Main
Warnings, Cautions, and Notes as Used in this Publication
Warning
Caution
Note
Contents
Chapter 4 Programming Modbus/TCP Channel Commands...........................................4-1
Contents
Page
Introduction
1
The Ethernet Interface
Ethernet Communications System
Capabilities of the Ethernet Interface
1
Ethernet Interface Ports
Port Descriptions
10Base-T, RJ-45 port
Auto-sensing 10 Base T / 100 Base TX, RJ-45 Port
10Base2, BNC port
Ethernet Media
10Base5 Coax:
10Base2 Coax:
10Base-T:
10Base-F:
1 Special Considerations for Ethernet Interfaces with Embedded Switches
The Station Manager Software
The PC Software Loader
How to Make the System Work
Page
Installation
Installing an IC693CMM321 Ethernet Interface Module
IC693CMM321 Series 90-30 TCP/IP Ethernet Interface (10Base-T Type)
Restart Pushbutton
LED Test:
Restart:
Restart and Enter Maintenance State:
Page
2 Installing the CMM321 in the PLC
CMM321 Installation
2 CMM321 Configuration
Configuring the Interface Using Windows-Based Programming Software
Configuring the Interface Using the Logicmaster 90-30 Configuration Software
CMM321 Configuration Parameters
Status Address:
Status Length: IP Address, Subnet Mask, Gateway IP Address, and Name Server IP Address:
Converter:
Station Manager PortParameters
Data Rate (bps):
Parity: Stop Bits: Flow Control:
Turnaround Delay:
Timeout:
Configuring Full-Duplex Operation
Verifying Proper Power-Up of the CMM321 Powering-up the Ethernet Interface
GFK-1541B Chapter 2 Installation 2-13
IP Address
Waiting for
States of the Series 90-30 CMM321 Ethernet Interface
E
C
F
z
Page
Page
Installing an IC693CPU364 with Embedded TCP/IP Ethernet Interface
IC693CPU364 Series 90-30 CPU Module with Ethernet Interface
LED Test:
Restart:
Restart and Enter Maintenance State:
Page
CPU364 Labels Default Station Address Label
Serial Number Label
Replaceable Surface Mount Fuse
Removing and Installing the Fuse
Installing the CPU364 in the PLC
CPU364 Installation
CPU364 Configuration
Configuring the Interface Using Windows-Based Programming Software.
Configuring the Interface Using the Logicmaster 90-30 Configuration Software
CPU364 Configuration Parameters
Status Length:
IP Address, Subnet Mask, Gateway IP Address, and Name Server IP Address:
Network Time Sync: Selection of the method used to synchronize the real-time clocks over the
AAUI Transceiver Power (Watts):
Page
Verifying Proper Power-Up of the CPU364 Ethernet Interface
GFK-1541B Chapter 2 Installation 2-27
States of the Series 90-30 CPU364 with Embedded TCP/IP Ethernet Interface
Waiting for
E
z
Load
Page
Page
Installing an IC693 CPU374 with Embedded TCP/IP Ethernet Interface
IC693CPU374 Series 90-30 CPU Module with Ethernet Interface
LED Test:
Restart:
Ports on the CPU374 RS-232, RJ-11 Port (Station Manager Port)
Ethernet Ports
CPU374 Labels Default Station Address Label
Serial Number Label
Installing the CPU374 in the PLC
CPU374 Installation
CPU374 Configuration
Configuring the Interface Using Windows-Based Programming Software.
