1. Read this manual before installing or operating. Keep this instruction manual on hand
of the end user, and make use of this manual in maintenance and inspection.
2. All information contained in this manual will be changed without notice. Please
contact your Toshiba distributor to confirm the latest information.
NOTICE
E6581741
Introduction
Thank you for purchasing the “EtherNet/IP™ - Modbus® TCP option (IPE002Z)” for
TOSVERT VF-MB1/S15 inverter. Before using EtherNet/IP™ - Modbus
carefully read this function manual in order to completely and correctly utilize its excellent
performance.
This option needs the option adaptor to connect VF-S15 which type form is SBP009Z.
Please match here and buy it when SBP009Z is not at hand yet.
After reading this function manual, please keep it handy for future reference.
For details of its general handling, see an instruction manual attached with the option
unit.
- TOSVERT VF-MB1/S15 communication option Precautions Manual···········E6581739
- TOSVERT VF-MB1 Communication Function Instruction Manual················ E6581726
- TOSVERT VF-S15 Communication Function Instruction Manual················· E6581913
EtherNet/IP™ is a trademark of ControlNet International, Ltd.
Modbus
Handling in general
Prohibited
Do not connect or disconnect a network cable while the Inverter power is on.
It may lead to electric shocks or fire.
®
TCP module,
®
TCP is a registered trademark of AEG Schneider Automation International S.A.S.
Warning
Mandatory
Network control
Prohibited
Mandatory
Mandatory
See the instruction manual attached with the option unit for cautions the handling.
Otherwise, it may lead to electric shocks, fire, injuries or damage to product.
Warning
Do not send the value out of the valid range to objects and attributes.
Otherwise, the motor may suddenly start/stop and that may result in injuries.
Use an additional safety device with your system to prevent a serious accident due to the
network malfunctions. Usage without an additional safety device may cause an accident.
Caution
Set up “Communication error trip function (see below)” to stop the Inverter when the
option unit is deactivated by an unusual event such as tripping, an operating error,
power outage, failure, etc.
- Network Time-Out, Inverter operation at disconnection, Preset speed operation
selection
(Refer to " 3.2.3 Network error detection (c100 - c103, c523)" for details)
Deactivated the option module may cause an accident, if the “Communication error trip
function” is not properly set up.
Make sure that the operation signals are STOP before resetting Inverter’s fault. The
motor may suddenly start and that may result in injuries.
Notes on operation
Notes
When the control power is shut off by the instantaneous power failure, communication
will be unavailable for a while.
The Life of EEPROM is approximately 100,000 times. Avoid writing a command more
than 100,000 times to the same parameter of the Inverter and the option module.
2.3. Example of connection to an EtherNet/IP™ and Modbus® TCP .........................................................5
2.4. LED indicator........................................................................................................................................6
5.1.11. Instance 105: TOSHIBA specific output..................................................................................52
5.1.12. Instance 155: TOSHIBA specific input....................................................................................52
6. ABOUT EDS FILE ....................................................................................................................................54
7. INTEGRATION IN RSLOGIX™................................................................................................................54
7.1. Create a new project ..........................................................................................................................54
7.2. Add a EtherNet/IP scanner to the I/O configuration...........................................................................55
7.3. Configure the VF-MB1/S15 EtherNet/IP module ...............................................................................57
7.4. Download the program to the PLC.....................................................................................................59
7.5. Edit the I/O scan data.........................................................................................................................61
8. MODBUS TCP SERVER ..........................................................................................................................64
8.8. "43 (0x2B) Read Device identification" function ................................................................................69
8.9. Parameter data ..................................................................................................................................71
The EtherNet/IP™ - Modbus® TCP option (IPE002Z) allows the VF-MB1/S15 inverter to be connected
into the EtherNet/IP™ - Modbus
®
TCP network.
2. Names and functions
The drawing below shows names and functions of main parts.
2.1. Outline
MAC address Label
(Back side)
Release tab
Connector to the inverter
MS
LNK
(Port L)
LED indicator (See 2.4)
Shielded female RJ45
EtherNet/IP Connector
NS
LNK
Shielded female RJ45
EtherNet/IP Connector
(Port R)
- 4 -
E6581741
2.2. RJ45 connector pin layout
The EtherNet/IP™ - Modbus® TCP option is equipped with two shielded RJ45
connectors.
When you use VF-MB1, the shielding is connected to the drive ground. When you use
VF-S15, the shielding is connected to the grounding terminal of option adapter.
Use an STP (shielded twisted pair) Ethernet cable.
The transmission speed is detected automatically by the unit (10 Mbps or 100 Mbps).
The card can operate in half duplex or full duplex mode, whether connected to a hub or a
switch and regardless of the transmission speed (10 Mbps or 100 Mbps).
Port L and Port R
8………………1
* Fix a cable so that a communication connector may be not taken the weight of wire.
Pin Signal
1 TD+
2 TD-
3 RD+
4 -
5 -
6 RD-
7 -
8 -
2.3. Example of connection to an EtherNet/IP™ and Modbus® TCP
Example of daisy chain topology and star topology
Daisy chain topology Star topology
PLC
Ethernet switch
- 5 -
E6581741
2.4. LED indicator
The LED shows the present
status of the network and module.
The behavior of LNK LED
Link Activity
Protocol Color and behavior Meaning
EtherNet/IP
&
Modbus TCP
The behavior of MS LED
Module Status
Protocol Color and behavior Meaning
EtherNet/IP
Modbus TCP
The behavior of NS LED
Network Status
Protocol Color and behavior Meaning
EtherNet/IP
Modbus TCP
OFF No link
Flashing Green/Red Power up testing
Green ON Link at 100Mbps
Yellow ON Link at 10Mbps
Green Blink Activity at 100Mbps
Yellow Blink Activity at 10Mbps
OFF No power is supplied to the device
Flashing Green/Red Power up testing
Green ON The option is operating correctly
Green flashing The option has not been configured
Red flashing The option has detected a recoverable minor fault
Red on The option has detected a non-recoverable major fault
OFF The option does not have an IP address or powered off
Flashing Green/Red Power up testing
Green ON The option is ready
Green flashing The option is not ready (waiting for cable connection or etc.)
Red flashing The option has detected a communication error (err8)
Red ON The option has detected a option module error (e-23)
OFF The option does not have IP address or powered off
Flashing Green/Red Power up testing
Green ON The option has at least one established connection
Green flashing The option does not have at least one established connection
Red flashing One or more of the connections in which this device is the target
has time out. This shall be left only if all time out connections are
re-established or if the device is reset
Red on Error: duplicate IP address
OFF The option does not have an IP address or powered off
Flashing Green/Red Power up testing
Green ON At least one port is connected and an IP address has been
obtained
Green flashing 3 times All ports are unplugged, but the card has an IP address
Green flashing 4 times Error: duplicate IP address
Green flashing 5 times The card is performing a BOOTP or DHCP sequence
MS
LNK
NS
LNK
- 6 -
E6581741
3. Parameters
3.1. Communication parameters
Set up the inverter parameters as follows. It is necessary to reset the inverter to update the parameter.
This option doesn't operate if these parameters are not correctly set.
Title
cmod 0003 Command mode selection
fmod 0004
f856 0856
f899 0899 Communication function reset
(*1): There selections are effective in only VF-S15.
(*2): The unit depends on the f519 setting.
(*3): This parameter is effective by reset. Please reset (power supply reset or f899=1) after changing a set point.
Communi
cation No.
Communi
cation No.
Function Description
Frequency setting mode
selection 1
Number of motor pole pair for
communication
Function Description
0: Terminal board
1: Panel keypad (including remote keypad)
2: RS485 communication
3: CANopen communication
4: Communcation option
0: Setting dial 1 (save even if power is off)
1: Terminal board VIA
2: Terminal board VIB
3: Setting dial 2 (press in center to save)
4: RS485 communication
5: UP/DOWN from external logic input
6: CANopen communication
7: Communication option
8: Terminal board VIC
9, 10: 11: Pulse train input
12, 13: - (*1)
14: sr0 (*1)
1: 2 poles
2: 4 poles
3: 6 poles
4: 8 poles
5: 10 poles
6: 12 poles
7: 14 poles
8: 16 poles
0: 1: Reset (after execution: 0)
(*3): This parameter is effective by reset. Please reset (power supply reset or f899=1) after changing a set point.
(*4): (V[R) does not work for this parameter.
Preset speed operation
selection
Communication time-out
condition selection
0: None
1 to 15: Preset speed
0: Disconnection detection
1: When communication mode enable (Both
cmod and fmod are set CANopen or
communication option) only
2: 1 + Driving operation
0
0
- 8 -
E6581741
Title
c500C500
c501C501
c502C502
c503 C503
c504C504
c505-
c508
c509-
c512
c513-
c516
c517-
c522
c523 C523 Time out
c524-
c527
c528-
c531
c532-
c535
Communi
cation No.
C505-
C508
C509-
C512
C513-
C516
C517-
C522
C524-
C527
C528-
C531
C532-
C535
Protocol (*3)
Rate Setting (*3)
Actual Rate (L port)
Actual Rate (R port)
IP mode (*3)
IP address (*3)
Subnet Mask (*3)
IP Gate (*3)
MAC address (*5)
IP address actual
IP Mask actual
IP Gate actual
Function Description
This parameter is used to set the protocol of the option
card.
0: Modbus TCP (default)
1: EtherNet/IP
This field is used to set the transmission speed and the
transmission mode of the card.
0: Autodetect(default)
1: 10Mbps Full
2: 10Mbps Half
3: 100Mbps Full
4: 100Mbps Half
This field displays the baud rate and the transmission
mode currently used by the communication card.
(Display only)
0: unconnected
1: 10Mbps Full
2: 10Mbps Half
3: 100Mbps Full
4: 100Mbps Half
Use this parameter to select the IP address assignment
method.
0: Manual
1: BOOTP
2: DHCP
Refer to "
The IP address of the option module.
3.2.2 Assigning IP addresses" for the details.
These fields are effective settings at c504 = 0.
Refer to "3.2.2 Assigning IP addresses" for the details.
The subnet mask of the option module.
These fields are effective settings at c504 = 0.
Refer to "3.2.2 Assigning IP addresses" for the details.
The gateway IP address of the option module.
These fields are effective settings at c504 = 0.
Refer to "3.2.2 Assigning IP addresses" for the details.
The MAC address of the option module.
[C517 - C518 - C519 - C520 - C521 - C522]
The waiting time from the occurrence of the
Factory
setting
0
0
-
0
0.0.0.0
0.0.0.0
0.0.0.0
----
2
network error to detection can be adjusted.
* When you are using unconnected
communication of the EtherNet/IP protocol, time
out is not detected.
