Toshiba IPE002Z instruction manual Modbus TCP server, Modbus TCP frames, Drive Modbus servers

Page 65

E6581741

8. Modbus TCP server

8.1. Modbus TCP frames

Modbus TCP frames consist of a header and a Modbus request.

Header format:

Byte	Description			Comments
0	Transaction		high order
1	identifier		low order
2	Protocol		high order	This identifier always equals 0.
3	identifier		low order	This identifier always equals 0.
3	identifier		low order
4	Length of data		high order	Number of bytes in the Modbus request +1. The frame length is
5	Length of data		low order	always less than 256 bytes, the value of the significant byte
				therefore equals 0.
6	Destination identifier (Unit ID)
7	Modbus request		function
	code

The frame header returned by the VF-MB1/S15 server is identical to that of the frame sent by the client.

8.2. Drive Modbus servers

The destination identifier (Unit ID) is used to access drive Modbus TCP servers:

Unit ID	Modbus TCP server	Accessible parameters
0-248	Variable speed drive	See the VF-MB1/VF-S15 instruction manual.
251	Option board
255	IO Scanner	See the “IO Scanner” section.

8.3. List of Modbus functions supported

Function code		Modbus name	Description	Size of data
03		Read Holding Registers	Read N output words	63 words max.
06		Write Single Register	Write one output word	-
16	(0x10)	Write Multiple Registers	Write N output words	63 words max.
23	(0x17)	Read/Write Multiple Registers	Read/write N words	20/20 words max.
			(IO Scanning)
43	(0x2B)	Read Device Identification	Identification	-

- 64 -

Image 65

Contents Tosvert VF-MB1/S15 Network control IntroductionHandling in general Table of Contents 10.3 10.210.4 12.1Overview Connector to the inverter LED indicator SeeNames and functions OutlineEthernet switch RJ45 connector pin layoutExample of connection to an EtherNet/IP and Modbus TCP Daisy chain topology Star topologyLED indicator Communication parameters Parameters0,0 Display only These fields are effective settings at c504 = 0.0Monitor of the EtherNet error No error/clear error C536 Chars No Parameter Character Ex Ascii Ex Details of the parameter setting Device name c081-c096C081 ‘V’ 56H C082 ‘F’ 46H C083 ‘M’ C084 ‘B’ 42H C085 ‘1’ 31H C086 ‘-‘Assigning IP addresses c504, c505-c516 C504 IP mode CommentsCase of EtherNet/IPTM protocol Network error detection c100 c103, c523Parameter Value VF-MB1/S15EtherNet/IP Master Byte ValueReset No data is returned from the drive Frequency priority Emergency stop Always enable, E trip Fault resetBit Function Forced DC Braking Jog runReserved Electric power quantity 4.3. fa23 Communication commandSpecified data output 4.4. fa07 frequency reference from internal optionCompleted, not failure stop Emergency stop No emergency Stop statusStandby Initialization 4.9. fd03 Output current FE06 Input terminal function selection 7 f117Output terminal function selection 1A f130 Bit TB Name Function ParameterOutput TB Function select 2A f131 Output TB Function select F132Supported Objects ObjectsClass Code Object Class Hex Dec Instance Services Class ServiceIdentity Object Class AttributesAdapted from document CIP the CIP Networks Library Attribute 5 State DescriptionsBit Called Definition UnsupporteedInstance Attribute Message Router Object0x0E GetAttributeSingle Read one attribute Output Assembly Instance Type Size Assembly ObjectInput Assembly Instance Type Size See belowInstance 1 Attribute Class ServicesConnection Manager Object Motor Data Object Refer to 4.6.1 Run/Stop Event Matrix Control Supervisor ObjectE6581741 State of the drive Control Supervisor State Transition DiagramRun/Stop Event Matrix 0x0E GetAttributeSingle AC/DC Drive Object 0x2AParameter Objects Range Address accessed0x4000-0x4FFF 0x0000-0x0FFF 0x7000-0x7FFF 0xF000-0xFFFF 32767Communication No 0003 Instance ID 0x0E GetAttributeSingle 0x10 SetAttributeSingle 0x0001-0xFFFF65535 Read all attributes Read one attribute Port Object 0xF40x01 GetAttributeAll 0x0E GetAttributeSingle TCP/IP interface Object 0xF5 Number of services Optional service listList of optional service codes Bit 5-31 System reserved Only 16 characters in 64 characters can be set in the drive Ethernet link object 0xF6 Bit 7-31 System reserved Shorts Bit 7-31System reserved Instance 2 AttributeOutput Instance Configuration of the assembliesInput Instance Instance name Number Hex SizeInstance 70 CIP basic speed control input Instance 20 CIP basic speed control outputInstance 71 CIP extended speed control input Instance 21 CIP extended speed control outputInstance 150 Native drive input Instance 100 Native drive outputInstance 100 mapping Byte Bit Instance 150 mapping Byte Bit⑤ Fault reset Instance Byte Hex ④ Preset speed 1 with forward running sr1 Instance Byte HexExamples of Instance 100/150 ① Stop Byte Hex ② Forward running 60Hz Instance Byte 15 14 13 12 HexInstance 151 Native drive input Instance 101 Native drive outputInstance 101 mapping Byte Bit Instance 151 mapping Byte BitOutput Instance 0x0268 Input Instance F268 is 60.0Hz 0x1770 Examples of Instance 101/151Output Instance 0x0003 Input Instance Cmod is 0x0000 Instance 152 Native drive input Instance 102 Native drive outputInstance 102 mapping Bit Byte Instance 152 mapping Bit ByteInstance 105 mapping Bit Byte Instance 105 Toshiba specific outputInstance 155 Toshiba specific input Output Instance 0x0000 0x0003 Input Instance Cmod is Examples of Instance 105/155Create a new project About EDS fileIntegration in RSLogix Add a EtherNet/IP scanner to the I/O configuration E6581741 Configure the VF-MB1/S15 EtherNet/IP module E6581741 Download the program to the PLC Select the Download Once again, select the Download Edit the I/O scan data E6581741 E6581741 Modbus TCP frames Modbus TCP serverDrive Modbus servers List of Modbus functions supportedIllegal Function Illegal Data Address Illegal Data Value 0x03 Read Holding Registers functionFunction Code = 83h Exception Code = Function Code = 86h Exception Code = 0x06 Write Single Register functionByte Meaning 0x10 Write Multiple Registers function Function Code = 97h Exception Code = 0x17 Read/Write Multiple Registers functionFunction Code = 17h 0x2B Read Device identification function Function Code = ABh Exception Code = Obj Length 18-24 Value IPE002ZObj Length 27-30 Value 0106 Exception response format Parameter data Periodic variables IO Scanning servicePresentation Defining the hardware configuration Example of the setup with PL7Bootp configuration Mode Configuring Modbus messagingPLC Configuring periodic variablesOperation panel Fmod Command & Setpoint selection Local/RemoteEtherNet/IP-Modbus TCP WiringUnusual diagnosis Option errorDisconnection error of network cable WebServer Access to the webserverWeb pages structure State of the drive can be confirmed on this Drive monitor Main menu MonitoringDrive parameters Main menu Monitoring Input the write value to popup window Modbus scanner Main menu Network Setup Network parameters Main menu Network SetupEthIP scanner Main menu Network Setup Administration Main menu Network Setup You can check TCP/IP status on this 88E TCP/IP statistics Main menu Diagnostics