6.4Email (SMTP and POP3) ............................................................................. 44
7Address tables 47
7.1Data types and type of access .................................................................. 47
7.2Modbus addresses of important device and process data .................... 47
8Index 65
1.1Preface
1 Introduction
Please read this interface description before commissioning the interfaces of
the device. Keep the interface description in a place accessible to all users at
all times.
Please assist us in improving this Interface description.
Your comments are highly appreciated.
All information required to operate the interface is described in the
supplied Interface description. Nevertheless, should problems be
encountered during commissioning/start-up, please refrain from
carrying out any inadmissible manipulations. This could jeopardize
your warranty rights!
Please contact the nearest subsidiary or the head office.
When returning controller modules, assemblies or components,
please observe the regulations according to DIN EN 61340-5-1 and
DIN EN 61340-5-2 „Protection of electrostatic sensitive devices“.
For transport, only use ESD packages.
Please note that we cannot accept any liability for damage caused
by ESD.
ESD=Electro Static Discharge
5
1 Introduction
1.2Typographical conventions
1.2.1 Warning signs
The symbols for Caution and Attention are used in this operating manual
under the following conditions:
CautionThis symbol is used when there may be danger to personnel if
the instructions are ignored or not followed correctly!
AttentionThis symbol is used when there may be damage to equipment
or data if the instructions are ignored or not followed correctly!
AttentionThis symbol is used where special care is required when
handling components liable to damage through electrostatic
discharge.
1.2.2 Note symbols
NoteThis symbol is used when your special attention is drawn to a
abc
1
FootnoteFootnotes are remarks that refer to specific points in the text.
1.2.3 Number types
0x0010Hexadecimal
number
remark.
Footnotes consist of two parts:
A marker in the text and the foot note text itself.
The markers in the text are arranged as continuous superscript
numbers.
A hexadecimal number is identified by „0x“ preceding the
actual number (here: 16 decimal).
6
2 General information
2.1Target group
This operating manual is intended for user, who want to use the paperless
recorder as a Modbus slave and read out data from a Modbus master (e.g.
PLC).
2.2Interfaces
ex-factoryThe paperless recorder is equipped with several interfaces as a standard:
• Serial interface RS232 or RS485
• Serial interface RS232 (barcode scanner)
• Ethernet 10/100 MBit/s
• 2 USB host and 2 USB device interfaces
The serial and the ethernet interfaces serves for communication with a bus
system or PC. They can be used, for example, to read out the measured
values and/or instrument and process data from the paperless recorder. In
connection with the ethernet interface and a PC webbrowser, recorders can be
monitored via the internet. Two RS232 interfaces are available. Both interfaces
are to be considered as equal.
The USB interfaces are fitted on the front and the back and intended for the
operation with the setup program or the PCA communication software (PCC)
or for reading out data via the USB memory stick. Only use one USB host or
USB device interface at a time. Instruments with stainless steel fronts are not
equipped with USB interfaces on the front.
Extra codeThe paperless recorder is equipped with several interfaces as an option:
• PROFIBUS-DP interface
2.3System prerequisites
The following items are required for interface operation:
• Connection line:
for RS232
Interface cable RS232 (9/9-pin):TN 00367735
Interface cable RS232 (9/25-pin):TN 00367736
for ethernet, e.g.
RJ 45 patch cable, CAT 5 or higher (cross over)
• Setup or evaluation program, e.g.
Setup program:TN 00468991
PC evaluation software PCA3000:TN 00431882
PCA communication software PCC:TN 00431879
JUMO SVS3000 Visualization:Data Sheet
700755
• PC or notebook
7
2 General information
8
3.1Connection position
USB host
for the data exchange
(measured data,
configuration data,
user lists) between paperless
recorder and PC
USB device
for communication with the
setup program or PCC
Front view of
the
paperless
recorder
3 Connecting the interface
Connection
diagram
Use a USB interface either at the front or at the rear! Only use one
host or device interface at a time.
USB host = Plug type A
USB device = Plug type B mini
9
3 Connecting the interface
21
22
23
31
32
33
41
42
43
51
52
53
61
62
63
71
72
73
123
4
1011
12
1
2
3
4
5
6
9
8
7
B12
B9
B10
B11
B13
B14
B15
B16
B4
B1
B2
B3
B5
B6
B7
B8
+
+
+
U
U
+
-
-
--
in
out
U
U
out
U
U
in
33
44
11
22
1
2
3
4
1
2
3
4
1
2
3
4
1
2
3
4
1
2
3
4
1
2
3
4
12341234123
4
8.
9.
11.
10.
14.
3.
2.
1.
12
13
11
5.
6.
7.
PE
N
L1
(L+)
(L-)
4.
15.
(1)(2)
(3)(4)(5)
(6)
Rear view of the
paperless
recorder
(1)RS232 interface for
barcode scanner (serial)
(2)PROFIBUS-DP interface
(optional)
(3)USB host interface
(serial)
(4)Ethernet interface
(serial)
(5)RS232/485 interface
(serial)
(6)USB device interface
(serial)
Connection
diagram
RS232 (plugs (1) + (5))RS485 (plug (5))
RS232/RS485
We recommend the use of a twisted connection cable with
shielding!
Only connect the signals specified above, otherwise errors will
10
occur!
3.2RS232
(2) RxD
(3) TxD
(5) GND
RxD
TxD
RTS
CTS
GND
(2)
(3)
(7)
(8)
(5)
Paperless recorder
PC/notebook
(2) RxD
(3) TxD
(5) GND
TxD
RxD
RTS
CTS
GND
(2)
(3)
(4)
(5)
(7)
Paperless recorder
PC/notebook
PC COM
interface with 9pin Sub-D
socket
3 Connecting the interface
The RS232 interface does not use the handshake lines (RTS, CTS). The RTS
line (CTS on the paperless recorder) coming from the master (PC or notebook)
is not taken into consideration. The response is immediately transmitted from
the paperless recorder. The CTS line of the master (RTS on the paperless
recorder) remains open.
If the used program evaluates the handshake lines, they must be bridged in
the cable.
PC COM
interface with
25-pin Sub-D
socket
3.3Toggling between RS232 and RS485
Toggling between RS232 and RS485 interface is carried out by means of the
paperless recorder parameter
Configuration
or via the setup program
Edit
Serial interface RS232/RS485 Type
Interface RS232/RS485 General Type
11
3 Connecting the interface
3.4Configuration of the serial interfaces
Configuration
on the
paperless
✱ Select Configuration Interface RS232/RS485 General on the
paperless recorder.
Now the parameters required to configure the interface are available.
recorder
Configuration
via the setup
The Edit
➔ Serial interface RS232/RS485 menu point is used for the
Min. response time ➔ Min. response time0 ... 500mssee Chapter 4.3 Timing of
➔ Data format8 - 1 - no Parity,
8 -1 - odd Parity,
8 -1 - even Parity
Can only be edited for
RS232/RS485.
See Chapter 3.3 Toggling
between RS232 and
RS485, Page 11.
see Chapter 5 Serial
protocol types, Page 35
see Chapter 4.3 Timing of
the communication, Page
16.
see Chapter 4.2
Transmission mode (RTU),
Page 15.
the communication, Page
16.
.
For communication via the RS232 interfaces, the device address
has to be taken into account although it is not a bus interface.
The serial interfaces as well as the USB and Ethernet interface can
be operated simultaneously. Only on the protocol level, some
inhibits are present (e.g. only one setup may be written at a time).
