Home

PLX3x User Manual - ProSoft Technology

1. SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways Input Address Type Function Data Type Input READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT Page 172 of 218 ProSoft Technology Inc August 12 2015 SIE Protocol User Manual PLX3x Series Ethernet and Serial Gateways S7 1200 Data Block Address Type Function Data Type DB READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ COUNT Write COUNT Flag Address Type Function Data Type Flag READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count ProSoft Technology Inc August 12 2015 Page 173 of 218 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways Output Address Type Function Data Type Output READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count Input Address Type Function Data Type Input READ BOOL Write BOOL READ BYTE Write BYTE READ DI
2. _ ip 192 168 0 250 netmask 255 255 255 0 gateway 192 168 0 1 my_ip_1 192 168 1 250 netmask_1 255 255 255 0 gateway_1 192 168 1 1 Enter address parameters for EIP Enter address parameters for PND Reset Tag Reset All 4 When you are finished editing click OK to save your changes and return to the ProSoft Configuration Builder window Page 28 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual 2 8 Downloading the Project to the Gateway For the gateway to use the settings you configured you must download copy the updated Project file from your PC to the gateway To download the project file 1 Inthe tree view in ProSoft Configuration Builder click once to select the gateway 2 Right click the Gateway icon to open a shortcut menu From the shortcut menu choose DOWNLOAD FROM PC TO DEVICE Download files from PC to module STEP 1 Select Communication Path Select Connection Type Ethernet x Browse Device s Ethernet 192 168 0 250 Use Default IP CIPconnect STEP 2 Transfer File s DOWNLOAD Abort Test Connection Cancel 3 Click the BROWSE DEVICE S button to launch the ProSoft Discovery Service window which displays the ProSoft devices on the network and their IP addresses A Prosoft Discovery Service Sn 0000212C A Sn 00004051 M VI5S6
3. Rack Slot ul Ka 1 plx31 pnd Target Station o Slt J Modue m Enter connection to target station IP address MAC address Module type Station name Module name P CPU 315 SIMATIC 300 CPU 315 2 i OUTPUT 32 Byte lt Accessible Nodes ProSoft Technology Inc Page 207 of 218 August 12 2015 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways Once you download the program the RUN LED and the DC5V on the processor should be green There should be no red LEDs 2 pord a INPUT 3 a QUTPUT 22 8yte ian ce ym ee ae i 2 k 4 5 6 7 8 5 Page 208 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual 10 3 1 Monitoring Data in Step 7 1 To monitor the values coming out of the processor click on the Input and choose the Monitor Modify option 0 UR Ethermet 1 PROFINET IO System 100 Sit J Module Order number I address Q address Diagnostic address Comment i i d p3p EFT 20427 in m G T T e AN E T S E V INPI y i be Copy Ctrl C ren Go To i Filter Assigned Modules ji Module Information A Operating Mode A Clear Reset Set Time of Day Monitor Modify Name F Addresses ww co m n elolr Object Properties Start Device Tool T
4. ccccecceesceeeeeeeeeeeeeaeeeeeeeseeeesaeeeeeeeeaes 163 9 SIE Protocol 165 9 1 SIE Functional Overview ccccccecececeeeceeeeeeeeeeceeeeeseaeeesaaeeseaeeseeeeeseaeeesaeeneaeeenaes 166 9 1 1 General Specifications ccceeceeceeecececeeeeeaeeeeeeeeeeeeeseaeeeeaaeseeneeseeeeesaeeeeaeeseneeeeaes 166 9 1 2 Gateway Internal Database ececceceeeceeeeeneeceeeeeeeaeeeeeaeeeeaeeseeneeseaeeesaeeneneeeeaes 166 9 2 SIE Configuration soninun aeni ie AY ee ees tie GA ete ath 167 9 2 1 SIE Cent Kiens eenei a Mee Ae ened ae neds 167 9 2 2 SIE Client x Commands ccccccceeeceeeceeeeeaeeeeeeeeeeeeecaeeeeaaeseeeeeseeeesaeeeeaeeseneeenaes 167 9 3 SIE DiaQnostics wri sice secs aiae eats aie Ge eee 181 9 3 1 Client Command Errors cccccccsceceeeeeceeeeeceaeeeeaeeseeeeesaeeeeaeeseaeeseeeeeseaeeessaeeseeeeeaes 181 9 3 2 SIE Error Godes ints iinet en Aine wea ah ee inn eid 182 9 4 SIE Referen E r na tiie tae ee abe Ae a ee ead 185 9 4 1 Maximum Register Counts cc ccceccceceeeeeeeaeeeeeeecneeeecaaeeeeaaeseeneeceaeeesaaeeeenaessenees 185 10 PND Protocol 193 10 1 PND Functional OVerview cccceesceceeceeseeeeeeaaeseeneeceaeeeeaaeseeaeeseeeesaeeesaaeeeeneeee 194 10 2 PND Contiguration sch want ve iee iat ce iene dae dad 194 10 3 Step 7 Configurations nti ie ates eee adit aie eo et dad 198 10 3 1 Monitoring Datain Step 7 ic Acuinantietietti cielo aeaa aanas aaeain ceed eutevs 209 10 3 2 Cre
5. 37 in 13 64 cm ProSoft Technology Inc Page 11 of 218 August 12 2015 Start Here PLX3x Series User Manual Ethernet and Serial Gateways 1 4 1 5 Jumper Settings There are three sets of jumper settings located on the back of the module CS mone 1 MODE 2 MODE 3 e MODE 1 Development Mode Jumper This is the top jumper used for firmware updates only The two pins should NOT be jumpered during normal operation e MODE 2 Default IP Jumper This is the middle jumper The default IP address of the ProLinx gateway is 192 168 0 250 Set this jumper to put the gateway s IP address back to the default e MODE 3 Reserved This is the bottom jumper reserved for internal ProSoft Technology use only The firmware will not run when these pins are shorted SD Card PLX3x products can be ordered with an optional SD card Part Number SDI 1G In the event of a disaster the SD card can be moved from one module to the next and resume operation Below is a list of how the module will act with and without an SD card Without an SD Card e Configuration data is downloaded to the internal memory of the module e Ifa blank SD Card is inserted in to the module after the module has been configured the configuration data will not be transferred to the SD card The configuration data would need to be downloaded to the module while the SD card is in place With an SD Card e Configuration data is downloaded to the SD Card e
6. Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is Word and Byte typically used when dealing with floating point or other swap multi register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap
7. Page 58 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual Class 3 Client UClient x Commands There is a separate command list for each of the different message types supported by the protocol Each list is processed from top to bottom one after the other until all specified commands are completed and then the polling process begins over again This section defines the EtherNet IP commands to be issued from the gateway to server devices on the network These commands can be used for data collection and or control of devices on the TCP IP network In order to interface the virtual database with Rockwell Automation Programmable Automation Controllers PACs Programmable Logic Controllers PLCs or other EtherNet IP server devices you must construct a command list The following tables describe the command list parameters for each message type ProSoft Technology Inc Page 59 of 218 August 12 2015 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways Class 3 Client UClient x Commands SLC500 2 Address Fields Parameter Value Description Enable Enable Specifies if the command should be executed and under Disable what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command ex
8. Serial Port Cables for Gateways with Serial Ports 48 ProSoft Technology Inc Page 45 of 218 August 12 2015 Hardware Information User Manual PLX3x Series Ethernet and Serial Gateways 4 1 Hardware Specifications Specification Power Supply Current Load Operating Temperature Storage Temperature Relative Humidity Dimensions Height x Width x Depth LED Indicators On all gateways Ethernet Port S Serial Port Isolation Shipped With Each Unit Page 46 of 218 Description 24 VDC nominal 10 VDC to 36 VDC allowed Positive Negative GND Terminals 208mA normal 24 VDC normal 300 mA maximum 36 VDC maximum 25 C to 70 C 13 F to 158 F 40 C to 80 C 40 F to 176 F 5 to 95 RH with no condensation Standard 5 38 in x 1 99 in x 4 38 in 13 67 cm x 5 05 cm x 11 13 cm Configuration CFG and Error ERR Communication Status Power PWR and Hardware Fault FLT Network Status NS EtherNet IP Class or Class III Connection Status EtherNet IP Only Module Status MS Module Configuration Status EtherNet IP Only Ethernet Communication Port Link Activity and 100mbit Serial Communication Port Receive RX and Transmit TX 10 100Mbit full duplex RJ45 Connector Electrical Isolation 1500 Vrms at 50 Hz to 60 Hz for 60 seconds applied as specified in section 5 3 2 of IEC 60950 1991 Ethernet Broadcast Storm Resiliency less than or equal to 5000 ARP frames per secon
9. Server Port Address Range 2000 6200 through 6209 502 6210 through 6219 2001 6220 through 6229 The content of each server port s status data area is structured the same The following table describes the content of each register in the status data area Offset Description Number of Command Requests Number of Command Responses Number of Command Errors Number of Requests Number of Responses Number of Errors Sent Number of Errors Received Configuration Error Word Current Error Code CO IN D O1 JO JP o Last Error Code ProSoft Technology Inc Page 105 of 218 August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways MBTCP Client Status Data The following table lists the addresses in upper memory that hold status data for each MBTCP Client Client Address Range Oo 18500 through 15509 1 15526 through 15535 2 15552 through 15561 8 15708 through 15717 Oo 15734 through 15748 S The content of each Client s status data area is structured the same The following table describes the content of each register in the status data area Offset Description Command Request Count total Client commands sent Command Response Count total command responses received Command Error Count Number of Request Packets Number of Response Packets Errors Sent Errors Received Reserved Current Error Last Error O
10. Yes or No This flag specifies if the floating point data access functionality is to be implemented If the float flag is set to Yes Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the two following parameters Reset Tag Reset All OK Cancel Parameter Value Description Float Flag YES or NO This flag specifies if the floating point data access functionality is to be implemented If the float flag is set to YES Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the two following parameters Float Start 0 to 65535 This parameter specifies the first register of floating point data All requests with register values greater than or equal to this value will be considered floating point data requests This parameter is only used if the Float Flag is enabled For example if a value of 7000 is entered all requests for registers 7000 and above will be considered floating point data Float Offset 0 to 3999 This parameter specifies the start register for floating point data in the internal database This parameter is used only if the Float Flag is enabled For example if the Float Offset value is set to 3000 and the float start parameter is set to 7000 data requests for register 7000 will use the internal Modbus register 3000 Output 0 to 3999 When the port is configured as a slave this parameter specifies the
11. 1100 o 41101 40001 1100 Note If the documentation for a particular Modbus server device lists data addresses in hexadecimal base16 notation you will need to convert the hexadecimal value to a decimal value to enter in this parameter In such cases it is not usually necessary to subtract 1 from the converted decimal number as this addressing scheme typically uses the exact offset address expressed as a hexadecimal number ProSoft Technology Inc August 12 2015 Page 131 of 218 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways 7 3 MBS Diagnostics 7 3 1 PCB Diagnostics The best way to troubleshoot the MBS driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 7 3 2 MBS Status Data in Upper Memory Each Modbus port has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 25 General Modbus Error and Status Data The following table lists the starting addresses in upper memory where general error and status data for each Modbus Master or slave port can be found Modbus Port Starting Address 1 4400
12. 2 On the shortcut menu select CHOOSE MODULE TYPE This action opens the Choose Module Type dialog box Product Line Filter C pLx4000 C PLx6000 C MVI46 C MVI56 C MvI71 C PLxs000 PLX30 C mvI69 C MVI56E C PTQ MVI69E MVI69L Search Module Type STEP 1 Select Module Type Module Definition Ethernet IP to Profinet Protocol ommunications Gateway C all PLX31 EIP PND STEP 2 Define Ports Section Status J Comment Used EIP Class 3 Server Used EIP Class 3 Client0 Used _Action Required wg EIP Class 3 Client 1 Used UnCheck if Not Used lt EIP Class 3 UClient 0 Used UnCheck if Not Used v PND Used A PND MODULE MAP Used Pi CommonNET Used conc ee 3 Inthe Product Line Filter area of the dialog box select the PLX30 radio button 4 Inthe STEP 1 Select Module Type drop down list select the model number that matches your gateway and then click OK to save your settings and return to the PCB Main window ProSoft Technology Inc Page 19 of 218 August 12 2015 Configuring Y our Gateway PLX3x Series User Manual Ethernet and Serial Gateways 2 4 Renaming PCB Objects Untitled ProSoft Configuration Builder File Yiew Project Tools Help Default Project Ga Default Location Default Module Please Select Module Type E Default Module Unknown Product Line Last Change Last Download Module Information Last Change Never Last Download
13. 44 Oxffd4 Count parameter set to 0 45 Oxffd3 Invalid function code 46 Oxffd2 Invalid swap code 47 Oxffd1 Invalid TSAP code Page 184 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual 9 4 SIE Reference 9 4 1 Maximum Register Counts CPU315 2 DP Data Block Address Type Function Data Type Max Reg Cnt Max Reg Cnt DB READ BOOL 1 Write BOOL 1 READ BYTE 164 Write BYTE 164 READ DINT 41 Write DINT 41 READ REAL 41 Write REAL 41 READ INT 82 Write INT 82 READ TIME 82 Write TIME 41 READ COUNT 82 Write COUNT 82 Timer Address Type Function Data Type Max Reg Cnt Timer READ TIME 1 Counter Address Type Function Data Type Max Reg Cnt Counter READ Count 111 ProSoft Technology Inc Page 185 of 218 August 12 2015 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways Flag Address Type Function Data Type Max Reg Cnt Max Reg Cnt Flag READ BOOL 1 Write BOOL 1 READ BYTE 222 Write BYTE 212 READ DINT 55 Write DINT 53 READ REAL 55 Write REAL 53 READ INT 111 Write INT 106 READ TIME 111 Write TIME 53 READ Count 111 Write Count 106 Output Address Type Function Data Type Max Reg Cnt Max Reg Cnt Output READ BOOL 1 Write BOOL
14. Type CIP Data Table Read N Message Control readmsg E n R writemsg DN Page 90 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual The MESSAGE CONFIGURATION dialog box must be completed to define the data set to transfer to the processor from the gateway An example of the dialog box follows Te x Confiquration Communication Tag Message Type CIPDataTableRead ttt Source Element int_data 50 Number Of Elements poo Destination Tag pic5data50 tt New Tag O Enable Enable Waiting Start Done Done Length 1 Error Code I Timed Out Extended Error Code Cancel Apply Help Complete the dialog box for the data area to be transferred CIP Data Table messages require a tag database element for both the source and destination The DESTINATION TAG is a tag defined in the Controller Tag database The SOURCE ELEMENT is the tag element in the EIP gateway The gateway simulates a tag database as an array of elements defined by the maximum register size for the gateway user configuration parameter Maximum Register in the Gateway section with the tag name INT_DATA In the example above the first element in the database is the starting location for the read operation of ten elements Additionally the COMMUNICATION information must also be configured An example of the dialog box follows Message Configuration
15. ccceecceeeceesseeeeeeeeeneeeeeeeeeeeeeeeseeeeeneeeeaeee 21 Using the CommonNet Data Map s ssseeseeseesieereseresirssresrrnernerneee 25 Configuring an IP ACCIreS eccceeeeeeeteeeeeeeeeneeeeeeeeeeeseneeseeeeeneetenees 27 Downloading the Project to the Gateway csscccssssseeesesteeeeeees 29 Printing a Configuration File eeeeeeeeseeeeeeeeeeeeeeeeeseaeeeeeeeteeeeneeen 31 ProSoft Configuration Builder PCB is a convenient and powerful software tool for managing your gateway configuration Use PCB to configure a new project or to transfer an existing project to a new device You can also to use PCB to retrieve a configuration from a working gateway by uploading the configuration from the gateway ProSoft Technology Inc August 12 2015 Page 15 of 218 Configuring Y our Gateway PLX3x Series User Manual Ethernet and Serial Gateways 2 1 Installing ProSoft Configuration Builder Software You must install the ProSoft Configuration Builder PCB software to configure the gateway You can always get the newest version of ProSoft Configuration Builder from the ProSoft Technology website To install ProSoft Configuration Builder from the ProSoft Technology website 1 2 3 4 5 Open your web browser and navigate to http www prosoft technology com pcb Click the link at the Current Release Version section to download the latest version of ProSoft Configuration Builder Choose SAVE or SAVE FILE
16. 2 4800 3 5200 4 5600 Status data for Ports 2 through 4 is only present in 4 port MBS gateways A Note None of the addresses are available in the Modbus address range In order for them to be accessed via a Modbus request they must be moved into the 0 to 3999 address range See Using the CommonNet Data Map page 25 The status data area is initialized with zeros whenever the gateway is restarted This occurs during a cold start power on reset reset push button pressed or a warm boot operation commanded from a debug screen or after downloading a new configuration Page 132 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBS Protocol User Manual Port 1 General Modbus Error and Status Layout The addresses listed are for Port 1only but the format is the same for each port The start address for each port is given in the previous section Example Internal Offset Description Database Address 4400 0 Number of Command Requests 4401 1 Number of Command Responses 4402 2 Number of Command Errors 4403 3 Number of Requests 4404 4 Number of Responses 4405 5 Number of Errors Sent 4406 6 Number of Errors Received 4407 7 Configuration Error Code 4408 8 Current Error Index 4409 9 Last Error Index Slave Port General Port STATE and COMM STATE Status Note There are two additional port status parameters that are not available from th
17. Function Enable Internal Poll Count Swap IP Slot Function Function Parameters Code Code Address Interval Code Address Number Code Time IP Address IP address of processor to reach Slot Number 1 for PLC5 amp SLC processor slot number of ControlLogix Page 92 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBTCP Protocol User Manual 6 MBTCP Protocol In This Chapter MBTCP Functional Overview O O O MBTOP Configuration cecceecceeeseeeeneeeeeeeseneeeeeeseeeseeeeeneeeeeneeeaes MBTCP Diagnostics s ccccceis onns a o a elt eres MBTOP Reference eceeseseseeseeeteneeeeaeeteaeeeeaeeteaeeseaeeseaeeeeaeetias This chapter contains information specific to the PLX3x series gateway Modbus TCP IP MBTCP protocol driver ProSoft Technology Inc August 12 2015 Page 93 of 218 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways 6 1 MBTCP Functional Overview The PLX3x Modbus TCP IP MBTCP protocol can be used to interface many different protocols into the Schneider Electric Quantum family of processors as well other devices supporting the protocol The MBTCP protocol supports both Client and server connections The gateway supports a Client connection on the TCP IP network to interface with processors and other server based devices us
18. Modbus Slave List Status 136 BS Configuration 125 BS Functional Overview 122 BS Port x Commands 129 BS Port x 125 BS Protocol 121 BTCP Client x 100 BTCP Client x Commands 102 Page 217 of 218 Index User Manual PLX30 Series Ethernet and Serial Gateways TCP Client Command List Error Data 107 TCP Client Error Status Data 106 TCP Client Specific Errors 108 TCP Configuration 98 TCP Error and Status Data 105 TCP Functional Overview 94 TCP Server Port 2000 Status Error Locations 105 TCPServers 98 essaging from a PLC5 81 essaging from a SLC 5 05 Processor 77 G 84 inimum Command Delay 100 NET Client Specific Errors 184 NET Client x 167 NET Client x Commands 167 odbus Error and Status Data Area Addresses 132 odbus Error Codes 138 odbus Exception Codes 118 148 odbus Exception Responses 117 138 147 odbus Master Slave Port Specifications 123 odbus Message Routing Port 2001 97 odbus Port Access to Database 124 odbus Ports Error and Status 132 odbus Protocol Specification 109 odbus TCP IP Client Access to Database 96 odes of Operation 156 odule Communication Error Codes 182 odule Specific Error not Multiple Compliant 75 ounting the Gateway on a DIN rail 11 ultiple Server Access to Database 96 O ow w Ww wW W wW W zs Output Offset 98 128 Package Contents 10 PD 84 Pinouts 3 PLC 5 Command Set Func
19. Never Application Rev oS Rev Loader Rev MAC Address configedit version 2 2 0 Build 1 EHI module configuration module module Type module Name Default module Default Module The Default Project and Default Location folders may be renamed in the tree view Select the object and then click the right mouse button to open a shortcut menu From the shortcut menu choose RENAME Untitled ProSoft Configuration Builder File View Project Tools Help Default Project Name Status Information Ga Default Location v PLX31 EIP MBS Configured PLX31 EIP MBS Delete PLX30 EIM4 1 00 Comment values OK Copy EIP Class 3 Server Values OK EIP Class 3 Client 0 Values OK EIP Class 3 Client 1 Values OK EIP Class 3 UClient 0 Values OK MBS Port 1 Values OK Disabled MBS Port 2 Values OK Disabled MBS Port 3 Values OK Disabled Choose Module Type View Configuration Export Configuration File s Load Config File Module Information Last Change Never Download from PC to Device Last Download Jul 17 2012 09 17 i Application Rev 1 00 182 Upload From Device to PE Os RU 26 30 10 Diagnostics Loader Rev MAC Address 00 00 8D 88 00 16 Configedit version 4 0 1 Build 1 Ethernet Configuration my_ip 192 168 0 250 netmask 3 255 2355 255 0 gateway 192 168 0 1 module Configuration PLX31 EIP MB54 1 Type the name to assign to the object 2 Click away from the object to save the ne
20. O INI JAJAJ Pp o Offsets 8 and 9 contain information about the most recent communication errors The Current Error offset 8 will have a non zero value if the currently executing Client command experiences an error The Last Error offset 9 will store the most recent non zero value error code that was reported by the Client the last time it experienced an error Note that this value is retentive This register will hold the last error value until the memory is cleared by a restart reset cold boot or warm boot operation Therefore any value you see here may indicate an error that could have occurred at any time since the gateway was last restarted and may not indicate a current or recent error For details on error codes see MBTCP Client Command List Error Data page 108 Page 106 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual MBTCP Client Command List Error Data A status error code is held in upper memory for each command in each MBTCP Clients command list The following table lists the addresses in upper memory that hold command list error data for each MBTCP Client Client Address Range 0 15510 through 15525 1 15536 through 15551 2 15562througn 15577 S 8 15718 through 15733 9 15744 through 15759 The first word in each Clients command list error data area contains the status error code for the first command in the Cl
21. Single Coil 6 Preset Write Single Register 15 Force Multiple Coils 16 Preset Multiple Registers MB Address in Device Varies Specifies the starting Modbus register or bit address in the server to be used by the command Refer to the documentation of each Modbus server device for the register and bit address assignments valid for that device The Modbus Function Code determines whether the address will be a register level or bit level OFFSET address into a given data type range The offset will be the target data address in the server minus the base address for that data type Base addresses for the different data types are e 00001 or 000001 0x0001 for bit level Coil data Function Codes 1 5 and 15 e 10001 or 100001 1x0001 for bit level Input Status data Function Code 2 e 30001 or 300001 3x0001 for Input Register data Function Code 4 e 40001 or 400001 4x0001 for Holding Register data Function Codes 3 6 and 16 Address calculation examples o For bit level Coil commands FC 1 5 or 15 to read or write a Coil OX address 00001 specify a value of 0 00001 00001 0 o For Coil address 00115 specify 114 o 00115 00001 114 For register read or write commands FC 3 6 or 16 4X range for 40001 specify a value of 0 o 40001 40001 0 e For01101 11101 31101 or 41101 specify a value of 1100 o 01101 00001 1100 o 11101 10001 1100 o 31101 30001 1100 o
22. and 15 this parameter sets the number of bits inputs or coils to be transferred by the command For Modbus functions 3 4 and 16 this parameter sets the number of registers to be transferred by the command Swap Code No Change Word Swap Word and Byte Swap Byte Swap Specifies if and how the order of bytes in data received or sent is to be rearranged This option exists to allow for the fact that different manufacturers store and transmit multi byte data in different combinations This parameter is helpful when dealing with floating point or other multi byte values as there is no one standard method of storing these data types The parameter can be set to rearrange the byte order of data received or sent into an order more useful or convenient for other applications No change 0 No change is made in the byte ordering 1234 1234 Word Swap 1 The words are swapped 1234 3412 Word and Byte Swap 2 The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap 3 The bytes in each word are swapped 1234 2143 These swap operations affect 4 byte or 2 word groups of data Therefore data swapping using these Swap Codes should be done only when using an even number of words such as when 32 bit integer or floating point data is involved Node IP Address XXX XXX XXX XXX IP address of the device being addressed by the command Serv Port 502 or other supported port on serve
23. o Hardware or Software Handshaking RTS CTS DTR DSR or XON XOFF Page 152 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 1 2 Data Flow The following illustration shows receive and transmit data flow of the ASCII protocol Internal Database To external device ___ ASCII Device From external device Data received from the ASCII device is accepted by the receive driver and placed in the receive database location configured by the user The receive driver waits until the user configured termination condition is recognized while receiving the data before placing the new data into the database For example if the carriage return character ASCII 13 is used as the termination condition for a received message this signals the end of the message When the receive driver observes this character in the input stream it takes all received characters and places them in the internal database In both receive and transmit operations a signal is required to determine when new data is received or must be transmitted The first word in the two data area is used for this purpose There is new data available when the first word changes Example The sequence number in the receive data block has a value of 0 as set when the gateway initializes The ASCII device sends a new data packet and the termination condition is present The rec
24. readmsg x Configuration Communication Browse Communication Method CIP DH Channel z Destinator Lint c CIP With Source link Destination ode J0 f ictal Source ID I Cache Connections O Enable Enable Waiting O Start Done Done Length 0 Error Code I Timed Out Extended Error Code Cancel Apply Help ProSoft Technology Inc Page 91 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions 5 4 4 EIP Command Entry Form The following form can be used to design the application s command list Gateway Information Data Device Information Data
25. server slave device responding to message instructions initiated from a Client Master device such as an HMI DCS or PLC5 Configuring EIP Class 3 Server Connections in PCB The PLX3x Server connection file size is user selectable for 100 or 1000 integers If a value of 100 is selected valid registers will be from N10 0 to N10 99 If a value of 1000 is selected valid registers will be from N10 0 to N10 999 Accessing the Gateway s Internal Memory Data Type Tag Name Length of Each Element in Array Range for 4000 CIP Message Element Database BOOL BOOLData 1 0 to 63999 Bit Array BITAData 4 0 to 1999 SINT SINTDatal 1 0 to 7999 INT INT_Dataf 2 0 to 3999 DINT DINTDataf 4 0 to 1999 REAL REALDatal 4 0 to 1999 The following tables define the relationship of the gateway s internal database to the addresses required in the MSG instructions MSG Instruction Type CIP Database CIP Integer CIP Boolean CIP Bit Array CIP Byte CIP DINT CIP Real Address 0 Int_data 0 BoolData 0 BitAData 0 SIntData 0 DintData 0 RealData 0 999 Int_data 999 BoolData 15984 SIntData 1998 1000 Int_data 1000 BoolData 16000 BitAData 500 SIntData 2000 DIntData 500 RealData 500 1999 Int_data 1999 BoolData 31984 SIntData 3998 2000 Int_data 2000 BoolData 32000 BitAData 1000 SIntData 4000 DIntData 1000 RealData 1000 2999 Int_data 2999 BoolData 47984 SIntData 5998 3000 Int_data 3000
26. 1 READ BYTE 128 Write BYTE 128 READ DINT 32 Write DINT 32 READ REAL 32 Write REAL 32 READ INT 64 Write INT 64 READ TIME 64 Write TIME 32 READ Count 64 Write Count 64 Page 186 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual Input Address Type Function Data Type Max Reg Cnt Max Reg Cnt Input READ BOOL 1 Write BOOL 1 READ BYTE 128 Write BYTE 128 READ DINT 32 Write DINT 32 READ REAL 32 Write REAL 32 READ INT 64 Write INT 64 READ TIME 64 Write TIME 32 READ Count 64 Write Count 64 ProSoft Technology Inc Page 187 of 218 August 12 2015 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways CPU1212C Data Block Address Type Function Data Type Max Read Max Write DB READ BOOL 1 Write BOOL 1 READ BYTE 30 Write BYTE 30 READ DINT 7 Write DINT 7 READ REAL 7 Write REAL 7 READ INT 15 Write INT 15 READ TIME 15 Write TIME 15 READ COUNT 15 Write COUNT 15 Flag Address Type Function Data Type Max Reg Cnt Max Reg Cnt Flag READ BOOL 1 Write BOOL 1 READ BYTE 212 Write BYTE 212 READ DINT 53 Write DINT 53 READ REAL 53 Write REAL 53 READ INT 106 Write INT 106 READ TIME 105 Write TIME 105 READ Count 106 Write Count 106 Page 188 of 218 Pro
27. 34 AM Cancel Help Storage location of project Date created Last modified Comment ProSoft Technology Inc Page 211 of 218 August 12 2015 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways 3 Double click on the table to monitor EA Var VAT_Float_Input Profinet_Sample SIMATIC 300 CPU 315 2PN DP S7 Progra E BX K Table Edit Insert PLC Variable View Options Window Help a p la S sleloj x lea wara S pea ates See epar trma ets vote moar vaas PD 0 X Default Define Default Binary Page 212 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual 10 4 PND Diagnostics Input Error Status Error code Description 0 No error 0x0604 Pointer to data memory is NULL 0x0503 Write buffer is already locked or unlocked 0x060A Data length to be written is invalid Output Error Status Error code Description 0 No error 0x0001 No new data was copied into the buffer 0x0604 Pointer to data memory is NULL or pointer to variable to receive the APDU Data Status is NULL 0x060B IOCR ID is 0 0x0803 IOCR ID could not be found or IOCR ID is invalid 0x060A Data length to be read is invalid 10 4 1 Configuration Error Codes The Err LED is lit when no connection from the PLC is established Error Codes Error code Description 0 No error 1 In
28. 4 ProSoft Technology Inc EIP Reference 5 4 1 SLC and MicroLogix Specifics Messaging from a SLC 5 05 The gateway can be used to receive messages from a SLC 5 05 containing an Ethernet interface The gateway supports both read and write commands A discussion of each operation is provided in the following topics SLC5 05 Write Commands Write commands transfer data from the SLC processor to the gateway An example rung used to execute a write command is shown in the following diagram z B3 0 MSG 0000 JE Readirite Message END 0 Type Peer To Peer ReadMirite Write feeCDN es Target Device PLCS Local Remote Local ERD Control Black N10 0 Control Block Length 51 Setup Screen 63 0 UD 0 Set the READ WRITE parameter to WRITE The gateway supports a TARGET DEVICE parameter value of 500CPU or PLC5 In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box 73 MSG olx This Controller Communication Command Data Table Address Control Bits Ignore if timed out T0 0 To be retried NA 0 Awaiting Execution EW fo Continuous Run CO o Eror ER o Message done DN Message Transmitting ST o Message Enabled EN 0 Waiting for Queue Space o Size in Elements Channel r Target Device Message Timeout Data Table Address Local Remote
29. 4to7 3 2 1 0 Bit Value 8 4 2 1 Definition Reserved Packet size Intercharacter Message Termination limit used delay timeout timeout used character s used used If none of the bits are set Type 0 the port will be configured for stream mode Any characters received on the port are immediately sent to the processor The processor must buffer and assemble a packet of information if this mode is selected as required by the application If the data can be handled by the processor in this mode and it is appropriate for your application this is the fastest method of communication between the device and the processor ProSoft Technology Inc Page 159 of 218 August 12 2015 ASCII Protocol PLX3x Series User Manual Ethernet and Serial Gateways Any combination of bits is acceptable to the gateway and should be set to match the device on the specific port An example of each termination type is given below Termination character s used Settings Count 1 RTermCnt 1 Termination on 0x0d carriage return character RTermChar Od 00 00 00 Data Received on port A B C Ox0d D E Comment The characters ABC will be sent along with the 0x0d character to the controller after the 0x0d character is received The characters DE will not be sent until the 0x0d character is received Message timeout used Settings Message timeout 1000 mSec Rtimeout 1000 Data Received on port TIME _ gt 0 1000 mSec 2000 mSec ABCDEFG Com