CPU374 Configuration Parameters
Adapter Name:
Status Address:
Status Length:
IP Address, Subnet Mask, and Gateway IP Address :
Network Time Sync: Selection of the method used to synchronize the real-time clocks over the
Data Rate (bps):
Parity: Flow Control:
Advanced User Parameters
Verifying Proper Power-Up of the CPU374 Ethernet Interface
2-38 TCP/IP Ethernet Communications for the Series 90 PLC User's Manual May 2002 GFK-1541B
States of the Series 90-30 CPU374 with Embedded TCP/IP Ethernet Interface
E
C
z
Page
Page
GFK-1541B Chapter 2 Installation 2-41
Installing the IC697CMM742 Ethernet Interface
IC697CMM742 Ethernet Interface
LED Test:
Restart:
Restart and Enter Maintenance State:
Service Option Connector
Ports on the CMM742
RS-232, RJ-11 Port (Station Manager Port)
RS-485, D-Type Port (Software Loader Port)
Page
Installing the CMM742 in the PLC
CMM742 Installation
CMM742 Configuration
Configuring the Interface Using Windows-Based Programming Software
Configuring the Interface Using Logicmaster 90-70 Configuration Software
CMM742 Configuration Parameters
Adapter Name:
IP Address, Subnet Mask, Gateway IP Address, and Name Server IP Address:
Status Address:
Page
Verifying Proper Power-Up of the CMM742
2-52 TCP/IP Ethernet Communications for the Series 90 PLC User's Manual May 2002 GFK-1541B
States of the Series 90-70 CMM742 TCP/IP Ethernet Interface
Maintenance
z
IP Address
E
Page
Page
Programming SRTP Channel Commands
3-2 TCP/IP Ethernet Communications for the Series 90 PLC User's Manual May 2002 GFK-1541B
The Communications Request
Structure of the Communications Request
The Communications Request is made up of the following elements:
Elements of the Communications Request
The figure below illustrates the relationship of these elements:
COMMREQ Function Block
COMMREQ Command Block
SRTP Channel Commands
Advantages of Channel Commands
Status Data
LAN Interface Status Bits (LIS Bits):
Channel Status Bits:
COMMREQ Status Word (CRS Word):
Detailed Channel Status Words (DCS Words):
Operation of the Communications Request
Domain of a TCP connection
Domain of a remote server
COMMREQ Function Block and Command Block
The COMMREQ Function Block
COMM REQ IN FT SYSID TASK
Enable: Control logic for activating the COMMREQ Function Block. IN:
SYSID:
The COMMREQ Command Block
(Word 1) Data Block Length:
(Word 2) WAIT/NOWAIT Flag:
COMMREQ Status Word:
(Word 3) COMMREQ Status Word Memory Type:
(Word 4) COMMREQ Status Word Address Offset: This word contains the offset within the
Channel Commands
Establishing a Channel
Aborting and Re-tasking a Channel
Retrieving Detailed Status on the Channel
Specifying a Network Address
Establish Read Channel (2003)
Example 1 Command BlockBasic Example
(Word 7) Channel Command Number:
(Word 8) Channel Number: Word 8 specifies the channel to be used for the read. This value must
(Word 9) Number of Read Repetitions:
(Word 10) Time Unit for Read Period:
(Word 11) Number of Time Units for Read Period: Word 11 specifies the number of time units
(Word 12) Timeout for Each Read:
(Word 13) Local PLC - Memory Type:
(Word 14) Local PLC - Memory Starting Address: Word 14 determines the starting address in the
(Word 15) Remote PLC - Memory Type:
(Word 16) Remote PLC - Memory Starting Address: Word 16 determines the starting address in
(Word 17) Remote PLC - Number of Memory Units:
(Words 20 23) Remote PLC - IP Address: Words 2023 specify the four integers, one integer
(Words 2427) Remote PLC - Program Name:
(Words 2831) Remote PLC - Program Block Name:
Example 2 Command BlockExample using a Network Address Name
(Words 7 17):
(Words 20-35) Remote PLC - Network Address Name:
(Words 5255) Remote PLC - Program Name:
(Words 5659) Remote PLC - Program Block Name:
Establish Write Channel (2004)
Example 1 Command BlockBasic Example
(Word 7) Channel Command Number:
(Word 8) Channel Number: Word 8 specifies the channel to be used for the write. This value
(Word 9) Number of Write Repetitions:
(Word 10) Time Units for Write Period:
(Word 11) Number of Time Units for Write Period: Word 11 specifies the number of time units
(Word 12) Timeout for Each Write:
(Word 13) Local PLC - Memory Type:
(Word 14) Local PLC - Memory Starting Address:
(Word 15) Remote PLC - Memory Type:
(Word 16) Remote PLC - Memory Starting Address: Word 16 determines the starting address
(Word 17) Remote PLC - Number of Memory Units: Word 17 specifies the amount of data to be
(Word 18) Remote PLC - Network Address Type:
(Words 2023) Remote PLC - IP Address: Words 2023 specify the four integers, one integer
(Words 2427) Remote PLC - Program Name:
(Words 2831) Remote PLC - Program Block Name:
Example 2 Command BlockExample using a Network Address name
(Words 7 17):
(Words 2035) Remote PLC - Network Address Name: Words 2035 specify the Network
(Words 5255) Remote PLC - Program Name:
(Words 5659) Remote PLC - Program Block Name:
Send Information Report (2010)
Example1 Command BlockBasic Example
(Word 7) Channel Command Number:
(Word 8) Channel Number: Word 8 specifies the channel to be used for the send. This value
(Word 9) Number of Send Repetitions:
(Word 10) Time Unit for Send Period:
(Word 11) Number of Time Units for Send Period: Word 11 specifies the number of time units
(Word 12) Timeout for Each Send:
(Word 13) Local PLC - Memory Type:
Page
Example 2 Command BlockExample using a Network Address name
(Word 19) Remote Host - Network Address Length:
(Words 2035) Remote Host - Network Address Name: Words 2035 specify the Network
Abort Channel (2001)
Example Command Block
(Word 7) Channel Command Number:
(Word 8) Channel Number: The channel number specifies the channel to be disconnected (132
Retrieve Detailed Channel Status (2002)
Example Command Block
(Word 7) Channel Command Number:
(Word 8) Channel Number: The channel number in Word 8 specifies the channel whose status is
(Word 9) Local PLC - Memory Type:
(Word 10) Local PLC - Memory Starting Address: Word 10 determines the starting address to
Status Data
Types of Status Data
Description of the Status Data
OK Output of the COMMREQ Function Block (Series 90-70 PLCs Only)
FT Output of the COMMREQ Function Block
LAN Interface Status (LIS) Bits
(Status Bit 1) Port 1 Full Duplex: This bit is set to 1 when Port 1 (or the only port on a module
(Status Bit 2) Port 1 100Mbps: This bit is set to 1 when Port 1 (or the only port on a module that
(Status Bit 8) AAUI (90-30) or AUI/BNC (90-70) Fuse Blown: This bit is set to 1 when a
(Status Bit 9) Any SRTP Channel Error: This bit is set to 1 if there is presently an error on any
(Status Bit 13) LAN OK: This input will be held at the value 1 as long as the Ethernet Interface
(Status Bit 14) Resource Problem:
(Status Bit 16) LAN Interface OK Bit:
Each SRTP channel has a dedicated pair of bits as follows:
Communications Status Words
Format of the COMMREQ Status Word (CRS Word)
Format of the Detailed Channel Status Words (DCS Words)
Major Error Codes
