Emsa HS500E RAW TCP/IP Command & Response Examples, AW T C P / I P C o m m a n d E x a m p l e

Page 58

C H A P T E R 7 : R A W T C P / I P P R O T O C O L

7.2RAW TCP/IP COMMAND & RESPONSE EXAMPLES

In RAW TCP/IP, RFID commands issued by the Host resemble Modbus TCP commands; however RAW TCP/IP commands require an additional two-byteheader (which includes 0xFF in the MSB, and 0x01 - the Node ID of the HS500E - in the LSB). These two bytes are inserted in front of the standard Modbus TCP command string. RAW TCP/IP response packets also contain the same additional two-byte header; 0xFF in the MSB and the 0x01 in the LSB. The HS500E handles all handshaking tasks.

7 . 2 . 1 R AW T C P / I P C o m m a n d E x a m p l e

In the following example, a 14-byte command has been issued to the HS500E (Node 01), instructing it to read 6 bytes from a tag within RF range starting at tag address 0x0001. A Timeout Value of two seconds has been set for the completion of the command.

Word

MSB

LSB

Description

 

 

 

 

01

FF

01

“Raw TCP/IP” 2-byte Command Header -

 

 

 

0xFF and Node 01

 

 

 

 

02

00

06

2-byte value indicating Overall Length

 

 

 

measured in number of “words,” not

 

 

 

including the preceding 2-byte header

 

 

 

 

03

AA

05

MSB = AA

 

 

 

LSB = Command ID: 02 - Read Data

 

 

 

Command

 

 

 

 

04

00

01

MSB = 00

 

 

 

LSB = Node ID: 01 (Must be same as

 

 

 

specified in header)

 

 

 

 

05

00

32

2-byte Timeout Value measured in .10

 

 

 

second increments (0x0032 = 50 x .10 or 5

 

 

 

seconds)

 

 

 

 

06

00

01

2-byte Start Address for the Read: 0x0001

 

 

 

 

07

00

06

2-byte Read Length: 6 bytes

 

 

 

 

H S 5 0 0 E – O P E R A T O R ’ S M A N U A L

P / N : 1 7 - 1 3 0 5 R E V 0 2 ( 1 2 - 0 5 )

 