12
3 Connecting the interface
3.5Configuration of the Ethernet interface
Configuration
on the
paperless
recorder
Configuration
via the setup
program
is carried out using the Configuration ➔ Interface ➔ Ethernet menu point.
is carried out using the Extras
➔ Ethernet interface menu point.
3.5.1 Parameters
DHCPDHCP (Dynamic Host Configuration Protocol) is used to ensure that the
paperless recorder is automatically assigned an IP address and further
communication parameters by a DHCP server.
OnDHCP is switched on, the paperless recorder obtains its
IP address by the DHCP server
The further communication parameters usually assigned to the paperless
recorder by the DHCP server include, among others, the subnet mask, the
standard gateway address and the so-called lease time.
After the lease time (period of use) has elapsed, the validity of the IP address
expires. To ensure that the paperless recorder always has a valid IP address,
after 50% of the lease time it transmits a query to the known DHCP server
asking whether or not the address is still valid. If the DHCP server cannot be
accessed, the paperless recorder repeats its query until 87.5% of the lease
time has elapsed. Then the paperless recorder transmits its query not only to
the DHCP server but also to the entire network. When the lease time has
elapsed and the IP address is still not acknowledged, the paperless recorder
declares the address as invalid and is no longer accessible via the net.
13
3 Connecting the interface
The DHCP server can change an assigned address. If, for
example, automatic data download with the PCA communication
software is used, the address must be changed within the
software.
The automatically assigned IP address query can be inquired in the Device
manager
IP addressIf automatic IP address assignment is not used ("DHCP = OFF"), the IP
address of the paperless recorder is set here.
Subnet maskIf automatic IP address assignment is not used ("DHCP = OFF"), the subnet
mask is set here.
The subnet mask is used to group devices (PC, paperless recorder, etc.) into
subnets. All devices, the IP address of which is linked with AND identical to
the subnet mask, belong to one subnet and can communicate with each other.
If devices are to be accessed outside the subnet, communication must be
carried out via a gateway (standard gateway).
Device info Ethernet info menu.
Standard
Gateway
Port Modbus
TCP
DNS
Device name
DNS serverHere the IP address of a DNS server installed in the network is set. The DNS
If automatic IP address assignment is not used ("DHCP = OFF"), the address
of the standard gateway is set here.
The standard gateway is used for communication by devices which are not
part in a subnet.
The port address must be set when the paperless recorder is accessed by a
visualization software and the Modbus TCP protocol (Modbus tunneling:
external frame Ethernet, internal frame Modbus) is used.
Changes to this parameter will become effective after the
paperless recorder has been restarted.
The DNS device name is entered here. This ensures that the device can be
accessed not only via its IP address but also via its name.
server is required to convert the name for Email transmittion via Ethernet.
Changes to this parameter will become effective after the
paperless recorder has been restarted.
Transfer rateThe transfer rate used by the paperless recorder to communicate with the
DHCP server and other PCs is configured here.
14
4.1Master-Slave principle
Master
Slave 1Slave 2Slave n
Communication between a master (PC or notebook) and a slave (paperless
recorder) using the Modbus/J-bus takes place according to the master-slave
principle, in the form of data request/instruction - response.
The master controls the data exchange, the slaves only have a response
function. They are identified by their device address.
The paperless recorder can be operated either as a Modbus slave,
see Chapter 5.1 Modbus slave, Page 35, or as a Modbus master,
see Chapter 5.2 Modbus master, Page 38.
4 Modbus protocol description
In a Modbus network, only one
master function.
device can be assigned with the
4.2Transmission mode (RTU)
The transmission mode used is the RTU mode (Remote Terminal Unit). The
data is transmitted in the binary format (hexadecimal) with 8 or 16 bits for
integer values and 32 bits for float values.
Data formatThe data format describes the structure of a byte transmitted.
Data wordParity bitStop bitNumber of bits
8 bitsno19
8 bitseven110
8 bitsodd110
The data format to be used can be set, see Chapter 3.4
Configuration of the serial interfaces, Page 12.
15
4 Modbus protocol description
Master
Slave
Data request
Response
Data request
t
t
1
t
2
4.3Timing of the communication
Character
transmission
time
Example
Timing schemeA data request runs according to the following timing scheme:
Start and end of a data block are marked by transmission pauses. The
character transmission time (time required to transmit one single character)
depends on the baud rate and the data format used.
For a data format of 8 data bits, no parity bit and one stop bit, this is:
Character transmission time [ms] = 1000 * 9 bit ÷ baud rate
For the other data formats, this is:
Character transmission time [ms] = 1000 * 10 bit ÷ baud rate
Baud rate [baud]Data format [bit]
38400
19200
9600
100,260
90,234
100,521
90,469
101,042
90,938
character transmission
time [ms]
16
t
1
Internal waiting time of the paperless recorder prior to checking
the data request and the internal processing time.
min.:5 ms
typical:5 ... 45 ms
max.:60 ms or set "minimum response time"
4 Modbus protocol description
A minimum response time can be set in the controller under the
menu point Configuration
minimum waiting time before an answer is transmitted (0…500
ms). If a smaller value is set, then the response time may be longer
than the preset value (internal processing takes longer), the
controller answers as soon as internal processing is completed.
The preset time of 0 msec means that the controller responds at
the maximum possible speed.
The minimum response time, which can be set is required by the
RS485 interface in the master, to be able to switch over the
interface drivers from transmit to receive. This parameter is not
required for the RS232 interface.
➔ Interface. This preset time is the
t
2
No data requests from the master are permitted during t1 and t2 , because the
paperless recorder will either ignore the request or declare it to be invalid.
The master has to observe this waiting time before starting a new
data request.
for RS232min. 3.5 times the transmission time
for RS48560ms
4.4Structure of a Modbus telegram
Data structureAll telegrams have the same structure:
Slave addressFunction codeData fieldChecksum
1 byte1 bytex byte2 byte
Each telegram contains four fields:
Slave addressdevice address of a specific paperless recorder
required for 1 character (the time
depends on the baud rate)
CRC16
Function codefunction selection (read, write words)
Data fieldContains information (according to the function code):
• Word address/bit address
• Number of words/bits
•word/bit values
Checksumdetection of transmission errors
17
4 Modbus protocol description
4.5Device address
The device address of the paperless recorder can be set between 1 and 254
(decimal), see Chapter 3.4 Configuration of the serial interfaces, Page 12.
A maximum of 31 paperless recorders can be addressed via the
RS 485 interface.
The device address 0 is reserved as the Modbus broadcast
address.
An instruction of the master to address 0 is carried out by all
slaves, but no response is transmitted by them (because this would
result in a data collision).
If only one paperless recorder is connected to the PC or notebook,
it can also be addressed via device address 255 (even if a different
device address is configured). The paperless recorder always
responds to instructions using device address 255.
In the transmission protocol, the address is specified in the
binary format (hexadecimal).
4.6Function codes
Function
overview
The functions described as follows can be used to read out the measured
values and further device and process data from the paperless recorder.
Function
number
0x01 or 0x02Read n bitmax. 256 bits (16 bytes)
0x03 or 0x04Read n wordsmax. 127 words (254 bytes)
0x05Write one bitmax. 1 bit
0x06Write one wordmax. 1 word (2 bytes)
0x10Write n wordsmax. 127 words (254 bytes)
FunctionLimitation
Please refer to Chapter 4.9 Error messages, Page 28, if the paperless
recorder does not react to these functions or emits an error code.
18
4.6.1 Read n bit
4 Modbus protocol description
This function is used to read n bits starting from a specific address.
Data request
Response
ExampleReading a bit starting from bit address 0x0340 (this is word address 0x0034).
Slave
address
1 byte1 byte2 byte2 byte2 byte
Slave
address
1 byte1 byte1 bytex byte2 byte
The response always comes in full bytes of 8 bits each.
Non-requested bit values will be complemented with the 0 value.
For the addresses please refer to Chapter 7.2 Modbus addresses of important
device and process data, Page 47.
Data request:
010203400001B85A
Response:
010201016048
Function
0x01 or 0x02
Function
0x01 or 0x02
Bit value
Address
first bit
Number of
byte read
Number
of bits
Bit
value(s)
Checksum
CRC16
Checksum
CRC16
19
4 Modbus protocol description
4.6.2 Read n words
This function is used to read n words starting from a specific address.
Data request
Response
ExampleReading the first 3 analog inputs (these are the first 6 words starting from
Slave
address
1 byte1 byte2 byte2 byte2 byte
Slave
address
1 byte1 byte1 bytex byte2 byte
Modbus address 0x1257).
For the analog input address please refer to Chapter 7.2 Modbus addresses of
important device and process data, Page 47.
Data request:
0103125700067160
Response:
01 03 0C199943484CCC4348266643968548
Function
0x03 or 0x04
Function
0x03 or 0x04
Measured
value 1
200,1
Address
first word
Number of
byte read
Measured
value 2
200,3
Number
of
words
Word
value(s)
Measured
value 3
Checksum
CRC16
Checksum
CRC16
300,3
20
4.6.3 Write one bit
In the write bit function, the data blocks for instruction and response are
identical.
4 Modbus protocol description
Instruction
Response
ExampleWriting a bit starting from bit address 0x0340 (this is bit 0 of the word address
Slave
address
1 byte1 byte2 byte2 byte2 byte
Slave
address
1 byte1 byte2 byte2 byte2 byte
0x0034).
For the addresses please refer to Chapter 7.2 Modbus addresses of important
device and process data, Page 47.
Instruction:
01050340FF008DAA
Response (as instruction):
Function
0x05
Function
0x05
Bit addressBit value
xx00
xx = 00 Bit is
set to 0
xx = FF Bit is
set to 1
Bit addressBit valueChecksum
Checksum
CRC16
CRC16
01050340FF008DAA
21
4 Modbus protocol description
4.6.4 Write one word
In the write word function, the data blocks for instruction and response
are identical.
Instruction
Response
ExampleSet the variable "External Binary In 1" (Modbus address 0x1638) to 1.
Slave
address
1 byte1 byte2 byte2 byte2 byte
Slave
address
1 byte1 byte2 byte2 byte2 byte
For the addresses please refer to Chapter 7.2 Modbus addresses of important
device and process data, Page 47.
Instruction:
010616380001CD8F
Response (as instruction):
010616380001CD8F
Function
0x06
Function
0x06
Word addressWord valueChecksum
CRC16
Word addressWord valueChecksum
CRC16
22
4.6.5 Write n words
4 Modbus protocol description
instruction
Response
ExampleWriting the word "Test" (ASCII coding: 0x54 0x65 0x73 0x74 0x00) to address
Slave
Address
1 byte1 byte2 byte2 byte1 bytex byte2 byte
Slave
address
1 byte1 byte2 byte2 byte2 byte
0x148A ff to ensure that this text is entered in the event list of group 1:
Instruction:
0110148A00030654 65 73 74 00 009BFA
Response:
0110148A0003A412
Function
0x10
Address
word
Function
0x10
first
Number
of
words
Address
first word
Number
of
words
Number of
words
Number
of
value(s)
Check
CRC16
Checksum
CRC16
sum
23
4 Modbus protocol description
4.7Transmission format (integer, float, double and text values)
Integer valuesInteger values are transmitted via the Modbus in the following format:
The high byte first, followed by the low byte.
ExampleRequest of the integer value of address 0x1017, if value "4" (word value
0x0004) is written under this address.
Request: 01031017000130CE (CRC16 = CE30)
Response: 0103020004B987 (CRC16 = 87B9)
Float valuesIn the case of float values, the Modbus operates with the IEEE-754 standard
format (32bits), the only difference being that byte 1 and 2 are changed over
with byte 3 and 4.
Single-float format (32bit) as per IEEE 754standard
SEEEEEEEEMMMMMMMMMMMMMMMMMMMMMMM
Byte 1Byte 2Byte 3Byte 4
S - sign bit
E - exponent (two's complement)
M - 23bits normalized mantissa
Modbus float format
Modbus address xModbus address x+1
MMMMMMMMMMMMMMMMSEEEEEEEEMMMMMMM
Byte 3Byte 4Byte 1Byte 2
ExampleRequest of the float value of address 0x0035, if value "550.0" (0x44098000 in
IEEE-754 format) is written under this address.
Request: 140300350002D6C0 (CRC16 = C0D6)
Response: 140304800044096434 (CRC16 = 3464)
Once transmission from the device is completed, the bytes of the float value
need to be changed over accordingly.
A large number of compilers (e.g. Microsoft Visual C++) file the float values in
the following order:
Float value
Address xAddress x+1Address x+2Address x+3
MMMMMMMMMMMMMMMMEMMMMMMMSEEEEEEE
Byte 4Byte 3Byte 2Byte 1
24
Please find out the way float values are saved in your application. After the
request from the paperless recorder, it might be necessary to change the
bytes over in the interface program you are using.
4 Modbus protocol description
Double valuesThe double values are also processed in the Modbus in the IEEE-754 standard
format (32bit). Unlike float values, bytes are not changed over for double
values.
Doupble-float format (32bit) as per IEEE 754standard
SEEEEEEEEEEEMMMMMMMMMMMMMMMMMMMM
Byte 1Byte 2Byte 3Byte 4
MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
Byte 5Byte 6Byte 7Byte 8
S - sign bit
E - exponent (two's complement)
M - 52bits normalized mantissa
Modbus double format
Modbus address xModbus address x+1
SEEEEEEEEEEEMMMMMMMMMMMMMMMMMMMM
Byte 1Byte 2Byte 3Byte 4
Modbus address x+2Modbus address x+3
MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
Byte 5Byte 6Byte 7Byte 8
ExampleRequest of the double value of address 0x0066, if value 1234567.89
(0x4132D687E3D70A3D in the IEEE-754 format) is written under this address.
Request: 140300660004A6D3 (CRC16 = D3A6)
Please find out the way double values are saved in your application. After the
request from the paperless recorder, it might be necessary to change the
bytes over in the program you are using.
25
4 Modbus protocol description
Strings (texts)Character strings are transmitted in the ASCII format.
To mark the end, the last character to be transmitted can be a "\0"
(ASCII code 0x00). Characters after this mark are without
significance.
Knowing that the transmission of texts takes place word by word (16
bits), 0x00 is additionally appended where an odd number of
characters is used (incl. "\0").
The maximum length specified in the address tables (see “Address
tables” on page 47. ff) for strings also includes the terminating "/0".
This means, in the case of "char 11", the text can consist of max. 10
readable characters.
