turck BL67, BL67-PG-EN User Manual

BL67-

USER MANUAL
for
BL67-PG-EN

All brand and product names are trademarks or registered trade
marks of the owner concerned.

1st edition, version 11/06
© Hans Turck GmbH, Mülheim an der Ruhr

All rights reserved, including those of the translation.

No part of this manual may be reproduced in any form (printed,
photocopy, microfilm or any other process) or processed, dupli­cated or distributed by means of electronic systems without written
permission of Hans Turck GmbH & Co. KG, Mülheim an der Ruhr.

Subject to alterations without notice.

Before starting the installation

 Disconnect the power supply of the device.
 Ensure that devices cannot be accidentally restarted.
 Verify isolation from the supply.
 Earth and short circuit.
 Cover or enclose neighboring units that are live.
 Follow the engineering instructions (AWA) of the device

concerned.

 Only suitably qualified personnel in accordance with EN 50 110-

1/-2 (VDE 0 105 Part 100) may work on this device/system.

 Before installation and before touching the device ensure that

you are free of electrostatic charge.

 The functional earth (FE) must be connected to the protective

earth (PE) or to the potential equalization. The system installer is
responsible for implementing this connection.

 Connecting cables and signal lines should be installed so that

inductive or capacitive interference do not impair the automation
functions.

 Install automation devices and related operating elements in

such a way that they are well protected against unintentional
operation.

 Suitable safety hardware and software measures should be

implemented for the I/O interface so that a line or wire breakage
on the signal side does not result in undefined states in the auto­mation devices.

 Ensure a reliable electrical isolation of the low voltage for the 24

volt supply. Only use power supply units complying with IEC 60
364-4-41 (VDE 0 100 Part 410) or HD 384.4.41 S2.

 Deviations of the mains voltage from the rated value must not

exceed the tolerance limits given in the specifications, otherwise
this may cause malfunction and dangerous operation.

 Emergency stop devices complying with IEC/EN 60 204-1 must

be effective in all operating modes of the automation devices.
Unlatching the emergency-stop devices must not cause restart.

 Devices that are designed for mounting in housings or control

cabinets must only be operated and controlled after they have

1

been installed with the housing closed. Desktop or portable units
must only be operated and controlled in enclosed housings.

 Measures should be taken to ensure the proper restart of

programs interrupted after a voltage dip or failure. This should
not cause dangerous operating states even for a short time. If
necessary, emergency-stop devices should be implemented.

 Wherever faults in the automation system may cause damage to

persons or property, external measures must be implemented to
ensure a safe operating state in the event of a fault or malfunc
tion (for example, by means of separate limit switches, mechan­ical interlocks etc.).

 The electrical installation must be carried out in accordance with

the relevant regulations (e. g. with regard to cable cross
sections, fuses, PE).

 All work relating to transport, installation, commissioning and

maintenance must only be carried out by qualified personnel.
(IEC 60 364 and HD 384 and national work safety regulations).

 All shrouds and doors must be kept closed during operation.

-

2

Table of Contents

About this Manual

Documentation Concept...............................................................................2-2

General Information ......................................................................................2-3

Prescribed Use........................................................................................2-3

Notes Concerning Planning /Installation of this Product ........................2-3

Description of Symbols Used .......................................................................2-4

1 BL67 Philosophy

The Basic Concept........................................................................................1-2

Flexibility..................................................................................................1-2

Convenient Handling...............................................................................1-3

BL67 Components........................................................................................ 1-4

Gateways.................................................................................................1-4

Electronic Modules..................................................................................1-5

Base Modules..........................................................................................1-6

End Plate ................................................................................................1-7

2Ethernet

System Description ...................................................................................... 2-2

Ethernet MAC-ID .....................................................................................2-2

IP address ...............................................................................................2-2

Network Classes ..................................................................................... 2-3

Data transfer............................................................................................2-4

Checking the communication via "ping-signals" .................................... 2-6

ARP (Address Resolution Protocol)......................................................... 2-6

Transmission Media ................................................................................ 2-7

3 Technical Features

General..........................................................................................................3-2

Function ........................................................................................................ 3-3

Programming...........................................................................................3-3

Technical Data .............................................................................................3-4

Structure of PLC runtime system ............................................................3-5

Connection possibilities..............................................................................3-10

Field bus connection .............................................................................3-10

Power Supply via 7/8" connector.......................................................... 3-11

Connection PS2 female connector ....................................................... 3-12

D301033 1106 BL67-PG-EN i

Table of Contents

Address Setting...........................................................................................3-15

LED-behavior.........................................................................................3-15

Default setting of the gateway...............................................................3-16

Address setting via the rotary-mode..................................................... 3-17

Address setting via BootP-mode .......................................................... 3-18

Address setting via DHCP-mode .......................................................... 3-19

Address setting via PGM-mode ............................................................3-20

Addressing via PGM-DHCP ..................................................................3-21

Address setting via the software "I/O-ASSISTANT" .............................3-22

SET Button..................................................................................................3-24

Status Indicators/Diagnostic Messages Gateway ...................................... 3-25

Diagnostic Messages via LEDs............................................................. 3-25

4 Implementation of MODBUS-TCP

Modbus Registers.........................................................................................4-3

Structure of the Packed In-/ Output Process Data ......................................4-7

Packed input-process data.....................................................................4-7

Packed output process data...................................................................4-8

Data Width of the I/O-Modules in the Modbus-Register Area...................... 4-9

Register 100Ch: "Gateway-Status"....................................................... 4-10

Register 1130h: "Modbus-connection-mode" ......................................4-12

Register 1131h: "Modbus-connection time-out" ..................................4-12

Register 0×113C and 0×113D:

"Restore Modbus-connection parameter"............................................4-12

Register 0×113E and 0×113F:

"Save Modbus-connection parameters"...............................................4-13

The Service-Object .....................................................................................4-14

"Indirect reading of registers" ............................................................... 4-16

"Indirect writing of registers"................................................................. 4-16

Mapping: Input-Discrete- and Coil-Areas...................................................4-18

Mapping the Modbus Registers..................................................................4-19

Implemented Modbus Functions ................................................................4-20

Parameters of the Modules.........................................................................4-21

Digital input modules.............................................................................4-21

Analog input modules............................................................................ 4-23

Digital output modules ..........................................................................4-27

Analog output modules ......................................................................... 4-28

Digital combi modules...........................................................................4-30

Technology modules ............................................................................. 4-32

D301033 1106 BL67-PG-ENii

Diagnostic Messages of the Modules......................................................... 4-42

Power supply modules.......................................................................... 4-42

Digital input modules.............................................................................4-42

Analog input modules............................................................................ 4-43

Digital output modules ..........................................................................4-46

Digital combi modules...........................................................................4-49

Technology modules ............................................................................. 4-51

5 Configuration of the programmable gateway with CoDeSys

General..........................................................................................................5-2

System requirements .............................................................................. 5-2

Installation of the BL67 target files................................................................5-3

Installation ...............................................................................................5-4

BL67 Hardware Configuration ......................................................................5-6

Configuration/ Programming of the PG in CoDeSys ....................................5-7

Creating a new project ............................................................................ 5-7

Configuration of the BL67 Station...............................................................5-13

Parameterization of the I/O modules..................................................... 5-14

Addressing the in- and output data ...................................................... 5-14

Mapping of the Modbus Registers........................................................ 5-17

PLC-Programming ......................................................................................5-19

Online ....................................................................................................5-20

Creating a boot project ......................................................................... 5-22

6 Guidelines for Station Planning

Module Arrangement .................................................................................... 6-2

Random Module Arrangement ................................................................ 6-2

Complete Planning........................................................................................ 6-3

Maximum System Extension......................................................................... 6-4

Creating Potential Groups.......................................................................6-5

Plugging and Pulling Electronic Modules .....................................................6-6

Extending an Existing Station ....................................................................... 6-7

7 Guidelines for Electrical Installation

General Notes ...............................................................................................7-2

General.................................................................................................... 7-2

Cable Routing.......................................................................................... 7-2

Cable Routing Inside and Outside of Cabinets:......................................7-2

D301033 1106 BL67-PG-EN iii

Table of Contents

Lightning Protection ................................................................................ 7-3

Transmission Media ................................................................................ 7-4

Potential Relationships .................................................................................7-5

General.................................................................................................... 7-5

Electromagnetic Compatibility (EMC)...........................................................7-6

Ensuring Electromagnetic Compatibility .................................................7-6

Grounding of Inactive Metal Components .............................................. 7-6

PE Connection.........................................................................................7-7

Earth-Free Operation............................................................................... 7-7

Mounting Rails.........................................................................................7-7

Shielding of cables........................................................................................7-9

Potential Compensation.............................................................................. 7-11

Switching Inductive Loads ....................................................................7-11

Protection against Electrostatic Discharge (ESD) .................................7-12

8 Appendix

Network Configuration..................................................................................8-2

Changing the IP address of a PC/ network interface card......................8-3

Deactivating/ adapting the firewall in Windows XP.................................8-9

Nominal Current Consumption of Modules at Ethernet .............................8-12

9Glossary

10 Index

D301033 1106 BL67-PG-ENiv

About this Manual

Documentation Concept .................................................................... 2

General Information........................................................................... 3

Prescribed Use............................................................................................3

Notes Concerning Planning /Installation of this Product ............................3

Description of Symbols Used............................................................. 4

D301033 1106 BL67-PG-EN 0-1

About this Manual

Documentation Concept

This manual contains information about the programmable BL67
MODBUS-TCP gateway BL67-PG-EN.

The following chapters contain a short BL67 system description, a
description of the field bus system Ethernet, exact information about
function and structure of the BL67 Ethernet gateways as well as all
bus specific information concerning the connection to automation
devices, the maximum system extension etc.

The bus-independent I/O-modules for BL67 as well as all further
fieldbus-independent chapters like mounting, labelling etc. are
described in a separate manual.

 BL67 I/O-modules

(TURCK-Documentation-No.: German D300572/
English D300529)

Furthermore, the manual mentioned above contains a short descrip­tion of the project planning and diagnostics software for TURCK
I/O-systems, the engineering software I/O-ASSISTANT.