Error Status Major Error Description
Minor Error Codes
Minor Error Codes for Major Error Codes 05H (at Remote Server PLC) and 85H (at Client PLC)
Error Status Service Request Error Description
Minor Error Codes for Major Error Codes 5H and 85H (Continued)
Error Status Service Request Error Description
Minor Error Codes for Major Error Code 11H (at Remote Server PLC)
Error codes common to all GE Fanuc PLCs
Minor Error Codes for Major Error Code 11H (at Remote Server PLC) - Continued
Error codes specific to Series 90-30 CPU374*
Minor Error Codes for Major Error Code 90H (at Client PLC)
Error Status Application Interface Error Description
Section 1: Section 2: Minor Error Codes for Major Error Code 90H (at Client PLC) - Continued
Controlling Communications in the Ladder Program
Essential Elements of the Ladder Program
COMMREQ Example
Page
Troubleshooting Your Ladder Program
FT Output is ON
COMMREQ Status Word is Zero (0) and FT Output is OFF
COMMREQ Status Word is Not One (1)
Monitoring the Communications Channel
Monitoring the COMMREQ Status Word
Monitoring the Channel Error Bit
Monitoring the Data Transfer Bit
Sequencing Communications Requests
Managing Channels and TCP Connections
In Certain Conditions TCP Connections Can Be Totally Consumed
Use Channel Re-Tasking To Avoid Using Up TCP Connections
How To Re-Task a Channel
Programming Modbus/TCP Channel Commands
The Communications Request
Structure of the Communications Request
COMMREQ Function Block
COMMREQ Command Block
Modbus/TCP Channel Commands
Status Data
LAN Interface Status Bits (LIS Bits):
Channel Status Bits:
Operation of the Communications Request
Domain of a channel
Domain of a TCP connection Domain of a remote server
This sequence must be repeated for each read or write request
COMMREQ Function Block and Command Block
The COMMREQ Function Block
COMM REQ IN FT SYSID TASK
Enable: Control logic for activating the COMMREQ Function Block. See Section 5 for tips on
IN:
The COMMREQ Command Block
(Word 1) Data Block Length:
(Word 2) WAIT/NOWAIT Flag:
COMMREQ Status Word:
(Word 3) COMMREQ Status Word Memory Type:
(Word 4) COMMREQ Status Word Address Offset: This word contains the offset within the
Modbus TCP Channel Commands
Open a Modbus/TCP Client Connection (3000)
Command 3000 Example
(Word 7) Channel Command Number:
(Word 8) Channel Number: Word 8 specifies the channel number to allocate for the Modbus/TCP
(Word 9) Address Type:
(Word 10) Length of IP Address:
Close a Modbus/TCP Client Connection (3001)
Command 3001 Example
(Word 7) Channel Command Number: (Word 8) Channel Command Number:
Read Data from a Modbus/TCP Device (3003)
Command 3003 Example 1
(Word 7) Channel Command Number:
(Word 9) Modbus Function Code:
(Word 11) Local PLC Memory Address: Word 11 determines the starting address in the local
(Word 12) Remote Device Address:
(Word 13) Number Registers in Remote Device:
(Word 14) Unit Identifier:
Command 3003, Example 2
(Word 7) Channel Command Number:
(Word 9) Modbus Function Code:
(Word 11) Local PLC Memory Address: Word 11 determines the starting address in the local
(Word 12) Remote Device Address:
Command 3003, Example 3 Read Exception Status
(Word 7) Channel Command Number:
(Word 9) Modbus Function Code:
(Word 11) Local PLC Memory Address: Word 11 determines the starting address in the local
(Word 12) Reserved: (Word 13) Data Size:
Write Data to a Modbus/TCP Device (3004)
Command 3004, Example 1 Set Single Register
