MVI69 MNET User Manual PDF
MVI69 MNET User Manual PDF
USER MANUAL
Your Feedback Please
We always want you to feel that you made the right decision to use our products. If you have suggestions, comments,
compliments or complaints about our products, documentation, or support, please write or call us.
How to Contact Us
ProSoft Technology
5201 Truxtun Ave., 3rd Floor
Bakersfield, CA 93309
+1 (661) 716-5100
+1 (661) 716-5101 (Fax)
www.prosoft-technology.com
[email protected]
ProSoft Technology ®, ProLinx ®, inRAx ®, ProTalk ®, and RadioLinx ® are Registered Trademarks of ProSoft
Technology, Inc. All other brand or product names are or may be trademarks of, and are used to identify products
and services of, their respective owners.
WARNING - EXPLOSION HAZARD - SUBSTITUTION OF COMPONENTS MAY IMPAIR SUITABILITY FOR CLASS
I, DIV. 2;
WARNING - EXPLOSION HAZARD - WHEN IN HAZARDOUS LOCATIONS, TURN OFF POWER BEFORE
REPLACING OR WIRING MODULES
WARNING - EXPLOSION HAZARD - DO NOT DISCONNECT EQUIPMENT UNLESS POWER HAS BEEN
SWITCHED OFF OR THE AREA IS KNOWN TO BE NON-HAZARDOUS.
THIS DEVICE SHALL BE POWERED BY CLASS 2 OUTPUTS ONLY.
Warnings
Warning: This module is not hot-swappable! Always remove power from the rack before inserting or removing this
module, or damage may result to the module, the processor, or other connected devices.
Battery Life Advisory
The MVI46, MVI56, MVI56E, MVI69, and MVI71 modules use a rechargeable Lithium Vanadium Pentoxide battery to
backup the real-time clock and CMOS. The battery should last for the life of the module. The module must be
powered for approximately twenty hours before the battery becomes fully charged. After it is fully charged, the battery
provides backup power for the CMOS setup and the real-time clock for approximately 21 days. When the battery is
fully discharged, the module will revert to the default BIOS and clock settings.
Markings
Electrical Ratings
Backplane Current Load: 800 mA @ 5.1 Vdc
Power Supply Distance Rating: 2
Operating Temperature: 0°C to 60°C (32°F to 140°F)
Storage Temperature: -40°C to 85°C (-40°F to 185°F)
Relative Humidity: 5% to 95% (without condensation)
All phase conductor sizes must be at least 1.3 mm(squared) and all earth ground conductors must be at least
4mm(squared).
Label Markings
<cULus>
E193122
Class I Div 2
Groups A,B,C,D T6
-30°C <= Ta <= 60°C
<ATEX>
II 3 G
Ex nA IIC T6 X
0°C <= Ta <= +60°C
II - Equipment intended for above ground use (not for use in mines).
3 - Category 3 equipment, investigated for normal operation only.
G - Equipment protected against explosive gasses.
ME06 E193122
MVI69-MNET ♦ CompactLogix and MicroLogix 1500 Platform Contents
Modbus TCP/IP Communication Module User Manual
Contents
Your Feedback Please........................................................................................................................ 2
How to Contact Us .............................................................................................................................. 2
ProSoft Technology® Product Documentation .................................................................................... 2
Important Installation Instructions ....................................................................................................... 3
MVI (Multi Vendor Interface) Modules ................................................................................................ 3
Warnings ............................................................................................................................................. 3
Battery Life Advisory ........................................................................................................................... 4
Markings.............................................................................................................................................. 4
5 Reference 99
5.1 Product Specifications ............................................................................................ 99
5.1.1 Modbus TCP/IP....................................................................................................... 99
5.1.2 Functional Specifications ...................................................................................... 100
5.1.3 Hardware Specifications ....................................................................................... 101
5.2 Functional Overview ............................................................................................. 102
5.2.1 Module Power Up ................................................................................................. 102
5.2.2 Backplane Data Transfer ...................................................................................... 102
5.2.3 Data Flow between MVI69-MNET Module and Processor ................................... 123
5.3 Cable Connections ............................................................................................... 128
5.3.1 Ethernet Connection ............................................................................................. 128
5.3.2 RS-232 Configuration/Debug Port ........................................................................ 130
5.3.3 DB9 to RJ45 Adaptor (Cable 14) .......................................................................... 132
5.4 Modbus Protocol Specification ............................................................................. 133
5.4.1 About the MODBUS TCP/IP Protocol ................................................................... 133
5.4.2 Read Coil Status (Function Code 01) ................................................................... 134
5.4.3 Read Input Status (Function Code 02) ................................................................. 135
5.4.4 Read Holding Registers (Function Code 03) ........................................................ 136
5.4.5 Read Input Registers (Function Code 04) ............................................................ 137
5.4.6 Force Single Coil (Function Code 05) .................................................................. 138
5.4.7 Preset Single Register (Function Code 06) .......................................................... 139
5.4.8 Diagnostics (Function Code 08) ........................................................................... 140
5.4.9 Force Multiple Coils (Function Code 15) .............................................................. 142
5.4.10 Preset Multiple Registers (Function Code 16) ...................................................... 143
5.4.11 Modbus Exception Responses ............................................................................. 144
Index 157
Introduction Start Here (page 11) This section introduces the customer to the
(Must Do) module. Included are: package contents,
system requirements, hardware installation, and
basic configuration.
Support, Service, and Support, Service This section contains Support, Service and
Warranty and Warranty (page Warranty information.
147)
Index Index of chapters.
Index
1 Start Here
In This Chapter
System Requirements ........................................................................... 12
Package Contents ................................................................................. 12
Installing ProSoft Configuration Builder Software .................................. 14
Setting Jumpers .................................................................................... 15
Installing the Module ............................................................................. 16
To get the most benefit from this User Manual, you should have the following
skills:
Rockwell Automation® RSLogix™ software: launch the program, configure
ladder logic, and transfer the ladder logic to the processor
Microsoft Windows: install and launch programs, execute menu commands,
navigate dialog boxes, and enter data
Hardware installation and wiring: install the module, and safely connect
Modbus TCP/IP and CompactLogix or MicroLogix devices to a power source
and to the MVI69-MNET module’s application port(s)
Important: The MVI69-MNET module has a power supply distance rating of 2 (L43 and L45
installations on first 2 slots of 1769 bus).
Important: For 1769-L23x processors, please make note of the following limitations.
1769-L23-QBFC1B = 800 mA at 5 Vdc (One MVI69-MNET will use all 800 mA of available
power. No other modules can be used with an MVI69 module connected to this processor.)
1769-L23E-QB1B = 1000 mA at 5 Vdc (One MVI69-MNET will use 800 mA of available power.
One other module can be used on this rack provided it consumes less than 200 mA at 5 Vdc.)
1769-L23E-QBFC1B = 450 mA at 5 Vdc (No MVI69 module can be used with this processor.)
NOTE: MVI69/PS69 modules will not work with CompactLogix L4x processors using RSLogix 5000
v17. All other processor combinations and RSLogix versions will work correctly.
Important: Before beginning the installation, please verify that all of the following items are
present.
Note: Many of the configuration and maintenance procedures use files and other utilities on the
CD-ROM. You may wish to copy the files from the Utilities folder on the CD-ROM to a convenient
location on your hard drive.
Note: If you are installing the module in a remote rack, you may prefer to leave the Setup pins
jumpered. That way, you can update the module’s firmware without requiring physical access to
the module.
Before you attempt to install the module, make sure that the bus lever of the
adjacent module is in the unlocked (fully right) position.
Warning: This module is not hot-swappable! Always remove power from the rack before
inserting or removing this module, or damage may result to the module, the processor, or other
connected devices.
1 Align the module using the upper and lower tongue-and-groove slots with the
adjacent module and slide forward in the direction of the arrow.
2 Move the module back along the tongue-and-groove slots until the bus
connectors on the MVI69 module and the adjacent module line up with each
other.
3 Push the module’s bus lever back slightly to clear the positioning tab and
move it firmly to the left until it clicks. Ensure that it is locked firmly in place.
5 Press the DIN-rail mounting area of the controller against the DIN-rail. The
latches will momentarily open and lock into place.
In This Chapter
MVI69-MNET Add-On Instruction Rung Import Procedure .................... 20
Connecting Your PC to the Processor ................................................... 40
Downloading the Sample Program to the Processor ............................. 41
Connecting Your PC to the Module ....................................................... 44
Using ProSoft Configuration Builder ...................................................... 45
Module Configuration ............................................................................ 49
Downloading the Project to the Module Using a Serial COM Port ......... 67
The MVI69-MNET module works on both the CompactLogix and the MicroLogix
platform. The ladder logic you should import for the module depends on what
type of processor you have, and what RSLogix software you are running.
If you have ... ... use this ProSoft ladder File Instructions
import. ext.
CompactLogix processor Add-On Instruction rung .L5X MVI69-MNET Add-On
with RSLogix 5000 MVI69MNET_AddOn_Rung_<Ve Instruction Rung Import
Version 16 or higher rsion #>.L5X Procedure (page 20)
CompactLogix processor Sample Ladder program. Use the .ACD Adding the Module to an
with RSLogix 5000 version number that matches the Existing CompactLogix
Version 15 or earlier version number of your RSLogix Project (page 73)
5000 software.
MicroLogix processor Sample Ladder program for .RSS Adding the Module to an
(uses RSLogix 500) MicroLogix Existing MicroLogix
Project (page 77)
Note: This section only applies if you are using a CompactLogix processor running RSLogix 5000
version 16 or higher. If you are configuring the MVI69-MNET module with an earlier version of
RSLogix 5000, please refer to Adding the Module to an Existing CompactLogix Project (page 73). If
you are using a MicroLogix processor, please see Adding the Module to an Existing MicroLogix
Project (page 77).
The following file is required before you start this procedure. Copy the file from
the ProSoft Solutions CD-ROM, or download it from
www.prosoft-technology.com.
2 Select 1769-MODULE.
4 Navigate to the location on your PC where you saved (page 20) the Add-On
Instruction (for example, My Documents or Desktop). Select the
MVI69MNET_ADDON_RUNG_<VERSION #>.L5X file.
This action opens the Import Configuration dialog box, showing the controller
tags that will be created.
6 Click OK to confirm the import. RSLogix will indicate that the import is in
progress:
When the import is completed, the new Add-On Instruction rung will appear in
the ladder.
The procedure has also imported new user-defined data types, controller tags
and the Add-On instruction for your project.
7 The imported rung will contain the Add-On instruction with two CPS
instructions as shown below. The CPS instructions are set by default for a
length of 62/61 words as follows:
Edit the above CPS instructions Length field values according to the following
table.
62 61 62 61
122 121 122 121
242 241 242 241
Important: If your application requires more than one MVI69-MNET module in the same project,
follow the steps below and make certain that both modules are assigned identical Block Transfer
Sizes.
1 In the I/O CONFIGURATION folder, click the right mouse button to open a
shortcut menu, and then choose NEW MODULE.
2 Select 1769-MODULE.
Parameter Value
Name Enter a module identification string. Example: MVI69MNET_2
Description Enter a description for the module. Example: PROSOFT
COMMUNICATION MODULE FOR MODBUS COMMUNICATIONS
7 Select an empty rung in the new routine, and then click the right mouse
button to open a shortcut menu. On the shortcut menu, choose IMPORT RUNG.
8 Navigate to the location on your PC where you saved (page 20) the Add-On
Instruction (for example, My Documents or Desktop). Select the
MVI69MNET_ADDON_RUNG_<VERSION #>.L5X file.
This action opens the Import Configuration dialog box, showing the controller
tags that will be created.
9 Associate the I/O connection variables to the correct module. The default
values are Local:1:I and Local:1:O. These require re-assignment to the new
module's location.
10 Change the default tags MNET and AOI69MNET to avoid conflict with
existing tags. In this step, you should append a string to the default tag
names, such as "_2", as shown in the following illustration.
11 Click OK to continue.
The setup procedure is now complete. Save the project and download the
application to your CompactLogix processor.
2 Connect the straight connector end of the cable to the serial port on your
computer.
Note: The key switch on the front of the CompactLogix processor must be in the REM or PROG
position.
1 If you are not already online to the processor, open the COMMUNICATIONS
menu, and then choose DOWNLOAD. RSLogix will establish communication
with the processor.
2 When communication is established, RSLogix will open a confirmation dialog
box. Click the DOWNLOAD button to transfer the sample program to the
processor.
3 RSLogix will compile the program and transfer it to the processor. This
process may take a few minutes.
4 When the download is complete, RSLogix will open another confirmation
dialog box. Click OK to switch the processor from PROGRAM mode to RUN
mode.
Note: If you receive an error message during these steps, refer to your RSLogix documentation to
interpret and correct the error.
Note: If the list of configured drivers is blank, you must first choose and configure a driver from the
Available Driver Types list. The recommended driver type to choose for serial communication with
the processor is RS-232 DF1 Devices.
3 Click to select the driver, and then click CONFIGURE. This action opens the
Configure RS-232 DF1 Devices dialog box.
Note: If the auto-configuration procedure fails, verify that the cables are connected correctly
between the processor and the serial port on your computer, and then try again. If you are still
unable to auto-configure the port, refer to your RSLinx documentation for further troubleshooting
steps.
1 Use the mouse to select DEFAULT MODULE in the tree view, and then click the
right mouse button to open a shortcut menu.
2 On the shortcut menu, select CHOOSE MODULE TYPE. This action opens the
Choose Module Type dialog box.
3 In the Product Line Filter area of the dialog box, select MVI69. In the Select
Module Type dropdown list, select MVI69-MNET, and then click OK to save
your settings and return to the ProSoft Configuration Builder window.
At this time, you may wish to rename the Default Project and Default Location
folders in the tree view.
Renaming an Object
1 Select the object, and then click the right mouse button to open a shortcut
menu. From the shortcut menu, choose RENAME.
2 Type the name to assign to the object.
3 Click away from the object to save the new name.
2.6.1 Module
This section of the configuration describes the database setup and module-level
parameters.
Note: Total user database memory space is limited to the first 5000 registers of module memory,
addresses 0 through 4999. Therefore, the practical limit for this parameter is 4999 minus the value
entered for Read Register Count, so that the Read Data Area does not try to extend above address
4999. Read Data and Write Data Areas must be configured to occupy separate address ranges in
module memory and should not be allowed to overlap.
Note: Total Read Register Count and Write Register Count cannot exceed 5000 total registers.
Read Data and Write Data Areas must be configured to occupy separate address ranges in
module memory and should not be allowed to overlap.
Note: Total user database memory space is limited to the first 5000 registers of module memory,
addresses 0 through 4999. Therefore, the practical limit for this parameter is 4999 minus the value
entered for Write Register Count, so that the Write Data Area does not try to extend above address
4999. Read Data and Write Data Areas must be configured to occupy separate address ranges in
module memory and should not be allowed to overlap.
Note: Total Read Register Count and Write Register Count cannot exceed 5000 total registers.
Read Data and Write Data Areas must be configured to occupy separate address ranges in
module memory and should not be allowed to overlap.
Pass-Through Mode
0, 1, 2 or 3
This parameter specifies the pass-through mode for write messages received by
the MNET and MBAP server ports.
If the parameter is set to 0, all write messages will be placed in the module’s
virtual database.
If a value of 1 is entered, write messages received will be sent to the
processor as unformatted messages.
If a value of 2 is entered, write messages received will be sent to the
processor with the bytes swapped in formatted messages.
If a value of 3 is entered, write messages received will be sent to the
processor as formatted messages with no byte swapping.
Note: If pass-through mode is used, the module's Write Data area must begin at 0 (Write Register
Start = 0).
Duplex/Speed Code
0, 1, 2, 3 or 4
This parameter allows you to cause the module to use a specific duplex and
speed setting.
Value = 1: Half duplex, 10 MB speed
Value = 2: Full duplex, 10 MB speed
Value = 3: Half duplex, 100 MB speed
Value = 4: Full duplex, 100 MB speed
Value = 0: Auto-negotiate
Auto-negotiate is the default value for backward compatibility. This feature is not
implemented in older software revisions.
Response Timeout
0 to 65535 milliseconds
This is the time in milliseconds that a Client will wait before re-transmitting a
command if no response is received from the addressed server. The value to use
depends on the type of communication network used, and the expected
response time of the slowest device on the network.