30. After the slave fails to respond the master will skip sending commands that should have been sent to the slave until the number of skipped commands matches the value entered in this parameter This creates a sort of slow poll mode for slaves that are experiencing communication problems Command Control Reg 1 0 to 3900 This parameter allows the execution of commands in the Command List page 129 to be controlled by setting a value of zero 0 one 1 two 2 or three 3 into a 100 register area of the gateway database beginning at the address entered in this parameter If commands in the list are specified with an Enable code of zero for Page 126 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBS Protocol User Manual Parameter Value Description all commands no commands will be executed If the value in the first control register is changed to one 1 command zero will be executed continuously If the value is the control register for a write command is set to two 2 the command will be enabled for conditional writing which will cause the command to be executed whenever the values in the database registers associated with the command change Use the value of three 3 only for bit level write commands FC 5 and 15 If the parameter is set to three 3 the command will be executed only if the internal bit data associated with the command changes It will a
31. August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Preset Multiple Registers Function Code 16 Query Holding registers existing within the controller can have their contents changed by this message a maximum of 60 registers However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller 16 bit for the 184 384 and 584 unused high order bits must be set to zero A Note Function codes 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func Hi LoAdd Quantity Byte Hi Lo Hi Lo Data Error Check Add Cnt Data Data Data Field 11 10 00 87 00 02 04 00 0A 01 02 CRC Response The normal response to a function 16 query is to echo the address function code starting address and number of registers to be loaded Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 10 00 87 00 02 56 Page 120 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual 7 MBS Protocol In This Chapter MBS Functional Overview cceeceeseeeeeeeteneeeeereseeeeeaeeseeeeeaeeteas 122 MBS Comnfiguration cceccetesceeseceteseeeeeeeceseeeneneseaeeeseeeseaeeesaneraas 125 aes MBS Diagnostics c cc2i teas he teet viet a eee 132
32. BoolData 48000 BitAData 1500 SIntData 6000 DIntData 1500 RealData 1500 3999 Int_data 3999 BoolData 63999 SIntData 9998 Page 54 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual MSG Instruction Type PCCC Database Address File size 100 Database Address File size 100 0 N10 0 0 N10 0 999 N19 99 999 N19 99 1000 N20 0 1000 N20 0 1999 N29 99 1999 N29 99 2000 N30 0 2000 N30 0 EtherNet IP Explicit Messaging Server Command Support The following commands are supported in the PLX3x gateway Basic Command Set Functions Command Function Definition Supported in Server 0x00 N A Protected Write xX 0x01 N A Unprotected Read X 0x02 N A Protected Bit Write X 0x05 N A Unprotected Bit Write X 0x08 N A Unprotected Write xX PLC 5 Command Set Functions Command Function Definition Supported in Server 0x0F 0x00 Word Range Write Binary Address X 0x0F 0x01 Word Range Read Binary Address X 0x0F Typed Range Read Binary Address X OxOF Typed Range Write Binary Address X OxOF 0x26 Read Modify Write Binary Address Ox0OF 0x00 Word Range Write ASCII Address X 0x0F 0x01 Word Range Read ASCII Address X 0x0F 0x26 Read Modify Write ASCII Address SLC 500 Command Set Functions Command Function Definition Supported in Server 0x0F OxA1 Protected Typed Logical Read With Two X Addr
33. Code 16 Preset Multiple Registers For example if this parameter is set to 1000 and a Function Code 3 command is received requesting Holding Register address 0 virtual Modbus address 40001 or 400001 the data returned in the response will be the value at register 1000 in the gateway s database End of Message Delay 0 to 65535 Specifies a time delay in milliseconds to be added to the 3 5 character time delay used by the module to recognize the end of a message Certain applications may require validation of Modbus messages with more than 3 5 character time between consecutive bytes example modem applications A value of 0 will cause the default end of message delay to be used Page 128 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBS Protocol User Manual 7 2 2 MBS Port x Commands The Modbus Port x Commands where x can be 1 2 3 or 4 sections of the PCB tree Window are used to define a Master serial port Command List This list holds the parameters needed to poll slave devices attached to a Master port Parameter Value Description Enable Disabled Specifies if the command is to be executed and under what Continuous conditions Event Disabled 0 the command is disabled and will not be executed in Command the normal polling sequence However the command can still be Conditional activated using Command Control Continuous 1 the command
34. Ic Program Files Siemens Step s proj Profin_1 01 13 2014 10 37 02 AM 01 13 2014 10 37 02 AM Insert PLC View Options Window Help Page 204 of 218 B al ala BBP Ethemet 1 PRO Profile SEE PROFIBUS DP MI PROFIBUS PA B PROFINET I0 Additional Field Devices Gateway netTAP 100 PLX30 PLX31 EIP PND PLX31 EIP PND PLX31 EIP PND PLX31 EIP PND PLX31 EIP PND PLX31 EIP PND Standard i A 4 PLX32 PND H E P80 El HE Gateway GSDML V2 3 ProSoft PLX31 PNDevice V3 9 20131116 xml ProSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual 17 Configure the interface port for the ProSoft module as shown General Addresses 10 Cycle Update Time Mode Fand update trme lt Facto Send clock me Uewe tens Go fo Watchdog Time Number of accepted update cycles wth messing IO data zl Watchdog tine ms o Ca e Hee 18 Configure the inputs and outputs to match the PCB configuration The example uses 32 inputs and 32 outputs HW Contig SIMATIC 300 1 Configuration Profinet Sample E Incest AC Wew Cobons Wind Help Ogs8 he 6 OS be HO Vw INPUT 1024 Byte INPUT 128 Byte INPUT 16 Byte INPUT 2 Byte INPUT 256 Byte INPUT 32 Byte INDIT A Rote ProSoft Technology Inc Page 205 of 218 August 12 2015 PND Protocol PL
35. Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual 2 9 Printing a Configuration File 1 Select the Gateway icon and then click the right mouse button to open a shortcut menu 2 Onthe shortcut menu choose VIEW CONFIGURATION This action opens the View Configuration window 3 Inthe View Configuration window open the FILE menu and choose PRINT This action opens the Print dialog box 4 Inthe Print dialog box choose the printer to use from the drop down list select printing options and then click OK ProSoft Technology Inc Page 31 of 218 August 12 2015 PLX3x Series User Manual Ethernet and Serial Gateways Page 32 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 3 Diagnostics and Troubleshooting In This Chapter Se LED Indicators eaii a ei apep ean aa paaa tosh aaraa pa aa Ee eae tte 34 Using Diagnostics in ProSoft Configuration Builder 36 Gateway Status Data in Upper Memory ecceeeceeeeteeeseeeeeeeeenees 43 ProSoft Technology Inc Page 33 of 218 August 12 2015 Diagnostics and Troubleshooting PLX3x Series User Manual Ethernet and Serial Gateways 3 1 LED Indicators Troubleshooting can be performed using several methods The first and quickest is to scan the LEDs on the gateway to determine the existence and possibly the cause of a pro
36. MBS Reference rst cess ceccetceteti eee eeeei ieee evi iveene deci ceeieeees 139 This chapter contains information specific to the PLX8x series gateway Modbus Serial MBS protocol driver ProSoft Technology Inc Page 121 of 218 August 12 2015 MBS Protocol User Manual PLX3x Series Ethernet and Serial Gateways 7 1 MBS Functional Overview The Modbus Serial protocol supports both Master and slave implementations of the protocol Each of the gateway serial ports is individually configurable to communicate to separate networks 7 1 1 Modbus Serial Specifications Command List Up to 100 commands per Master port each fully configurable for Function Code slave address register to from addressing and word bit count Supported Modbus Function Codes 1 Read Coil Status Read Input Status Read Holding Registers Read Input Registers Force Write Single Coil Preset Write Single Holding Register 15 Force Write Multiple Coils 16 Preset Write Multiple Holding Registers Dok WP Polling of Command List Configurable polling of command list including continuous and on change of data and dynamically user or automatic enabled Status Data Error codes available on an individual command basis In addition a slave status list is maintained per active Modbus Master port Node Address 1 to 247 software selectable RS Interface Page 122 of 218 RS232 RS422 and RS485
37. MBTCP gateway must be correctly configured and connected to the network before any attempt is made to use it Use a network verification program such as ProSoft Discovery Service or the command prompt PING instruction to verify that the gateway can be seen on the network Use ProSoft Configuration Builder to confirm proper configuration of the gateway and to transfer the configuration files to and from the gateway Modbus Message Routing Port 2001 When Modbus messages are sent to the Gateway over the TCP IP connection to port 2001 the messages are sent routed in the Gateway directly out the serial communication port Port 0 if it is configured as a Modbus Master The commands whether a read or a write command are immediately routed to the slave devices on the serial port Response messages from the slave devices are routed to the TCP IP network to be received by the originating host ProSoft Technology Inc Page 97 of 218 August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways 6 2 MBTCP Configuration 6 2 1 MBTCP Servers This section contains database offset information used by the server when accessed by external Clients These offsets can be utilized to segment the database by data type Edit MNet Servers Float Flag Float Start 7000 Float Offset a Output Offset 0 Bit Input Offset 0 Holding Register Offset 0 Word Input Offset 0 Connection Timeout 60 Comment Definition
38. PLX3x Series User Manual Ethernet and Serial Gateways Coils that are reprogrammed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function Code 5 and even months later an output is connected to that coil the output will be hot Preset Single Register Function Code 06 Query Function 06 allows the user to modify the contents of a holding register Any holding register that exists within the controller can have its contents changed by this message However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller unused high order bits must be set to zero When used with server address zero Broadcast mode all server controllers will load the specified register with the contents specified A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func DataStartReg Data StartReg Data of Regs Hi Data of RegsLo Error Check Field Hi Lo 11 06 00 01 00 03 CRC Response The response to a preset single register request is to re transmit the query message after the register has been altered Adr Func DataRegHi DataRegLo DatalnputReg Hi Data InputRegLo Error Check Field 11 06 00 01 00 03 CRC Diagnostics Function Code 08 MODBUS function code 08 provides a series of te
39. The configuration data is not transferred from the SD card to the internal memory of the module If the SD card is removed and power is cycled to the module the module will load the configuration data from the module s memory If there is no configuration data in the module s memory it will be restored to factory default Page 12 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Start Here Ethernet and Serial Gateways User Manual 1 6 Connecting Power to the PLX3x Gateway Common VDC GND 24 VDC 10 to 36 VDC 600 ma max at 24 VDC AN WARNING Ensure that polarity is not reversed when applying power to the gateway This will cause damage to the gateway s power supply ProSoft Technology Inc Page 13 of 218 August 12 2015 PLX3x Series User Manual Ethernet and Serial Gateways Page 14 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual 2 Configuring Your Gateway In This Chapter Od Og Oo Od Oo Od Od Od ee Installing ProSoft Configuration Builder Software ssceee 16 Using the Online Help ceeeeceeeeseeeceneeeseeeteaeeesaeeseaeeesaeessaeeeeatens 17 Setting Wp the Project c2i scccicessasccaheseazsjashescagdeadacesds apedcenbaeedestbaeides 17 Renaming PEB Objects ssss i ss sisse asressacids er ra apea Ro narena EAE Eaei iiaa 20 Configuring the Drivers
40. a coil is set ON by function code 15 and even months later an output is connected to that coil the output will be hot ProSoft Technology Inc Page 149 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Preset Multiple Registers Function Code 16 Query Holding registers existing within the controller can have their contents changed by this message a maximum of 125 registers However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller 16 bit for the 184 384 and 584 unused high order bits must be set to zero AX Note Function codes 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func Hi LoAdd Quantity Byte Hi Lo Hi Lo Data Error Check Add Cnt Data Data Data Field 11 10 00 87 00 02 04 00 0A 01 02 CRC Response The normal response to a function 16 query is to echo the address function code starting address and number of registers to be loaded Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 10 00 87 00 02 56 Page 150 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 ASCII Protocol In This Chapter ASCII Functional OVerview c ceeccecceeeeeeteneeeeeeeseneesereteneeeeeetas 152
41. an external device Data received by an external device is also stored in the gateway s internal database until ready to be transmitted to the ASCII device The following illustration shows the data flow when the port is configured for transmit receive mode ASCII Device A Internal Database Rx Data To external device ___ From external device Configuring a Port for Transmit Receive Mode In order to set a port to both receive data and transmit data to an ASCII device ensure that the Rx DB Start parameter and the Tx DB Start parameter both contain values that specify data storage starting locations A 1 value in either parameter will disable the particular function that the parameter serves Page 158 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual Termination of Received Data When data is received on the application port the user must define in the configuration when this data will be transferred to the internal database within the gateway This is known as the termination type for port When the termination condition is met the data will be sent from the port s receive buffer data area of 255 bytes to the internal database This termination type is set in the bit mapped type field of the gateway object The following illustration shows the bit map used for this parameter Termination Type Field Bit s
42. built This parameter is valid only for bit level write commands FC 5 and 15 Internal Address 0 to 3999 for register level addressing or 0 to 63999 for bit level addressing Specifies the database address in the gateway s internal database to use as the destination for data brought in by a read command or as the source for data to be sent out by a write command The database address is interpreted as a bit address or a 16 bit register word address depending on the Modbus Function Code used in the command For Modbus functions 1 2 5 and 15 this parameter is Page 102 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBTCP Protocol User Manual Parameter Value Description interpreted as a bit level address For Modbus functions 3 4 6 and 16 this parameter is interpreted as a register level address Poll Interval 0 to 65535 Specifies the minimum interval between executions of continuous commands The value is in tenths of a second Therefore if a value of 100 is entered the command will execute no more frequently than once every 10 seconds Reg Count 1 to 125 for registers or 1 to 800 for coils This parameter specifies the number of 16 bit registers or binary bits to be transferred by the command Modbus functions 5 and 6 ignore this field as they apply only to a single data point For Modbus functions 1 2
43. command will execute no more frequently than once every 10 seconds Reg Count 1 to 125 for Specifies the number of 16 bit registers or binary bits to be registers transferred by the command Eig 800 for Modbus functions 5 and 6 ignore this field as they apply only to a coils single data point For Modbus functions 1 2 and 15 this parameter sets the number of bits inputs or coils to be transferred by the command For Modbus functions 3 4 and 16 this parameter sets the number of registers to be transferred by the command Swap Code No Change Specifies if and how the order of bytes in data received or sent is to Word Swap be rearranged This option exists to allow for the fact that different Word and manufacturers store and transmit multi byte data in different Byte Swap combinations This parameter is helpful when dealing with floating Byte Swap point or other multi byte values as there is no one standard method of storing these data types The parameter can be set to rearrange the byte order of data received or sent into an order more useful or convenient for other applications No change 0 No change is made in the byte ordering 1234 ProSoft Technology Inc August 12 2015 Page 129 of 218 MBS Protocol User Manual PLX3x Series Ethernet and Serial Gateways Parameter Value Description 1234 Word Swap 1 The words are swapped 1234 341 2 Word and Byte Swap 2 The words are swapped
44. device may have restrictions that lower the maximum quantity The coils are numbered from zero coil number 1 zero coil number 2 one coil number 3 two and so on The following table is a sample read output status request to read coils 0020 to 0056 from server device number 11 Adr Func DataStartPtHi Data StartPtLo Data 0fPts Ho Data OfPtsLo Error Check Field 11 01 00 13 00 25 CRC Response An example response to Read Coil Status is as shown in Figure C2 The data is packed one bit for each coil The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each coil 1 ON 0 OFF The low order bit of the first character contains the addressed coil and the remainder follows For coil quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as quantity of RTU characters that is the number is the same whether RTU or ASCII is used ProSoft Technology Inc Page 139 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Because the server interface device is serviced at the end of a controller s scan data will reflect coil status at the end of the scan Some servers will limit the quantity of coils provided each scan thus for large coil quantities multiple PC tran
45. error Common Response Errors Error Int Error Hex Description 40 OxFFD8 Invalid response length 41 OxFFD7 CPF item count not correct 42 OxFFD6 CPF address field error 43 OxFFD5 CPF packet tag invalid 44 OxFFD4 CPF bad command code 45 OxFFD3 CPF status error reported 46 OxFFD2 CPF incorrect connection ID value returned 47 OxFFD1 Context field not matched 48 OxFFDO Incorrect session handle returned 49 OxFFCF CPF not correct message number ProSoft Technology Inc August 12 2015 Page 75 of 218 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Register Session Response Errors Error Int Error Hex Description 50 OxFFCE Message length received not valid 51 OxFFCD Status error reported 52 OxFFCC Invalid version Forward Open Response Errors Error Int Error Hex Description 55 OxFFC9 Message length received not valid 56 OxFFC8 Status error reported PCCC Response Errors Error Int Error Hex Description 61 OxFFC3 Message length received not valid 62 OxFFC2 Status error reported 63 OxFFC1 CPF bad command code 64 OxFFCO TNS in PCCC message not matched 65 OxFFBF Vendor ID in PCCC message not matched 66 OxFFBE Serial number in PCCC message not matched Page 76 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual 5
46. for testing or changing the DISABLE state of discrete inputs or outputs Where applicable this may be accomplished via device specific Program commands In ProSoft products this is only accomplished through ladder logic programming Coils that are reprogrammed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function Code 5 and even months later an output is connected to that coil the output will be hot Preset Single Register Function Code 06 Query Function 06 allows the user to modify the contents of a holding register Any holding register that exists within the controller can have its contents changed by this message However because the controller is actively scanning it also can alter the content of any holding register at any time The values are provided in binary up to the maximum capacity of the controller unused high order bits must be set to zero When used with server address zero Broadcast mode all server controllers will load the specified register with the contents specified A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast Adr Func DataStartReg DataStartReg Data of Regs Hi Data of RegsLo Error Check Field Hi Lo 11 06 00 01 00 03 CRC Page 144 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual Response The resp
47. for unknown reason 4075 0xF015 Data conversion error 4074 0xF016 Scanner not able to communicate with 1771 rack adapter 4073 0xF017 Type mismatch 4072 0xF018 1171 Gateway response was not valid 4071 0xF019 Duplicate label Page 74 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual Code Int Code Hex Description 4070 OxFO1A File is open another node owns it 4069 OxF01B Another node is the program owner 4068 OxF01C Reserved 4067 OxFO1D Reserved 4066 OxFO1E Data table element protection violation 4065 OxFO1F Temporary internal problem Gateway Specific Error not ElPCompliant Code Int Code Hex Description 1 OxFFFF CTS modem control line not set before transmit 2 OxFFFE Timeout while transmitting message 10 OxFFF6 Timeout waiting for DLE ACK after request 11 OxFFF5 Timeout waiting for response after request 12 OxFFF4 Reply data does not match requested byte count 20 OxFFEC DLE NAK received after request 21 OxFFEB DLE NAK sent after response 200 OxFF38 DLE NAK received after request TCP IP Interface Errors Error Int Error Hex Description 33 OxFFDF Failed to connect to target 34 OxFFDE Failed to register session with target timeout 35 OxFFDD Failed forward open response timeout 36 OxFFDC PCCC Tag command response timeout 37 OxFFDB No TCP IP connection
48. is set to 150 an address request of 0 will return the value at register 150 in the database Connection 0 to 1200 This parameter specifies the number of seconds the server will wait Timeout seconds to receive new data If the server does not receive any new data during this time it will close the connection ProSoft Technology Inc August 12 2015 Page 99 of 218 PLX3x Series Ethernet and Serial Gateways MBTCP Protocol User Manual 6 2 2 MBTCP Client x The MBTCPClient x section of the configuration specifies the parameters for the client to be emulated on the gateway The command list for the client is entered in a separate section Edit MNet Client 0 Error Status Pointer 4800 Error Status Pointer Command Error Pointer 4810 Minimum Command Delay 10 Response Timeout 1000 Retry Count 3 Float Flag No i Float Start 7000 Comment Float Offset 2000 ARP Timeout 5 Command Error Delay 300 MBAP Port Override No Definition Database offset for client status data Reset Tag Reset All OK Cancel Parameter Value Description Minimum Command Delay 0 to 32767 This parameter specifies the number of milliseconds to wait between the initial issuance of a command This parameter can be used to delay all commands sent to slaves to avoid flooding commands on the network This parameter does not affect retries of acommand as they will be issued when failure is reco
49. mode file missing or communication zone problem 28672 0x9000 Remote node cannot buffer command 24576 0xA000 Wait ACK 1775 KA buffer full 20480 0xB000 Remote node problem due to download 16384 0xC000 Wait ACK 1775 KA buffer full 12288 0xD000 Not used 8192 0xE000 Not used OxFOnn Error code in the EXT STS byte nn contains EXT error code Errors When EXT STS Is Present Code Int Code Hex Description 4096 OxFO00 Not used 4095 OxF001 A field has an illegal value 4094 OxF002 Less levels specified in address than minimum for any address 4093 OxF003 More levels specified in address than system supports 4092 0xF004 Symbol not found 4091 0xF005 Symbol is of improper format 4090 OxFO06 Address does not point to something usable 4089 0xF007 File is wrong size 4088 OxF008 Cannot complete request 4087 OxFO09 Data or file is too large 4086 OxFOOA Transaction size plus word address is too large 4085 OxFOOB Access denied improper privilege 4084 OxFOOC Condition cannot be generated resource is not available 4083 OxFOOD Condition already exists resource is already available 4082 OxFOOE Command cannot be executed 4081 OxFOOF Histogram overflow 4080 0xF010 No access 4079 0xF011 Illegal data type 4078 OxF012 Invalid parameter or invalid data 4077 OxF013 Address reference exists to deleted area 4076 OxF014 Command execution failure
50. must be completed to define the data set to transfer to the processor from the gateway An example of the dialog box follows Message Configuration readmsg x Configuration Communication Message Type PLC5 Word Range Read Source Element Ni 0 0 Number Of Elements f0 16 bit integers Destination Tag plc5data 1 0 7 Create Tag Enable Q Enable Waiting Start Done Done Length 10 Error Code T Timed Out Extended Error Code Cancel Help ProSoft Technology Inc Page 87 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Complete the dialog box for the data area to be transferred For PLC5 and SLC messages the SOURCE ELEMENT should be an element in a data file such as N10 0 For the PLC2 Unprotected Read message the SOURCE ELEMENT is the address in the gateway s internal database and cannot be set to value less than ten This is not a limitation of the gateway but of the RSLogix software The COMMUNICATION information must also be configured An example of the dialog box follows Message Configuration readmsg x Configuration Communication Path OEFAEFARNFA Browse Enet 2 192 168 0 75 r Communication Method CP DH Channel z Destination Lint CIP With saad ine Destination Node p 4 A Cc apart Source Li fifetiony fa Wetal I Cache Connections Enable Enable Waiting O Start Done Done Lengt
51. next issue a poll program complete message to determine if processing is completed 06 Slave Device Busy Specialized use in conjunction with programming commands The server is engaged in processing a long duration program command The Master should retransmit the message later when the server is free 08 Memory Parity Error Specialized use in conjunction with function codes 20 and 21 and reference type 6 to indicate that the extended file area failed to pass a consistency check The server attempted to read record file but detected a parity error in the memory The Master can retry the request but service may be required on the server device 0a Gateway Path Unavailable Specialized use in conjunction with gateways indicates that the gateway was unable to allocate an internal communication path from the input port to the output port for processing the request Usually means that the gateway is misconfigured or overloaded Ob Gateway Target Device Failed To Respond Specialized use in conjunction with gateways indicates that no response was obtained from the target device Usually means that the device is not present on the network Page 148 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual Force Multiple Coils Function Code 15 Query This message forces each coil in a consecutive block of coils to a desired ON or O
52. of Regs Hi Data of Regs Lo Error Check Field 11 04 00 08 00 01 CRC Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are 2 bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits Because the server interface is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Each PC will limit the quantity of register contents provided each scan thus for large register quantities multiple PC scans will be required and the data provided will be form sequential scans In the example below the register 3009 contains the decimal value 0 Adr Func ByteCount Data Input Reg Hi Data Input Reg Lo Error Check Field 11 04 02 00 00 E9 Page 112 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual Force Single Coil Function Code 05 Query This message forces a single coil either ON or OFF Any coil that exists within the controller can be forced to either state ON or OFF However because the controller is actively scanning unless the coil is disabled the controller can also alter the state of t
53. of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Word swap Word and Byte swap Byte swap Specifies if the data from the server is to be ordered differently than it was received This parameter is typically used when dealing with floating point or other multi register values None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to an SLC 5 05 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code akon Specifies the function code to be used in the command 1 Protected Write 2 Unprotected Read 3 Protected Bit Write 4 Unprotected Bit Write 5 Unprotected Write Word Address Specifies the word address where to start the operation Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc August 12 2015 Page
54. or four serial ports depending on the configuration purchased Example The PLX31 EIP MBS4 gateway contains four serial communication ports The PLX31 EIP MBS gateway contains one serial communication port Each physical serial port has a RJ45 jack connector A six inch RJ45 to DB9Male adapter cable is provided for each serial port The DB9Male adapter cable provides connections for RS 232 wired as Data Terminal Equipment DTE RS 422 and RS 485 4 2 1 RS 232 Null Modem DTE with Hardware Handshaking This type of connection is used when the device connected to the gateway requires hardware handshaking control and monitoring of modem signal lines To enable hardware handshaking set the port configuration to use RTS CTS handshaking For MBS protocol set the Use CTS Line parameter to Yes For ASCII protocol set the Handshaking parameter to Yes RS 232 Application Port Cable Hardware Handshaking DB 9 Male RS 232 Device TxD RxD CTS RTS Signal 5 Signal Common Common a Page 48 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Hardware Information Ethernet and Serial Gateways User Manual 4 2 2 RS 232 Null Modem DTE without Hardware Handshaking This type of connection can be used to connect the gateway to a computer or field device communication port RS 232 Application Port Cable No Handshaking DB 9 Male RS 232 Device RTS RTS CTS jumper must be installed if CTS line CTS e mo
55. protocol on Enet P1 and another set of settings for the second Ethernet Protocol on Enet P2 1 Determine the network settings for your Gateway with the help of your network administrator if necessary You will need the following information o IP address fixed IP required o Subnet mask o Gateway address Note The gateway address is optional and is not required for networks that do not use a default gateway 2 Double click the ETHERNET CONFIGURATION icon This action opens the Edit dialog box The IP address shown is the gateway default IP address Edit WATTCP Jmy_ip netmask 255 255 255 0 gateway 192 168 0 1 TA Comment pu o o ooo Definition Default private class 3 address Reset Tag Reset All OK Cancel 3 Edit the values for my_ip netmask subnet mask and gateway default gateway ProSoft Technology Inc Page 27 of 218 August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual Note If you are using a PLX32 module you must specify values for both ports My_ip is used to specify values for the first protocol For example if you are configuring a PLX32 EIP MBTCP you would specify the network values for the EIP protocol first A second set of values are available for the second protocol in this case MBTCP 7 j Untitled ProSoft Configuration Builder File VieyyusiDeoiectusiTion G Dd Edit WATTCP
56. return register values 02 Illegal Data Address The data address received in the query is not an allowable address for the server More specifically the combination of reference number and transfer length is invalid For a controller with 100 registers a request with offset 96 and length 4 would succeed a request with offset 96 and length 5 will generate exception 02 03 Illegal Data Value A value contained in the query data field is not an allowable value for server This indicates a fault in the structure of the remainder of a complex request such as that the implied length is incorrect It specifically does not mean that a data item submitted for storage in a register has a value outside the expectation of the application program because the Modbus protocol is unaware of the significance of any particular value of any particular register 04 Slave Device Failure An unrecoverable error occurred while the server was attempting to perform the requested action 05 Acknowledge Specialized use in conjunction with programming commands The server has accepted the request and is processing it but a long duration of time will be required to do so This response is returned to prevent a timeout error from occurring in the Master The Master can next issue a poll program complete message to determine if processing is completed 06 Slave Device Busy Specialized use in conjunction with programming co
57. the data set to be transferred from the processor to the gateway An example of the dialog box follows Message Configuration writemsg x Configuration Communication Message Type PLC5 Word Range Write Source Tag plcSdata O 7 Create Tag Number Of Elements fi 0 16 bit integers Destination Element i 0 0 O Enable Enable Waiting Start Done Done Length 10 Eror Code I Timed Out Extended Error Code Cancel Appi Hep Complete the dialog box for the data area to be transferred For PLC5 and SLC messages the DESTINATION ELEMENT should be an element in a data file such as N10 0 For the PLC2 Unprotected Write message the DESTINATION ELEMENT is the address in the gateway s internal database and cannot be set to a value less than ten This is not a limitation of the gateway but of the RSLogix software For a PLC2 unprotected write or read function the database address should be entered in octal format The COMMUNICATION information must also be configured The following is an example of the dialog box Message Configuration writemsg x Configuration Communication Path Enet 2 192 168 0 74 Browse Enet 2 192 168 0 75 Communication Method o CIP Cc DH Channel 7 Destraton Link c CIP With Source Link Destination Node fi metall Source ID I Cache Connections O Enable Enable Waiting Start Done Done Length 10 D Eror Code I
58. the full duplex device to Pin 1 on the gateway and wiring together the TxD and RxD from the two pins of the full duplex device to Pin 8 on the gateway As an alternative you could try setting the gateway to use the RS 422 interface and connect the full duplex device according to the RS 422 wiring diagram For additional assistance please contact ProS oft Technical Support Page 50 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual 5 EIP Protocol In This Chapter EIP Functional Overview 0 cccceeeceeeseeeseeeeeneeeeeeeseneeeeeeeeneeseeeeeeaees 52 gt EIP Contiguration s ea a eeeetene te 54 S EIR Diagnostiese hates ein ea et a a N 70 aye EIP Referee conna a eee peed ae ees ee 77 This chapter contains information specific to the PLX8x series gateway EtherNet IP EIP protocol driver ProSoft Technology Inc Page 51 of 218 August 12 2015 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways 5 1 EIP Functional Overview The PLX3x series EIP gateway can be used to interface many different protocols into the Rockwell Automation family of processors as well as other software based solutions The following illustration shows the functionality of the EtherNet IP protocol Communication Gateways Internal Database Up to 4000 Read Write Registers Client The EIP driver supports the following connectio
59. the number of registers to copy Swap Code No Change The order of the bytes in the registers may need to be Word Swap swapped during the copy process in order to change the Word and Byte alignment of bytes between dissimilar protocols This Swap parameter is helpful when dealing with floating point or other Byte Swap multi register values as there is no standard method of storage of these data types in slave devices No change No change is made in the byte ordering 1234 1234 Word Swap The words are swapped 1234 3412 Word and Byte Swap The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap The bytes in each word are swapped 1234 2143 Delay Preset This parameter sets an interval for each Data Map copy operation The value that is specified for the Delay Preset is not a fixed amount of time It is the number of firmware scans that must transpire between copy operations Page 26 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual 2 7 Configuring an IP Address Use this procedure to configure the Ethernet settings for your Gateway You must assign an IP address subnet mask and gateway address After you complete this step you can connect to the Gateway with an Ethernet cable Note The PLX32 module contains two Ethernet ports In this case you would specify network settings for the first Ethernet
60. the rack containing the controller being addressed Func Code 501 Specifies the function code to be used in the command 509 501 Protected Typed Read 509 Protected Typed Write File Type Binary Specifies the file type to be associated with the command Counter Timer Control Integer Float ASCII String Status File Number 1 Specifies the PLC 5 file number to be associated with the command If a value of 1 is entered for the parameter the field will not be used in the command and the default Page 60 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual Parameter Value Description file will be used Element Specifies the element in the file where the command will Number start Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc August 12 2015 Page 61 of 218 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual Class 3 Client UClient x Commands SLC500 3 Address Fields This command is typically used when accessing data in a Timer or Counter l e T 1 1 2 is the address of the accumulator in Timer 1 Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will no
61. then the bytes in each word are swapped 1234 4321 Byte Swap 3 The bytes in each word are swapped 1234 2143 These swap operations affect 4 byte or 2 word groups of data Therefore data swapping using these Swap Codes should be done only when using an even number of words such as when 32 bit integer or floating point data is involved Node Address 1 to 255 0 isa broadcast Specifies the node address of the Modbus slave device Values of 1 to 255 are permitted Note Most Modbus devices only accept addresses in the range of 1 to 247 so check with the slave device manufacturer to see if a particular slave can use addresses 248 to 255 If the value is set to zero the command will be a broadcast message on the network The Modbus protocol permits broadcast commands for write operations Do not use node address 0 for read operations Modbus Function 1 2 3 4 5 6 15 or 16 Specifies the Modbus Function Code to be executed by the command These function codes are defined in the Modbus protocol More information on the protocol is available from www modbus org The following function codes are supported by the gateway 1 Read Coil Status 2 Read Input Status 3 Read Holding Registers 4 Read Input Registers 5 Force Write Single Coil 6 Preset Write Single Register 15 Force Multiple Coils 16 Preset Multiple Registers MB Address in Device Varies Specifies the starting Mod
62. when prompted Save the file to your Windows Desktop so that you can find it easily when you have finished downloading When the download is complete locate and open the file and then follow the instructions on your screen to install the program If you do not have access to the Internet you can install ProSoft Configuration Builder from the ProSoft Solutions DVD included in the package with your gateway To Install ProSoft Configuration Builder from the DVD 1 2 3 Insert the ProSoft Solutions DVD into the DVD drive of your PC Wait for the DVD menu to appear On the startup screen navigate to your product by selecting the proper PLATFORM and PRODUCT Select PROSOFT CONFIGURAITON BUILDER Follow the instructions on your screen to install the software on your PC UF ProSoft Technology Product DVD z _ oh VVhere Automation Con F I AFRICA PvnoPpE I MIDOLE GABT I LATIN Se X ProSoft Product Selection Tool ProSoft Configuration Builder Platiorm ZASE ii Datasheet Product ES User Manual Browse Product Folder PLX31 EIP MBTCP EtherNet IP to Modbus TCP IP Gateway The ProLinx EtherNet IP to Modbus TCP IP Gateway creates a powerful connection between Modbus TCP IP and EtherNet IP networks and employs a single Ethernet port Configuration over Ethernet allows for remote diagnostics With it s built in SD card port the gateway allows for seemless plug in disaster recovery The Modbus TCP IP driver suppor
63. will be executed upon each scan of the Command List if the Poll Interval is set to zero 0 If the Poll Interval is set to a non zero value the command will be executed when the interval timer for that command expires Event Command 2 the command will execute only if the internal data associated with the command changes This parameter is valid only for write commands FC 5 6 15 and 16 Conditional 3 the command will execute only if the internal bit data associated with the command changes It will also clear the bit or bits in the internal database after the write command is built This parameter is valid only for bit level write commands FC 5 and 15 Internal 0 to 3999 Specifies the database address in the gateway s internal database Address for register to use as the destination for data brought in by a read command or level as the source for data to be sent out by a write command The addressing database address is interpreted as a bit address or a 16 bit register or word address depending on the Modbus Function Code used in 0 to 63999 the command for bit level For Modbus functions 1 2 5 and 15 this parameter is interpreted addressing as a bit level address For Modbus functions 3 4 6 and 16 this parameter is interpreted as a register level address Poll Interval 9 to 65535 Specifies the minimum interval between executions of continuous commands The value is in seconds Therefore if a value of 10 is entered the
64. 00 16 CRC Response An example response to Read Input Status is as shown in Figure C4 The data is packed one bit for each input The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each input 1 ON O OFF The lower order bit of the first character contains the addressed input and the remainder follows For input quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as a quantity of RTU characters that is the number is the same whether RTU or ASCII is used Page 110 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual Because the server interface device is serviced at the end of a controller s scan data will reflect input status at the end of the scan Some servers will limit the quantity of inputs provided each scan thus for large coil quantities multiple PC transactions must be made using coil status for sequential scans Adr Func Byte Data Discrete Input Data Discrete Input Data Discrete Input Error Check Field Count 10197 to 10204 10205 to 10212 10213 to 10218 11 02 03 AC DB 35 CRC The status of inputs 10197 to 10204 is shown as AC HEX 10101 1100 binary Reading left to right this show that inputs 10204 10202 and 10199 ar
65. 1 1 Slave 2 Status 4512 2 Slave 3 Status 4513 3 Slave 4 Status 4514 4 Slave 5 Status The slave status list contains the current poll status of each slave device on a Master port Slaves attached to a Master port can have one of three states 0 The slave has not defined in the command list for the Master port and will not be polled from the Command List 1 The slave is configured to be polled by the Master port and the most recent communication attempt was successful 2 The Master port has failed to communicate with the slave device Communication with the slave is suspended for a user defined period based on the scanning of the command list Slaves are defined to the system when the gateway loads the Master Command List during start up and initialization Each slave defined will be set to a state value of 1 in this initial step If the Master port fails to communicate with a slave device timeout expired on a command retries failed the Master will set the state of the slave to a value of 2 in this status table This suspends communication with the slave device for a user specified Error Delay Count Page 136 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual When the Master first suspends polling of a particular slave it creates an Error Delay Counter for this slave address and set the value in that counter equal to the Error Delay Counter para
66. 13 to 10218 11 02 03 AC DB 35 CRC The status of inputs 10197 to 10204 is shown as AC HEX 10101 1100 binary Reading left to right this show that inputs 10204 10202 and 10199 are all on The other input data bytes are decoded similar Due to the quantity of input statuses requested the last data field which is shown as 35 HEX 0011 0101 binary contains the status of only 6 inputs 10213 to 102180 instead of 8 inputs The two left most bits are provided as zeros to fill the 8 bit format Read Holding Registers Function Code 03 Query Read Holding Registers 03 allows the user to obtain the binary contents of holding registers 4xxxx in the addressed server The registers can store the numerical values of associated timers and counters which can be driven to external devices The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered form zero 40001 zero 40002 one and so on The broadcast mode is not allowed The example below reads registers 40108 through 40110 from server 584 number 11 Adr Func Data StartReg Hi Data StartReg Lo Data of Regs Hi Data ofRegsLo Error Check Field 11 03 00 6B 00 03 CRC ProSoft Technology Inc Page 141 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Response The addressed server responds wi
67. 15 Page 35 of 218 Diagnostics and Troubleshooting PLX3x Series User Manual Ethernet and Serial Gateways 3 2 Using Diagnostics in ProSoft Configuration Builder ProSoft Configuration Builder PCB has many useful tools to help you with diagnostics and troubleshooting You can use PCB to connect to your gateway and retrieve current status values configuration data and other valuable information Tip You can have a ProSoft Configuration Builder Diagnostics window open for more than one gateway ata time To connect to the gateway s communication port 1 Start PCB and then select the gateway Click the right mouse button to open a shortcut menu Default Project Default Location Sg FPL X31 EIP MBS 2 On the shortcut menu choose DIAGNOSTICS 9 Default Project Nam Gl Default Location x PLX ih GRE Delete i Rename El Copy El El El Choose Module Type M C View Configuration fox Export Configuration File s ar Load Config File las API DS Download from PC to Device LO Upload from Device to PC A lt 1 Page 36 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways Diagnostics and Troubleshooting User Manual This opens the Diagnostics window 3 Diagnostics Connection Log Module ajs aalala fed il Cannot Connect to IP Address Cannot Connect to IP Address Path Ethemet 192 168 0 250 Time 16 03 50 If
68. 150 bit 0 in the gateway s database Word Input Offset 0 to 3998 Specifies the internal database address to use as the zero address or starting point for Input Register 16 bit integer data Input Register data is read only data requested by Modbus Function Code 4 commands Read Input Registers For example if this parameter is set to 500 and a Function Code 4 command is received requesting Input Register address 0 virtual Modbus address 30001 or 300001 the data returned in the response will be the value at register 500 in the gateway s database Output Offset 0 to 3998 Specifies the internal database address to use as the zero address or starting point for binary output Coil data Coil data is read by Modbus Function Code 1 commands Read Coils and written by Function Codes 5 Force Single Coil or Function Code 15 Force Multiple Coils For example if this parameter is set to 50 anda Function Code 1 command is received requesting Coil address 0 virtual Modbus Coil address 00001 or 000001 the data returned in the response will be the value at register 50 bit 0 in the gateway s database Holding Register Offset 0 to 3998 Specifies the internal database address to use as the zero address or starting point for Holding Register 16 bit integer data Holding Register data is read by Modbus Function Code 3 commands Read Holding Registers and written by Function Code 6 Preset Single Register or Function
69. 2015 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways If DB1 DBDO is used as the first address in the Siemens processor the next double word address that can be used without overwriting the data would be DB1 DBD4 All of the above share the same memory locations in the processor Note Incorrect memory location addressing can cause the data to be overwritten Below is a graphical representation of the addressing of the processor s memory locations DB1 DBD1 DB1 DBBODBi DBB1 DB1 DBB2 DB1 DBB3 DB1 DBB4 DB1 DBD0 Example Sending an integer value of 11733 from gateway register 1000 to a Siemens S7 300 processor demonstrates the addressing scheme in the Siemens S7 300 processor Page 178 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual PCB screen shot showing Client command to send INT data to DB1 address 0 W Edit SIE Client 0 Commands Enable Internal Address Polllnterval Re Swap Code IP Address PLC Type Rack Slot TSAP Func Type Data Type Address Ty DB Number Address Comment V1 1000 0 1 NoChange 10 1 3 179 57 3007 0 2 1000 Write INT DB 1 0 Enable Value Status OK Set to Defaults Add Row Insert Row Delete Row Move Up Move Down Edit Row Copy Row OK Cancel Row 1 in the SIMATICS Manager screen shot below shows the data transferred from the gateway If the d
70. 4 to 131 Data to transmit on port The first word of the data block is used to signal when new transmit data is available Word 1 of the block may optionally contain the number of characters processed in the last receive message Word 2 of the message is used to pace the characters during the transmission process This may be required when interfacing with slow ASCII devices that is modems in command mode If the word is set to a value other than zero a time delay corresponding to the number of milliseconds entered will be placed between each character transmitted If the word is set to zero the whole data packet will be transmitted as fast as the transmit driver can function Word 3 of the data block contains the number of bytes present in the transmit data area to send out the ASCII serial communication port Words 4 to 131 contain the actual data to transmit If the swap option is utilized the transmit driver will swap each byte in the words received before transmitting them Note If an odd number of bytes are sent by the end device when the swap option is used then the last byte of the message may be lost ProSoft Technology Inc Page 155 of 218 August 12 2015 ASCII Protocol PLX3x Series User Manual Ethernet and Serial Gateways 8 1 3 Modes of Operation The gateway can operate in several different modes with each port acting independently The configuration of each port s driver determines its mode The foll
71. 41101 40001 1100 Note If the documentation for a particular Modbus server device lists data addresses in hexadecimal base16 notation you will need to convert the hexadecimal value to a decimal value to enter in this parameter In such cases it is not usually necessary to subtract 1 from the converted decimal number as this addressing scheme typically uses the exact offset address expressed as a hexadecimal number Page 104 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual 6 3 MBTCP Diagnostics 6 3 1 PCB Diagnostics The best way to troubleshoot the MBTCP driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 6 3 2 MBTCP Status Data in Upper Memory The MBTCP driver has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 25 Note that all the status values are initialized to zero 0 at power up cold boot and during warm boot MBTCP Server Status Data The following table lists the addresses in upper memory where status data for MBTCP servers can be found
72. 59 Timer Counter 84 To Address 26 Transmit Data 155 Transmit Only Mode 157 Transmit Receive Mode 158 U Using Diagnosticsin ProSoft Configuration Builder 36 Using the CommonNet Data Map 25 Using the Online Help 17 WwW Warranty Information 216 Word Input Offset 99 128 Y Your Feedback Please 2 ProSoft Technology Inc August 12 2015
73. 69 of 218 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways 5 3 EIP Diagnostics 5 3 1 PCB Diagnostics Menu The best way to troubleshoot the EIP driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 The following table summarizes the status information available in PCB for the EIP driver Connection Type Submenu Item Description EIP Class 1 Config Configuration settings for Class 1 Connections Status Status of the Class 1 Connections Displays any configuration error present as well as the number of Class 1 Connections EIP Class 3 Server Config Configuration settings for Class 3 Server Connections Comm Status Status information for each Class 3 Server Connection Displays port numbers IP addresses socket status and read and write counts EIP Class 3 Config Configuration settings for Class 3 Client UClient Client UClient x Connections Comm Status Status information for Class 3 Client UClient x commands Displays a summary of all the errors resulting from Class 3 Client UClient x commands Commands Configuration for the Class 3 Client UClient x command list Cmd Errors Displays current error codes for each command on the Decimal Class 3 Client UClient x command list in de
74. 9 to 136 Received data on port An incremented received sequence number in Word 0 signals that new data is available in Words 1 2 and 9 through 136 Words 3 through 8 are updated continuously by the gateway whether or not the port is receiving messages If the gateway is configured to swap the data bytes received the receive driver will swap the bytes in each word received before placing the data into the data block Because the data received may contain an odd number of bytes the length of the message received will be incremented by 1 when an odd number of bytes are received and the swap option is utilized This is to avoid losing the last byte of data in the message Page 154 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual Transmit Data Data to transmit by the transmit driver is placed in the gateway s internal database in a fixed format at the location selected by the user The transmit driver is disabled if the database start location is set to a value of 1 The following table shows the structure of transmit data Word Offset Description 0 Transmit sequence number This number is incremented by the user s application for each new packet to transmit 1 Number of characters received 0 to 256 from last receive request 2 Inter character delay for this message milliseconds between characters 3 Number of characters to transmit on port 0 to 255
75. ACTERS When the ASCII driver encounters the specified termination Type MESSAGE condition on the port it will interpret it as end of message TIMEOUT INTERCHARACTER DELAY PACKET SIZE Rx Term Oto 12 Used when the Rx Termination Type is TERMINATION Count CHARACTERS This parameter specifies the number of different termination characters that can be used to signal the end of a received message Rx Term ASCII Characters Used when the Rx Termination Type is TERMINATION Chars CHARACTERS This parameter specifies the termination characters used to signal the end of each received message Enter up to 12 ASCII character codes in decimal format with spaces between codes The number of termination characters is set in the Rx Term Count parameter Rx Packet 0 to 200 Used when the Rx Termination Type is PACKET SIZE This Length parameter sets the length of data required to be received on the port before considering end of message reached Rx Timeout 0 to 65535 Used when the Rx Termination Type is MESSAGE TIMEOUT This parameter sets the number of milliseconds to wait after the first character is received on the port before considering end of message reached Rx Delay 0 to 65535 Used when the Rx Termination Type is INTERCHARACTER DELAY This parameter sets the maximum number of milliseconds to wait between each character received on the port When this value is exceeded the ASCII driver considers end of message reached Swap Rx YES or NO Specifie
76. E Write TIME READ Count Write Count Output Address Type Function Data Type Output READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count ProSoft Technology Inc August 12 2015 Page 169 of 218 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways Input Address Type Function Data Type Input READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count Page 170 of 218 ProSoft Technology Inc August 12 2015 SIE Protocol User Manual PLX3x Series Ethernet and Serial Gateways 7 200 Data Block Address Type Function Data Type DB READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT Flag Address Type Function Data Type Flag READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT Output Address Type Function Data Type Output READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT ProSoft Technology Inc August 12 2015 Page 171 of 218
77. E SIE i 5202 DFNT MC i 10 1 3 196 Bey 105 102 0 71 Fn I oad Sn 00000365 Sn 00000008 PLX31 EIP SIE 3_IEDs 10 1 3 155 10 1 3 245 Click the search icon to begin the browse ProSoft Technology Inc Page 29 of 218 August 12 2015 Configuring Y our Gateway PLX3x Series User Manual Ethernet and Serial Gateways 4 Right click your PLX3x series gateway and select IP Configuration from the shortcut menu A IP Configuration The module will be rebooted and the data communication will be temporarily interrupted Por 1 Name El IP Address 192 168 lt 0 Network Mask 255 255 255 0 MAC ID 00 0D 8D A2 00 07 5 Enter the same IP address and network mask that you entered in the Ethernet configuration of the gateway Click OK The gateway will reboot 6 Close the ProSoft Discovery Service window to return to the Download dialog box 7 Click the DOWNLOAD button The gateway will perform a platform check to read and load its new settings When the platform check is complete the status bar in the Download dialog box will display the message Module Running Download files from PC to module Module Running E STEP 1 Select Communication Path Select Connection Type Ethernet Browse Device s Ethernet 192 168 O 250 Use Default IP CiPconnect STEP 2 Transfer File s o f ea Page 30 of 218 ProSoft Technology
78. FF state Any coil that exists within the controller can be forced to either state ON or OFF However because the controller is actively scanning unless the coils are disabled the controller can also alter the state of the coil Coils are numbered from zero coil 00001 zero coil 00002 one and so on The desired status of each coil is packed in the data field one bit for each coil 1 ON 0 OFF The use of server address 0 Broadcast Mode will force all attached servers to modify the desired coils A Note Functions 5 6 15 and 16 are the only messages other than Loopback Diagnostic Test that will be recognized as valid for broadcast The following example forces 10 coils starting at address 20 13 HEX The two data fields CD 1100 and 00 0000 000 indicate that coils 27 26 23 22 and 20 are to be forced on Adr Func HiAdd Lo Quantity Byte Data Coil Status Data Coil Status Error Check Add Cnt 20 to 27 28 to 29 Field u1 OF 00 B 0 0A 02 CD 00 CRC Response The normal response will be an echo of the server address function code starting address and quantity of coils forced Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 OF 00 13 00 OA CRC The writing of coils via Modbus function 15 will be accomplished regardless of whether the addressed coils are disabled or not Coils that are not programmed in the controller logic program are not automatically cleared upon power up Thus if such
79. IE configuration page 167 PND configuration page 194 Page 24 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual 2 6 Using the CommonNet Data Map Note This is an advanced configuration feature and is not required for the basic operation of the gateway The Data Map section allows data to be copied between areas in the gateway s internal database The Data Map is especially useful for copying protocol specific error and status data from the gateway s upper memory registers address 4000 and up to the user accessible memory registers addresses 0 to 3999 The error and status data copied into the user memory area can then be accessed by a remote device such as an HMI or processor Information about upper memory addresses where the gateway places protocol specific error and status data can be found in the Diagnostics section in the appropriate protocol chapter of this manual EIP diagnostics page 70 MBTCP diagnostics page 105 MBS diagnostics page 132 ASCII diagnostics page 163 SIE diagnostics page 181 PND diagnostics page 213 The Data Map can also be used to condense widely dispersed data into one contiguous data block for simplified access A maximum of 100 registers per Data Map command can be copied and a maximum of 200 separate copy commands can be configured The byte and or word order can be rearranged during the cop
80. MultiHop r Error Error Code Hex 0 No errors Error Description Page 77 of 218 August 12 2015 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages The MULTIHOP option must be set to YES The MULTIHOP tab portion of the dialog box must be completed as displayed in the following window 7 2MSG N10 0 51 Elements General 1 Ins Add Hop To Address Type To Address This SLC500 ControlLogix Backplane te Del Remove Hop 1756 ENet I P str 1756 Backplane Slot dec 192 168 0 75 0 Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero SLC5 05 Read Commands Read commands transfer data to the SLC processor from the gateway An example rung used to execute a read command is shown in the following diagram z N10 0 0001 Page 78 of 218 MSG ReadiWrite Message CEN Type Peer To Peer ReadiMWrite Read ON Target Device PLC5 LocaliRemote Local CERD Control Block N11 0 Control Block Length 51 Setup Screen N10 0 13 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual Set the READ WRITE
81. NT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ Count Write Count Page 174 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways SIE Protocol User Manual Command List Parameters Parameter Value Description Enable DISABLED ENABLED CONDITIONAL Specifies if the command is to be executed and under what conditions Disabled 0 the command is disabled and will not be executed in the normal polling sequence Continuous 1 the command will be executed upon each scan of the Command List if the Poll Interval is set to zero 0 If the Poll Interval is set to a non zero value the command will be executed when the interval timer for that command expires Conditional 2 the command will execute only if the internal data associated with the command changes Internal Address 0 to 3999 for register level addressing or 0 to 63999 for bit level addressing Specifies the database address in the gateway s internal database to use as the destination for data brought in by a read command or as the source for data to be sent out by a write command The database address is interpreted as a bit address or a 16 bit register word address depending on the Siemens Industrial Ethernet s Data Type used in the command If Data Type Bool is used in the command list then the database address will be interpret
82. Offset internal database address to use as the zero address or starting point for binary output Coil data Coil data is read by Modbus Function Code 1 commands Read Coils and written by Function Codes 5 Force Single Coil or Function Code 15 Force Multiple Coils For example if this parameter is set to 50 and a Function Page 98 of 218 ProSoft Technology Inc August 12 2015 MBTCP Protocol User Manual PLX3x Series Ethernet and Serial Gateways Parameter Value Description Code 1 command is received requesting Coil address 0 virtual Modbus Coil address 00001 or 000001 the data returned in the response will be the value at register 50 bit O in the gateway s database Bit Input 0 to 3999 This parameter specifies the offset address in the internal Modbus Offset database for network requests for Modbus function 2 commands For example if the value is set to 150 an address request of 0 will return the value at register 150 in the database Holding 0 to 3999 This parameter specifies the offset address in the internal Modbus Register database to with network requests for Modbus functions 3 6 or 16 Offset commands For example if the value is set to 50 an address request of 0 will return the value at register 50 in the database Word Input 0 to 3999 This parameter specifies the offset address in the internal Modbus Offset database for network requests for Modbus function 4 commands For example if the value
83. ProSoft PECOU NOCT OGN Where Automation Connects PLX3x Series Ethernet and Serial Gateways August 12 2015 USER MANUAL Your Feedback Please We always want you to feel that you made the right decision to use our products If you have suggestions comments compliments or complaints about our products documentation or support please write or call us How to Contact Us ProSoft Technology 5201 Truxtun Ave 3rd Floor Bakersfield CA 93309 1 661 716 5100 1 661 716 5101 Fax www prosoft technology com support prosoft technology com Copyright 2015 ProSoft Technology Inc All rights reserved PLX3x Series Ethernet and Serial Gateways User Manual August 12 2015 ProSoft Technology ProLinx inRAx ProTalk and RadioLinx are Registered Trademarks of ProSoft Technology Inc All other brand or product names are or may be trademarks of and are used to identify products and services of their respective owners ProSoft Technology Product Documentation In an effort to conserve paper ProSoft Technology no longer includes printed manuals with our product shipments User Manuals Datasheets Sample Ladder Files and Configuration Files are provided on the enclosed DVD in Adobe Acrobat Reader file format PDFs These product documentation files may also be freely downloaded from our web site http Awww prosoft technology com Literature Content Disclaimer This documentation is not int
84. ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBS Protocol User Manual 7 1 2 Modbus Master Slave Port Specifications Type Specifications General Parameters Internal Database Up to 4000 registers words available Communication parameters Port 0 Baud Rate 110 to 115K baud possible 110 to 38 4K baud recommended for all applications Higher baud rates are recommended only for use with very slow Modbus polling rates e g 1command or less per second Port 1 2 3 Baud Rate 110 to 115K baud Stop Bits 1 or 2 Data Size 5 to 8 bits Parity None Even Odd RTS Timing delays 0 to 65535 milliseconds Modbus Modes RTU mode binary with CRC 16 ASCII mode with LRC error checking Floating Point Data Modbus Function Codes Floating point data movement supported including configurable support for Enron implementation Read Coil Status Read Input Status Read Holding Registers Read Input Registers Force Write Single Coil Preset Write Single Register 15 Force Write Multiple Coils 16 Force Write Multiple Register 22 Mask Write Holding Register Slave Only 23 Read Write Holding Registers Slave Only OoahwWnh Modbus Master Command List Up to 100 command per Master port each fully configurable for function slave address register to from addressing and word bit count Status Data Polling of command
85. Soft Technology Inc August 12 2015 August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual Output Address Type Function Data Type Max Reg Cnt Max Reg Cnt Output READ BOOL 1 Write BOOL 1 READ BYTE 212 Write BYTE 212 READ DINT 53 Write DINT 53 READ REAL 53 Write REAL 53 READ INT 106 Write INT 106 READ TIME 105 Write TIME 105 READ Count 111 Write Count 106 Input Address Type Function Data Type Max Reg Cnt Max Reg Cnt Input READ BOOL 1 Write BOOL 1 READ BYTE 222 Write BYTE 212 READ DINT 55 Write DINT 53 READ REAL 55 Write REAL 53 READ INT 111 Write INT 111 READ TIME 111 Write TIME 106 READ Count 111 Write Count 106 ProSoft Technology Inc Page 189 of 218 Page 190 of 218 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways CPU224xXP Data Block Address Type Function Data Type Max Read Max Write DB READ BOOL 1 Write BOOL 1 READ BYTE 222 Write BYTE 212 READ DINT 55 Write DINT 53 READ REAL 55 Write REAL 53 READ INT 111 Write INT 106 Flag Address Type Function Data Type Max Reg Cnt Max Reg Cnt Flag READ BOOL 1 Write BOOL 1 READ BYTE 32 Write BYTE 32 READ DINT 8 Write DINT 8 READ REAL 8 Write REAL 8 READ INT 16 Write INT 16 ProSoft Technology I
86. T__TT__TT_TT_TT_ _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ _ TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 02 gt lt 03 gt lt 00 gt lt 0A gt lt 00 gt lt 0A gt lt E5 gt lt FC gt lt R gt _TT__TT__TT_ 02 03 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F7 82 TT__TT__TT__TT__TT_TT_ TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 02 gt lt 10 gt lt 00 gt lt 0A gt lt 00 gt lt 0A gt lt 14 gt lt 00 gt lt 04 gt lt 00 gt lt 0B gt lt 00 gt lt 0C gt lt 00 gt lt 0D gt lt 00 gt lt 0E gt lt 00 gt lt 0F gt lt 00 gt lt 10 gt lt 00 gt lt 11 gt lt 00 gt lt 12 gt lt 00 gt lt 1L3 gt lt A5 gt lt 08 gt lt R gt _TT_TT_ 02 10 00 04 00 04 60 3F _TT_TT_ For Modbus protocol users To interpret the data packets refer to the Modbus Protocol Specification which can be found in this manual page 139 or at www modbus org Page 42 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 3 3 Gateway Status Data in Upper Memory The gateway places useful status data in dedicated upper memory locations in its internal database The Data Map functionality of the gateway can be used to map this data
87. The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to a PLC5 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 150 Specifies the function code to be used in the command 151 150 Word Range Write 152 151 Word Range Read 152 Read Modify Write File Type Binary Specifies the file type to be associated with the Counter command Timer Control Integer Float ASCII String Status File String Specifies the PLC 5 Address as a string For example Page 66 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual Parameter Value Description N10 300 Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc Page 67 of 218 August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual Class 3 Client UClient x Commands Controller Tag Access Parameter Value Description Enable Enable Specifies if the command should be executed and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be ex
88. Timed Out Extended Error Code EA Apply Hep Page 86 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions Encapsulated PCCC Read Message Read commands transfer data from the gateway to a processor The following encapsulated PCCC commands are supported e PLC2 Unprotected Read PLC5 Typed Read PLC5 Word Range Read e PLC Typed Read An example rung used to execute a read command is shown in the following diagram writemsg DN readmsg EN MSG 1 i Type PLCS Word Range Read N Message Control readmsg E n R writemsg DN U gt The MESSAGE CONFIGURATION dialog box
89. X3x Series User Manual Ethernet and Serial Gateways 19 Verify the name and IP address by clicking PLC gt Ethernet gt Verify Device Name red HW Config SIMATIC 300 1 Configuration Profinet_Sample oh Station Edit Insert ffei View Options Window Help ODe2S g Download Ctrl epee L Upload Download Module Identification Upload Module Identification to PG Module Information Ctrl D oe i 1 PROFINET IO System 100 Edt Ethernet Node A PROFIBUS gt Verify Device Name Assign Device Name lt gt Ka j 1 plx31 pnd Comment M 2 OUTPUT 22 Byte ee 0 Verify Device Name Staut IP address MAC addes 7 1921680245 0000 80 88 I lt I Show cely messing and incomectly coniigaed devices e If the status is not green the module needs the name and IP to be assigned This is done by clicking PLC gt Ethernet gt Assign Device Name Page 206 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual 20 Once the status is green save and download the program DEIER Oe doe MO Ww a 7 Profile Standard a we PROFIBUS DP Etheret 1 PROFINETO System 100 li HA SEEN Additional Fiele Gateway E netTAl PX Select Node Address Over which station address is the programming device connected to the module CPU 315 2PN DP
90. a ede eae AoA ec eee 98 6 2 1 MBIT CP Servers iki a nia i tea ial ee ee eh 98 6 2 2 MBGP Client X ani nes den Me ada ae ean da tans 100 6 2 3 MBTCP Client x COMMANAS ceccceceeeceeeeeeeeeeceeeeecaeeeeaaeeeeneeseeeesiaeeeeeeseaes 102 6 3 MBTGP DiaQmOstics srianan e a a aa a 105 6 3 1 PCB DiaQnoSticS a aa hn a en i en aaah 105 6 3 2 MBTCP Status Data in Upper Me MmoOry ccccceeececeeeeeeeeeeeeaeeeeeeeseeeeseaeeseneeeeaes 105 6 3 3 MBT GP Error Codes morami reepa a a a e a aa 108 6 4 MBTCP Reference ccccecceceeeceeeeeeeneeceeeeceaeeeeaaesnaneecaaeeesaaeseeneeseaeeetaeeeeneeenaes 109 6 4 1 Modbus Protocol Specification cccccececceeeeeeeeeeeceeeeeceaeeeeeaeseeeeeseeeeeseaeeseeeeeaes 109 7 MBS Protocol 121 7 1 MBS Functional Overview cc ccccecceeeeeceeeeecceeeeeeeseeeeeseaeeesaaeseeeeeseeeeseaeeseneeseaes 122 7 1 Modbus Serial SpecifiCations cccceccceceeeeeeeeeeeeeeeceeeeeceaeeeeeaeseeeeeseeeeseaeeseeeseaes 122 7 1 2 Modbus Master Slave Port Specifications ccccccecceceeeeeeeeeceeeeeeeeeeeteaeeeeeeeeaes 123 7 1 3 Gateway Internal Database cceccceeceeceeeeeeeeeeeeeee cee terttu retn nstnnstnnntnnnnnnsnnnnnn 124 7 2 MBS Configuration ccccccccceceeeceeeeeeeeeeeceeeeeceaeeeeaaeseeeeesaeeesaaeseeeeeseeeeseaeeseneeseaes 125 7 2 1 MBS Port X rne n a vate cp hac e eden E E 125 7 2 2 MBS Port x Commands ceccceceeeeeeeeeeee cece aeeeeeeeseeee
91. a simple error checking algorithm used in serial Odd communication This parameter specifies the type of parity Even checking to use All devices communicating through this port must use the same parity setting Data Bits 7ors Specifies the number of data bits for each word used by the protocol All devices communicating through this port must use the same number of data bits Stop Bits 1or2 Stop bits signal the end of a character in the data stream For most applications use one stop bit For slower devices that require more time to re synchronize use two stop bits All devices communicating through this port must use the same number of stop bits RTS On 0 to 65535 Specifies the number of milliseconds to delay data transmission after Ready To Send RTS is asserted RTS Off 0 to 65535 Specifies the number of milliseconds to delay after the last byte of data is sent before the RTS modem signal is set low ProSoft Technology Inc Page 161 of 218 August 12 2015 ASCII Protocol PLX3x Series User Manual Ethernet and Serial Gateways Parameter Value Description Handshaking NO Specifies the handshaking used on the port YES No No hardware or software handshakin DTR DSR 9 XON XOFF Yes RTS CTS hardware handshaking DTR DSR DTR DSR hardware handshaking XON XOFF software handshaking Rx TERMINATION Defines the receive termination characteristics for the port Termination CHAR
92. agram WriteData writemsg EN MSG 0 JE Type CIP Data Table Write LEN Message Control writemsg E HoN LER WriteData The MESSAGE CONFIGURATION dialog box must be completed to define the data set to be transferred from the processor to the gateway An example of the dialog box follows Message Configuration message xj Configuration Communication Tag Message Type CIP Data Table Write h Source Tag plcSdata O X New Tag Number Of Elements 10 a Destination Element fint_data 0 O Enable Enable Waiting Start O Done Done Length 1 Eror Code J Timed Out Extended Error Code Cancel Apply Help Complete the dialog box for the data area to be transferred CIP Data Table messages require a tag database element for both the source and destination The SOURCE TAG is a tag defined in the Controller Tag database The DESTINATION ELEMENT is the tag element in the gateway The gateway simulates a tag database as an array of elements defined by the maximum register size for the gateway user configuration parameter Maximum Register in the Gateway section with the tag name INT_DATA ProSoft Technology Inc Page 89 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways In the previous example the first element in the database is the starting location for the write operation of ten elements The COMMUNICATION information mu
93. al Gateways Edit Modbus Port 1 Enabled No Baud Rate RS Interface RS 232 Type Slave 19200 x Float Flag No Float Start 7000 Float Offset 2000 4 Protocol RTU comment Parity None pian Data Bits Definition Stop Bits RTS On RTS Off Minimum Response Delay Use CTS Line Internal Slave ID Bit Input Offset Word Input Offset Output Offset Holding Register Offset End of Message Delay Baud rate for port coo0coocoOrZzrFOoOoORD fs Reset Tag Reset All OK Cancel 5 Double clicking any E icon will open an Edit dialog box with a table E Edit Modbus Port 1 Commands Enable Internal Address Pollinterval Reg Count Swap Code Node Address ModBus Function MB Addr Internal Address Value Status OK Setto Defaults Add Row Insert Row Move Up Move Down Edit Row Copy Row Paste Re OK Cancel 6 To add a row to the table click the Add Row button Page 22 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual E Edit Modbus Port 1 Commands Enable Internal Address Pollinterval Reg Count Swap Code Node Address ModBus Function MB Addr 1 No Change 1 FC 3 Read Hol 0 Enable Value Status OK Setto Defaults Add Row Insert Row Delete Row Move Up Move Down Edit Row Copy Row Paste Roy OK Cancel ProSoft Technology Inc Page 23 of 218 August 12 2015 Configuring Y our G
94. als during a Data Analyzer session The time tick will print at the time interval you specify in the Data Analyzer Setup dialog box For example if you select 10 mS Ticks it will print every 10 milliseconds Data Analyzer Setup Time Tick C No Ticks C 1m5 Ticks C 5m5 Ticks fe 10 mS Ticks 50mSTicks 100 m Ticks Communication Port Porti C Port2 C Port3 C Port4 Format ProSoft Technology Inc Page 41 of 218 August 12 2015 Diagnostics and Troubleshooting PLX3x Series User Manual Ethernet and Serial Gateways 4 Ifyou wish to capture the Data Analyzer session to a log file click the Log File button 5 Click the Start Data Analyzer button to start the Data Analyzer Click it again to stop it 6 The example below is part of a capture of standard Modbus data packets It is displayed in hexadecimal number format 7 Data LEAVING the serial port is enclosed in angle brackets lt gt 8 Data ENTERING the port is enclosed in square brackets 9 Each set of brackets holds one word 2 bytes of data lt 2D gt lt 00 gt lt 2E gt lt 00 gt lt 2F gt lt 00 gt lt 30 gt lt 00 gt lt 31 gt lt 16 gt lt E0 gt lt R gt _TT__TT_ 05 10 00 28 00 OA cl 82 _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_TT TT TT_TT_TT_TT_TT_TI_TT_TT_TT_TT_TI_TT_TT_TTIT_TT_TT_TT_TT_TT_ TT__TT__TT__TT__TT__TT_ lt R gt lt 06 gt lt 04 gt lt 00 gt lt 32 gt lt 00 gt lt 0A gt lt D0 gt lt 75 gt l
95. arameter Value Description only if the Float Flag is set to YES For example if the Float Offset value is set to 3000 and the Float Start parameter is set to 7000 the data returned as floating point data for register 47001 or 407001 will actually come from internal gateway registers 3000 and 3001 If the requested address was 47002 407002 the data will be returned from internal registers 3002 and 3003 If the requested address was 47101 407101 the data will be returned from internal registers 3200 and 3201 and so on ARP Timeout 1 to 60 This parameter specifies the number of seconds to wait for an ARP reply after a request is issued Command 0 to 300 Error Delay This parameter specifies the number of 100 millisecond intervals to turn off a command in the error list after an error is recognized for the command If this parameter is set to 0 there will be no delay ProSoft Technology Inc August 12 2015 Page 101 of 218 MBTCP Protocol User Manual PLX3x Series Ethernet and Serial Gateways 6 2 3 MBTCP Client x Commands The MBTCP Client x Commands section defines the Modbus TCP IP commands to be issued from the gateway to server devices on the network These commands can be used for data collection and or control of devices on the TCP IP network E Edit MBTCP Client O Commands Enable Internal Address Poll Interval Reg Count Swap Code Node IP Address SerPort Slave Address ModBu
96. are disabled the controller can also alter the state of the coil Coils are numbered from zero coil 00001 zero coil 00002 one and so on The desired status of each coil is packed in the data field one bit for each coil 1 ON 0 OFF The use of server address 0 Broadcast Mode will force all attached servers to modify the desired coils A Note Functions 5 6 15 and 16 are the only messages other than Loopback Diagnostic Test that will be recognized as valid for broadcast The following example forces 10 coils starting at address 20 13 HEX The two data fields CD 1100 and 00 0000 000 indicate that coils 27 26 23 22 and 20 are to be forced on Adr Func HiAdd Lo Quantity Byte Data Coil Status Data Coil Status Error Check Add Cnt 20 to 27 28 to 29 Field u1 OF 00 B 0 0A 02 CD 00 CRC Response The normal response will be an echo of the server address function code starting address and quantity of coils forced Adr Func Hi Addr Lo Addr Quantity Error Check Field 11 OF 00 13 00 OA CRC The writing of coils via Modbus function 15 will be accomplished regardless of whether the addressed coils are disabled or not Coils that are not programmed in the controller logic program are not automatically cleared upon power up Thus if such a coil is set ON by function code 15 and even months later an output is connected to that coil the output will be hot ProSoft Technology Inc Page 119 of 218
97. arget device to be addressed by this command Slot 1 Use a value of 1 when interfacing to a PLC5 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 100 Specifies the function code to be used in the command 101 100 Word Range Write 102 101 Word Range Read 102 Read Modify Write File Type Binary Specifies the file type to be associated with the Counter command Timer Control Integer Float ASCII String Status File Number 1 Specifies the PLC5 file number to be associated with Page 64 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual Parameter Value Description the command If a value of 1 is entered for the parameter the field will not be used in the command and the default file will be used Element Specifies the element in the file where the command Number will start Sub Element Specifies the sub element to be used with the command Refer to the AB documentation for a list of valid sub element codes Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc August 12 2015 Page 65 of 218 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways Class 3 Client UClient x Commands PLC5 ASCII
98. asc OPERATING SYSTEM REVISION 2 6 30 10 RUN NUMBER 1457 Ca Decimal MY IP ADDRESS 192 168 0 250 C Hex MY ETHERNET ADDRESS CHEX 100 00 8D 88 00 16 Gd Float PROGRAM SCAN COUNTER 21511315656 EIP Class 1 C 3 SYSTEM FREE MEMORY 754865920 a pe onnection MODULE NAME PLX31 EIP MBS4 onfig Status EIP Class 3 Server E Config Ej Comm Status EIP Class 3 Client 0 C Config C Comm Status G Commands E Cmd Errors Decimal Cmd Errors Hex Haa EIP Class 3 Client 1 F Config lt Path Ethemet 192 168 0 250 A Caution Some of the commands available to you from this menu are designed for advanced debugging and system testing only and can cause the gateway to stop communicating with the processor or with other devices resulting in potential data loss or other communication failures Use these commands only if you fully understand their potential effects or if you are specifically directed to do so by ProSoft Technology Technical Support Engineers Page 38 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways Diagnostics and Troubleshooting User Manual The following menu commands are common to all PLX3x series gateways Menu Submenu Description Command Command Module Version Displays the gateway s current software version and other important values You may be asked to provide this information when calling for technical support Data Map Displays th
99. ata is broken up and displayed in binary format it can be seen that the binary data stored in the first byte of DB1 DBW 0 is identical to that stored in byte address DB1 DBB 0 This is because the memory locations referenced by the first byte of DB1 DBW 0 and by DB1 DBBO0 are one and the same as explained previously ta Oe Moai vate DB1 DBYY 0 DEC 11733 DB1 DBYY 0 BIN DB1 DBYY 1 BIN DB1 DBB 0 BIN DB1 DBB 1 BIN PeR 110191101 _0101 0010_1101 2 1101_0101 Same memory space Same memory space DB1 DBW0DB1 DBW1 Bfoo10_1701 2 1101_0101 2 1101_0101 P 0101_0111 DB1 DBB0 DB1 DBB1 DB1 DBB1 DB1 DBB2 The first byte of DB1 DBWO is the same as DB1 DBBO ProSoft Technology Inc Page 179 of 218 August 12 2015 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways The second byte of DB1 DBWO is the same as DB1 DBB1 and is the same as the first byte of DB1 DBW1 In reality the memory space looks like below DB1 DBWO DB1 DBW1 pro010 1107 2 1101_0101 poem DB1 DBB0 DB1 DBBi1 DB1 DBB2 Note To access the first address of Data Block Flag Input Output Timer and Counter memory locations in the 7 300 and S7 1200 processors use the following address syntax Data Block gt DB1 DBB0 DB1 DBWO DB1 DBD0O Flag gt MBO MWO MDO Input gt IBO IWO IDO Output gt QB0 QWO QDO Timers gt TO T65535 Counters gt CO C65535 Note To access the first address o
100. ateway User Manual PLX3x Series Ethernet and Serial Gateways 7 To edit the row click the Edit Row button This will open an Edit dialog box where you can edit the row parameters EE Edit Modbus Port 1 Commands bed lt Enable Value Status OK Setto Defaults Edit Row Enable Internal Address Poll Interval Continuous 0 ModBus Function MB Addr FC3 Read Hol 0 Reg Count 0 1 Swap Code Node Address No Change 1 Edit Row 1 Enable Continuous Internal Address Poll Interval Reg Count Swap Code No Change Node Address 1 ModBus Function FC 3 Read Holding Registers MB Address in Device a Comment l Enable Continuous Definition This field defines whether or not the command is to be executed and under what conditions Disable 0 The command is disabled and will not be executed in the normal polling sequence Enable 1 The command is executed each scan of the command list if the Poll Interval Time is set to zero If the Poll Interval time is set Reset Tag Reset All OK Cancel 8 When configuration is complete download the configuration to the gateway 9 For protocol specific configuration information see the Configuration section in the appropriate protocol chapter of this manual EIP configuration page 54 MBTCP configuration page 98 MBS configuration page125 ASCII configuration page 161 S
101. ating a Variable Table to Display Floating Point Input Values c 211 10 4 PNO Diagnoses i aeaa e a a E SEE AAE SE EEE E 213 10 4 1 Configuration Error CodeS iseanan na aaa naaa aane aieea anaran kanaan anaia akiai 213 11 Support Service and Warranty 215 11 1 Contacting Technical Support s sssssesseessesssesssrstnstnutnntnntnntnnntnnennnssnnnnnnsnnnnnn 215 1 2 Waranty MOntnmahoNs sa rA A R SS 216 Idee OO ProSoft Technology Inc Page 7 of 218 August 12 2015 Contents PLX3x Series User Manual Ethernet and Serial Gateways Page 8 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways Start Here User Manual 1 Start Here In This Chapter Oo Oo ta ye System Requirements ccccccccceeeeneceeeeeceeeeeneeeeeseneeeseceeeessneeeeenees 9 Package Contents zs Binet dees cevienks Seki Bia eet ee 10 Mounting the Gateway on a DIN Krail c eee eeeeeeeeeeeeeeeeneeeeneeeeneees 11 Jumper Settings 4 tee hi jae aaie dations 12 SD Garde artnet deh tect ah ets ele ite ical oun ee es 12 Connecting Power to the PLX3x Gateway cscceseeesereteeeteereaes 13 1 1 System Requirements The ProSoft Configuration Builder configuration software for the gateway requires the following minimum hardware and software components e Pentium II 450 MHz minimum Pentium III 733 MHz or better recommended e 128 Mbytes of RAM minimum 256 Mbytes
102. bits signal the end of a character in the data stream For most applications use one stop bit For slower devices that require more time to re synchronize use two stop bits All devices communicating through this port must use the same number of stop bits ProSoft Technology Inc Page 125 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Parameter Value Description RTS On 0 to 65535 Specifies the number of milliseconds to delay data transmission after Ready To Send RTS is asserted RTS Off 0 to 65535 Specifies the number of milliseconds to delay after the last byte of data is sent before the RTS modem signal is set low Use CTS YES or NO This parameter specifies if the Clear To Send CTS modem control Line line is to be used or not If the parameter is set to NO the CTS line will not be monitored If the parameter is set to YES the CTS line will be monitored and must be high before the gateway will send data Normally this parameter is required when half duplex modems are used for communication 2 wire This procedure is commonly referred to as hardware handshaking Master Configuration Parameters Parameter Value Description Response Timeout 0 to 65535 Specifies the command response timeout period in 1 millisecond increments This is the time that a port configured as a Master will wait for a response from the addressed slave before re transmit
103. blem The gateway s LEDs provide valuable information such as e The state of each port e System configuration errors e Application errors e Fault indications 3 1 1 Main Gateway LEDs LED State Description PWR Off Power is not connected to the power terminals or source is Power insufficient to properly power the gateway 208 mA at 24 VDC is required Solid Green Power is connected to the power terminals FLT Off Normal operation Fault Solid Red A critical error has occurred Program executable has failed or has been user terminated and is no longer running Press theResetbutton or cycle power to clear the error CFG Off Normal operation Config Solid Amber The unit is in configuration mode Either a configuration error uration exists or the configuration file is currently being downloaded or read After power up the configuration is read and the unit implements the configuration values and initializes the hardware This occurs during power cycle or after the Reset button is pressed ERR Off Normal operation Error FlashingAmber An error condition has been detected and is occurring on one of the application ports Check configuration and troubleshoot for communication errors Solid Amber This error flag is cleared at the start of each command attempt Master Client or on each receipt of data slave adapter server so if this condition exists it indicates a la
104. bus register or bit address in the server to be used by the command Refer to the documentation of each Modbus server device for the register and bit address assignments valid for that device The Modbus Function Code determines whether the address will be a register level or bit level OFFSET address into a given data type range The offset will be the target data address in the server minus the base address for that data type Base addresses for the different data types are e 00001 or 000001 0x0001 for bit level Coil data Function Codes 1 5 and 15 e 10001 or 100001 1x0001 for bit level Input Status data Function Code 2 30001 or 300001 3x0001 for Input Register data Function Code 4 e 40001 or 400001 4x0001 for Holding Register data Function Codes 3 6 and 16 Address calculation examples o For bit level Coil commands FC 1 5 or 15 to read or write a Coil OX address 00001 specify a value of 0 00001 00001 0 Page 130 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways MBS Protocol User Manual Parameter Value Description o For Coil address 00115 specify 114 o 00115 00001 114 e For register read or write commands FC 3 6 or 16 4X range for 40001 specify a value of 0 o 40001 40001 0 e For 01101 11101 31101 or 41101 specify a value of 1100 o 01101 00001 1100 o 11101 10001 1100 o 31101 30001
105. ccccccceceeseeeeeeeseeeeeeeaeeeeneeees 43 3 3 2 Protocol Specific Status Data in Upper M Mmory cccceceeseeeeeeeeseeeeeeeeeeseneeeeaes 43 A Hardware lnformation _ 4 1 Hardware Specifications eeeeeeeeeeeeeese neee nssenesensstnssttssresstensttnstnnsnnnnrnnstnnntnnnenntnt 46 4 1 1 SerialPort SPSCHICAONS iseis siira gaanu e teana aa aaaea a aTa Es EEEa naat 47 4 2 Serial Port Cables for Gateways with Serial Ports ccccsseeeeeeeeeeteeeeteeeeeeees 48 ProSoft Technology Inc Page 5 of 218 August 12 2015 Contents PLX3x Series User Manual Ethernet and Serial Gateways 4 2 1 RS 232 Null Modem DTE with Hardware Handshaking ccccseeeeseeeeerees 48 4 2 2 RS 232 Null Modem DTE without Hardware Handshaking 0 0 cesseeeees 49 4 2 3 RS 232 DTE to DCE Modem Connection c ccccccceeeeeeeeeeeteeeeeeeeeeeseaeeeeneeeeneees 49 4 2 4 RS 422 Interface CONNECTIONS cceecceceee eects eeeeeeceeeeecaaeeesaaeseeeeeseaeeesaeeeeaaeteneees 50 4 2 5 RS 485 Interface Connections cccecccecceeeeeeeeceeeeeceeeeeeeaeeeeaaeseeeeeseaeeeseaeeeeaeeeenees 50 5 EIP Protocol 51 5 1 EIP Functional Overview cccccceccceceeeeeceeeeeeaeeeeeeeceaeeesaaesesaaeseeeeeseaeeesaeeeeeeeeeeees 52 5 1 1 Ether Nev P CHM a a cheats edt aahachdandeayagaeazecbbucessyarlestaines 53 5 2 EIP Config ratio N i aiia ede aie Ae ee deeds ates 54 5 2 1 EIP Class 3 Se
106. cimal number format A zero means there is currently no error for the command Cmd Errors Displays current error codes for each command on the Hex Class 3 Client UClient x command list in hexadecimal number format A zero means there is currently no error for the command 5 3 2 EIP Status Data in Upper Memory The EIP driver has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 25 Note that all the status values are initialized to zero 0 at power up cold boot and during warm boot Page 70 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual EIP Client Status Data The following table lists the addresses in upper memory where general error and status data for each EIP connected and unconnected Client can be found EIP Client Address Range Connected Client 0 7900 through 7909 Connected Client 1 8100 through 8109 Unconnected Client 0 12800 through 12809 The content of each Client s status data area is structured the same The following table describes the content of each register in the status data area Offset Description Number of Command Requests Number of Command Responses Number of Command Errors Number of Requests Number of Respons
107. ck on the SIMATIC 300 station 5 Configure the station by double clicking the hardware icon under SIMATIC 300 SIMATIC Manager Profinet_Sample C Program Files Siemens Step s7proj Prom amp File Edit Insert PLC View Options Window Help Da BP ee amp Bae di Sl 20 lt No Filter gt BB Profinet_Sample fl Hardware o Page 198 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual The HW Config window opens 6 Click on Options gt Install GSD file ci HW Config SIMATIC 300 1 Configuration Profinet_Sample fly Station Edit Insert PLC View eis Window Help 0 A a S BS E Customize Ctrl Alt E Configure Network Edit Catalog Profile Update Catalog Install HW Updates Install GSD we Find in Service amp Support ProSoft Technology Inc Page 199 of 218 August 12 2015 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways The Install GSD File dialog opens Install GSD Files Install GSD Files from the directory CAPROGRAM FILES SIEMENS STEP7 S7TMP Browse 7 Click Browse and locate the GSD file Install GSD Files Install GSD Files fromthe diectoy C Documents and SettingssAdministrato Desktop Browse FL Release Version Languages GSDML V2 1 ProS oft PLX32 PNDevice V3 1 20130110 xml 01 10 2013 12 00 00 AM V2 1 English Ger
108. d and less than or equal to 5 minutes duration 2500 Vrms port signal isolation per UL 1577 serial port communication signal uses RF Radio Frequency modulation signal as isolation media IC chip model is Silicon Labs Si844x Si8440 Si8441 Si8442 2 5 mm screwdriver ProSoft Solutions DVD J180 Power Connector 1 to 4 RJ45 DB9M Serial Adapter Cable serial protocol only 1 to 4 DB9 to Screw Terminal Adapter serial protocol only ProSoft Technology Inc August 12 2015 PLX3x Series Hardware Information Ethernet and Serial Gateways User Manual 4 1 1 Serial Port Specifications RX RX PORT 2 PORT 1 TX TX RX RX PORT 3 PORT 4 TX TX Type Specifications Serial Port Isolation 2500 Vrms port signal isolation per UL 1577 serial port communication signal uses RF Radio Frequency modulation signal as isolation media IC chip model is Silicon Labs Si844x Si8440 Si8441 Si8442 Serial Port Protection RS 485 422 port interface lines TVS diode protected at 27V standoff voltage RS 232 port interface lines fault protected to 36V power on 40V power off ProSoft Technology Inc Page 47 of 218 August 12 2015 Hardware Information PLX3x Series User Manual Ethernet and Serial Gateways 4 2 Serial Port Cables for Gateways with Serial Ports This section contains information on the cable and pin assignments for the PLX3x gateway s serial ports RS 232 422 485 The PLX3x gateway may come with one
109. d are swapped 1234 2143 These swap operations affect 4 byte or 2 word groups of data Therefore data swapping using these Swap Codes should be done only when using an even number of words such as when 32 bit integer or floating point data is involved Node IP Address XXX XXX XXX XXX IP address of the Siemens processor being addressed by the command PLC Type S7 200 S7 300 S7 400 S7 1200 Type of Siemens processor being addressed by the command ProSoft Technology Inc August 12 2015 Page 175 of 218 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways Parameter Value Description Rack 0 to 999 Rack number of the S7 300 S7 400 or S7 1200 CPU Note Rack number is not used for the S7 200 CPU Slot Oto 12 Slot number of the S7 300 S7 400 or S7 1200 CPU Note Slot number is not used for the S7 200 CPU TSAP TSAP of the S7 200 CPU This can be found in the Siemens STEP 7 MicroWiIN software Note TSAP is not used for the S7 300 S7 400 and S7 1200 Func Type are This parameter can either be Read or Write rite Data Type BOOL This parameter can be BOOL BYTE DINT REAL INT TIME BYTE or COUNT DINT REAL INT TIME COUNT Address INPUT This parameter can be INPUT OUTPUT FLAG TIMER Type OUTPUT COUNTER or DB Data Block FLAG TIMER COUNTER DB DB Number 0 to 32767 Specifies the Data Block number to be used with the command Note DB Number is only used whe
110. des the high order bits and the second the low order bits Because the server interface device is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Some servers will limit the quantity of register content provided each scan thus for large register quantities multiple transmissions will be made using register content from sequential scans ProSoft Technology Inc Page 111 of 218 August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways In the example below the registers 40108 to 40110 have the decimal contents 555 0 and 100 respectively Adr Func ByteCnt HiData LoData HiData LoData HiData Lo Data Error Check Field 1 3 06 02 2B 00 00 00 64 CRC Read Input Registers Function Code 04 Query Function code 04 obtains the contents of the controller s input registers at addresses 3xxxx These locations receive their values from devices connected to the I O structure and can only be referenced not altered from within the controller The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered for zero 30001 zero 30002 one and so on Broadcast mode is not allowed The example below requests the contents of register 3009 in server number 11 Adr Func Data StartReg Hi Data StartRegLo Data
111. e all on The other input data bytes are decoded similar Due to the quantity of input statuses requested the last data field which is shown as 35 HEX 0011 0101 binary contains the status of only 6 inputs 10213 to 102180 instead of 8 inputs The two left most bits are provided as zeros to fill the 8 bit format Read Holding Registers Function Code 03 Query Read Holding Registers 03 allows the user to obtain the binary contents of holding registers 4xxxx in the addressed server The registers can store the numerical values of associated timers and counters which can be driven to external devices The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered form zero 40001 zero 40002 one and so on The broadcast mode is not allowed The example below reads registers 40108 through 40110 from server 584 number 11 Adr Func Data StartReg Hi Data StartReg Lo Data of Regs Hi Data ofRegsLo Error Check Field 11 03 00 6B 00 03 CRC Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are two bytes each with the binary content right justified within each pair of characters The first byte inclu
112. e is shared between all the ports on the gateway and is used as a conduit to pass information from one device on one network to one or more devices on another network This permits data from devices on one communication port to be viewed and controlled by devices on another communication port In addition to data from the Client status and error information generated by the gateway can also be mapped into the internal database PLX30 Communication Other PLx30 Gateway Protocol Driver Intemal Database Up to 4000 regs Page 166 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual 9 2 SIE Configuration 9 2 1 SIE Client x This section defines general configuration for the SIE Client Master Parameter Value Description Minimum 0 to 65535 Specifies the number of milliseconds to wait between the initial Command issuances of a command This parameter can be used to delay all Delay commands sent to servers to avoid flooding commands on the network This parameter does not affect retries of a command as they will be issued when failure is recognized Response 0 to 65535 Specifies the time in milliseconds that a Client will wait before re Timeout transmitting a command if no response is received from the addressed server The value to use depends on the type of communication network used and the expected response time of the slowest device on the n
113. e General Modbus Error and Status Data area The status values PortSTATE and Port COMM STATE circled in red can be found only in the PCB diagnostic menus under Comm Status for a port as shown in the following graphic Gy Diagnostics Connection Log Module gt alalale mi7 Z a MBS Porn E Contig Torn seus Enabled Slave Status Retries Modbus Cmds State Modbus Cmd Errors Decimal ComState T ETT Modbus Cmd Errors Hex BS Port2 Last Err Config Cfg Err Number of Command Requests Comm Status Number cmd Responses Slave Status Number Command Errors Modbus Cmds 5 Number Requests Modbus Cmd Errors Decimal Number Responses Modbus Cmd Errars Hex Number Errors Received amp MBS Port3 Number Errors Send E Contig O Comm Status Path Ethernet 10 1 3 189 ProSoft Technology Inc August 12 2015 eleleleleleloleloleleloloalar 4 12 42 06 Page 133 of 218 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways These status values are state registers They are used as scratchpad areas by the operating firmware to keep track of the current logical state of activities ona slave port These state registers are constantly changing as the gateway progresses through the various stages needed to process communication on the serial ports This processing happens faster than can be followed unless a port error causes the value to remain constant for some noticeable length of
114. e command list defined in the user configuration specifies what data is to be transferred between the gateway and each of the servers on the network No ladder logic is required in the processor server for Client functionality except to assure that sufficient data memory exists The following illustration describes the flow of data between the Ethernet Clients and the internal database Processor I Network 1 Databases Slave Client i I 1 I 1 I 1 Write or Read l Function I I teed or l Writ Function I Response I OY Resa Comman List Request Multiple Server Access to Database The MBTCP gateway provides server functionality using reserved Service Port 502 for Modbus TCP IP MBAP messages as well as Service Ports 2000 and 2001 to support the TCP IP Encapsulated Modbus version of the protocol used by several HMI manufacturers Server support in the gateway permits Client applications for example HMI software Quantum processors etc to read from and write to the gateway s database This section discusses the requirements for attaching to the gateway using Client applications The server driver is able to support multiple concurrent connections from several Clients Up to five 5 Clients can simultaneously connect on Service Port 502 and five 5 more can also simultaneously connect on Service Port 2000 Service Port 2001 is used by the MBTCP protocol to pass Encapsulated Modbus commands through from the Ethe