ExampleText inquiry from address 0x1000, if the
character string "LS NT"
(ASCII code: 0x4C, 0x53, 0x20, 0x4E, 0x54, 0x00) is entered under this
address.
Instead of "AA" in front of the CRC sum, there could be any value,
because it is behind "/0" and will be ignored.
26
4.8Checksum (CRC16)
4 Modbus protocol description
Calculation
scheme
Example 1Requesting the status of relay output 1.
The checksum (CRC16) serves to recognize transmission errors. If an error is
identified during evaluation, the device concerned does not respond.
CRC = 0xFFFF
CRC = CRC XOR ByteOfMessage
For (1 to 8)
CRC = SHR(CRC)
if (flag shifted right = 1)
thenelse
CRC = CRC XOR 0xA001
while (not all ByteOfMessage processed);
The low byte of the check sum is the first to be transmitted!
Instruction: Read a word from the address 0x1631
010316310001D18D
Response (CRC = 0x8479):
01030200017984
Word 1
Word 1 = 1 indicates that relay 1 is active.
27
4 Modbus protocol description
4.9Error messages
4.9.1 Modbus error codes
No response by
the paperless
recorder
Error codesIf the data request of the master has been received by the paperless recorder
In the event of the following errors, the slave will not respond:
• Baud rate and/or data format of Master (PC or notebook) and Slave
(paperless recorder) are not compatible.
• The device address of the paperless recorder does not comply with that
contained in the protocol.
• The checksum (CRC16) is not correct.
• The instruction from the Master is incomplete or over-defined.
• The number of words to be read is zero.
In these cases the data request should be transmitted again once the timeout
time (2s)
has elapsed.
without transmission errors but could not be processed, the paperless
recorder will respond with an error code.
The following error codes can be occur:
• 01 Invalid error code
• 02 Invalid address or number of words or bits to be read or written is too
large
• 03 Value not within the admissible range
• 08 Value wirte-protected
Response in the
event of an
error
ExampleData request:
Slave
address
1 byte1 byte1 byte2 byte
0x80 is used to set the function code to its OR status, i.e. the MSB (most
significant bit) is set to 1.
010612570001FCA2
Response:
01860843A6
Respons is error code 08 because address 0x1257 is write-protected.
Function
XX OR 80h
Error codeChecksum
CRC16
28
4 Modbus protocol description
4.9.2 Error messages for invalid values
For measured values in the float format, the error number appears directly in
the value, i.e. the error number is entered instead of the measured value.
Error code
for float values
1.0 x 10
2.0 x 10
3.0 x 10
4.0 x 10
5.0 x 10
6.0 x 10
7.0 x 10
8.0 x 10
37
37
37
37
37
37
37
37
ExampleData request:
0103125900021160
Response:
Error
Underrange
Overrange
No valid input value
Division by zero
Math error
Invalid terminal temperature of thermocouple
Invalid float value
Integrator or statistics destroyed
0103048E527DB451ED
The measured value 0x7DB48E52 (=3.0 x 10
37
) supplied by analog input 2
(Modbus address 0x1259) indicates that the input value is invalid.
29
4 Modbus protocol description
4.9.3 Error codes as integer return values
For some lengthy sequences (e.g. email transfer) an error code is entered at
the end into an event field or the event list.
Error codes
Error codeDescription
Error list: Program memory management
1Program cannot be created
2Program does not exist
3Program cannot be deleted
4Segment cannot be deleted
5Checksum cannot be saved
6Checksum cannot be read
7Program cannot be copied
8Segment cannot be copied
9Program checksum error
10Program pointer tab. checksum error
11Program memory end
12Segment does not exist
13Repeat jump marks cannot be corrected
Error list: General inputs and outputs
14Please acknowledge with ENTER
15Invalid number of places
16The entry contains invalid characters
17Value not within the limits
18Segment incorrectly programmed
19Password error
Error list: Profibus job processing
30
20Busy flag not reset by the master
21Inadmissible job
22Error on data acceptance
23No cyclical data existing
24Inadmissible structure length
25Inadmissible header ID
4 Modbus protocol description
Error codeDescription
Error list: Keyboard and program lock
26Keyboard locked
27Programming locked
28Write error in the ser. EEprom (Calib)
29Hardware error: MANUAL + AUTO locked
30Edit is inadmissible when the program is active
31Copy is inadmissible when the program is active
32MANUAL is inadmissible during AUTO lead time
33Segment change Image update required
34No DB number, image update by PLC
35No DB number for process values of PLC
36Printer loaded or not operational
37Set point value 1 was not programmed
38Configure printer (config./interface)
39Only possible, when the device is in MANUAL mode
40Self-optimization already running
41Tme axis elapsed or not programmed
42Time axis cannot be copied
43Time axis not existing
44Program change is locked
45MANUAL mode locked
46Program start locked
Error list: Interface processing
47Incorrect response length
48Timeout error (no response)
49Error reported in telegram protocol
50Checksum error
51Parity error
52Framing error
53Interface buffer full
54Address error (e.g. address does not exist)
31
4 Modbus protocol description
Error codeDescription
55Incorrect or unexpected command
Error list: Event processing
60event could not be created
61event setting failed
62event clear failed
63event wait failed
64event close failed
65event open failed
66Sync error between group and data manager
Error list: message processing
70Queue memory does not exist
71Message queue cannot be opened
72Message pool cannot be generated
73Memory from message pool cannot be inquired
74Message cannot be transmitted
Error list: Processing of MQX functions
80Task creation failed
81Hardware-Timer not created
Error list: Flash processing
90Data flash write error
Error list: Other errors
100Undefined error
101Division by zero
102RAM cannot be detected
103RTC run-time overrun
104ID does not exist
32
105Index too large (overflow)
106Invalid data
107Invalid pointer
109String without 0 characters
110Timeout during initialization
4 Modbus protocol description
Error codeDescription
111Value must not be written to
112Log entry with error bits initiating debug mode
Error list: Email transfer via modem and Ethernet
120Step error in the status automatic
121Invalid response length
122No CONNECT from the modem
123FCS checksum incorrect
124Unexpected value or response
125Conf-Request not accepted
126No Conf-Request from the other end
127No Chap-Request from the other end
128Response timeout
129Unknown modem response
130Unexpected OK by the modem
131Unexpected CONNECT from the modem
132Unknown frame received
133Unexpected PROTOCOL by the modem
134Unexpected COMPRESS from the modem
135Invalid PPP package received
136Unexpected BUSY from the modem
137Unknown authentification protocol
138Ignored LCP option
139Unexpected DELAYED from the modem
140Unexpected NODIALTONE
141Unknown PPP protocol
142Unknown PAP code
143Ignored IPCP option
144Ignored IPCP code
145Unknown CHAP code
146IP checksum incorrect
147Unknown IP protocol
33
4 Modbus protocol description
Error codeDescription
148Unknown ICMP type
149Unknown LCP type
150As a client DNS request received
151Unknown DNS error
152DNS response is divided
153No IP received via DNS
154Unknown Udp port
155TCP checksum incorrect
156TCP port incorrect
157Unknown TCP-SYN option
158Unused TCP port
159Unknown POP3 response
160Unknown SMTP response
161Unknown DNS name
162No MD5 requested from CHAP
163Authentification error
164Cancel from other end
165Error when creating TCP socket
166Error when binding TCP socket
167Error on TCP connect
168Error when transmitting TCP telegram
169Error when closing TCP socket
170Error on TCP listing
171Reset on TCP accept
172Error on TCP accept
173SMTP server indicates syntax error
34
Error list: File system processing
200Error when installing the partition manager
201Error when installing the MFS file system
202Error when deinstalling the partition manager
203Error when deinstalling the MFS file system
5.1Modbus slave
Modem
PC
(Master)
ModemModem
PC
(Master)
Telephone
Modbus
SlaveSlaveSlave
Slave
If the paperless recorder is configured as a slave,
see Chapter 3.4 Configuration of the serial interfaces, Page 12,
in the network it responds to Modbus requests of the master.
