 rsseig visu Binary input_ 63 8 3F8 Digital input 22 Tss820 visu Binary input_ 63 13 3FD Digital input 23 See visu Binary input 63 14 3FE Digital input 24 rsse22 visu Binary input 63 15 3FF NT00188 EN 06 Schneider 35 P Electric Easergy T200 F200C R200 Modbus communication 7 4 Flair 200C Type Index Index its Dec Hex Flair 200C state Fault current indicator reset TCD17 EXPL Relay output 48 6 306 control block Missing voltage S VISU Binary input_ 528 348 Chargerfaut SI ISU Binaryimput 516 336 Batteryfautt SS ISU Binary input__ 51 7 387 General shutdown _ 1SS25 visu Binaryimput NA NA Battery disconnected ees ISU Binayimput 51 8 338 Batterylow US ISU Binary input_ NA NA Equipment start TSS31 VISU Binary input NA NA Test communication TSS32 VISU Binary input NA NA Frequency TM20 VISU Analogue 70 46 input 16 bits Voltage measure TM42 VISU Analogue 50 input 16 bits Measurechannelt Y AA i RP Mal input 16 bits i ld DEI
9. Daslommg Ro o ore 72 Digtaloutput4 Ro o Dre 720 1026 Double digital ovpu 1 Pa o Dre 7208 Double digital output 34 1 ma o Dee 7210 1C2An ATS100 ACO STA O0 DPC 720 Digtaloutput2 Luana O DPC 7202 1C22h Digitalouiput i R b DPs 9280 24401 Digitalouiput2 Reo b DPS 9282 2442 Digtaloupts Reo b DPs e2s4 2a44n Digtaloutput4 Ia DI DPs Les Double digital output 1 mm D DPS 9288 244A Double digital outout3 4 Pa D DPS Leo Ee BEE KSC RES PA NT00188 EN 06 Schneider 41 Easergy T200 F200C R200 Modbus communication Digital output1 _ ATS100 ACO BTA 2440h Digital output2 ATS1t00 ACO BTA 9282 2442h 2444h 9286_ 2448h 1F41h 1F42h 1F43h 1F44h 8005 1F45h 1F46h 8007 1F47h 1F48h Digitalinputt_____ATS1OO ACO BTA 1F41h 1F42h 1F43h 8004 1F44h Voltage presence SI ATS100 ACO BTA 1F45h ATS100 ACO BTA ATS100 ACO BTA ATS100 ACO BTA Internal temperature R200 ATS100 D Mvi6 800 320 200 ATS100 D SPs 8000 1F40h 200 ATS100 D SPS 8009 1F49h 200 ATS100 D SPS 8010 1F4Ah 200 ATS100 D SPS 8011 1F4Bh R200 ATS100 R200 ATS100 H 7 6 2 Global data Index Index Dec Hex Global data Restato448V omg O SPC na na ACOFF P D SPS 8025 1F59h General Shutdown em D SPS 8026 1F5Ah BatteryLow em D SPS 8027 1F5Bh Ba
10. NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Type Index Index a fe No hannel 9 Switch position TS B81 ISU Binary input 53 0 350 Switch locked TSS593 visu Binaryimput 60 8 3C8 O A AA e control block MV voltage present auxiliary DI eso visu PBinaryinmput 61 2 3D2 Earthfaut frssess visu Binaryimput 60 1 3C1 Phasefault rss621 visu Binaryimput 60 0 3C0 MA ies input 16 bits Channel 10 Switch position____ rsbs2 visu PBinaryimput 53 2 352 Switch ocked rsse25 visu Binaryimput 60 9 3C9 control block MV voltage present auxiliary DI Son visu Binaryimput 61 3 3D3 Earthfaut rsses7 visu Binaryimput 60 3 3C3 Phase fault rsses3 visu Binaryimput 60 2 3C2 A ea input 16 bits Switch position rsSDbe3z visu PBinaryimput 53 4 354 Switch ocked rss657 visu Binaryimput 60 10 3CA TA control block MV voltage present auxiliary DI 1SS 662 visu _ Binary input_ 614 3D4_ Eathfat rssezs visu Binaryimput 60 5 3C5 Phase fault S visu Binary input 60 4 3C4 peon PSS a input 16 bits hannel 12 Switch position TSD84 visu Binary input Switch ode TSS689 visu PBinaryinmput 60 11 3CB control block MV voltage present auxiliary DI TSS 694 vi
11. NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication e Frames structure The addressing system and the functions used are the same The frames have the same structure except the slave number byte which is replaced by an MBAP header with the following structure Transaction Id Protocol Id Length Unit Id 2 bytes 2 bytes 2 bytes 1 byte Transaction Identifier 2 bytes Used to associate transactions questions and responses The Modbus server copies the question transaction identifier to the response Protocol Identifier 2 bytes Used for intra system multiplexing The Modbus protocol is identified by the value 0 Length 2 bytes number of bytes following this field including the Unit Identifier and the data Unit Identifier 1 byte This field is used for intra system routing see the Gateway function The default value is OxXFF NT00188 EN 06 Schneider 9 Easergy T200 F200C R200 Modbus Communication 4 Configuration 4 1 General configuration of the protocol A configuration screen contains all the parameters directly related to the Protocol Protocol Parameters MODBUS Port 2 Device address fi Server Port 502 Timeout leo 3 Specific modbus parameters Loss of event Index E 2 Command type Code CR address Selection and execution e Select Timeout Select word address 256 Send Exception if undeclared adrress 5 ves y Event Configuratio
12. Phase current 1 TM2 VISU input 16 bits cr input 16 bits input 16 bits Phase current 2 TM3 VISU Phase current 3 TM 4 VISU N Neutral current T 5 VISU Analogue input 16 bits Analogue input 16 bits N Average current TM6 VISU 4 4 NA NA NA NA 00 20 NA NA NA NA NA NA NA NA NA NA Active power TM 53 VISU e EST input 16 bits input 16 bits ee A input 16 bits pes ee Es input 16 bits eg et a Ir input 16 bits A A control block eg ez ned a Ir input 16 bits Pp A A control block Reactive power TM 54 VISU MEM R WE i Wa R WE 7 64 U21 voltage measurement TM 47 VISU U Analogue input 16 bits V1 voltage measurement TM 50 VISU U Analogue NA input 16 bits Frequency TM8 VISU Analogue NA input 16 bits a i a Mi NA NA A A NA 28 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication witch position witch locked Switch command Operation counter Operation counter preset command Auxiliary Dl MV voltage present arth fault hase fault Phase current 1 Phase current 2 Active power Reactive power Apparent power Power factor Active energy Active energy preset command Reactive energy Reactive energy preset command ommon objects ocal Remote position Fault detection reset command mmediate AC power supply defect ime delayed AC power supply defect ower cut imminent NT00188 EN 06 Index Index Dec Hex Tsp2 visu Bina
13. TR U IU IUP I2UP TR P IUP I2UP TR 2U I2UP TR Object Meaning In this column appears the type of static object used in transmission Index Meaning NA Not Accessible by SCADA no external address has been configured For the SCADA to be able to access the Object simply configure an address which is not already used Reminder External address syntax The external address makes the variable accessible in read or write mode from the Supervisor via the MODBUS protocol The MODBUS addresses of the digital variables are parameterized as follows Word bit Calculation of a decimal address from a word bit e Decimal address word address x 16 bit address Example Word 15 bit 10 gt 15x16 10 250 Calculation of a word bit from a decimal address e Word address decimal address modulo 16 integer value Bit address decimal part 16 Example address 255 3 255 16 15 9375 Word 15 0 9375 16 15 Bit 15 NT00188 EN 06 Schneider 27 Easergy T200 F200C R200 Modbus Communication 7 2 T200 P Index Index Dec Hex Channel 1 Switch position TSD 1 VISU Binary input Switch locked TSS 49 VISU Binary input A AE ee Eet control block A tes input 16 bits AAA A e ele control block Ada DASS VISO Bmaryinput NA NA MV voltage present Wes vsu Bmayinput NA NA aa ISS VISO Binary input 561 381 Phase fault Wes visu Binary input 560 380
14. a session with a client if no data is exchanged 12 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication gt Collision avoidance parameters setup When the Report By Exception operating mode is selected and saved an additional window opens in the Protocol Parameters screen This window is related to the problem of collisions that can occur when the T200 calls to send an exception It depends on the transmission medium used For point to point systems telephone GSM the window is that which conventionally appears when using these types of medium i e the window for configuration of the port used for transmission it is therefore described in the T200 User Manual in the chapter corresponding to these media In this case no configuration appears in the Protocol parameters setup window However for multipoint systems radio radio type leased line etc the following window appears in the Protocol parameters setup window General protocol parameters Port 1 1200 2400 Bauds FFSK radi Collision avoidance Off e Collision avoidance Collisions may occur between frames sent by the SCADA and frames sent by a remote terminal unit between frames sent by various remote terminal units To avoid collisions insofar as possible one must know the network occupancy state The more reliable this information the more efficient the system The system can be forced to send only if the network is free
15. channel 1 TM 52 reactive power channel 1 TM 56 apparent power channel 1 TM 98 active power channel 2 TM 102 reactive power channel 2 TM 106 apparent power channel 2 CNT 101 active energy channel 1 CNT 102 active energy channel 2 T200P T2001 F200C 52 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication T200S TM 32 Word Access Function address mode allowed TM 6 average current channel 1 0040h TM 13 average current channel 2 0041h Each TM value is a signed value encoded in 2 s complement 16 bit word Depending on the calibration mode configured in the identification zone the value should be interpreted as follows e Direct mode or Adjusted or Scaling mode Following rules are applied to Direct mode Any invalid value the value can t be read properly by the equipment will be transmitted with the value 0x8000 and the invalid quality bit set Any 16bits measurement will be transferred without conversion The 32 bits measurements will be converted depending on their Max value parameter Measurement configuration Variable name curet Correction factor Direct 1 o M Logical Address Class Measure Switch 1 Vi Access DISPLAY vi Internal Address bo External Address E Unit D Scale Max value 7