(Word 9) Modbus Function Code:
(Word 12) Remote Device Address:
(Word 13) Number Registers in Remote Device:
Command 3004, Example 2 Force Single Coil
(Word 9) Modbus Function Code:
(Word 11) Local PLC Starting Address:
(Word 12) Remote Device Address:
(Word 13). Number Coils in Remote Device: Words 13 specifies the quantity of coils to write to
Command 3004, Example 3 Set Multiple Registers
(Word 9) Modbus Function Code:
(Word 11) Local PLC Starting Address:
(Word 12) Remote Device Address:
(Word 13) Number Registers in Remote Device:
Status Data
Types of Status Data
Description of the Status Data
FT Output of the COMMREQ Function Block
LAN Interface Status (LIS) Bits
Page
Communications Status Words
Major Error Codes
Minor Error Codes
Minor Error Codes for Major Error Codes 90H (Client API Error)
Minor Error Codes for Major Error Code 91H (Remote Server Device Error Codes)
Controlling Communications in the Ladder Program
Essential Elements of the Ladder Program
Page
Page
Page
Page
Page
Page
Troubleshooting a Ladder Program
FT Output is ON
COMMREQ Status Word is Zero (0) and FT Output is OFF
COMMREQ Status Word is Not One (1)
Monitoring the Communications Channel
Monitoring the COMMREQ Status Word
Monitoring the Channel Open Bit
Sequencing Communications Requests
Ethernet Global Data
Overview of EGD
Exchange
Configuring the Exchange
Producer
Configuring the Producer ID
Series 90-70 PLCs
Series 90-30 PLCs
Consumer
Asynchronous Operation of EGD
g
PLC Producin
g
EGD PLC Consumin
Effect of PLC Modes and Actions on EGD Operations
Configuration Planning Producer and Consumer Periods for PLCs
Exchange Limitations and Recommendations
Maximum Number of Exchanges
Maximum Data Size of an Exchange
Number of Variables
Allowable Data Types in Exchanges
Producer and Consumer Period Ranges
Effect of Enabling User Interrupts
Update Timeout Period
General PLC Timing Considerations when using EGD
Timing Considerations for the Series 90-30 CPU364 and Series 90-70 Ethernet Interface
Timing Considerations for the Series 90-30 CPU374
Naming Conventions
Before You Configure EGD Exchanges
Record Your EGD System Information
Recording Exchange Information
Record Your Produced Exchange Information
Record Your Consumed Exchange Information
Configuring EGD
Exchange Definitions
Produced Data Exchange Definition
Page
Consumed Data Exchange Definition
Page
Configuring Ethernet Global Data
GFK-1541B Chapter 5 Ethernet Global Data 5-17
Example 1: EGD Configuration Using IP Addresses to Identify Consumers
PLC1 - Producer PLC2 - Consumer
PC
Exchange
Producer/Consumer Information for Entire EGD System EXAMPLE 1
Example 2: EGD Configuration Using a Group ID to Identify Consumers
Exchange
PLC1 - Producer PLC2 - Consumer
PC
PLC3 - Consumer
Example 3: EGD Configuration Using a Symbolic Name to Identify Consumers
Producer/Consumer Information for Entire EGD System EXAMPLE 3
Variable List for Produced Exchanges EXAMPLE 3
Consumed Exchanges Information EXAMPLE 3
Variable List for Consumed Exchanges EXAMPLE 3
Valid PLC Memory Types Used with EGD
Type Value (Decimal)
Description P-Producer C-Consumer
Adapter Names, Aliases, and Groups
Setting Adapter Names and Aliases in the Windows-Based Programming Software
Configuring the Ethernet Interface Adapter Name
Setting Aliases for Remote Network Adapters
Group Usage
Exchange Status Word
Exchange Status Word Error Codes
The following table shows the error codes that can be written to the Exchange Status word.