0.0: Disable
0.5 - 60 sec.
The current IP address of the option module.
Refer to "
The subnet mask actual of the option module.
Refer to "
The gateway IP address actual of the option module.
Refer to "
3.2.2 Assigning IP addresses" for the details.
3.2.2 Assigning IP addresses" for the details.
3.2.2 Assigning IP addresses" for the details.
-
-
-
(*3): This parameter is effective by reset. Please reset (power supply reset or f899=1) after changing a set point.
(*5): .These values are displayed by decimal number format on panel of VFMB1/S15.
- 9 -
E6581741
EtherNet/IP parameters
Title
c536 C536 EtherNet Error
c554 C554 Web service (*3)
c555 C555 Drive Status
Communi
cation No.
Function Description
Modbus TCP parameters
Title
c600-
c603
c604 C604 IO Scan active (*3)
Communi
cation No.
C600-
C603
Function Description
IP Master (*3) The IP address for PLC(Master) of the Modbus TCP.
Monitor of the EtherNet error.
0: No error/clear error
1: Modbus TCP IO Scanning timeout
2: Network overload
3: Loss of Ethernet carrier
Enables web server.
0: Disable
1: Enable
Monitor the inverter status.
3: Gate Block
4: Run
23: Fault
Enables IO Scan function.
0: Non-active
1: Active
Factory
setting
-
1
-
Factory
setting
0.0.0.0
0
(*3): This parameter is effective by reset. Please reset (power supply reset or f899=1) after changing a set point.
Warning
Mandatory
action
Set up “Communication error trip function (c100 to c103 and c523)” to stop the
inverter when EtherNet/IP™ - Modbus® TCP communication is deactivated.
When the parameters are changed, please reset (power supply reset or f899=1) the
inverter for the changes to take effect.
- 10 -
E6581741
3.2. The details of the parameter setting
3.2.1. Device name (c081-c096)
This option module can set the "Device name" of 16 characters.
(Device name (c081-c096) is 1 character within one parameter.)
The device name is required if the option module uses DHCP to obtain its IP Address.
Please set the setting of the device name according to the following rules.
1. The parameter is displayed by the hexadecimal number.
2. One parameter shows an ASCII character.
3. The relation between the device name and the parameter is as follows.
(*The IP Master address.- Modbus TCP protocol only)
These parameters are effective settings at c504 = 0 (IP mode: Manual).
If the address has been given by a BOOTP or a DHCP server, these parameters are
invalidity.
• After dynamic addressing by a BOOTP or DHCP server, the new address value is
displayed in the parameters. (c524-c535)
They can be provided by:
*BOOTP server (correspondence between the MAC address and the IP addresses).
*DHCP server (correspondence between Device Name and the IP addresses).
The address is assigned according to the IP mode parameter.
c504: IP mode Comments
0 The option uses the address defined in c505-c516.
1 The option receives its address from a BOOTP server.
2 The option receives its address from a DHCP server.
*Device name contains (c081-c096) a valid name.
Note: The IP mode parameter may be modified according to the configuration control
attribute of the TCP/IP interface object (CIP standard).
err8 (Optional unit fault 1: 1BH): Network error stop
▼Related parameter
Title Function Setting range Description
The waiting time from when a network error occurs
can be adjusted. If a network error continues past
the time set in c100, it is recognized as a
communication error and the operation of the
inverter follows the setting of c101.
When normal communication returns during the
setting time, a communication error is not displayed
and operation is continued.
c100
c101
c102
c103
c523 Time out
Communication error
detection delay time
Inverter operation at the
communications loss action
Preset speed operation
selection
Communication time-out
condition selection
0.0-100.0 sec
0-5
1-15
0-2
0.0: Disable
0.5 - 60 sec.
*The case of Modbus
The time-out detection time provides by c523
parameter.
Disconnection detection time =
The operation of the inverter when the
communication fault occurs can be specified.
The operation frequency of the inverter when the
communication fault occurs can be specified. (Only
when c101 is set to 5)
Select the communication time-out condition.
The waiting time from the occurrence of the
network error to detection can be adjusted.
* When you are using unconnected communication
of the EtherNet/IP protocol, time-out is not
detected.
®
TCP protocol
TM
protocol
[μs] + c100
- 13 -
E6581741
3.2.4. Command data (c001-c006), Monitor data (c021-c026)
The outline is indicated about the setting item of parameter c001 – c006 and
c021 – c026 in Instance 102/152 and 105/155 of use. Please refer to a
communication functional description for details.
3.2.4.1. How to use Instance 102/152 and 105/155
Instance 102/152 and 105/155 choose a command or the monitor of the driving state by a menu of c001
- c006 and c021 - c026 and can perform the communication that is cyclic of EtherNet/IP™ and
Modbus
Example 1: Command transmitting by output Instance 102
VF-MB1/S15
"0xC400" is set to parameter fa06
Example 2: State monitoring by the input instance 152.
VF-MB1/S15
The value of a parameter fd03 (0x1234)
is outputted.
®
TCP (ID = 255).
If the command value “c400” set to parameter fa06, Choose parameter fa06 (a communication
option command) for command data (c001=1 (fa06)).
For example, please set C400 in FA06 when you want to send the command from an EtherNet/IP™
option and the availability of the frequency order and a driving order. (Please refer to ” 3.2.4.2”)
IPE002Z
Parameter Value
c001 1 (fa06)
c002 ...
c003 ...
... ...
EtherNet/IP Master
Output Instance 102
Byte Value
0 00
1 C4
2 ...
3 ...
... ...
When you want to monitor the output current, set “3 (fd03)” to parameter c021.
The value of the parameter
fd03 specified as 0 and 1 byte of the input instance 152 with the parameter
c021 is inputted.
IPE002Z
Parameter Value
c021 3 (fd03)
c022 ...
c023 ...
... ...
EtherNet/IP Master
Input Instance 152
Byte Value
0 34
1 12
2 ...
3 ...
... ...
- 14 -
E6581741
3.2.4.2. fa06 (Communication command1)
bit Function 0 1 Note
Preset speed
0
operation frequencies
1
Preset speed
1
operation frequencies
2
Preset speed
2
operation frequencies
3
Preset speed
3
operation frequencies
4
Motor selection (1 or 2)
4
(THR 2 selection)
5 PI D control Normal operationPI D off -
Acceleration/deceleration pattern selection
6
(1 or 2)
(AD2 selection)
7 DC braking OFF
8 Jog run OFF Jog run -
Forward/reverse run
9
selection
10 Run/stop Stop Run 11 Coast stop command Standby Cost stop 12 Emergency stop OFF Emergency stop Always enable, "E" trip
13 Fault reset OFF Reset No data is returned from the drive
Frequency priority
14
selection
Command priority
15
selection
(*1): When 14(sr0) is set to fmod, preset speed operation frequency 0 is selected in using VFS15,.
0000: Preset speed operation OFF
(*1)
0001-1111: Setting of preset speed
operation frequencies (1-15)
Motor 1
(THR 1)
Acceleration/decel
eration pattern 1
(AD1)
Forward run Reverse run -
OFF Enabled
OFF Enabled
Motor 2
(THR 2)
Acceleration/dec
eleration pattern
2
(AD2)
Forced DC
braking
Preset speed operation is
disabled or preset speed
operation frequencies (1-15) are
set by specifying bits for preset
speed operation frequencies 1-4.
Select acceleration/deceleration
1-3 by combination of two bits..
AD1: acc, dec
AD2: f500, f501
AD3: f510, f511
OC stall 1: f601
OC stall 2: f185
- 16 -
E6581741
3.2.4.4. fa07 (frequency reference from internal option)
Frequency reference is set up by 0.01Hz unit and the hexadecimal number.
For example, when "Frequency reference" is set up to 80Hz, since the minimum unit is 0.01Hz,
80 / 0.01 = 8000 = 0x1F40 (Hex.)
3.2.4.5. fa50 (Terminal output data from communication)
The output data on the terminal board can be directly controlled with the computer.
To use this function, select functions from 92 to 95 in advance for the output terminal selection
parameters f130, f131, f132. If bit 0 through bit1 of the data (fa50) is set with the computer,
the specified data (0 or 1) can be output to the selected output terminal.
Data composition of output data on the terminal board (FA50)
bit Output TB function name 0 1
0
1
2-15 (Reserved) - -
Specified data output 1
(Output terminal No.: 92, 93)
Specified data output 2
(Output terminal No.: 94, 95)
Note: Set 0 to reserved bit
Example of use: To control only the RY-RC terminal with the computer
To turn on the RY terminal, set the output terminal selection 1A parameter (f130) to 92
(Designated data output 1) and set 0001H to fa50.
BIT15 BIT0
FA50:
0 0 0 0 000000000001
OFF ON
OFF ON
0
0
0
1
3.2.4.6. fa51 (Analog output (FM) data from communication)
Use this function, set the FM terminal meter selection parameter (fmsl) to 18 (communication data
output).
This makes it possible to send out the data specified as FM analog output data (fa51) though the FM
analog output terminal. Data can be adjusted in a range of 0 to 1000 (resolution of 10 bit).
Please refer to "Meter setting and adjustment" Section of the inverter’s instruction manual.
- 17 -
E6581741
3.2.4.7. fd01 (Inverter operating status 1)
bit Function 0 1 Note
0 Failure FL No output
1 Failure Not tripped Tripped
2 Alarm No alarm Alarm issued 3 Under voltage (moff) Normal Under voltage -
Motor selection (1 or 2)
4
(THR 2 selection)
5 PID control off
Acceleration/deceleratio
6
n pattern selection (1 or
2)
7 DC braking OFF
8 Jog run OFF Jog run -
9 Forward / reverse run Forward run Reverse run 10 Run/stop Stop Run 11 Coast stop (ST = OFF) ST=ON ST=OFF -
12 Emergency stop
13 Standby ST=ON Start-up processStandby
14 Standby Start-up processStandby
15 (Reserved) Undefined -
Note: Don’t use the reserved bit for the judgment.
Motor 1 (THR1)Motor 2 (THR2)
PID control
permitted
Acceleration/dec
eleration pattern
1 (AD1)
No emergency
stop status
Under in
progress
PID control
prohibits
Acceleration/dec
eleration pattern
2 (AD2)
Forced DC
braking
Emergency
stop status
-
Trip status includes rtry and
the trip retention status are also
regarded as tripped statuses.
Standby: Initialization
completed, not failure stop
status, not alarm stop status
(moff, ll forced stop),
ST=ON, and RUN=ON
Standby: Initialization completed,
not failure stop status and not
alarm stop status (moff, ll
forced stop)
3.2.4.8. fd00 (Output frequency)
The current output frequency is read into 0.01Hz of units and by the hexadecimal number.
For example, when the output frequency is 80Hz, 0x1F40 (hexadecimal number) are read.
Since the minimum unit is 0.01%,
0x1F40 (Hex.) = 8000(Dec.) * 0.01 = 80 (Hz)
Also about the following parameters, these are the same as this.
- fd22 (Feedback value of PID)............................................... Unit: 0.01Hz
The output current is read into 0.01% of units and by the hexadecimal number.
For example, when the output current of the rated current 4.8A drive is 50% (2.4A), 0x1388 (hexadecimal
number) is read out.
Since the minimum unit is 0.01%,
0x1388 (Hex.) = 5000 (Dec.) * 0.01 = 50 (%)
Also about the following parameters, these are the same as this.
- fd05 (Output voltage (real time))............................................. Unit: 0.01% (V)
- fd04 (Voltage at DC bus (real time)) ....................................... Unit: 0.01% (V)
* When the motor information connected to the drive set to the parameter (f405 - f415), torque
monitor value "100%" is same as the rated torque of a motor in general.
3.2.4.10. fe35, fe36, fe37 (Monitoring of the analog input VIA, VIB, VIC)
VIA terminal board monitor: "Communication Number fe35"
VIB terminal board monitor: "Communication Number fe36"
VIC terminal board monitor: "Communication Number fe37"
These monitors can also be used as A/D converters irrespective of the drive's control.
VIA / VIC terminal board monitor is capable of reading the data from external devices in a range of 0.01
to 100.00% (unsigned data: 0x0000 to 0x2710).
VIB terminal board monitor is capable of reading the data from external devices in a range of -100.00 to
100.00% (signed data: 0xD8F0 to 0x2710).
If analog input mode is selected with the frequency setting mode selection parameter, however, keep in
mind that any data entered via an analog terminal is regarded as a frequency command.
3.2.4.11. fe14 (Cumulative run time)
The operated cumulative time is read by the hexadecimal number.
For example, when cumulative operation time is 18 hours, 0x0012 (18 hours) is read.
0x0012 = 18 (Dec., hour)
3.2.4.12. fe40 (Analog output (FM))
The output value of FM terminal is read.
The value range is set to 0 to 10000 (0x0000 to 2710H) which is corresponded to 0.00% to 100.00%.
For example, when analog output is 50.00%, 0x1388 is read.
0x1388 = 50.00(Dec., %)
- 19 -
E6581741
3.2.4.13. fc91 (Alarm code)
Remarks
bit
0 Over-current alarmNormal Alarming c flicking
1 Inverter over load alarmNormal Alarming l flicking
2 Motor over load alarmNormal Alarming l flicking
3 Over heat alarmNormal Alarming h flicking
4 Over voltage alarmNormal Alarming p flicking
5 Main circuit undervoltage alarmNormal Alarming -
6 main device overheat alarmNormal Alarming l flicking
7 Under current alarmNormal Alarming -
8 Over-torque alarmNormal Alarming -
9 Braking resistor overload alarmNormal Alarming 10 Cumulative operation hours alarmNormal Alarming 11 Option communication alarmNormal Alarming 12 Serial communication alarmNormal Alarming 13 MOFFMS (MSrelay off or MOFF)Normal Alarming -
14 Stop after instantaneous power off-
15 Stop after LL continuance time-
Function 0 1
Dec., Under
(Code displayed on
the panel)
Refer to f302
stop
Dec., Under
Refer to f256
stop
value
value
3.2.4.14. fd06 (Input TB Status)
bit TB Name Function (Parameter) 0 1
0 F Input terminal function selection 1 (f111)
1 R Input terminal function selection 2 (f112)
2 RES Input terminal function selection 3 (f113)
3 S1 Input terminal function selection 4 (f114)
4 S2 Input terminal function selection 5 (f115)
5 S3 Input terminal function selection 6 (f116)
6 VIB*1 Input terminal function selection 7 (f117)
7 VIA*1 Input terminal function selection 8 (f118)
5 to 15 (Reserved) - Undefined
Note: Don't use the reserved bit for the judgment.
*1: VIA/ VIB are input terminal function when f109 is logic input.
*The input terminal function is selected by each parameter.
Example: Data set for FE06 when the F and RES terminals are ON = 0005H
BIT15 BIT0
FE06:
0 0 0 0 000000000101
0
0
0
5
OFF ON
- 20 -
E6581741
3.2.4.15. fd07 (Output TB Status)
bit TB Name Function (Parameter) 0 1
0 RY-RC Output terminal function selection 1A (f130)OFF ON
1 OUT Output TB Function select 2A (f131) OFF ON
2 FL Output TB Function select 3 (f132) OFF ON
3 - 15 (Reserved)- Undefined
Note: Don't use the reserved bit for the judgment.
Example: Data set for FE07 when the RY and FL terminals are ON = 0005H
BIT15 BIT0
FE07:
0 0 0 0 000000000101
0
0
0
5
- 21 -
4. Objects
E6581741
This section contains the object specifications for all EtherNet/IP objects currently
supported by the “IPE002Z”. Table 1 outlines those objects covered:
Class Code
Hex. Dec.
0x01 1 Identity Object
0x02 2 Message Router Object
0x04 4 Assembly Object
0x06 6 Connection Manager Object
0x28 40 Motor Data Object
0x29 41 Control Supervisor Object
For definitions of all data types referred to in these object specifications, refer to the
ODVA EtherNet/IP™ Specifications. In general, however, the following are some of the
most prevalent types:
BOOL .......................... Boolean 0(False) or 1(TRUE)
SINT............................ Signed Short Integer -128 to 127
INT ..............................Integer -32768 to 32767
USINT .........................Unsigned Short Integer 0 to 255
UINT............................ Unsigned Integer 0 to 65535
UDINT .........................Unsigned Double Integer 0 to 2
STRING ......................character string (1 byte per character)
SHORT_STRING........ character string (1 byte per character, 1 byte length indicator)
BYTE........................... Bit string - 8-bits
WORD......................... Bit string - 16-bits
DWORD ......................Bit string - 32-bits
EPATH ........................ CIP path segments
Object Class Page
23
25
26
27
28
29
32
33
35
36
37
39
31
to 231-1
32
-1
- 22 -
E6581741
4.1. Identity Object (0x01)
Class code 0x01.
This object provides identification of and general information about the device.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 1
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
created at this class level of the
device.
4 Get
0
6 Get Max ID of class
7 Get Max ID of instance
Optional attribute list STRUCT
of
Number of attributes UNIT Number of attribute in the optional
Optional attributes ARRAY of
UNIT
UINT The attribute ID number of the last
attributes
UINT The attribute ID number of the last
attribute
List of optional instance attributes
utilized in an object class
implementation.
attribute list.
List of optional attribute numbers. -
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Service
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
Instance Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Vendor ID UINT
2 Get Device type UINT AC/DC Drive profile 2
3 Get Product code UINT
4 Get
1
5 Get Status WORD See “Attribute 5 State Description”*
6 Get Serial number UDINT 4 last bytes of MAC Address 7 Get Product name SHOT_
Revision STRUCT
of
Major revision USINT Major revision of drive 1 (*1)
Minor revision USINT Minor revision of drive 8 (*1)
STRING
Identification of vendor by number
Identification No. of a drive
(case of VF-MB1) 32000
(case of VF-S15) 32001
Revision of the item the Identity
Object represents
Human readable identification
(case of VF-MB1 drive) 6,
(case of VF-S15 drive) 6,
*1: These values depend on firmware version and revision.
Instance Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x05 Reset Invokes the Reset for the device
0x0E Get_Attribute_Single Read one attribute
1
1
0
-
7
7
377
VF-MB1
VF-S15
- 23 -
E6581741
Attribute 5 State Descriptions
Adapted from document [CIP] “
THE CIP NETWORKS LIBRARY”
Bit Called Definition
TRUE indicates the device (or an object within the device) has an owner.
Within the Master/Slave paradigm the setting of this bit means that the
0 Owned
Predefined Master/Slave Connection Set has been allocated to a master.
Outside the Master/Slave paradigm the meaning of this bit is TBD.
Æ unsupporteed
1 - (System reserved)
TRUE indicates the application of the device has been configured to do
2 Configured.
something different than the “out–of–box” default. This shall not include
configuration of the communications.
3 - (System reserved)
0000 Self-Testing or unknown
0001 Firmware update in progress
0010 At least one faulted I/O connection
0011 No I/O connections established
Extended Device
4-7
Status
0100 Non-Volatile configuration bad
0101 Major Fault – either bit 10 or bit 11 is true (1)
0110 At least one I/O connection in run mode
0111 At least one I/O connection established, all in idle mode
1000-
Unused
1111
Minor Recoverable
8
Fault
Minor
9
Unrecoverable
Fault.
Major Recoverable
10
Fault.
Major
11
Unrecoverable Fault
TRUE indicates the device detected a problem with itself, which is thought to
be recoverable. The problem does not cause the device to go into one of the
faulted states.
TRUE indicates the device detected a problem with itself, which is thought to
be unrecoverable. The problem does not cause the device to go into one of
the faulted states.
TRUE indicates the device detected a problem with itself, which caused the
device to go into the “Major Recoverable Fault” state.
TRUE indicates the device detected a problem with itself, which caused the
device to go into the “Major Unrecoverable Fault” state.
12-15 - (System reserved)
Note: Don’t use the “System reserved” bit and Bit0 for the judgement.
- 24 -
E6581741
4.2. Message Router Object (0x02)
Class code 0x02.
The Message Router Object provides a messaging connection point through which a Client may
address a service to any object class or instance residing in the physical device.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 1
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
created at this class level of the
device.
4 Get
0
6 Get Max ID of class
7 Get Max ID of instance
Optional attribute list STRUCT
of
Number of attributes UNIT Number of attribute in the optional
Optional attributes ARRAY of
UNIT
UINT The attribute ID number of the last
attributes
UINT The attribute ID number of the last
attribute
List of optional instance attributes
utilized in an object class
implementation.
attribute list.
List of optional attribute numbers. 3
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Service
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance Attribute
Instance Attribute ID Access Name Data type Details Value
2 Get Number Available UNIT
1
3 Get Number active UNIT Number of connections currently
Maximum number of connections
supported
used by system components
Instance Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
1
1
2
2
7
3
16
0
- 25 -
E6581741
4.3. Assembly Object (0x04)
Class code 0x04.
The Assembly Object binds attributes of multiple objects, which allows data to or from each object to
be sent or received over a single connection. Assembly objects can be used to bind input data or
output data. The terms ”input” and ”output” are defined from the network’s point of view. An input will
produce data on the network and an output will consume data from the network
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 2
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the
device.