The master controls the data exchange, the slaves only have a response
function. They are identified by their device address.
The master usually is a PC with a setup or visualization program installed. The
master can inquire all instrument variables of the paperless recorder (see
Chapter 7 Address tables, Page 47).
5 Serial protocol types
In a Modbus network, only one instrument may be assigned with
the master function.
Modem
operation
• A paperless recorder in the slave mode can be controlled by the master via
a telephone connection using a modem, see above illustration.
• The paperless recorder can initialize a modem (also cyclically, if the modem
is switched on after the instrument has been activated).
• The paperless recorder can use the Init string (entry per setup program in
the "RS232/RS485: Modem" mask) to configure the modem so that an
incoming call is automatically answered. Then a remote inquiry for the
paperless recorder can be carried out by the master using Modbus
commands or the recorder can send a signal (e.g. an alarm) or an email
after the active dial-in.
• The paperless recorder (slave) can use a dial-in/hang-up string to alarm a
PC (master) with the suitable Modbus master software (which recognizes
incoming modem calls).
• The paperless recorder can use a dial-in/hang-up string to call an internet
provider and send an email.
When the modem operation is active, the following parameters (by setup
program only) can be edited:
35
5 Serial protocol types
Modem
parameters
The following Init string is required for the operation as a Modbus
slave via modem:
AT&FE0X3Q1&K0S0=1&D0&W0&Y0
AT&F = Load the current manufacturer profile
E0= Switch off character echo
X3= Switch off fixed dial tone selection,
Q1= Switch off command responses
&K0= Switch off data flow control
S0=1 = Automatic pick-up after first ring
&D0= Ignore DTR signal
&W0 = Save current configuration as profile 0
&Y0= Use profile 0 after switch-on
Switch on busy tone selection
Internet
dial-in
The dial-in and hang-up string are only required for one of the
active modem alarms.
36
Email
parameters
5 Serial protocol types
For the active internet dial-in for alarms by email, the instrument
modem must be switched to a different mode using another INIT
string.
Telephone number, user name and password must be entered
according to the specifications of the selected internet provider.
Once the internet dial-in has been completed, the modem is
automatically reset to its initial state using the Init string entered
under modem parameters.
37
5 Serial protocol types
Master
Modbus
SlaveSlaveSlave
5.2Modbus master
If the paperless recorder is configured as a master,
(see Chapter 3.4 Configuration of the serial interfaces, Page 12),
it can send Modbus inquiries in the network to slaves (e.g. other paperless
recorders). The requested values are written into external instrument variables
of the paperless recorder:
• external analog values 1 to 24 in the analog selector
• external binary values 1 to 24 in the binary selector
• external texts 1 to 9 (e.g. to link batch texts in the instrument)
Modbus master
These parameters can be edited in the setpu program and on the
paperless recorder.
38
5 Serial protocol types
Slave
Ascii Barcode Protocol
Barcode Scanner
(Master)
For each target variable, it is possible to enter the instrument address and
Modbus address used to request the value.
Each programmed inquiry can be deactivated by entering the instrument
address 0 (if, for example, the "external analog value 2" is no longer to be
written to by the Modbus master but by the Profibus).
Double writing of a target variable will lead to undefined states and
must be avoided.
For analog and binary values, the entry of a "Number of measured values" or
"Number of bits" larger than 1 allows reading consecutively several variables
using one command. The following target variables are automatically assigned
during saving.
Timeoutdefines the maximum time-out time used for each sent command to wait for
response before the next command is carried out.
Inquiry cycledefines the time interval used to read in variables.
5.3Barcode
In the "Barcode mode" (see Chapter 3.4 Configuration of the serial interfaces,
Page 12), the paperless recorder appears as a slave. It waits for the ASCII
strings sent by the barcode scanner (master).
This interface mode only requires the setting of the "Baud rate" and "Data
format" configuration parameters, see Chapter 3.4 Configuration of the serial
interfaces, Page 12, further parameters are not required here.
The paperless recorder can use these strings for the incremental control of a
batch sequence (see operating manual of the paperless recorder).
39
5 Serial protocol types
40
The advantage of the Ethernet connection compared with a serial connection
lies in the higher transmission rate the company-wide accessibility.
6.1HTTP
In this case, the paperless recorder is configured as a slave and handles
incoming requests as a server via port 80. These requests can come, for
example, from a PC with setup software, PC evaluation software (PCA) or PCA
communication software (PCC).
6.2Browser connection
The paperless recorder can also be accessed by a browser using the HTTP
protocol. The URL required for this purpose is the IP address of the paperless
recorder.
6 Ethernet protocols
The HTML start page "index.htm" is accessed and can be used to branch to
further HTML pages.
The start page "index.htm" and other HTML pages can be loaded into the
paperless recorder using the setup program
For this purpose, a memory space of 512 kB is available.
The online visualization as well as three HTML pages and three HTML batch
pages are factory-saved as templates.
In the HTML pages, special tags can be used to access device variables.
Support is provided in a help window which can be used to select the device
variable in the setup program and copy the corresponding HTML tag into the
clipboard.
Edit Web server Web import.
41
6 Ethernet protocols
6.3Modbus TCP
In this case, the paperless recorder is configured as a slave and handles
incoming requests as a server via port 502. The port can also be changed, see
Chapter 3.5 Configuration of the Ethernet interface, Page 13.
Modbus TCP is a standardized process, in which a Modbus telegram is
packed into a TCP frame (tunnelled) and transmitted via Ethernet.
The Modbus telegram (without CRC) is transmitted with an additional "MBAP
header" of 6 or 7 byte. The seventh byte is identical to the first serial byte, but
has a different designation.
Structure of a
Modbus TCP
telegram
MBAP headerModbus
2 byte
Tran s-
action ID
Identical in
request and
response
2 byte
Protocol ID
Must be 0
for Modbus
2 byte
Length
Length of
question
and
response in
byte
from (incl.)
"Unit ID"
1 byte
Unit ID
Corresponds to
the controller
address. For
TCP must be
0xFF or 0
(0=broadcast)
telegram
Further bytes
as specified below,
however, without CRC
For comparison:
a Modbus telegram, Page 17:
This protocol can be used, e.g. by a suitable process data visualization
program to read and write values of the paperless recorder via a companywide Ethernet network. All device variables from the Modbus address tables
(see Chapter 7 Address tables, Page 47) can be accessed.
Only one Modbus master (client) can access a paperless recorder via
Modbus TCP at a time.
A connection opened by a client is cancelled by the paperless
recorder after 30 seconds of inactivity.
