background image

COMMERCIAL IN CONFIDENCE

Page 10

1.  Write the 

security byte 

with value 5 

(9500 — Not Required)

2.  Send message number 5 (enter program mode)

3.  Send messages as required to change desired parameters

4.  Write the 

security byte

 with value 6 

(9500 — Not Required)

5.  Send message number 6 (exit program mode)

It is possible to write to parameters without using this sequence, but the unit will simply
hold new values in the menu structure, and will not apply the new values to the
process control variables. However, if new parameters are uploaded and then the
menu entered from the front panel, any uploaded parameters will be effective on
leaving the menu. When using communications t

he 

enter program mode / exit

program mode

 message sequence must be sent to cause any new values to be

applied to the controller.

2.3.1 

Enter Program Mode

Byte No

Meaning

Value

1

Slave address

xx

2

ModBus Function code (write register)

06

3

Security message function marker (1=security, 5=function 5)

15

4

not used (any value may be sent)

xx

5

not used (any value may be sent)

xx

6

not used (any value may be sent)

xx

7

CRC lo byte

??

8

CRC hi byte

??

The 

security byte

 must be set to 5 prior to this message 

(not required for 9500)

. If the

instrument is successfully set into 

remote program mode

, and the keyboard is

successfully locked, the response will be the same as the message. If the instrument
is currently in manual menu entry mode, an error response code 6 (device busy) will
be returned.  This command may be repeated while already in 

remote program mode

with no ill effect.

2.3.2 

Exit Program Mode

Byte No

Meaning

Value

1

Slave address

xx

2

ModBus Function code (write register)

06

3

Security message function marker (1=security, 6=function 6)

16

4

not used (any value may be sent)

xx

5

not used (any value may be sent)

xx

6

not used (any value may be sent)

xx

7

CRC lo byte

??

8

CRC hi byte

??

 The 

security byte

 must be set to 6 prior to this message 

(not required for 9500)

. The response will be

the same as the message if the instrument is currently in 

remote program mode

, and a restart will be

initiated, otherwise an error response code 1 (illegal function) will be returned.

Summary of Contents for 3300P

Page 1: ...COMMERCIAL IN CONFIDENCE CAL 3300 9300 9400 9500 P MODBUS RTU COMMUNICATIONS GUIDE 7th September 2000 ISSUE 1 10 Doc 33034 Iss 002...

Page 2: ...lers would perform before transmitting the new data out over the bus to the instrument The CAL controllers assume that the values they receive have been checked against limits and are valid no further...

Page 3: ...ing and should not occur however they will be interpreted as if bit 2 was 0 Bit 4 is used to indicate reserved messages see the section Security Messages below Two types of bit value may exist those w...

Page 4: ...s linear Also note that while linear input is selected the display of values on the instrument is effected by the setting in DECP not Disp The instrument provides no error checking on values transmitt...

Page 5: ...wer priority than the displays recorded by the Display Byte If no bit is set the instrument is not in a ramp soak sequence If the unit has finished a ramp but no soak time is specified SOAK bit 2 will...

Page 6: ...ending on disp selection min LoSc max HiSc Ofst 2 0083 RW 3 6 Degrees 10 LIN normal inc dec see separate details for limits Band 2 0085 RW 3 6 Degrees 10 LIN normal inc dec min 0 1 max 25 of Sensor Ma...

Page 7: ...1 0190 RW 3 6 No scaling step by 1 min 0 max 100 PL 2 1 0191 RW 3 6 No scaling step by 1 min 0 max 100 SP2 A 1 0192 RW 3 6 0 none 1 dvhi 2 dvlo 3 band 4 fshi 5 fslo 6 cool 9500P 7 EOP SP2 b 1 0193 RW...

Page 8: ...with degC to decF if required if unit 1 Read hi 2 007A R 3 Read hi 10 LIN Read lo 2 007C R 3 Read lo 10 LIN Data Ct A 2 0432 R 3 CtA 25 Data Ct B 2 0434 R 3 CtB 25 Data Ct 1 2 0436 R 3 Ct1 25 Data Ct...