16. control in progress Bit 1 Fault concerning the initial remote control order Bit 2 Serious fault detected during internal check Bit 3 External fault the switch has not reached the desired status within the time allotted Bit 4 Remote control not executed due to Station in Local mode or other disabling condition Bit 5 Failure to execute for an unknown reason Each change of state of one of this bit will produce a MODBUS event that could be seen on the event log The telecontrol center system may reset these codes by writing a O to the relevant address 7 32 bits mode Measures of F200C and T200 are coded in 16 bits Nevertheless energy counters can be coded in 32 bits So counters will be sent to the SCADA with using 2 frames of 16 bits In case of 32 bits mode this parameter determines the order of transmission MSB LSB H L or LSB MSB L H gt MODBUS TCP Server parameters We saw on chapter 3 6 that MODBUS protocol can also be used over Ethernet Consequently there are some new parameters related to the TCP IP layer that must be set Beforehand the MODBUS IP protocol must be activated Operating mode menu Communication parameters on TCPAP ports Protocol MODBUS over TCPAP Mode No report by exception Link Normal e Server port Server TCP port number Listen Typical Application lt is used when the T200 is waiting for a connection request e Timeout link fault detection delay It is used to end
17. number 8 bits 0 255 The exchange number contains a numbering byte which can identify exchanges The exchange number is initialized to zero following a power up When it reaches its maximum value OxFF it automatically returns to 0 The exchange numbering is established by the slave and acknowledged by the master Least significant byte number of events 8 bits 0 X The slave indicates the number of significant events in the event table in the least significant byte of the exchange word This number is limited to the size of the window e g 4 events even if the number of events available internally is larger Each word of the non significant events is initialized to zero e Acknowledgement of the event table To notify the slave of satisfactory reception of the block it has just read the master must write in the Exchange number field the number of the last exchange performed by it and must reset the Number of events field of the exchange word Following this acknowledgement the events in the event table are initialized to zero and the old acknowledged events are erased in the slave So long as the exchange word written by the master is not equal to X 0 where X number of the preceding exchange that the Supervisor wants to acknowledge the exchange word in the table remains at X number of preceding events The slave increments the exchange number only if new events are present X 1 number of new events If th
18. the minimum and maximum values defined here There are no typical values for these parameters Setting should be performed taking into account the following comments The timeouts are to be set according to the sending time for a frame The smaller the minimum timeout the smaller the added timeout can be The greater the difference between the minimum timeout and the maximum timeout the smaller the risk of sending by two T200s at the same time The preceding condition is achieved by increasing the maximum timeout But one should allow for the fact that the greater this timeout the longer the T200 risks waiting before sending Generally therefore one opts for a value that will not be too high The ideal solution therefore is to choose parameters in accordance with the above rules and then refine them in the field The other parameters concern the signal used to obtain the network occupancy state Active squelch level Depending on the equipment the squelch active state will be a low level or a high level One should therefore choose here the appropriate level Squelch protection The squelch is an occupancy signal provided by analogue type radio equipment With this transmission medium the transmission conditions vary with time For example transmission conditions differ depending on whether or not there are leaves on the trees Therefore reception levels generally vary throughout the year Accordingly the squelch is r
19. to it This operating mode is called Report by exception Transmission takes place asynchronously at speeds ranging from 200 to 38400 baud depending on the transmission medium Each MODBUS frame consists of a start bit 8 data bits and a stop bit 4 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication The MODBUS protocol makes it possible to read or write one or more bits one or more words and the diagnostic counters at a write read address specified by the master Upon receiving a request from the master the device sends the desired information in accordance with the MODBUS specification and is capable of replying with an exception message if it does not recognize the request e MODBUS functions supported No 01 Reading of n output or internal bits No 02 Reading of n input bits No 03 Reading of n output or internal words No 04 Reading of n input words No 05 Writing of 1 bit No 06 Writing of 1 word No 08 Reading of diagnostic counters No 15 Writing of n bits No 16 Writing of n words e Exception codes supported 01 Unknown function code 02 Incorrect address 03 Incorrect data 04 Not ready impossible to handle the request Each message or frame exchanged between the master and slave contains 4 types of information Slave number 1 byte it specifies the destination slave 0 to 255 If it is equal to 0 the request concerns all the slave
20. to the device Direct execution In this command execution mode the command when it is authorized is executed upon receiving this message The wanted selection relay is actuated and after verification it is the execution relay s turn During all the command sequences checks are performed Any detected anomaly causes immediate stoppage of the command Direct operate See Direct Execution E Event acknowledgement Process by which the master can notify the device that the events have been read Resets the number of events contained in the T200 s stack The old events acknowledged are erased from the slave Event stack See time tagged events Exchange word This can be used to manage a specific MODBUS protocol for the T220 to be sure not to lose events following a communication problem It contains two essential items of information the exchange number and the number of events present in the stack F Function code Byte contained in each frame sent by the master and by which the slave can know the nature of the request read write etc Upon an error the slave replies by setting the most significant bit of the function code to 1 M Master Refers ina MODBUS communication system to the device that enters into dialogue with one or more slaves Measurement Refers to an analogue input coded on 16 bits which can adopt several formats P Polling This term designates a method for repatriation of information from the T200
21. voltage present S visu PBinaryinput 57 4 394 Aux DI MV voltage present ISS54 VISU Bnaryinput NA NA input 16 bits a E Se L IT EH input 16 bits input 16 bits input 16 bits hannel 2 A NA A NA A NA 64 400 TM3 VISU Analogue NA NA input 16 bits U U a gt a gt Di Di n n oO oO Q Q C C D D WV N Switch position rsD2 visu PBinaryimput 52 2 342 Switch ocked frss81 visu Binaryinput 56 9 389 meem ll 8 T control block emeng e mt Es Il input 16 bits control block AuxiliaryDl___________ rsssz visu ABinaryinput NA NA MV voltage present rsstos visu Binary input Earthfaut frsstogz visu Binaryinput 56 3 383 Phase fault __ rssto visu Pinaryinput 56 2 382 e S Be JJ input 16 bits oe KA input 16 bits isc bb input 16 bits eg ee ee rie input 16 bits input 16 bits NT00188 EN 06 Schneider 39 Easergy T200 F200C R200 Modbus communication inary input 3 392 9 9 ommon objects ocal Remote position TSS 23 VISU Door opening TSS 24 VISU TCL 26 EXPL Relay output NA control block i 7 Oooo E mmediate AC power supply defect 1SS 17 VISU Binary input 577 E Et ww 6 7 DI ime delayed AC power supply defect TSS 18 VISU inary input 57 12 ower cut imminent TSS 25 VISU inary input A NTP synchronized TSL 79 VISU inary input Automat
22. 16 Cub_Nb 1 SPS 32 Base 32 Cub_Nb 1 INC32 120 Base 120 Cub_Nb 1 Energies 40 Base 40 Cub_Nb 1 MV16 60 Base 60 Cub_Nb 1 MV32 120 Base 120 Cub_Nb 1 Where base is the default decimal index of corresponding object in Cubicle1 NT00188 EN 06 Schneider 45 Easergy T200 F200C R200 Modbus communication 8 MODBUS appendices 8 1 MODBUS table Identification configuration field Word address Access mode Authorized 0000h to 0001h function 46 Schneider 0000h 0001h Read Write Status bit 0 Bit 0 0 Direct TM mode Bit O 1 Raw TM mode By default T200 is in Direct mode Status bit 15 Bit 15 0 No loss of events Bit 15 1 Loss of events This bit is enabled when the event stack is full The event loss event is then placed in the stack So long as this event is present in the stack no other event is placed there This bit is erased when the stack becomes empty The disappearance of this bit generates no event NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Time synchronization field This field contains the internal date The field can only be read or and time of the device for time written to as a whole tagging of events Date in binary Word address Access mode Authorized code 0002h to 0005h function 0002h Read Write 3 4 16 Y 34 ZS Month da 0003h Read Write 3 4 0004h Read Write Milliseconds 0005h Read Write Year 0 to 99
23. 17 11 01 285 SlaveAddr 01 gt gt gt gt gt Read N output Words 01 03 02 02 00 BS 24 Observations 1 Exchange word reading The Supervisor reads the exchange word to find out whether events have occurred The T200 replies by specifying that 3 events are available 2 Event field reading The Supervisor reads the events present in the stack and the T200 sends them to it 3 Event acknowledgement The Supervisor acknowledges its request It writes the exchange word resetting the number of events to 0 4 New reading cycle The Supervisor reads the exchange word again to find out whether events are available The T200 replies by specifying that no event is available The exchange number has changed 1 gt 2 Analysis of the 3 events read Event 1 08 00 03 96 00 00 00 00 00 08 08 OB 11 0A 15 80 Single address signal 918 word 57 bit 6 value 0 on 11 08 2008 at 17 10 05 Event 2 08 00 03 96 00 00 00 01 00 08 08 OB 11 0A 1C 4C Single address signal 918 word 57 bit 6 value 1 on 11 08 2008 at 17 10 07 Event 3 08 00 03 96 00 00 00 00 00 08 08 0B 11 0A 26 CA Single address signal 918 word 57 bit 6 value 0 on 11 08 2008 at 17 10 09 Comment In our case the single address signal 918 corresponds to the device s Local Remote selector switch NT00188 EN 06 Schneider 23 Electric Easergy T200 F200C R200 Modbus Communication e Example 1d After reading the device s event table the Supervisor perfor
