Omron V78068 Users Manual
Modbus/TCP Communications
This section provides an overview of Modbus/TCP communications and describes the
communications format, communications commands, and communications procedure.
7-1 Outline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2
7-1-1 Modbus/TCP Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2
7-1-2 Modbus/TCP Function Codes Supported by the V780 . . . . . . . . . . . . . . . . . . 7-2
7-1-3 Communications System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-3
7-2 Message Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
7-2-1 Command Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
7-2-2 Response Format for Normal Completion . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-6
7-2-3 Response Format for Error Completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-7
7-2-4 Read Multiple Resisters Command/Response (FC03) . . . . . . . . . . . . . . . . . . 7-8
7-2-5 Write Multiple Resisters Command/Response (FC16) . . . . . . . . . . . . . . . . . . 7-8
7-2-6 Expanded Command/Response (FC100) . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-8
7-3 RF Communications Command Options . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-9
7-4 Communications Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-11
7-4-1 Command Communications Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7-11
7-4-2 Error Response Reception Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-12
7-4-3 RF Tag Communications Command Procedure for Single-access
Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-13
7-4-4 RF Tag Communications Command Procedure for Multiaccess
Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-14
7-5 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-17
7-6 V780 Command Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-20
7-6-1 Single-access Communications Commands . . . . . . . . . . . . . . . . . . . . . . . . 7-20
7-6-2 Multiaccess Communications Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 7-32
7-6-3 Modbus Expansion Communications Commands . . . . . . . . . . . . . . . . . . . . 7-41
7-6-4 Reader/Writer Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-49
7-6-5 Reader/Writer Setting Commands: Network Settings . . . . . . . . . . . . . . . . . . 7-54
7-6-6 Reader/Writer Setting Commands: Communications Settings . . . . . . . . . . . 7-70
7-6-7 Reader/Writer Setting Commands: Device Settings . . . . . . . . . . . . . . . . . . . 7-98
7-6-8 Maintenance Commands: Device Information . . . . . . . . . . . . . . . . . . . . . . 7-102
7-6-9 Maintenance Commands: Log Information . . . . . . . . . . . . . . . . . . . . . . . . . .7-113
7-6-10 Maintenance Commands: RF Communications Information . . . . . . . . . . . 7-121
7
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 1
7 Modbus/TCP Communications
Additional Information
Host device
(client)
Reader/Writer
(server)
Ethernet Cable
TCP port number: 502
Command
Response
Power Supply Cable
7-1 Outline
7-1-1 Modbus/TCP Communications
• A V780 Reader/Writer can perform Modbus/TCP-compliant message communications with the host
device (PLC).
• Communications between the host device (PLC) and the V780 Reader/Writer are performed on a client-server basis using the TCP/IP protocol. The computer, PLC, or other host device is the client and
the Reader/Writer is the server.
• The message that the host device (PLC) sends to the Reader/Writer is called a command. The message that the Reader/Writer returns is called the response.
Modbus/TCP Protocol
The Modbus/TCP protocol is a communications protocol developed for PLCs by Modicon
Inc.(AEG Schneider Automation International S.A.S.). It is an open standard and has been
used for a variety of industrial devices.
A query in Modbus/TCP communications is called a command in this manual.
7-1-2 Modbus/TCP Function Codes Supported by the V780
The Modbus/TCP function codes that are supported by the V780 Reader/Writer are given in the following table.
Function code Description
These function codes comply with Modbus/TCP Class 0.
FC03 and FC16
(normal commands)
FC100
(expanded command)
The basic Modbus/TCP function codes are classified in Class 0.
Class 0 contains the following two functions: Read Multiple Resisters (FC03) and Write
Multiple Registers (FC16).
These are called normal commands in this manual.
This function code has a unique format that was defined by OMRON.
This function code is used to reduce command/response exchanges between the host
device and Reader/Writer and give priority to the performance of communications with
the host device.
This is called an expanded command in this manual.
7 - 2
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7-1-3 Communications System
Host device
(client)
Reader/Writer
(server)
Ethernet Cable
FC03 or FC16
TCP port number: 502
Command
Response
Power Supply Cable
Modbus/TCP communications instructions
Modbus/TCP Unit or other applicable Unit
There are two communications systems used by the V780 depending on the function codes that are
used.
Modbus/TCP Communications System (FC03 and FC16)
The communications system that uses normal commands that are compliant with Modbus/TCP Class 0
is shown below.
Refer to 7-2 Message Formats on page 7-5 for details on the normal commands.
7 Modbus/TCP Communications
TCP/IP Socket Communications System (FC03, FC16, and FC100)
The expanded command that has a unique format defined by OMRON (FC100) cannot be sent with a
Modbus/TCP Class 0-compliant protocol. The TCP/IP socket communications of the host device (PLC)
are used instead.
Refer to 7-2 Message Formats on page 7-5 for details on the expanded communications commands.
Refer to 7-4 Communications Procedure on page 7-11 for information on creating a program for TCP/IP
communications.