If a Modbus TCP port is closed (by the paperless recorder or the other
end), it can be reopened after 10 seconds.
the "normal" Modbus telegram, see Chapter 4.4 Structure of
Slave
address
1 byte
Function
code
1 byte
Data field
x byte
CRC16
2 byte
42
6 Ethernet protocols
Example:
reading n words
00 0100 0000 06FF0312 5700 02
2 bytes
Transaction
ID
Assignment
of response
to request
(consecutive numbering)
For Modbus always
0x00
Reading the measured value from the first analog input (these are the first 2
words starting from Modbus address 0x1257).
See also the Modbus example in Chapter 4.6.2 Read n words, Page 20.
Query:
MBAP headerModbus telegram
(without slave address and CRC)
2 bytes
Protocol ID
2 bytes
Length
Length of
the request
in bytes
starting with
(incl.) "Unit
ID"; 6 bytes
here (0x06)
1 byte
Unit ID
With TCP
always
0xFF (except for
broadcast)
1 byte
Function
code
Function
code for
"Reading n
words"
2 bytes
Address of
first word
First word
of analog
inputs to
be read
2 bytes
Number of
words
2 words
should be
read
Response:
MBAP headerModbus telegram
(without slave address and CRC)
00 0100 0000 07FF030419 9943 48
2 bytes
Transaction
ID
Assignment
of response
to request
(consecutive numbering)
2 bytes
Protocol ID
For Modbus always
0x00
2 bytes
Length
Length of
the response in
bytes starting with (incl.) "Unit
ID"; 7 bytes
here (0x07)
1 byte
Unit ID
With TCP
always
0xFF (except for
broadcast)
1 byte
Function
code
Function
code for
"Reading n
words"
1 byte
Number of
bytes read
4 bytes
were read
4 bytes
Data read
Measured value
200.1
43
6 Ethernet protocols
local
subnet
additional
subnets
Internet
(worldwide)
PC
IP=x.x.x.x
Proxy
IP=x.x.x.x
SMTP
server
IP=x.x.x.x
Port 25
DHCP
server
IP=x.x.x.x
DNS
server
IP=x.x.x.x
POP3
server
IP=x.x.x.x
Port 110
Setup PC
IP=x.x.x.x
Gateway
IP=x.x.x.x
Recorder
IP=x.x.x.x
6.4Email (SMTP and POP3)
The paperless recorder can transmit Emails (e.g. alarms). In this case, it is the
master (client) and can access SMTP servers at the standard port (25) as well
as POP3 servers at the standard port (110)
Typical
networking in
the
company
network
Function of the
individual
stations
Gateway:
separates local sub-nets from each other and thus filters the packets. Not all
packets are received in every sub-net. Packets from outside the local sub-net
must be addressed to the gateway.
DHCP server:
can automatically assign IP address, sub-net mask and gateway address to
other stations when switching on. These parameters can also be entered
manually, then a DHCP server is not required.
DNS server:
converts symbolic names to IP addresses, e.g. question: "www.name.de" will
generate the "www.name.de has IP=10.12.32.45" response.
POP3 server:
serves to read out received Emails of a mail account. The POP3 mail account
can be accessed after log-in entering user name and password. A successful
log-in process often releases the transmission authorization of a connected
SMTP server.
SMTP server:
serves to transmit Emails. The authorization to transmit Emails via a mail
account must be released in several networks by previously logging in at the
corresponding POP3 server.
44
Proxy:
serves as a gateway between the local company network and the worldwide
internet. It is also used for the conversion of "local" IP addresses (used in the
company network) to "once-only" IP addresses (used in the internet).
The device software cannot address a proxy!
6 Ethernet protocols
Parameters for
mail server and
Email
parameters
These parameters can only be edited via the setup program.
Edit Ethernet Email parameters
A mail server within the company network (not the internet) must be
entered here. This mail server should be able to also transmit Emails
to the internet.
45
6 Ethernet protocols
Load own present
IP address
POP3
configured before
SMTP?
Request
DNS server
POP3 server
name from
Conditions
fulfilled for e-mail
transmission?
Make TCP connection
to POP3 server
Log in to mail account
with user name + password
Close TCP connection
without reading e-mail
Request
DNS server
SMTP server name
from
Make TCP connection
to SMTP server
Format and send
e-mail text
Close TCP connection
Enter e-mail OK /
error code
in event list
Ye s
No
Error
OK
Repeat attempts with the
same mail every 15 min.
Ye s
No
Transmission of
an Email via
internet
Here, serveral steps depend on configured device parameters. An error code
of the event entry (see Chapter 4.9.3 Error codes as integer return values,
Page 30 (particularly the error codes 120 to 173)) can suggest an incorrectly
set parameter. An incorrectly entered DNS server IP, for example, generates
the error code 153 = "no IP received via DNS".
46
7.1Data types and type of access
The Chapter 7.2 contain descriptions of all process values (variables) including
their addresses, data type and type of access.
Meaning:
RRead only access
WWrite access
R/WRead and write access
char xxCharacter string consisting of ASCII characters (8 bits) with the
length xx;
xx = Length including the "\0" character string end character
2 characters are read and written in a word.
wordUnsigned Integer 16 bit (1 word)
intSigned Integer 16 bit (1 word)
longSigned Integer 32 bit (2 words)
7 Address tables
floatFloat value (4 byte = 2 words) as per IEEE 754
boolBool can be read and written as word,
its value range is 0 … 1
byteByte (8 bit) can be read and written as word,
its value range is 0 … 255
Bit xBit No. x (bit 0 is always the bit with the lowest value)
7.2Modbus addresses of important device and process data
0x1221Rchar 11Software version card 2
0x1227Rchar 11Software version card 3
0x122DRchar 11Software version Profibus
AddressAccess Data type Signal designation
0x1257RfloatAnalog process value 1 (filtered)
0x1259RfloatAnalog process value 2 (filtered)
0x125BRfloatAnalog process value 3 (filtered)
0x125DRfloatAnalog process value 4 (filtered)
0x125FRfloatAnalog process value 5 (filtered)
0x1261RfloatAnalog process value 6 (filtered)
0x1263RfloatAnalog process value 7 (filtered)
0x1265RfloatAnalog process value 8 (filtered)
0x1267RfloatAnalog process value 9 (filtered)
0x1269RfloatAnalog process value 10 (filtered)
0x126BRfloatAnalog process value 11 (filtered)
0x126DRfloatAnalog process value 12 (filtered)
0x126FRfloatAnalog process value 13 (filtered)
0x1271RfloatAnalog process value 14 (filtered)
0x1273RfloatAnalog process value 15 (filtered)
0x1275RfloatAnalog process value 16 (filtered)
0x1277RfloatAnalog process value 17 (filtered)
0x1279RfloatAnalog process value 18 (filtered)
0x12DAR/WfloatExternal analog process value 1 (interface)
0x12DCR/WfloatExternal analog process value 2 (interface)