24. 3 00 OF 00 01 B4 09 17 10 04 144 SlaveAddr 01 gt gt gt gt gt Read N output Words 01 03 02 00 03 F8 45 Observation 1 The T200 receives the time setting frame The T200 returns no response 2 The T200 receives a read request from the master and one observes that the time has changed 22 Schneider NT00188 EN 06 Electric Easergy T200 F200C R200 Modbus Communication e Example 1c After setting the time on the T200 the Supervisor interrogates the device to find out whether events have been recorded and have not yet been read Device address 1 The event field is set to address OxF with a maximum of 4 events 17 10 18 370 SlaveAddr 01 lt lt lt lt lt Read N output Words Addr Oxf 01 03 00 OF 00 01 B4 09 BR 17 10 18 371 SlaveAddr 01 gt gt gt gt gt Read N output Words 0103020103 F9 D5 17 10 28 128 SlaveAddr 01 lt lt lt lt lt Read N output Words Addr Oxf 01 03 00 OF 00 19 B4 03 17 10 28 130 SlaveAddr 01 gt gt gt gt gt Read N output Words 01 03 32 01 03 08 00 03 96 00 00 00 00 00 08 08 OB 11 04 15 80 08 00 03 96 00 00 00 01 00 08 08 OB 11 DA 1C 4C 08 00 03 96 00 00 00 00 00 08 08 OB 11 OA 26 CA 46 7D 17 10 56 072 SlaveAddr 01 lt lt lt lt lt Write word Addr Oxf 01 06 00 OF 01 00 B8 59 17 10 56 073 SlaveAddr 01 gt gt gt gt gt Write word 01 06 00 OF 01 00 B8 59 17 11 01 284 SlaveAddr 01 lt lt lt lt lt Read N output Words Addr Oxf 01 03 00 OF 00 01 B4 09
25. 50 Min value 0 o If the Max Value has not been set 0 default value the biggest value 0x7FFFFFFF is used instead o If the measurement is bigger than the Max Value it will be transferred as Ox7FFF with the overflow quality bit set o If the measurement is lower than the Max Value it will be transferred as 0x8000 with the overflow quality bit set o The measurement will be divided by ten as many times as the Max value must be divided by ten to fit into the 32768 to 32767 interval The transmitted value is rounded Examples scaled value transmitted depending on the internal value and the max value e For 16 bits types TM16 Internal value O 10000 357 5000 Invalid Max value parameter 0 O 10000 357 5000 0x8000 4000 O 10000 357 5000 0x8000 400000 O 10000 357 5000 0x8000 e For 32 bits types TM32 Internal value O 10000 357 80000 552000 700 5000 75000 1 Invalid Max value parameter 0 o 0 0 0 5 0 0 0 0x8000 4000 O Ox7FFF 357 Ox7FFF_ 0x7FFF 0x8000 0x8000 0x8000 400000 o 100 3 800 Ox7FFF 7 50 750 0x8000 NT00188 EN 06 Schneider 53 P Electric Easergy T200 F200C R200 Modbus communication e Raw mode or Normalized mode Following rules are applied to Raw mode Any invalid value the value can t be read properly by the equipment will be transmitt
26. A AAA AAA AAA EM TA FLAIR 200G AUA AAA WAUA WA AAA UW 36 e d KEE 39 FB R2QO AL S100 ECC CU E AA AAA AA AAA AAA AAA 41 8 MODBUS Tier 46 81 MODBUS TABLE aina iana waua kia waanikwa as coa dades 46 8 2 MODBUS allen ON 55 8 3 MODBUS CONTROL FIELD EE 61 2 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 1 Introduction This appendix to the User Manual is designed to provide aid with setting up a telecontrol network using the MODBUS protocol It will therefore provide information to help choose an operating mode to make the corresponding configuration settings and to analyse any problems faced For this purpose the following will be found e References of documents relating to this protocol e Operating principles with abrief description of the specification and fundamentals of the protocol adescription of the various operating modes with help in choosing between them alist of the types of data exchanged adescription of the main functionalities adescription of the MODBUS TCP protocol e The configuration settings to be made with general configuration of the protocol specific configuration e Maintenance aid facilities e A glossary of specific terms e Object addressing tables which can serve as a model for establishing databases for the T200 and the Flair 200C e The descriptive documents specified in the protocol specifications All along the documentation the T200 is taken as an example T
27. ESSE Internal temperature TM10 VISU Analogue E input 16 bits External temperature estimated TM11 VISU input 16 bits Digital inputs a a A A ME E E TSSt visu JBinaryinput 55 KA A F Binary input 51 0 330 335 TSS5 VISU Digital input 6 TSS6 VISU NT00188 EN 06 Schneider 37 Easergy T200 F200C R200 Modbus communication a SS ae Saree eae Se a See A T A input 16 bits ememr mc Il Ss ee input 16 bits ememr pee Iert Ss Lei input 16 bits Ge a input 16 bits Counter digital input 5 CNT5 VISU Gin input 16 bits e D MERANA 16 bits Digital outputs TT NET control block Digital output 1 TCD1 EXPL Digital output 3 TCD3 EXPL e Digital output 1 TSD1 VISU Digital output 2 VISU Digital output 3 ES VISU Double digital outputs Digital output 1 2 IE ous Relay output control block E input 49 0 0 310 0 Wa output control block Digital output 2 TCD2 EXPL Relay output control block e PS si Digital input 1 2 0ST ISU 38 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 7 5 T200S Type Index Index le No hannel 1 Switch position SDT VISU Binary input_ 52 0 340 Switch locked S VWSU Binary input_ 56 8 388 control block Ap E al al input 16 bits beer A control block user D ISS visu Binaryimput NA Ma MV
28. MV electrical network management Easergy range T200 Flair 200C amp R200 ATS100 MV substation control and monitoring units Modbus communication Appendix to the User Manual Schneider Electric Easergy T200 F200C R200 Contents INTRODUCTION isis di 3 2 REFERENCES o ala 3 3 PRINCIPLES iii AA e 3 3 1 GENERA aaa aha kwa cence anda oi na deidad da A ld A cd waliwa Kani uwa cd A cd AA T 3 32 ISO MODEL coros A AAA AAA AAA AAA 4 3 3 TRANSMISSION MODE Sai esoe conocida aaa aaa kahi ka wa aa RR 4 CC RN 7 3 5 O PAA WA MSA aana pea uzawa kuwapa wawa manana vi wa mamaa ne saaa wam mas e aa 7 S6 MODBUS ben EE 8 4 CONFIGURATION lt 0iiirarsiiiaci nasaia s naaadi saaa sisin EA Naia Ss randan Kaina as sainids isaisa sns inri dni Sri 10 4 1 GENERAL CONFIGURATION OF THE PROTOCOL ccccseeccececseecececseeceeeceneeeeecsneeeeesseeeeeeeseneeeesseeeeeeessesaeessseaees 10 4 2 SPECIFIC PROTOCOL RELATED OPERATION wa nn rnnnnn nr rnnnnn nn rn KANAAN KAAN ARNARS 16 4 3 SPECIFIC CONFIGURATION RELATED TO TRANSMISSION MEDIA 19 4 4 R200 ATS100 CONFIGURATION OF THE PROTOCOL ccccsssseceeeeseeececaeeeeecaeeeeeeaaeeeeescaaeeseceaaeeeeecaeesenaas 20 5 DIAG NOS e 22 5 1 TRACING EXCHANGES WITH THE SUPERVISOR cccccoooocccnononcnnnononnnnnnnnnnnnnnnnnncnnnnnnn nn rca nn nn nnnnn rn nnnnn nr nnrnnnnrnnnannnss 22 6 GLOSSARY E 25 7 OBJECT ADDRESSING uasi ikazaa dario 27 EEGEN eege EE ON 27 TE COO EE 28 TEE YA AY AA nn AAA A
29. Squelch T200 sending waiting for set time without squelch protection The T200 needs to send here Squelch T200 sending The T200 is not enabled to send NT00188 EN 06 Schneider 15 Easergy T200 F200C R200 Modbus Communication 4 2 Specific protocol related operation gt Report By Exception mode The slave device sends spontaneously upon condition to a master for this purpose it initializes an alarm sequence which allows the master to identify the sending slave In the case of a non permanent link PSTN GSM etc requiring the use of a modem to establish the link with a master connection is managed by the device When connection is established the master sends a MODBUS request for identification of the slave broadcast transmission of a frame with null function code The device replies to this frame with an exception frame containing its slave address In the case of a permanent link private line fibre optic radio an exception request allowing it to be identified is sent spontaneously to the master The master can thus retrieve the slave address and continue the Master Slave type MODBUS procedure reading of fields events alarm acknowledgement The exception frame sent is XX 00 00 YY YY Where XX is the slave number of the device YY YY is the frame CRC 16 Activation of this procedure is available for each physical port from the operating mode menu gt Report By Exc
30. and takes place in two phases Writing of Select message writing of word address for the control order to be executed Writing of Execute message confirmation of the control order The command is executed by the device only after receiving the 2 messages The Execute message must be received at least n seconds configurable timeout after the Select message In the event of a fault an exception message is returned to the master Exception code 3 18 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 4 3 Specific configuration related to transmission media gt Synchronization of communications Any character received after a silence exceeding 3 characters is considered as a start of frame A silence on the line of minimum duration 3 characters by definition exceeding 1 5 characters is considered as an end of frame For example At 9600 baud this time is equal to approximately 3 milliseconds Some modems or transmission modes such as GSM or PSTN sometimes result in longer timeouts in the frames For this reason the end of frame timeout is in that case increased to 25 characters For example At 9600 baud this time will be equal to about 25 milliseconds gt Time synchronization The device can be synchronized by reception of a time message frame over the communications network A general broadcast can be performed with the slave number 0 The time message frame is used both for time
31. aut Dees VISU Binaryimput 57 10 39A Digital Inputs Outputs Digital rpu Sei visu Binaryimput 57 0 390 Digital input 2 TSS2 VISU Binary input 571 3 Digital mu rssg visu Binaryimput NA MA Digitalinput4 1SS4 ISU Binaryimput NA NA Digital mu rss VISU Bnayinpt NA MA Digital input EE visu Binaryimput NA MA Digital input 7 TSS7 visu Binaryimput NA MA Digital mu rsse VISU Binaryimput NA MA Digital output posten TSD5 VISU Binayinput NA NA Digital output 1 command TCD5 EXPL Relay output NA NA control block Digital output 2 position TSD 6 visu Binary input Digital output 2 command TCD 6 EXPL Relay output NA NA control block Digital output 3 position TSD7 VISU Binary input Digital output 3 command TCD 7 EXPL Relay output NA NA control block DICH SSS 30 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 7 3 T2001 Type Index Index Pe No hannel 1 Switch position SDT VISU Binaryimput 520 341 Switchlocked TSS 49 ISU Binaryinput_ 568 388 ee E control block MV voltage present auxiliary D TSS54 VISU Binary input 57 2 392 Eathfat rssri vsu Binaryimput 56 1 381 Phasefaut S visu PBinaryimput 56 0 380 A Be LA input 16 bits hannel 2 Switch position DS v
32. b15 b8 b7 bo b15 b8 b7 bo b15 b8 b7 b Millisecond 0 to 59999 b15 b8 b7 bO Test field This field contains 9 words The content of this field has no accessible in read and write influence on the functionalities of modes This field initially in zero the T200 state is available to the user to facilitate debugging tests Test field Word address Access mode Authorized function 0006h to 000Eh Read Write 1 2 3 4 5 6 16 NT00188 EN 06 Schneider 47 Easergy T200 F200C R200 Modbus communication This memory area is configurable It stores in memory and time tags device changes of state Example Base address 15 Max number of events configurable from 1 to 100 Event field Word Access mode Authorized address function 000Fh Read Write 3 4 6 16 7 Event 1 0010h to Read 3 4 0017h 001Fh 0027h 002Fh Y Only the exchange word can be written It is possible to read the exchange field as a whole or the exchange word alone The exchange word can be used to manage a specific protocol so as not to lose events following a MODBUS communication problem SS EE The exchange word comprises 2 bytes o Most significant byte exchange number allowing each event block to be identified It is initialized to zero after a power up when it reaches its maximum value FFh 255 it automatically returns to 0 The exchange numbering is established by the T200 and acknowledged by the master Lea
33. control block Automatic control ON OFF position channels 9 TSD 89 VISU O input 54 12 36C Automatic control ON OFF command TCD 89 EXPL Relay output 50 12 32C control block Automatic control ON OFF position channels TSD 129 VISU O input 54 14 13 to 16 Automatic control ON OFF command TCD 129 EXPL Relay output 50 14 32E control block channels 13 to 16 nternal faults e al O O 00 E o IW O gt D 5 5 D D qe o mM Motorization power supply failure rs519 visu Bray input 8711 398 Accessory equipment power supply failure 8520 Visu Binaryimput NA NA Charger hai Sp vsu Binaryimput 579 399 Battery faut ISS VIS __Binary input 5710 39A Fault detector Ink defet rssa7 visu Binary input Digital inputs Digital npu 1 SI visu Binary input Digital mn frss2 WISU Binary input Digital npu 3 US 23 visu Binary input Digitalinpu4 ISS4 visu Binary input Digital input5 Sep visu _ Binaryinput 57 14 39E Digital npu 6 S ISU Binaryinput_ 57 15 39F Doan Dees visu Binary input Digital npu rss274 visu Binary input Digital input9 A7ss275 visu Binary input Digital input 10 UIS 278 visu Binary input Digital input 1 1SS277 _ visu Binary input Digital input 12 1SS278 visu PBinaryimput 59 15 3BF Digital input 13 S p48 visu _ Binaryinput_ 61 0 3D0 Digital input
34. counter hase fault counter arth fault counter Number of trip phase fault Number of trip earth fault Number of trip thermal overload VIP410 Number of trip external trip VIP410 nergy active total MSB PM800 nergy active total LSB PM800 nergy reactive total MSB nergy reactive total LSB nergy apparent MSB nergy apparent MSB hase current l1 hase current 12 hase current 13 Residual current IO max 2 max 3 max hase current l1 hase current 12 hase current 13 VIP410 Measured Earth Fault Current IO VIP410 Phase peak demand current Im1 mean VIP410 current Phase peak demand current Im2 mean VIP410 urrent Phase peak demand current Im3 mean VIP410 current hase current l1 PM80 hase current 12 PM80 hase current 13 PM800 Residual current IO oltage U12 Voltage U23 Voltage U31 Mean voltage between phases PM800 oltage V1 PM800 Voltage V2 PM800 oltage V3 oltage NR Mean voltage phase N requency VIP410 VIP410 VIP410 VIP410 VIP410 VIP410 C110 C110 Flair23DM Flair23DM Flair23DM VIP410 VIP410 SPS n a SPS 1F7Dh SPS 1F7Eh SPS 1F7Fh 8064 1F80h SPS INC3 INC3 INC3 INC3 INC3 10840 n n n n n INC3 INC3 INC3 INC3 INC32 10840 2A58h INC32 10842 2A5Ah INC32 10844 2A5Ch INC32 10846 2A5Eh INC32 2A60h INC32 2A62h 035Ch 035Dh 035Eh 035Fh 0360h 865 0361h 0362h 0363h MV16 MV16 vi6 868 0364h 0365h V16 870 0366h MV16 0367h 872 0368
35. d Schneider Easergy T200 F200C R200 Modbus communication Writing N consecutive words function 16 The number of words to be written is in a range between 1 and 123 and the number of bytes is in a range between 2 and 246 The words are written by increasing order of the addresses Request Slave 10h Address of Number of Number of Values of CRC16 number 1st word to words to bytes to be words to be be written be written written written 1 byte 1 byte 2 bytes 2 bytes 1 byte N bytes 2 bytes Response Slave 10h Address of 1st word Number of words written CRC16 number written MSB LSB MSB LSB 1 byte 1 byte 2 bytes 2 bytes 2 bytes 60 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 8 3 MODBUS control field Algorithm for calculation of CRC16 Hex EFFE CRC 16 CRC 16 byte CRC 16 Shift to right CRC 16 yes n number of data bits poly polynomial for calculation of CRC16 1010 0000 0000 0001 Writing in C language of the CRC16 calculation Calculates and returns crc16 to the buf field of length len buf pointer of the buffer on which calculation is performed m len buffer length unsigned crc16 char but int len define POLY 0xA001 char i unsigned crc for crc OxFFFF len 0 len cre buf for i 0 i lt 8 i if cre amp 0x0001 cre cre gt gt 1 POLY else crc gt gt 1 return crc
36. e event table is empty the slave performs no processing upon reading by the Supervisor of the event table or the exchange word e Loss of information The slave has an internal storage queue of a defined capacity which may reach saturation In the event of saturation of this queue a loss of information event can be inserted by the slave when reading each event table The address of this event is configurable cf Event loss TSS index So long as this event is present in the stack no other event can be saved so as to save and not erase the oldest events in the case of a queue overflow This event disappears automatically when the Supervisor retrieves all the events and the queue becomes empty NT00188 EN 06 Schneider 17 Easergy T200 F200C R200 Modbus Communication e Description of event coding An event is coded on 8 words with the following structure Word 1 event type 08 00 signals Word 2 event address Bit addresses for digital events Words 3 and 4 00 00 00 00 Falling edge 00 00 00 01 Rising edge Word 5 year 00 0 to 99 year Word 6 month day 1 to 12 months most significant 1 to 31 day least significant Word 7 hours minutes 0 to 23 hours most significant O to 59 minutes least significant Word 8 milliseconds 0 to 59999 gt Select then execute function This function allows a selection message to be sent before a command message In this mode In this mode sending the comm
37. e more often the T200s must be interrogated The polling cycle limit corresponds to the shortest cycle for interrogating all the T200s The great majority of these exchanges are unproductive because in most cases the T200 interrogated has nothing to report e Operation in Report By Exception mode Messages are sent only to provide unknown information For example when a change occurs the T200 will call the SCADA system via the Report By Exception function This will make it possible to initiate dialogue and the SCADA system will then retrieve the change Likewise the Supervisor will send messages to the T200 when the operator requests order execution This operating mode does not heavily load the communication facilities a device speaks only when it has something to say On the other hand the SCADA system no longer controls the data flow because it can be called at any time Collisions between messages can occur when at a given point in time several devices take control to speak We shall see further on how this problem of collisions is dealt with 6 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 3 4 Data The MODBUS protocol can be used to exchange various types of data The numerous items of information to which the protocol gives access include e Signals single or double e Measurements in several formats e Counters Commands e Parameters 3 5 Functions With the data are associat
38. ed various functionalities including for example e State reading The Supervisor can ask to read the state of all the configured variables e Time setting Can be performed by the Supervisor in two different ways Individually Frame sent to a single device with confirmation from the latter Universally Frame broadcast to all the devices without response from them e Event reading time tagged changes of state Since the MODBUS protocol proposes no standard for time tagging of events a process has been established allowing exchange of events between a master and a slave The slave provides the master with an event reading table the address of which is configurable e Alarm transmission A change of state can be configured as an alarm to be sent spontaneously to the telecontrol centre e Specific counter functions The counters can be reset Command sending Two modes are available Direct Execution and Select before Execute e Parameter writing Certain parameters can be changed Comment Time tagged event management concerns signals only Counter and measurement type events are not managed NT00188 EN 06 Schneider 7 Easergy T200 F200C R200 Modbus Communication 3 6 Modbus TCP MODBUS protocol was originally designed for serial point to point communication e g RS 232 with limited support for half duplex serial networks e g RS 485 In order for the T200 to exchange MODBUS messages in a local or wide area ne
39. ed with the value 0x8000 and the invalid quality bit set The 16 bits and 32 bits measurements will be converted depending on their Min value and Max value parameters Measurement configuration General Parameters Variable name curentP1 8 8 Correction factor Direct 10 Logical Address Class Measure Sw tch 1 v Access DISPLAY v Internal Address vn External Address kr o If the Max value Min value 0 default value the biggest interval is used instead 32768 to 32767 for 16 bits 2147483648 to 2147483647 for 32 bits o If the measurement is bigger than the Max Value it will be transferred as 0x7FFF with the Overflow quality bit set o If the measurement is lower the Min Value it will be transferred as 0x8000 with the overflow quality bit set o The measurement will be converted using a bijection from the min max interval to the 32768 to 32767 interval or O to 32767 depending on the min and max The applied formulas are If Min gt 0 and Max gt 0 Transmitted value Internal value Min 32767 Max Min If Min lt O and Max lt 0 Transmitted value Internal value Max 32768 Max Min If Min lt O and Max gt 0 Transmitted value Internal value Min 65535 Max Min 32768 The transmitted value is rounded Examples normalized value transmitted depending on the internal value and the min and max values
40. elated to the value to which its detection level has been set This setting is normally performed in the field and in periods when reception is least satisfactory However despite all the precautions taken squelch detection may become active permanently or over long periods of time This means that in this case the T200 is therefore no longer enabled to send To avoid this squelch protection can be activated When it is activated this protection system will ensure that when the squelch is active at the time when the T200 wants to send and when it remains active permanently during the time defined below sending by the T200 will be enabled after this time this operation is known as squelch setting Tsqu squelch protection When squelch protection is activated it will ensure that when the squelch is active at the time when the T200 wants to send and remains active permanently during the time defined below sending by the T200 will be enabled after this time this operation is known as squelch setting This time is the time referred to above The customary value is approximately 10 s 14 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Explanatory diagrams Normal case The T200 needs to send here Squelch T200 sending gt waiting for waiting for free network calculated time Case of permanent squelch with squelch protection The T200 needs to send here
41. eption mode with Modbus TCP In order to limit the quantity of data transferred via the IP link to limit GPRS costs for example the Report by Exception process is adapted to Modbus TCP In this case the connection is still open by the supervisor but once it is open the supervisor has not to pull the slave too frequently alarmed changes of state will be signalled by an Exception The exception frame sent is 00 00 00 00 00 04 FF 00 00 00 Transaction ID 0 Function code 0 This Exception can be repeated with a configurable delay if the alarm is not acknowledged A thirty second delay has been introduced between two exceptions to prevent network overload This procedure can be activated from the Operating mode menu 16 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication gt Event management Event processing requires that the master have access to the T200 event table in write and read mode An example of an exchange will be described in detail in section 5 1 e Event reading The slave provides the master with an event table The master reads the event table and acknowledges by writing an exchange word The slave updates the event table Exchange word The exchange word can be used to manage a specific protocol to be sure not to lose events following a communication problem For this purpose the event table is numbered The exchange word comprises 2 fields Most significant byte exchange
42. equipment TSS 1 to TSS 989 and are not all managed For the details of TSS used for each type of equipment see object addressing table see paragraph 7 objects addressing NT00188 EN 06 Schneider 51 Easergy T200 F200C R200 Modbus communication Measurement and counter zones address __ mode allowed TM 13 average current channel 2 0041h Read TM 47 voltage U21 channel 1 0042h Read TM 56 voltage U21 channel 2 0043h Read address _ mode allowed TM 9 SE current channel 2 TM 17 phase current channel 3 TM 24 phase current channel 4 TM 84 phase current channel 5 TM 91 phase current channel 6 TM 99 phase current channel 7 TM 106 phase current channel 8 TM 166 phase current channel 9 TM 173 phase current channel 10 TM 181 phase current channel 11 TM 188 phase current channel 12 TM 248 phase current channel 13 TM 255 phase current channel 14 TM 263 phase current channel 15 TM 270 phase current channel 16 address mode allowed TM 21 current 11 channel 1 TM 26 current 12 channel 1 TM 31 current 13 channel 1 TM 36 current IO channel 1 TM 41 average current 31 channel 1 TM 47 power factor channel 1 TM 20 frequency TM 76 current 12 channel 2 TM 81 current 13 channel 2 TM 86 current IO channel 2 TM 91 average current 31 channel 2 TM 97 power factor channel 2 TM 11 delta temperature int ext TM 42 voltage measurement TM 48 active power
43. h 0369h 036Ah MV16 875 036Bh MV16 036Ch V16 877 036Dh 036Eh MV16 879 036Fh 0370h MV16 881 0371h a a a n n n n n n n n n n n n n n n m N U U lt lt Oo ele o S o PM80 m U z 00 o gt Flair23DM Flair23DM Flair23DM Flair23DM Flair23DM Flair23DM Flair23DM VIP410 VIP410 a a a a a a a a a a n n n n a n a n a PM800 PM800 PM800 v z 00 fa PM80 PM800 lt lt lt lt lt lt lt lt lt s lt s lt lt lt lt lt lt lt lt Ni SSS Se o nd Sek ek Pe ke 3 o o ole o o ojojojojojojo ojo a a PO PO PS PS PO PO PO PS PS o U U lt lt 0 00 So OO A4 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Cubicle 1 data Real power total PM800 A MV16 0372h Reactive power total PM800 A MV16 0373h Apparent power total PM800 A MV16 0374h rue power factor total PM800 A MV16 0375h 7 6 4 Cubicle xxx data Same principles apply for further cubicles with same default variables and default external address From the tables of chapter 7 6 3 just add an offset for default external address as follows Object type Index Decimal Index dec depending on cubicle Offset per number cubicle Base Dec Offset Cub_Nb 1 DPC 16 Base 16 Cub_Nb 1 DPS 16 Base 16 Cub_Nb 1 SPC 16 Base
44. he Protocol Parameters screen General protocol parameters Port 1 Sch i S Standard squelch used for busy state 4200 2400 Bauds FFSK radi Collision avoidance Standard squelch used for busy state e Measures with time lag lo s Standard parameters Priority fo y Min random delay lo ms Max random delay kon ms i S gt S Tsqu Squelch Port 1 Squelch Protect ves y Squelch active level Low y protect fi 0000 ms 1st attempt 13 Y 2nd attempt 1 mn x Before describing the various parameters used we shall explain how collision avoidance operates We shall consider two types of frame acknowledgement frames other frames When a T200 receives a frame from the Supervisor and this must be acknowledged by it the acknowledgement frame is sent immediately NT00188 EN 06 Schneider 13 Easergy T200 F200C R200 Modbus Communication For the other frames the T200 will allow for a waiting time before sending This time is calculated by the following formula time priority x min random time random time The random time ranges between the min random time and the max random time Priority This parameter can be used to hierarchize various T200s The smaller the number the more priority is assigned to the T200 it will wait for a shorter time Usually this priority is left at 0 Min random timeout Max random timeout The random timeout added to the wait related to the priority is in a range between
45. he internal date and time of the device for time tagging of events The field can only be read or written to as a whole Time tagged events Can be used to manage a specific MODBUS protocol or a date can be associated with the change of state of a signal These events are stored within the T200 in an event stack that can be accessed in read write mode by the Supervisor TM T l mesure remote measurement coded on 16 bits TSD T l signalisation double double telesignal coded on 2 bits TSS T l signalisation simple single telesignal coded on 1 bit TCP Network Protocol used by the T200 to manage MODBUS communications over an IP Link It is implemented in the Transport layer of the OSI Model W Writing The Supervisor works by Writing or Reading data to or from the remote terminal units 26 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 7 Object addressing In the following tables will be found the default settings for the external addresses of variables 7 1 Legend Type Internal No Meaning TCD T l commande double double telecontrol TSS T l signalisation simple single telesignal TSD T l signalisation double double telesignal TM T l mesure remote measurement CNT Counter Access Defined as VISU Viewing EXPL Operator ADMIN Administrator Options Required commercial option I IU IUP I2UP
46. he software features of the T200 and Flair 200C are the same As a result the same information can be used indifferently with the T200 or with the Flair 200C 2 References As mentioned above the purpose of this appendix is to help the user set up a network It is not intended to provide a detailed explanation of the protocol specified in the documents referenced below It is not necessary to read these documents However the user faced with a specific problem or wanting to have a more precise knowledge of this protocol will find it useful to read them They are available on the website of the Modbus IDA organization www modbus org which brings together independent users and suppliers Their references are as follows e Modicon Modbus Protocol Reference Guide June 1996 e MODBUS Protocol Application Specification V1 1b 28 December 2006 e MODBUS over Serial Line Specification and Implementation Guide V1 02 20 December 2006 3 Principles 3 1 General 1 MODBUS is a messaging protocol which allows client server type communications between devices connected to various types of bus or networks 2 It was originally developed by the company Modicon and from 1979 became the de facto industrial standard for serial transmission 3 Nowadays millions of devices in the automatic control field use it for their communications The enthusiasm for this simple and elegant structure has enabled it to become established in other fields and