Socket communications instructions
Ethernet Unit or other applicable Unit
Host device
(client)
FC03, FC16, or FC100
Ethernet Cable
Command
Reader/Writer
(server)
Power Supply Cable
TCP port number: 502
7-1 Outline
7
7-1-3 Communications System
Response
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 3
7 Modbus/TCP Communications
Precautions for Correct Use
Communications Units and communications commands that support the Modbus/TCP protocol
support only function codes that comply with Modbus/TCP Class 0. Therefore, the function
code FC100 for expanded commands cannot be used.
IP Address Settings of the Reader/Writer
You can set any IP address for the V780 Reader/Writer.
For details, refer to 7-6-5 Reader/Writer Setting Commands: Network Settings on page 7-54 or Setting
the IP Address of the Reader/Writer from a Web Browser on page 5-4.
Port Numbers Used for Modbus/TCP Communications
Normally, port number 502 (01F6 hex) is used for Modbus/TCP communications.
With the V780 Reader/Writer, you can change the port number to between 1,024 and 65,535 (0400 hex
and FFFF hex).
For details, refer to ?8-2-3 ???????? (P.8-5)?.
7 - 4
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
7-2 Message Formats
7-2-1 Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 … Byte-n
Transaction iden-
tifier
XXXX hex Always 0000 hex. XXXX hex
X: Any value, n: 4,351 max.
Protocol identifier Field length
Unit
identifier
Always
FF hex.
Command frame length
Func-
tion
code
03 hex,
10 hex,
or 64
hex
Range included in the field length.
Data
XX...XX hex
Transaction Identifier
This value is used to identify the message sent by the host device.
The transaction identifier in the response from the Reader/Writer will be a copy of the value that is
specified here.
Protocol Identifier
This field is always 0000 hex.
Field Length
Specify the number of bytes inclusively from the unit identifier through the end of the data.
If the function code is FC03 or FC16, the maximum field length is 250 bytes.
If the function code is FC100, the maximum field length is 4,346 bytes.
Unit Identifier
This field is always FF hex.
7-2 Message Formats
7
7-2-1 Command Format
Function Code
The function code indicates the command to request execution from the Reader/Writer.
Function code Function Remarks
FC03 (03 hex) Read Holding Register Modbus/TCP Class 0 compliant
FC16 (10 hex) Write Holding Register
FC100 (64 hex) Reader/Writer command
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
This function code is used for commands
with a unique manufacturer definition that
gives priority to the performance of communications with the host device.
7 - 5
7 Modbus/TCP Communications
Range included in the field length.
Data
Specify the data that is relevant to the function code.
The format of the data depends on the function code.
7-2-2 Response Format for Normal Completion
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 … Byte-n
Transaction iden-
tifier
XXXX hex Always 0000 hex. XXXX hex
X: Any value, n: 9,215 max.
Protocol identifier Field length
Unit
identifier
Always
FF hex.
Func-
tion
code
03 hex,
10 hex,
or 64
hex
Data
XX...XX hex
Transaction Identifier
The value that was specified in the command is set.
Protocol Identifier
This field is always 0000 hex.
Field Length
The number of bytes inclusively from the unit identifier through the end of the data is set.
Unit Identifier
This field is always FF hex.
Function Code
The value of the function code that was specified in the command is set.
Data
The data that is relevant to the function code is set.
The format of the data depends on the function code.
7 - 6
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
7-2-3 Response Format for Error Completion
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8
Transaction identifier Protocol identifier Field length
XXXX hex Always 0000 hex. Always 0003 hex.
X: Any value
Unit identi-
fier
Always FF
hex.
Range included in the field length.
Function
code
83 hex, 90
hex, or E4
hex
Transaction Identifier
The value that was specified in the command is set.
Protocol Identifier
Exception
code
XX hex
This field is always 0000 hex.
7-2 Message Formats
Field Length
This field is always 0003 hex.
Unit Identifier
This field is always FF hex.
7
7-2-3 Response Format for Error Completion
Function Code
The value of the function code that was specified in the command plus 80 hex is set.
Exception Code
A code that provides information on the error is set.
You can use the error code to identify the error that was detected by the Reader/Writer. The exception
code and error code are related as given below. Refer to the most recent command error information or
command error log to check details on the error using the error code.
Exception
code
01 hex Illegal function
02 hex Illegal data address 1004 hex Command format error
03 hex Illegal data value 1005 hex Command parameter error
04 hex Failure in slave device
06 hex Slave device busy 1011 hex Command execution failure, busy
Exception code meaning V780 error code
1001 hex Frame length error
1002 hex Frame header error
1003 hex Unknown command error
2*** hex RF Tag communications error
1018 hex Command execution failure, minor fault
101F hex Command execution failure, major fault
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 7
7 Modbus/TCP Communications
7-2-4 Read Multiple Resisters Command/Response (FC03)
Command Format
Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Function code Register address Word count
03 hex XXXX hex
0001 to 0078 hex
(1 to 120)
Normal Response Format
Byte-7 Byte-8 Byte-9 … Byte-n
Function code Byte count Read holding register data
03 hex XX hex XX...XX hex
7-2-5 Write Multiple Resisters Command/Response (FC16)
Command Format
Byte-7 Byte-8 Byte-9 Byte-10 Byte-11 Byte-12 Byte-13 … Byte-n
Function code Register address Word count Byte count Write holding register data
10 hex XXXX hex
0001 to 0078 hex
(1 to 120)
Word count x 2 XX...XX hex
Normal Response Format
Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Function code Register address Word count
10 hex XXXX hex
0001 to 0078 hex
(1 to 120)
7-2-6 Expanded Command/Response (FC100)
Command Format
7 - 8
Byte-7 Byte-8 Byte-9 Byte-10 … Byte-n
Function code Subfunction code Expanded command parameters
64 hex XXXX hex XX...XX hex
Normal Response Format
Byte-7 Byte-8 Byte-9 Byte-10 … Byte-n
Function code Subfunction code Expanded response data
64 hex XXXX hex XX...XX hex
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
7-3 RF Communications Command
Options
This section describes the options that you can use together with RF communications commands (multiaccess or Modbus expansion). You can specify options to get the EPC of the RF Tag, the reception
level, or other communications information together with the normal data for the command.