D301033 1106 BL67-PG-EN0-2

General Information

General Information

Attention

Please read this section carefully. Safety aspects cannot be left to
chance when dealing with electrical equipment.

This manual contains all necessary information about the prescibed
use of the programmable TURCK gateway BL67-PG-EN.
It has been specially conceived for personnel with the necessary
qualifications.

Prescribed Use

Warning

The devices described in this manual must be used only in applica­tions prescribed in this manual or in the respective technical de­scriptions, and only with certified components and devices from
third party manufacturers.

Appropriate transport, storage, deployment and mounting as well as
careful operating and thorough maintenance guarantee the trouble­free and safe operation of these devices.

Notes Concerning Planning /Installation of this Product

Warning

All respective safety measures and accident protection guidelines
must be considered carefully and without exception.

D301033 1106 BL67-PG-EN 0-3

About this Manual

Description of Symbols Used

Warning

This sign can be found next to all notes that indicate a source of haz­ards. This can refer to danger to personnel or damage to the system
(hardware and software) and to the facility.

This sign means for the operator: work with extreme caution.

Attention

This sign can be found next to all notes that indicate a potential
hazard.

This can refer to possible danger to personnel and damages to the
system (hardware and software) and to the facility.

Note

This sign can be found next to all general notes that supply impor­tant information about one or more operating steps. These specific
notes are intended to make operation easier and avoid unnecessary
work due to incorrect operation.

D301033 1106 BL67-PG-EN0-4

1 BL67 Philosophy

The Basic Concept ............................................................................ 2

Flexibility......................................................................................................2

Convenient Handling...................................................................................3

BL67 Components ............................................................................. 4

Gateways.....................................................................................................4

Electronic Modules......................................................................................5

– Power Feeding Modules ..........................................................................5

Base Modules..............................................................................................6

End Plate ....................................................................................................7

D301033 1106 BL67-PG-EN 1-1

BL67 Philosophy

The Basic Concept

BL67 is a modular IP67 I/O-system for use in industrial automation.
It connects the sensors and actuators in the field to the higher-level
master.

BL67 offers modules for practically all applications:

 Digital input and output modules
 Analog input and output modules
 Technology modules (RS232 interface,...)

A complete BL67 station counts as one station on the bus and
therefore occupies one fieldbus address in any given fieldbus struc­ture. A BL67 station consists of a gateway, power distribution
modules and I/O-modules.

The connection to the relevant fieldbus is made via the bus-specific
gateway, which is responsible for the communication between the
BL67 station and the other fieldbus stations.

The communication within the BL67 station between the gateway
and the individual BL67 modules is realized via an internal module
bus.

Note

The gateway is the only fieldbus-dependent module on a BL67 sta­tion. All other BL67 modules are not dependent on the fieldbus
used.

Flexibility

A BL67 station can contain modules in any combination, which
means it is possible to adapt the system to practically all applica­tions in automated industries.

D301033 1106 BL67-PG-EN1-2

The Basic Concept

Convenient Handling

All BL67 modules, with the exception of the gateway, consist of a
base module and an electronic module.

The gateway and the base modules are either snapped onto a
mounting rail or are directly mounted onto the machine frame. The
electronic modules are plugged onto the appropriate base modules.

After disconnection of the load, the electronic modules can be
plugged or pulled when the station is being commissioned or for
maintenance purposes, without having to disconnect the field wiring
from the base modules.

1

D301033 1106 BL67-PG-EN 1-3

BL67 Philosophy

BL67 Components

Figure 1:
BL67 station

A gateway
B electronic

module
C base module

B

C

A

Gateways

The gateway connects the fieldbus to the I/O-modules. It is respon­sible for handling the entire process data and generates diagnostic
information for the higher-level master and the software tool
I/O-ASSISTANT.

Figure 2:
BL67 gateway

D301033 1106 BL67-PG-EN1-4

BL67 Components

Figure 3:
electronic
module

Electronic Modules

1

Electronic modules contain the functions of the BL67 modules
(Power Feeding modules, digital and analog input/output modules,
technology modules).

Electronic modules are plugged onto the base modules and are not
directly connected to the wiring. They can be plugged or pulled
when the station is being commissioned or for maintenance
purposes, without having to disconnect the field wiring from the
base modules.

Power Feeding Modules

Power Feeding modules distribute the required 24 V DC field voltage
to the I/O-modules. They are necessary for building groups of
modules with different potentials within a BL67 station, or if the
rated supply voltage for the outputs cannot be guaranteed.

Power Feeding modules are potentially isolated from the gateway,
the adjoining power supply module and the I/O-modules to the left
side.

Note

For detailed information about the individual BL67 I/O components,
please refer to the chapters 2 to 8 of the manual "BL67- I/O-mod­ules" (TURCK Documentation-No.: German D300572; English:
D300529).
The "Appendix" to the manual mentioned above contains (amongst
others) a list of all BL67 components and the assignment of elec

-

tronic modules to base modules.

D301033 1106 BL67-PG-EN 1-5

BL67 Philosophy

Figure 4:
example of a base
module

Base Modules

The field wiring is connected to the base modules.
These are available in the following connection variations:

 1 x M12, 2 x M12, 2 x M12-P, 4 x M12, 4 x M12-P
 4 x M8, 8 x M8
 1 x M12-8
 1 × M23, 1 x M23-19
 1 x 7/8" (for Power Feeding Module)

D301033 1106 BL67-PG-EN1-6

BL67 Components

Figure 5:
end plate

End Plate

An end plate on the right-hand side physically completes the BL67
station.

It protects the module bus connections of the last base module in a
station and guarantees the protection class IP67.

1

D301033 1106 BL67-PG-EN 1-7

BL67 Philosophy

D301033 1106 BL67-PG-EN1-8

2 Ethernet

System Description ........................................................................... 2

Ethernet MAC-ID .........................................................................................2

IP address ...................................................................................................2

Network Classes .........................................................................................3

Data transfer................................................................................................4

– IP (Internet Protocol) ................................................................................5

– TCP (Transmission Control Protocol) ......................................................5

– Modbus TCP ............................................................................................5

Checking the communication via "ping-signals" ........................................6

ARP (Address Resolution Protocol).............................................................6

Transmission Media ....................................................................................7

D301033 1106 BL67-PG-EN 2-1

Ethernet

System Description

Originally developed by DEC, Intel and Xerox (as DIX standard) for
data transmission between office equipment, Ethernet stands for
the IEEE 802.3 CSMA/CD specification published in 1985.

The rapid increase of application and the worldwide use of this tech­nology enables problem-free and above all cost-effective connec­tion to existing networks.

Ethernet MAC-ID

The Ethernet MAC-ID is a 6-byte-value which serves to definitely
identify an Ethernet device. The MAC-ID is determined for each
device by the IEEE (Institute of Electrical and Electronics Engineers,
New York).

The first 3 bytes of the MAC-ID contain a manufacturer identifier
(TURCK: 00:07:46:xx:xx:xx). The last 3 bytes can be chosen freely
by the manufacturer for each device and contain a definite serial
number.

A label on the TURCK modules shows the respective MAC-ID.
In addition to that, the MAC-ID can be read out using the software

tool "I/O-ASSISTANT".

IP address

Each Ethernet-host receives its own IP address. In addition to that
the node knows its netmask and the IP address of the default
gateway.

The IP address is a 4-byte-value which contains the address of the
network to which the node is connected as well as the host address
in the network.

The IP address of the gateway BL67-PG-EN is predefined as
follows:

IP address: 192.168.1.254
netmask: 255.255.255.0
gateway: 192.168.1.1

D301033 1106 BL67-PG-EN2-2

System Description

The netmask shows which part of the IP address defines the
network as well as the network class and which part of the IP
address defines the single node in the network.

In the example mentioned above, the first 3 bytes of the IP address
define the network. They contain the subnet-ID 192.168.1.
The last byte of the IP address defines the node’s address within the
network.

Note

In order to build up the communication between a PC and an
Ethernet-module, both have to be nodes of the same network.

If necessary, the nodes’ network addresses have to be adapted one
to another. Please read Chapter 8, „Changing the IP address of a
PC/ network interface card”, page 8-3.

Network Classes

The available networks are divided into the different network classes
A, B, and C.

2

Figure 6:
Network classes

Class Network

addresses

Bytes
for net
address

Bytes for
host
address

No. of the
possible
networks/
hosts

A 1.×××.×××.×××-

1 3 126/ 224

126.×××.×××.×××

B 128.0.×××.××× -

2 2 214/ 2

16

191.255.×××.×××

C 192.0.0.××× -

3 1 221/ 256

223.255.255.×××

According to their predefined address 192.168.1.××× the BL67
gateways are thus nodes of a Class C network.

D301033 1106 BL67-PG-EN 2-3

Ethernet

Data transfer

The data are transferred from a transmitter to a receiver via the
Ethernet. This data transfer uses no acknowledgement of reception,
which means data telegrams can get lost. Data transfer via Ethernet
without any protocol implementation can thus not be absolutely
safe.

In order to assure a safe transmission of data, frame-protocols like
TCP/IP are used.

Figure 7:
Telegram
structure

TCP-

Segment

IP-DATA

IP-

Package

LAYER 7

Modbus etc.

TCP-DATA

TCP­Header

IP­Header

Ethernet­Header

EtherNet-DATA

EtherNet­Package

D301033 1106 BL67-PG-EN2-4

System Description

IP (Internet Protocol)

The Internet Protocol is a connection-free transport protocol. The
protocol does not use acknowledgement messages, telegrams can
get lost. It is thus not suitable for safe data transfer. The main func
tions of the internet protocol are the addressing of hosts and the
fragmentation of data packages.

TCP (Transmission Control Protocol)

The Transmission Control Protocol (TCP) is a connection-oriented
transport protocol and is based on the Internet Protocol. A safe and
error-free data transport can be guaranteed by means of certain
error diagnostic mechanisms as for example acknowledgement and
time monitoring of telegrams.