47. ic controls Binary input 52 Relay output control block Binary input 57 MO DAS T E Di Q D 9 o z o n QO O 3 3 Di el Q zizigo z gt O gt H TCD 9 EXPL lure harger fault attery fault quipment fault Digital input 1 SS 1 Digital input 2 SS 2 Digital input 3 Digital input 4 Digital input 5 Digital input 6 Digital input 7 Digital input 8 TCD 6 EXPL TCD 7 EXPL E S 00 D 306 gt SIS Cc cic ep e olo 3 3 3 D o ola Q olo O olo 5 fen os Lan os bel e oj eja al QO P ZIZ sifa o 5 717 Di min Oo D ole a 3 2 319 517 o w w Ke E CH fon o nternal faults 5 N ZII zl PEDRE 1 nary input 57 inary input gt O O O n n O lt oO Q E jo 3 9 3 jo O 9 n Cc CH 5 lt Se D c D O cb CO N Di CO 5 jo JO 9 n Cc CH 5 lt SC 2 Ei 9 j W DI 4 zm oe Kee Z Wa D Q Gi al Si KG e Y O g 5 ma a o nary input 57 nary input ji ziziziziziziz 9 gt gt S S S 5 5 5 gt Ww inary input B Binary input Bi B inary input inary input Binary input Relay output NA control block Binary input Relay output NA control block 4 Z Z Z Z Z ZIZISI amp gt S S S S S Sl als Z Z z NA A N OVO OO ejej eje let nl oo
48. input 16 bits i dE al Ml input 16 bits e il A 0 A input 16 bits E input 16 bits ii OO i BR ALIA input 16 bits cc ac 7 al input 16 bits ee ee input 16 bits A TAC input 16 bits E A A all input 16 bits mme EE uhh BE Be input 16 bits Faiten II III LI Fast earth fault een VISU Bimaryimput 527 347 Earth faut SST visu Binaryimput 526 346 Fastphasefaut Deeg ISU Binary input__ 52 13 34D Phasefalt rss WSU Binary input__ 52 12 340 pre BUET e input 16 bits arene pee Iert e Leier input 16 bits A En Lal Bern input 16 bits Counter phase fault Analogue input 16 bits ww VU 1 Mm 7 ma 36 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Measure channel 2 AA a input 16 bits AA Be Li input 16 bits LU Be input 16 bits pee LU Be Li input 16 bits 71 72 73 75 76 84 62 NA i Dl E input 16 bits pees LUUT E input 16 bits input 16 bits input 16 bits input 16 bits input 16 bits input 16 bits Fault channel 2 Fast earth fault TSS103 Binary input Earth fault TSS104 Binary input Fast phase fault TSS108 Binary input Phase fault TSS109 Binary input Counter fast earth fault CNT12 Analogue input 16 bits Counter earth fault CNT13 Analogue input 16 bits Counter fast phase fault CNT15 Analogue input 16 bits Counter phase fault CNT16 Analogue input 16 bits emperature measurement Sa A B
49. input_ 588 3A8 e a hl lal control block MV voltage present auxiliary DI eso visu PBinaryinput 59 2 3B2 Eathfat rssasB vsu Binaryinput 58 1 3A1 Phase fault rss349 visu Binaryimput 58 0 3A0 A E al al input 16 bits hannel 6 Switchposton n visu mai 52 10 34A Switch locked rss353 visu Binaryimput 58 9 3A9 Switch command TCD 42 EXPL Relay output 48 10 30A control block MV voltage present auxiliary DI TSS 358 visu Binary input Earthfaut 7Ass375 visu Binary input 583 3A3 hase fault TSS 381 visu Binaryimput 58 2 3A2 Phase current VISU Analogue 450 input 16 bits hannel 7 Ulm VIVO m 4 Switchposton ISD43 WISU mai 52 12 340 Switthlocked rss385 visu Binaryimput 58 10 SA TA E control block MV voltage present auxiliary DI TSS 390 visu Binary input 59 4 3B4 Earthfaut rsse07 visu Binaryimput 58 5 aas Phase fault _ Issa visu PBinaryimput 58 4 3A4 peon ee E e input 16 bits hannel 8 Switch position Stu ISU Binary input Switoh locked ISS 417 IST Binaryimput 58 11 SAB control block MV voltage present auxiliary DI TSS 422 visu Binaryimput 595 3B5 Earin fault ISS as VISU Binarimput 58 7 3A7 Phasefaut Ci AAS visu PBinaryimput 58 6 3A6 EL Be input 16 bits 32 Schneider
50. ion Since the MODBUS protocol proposes no standard for time tagging of events a process has been established allowing exchange of events in MODBUS mode between a master and a slave cf 4 3 The time tagging function allows a precise date and time to be attributed to changes of state so as to be able to classify them precisely in time These events are accessible from a table whose address and size must be entered e Event table address Indicates the event table start address e Number of events to be read Indicates the length of the event table e Event loss TSS index The event table having a defined capacity a loss of information event can be inserted by the T200 when reading the event table The Loss of event TSS index allows the address of this event to be defined In the event of loss of events the old events are kept 8 Server Gateway function The Server Gateway function allows the device to be used as a gateway to a MODBUS slave to which it is connected If this function is enabled and if the device receives a Modbus frame that is not intended for it MODBUS address different from the device address the device transfers the frame from its remote communication port port 1 or port 2 to its local port and then sends the response received to the port of origination of the request 4 Remote measurement reading mode function Each analogue value measurement is a signed integer encoded on 16 bits by two s complement sys
51. its use is constantly expanding The Internet community can obtain access to it on port 502 reserved port of the TCP IP stack 4 This protocol uses a question and answer system and offers services specified by function codes NT00188 EN 06 Schneider 3 Easergy T200 F200C R200 Modbus Communication 3 2 ISO Model MODBUS is positioned on level 7 application layer of the ISO model The document entitled MODBUS over Serial Line provides a complement by describing in the specific case of a serial link levels 1 physical layer and 2 link layer thus providing a complete description based on the EPA Enhanced Performance Architecture 3 layer ISO model which is a simplified version of the 7 layer ISO model Application layer The three layers described are as follows e Physical layer e Link layer e Application layer Link layer Physical layer Bo D 3 3 Transmission modes gt General The MODBUS protocol operates in master slave mode The Supervisor is the master and questions the T200 which as slave merely replies to the master s requests The SCADA system therefore operates by polling to know the T200 states However to be able to limit communications on non permanent transmission media the T200 is capable of generating a call to the SCADA The latter in reply can obtain by a method that we shall describe in detail later the address of the calling T200 and thus obtain the changes that the T200 wants to report
52. ltin External address 0x1f41 500 1 NT00188 EN 06 Schneider bneider 21 Easergy T200 F200C R200 Modbus Communication 5 Diagnostic This chapter provides information which may be necessary when operating problems are encountered It may help with problem resolution in such cases 5 1 Tracing exchanges with the Supervisor In order to clarify the operation of the protocol we shall give here a few specific examples of exchanges viewed by means of the Trace provided by the T200 Comment The following screens were obtained by sending frames step by step so as to show the operation in detail from a simulator the time tags are therefore not significant e Example 1a After starting the Supervisor performs time setting on the first device Device address 1 11 03 32 251 SlaveAddr 01 lt s lt lt lt Write N words Addr 0x2 01 10 00 02 00 04 08 00 08 08 OB 1104 00 00 47 CA 17 10 00 000 SlaveAddr 01 gt gt gt gt gt Write N words 01 10 00 02 00 04 60 04 Observation The Supervisor writes the date in IEC format time tag on 4 words at address 0x02 The T200 replies with the updated time e Example 1b After starting the Supervisor sende a time setting frame to all the devices in broadcast mode 11 09 08 262 SlaveAddr 00 lt lt lt lt lt Write N words Addr 0x2 00 10 00 02 00 04 08 00 08 08 OB 11 04 00 00 86 CA 17 10 04 142 SlaveAddr 01 lt lt lt lt lt Read N output Words Addr Oxf 010
53. ms one or more read operation s to find out the current states of the device s variables signals measurements etc 17 13 44 274 SlaveAddr 01 lt lt lt lt lt Read N input Bit Addr 0x300 01 02 03 00 04 00 ZA GE 17 13 44 278 SlaveAddr 01 gt gt gt gt gt Read N input Bit 01 02 80 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 99 00 00 00 00 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2F 16 Observations In our example for sake of simplicity the Supervisor simply requests the signal state It can be observed that the address signal 918 0x396 word 57 bit 6 is in 0x0 state This is consistent with the reading for the preceding events in which the last event showed a transition to state 0 Remote of the Local Remote selector switch e Example 2 The Supervisor sends a telecontrol to the device in Select and Execute mode The T200 must be in remote mode In direct mode simply write at the address defined for the commana Protocol configuration Select and Execute mode Timeout 20s selection word address 0x100 Write command at 1 on TCD of external address 12 0 Word OxCO bit 0 17 17 37 894 Slave Addr 01 asses Write wo
54. n TM read mode Direct y 4 Server Gateway Function No vj 3 32 bits mode Humber of event to be read Event table address Parameters Setup Page Protocol gt Standard MODBUS parameters In standard communication the Supervisor can obtain access to a data field called the MODBUS Table It is thus possible to come and read and write data on the external address of a variable However it is not possible to export events since the standard MODBUS protocol offers no way of sending time tagged data In such a case therefore simply fill in the Device Address field on the configuration page e Device address Corresponds to the T200 address 10 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Specific MODBUS parameters Select before execute an order function There are two possible modes of execution of writing commands Direct mode Commands are implemented by direct writing to the memory addresses defined for each command external address The command is executed upon receiving the command Select before Execute mode Writing commands are executed in two transactions for secure writing the command being finally executed upon receipt of an Execute command Command type Choice of mode e Selection timeout Maximum waiting time for execution after selection e Selection word address This field specifies the command execution address Bl Event management funct