For commands with the multiaccess specification, the communications information specified with the
option is returned in the response for the command that gets the execution results, i.e., the two commands are used together.
For commands with the Modbus expansion, the communications information specified with the option is
returned as an attachment to the response.
Options
7-3 RF Communications Command Options
Options
Item Relevant bit Description Information size
EPC Bit 0 The StoredPC and EPC code are attached. 32 words
Reception
level
Reserved 1 Bits 2 to 3 • These bits are reserved. --Diagnostic
result
Reserved 2 Bits 5 to 15 • These bits are reserved. ---
Option Specification Examples:
Specify 0001 hex to have the EPC attached.
Specify 0003 hex to have the EPC and reception level attached.
Specify 0011 hex to have the EPC and diagnostic results attached.
Bit 1 The reception level (signed hexadecimal) is attached.
FFFF to FF9D hex (-1 to -99 [dBm])
• A value of 0 will be set if processing ended in an error.
Bit 4 The diagnostic results (4-digit hexadecimal) are attached.
If communications diagnostics are disabled, 0000 hex is
attached.
For details, refer to Response Formats on page 7-125 under
GET COMMUNICATIONS DIAGNOSTIC INFORMATION on
page 7-125.
1 word
1 word
Options Supported by RF Communications Commands
7
OK: Option can be specified, No: Option cannot be specified. (A parameter error will occur if it is.)
---: Reserved (Always specify 0 for these unused bits.)
Classification Command
Communications
command, multiaccess
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
SET MULTIACCESS ID READ --- No --- OK No
SET MULTIACCESS DATA READ --- No --- OK OK
Reserved
Bits 5 to
15
Diag-
nostic
results
Bit 4
Options
Reserved RSSI EPC
Bits 2
and 3
Bit 1 Bit 0
7 - 9
7 Modbus/TCP Communications
Classification Command
Communications
command, Modbus expansion
EXTENDED DATA READ --- OK --- OK OK
EXTENDED DATA WRITE --- OK --- OK OK
EXTENDED MULTIACCESS ID
READ
EXTENDED MULTIACCESS DATA
READ
Options
Diag-
Reserved
Bits 5 to
15
--- No --- OK No
--- No --- OK OK
nostic
results
Bit 4
Reserved RSSI EPC
Bits 2
and 3
Bit 1 Bit 0
7 - 10
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
Host device
(client)
Reader/Writer
(server)
Connection requested.
Connection request acknowledged.
Disconnection requested.
Disconnection request acknowledged.
Command sent.
Response returned.
Command
execution
7-4 Communications Procedure
In the computer, PLC, or other host devices, write the program to communicate with the Reader/Writer
using TCP sockets.
If you use an Modbus/TCP master device, follow the communications procedure for the device you are
using.
7-4-1 Command Communications Procedure
A connection is required between the host device and Reader/Writer to communicate with the
Reader/Writer. After you establish a connection, send commands and receive the responses.
1 Connection Processing: Opening a Socket
Send a request for a connection from the host device to the Reader/Writer and establish a TCP
connection. Monitor for connection timeouts as required.
2 Command Send Processing: Sending Socket Data
Send the command from the host device to the Reader/Writer in a message.
Monitor for send timeouts as required.
7-4 Communications Procedure
3 Response Reception Processing: Receiving Socket Data
At the host device, wait to receive the message from the host device and receive the response.
Monitor for reception timeouts as required.
4 Disconnection Processing: Closing the Socket
Send a request for a disconnection from the host device to the Reader/Writer and disconnect
the TCP connection. Monitor for disconnection timeouts as required.
7
7-4-1 Command Communications Procedure
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 11
7 Modbus/TCP Communications
Precautions for Correct Use
Error
occurs.
Error
detected.
Host device
(client)
Reader/Writer
(server)
Command
execution
GET MOST RECENT ERROR
INFORMATION command sent.
(Or, GET COMMAND ERROR LOG command sent.)
Error information returned.
Command sent.
Response returned.
Function code + 80 hex
Access to a Reader/Writer is possible from only one host device at a time.
If a host device B connects to a Reader/Writer while another host device A is already connected to it, the connection between host device A and the Reader/Writer will be automatically
disconnected and a connection with host device B will be established.