MODBUS-TCP

In Ethernet TCP/IP networks, MODBUS-TCP uses the Transport
Control Protocol (TCP) for the transmission of the Modbus applica
tion protocol.

All parameters and data are embedded in the user data of the TCP­telegram using the encapsulation protocol: the client generates a
special header (MBAP = Modbus Application Header), which
enables the server to clearly interpret the received Modbus-para
meters and -commands.

The Modbus protocol is thus part of the TCP/IP-protocol.
The communication via Modbus is realized by means of function

codes embedded in the data telegram.

2

-

-

-

Figure 8:
telegram structure
MODBUS-TCP

The function codes contain, amongst others, commands for reading
input data or writing output data. Please read

Chapter 4, „Imple­mented Modbus Functions”, page 4-17 for further information about
the function codes implemented in the BL67 gateway.

D301033 1106 BL67-PG-EN 2-5

Ethernet

Figure 9:
ping-signal

Checking the communication via "ping-signals"

You can check the communication between nodes in a network
using ping-signals in the DOS-prompt of your PC.

For that purpose, please enter the command "ping" and the IP
address of the network node to be checked.

If the node answers the ping-signal, it is ready for communication
and takes part in the data transfer.

ARP (Address Resolution Protocol)

In each TCP/IP-capable computer, ARP serves to clearly assign the
worldwide unique hardware addresses (MAC-IDs) to the single IP
addresses of the network nodes via internal tables.

Using ARP in the DOS-prompt, every node in a network can be
clearly identified via its MAC-ID.

 Write a ping command for the respective station/ IP address:

(example: "x:\\ping 192.168.1.100").

D301033 1106 BL67-PG-EN2-6

System Description

 Via the command "x:\\arp -a" the MAC-ID (00-07-46-ff-60-13)

Figure 10:
Determination of
the MAC-ID of a
BL67 module via
ARP

for this IP address is determined. This MAC-ID clearly identifies
the network node.

2

Transmission Media

For a communication via Ethernet, different transmission media can
be used (see Chapter 7, page 7-4).

D301033 1106 BL67-PG-EN 2-7

Ethernet

D301033 1106 BL67-PG-EN2-8

3 Technical Features

General .............................................................................................. 2

Function............................................................................................. 3

Programming...............................................................................................3

Technical Data .................................................................................. 4

Gateway structure .......................................................................................5

Connection possibilities .................................................................. 10

Field bus connection .................................................................................10

– Ethernet-connection ..............................................................................10

Power Supply via 7/8" connector..............................................................11

Connection PS2 female connector ...........................................................12

– Connection with I/O-ASSISTANT-Connection Cable ............................12

– Connection Using Commercially Available Cables ...............................13

Address Setting ............................................................................... 15

LED-behavior.............................................................................................15

Default setting of the gateway...................................................................16

Address setting via the rotary-mode.........................................................17

Address setting via BootP-mode ..............................................................18

Address setting via DHCP-mode ..............................................................19

Address setting via PGM-mode ................................................................21

Addressing via PGM-DHCP ......................................................................22

Address setting via the software "I/O-ASSISTANT" .................................23

SET Button....................................................................................... 25

Status Indicators/Diagnostic Messages Gateway............................ 26

Diagnostic Messages via LEDs.................................................................26

D301033 1106 BL67-PG-EN 3-1

Technical Features

General

This chapter contains the general technical description of the
programmable BL67 gateway for Modbus TCP.

D301033 1106 BL67-PG-EN3-2

Function

Function

The programmable BL67 gateways can be used as an autonomous
PLC or as a de-central PLC in a network interconnection for fast
signal processing

Hinweis

The programmable BL67 gateway BL67-PG-EN is designed as a
Single Task System.

The gateway handles the entire process data traffic between the
I/O-level and the PLC runtime system.

Programming

The gateways BL67-PG-××× are programmable according to
IEC61131-3 using the software tool CoDeSys V2.3 from 3S - Smart
Software Solutions GmbH.

3

For programming the gateway, the following programming
languages according the standards can be used:

LD = Ladder
FDB = Function Block Diagram
IL = Instruction List
ST = Structured Text
SFC = Sequential Function Chart

D301033 1106 BL67-PG-EN 3-3

Technical Features

Technical Data

Figure 11:
BL67-PG-EN

A power supply
B Ethernet
C n.c.
D SET-button
E service-

F rotary coding

G module bus LED
H designation
I status LED
J RUN/STOP LED
K LEDs for

L Ethernet LEDs

interface

switches

supply voltage
monitoring

F

E

D

C

B

G

H

I

J

K

M

A

D301033 1106 BL67-PG-EN3-4

Technical Data

Structure of PLC runtime system

The BL67-PG-EN has the following structure:

Figure 12:
Structure of PLC
runtime system

Table 1:
Technical data
Ethernet gateway

BL67­Systembus

communi-

cation

bus

V

0

Power

bus

V

sens

PE

GND

1

4

Ethernet

1

2

PS/2

service

interface

Ethernet

2

3

3

interface

5

4

5 VDC

V

i

24 VDC

mC

memory

module bus

interface

short circuit

protection

Supply voltage

System supply VI (UB) 24 VDC used to generate

permissible range 18 to 30 VDC

the galvanically
isolated module
bus supply

3

Field supply VO (UL) 24 VDC

permissible range 18 to 30 VDC

I

sys

600 mA current consump-

tion CPU + module
bus at maximum
system extension

D301033 1106 BL67-PG-EN 3-5

Technical Features

I

MB

I

VI

Isolation voltages

U

RS

(Ethernet/
service interface)

U

EN

(Ethernet/ module bus)

U

sys

(VO/VI to U

sys

)

SPS-data

Programming

max. 1,3 A maximum output

current of module
bus supply

max. 4 A short-circuit and

overload protec­tion of the sensor
supply from
gateway or power
feeding module

500 V AC

500 V DC

1000 V DC

–Software
– Released for

– Programming

languages

CoDeSys V 2.3
V 2.3.5.8

IEC 61131-3
(IL, LD, FDB, SFC, ST)

– Application tasks 1

– No. of POUs (Program

1024

Organization Unit)

– Programming interfaces RS232-interface, Ethernet

Processor RISC, 32 bit

– Cycle time < 1 ms for 1000 IL-commands

(without I/O-cycle)

D301033 1106 BL67-PG-EN3-6

Technical Data

– Real time clock yes

Memory

– Program memory 512 KByte

– Data memory 512 KByte

–Input data 4 KByte (physical input data and

network variables)

– Output data 4 KByte (physical output data and

network variables)

– Non-volatile memory 16 KByte

Ambient conditions

Ambient temperature

–t

–t

0 to +55 °C /32 to 131 °F

Ambient

- 25 to +85 °C / - 13 to 185 °F

Store

Relative humidity 5 up to 95 % (inside), level RH-2, no

condensation (at 45 °C storage
temperature)

Climatic tests according to IEC 61131-2

Corrosive gas according to IEC 60068-2-42/43

–SO

2

10 ppm (rel. humidity < 75 %, no
condensation)

3

–H2S 1.0 ppm (rel. humidity < 75 %, no

condensation)

Resistance to vibration according to EN 61131

– 10 to 57 Hz,constant

yes

amplitude 0.075 mm, 1 g

– 57 to 150 Hz, constant

yes

acceleration 1 g

– Vibration mode frequency cycles with a change rate

of 1 octave/min

D301033 1106 BL67-PG-EN 3-7

Technical Features

– Vibration duration 20 frequency cycles per coordinate

Application conditions according to EN 61131

Shock resistant according to IEC 68-2-27, 18

axis

shocks, semi-sinusoidal 15 g
threshold/11 ms, each in ± direction
per space coordinate

Repetitive shock resis­tance

Drop and topple according to IEC 68-2-31 and free

– Drop height (weight <

kg)

10

– Drop height (weight 10 to

40 kg)

– Test cycles 7

Protection class IP67

Electromagnetic capa­bility (EMC)

Static electricity according to EN 61000-4-2

Air discharge (direct) 8 kV

Relay discharge (indi­rect)

Electromagnetic HF fields according to IEC 61131-2

according to IEC 68-2-29, 1000
shocks, semi-sinusoidal 25 g
threshold/6 ms, each in ± direction
per space coordinate

fall according to IEC 68-2-32

1 m

0.5 m

according to IEC 60529

according to EN 61131-2/
EN 50082-2 (Industrial)

4 kV

Fast transients (Burst) according to IEC 61131-2

Conducted interferences
induced by HF fields

according to IEC 61000-4-6
10 V
Criteria A

D301033 1106 BL67-PG-EN3-8

Technical Data

A I/O-line-length

≤

30 m

High energy
transients (Surge) A
voltage supply

according to IEC 61000-4-5
0,5 kV CM, 12 Ω/ 9 µF
0,5 kV DM, 2 Ω/ 18 µF
Criteria B

Reliability

Operational life MTBF min. 120 000 h

Electronics modules pull/

20

plug cycles

Housing material PC-V0 (Lexan)

Dimensions

Width x length x height
(mm/inch)

64,5 x 145,0 x 77,5 /
2,54 x 5,71 x 3,05

Warning

This device can cause radio disturbances in residential areas and in
small industrial areas (residential, business and trading). In this case,
the operator can be required to take appropriate measures to sup
press the disturbance at his own cost.

3

-

D301033 1106 BL67-PG-EN 3-9

Technical Features

Connection possibilities

Field bus connection

The connection of the BL67 Ethernet gateways to the Ethernet
network is realized via the 4-pole M12 female connector “Ethernet“.

According to PNO- and ODVA-standards, the M12 female
connector is designed as a 4-pole and D-coded connector.

Figure 13:
M12-female
connector

Table 2:
Pin assignment

2

1

4

3

Pin-No.

1 TD+ Transmission Data +

2 RD+ Receive Data +

3 TD- Transmission Data -

4 RD- Receive Data -

D301033 1106 BL67-PG-EN3-10

Connection possibilities

Power Supply via 7/8" connector

The power supply is realized via a 7/8" male connector on the
gateway.