Simple Network Time Protocol (SNTP)
Timestamping EGD Exchanges
Configuring an Ethernet Interface for SNTP
Normal SNTP Operation
Multiple SNTP Servers
Loss or Absence of SNTP Timing Signals
Network Administration Support
IP Addressing
IP Address Format for Network Classes A, B, C
IP Addresses Reserved for Private Networks
Multicast IP Addresses
Gateways
Networks Connected by a Gateway
Subnets and Multiple Gateways
Subnet Addressing and Subnet Masks
Example: Network Divided into Two Subnets
Configuring Multiple Gateways
Example: Configuring Multiple Gateways
Module Configuration for the Ethernet Interface in PLC B
PLC Routing Table to Configure Multiple Gateways for PLC B and PLC C
Network Address Naming Architecture
Name Assignment
DDP Name Assignment
Default DDP Network Address Name
Assigned DDP Network Address Name
Name Resolution
Local Name Table Name Resolution
DDP Name Resolution
DNS Name Resolution
Name Usage
MAC Addresses
Troubleshooting
Diagnostic Tools Available for Troubleshooting
What to do if you Cannot Solve the Problem
PLC Fault Table
PLC Fault Table Descriptions
PLC Fault User Action
PLC Fault Table Descriptions (Continued)
PLC Fault User Action
Glossary
A
Page
Page
Page
Page
Page
Page
Page
Communications Port Characteristics
IC693CMM321 (10Base-T Type) Series 90-30 Ethernet Interface, Ports
IC693CPU364 Series 90-30 CPU364 Embedded Ethernet Interface, Ports
IC693CPU374 Series 90-30 CPU374 Embedded Ethernet Interface, Ports
B
RS-232, RJ-11 Serial Port
Port Settings
Port Pinout
Station Manager Serial Port Pinout
Station Manager Serial Cable (IC693CBL316A)
Serial Cable (IC693CBL316A) Connector Pinouts
RS-485, 15-Pin, D-Type Port
Port Settings
Software Loader Port Pinout
Part Numbers for GE Fanuc Cables and Converters
Cables for Connecting the 15-Pin, D-Type, RS-485 Port to the RS-232 Port on a PC
Cable Assembly IC690ACC901
10Base-T Port
10Base T Port Pinouts
GFK-1541B Appendix B Communications Port Characteristics B-7
Connection to a 10Base T Network
Connection of the Ethernet Interface to a 10Base-T network is shown below:
10Base-T/100Base Tx Port
10Base-T/100Base Tx Port Pinouts
B-10 TCP/IP Ethernet Communications for the Series 90 PLC User's Manual May 2002 GFK-1541B
Connection to a 10Base-T / 100Base Tx Network
Connection of the Ethernet Interface to a 10Base-T network is shown below:
Direct Connection to the CPU374 Ethernet Interface
Connection of Ethernet devices directly to the Ethernet Interface is shown below:
10Base2 Port
10Base2 Port Pinouts
B-12 TCP/IP Ethernet Communications for the Series 90 PLC User's Manual May 2002 GFK-1541B
Connecting the CMM742 Ethernet Interface to a 10Base2 Network with T Connector
Connecting the CMM742 Ethernet Interface to a 10Base2 Network with F Connector
AAUI Port
Ethernet AAUI Port Pinouts
Page
IC649AEA102 Ethernet 10BaseT Transceiver
Power Requirement
LED Indicator Lights
IC649AEA102 Transceiver Connection
IC649AEA103 Ethernet 10Base2 Transceiver
Power Requirement
LED Indicator Light
IC649AEA103 Transceiver Connection
AUI Port
Pinouts of the AUI Port
B-20 TCP/IP Ethernet Communications for the Series 90 PLC User's Manual May 2002 GFK-1541B
AUI (Transceiver Cable) Connection
10Base2 Transceiver Description
Transceivers must be compatible with the IEEE 802.3 standard and must have the SQE option Enabled.
PLC power must be OFF when connecting or disconnecting the transceiver.
PC Software Loader
C
Updating Firmware Under Windows
To install the new firmware, perform the following steps
Restarting an Interrupted Firmware Upgrade
Updating Firmware Under DOS and Windows 3.xx
To install the new firmware, perform the following steps
Page
Page
Using the IC697CMM742 with PLC CPU Versions 4.12 - 5.50
Ethernet Interface Installation and Configuration
D
Alternate Procedure for Configuring the Ethernet Interface (with PLC CPU versions 4.12 through 5.50)
Page
Page
Page
Ethernet Interface Operational Restrictions
Startup
Station Manager
Software Loader
Translating PLC CPU Reference Addresses to Modbus Register Addresses for the IC693CMM321
E
Page
Index
1
A
B
C
D
E
F
G
H
J
L
M
N
O
R
S
T
U
V
W