7-4-2 Error Response Reception Procedure
If an error response is received, you can check the most recent command error information or command error log in the Reader/Writer to get details on the nature of the error. An error has occurred if the
function code in the response that was returned from the Reader/Writer is 80 hex higher than the function code in the query.
You can do this by sending a GET MOST RECENT ERROR INFORMATION command or GET COMMAND ERROR LOG command from the host device or by using the Web browser interface through the
Web server.
7 - 12
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
Host device
(client)
Reader/Writer
(server)
RF Tag A
RF Tag A
Command
execution
Command
execution
READ DATA communications
command sent.
Communications field
RF Tag memory
read/written.
RF Tag memory
read/written.
WRITE DATA communications
command sent.
Read data (120 words max.)
Data to write (120 words max.)
Response returned.
Response returned.
Host device
(client)
Reader/Writer
(server)
Command
execution
READ DATA communications
command sent.
Communications field
GET MOST RECENT ERROR INFORMATION
command sent.
Exception code: Failure in slave device
Error code: RF Tag missing error
Response returned.
Timeout (TMO)
Error information returned.
7-4-3 RF Tag Communications Command Procedure for Single-access
Communications
When you send an RF Tag communications command with single-access communications, the
Reader/Writer communicates with only one RF Tag in the communications field.
Using a Normal Command (FC03 or FC16)
With a normal command, the maximum size of data that you can read from an RF Tag is 120 words. To
read more data than that, you must use more than one READ DATA or WRITE DATA command, or use
an expanded command.
7-4 Communications Procedure
If communications with an RF Tag are not possible, a “failure in slave device” exception code (04 hex)
is returned in an error response. Following the error response reception procedure.
7
7-4-3 RF Tag Communications Command Procedure for Single-access Communica-
tions
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 13
7 Modbus/TCP Communications
Host device
(client)
Reader/Writer
(server)
RF Tag A
Command
execution
READ DATA communications
command sent.
Communications field
RF Tag memory
read/written.
GET RF TAG ADDITIONAL
INFORMATION command sent.
Reception level
Response returned.
Response returned.
Host device
(client)
Reader/Writer
(server)
RF Tag A
Command
execution
EXPANDED DATA READ
communications command sent.
Communications field
RF Tag memory
read/written.
Error code
+ EPC code
+ Reception level
Read data (2,048 words max.)
Response returned
(2,048 words max.)
If you want to check the EPC code or reception level when communications with the RF Tag are successful, send a GET RF TAG ADDITIONAL INFORMATION command after the response to the communications command has been received. The reception level from the RF Tag that was just
communicated with will be returned.
Using an Expanded Command (FC100)
With an expanded command, the maximum size of data that you can read from an RF Tag is 2,048
words.
If an error occurs in the RF Tag communications, the error code is returned with the response. No additional command is required to check the error code.
You can also specify a command option to have the EPC code or reception level returned with the other
data.
7-4-4 RF Tag Communications Command Procedure for Multiaccess
Communications
When you send an RF Tag communications command with multiaccess communications, the
Reader/Writer communicates with more than one RF Tag in the communications field.
The Reader/Writer will communicate with all of the RF Tags in the communications field within the communications timeout time (64 max.) and then return a response.
7 - 14
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
Host device
(client)
Reader/Writer
(server)
RF Tag A
RF Tag B
RF Tag C
SET MULTIACCESS DATA READ
communications command sent.
GET MULTIACCESS DATA READ RESULTS communications command sent.
GET MULTIACCESS DATA READ RESULTS communications command sent.
Communications field
RF Tag memory
read/written.
Error code Read data
Number of RF Tags: 3
EPC code
+ Reception level
Error code Read data
Number of RF Tags: 2
EPC code
+ Reception level
Response returned.
Response returned.
Response returned.
GET MULTIACCESS DATA READ RESULTS communications command sent.
Error code Read data
Number of RF Tags: 1
EPC code
+ Reception level
Response returned.
Command execution
Timeout (TMO)
RF Tag A
communications
results
RF Tag B
communications
results
RF Tag C
communications
results
Using a Normal Command (FC03 or FC16)
With a normal multiaccess RF Tag command, two commands are used to exchange the data, one to set
communications and another to get the results.
1 Sending the Command to Set Communications
First, send the command to set communications.
If the Reader/Writer detects even one RF Tag, the results of execution are returned as a normal
response.
If no RF Tags were detected, an RF Tag missing error is returned.
2 Sending the Command to Get the Results
Send the command to get the results.
When you execute the command to get the results, the results of communications with the first
RF Tag that was detected will be returned. The communications results will contain the number
of RF Tags detected, the error code, and, for READ DATA, the EPC code.
If the option is specified, the reception level information is also attached.
7-4 Communications Procedure
3 Repeatedly Getting the Results
Execute the command to get the results once for every RF Tag that was detected.
The number of RF Tags that was detected by the Reader/Writer is included in the response to
the command to get the results. Repeatedly send the command until the number of RF Tags in
the response is 1.