Abbildung 14:
power supply via
7/8" male connec
tor

Table 3:
Pin assignment of
the 7/8" power
supply connector

-

2

Pin-

51

4

3

Color 7/8" Description

No.

1 black GND

2 blue GND

3 green/

PE Protective earth

yellow

4 brown VI (UB) Feed-in of nominal voltage for input

modules (sensor supply); also used for
the generation of the system supply
voltage

5 white VO (UL) Feed-in of nominal voltage for output

modules (can be switched off sepa­rately)

3

D301033 1106 BL67-PG-EN 3-11

Technical Features

Connection PS2 female connector

The PS/2 female connector is used for the gateway’s connection to
the I/O-ASSISTANT (project planning and diagnostic software).

The interface is conceived as a 6-pole mini DIN connector.
In order to connect the gateway to the PC, two types of cables can

be used:

 special I/O-ASSISTANT-connection cable from TURCK

 Commercially available PS/2 cable with adapter cable

Connection with I/O-ASSISTANT-Connection Cable

(IOASSISTANT-ADAPTERKABEL-BL20/BL67; Ident-no.:

6827133)

SUB-D/ PS/2

Figure 15:
BL67-gateway
connected to PC
via special cable

Figure 16:
PS/2 male con­nector on the
connection cable
to the gateway
(top view)

B

C

A

The I/O-ASSISTANT-cables have a PS/2 male connector (connec­tion for female connector on gateway) and a SUB-D female
connector (connection for male connector on PC).

34

52

61

D301033 1106 BL67-PG-EN3-12

Connection possibilities

Figure 17:
9-pole SUB-D
female connector
on the cable for
connecting to PC
(top view)

Figure 18:
Connection be­tween PC and
BL67 gateway via
commercially
available cable

A SUB-D- female
B PS/2-female

<–> PS/2-male
C PS/2-male

54321

9678

Connection Using Commercially Available Cables

A further possibility to connect PC and BL67 gateway is to use a
commercially available connection and adapter cable.

The connection shown in the following figure (PS2-male/ PS2-male)
is a 6-wire 1:1 connection.

B

C

A

3

The following two cables are necessary:

 1 x PS/2 cable (PS/2 male connector/PS/2 male connector)

(commercially available keyboard extension cable)

 1 x adapter cable (PS/2 female connector/SUB-D female

connector) (commercially available extension cable for a PC
mouse)

Figure 19:
PS/2 female con­nector on the
gateway (top view)

34

2

5

1

6

D301033 1106 BL67-PG-EN 3-13

Technical Features

Figure 20:
9-pole SUB-D
male connector
on PC (top view)

Table 4:
Pin assignment
when using PS/2
cable and adapter

A not supported
by all adapter
cables.

12345

6987

Pin assignment

The table below shows the pin assignment when using a PS/2 cable
and adapter:

PS/2 9-pole serial

interface on PC

Pin­No.

Standard PS/2
male connector

BL67 gateway:
PS/2 female

Pin­No.

Male connector

connector

1 CLK +5 V

4, 6 A DTR, DSR

(from gateway)

2 GND GND 5 GND

3 DATA not connected – –

4 n.c. (DATA2) TxD 2 RxD

5 +5 V /CtrlMode 7 RTS

6 n.c. (CLK2) RxD 3 TxD

D301033 1106 BL67-PG-EN3-14

Address Setting

Address Setting

The addressing of BL67-PG-EN can be realized via different modes:

 rotary mode (manual addressing via rotary coding-switches)
 PGM mode (manual addressing via software)
 BootP mode, DHCP mode (automatic addressing via BootP/

DHCP-server at the boot-up of the gateway).

The setting of the address modes is done via the 3 rotary coding­switches at the gateway.

Note

It is not necessary to address the station’s internal module bus.

Attention

The cover of the decimal rotary coding-switches must be closed by
tightening the screw after use.

The seal in the cover must not be damaged or slipped.
The protection class IP67 can only be guaranteed when the cover is

closed correctly.

3

LED-behavior

During it’s start-up, the module waits for the address setting via the
BootP-server. This is indicated by the red flashing "MS" LED. The
LED begins to flash green, as soon as the address setting via the
server is completed. The station is ready for communication.

D301033 1106 BL67-PG-EN 3-15

Technical Features

Default setting of the gateway

The gateway’s "out of the box"-settings are the following:
IP address 192.168.1.254

subnet mask 255.255.255.000
default gateway 192.168.1.1

Note

The gateway can be reset to these default settings by the user at any
time.
To reset the gateway, please set the three coding-switches at the
gateway to "000" followed by a power-on reset.

Figure 21:
Decimal rotary
coding-switches
for the address
setting

0

1

9

2

8

3

7

6

4

5

0

1

9

2

8

3

7

6

4

5

0

1

9

2

8

3

7

6

4

5

000: 192.168.1.254
1 - 254: static rotary
300: BootP
400: DHCP
500: PGM
600: PGM-DHCP

Attention

After every change of the address-mode, a voltage reset must be
carried out.

x 100

x 10

x 1

D301033 1106 BL67-PG-EN3-16

Address Setting

Address setting via the rotary-mode

When using the rotary-mode, the last byte of the gateway’s IP
address can be set via the rotary coding-switches at the gateway.

Figure 22:
Address setting

Note

All other network settings are stored in the module’s non-volatile
EEPROM and can not be changed in the rotary-mode.

Addresses in the range from 0 to 254 can be allocated. The
addresses 0 and 255 are reserved for broadcast messages in the
subnet.

The following example shows the setting of the address 173.

0

1

9

8

8

8

2

100×

3

7

6

4

5

0

1

9

2

×10

3

7

6

4

5

0

1

9

2

×1

3

7

6

4

5

3

Attention

The settings carried out in the rotary-mode are not stored in the
module’s EEPROM. Thus, they will get lost in case of a subsequent
address-assignment via a BootP/ DHCP or PGM.

Attention

After changing the position of the rotary coding-switches, a voltage
reset must be carried out to store the new address.

D301033 1106 BL67-PG-EN 3-17

Technical Features

Address setting via BootP-mode

The address setting is carried out by a BootP-server in the network
after the start-up of the gateway.

In order to activate the BootP-mode, the rotary coding-switches
have to be set to "300".

Figure 23:
BootP-mode

0

1

9

8

8

8

2

× 100

3

7

6

4

5

0

1

9

2

×10

3

7

6

4

5

0

1

9

2

×1

3

7

6

4

5

Note

The IP address as well as the default subnet mask assigned to the
gateway by the BootP-server are stored in the gateway’s non-vola­tile memory.

If the gateway is subsequently switched to rotary- or PGM-mode,
the settings carried out via BootP (IP address, subnet mask, etc) will
be taken from the module’s EEPROM.

D301033 1106 BL67-PG-EN3-18

Address Setting

Address setting via DHCP-mode

The address setting is carried out by a DHCP-server in the network
after the start-up of the gateway.

In order to activate the DHCP-mode, the rotary coding-switches
have to be set to "400".

3

Figure 24:
DHCP-Modus

0

1

9

8

8

8

2

100×

3

7

6

4

5

0

1

9

2

×10

3

7

6

4

5

0

1

9

2

×1

3

7

6

4

5

Note

The IP address as well as the default subnet mask assigned to the
gateway by the DHCP-server are stored in the gateway’s non-vola
tile memory.

If the gateway is subsequently switched to rotary- or PGM-mode,
the settings carried out via DHCP (IP address, subnet mask, etc) will
be taken from the module’s EEPROM.

DHCP supports three mechanisms for IP address allocation:

 In "automatic allocation", the DHCP-server assigns a permanent

IP address to a client.

 In "dynamic allocation", DHCP assigns an IP address to a client

for a limited period of time. After this time or until the client
explicitly relinquishes the address, the address can be re­assigned.

 In "manual allocation", a client's IP address is assigned by the

network administrator, and DHCP is used simply to convey the
assigned address to the client.

-

D301033 1106 BL67-PG-EN 3-19

Technical Features

Address setting via PGM-mode

The PGM-mode enables the access of I/O-ASSISTANTs to the
module’s network settings.

In order to activate the PGM-mode, the rotary coding-switches have
to be set to "500".

Figure 25:
PGM-mode

0

1

9

8

8

8

2

100×

3

7

6

4

5

0

1

9

2

×10

3

7

6

4

5

0

1

9

2

×1

3

7

6

4

5

Note

In the PGM-mode, all network settings (IP address, subnet mask,
etc.) are read from the module’s internal EEPROM.

The settings carried out in the rotary-mode are stored in the
module’s non-volatile EEPROM.

D301033 1106 BL67-PG-EN3-20

Address Setting

Addressing via PGM-DHCP

The addressing of the BL67 Modbus TCP gateway via PGM-DHCP
is at the moment comparable to the addressing via DHCP (see page

3-19).

3

D301033 1106 BL67-PG-EN 3-21

Technical Features

Address setting via the software "I/O-ASSISTANT"

The software-tool "I/O-ASSISTANT" enables direct access to the
Ethernet-network via the fieldbus cable.

Naturally, the access to the single station via the service interface at
the gateway is possible as well.

Figure 26:
Interface Ethernet

Figure 27:
Opening the
Address-Tool

The IP address as well as the subnet mask of the TURCK Ethernet
gateways can be changed according to the application by using the
integrated Address Tool.

Changes in the network-configuration are only accepted in the
PGM-mode (see page 3-20).

D301033 1106 BL67-PG-EN3-22

Address Setting

Figure 28:
change
IP address

3

Attention

Please observe that, if the system integrated Windows-firewall is ac­tivated, difficulties may occur during the communication between
the gateway and the Address-tool. The firewall may possibly inhibit
the access of the tool on Ethernet.

D301033 1106 BL67-PG-EN 3-23

Technical Features

SET Button

The SET button on the gateway is used to save the Current Config­uration of the station as the Reference Configuration in the
gateway’s non volatile configuration memory.

Note

Please press the SET button for 10 seconds after every change in
the station’s hardware configuration in order to save the Current
Configuration as the Reference Configuration in the Gateway.