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Service
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance Attribute
Instance Attribute ID Access Name Details
See below
3 Get/Set* Data Settable Only on Output Assembly.
See below
See below
4 Get Size Number of bytes in Attribute 3.
199
13
7
4
Output Assembly:
Instance Type Size Page
20 CIP basic speed control output 2 words (4 bytes) 45
21 CIP extended speed control output 2 words (4 bytes) 46
100 Native drive output 2 to 8 words (4 to 16 bytes) 47
101 Native drive output 4 words (8 bytes) 49
102 Native drive output 6 words (12 bytes) 51
105 TOSHIBA specific output 9 words (18 bytes) 52
Input Assembly:
Instance Type Size Page
70 CIP basic speed control input 2 words (4 bytes) 45
71 CIP extended speed control input 2 words (4 bytes) 46
150 Native drive input 2 to 8 words (4 to 16 bytes) 47
151 Native drive input 4 words (8 bytes) 49
152 Native drive input 6 words (12 bytes) 51
155 TOSHIBA specific output 9 words (18 bytes) 52
Instance Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
- 26 -
E6581741
4.4. Connection Manager Object (0x06)
Class code 0x06.
Use this object for connection and connectionless communications, including establishing
connections across multiple subnets.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 1
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
created at this class level of the
device.
4 Get
0
6 Get Max ID of class
7 Get Max ID of instance
Optional attribute list STRUCT
of
Number of attributes UNIT Number of attribute in the optional
Optional attributes ARRAY of
UNIT
UINT The attribute ID number of the last
attributes
UINT The attribute ID number of the last
attribute
List of optional instance attributes
utilized in an object class
implementation.
attribute list.
List of optional attribute numbers. 1, 2, 3,
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
1 Get Open Requests UINT Number of Forward Open service requests
received.
2 Get Open Format Rejects UINT Number of Forward Open service requests
which were rejected due to bad format.
3 Get Open Resources Rejects UINT Number of Forward Open service requests
which were rejected due to lack of resources.
4 Get Open Other Rejects UINT Number of Forward Open service requests
which were rejected for reasons other than
bad format or lack of resources.
1
5 Get Close Requests UINT Number of Forward Close service requests
received.
6 Get Close Format RequestsUINT Number of Forward Close service requests
which were rejected due to bad format.
7 Get Close Other Requests UINT Number of Forward Close service requests
which were rejected for reasons other than
bad format.
8 Get Connection Timeouts UINT Total number of connection timeouts that have
occurred in connections controlled by this
Connection Manager
Instance Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
0x4E Forward_Close Closes a connection
0x54 Forward_Open Opens a connection, maximum data size is 511 bytes
1
1
-
8
4, 5, 6,
7, 8
7
8
- 27 -
E6581741
4.5. Motor Data Object (0x28)
Class code 0x28.
This object serves as a database for motor parameters.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 1
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the
device.
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
1 Get AttrNb UINT Number of attributes supported
2 Get AttrList ARRAY of
USINT
3 Get MotorType USINT 7:
1
6 Get/Set RatedCurrent UINT Motor Rated Current (f415)
7 Get/Set RatedVoltage UINT Motor Rated Volt (vlv)
8 Get/Set RatedPower UDINT Motor rated Power (f405)
9 Get/Set RatedFreq UINT Motor Base Freq (vl)
12 Get PoleCount UINT Motor pole number
15 Get/Set BaseSpeed UINT Motor Base Speed (f417)
List of attributes supported
1, 2, 3, 6, 7, 8, 9, 12, 15
Squirrel Cage Induction Motor
(f856(number of motor pole pair) 2)
Instance Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
1
1
7
15
- 28 -
E6581741
4.6. Control Supervisor Object (0x29)
Class code 0x29.
This object models all the management functions for devices within the “Hierarchy of Motor Control
Devices”. The behavior of motor control devices is described by the State Transition Diagram.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 1
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the
device.
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
1 Get Number of attributes UINT Number of attributes supported
2 Get AttrList LIST of
USINT
3 Get/Set Run 1 BOOL
4 Get/Set Run 2 BOOL
5 Get/Set NetCtrl BOOL Request Run/Stop control to be local or from
6 Get State USINT
7 Get Running 1 BOOL 1 = (Enabled and Run1) or
1
8 Get Running 2 BOOL 1 = (Enabled and Run2) or
9 Get Ready BOOL 1 = Ready or Enabled or Stopping
10 Get Faulted BOOL 1 = Fault Occurred (latched)
11 Get Warning BOOL 1 = Warning (not latched)
12 Get/Set FaultRst BOOL 0->1 = Fault Reset
15 Get CtrlFromNet BOOL Status of Run/Stop control source.
List of attributes supported
Refer to " 4.6.1 Run/Stop Event Matrix."
00 = Stop
01 = Run (On edge)
Refer to " 4.6.1 Run/Stop Event Matrix."
00 = Stop
01 = Run (On edge)
network.
0 = Local Control(default)
1 = Network Control
Note that the actual status of Run/Stop control is
reflected in attribute 15, CtrlFromNet.
Refer to " 4.6.2
(Stopping and Running1) or
(Fault Stop and Running1)
0 = Other state
(Stopping and Running2) or
(Fault Stop and Running2)
0 = Other state
0 = Other state
0 = No Faults present
0 = No Warnings present
0 = No action
0 = Control is local
1 = Control is from network
State of the drive."
1
1
7
15
- 29 -
E6581741
Instance Services
Service Code Service Name Description of Service
0x05 Reset Resets the drive to the start-up state.
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
- 30 -
E6581741
4.6.1. Run/Stop Event Matrix
Run1 Run2 Trigger Event Run Type
0 0 Stop No Action
0 -> 1 0 Run Run1
0 0 -> 1 Run Run2
0 -> 1 0 -> 1 No Action No Action
1 1 No Action No Action
1 -> 0 1 Run Run2
1 1 -> 0 Run Run1
4.6.2. State of the drive
The Control Supervisor class State attribute (Att. ID= 6) shows state of the drive.
1 (=BN: 00000001): Startup
2 (=BN: 00000010): Not ready
3 (=BN: 00000011): Ready
4 (=BN: 00000100): Enabled
5 (=BN: 00000101): Stopping
6 (=BN: 00000110): Fault Stop
7 (=BN: 00000111): Faulted
4.6.3. Control Supervisor State Transition Diagram
Non-Existent
Switch On
Reset
Initialization Complete
Main Power On
Not_Ready
Run
Startup
Main Power Off
Ready
Enabled
Switch Off
Fault Detected
Fault Reset
Stop
Complete
Stopping
Stop
Faulted
Fault Detected
Fault_Stop
Main Power Off
Fault_Stop
Complete
Fault
Detected
- 31 -
E6581741
4.7. AC/DC Drive Object (0x2A)
Class code 0x2A.
This object models the functions specific to an AC or DC Drive. e.g. speed ramp, torque control etc.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 1
2 Get Max Instances UINT Maximum instance number of an object
currently created in this class level of the
device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the device.
class attribute of the class definition
implemented in the device.
instance attribute of the class definition
implemented in the device.
Class Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details Value or Unit
1 Get NumAttr USINT Number of Attributes supported 19
2 Get Attrbutes ARRAY of
USINT
3 Get AtReference BOOL 1 = Drive actual at reference 4 Get/Set NetRef BOOL Requests torque and speed
6 Get Drive mode USINT Drive Mode -
1
7 Get SpeedActual INT Actual Speed rpm
8 Get/Set SpeedRef * INT Reference Speed rpm
9 Get CurrentActual UINT Drive Current 0.1 A
10 Get/Set CurrentLimit UINT Drive Current Limit 0.1 A
11 Get Torque Actual UINT Drive Actual Torque Nm
15 Get PowerActual UINT Drive Power W
18 Get/Set AccelTime UINT Drive Acceleration ms
19 Get/Set DecelTime UINT Drive Deceleration ms
20 Get/Set LowSpdLimit UINT Drive minimum speed rpm
21 Get/Set HighSpdLimit UINT Drive maximum speed rpm
26 Get/Set Power scaling UINT Power scaling factor 0
28 Get/Set Time scaling UINT Time scaling factor 0
29 Get RefFromNet BOOL Status of speed reference
46 Get HoursOn UDINT Number of hours h
List of Attributes supported 1, 2, 3, 4, 6, 7,
reference to be local or from the
network.
0 = Set Reference not DN
Control
1 = Set Reference at DN
Control
0=Local speed reference
1=Network speed reference
* The output frequency of the drive follows fh though the frequency of fh or more can be written.
Instance Services
Service Code Service Name Description o f Service
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
1
1
7
46
8, 9, 10, 11, 15,
18,19, 20, 21,
26, 28, 29, 46
-
-
- 32 -
E6581741
4.8. Parameter Objects (0x64)
Class code 0x64. This object provides VF-MB1/ S15’s Parameter access.
Range Address accessed:
Input Instance Real Logical address in Drive accessed
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the
device.
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
See
below
3 Get/Set parameter UINT
Parameter corresponding to the Instance
address
1
32767
8190
7
3
- 33 -
E6581741
Instance Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
Attribute ID of all parameters are 3. Moreover, about the instance ID of each parameter, it
becomes "parameter communication number + 4000H".
In the case of the parameter from which a communication number begins in "F", it
becomes "parameter communication number - 0x8000 (same as bit15 set to 0)".
About the detail contents of a parameter, please refer to a VF-MB1 or VF-S15
instructions manual.
Example 1:
In case of Basic parameter “cmod - Command mode selection”,
Communication No: 0003 -> Instance ID: 4003
Example 2:
In case of Extended parameter “f268 - Updown frequency default value”,
Communication No: 0268 -> Instance ID: 4268
Example 3:
In case of Monitor parameter “fe03 - Output current”,
Communication No: FE03 -> Instance ID: 7E03
* Monitor parameter can access "Get" only.
For example, when "Acc. time" is set to 5 sec., since the minimum unit is 0.1s,
5 / 0.1 = 50 = 32H
Since the communication number of "Acc. time" is "0009", it writes "32H" in instance ID
"4009."
Moreover, when the "highest frequency" is read, "1F40H" is read.
0x1F40 = 8000 (Dec.)
Since the minimum unit is 0.01Hz,
8000 * 0.01 = 80Hz
- 34 -
E6581741
4.9. Parameter Objects (0x65)
Class code 0x65. This object provides VF-MB1/S15’s Parameter access.
Range Address accessed:
Input Instance Real Logical address in Drive accessed
0x0001-0xFFFF 0x0001-0xFFFF
* Refer to "Class Attributes" when the instance is 0.
* If you want to access the au1, please use the "Application Objects (64 hex)."
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the
device.
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
See
below
3 Get/Set parameter UINT
Parameter corresponding to the Instance
address
1
65535
65535
7
3
Instance Services
Service Code Service Name Description of Service
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
Attribute ID of all parameters are 3. Moreover, about the instance ID of each parameter, it
becomes "parameter communication number".
About the details of the contents of a parameter please refer to VF-MB1 instruction
manual or VF-S15 instruction manual.
Example 1:
When "ACC. time" is set to 5 s, since the minimum unit is 0.1s,
5 / 0.1 = 50 = 32H
Since the communication umber of "Acc. time" is "0009", it writes "32H" is instance ID "0009."
- 35 -
E6581741
4.10. Port Object (0xF4)
Class code 0xF4.
The Port Object enumerates the CIP ports present on the device.
One instance exists for each CIP port.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
created at this class level of the
device.
6 Get Max ID of class
attributes
0
7 Get Max ID of instance
attribute
8 Get Entry Port UINT Returns the instance of the Port
9 Get All Ports STRUCT
UINT The attribute ID number of the last
class attribute of the class definition
implemented in the device.
UINT The attribute ID number of the last
instance attribute of the class
definition implemented in the device.
Object that describes the port
through which this request entered
the device.
Array of structures containing
of
Port Type
Port
Number
instance attributes 1 and 2 from
each instance.
Note: Attribute 9
00 00 00 00 -> port type = 0 (Connection terminated) / instance number = 0 (class)
00 00 02 00 -> port type = 2 (TCP/IP Port) / port number = 2
Class Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details Value
1 Get Port Type UINT Enumerate the type of port.
(0 = TCP/IP)
2 Get Port Number UINT CIP port associated with this port
(identify each communication port).
Value ‘1’ is reserved.
3 Get Link Object STRUCT
of
UINT
1
4 Get Port Name SHORT_
7 Get Node address Padded
Padded
EPATH
STRING
EPATH
Identify Object attached to this port.
For EtherNet/IP, this path
corresponds to TCP/IP Interface
object.
String which names the port.
11, EtherNet/IP
Node number of this device on port.
The range within this data type is
restricted to a Port Segment.
Instance Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
1
1
1
9
7
1
0000
0000
0000
0200
0
2
02 00
20 F5
24 01
0B 45
74 68
65 72
4E 65
74 2F
49 50
-
- 36 -
E6581741
4.11. TCP/IP interface Object (0xF5)
Class code 0xF5.
The TCP/IP Interface Object provides the mechanism to configure a device’s TCP/IP network
interface.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
created at this class level of the
device.
4 Get
0
5 Get
Optional attribute list STRUCT
of
Number of attributes UNIT Number of attribute in the optional
Optional attributes ARRAY of
UINT
Optional service list STRUCT
of
number services UINT
List of optional instance attributes
utilized in an object class
implementation.
attribute list.
List of optional attribute numbers.
List of optional services utilized in
an object class implementation.
Number of services in the
optional service list.
optional services ARRAY of
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT
UINT The attribute ID number of the last
UINT The attribute ID number of the last
List of optional service codes. -
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
1
1
1
-
2
8, 9
-
0
7
9
- 37 -
E6581741
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
1 Get Status DWORD Bits 0 -3 : Interface configuration
000 : The Interface Configuration attribute has
not been configured.
001 : The Interface Configuration attribute
contains valid configuration.
Bit 6 : ACD Status
0 (Clear) : No Address conflict Detected
1 (Set) : Address conflict Detected
2 Get Configuration capability DWORD Bit 0 = 1 (TRUE) shall indicate the device is
capable of obtaining its network configuration
via BOOTP.
Bit 1 = 1 (TRUE) shall indicate the device is
capable of resolving host names by querying
a DNS server.
Bit 2 = 1 (TRUE) shall indicate the device is
capable of obtaining its network configuration
via DHCP.
Bit 3 = 1 (TRUE) shall indicate the device is
capable of sending its host name in the DHCP
request.
Bit 4 = 1 (TRUE) shall indicate the Interface
Configuration attribute is settable.
Bit 7 = 1 (TURE) shall indicate that the device
is ACD capable.
Bit 5,6 and 8-31 : (System reserved)
3 Get/Set Configuration control DWORD Bits 0-3 : Start-up configuration
000 : The device shall use the interface
configuration values previously stored.
001 : The device shall obtain its interface
1
4 Get Physical Link Object STRUCT
of
UINT
EPATH
5 Get/Set
Interface Configuration STRUCT
of
IP Address UDINT IP address (0 : no address configured)
Network Mask UDINT Network Mask (0 : no Network mask
Gateway Address UDINT Gateway IP address (0 : no address
Name Server UDINT
configuration values via BOOTP.
010 : The device shall obtain its interface
configuration values via DHCP upon start-up.
011-111 : Unused
Bit 4 = 1 (TRUE), the device shall resolve host
names by querying a DNS server.
Bit 5-31 :
Path Size
Path: Logical segments identifying the
physical link object
Example [20][F6][24][01] : [20] = 8 bit class
segment type; [F6] = Ethernet Link Object
class; [24] = 8 bit instance segment type; [01]
= instance 1.
TCP/IP network interface configuration
configured)
configured)
Name server address
(0 : no address configured)
(System reserved)
Name Server 2 UDINT Name server address 2
(0 : no address configured)
Domain Name STRING Domain Name
6 Get/Set Host Name STRING Device Name*
8 Get/Set TTL value USINT TTL value for EtherNet/IP multicast packets.
- 38 -
E6581741
Instance Attribute ID Access Name Data typeDetails
9 Get/Set
1
10 Get/Set SelectedAcd BOOL Activate the use of ACD
11 Get/Set
Mcast Config STRUCT
of
Alloc Config USINT 0 - Use default allocation algorithm to
Reserved USINT
Num Mcast UINT Number of multicast addressees to allocate
Mcast Start Addr UDINT Starting multicast address from which to begin
LastConflictDeteced STRUCT
of
AcdActivity USINT State of ACD activity when last conflict
RemoteMAC Array of 6
USINT
ArpPdu Array of
28 USINT
IP Multicast address configuration
generate multicast addresses.
1 – Multicast addresses shall be allocated
according to the values in Num Mcast and
Mcast Start Address.
(System reserved)
for EtherNet/IP.
allocation.
0 - Disable ACD
1 - Enable ACD
Structure containing information related to the
last conflict detected.
detected.
MAC address of remote node from the ARP
PDU in which a conflict was detected.
Copy of the raw ARP PDU in which a conflict
was detected.
Note: Don’t use the “System reserved” bit and Bit0 for the judgement.
*Only 16 characters in 64 characters can be set in the drive.
Instance Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
- 39 -
E6581741
4.12. Ethernet link object (0xF6)
Class code 0xF6:
The Ethernet Link Object maintains link-specific counters and status information for
IEEE 802.3 communications interface.
Class Attributes
Instance Attribute ID Access Name Data type Details Value
1 Get Revision UINT Revision of this object 3
2 Get Max Instances UINT Maximum instance number of an
object currently created in this class
level of the device.
3 Get Number of Instances UINT Number of object instances currently
0
6 Get Max ID of class
attributes
7 Get Max ID of instance
attribute
UINT The attribute ID number of the last
UINT The attribute ID number of the last
created at this class level of the
device.
class attribute of the class definition
implemented in the device.
instance attribute of the class
definition implemented in the device.
Class Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
2
2
7
10
- 40 -
E6581741
Instance 1 Attribute
Instance Attribute ID Access Name Data type Details
1 Get Interface Speed UDINT Interface speed currently in use
2 Get Interface Flags DWORD Bit 0 : Link Status Indicates whether or not the
Bit 1 : Half/Full Duplex Indicates the duplex
Bit 2-4 : Negotiation Status
000 : Auto-negotiation in progress.
001 : Auto-negotiation and speed detection
failed.
010 : Auto negotiation failed but detected
speed. Duplex was defaulted.
011 : Successfully negotiated speed and
duplex.
100 : Auto-negotiation not attempted. Forced
speed and duplex.
101-111 : Unused
Bit 5 : Manual Setting Requires Reset. 0
1
Bit 6: Local Hardware Fault.
0 indicates the interface detects no local
hardware fault
1 indicates a local hardware fault is
detected. The meaning of this is
product-specific.
Bit 7-31 :
3 Get Physical Address ARRAY of
6 USINTs
4 Get
Interface Counters STRUCT
of
In Octets UDINT Octets received on the interface
In Ucast Packets UDINT Unicast packets received on the interface
In NUcast Packets UDINT Non-unicast packets received
In Discards UDINT Inbound packets received on the interface but
In Errors UDINT Inbound packets that contain errors (does not
In Unknown Protos UDINT Inbound packets with unknown protocol
Out Octets UDINT Octets sent on the interface
Out Ucast Packets UDINT Unicast packets sent on the interface
Out NUcast Packets UDINT Non-unicast packets sent on the interface
Out Discards UDINT Outbound packets discarded
Out Errors UDINT Outbound packets that contain errors
MAC layer address
discarded
include In Discards)
Note: Don’t use the “System reserved” bit and Bit0 for the judgement.
Ethernet 802.3 communications
interface is connected to an active
network. 0 indicates an inactive link; 1
indicates an active link.
mode currently in use. 0 indicates the
interface is running half duplex; 1
indicates full duplex.
indicates the interface can activate
changes to link parameters
(auto-negotiate, duplex mode, interface
speed) automatically. 1 indicates the
device requires a Reset service be
issued to its Identity Object in order for
the changes to take effect.
(System reserved)
- 41 -
E6581741
Instance Attribute ID Access Name Data typeDetails
5 Get
1
6 Set
7 Get Interface Type USINT Type of interface: twisted pair, fiber, internal,
10 Get Interface Label SHORT_S
Media Counters STRUCT
of
Alignment Errors UDINT Frames received that are not an integral
FCS Errors UDINT Frames received that do not pass the FCS
Single Collisions UDINT Successfully transmitted frames which
Multiple Collisions UDINT Successfully transmitted frames which
SQE Test Errors UDINT Number of times SQE test error message is
Deferred
Transmissions
Late Collisions UDINT Number of times a collision is detected later
Excessive Collisions UDINT Frames for which transmission fails due to
MAC Transmit Errors UDINT Frames for which transmission fails due to
Carrier Sense Errors UDINT Times that the carrier sense condition was
Frame Too Long UDINT Frames received that exceed the maximum
MAC Receive Errors UDINT Frames for which reception on an interface
Interface Control STRUCT
Control Bits WORD Interface Control Bits
Forced Interface Speed UINT Speed at which the interface shall be forced to
UDINT Frames for which first transmission attempt is
of
TRING
Media-specific counters
number of octets in length
check
experienced exactly one collision
experienced more than one collision
generated
delayed because the medium is busy
than 512 bit times into the transmission of a
packet
excessive collisions
an internal MAC sublayer transmit error
lost or never asserted when attempting to
transmit a frame
permitted frame size
fails due to an internal MAC sublayer receive
error
Configuration for physical interface
operate
etc.
Human readable identification
4, Left
- 42 -
E6581741
Instance 2 Attribute
Instance Attribute ID Access Name Data type Details
1 Get Interface Speed UDINT Interface speed currently in use
2 Get Interface Flags DWORD Bit 0: Link Status Indicates whether or not the
Ethernet 802.3 communications
interface is connected to an active
network. 0 indicates an inactive link; 1
indicates an active link.
Bit 1: Half/Full Duplex Indicates the duplex
mode currently in use. 0 indicates the
interface is running half duplex; 1
indicates full duplex.
Bit 2-4: Negotiation Status
000 : Auto-negotiation in progress.
001 : Auto-negotiation and speed detection
failed.
010 : Auto negotiation failed but detected
speed. Duplex was defaulted.
011 : Successfully negotiated speed and
duplex.
100 : Auto-negotiation not attempted. Forced
speed and duplex.
2
3 Get Physical Address ARRAY of
6 USINTs
6 Get/Set
7 Get Interface Type USINT Type of interface: twisted pair, fiber, internal,
10 Get Interface Label SHORT_S
Interface Control STRUCT
of
Control Bits WORD Interface Control Bits
Forced Interface
Speed
UINT Speed at which the interface shall be forced to
TRING
Bit 5: Manual Setting Requires Reset. 0
indicates the interface can activate
changes to link parameters
(auto-negotiate, duplex mode, interface
speed) automatically. 1 indicates the
device requires a Reset service be
issued to its Identity Object in order for
the changes to take effect.
Bit 6: Local Hardware Fault.
0 indicates the interface detects no local
hardware fault
1 indicates a local hardware fault is
detected. The meaning of this is
product-specific.
Bit 7-31
MAC layer address
Configuration for physical interface
operate
etc.
Human readable identification
5, Right
(System reserved)
Note: Don’t use the “System reserved” bit and Bit0 for the judgement.
Instance Services
Service Code Service Name Description of Service
0x01 Get_Attribute_All Read all attributes
0x0E Get_Attribute_Single Read one attribute
0x10 Set_Attribute_Single Write one attribute
0x4C Get_and_Clear Gets then clears the specified attribute
(Interface Counters or Media Counters).
- 43 -
E6581741
5. Configuration of the assemblies
5.1. List of Assembly Object Instance
Output Instance
Instance name Number (Hex) Size
CIP basic speed control output 20 (0x14) 2 words (4 bytes)
CIP extended speed control output 21 (0x15) 2 words (4 bytes)
Native drive output 100 (0x64) 2 to 8 words (4 to 16 bytes)
Native drive output 101 (0x65) 4 words (8 bytes)
Native drive output 102 (0x66) 6 words (12 bytes)
TOSHIBA specific output 105 (0x69) 9 words (18 bytes)
Input Instance
Instance name Number (Hex) Size
CIP basic speed control input 70 (0x46) 2 words (4 bytes)
CIP extended speed control input 71 (0x47) 2 words (4 bytes)
Native drive input 150 (0x96) 2 to 8 words (4 to 16 bytes)
Native drive input 151 (0x97) 4 words (8 bytes)
Native drive input 152 (0x98) 6 words (12 bytes)
TOSHIBA specific input 155 (0x9B) 9 words (18 bytes)
- 44 -
E6581741
5.1.1. Instance 20: CIP basic speed control output
Instance 20 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0 - - - - - Fault reset- Run Fwd
1 2
3
Drive Speed Reference
Drive Speed Reference
-1
min
(Low byte) *
-1
min
(High byte) *
5.1.2. Instance 70: CIP basic speed control input
Instance 70 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
About the other command, refer to section 3.2.4.2.
* Fault reset works only 1 time when 0 -> 1.
- 48 -
E6581741
5.1.7. Instance 101: Native drive output
Instance 101 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0
1 2
3
4
5
6
7
- Net Ref
Write Index (High byte)
* Net Ctrl* - - Fault reset
Drive Reference Speed min
Drive Reference Speed min
Index (Low byte)
Data (Low byte)
Data (High byte)
-1
-1
(Low byte)
(High byte)
Run
reverse
* Bit 5 and 6 of the instance 101 byte 0 are defined as follows.
Bit 5 (Net Ctrl)................. When “1” is set, all commands of byte 0 and 1 are enabled. When “0” is set,
each command is according to setup of the parameter cmod.
Bit 6 (Net Ref)................. When “1” is set, bytes 2 and 3 are enabled. When “0” is set, Drive Reference
Speed is according to setup of the parameter fmod.
Run
forward
5.1.8. Instance 151: Native drive input
Instance 151 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0
1
2
3
4
5
6
7
At
reference**
Write Error Index (High byte)
Ref from
Net**
Ctrl from
Net**
Drive Actual Speed min
Drive Actual Speed min
Ready
Drive Status *
Index (Low byte)
Data (Low byte)
Data (High byte)
Running
Reverse
-1
(Low byte)
-1
(High byte)
Running
Forward
Warning
** Bit 5, 6, and 7 of the instance 151 byte 0 are defined as follows.
Bit 5 (Ctrl from Net)..............When command from communication is enabled, “1” is set.
Bit 6 (Ref from Net)..............When frequency command from communication is enabled, “1” is set.
Bit 7 (At reference) ..............When output frequency becomes the same as frequency command, “1” is set.
* Drive Status is same as the Control Supervisor class State attribute (refer to 4.6.2).
Faulted/
tripped
- 49 -
E6581741
■Examples of Instance 101/151
Access the inverter parameter is enabled using byte 4 to 6 of this Instance.
Set the communication number of the parameter to byte 4, 5 (Index), and the value to byte 6, 7 (Data).
c Read the parameter cmod (Command mode selection, communication number is 0003).
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0 c001 Command data (Low byte)
1 c001 Command data (High byte)
2 c002 Command data (Low byte)
3 c002 Command data (High byte)
4 c003 Command data (Low byte)
5 c003 Command data (High byte)
6 c004 Command data (Low byte)
7 c004 Command data (High byte)
8 c005 Command data (Low byte)
9 c005 Command data (High byte)
10 c006 Command data (Low byte)
11 c006 Command data (High byte)
Refer to "Scanner Address (c001 – c006) "
5.1.10. Instance 152: Native drive input
Instance 152 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0 c021 Monitor data (Low byte)
1 c021 Monitor data (High byte)
2 c022 Monitor data (Low byte)
3 c022 Monitor data (High byte)
4 c023 Monitor data (Low byte)
5 c023 Monitor data (High byte)
6 c024 Monitor data (Low byte)
7 c024 Monitor data (High byte)
8 c025 Monitor data (Low byte)
9 c025 Monitor data (High byte)
10 c026 Monitor data (Low byte)
11 c026 Monitor data (High byte)
Refer to "Scanner Address (c021 – c026)"
- 51 -
E6581741
5.1.11. Instance 105: TOSHIBA specific output
Instance 105 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0
1
2
3
4 Data (Low byte)
5 Data (High byte)
6 c001 Command data (Low byte)
7 c001 Command data (High byte)
8 c002 Command data (Low byte)
9 c002 Command data (High byte)
10 c003 Command data (Low byte)
11 c003 Command data (High byte)
12 c004 Command data (Low byte)
13 c004 Command data (High byte)
14 c005 Command data (Low byte)
15 c005 Command data (High byte)
16 c006 Command data (Low byte)
17 c006 Command data (High byte)
Function code (Read / Write) (*1)
Index (Low byte)
Index (High byte)
Refer to "Scanner Address (c001 – c006) and Scanner Value (c041 – c046: details of
command data)."
5.1.12. Instance 155: TOSHIBA specific input
Instance 105 mapping
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0
1
2
3
4 Data (Low byte)
5 Data (High byte)
6 c021 Command data (Low byte)
7 c021 Command data (High byte)
8 c022 Command data (Low byte)
9 c022 Command data (High byte)
10 c023 Command data (Low byte)
11 c023 Command data (High byte)
12 c024 Command data (Low byte)
13 c024 Command data (High byte)
14 c025 Command data (Low byte)
15 c025 Command data (High byte)
16 c026 Command data (Low byte)
17 c026 Command data (High byte)
Function code (Read / Write) results
Index (Low byte)
Index (High byte)
Refer to "Scanner Address (c021 – c026) and Scanner Value (c061 – c066: details of
command data)."
(*1): Please set the function code as follow.
Read: 0x00
Write: 0x80
- 52 -
E6581741
■Examples of Instance 105/155
Access the inverter parameter is enabled using byte 1 to 5 of this Instance.
Set the communication number of the parameter to byte 2, 3 (Index), and the value to byte 4, 5 (Data).
c Read the parameter cmod (Command mode selection, communication number is 0003).
Instance Byte 15 14 131211109 8 76543 2 1 0 Hex.
1, 0 0 0 00000000000000 0x0000
Output Instance 105
3, 2 0 0 0000000000001 1 0x0003
5, 4 - - -------------- -
Input Instance 155
(cmod is 0.)
1, 0 0 0 00000000000000 0x0000
3, 2 0 0 0000000000001 1 0x0003
5, 4 0 0 00000000000000 0x0000
d Read the parameter f268 (Initial value of UP/DOWN frequency).
As for acquisition of an EDS file for VF-MB1 and VF-S15, please contact your Toshiba
distributor.
7. Integration in RSLogix™
VF-MB1/S15 drive equipped with an EtherNet/IP module shall be configured as a
"Generic Ethernet Module."
RSLogix™ is a trademark of Rockwell Automation, Inc.
7.1. Create a new project
Power on of PLC and launch the software of RSLogix™5000. (Set the key switch of PLC
to "PROG" mode.)
Create a new project and configure the following contents.
The slot is set to 0 in case of the leftmost slot.
The meaning of
revision is revision
of the program.
Select the your PLC
- 54 -
E6581741
7.2. Add a EtherNet/IP scanner to the I/O configuration
Right-click the I/O Configuration, and select “New Module”.
Click the “Communications” to expand “Communications” group.
- 55 -
E6581741
Select the Module as below.
Select revision of drive.
Put in Name and IP address, and press “OK” button.
- 56 -
E6581741
7.3. Configure the VF-MB1/S15 EtherNet/IP module
Right-click the EtherNet/IP scanner, and select “New Module”.