7
7-4-4 RF Tag Communications Command Procedure for Multiaccess Communica-
tions
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 15
7 Modbus/TCP Communications
Precautions for Correct Use
Precautions for Correct Use
Host device
(client)
Reader/Writer
(server)
RF Tag A
RF Tag B
RF Tag C
SET MULTIACCESS DATA READ
communications command sent.
Communications field
RF Tag memory
read/written.
Error code Read data
Number of RF Tags: 3
EPC code
+ RSSI level
Error code Read dataEPC code
+ RSSI level
Response returned.
Response returned.
Error code Read dataEPC code
+ RSSI level
Command execution
Timeout
(TMO)
RF Tag A
communications results
RF Tag B
communications results
RF Tag C
communications results
If you execute another communications command (e.g., a single-access read, write, or fill command or a multiaccess read command) before you execute the commands to get the results,
the multiaccess communications results held in the Reader/Writer will be cleared.
Using an Expanded Command (FC100)
With an expanded command, you can execute one multiaccess RF Tag command to get the communications results from more than one RF Tag with only one command.
7 - 16
The normal MULTIACCESS DATA READ and MULTIACCESS ID READ communications commands are designed for applications that read two to five RF Tags at one time. If your application requires reading more RF Tags than that, we recommend that you use an expanded
command.
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7-5 Commands
The commands that you can send to a Reader/Writer are listed below.
The command codes are used to identify the commands and they are recorded in the most recent command error information and command error log with an error response is returned. (This information is
not included in the Modbus/TCP message format.)
Single-access Communications Commands
Command name Function code Register address Command code
READ ID FC03 4000 hex 0001 hex
WRITE ID FC16 4000 hex 0002 hex
READ DATA FC03 0000 to 07FF hex
WRITE DATA FC16 0000 to 07FF hex
LOCK FC16 8000 hex 0005 hex
DATA FILL FC16 8100H hex 0006 hex
7 Modbus/TCP Communications
0003 hex
1000 to 17FF hex
2000 to 27FF hex
3000 to 3FFF hex
1000 to 17FF hex
2000 to 27FF hex
3000 to 3FFF hex
*1
0004 hex
7-5 Commands
Multiaccess Communications Commands
Command name Function code Register address Command code
SET MULTIACCESS ID READ FC16 Always 9000 hex. 0101 hex
GET MULTIACCESS ID READ
RESULTS
SET MULTIACCESS DATA READ FC16 Always 9200 hex. 0103 hex
GET MULTIACCESS DATA READ
RESULTS
FC03 Always 9100 hex. 0102 hex
FC03 Always 9300 hex. 0104 hex
7
Modbus Expansion Communications Commands
Command name Function code Subfunction code Command code
EXTENDED DATA READ FC100 0001 hex 0201 hex
EXTENDED DATA WRITE FC100 0002 hex 0202 hex
EXTENDED MULTIACCESS ID READ FC100 0003 hex 0203 hex
EXTENDED MULTIACCESS DATA
READ
FC100 0004 hex 0204 hex
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 17
7 Modbus/TCP Communications
Reader/Writer Control Commands
Command name Function code Register address Command code
INITIALIZE FC16 A000 hex 1001 hex
RESET FC16 A100 hex 1002 hex
STOP FC16 A200 hex 1003 hex
RESET FOCUS FC16 A300 hex 1004 hex
Reader/Writer Setting Commands: Network Settings
Command name Function code Register address Command code
SET TCP/IP COMMUNICATIONS
CONDITIONS
GET TCP/IP COMMUNICATIONS
CONDITIONS
SET DEVICE NAME FC16 B100 hex 2003 hex
GET DEVICE NAME FC03 B100 hex 2004 hex
SET MODBUS/TCP COMMUNICATIONS CONDITIONS
GET MODBUS/TCP COMMUNICATIONS CONDITIONS
SET WEB COMMUNICATIONS
CONDITIONS
GET WEB COMMUNICATIONS
CONDITIONS
SET WEB PASSWORD FC16 B400 hex 2009 hex
GET WEB PASSWORD FC03 B400 hex 200A hex
FC16 B000 hex 2001 hex
FC03 B000H hex 2002 hex
FC16 B200 hex 2005 hex
FC03 B200 hex 2006 hex
FC16 B300 hex 2007 hex
FC03 B300 hex 2008 hex
Reader/Writer Setting Commands: Device Settings
Command name Function code Register address Command code
SET OPERATION INDICATOR
CUSTOM CONDITIONS
GET OPERATION INDICATOR
CUSTOM CONDITIONS
FC16 B800 hex 5001 hex
FC03 B800 hex 5002 hex
Reader/Writer Setting Commands: Communications Settings
Command name Function code Register address Command code
SET TAG COMMUNICATIONS
CONDITIONS
GET TAG COMMUNICATIONS
CONDITIONS
SET TRANSMISSION POWER FC16 C100 hex 3003 hex
GET TRANSMISSION POWER FC03 C100 hex 3004 hex
SET CHANNEL FC16 C200 hex 3005 hex
GET CHANNEL FC03 C200 hex 3006 hex
SET GEN2 SESSION FC16 C300 hex 3007 hex
FC16 C000 hex 3001 hex
FC03 C000 hex 3002 hex
7 - 18
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
Command name Function code Register address Command code
GET GEN2 SESSION FC03 C300 hex 3008 hex
SET ACCESS PASSWORD FC16 C400 hex 3009 hex
GET ACCESS PASSWORD FC03 C400 hex 300A hex