P A G E 5 8 O F 8 2

Image 58
Contents Page Industrial Ethernet Antenna 800 626-3993 toll free 831 438-7000 office 831 438-5768 faxHS500E FCC Compliance Notice FCC PartTable of Contents RAW TCP/IP Command Example RAW TCP/IP Response Example Syntax Errors RF Response ErrorsModbus TCP Command Structure Modbus TCP Response Structure Html Server and OnDemand OverviewAppendix B Ascii Chart Appendix C ETHERNET/IP Object Model O m pa n y B a c k g r o u n d Getting StartedIntroduction F I D E r v i e wH o S h o u l d R e a d t h i s M a n u a l ? About this ManualE X N o ta t i o n Dimensions & Diagrams I m e n s i o n s To p V i e wDimensions Side View I m e n s i o n s S i d e V i e wDimensions Rear View Power & Ethernet E D D e s c r i p t i o n s LED DescriptionsN t e n n a R e a d R a n g e F r o n t V i e w N t e n n a R e a d R a n g e S i d e V i e w Installation & Setup Installation P r e c a u t i o n sInstall i n g t h e H S 5 0 0 E E Fault I P a d d r e s s IP ConfigurationIP Address Configuration Html ServerHtml Server- Main Html Server IP ConfigurationEnter new IP address values in the fields provided Pinging the HS500E Ping IP AddressCommand Structure Rfid CommandsT E 06 + See the .2.1 Rfid Command Table for Complete listM m a n d P a c k e t S t r u c t u r e Ta b l e SecondsS p o n s e P a c k e t S t r u c t u r e Ta b l e Command Echo isByte RF Error Counter Word, Node ID EchoReturned Data Bytes 1 Retry Counter in the MSBReturned Data Bytes 3 Rfid Commands I D C o m m a n d s Ta b l eField Name Word ValueReturned Data bytes 1 MSB = RF Retry Counter 0100 LSB = Reserved Total TimeReturned Data bytes 3,4 I T E D a T a 0006 0003 0101 Xxxx L L T a G 0006 0005 0101 XxxxM M a N D F S T L E D S / G E T I N F O 0006 F100 0001 0000Command F1 Test LEDs / Read Info Response Structure Word Applicable when word 2 is F203Word Field Name ValueWord # Field Name MSB = RF Retry Counter LSB = Reserved Total TimeI T E I P a D D R E S S This example sets the IP address of the HS500E toAppendix a IP Address Reset HS500E Factory Default IP AddressThere is no response for this command S E T B a T T E R Y C O U N T E RY n t a x Error s Error CodesError Types F R e s p o n s e Error sWhat is Ethernet/IP? Chapter ETHERNET/IP Protocolƒ Configure the HS500E via OnDemand Node Configuration Steps to Configure the HS500EHS500E Node Configuration T M L S e r v e r a n d O n D e m a n d O v e r v i e wOnDemand Configuration Controller Settings OnDemand Node 01 ConfigurationUse this page to modify the settings for Node Write SettingsRead Settings Write Tag Name / Write File AddressG E 4 4 O F 8 Configuring PLC Controller Tags O n t r o l l e r Ta g s S u m m a r yChecking Ondemand Status OnDemand StatusUsing the HS500E with Rslogix Screen shot of RSLogixT h e r n e t / I P H a n d s h a k i n g T h e r n e t / I P H a n d s h a k i n g E x a m p l eG E 4 9 O F 8 Write Tag where responses are written by the HS500E Html Server and Ondemand PLC Support Words / 200 Bytes Modbus TCP OverviewO d b u s T C P C o m m a n d S t r u c t u r e 400065536 Modbus TCP Command Structure32775 Node 01 Memory Map Consume RegistersModbus TCP Response Structure O d b u s T C P R e s p o n s e S t r u c t u r e40001 Node 33 Memory Map Produce RegistersModbus TCP Handshaking O s t / H S 5 0 0 E M o d b u s T C P H a n d s h a k i n gG E 5 6 O F 8 Chapter RAW TCP/IP Protocol Command RAW TCP/IP Command & Response ExamplesLSB = Command ID 02 Read Data AW T C P / I P C o m m a n d E x a m p l eAW T C P / I P R e s p o n s e E x a m p l e Appendix a IP Address Reset IP Address Reset ButtonAscii Chart Appendix BG E 6 2 O F 8 Appendix C ETHERNET/IP Object Model ETHERNET/IP Required Objects Class Attributes Name Data Type Data Value Access RuleInstance Attributes Name Data Type Data Value Access Rule D e n t i t y O b j e c t 0 x 0 1 1 I n s t a n c eCommon Services Implemented for Service Name Code Status Word Bit Bit =S s e m b l y O b j e c t 0 x 0 4 3 I n s ta n c e s Class Attributes Name Data Data Value Access Rule TypeE s s a g e R o u t e r O b j e c t 0 x 0 Bitmap of Produce Instances with DataNode 1 Serial Produce Data WORD100 All 0’s Produce Data Sequence NumberNode 1 Serial Produce Data Size Node Serial Produce Data SizeNode Serial Consume Data Size Consume Data Sequence NumberNode Serial Consume Data WORD100 All 0’s Instance 0x81 Attributes Heartbeat Instance Input Only Instance 0x80 Attributes Configuration InstanceYes SetAttributeSingle O n n e c t i o n M a n a g e r O b j e c t 0 x 0 C P O b j e c t 0 x F 5 1 I n s ta n c eGateway Address Interface Configuration Get Structure IP AddressNetwork Mask Name Server100 Get Interface Flags T h e r n e t L i n k O b j e c t 0 x F 6 1 I n s t a n c eInterface Speed Physical Address Usint Array6 GetS t a n c e s Vendor Specific Objects5 0 0 E C o n s u m e D a t a O b j e c t 0 x 6 4 3 Bit 0 Instance 1 … Bit 31 InstanceConsume Data 10,000-10,249 Consume Data 8,000-8,249Consume Data 9,000-9,249 Consume Data 20,000-20,249Yes Get Attribute Single Yes Set Attribute Single5 0 0 E P r o d u c e D a t a O b j e c t 0 x 6 5 3 Produce Data 20,000-20,249 Produce Data 9,000-9,249Produce Data 10,000-10,249 122 Produce Data 30,000-30,249G E 7 8 O F 8 D e m a n d O b j e c t 0 x 6 7 1 0 I n s ta n c e s OnlyRead Tag Name ControlLogix G E 8 1 O F 8 EMS Warranty