115. e gateway s Data Map configuration Database ASCII Displays the contents of the gateway s database in ASCII View character format Decimal Displays the contents of the gateway s database in decimal number format Hex Displays the contents of the gateway s database in hexadecimal number format Float Displays the contents of the gateway s database in floating point number format Use the scroll bar on the right edge of the window to navigate through the database Each page displays 100 words of data The total number of pages available depends on your gateway s configuration ProSoft Technology Inc August 12 2015 Page 39 of 218 Diagnostics and Troubleshooting PLX3x Series User Manual Ethernet and Serial Gateways 3 2 2 Capturing a Diagnostic Session to a Log File You can capture anything you do in a Diagnostics session to a log file This feature can be useful for troubleshooting and record keeping purposes and for communication with ProSoft Technology s technical support team 1 Open a Diagnostics window 2 To log a Diagnostics session to a text file click the Log File button on the toolbar at the top of the Diagnostics window Click the button again to stop the capture 3 To view the log file created click the View Log File button The log file will open as a text file which can be renamed and saved to a different location 4 To email the log file to ProSoft Technology s technical sup
116. ecuted Conditional Write The Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is Word and Byte typically used when dealing with floating point or other swap multi register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to a PLC5 These devices do not have a slot parameter When addressing a processor in a Con
117. ecutes only if the internal data associated with the command changes Internal 0 to 3999 Specifies the database address in the modules internal Address database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is typically Word and Byte used when dealing with floating point or other multi swap register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to an SLC 5 05 These devices do not have a slot parameter When addressing a processor in a ControlLogix or CompactLogix rack the slot number corresponds to the slot in
118. ed Configuration Error Word Current Error Last Error 0 1 2 3 4 5 Errors Sent 6 7 8 9 1 0 to 25 Command List Errors 16 per Client For every command that has an error the gateway automatically sets the poll delay parameter to 30 seconds This instructs the gateway to wait 30 seconds before it attempts to issue the command again ProSoft Technology Inc Page 181 of 218 August 12 2015 SIE Protocol User Manual PLX3x Series Ethernet and Serial Gateways As the commands in the Client Command List are polled and executed an error codeis maintained in the gateway for each command The current error value for each command is displayed in the Command List Errors section of each Client s status data area There is one register for each of the 16 commands in the command list An error code of 0 means no error is currently detected for the specified command The following tables list the various error codes that may be displayed and their descriptions 9 3 2 SIE Error Codes Module Communication Error Codes Decimal Hex Description 1 0x0001 No data from I O module 3 0x0003 The desired item is not available in the PLC 200 family 5 0x0005 The desired address is beyond limit for this PLC 6 0x0006 The CPU does not support reading a bit block of length lt gt 1 7 0x0007 Write data size error 10 0x000a The desired item is not availab
119. ed Output bytes must not be greater than 1440 10 Save and download the configuration to the module Download files from PC to module Module Running r STEP 1 Select Communication Path Browse Device s Ethernet 192 168 O 245 Use Default IP CIPconnect LF SIP Path Edit Select Connection Type r STEP 2 Transfer File s OK Cance Abort Test Connection ProSoft Technology Inc August 12 2015 Page 197 of 218 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways 10 3 Step 7 Configuration This procedure describes the tasks required to set up the module with Siemens Step 7 It is important to note that the configuration parameters used during PCB Configuration and download to the module must match parameters configured here within this procedure 1 Start Step 7 software 2 Create a new project For example Profinet_Sample SIMATIC Manager Profinet_Sample C Program Files Siemens Step s proj Profinet amp File Edit Insert PLC View Options Window Help Dw 8 A a 9 25 lt SE ie lt No Filter gt Jy Se SEM 5B Profinet_S ample 3 Add a station to the project in which the network will be configured RJ SIMATIC Manager S7_Pro2 C Program Files Siemens Step s proj S7_2 amp File Edit Insert PLC View Options Window Help D ae BP ae 9 25 fil SIMATIC 300 Station lt No Filter gt 4 Cli
120. ed as a bit address When any other data types are used then the database address is interpreted as a 16 bit word register address Poll Interval 0 to 65535 Specifies the minimum interval between executions of continuous commands The value is in tenths of a second Therefore if a value of 100 is entered the command will execute no more frequently than once every 10 seconds Reg Count Command dependent Specifies the number of 16 bit registers or binary bits to be transferred by the command The range depends on the Siemens processor and the type of command See Maximum Register Counts page 185 Swap Code No Change Word Swap Word and Byte Swap Byte Swap Specifies if and how the order of bytes in data received or sent is to be rearranged This option exists to allow for the fact that different manufacturers store and transmit multi byte data in different combinations This parameter is helpful when dealing with floating point or other multi byte values as there is no one standard method of storing these data types The parameter can be set to rearrange the byte order of data received or sent into an order more useful or convenient for other applications No change 0 No change is made in the byte ordering 1234 1234 Word Swap 1 The words are swapped 1234 3412 Word and Byte Swap 2 The words are swapped then the bytes in each word are swapped 1234 4321 Byte Swap 3 The bytes in each wor
121. eive driver copies the data into the internal data area sets the message length in the data area and finally sets the new sequence number Receive and transmit data block structure is discussed in the following topics ProSoft Technology Inc Page 153 of 218 August 12 2015 ASCII Protocol PLX3x Series User Manual Ethernet and Serial Gateways Receive Data Data received by the receive driver is placed in the gateway s internal database in a fixed format at the location selected by the user The receiver driver is disabled if the database start location is set to a value of 1 The following table shows the structure of the received data Word Offset Description 0 Receive sequence number This register is incremented by the gateway s Receive Driver for each new packet received 1 Number of characters transmitted 0 to 255 from last transmit request 2 Number of characters 0 to 256 in receive block 9 to 136 3 Receive State 1 Listening for data 1 Receiving port data 4 Total receive character count 5 Total receive message count 6 Transmit State 0 Waiting for data to send 1 RTS on 2 RTS timeout 3 Sending data 4 Waiting for RTS off 5 RTS turned off 30 Intercharacter delay 31 Intercharacter delay 32 Intercharacter delay 100 Message delay before transmit 101 Message delay before transmit 7 Total transmit character count 8 Configuration error word
122. ended as a substitute for and is not to be used for determining suitability or reliability of these products for specific user applications It is the duty of any such user or integrator to perform the appropriate and complete risk analysis evaluation and testing of the products with respect to the relevant specific application or use thereof Neither ProSoft Technology nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein Information in this document including illustrations specifications and dimensions may contain technical inaccuracies or typographical errors ProSoft Technology makes no warranty or representation as to its accuracy and assumes no liability for and reserves the right to correct such inaccuracies or errors at any time without notice If you have any suggestions for improvements or amendments or have found errors in this publication please notify us No part of this document may be reproduced in any form or by any means electronic or mechanical including photocopying without express written permission of ProSoft Technology All pertinent state regional and local safety regulations must be observed when installing and using this product For reasons of safety and to help ensure compliance with documented system data only the manufacturer should perform repairs to components When devices are used for applications with technical safety requirements the relevant instruct
123. eries MBS Protocol Ethernet and Serial Gateways User Manual Master Port Command List Errors The individual command errors for each Master port are returned to the address locations specified in the following table Each port can have up to 100 commands configured Each configured command will use one word of these data areas to store a value representing the execution status from the most recent command execution attempt Modbus Port Address Range 1 4410 to 4509 2 4810 to 4909 3 5210 to 5309 4 5610 to 5709 Status data for Ports 2 through 4 is only present in 4 port MBS gateways Port 1 Command Error List Layout The first word in the specified register location contains the status error code for the first command in the port s Command List Successive words in the Command Error List are associated with corresponding commands in the list The addresses listed are for Port 1 only but the format is the same for each port The start address for each port is given in the previous section Internal Database Offset Description Address Example 4410 0 Command 1 Error Code 4411 1 Command 2 Error Code 4412 2 Command 3 Error Code 4413 3 Command 4 Error Code 4414 4 Command 5 Error Code 4507 97 Command 98 Error Code 4508 98 Command 99 Error Code 4509 99 Command 100 Error Code Note that the values in the Command Error List tables are initialized to zero 0 at power up cold boot and
124. ers 41 Invalid enable code 42 Internal address gt maximum address 43 Invalid node address lt 0 or gt 255 44 Count parameter set to 0 45 Invalid function code 46 Invalid swap code Gateway Communication Error Codes Code Description 2 Timeout while transmitting message 11 Timeout waiting for response after request same as 36 253 Incorrect slave server address in response 254 Incorrect function code in response 255 Invalid CRC LRC value in response Page 108 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual 6 4 MBTCP Reference 6 4 1 Modbus Protocol Specification Read Coil Status Function Code 01 Query This function allows the user to obtain the ON OFF status of logic coils used to control discrete outputs from the addressed server only Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial coil address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 coils to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The coils are numbered from zero coil number 1 zero coil number 2 one coil number 3 two and so on The followi
125. es Number of Errors Sent Number of Errors Received Reserved Current Error Code Last Error Code O DOIN ID A HR J VIN o EIP Client Command List Error Data A status error code is held in upper memory for each command in each EIP Clients command list The following table lists the addresses in upper memory that hold command list error data for each EIP Client EIP Client Address Range Connected Client 0 7910 through 8009 Connected Client 1 8110 through 8209 Unconnected Client 0 12810 through 12909 The first word in each Client s command list error data area contains the status error code for the first command in the Clients command list Each successive word in the command error list is associated with the next command in the list Therefore the size of the command list error data area depends on the number of commands defined ProSoft Technology Inc Page 71 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways The structure of the command list error data area which is the same for all Clients is displayed in the following table Offset Description 0 Command 1 Error Code 1 Command 2 Error Code 2 Command 8 Error Code 3 Command 4 Error Code 4 Command 5 Error Code 97 Command 98 Error Code 98 Command 99 Error Code 99 Command 100 Error Code A non zero error code indicates an error To interpre
126. eseaeeesaaeseeeeeseaeeeseaeeeeaaeseaes 129 7 3 MBS DiaQnOStiGs icasi iaieineea ea a a eaa e eis tate 132 7 3 1 PCB DiaQMOSUCS aain ea aee ea aa eens ae eaaa Aa aE Oa SEDESU ce ote 132 7 3 2 MBS Status Data in Upper Memory sssssssssessssresrrssirssrrssrrssrrssrnssrnssrnssrnesrnnsrnn 132 7 3 3 Error Status CodeS si cz seccdveuc diet a coeuateeg side ese E aa a a N a G teed 138 Page 6 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Contents Ethernet and Serial Gateways User Manual 7 4 MBS Refere E fi a a a a a Ea aa a ea aa aaa A aA a AE donee 139 7 4 1 Modbus Protocol Specification cccccecceeeeeeceeeeeeeeeeeceaeeesaaeeeeeeeseeeesaeeeeeeeeenees 139 8 ASCII Protocol 151 8 1 ASCII Functional Overview ccccccceeeeeeeeeeeeeaeeeeneeeeeeeseaeeesaaeeeeeeeseaeeeseaeeteaeeeeaes 152 8 1 1 General Specifications ccceeeccceeececeeeeeeeeeeeeaeeceeeeeseaeeesaaeeeeaeeseeeeeseaeeeenaeeneeeeeaes 152 8 1 2 Datta FOW fects cscon sept esas seas veet gee cs este e E 153 8 1 3 Modes Of Operation ccccccccceeceesecseeeeceeeeeaaeseeneeceeeeceaeseeaaeseeneeseeeesaeeneaaessenees 156 8 2 ASCII Configuration cccccecccecceeceeeeeceeeeeceeeeceaeeeeaeeseeeeeceaeessaaeseeeeeseaeeesnaeeeeeeeeaes 161 8 2 1 ASCII Port X aaiae aa iiaia hee aed edie Madge 161 8 3 ASCII Diagnostiset aiaia ieee val 163 8 3 1 PCB Diagnostics inie aeeai a a iad gine iaaiiai eah 163 8 3 2 ASCII Status Data in Upper Memory
127. ess Fields OxOF OxA2 Protected Typed Logical Read With Three X Address Fields OxOF OxA9 Protected Typed Logical Write With Two X Address Fields OxOF OxAA Protected Typed Logical Write With Three X Address Fields 0x0F OxAB Protected Typed Logical Write With Mask Three Address Fields ProSoft Technology Inc August 12 2015 Page 55 of 218 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways 5 2 2 EIP Class 1 Connection The EIP Class 1 Connection is used when the gateway acts as an EIP adapter transferring data to and from a PLC the EIP scanner using a direct I O connection Direct I O connections can be used to transfer large amounts of data quickly The PLX8x series EIP gateway can handle up to eight I O connections depending on the model each with 248 words of input data and 248 words of output data Rockwell Automation customers running RSLogix 5000 v 20 and higher can take advantage of premier integration with an Add on profile Adding the Gateway to RSLogix5000 v 20 1 Open up RSLinx and browse to the PLX3x gateway 2 Open up a short cut window by right clicking on the gateway 3 Select Upload EDS from device Note RSLogix5000 may need to be restarted in order to complete the installation 4 Once RSLogix5000 has been restarted add a New Module under the EtherNet IP bridge in the I O tree 5 Inthe Module Type Vendor Filters window set the filter options to ProSoft Technology 6 Select t
128. et IP PCCC compliant are returned from within the gateway and never returned from an attached EtherNet IP PCCC slave device These are error codes that are part of the EtherNet IP PCCC protocol or are extended codes unique to this gateway The most common errors for the EtherNet IP PCCC protocol are shown in the following tables Local STS Error Codes Code Int Code Hex Description 0 0x0000 Success no error 256 0x0100 DST node is out of buffer space 512 0x0200 Cannot guarantee delivery Link Layer 768 0x0300 Duplicate token holder detected 1024 0x0400 Local port is disconnected 1280 0x0500 Application layer timed out waiting for response 1536 0x0600 Duplicate node detected 1792 0x0700 Station is offline 2048 0x0800 Hardware fault ProSoft Technology Inc Page 73 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Remote STS Error Codes Code Int Code Hex Description 0 0x0000 Success no error 4096 0x1000 Illegal command or format 8192 0x2000 Host has a problem and will not communicate 12288 0x3000 Remote node host is missing disconnected or shut down 16384 0x4000 Host could not complete function due to hardware fault 20480 0x5000 Addressing problem or memory protect rungs 24576 0x6000 Function not allowed due to command protection selection 26872 0x7000 Processor is in Program mode 32768 0x8000 Compatibility
129. etwork Retry Count 0 to 65535 Specifies the number of times a command will be retried if it fails 9 2 2 SIE Client x Commands The SIE Client x Commands section of the configuration sets the Siemens Industrial Ethernet Client command list This command list polls Siemens Industrial Ethernet server devices attached to the Siemens Industrial Ethernet Client port The gateway supports numerous commands This permits the module to interface with a wide variety of Siemens Industrial Ethernet protocol devices The function codes used for each command are those specified in the Siemens Industrial Ethernet protocol Each command list record has the same format The first part of the record contains the information relating to the gateway and the second part contains information required to interface to the Siemens Industrial Ethernet server device Command List Overview A command list needs to be constructed to interface the gateway with Siemens Industrial Ethernet server devices The commands in the list specify the server device to be addressed the function to be performed read or write the data area in the device to interface with and the registers in the internal database to be associated with the device data Each Client command list supports up to 16 commands The command list is processed from top command 1 to bottom A poll interval parameter is associated with each command to specify a minimum delay time in tenths of a sec
130. f Data Block Flag Input and Output memory locations in the S7 200 processor use the following address syntax Data Block gt VBO VWO VDO Flag gt MBO MWO MDO Input gt IBO IWO IDO Output gt QB0 QWO QDO Page 180 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual 9 3 SIE Diagnostics The best way to troubleshoot the SIE driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 9 3 1 Client Command Errors Each SIE Client has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 25 The following table lists the starting addresses in upper memory where the status data for each Client can be found Client Gateway Starting Register for Status Data 0 21100 1 21125 2 21151 18 21568 19 21594 The following table describes the content of each Client s status data area Word Offset Description Command Request Count Command Response Count Command Error Count Number of Request Packets Number of Response Packets Errors Receiv
131. figuring the Drivers ccccccccccscesseeeeeneeceeeeceaeeeeeeeceeeeesaaeseeaaeseeeeeseaeeeeaeseeneeees 21 2 6 Using the CommonNet Data Map cccccceeeeeseeeeeeee eee eeeeaeeeeeeeseeeeeseaeeetaeeseeeeees 25 2 7 Configuring an IP Address cccccceeeeeeeeeeee eens eeeaeeeeeeeeeeeeeseaeeesaaeseneeeseeeeeaeeeeneeees 27 2 8 Downloading the Project to the Gateway ccsccecsseceeeeeseeeeeeeeeeeeeeeeeeesnaeeteneeeeaes 29 2 9 Printing a Configuration File ccecscceeceeeeeeeeeeeeeeseeceeeeesaeeeseaeseneeesnaeeessaeeseeeesaes 31 3 Diagnostics and Troubleshooting 33 3 1 LED Indicators i004 208 6avi en a ee le a ee edie 34 3 1 1 Main Gateway LEDS oad tceu iidit gee Vinten dee Gite dial ede ila is 34 3 1 2 Ethernet Port LEDS ovirata ieta i eA a dain ni cindy didnt 35 3 1 3 Serial Port LEDs for Gateways with Serial Ports c ccccccssseeeeeeeseteeeeeeeseeeees 35 3 2 Using Diagnostics in ProSoft Configuration Builder ccccsscceceesseceeeesteeeesenaes 36 3 2 1 Diagnostics MOU ozenrureo rioei nii aA i N aA a 38 3 2 2 Capturing a Diagnostic Session to a Log File eecceeeceeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeees 40 3 2 3 Using the Data Analyzer Serial Protocols Only 0 ccccsceceeeeeeseeeeeseteeeeeaeeeeneeees 41 3 3 Gateway Status Data in Upper M Mmory ccccceeesceeeeeeeeeeeeeeaeseeeeeseeeetaeeneeeeees 43 3 3 1 General Gateway Status Data in Upper MemMmory
132. for each I O connection Configuring EIP Class 1 Connections in PCB There are four configurable parameters for each I O connection in PCB Parameter Value Range Description Input Data 0 3999 This parameter specifies the starting address within the Address gateway s virtual database for data transferred from the PLC to the module Input Size 0 248 This parameter specifies the number of Integers being transferred to the PLC s input image 248 integers max Output Data 0 3999 This parameter specifies the starting address within the Address gateway s virtual database for data transferred from the module to the PLC Output Size 0 248 This parameter specifies the number of integers being transferred to the PLC s output image 248 integers max ProSoft Technology Inc Page 57 of 218 August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual 5 2 3 EIP Class 3 Client UClient x Connection The PLX3x gateway supports two connected Clients and one unconnected Client most devices use connected Clients be sure refer to the user manual of the target device for verification The EIP Class 3 Client x Connections are used when the gateway is acting as a Client Master initiating message instructions to the server slave devices The PLX3x EIP protocol supports three Connected Client Connections Typical applications include SCADA systems and SLC communication The EIP Class 3 UClient Con
133. g Execution EW 0 Port Number Continuous Run CO o A Eror ER 0 p Target Device Message done DN Data Table Address Message Transmitting ST 0 MultiHop Message Enabled EN 0 r Error Error Code Hex 0 Error Description No errors Page 82 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual Select the COMMUNICATION COMMAND to execute from the following list of supported commands PLC5 Type Read e PLC2 Unprotected Read PLC5 Typed Read to PLC e PLC Typed Logical Read The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages For the PLC2 Unprotected Read message set the address to the database index such as 1000 to consider with the command The MULTIHOP option must be set to YES The MULTIHOP tab portion of the dialog box must be completed as shown in the following window 72MSG MG13 0 2 Elements olx Del Remove Hop T756ENet LP str 192 168 0 75 ControlLogix Backplane A 1756 Backplane Slot dec Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero ProSoft Technology Inc Page 83 of 218 August 12 2015 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways PLC 5 Sub Element Fields This section c
134. gnized Response Timeout 0 to 65535 milliseconds This parameter specifies the time in milliseconds that a Client will wait before re transmitting a command if no response is received from the addressed server The value to use depends on the type of communication network used and the expected response time of the slowest device on the network Retry Count 0 to 10 This parameter specifies the number of times a command will be retried if it fails Float Flag YES or NO This flag specifies if the floating point data access functionality is to be implemented If the float flag is set to YES Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the two following parameters Float Start 0 to 32767 This parameter specifies the first register of floating point data All requests with register values greater than or equal to this value will be considered floating point data requests This parameter is only used if the Float Flag is enabled For example if a value of 7000 is entered all requests for registers 7000 and above will be considered as floating point data Float Offset 0 TO 3998 This parameter specifies the starting register for floating point data in the internal gateway database This parameter is used ProSoft Technology Inc August 12 2015 Page 100 of 218 PLX3x Series Ethernet and Serial Gateways MBTCP Protocol User Manual P
135. h 0 Error Code i I Timed Out Extended Error Code Cancel Enpi Help Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions Page 88 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual CIP Data Table Operations This method of data transfer uses CIP messages to transfer data between the ControlLogix or CompactLogix processor and the gateway Tag names define the elements to be transferred The following topics describe the support for the read and write operations CIP Data Table Write CIP data table write messages transfer data from the processor to the gateway An example rung used to execute a write command is shown in the following di
136. he coil Coils are numbered from zero coil 0001 zero coil 0002 one and so on The data value 65 280 FF00 HEX will set the coil ON and the value zero will turn it OFF all other values are illegal and will not affect that coil The use of server address 00 Broadcast Mode will force all attached servers to modify the desired coil A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast The example below is a request to server number 11 to turn ON coil 0173 Adr Func DataCoil Hi Data Coil Lo DataOn offind Data Error Check Field 11 05 00 AC FF 00 CRC Response The normal response to the Command Request is to re transmit the message as received after the coil state has been altered Adr Func Data Coil Hi Data Coil Lo Data On Off Data Error Check Field 11 05 00 AC FF 00 CRC The forcing of a coil via MODBUS function 5 will be accomplished regardless of whether the addressed coil is disabled or not In ProSoft products the coil is only affected if the necessary ladder logic is implemented A Note The Modbus protocol does not include standard functions for testing or changing the DISABLE state of discrete inputs or outputs Where applicable this may be accomplished via device specific Program commands In ProSoft products this is only accomplished through ladder logic programming ProSoft Technology Inc Page 113 of 218 August 12 2015 MBTCP Protocol
137. he corresponding PLX3x gateway and click Create 7 Inthe next window set the IP address to the address of the PLX3x gateway To add I O connections click the Change button Here up to eight I O connections can be added The I O connections have a fixed size of 496 bytes of input data and 496 bytes of output data When finished click ok 9 Inthe Module properties window each I O connection can be configured with its own RPI time 2 Adding the Gateway to RSLogix5000 v 19 and Below 1 Add a New Module under the EtherNet IP bridge in the I O tree 2 Click Find and search for Generic EtherNet Bridge click Create 3 Set the IP address to the gateway This creates the communication path from the processor to the PLX3x gateway Page 56 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual 4 Next add a New Module under the Generic EtherNet Bridge and add a ClP Connection Here the parameters for the I O connection are specified The input and output sizes need to match the input and output sizes configured in PCB The Address field value represents the connection number in PCB By default all of the connections have 248 Input words 248 Output words and 0 Configuration words The Comm format should be set to Data type INT and the Assembly instances should be 1 for input 2 for output and 4 for configuration 5 ACIP Connection will need to be added and configured
138. he values coming into the processor are displayed at the input section ProSoft Technology Inc Page 209 of 218 August 12 2015 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways 2 To modify the values that the processor sends to the module choose the Output select the desired value and select Modify Value Page 210 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways PND Protocol User Manual 10 3 2 Creating a Variable Table to Display Floating Point Input Values 1 Select Insert New Object gt Variable Table D w amp SP als 9 2a 8a se EE Pen Re SED 2 Profinet_Sample Sources T Blocks Symbols g SIMATIC 300 p CPU 315 2PN 0P Ps ii Ct Ctrhx Copy Ctrl C Delete Del Insert New Object Source folder Block Folder Offline Run Time Properties STL source Rename F2 Organization Block Object Properties Ak Retun Function Block Special Object Properties Function Data Block Data Type Variable Table Text Library Folder User Text Lbrary Symbol Table External Source 2 Assign a name to the table and click OK Properties Variable Table General Part 1 General Part 2 Attributes Name VATI VAT_Float_Input Symbolic Name Symbol Comment Project path C Program Files Siemens Step s proj Profin_1 Code Interface 04 24 2014 09 07 34 AM 04 24 2014 09 07 34 AM 04 24 2014 09 07
139. hernet and Serial Gateways PND Protocol User Manual 13 Insert the ProfiNet bus network where the ProSoft module will be added by General Parameters IP address 792 168 0 248 peed Do not use router Subnet mask 255 255 255 0 C Use router Address oats OK Cancel Help SIMATIC Manager Profinet_Sample C Program Files Siemens Step7 s7proj Pro Press F1 to get Help clicking on the PN IO option and select New The Properties Ethernet Interface dialog opens 14 Click the New button The Properties New subnet Industrial Ethernet dialog opens Properties Ethernet interface PN IO RO S2 2 Properties New subnet Industrial Ethernet Name 7 subnet ID 001c 0004 Project path T ee Storage location of the project C Program Files Siemens Step s proj Profinet Author Date created 01 27 2014 03 40 05 PM Last modified 01 27 2014 03 40 05 PM Comment Cancel Help ProSoft Technology Inc August 12 2015 Page 203 of 218 PND Protocol User Manual PLX3x Series Ethernet and Serial Gateways 15 Click OK on the following prompt DY Station Edit Insert PLC DESER S Properties Ethe Name 57 subnet ID Project path Storage location of the project Author Date created Last modified Comment rnet interface PN IO RO S2 2 Ethermet 1 0030 fooos
140. his section contains information specific to the Control CompactLogix processor when used with the PCCC command set The current implementation of the PCCC command set does not use functions that can directly interface with the Controller Tag Database In order to interface with this database the table mapping feature provided by RSLogix 5000 must be used The software permits the assignment of Controller Tag Arrays to virtual PLC 5 data tables The ProSoft gateway using the PLC 5 command set defined in this document can then reach this controller data PLC5 and SLC5 05 processors containing an Ethernet interface use the encapsulated PCCC message method The gateway simulates these devices and accepts both read and write commands The following topics describe the support for the read and write operations Encapsulated PCCC Write Message Write commands transfer data from the processor to the gateway The following encapsulated PCCC commands are supported PLC2 Unprotected Write PLC5 Typed Write PLC5 Word Range Write PLC Typed Write An example rung used to execute a write command is shown in the following diagram VriteData writemsg EN MSG 0 i Type PLCS Word Range Write N Message Control writemsg E N R gt WhriteData ProSoft Technology Inc Page 85 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways The MESSAGE CONFIGURATION dialog box must be completed to define
141. ient s Command List Each successive word in the Command Error List is associated with the next command in the Client Command List Therefore the number of valid error values is dependent upon the number of commands defined The structure of the command list error data area which is the same for all Clients is displayed in the following table Offset Description 0 Command 1 Error Code 1 Command 2 Error Code 2 Command 3 Error Code 3 Command 4 Error Code 4 Command 5 Error Code 13 Command 14 Error Code 14 Command 15 Error Code 15 Command 16 Error Code A non zero error code for a command indicates an error To interpret the status error codes refer to MBTCP Error Codes page 108 ProSoft Technology Inc Page 107 of 218 August 12 2015 MBTCP Protocol User Manual PLX3x Series Ethernet and Serial Gateways 6 3 3 MBTCP Error Codes Standard Modbus Exception Code Errors Description Illegal function Illegal data address Illegal data value Failure in associated device Acknowledge Busy message was rejected MBTCP Client Specific Errors Code Description 33 Failed to connect to server specified in command 35 Wrong message length in the response 36 MBTCP command response timeout Same as 11 37 TCP IP connection ended before session finished Command List Entry Errors Code Description 40 Too few paramet
142. ing a user constructed command list of up to 100 entries The gateway s internal database is used as the source for write commands to the remote processors Data collected from the processors using read commands is placed in the gateway s database Data in the gateway s internal database is accessible for read and write operations by any node on the network supporting the MBAP Service Port 502 or MBTCP Service Ports 2000 2001 TCP IP protocols The MBAP protocol Port 502 is a standard implementation defined by Schneider Electric and used on their Quantum processor This open protocol is a modified version of the Modbus serial protocol The MBTCP protocol is an embedded Modbus protocol message in a TCP IP packet The gateway supports up to five active server connections on Service Ports 502 five additional active server connections on Service Port 2000 and one active Client connection 6 1 1 General Specifications Modbus TCP IP The Modbus TCP IP protocol allows multiple independent concurrent Ethernet connections The connections may be all Clients all servers or a combination of both Client and server connections 10 100 MB Ethernet Communication port Supports Enron version of Modbus protocol for floating point data transactions Configurable parameters for the client including a minimum response delay of 0 to 65535 ms and floating point support Supports five independent server connections for Service Port 502 Sup
143. into the normal user data range of the gateway s database registers 0 through 3999 It can be accessed by remote devices such as HMls or processors See Using the CommonNet Data Map page 25 3 3 1 General Gateway Status Data in Upper Memory The following table describes the contents of the gateway s general status data area Register Address Description 4000 through 4001 Program Cycle Counter 4002 through 4004 Product Code ASCII 4005 through 4009 Product Revision ASCII 4010 through 4014 Operating System Revision ASCII 4015 through 4019 OS Run Number ASCIl 3 3 2 Protocol Specific Status Data in Upper Memory The gateway also has upper memory locations for protocol specific status data Information about upper memory addresses where the gateway places status data for its protocol drivers can be found in the Diagnostics sections of the protocol chapters EIP diagnostics page 70 MBTCP diagnostics page 105 MBS diagnostics page 132 ASCII diagnostics page 163 SIE diagnostics page 181 PND diagnostics page 213 ProSoft Technology Inc Page 43 of 218 August 12 2015 PLX3x Series User Manual Ethernet and Serial Gateways Page 44 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Hardware Information Ethernet and Serial Gateways User Manual 4 Hardware Information In This Chapter Hardware Specifications eccceeeceeeseeeeeeeeeneeeeeeeeeeeeeeeeeeeneeeeeeeeeaees 46