SET RF TAG SELECTION FILTER
FC16 C500 hex 300B hex
CONDITIONS
GET RF TAG SELECTION FILTER
FC03 C500 hex 300C hex
CONDITIONS
SET RSSI FILTER CONDITIONS FC16 C600 hex 300D hex
GET RSSI FILTER CONDITIONS FC03 C600 hex 300E hex
SET TRANSMISSION TIME FC16 C700 hex 300F hex
GET TRANSMISSION TIME FC03 C700 hex 3010 hex
Maintenance Commands: Device Information
Command name Function code Register address Command code
GET MODEL INFORMATION FC03 D000 hex 4001 hex
GET FIRMWARE VERSION FC03 D100 hex 4002 hex
GET MAC ADDRESS FC03 D200 hex 4003 hex
GET OPERATING STATUS FC03 D300 hex 4004 hex
GET TIME INFORMATION FC03 D400 hex 4005 hex
SET TIME INFORMATION FC16 D400 hex 4006 hex
7-5 Commands
Maintenance Commands: Log Information
Command name Function code Register address Command code
GET SYSTEM ERROR LOG FC03 D600 hex 4101 hex
7
CLEAR SYSTEM ERROR LOG FC16 D700 hex 4102 hex
GET COMMAND ERROR LOG FC03 D800 hex 4103 hex
GET MOST RECENT COMMAND
FC03 D900 hex 4104 hex
7-4-4 RF Tag Communications Command Procedure for Multiaccess Communica-
tions
ERROR INFORMATION
Maintenance Commands: RF Communications Information
Command name Function code Register address Command code
GET RF TAG ADDITIONAL INFORMATION
GET NOISE LEVEL FC03 DB00 hex 4202 hex
GET COMMUNICATIONS DIAG-
NOSTIC INFORMATION
FC03 DA00 hex 4201 hex
FC03 DC00 hex 4203 hex
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 19
7 Modbus/TCP Communications
Additional Information
7-6 V780 Command Details
7-6-1 Single-access Communications Commands
READ ID
Function
This command reads the ID (i.e., the EPC code) of the RF Tag in the communications field.
Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 0006 hex FF hex 03 hex 4000 hex 0020 hex
Protocol identifier Field length Unit
identifier
Function
code
Register address Word count
Parameter Description
Register address The register address (4000 hex) that specifies reading the ID
Word count The number of words in the read StoredPC and EPC code (always 0020 hex).
Response Formats
• Normal Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10
Transaction identi-
fier
X X 0000 hex 0043 hex FF hex 03 hex 40 hex 2 bytes
Byte-11 … Byte-72
EPC code
62 bytes
Parameter Description
StoredPC Gives the StoredPD data in 4-digit hexadecimal.
EPC code Gives the Tag-specific information according to Gen2 standards.
Protocol identifier Field length Unit
identifier
The upper 5 bits are the EPC word length. (Refer to StoredPC Bit Format on page
20, below.)
All bytes of the EPC code section that exceed the EPC word length in the StoredPC
are filled with 00 hex.
Function
code
Byte
count
StoredPC
Note If the reception level is required, use GET RF TAG ADDITIONAL INFORMATION on page 7-121.
7 - 20
• StoredPC Bit Format
10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F
PC + EPC length
16 x (n + 1)
RFU 0:EPS
1:AFI
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
Data
7 Modbus/TCP Communications
• Error Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8
Transaction identi-
fier
X X 0000 hex 0003 hex FF hex 83 hex 1 byte
Parameter Description
Exception code For details, refer to Exception Code on page 7-7 under Response Format for Error
Protocol identifier Field length Unit
identifier
Completion on page 7-7.
Function
code
Excep-
tion
code
Execution Examples
Reading the ID Data from the RF Tagt
Example 1: Execution When an RF Tag Is in the Communications Field (StoredPC: 3000 hex, EPC
code: 111122223333444455556666 hex)
TX: 000000000006FF0340000020
RX: 000000000043FF0340300011112222333344445555666600…00
7-6 V780 Command Details
* Words 7 through 31 of the EPC code section (i.e., the words past the EPC length of 6 words) are
filled with zeros.
Example 2: Execution When an RF Tag Is Not in the Communications Field (Exception Code: 04
Hex (Failure in Device))
TX: 000000000006FF0340000020
RX: 000000000003FF8304
7
7-6-1 Single-access Communications Commands
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 21
7 Modbus/TCP Communications
WRITE ID
Function
This command writes the ID (i.e., the EPC code) to the RF Tag in the communications field.
Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 2 bytes FF hex 10 hex 4000 hex 2 bytes
Byte-12 Byte-13 Byte-14 Byte-15 … Byte-n
Byte
count
1 byte 2 bytes 0 to 62 bytes
Protocol identifier Field length Unit
EPC length EPC code
identifier
Function
code
Register address Word count
Parameter Description
Field length Setting range: 0015 to 0047 hex
Register address The register address (4000 hex) that specifies reading or writing the ID
Word count Setting range: 0001 to 0020 hex
Byte count Setting range: 02 to 40 hex
EPC length Gives the word size of the EPC code in 4-digit hexadecimal.