55. ntical to the request frame Slave 5 Bit address Bit value CRC16 number MSB LSB 1 byte 1 byte 2 bytes 1 byte 1 byte 2 bytes Writing a word function 6 Request Slave Word address Word value MSB LSB CRC16 number MSB LSB 1 byte 1 byte 2 bytes 2 bytes 2 bytes Response The response is an echo to the request indicating the slave s acknowledgment of the value contained in the request Slave Word address Word value MSB LSB CRC16 number MSB LSB 1 byte 1 byte 2 bytes 2 bytes 2 bytes 58 Schneider NT00188 EN 06 P Electric Easergy T200 F200C R200 Modbus Communication Reading of diagnostic counters function 8 NT00188 EN 06 To each slave are assigned diagnostic counters In all there are 5 counters per slave These counters are 16 bit words When they reach FFFFh they loop back to 0000h For the request by the master the most significant bit of the sub function code is assigned by the sub address of the T200 device and the data are at 0000h For the response by the slave the data contain the value of the counter concerned Request response Slave Sub function code Data MSB LSB CRC16 number MSB LSB 1 byte 1 byte 2 bytes 2 bytes 2 bytes code Reading the total number of frames sent to the station CPT4 xx0E XXXX excluding broadcasting broadcasting requests received and executed xx0F XXXX correctly CPT5 Sub function O can be used to test transmission The slave returns the echo of the data receive
56. o 389h TSS 1 2 24 105 73 0390h to 394h TSS 23 17 0396h to 397h TSS 21 0399h TSS 22 19 18 57 039Ah to 39Dh Each TCD word is encoded as follows A TCD is encoded in 2 bits C O 01 open order 10 close order The TCDs are assigned as follows m TCD 1 to 4 O C control channels 1 to 4 TCD 41 to 45 O C control channels 5 to 8 TCD 81 to 85 O C control channels 9 to 12 a TCD 121 to 125 O C control channels 13 to 16 TCD 17 Reset of fault detection channels 1 to 4 TCD 57 Reset of fault detection channels 5 to 8 TCD 97 Reset of fault detection channels 9 to 12 TCD 137 Reset of fault detection channels 13 to 16 TCD 9 Automation ON OFF control channels 1 to 4 TCD 49 Automation ON OFF control channels 5 to 8 TCD 89 Automation ON OFF control channels 9 to 12 TCD 129 Automation ON OFF control channels 13 to 16 TCD 25 Operation counter preset activation channel 1 TCD 26 Operation counter preset activation channel 2 a TCD 29 Active energy preset channel 1 TCD 30 Active energy preset channel 2 TCD 37 Reactive energy preset channel 1 TCD 38 Reactive energy preset channel 2 a TCD 5to 7 Digital outputs control 1 to 3 a TCD 4 O C switch control via digital outputs 1 and 2 Note depending on the type of equipment used the TCDs listed above are not all managed Remote control orders are performed by
57. rd Addr 0x100 0106 01 00 00 CO 88 66 17 17 37 896 SlaveAddr 01 gt gt gt gt gt Write word 01 06 01 00 00 CO 88 66 17 17 42 868 SlaveAddr 01 lt lt lt Write bit Addr OxcO 0105 00 CO FF 00 8C 06 17 17 42 869 SlaveAddr 01 Write bit 0105 00 CO FF 00 8C 06 Observations 1 Select The Supervisor writes the execution address in the selection word 2 Execute The device receives the execution request the command can be tripped If the device is in No Report By Exception mode the Supervisor suspends polling to send the command Once the command is ended and in reply to the next Supervisor polling the T200 can return a change of state event on the signal associated with this telecontrol If the device is in Report By Exception mode and once the telecontrol is ended the T200 may take the initiative of indicating to the Supervisor a change of state event of the signal associated with this telecontrol 24 Schneider NT00188 EN 06 Electric Easergy T200 F200C R200 Modbus Communication 6 Glossary Binary Input Single and double signals are treated as objects of the binary input type Broadcast The Supervisor can send a message to all the remote terminal units This is called broadcasting The destination address in that case equals 0x00 In this case the destination units will not reply to the received frame D Device address MODBUS address of the T200 by which the Supervisor can obtain access
58. ryimput 52 2 342 Tsssi visu Binary input 56 9 389 a e CC control block LI bet input 16 bits control block See visu Binaryinput NA NA input 16 bits re input 16 bits re input 16 bits input 16 bits input 16 bits input 16 bits TM 10 VISU TM 11 VISU TM 12 VISU TM 13 VISU TM 56 VISU TM 15 VISU Analogue NA l i i i Ka EGS input 16 bits TM 62 VISU A TM 63 VISU A TM 64 VISU A input 16 bits input 16 bits control block Analogue input 16 bits Relay output control block CNT 6 VISU TCD 30 ADMIN CNT 14 VISU TCD 38 ADMIN 576 TCD 17 Mal A Relay output control block N N N Analogue N input 16 bits Analogue N input 16 bits Analogue N input 16 bits TM 59 VISU U Analogue input 16 bits 57 12 Scheider Easergy T200 F200C R200 Modbus Communication Type Index Index Se No Automatic controls Automatic control ON OFF position_____ T SD9 visu Binaryimput 526 346 Automatic control ON OFF command TCD 9 EXPL Relay output 48 6 306 control block Automatic control has operated ess visu Binaryimput 57 13 39D nternal faults Motorization power supply failure ISS19 visu Binaryinput 57 11 39B Accessory equipment power supply failure TSS20 VISU JBinaryinput NA NA Chameriaup JSSzt VISU Binaryinput_ 57 9 399 Battery f
59. s broadcast and there is no response from the slaves The function code 1 byte It makes it possible to select a read or write type command and check whether the response is correct The data field n bytes it contains parameters relating to the function bit address word address bit value word value number of bits number of words The control field 2 bytes it contains a CRC16 used to detect transmission errors Slave number Function code Data field Control field 1 byte 1 byte n bytes 2 bytes Comment The length of a frame can range from 4 to 255 bytes depending on the function code NT00188 EN 06 Schneider 5 Easergy T200 F200C R200 Modbus Communication gt Operating procedure In general when it starts up the Supervisor makes several requests to address a device It may perform time setting on one or more devices broadcasting It repatriates events from the T200 It repatriates states from the T200 e Operation in No Report By Exception mode The Supervisor operates by polling regularly repatriating all the states from the T200s or repatriating only the changes reading the event stack and thus updating its database The Supervisor can send a command to the T200s at any time In this operating procedure the SCADA system controls the communication load Operation is simple but results in intense use of communication media because the more quickly one wants to be informed of a change th
60. setting and for slave synchronization For each new time frame received the slave s internal clock is reset immediately as of the end of frame reception The precision depends on the master and its control of the time for transmission of the time frame over the communications network The time for transmission of the frame over the network largely depends on the type of medium used When slave synchronization is to be performed the time setting frame should be sent regularly at closely spaced intervals between 10 and 60 seconds to obtain a synchronous time NT00188 EN 06 Schneider 19 Easergy T200 F200C R200 Modbus Communication 4 4 R200 ATS100 configuration of the protocol ge The protocol configuration can be found under Settings 1 SCADA communication Device Protocol Jevice Variables Most parameters are similar to T200 F200C and described in chapter 4 1 Classes El synoptic view Single line Signals El SCADA communication Protocol Ethernet port Serial port Protocol Parameters Modbus Standard modbus parameters Device address Specific modbus parameters NR Loss of event Index Code CR address bes Command type Direct vw Select Timeout x1s 20 Select word address fo Send Exception if undeclared address Yes No Server gateway function Yes No Double command by writing 1 bit allowed Yes No 32 bits mode e HL C UH Event Configuration Type TI_086 legacy
61. si visu Binary input Phase fault rsses7z visu Binaryimput 624 3E4 input 16 bits Switch position frsD124 visu Binaryimput 53 14 35E Switch ocked frsse61 visu Binaryimput 62 11 3EB control block MV voltage present auxiliary DI Soe visu PBinaryinmput 63 5 3F5 Earth fault rssesz visu Binaryimput 62 7 3E7 Phase fault S visu PBinaryinput 62 6 3E6 be A e A input 16 bits ommon objects Local Remote position______ gt _ gt _ _ rss23 visu Binaryimput 57 6 396 Fault detection reset command channels 1 Wee eee ch to 4 control block ee A to 8 control block Seeler ect Es Tele to 12 control block Seeler Iert 5 Tele to 16 control block Immediate AC power supply defect TSS 17 Visu Binary input 57 7 397 Time delayed AC power supply defect TSS 18 visu Binaryimput 57 12 39C Power cutimminent trss 5 VISU Bnayinput NA MA 34 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Type Index Index Internal Dec Hex No Automatic controls Automatic control ON OFF position channels 1 TSD 9 VISU o e input Automatic control ON OFF command TCD 9 EXPL Relay output 50 8 328 channels 1 to 4 control block Automatic control ON OFF position channels 5 TSD 49 VISU Binary input 54 10 36A Automatic control ON OFF command TCD 49 EXPL Relay output 50 10 32A channels 5 to 8
62. slave The master s requests are addressed to a slave identified by its number in the first byte of the frame or else addressed to all the slaves broadcast Broadcast commande are necessarily write commande No reply is transmitted by the slaves Structure of frames exchanged All the frames exchanged request and reply have the same structure number code CRC16 Each message or frame contains 4 types of information Slave number 1 byte it specifies the receiving equipment 0 to FFh If it is equal to zero the request concerns all the slaves broadcast and there is no reply message function code 1 byte it is used to select a command read write and check that the reply is correct data zone n bytes it contains the parameters linked to the function check zone 2 bytes it is used to detect transmission errors Please note that when 32 bits are used for counters words 2 bytes 16 bits can be transmitted as MSB LSB H L or LSB MSB weight L H NT00188 EN 06 Schneider 55 Easergy T200 F200C R200 Modbus communication Checking of messages received by the slave When the slave receives a frame it checks the following in order CRC16 slave number function code and function parameters a l the CRC16 or the slave number are incorrect the slave does not reply a l the CRC16 and the slave number are correct but the function code or parameters are not valid the slave transmits an e