Page 9: ...sc Rev 3 1 03E5 RW 3 6 0 3d 1 3r Set 3 2 02E8 RW 3 6 Degrees 10 LIN step 0 1 min 0 0 max 2500 When LIN sensor selected max 9999 Hys 3 2 02EA RW 3 6 Hys3 10 LIN step 0 1 min 0 1 max 100 of HiSc Note Th...

Page 10: ...ing the enter program mode message causes the push buttons on the instrument to be locked out This feature prevents potentially dangerous conditions arising from simultaneous adjustment of the instrum...

Page 11: ...n 5 15 4 not used any value may be sent xx 5 not used any value may be sent xx 6 not used any value may be sent xx 7 CRC lo byte 8 CRC hi byte The security byte must be set to 5 prior to this message...

Page 12: ...is not a valid readable bit an error response code 2 invalid address is returned otherwise the following response is sent Byte No Meaning Value hex 1 Slave address xx 2 ModBus Function code read coil...

Page 13: ...Starting Address MSB xx 4 Starting Address LSB xx 5 Data MSB xx 6 Data LSB xx 7 CRC lo byte 8 CRC hi byte The normal response is the same as the message An error response code 2 illegal address will b...

Page 14: ...ceives full message correctly but cannot act on it An error response as detailed under each message heading is returned as follows Byte No Meaning Value 1 Slave address xx 2 Original ModBus Function c...

Page 15: ...erformed 7 Repeat from step 2 for the next byte of the message until all bytes have been processed 8 The final contents of the CRC register is the CRC value to use 9 When the CRC is placed in the mess...

Page 16: ...to read the setpoint the various sections of this code would normally be held in separate functions and would be optimised for better speed but this example shows the thought process involved note als...

Page 17: ...he reply if the Function code is 03 and the CRC is correct The CALController stores the Setpoint internally in 10th degree units so the value can be computed as setpoint reply 3 8 reply 4 10 or in a l...

Page 18: ...rrectly the whole sequence must be re started from message 1 1st Message byte 0 Slave address xx byte 1 Function code write register 06 hex always byte 2 Register Address high byte 03 hex always byte...

Page 19: ...ce for the values to take effect 1st Message byte 0 Slave address xx byte 1 Function code write register 06 hex always byte 2 Register Address high byte 03 hex always byte 3 Register Address low byte...

Page 20: ...D 2 Detailed later dependant on other functions CYC 2 ON OF 0 1 9 9 10 81 Seconds LEVEL 2 Function Values Limits SP1 P 0 100 Read only HAND OFF 1 100 PL1 100 0 PL2 100 0 SP2 A NONE DV HI DV LO BAND FS...

Page 21: ...LOSC SP LK So set point 1 is adjustable between the current high and low scale settings as long as the setpoint lock is off OFST INPT LIN CYC T ON OF 0 0 to 25 of sensor full scale DECP 0 1 to 81 0 0...

Page 22: ...DISP 1 0 to 250 0 1 0 to 199 9 If you change SP3 A at any time then the value of SET 3 defaults to zero There are a number of functions which when changed can have an effect on the values of other fun...

Page 23: ...ting C to F Here is a list of the functions that are effected by a C to F conversion and if a relative or absolute conversion is needed FUNCTION CONVERSION NOTES Set point 1 Absolute HISC Absolute LOS...

Page 24: ...99 9 400 0 LIN1 0 400 0 0 400 0 LIN2 25 400 25 0 400 0 LIN3 0 3000 0 0 999 9 LIN4 250 3000 199 9 999 9 LIN5 0 3000 0 0 999 9 LIN 9500 0 9999 N A N A TABLE 2 MIN MAX SENSOR FULL SCALE DEGREE F SENSOR M...

Page 25: ...0 0 400 0 LIN1 0 400 0 0 400 0 LIN2 0 400 0 0 400 0 LIN3 0 3000 0 0 999 9 LIN4 0 3000 0 0 999 9 LIN5 0 3000 0 0 999 9 LIN 9500 0 9999 N A N A TABLE 4 HI SC LO SC DEFAULT SETTINGS DEGREE F SENSOR DEFA...

Reviews: