• EIM Controlinc 320A Quick Startup Guide, Rev. F or later
• EIM Controlinc 320B Quick Startup Guide, Rev. A or later
2. Refer to Section 2 of this manual on how the jumpers should be set on the BASIC module.
3. The 1746-C module comes from EIM pre-programmed with the network master program in it. However, if
for some reason the module needs to be flashed again (ex: a field upgrade) then refer to Section 5 on
installing the firmware in the module.
Note: Remember, you will need to connect a serial cable between the 1746-C and the computer. The
correct cable is a Null Modem Cable
the module) and the serial communications port on the computer used for the upload.
4. Ensure the PLC rack power is turned off.
Install the module in the correct slot in the PLC rack. Connect all cables and power the system up.
5. The PLC-RLL will start interfacing with the 1746-C after the 1746-C performs initial scans of the network
on power up.
NOTES: To ensure optimal performance, some things the PLC should do …
1. Ensure table [0] is set correctly and repeated in a timely manner. Allow for frequent table [0] read backs.
2. Restrict the rate of data writes to the actuators … only write as fast as required to adequately control the
valve.
(cuts down on the interruptions to scanning the network … gathering data)
3. Expedite responses to M1 transfer requests made by the 1746-C. Delaying them can slow 1746-C
operations.
4. Only activate writing to or reading from tables if actually in use (or when needed).
(ex: do not write to the analog output table if analog outputs are not used)
(ex: do not read totalizer data if its not being used)
(ex: only poll for “static” [non-changing] data one time and stop)
(prevents unnecessary delays to gathering the more important data from the network)
Remember:
The 1746-C uses explicit read/write commanding of the tables such that if word [1] in any table is
zero (0) then it is a table read request by the PLC. Otherwise, the command is a table write
command.
connected between the PRT1 port (top DB9 connector on
This document is intended for end users as a Guide in applying an EIM
AB 1746-C Network Master.
The software that enables network operation is called a communication driver. It is used in conjunction with an Allen-Bradley 1746-BAS
module thereby creating the 1746-C network master module. The
1746-C allows an AB SLC-500 controller to acquire data from and send
information to an EIM Controlinc Actuator Network.
GENERAL SYSTEM PURPOSE:
The EIM 1746-C network master serves as a data concentrator for
applications that use an AB SLC-500 Programmable Logic Controller
(PLC). The 1746-C module must be located in a slot in the local
chassis (it cannot be mounted in a chassis that is remote from the SLC CPU).
In general, the network master off-loads
network communication and management
tasks from the actual controlling equipment.
The main function of the 1746-C is to provide
the interface between a PLC and its network of
valve actuators. Acting as a Host, the PLC
controls the network by sending data to the
1746-C for routing to a particular actuator.
The 1746-C network master polls the individual
actuators for information and makes it available
to the PLC when requested.
A typical ring topology network and network
master are illustrated in Figure 1. The 1746-C
module serves as a master within this Modbus
(Modbus RTU) master/slave network. The
module will manage network operation by
keeping an orderly cycle of data transfers
between itself and each slave (valve actuator).
The 1746-C master will handle network communication, error detection, alarming, and network
recovery.
Other features include:
• Reporting of inaccessible actuators
• Reporting of network faults
• Emergency shutdown broadcasting
• Minimal Interfacing with the Relay Ladder Logic (RLL) program in the PLC CPU module
Each 1746-C module can support a single network of up to 60 valve actuators. Multiple modules can
be installed in an SLC-500 system rack to provide support for multiple networks (up to 60 actuators
each).
Note 1: It is important to note that the 1746-C Network Master may be used in any slot of the 1746
For the 1746-C system, there is no previous version of the product to reflect functional changes to.
However, any later releases of this document for this version of the product (5.21) are to only correct
entries in this document … primarily grammatical or “typos” that are discovered in the future. Major
ideas will be documented with a separate “line entry”.
Major document changes:
1. This document: 2004-11-18
Previous document: 2004-08-17
Major Change: Memory Maps adjusted.
2. New document: 2004-08-17
Previous document: 2004-08-06
Major Changes: Memory Maps adjusted and this section added.
This manual is required for installing the module and for proper uploading of this driver into the
hardware.
• EIM … Controlinc 320A Quick Startup Guide, Rev. F or later
Publication No. ECL-4004-0102
This manual is used for specific information on the Controlinc 320A Controller card located in
the valve actuator. This includes networking, setup and available options.
This manual is used for specific information on the Controlinc 320B Controller card located in
the valve actuator. This includes networking, setup and available options.
The 1746-C is compatible with the following EIM equipment:
• 320A … version 1.17 and later.
• 320B … all
• TEC2000 … all
Other points:
• The 1746-C derives the system type of each actuator during the diagnostic scan and stores the
results in table [18].
• The 1746-C derives the firmware Version ID for the 320A & 320B systems during the diagnostic
scan and stores the results in table [19].
• Since the TEC2000 system has several micro-controllers with firmware, a special request must
be made to them to derive the firmware version ID for each controller in the unit.
• The SSR bit is only checked and set on 320A actuators.
Note: For maximum compatibility with the TEC2000 systems, it is recommended that you enable
monitoring the TEC2000 Status Inputs (tables [21-24]). This way, you can ensure you have all
critical status information for any TEC2000 system on the network. For more information,
refer to the section on Tables [21-24].
Note: This document references the addressable memory ranges (“Memory Maps”) of several EIM
actuators (ex: M2CP–320B, TEC2000). This is only for the reader’s convenience. The
specific details in the memory maps are only correct as of the date this manual was published.
Therefore, to ensure you have the most current memory information, please refer to the
technical information for that particular actuator.
1.5. Firmware
The firmware is a “driver program” which is a compiled application program (not an interpreted one). It
is loaded and stored in the module's 32K EEPROM (A-B P/N 1747-M2). The user is required to
provide configuration information from the PLC Relay Ladder Logic (RLL) for each specific application
(the RLL must load table [0] with appropriate configuration information).
Refer to Chapter 1 of the 1746-BAS manual. The following hardware jumper settings are required. If the
1746-BAS module was supplied by EIM, jumpers are already set and no other settings are required.
For the 1746-C to run, the jumper
settings should be set as follows:
• JW1 - enable RS232
• JW2 - enable RS232
• JW3 - M2 EEPROM
• JW4 - PRT1 = ASCII
- PRT2 = ASCII
- DH485 = PGM
This jumper configuration is
normally performed by EIM before
shipping the 1746-C.
2.2.1. Green (PRT1 & PRT2) and Yellow (LED1 & LED2) LED Usage
There are 2 “Yellow” LED lights on the front of the 1746-C module
• LED1.
• LED2.
There are currently 3 general functions operating these LEDs:
1. After CPU restart, both LED1 & LED2 are ON until the 1746-C finishes initialization and starts
polling the network.
2. After initialization, LED1 is used as a “starting a new scan” indicator by toggling on/off at the
start of each scan. Ex: Starting scan 1: LED1 is ON.
Starting scan 2: LED1 toggles to the OFF state.
Starting scan 3: LED1 toggles to the ON state.
3. After initialization, LED2 is used as an “entire network is down” indicator. If the 1746-C ever
detects zero (0) actuators on the network, it will turn LED2 on and immediately enter a
diagnostic scan and remain there until an actuator is found to be on-line and communicating.
There are 2 communication LED lights (green LED lights) on the 1746-C module:
• PRT1: Port 1 Transmit … lights up when transmissions are going out port 1.
• PRT2: Port 2 Transmit … lights up when transmissions are going out port 2.
PRT1 & PRT2 (Green) LED App Note: Green LED Lights & System Initialization with Table [0]
After startup, if table [0] is not initialized shortly after the 1746-C finishes its initial diagnostic
scan, the program starts running with factory default settings. This means that unless the
network actually has 60 actuators on it, the 1746-C will believe the “other valves” are just off
line.
Plus, an operator can often determine when the PLC-RLL actually writes to table [0] (configures
the system) by watching the green LED lights.
For instance …
• On a network that actually has 25 valves on it (addressed 1-25), until table [0] – word [4]
gets initialized with 25, the program thinks that there are still supposed to be 60
actuators on the network … only the last 35 happen to be “off line”.
• Then (if viewing the green LED lights) when a scan starts (LED1 changes state), you will
see the green LEDs “flash” while the 1746-C communicates with valves 1-25.
Then you will observe a “dead space” in time when the program is trying to determine if
any of the final 35 valves “it believes to be connected” are available (
are because the network only has 25 valves on it
).
and of course none
• As soon as a new scan starts (all “60” valves have been checked and ready to scan the
network again … LED1 changes state) then the green LEDs will start flickering again
while the 1746-C communicates with valves 1-25.
Then the “dead space” time will be observed again.
This sequence will repeat until the PLC program initializes the 1746-C by writing to table
[0].
The red “BA LOW” LED indicates low battery status. The purpose of the battery in the BASIC module
is to back up portions of RAM and other resources. For guaranteed long-term repeatability of
operations, the EIM 1746-C program does not utilize any of these resources. Therefore, it doesn’t
matter what state the battery is in (installed and fully charged, inline and dead or totally removed from
the unit), the EIM network master program will always run the same.
This also means that a new 1746-C module might run with the BA LOW LED off for a while and then
turn on when the battery dies. This is normal and has NO effect on the system. However, if for
some reason you want to replace the battery, you can order it directly from Allen-Bradley.
In general, the EIM NIU (“Network Interface Unit”) is a “beefed up” and configurable RS232
converter.
The ports on the 1746-C, Port1 (PRT1) and
Port 2 (PRT2), are configured for serial
communication using RS-232.
SLC-500 with
1746-C installed
1746-C
The network communication parameters are
pre-configured and fixed at 9600 baud – 8 bit
– no parity – 1 stop bit.
The NIU isolates and protects the 1746-C
and the PLC from the network and is
powered by its own 120 AC circuit. Its
primary function is to convert RS232
communications to RS485 communications.
The RS485 connection then communicates
to a ring or ring network.
Note: To help with isolation, there are two
(2) entirely separate boards in the NIU.
However, because of this, there are two (2)
120 VAC connections to the NIU. Ensure
Figure 1
that both are connected (you can jumper the
circuits together).
The Controlinc network is connected to the 1746-C module via the Network Interface Unit (NIU). It
doesn’t matter if you connect:
• Port 2 (PRT2) (bottom DB9 connector): connects to the NIU at the port labeled “HOST A”.
• Port 1 (PRT1) (top DB9 connector): connects to the NIU at the port labeled “HOST B”.
or
• Port 1 (PRT1) (top DB9 connector): connects to the NIU at the port labeled “HOST A”.
• Port 2 (PRT2) (bottom DB9 connector): connects to the NIU at the port labeled “HOST B”.
However, it is recommended that you remain consistent.
NOTE: You can always connect a PC to the network at the NIU if you …
• Disconnect the cable connecting the 1746-C and NIU.
• Connect the PC using a (serial cable + NULL modem) to the DB9 connector on the NIU.
Communication connections and wiring are important for the network and the master.
(
3.1.1. Step 1. Plan the Network Topology
Before connecting actuators, the entire network layout should be planned. Topologies may be bus,
redundant bus, E>Net, redundant E>Net, E>Net ring, and redundant E>Net rings. Planning should
include node addressing, wire routing, terminations, and grounding.
3.1.2. Step 2. Select Network Cable
Ensure correct cable is being used.
The following are acceptable Belden or equivalent cables for most network applications.
The following information was primarily derived from the Controlinc Quick Startup Guide)
• Networks require twisted pair and shielded cable with characteristic impedance between 50 and
120 Ohms.
• Capacitance between conductors must be less that 30 pF/Ft (98 pF/M); 10-15pF/Ft is ideal.
• Shielding maybe aluminum foil with drain wire.
• If cable has multiple pairs, then individual pair shielding is required.
• Only cables with stranded conductors are recommended.
• Insulating and outer jacket materials must be selected for the application environment.
3.1.3. Step 3. Route Cable away from Electrical Interference
Network cables should enter the electrical enclosures and the
bottom or lowest point (on 320A systems, this is near the
transformer end and normally in a counter clockwise direction
to the topside of the TBM). Never install network cable in the
same conduit with power conductors. Never route the network
cable through the high voltage contactor area. On 320A
systems, the cable should never lie across the TBM or hinder
the protective cover of the TBM. Always use the shortest
distance and keep access cable to a minimum.
See Figure 3-1
3.1.4. Step 4. Observe Polarity and Network
Grounding
Each network connection is polarized + and - on wiring
diagrams. Always use consistency in wiring and the use of
wire colors to track polarity. The cable shield (or “drain wire”)
must be connected to the designated “shield” terminal at each
port of each actuator. The shield must be connected to earth
ground at only one point. Some networks require a jumper
between the shield connections on ports A & B of the actuator
to carry the shielding through the network. The shield
connection of each actuator is isolated from earth ground.
Do not allow the shield to touch other circuits or the metal enclosure.
Figure 3-1
Correct termination of the Network
to a Controlinc 320A Actuator
3.1.5. Step 5. Wire Preparation and Connections
Screw terminal connections on the TBM and in the TEC2000 terminal chamber have wire clamps,
which will accept conductors with out terminals. Wire terminals may be applied if desired but are not
required. Strip conductor insulation back 3/8” when connecting directly to the TBM screw terminals. Do
not allow wire clippings to fall on the TBM or into the enclosure.
Protect the conductors and shield to prevent them from contacting any other circuits or earth ground.
Use plastic electrical tape or heat shrink tubing to prevent bare conductors from contacting other
circuits or earth ground.
See Figure 3-1
3.1.6. Step 6. Test Network
Use EIM’s Configuration and Control Utility (CCU) to test the network prior to connecting to the host or
network master. The CCU is a Windows application, which will run on a laptop. Use a RS232 to RS485
adapter or EIM’s Network Interface Unit (NIU) to connect the laptop to the network. Test each actuator,
one at a time, to determine that all network connections are good and each actuator is functional via the
network in remote.
Refer to Figure 3-2 for terminals on the EIM
Network Interface Unit (NIU). The NIU is a dual port
RS232 to RS485 converter specifically designed for
ring networks.
Connect the twisted shielded pair cable of the field
network to NIU Terminals 1 (-), 2 (Shield), 3 (+) of
J1 of Port A.
The network shield must be connected to a good
earth ground at only one shield terminal point on the
NIU.
The network cabling should use recommended
cabling for an RS-485 network able to handle the
distance desired.
There should be little, if any, electrical noise on the
network for the entire length of the network.
Ne twor k
Por t
J1
+
+
Shield
sh
-
-
1
SW1
RXD
TXD
Ground
DB-9 Female
Connector
(1746-C Side)
2
3
5
R S - 2 3 2
R
P
P o r t
2 V A C / D C
1
J3
1
RS232 Cable
J 2
P W R
N I U 8 4 3 2 0
(#37121)
Shield
Figure 3-2
DB-9 Male
Connector
(NIU Side)
Chassis
1
RXD
2
TXD
3
Ground
7
PWR
TxD
RxD
3.3. Cable Connection Between the NIU and the Network Master
Refer to the “
No. 1746-UM004A-US-P 2000”
used for network ports one and two.
Jumpers JW1 & JW2 must be set for RS-232 when connecting with EIM's Network Interface Unit (NIU)
P/N 84320 or a user-supplied modem.
Refer to Figure 3-2 for the pin-out of the DB-9 female connector.
The interface for the PLC with the actuators (through the 1746-C module) is with an array of 25 tables
… 64 words per table with the table number (command) in Word # [0] of each. This is based on the
M0/M1 interface protocol established by Allen-Bradley for the SLC-500 systems.
The 1746-C operates using a “Non-Interruptible Time-Slice Process Allocation
methodology. This means that it must finish executing the process that is executing in its allocated
time-slice before another process can operate. The two processes being scheduled are:
• Scanning the network for data.
• Interfacing with the PLC.
This means that the 1746-C will ignore any new commands from the PLC while scanning the network
(during the network scan time-slice) and no network scanning will take place while processing a
command from the PLC (during the PLC interface time-slice).
” communication
4.1.1. Diagram Describing Relationship Between Process Time Slices
Process time slicing is how the 1746-C divides its time when performing its 2 primary communication
tasks … communicating with the PLC and communicating with the actuator network.
This diagram helps demonstrate the relationship between the two communication processes.
This example demonstrates how a normal scan cycle gets elongated with data writes to the actuators.
The more writes being performed the longer it will take to complete data scans. This is where the
PLC/HMI must make a value decision for the best fit for their application:
• Fast enough repetitive writes to control the system
• Slow enough repetitive to ensure effective feedback to control the system.
4.1.3. Diagram Demonstrating Adding Additional Valves in Valve Scan
Time-Slice
This example demonstrates how increasing the additional number of valves to be scanned before
servicing the PLC communication task decreases the total network scan time.
This is where the PLC/HMI must make a value decision for the best fit for their application:
• Increasing the number: Speeds up data collection Lowers PLC control capabilities.
• Decreasing the number: Slows down data collection Increases PLC control capabilities.
Example of scale for time to scan network … different values for Additional valves in scan time slice:
4.1.4. Diagram Describing Relationship Between Scan Period & Diagnostic
Scan
This example demonstrates the relationship between the diagnostic scans, scan periods, the current
scan period, the previous scan period.
This example: a scan period value of 10 and 25 valves on the network. This means that all the valves
on the network will be scanned 10 times before the scan period is over … and before the next
diagnostic scan is performed.
The 1746-C software boots up on a power up of the 1746-C module. The general sequence is:
1. Illuminate LED1 & LED2 as an indication that the software is initializing itself and the network.
2. Perform basic internal initializations.
3. Perform the initial diagnostic scan of the network and identify all actuators on the network.
4. Finish internal initializations.
5. Turn off LED1 & LED2.
6. Start standard scanning of the network. Initialization is finished. Normal operations
(scanning) have commenced and are allowing PLC communications.
(LED1 toggles ON during the start of this first scan)
Note 1: Remember that the PLC cannot perform any block transfers until after the network master has
finished polling the network for status information and LED2 has been turned off and the
1746-C starts indicating that it is ready for data (after scanning starts).
Note 2: Even though LED1 turns off immediately after the initial scan after power up and then toggles
back on after normal operations start, the user will not normally see this … at the most it
would be a small flicker. Therefore, to the user that is observing the LED behavior after
restart on a system that has actuators communicating, it will appear that …
During the initial scan when the PLC cannot talk to the 1746-C …
LED1 == ON
LED2 == ON.
Immediately after the initial scan when normal operations start (start of 1
LED1 == ON
LED2 == OFF.
4.2.1. Operation: Network Scanning to Gather Valve Actuator Data
The Network Master polls and controls up to 60 valves on the network by sequentially polling
(scanning) each device in sequence from slave actuator address #1 to the last slave address (#n) on its
network.
This polling gathers information from the actuators (including alarms, discrete information and actuator
position) and places it in tables that can be transmitted to the PLC.
The scan operation cannot stop in the middle of a request for data from a particular actuator.
Therefore, the 1746-C can only interface with the PLC once it has finished all required communications
with the actuator it is currently getting data from. Network scanning resumes with the next actuator
after interfacing with the PLC and processing any requests made by the PLC (writes to tables, writes to
actuators, table reads, …).
For example, if the 1746-C is currently scanning actuator [5] and the PLC wants to write a new valve
position setpoint to 22 actuators then the 1746-C will …
1. Finish getting data from actuator [5]
2. Get the new command table from the PLC.
3. Write the new valve position setpoint to all 22 actuators.
4. Restart network scanning where it left off … the next actuator [6] after the last one polled [5].
Standard data is gathered from the actuators by a single Modbus 03 command.
However, a 2
• If requesting totalizer data
• If requesting a specific holding register
• If requesting a block of holding registers from this actuator
• If requesting to monitor the discrete outputs on this actuator
• If requesting TEC2000 input data.
This is one reason why additional data should only be requested when needed … it will slow the entire
scan time of the system (by a minimum of 30-50 ms each time an actuator is polled for this data).
For instance, if all 5 of the above are requested for each actuator, an extra 30-50 ms is required for
EACH … meaning that the scan time could be increased by almost a factor of 5! … dramatically
slowing down the system!
A typical scan time (time to scan all the actuators on the network) to gather “standard” information on
60 actuators is less than 10 seconds … depending upon the 1746-C configuration.
When gathering data, the data is stored in the appropriate tables in the 1746-C. Values in the table
for a particular actuator will not be overwritten if there is an error communicating (on both ports) with the
actuator.
nd
Modbus 03 command is generated if any of the following are true …
4.2.2. Operation: The Network Communication Diagnostic Scan
After a predetermined number of loops through the network scanning the actuators (the “scan period”),
the 1746-C performs a communication diagnostic scan to determine if any “off-line” actuators can come
back on line. If there are any that are ready, the 1746-C will bring them back on line without human
intervention. This is the only time an off-line system can come back on-line.
The number of loops around the network is determined by the “scan period
this value to accommodate site requirements and current operating environments.
Unlike the other operations that access the actuators on the network, the diagnostic scan checks both
ports when communicating with the actuators. Because of this, it also always takes longer to execute
than standard data gathering scans. However, normal data is still gathered during a diagnostic scan.
The only major difference in data gathering between a standard scan and a diagnostic scan is
• In the diagnostic scan, the 1746-C determines actuator system type and actuator firmware
version ID (tables [18 & 19]).
• Both ports are explicitly tested when getting the system type information.
• The diagnostic scan ensures that the hardware ports are set correctly … 9600 - 8N1.
Otherwise, all other data gathering activities are the same as in a normal network scan.
Communication error indications may only be cleared during this scan.
The “scan loop counter
” is always zero (0) during a diagnostic scan … the diagnostic scan does not
count as part of the scans in the scan period. This is the only time the loop counter is zero … during
the diagnostic scan.
The diagnostic scan time increases as you increase the discrepancy between the
(number of valves actually on line and talking
) VS (the number of valves configured to be on line)
Below shows a sample of diagnostic scan times empirically taken on a network when there was no
network “writes to the actuators” (Table [0] was configured for 60 valves). As you can see, as you
increase the number of “off line” units, you increase the diagnostic scan time.
# Nodes “Talking” … On-Line
60 of 60 (#1 – 60) 15
54 of 60 (#7 – 60) 16
48 of 60 (#13 – 60) 17
42 of 60 (#19 – 60) 18
36 of 60 (#25 – 60) 19
30 of 60 (#31 – 60) 20
24 of 60 (#37 – 60) 21
12 of 60 (#49 – 60) 23
6 of 60 (#55 – 60) 23
3 of 60 (#58 – 60) 24
2 of 60 (#59 – 60) 25
1 of 60 (#60) 25
• Though not much, the diagnostic scan time can also vary with the number of valves in the valve
scan time slice.
• The greater the number of valves configured to be on line, the longer the diagnostic scan time
… more valves to check.
• During normal operations, an operator can use the HMI to force the system into a diagnostic
scan by temporarily changing the “scan period” value in table [0] to a value lower than the
current scan loop counter. This will cause the program to enter a diagnostic scan as soon as
this scan loop has finished.
• Because the diagnostic scan detects faulty communication ports and flags them, there can be a
perceived increased performance in the normal network scans because “off-line” actuators have
already been flagged and will be skipped.
The primary interface for the PLC with the 1746-C module is with an array of 25 tables (labeled 0 24)
stored in the 1746-C RAM. Each table is 64-words long and each word is 16-bits. From the
perspective of the PLC interfacing with the network, some of the tables are “read only” and some are
“read/write” (depending upon a command word).
Relative to M0/M1 transfers, from the 1746-C perspective, there is no difference in handling “table
reads” or “table writes” … they both require a M0/M1 file transfer command.
The Relay Ladder Logic (RLL) in the PLC CPU interfaces with the 1746-C module with the M0/M1 file
transfer mechanism and transferring fixed blocks of 64 words (a table) with the table number
(command) in Word # [0] of each transfer.
• To send a table to the 1746-C (either as a write table command or to indicate a particular table
to read back), the PLC must send the desired table in the data portion of the M0 file.
• To read back a table, the PLC must read the M1 file sent from the 1746-C.
Note: Since the 1746-C must be mounted in the local chassis (in the same chassis as the CPU), the
RLL cannot use the BTR/BTW block transfer command set (BTR/BTW commands cannot be
used over the back plane in the SLC systems). Therefore, the RLL must implement the
transfer using the “copy file” command … copying the M0/M1 files back and forth.
Note: Refer to the following Allen Bradley Documents:
• Allen Bradley SLC-500 Instruction Set Reference,
Publication 1747-RM001D-EN-P (November-2003)
The interfacing between the PLC and the 1746-C is performed in the 1746-C module in a section of
RAM that is used as an exchange buffer area. To prevent potential overwriting problems when
performing transfers, there are two separate buffers in this exchange area:
• M0 file … Basic Input Buffer (BIB): PLC fills to send 64 words to the 1746-C.
• M1 file … Basic Output Buffer (BOB): 1746-C fills to send 64 words to the PLC.
This is the only address accessed by the PLC when executing the M0/M1 transfer commands (meaning
that all reads & writes by the PLC are to and from these buffers).