D301033 1106 BL67-PG-EN3-24

Status Indicators/Diagnostic Messages Gateway

Status Indicators/Diagnostic Messages Gateway

The gateway sends the following diagnostic messages:

 undervoltage monitoring for system- and field supply,
 monitoring of the station status,
 monitoring of the communication via the internal module bus,
 monitoring of the communication to Ethernet
 monitoring of the gateway status

Diagnostic messages are displayed in two different ways:

 via the LEDs
 via the respective configuration software

Diagnostic Messages via LEDs

Every BL67 gateway displays the following statuses via LEDs:

 2 LEDs for module bus communication (module bus LEDs): GW

IO

and

 1 LED for displaying if the gateway/ the program in the gateway

has started:

 3 LEDs for monitoring the voltage supply (system, VCC/ inputs,

Vi/ outputs, Vo).

 2 LEDs for the Ethernet communication (fieldbus-LEDs): LINK/

ACT and MS.

RUN/STOP

3

D301033 1106 BL67-PG-EN 3-25

Technical Features

Table 5:
LED-displays

LED Status Meaning Remedy

GW Off CPU not supplied. –

Green Firmware active,

–
gateway ready to
operate and transmit

Green,
flashing,

Firmware not active. If LED "IO" red → Firm-

ware download necessary

1 Hz

Green,
flashing,
4 Hz

Red Controller is not

Firmware active,
gateway hardware
defect.

ready, VCC level is
not within the
required range →
possible reasons:

Replace the gateway.

– Check wiring at the

gateway and the voltage

supply.
– Dismount modules
– Replace the gateway.

– too many modules

connected to the
gateway

– short circuit in

connected module

– hardware error in

gateway

D301033 1106 BL67-PG-EN3-26

Status Indicators/Diagnostic Messages Gateway

Table 5:
LED-displays

LED Status Meaning Remedy

IO Off CPU not supplied. – Check the voltage

supply at the gateway.

Green Module bus is

–

running,
the configured
module bus station
corresponds to the
physically connected
station, communica

-

tion is active.

Green,
flashing
1 Hz

Green,
flashing
4 Hz

Station is in the
I/O-ASSISTANT
Force Mode.

Maximum number of
modules at the
gateway is exceeded.

– Deactivate the

I/O-ASSISTANT Force

Mode.

– Check the number of

modules connected to

the gateway, dismount

modules

Red Controller is not

ready, VCC level is not
within the required

→

range
possible reasons:

– Check wiring at the

gateway and the voltage

supply.
– Dismount modules
– Replace the gateway.

– too many modules

connected to the
gateway

– short circuit in

connected module
– hardware error in
– gateway

3

D301033 1106 BL67-PG-EN 3-27

Technical Features

Table 5:
LED-displays

LED Status Meaning Remedy

IO Red

flashing,
1 Hz

Non-adaptable modi­fication of the physi­cally connected
station.

– Compare the planned

BL67 station with the
physical station.

– Check the physical

station for defective or
incorrectly fitted elec
tronics modules.

Red
flashing,
4 Hz

no module bus
communication

– At least one module has

to be plugged and has to
be able to communicate
with the gateway.

Red/
green
flashing,
1 Hz

RUN/

Off No program loaded

STOP

Green Application loaded to

Adaptable modifica­tion of the physically
connected station;
data transfer possible

into the gateway.

– Check the physical

station for pulled or new
but not planned
modules.

–

–
gateway, program
running.

Green
flashing

Application loaded to
gateway, PLC not yet

– Start the gateway/ the

PLC program.

started or stopped.

-

Red PLC test during

–
gateway start.

VCCOff CPU not supplied – Check the system

supply at the gateway.

Green Module bus and CPU

–
running

D301033 1106 BL67-PG-EN3-28

Status Indicators/Diagnostic Messages Gateway

Table 5:
LED-displays

LED Status Meaning Remedy

VOOff No voltage supply. Check the system supply

at the gateway.

Output
supply
ok.

Green
flashing,

– Check the wiring at

the gateway and the
voltage supply.

Undervoltage VO,
system running

Green

– Check the system

supply at the gateway

1 Hz

Green
flashing,

Overvoltage VO,
system running

4 Hz

VIOff No voltage supply. – Check the wiring of the

voltage supply at the
gateway

Green sensor supply ok. –

Green,
flashing,
1Hz

Green,
flashing,

undervoltage VI,
system running

Overvoltage VI,
system running

– Check the wiring of the

voltage supply at the
gateway

4 Hz

3

Red Short circuit or over-

load at sensor supply

– Automatic restart when

debugging.
→ sensor supply is
switched off

D301033 1106 BL67-PG-EN 3-29

Technical Features

Table 5:
LED-displays

LED Status Meaning Remedy

LINK/

Off No Ethernet link – Check the Ethernet-

ACT

Green Link, 100 Mbit

Green
flashing

Ethernet Traffic,
100 Mbit

Yellow Link, 10 Mbit

Yellow,
flashing

Ethernet Traffic,

Mbit

10

MS Green Displays the logical

connection

–

–

–

–

–
connection to a
Master (1. Modbus
TCP- connection)

Green,
flashing

Gateway is ready for
operation

Red Gateway indicates

–

–
error

Red,
flashing

DHCP/BootP search
of settings

–

D301033 1106 BL67-PG-EN3-30

4 Implementation of MODBUS-TCP

Modbus Registers .............................................................................. 3

Structure of the Packed In-/ Output Process Data ........................... 7

Packed input-process data.........................................................................7

Packed output process data.......................................................................8

Data Width of the I/O-Modules in the Modbus-Register Area ........... 9

Register 100Ch: "Gateway-Status"...........................................................10

Register 1130h: "Modbus-connection-mode" ..........................................12

Register 1131h: "Modbus-connection time-out" ......................................12

Register 0×113C and 0×113D:

"Restore Modbus-connection parameter"................................................12

Register 0×113E and 0×113F:

"Save Modbus-connection parameters"...................................................13

The Service-Object .......................................................................... 14

"Indirect reading of registers" ...................................................................16

"Indirect writing of registers".....................................................................16

Mapping: Input-Discrete- and Coil-Areas ........................................ 18

Mapping the Modbus Registers ....................................................... 19

Implemented Modbus Functions ..................................................... 20

Parameters of the Modules ............................................................. 21

Digital input modules.................................................................................21

Analog input modules................................................................................23

Digital output modules ..............................................................................27

Analog output modules .............................................................................28

Digital combi modules...............................................................................30

Technology modules.................................................................................32

Diagnostic Messages of the Modules .............................................. 42

Power supply modules..............................................................................42

Digital input modules.................................................................................42

Analog input modules................................................................................43

Digital output modules ..............................................................................46

Digital combi modules...............................................................................49

D301033 1106 BL67-PG-EN 4-1

Implementation of MODBUS-TCP

Technology modules.................................................................................51

D301033 1106 BL67-PG-EN4-2

Modbus Registers

Modbus Registers

As soon as an application is downloaded to the BL67-PG-EN, the
programmable gateway simply allows read-only-access to the stan­dard Modbus registers (0×0000h to 0×01FFh, 0×0800h to 0×09FFh).

A write-access is only possible using the Modbus output registers
(register

Note

If no application is loaded to the BL67-PG-EN, the programmable
gateway works as a standard-gateway for MODBUS-TCP.

Note

Some Modbus PLCs and/ or configuration tools do not define
register-number 0×0000h as the starting address according to the
Modbus specification. In this case, the address area may begin with
decimal "1".

0×4400 to 0×47FF, see following table).

4

D301033 1106 BL67-PG-EN 4-3

Implementation of MODBUS-TCP

Table 6:
Modbus registers
of the gateway

A ro = read only
rw = read write

Address

Access ADescription

(hex.)

0×0000 to
0×01FF

0×0800 to
0×09FF

ro packed process data of inputs

(process data length of modules, see

Table 7: "Data width of the I/O-modules")

rw packed process data of outputs

(process data length of modules, see

Table 7: "Data width of the I/O-modules")

0×1000 to

ro gateway identifier

0×1006

0×100C ro gateway status (see Table 8: "Register

100Ch: gateway-status")

0×1010 ro process image length in bit for the intelli-

gent output modules

0×1011 ro process image length in bit for the intelli-

gent input modules

0×1012 ro process image length in bit for the digital

output modules

0×1013 ro process image length in bit for the digital

input modules

0×1017 ro register-mapping revision (always 1, if

not, mapping is incompatible with this
description)

D301033 1106 BL67-PG-EN4-4

Modbus Registers

A ro = read only

rw = read write

Address

AccessADescription

(hex.)

0×1018 to
0×101A

ro group diagnostics of I/O-modules 0 to 32

(1 bit per I/O-module)

0×1020 ro watchdog, actual time [ms]

0×1120 rw watchdog predefined time [ms]

(default: 0)

0×1121 rw watchdog reset register

0×1130 rw modbus connection mode register

0×1131 rw modbus connection time-out in seconds

(default: 0 = never)

0×113C to

rw modbus parameter restore

0×113D

0×113E to

rw modbus parameter save

0×113F

0×2000 to

rw service-object, request-area

0×207F

0×2080 to

ro service-object, response-area

0×20FF

4

0×2400 ro system voltage U

SYS

[mV]

0×2401 ro load voltage UL [mV]

0×2405 ro load current IL [A]

0×27FE ro no. of entries in actual module list

0×27FF rw no. of entries in reference module list

0×2800 to
0×2840

0×2900 to

rw reference module list (32 × 4 bytes per

module-ID)

ro reserved

0×29A0

D301033 1106 BL67-PG-EN 4-5

Implementation of MODBUS-TCP

A ro = read only

rw = read write

Address
(hex.)

0×2A00 to
0×2A20

0x4000 to
0x43FF

0x4400 to
0x47FF

0×8000 to
0×8400

0×9000 to
0×9400

0×A000 to
0×A400

Access ADescription

ro actual module list (32 × 4 bytes per

module-ID)

rw Modbus input registers

(SPS application-registers, see also

"Mapping of the Modbus Registers",
page 5-17).

Modbus output registers
Modbus-communication of the program­mable gateway with a higher-level
Modbus-client (i.e. PLC or OPC-server).
See also Figure 29: "Mapping the

Modbus registers" or SPS application-

registers, "Mapping of the Modbus

Registers", page 5-17

ro process data inputs (32 × 64 bytes)

rw process data outputs (32 × 64 bytes)

ro diagnostics (32 × 64 bytes)

0×B000 to
0×B400

rw parameters (32 × 64 bytes)

D301033 1106 BL67-PG-EN4-6

Structure of the Packed In-/ Output Process Data

Structure of the Packed In-/ Output Process Data

In order to assure a largely efficient access to the process data of a
station, the module data are consistently packed and mapped to a
coherent register area.

The I/O-modules are divided into digital and intelligent modules
(analog modules, serial interfaces).

Both module types are mapped in separate register ranges.
The data mapping always starts with the mapping of the intelligent

modules. Each module occupies as much Modbus registers as
necessary, depending on it’s data width. At least one register is
occupied. A RS232-module, for example, occupies 4 consecutive
registers (8 bytes) in the input and in the output area.
The data byte arrangement is done according to the physical order
in the station, from the left to the right.

The data of the intelligent modules are followed by the data of the
digital modules, also structured according to their physical appear­ance in the station. The Modbus registers for the digital data are
filled-up up to 16 bit. This means on the one hand that one Modbus
register can contain data of different digital modules and on the
other hand that the data of one digital module can be distributed
over multiple registers. Bit 0 of a digital module is thus not obligatory
located on a word limit.

4

Packed input-process data

 input register area: 0000h to 01FFh

0000h 01FFh

intelligent modules,
input data

Note

Independent of the I/O-configuration, an access to all 512 registers
is always possible. Registers that are not used send "0".

D301033 1106 BL67-PG-EN 4-7

digital input
modules

status/
diagnosis

free

Implementation of MODBUS-TCP

Status/ diagnosis

The area "status/diagnosis" comprises a maximum of 9 registers.
The first register contains a common gateway-/station-status.
The following registers (max. 8) contain a group diagnostic bit for

each I/O-module which shows whether a diagnostic message is
pending for the relevant module or not.

Status/ diagnosis

n + 0000h n + 0008h

gateway status
(Reg. 100Ch)

Packed output process data

 output register area: 0800h to 09FFh

0800h 09FFh

intelligent modules,
output data

Note

Independent of the I/O-configuration, an access to all 512 registers
is always possible. Registers that are not used send "0" answering
a read access, write accesses are ignored.

group diagnosis I/O-modules 0...127
(registers 1018h to 101Fh)

digital output data free

D301033 1106 BL67-PG-EN4-8

Data Width of the I/O-Modules in the Modbus-Register Area

Data Width of the I/O-Modules in the Modbus-Register Area

The following table shows the data width of the BL67 I/O-modules
within the modbus register area and the type of data alignment.

Table 7:
Data width of the
I/O-modules

Module Process

input

Process
output

Alignment

– digital inputs

BL67-4DI-x 4 bit - bit by bit

BL67-8DI-x 8 bit - bit by bit

– digital outputs

BL67-4DO-x - 4 bit bit by bit

BL67-8DO-x - 8 bit bit by bit

BL67-16DO-x - 16 bit bit by bit

–analog inputs

BL67-2AI-x 2 words word by word

– analog outputs

BL67-2AO-x 2 words word by word

– technology modules

BL67-1RS××× 4 words 4 words word by word

BL67-1SSI 4 words 4 words word by word

4

BL67-1CVI 4 words 4 words word by word

D301033 1106 BL67-PG-EN 4-9

Implementation of MODBUS-TCP

Register 100Ch: "Gateway-Status"

This register contains a general gateway-/ station-status.

Table 8:
Register 100Ch:
gateway-status

Bit Name Description

Gateway

15 I/O Controller Error The communication controller for

the I/O-system is faulty.

14 Force Mode Active

The Force-Mode it activated.

Error

The state of the outputs may no
longer accord to the settings made
via the fieldbus.

13 reserved -

12 Modbus Wdog Error A time-out in the Modbus commu-

nication occurred.

Module bus

11 I/O Cfg Modified Error The I/O-configuration has been

changed and is now incompatible.

10 I/O Communication

Lost Error

No communication on the I/O­module bus.

D301033 1106 BL67-PG-EN4-10

Data Width of the I/O-Modules in the Modbus-Register Area

Bit Name Description

Voltage errors

9 VI too low System supply voltage too low

(< 18 VDC).

8 VI too high System supply voltage too high

(> 30 VDC).

7 VO too low Load voltage too low (< 18 VDC).

6 VO too high Load voltage too high (> 30 V).

4

5 I

too high Overload of the system voltage

sys

4 reserved -

Warnings

3 I/O Cfg Modified

Warning

0 I/O Diags Active

Warning

supply.

At least one I/O-module sends
active diagnostics.

D301033 1106 BL67-PG-EN 4-11

Implementation of MODBUS-TCP

Register 1130h: "Modbus-connection-mode"

This register defines the behavior of the Modbus connections:

Table 9:
register 1130h:
Modbus-Connec
tion-Mode

Bit Name Description

15 to 2 reserved

-

1 MB_ImmediateWritePermission

– 0: With the first write access, a write authorization for the

respective Modbus-connection is requested. If this
request fails, an exception response with exception-code
01h is generated. If the request is accepted, the write
access is executed and the write authorization remains
active until the connection is closed.

– 1:The write authorization for the respective Modbus-

connection is already opened during the establishment of
the connection. The first Modbus-connection thus
receives the write authorization, all following connections
don’t (only if bit 0 = 1).

0 MB_OnlyOneWritePermission

– 0: all Modbus-connections receive the write authorization
– 1: only one Modbus-connection can receive the write

permission. A write permission is opened until a Discon
nect. After the Disconnect the next connection which
requests a write access receives the write authorization.

-

Register 1131h: "Modbus-connection time-out"

This register defines after which time of inactivity a Modbus­connection is closed through a Disconnect.

Register 0×113C and 0×113D:
"Restore Modbus-connection parameter"

Registers 0×113C and 0×113D serve for resetting the parameter­register 0×1120 and 0×1130 to 0×113B to the default settings.

D301033 1106 BL67-PG-EN4-12

Data Width of the I/O-Modules in the Modbus-Register Area

For this purpose, write "0×6C6F" in register 0×113C. To activate the
reset of the registers, write "0×6164" ("load") within 30 seconds in
register 0×113D.

Both registers can also be written with one single request using the
function codes FC16 and FC23.

The service resets the parameters without saving them. This can be
achieved by using a following "save" service.

Register 0×113E and 0×113F:
"Save Modbus-connection parameters"

Registers 0×113E and 0×113F are used for the non-volatile saving
of parameters in registers 0×1120 and 0×1130 to 0×113B.

For this purpose, write "0×7361" in register 0×113E. To activate the
saving of the registers, write "0×7665" ("save") within 30 seconds in
register 0×113F.

Both registers can also be written with one single request using the
function codes FC16 and FC23.

4

D301033 1106 BL67-PG-EN 4-13

Implementation of MODBUS-TCP

The Service-Object

The service-object is used to execute one-time or acyclic services.
It is an acknowledge service which may serve, for example, to
parameterize an I/O-module.

2000h 2080h 20FFh

service request area service response area

The service request area allows write access, the service response
area only read access.

 Service request area

2000h 2001h 2002h 2003h 2004h 2005h 20FFh

service
no.

The register service no. in the request area can contain a user
defined value which is deleted after the execution of the service.

The register service code specifies which service is requested.
The register index/addr is optional and the meaning depends on

the particular service.
The register data-reg-count contains, depending on the service,

the number (0 to 122) of the transferred or of the requested data
registers.

Depending on the service, the optional data area can contain addi­tional parameters and/or other data to be written.

 Service response area

2080h 2081h 2082h 2083h 2084h 2085h 20FFh

service
no.

reservedservice

code

result service

code

index/
addr

index/
addr

data­reg­count

data­reg­count

optional data
(0 to122 regis­ters)

optional data
(0 to 122 regis­ters)

D301033 1106 BL67-PG-EN4-14

The Service-Object

After the execution of a request, the registers service-no., service
code

values in the request area.

Note

The service no. is thus used for a simple handshake on the applica­tion level. The application increases the service no. with every re­quest. The service is blocked, until the service number in the request
area matches the service number in the response area.

The register result shows whether the execution was successful or
not.

The register data-reg-count contains the number of data registers
(0 to 122).

The optional Data area can contain, depending on the service, the
requested data.

Supported service numbers::

and index/addr in the response area contain a copy of the

4

Table 10:
Supported service
numbers:

Service code Meaning

0×0000 no function

0×0003 indirect reading of registers

0×0010 indirect writing of registers

A service request may have the following results:

Table 11:
results of the
service request

Service code Meaning

0×0000 error free execution of service

0×FFFE service parameters

incorrect/ inconsistent

0×FFFF service code unknown

D301033 1106 BL67-PG-EN 4-15

Implementation of MODBUS-TCP

Note

The services "indirect reading of registers" and "indirect writing of
registers " offer an additional possibility to access any Modbus
register.

Current Modbus-masters support only a limited number of register­areas that can be read or written during the communication with a
Modbus-server. These areas can not be changed during operation.

In this case, the services mentioned above enables non-cyclic ac­cess to registers.

"Indirect reading of registers"

1 to 122 (Count) Modbus-registers are read, starting with address
x (Addr).

 service-request

2000h 2001h 2002h 2003h 2004h 2005h 207Fh

service
no.

 service-response

2080h 2081h 2082h 2083h 2084h 2085h 20FFh

service
no.

"Indirect writing of registers"

1 to 122 (Count) Modbus-registers are written, starting with address
x (Addr).

 service-request

2000h 2001h 2002h 2003h 2004h 2005h 207Fh

service
no.