0000 to 001F hex (0 to 32)
EPC code Gives the Tag-specific information according to Gen2 standards.
Response Formats
• Normal Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 0006 hex FF hex 10 hex 2 bytes 2 bytes
Parameter Description
Register address The register address from the command is set
Word count The word count from the command is set.
Note If the reception level is required, use GET RF TAG ADDITIONAL INFORMATION on page 7-121.
Protocol identifier Field length Unit
identifier
Function
code
Register address Word count
7 - 22
• Error Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8
Transaction identi-
fier
X X 0000 hex 0003 hex FF hex 90 hex 1 byte
Parameter Description
Exception code For details, refer to Exception Code on page 7-7 under Response Format for Error
Protocol identifier Field length Unit
identifier
Completion on page 7-7.
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
Function
code
Excep-
tion
code
7 Modbus/TCP Communications
Execution Examples
Writing the ID Data to an RF Tag (EPC Length: 0006 Hex, EPC Code: 111122223333444455556666
Hex)
TX: 000000000015FF10400000070E0006111122223333444455556666
RX: 000000000006FF1040000007
7-6 V780 Command Details
7
7-6-1 Single-access Communications Commands
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 23
7 Modbus/TCP Communications
READ DATA
Function
This command reads data from the RF Tag in the communications field.
Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 0006 hex FF hex 03 hex 2 bytes 2 bytes
Parameter Description
Register address Specify in 4-digit hexadecimal the start address for reading data.
Word count Specify in 4-digit hexadecimal the number of words of data to read.
Protocol identifier Field length Unit
Setting ranges (word address specifications)
0000 to 07FF hex: Reserved area
1000 to 17FF hex: EPC area
2000 to 27FF hex: TID area
3000 to 37FF hex: User area
Setting range: 0001 to 0078 hex (1 to 120)
identifier
Function
code
Register address Word count
Response Formats
• Normal Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 … Byte-n
Transaction identi-
fier
X X 0000 hex 00 hex 1 byte FF hex 03 hex 1 byte 2 to 240 bytes
Parameter Description
Byte count Contains the number of bytes of data that were read from the RF Tag in 2-digit hexa-
Read data The data that was read from the RF Tag is attached.
Note If the reception level is required, use GET RF TAG ADDITIONAL INFORMATION on page 7-121.
• Error Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8
Transaction identi-
fier
X X 0000 hex 0003 hex FF hex 83 hex 1 byte
Parameter Description
Exception code For details, refer to Exception Code on page 7-7 under Response Format for Error
Protocol identifier Field length Unit
identifier
decimal. (02 to F0 hex)
Protocol identifier Field length Unit iden-
tifier
Completion on page 7-7.
Function
code
Function
code
Byte
count
Excep-
tion code
Read data
7 - 24
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 Modbus/TCP Communications
Execution Examples
Reading Four Words of Data (1111222233334444 Hex) Starting from Word Address 0123 Hex (User
Area) in the RF Tag
TX: 000000000006FF0331230004
RX: 000000000013FF03081111222233334444
7-6 V780 Command Details
7
7-6-1 Single-access Communications Commands
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 25
7 Modbus/TCP Communications
WRITE DATA
Function
This command writes data to the RF Tag in the communications field.
Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9
Transaction identi-
fier
X X 0000 hex 2 bytes FF hex 10 hex 2 bytes 2 bytes
Byte-12 Byte-13 … Byte-n
Byte
count
1 byte 1 to 120 words
Protocol identifier Field length Unit
identifier
Data to write
Function
code
Register address Word count
Byte-1
0
Parameter Description
Field length Setting range: 0009 to 00F7 hex (9 to 247)
Register address Specify in 4-digit hexadecimal the start address for writing data in the RF Tag.
Setting ranges (word address specifications)
0000 to 07FF hex: Reserved area
1000 to 17FF hex: EPC area
2000 to 27FF hex: TID area
3000 to 37FF hex: User area
Word count Specify in 4-digit hexadecimal the number of words of data to write.
Setting range: 0001 to 0078 hex (120 words max.)
Byte count Specify in 4-digit hexadecimal the number of bytes of data to write.
Setting range: 02 to F0 hex (240 bytes max.)
Data to write Specify the data to write to RF Tag.
Between 1 and 120 words of data can be written with one command.
Byte-11
7 - 26
Response Formats
• Normal Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 0006 hex FF hex 10 hex 2 bytes 2 bytes
Parameter Description
Register address The register address from the command is set
Word count The word count from the command is set.
Note If the reception level is required, use GET RF TAG ADDITIONAL INFORMATION on page 7-121.
• Error Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8
Transaction identi-
fier
X X 0000 hex 0003 hex FF hex 90 hex 1 byte
Protocol identifier Field length Unit
identifier
Protocol identifier Field length Unit
identifier
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
Function
code
Function
code
Register address Word count
Excep-
tion code
7 Modbus/TCP Communications
Parameter Description
Exception code For details, refer to Exception Code on page 7-7 under Response Format for Error
Completion on page 7-7.