Retry Count
0 to 10
This parameter specifies the number of times a command will be retried if it fails.
Float Flag
YES or NO
This flag specifies how the Client driver will issue Function Code 3, 6, and 16
commands (read and write Holding Registers) to a remote server when it is
moving 32-bit floating-point data.
If the remote server expects to receive or will send one complete 32-bit floating-
point value for each count of one (1), then set this parameter to YES. When set to
YES, the Client driver will send values from two consecutive 16-bit internal
memory registers (32 total bits) for each count in a write command, or receive 32
bits per count from the server for read commands. Example: Count = 10, Client
driver will send 20 16-bit registers for 10 total 32-bit floating-point values.
If, however, the remote server expects to use a count of two (2) for each 32-bit
floating-point value it sends or receives, or if you do not plan to use floating-point
data in your application, then set this parameter to NO, which is the default
setting.
You will also need to set the Float Start and Float Offset parameters to
appropriate values whenever the Float Flag parameter is set to YES.
Float Start
0 to 65535
Whenever the Float Flag parameter is set to YES, this parameter determines the
lowest Modbus Address, used in commands to a remote server, to consider as
commands to read or write floating-point data. All commands with address values
greater than or equal to this value will be considered floating-point data
commands. All commands with address values less than this value will be
considered normal 16-bit register data commands.
This parameter is used only if the Float Flag is set to YES. For example, if a value
of 7000 is entered, all commands sent with addresses of 47001 (or 407001) and
above will be considered as floating-point data commands and 32 bits of data will
be sent or received for each count of one in the command.
You will also need to set the Float Offset parameter to an appropriate value
whenever the Float Flag parameter is set to YES.
Float Offset
0 to 9999
This parameter defines the start register for floating-point data in the internal
database. This parameter is used only if the Float Flag is enabled. For example,
if the Float Offset value is set to 3000 and the Float Start parameter is set to
7000, data requests for register 7000 will use the internal Modbus register 3000.
ARP Timeout
1 to 60
This parameter specifies the number of seconds to wait for an ARP reply after a
request is issued.
Each command list record has the same general format. The first part of the
record contains the information relating to the communication module and the
second part contains information required to interface to the Modbus TCP/IP
server device.
1 2 3 4 5 6 7 8 9 10
Enable Internal Poll Interval Count Swap IP Address Serv Slave Function Code Device Modbus
Code Address Time Code Port Node Address
Code Register 1/10th Seconds Bit 0 IP Address Port # Address Read Coil (0x) Register
(bit) Count
Code Register 1/10th Seconds Bit 0 IP Address Port # Address Read Input (1x) Register
(bit) Count
Code Register 1/10th Seconds Word Code IP Address Port # Address Read Holding Register
Count Registers (4x)
Code Register 1/10th Seconds Word 0 IP Address Port # Address Read Input Registers Register
Count (3x)
Code 1 bit 1/10th Seconds Bit 0 IP Address Port # Address Force (Write) Single Register
Count Coil (0x)
Code 1 bit 1/10th Seconds Word 0 IP Address Port # Address Preset (Write) Single Register
Count Register (4x)
Code Register 1/10th Seconds Bit 0 IP Address Port # Address Force (Write) Register
(bit) Count Multiple Coil (0x)
Code Register 1/10th Seconds Word 0 IP Address Port # Address Preset (Write) Register
Count Multiple Register (4x)
The first part of the record is the module information, which relates to the MVI69
module, and the second part contains information required to interface to the
server device.
Enable
NO (0), YES (1), or CONDITIONAL (2)
This field defines whether the command is to be executed and under what
conditions.
Value Description
NO (0) The command is disabled and will not be executed in the normal polling
sequence.
YES (1) The command is executed each scan of the command list if the Poll Interval
time is set to zero. If the Poll Interval time is set to a nonzero value, the
command will be executed when the interval timer expires.
CONDITIONAL (2) The command will execute only if the internal data associated with the
command changes. This value is valid only for write commands.
Internal Address
0 to 65535 (for bit-level addressing)
or
0 to 4999 (for word-level addressing)
This field specifies the database address in the module's internal database to use
as the destination for data brought in by a read command or as the source for
data to be sent out by a write command. The database address is interpreted as
a bit address or a 16-bit word (register) address, depending on the Modbus
Function Code used in the command.
For Modbus functions 1, 2, 5, and 15, this parameter is interpreted as a bit-
level address.
For Modbus functions 3, 4, 6, and 16, this parameter is interpreted as a word-
level or register-level address.
Poll Interval
0 to 65535
This parameter specifies the minimum interval between issuances of a command
during continuous command execution (Enable code of 1). The parameter is
entered in tenths of a second. Therefore, if a value of 100 is entered for a
command, the command executes no more frequently than every 10 seconds.
Reg Count
Regs: 1 to 125
Coils: 1 to 800
This parameter specifies the number of 16-bit registers or binary bits to be
transferred by the command.
Functions 5 and 6 ignore this field as they apply only to a single data point.
For functions 1, 2, and 15, this parameter sets the number of bits (inputs or
coils) to be transferred by the command.
For functions 3, 4, and 16, this parameter sets the number of registers to be
transferred by the command.
Swap Code
NONE
SWAP WORDS
SWAP WORDS & BYTES
SWAP BYTES
This parameter defines if and how the order of bytes in data received or sent is to
be rearranged. This option exists to allow for the fact that different manufacturers
store and transmit multi-byte data in different combinations. This parameter is
helpful when dealing with floating-point or other multi-byte values, as there is no
one standard method of storing these data types. The parameter can be set to
rearrange the byte order of data received or sent into an order more useful or
convenient for other applications. The following table defines the valid Swap
Code values and the effect they have on the byte-order of the data.
These swap operations affect 4-byte (or 2-word) groups of data. Therefore, data
swapping using these Swap Codes should be done only when using an even
number of words, such as when 32-bit integer or floating-point data is involved.
Node IP Address
xxx.xxx.xxx.xxx
The IP address of the device being addressed by the command.
Service Port
502 or other port numbers supported on a server
Use a value of 502 when addressing Modbus TCP/IP servers that are compatible
with the Schneider Electric MBAP specifications (this will be most devices). If a
server implementation supports another service port, enter the value here.
Slave Address
0 - Broadcast to all nodes
1 to 255
Use this parameter to specify the slave address of a remote Modbus Serial
device through a Modbus Ethernet to Serial converter.
Note: Use the Node IP Address parameter (page 59) to address commands to a remote Modbus
TCP/IP device.
Note: Most Modbus devices accept an address in the range of only 1 to 247, so check with the
slave device manufacturer to see if a particular slave can use addresses 248 to 255.
If the value is set to zero, the command will be a broadcast message on the network. The Modbus
protocol permits broadcast commands for write operations. Do not use node address 0 for read
operations.
Modbus Function
1, 2, 3, 4, 5, 6, 15, or 16
This parameter specifies the Modbus Function Code to be executed by the
command. These function codes are defined in the Modbus protocol. The
following table lists the purpose of each function supported by the module. More
information on the protocol is available from www.modbus.org.
MB Address in Device
This parameter specifies the starting Modbus register or bit address in the server
to be used by the command. Refer to the documentation of each Modbus server
device for the register and bit address assignments valid for that device.
The Modbus Function Code determines whether the address will be a register-
level or bit-level OFFSET address into a given data type range. The offset will be
the target data address in the server minus the base address for that data type.
Base addresses for the different data types are:
00001 or 000001 (0x0001) for bit-level Coil data (Function Codes 1, 5, and
15).
10001 or 100001 (1x0001) for bit-level Input Status data (Function Code 2)
30001 or 300001 (3x0001) for Input Register data (Function Code 4)
40001 or 400001 (4x0001) for Holding Register data (Function Codes 3, 6,
and 16).
Address calculation examples:
For bit-level Coil commands (FC 1, 5, or 15) to read or write a Coil 0X
address 00001, specify a value of 0 (00001 - 00001 = 0).
For Coil address 00115, specify 114
(00115 - 00001 = 114)
For register read or write commands (FC 3, 6, or 16) 4X range, for 40001,
specify a value of 0
(40001 - 40001 = 0).
For 01101, 11101, 31101 or 41101, specify a value of 1100.