63. st significant byte number of valid events in the event field Note for the details of coding and acknowledgement of events see paragraph 4 2 Specific protocol related operation Event Management NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication TC TSD TSS zones T200P allowed TSS 77 71 109 103 0380h to 383h TSS 49 81 0388h to 389h TSS 1 2 24 105 0390h to 393h TSS 23 17 0396h to 397h TSS 21 0399h TSS 22 19 18 57 039Ah to 39Dh T2001 allowed 167 49 81 113 145 TSS 1 2 54 86 118 150 23 17 3 21 22 0390 to 3ABh Read 1 2 3 4 19 18 4 5 6 349 343 381 375 413 407 4 45 439 321 353 385 417 ss 2758 685 679 71 7 711 593 625 657 689 TSS 545 546 598 630 662 694 03D0 to 3D5h TSS 547 03D8h TSS 548 to 550 03DD to 3DFh TSS 893 887 925 919 03E1 to 3EBh 957 951 989 983 865 897 929 961 TSS 817 818 870 902 934 966 O3FO to 3F5h TSS 819 03F8h TSS 820 to 822 O3FD to 3FFh F200C allowed TSD 1 to 3 0310 to 314 TSS 1 to 6 21 22 26 0330 to 338h TSS 72 71 17 0346 to 348h TSS 77 76 034D to 34Ch TSS 104 103 0356 to 357h TSS 108 035Dh NT00188 EN 06 Schneider 49 P Electri ic Easergy T200 F200C R200 Modbus communication T200S TCD TSD TSS Word address Access mode Function allowed TCD 1 2 9 0300 302 306h Read Write 1 2 3 4 5 6 TSD 1 2 9 0340 342 346h Read 1 2 3 4 TSS 77 71 109 103 0380h to 383h TSS 49 81 0388h t
64. su Binaryimput 61 5 3D5 Baa ISS visu Binary input Phase fault ISS 717 Visu Binaryimput 60 8 3C8 pr AA Be AY input 16 bits NT00188 EN 06 Schneider 33 P Electric Easergy T200 F200C R200 Modbus Communication Type Index Index ee ele ee No Channel 13 Switch position TSD121 visu Binaryimput 538 358 Switchlocked ISS865 VISU Binaryinput 628 3E8 Switch command TCD 121 EXPL Relay output 49 8 318 control block MV voltage present auxiliary DI TSS 870 visu Binary input Earthfaut Semi visu Binary input_ 621 3E1 Phase fault Sea visu _ Binaryinput_ 62 0 3E0 pea A a input 16 bits hannel 14 Switch position ISDi22 visu Bimalyimput 75310 35A Switch ode rsseo7 visu Binaryimput 62 9 3E9 Switch command TCD 122 EXPL Relay output 53 10 31A control block MV voltage present auxiliary Dl Tss902 visu Binary input Earthfaut FS TSS919 VISU Binaryimput 623 3E3 hase fault Ss925 VISU PBinaryimput 62 2 3E2 Phase current TM 255 VISU Analogue 77 4D0 input 16 bits m 5 O Wal Wa m E Switch position rsSDt 88 visu PBinaryimput 53 12 35C Switthlocked frsseza visu Binaryimput 62 10 SEA control block MV voltage present auxiliary DI TSS 934 visu PBinaryimput 63 4 3F4 Earthfaut rsse
65. su Binaryimput 522 342 Switch ode rsssis visu PBinaryinmput 56 9 389 O ic al lt A control block MV voltage present auxiliary DU esoe visu Binaryimput 57 3 393 Earth fault frsstogz visu Binaryimput 56 3 383 hase fault TSS 109 visu Binaryimput 56 2 382 Phase current TM9 VISU Analogue 65 410 input 16 bits hannel 3 uvm O Wallis m hannel 4 Switch posten ISD3 visu Binaryimput 52 4 344 Switchlockd rssimi3 visu Binary input 56 10 38A control block MV voltage present auxiliary DI rsstte visu Binary input 57 4 394 Earthfaut rssiass visu Binary input Phase faut S vWSsU i peon P S a input 16 bits 4 Binary input 7 5 6 Binary input 56 11 04 94 85 84 420 8B 06 95 87 86 30 Switch posten ISDi visu Binaryimput 526 346 Switch ode ISS145 visu control block MV voltage present auxiliary DI ISS visu Binaryimput 57 5 395 Earth fault rsst e7z visu PBinaryimput 56 7 387 Phase fault ISS visu ___ Binaryinput_ 56 6 386 peen ph S ee LP input 16 bits NT00188 EN 06 Schneider 31 Easergy T200 F200C R200 Modbus Communication Type Index Index Internal Dec Hex No Channel 5 Switch position TSD 41 visu Binary input Switch locked T 9321 visu Binary
66. tem The measurements can be sent with scaling Two modes are proposed Raw or Normalized mode the measure is scaled and converted depending to the Min and Max values defined for the measure Direct or Adjusted or Scaled mode the variable is sent as it is measured except if the measure exceeds the Max value defined for the measure Note for details of mode used see chapter 8 1 MODBUS table paragraph Telemetry and counters zones Comment This function can be used only by the protocol by changing the value of bit 0 in the Status register Bit O 0 Raw mode Bit O 1 Direct mode 5 Exception if undeclared element function Case of the Exception if undeclared element parameter set to No If the Supervisor interrogates a memory address external address in which no element is declared the device will associate the integer 0 with the undeclared bit or word and return this integer instead of returning a frame indicating an incorrect address NT00188 EN 06 Schneider 11 Easergy T200 F200C R200 Modbus Communication 6 Telecontrol function The TCD function allows certain advanced settings to be made for sending telecontrols e Double command by writing 1 bit enabled Enables telecontrols with writing of a single bit e CR code address telecontrol fault indication address gt The CR code gives information on the processing of the remote control order carried out by the T200 Bit 0 Remote
67. ttery Fault em D SPS 8028 1F5Ch Charger Fault PStw D SPS 8029 1F5Dh 12V failure PStw D SPS 8030 1F5Eh 24 48V failure Lem D see 8031 1F5Fh Battery Charge Indicator em O Mvie na ma 42 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication 7 6 3 Cubicle 1 data Recess e Dec Hex Switchgear position scito O DPC 7282 1C40h Protection setting group VIP440 O DPC f 7236 1C44h Switchgear position Sc D DPS 9312 2460h Earth switch position SCito D DPS 9314 2462h Active setting group VIP410 D DPS f 9318 2466h Current Maximeters Flairz3DM_ O SPC ma wa Fault passage indication Flair23DM_ O SPC 6416 1910h Trip indication VIP40 O SPC 6417 191th Phase peak demand values ViP40 O SPC ma wa Switchgear control failure SC1io O SPS n a ma Trip indication Scio D SPS 8048 1F70h Ready to operate semo a sps waf me Ready for remote command Som SPS ma ma Local Remote swich state seo D s ma ma Phase fa Famm D Lass 8049 1e71h Earih at Paan D sPS asian Transient phase faut Paan 1 D SPS ma ma Transient earth fat Far23DM_ D SPS wa ma Fault by test action Far23DM D sPS 8051 TF73h Phase or earth fat Paan D SPs wa ma
68. twork the MODBUS protocol is also implemented over Ethernet via TCP IP protocols We will call it MODBUS TCP Its implementation in the ISO model can be interpreted as followed TCP IP layer Ethernet Link layer D e Protocol characteristics As we can see above a service called Transmission Control Protocol TCP is implemented TCP is one of the core protocols used for internet and other similar networks In our case TCP is used because it provides reliable and order delivery of messages for point to point communication e Background TCP For a TCP connection to take place one side must be the server and one side must be the client Client Server architecture is therefore provided The side of the link that initiates the connection is the client and the side of the link that waits for a connection request is the server The client requests a connection by specifying the IP address and port number of the server Once the connection is made data is transferred without either side having to specify the IP address and port number The T200 is usually associated to the server and can hold four different TCP connections with a SCADA Each connection with a client is managed by a disconnection delay if no data is exchanged e Default port used for MODBUS IP The T200 support TCP communications on port number 502 All connection requests and all data are sent to this port number It can be changed for particular reasons 8 Schneider
69. writing a TCD word Only one remote control order at a time may be requested The order type is the status complementary to the TSD status only one bit should be included in the word written It is only accepted if the T200 is not already processing a remote control order The control order zone TCD may be read with bit and word read function code As it contains no information the data is 0 50 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Each TSD word is encoded as follows A TSD is encoded in 2 bits CO 01 switch open 10 switch closed m 00 or 11 undetermined For automation only 11 automatism locked by internal problem 00 automatism locked by external TSS The TSDs are assigned as follows TSD 1 to 4 O C position channel 1 to 4 a TSD 41 to 45 O C position channel 5 to 8 TSD 81 to 85 O C position channel 9 to 12 a TSD 121 to 125 O C position channel 13 to 16 TSD 9 ON OFF automation status channel 1 to 4 TSD 49 ON OFF automation status channel 5 to 8 TSD 89 ON OFF automation status channel 9 to 12 TSD 129 ON OFF automation status channel 13 to 16 a TSD 5 to 7 Digital outputs positions 1 to 3 TSD 4 O C switch position via digital outputs 1 and 2 Note depending on the type of equipment used the TSDs listed above are not all managed Each TSS word is encoded as follows Depending on the type of
70. xception reply a l the CRC16 slave number function code and parameters are correct the slave replies to the master s request Exception reply transmitted by the slave Slave function Exception code CRC16 number code 01 unknown function code received 02 incorrect address with MSB 03 incorrect data set to 1 1 byte 1 byte 1 byte 2 bytes 56 Schneider NT00188 EN 06 Easergy T200 F200C R200 Modbus Communication Reading N bits functions 1 and 2 Function 1 reading output bits Function 2 reading input bits Request Slave 1or2 Address of 1st bit Number of bits CRC16 number MSB LSB 1 byte 1 byte 2 bytes 2 bytes 2 bytes Response Slave 1or2 Number of First byte Last byte CRC16 number bytes read read read 1 byte 1 byte 1 byte N bytes 2 bytes Reading N words functions 3 and 4 Function 3 reading output words Function 4 reading input words Request Slave 3or4 Address of 1st word Number of words CRC16 number MSB LSB MSB LSB 1 byte 1 byte 2 bytes 2 bytes 2 bytes Response Slave 3or4 Number of First word Last word CRC16 number bytes read read read MSB LSB MSB LSB 1 byte 1 byte 1 byte 2 bytes 2 bytes 2 bytes NT00188 EN 06 Schneider 57 Easergy T200 F200C R200 Modbus communication Writing a bit function 5 Request Slave 5 Bit address Bit value CRC16 number MSB LSB 1 byte 1 byte 2 bytes 1 byte 1 byte 2 bytes Bit value bit forced to 0 write O bit forced to 1 write FFh Response The response is ide

T200 & Flair 200C & R200-ATS100

Contents

Download Pdf Manuals

Related Search

Related Contents

T200 &amp; Flair 200C &amp; R200-ATS100

Contents

Download Pdf Manuals

Related Search

Related Contents

T200 & Flair 200C & R200-ATS100