144. ion code in the data field This defines the server condition that caused the exception The following table shows an example of a Master request and server exception response Request Response Field Name Hex Field Name Hex Function 01 Function 81 Starting Address Hi 04 Exception Code 02 Starting Address Lo Al Quantity of Outputs Hi 00 Quantity of Outputs Lo 01 In this example the Master addresses a request to server device The function code 01 is for a Read Output Status operation It requests the status of the output at address 1245 04A1 hex Note that only that one output is to be read as specified by the number of outputs field 0001 ProSoft Technology Inc Page 117 of 218 August 12 2015 MBTCP Protocol User Manual PLX3x Series Ethernet and Serial Gateways If the output address does not exist in the server device the server will return the exception response with the exception code shown 02 This specifies an illegal data address for the server Modbus Exception Codes Code Name Meaning 01 Illegal Function The function code received in the query is not an allowable action for the server This may be because the function code is only applicable to newer devices and was not implemented in the unit selected It could also indicate that the server is in the wrong state to process a request of this type for example because it is unconfigured and is being asked to
145. ions must be followed Failure to use ProSoft Technology software or approved software with our hardware products may result in injury harm or improper operating results Failure to observe this information can result in injury or equipment damage 2015 ProSoft Technology All rights reserved Important Installation Instructions Power Input and Output I O wiring must be in accordance with Class Division 2 wiring methods Article 501 4 b of the National Electrical Code NFPA 70 for installation in the U S or as specified in Section 18 1J2 of the Canadian Electrical Code for installations in Canada and in accordance with the authority having jurisdiction The following warnings must be heeded AN This Equipment is Suitable For Use in Class Division 2 Groups A B C D or Non Hazardous Locations Only WARNING Explosion Hazard Substitution of Any Components May Impair Suitability for Class Division 2 WARNING Explosion Hazard Do Not Disconnect Equipment Unless Power Has Been Switched Off Or The Area is Known To Be Non Hazardous Agency Approvals and Certifications CE Mark UL cUL Class Div II ATEX Zone 2 CB Safety RoHS PLX3x Series Contents Ethernet and Serial Gateways User Manual Contents Your Feedback Please iii inua a u ara e feecedaavenstecs bedeegte eeebact TA 2 How to Contact US v2 4 aihir oaiae aae ani fen bee evened an aaan eee hea od ete edie et Hee 2 ProSoft Technology Product Docume
146. le in the PLC 123 Oxff85 Cannot evaluate the received PDU 124 Oxff84 The PLC returned a packet with no result data 125 Oxff83 The PLC returned an error code not understood by this library 126 Oxff82 This result contains no data 127 Oxff81 Cannot work with an undefined result set 128 Oxff80 Unexpected function code in answer 129 Oxff7f PLC responds with an unknown data type 1024 OxfcOO Short packet from PLC 1025 Oxfbff Timeout when waiting for PLC response 32767 0x8001 Not allowed in current operating status 32511 0x8101 Hardware fault 32509 0x8103 Object access not allowed 32508 0x8104 Context is not supported Step7 says Function not implemented or error in telegram 32507 0x8105 Invalid address 32506 0x8106 Data type not supported Page 182 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual Decimal Hex Description 32505 0x8107 Data type not consistent 32502 0x810A Object does not exist 31999 0x8301 Insufficient CPU memory 31742 0x8402 CPU already in RUN or already in STOP 31740 0x8404 Severe error 31488 0x8500 Incorrect PDU size 30974 0x8702 Address invalid 12286 Oxd002 Step7 Variant of command is illegal 12284 0xd004 Step7 Status for this command is illegal 12127 Oxd0A1 Step7 Function is not allowed in the current protection
147. level 11775 0xd201 Block name syntax error 11774 Oxd202 Syntax error function parameter 11773 0xd203 Syntax error block type 11772 0xd204 No linked block in storage medium 11771 0xd205 Object already exists 11770 0xd206 Object already exists 11769 0xd207 Block exists in EPROM 11767 0xd209 Block does not exist could not be found 11762 Oxd20e No block present 11760 Oxd210 Block number too big 11712 0xd240 Coordination rules were violated 11711 Oxd241 Operation not permitted in current protection level 11710 0xd242 Protection violation while processing F blocks F blocks can only be processed after password input 11263 0xd401 Invalid SZL ID 11262 0xd402 Invalid SZL index 11258 0xd406 Diagnosis Info not available 11255 0xd409 Diagnosis DP error 9215 Oxdc01 Invalid BCD code or Invalid time format ProSoft Technology Inc August 12 2015 Page 183 of 218 SIE Protocol User Manual PLX3x Series Ethernet and Serial Gateways SIE Client Specific Error Codes Decimal Hex Description 33 Oxffdf Failed to connect to server specified in command 34 Oxffde Failed to create a socket 36 Oxffdc SIE command response timeout Same as 11 37 Oxffdb TCP IP connection ended before session finished Command List Entry Error Codes Decimal Hex Description 40 Oxffd8 Too few parameters 41 Oxffd7 Invalid enable code 42 Oxffd6 Internal address gt maximum address
148. list Error codes available on an individual command basis In addition a slave status list is maintained per active Modbus Master port Configurable polling of command list including continuous and on change of data Modbus Slave Node address 1 to 247 software selectable Status Data Error codes counters and port status available per configured slave port starting at memory register 4400 ProSoft Technology Inc August 12 2015 Page 123 of 218 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways 7 1 3 Gateway Internal Database The internal gateway database is central to the functionality of the gateway This database is shared between all the ports on the gateway permitting data from devices on one communication network port to be viewed and controlled by devices on another port or network Modbus PLX30 Slave Communication Driver Other PLX30 Gateways Protocol Driver Intemal Database Modbus Up to 4000 regs Master Driver Modbus Port Access to Database The Multiple slave support in the gateway permits remote Master applications HMI software Quantum processors etc to read from and write to the gateway s database When configured as a slave the internal database of the gateway is used as the source for read requests and the destination for write requests from remote Masters Access to the database is controlled by the command type received i
149. logy com Languages spoken include Portuguese English 11 2 Warranty Information For complete details regarding ProSoft Technology s TERMS amp CONDITIONS OF SALE WARRANTY SUPPORT SERVICE AND RETURN MATERIAL AUTHORIZATION INSTRUCTIONS please see the documents on the Product DVD or at www prosoft technology legal Documentation is subject to change without notice Page 216 of 218 ProSoft Technology Inc August 12 2015 PLX30 Series Ethernet and Serial Gateways Index User Manual Index Modbus Port X Commands 126 0 00 Return Query Data 115 145 4 4101 Series LEDs 35 A ARP Timeout 101 ASCII Configuration 161 ASCII Functional Overview 152 ASCII Port x 161 ASCII Protocol 151 B Basic Command Set Functions 55 Bit Input Offset 99 128 BT 84 C CIP Data Table Operations 89 CIP Data Table Read 90 CIP Data Table Write 89 Client Command Errors 181 Command Error Delay 101 Command List Entry Errors 108 184 Command List Error Codes 138 Command List Overview 167 Commands Supported by the Module 168 Configuring a Port for Transmit Only Mode 157 Configuring a Port for Transmit Receive Mode 158 Configuring an IP Address 27 Configuring the Drivers 21 Configuring the Port for R eceive Only Mode 156 Configuring Your Gateway 15 Connecting Power to the PLX30 Gateway 13 Connection Timeout 99 Contacting Technical Support 215 Cont
150. lot parameter When addressing a processor in a ControlLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 502 510 511 Specifies the function code to be used in the command 502 Protected Typed Read 510 Protected Typed Write 511 Protected Typed Write w Mask Page 62 of 218 ProSoft Technology Inc August 12 2015 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways Parameter Value Description File Type Binary Specifies the file type to be associated with the Counter command Timer Control Integer Float ASCII String Status File Number 1 Specifies the SLC 500 file number to be associated with the command If a value of 1 is entered for the parameter the field will not be used in the command and the default file will be used Element Specifies the element in the file where the command Number will start Sub Element Specifies the sub element to be used with the command Refer to the AB documentation for a list of valid sub element codes Comment This field can be used to give a 32 character comment to the command ProSoft Technology Inc August 12 2015 Page 63 of 218 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways Class 3 Client UClient x Commands PLC5 Binary Parameter Value Description Enable Enable Specifies if the command should be exec
151. lso clear the bit or bits in the internal database after the write command is built To use this feature configure the commands as disabled enable code 0 This Command Control feature can be disabled by setting this parameter to a value of 0 to 1 ProSoft Technology Inc August 12 2015 Page 127 of 218 MBS Protocol User Manual PLX3x Series Ethernet and Serial Gateways Slave Configuration Parameters Parameter Value Description Minimum Response Delay 0 to 65535 Specifies the number of milliseconds to wait before responding to a command received on the port from a remote Master This delay is sometimes required to accommodate slower Master devices Internal Slave ID 0 to 247 Defines the virtual Modbus slave address for the port Any commands received on the slave port addressed to the node address entered here will be processed by the gateway Each slave device on the network must be assigned a unique address Bit Input Offset 0 to 3998 Specifies the internal database address to use as the zero address or starting point for binary Input Status data Input Status data is read only data requested by Modbus Function Code 2 commands Read Input Status For example if this parameter is set to 150 and a Function Code 2 command is received requesting Input Status address 0 virtual Modbus Address 10001 or 100001 the data returned in the response will be the bit value at register
152. m Select All Deselect All Page 200 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual 8 Select the file and click the Install button The system informs you when the install is complete Install GSD Files Install GSD File 13 4986 Installation was completed successfully 9 Click OK 10 From the HW Config page select a rack and a power supply Ao ii afi i 7 E 2 FEH 3 ProSoft Technology Inc Page 201 of 218 August 12 2015 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways 11 Drag and drop the processor to be used in the network The example uses 315 2 PN DP Suna O OUNO i Ponk pean SNN arain MORE ani i Comain a T O Cortroter RTART PROPINET itesiace and 2 PROPNET CBA PROPINET CHA Prony TOPAP taragot poiocot combined HW Config SIMATK 300 1 Configuration Profinet Sampie Raton CR remt PLC Wew Cptons Window hep PURS PNP lt E57 ns G10080 D s7 nanho D as niama vat TETELA SAMAD sI ounez TESA x e050 A amp 0 05 00 invtructora PROPINE 1 connector Communication POAC T 10 Contle supports TART PROPINE wtedace and 2 PROFINET CBA PROFINET CBA Prony TCP IP tansport pistocok combined g Page 202 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Et
153. ment After the A character is received on the port the message timeout is started The characters ABCDE will be sent to the controller in one block The characters FG will follow in the second block one second later Intercharacter delay timeout used Settings Intercharacter delay timeout 300 mSec Rdelay 300 Data Received on port TIME _ gt 0 1000 mSec 2000 mSec A B C D E F lt gt GuH gt 300mSec time gap Comment After each character is received the intercharacter delay timer is reset The characters ABCDEF will be sent to the controller in one block because the delay timer expires The characters GH will follow in the second block when the next time gap is recognized Packet size limit used Settings Packet size 4 RPacketLen 4 Data Received on port ABcCOD EF GHI J Comment The first block sent to the controller will contain the characters ABCD and the second block will contain the characters EFGH The characters IJ will not be sent until two more characters are received on the port Page 160 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 2 ASCII Configuration In order for the ASCII driver to function a minimum amount of configuration data must be transferred to the gateway from the gateway s file system Care must be taken in constructing the gateway configuration parameters If the gateway does
154. meter in the configuration file Then each time a command in the list is scanned that has the address of a suspended slave the delay counter value for that slave will be decremented When the value reaches zero the slave state will be set to 1 This will re enable polling of the slave The first word in the defined register locations contains the status code for slave node address 1 Each successive word in the list is associated with the next node in sequence up to slave node address 255 Note The values in the slave List Status tables are initialized to zero 0 at power up cold boot and during warm boot ProSoft Technology Inc Page 137 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways 7 3 3 Error Status Codes These are error codes that are part of the Modbus protocol or are extended codes unique to this gateway Modbus Error Codes These error codes are generated or returned on both the Master and slave ports These codes are the standard Modbus errors page 147 Code Description Illegal Function Illegal Data Address Illegal Data Value Failure in Associated Device Acknowledge Busy Rejected Message JAJAJ Module Communication Error Codes These gateway specific error codes are also returned from the command polling process and stored in the Command Error List memory area Code Description 1 CTS modem control line not se
155. mmands The server is engaged in processing a long duration program command The Master should retransmit the message later when the server is free 08 Memory Parity Error Specialized use in conjunction with function codes 20 and 21 and reference type 6 to indicate that the extended file area failed to pass a consistency check The server attempted to read record file but detected a parity error in the memory The Master can retry the request but service may be required on the server device 0a Gateway Path Unavailable Specialized use in conjunction with gateways indicates that the gateway was unable to allocate an internal communication path from the input port to the output port for processing the request Usually means that the gateway is misconfigured or overloaded Ob Gateway Target Device Failed To Respond Specialized use in conjunction with gateways indicates that no response was obtained from the target device Usually means that the device is not present on the network Page 118 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual Force Multiple Coils Function Code 15 Query This message forces each coil in a consecutive block of coils to a desired ON or OFF state Any coil that exists within the controller can be forced to either state ON or OFF However because the controller is actively scanning unless the coils
156. mple read input status request to read inputs 10197 to 10218 from server number 11 Adr Func DataStartPtHi Data StartPtLo Data of Pts Hi Data of Pts Lo Error Check Field 11 02 00 C4 00 16 CRC Page 140 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual Response An example response to Read Input Status is as shown in Figure C4 The data is packed one bit for each input The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each input 1 ON O OFF The lower order bit of the first character contains the addressed input and the remainder follows For input quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as a quantity of RTU characters that is the number is the same whether RTU or ASCII is used Because the server interface device is serviced at the end of a controller s scan data will reflect input status at the end of the scan Some servers will limit the quantity of inputs provided each scan thus for large coil quantities multiple PC transactions must be made using coil status for sequential scans Adr Func Byte Data Discrete Input Data Discrete Input Data Discrete Input Error Check Field Count 10197 to 10204 10205 to 10212 102
157. n the incoming message from the remote Master The following table defines the relationship of the gateway s internal database to the addresses required in the incoming Modbus TCP IP requests Database Address Modbus Address 0 40001 five digit addressing or 400001 six digit addressing 1000 41001 or 410001 2000 42001 or 420001 3000 43001 or 430001 3999 44000 or 440000 Page 124 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual 7 2 MBS Configuration 7 2 1 MBS Port x The Modbus Port x sections of the PCB Tree Window where x stands for 1 2 3 or 4 set the Modbus Master and slave port communication parameters and specify the protocol specific settings Configuration Parameters Common to Master and Slave Parameter Value Description Enabled YES or NO Specifies if the port will be used If the parameter is set to No the port will not be used If the parameter is set to Yes the port will be used RS Interface RS 232 Specifies the electrical interface for the ports RS 485 RS 422 Type MASTER Specifies if the port will emulate a Master or slave device or Master The gateway initiates Modbus commands to one or more SLAVE Modbus devices Slave The gateway responds to Modbus commands initiated by a Modbus master Float Flag YES or NO Specifies if the floating point data access functionality is to be implemented If the fl
158. n the Address Type is set to DB Address Address of the data in the Siemens device For Read or Write operations using the INT DINT REAL or BYTE Data Types the address is a byte address For Read or Write operations using the BOOL Data Type the address is a bit address Please see below for notes on addressing Page 176 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual Notes on Addressing in S7 Processors 7 300 S7 1200 Processor Byte Address in Data Block DB1 DBB1 DB1 DBB3 2 0000_0110 2 0000_0000 2 0110_0001 2 0011_0110 2 1100_0110 DB1 DBBO DB1 DBB2 DB1 DBB4 Word Address in Data Block DB1 DBW1 DB1 DBW3 2 0000_0110 2 0000 0000 2 01 10_0004 2 001 1_0110 2 1100_0110 _ DB1 DBWO DB1 DBW2 The gray area above represents the byte memory locations being overlapped when word address is used consecutively DB1 DBW0 DB1 DBW1 DB1 DBW2 etc lf DB1 DBWO is used as the first address in the Siemens processor the next word address that can be used without overwriting the data would be DB1 DBW2 Double Word Address in Data Block DB1 DBD1 SS eee 2 0000_0110 2 0000 0000 240110 0001 2 0011_0110 2 1100_0110 DB1 DBDO The gray area above represents the byte memory locations being overlapped when double word address is used consecutively DB1 DBD0 DB1 DBD1 DB1 DBD2 etc ProSoft Technology Inc Page 177 of 218 August 12
159. nc August 12 2015 PLX3x Series SIE Protocol Ethernet and Serial Gateways User Manual Output Address Type Function Data Type Max Reg Cnt Max Reg Cnt Output READ BOOL 1 Write BOOL 1 READ BYTE 16 Write BYTE 16 READ DINT 4 Write DINT 4 READ REAL 4 Write REAL 4 READ INT 8 Write INT 8 Input Address Type Function Data Type Max Reg Cnt Max Reg Cnt Input READ BOOL 1 Write BOOL 1 READ BYTE 16 Write BYTE 16 READ DINT 4 Write DINT 4 READ REAL 4 Write REAL 4 READ INT 8 Write INT 8 ProSoft Technology Inc Papino August 12 2015 PLX3x Series Ethernet and Serial Gateways PND Protocol User Manual 10 PND Protocol In This Chapter 3 Loca K ea PND Functional OVerview cesceeeeeseeeeeeeeeseeeeeneeeeeeeeeneeeeeeeeeaes 194 PND Configuration ccissccists cic cession dete ce op eian 194 Step 7 Configuration ccescceescesesseeeseeeeeeeeeseeseeeseeeseeeeseseeeeneees 198 PND Input Output Error Status 0 0 0 eee eee eee ree ete eee teeeees 213 This chapter contains information specific to the PLX8x series gateway PND protocol driver ProSoft Technology Inc August 12 2015 Page 193 of 218 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways 10 1 PND Functional Overview PROFINET is the communication standard for automation of PROFIBUS and PROFINET Interna
160. nection is used when the gateway is acting as a Client Master initiating message Instructions to the server slave devices The PLX3x EIP protocol supports one Unconnected Client Connection Unconnected messaging is a type of Ethernet IP explicit messaging that uses TCP IP implementation Certain devices such as the AB Power Monitor 3000 series B support unconnected messaging Check your device documentation for further information about its Ethernet IP implementation Class 3 Client UClient x This section specifies the configuration for the EIP Client Master device on the network port Parameter Value Description Minimum 0 to 65535 This parameter specifies the number of milliseconds to wait Command milliseconds between the initial issuances of a command This parameter can Delay be used to delay all commands sent to servers to avoid flooding commands on the network This parameter does not affect retries of acommand as they will be issued when failure is recognized Response 0 to 65535 This parameter specifies the amount of time in milliseconds that Timeout milliseconds a Client will wait before re transmitting a command if no response is received from the addressed server The value to use depends on the type of communication network used and the expected response time of the slowest device connected to the network Retry Count 0 to 10 This parameter specifies the number of times a command will be retried if it fails
161. ng table is a sample read output status request to read coils 0020 to 0056 from server device number 11 Adr Func DataStartPtHi Data StartPtLo Data OfPtsHo Data OfPtsLo Error Check Field 11 01 00 13 00 25 CRC Response An example response to Read Coil Status is as shown in Figure C2 The data is packed one bit for each coil The response includes the server address function code quantity of data characters the data characters and error checking Data will be packed with one bit for each coil 1 ON 0 OFF The low order bit of the first character contains the addressed coil and the remainder follows For coil quantities that are not even multiples of eight the last characters will be filled in with zeros at high order end The quantity of data characters is always specified as quantity of RTU characters that is the number is the same whether RTU or ASCII is used ProSoft Technology Inc Page 109 of 218 August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Because the server interface device is serviced at the end of a controller s scan data will reflect coil status at the end of the scan Some servers will limit the quantity of coils provided each scan thus for large coil quantities multiple PC transactions must be made using coil status from sequential scans Adr Func Byte Data Coil Data Coil Data Coil Data Coil Data Coil Error Count Status 20to Status 28to Status 36to Statu
162. nitoring enabled Signal Signal Common Common A Note If the port is configured to use RTS CTS handshaking then a jumper is required between the RTS and the CTS line on the gateway connection 4 2 3 RS 232 DTE to DCE Modem Connection This type of connection is required between the gateway and a modem or other communication device RS 232 Application Port Cable Modem Connection DB 9 Male RS 232 Device Signal Signal Common Common DTR DTR For most modem applications RTS CTS handshaking should be enabled in the port configuration ProSoft Technology Inc Page 49 of 218 August 12 2015 Hardware Information PLX3x Series User Manual Ethernet and Serial Gateways 4 2 44 RS 422 Interface Connections The following illustration applies when the RS 422 interface is selected RS 422 Application Port Cable DB 9 Male RS 422 Device TxD ro TxD ro Signal 5 Signal Common Common RxD TxD RxD s _ TxD 4 2 5 RS 485 Interface Connections The following illustration applies when the RS 485 interface is selected RS 485 Application Port Cable DB 9 Male RS 485 Device TxD RxD 1 H TxD RxD TxD RxD s TxD RxD Signal 5 Signal Common Common A NOTE This type of connection is commonly called a RS 485 half duplex 2 wire connection If you have RS 485 4 wire full duplex devices they can be connected to the gateway s serial ports by wiring together the TxD and RxD from the two pins of
163. not function as expected examine the configuration parameters using PCB Diagnostics After setting up the configuration in PCB download it to the gateway 8 2 1 ASCII Port x Parameter Value Description Enabled YES or NO Specifies if the port will be used If the parameter is set to No the port will not be used If the parameter is set to Yes the port will be used supporting the ASCII protocol RS Interface RS 232 Specifies the electrical interface for the ports RS 485 RS 422 Rx DB Start 1 Specifies the starting location in the internal database or where the received data will be stored The buffer holds 130 0 to 3896 words however the first three words of the data area define the sequence number last write byte count and the Rx message length If the parameter is set to 1 the port will not receive data Refer to Receive Data page 154 for detailed information on Rx data structure Tx DB Start il This parameter specifies the starting location in the internal or database where the transmit data will be stored The buffer 0 to 3896 holds 130 words however the first three words of the data area define the sequence number last write byte count and the Tx message length If the parameter is set to 1 the port will not transmit data Refer to Transmit Data page 155 for detailed information on Tx data structure Baud Rate Various Specifies the baud rate to be used on the port Parity None Parity is
164. ns yOMJaN Jau Class Connection Type Number of Connections Class 1 VO Depends on the gateway model PLX31 EIP MBTCP 2 connections PLX31 EIP MBS 2 connections PLX31 EIP MBS4 8 connections PLX31 EIP ASCIl 1 connection PLX31 EIP ASCII4 4 connections PLX31 EIP SIE 2 connections Class 3 Connected Client 2 Unconnected Client 1 Server 5 Page 52 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual 5 1 1 EtherNet IP Client In Client mode the gateway controls the read write data transfer between the gateway and other EtherNet IP devices Number of Clients Supported Connected Clients 2 Unconnected Clients 1 Command List Support for 100 commands per Client each configurable for command type IP address register to from addressing and word bit count Polling of Command List Other Configurable Parameters User configurable polling of commands including disabled continuous and on change of data write only Number of Commands up to 100 per Client Min Command Delay Response Timeout Retry Count Command Error Pointer ProSoft Technology Inc August 12 2015 Page 53 of 218 EIP Protocol User Manual PLX3x Series Ethernet and Serial Gateways 5 2 EIP Configuration 5 2 1 EIP Class 3 Server Connection The EIP Class 3 Server Connection is used when the gateway is acting as a
165. nse the server may return data or statistics in the data field any information that was requested in the request In an exception response the server returns an exception code in the data field This defines the server condition that caused the exception The following table shows an example of a Master request and server exception response Request Response Field Name Hex Field Name Hex Function 01 Function 81 Starting Address Hi 04 Exception Code 02 Starting Address Lo Al Quantity of Outputs Hi 00 Quantity of Outputs Lo 01 In this example the Master addresses a request to server device The function code 01 is for a Read Output Status operation It requests the status of the output at address 1245 04A1 hex Note that only that one output is to be read as specified by the number of outputs field 0001 ProSoft Technology Inc Page 147 of 218 August 12 2015 MBS Protocol User Manual PLX3x Series Ethernet and Serial Gateways If the output address does not exist in the server device the server will return the exception response with the exception code shown 02 This specifies an illegal data address for the server Modbus Exception Codes Code Name Meaning 01 Illegal Function The function code received in the query is not an allowable action for the server This may be because the function code is only applicable to newer devices and was not implemented in the uni
166. nt plant down issues Detailed contact information for all our worldwide locations is available on the following page ahoOND ProSoft Technology Inc Page 215 of 218 August 12 2015 Support Service and Warranty PLX3x Series User Manual Ethernet and Serial Gateways Internet Web Site www prosoft technology com support E mail address support prosoft technology com Asia Pacific Tel 603 7724 2080 E mail asiaopc prosoft technology com location in Malaysia Languages spoken include Chinese English Asia Pacific Tel 86 21 5187 7337 x888 E mail asiapc prosoft technology com location in China Languages spoken include Chinese English Europe Tel 33 0 5 34 36 87 20 location in Toulouse E mail support EMEA prosoft technology com France Languages spoken include French English Europe Tel 971 4 214 6911 location in Dubai UAE E mail mea prosoft technology com Languages spoken include English Hindi North America Tel 1 661 716 5100 location in California E mail support prosoft technology com Languages spoken include English Spanish Latin America Tel 1 281 2989109 Oficina Regional E Mail latinam prosoft technology com Languages spoken include Spanish English Latin America Tel 52 222 3 99 6565 location in Puebla Mexico E mail soporte prosoft technology com Languages spoken include Spanish Brasil Tel 55 11 5083 3776 location in Sao Paulo E mail brasil prosoft techno
167. ntation ccecceecceeeeeeeeeeeesaeecaeecaaecaaecaeseaeceaeseaeeseeeeeneeeneees 2 Literature Content Disclaimer cccccccceceeeeeeeeeeee cee eeeeaeeeeeeeceaeeecaaeeeeaeeseaeeecaaeeseaaeseeeeeseaeeesaeeeeaaeeeaes 2 Important Installation Instructions eee cece ee ee enneeeeeeeaeeeeeeaaeeeeeeaaeeeseeaaeeeeeeaaeeeseeaaeeeeeeaaeeeeeeaeeeeseaaes 3 Agency Approvals and Certifications ccccceccceceeeeeeeeeeeeeeeeeaeeeseaeeeeneeseeeeesaaeeesaaeseeneeseaeeesaeeeeaeeeneees 3 1 Start Here 9 1 1 System Requirements ccccccccceceeeceeeeeeeeeeeceeeeecaeeeeaeeseeeeescaeeeeeaeseeeeeseeeesiaeeseaeeeeaes 9 1 2 Package Contents oerrinne ieena iaeia ada aa aasde eat leap gets bate anae aae 10 1 3 Mounting the Gateway on a DIN rail sseeeeeeeeeeeeeseseiesississrinsrinsrrnsrnnnrnnssnnnne 11 1 4 J mper Settings riiai eena iae ea aa haves Degeske rade alpaidd airaa iae 12 1 5 SD Galdara rrr cer eeeeer ener a a o teceecc rere E E E ES 12 1 6 Connecting Power to the PLX3x Gateway eesssssesssresirssirssrrssrnssrnssrrssrrssrnesrn 13 2 Configuring Your Gateway 15 2 1 Installing ProSoft Configuration Builder Software ccccceseeeeeeeeeeeeeeseeeeeneeteees 16 2 2 Using the Online Helpi aneas na a a a OA ATEOA ATENTE 17 2 3 Setting Up the Projectar airne enr ae ea a a R E E A 17 2 4 Renaming PCB Objects c ccccccceeeceeeeeeeeeeeeeeaeeeeneeeeeeeeseaeeseaaeseeeeeseaeeesnaeeseaeeeeaes 20 2 5 Con
168. number to zero ProSoft Technology Inc Page 79 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways SLC File Types This section contains information specific to the SLC and MicroLogix processor based family when used with the PCCC command set The SLC and MicroLogix processor commands support a file type field entered as a single character to denote the data table to interface with in the command The following table defines the relationship of the file types accepted by the Gateway and the SLC file types File Type Description Status Bit me SS w Comer Control Integer Floating point String ASCII PINITI Z DlO AIW n The File Type Command Code is the ASCII character code value of the File Type letter This is the value to enter into the File Type parameter of the PCCC Command configurations in the data tables in the ladder logic Additionally the SLC specific functions 502 510 and 511 support a sub element field This field selects a sub element field in a complex data table For example to obtain the current accumulated value for a counter or timer the sub element field should be set to 2 Page 80 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual 5 4 2 PLC5 Processor Specifics Messaging from a PLC5 The gateway can be used to receive messages from a PLC5 containing an E
169. oat flag is set to YES Modbus functions 3 6 and 16 will interpret floating point values for registers as specified by the two following parameters Float Start 0 to 32767 Specifies the first register of floating point data All requests with register values greater than or equal to this value will be considered floating point data requests This parameter is only used if the Float Flag is enabled For example if a value of 7000 is entered all requests for registers 7000 and above will be considered as floating point data Float Offset 0 to 3998 Specifies the start register for floating point data in the internal database This parameter is used only if the Float Flag is enabled For example if the Float Offset value is set to 3000 and the float start parameter is set to 7000 data requests for register 7000 will use the internal Modbus register 3000 Protocol RTU or Specifies the Modbus protocol version to be used on the port ASCII Baud Rate Various Specifies the baud rate to be used on the port Parity None Parity is a simple error checking algorithm used in serial Odd communication This parameter specifies the type of parity checking Even to use All devices communicating through this port must use the same parity setting Data Bits 7ors Specifies the number of data bits for each word used by the protocol All devices communicating through this port must use the same number of data bits Stop Bits 1or2 Stop
