background image

 

 
 
 
 
 

 

 

User Guide 

 

Babel Buster 2 

Model BB2-7030 

BACnet Gateway and Router 

 

Rev. 1.0 – September 2010 

Summary of Contents for Babel Buster 2 BB2-7030

Page 1: ...User Guide Babel Buster 2 Model BB2 7030 BACnet Gateway and Router Rev 1 0 September 2010 ...

Page 2: ...ence for improper system design 2010 Control Solutions Inc BACnet is a registered trademark of American Society of Heating Refrigerating and Air Conditioning Engineers ASHRAE Babel Buster is a registered trademark of Control Solutions Inc Minnesota USA All other trademarks mentioned in this document are the property of their respective owners Information in this document is subject to change witho...

Page 3: ...TCP Gateway 39 11 Using the BB2 7030 02 as an SNMP Server Agent 40 12 Using the BB2 7030 02 as an SNMP Client Manager 44 13 Using the BB2 7030 02 as a BACnet to SNMP Gateway 52 14 Using the BB2 7030 Proxy Support 53 15 Using the BB2 7030 BBMD Support and WAN Routing 55 16 Miscellaneous System Setup 60 17 Hardware Guide 62 18 Trouble Shooting 64 19 BACnet Object Properties 65 19 1 Data Object Prope...

Page 4: ...rver gateway where the BB2 7030 autonomously polls devices stores the present value of a given set of objects and allows other BACnet devices to query the BB2 7030 to obtain that data Going the other direction the BB2 7030 will act as a store and forward device for writing to BACnet devices Here is an example of the gateway functionality solving a problem A BACnet IP front end periodically writes ...

Page 5: ...10 01 but only the BB2 7030 01 can connect BACnet MS TP to Modbus TCP The BB2 7030 02 may be used as a gateway to connect BACnet MS TP or BACnet IP to SNMP The SNMP side may be an SNMP Agent server or SNMP Client The connection of BACnet IP to SNMP is also accomplished by the BB2 7010 02 but only the BB2 7030 02 can connect BACnet MS TP to SNMP The BB2 7030 02 supports generation of traps based on...

Page 6: ...n and yellow LEDs on the RJ45 jack will be on solid for a time during boot up The entire bootup process will take 1 2 minutes during which time you will not be able to connect with a browser d The default IP address as shipped is 10 0 0 101 If your PC is not already on the 10 0 0 0 domain you will need to add a route on your PC Do this by opening a command prompt First type ipconfig and note the I...

Page 7: ...and password The default login is user name system with password admin You can also log in as root using password buster You should log in as root if you will be changing the IP address g To can change the IP address of the BB2 7030 go to the Local Host page under System Setup The following page should appear Change the IP address and subnet mask and gateway if applicable Click Change IP to save t...

Page 8: ... a few are stored differently and the IP address is one of those Normally clicking Update on any configuration page only stores that configuration information to a temporary RAM copy of the configuration file To make your changes other than IP address permanent you must click Save on the Config File page System Setup Config File ...

Page 9: ... is that you do not duplicate device instances The hardware will effectively prevent you from duplicating the MAC address on the IP side but you do need to select a MAC address for the MS TP side of the router Enter that MAC address at the bottom of this page The MAC addresses must not be duplicated on the network Enter your MS TP baud rate and Max Master setting as well The second page that conta...

Page 10: ...s are physically electrically connected to each other if MS TP or physically connected via a local switch or hub if IP IP networks connected by BB2 7030 s that are connected to each other via a WAN router MUST be given different network numbers they are considered physically independent networks If your requirement is simply connecting MS TP devices to a BACnet IP network the only configuration yo...

Page 11: ... 7030 User Guide Rev 1 0 Page 8 The primary use of hop count is to force packets on the network to be discarded faster particularly in the event of router misconfiguration that results in a continuous loop ...

Page 12: ...orts via which they may be reached The Info strings are strictly informational and have no bearing on functionality The router s address is optional If not given here it will be searched for on the network using Who Is Router You may enter the remote router s address as an MS TP MAC address or an IP address optionally with port number If no port number is given the BB2 7030 s own local port number...

Page 13: ...ers that are found this way in addition to any listed here will be listed on the Discovered page illustrated below Use the Prev Next buttons to scroll through the list of known networks This list is a combination of configured networks and those discovered via the Who Is Router and I Am Router message exchange An example of a string of routers is illustrated below This configuration is one of nume...

Page 14: ...age 11 The networks listed as Connected in the diagram are the locally connected network numbers The remaining networks are router table entries Each entry tells the local router which network the given net number will be found on ...

Page 15: ... is a BACnet router and routes packets as defined for routing by the BACnet protocol specification The BB2 7030 is also a gateway and can perform certain gateway functions regardless of whether being used for routing purposes The gateway functions all rely upon the input output and value objects that store copies of data from devices Data may be placed in the local objects by other devices writing...