(01101 - 00001 = 1100)
(11101 -10001 = 1100)
(31101 - 30001 = 1100)
(41101 - 40001 = 1100)
Note: If the documentation for a particular Modbus server device lists data addresses in
hexadecimal (base16) notation, you will need to convert the hexadecimal value to a decimal value
to enter in this parameter. In such cases, it is not usually necessary to subtract 1 from the
converted decimal number, as this addressing scheme typically uses the exact offset address
expressed as a hexadecimal number.
Comment
0 to 35 alphanumeric characters
Float Flag
YES or NO
This flag specifies how the server driver will respond to Function Code 3, 6, and
16 commands (read and write Holding Registers) from a remote Client when it is
moving 32-bit floating-point data.
If the remote Client expects to receive or will send one complete 32-bit floating-
point value for each count of one (1), then set this parameter to YES. When set to
YES, the server driver will return values from two consecutive 16-bit internal
memory registers (32 total bits) for each count in the read command, or receive
32-bits per count from the Client for write commands. Example: Count = 10,
server driver will send 20 16-bit registers for 10 total 32-bit floating-point values.
If, however, the remote Client sends a count of two (2) for each 32-bit floating-
point value it expects to receive or send, or, if you do not plan to use floating-
point data in your application, then set this parameter to NO, which is the default
setting.
You will also need to set the Float Start and Float Offset parameters to
appropriate values whenever the Float Flag parameter is set to YES.
Float Start
0 to 65535
This parameter defines the first register of floating-point data. All requests with
register values greater than or equal to this value will be considered floating-point
data requests. This parameter is only used if the Float Flag is enabled. For
example, if a value of 7000 is entered, all requests for registers 7000 and above
will be considered as floating-point data.
Float Offset
0 to 9999
This parameter defines the start register for floating-point data in the internal
database. This parameter is used only if the Float Flag is enabled. For example,
if the Float Offset value is set to 3000 and the Float Start parameter is set to
7000, data requests for register 7000 will use the internal Modbus register 3000.
Output Offset
0 to 4999
This parameter defines the start register for the Modbus command data in the
internal database. This parameter is enabled when a value greater than 0 is set.
For example, if the Output Offset value is set to 3000, data requests for Modbus
Coil Register address 00001 will use the internal database register 3000, bit 0. If
the Output Offset value is set to 3000, data requests for Modbus Coil register
address 00016 will use the internal database register 3000, bit 15. Function
codes affected are 1, 5, and 15.
Connection Timeout
0 to 1200 seconds
This is the number of seconds the server will wait to receive new data. If the
server does not receive any new data during this time, it will close the
connection.
Important: If the device in the field is changed, this table must be updated to contain the new MAC
address for the device and downloaded to the module. If the MAC is not changed, no
communications with the module will be provided.
IP Address
Dotted notation
This table contains a list of static IP addresses that the module will use when an
ARP is required. The module will accept up to 40 static IP/MAC address data
sets.
Important: If the device in the field is changed, this table must be updated to contain the new MAC
address for the device and downloaded to the module. If the MAC is not changed, no
communications with the module will occur.
Important: If the device in the field is changed, this table must be updated to contain the new MAC
address for the device and downloaded to the module. If the MAC is not changed, no
communications with the module will occur.
Note: The gateway address is optional, and is not required for networks that do not use a default
gateway.
2 Double-click the ETHERNET CONFIGURATION icon. This action opens the Edit
dialog box.
3 Edit the values for my_ip, netmask (subnet mask) and gateway (default
gateway).
4 When you are finished editing, click OK to save your changes and return to
the ProSoft Configuration Builder window.
2.7 Downloading the Project to the Module Using a Serial COM Port
For the module to use the settings you configured, you must download (copy) the
updated Project file from your PC to the module.
3 Choose the COM port to use from the dropdown list, and then click the
DOWNLOAD button.
The module will perform a platform check to read and load its new settings.
When the platform check is complete, the status bar in the Download dialog
box will display the message Module Running.
3 Ladder Logic
In This Chapter
Controller Tags ...................................................................................... 69
User-Defined Data Types (UDTs) ......................................................... 71
Using Controller Tags ............................................................................ 73
Adding the Module to an Existing CompactLogix Project ...................... 73
Adding the Module to an Existing MicroLogix Project ............................ 77
Ladder logic is required for the MVI69-MNET module to work. Tasks that must be
handled by the ladder logic are module data transfer, special block handling, and
status data receipt. Additionally, a power-up handler may be needed to handle
the initialization of the module’s data and to clear any processor fault conditions.
The sample ladder logic, on the inRAx CD-ROM, is extensively commented, to
provide information on the purpose and function of each rung. For most
applications, the sample ladder will work without modification.
The five lower-level controller tag structures contain other controller tags and
controller tag structures. Click the [+] sign next to any controller tag to expand it
and view the next level in the structure.
For example, if you expand the MNET.DATA controller tag structure, you will see
that it contains two controller tag arrays, MNET.DATA.ReadData and
MNET.DATA.WriteData, which are 600-element integer arrays by default.
Notice that the Data Type column displays the data types used to declare each
controller tag, controller tag array or controller tag structure. Individual controller
tags are declared with basic data types, such as INT and BOOL. Controller tag
arrays are declared with arrays of basic data types. Controller tag structures are
declared with user-defined data types (UDTs).
Click the [+] signs to expand the UDT groupings and view lower-level UDTs.
For example, if you expand MNETDATA, you will see that it contains two UDTs,
ReadData and WriteData. Both of these are 600-element integer arrays by
default.
Notice that these UDTs are the data types declared for the
MNET.DATA.ReadData and MNET.DATA.WriteData controller tag arrays.
Important: The MVI69-MNET module has a power supply distance rating of 2 (L43 and L45
installations on first 2 slots of 1769 bus, to the right of the processor).
If you are installing and configuring the module with a CompactLogix controller,
and you decide to use the standard sample ladder logic rather than importing the
Add-On Instruction (AOI) Rung, then follow these steps. If you are using a
MicroLogix controller, refer to the next section (page 77).
1 Add the MVI69-MNET module to the project. Right-click the mouse button on
the I/O CONFIGURATION option in the Controller Organization window to
display a pop-up menu. Select the NEW MODULE option from the I/O
CONFIGURATION menu.
2 Select the 1769-Module (Generic 1769 Module) from the list and click OK.
3 Enter the Name, Description and Slot options for your application, using the
values in the illustration above. You must select the Comm Format as DATA -
INT in the dialog box, otherwise the module will not communicate over the
backplane of the CompactLogix rack.
6 Select the Requested Packet Interval value for scanning the I/O on the
module. This value represents the minimum frequency at which the module
will handle scheduled events. It should not be set to less than 1 millisecond.
Values between 5 and 10 milliseconds should work with most applications.
7 SAVE the module. Click OK to dismiss the dialog box. The Controller
Organization window now displays the module's presence. The following
illustration shows the Controller Organization window:
8 Copy the User-defined Data Types (UDTs) from the sample program.
9 Copy the Controller Tags from the sample program.
10 Copy the Ladder Rungs from the sample program.
11 Save and download the new application to the controller.
3 In the I/O Configuration dialog box, select "OTHER - REQUIRES I/O CARD TYPE
ID" at the bottom of the list in the right pane, and then double-click to open
the "Other" type IO card dialog box.
4 Enter the values shown in the following illustration to define the module
correctly for the MicroLogix processor, and then click OK to save your
configuration.
The Input Words and Output Words parameters will depend on the Block
Transfer Size parameter you specify in the configuration file. Use the values
from the following table.
5 Click OK to continue.
6 After completing the module setup, the I/O Configuration dialog box will
display the module's presence.
The last step is to add the ladder logic. If you are using the example ladder logic,
adjust the ladder to fit your application.
Download the new application to the controller. If you encounter errors when you
attempt to run the program, refer to Diagnostics and Troubleshooting (page 79)
for information on how to connect to the module's Config/Debug port to use its
troubleshooting features.
In This Chapter
LED Status Indicators ............................................................................ 80
Using ProSoft Configuration Builder (PCB) for Diagnostics................... 82
Reading Status Data from the Module .................................................. 92
4.1.3 Troubleshooting
Use the following troubleshooting steps if you encounter problems when the
module is powered up. If these steps do not resolve your problem, please contact
ProSoft Technology Technical Support.