Click the “Communications” to expand “Communications” group.
- 57 -
E6581741
Above the Allen-Bradley drive profile is selected.
Select the format of the data.
Above the CIP basic speed control profile is selected.
- 58 -
E6581741
7.4. Download the program to the PLC
The first download follows the following procedure.
Select the using PLC.
- 59 -
E6581741
Select the "Download."
Once again, select the "Download."
- 60 -
E6581741
7.5. Edit the I/O scan data
Open the "Controller Tags."
Set to the "Offline" if change the value and the type of data.
And, change by "Controller Tag" after "the SW of PLC is set to PROG".
- 61 -
E6581741
Download the changed data to the PLC. : "Communications" J "Download"
After the setting is downloaded, set to "RUN" the key SW of the PLC.
- 62 -
E6581741
- 63 -
E6581741
8. Modbus TCP server
8.1. Modbus TCP frames
Modbus TCP frames consist of a header and a Modbus request.
Header format:
Byte Description Comments
0 high order
Transaction
identifier
1
2 high order
Protocol
identifier
3
4 high order
Length of data
5
6 Destination identifier (Unit ID)
7 Modbus request function
code
The frame header returned by the VF-MB1/S15 server is identical to that of the frame
sent by the client.
low order
low order
low order
This identifier always equals 0.
Number of bytes in the Modbus request +1. The frame length is
always less than 256 bytes, the value of the significant byte
therefore equals 0.
8.2. Drive Modbus servers
The destination identifier (Unit ID) is used to access drive Modbus TCP servers:
Unit ID Modbus TCP server Accessible parameters
0-248 Variable speed drive See the VF-MB1/VF-S15 instruction manual.
251 Option board
255 IO Scanner See the “IO Scanner” section.
8.3. List of Modbus functions supported
Function code Modbus name Description Size of data
03 Read Holding Registers Read N output words 63 words max.
06 Write Single Register Write one output word 16 (0x10) Write Multiple Registers Write N output words 63 words max.
23 (0x17) Read/Write Multiple RegistersRead/write N words
The Modbus request is used to read the values of a number (No. of Points) of adjacent
words starting at the address indicated (Starting Address). The values read are restored
one after another, at the end of the response (First Point Data -> Last Point Data).
Request Format:
Byte Meaning
0 Function Code = 03h
1 Starting Address Hi
2 Starting Address Lo
3 No. of Points Hi (0)
4 No. of Points Lo (1 - 125)
Response format:
Byte Meaning
0 Function Code = 03h
1 Byte Count (B = 2 × No. of Points)
2 First Point Data Hi
3 First Point Data Lo
・・・・・・・・・・・・・・・・・・・
B Last Point Data Hi
B+1 Last Point Data Lo
Exception response format:
Byte Meaning
0 Function Code = 83h
Exception Code =
1
01 (Illegal Function)
02 (Illegal Data Address)
03 (Illegal Data Value)
Notes
If the communication number that doesn't exist is read, the option returns 0x8000.
- 65 -
E6581741
8.5. "06 (0x06) Write Single Register" function
This Modbus request is used to write a given value (Present Data) to the address
supplied (Register Address).
Request format:
Byte Meaning
0 Function Code = 06h
1 Register Address Hi
2 Register Address Lo
3 Preset Data Hi
4 Preset Data Lo
Response format:
Byte Meaning
0 Function Code = 06h
1 Register Address Hi
2 Register Address Lo
3 Preset Data Hi
4 Preset Data Lo
Exception response format:
Byte Meaning
0 Function Code = 86h
Exception Code =
01 (Illegal Function)
1
02 (Illegal Data Address)
03 (Illegal Data Value)
04 (Slave Device Failure)
Notes
As for the EEPROM parameter, first the data is written to RAM, after that the data is written to
EEPROM. Some EEPROM parameters cannot be changed during the inverter is running.
When write to EEPROM parameter that will change inverter status from stop to run, the inverter must
be in the state that it cannot run.
For example: To write to EEPROM, the inverter must open ST-CC. (display shows "OFF")
If not, the data is only written to RAM.
The Life of EEPROM is approximately 100,000 times. Avoid writing a command more than 100,000
times to the same parameter of the Inverter.
Please access only parameters in document.
- 66 -
E6581741
8.6. "16 (0x10) Write Multiple Registers" function
This Modbus request is used to write a number (No. of Registers) of adjacent words
starting at a given address (Starting Address). The values to be written are supplied one
after another (First Register Data -> Last Register Data).
Request format:
Byte Meaning
0 Function Code = 10h
1 Starting Address Hi
2 Starting Address Lo
3 No. of Registers Hi (0)
4 No. of Registers Lo (1 - 100)
5 Byte Count (B = 2 × No. of Registers)
6 First Register Data (Hi)
7 First Register Data (Lo)
・・・・・・・・・・・・・・・・・・・
B+4 Last Register Data (Hi)
B+5 Last Register Data (Lo)
Response format:
Byte Meaning
0 Function Code = 10h
1 Starting Address Hi
2 Starting Address Lo
3 No. of Registers Hi (0)
4 No. of Registers Lo (1 - 100)
Exception response format:
Byte Meaning
0 Function Code = 90h
Exception Code =
01 (Illegal Function)
1
02 (Illegal Data Address)
03 (Illegal Data Value)
04 (Slave Device Failure)
Notes
As for the EEPROM parameter, first the data is written to RAM, after that the data is written to
EEPROM. Some EEPROM parameters cannot be changed during the inverter is running.
When write to EEPROM parameter that will change inverter status from stop to run, the inverter must
be in the state that it cannot run.
For example: To write to EEPROM, the inverter must open ST-CC. (display shows "OFF")
If not, the data is only written to RAM.
The Life of EEPROM is approximately 100,000 times. Avoid writing a command more than 100,000
times to the same parameter of the Inverter.
Please access only parameters in document.
- 67 -
E6581741
8.7. "23 (0x17) Read/Write Multiple Registers" function
The "Read/Write Multiple Registers" service is reserved for setting up the IO Scanning
service (see "IO Scanning" section)
Request format:
Byte Meaning
0 Function Code = 17h
1 Starting Address Hi
2 Starting Address Lo
3 No. of Registers Hi (0)
4 No. of Registers Lo (1 - 100)
5 Byte Count (B = 2 × No. of Registers)
6 First Register Data (Hi)
7 First Register Data (Lo)
・・・・・・・・・・・・・・・・・・・
B+4 Last Register Data (Hi)
B+5 Last Register Data (Lo)
Response format:
Byte Meaning
0 Function Code = 17h
1 Starting Address Hi
2 Starting Address Lo
3 No. of Registers Hi (0)
4 No. of Registers Lo (1 - 100)
Exception response format:
Byte Meaning
0 Function Code = 97h
Exception Code =
01 (Illegal Function)
1
02 (Illegal Data Address)
03 (Illegal Data Value)
04 (Slave Device Failure)
Notes
As for the EEPROM parameter, first the data is written to RAM, after that the data is written to
EEPROM. Some EEPROM parameters cannot be changed during the inverter is running.
When write to EEPROM parameter that will change inverter status from stop to run, the inverter must
be in the state that it cannot run.
For example: To write to EEPROM, the inverter must open ST-CC. (display shows "OFF")
If not, the data is only written to RAM.
The Life of EEPROM is approximately 100,000 times. Avoid writing a command more than 100,000
times to the same parameter of the Inverter.
Please access only parameters in document.
- 68 -
E6581741
8.8. "43 (0x2B) Read Device identification" function
The "Read/Write Multiple Registers" service is reserved for setting up the IO Scanning
service (see "IO Scanning section").
Example in VF-MB1 is shown below.
Request format:
Byte Meaning
0 Function Code = 2Bh 2Bh
1 Type of MEI 0Eh
2 Read Device ID code 01: Basic
02: Regular
03: Extended
3 Object ID 0
Response format: (ID = 248)
Byte Meaning With the IPE002Z
0 Function Code = 2Bh 2Bh
1 Type of MEI 0Eh
2 Read Device ID code 01: Basic
02: Regular
03: Extended
3 Conformity Level 2
4 More Follows 0
5 Next Object Id 0
6 Number Of Objects 3 for Basic.
6 for Regular or Extended
7 Obj 0 Id Æ Vendor Name 0
8 Obj 0 length 7
9-15 Obj 0 value “TOSHIBA”
16 Obj 1 Id Æ ProductCode 1
17 Obj 1 length 13
18-30 Obj 1 value “VFMB1S-2007PL”
31 Obj 2 Id Æ Version 2
32 Obj 2 length 5
33-37 Obj 2 value “10801”
38 Obj 4 Id Æ Product Name 4
39 Obj 4 length 6
40-45 Obj 4 value “VF-MB1”
46 Obj 5 Id Æ Model Name 5
47 Obj 5 length 3
44-58 Obj 5 value “TSB”
59 Obj 6 Id Æ
UserApplicationName
60 Obj 6 length 16 maximum
61-80 Obj 6 value “ModbusTCP”
6
Only for
Regular
and
Extended
- 69 -
E6581741
Response format: (ID = 251)
Byte Meaning With the IPE002Z
0 Function Code = 2Bh 2Bh
1 Type of MEI 0Eh
2 Read Device ID code 01: Basic
02: Regular
03: Extended
3 Conformity Level 2
4 More Follows 0
5 Next Object Id 0
6 Number Of Objects 3 for Basic.
6 for Regular or Extended
7 Obj 0 Id Æ Vendor Name 0
8 Obj 0 length 7
9-15 Obj 0 value “TOSHIBA”
16 Obj 1 Id Æ ProductCode 1
17 Obj 1 length 7
18-24 Obj 1 value “IPE002Z”
25 Obj 2 Id Æ Version 2
26 Obj 2 length 4
27-30 Obj 2 value “0106”
Exception response format:
Byte Meaning
0 Function Code = ABh
Exception Code =
1
01 (Illegal Function)
02 (Illegal Data Address)
03 (Illegal Data Value)
- 70 -
E6581741
8.9. Parameter data
It is explanation by the reference method of the list of parameters of the VF-MB1 or
VF-S15 series as follows. For communication purpose, see the parameter list on
inverter's instruction manual regarding the communication number, adjustment range and
so forth.
<Example of excerpts from the inverter’s instruction manual>
Minimum
Communi-
Title
cation No.
au
h
au
f
au
l
: : : : : : : :
: : : : : : : :
de
c
ty
p
- History function
0093 Guidance function
0094 Overload
0010 Deceleration time 1
0007 Factory default setting
Function Adjustment range
Displays parameters in groups of
five in the reverse order to that in
which their settings were changed.