0x12DER/WfloatExternal analog process value 3 (interface)
0x12E0R/WfloatExternal analog process value 4 (interface)
0x12E2R/WfloatExternal analog process value 5 (interface)
0x12E4R/WfloatExternal analog process value 6 (interface)
0x12E6R/WfloatExternal analog process value 7 (interface)
0x12E8R/WfloatExternal analog process value 8 (interface)
0x12EAR/WfloatExternal analog process value 9 (interface)
51
7 Address tables
AddressAccess Data type Signal designation
0x12ECR/WfloatExternal analog process value 10 (interface)
0x12EER/WfloatExternal analog process value 11 (interface)
0x12F0R/WfloatExternal analog process value 12 (interface)
0x12F2R/WfloatExternal analog process value 13 (interface)
0x12F4R/WfloatExternal analog process value 14 (interface)
0x12F6R/WfloatExternal analog process value 15 (interface)
0x12F8R/WfloatExternal analog process value 16 (interface)
0x12FAR/WfloatExternal analog process value 17 (interface)
0x12FCR/WfloatExternal analog process value 18 (interface)
0x12FER/WfloatExternal analog process value 19 (interface)
0x1300R/WfloatExternal analog process value 20 (interface)
0x1302R/WfloatExternal analog process value 21 (interface)
0x1304R/WfloatExternal analog process value 22 (interface)
0x1306R/WfloatExternal analog process value 23 (interface)
0x1308R/WfloatExternal analog process value 24 (interface)
0x130ARboolExternal analog alarms 1, channel 1
0x130BRboolExternal analog alarms 1, channel 2
0x130CRboolExternal analog alarms 1, channel 3
0x130DRboolExternal analog alarms 1, channel 4
0x130ERboolExternal analog alarms 1, channel 5
0x130FRboolExternal analog alarms 1, channel 6
0x1310RboolExternal analog alarms 1, channel 7
0x1311RboolExternal analog alarms 1, channel 8
0x1312RboolExternal analog alarms 1, channel 9
0x1313RboolExternal analog alarms 1, channel 10
0x1314RboolExternal analog alarms 1, channel 11
0x1315RboolExternal analog alarms 1, channel 12
0x1316RboolExternal analog alarms 1, channel 13
0x1317RboolExternal analog alarms 1, channel 14
0x1318RboolExternal analog alarms 1, channel 15
0x1319RboolExternal analog alarms 1, channel 16
0x131ARboolExternal analog alarms 1, channel 17
0x131BRboolExternal analog alarms 1, channel 18
0x131CRboolExternal analog alarms 1, channel 19
0x131DRboolExternal analog alarms 1, channel 20
0x131ERboolExternal analog alarms 1, channel 21
0x131FRboolExternal analog alarms 1, channel 22
0x1320RboolExternal analog alarms 1, channel 23
0x1321RboolExternal analog alarms 1, channel 24
See also address: 0x1C1F to 0x1C59
52
See also address: 0x1C5B to 0x1C78
0x1322RboolExternal analog alarms 2, channel 1
0x1323RboolExternal analog alarms 2, channel 2
0x1324RboolExternal analog alarms 2, channel 3
0x1325RboolExternal analog alarms 2, channel 4
7 Address tables
AddressAccess Data type Signal designation
0x1326RboolExternal analog alarms 2, channel 5
0x1327RboolExternal analog alarms 2, channel 6
0x1328RboolExternal analog alarms 2, channel 7
0x1329RboolExternal analog alarms 2, channel 8
0x132ARboolExternal analog alarms 2, channel 9
0x132BRboolExternal analog alarms 2, channel 10
0x132CRboolExternal analog alarms 2, channel 11
0x132DRboolExternal analog alarms 2, channel 12
0x132ERboolExternal analog alarms 2, channel 13
0x132FRboolExternal analog alarms 2, channel 14
0x1330RboolExternal analog alarms 2, channel 15
0x1331RboolExternal analog alarms 2, channel 16
0x1332RboolExternal analog alarms 2, channel 17
0x1333RboolExternal analog alarms 2, channel 18
0x1334RboolExternal analog alarms 2, channel 19
0x1335RboolExternal analog alarms 2, channel 20
0x1336RboolExternal analog alarms 2, channel 21
0x1337RboolExternal analog alarms 2, channel 22
0x1338RboolExternal analog alarms 2, channel 23
0x1339RboolExternal analog alarms 2, channel 24
See also address: 0x1C79 to 0x1C96
0x133ARboolBinary input/output status 1
0x133BRboolBinary input/output status 2
0x133CRboolBinary input/output status 3
0x133DRboolBinary input/output status 4
0x133ERboolBinary input/output status 5
0x133FRboolBinary input/output status 6
0x1340RboolBinary input/output status 7
0x1341RboolBinary input/output status 8
0x1342RboolBinary input/output status 9
0x1343RboolBinary input/output status 10
0x1344RboolBinary input/output status 11
0x1345RboolBinary input/output status 12
0x1346RboolBinary input/output status 13
0x1347RboolBinary input/output status 14
0x1348RboolBinary input/output status 15
0x1349RboolBinary input/output status 16
0x134ARboolBinary input/output status 17
0x134BRboolBinary input/output status 18
0x134CRboolBinary input/output status 19
0x134DRboolBinary input/output status 20
0x134ERboolBinary input/output status 21
0x134FRboolBinary input/output status 22
0x1350RboolBinary input/output status 23
0x1351RboolBinary input/output status 24
0x136AR/Wchar 64External batch text 1
0x138AR/Wchar 64External batch text 2
0x13AAR/Wchar 64External batch text 3
0x13CAR/Wchar 64External batch text 4
0x13EAR/Wchar 64External batch text 5
0x140AR/Wchar 64External batch text 6
0x142AR/Wchar 64External batch text 7
0x144AR/Wchar 64External batch text 8
0x146AR/Wchar 64External batch text 9
See also address: 0x1CD3 to 0x1EF3
0x148AR/Wchar 94External event text group 1
0x14B9R/Wchar 94External event text group 2
0x14E8R/Wchar 94External event text group 3
0x1517R/Wchar 94External event text group 4
0x1546R/Wchar 94External event text group 5
0x1575R/Wchar 94External event text group 6
0x15A4R/Wchar 94External event text group 7
0x15D3R/Wchar 94External event text group 8
0x1602R/Wchar 94External event text group 9
0x1631RboolRelay output 1
0x1638R/WboolExternal binary input, status 1
0x1639R/WboolExternal binary input, status 2
0x163AR/WboolExternal binary input, status 3
0x163BR/WboolExternal binary input, status 4
0x163CR/WboolExternal binary input, status 5
0x163DR/WboolExternal binary input, status 6
0x163ER/WboolExternal binary input, status 7
0x163FR/WboolExternal binary input, status 8
0x1640R/WboolExternal binary input, status 9
0x1641R/WboolExternal binary input, status 10
0x1642R/WboolExternal binary input, status 11
0x1643R/WboolExternal binary input, status 12
0x1644R/WboolExternal binary input, status 13
0x1645R/WboolExternal binary input, status 14
0x1646R/WboolExternal binary input, status 15
0x1647R/WboolExternal binary input, status 16
0x1648R/WboolExternal binary input, status 17
0x1649R/WboolExternal binary input, status 18
0x164AR/WboolExternal binary input, status 19
0x164BR/WboolExternal binary input, status 20
0x164CR/WboolExternal binary input, status 21
0x164DR/WboolExternal binary input, status 22