Processor Errors
Problem Description Steps to take
Processor Fault Verify that the module is plugged into the slot that has been configured for the
module.
Verify that the slot in the rack configuration has been set up correctly in the
ladder logic.
Processor I/O LED This indicates a problem with backplane communications. Verify that all
flashes modules in the rack are configured in the ladder logic.
The module has a power supply distance rating of 2 on CompactLogix,
meaning that there must not be more than one other module between the
MVI69-MNET module and the power supply. If the module is used in a
MicroLogix system, verify that the backplane can supply the 800 mA required
by the module.
Module Errors
Problem Description Steps to take
BP ACT LED remains This indicates that backplane transfer operations are failing. Connect to the
OFF or blinks slowly module’s Configuration/Debug port to check this.
To establish backplane communications, verify the following items:
The processor is in RUN mode
The backplane driver is loaded in the module
The module is configured for read and write block data transfer
The ladder logic handles all read and write block situations
The module is configured in the processor
OK LED remains RED The program has halted or a critical error has occurred. Connect to the
Configuration/Debug port to see if the module is running. If the program has
halted, turn off power to the rack, remove the card from the rack and re-
insert the card in the rack, and then restore power to the rack.
Tip: You can have a ProSoft Configuration Builder Diagnostics window open for more than one
module at a time.
1 Click to configure the connection. On the Connection Setup dialog box, select
a valid com port or other connection type supported by the module.
2 Verify that the null modem cable is connected properly between your
computer’s serial port and the module. A regular serial cable will not work.
3 On computers with more than one serial port, verify that your communication
program is connected to the same port that is connected to the module.
If you are still not able to establish a connection, contact ProSoft Technology for
assistance.
4.2.2 Navigation
All of the submenus for this module contain commands to redisplay the menu or
return to the previous menu. You can always return from a submenu to the next
higher menu by pressing [M] on your keyboard.
The organization of the menu structure is represented in simplified form in the
following illustration:
The remainder of this section shows the menus available for this module, and
briefly discusses the commands available to you.
Keystrokes
The keyboard commands on these menus are usually not case sensitive. You
can enter most commands in lowercase or uppercase letters.
The menus use a few special characters (?, -, +, @) that must be entered exactly
as shown. Some of these characters will require you to use the SHIFT, CTRL, or
ALT keys to enter them correctly. For example, on US English keyboards, enter
the ? command as SHIFT and /.
Also, take care to distinguish the different uses for uppercase letter "eye" (I),
lowercase letter "el" (L), and the number one (1). Likewise, uppercase letter "oh"
(O) and the number zero (0) are not interchangeable. Although these characters
look alike on the screen, they perform different actions on the module and may
not be used interchangeably.
Caution: Some of the commands available to you from this menu are designed for advanced
debugging and system testing only, and can cause the module to stop communicating with the
processor or with other devices, resulting in potential data loss or other communication failures.
Use these commands only if you fully understand their potential effects, or if you are specifically
directed to do so by ProSoft Technology Technical Support Engineers.
There may be some special command keys that are not listed on the menu but that may activate
additional diagnostic or debugging features. If you need these functions, you will be advised how to
use them by Technical Support. Please be careful when pressing keys so that you do not
accidentally execute an unwanted command.
Tip: To determine the number of blocks transferred each second, mark the numbers displayed at a
specific time. Then some seconds later activate the command again. Subtract the previous
numbers from the current numbers and divide by the quantity of seconds passed between the two
readings.
Tip: Repeat this command at one-second intervals to determine the frequency of program
execution.
All data contained in the module’s database is available for viewing using the
commands. Refer to the Modbus Protocol Specification (page 132) for
information on the structure of Modbus messages. Each option available on the
menu is discussed in the following topics.
Command Description
[0] Display registers 0 to 99
[1] Display registers 1000 to 1099
[2] Display registers 2000 to 2099
And so on. The total number of register pages available to view depends on your
module’s configuration.
Combinations of errors will result in more than one bit being set in the error word.
Correct any invalid data in the configuration for proper module operation. A value
of zero (0) in this word indicates all bits are clear, which means that all module
configuration parameters contain valid values. However, this does not mean that
the configuration is valid for the user application. Make sure each parameter is
set correctly for the intended application.
For every command that has an error, the module automatically sets the poll
delay parameter to 30 seconds. This instructs the module to wait 30 seconds
until it attempts to issue the command again.
As the commands in the Client Command List are polled and executed, an error
value is maintained in the module for each command. This error list can be
transferred to the processor.
Note: When the Client gets error -47 or -48, it uses the adjustable ARP Timeout parameter in the
configuration file to set an amount of time to wait before trying again to connect to this non-existent
server. This feature allows the Client to continue sending commands and polling other existing
servers, while waiting for the non-existent server to appear on the network.
5 Reference
In This Chapter
Product Specifications ........................................................................... 99
Functional Overview ............................................................................ 102
Cable Connections .............................................................................. 128
Modbus Protocol Specification ............................................................ 132
Server Specifications
The MVI69-MNET module accepts Modbus function code commands of 1, 2, 3,
4, 5, 6, 8, 15, 16, 22 and 23 from an attached Modbus Client unit. A port
configured as a Modbus server permits a remote Client to interact with all data
contained in the module. This data can be derived from other Modbus server
devices on the network, through a Client port, or from the CompactLogix or
MicroLogix processor.
Client Specifications
A port configured as a virtual Modbus Client device on the MVI69-MNET module
actively issues Modbus commands to other nodes on the Modbus network. One
hundred (100) commands are supported on each port. Additionally, the Client
ports have an optimized polling characteristic that polls servers with
communication problems less frequently. The CompactLogix or MicroLogix
processor can be programmed to control the activity on the port by actively
selecting commands from the command list to execute or issuing commands
directly from the ladder logic.
The following illustration shows the data transfer method used to move data
between the processor, the MVI69-MNET module and the Modbus TCP/IP
network.
All data transferred between the module and the processor over the backplane is
through the input and output images. Ladder logic must be written in the
processor to interface the input and output image data with data contained in the
controller tags. All data used by the module is stored in its internal database. This
database is defined as a virtual Modbus data table with addresses from 0 (40001
Modbus) to 4999 (45000 Modbus).
Register Data
4999
Data contained in this database is transferred in blocks, or pages, using the input
and output images. Processor ladder logic and the MVI69-MNET module's
program work together to coordinate these block transfers. The block structure of
each block type depends on the data content and the data transfer function to be
performed by the block. The module uses the following block identification
numbers.
These block identification codes can be broken down into two groups:
Normal data transfer blocks
Read, Write and Status blocks (-1 to 84)
Special function blocks
Initialize Output Data blocks (1000 to 1083)
Event Command block (2000)
Command Control blocks (5001 to 5006)
Pass-through blocks (9956 to 9959, 9961, 9970 and 9996
Warm-boot and Cold-boot blocks (9998 and 9999)
This sequence will continue until interrupted by other special function blocks sent
by the processor, by a command request from a node on the Modbus network, or
by operator control through the module’s Configuration/Debug port.
The following topics describe the function and structure of each block.
Read Block
These blocks of data transfer information from the module to the CompactLogix
processor. The structure of the input image used to transfer this data is shown
below:
The Read Block ID is an index value used to determine where the data from
module memory will be placed in the ReadData[x] controller tag array of the
processor. The number of data words per transfer depends on the configured
Block Transfer Size parameter in the configuration file (possible values are 60,
120, or 240).
The Write Block ID associated with the block requests data from the processor.
The following example shows a typical backplane communication application.
If the backplane parameters are configured as follows:
Read Register Start: 0
Read Register Count: 480
Write Register Start: 480
Write Register Count: 480
The backplane communication would be configured as follows:
Write Block
These blocks of data transfer information from the CompactLogix or MicroLogix
processor to the module. The structure of the output image used to transfer this
data is shown below.
The Write Block ID is an index value used to determine the location in the
module’s database where the data will be placed. The number of data words per
transfer depends on the configured Block Transfer Size parameter in the
configuration file (possible values are 60, 120, or 240).
Status Block
The Status block is automatically copied from the module into the
MNET.STATUS controller tag structure when the Read Block ID is 0 or -1, and
contains module, server and Client status information. The third column in the
table below contains the controller tags corresponding to each word in the block,
if applicable. For a more complete description of the block contents, see the
Status Data Definition (page 93).