0x0000 0x0003 Addr Count reserved

result 0x0003 Addr Count register contents

0x0000 0x0010 Addr Count register contents

D301033 1106 BL67-PG-EN4-16

The Service-Object

 service-response

2080h 2081h 2082h 2083h 2084h 2085h 20FFh

service
no.

result 0x0010 Addr Count reserved

4

D301033 1106 BL67-PG-EN 4-17

Implementation of MODBUS-TCP

Mapping: Input-Discrete- and Coil-Areas

Function codes FC1 ("Read Coils"), FC2 ("Read Discrete Inputs"),
FC 5 ("Write Single Coil") and FC15 ("Write Multiple Coils") allow
single-bit access to in- and output data.

The data mapping in these areas is the following:

 Mapping: input-discrete-area

All digital inputs are stored in this area (offset "0").

 Mapping: Coil-area

All digital outputs are stored in this area (offset "0").

Note

In addition to that, digital in- and outputs can also be accessed via
the packed process data, page 4-7 within the Modbus registers of
the gateway.
In the Modbus registers, the digital I/O data are stored with a vari­able offset, depending on the station’s I/O-configuration.

D301033 1106 BL67-PG-EN4-18

Mapping the Modbus Registers

Mapping the Modbus Registers

Figure 29:
Mapping the
Modbus registers

PC or PLC BL67-PG-EN

MODBUS registers

Inputs:
Read only access

4000

hex

4001

hex

4002

hex

4003

hex

...

43FF

hex

MODBUS registers

Outputs:
Read and write access

4400

hex

4401

hex

4402

hex

4403

hex

...

47FF

hex

BL67-registers

4

Output register 0

Output 1register
Output 2register

Output 3register
...

Output 1023register

Input 0register

Input 1register
Input 2register

Input 3register
...

Input 1023register

D301033 1106 BL67-PG-EN 4-19

Implementation of MODBUS-TCP

Implemented Modbus Functions

The BL67 gateway for Ethernet supports the following functions for
accessing process data, parameters, diagnostics and other
services.

Table 12:
Implemented
functions

Function Codes

No. Function

Description

1 Read Coils

Serves for reading multiple output bits.

2 Read Discrete InputS

Serves for reading multiple input bits

3 Read Holding Registers

Serves for reading multiple output registers

4 Read Input Registers

Serves for reading multiple input registers

5 Write Single Coil

Serves for writing single output bits

6 Write Single Register

Serves for writing single output registers

15 Write Multiple Coils

Serves for writing multiple output bits

16 Write Multiple Registers

Serves for writing multiple output registers

23 Read/Write Multiple Registers

Serves for reading and writing multiple registers

D301033 1106 BL67-PG-EN4-20

Parameters of the Modules

Parameters of the Modules

Digital input modules

 BL67-4DI-PD

Table 13:
Module
parameters

A Default­setting

Byte Bit Parameter

name

0 0 to 3input filter

channel 0 to 3

Value

– Meaning

0 = deactivate A:

– input filter: 0,25 ms.

4

1 = activate:

– input filter: 2,5 ms

1 0 to 3digital input

channel 0 to 3

0 = normal A:

– input signal not inverted.

1 = inverted:

– input signal inverted, conver-

sion of the effective signal direc­tion for sensors

2 0, 1 operation mode

group 1/ 2

0 = normal

1 = open circuit monitoring
Group A (channel 0 and 2)
Group B (channel 2 and 3).

D301033 1106 BL67-PG-EN 4-21

Implementation of MODBUS-TCP

 BL67-8DI-PD

Table 14:
Module
parameters

A Default­settings

Byte Bit Parameter

name

0 0 to 7input filter

channel 0 to 7

Value

– Meaning

0 = deactivate A:

– input filter: 0,25 ms.

1 = activate:

– input filter: 2,5 ms

1 0 to 7digital input

channel 0 to 7

0 = normal A:

– input signal not inverted.

1 = inverted:

– input signal inverted, conver-

sion of the effective signal direc­tion for sensors

2 0, 1,

operation mode

2, 3

group 1 to 4

0 = normal

1 = open-circuit monitoring:
Group A (channel 0 and 4)
Group B (channel 1 and 5)
Group C (channel 3 and 6)
Group D (channel 4 and 7).

D301033 1106 BL67-PG-EN4-22

Parameters of the Modules

Analog input modules

 BL67-2AI-I (1 byte parameter per channel)

Table 15:
Module
parameters

A Default­settings

Table 16:
Module
parameters

A Default­settings

Byte Bit Parameter

name

0/1 0 current mode 0 = 0...20 mA A

1 value

representation

Value

– Meaning

4

1 = 4...20 mA

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

2 diagnosis 0 = activate A

1 = deactivate

3 channel 0 = activate A

1 = deactivate

 BL67-2AI-V (1 byte parameter per channel)

Byte Bit Parameter

name

Value

– Meaning

0/1 0 voltage mode 0 = 0...10 V A

1 value

representation

1 = -10...+10 V

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

2 diagnosis 0 = activate A

1 = deactivate

3 channel 0 = activate A

1 = deactivate

D301033 1106 BL67-PG-EN 4-23

Implementation of MODBUS-TCP

 BL67-2AI-PT (2 byte parameter per channel)

Table 17:
Module
parameters

A Default­settings

Byte Bit Parameter

name

0/2 0 mains

suppression

1 value

representation

Value

– Meaning

0 = 50 Hz A

0 = 60 Hz

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

2 diagnosis 0 = release A

1 = block

3 channel 0 = activate A

1 = deactivate

7 to 4element 0000 = PT100, -200...850 °CA

0001 = PT100, -200...150 °C
0010 = NI100, -60...250 °C
0011 = NI100, -60...150 °C
0100 = PT200, -200...850 °C
0101 = PT200, -200...150 °C
0110 = PT500, -200...850 °C
0111 = PT500, -200...150 °C
1000 = PT1000, -200...850 °C
1001 = PT1000, -200...150 °C
1010 = NI1000, -60...250 °C
1011 = NI1000, -60...150 °C
1100 = resistance, 0...100 Ω
1101 = resistance, 0...200 Ω
1110 = resistance, 0...400 Ω
1111 = resistance, 0...1000 Ω

1/3 0 measurement

mode

0 = 2-wire A

1 = 3-wire

D301033 1106 BL67-PG-EN4-24

Parameters of the Modules

 BL67-2AI-TC (2 byte parameter per channel)

Table 18:
Module
parameters

A Default­settings

Byte Bit Parameter

name

0/1 0 mains

suppression

1 value

representation

Value

– Meaning

0 = 50 Hz A

0 = 60 Hz

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

4

2 diagnosis 0 = release A

1 = block

3 channel 0 = activate A

1 = deactivate

7 to 4element 0000 = type K, -270...1370 °CA

0001 = type B, +100...1820 °C
0010 = type E, -270...1000 °C
0011 = type J, -210...1200 °C
0100 = type N, -270...1300 °C
0101 = type R, -50...1760 °C
0110 = type S, -50...1540 °C
0111 = type T, -270...400 °C
1000 = ± 50 mV
1001 = ± 100 mV
1010 = ± 500 mV
1011 = ± 1000 mV
... reserved

D301033 1106 BL67-PG-EN 4-25

Implementation of MODBUS-TCP

 BL67-4AI-V/I (1 byte parameter per channel)

Table 19:
Module
parameters

A Default­settings

Byte Bit Parameter

name

Value

– Meaning

0 to 3 0 range 0 = 0...10 V/ 0...20 mA A

1 value

representation

1 = -10...+10 V/ 4...20 mA

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

2 diagnosis 0 = release A

1 = block

3 channel 0 = activate A

1 = deactivate

4 operation mode 0 = voltage A

1 = current

D301033 1106 BL67-PG-EN4-26

Parameters of the Modules

Digital output modules

 BL67-16DO-0.1A-P

Tabelle 20:
Module parame­ters

A default­settings

Byte Bit Parameter

name

0 0 Open circuit

current LSB
(Channel 0 to 7)

1 + 2reserved

3 Open circuit

current MSB
(Channel 8 to

15)

4 Short-circuit

current LSB
(Channel 0 to 7)

5 + 6reserved

7 Short-circuit

current MSB
(Channel 8 to

15)

Value

– Meaning

0 to 12 A

– current below which an open

circuit diagnosis is generated:
"Value" × 10 mA

0 to 12 A

– current below which an open

circuit diagnosis is generated:
"Value" × 10 mA

0 A to 12

– current above which a short-

circuit diagnosis is generated:
"Value" × 10 mA.

0 A to 12

– current above which a short-

circuit diagnosis is generated:
"Value" × 10 mA.

4

1 0 DiaOverCur 0 = short-circuit diagnosis off

1 = short-circuit diagnosis on A

1 DiaOpeLoa 0 = open circuit diagnosis off A

1 = open circuit diagnosis on

2 to 7reserved

D301033 1106 BL67-PG-EN 4-27

Implementation of MODBUS-TCP

Analog output modules

 BL67-2AO-I

Table 21:
Module
parameters

A Default­settings

Byte Bit Parameter

name

Value

– Meaning

0 0 current mode 0 = 0...20 mA A

1 value

representation

1 = 4...20 mA

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

2 reserved

3 channel 0 = activate A

1 = deactivate

4 to 7reserved

1 substitute value

low byte

2 substitute value

high byte

The substitute value will be trans­mitted if the respective parameters
of the gateway have been set to
"output substitute value".

D301033 1106 BL67-PG-EN4-28

Parameters of the Modules

 BL67-2AO-V

Table 22:
Module
parameters

A Default­settings

Byte Bit Parameter

name

Value

– Meaning

0 0 voltage mode 0 = 0...10 V A

1 value

representation

1 = -10...+10 V

0 = Integer (15 bit + sign) A

1 = 12 bit (left justified)

4

2 reserved

3 channel 0 = activate A

1 = deactivate

4 to 7reserved

1 substitute value

low byte

2 substitute value

high byte

The substitute value will be trans­mitted if the respective parameters
of the gateway have been set to
"output substitute value".

D301033 1106 BL67-PG-EN 4-29

Implementation of MODBUS-TCP

Digital combi modules

 BL67-4DI4DO-PD

Table 23:
Module
parameters

A Default­settings

Byte Bit Parameter

name

0 0 to 3input filter

channel 0 to 3

Value

– Meaning

0 = deactivate A:

– input filter: 0,25 ms.

1 = activate:

– input filter: 2,5 ms

1 0 to 3digital input

channel 0 to 3

0 = normal A:

– input signal not inverted.

1 = inverted:

– input signal inverted, conver-

sion of the effective signal direc­tion for sensors

2 0 to 3 output at

overcurrent
channel 4 to 7

0 = automatic recovery A:

– the output switches-on auto-

matically after a short-circuit

1 = controlled recovery:

– the output is manually

switched-off and on again.

D301033 1106 BL67-PG-EN4-30

Parameters of the Modules

 BL67-8XSG-PD

Table 24:
Module
parameters

A Default­settings

Byte Bit Parameter

name

0 0 to 7input filter

channel 0 to 7

Value

– Meaning

0 = deactivate A:

– input filter: 0,25 ms.

4

1 = activate:

– input filter: 2,5 ms

1 0 to 7digital input

channel 0 to 7

0 = normal A:

– input signal not inverted.

1 = inverted:

– input signal inverted, conver-

sion of the effective signal direc­tion for sensors

2 0 to 7 output at

overcurrent
channel 0 to 7

0 = automatic recovery A:

– the output switches-on auto-

matically after a short-circuit

1 = controlled recovery:

– the output is manually

switched-off and on again.

3 0 to 7 output 0 = deactivate

1 = activate:

– selective activation of outputs

of the module

D301033 1106 BL67-PG-EN 4-31

Implementation of MODBUS-TCP

Technology modules

 BL67-1RS232

Table 25:
Module
parameters

A Default­settings

Byte Bit Parameter

name

Value

– Meaning

0 3 to 0data rate 0000 = 300 bps

0001 = 600 bps
0010 = 1200 bps
0100 = 2400 bps
0101 = 4800 bps
0110 = 9600 bps A
0111 = 14400 bps
1000 = 19200 bps
1001 = 28800 bps
1010 = 38400 bps
1011 = 57600 bps
1100 = 115200 bps
... reserved

5,4 reserved -

6 Disable

ReducedCtrl

Constant setting:
– The diagnosis messages are set

in Byte 6 of the process input data
(independent of "diagnostic").
Byte 6 of the process output data
contains two bits which may set
to flush the transmit- or the
receive-buffer.

– Byte 7 contains the status- or the

control-byte.

– Bytes 0 to 5 contain the user data.

7 diagnosis 0 = release A

1 = block

D301033 1106 BL67-PG-EN4-32

Parameters of the Modules

A Default-

settings

Byte Bit Parameter

name

1 0 stop bits 0 = 1 bit A

Value

– Meaning

1 = 2 bit

2,1 parity 00 = none

4

01 = odd A

– The number of the bits set (data

bits and parity bit) is odd.

10 = even

– The number of the bits set (data

bits and parity bit) is even.

3 data bits 0 = 7 A

– The number of data bits is 7.

1 = 8

– The number of data bits is 8.

5,4 data flow

control

00 = none A

– the data flow control is deacti-

vated

01 = XON/XOFF

– Software-Handshake

(XON/XOFF) is activated

10 = RTS/CTS

– Hardware-Handshake

(RTS/CTS) is activated.

7,6 reserved

2 XON-character This character is used to start the

data transfer of the data terminal
device (DTE) when the software­handshake is activated

3 XOFF-character This character is used to stop the

data transfer of the data terminal
device (DTE) when the software­handshake is activated

D301033 1106 BL67-PG-EN 4-33

Implementation of MODBUS-TCP

 BL67-1RS485/422

Table 26:
Module
parameters

A Default­settings

Byte Bit Parameter

name

Value

– Meaning

0 3 to 0 data rate 0000 = 300 bps

0001 = 600 bps
0010 = 1200 bps
0100 = 2400 bps
0101 = 4800 bps
0110 = 9600 bps A
0111 = 14400 bps
1000 = 19200 bps
1001 = 28800 bps
1010 = 38400 bps
1011 = 57600 bps
1100 = 115200 bps
... reserved

4 Select RS485 0 =

– parameterization as RS4222

1 =

– parameterization as RS485

5 reserved

6 Disable

ReducedCtrl

Constant setting:
– The diagnosis messages are set

in Byte 6 of the process input data
(independent of "diagnostic").
Byte 6 of the process output data
contains two bits which may set
to flush the transmit- or the
receive-buffer.

– Byte 7 contains the status- or the

control-byte.

– Bytes 0 to 5 contain the user data.

D301033 1106 BL67-PG-EN4-34

Parameters of the Modules

A Default-

settings

Byte Bit Parameter

name

0 7 diagnosis 0 = release A

Value

– Meaning

1 = block

1 0 stop bits 0 = 1 bit A

4

1 = 2 bit

2,1 parity 00 = none

01 = odd A

– The number of the bits set (data

bits and parity bit) is odd.

10 = even

– The number of the bits set (data

bits and parity bit) is even.

3 data bits 0 = 7 A

– The number of data bits is 7.

1 = 8

– The number of data bits is 8.

D301033 1106 BL67-PG-EN 4-35

Implementation of MODBUS-TCP

 BL67-1SSI

Table 27:
Module
parameters

A Default­settings

Byte Bit Parameter

name

Value

– Meaning

0 4 to 0reserved

5 Encoder data

cable test

0 = activate A

– ZERO test of data cable.

0 = deactivate

– After the last valid bit, a ZERO

test of the data cable is not
carried out.

7,6 reserved

1 3 to 0Number of

invalid bits
(LSB)

0000 to 1111:
Number of invalid bits on the LSB
side of the position value supplied
by the SSI encoder. The meaningful
word width of the position value
transferred to the module bus
master is as follows:
SSI_FRAME_LEN ­INVALID_BITS_MSB ­INVALID_ BITS_LSB.
The invalid bits on the LSB side are
removed by shifting the position
value to the right, starting with the
LSB.(Default 0 bit = 0x 0).
INVALID_BITS_MSB
+INVALID_BITS_LSB must always
be less than SSI_FRAME_LEN.

D301033 1106 BL67-PG-EN4-36

Parameters of the Modules

A Default-

settings

Byte Bit Parameter

name

1 6 to 4Number of

invalid bits
(MSB)

Value

– Meaning

Number of invalid bits on the MSB
side of the position value supplied
by the SSI encoder. The meaningful
word width of the position value

4

transferred to the module bus
master is as follows:
SSI_FRAME_LEN ­INVALID_BITS_MSB ­INVALID_BITS_LSB.
The invalid bits on the MSB side are
zeroed by masking the position
value. INVALID_BITS_MSB +
INVALID_BITS_LSB must always
be less than SSI_FRAME_LEN.
Default: 0 = 0hex

7 reserved

2 3 to 0data rate 0000 = 1000000 bps

0001 = 500000 bps A
0010 = 250000 bps
0011 = 125000 bps
0100 = 100000 bps
0101 = 83000 bps
0110 = 71000 bps
0111 = 62500 bps
... reserved

7 to 4reserved

D301033 1106 BL67-PG-EN 4-37

Implementation of MODBUS-TCP

A Default-

settings

Byte Bit Parameter

name

3 5 to 0data frame bits 00000 to 100000

Value

– Meaning

Number of bits of the SSI data
frame. SSI_FRAME_LEN must
always be greater than
INVALID_BITS.
Default: 25 = 19hex

6 reserved

7 data format binary coded A

– SSI encoder sends data in

binary code

GRAY coded

– SSI encoder sends data in Gray

code

D301033 1106 BL67-PG-EN4-38

Parameters of the Modules

 BL67-1CVI

Table 28:
Parameter
BL67-1CVI

CfgNode 1 Configuration of the first connected

node (see Table 29:)

Parameter name Meaning

...

4

CfgNode 8 Configuration of the eighth connected

node (see Table 29:)

GuardTime Setting the guard time in steps of

100ms (default 3 = 300 ms)

Life Time Factor default 3

Config Different configuration settings (see

Table 30:)

D301033 1106 BL67-PG-EN 4-39

Implementation of MODBUS-TCP

Table 29:
Configuration
possibilities of the
CANopen-Nodes

Bit Parameter

name

Value

– Meaning

0 NodeActive 0 = inactive/ not present A

1 = active

1 NodeGuarding 0 = inactive A

1 = active

– Node guarding is activated.

2 to 4 InLen 000 = 0 bit A

001 = 4 bit
010 = 8 bit
011 = 12 bit
100 = 16 bit
101 = 24 bit
110 = 32 bit
111 = reserved

5 to 7 OutLen 000 = 0 bit A

001 = 4 bit
010 = 8 bit
011 = 12 bit
100 = 16 bit
101 = 24 bit
110 = 32 bit
111 = reserved

D301033 1106 BL67-PG-EN4-40

Parameters of the Modules

Table 30:
Configuration
possibilities for
CANopen

Bit Parameter

name

Value

Meaning

0 to 2 BaudRate 000 = 1000 k

001 = reserved
010 = 500 k
011 = 250 k
100 = 125 k A
101 = 50 k
110 = 20 k
111 = 10 k

3 Termination 0 = no terminating resistor A

1 = terminating resistor active

– Activation of the terminating

resistor.

4 to 7 reserved

4

D301033 1106 BL67-PG-EN 4-41

Implementation of MODBUS-TCP

Diagnostic Messages of the Modules

Power supply modules

 BL67-PF-24VDC

Table 31:
BL67-PF-24VDC

Table 32:
BL67-4DI-PD

Diagnostic

Bit Diagnostic message

byte

n 0 undervoltage V

1 undervoltage V

I

O

2 overcurrent II (current consumption too high)

Digital input modules

 BL67-4DI-PD

Diagnostic

Bit Diagnostic message

byte

n 0 overcurrent sensor 1 (channel 0)

1 overcurrent sensor 2 (channel 1)

2 overcurrent sensor 3 (channel 2)

3 overcurrent sensor 4 (channel 3)

n + 1 0 open circuit K1 (channel 0 and 2)

1 open circuit K2 (channel 1 and 3)

D301033 1106 BL67-PG-EN4-42