0x164ER/WboolExternal binary input, status 23
0x164FR/WboolExternal binary input, status 24
0x166ARfloatMath result 2
0x166CRfloatMath result 3
0x166ERfloatMath result 4
0x1670RfloatMath result 5
0x1672RfloatMath result 6
0x1674RfloatMath result 7
0x1676RfloatMath result 8
0x1678RfloatMath result 9
0x168CRboolLogic result 1
0x168DRboolLogic result 2
0x168ERboolLogic result 3
0x168FRboolLogic result 4
0x1690RboolLogic result 5
0x1691RboolLogic result 6
0x1692RboolLogic result 7
0x1693RboolLogic result 8
0x1694RboolLogic result 9
0x169ERboolLimit value monitoring status 1
0x169FRboolLimit value monitoring status 2
0x16A0RboolLimit value monitoring status 3
0x16A1RboolLimit value monitoring status 4
0x16A2RboolLimit value monitoring status 5
0x16A3RboolLimit value monitoring status 6
0x16A4RboolLimit value monitoring status 7
0x16A5RboolLimit value monitoring status 8
0x16A6RboolLimit value monitoring status 9
0x16A7RboolLimit value monitoring alarm 1
0x16A8RboolLimit value monitoring alarm 2
0x16A9RboolLimit value monitoring alarm 3
0x16AARboolLimit value monitoring alarm 4
0x16ABRboolLimit value monitoring alarm 5
0x16ACRboolLimit value monitoring alarm 6
0x16ADRboolLimit value monitoring alarm 7
0x1BACRboolMath bool result 1
0x1BADRboolMath bool result 2
0x1BAERboolMath bool result 3
0x1BAFRboolMath bool result 4
0x1BB0RboolMath bool result 5
0x1BB1RboolMath bool result 6
0x1BB2RboolMath bool result 7
0x1BB3RboolMath bool result 8
0x1BB4RboolMath bool result 9
0x1BB5RboolMath bool result 10
0x1BB6RboolMath bool result 11
0x1BB7RboolMath bool result 12
0x1BB8RboolMath bool result 13
0x1BB9RboolMath bool result 14
0x1BBARboolMath bool result 15
0x1BBBRboolMath bool result 16
0x1BBCRboolMath bool result 17
0x1BBDRboolMath bool result 18
0x1BBERboolGroup alarm, group 1
0x1BBFRboolGroup alarm, group 2
0x1BC0RboolGroup alarm, group 3
0x1BC1RboolGroup alarm, group 4
60
7 Address tables
AddressAccess Data type Signal designation
0x1BC2RboolGroup alarm, group 5
0x1BC3RboolGroup alarm, group 6
0x1BC4RboolGroup alarm, group 7
0x1BC5RboolGroup alarm, group 8
0x1BC6RboolGroup alarm, group 9
0x1BC7RboolAlarm positive tolerance band, group 1
0x1BC8RboolAlarm positive tolerance band, group 2
0x1BC9RboolAlarm positive tolerance band, group 3
0x1BCARboolAlarm positive tolerance band, group 4
0x1BCBRboolAlarm positive tolerance band, group 5
0x1BCCRboolAlarm positive tolerance band, group 6
0x1BCDRboolAlarm positive tolerance band, group 7
0x1BE0RboolReserve 2
0x1BE1RboolCF card inserted
0x1BE2RboolCF card removed
0x1BE3RfloatAvailable as of firmware 187.04.xx:
External analog process value 25
(limit-checked)
0x1BE5RfloatAvailable as of firmware 187.04.xx:
External analog process value 26
(limit-checked)
............
............
............
0x1C1BRfloatAvailable as of firmware 187.04.xx:
External analog process value 53
(limit-checked)
61
7 Address tables
AddressAccess Data type Signal designation
0x1C1DRfloatAvailable as of firmware 187.04.xx:
0x1C1FR/WfloatAvailable as of firmware 187.04.xx:
0x1C21R/WfloatAvailable as of firmware 187.04.xx:
............
............
............
0x1C57R/WfloatAvailable as of firmware 187.04.xx:
0x1C59R/WfloatAvailable as of firmware 187.04.xx:
0x1C5BRboolAvailable as of firmware 187.04.xx:
0x1C5CRboolAvailable as of firmware 187.04.xx:
............
............
............
0x1C77RboolAvailable as of firmware 187.04.xx:
0x1C78RboolAvailable as of firmware 187.04.xx:
External analog process value 54
(limit-checked)
External analog process value 25 (interface)
External analog process value 26 (interface)
External analog process value 53 (interface)
External analog process value 54 (interface)
External analog alarms 1, channel 25
External analog alarms 1, channel 26
External analog alarms 1, channel 53
External analog alarms 1, channel 54
0x1C79RboolAvailable as of firmware 187.04.xx:
External analog alarms 2, channel 25
0x1C7ARboolAvailable as of firmware 187.04.xx:
External analog alarms 2, channel 26
............
............
............
0x1C95RboolAvailable as of firmware 187.04.xx:
External analog alarms 2, channel 53
0x1C96RboolAvailable as of firmware 187.04.xx:
External analog alarms 2, channel 54
0x1C97R/WboolAvailable as of firmware 187.04.xx:
External binary input, status 25
0x1C98R/WboolAvailable as of firmware 187.04.xx:
External binary input, status 26
............
............
............
0x1CB3R/WboolAvailable as of firmware 187.04.xx:
External binary input, status 53
0x1CB4R/WboolAvailable as of firmware 187.04.xx:
External binary input, status 54
62
7 Address tables
AddressAccess Data type Signal designation
0x1CB5RboolAvailable as of firmware 187.04.xx:
External binary input, alarm 25
0x1CB6RboolAvailable as of firmware 187.04.xx:
External binary input, alarm 26
............
............
............
0x1CD1RboolAvailable as of firmware 187.04.xx:
External binary input, alarm 53
0x1CD2RboolAvailable as of firmware 187.04.xx:
External binary input, alarm 54
0x1CD3R/Wchar 64Available as of firmware 187.04.xx:
External batch text 10
0x1CF3R/Wchar 64Available as of firmware 187.04.xx:
External batch text 11
............
............
............
0x1ED3R/Wchar 64Available as of firmware 187.04.xx:
External batch text 26
0x1EF3R/Wchar 64Available as of firmware 187.04.xx:
External batch text 27
0x1F13RboolAvailable as of firmware 187.04.xx:
Batch 1 active
0x1F14RboolAvailable as of firmware 187.04.xx:
Batch 2 active
0x1F15RboolAvailable as of firmware 187.04.xx:
Batch 3 active
0x1F16RwordAvailable as of firmware 187.04.xx:
Date: Year as of 1970
0x1F17RwordAvailable as of firmware 187.04.xx:
Date: Month
0x1F18RwordAvailable as of firmware 187.04.xx:
Date: Day
0x1F19RwordAvailable as of firmware 187.04.xx:
Time: Hours
0x1F1ARwordAvailable as of firmware 187.04.xx:
Time: Minutes
0x1F1BRwordAvailable as of firmware 187.04.xx:
Time: Seconds
0x1F1CRboolAvailable as of firmware 187.04.xx:
Slave timeout COM1
0x1F1DRboolAvailable as of firmware 187.04.xx:
Slave timeout COM1 inverse
0x1F1ERboolAvailable as of firmware 187.04.xx:
Slave timeout COM2
63
7 Address tables
AddressAccess Data type Signal designation
0x1F1FRboolAvailable as of firmware 187.04.xx:
0x1F20RboolAvailable as of firmware 187.04.xx:
0x1F21RboolAvailable as of firmware 187.04.xx:
0x2000--Acyclical writing of 4 byte
0x2002--Acyclical writing of 22 byte
0x2010--Acyclical reading of 4 byte
0x2012--Acyclical reading of 22 byte
0x9000R/Wchar 1204 Recipe of the active machine/batch 0
0x9400R/Wchar 1204 Recipe of the active machine/batch 1
0x9800R/Wchar 1204 Recipe of the active machine/batch 2