Ladder logic in the processor must recognize these blocks and place the correct
information in the output image to be returned to the module. The format of the
returned write block is shown in the following table.
Note: Event Commands are not needed for normal Modbus command list polling operations and
are needed only occasionally for special circumstances.
During routine operation, the module continuously cycles through the user-
defined MNET Client 0 Command List (page 55), examining commands in the
order they are listed and sending enabled commands on the network. However,
the module also has a special command priority queue, which is an internal
buffer that holds commands from special function blocks until they can be sent
on the network.
When one or more commands appear in the command priority queue:
1 The routine polling process is temporarily interrupted.
2 The commands in the command priority queue are executed until the queue
is empty.
3 Then the module goes back to where it left off on the MNET Client 0
Command List and continues routine polling.
Event Command blocks send Modbus TCP/IP commands directly from controller
tags by ladder logic to the Client command priority queue on the module. Event
Commands are not placed in the module's internal database and are not part of
the MNET Client 0 Command List.
When the module receives this request block, it builds the command, places the
command in the command priority queue (if the queue is not already full;
maximum capacity is 100 commands), and returns a response block to tell the
ladder logic whether or not the command has been successfully added to the
queue.
Word 2 of the block can be used by the ladder logic to determine whether or not
the command was successfully added to the command priority queue. The
command will fail if the queue for the port is already full at the time when the
Event Command block is received by the module.
Controller Tags
The elements of the MNET.CONTROL.EventCmd controller tag structure contain
all the values needed to build one Modbus TCP/IP command, have it sent to the
module, and control the processing of the returned response block.
Note: Command Control is not needed for normal Modbus command list polling operations and are
needed only occasionally for special circumstances.
During routine operation, the module continuously cycles through the user-
defined MNET Client 0 Command List (page 55), examining commands in the
order they are listed and sending enabled commands on the network. However,
the module also has a special command priority queue, which is an internal
buffer that holds commands from special function blocks until they can be sent
on the network.
When one or more commands appear in the command priority queue:
1 The routine polling process is temporarily interrupted.
2 The commands in the command priority queue are executed until the queue
is empty.
3 Then the module goes back to where it left off on the MNET Client 0
Command List and continues routine polling.
Like Event Command blocks, Command Control blocks place commands into the
module’s command priority queue. Unlike Event Commands blocks, which
contain all the values needed for one command, Command Control is only used
with commands already defined in the MNET Client 0 Command List.
Commands in the MNET Client 0 Command List may be either enabled for
routine polling or disabled and excluded from routine polling. A disabled
command has its Enable parameter set to NO (0) and is skipped during routine
polling. An enabled command has its Enable parameter set to YES (1) and is
sent during routine polling. However, Command Control allows any command in
the predefined MNET Client 0 Command List to be added to the command
priority queue, whether it is enabled for routine polling or not.
Command Control also gives you the option to use ladder logic to have
commands from the MNET Client 0 Command List executed at a higher priority
and out of routine order, if such an option might be required in special
circumstances.
A single Command Control block request can place up to six commands from the
MNET Client 0 Command List into the command priority queue.
The last digit in the block identification code indicates the number of commands
to process. For example, a block identification code of 5003 indicates that three
commands are to be placed in the queue. In this case, the first three of the six
available Command Indexes will be used to determine exactly which three
commands will be added to the queue, and to set their order of execution.
Values to enter for the six Command Indexes range from 0 to 99 and correspond
to the MNET Client 0 Command List entries, which are numbered from 1 to 100.
To determine the Command Index value, subtract one (1) from the row number
of the command in the MNET Client 0 Command List, as seen in the Command
Editor window of ProSoft Configuration Builder (PCB).
The module responds to a Command Control block request with a response
block, indicating the number of commands added to the command priority queue.
Controller Tags
The MNET.CONTROL.CmdControl controller tag structure holds all the values
needed to create one Command Control block, have it sent to the module, and
control the processing of the returned response block.
This will inform the module that the command has been processed and can be
cleared from the pass-through queue.
In formatted pass-through mode, the module will process the received write
request and generate a special block dependent on the function received. There
are two modes of operation when the formatted pass-through mode is selected. If
code 2 is utilized (no swap), the data received in the message is presented in the
order expected by the processor. If code 3 is utilized (swap mode), the bytes in
the data area of the message will be swapped. This selection is applied to all
received write requests. The block identification code used with the request
depends on the Modbus function requested.
The ladder logic should copy and parse the received message and control the
processor as expected by the Client device. The processor must respond to the
formatted Pass-through blocks with a Write block. The following table describes
the format of the Write blocks.
Response Blocks 9956, 9957, 9958, 9959, 9961, or 9970 from Processor to Module
Word Offset Description Length
0 Write Block IDs 9956, 9957, 9958, 9959, 9961 or 9970 1
1 to 61 Spare 61
WARNING: If you do not add logic to read and store module performance and error data in your
RSLogix5000 ladder logic program, SCADA system, or other MNET device, that status data will be
lost whenever you cycle power to the module or whenever you send Block ID 9997. Once gone, it
can no longer be retrieved from module memory. Only data acquired since the most recent power-
up or issuance of Block 9997 will be available in the module's status registers.
Server Driver
The server driver allows the MVI69-MNET module to respond to data read and
write commands issued by Clients on the Modbus TCP/IP network. The following
flowchart describes the flow of data into and out of the module.
Counters are available in the Status block that permit the ladder logic program to
determine the level of activity of the server driver.
An exception to normal processing is when the pass-through mode is
implemented. In this mode, all write requests are passed directly to the processor
and are not placed in the database. This permits direct, remote control of the
processor without changes in the intermediate database. This mode is especially
useful for Client devices that do not send both states of control. For example, a
SCADA system may only send a SET command to a digital control point and
never send a CLEAR command to that same digital point address because it
expects the processor logic to reset the control bit. Pass-through must be used to
simulate this mode. The following illustration shows the data flow for a server port
with pass-through enabled.
Client Driver
In the Client driver, the MVI69-MNET module issues read or write commands to
servers on the Modbus TCP/IP network. The commands originate either from the
module's user-configured Client 0 Command List, or directly from the processor
as Event Commands. The commands from the Client 0 Command List are
executed either via routine polling or as a result of special Command Control
block requests from the processor. The following flowchart describes the flow of
data into and out of the module.
1 The Client driver obtains configuration data when the module restarts. This
includes the timeout parameters and the Command List. These values are
used by the driver to determine the type of commands to be issued to servers
on the Modbus TCP/IP network.
2 When configured, the Client driver begins transmitting read and/or write
commands to servers on the network. The data for write commands is
obtained from the module's internal database.
3 Assuming successful processing by the server specified in the command, a
response message is received into the Client driver for processing.
4 Data received from the server is passed into the module's internal database,
if the command was a read command. Status information is routinely returned
to the processor in the input images.
5 Special functions, such as Event Commands and Command Control options,
can be generated by the processor and sent to the Client driver for action.
Note: Depending on hardware configuration, you may see more than one RJ45 port on the
module. The Ethernet port is labeled Ethernet.
Warning: The MVI69-MNET module is NOT compatible with Power Over Ethernet (IEEE802.3af /
IEEE802.3at) networks. Do NOT connect the module to Ethernet devices, hubs, switches or
networks that supply AC or DC power over the Ethernet cable. Failure to observe this precaution
may result in damage to hardware, or injury to personnel.
Important: The module requires a static (fixed) IP address that is not shared with any other device
on the Ethernet network. Obtain a list of suitable IP addresses from your network administrator
BEFORE configuring the Ethernet port on this module.
You may also view the network configuration using a PC serial port connection
and an ASCII terminal program (like Windows HyperTerminal) by selecting [@]
(Network Menu) and [V] (View) options when connected to the Debug port. For
more information on serial port access, see the chapter on Diagnostics and
Troubleshooting (page 79).
3 Notice how the DF1 driver is opened, and the driver is looking for a processor
on node 1. If the network is being browsed, then you will not be able to stop
this driver. To stop the driver your RSWho screen should look like this:
4 When you have verified that the driver is not being browsed, go to
COMMUNICATIONS > CONFIGURE DRIVERS.
You may see something like this:
If you see the status as running, you will not be able to use this com port for
anything other than communication to the processor. To stop the driver press
the STOP button on the side of the window:
5 After you have stopped the driver you will see the following.
6 You may now use the com port to connect to the debug port of the module.
Note: You may need to shut down and restart your PC before it will allow you to stop the driver
(usually only on Windows NT machines). If you have followed all of the above steps, and it will not
stop the driver, then make sure you do not have RSLogix open. If RSLogix is not open, and you
still cannot stop the driver, then reboot your PC.
Query
This function allows the user to obtain the ON/OFF status of logic coils used to
control discrete outputs from the addressed server only. Broadcast mode is not
supported with this function code. In addition to the server address and function
fields, the message requires that the information field contain the initial coil
address to be read (Starting Address) and the number of locations that will be
interrogated to obtain status data.
The addressing allows up to 2000 coils to be obtained at each request; however,
the specific server device may have restrictions that lower the maximum quantity.
The coils are numbered from zero; (coil number 1 = zero, coil number 2 = one,
coil number 3 = two, and so on).
The following table is a sample read output status request to read coils 0020 to
0056 from server device number 11.
Adr Func Data Start Pt Hi Data Start Pt Lo Data # Of Pts Ho Data # Of Pts Lo Error Check Field
11 01 00 13 00 25 CRC
Response
An example response to Read Coil Status is as shown in Figure C2. The data is
packed one bit for each coil. The response includes the server address, function
code, quantity of data characters, the data characters, and error checking. Data
will be packed with one bit for each coil (1 = ON, 0 = OFF). The low order bit of
the first character contains the addressed coil, and the remainder follow. For coil
quantities that are not even multiples of eight, the last characters will be filled in
with zeros at high order end. The quantity of data characters is always specified
as quantity of RTU characters, that is, the number is the same whether RTU or
ASCII is used.
Because the server interface device is serviced at the end of a controller's scan,
data will reflect coil status at the end of the scan. Some servers will limit the
quantity of coils provided each scan; thus, for large coil quantities, multiple PC
transactions must be made using coil status from sequential scans.
Adr Func Byte Data Coil Data Coil Data Coil Data Coil Data Coil Error
Count Status 20 to Status 28 to Status 36 to Status 44 to Status 52 to Check
27 35 43 51 56 Field
11 01 05 CD 6B B2 OE 1B CRC
Query
This function allows the user to obtain the ON/OFF status of discrete inputs in the
addressed server PC Broadcast mode is not supported with this function code. In
addition to the server address and function fields, the message requires that the
information field contain the initial input address to be read (Starting Address)
and the number of locations that will be interrogated to obtain status data.
The addressing allows up to 2000 inputs to be obtained at each request;
however, the specific server device may have restrictions that lower the
maximum quantity. The inputs are numbered form zero; (input 10001 = zero,
input 10002 = one, input 10003 = two, and so on, for a 584).
The following table is a sample read input status request to read inputs 10197 to
10218 from server number 11.
Adr Func Data Start Pt Hi Data Start Pt Lo Data #of Pts Hi Data #of Pts Lo Error Check Field
11 02 00 C4 00 16 CRC
Response
An example response to Read Input Status is as shown in Figure C4. The data is
packed one bit for each input. The response includes the server address,
function code, quantity of data characters, the data characters, and error
checking. Data will be packed with one bit for each input (1=ON, 0=OFF). The
lower order bit of the first character contains the addressed input, and the
remainder follow. For input quantities that are not even multiples of eight, the last
characters will be filled in with zeros at high order end. The quantity of data
characters is always specified as a quantity of RTU characters, that is, the
number is the same whether RTU or ASCII is used.
Because the server interface device is serviced at the end of a controller's scan,
data will reflect input status at the end of the scan. Some servers will limit the
quantity of inputs provided each scan; thus, for large coil quantities, multiple PC
transactions must be made using coil status for sequential scans.
Adr Func Byte Data Discrete Input Data Discrete Input Data Discrete Input Error Check Field
Count 10197 to 10204 10205 to 10212 10213 to 10218
11 02 03 AC DB 35 CRC
Query
Read Holding Registers (03) allows the user to obtain the binary contents of
holding registers 4xxxx in the addressed server. The registers can store the
numerical values of associated timers and counters which can be driven to
external devices. The addressing allows up to 125 registers to obtained at each
request; however, the specific server device may have restriction that lower this
maximum quantity. The registers are numbered form zero (40001 = zero, 40002
= one, and so on). The broadcast mode is not allowed.
The example below reads registers 40108 through 40110 from server 584
number 11.
Adr Func Data Start Reg Hi Data Start Reg Lo Data #of Regs Hi Data #of Regs Lo Error Check Field
11 03 00 6B 00 03 CRC
Response
The addressed server responds with its address and the function code, followed
by the information field. The information field contains 1 byte describing the
quantity of data bytes to be returned. The contents of the registers requested
(DATA) are two bytes each, with the binary content right justified within each pair
of characters. The first byte includes the high order bits and the second, the low
order bits.
Because the server interface device is normally serviced at the end of the
controller's scan, the data will reflect the register content at the end of the scan.
Some servers will limit the quantity of register content provided each scan; thus
for large register quantities, multiple transmissions will be made using register
content from sequential scans.
In the example below, the registers 40108 to 40110 have the decimal contents
555, 0, and 100 respectively.
Adr Func ByteCnt Hi Data Lo Data Hi Data Lo Data Hi Data Lo Data Error Check Field
11 03 06 02 2B 00 00 00 64 CRC
Query
Function code 04 obtains the contents of the controller's input registers at
addresses 3xxxx. These locations receive their values from devices connected to
the I/O structure and can only be referenced, not altered from within the
controller, The addressing allows up to 125 registers to be obtained at each
request; however, the specific server device may have restrictions that lower this
maximum quantity. The registers are numbered for zero (30001 = zero, 30002 =
one, and so on). Broadcast mode is not allowed.
The example below requests the contents of register 3009 in server number 11.
Adr Func Data Start Reg Hi Data Start Reg Lo Data #of Regs Hi Data #of Regs Lo Error Check Field
11 04 00 08 00 01 CRC
Response
The addressed server responds with its address and the function code followed
by the information field. The information field contains 1 byte describing the
quantity of data bytes to be returned. The contents of the registers requested
(DATA) are 2 bytes each, with the binary content right justified within each pair of
characters. The first byte includes the high order bits and the second, the low
order bits.
Because the server interface is normally serviced at the end of the controller's
scan, the data will reflect the register content at the end of the scan. Each PC will
limit the quantity of register contents provided each scan; thus for large register
quantities, multiple PC scans will be required, and the data provided will be form
sequential scans.
In the example below the register 3009 contains the decimal value 0.
Adr Func Byte Count Data Input Reg Hi Data Input Reg Lo Error Check Field
11 04 02 00 00 E9
Query
This message forces a single coil either ON or OFF. Any coil that exists within
the controller can be forced to either state (ON or OFF). However, because the
controller is actively scanning, unless the coil is disabled, the controller can also
alter the state of the coil. Coils are numbered from zero (coil 0001 = zero, coil
0002 = one, and so on). The data value 65,280 (FF00 HEX) will set the coil ON
and the value zero will turn it OFF; all other values are illegal and will not affect
that coil.
The use of server address 00 (Broadcast Mode) will force all attached servers to
modify the desired coil.
Note: Functions 5, 6, 15, and 16 are the only messages that will be recognized as valid for
broadcast.
Adr Func Data Coil # Hi Data Coil # Lo Data On/off Ind Data Error Check Field
11 05 00 AC FF 00 CRC
Response
The normal response to the Command Request is to re-transmit the message as
received after the coil state has been altered.
Adr Func Data Coil # Hi Data Coil # Lo Data On/ Off Data Error Check Field
11 05 00 AC FF 00 CRC
Note: The Modbus protocol does not include standard functions for testing or changing the
DISABLE state of discrete inputs or outputs. Where applicable, this may be accomplished via
device specific Program commands (In ProSoft products, this is only accomplished through ladder
logic programming).
Coils that are reprogrammed in the controller logic program are not automatically
cleared upon power up. Thus, if such a coil is set ON by function Code 5 and
(even months later), an output is connected to that coil, the output will be "hot".