170. ocol PLX3x Series User Manual Ethernet and Serial Gateways 9 1 SIE Functional Overview The PLX3x Siemens Industrial Ethernet SIE protocol can be used to interface easily with multiple Siemens Industrial Ethernet server compatible instruments and devices The SIE protocol improves performance when controlling multiple servers on a Siemens Industrial Ethernet network by supporting up to 20 Clients The gateway s Clients interface with processors and other server based devices on the SIE network using a user constructed command list of up to 16 entries per Client The gateway s internal database is used as the source for write commands to the remote processors Data collected from the processors using read commands is placed in the gateway s database 9 1 1 General Specifications e 10 100 MB Ethernet Communication port e Actively reads data from and writes data to Siemens Industrial Ethernet devices using Siemens Industrial Ethernet protocol e Siemens Industrial Ethernet data types overlap in the gateway s memory database so the same data can be conveniently read or written as bit level or register level data e Offers 20 Client connections with up to 16 commands each to talk to multiple servers e Configurable floating point data movement is supported e Status and error information generated by the gateway 9 1 2 Gateway Internal Database Central to the functionality of the gateway is the internal database This databas
171. of RAM recommended e 100 Mbytes of free hard disk space or more based on application requirements e 256 color VGA graphics adapter 800 x 600 minimum resolution True Color 1024 x 768 recommended e DVD drive Supported operating systems e Microsoft Windows 7 32 bit e Microsoft Windows XP Professional with Service Pack 1 or 2 ProSoft Technology Inc August 12 2015 Page 9 of 218 Start Here User Manual PLX3x Series Ethernet and Serial Gateways 1 2 Package Contents The following components are included with your gateway and are all required for installation and configuration The quantity of cables provided depends on the specific protocol combination being used Important Before beginning the installation please verify that all of the following items are present Gateway with Ethernet Port Qty Part Name Part Number Part Description 1 Ethernet cable RL CBL025 5 straight through cable 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 Power connector J180 PLX3x gateway power connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway Gateway with Two Ethernet Ports Qty Part Name Part Number Part Description 1 Ethernet cable RL CBL025 5 straight through cable 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 Power connector J180 PLX3x gateway powe
172. ond between the issuances of a command If the user specifies a value of 10 for the parameter the command will be executed no more frequently than every 1 second ProSoft Technology Inc Page 167 of 218 August 12 2015 SIE Protocol PLX3x Series User Manual Ethernet and Serial Gateways Commands Supported by the Gateway The format of each command in the list depends on the Siemens Industrial Ethernet Function Code being executed The type of functions that will be supported will also depend on the server device and what it can support Below are examples of S7 200 S7 300 and S7 1200 functions that are supported by the gateway S7 300 Data Block Address Type Function Data Type DB READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIME Write TIME READ COUNT Write COUNT Timer Address Type Function Data Type Timer READ TIME Counter Address Type Function Data Type Counter READ Count Page 168 of 218 ProSoft Technology Inc August 12 2015 SIE Protocol User Manual PLX3x Series Ethernet and Serial Gateways Flag Address Type Function Data Type Flag READ BOOL Write BOOL READ BYTE Write BYTE READ DINT Write DINT READ REAL Write REAL READ INT Write INT READ TIM
173. onse to a preset single register request is to re transmit the query message after the register has been altered Adr Func DataRegHi DataRegLo DatalnputRegHi DatalnputRegLo Error Check Field 11 06 00 01 00 03 CRC Diagnostics Function Code 08 MODBUS function code 08 provides a series of tests for checking the communication system between a Client device and a server or for checking various internal error conditions within a server The function uses a two byte sub function code field in the query to define the type of test to be performed The server echoes both the function code and sub function code in a normal response Some of the diagnostics cause data to be returned from the remote device in the data field of a normal response In general issuing a diagnostic function to a remote device does not affect the running of the user program in the remote device Device memory bit and register data addresses are not accessed by the diagnostics However certain functions can optionally reset error counters in some remote devices A server device can however be forced into Listen Only Mode in which it will monitor the messages on the communications system but not respond to them This can affect the outcome of your application program if it depends upon any further exchange of data with the remote device Generally the mode is forced to remove a malfunctioning remote device from the communications system Sub function Codes Sup
174. ontains information specific to the PLC 5 processor with relation to the PCCC command set The commands specific to the PLC 5 processor contain a sub element code field This field selects a sub element field in a complex data table For example to obtain the current accumulated value for a counter or timer the sub element field should be set to 2 The tables below show the sub element codes for PLC 5 complex data tables Timer Counter Code Description 0 Control 1 Preset 2 Accumulated Control Code Description 0 Control 1 Length 2 Position PD Code Description 0 Control 2 SP 4 Kp 6 Ki 8 Kd 26 PV All PD values are floating point values so they are two words long BT Code Description 0 Control 1 RLEN 2 DLEN 3 Data file 4 Element 5 Rack Grp Slot MG Code Description 0 Control 1 Error 2 RLEN 3 DLEN Page 84 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual 5 4 3 ControlLogix and CompactLogix Processor Specifics In order to exchange data between a Control CompactLogix processor and the gateway the MSG instruction is used There are two basic methods of data transfer supported by the gateway when using the MSG instruction Encapsulated PCCC messages and CIP Data Table messages Either method can be used Encapsulated PCCC Messages T
175. ontroller can be forced to either state ON or OFF However because the controller is actively scanning unless the coil is disabled the controller can also alter the state of the coil Coils are numbered from zero coil 0001 zero coil 0002 one and so on The data value 65 280 FFOO HEX will set the coil ON and the value zero will turn it OFF all other values are illegal and will not affect that coil The use of server address 00 Broadcast Mode will force all attached servers to modify the desired coil A Note Functions 5 6 15 and 16 are the only messages that will be recognized as valid for broadcast The example below is a request to server number 11 to turn ON coil 0173 Adr Func DataCoil Hi Data Coil Lo Data On offIind Data Error Check Field 11 05 00 AC FF 00 CRC ProSoft Technology Inc Page 143 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Response The normal response to the Command Request is to re transmit the message as received after the coil state has been altered Adr Func Data Coil Hi Data Coil Lo Data On Off Data Error Check Field 11 05 00 AC FF 00 CRC The forcing of a coil via MODBUS function 5 will be accomplished regardless of whether the addressed coil is disabled or not In ProSoft products the coil is only affected if the necessary ladder logic is implemented A Note The Modbus protocol does not include standard functions
176. ot 1 a Select the number of input bytes In this example select Input 32 Byte from the drop down list ProSoft Technology Inc Page 195 of 218 August 12 2015 PND Protocol PLX3x Series User Manual Ethernet and Serial Gateways Ct car roo wcou wa TN ie Slot 1 No Module Input 16 Byte Output 16 Byte Input 256 Byte Click to select Select Input Bytes from drop down 8 Select Slot 2 9 Select the number of output bytes In this example select Output 32 Byte from the drop down list Untitled ProSoft Configuration Builder File View Project Tools Help a Default Project Default Location PND MODULE MAP All Tags Good f PLX31 E1P PND a Comment Hafa EIP Class 3 Server a EIP Class 1 Connection aa EIP Class 3 Client 0 lafa EIP Class 3 Client 1 ata EIP Class 3 UClient 0 af PND LAB PND El PND MODULE MAP _ cf PND MODULE MA a CommonNet A Ethernet Configuratio i A A A E Range for Module Input 1 1024 bytes Range for Module Output 1 1024 bytes Page 196 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways PND Protocol User Manual Important The PND module map is very important because the values entered here must match the values that are entered in the Siemens processor in order for them to communicate The total combined Input bytes and total combin
177. owing topics describe these modes and describe the flow of data between the pieces of hardware ASCII device and PLX3x Gateway These topics describe the three possible types of communication devices that can be attached to application ports receive only transmit only and transmit receive mode Receive Only Mode A port on the gateway configured to function in receive only mode is set up to only receive data from some sort of ASCII device In this mode the PLX3x gateway will never transmit data back to the ASCII device Any data received from the ASCII device is passed from the receiver driver Rx Driver to the PLX3x Gateway s internal database Rx Data The following illustration shows the flow of data on a port configured for receive only mode Internal Database To external device ASCII Device Configuring a Port for Receive Only Mode In order to set a port for Receive Only mode ensure that the Rx DB Start parameter in the configuration file contains the starting location of where the data will be stored The Tx DB Start parameter must contain a value of 1 This value indicates that the port will not transmit any data Page 156 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual Transmit Only Mode A port on the gateway configured to function in transmit only mode is set up to only transmit data from the PLX3x gateway s internal database recei
178. parameter to READ The gateway supports a TARGET DEVICE parameter value of 500CPU or PLCS In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box 7a MSG olx This Controller p Control Bis Communication Command PLC5 Read Ignore if timed out TO 0 Data Table Address N10 0 To be retried NA 0 Size in Elements Awaiting Execution EW 0 Channet Continuous Run C0 o Eror ER 0 m Target Device Message done DN Message Timeout Message Transmitting ST 0 Data Table Address Message Enabled EN 0 Waiting for Queue Space o Local Remote MultiHop p Error Error Code Hex 0 No errors Error Description a The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages The MULTIHOP option must be set to YES Fill in the MULTIHOP tab portion of the dialog box as shown in the following illustration 72 MSG N11 0 51 Elements ioj xi Ins Add Hop Del Remove Hop From Device FromPort__ To Address Type To Address This SLC500 T 1756 ENet I P st 192 168 0 75 ControlLogix Backplane N A 1756 Backplane Slot dec Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot
179. port team click the Email Log File button For this to work Microsoft Outlook must be installed on your PC 5 If you do multiple sequential captures PCB will append data from a new capture to the end of the previously captured data If you want previous data to be cleared from the log file each time you start a new capture click the Clear Data button Page 40 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Diagnostics and Troubleshooting Ethernet and Serial Gateways User Manual 3 2 3 Using the Data Analyzer Serial Protocols Only The Data Analyzer is an extremely valuable troubleshooting tool available in PCB It allows you to see the data packets entering and leaving the serial ports on the gateway You can also capture this data to a log file Note The PCB Data Analyzer is for serial ports only To analyze data traffic on an Ethernet port we recommend using a network protocol analyzer available on the Internet such as Wireshark To use the Data Analyzer 1 Open the Diagnostics window in PCB 2 On the toolbar at the top of the window click the Setup Data Analyzer button 3 Inthe Data Analyzer Setup dialog box specify the time tick interval the serial port number and whether the data packet contents should be displayed in hexadecimal number or ASCII character format Click OK Note The time tick is a symbol _TT_ displayed on the Data Analyzer screen that allows you to estimate time interv
180. ported Only Sub function 00 is supported by the gateway 00 Return Query Data The data passed in the request data field is to be returned looped back in the response The entire response message should be identical to the request Sub function Data Field Request Data Field Response 00 00 Any Echo Request Data ProSoft Technology Inc Page 145 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Example and State Diagram Here is an example of a request to remote device to Return Query Data This uses a sub function code of zero 00 00 hex in the two byte field The data to be returned is sent in the two byte data field A5 37 hex Request Response Field Name Hex Field Name Hex Function 08 Function 08 Sub function Hi 00 Sub function Hi 00 Sub function Lo 00 Sub function Lo 00 Data Hi A5 Data Hi A5 Data Lo 37 Data Lo 27 The data fields in responses to other kinds of queries could contain error counts or other data requested by the sub function code MB Server Sends mb_exception_rsp Page 146 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual Modbus Exception Responses When a Modbus Master sends a request to a server device it expects a normal response One of four possible events can occur from the Master s query If the server device receives the request without a comm
181. ports five independent server connections for Service Port 2000 All data mapping begins at Modbus register 400001 protocol base 0 Error codes network error counters and port status data available in user data memory ee o Modbus TCP IP Client Actively reads data from and writes data to Modbus TCP IP devices using MBAP Upto 10 Client connections with multiple commands to talk to multiple servers Page 94 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual Modbus TCP IP Server The server driver accepts incoming connections on Service Port 502 for Clients using Modbus TCP IP MBAP messages and connections on Service Port 2000 or other Service Ports for Clients using Encapsulated Modbus messages Supports multiple independent server connections for any combination of Service Port 502 MBAP and Service Port 2000 Encapsulated Up to 20 servers are supported Modbus Commands 1 Read Coil Status 15 Force Write Multiple Coils Supported 2 Read Input Status 16 Preset Write Multiple Client and Server 3 Read Holding Registers Holding Registers 4 Read Input Registers 22 Mask Write Holding 5 Force Write Single Coil Register Slave Only 6 Preset Write Single 23 Read Write Holding Holding Register Registers Slave Only Configurable Gateway IP Address Parameters PLC Read Start Register MW Client and Server PLC Write Sta
182. put Swap Error 2 Output Swap Error 18 Get Network Data Adapter 19 Get IP Address Error 20 Get NetMask Error 21 Get Gateway Error 22 Get MAC Address Error 23 PROFINET Mapping Error ProSoft Technology Inc Page 213 of 218 August 12 2015 PLX3x Series User Manual Ethernet and Serial Gateways Page 214 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Support Service and Warranty Ethernet and Serial Gateways User Manual 11 Support Service and Warranty In This Chapter 2 Contacting Technical SUPPOTFt eeeeeeeeeeteeeeeeeeeneeeeeeeteneeeeeeetene 215 Warranty Information ee eeeneeeeeeneeeeenneeeeeeneeeeeenneeeeenaeeeeneeeeeee 216 11 1 Contacting Technical Support ProSoft Technology Inc ProSoft is committed to providing the most efficient and effective support possible Before calling please gather the following information to assist in expediting this process 1 Product version number 2 System architecture 3 Network details If the issue is hardware related we will also need information regarding Gateway configuration and associated ladder files if any Gateway operation and any unusual behavior Configuration Debug status information LED patterns Details about the serial Ethernet or fieldbus devices interfaced to the Gateway if any AN Note For technical support calls within the United States ProSoft s 24 7 after hours phone support is available for urge
183. r Service port on which communication will occur Use a value of 502 when addressing Modbus TCP IP servers which are compatible with the Schneider Electric MBAP specifications this will be most devices If the server device supports another service port enter the value here Slave Address 1 to 255 isa broadcast Specifies the node address of a remote Modbus Serial device through a Modbus Ethernet to Serial converter Values of 1 to 255 are permitted Note Most Modbus devices only accept addresses in the range of 1 to 247 so check with the slave device manufacturer to see if a particular slave can use addresses 248 to 255 If the value is set to zero the command will be a broadcast message on the network The Modbus protocol permits broadcast commands for write operations Do not use node address 0 for read operations Modbus 1 2 3 4 5 6 15 or 16 Specifies the Modbus Function Code to be executed by the ProSoft Technology Inc August 12 2015 Page 103 of 218 MBTCP Protocol User Manual PLX3x Series Ethernet and Serial Gateways Parameter Value Description Function command These function codes are defined in the Modbus protocol More information on the protocol is available from www modbus org The following function codes are supported by the gateway 1 Read Coil Status 2 Read Input Status 3 Read Holding Registers 4 Read Input Registers 5 Force Write
184. r connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway Gateway with Ethernet Port and Single Serial Port Qty Part Name Part Number Part Description 1 Ethernet cable RL CBL025 5 straight through cable 1 DB9 to Screw 1454 9F DB9 to screw terminal adapter Terminal Adaptor 1 RJ45 DB9M Serial CABLE14 RJ45 to DB9 male serial adapter cable Adapter Cable 1 Power Connector J180 PLX3x gateway power connector 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway Gateway with Ethernet Port and Four Serial Ports Qty Part Name Part Number Part Description 1 Ethernet cable RL CBL025 5 straight through cable 4 DB9 to Screw 1454 9F DB9 to screw terminal adapter Terminal Adaptor 4 RJ45 DB9M Serial CABLE14 RJ45 to DB9 male serial adapter cable Adapter Cable 1 Power Connector J180 PLX8x gateway power connector 1 Mini screwdriver HRD250 Tool for wiring and securing the power connector 1 ProSoft Solutions DVD 001 Contains sample programs utilities DVD documentation and videos for the gateway Page 10 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Start Here Ethernet and Serial Gateways User Manual 1 3 Mounting the Gateway on a DIN rail 1 99 in lt 5 05 om
185. rge number of errors are occurring in the application due to bad configuration or on one or more ports network communication failures NS Off No power or nolP address Network Solid Red Duplicate IP address Status Solid Green Connected Flashing Red Connection timeout Flashing Green IP address obtained no established connections Alternating Red Self test and Green Flash MS Off No power Module Solid Red Major fault Status Solid Green Device operational Flashing Red Minor fault Flashing Green Standby Alternating Red Self test and Green Flash Page 34 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways Diagnostics and Troubleshooting User Manual 3 1 2 Ethernet Port LEDs LED State Description LINK ACT Off No physical network connection is detected No Ethernet communication is possible Check wiring and cables Solid Green Physical network connection detected This LED must be ON solid for Ethernet communication to be possible 100 Mbit Off No activity on the port Flashing Amber The Ethernet port is actively transmitting or receiving data 3 1 3 Serial Port LEDs for Gateways with Serial Ports LED State Description RX Off No activity on the port Flashing Green The port is actively receiving data TX Off No activity on the port Flashing Amber The port is actively transmitting data ProSoft Technology Inc August 12 20
186. rnet port to the gateway s serial port When configured as a server the internal database of the MBTCP gateway is used as the source for read requests and the destination for write requests from remote Clients Access to the database is controlled by the command type received in the incoming message from the Client The following table specifies the relationship of the gateway s internal database to the addresses required in the incoming Modbus TCP IP requests Page 96 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual Database Address Modbus Address 0 40001 1000 41001 2000 42001 3000 43001 3999 44000 The following virtual addresses are not part of the normal gateway user database and are not valid addresses for standard data However these addresses may be used for incoming commands that are requesting floating point data To use addresses in this upper range requires the following Set the Float Flag in the MBTCP server configuration to Yes Set the Float Start to a database address in the range below Set the Float Offset to a database address in the gateway user memory area shown above Remember that once this is done all data above the Float Start address must be floating point data Database Address Modbus Address 4000 44001 5000 45001 6000 46001 7000 47001 8000 48001 9000 49001 9999 50000 The
187. ro 30002 one and so on Broadcast mode is not allowed The example below requests the contents of register 3009 in server number 11 Adr Func DataStartReg Hi DataStartRegLo Data of Regs Hi Data ofRegsLo Error Check Field 11 4 00 08 00 01 CRC Page 142 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual Response The addressed server responds with its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are 2 bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits Because the server interface is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Each PC will limit the quantity of register contents provided each scan thus for large register quantities multiple PC scans will be required and the data provided will be form sequential scans In the example below the register 3009 contains the decimal value 0 Adr Func ByteCount Data Input Reg Hi Data Input Reg Lo Error Check Field 11 04 02 00 00 E9 Force Single Coil Function Code 05 Query This message forces a single coil either ON or OFF Any coil that exists within the c
188. roSoft Technology Inc August 12 2015 PLX3x Series PND Protocol Ethernet and Serial Gateways User Manual 4 Expand PND MODULE MAP and double click PND MODULE MAP to edit j Untitled ProSoft Configuration Builder File View Project Tools Help a Default Project Ga Default Location 5 i PLX31 EIP PND a Comment fa EIP Class 3 Server aa EIP Class 1 Connection ea EIP Class 3 Client 0 a EP Class 3 Client 1 a EIP Class 3 UClient 0 a PND ga PND MODULE MAP BBP Yeno mooute mar 8 CommonNet i Ethernet Configuration H E E e e D E 5 In this example 32 bytes of input and 32 bytes of output will be used a drop down list provides the range that could be used in each slot GB Unntitied Proso Configuration Builder Vier Project Tog rieh C Osk Project B Mame i Status i hiomaton 3 Lad Delat Location V PND MOULE MAP AB Tags Good SY PLGI EP PNO By Comment de EP Clan 3 Server Tdo EP Claw 1 Connection E Gy EP Clam 3 Chort Hy EP Clan 3 Chert t H hy EP Clans 3 Chere Edit PND MODULE MAP By PND IB or oH Api 32 Byte Sict 2 dy momcoue iad RA No Modu PND MODULE Slot 4 Wo Module c Sit 5 No Module HA CommorNet Site No Module Conant E Ethemet Configun Sit 7 ho Module Sita No Nodita Sht No Module Defintion Range for Module Input 1 1024 bytes Range for Module Output t 1024 bytes Reset Tag Raset All ox Cancel 6 Select Sl
189. rol 84 ControlLogix and CompactLogix Processor Specifics 85 fi fi fi D Data Flow 153 DFNT Client 0 Status 71 DFNT Servers 1 Through 4 72 Diagnostics Function Code 08 114 145 Diagnostics Menu 38 ProSoft Technology Inc August 12 2015 Downloading the Project to the Gateway 29 E EIP Client Command List Error Data 71 EIP Command Entry Form 92 EIP Functional Overview 52 EIP Protocol 51 EIP Reference 77 Encapsulated PCCC Messages 85 Encapsulated PCCC Read Message 87 Encapsulated PCCC Write Message 85 Error Codes 73 Error Status Codes 138 Errors When EXT STS Is Present 74 EtherNet IP Explicit Messaging Server Command Support 55 Example and State Diagram 115 146 F Float Flag 98 100 125 Float Offset 98 100 125 Float Start 98 100 125 Force Multiple Coils Function Code 15 119 149 Force Single Coil Function Code 05 113 143 G Gateway Communication Error Codes 108 Gatewaylnternal Database 124 166 General Specifications 152 166 General Specifications Modbus TCP IP 94 H Hardware Information 45 Holding Register Offset 99 128 How to Contact Us 2 mportant Installation Instructions 3 nstalling ProS oft Configuration Builder Software 16 nternal Database 95 L LED Indicators 34 Local STS Error Codes 73 ain Gateway LEDs 34 aster P ort Command List Errors 135
190. rt Register MW Number of MBAP and MBTCP servers Gateway Modbus Read Start Address Gateway Modbus Write Start Address Configurable Minimum Command Delay Parameters Response Timeout Client Only Retry Count Command Error Pointer Command List Up to 160 Modbus commands one tag per command Status Data Error codes reported individually for each command High level status data available from Modbus TCP IP Client for example PLC Command List Polling Each command can be individually enabled or disabled write only on data change is available 6 1 2 Internal Database Central to the functionality of the gateway is the internal database This database is shared between all the ports on the gateway and is used as a conduit to pass information from one device on one network to one or more devices on another network This permits data from devices on one communication port to be viewed and controlled by devices on another communication port In addition to data from the Client and server status and error information generated by the gateway can also be mapped into the internal database ProSoft Technology Inc Page 95 of 218 August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways Modbus TCP IP Client Access to Database The Client functionality exchanges data between the PLX3x gateway s internal database and data tables established in one or more Quantum processors or other server based devices Th
191. rver Connection ccecccccceeeeeeeeeeeeeeceeeeeeaeeesaaeeeeeeeseaeeesaeeeeeeeeneees 54 5 2 2 EIP Class i Connection iiien inira idane ana ta a i daaa nia 56 523 EIP Class 3 Client UClient x Connection sssessseesseesseessesesnnesnessnnsennsnnnesrnssrnsns 58 5 3 EIP Diagnostics isi c i cceadie die cine be died Min die iel 70 5 3 1 PCB Diagnostics M Nu c ccccccceesceceeeeeceeeeeeaeeeeeeeeeaeeesaaeeesaaeseeeeeseaeeesaaeeeeaaeeennees 70 5 3 2 EIP Status Data in Upper Me Mory ccccceeeeeeeeeeeeeeeeecaeeeeaaeseeeeeseaeeesaaeeeeaaesennees 70 5 3 3 EIP Error Godes n i a aa e aa aa aa a adaa N ad a aaa aAA 73 5 4 EIP References arrea nae diane ida nen inl EET E SS 77 5 4 1 SLC and MicroLogix Specifics cecccececeeececeeeeeeeeeeeceeeeecaeeeeaaeseeeeeseaeeeseaeeseneeseaes 77 5 4 2 PLC5 Processor Specifics ccccscecceeceseeeeeenaeeeeeeeceaeeeesaeseeaaesseneeseaeeesaeseeaaeesenees 81 5 4 3 ControlLogix and CompactLogix Processor SpecifiCs cccccceeeteeesteeeeseeeeees 85 5 4 4 EIP Command Entry Form isien aeaa ekaa ako aia Eiaa 92 6 MBTCP Protocol 93 6 1 MBTOP Functional OvervieW sssssssssssesssrssrssrssrrssressrinsressrinsrnnsrnnsrnnnrnnnnnnnntnt 94 6 1 General Specifications Modbus TCP IP ccesseeceeceeseeeeeseeeceeeeeseeeeseaeeseeeenaes 94 6 1 Internal Databases is tccnuruis Ana a thal celia iin ieee etn ER 95 6 2 MBEGP Configuration sisi 28 eden ee ad
192. s Function v Tyo 0 1 No Change 1 1 1 1 502 1 FC 3 Read Holding lt Enable Value Status OK Setto Defaults Add Row Insert Row Move Up Move Down Edit Row Copy Row OK Cancel In order to interface the PLX3x gateway with Modbus TCP IP server devices a command list must be constructed The commands in the list specify the server device to be addressed the function to be performed read or write the data area in the device to interface with and the registers in the internal database to be associated with the device data The Client command list supports up to 16 commands per Client The command list is processed from top command 0 to bottom The following table describes the command list configuration parameters Parameter Value Description Enable YES NO CONDITONAL Specifies if the command is to be executed and under what conditions No 0 the command is disabled and will not be executed in the normal polling sequence Yes 1 the command will be executed upon each scan of the Command List if the Poll Interval is set to zero 0 If the Poll Interval is set to a non zero value the command will be executed when the interval timer for that command expires Conditional 2 the command will execute only if the internal bit data associated with the command changes It will also clear the bit or bits in the internal database after the write command is
193. s if byte swapping of received data will occur Data Bytes Tx Timeout 0 to 65535 Specifies the timeout period to transmit a message out the port Message transmission will be aborted if the message is not transmitted out the port within the specified timeout period Tx Minimum 0 to 65535 Specifies the minimum number of milliseconds to delay Delay before transmitting a message out the port This pre send delay is applied before the RTS on time This may be required when communicating with slow devices Swap Tx YES or NO Specifies if byte swapping of transmitted data will occur Data Bytes Page 162 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series ASCII Protocol Ethernet and Serial Gateways User Manual 8 3 ASCII Diagnostics 8 3 1 PCB Diagnostics The best way to troubleshoot this driver is to use ProSoft Configuration Builder to access the diagnostic capabilities of the gateway through the Ethernet debug port For instructions on how to access Diagnostics see Using Diagnostics in ProSoft Configuration Builder page 36 8 3 2 ASCII Status Data in Upper Memory Each ASCII port has an associated status data area located in the gateway s upper memory The Data Map functionality of the gateway can be used to map this data into the normal user data range of the gateway s database See Using the CommonNet Data Map page 25 The following table lists the starting addresses in upper memory where the status da
194. s returned The Master program will eventually process a timeout condition for the request Ifthe server receives the request but detects a communication error parity LRC CRC etc no response is returned The Master program will eventually process a timeout condition for the request Ifthe server receives the request without a communication error but cannot handle it for example if the request is to read a non existent output or register the server will return an exception response informing the Master of the nature of the error The exception response message has two fields that differentiate it from a normal response Function Code Field In a normal response the server echoes the function code of the original request in the function code field of the response All function codes have a most significant bit MSB of 0 their values are all below 80 hexadecimal In an exception response the server sets the MSB of the function code to 1 This makes the function code value in an exception response exactly 80 hexadecimal higher than the value would be for a normal response With the function code s MSB set the Master s application program can recognize the exception response and can examine the data field for the exception code Data Field In a normal response the server may return data or statistics in the data field any information that was requested in the request In an exception response the server returns an except
195. s44to Status52to Check 27 35 43 51 56 Field 11 01 05 CD 6B B2 OE 1B CRC The status of coils 20 to 27 is shown as CD HEX 1100 1101 Binary Reading left to right this shows that coils 27 26 23 22 and 20 are all on The other coil data bytes are decoded similarly Due to the quantity of coil statuses requested the last data field which is shown 1B HEX 0001 1011 Binary contains the status of only 5 coils 52 to 56 instead of 8 coils The 3 left most bits are provided as zeros to fill the 8 bit format Read Input Status Function Code 02 Query This function allows the user to obtain the ON OFF status of discrete inputs in the addressed server PC Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial input address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 inputs to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The inputs are numbered form zero input 10001 zero input 10002 one input 10003 two and so on for a 584 The following table is a sample read input status request to read inputs 10197 to 10218 from server number 11 Adr Func DataStartPtHi DataStartPtLo Data of Pts Hi Data of Pts Lo Error Check Field 11 02 00 C4
196. sactions must be made using coil status from sequential scans Adr Func Byte Data Coil Data Coil Data Coil Data Coil Data Coil Error Count Status 20to Status 28to Status 36to Status44to Status52to Check 27 35 43 51 56 Field 11 01 05 CD 6B B2 OE 1B CRC The status of coils 20 to 27 is shown as CD HEX 1100 1101 Binary Reading left to right this shows that coils 27 26 23 22 and 20 are all on The other coil data bytes are decoded similarly Due to the quantity of coil statuses requested the last data field which is shown 1B HEX 0001 1011 Binary contains the status of only 5 coils 52 to 56 instead of 8 coils The 3 left most bits are provided as zeros to fill the 8 bit format Read Input Status Function Code 02 Query This function allows the user to obtain the ON OFF status of discrete inputs in the addressed server PC Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial input address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 inputs to be obtained at each request however the specific server device may have restrictions that lower the maximum quantity The inputs are numbered form zero input 10001 zero input 10002 one input 10003 two and so on for a 584 The following table is a sa