0 : 1 : 2 : Preset speed guidance
3 : Analog signal operation guidance
…
0 : -
:
*1: Default values vary depending on the capacity. *2: Changing the parameter VR enables to set to 0.01 sec. (adjustment range: 0.01 - 600.0 sec.).
(1) “Title” means the display on the inverter panel.
(2) “Communication number” is affixed to each parameter that is necessary for designating the
parameter for communication.
(3) "Adjustment range" means a data range adjustable for a parameter, and the data cannot be written
outside the range. The data have been expressed in the decimal notation. For writing the data through
the communication function, take the minimum setting unit into consideration, and use hexadecimal
system.
(4) "Minimum setup unit" is the unit of a single data (when the minimum unit is "-", 1 is equal to 1).
For example, the "minimum setup unit" of acceleration time (CEE) is 0.01, and 1 is equal to 0.01s.
For setting a data to 10 seconds, transmit 0x03E8 [10÷0.01=1000d=0x03E8] by communication.
(5) Communication numbers "0xxxxA" to "0xxxxF" don't exist in VF-MB1 or VF-S15.
Therefore, these communication numbers are skipped when read or write.
For example:
When the data of two words is read from acc(0009h), 0x000A doesn't exist because of this
specification.
Consequently, in this case ACC(0009h) and DEC(0010h) are read.
Refer
ence
5.1
5.2
5.3
6.14
5.2
- 71 -
E6581741
9. IO Scanning service
9.1. Presentation
The IO Scanning service is used to exchange I/O data between:
A controller or PLC (IO Scanner).
Devices (IO Scanning servers).
This exchange is usually performed by implicit services, thus avoiding the need to
program the controller (PLC).
The IO Scanner periodically generates the Read/Write Multiple Registers (23 = 0x17)
request.
The IO Scanning service operates if it has been enabled in the PLC and the drive.
The drive parameters assigned to IO Scanning have been selected by default. This
assignment can be modified by configuration.
The drive IO Scanning service can also be configured by the option Modbus server.
When the IO Scanning service has been enabled in the VF-MB1/S15 drive:
A TCP connection is assigned to it.
The parameters assigned in the periodic variables are exchanged cyclically between the
option and the drive.
The parameters assigned in the periodic output variables are reserved for IO Scanning.
They cannot be written by another Modbus service, even if the IO Scanner is not sending
its periodic output variables.
9.2. Periodic variables
Word No.
0 Reserved Reserved
1 Scanner write word 1 – configurable (c001) Scanner read word 1 – configurable (c021)
2 Scanner write word 2 – configurable (c002) Scanner read word 2 – configurable (c022)
3 Scanner write word 3 – configurable (c003) Scanner read word 3 – configurable (c023)
4 Scanner write word 4 – configurable (c004) Scanner read word 4 – configurable (c024)
5 Scanner write word 5 – configurable (c005) Scanner read word 5 – configurable (c025)
6 Scanner write word 6 – configurable (c006) Scanner read word 6 – configurable (c026)
7-31 Reserved Reserved
Output variables (written by IO Scanner)Input variables (read by IO Scanner)
It is possible to configure the assignment of periodic variables 1 to 6.
Please refer to "parameter" about configurable.
- 72 -
E6581741
10. Example of the setup with PL7™
It is an example of the setup using PLC (PL7™) made by Schneider electric as follows.
10.1. Defining the hardware configuration
Configure an Ethernet module then configure the module so that it can communicate with
the drive. The example shows a TSX Premium PLC equipped with a TSX ETY5102
module.
*PL7 is a trademark of Schneider Electric.
- 73 -
E6581741
10.2. BOOTP configuration
The BOOTP server function consists of allocating BOOTP clients their IP addresses.
The activation conditions for the drive BOOTP client are described in the “Configuration -
IP Addresses” section.
This window is used to configure the BOOTP server.
The drive MAC address is given on a label attached to its IPE002Z option module. The IP
address assigned to the drive must be entered in the table against the MAC address.
In this example, the Ethernet module MAC address is 00.80.F4.7D.02.C0, and its IP
address is 192.168.1.12.
Each line in the “Table of supplied addresses” can accept both the MAC and IP
addresses of a BOOTP client.
- 74 -
E6581741
10.3. Configuring Modbus messaging
To use Modbus messaging in PL7, the “IP address”, “Subnet mask” and “Gateway
address” parameters must be configured in the “Messaging” tab in the PLC Ethernet
module configuration screen.
Data entered in the “Connection configuration” box is used to manage the PLC Modbus
messaging service, but has no effect on IO Scanning which is an independent service.
Example:
PLC IP address 192.168.1.30
Subnet mask 255.255.255.0
Gateway address 0.0.0.0
Drive IP address 192.168.1.12
Xway address IP address Protocol Access Mode
1
1,101 192.168.1.12MODBUS
;
MULTI
- 75 -
E6581741
10.4. Configuring periodic variables
This window is used to configure the IO Scanning function, described in the IO Scanning
Service section on page 72.
Example:
•The periodic variables of the drive at IP address 192.168.1.12 are associated with PLC
data words.
•The drive periodic output variables (control) are associated with the 32 words (WR
count) starting at PLC address %MW550 (Write Ref.).
•The drive periodic input variables (monitoring) are associated with the 32 words (RD
count) starting at PLC address %MW500 (Read Ref.).
The addresses for the PLC %MW words correspond to the configuration in the previous example.
PLC
address
%MW 550 Reserved No
%MW 551 Scanner write word 1 Yes (c001)
%MW 552 Scanner write word 2 Yes (c002)
%MW 553 Scanner write word 3Yes (c003)
%MW 554 Scanner write word 4 Yes (c004)
%MW 555 Scanner write word 5 Yes (c005)
%MW 556 Scanner write word 6 Yes (c006)
%MW 557
to
%MW 581
Periodic output variable
(default assignment)
Reserved No
Configurable
PLC
address
%MW 500 Reserved No
%MW 501 Scanner read word 1 Yes (c021)
%MW 502 Scanner read word 2 Yes (c022)
%MW 503 Scanner read word 3Yes (c023)
%MW 504 Scanner read word 4 Yes (c024)
%MW 505 Scanner read word 5 Yes (c025)
%MW 506 Scanner read word 6 Yes (c026)
%MW 507
to
%MW 531
Periodic output variable
(default assignment)
Reserved No
Configurable
- 76 -
E6581741
y (
)
11. Command & Setpoint selection (Local/Remote)
Indication to display Local/Remote mode is on the inverter unit (Refer to the inverter
instruction manual for details). EtherNet/IP™ - Modbus
setpoint are activated on Remote mode.
Inverters have some switches to select the command and setpoint location. Following
figure shows the diagram. Refer to the inverter instruction manual for the parameter in
detail.
Con trol term inal
Operation panel
Se rial Com m. (RS48 5)
Serial Comm. (
(EtherNet/IP-Modbus TCP)
:
(EtherNet/IP-Modbus TCP)
:
CANopen
Network option
Operation panel
Network option
Terminal board VIC
Puls e train in put
cmod
®
)
fmod
0
1
2
3
4
0
:
7
8
:
11
®
TCP option command and
Input terminal function
108 (CM TB)
Command from terminal
0
Input terminal function
48 (SCLC)
Forced local from comm..
“LOC ” key
Remote panel (RKP007Z) or
EASY ke
f750=2
1
Contr ol
Te rm i na l
Input terminal function
Setpoint se le ctio n s wi tc h
1
104 (FCHG)
0
RS485
(fa00)
0
Operation pane l
RUN/STOP
REM
Command
LOC
1
f207
Selection
1
RS485
(fa01)
0
Operation panel
Dial (fc)
REM
Setp oint
LOC
- 77 -
E6581741
<Example of setting>
The example below shows how to configure the local/remote operation.
F terminal ............... Operating command
R terminal ............... EtherNet/IP-Modbus TCP local/remote
(Terminal in this example) switching
VIA terminal ........... Operation frequency command
R-CC terminal open: VF-MB1 is controlled as a slave device of the EtherNet/IP™ -
Modbus
®
TCP.
R-CC terminal closed:
F-CC terminal short to RUN
F-CC terminal open to STOP
Output frequency is set up by the VIA signal input.
(Note)
When the local(HAND) / remote key (f750=2) is chosen as EASY key selection and
the EASY key lamp of an inverter front panel is on, priority is most given to operation by
a panel. (Refer to the inverter instruction manual for details).
- 78 -
E6581741
12. Unusual diagnosis
12.1. Option error
An error message is displayed when the hardware error or software error or lose of
connection of wire is occurred.
When an option and a combination of the inverter are bad, it is displayed.
■Display of trip information
e-23 (Error code : 55) : Optional unit fault 2
12.2. Disconnection error of network cable
When network trouble occurred by disconnection etc, the inverter does emergency stop
with the following indication when the network disconnection detection (c100, c523)
is set, and it was set in (c101=4).
■Display of trip information
err8 (Error code: 27): Optional unit fault 1 (Communication error)
- 79 -
E6581741
13. WebServer
The option has webserver function. Writing and reading the drive's parameter and the
communication can be monitored by using this function through web network.
The chapter describes the function of the integrated webserver of the EtherNet/IP™ -
Modbus
13.1. Access to the webserver
This web server can be accessed by the navigators listed below:
Microsoft
The navigator must support Java™ Virtual Machine because the factory loaded web
server uses applets.
NOTE: As a TOSHIBA product, The EtherNet/IP™ option module uses internally Modbus
Startup the web browser and input IP address of the drive as the homepage address.
From your web browser, default http password and login are “USER”.
®
TCP module.
®
Internet Explorer – Version 5.0 or greater
for the webserver. (The Modbus
®
TCP port is not accessible.)
The drive IP address
®
TCP
- 80 -
E6581741
From the TOSVERT home page, you can access to 3 main menus:
Monitoring
Network setup
Diagnostics
13.2. Web pages structure
Each web page uses the same structure. Each main menu, "Monitoring", "Network
Setup" and "Diagnostics" contains each own sub menu. This last one is displayed on the
left side of web page.
The toggle button shows or hides the left sided menu.
- 81 -
E6581741
13.3. Drive monitor (Main menu: Monitoring)
The state of the drive can be confirmed on this page.
- 82 -
E6581741
13.4. Drive parameters (Main menu: Monitoring)
The parameters of the drive can be set on this page.
The left column is used to select a modify group (or list) of parameters. The right column
displays the parameters, its Modbus address and its current value.
Start the monitor
Set the parameters
When parameters of the drive are modified from the webserver, you need to input the
PASSWORD. (The default password is "USER.")
It is necessary to be monitoring it to change the parameter.