Query
Function (06) allows the user to modify the contents of a holding register. Any
holding register that exists within the controller can have its contents changed by
this message. However, because the controller is actively scanning, it also can
alter the content of any holding register at any time. The values are provided in
binary up to the maximum capacity of the controller unused high order bits must
be set to zero. When used with server address zero (Broadcast mode) all server
controllers will load the specified register with the contents specified.
Note Functions 5, 6, 15, and 16 are the only messages that will be recognized as valid for
broadcast.
Adr Func Data Start Reg Data Start Reg Data #of Regs Hi Data #of Regs Lo Error Check Field
Hi Lo
11 06 00 01 00 03 CRC
Response
The response to a preset single register request is to re-transmit the query
message after the register has been altered.
Adr Func Data Reg Hi Data Reg Lo Data Input Reg Hi Data Input Reg Lo Error Check Field
11 06 00 01 00 03 CRC
Request Response
Field Name (Hex) Field Name (Hex)
Function 08 Function 08
Sub-function Hi 00 Sub-function Hi 00
Sub-function Lo 00 Sub-function Lo 00
Data Hi A5 Data Hi A5
Data Lo 37 Data Lo 27
The data fields in responses to other kinds of queries could contain error counts
or other data requested by the sub-function code.
Query
This message forces each coil in a consecutive block of coils to a desired ON or
OFF state. Any coil that exists within the controller can be forced to either state
(ON or OFF). However, because the controller is actively scanning, unless the
coils are disabled, the controller can also alter the state of the coil. Coils are
numbered from zero (coil 00001 = zero, coil 00002 = one, and so on). The
desired status of each coil is packed in the data field, one bit for each coil (1=
ON, 0= OFF). The use of server address 0 (Broadcast Mode) will force all
attached servers to modify the desired coils.
Note: Functions 5, 6, 15, and 16 are the only messages (other than Loopback Diagnostic Test) that
will be recognized as valid for broadcast.
The following example forces 10 coils starting at address 20 (13 HEX). The two
data fields, CD =1100 and 00 = 0000 000, indicate that coils 27, 26, 23, 22, and
20 are to be forced on.
Adr Func Hi Add Lo Quantity Byte Data Coil Status Data Coil Status Error Check
Add Cnt 20 to 27 28 to 29 Field
11 0F 00 13 00 0A 02 CD 00 CRC
Response
The normal response will be an echo of the server address, function code,
starting address, and quantity of coils forced.
Query
Holding registers existing within the controller can have their contents changed
by this message (a maximum of 60 registers). However, because the controller is
actively scanning, it also can alter the content of any holding register at any time.
The values are provided in binary up to the maximum capacity of the controller
(16-bit for the 184/384 and 584); unused high order bits must be set to zero.
Note: Function codes 5, 6, 15, and 16 are the only messages that will be recognized as valid for
broadcast.
Response
The normal response to a function 16 query is to echo the address, function
code, starting address and number of registers to be loaded.
Request Response
Field Name (Hex) Field Name (Hex)
Function 01 Function 81
Starting Address Hi 04 Exception Code 02
Starting Address Lo A1
Quantity of Outputs Hi 00
Quantity of Outputs Lo 01
In this example, the Client addresses a request to server device. The function
code (01) is for a Read Output Status operation. It requests the status of the
output at address 1245 (04A1 hex). Note that only that one output is to be read,
as specified by the number of outputs field (0001).
If the output address is non-existent in the server device, the server will return
the exception response with the exception code shown (02). This specifies an
illegal data address for the server.
In This Chapter
Contacting Technical Support ............................................................. 147
Return Material Authorization (RMA) Policies and Conditions............. 149
LIMITED WARRANTY ......................................................................... 151
Note: For technical support calls within the United States, an after-hours answering system allows
24-hour/7-days-a-week pager access to one of our qualified Technical and/or Application Support
Engineers. Detailed contact information for all our worldwide locations is available on the following
page.
** Some areas do not allow time limitations on an implied warranty, or allow the exclusion or
limitation of incidental or consequential damages. In such areas, the above limitations may not
apply. This Warranty gives you specific legal rights, and you may also have other rights which vary
from place to place.
D
Data Flow between MVI69-MNET Module and
Processor • 123
Index DB9 to RJ45 Adaptor (Cable 14) • 132
Diagnostics (Function Code 08) • 140
Diagnostics and Troubleshooting • 9, 78, 79, 129
0 Disabling the RSLinx Driver for the Com Port on the
PC • 130
00 Return Query Data • 140 Disclaimer of all Other Warranties • 153
A Disclaimer Regarding High Risk Activities • 152
Downloading the Project to the Module Using a Serial
About the MODBUS TCP/IP Protocol • 133 COM Port • 67
Adding Multiple Modules (Optional) • 34 Downloading the Sample Program to the Processor •
Adding the Module to an Existing CompactLogix 41
Project • 19, 20, 73 Duplex/Speed Code • 51
Adding the Module to an Existing MicroLogix Project •
19, 20, 73, 77 E
Allocation of Risks • 154 Enable • 57
ARP Timeout • 54 Ethernet Configuration • 66
B Ethernet Connection • 128
Ethernet LED Indicators • 80
Backplane Data Transfer • 102 Ethernet Port Configuration - wattcp.cfg • 129
Backplane Error/Status Pointer • 49, 92 Event Command Block (2000) • 113
Battery Life Advisory • 4 Example and State Diagram • 140
Bit Input Offset • 63 Exiting the Program • 89
Block Transfer Size • 50
F
C
Failure Flag Count • 50
Cable Connections • 128 Float Flag • 53, 62
Clearing a Fault Condition • 81 Float Offset • 54, 63
Client Command Errors • 96, 127 Float Start • 53, 63
Client Command List • 127 Force Multiple Coils (Function Code 15) • 142
Client Driver • 126 Force Single Coil (Function Code 05) • 138
Client Error/Status Pointer • 52, 92 Functional Overview • 102
Cold Boot Block (9999) • 122 Functional Specifications • 100
Command Control Blocks (5001 to 5006) • 116
Command Entry Formats • 56 G
Command Error Delay • 54 Guide to the MVI69-MNET User Manual • 9
Command Error Pointer • 52, 92
Command List Entry Errors • 97 H
Command List Overview • 55
Commands Supported by the Module • 56 Hardware MAC Address • 65
Comment • 61 Hardware Specifications • 101
Configuration Error Word • 95 Holding Register Offset • 64
Configuring Module Parameters • 47 How to Contact Us • 2
Configuring the MVI69-MNET Module • 19
Configuring the RSLinx Driver for the PC COM Port •
I
42 Important Installation Instructions • 3
Connecting Your PC to the Module • 44 Importing the Ladder Rung • 24
Connecting Your PC to the Processor • 40 Initialize Output Data • 51
Connection Timeout • 64 Initialize Output Data Blocks (1000 to 1083) • 112
Contacting Technical Support • 147, 149 Installing ProSoft Configuration Builder Software • 14
Controller Tags • 69 Installing the Module • 16
Controlling Law and Severability • 155 Intellectual Property Indemnity • 153
Creating a New RSLogix 5000 Project • 21 Internal Address • 58
Creating the Module • 22 IP Address • 65
U
User-Defined Data Types (UDTs) • 71
Using Controller Tags • 73
Using ProSoft Configuration Builder • 45
Using ProSoft Configuration Builder (PCB) for
Diagnostics • 82, 92
Using the Diagnostic Window in ProSoft Configuration
Builder • 82
V
Viewing Block Transfer Statistics • 86
Viewing Client Configuration • 88
Viewing Client Status • 88
Viewing Data in ASCII (Text) Format • 91
Viewing Data in Decimal Format • 90
Viewing Data in Floating-Point Format • 91
Viewing Data in Hexadecimal Format • 90
Viewing Module Configuration • 87
Viewing Network Status • 88
Viewing NIC Status • 88
Viewing Register Pages • 90
Viewing Server Configuration • 88
Viewing the Next Page of Registers • 90
Viewing the Previous Page of Registers • 90
Viewing the Static ARP Table • 88
Viewing the WATTCP.CFG File on the module • 91
Viewing Version Information • 87
W
Warm Boot Block (9998) • 122
Warm Booting the Module • 88
Warnings • 3
What Is Covered By This Warranty • 151, 153
What Is Not Covered By This Warranty • 152
Word Input Offset • 64
Write Block • 109
Write Register Count • 50
Write Register Start • 50
Y
Your Feedback Please • 2