197. se The entire response message should be identical to the request Sub function Data Field Request Data Field Response 00 00 Any Echo Request Data Example and State Diagram Here is an example of a request to remote device to Return Query Data This uses a sub function code of zero 00 00 hex in the two byte field The data to be returned is sent in the two byte data field A5 37 hex Request Response Field Name Hex Field Name Hex Function 08 Function 08 Sub function Hi 00 Sub function Hi 00 Sub function Lo 00 Sub function Lo 00 Data Hi A5 Data Hi A5 Data Lo 37 Data Lo 27 ProSoft Technology Inc Page 115 of 218 August 12 2015 MBTCP Protocol PLX3x Series User Manual Ethernet and Serial Gateways The data fields in responses to other kinds of queries could contain error counts or other data requested by the sub function code YES Data Value OK Page 116 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual Modbus Exception Responses When a Modbus Master sends a request to a server device it expects a normal response One of four possible events can occur from the Master s query If the server device receives the request without a communication error and can handle the query normally it returns a normal response Ifthe server does not receive the request due to a communication error no response i
198. st also be configured An example of the dialog box follows Message Configuration writemsg xi Configuration Communication Path JEnet 2 192 168 0 75 Browse Enet 2 192 168 0 75 Communication Method CIP DH Crane Z Destination Lint e CP with Source Link Destination Node fp ictal I Cache Connections Enable Enable Waiting Start Done Done Length 10 Error Code T Timed Out Extended Error Code Cancel Apply Help Verify that the CIP radio button is selected as the COMMUNICATION METHOD The PATH specifies the message route from the processor to the EIP gateway Path elements are separated by commas In the example path shown the first element is Enet which is the user defined name given to the 1756 ENET gateway in the chassis the slot number of the ENET gateway can be substituted for the name the second element 2 represents the Ethernet port on the 1756 ENET gateway and the last element of the path 192 168 0 75 is the IP address of the gateway the target for the message More complex paths are possible if routing to other networks using multiple 1756 ENET gateways and racks Refer to the Support Knowledgebase for more information on Ethernet routing and path definitions CIP Data Table Read CIP data table read messages transfer data to the processor from the gateway An example rung used to execute a read command is shown writemsg DN readmsg EN SG 1 JE
199. sts for checking the communication system between a Client device and a server or for checking various internal error conditions within a server The function uses a two byte sub function code field in the query to define the type of test to be performed The server echoes both the function code and sub function code in a normal response Some of the diagnostics cause data to be returned from the remote device in the data field of a normal response In general issuing a diagnostic function to a remote device does not affect the running of the user program in the remote device Device memory bit and register data addresses are not accessed by the diagnostics However certain functions can optionally reset error counters in some remote devices Page 114 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBTCP Protocol Ethernet and Serial Gateways User Manual A server device can however be forced into Listen Only Mode in which it will monitor the messages on the communications system but not respond to them This can affect the outcome of your application program if it depends upon any further exchange of data with the remote device Generally the mode is forced to remove a malfunctioning remote device from the communications system Sub function Codes Supported Only Sub function 00 is supported by the gateway 00 Return Query Data The data passed in the request data field is to be returned looped back in the respon
200. t R gt _TT__TT_ 06 04 14 00 00 00 00 00 00 00 00 00 o0 _TT_ 00 00 00 00 00 00 00 00 oo oo F3 97 TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_ S pa i p a p a y a p p NT T_T Tt _TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 06 gt lt 10 gt lt 00 gt lt 32 gt lt 00 gt lt 0A4 gt lt 14 gt lt 00 gt lt 32 gt lt 00 gt lt 33 gt lt 00 gt lt 34 gt lt 00 gt lt 3 5 gt lt 00 gt lt 36 gt lt 00 gt lt 3 7 gt lt 00 gt lt 38 gt lt 00 gt lt 39 gt lt 00 gt lt 34 gt lt 00 gt lt 3B gt lt LE gt lt 26 gt lt R gt _TT_TT_ 06 10 00 32 00 oa EO 76 TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ T_T T_T T_T et T_T _TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 01 gt lt 03 gt lt 00 gt lt 00 gt lt 00 gt lt 04 gt lt C5 gt lt CD gt lt R gt _TT_ 01 03 14 00 _TT_ 00 00 00 oo 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a3 67 _TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_TT_ a gy py p ea y p a p py eel AM rn Rt p p RC p p a p AM p p y p p p p TT__TT__TT__TT__TT__TT__TT__TT__TT__TT__TT_ lt R gt lt 01 gt lt 10 gt lt 00 gt lt 00 gt lt 00 gt lt 0A gt lt 14 gt lt 04 gt lt D2 gt lt 10 gt lt E1 gt lt 16 gt lt 2E gt lt 22 gt lt 3D gt lt 3F gt lt FF gt lt 00 gt lt 05 gt lt 00 gt lt 06 gt lt 00 gt lt 07 gt lt 00 gt lt 08 gt lt 00 gt lt 09 gt lt 86 gt lt 49 gt lt R gt _TT_TT_TT_ 01 10 00 00 00 04 40 0E _TT__TT__T
201. t be executed Conditional Write The Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Word swap Word and Byte swap Byte swap Specifies if the data from the server is to be ordered differently than it was received This parameter is typically used when dealing with floating point or other multi register values None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the target device to be addressed by this command Slot 1 Use a value of 1 when interfacing to an SLC 5 05 These devices do not have a s
202. t before transmit 2 Timeout while transmitting message 11 Timeout waiting for response after request 253 Incorrect slave address in response 254 Incorrect function code in response 255 Invalid CRC LRC value in response Command List Error Codes These command specific error codes are detected during initial command list loading at gateway power up or reset and are stored in the Command Error List memory region Code Description 41 Invalid enable code 42 Internal address gt maximum address 43 Invalid node address lt 0 or gt 255 44 Count parameter set to 0 45 Invalid function code 46 All parameters set to 0 47 All parameters set to 1 Page 138 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series MBS Protocol Ethernet and Serial Gateways User Manual 7 4 MBS Reference 7 4 1 Modbus Protocol Specification Read Coil Status Function Code 01 Query This function allows the user to obtain the ON OFF status of logic coils used to control discrete outputs from the addressed server only Broadcast mode is not supported with this function code In addition to the server address and function fields the message requires that the information field contain the initial coil address to be read Starting Address and the number of locations that will be interrogated to obtain status data The addressing allows up to 2000 coils to be obtained at each request however the specific server
203. t selected It could also indicate that the server is in the wrong state to process a request of this type for example because it is unconfigured and is being asked to return register values 02 Illegal Data Address The data address received in the query is not an allowable address for the server More specifically the combination of reference number and transfer length is invalid For a controller with 100 registers a request with offset 96 and length 4 would succeed a request with offset 96 and length 5 will generate exception 02 03 Illegal Data Value A value contained in the query data field is not an allowable value for server This indicates a fault in the structure of the remainder of a complex request such as that the implied length is incorrect It specifically does not mean that a data item submitted for storage in a register has a value outside the expectation of the application program because the Modbus protocol is unaware of the significance of any particular value of any particular register 04 Slave Device Failure An unrecoverable error occurred while the server was attempting to perform the requested action 05 Acknowledge Specialized use in conjunction with programming commands The server has accepted the request and is processing it but a long duration of time will be required to do so This response is returned to prevent a timeout error from occurring in the Master The Master can
204. t the status error codes refer to EIP Error Codes page 73 EIP Server Status Data The following table lists the addresses in upper memory that hold status data for each EIP server EIP Server Address Range 0 8900 through 8915 1 8916 through 8931 2 8932 through 8947 3 gthg s SS 4 8964 through 8979 The content of each server s status data area is structured the same The following table describes the content of each register in the status data area Offset Description 0 through 1 Connection State 2Zthrough3 Open Connection Court S 4 through 5 Socket Read Count 6 through 7 Socket Write Count 8 through 15 Peer IP Page 72 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series EIP Protocol Ethernet and Serial Gateways User Manual 5 3 3 EIP Error Codes The gateway error codes are listed in this section Error codes returned from the command list process are stored in the command list error memory region A word is allocated for each command in the memory area The error codes are formatted in the word as follows The least significant byte of the word contains the extended status code and the most significant byte contains the status code Use the error codes returned for each command in the list to determine the success or failure of the command If the command fails use the error code to determine the cause of failure A Note The gateway specific error codes not EtherN
205. ta for each ASCII port can be found Port Gateway Starting Register for Status Data 1 13000 2 13010 3 13020 4 13030 Status data for Ports 2 through 4 are only present in 4 port ASCII gateways Port x Status Data Status Register Offset Description 0 Receive state 1 Listening for data 1 Receiving port data 1 Total receive character count 2 Total receive message count 3 Transmit state 0 Waiting for Data to Send 1 RTS On 2 RTS Timeout 3 Sending data 4 Waiting for RTS Off 5 RTS turned off 30 31 and 32 Intercharacter Delay 100 and 101 Message Delay before Transmit 4 Total transmit character count 5 Total transmit message count 6 Reserved 7to9 No valid data ProSoft Technology Inc Page 163 of 218 August 12 2015 PLX3x Series User Manual Ethernet and Serial Gateways Page 164 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways SIE Protocol User Manual 9 SIE Protocol In This Chapter SIE Functional Overview 0 ecceeeceeseeeeeeeeeeeeeeeeseaeeeeeeseeeeseetas SIE Configuratio n d Bates ete ei tec ete gt SIE Diagnostics se n eaa a ee a aao SIE Referencna sg aa ee a EA This chapter contains information specific to PLX3x series gateways with a Siemens Industrial Ethernet SIE protocol driver ProSoft Technology Inc August 12 2015 Page 165 of 218 SIE Prot
206. th its address and the function code followed by the information field The information field contains 1 byte describing the quantity of data bytes to be returned The contents of the registers requested DATA are two bytes each with the binary content right justified within each pair of characters The first byte includes the high order bits and the second the low order bits Because the server interface device is normally serviced at the end of the controller s scan the data will reflect the register content at the end of the scan Some servers will limit the quantity of register content provided each scan thus for large register quantities multiple transmissions will be made using register content from sequential scans In the example below the registers 40108 to 40110 have the decimal contents 555 0 and 100 respectively Adr Func ByteCnt HiData LoData HiData LoData HiData Lo Data Error Check Field 11 03 06 02 2B 00 00 00 64 CRC Read Input Registers Function Code 04 Query Function code 04 obtains the contents of the controller s input registers at addresses 3xxxx These locations receive their values from devices connected to the I O structure and can only be referenced not altered from within the controller The addressing allows up to 125 registers to be obtained at each request however the specific server device may have restrictions that lower this maximum quantity The registers are numbered for zero 30001 ze
207. there is no response from the gateway as in the example above follow these steps 1 Click the Setup Connection button In the Connection Setup dialog box select ETHERNET from the Select Connection Type dropdown menu Type in the gateway s IP address in the Ethernet field lalale Connection Setup Select Connection Type AERE Ethernet 192 168 O 250 ProSoft Discovery Service PDS Browse Device s CiPconnect __ _ eerste Test Connection Cancel 2 Click the Connect button Verify that the Ethernet is connected properly between your computer s communication port and the gateway If you are still not able to establish a connection contact ProSoft Technology for assistance ProSoft Technology Inc August 12 2015 Page 37 of 218 Diagnostics and Troubleshooting PLX3x Series User Manual Ethernet and Serial Gateways 3 2 1 Diagnostics Menu The Diagnostics menu is arranged as a tree structure with the Main menu at the top of the tree and one or more submenus for each menu command The menu commands available will depend on the protocol combination of your gateway Diagnostics Connection Log Module Alps SIS Alo dus i PLX31 EIP MBS4 Time 15 47 10 H a MODULE PLX31 EIP MBS4 gt MODULE gt version Refresh Counter 2 E EEE PRODUCT NAME PLX31 EIP MBS4 Data Map PRODUCT NAME CODE EIMA l st Modbus Database View SOFTWARE REVISION LEVEL 1 00 182 GI
208. thernet interface The gateway supports both read and write commands A discussion of each operation is provided in the following topics PLC5 Write Commands Write commands transfer data from the PLC5 processor to the gateway An example rung used to execute a write command is shown in the following diagram z N9 0 MG12 0 MSG 0000 J F ReadiWrite Message N 0 EN Control MG12 0 ND Setup Screen R N9 0 U In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box MSG MG12 0 2 Elements MultiHop This PLC 5 Control Bits Communication Command SLC Typed Logical Write Ignore if timed out TO o Data Table Address To be retried NR 0 Size in Elements Awaiting Execution Ew 0 Port Number Continuous Run CO 0 7 Eror ER 0 m Target Device Message done DN fo Data Table Peia Message Transmitting ST fp MultiHop Message Enabled EN 0 Error Error Code Hex 0 Error Description No errors Select the COMMUNICATION COMMAND to execute from the following list of supported commands PLC5 Type Write PLC2 Unprotected Write e PLC5 Typed Write to PLC PLC Typed Logical Write The TARGET DEVICE DATA TABLE ADDRESS must be set to a valid file element such as N11 0 for SLC and PLC5 messages For the PLC2 Unprotected Write message set the address
209. time The diagnostic screen displays are snapshot type screens that is they display the current value at the time they are called but do not continue to automatically update the data displayed They are not live data screens Therefore to see a change in STATE or COMM STATE you must repeatedly call the screen by pressing the appropriate menu key to have the screen refreshed Depending on the refresh timing you may or may not see a change in the displayed values every time you call for an update The STATE register may display any of the following values STATE Value Description 2 Preparing port Flushing all buffers Scan for RTS Off or Waiting for port enable signal 1 Waiting for receipt of data 0 Undefined state 1 Receiving a message from the Master 2 Building a slave response message 7 Modbus master is fetching next command 2000 Sending slave response to the Master The COMM STATE register may display any of the following values COMM STATE Description Value 0 Port not sending data Wait for send 1 Setting up minimum Response Delay Timer 101 Waiting for Minimum Response Delay to timeout 2 Turning on RTS line and starting RTS On Delay Timer 3 Waiting for RTS On Delay timer to timeout 4 Sending data 5 Waiting for all data to be sent and starting RTS Off Delay Timer 6 Waiting for RTS Off Delay timeout and then turning OFF RTS line after timeout Page 134 of 218 ProSoft Technology Inc August 12 2015 PLX3x S
210. ting the command Retries or skipping to the next command in the Command List The value to specify depends on the communication network used and the expected response time plus or minus of the slowest device on the network Retry Count 0 to 10 Specifies the number of times a command will be retried if it fails End of Message Delay 0 to 65535 Specifies a time delay in milliseconds to be added to the 3 5 character time delay used by the module to recognize the end of a message Certain applications may require validation of Modbus messages with more than 3 5 character time between consecutive bytes example modem applications A value of 0 will cause the default end of message delay to be used Minimum Command Delay 0 to 32767 Specifies the number of milliseconds to wait between receiving the end of a slave s response to the most recently transmitted command and the issuance of the next command This parameter can be used to place a delay after each command to avoid sending commands on the network faster than the slaves can be ready to receive them This parameter does not affect retries of a command as retries will be issued when a command failure is recognized Error Delay Counter 0 to 60000 Specifies the number of poll attempts to be skipped before trying to re establish communications with a slave that has failed to respond to a command within the time limit set by the Response Timeout parameter
211. tional Pl Many years of experience with PROFIBUS and the widespread use of Industrial Ethernet are all rolled into PROFINET With its integrated Ethernet based communication PROFINET satisfies a wide range of requirements from data intensive parameter assignments to extremely fast I O data transmission which enables automation in real time 10 2 PND Configuration The following procedure provides the required steps to configure the PLX31 EIP PND module using ProSoft Configuration Builder PCB This configuration provides the ability to communicate with a Siemens processor via the PROFINET protocol 1 Launch ProSoft Configuration Builder 2 Create anew PLX31 EIP PND module j Untitled ProSoft Configuration Builder File View Project Tools Help Default Project Choose Module Type T B Dead tocan Product Line Filter 1 Default Module c pLx4000 C pLx6000 C MVI46 C MVI56 C MvI71 All C PLX5000 PLX30 C mvI69 C MVI5S6E PTQ MVI69E MVI69L Search Module Type STEP 1 Select Module Type Module Definition Ethernet IP to Profinet Protocol ommunications Gateway g STEP 2 Define Ports Section Status Action Required Comment Used EIP Class 3 Server Used x EIP Class 3 ClientO Used E EIP Class 3 Client 1 Used UnCheck if Not Used A EIP Class 3 UClient 0 Used UnCheck if Not Used PND Used J PND MODULE MAP Used CommonNeET Used 3 Click OK Page 194 of 218 P
212. tions 55 PLC5 Read Commands 82 PLC 5 Sub Element Fields 84 PLC5 Write Commands 81 Port 1 Command Error List Layout 135 Port 1 Slave List Status Layout 136 Preset Multiple Registers Function Code 16 120 150 Preset Single Register Function Code 06 114 144 Printing a Configuration File 31 ProSoft Technology Product Documentation 2 R Read Coil Status Function Code 01 109 139 Read Holding Registers Function Code 03 111 141 Read Input Registers Function Code 04 112 142 Read Input Status Function Code 02 110 140 Receive Data 154 Receive Only Mode 156 Page 218 of 218 Register Count 26 Remote STS Error Codes 74 Renaming PCB Objects 20 Response Timeout 100 Retry Count 100 RS 232 DTE to DCE Modem Connection 49 RS 232 Null Modem DTE with Hardware Handshaking 48 RS 232 Null Modem DTE without Hardware Handshaking 49 RS 422 Interface Connections 50 RS 485 Interface Connections 50 S Serial Port Cables 48 Serial Port Specifications 47 Setting Up the Project 17 SLC File Types 80 SLC5 05 Read Commands 78 SLC5 05 Write Commands 77 SLC 500 Command Set Functions 55 Standard Modbus Exception Code Errors 108 Start Here 9 Sub function Codes Supported 115 145 Support Service amp Warranty 215 Swap Code 26 System Requirements 9 T TCP IP Interface Errors 75 Termination of Received Data 1
213. to the database index such as 1000 to consider with the command ProSoft Technology Inc Page 81 of 218 August 12 2015 EIP Protocol PLX3x Series User Manual Ethernet and Serial Gateways The MULTIHOP option must be set to YES The MULTIHOP tab portion of the dialog box must be completed as shown in the following window 7aMSG MG13 0 2 Elements x Ins Add Hop Del Remove Hop To Address Type To Address This PLCS 2 1756 ENet I P str 192 168 0 75 ControlLogix Backplane N A 1756 Backplane Slot dec Set the IP address value to the gateway s Ethernet IP address The Insert key must be pressed to add the second line for ControlLogix Backplane and set the slot number to zero PLC5 Read Commands Read commands transfer data to the PLC5 processor from the gateway An example rung used to execute a read command is shown in the following diagram lt MG12 0 MG13 0 ioe 0001 JE ReadMrite Message N DN EN Control MG13 0 N Setup Screen R gt MG12 0 U DN In order to complete the configuration of the MSG instruction select the SETUP SCREEN area of the MSG object This displays the following dialog box 74MSG MG13 0 2 Elements MuttiHop r This PLC 5 r Control Bits _ Communication Command SLC Typed Logical Read Ignore if timed out T0 0 Data Table Address To be retried NR 0 Size in Elements Awaitin
214. trolLogix or CompactLogix the slot number corresponds to the slot in the rack containing the controller being addressed Func Code 332 Specifies the function code to be used in the command 333 332 CIP Data Table Read 333 CIP Data Table Write Data Type Bool Specifies the data type of the target controller tag SINT name INT DINT REAL DWORD Tag Name Specifies the controller tag in the target PLC Page 68 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Ethernet and Serial Gateways EIP Protocol User Manual Class 3 Client UClient x Commands Basic Parameter Value Description Enable Enable Disable Conditional Write Specifies if the command should be executed and under what conditions Enable The command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the module s internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from the specified data area Poll Interval 0 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10
215. ts Schneider Electric processors as well as most other devices that use Modbus TCP IP This implementation allows multiple Client Master and server slave connections using standard EtherNet IP connections The gateway can use both Modbus TCP IP Page 16 of 218 ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual 2 2 Using the Online Help Most of the information needed to help you use ProSoft Configuration Builder is provided in a Help System that is always available whenever you are running ProSoft Configuration Builder The Help System does not require an Internet connection To view the help pages start ProSoft Configuration Builder open the HELP menu and then choose CONTENTS 2 3 Setting Up the Project To begin start ProSoft Configuration Builder PCB If you have used other Windows configuration tools before you will find the screen layout familiar ProSoft Configuration Builder s PCB s window consists of a tree view on the left and an information pane on the upper right side and a configuration pane on the lower right side of the window When you first start PCB the tree view consists of folders for Default Project and Default Location with a Default Gateway in the Default Location folder The following screen shows the PCB window with a new project S Untitled ProSoft Configuration Builder File View Project Tools Help Defa
216. ult Project Name Status Ifo i Default Location A Default Module Please Select Module Type KR Unknown Product Line Last Change Last Download Module Information Last Change Never Last Download Never Application Rev OS Rev Loader Rev MAC Address Configedit version 2 2 0 Build 1 Module Configuration Module Module Type Module Name Default Module Default Module ProSoft Technology Inc Page 17 of 218 August 12 2015 Configuring Y our Gateway User Manual PLX3x Series Ethernet and Serial Gateways To add the gateway to the project 1 Use the mouse to select DEFAULT MODULE in the tree view and then click the right mouse button to open a shortcut menu S Untitled ProSoft Configuration Builder File View Project Tools Help 9 Default Project i Default Location Page 18 of 218 ES Delete Rename Copy Choose Module Type Load Config File Name Status Information A Default Module Please Select Module Type Unknown Product Line Last Change Last Download Module Information Last Change Never Last Download Never Application Rev OS Rev Loader Rev MAC Address configedit version 4 0 1 Build 1 Module configuration Module Module Type Module Name Default Module Default Module ProSoft Technology Inc August 12 2015 PLX3x Series Configuring Y our Gateway Ethernet and Serial Gateways User Manual
217. unication error and can handle the query normally it returns a normal response Ifthe server does not receive the request due to a communication error no response is returned The Master program will eventually process a timeout condition for the request Ifthe server receives the request but detects a communication error parity LRC CRC etc no response is returned The Master program will eventually process a timeout condition for the request Ifthe server receives the request without a communication error but cannot handle it for example if the request is to read a non existent output or register the server will return an exception response informing the Master of the nature of the error The exception response message has two fields that differentiate it from a normal response Function Code Field In a normal response the server echoes the function code of the original request in the function code field of the response All function codes have a most significant bit MSB of 0 their values are all below 80 hexadecimal In an exception response the server sets the MSB of the function code to 1 This makes the function code value in an exception response exactly 80 hexadecimal higher than the value would be for a normal response With the function code s MSB set the Master s application program can recognize the exception response and can examine the data field for the exception code Data Field In a normal respo
218. uted and Disable under what conditions Conditional Write Enable The Command is executed each scan of the command list Disable The command is disabled and will not be executed Conditional Write The Command executes only if the internal data associated with the command changes Internal Address 0 to 3999 Specifies the database address in the modules internal database to be associated with the command If the command is a read function the data received in the response message is placed at the specified location If the command is a write function data used in the command is sourced from specified data area Poll Interval 0 to 65535 Specifies the minimum interval to execute continuous commands The parameter is entered in 1 10 of a second If a value of 100 is entered for a command the command executes no more frequently than every 10 seconds Reg Count Specifies the number of data points to be read from or written to the target device Swap Code None Specifies if the data from the server is to be ordered Word swap differently than it was received This parameter is Word and Byte typically used when dealing with floating point or other swap multi register values Byte swap None No change is made abcd Word swap The words are swapped cdab Word and Byte swap The words and bytes are swapped dcba Byte swap The bytes are swapped badc IP Address XXX XXX XXX XXX Specifies the IP address of the t
219. ved from an external source to an ASCII device When the transmit driver Tx Driver recognizes a new write block containing data data placed in the gateway s internal database it transmits this data out to the port The sequence number used in the block will be different than that of the previous block and therefore signals that the packet is fully assembled and ready to send The following illustration shows data flow for a transmit only device Internal Database ASCII Device From external device md Configuring a Port for Transmit Only Mode In order to set a port for Transmit Only mode ensure that the Tx DB Start parameter in the configuration file contains the starting location of where the data will be stored The Rx DB Start parameter must contain a value of 1 This value indicates that the port will not receive any data ProSoft Technology Inc Page 157 of 218 August 12 2015 ASCII Protocol PLX3x Series User Manual Ethernet and Serial Gateways Transmit Receive Mode A port configured in transmit receive mode can send and receive data from an ASCII device such as a terminal This mode functions the same way as transmit only mode or receive only mode but handles both the transmit and receive functions Data flow to and from an ASCII device is handled by the gateway s transmit and receive drivers Data received from the ASCII device is stored in the gateway s internal database until ready to be sent to
220. w ASCI Configuration s e aitau ea e aa Eais 161 w ASCIDIAgNOStiCS as ee A e AAA 163 This chapter contains information specific to the PLX3x series gateway ASCII protocol driver ProSoft Technology Inc Page 151 of 218 August 12 2015 ASCII Protocol User Manual PLX3x Series Ethernet and Serial Gateways 8 1 ASCII Functional Overview The ASCII protocol permits the PLX3x Gateway to interface any ASCII device to the many protocols and networks available ASCII devices include barcode scanners weigh scales many field instruments printers and terminals The protocol supports one to four serial communication ports that provide accessibility from one to four independent serial networks 8 1 1 General Specifications Ports One to four serial communication ports to receive and or transmit data Receive buffer size 255 bytes Receive termination Stream mode termination character s message timeout inter character delay or packet size length Receive database location 1 disable receiver 0 to 3896 Transmit buffer size 255 bytes Transmit characters with pacing 0 to 65535 millisecond delay between each transmitted character Transmit database location 1 disable transmitter 0 to 3896 Communication Configuration o Baud Rate 110 to 115 200 o Parity None Odd Even o Data Bits 5 to 8 o Stop Bits 1 or 2 o RTS On and Off Timing 0 to 65535 milliseconds o Minimum Response Delay 0 to 65535 milliseconds
221. w name Page 20 of 218 ProSoft Technology Inc August 12 2015 Configuring Y our Gateway PLX3x Series User Manual Ethernet and Serial Gateways 2 5 Configuring the Drivers 1 Click the sign next to the Gateway icon to expand gateway information 2 Click the sign next to any sa icon to view gateway information and configuration options S Untitled ProSoft Configuration Builder TOR Eile View Project Tools Help Default Project Name Status Gal Default Location MBS Port 1 Configured 5 PLX31 EIP MBS4 Modbus Port 1 OK gh Comment Modbus Port 1 Comm a EIP Class 3 Server 148 EIP Class 1 Connection g EIP Class 3 Client O EIP Class 3 Client 1 g EIP Class 3 UClient O h Port 1 B Modbus Port 1 E Modbus Port 1 Commands MBS Port 2 Modbus Port 1 8 MBS Port 3 Enabled 8 MBS Port 4 RS Interface Type gt CommonNet Float Flag 4 Ethernet Configuration Float Start lt PLX31 EIP MBS4 3 Double click any B icon to open an Edit dialog box 4 To edit a parameter select the parameter name in the left hand pane then edit its corresponding field in the right hand pane Note Depending on the parameter the editable field will accept typed input in the form of text ora valid numerical value or it will have a dropdown list with options to choose from ProSoft Technology Inc Page 21 of 218 August 12 2015 Configuring Y our Gateway PLX3x Series User Manual Ethernet and Seri
222. warm boot If a command executes successfully the value in the associated register will remain at zero 0 indicating no command error was detected Any non zero value in this table indicates the corresponding command experienced an error The data in this table is dynamic It is updated each time a command is executed Therefore if the command fails once and succeeds on the next attempt the Error Code from the previously failed attempt will be replace with zero and be lost Error Codes are not archived in the gateway s database To see if the port has experienced an error since the most recent restart and what the most recently occurring error was if any you can check the Last Error Index ProSoft Technology Inc Page 135 of 218 August 12 2015 MBS Protocol PLX3x Series User Manual Ethernet and Serial Gateways Master Port Modbus Slave List Status Slave List Status values for each Master port are returned to the address locations specified in the following table Modbus Port Address Range 1 4510 to 4764 2 4910 to 5164 3 5310 to 5564 4 5710 to 5964 Status data for Ports 2 through 4 is only present in 4 port MBS gateways Port 1 Slave List Status Layout The addresses listed are for Port 1 only but the format is the same for each port The start address for each port is given in the previous section Internal Offset Description Database Address Example 4510 0 Slave 1 Status 451
223. y process For example by rearranging byte or word order floating point values can be converted to the correct format for a different protocol ProSoft Technology Inc Page 25 of 218 August 12 2015 Configuring Y our Gateway User Manual PLX3x Series Ethernet and Serial Gateways The following illustration shows an example Data Map Wi Edit DATA MAP From Address To Address Register Count Swap Code Delay Preset Comment 1000 9 No Change 1000 4170 4370 6300 1010 2 1020 30 1100 20 From Address Value Status OK No Change 1001 No Change 1002 No Change 1003 Set to Defaults Add Row Insert Row Delete Row Move Up Move Down Edit Row Copy Row OK Cancel The following table describes the parameters for configuring the Data Map Parameter Value Description From Address O to highest This parameter specifies the beginning internal database Status Data register address for the copy operation This address can be address any valid address in the User Data Area or the Status Data Area of the gateway To Address 0 to 3999 This parameter specifies the beginning destination register address for the copy operation This address must always be within the User Data registers area A destination address must be specified that will not overwrite data that has been stored in memory by one of the communication protocols running on the gateway Register Count _1 to 100 This parameter specifies

PLX3x User Manual - ProSoft Technology

Contents

Download Pdf Manuals

Related Search

Related Contents