Execution Examples
Writing Four Words of Data (1111222233334444 Hex) Starting from Word Address 0123 Hex (User
Area) in the RF Tag
TX: 00000000000FFF1031230004081111222233334444
RX: 000000000006FF1031230004
7-6 V780 Command Details
7
7-6-1 Single-access Communications Commands
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 27
7 Modbus/TCP Communications
LOCK
Function
This command locks or unlocks the memory of the RF Tag in the communications field.
Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 000F hex FF hex 10 hex 8000F hex 0004 hex
Byte-12 Byte-13 Byte-14 Byte-15 Byte-16 Byte-17 … Byte-20
Byte
count
08 hex 2 bytes 2 bytes 4 bytes
Protocol identifier Field length Unit
Lock operation Area to lock/unlock Password
identifier
Function
code
Register address Word count
Parameter Description
Lock operation Specify locking or unlocking.
0000 hex: Unlock
0001 hex: Lock
• If you specify locking the EPC, TID, or user area, you will no longer be able to write data to
that area.
• If you specify locking the access password, you will no longer be able to read the access
password area.
• When you unlock an area, specify all of the areas that have been locked.
Area to
lock/unlock
Specify one or more of the EPC, TID, and user areas.
EPC area: 0001 hex
TID area: 0002 hex
User area: 0004 hex
Access password: 0008 hex
• If all zeros is specified, a command parameter error will occur.
Password Specify the access password to set in the Tag in 8-digit hexadecimal (32 bits) (00000000 hex).
Locking: The access password to set in the RF Tag to lock.
Unlocking: The access password in the RF Tag to unlock.
Note 1. When an area is locked, the specified password is written to the access password area in the RF Tag.
2. If an address error, lock error, or RF Tag system error occurs when locking an area, the access password area in the RF Tag will be cleared to all zeros.
3. When an RF Tag is unlocked, the access password area in the RF Tag will be cleared to all zeros.
7 - 28
Response Formats
• Normal Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 0006 hex FF hex 10 hex 2 bytes 2 bytes
Parameter Description
Register address The register address from the command is set
Word count The word count from the command is set.
Protocol identifier Field length Unit
identifier
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
Function
code
Register address Word count
7 Modbus/TCP Communications
Note If the reception level is required, use GET RF TAG ADDITIONAL INFORMATION on page 7-121.
• Error Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8
Transaction identi-
fier
X X 0000 hex 0003 hex FF hex 90 hex 1 byte
Parameter Description
Exception code For details, refer to Exception Code on page 7-7 under Response Format for Error
Protocol identifier Field length Unit
identifier
Completion on page 7-7.
Function
code
Excep-
tion code
Execution Examples
Example 1: Locking the User Area of the RF Tag with a Password of 12345678 Hex
TX: 00000000000FFF1080000004080001000412345678
RX: 000000000006FF1080000004
7-6 V780 Command Details
Example 2: Unlocking the User Area
TX: 00000000000FFF1080000004080000000412345678
RX: 000000000006FF1080000004
7
7-6-1 Single-access Communications Commands
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
7 - 29
7 Modbus/TCP Communications
DATA FILL
Function
This command writes the specified data to the specified number of words beginning from the specified write start address. The specifications are made in the command.
Command Format
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 000D hex FF hex 10 hex 8100 hex 0003 hex
Byte-12 Byte-13 Byte-14 Byte-15 Byte-16 Byte-17 Byte-18
Byte
count
06 hex 2 bytes 2 bytes 2 bytes
Protocol identifier Field length Unit
Fill address Number of fill
Fill information
words
identifier
Fill data
Function
code
Register address Word count
Parameter Description
Register address The register address (8100 hex) that specifies filling data
Word count Number of words of fill information (0003 hex)
Byte count Number of bytes of fill information (06 hex)
Fill information Fill address Specify in 4-digit hexadecimal the start address for writing data in the RF
Ta g.
0000 to 07FF hex: Reserved area
1000 to 17FF hex: EPC area
2000 to 27FF hex: TID area
3000 to 37FF hex: User area
Number of fill
words
Specify in 4-digit hexadecimal the number of words of data to fill.
Setting range: 0000 hex or 0001 to 0800 hex
• If 0000 hex is specified for the number of fill words, the entire memory
area will be filled.
• You cannot write data to more than one area with the same command.
Fill data Specify in 4-digit hexadecimal the data to write to the RF Tag.
Response Formats
• Normal Response
Byte-0 Byte-1 Byte-2 Byte-3 Byte-4 Byte-5 Byte-6 Byte-7 Byte-8 Byte-9 Byte-10 Byte-11
Transaction identi-
fier
X X 0000 hex 0006 hex FF hex 10 hex 2 bytes 0003 hex
Protocol identifier Field length Unit
identifier
Function
code
Register address Word count
7 - 30
Parameter Description
Register address The register address from the command is set
Word count The word count from the command is set.
Note If the reception level is required, use GET RF TAG ADDITIONAL INFORMATION on page 7-121.
UHF RFID System V780-series Reader/Writer User’s Manual (Z389)
Loading...