Page 16: ...d via this web page at any time but will be overwritten by the next poll unless the object is out of service Reliability codes may be any of the following 7030 01 64 Modbus client no response 65 Modbus client crc error 66 Modbus exception illegal function code 67 Modbus exception illegal data address 68 Modbus exception illegal data value 69 79 Modbus exception code 65 rarely used 80 Local device ...

Page 17: ...overridden D out of service Device link will indicate BAC or TCP followed by R for read or W for write and a number which is the rule number in the table of read or write rules for mapping external devices or objects to this BACnet object The designation R means read from external device and W means write to external device The destination of data for an Analog Output object will be writing to ano...

Page 18: ...following 7030 01 64 Modbus client no response 65 Modbus client crc error 66 Modbus exception illegal function code 67 Modbus exception illegal data address 68 Modbus exception illegal data value 69 79 Modbus exception code 65 rarely used 80 Local device configuration property fault 81 Faulty Modbus packet 82 BACnet IP client device timeout 83 BACnet IP client error returned by server Reliability ...

Page 19: ... and prev to scroll through the list Remote BACnet devices to be accessed by this device are specified here Enter the Device Instance of the remote device a name to reference in other pages a poll rate default reply timeout and default write priority Enter static address if applicable Then click update The gateway broadcasts a who is looking for this device when a read or write map wants to use th...

Page 20: ...pdate Maps entered on this page only read data from remote devices Go to the Client Write Map to write data to those devices The full parameter set is different for read versus write An abbreviated version of a list of maps is shown on this page Any of the parameters shown may be changed here and registered by clicking the Update button To view and or modify the complete set of parameters click on...

Page 21: ...Multi state Output n MV n Multi state Value n Object numbers start at 1 The maximum available number varies by object type and these limits may be found on the System Capacities link from the home index page click graphic at top Rule number simply tells you where you re at on the list of object maps Click next and prev to scroll through the list To advance directly to a specific map enter the desi...

Page 22: ...ber shown in the Map box Insert will insert a new map before the map number shown and is used for placing maps between existing maps It is not necessary to use Insert to add maps to the bottom of the list or to define any map presently having zero for a source object or none for remote type Selecting none for remote type effectively deletes the map even though it will still appear in the list unti...

Page 23: ... defined in the Devices page The name is optional and used only for display purposes Selecting none for remote type effectively deletes the map even though it will still appear in the list until deleted Unused maps at the end of the list will always show none as the type Local Object is internally a coded number consisting of BACnet object type multiplied by 1000 then added to the object number st...

Page 24: ...ore being written to the remote register The local data is first multiplied by the scale factor The offset is then added to it For the remote object to be written enter the object instance and type index if applicable leave at 0 if not and priority to use of the object being written is commandable The names in the device list are defined in the Devices page The repeat time may determine how often ...

Page 25: ...t you do not have to review a lot of unused maps If the displayed maps are used up and you need more increase the enabled number Errors for BACnet IP client read maps are shown on this page Only those maps with errors to report are listed Refer to the code and class lists below for interpretation Proprietary class 82 code 0 is generated locally indicating a timeout no response received from remote...

Page 26: ...ERTY 45 ERROR_CODE_OPTIONAL_FUNCTIONALITY_NOT_SUPPORTED 47 ERROR_CODE_DATATYPE_NOT_SUPPORTED 50 ERROR_CODE_PROPERTY_IS_NOT_AN_ARRAY Error Class Resources 18 ERROR_CODE_NO_SPACE_FOR_OBJECT 19 ERROR_CODE_NO_SPACE_TO_ADD_LIST_ELEMENT 20 ERROR_CODE_NO_SPACE_TO_WRITE_PROPERTY Error Class Security 1 ERROR_CODE_AUTHENTICATION_FAILED 6 ERROR_CODE_INCOMPATIBLE_SECURITY_LEVELS 12 ERROR_CODE_INVALID_OPERATOR...

Page 27: ...30 User Guide Rev 1 0 Page 24 29 ERROR_CODE_SERVICE_REQUEST_DENIED 43 ERROR_CODE_COV_SUBSCRIPTION_FAILED 46 ERROR_CODE_INVALID_CONFIGURATION_DATA 48 ERROR_CODE_DUPLICATE_NAME 49 ERROR_CODE_DUPLICATE_OBJECT_ID ...

Page 28: ...the BACnet client to read write objects in other devices It is possible that the BB2 7030 acts as a data transfer engine reading from one device and writing to another It is also possible that the BB2 7030 acts as a form of proxy server reading data from one or more devices storing that data and waiting for that data to be read by yet other devices This definition of proxy is not what is meant on ...

Page 29: ...en to have Modbus addresses as aliases Modbus register numbers for accessing data objects in the BB2 7030 are calculated The register number for binary and multi state objects is R T 1000 I where T is the BACnet Object Type and I is the instance R is the resulting register number The register number for analog objects because they must be read as a register pair is R T 1000 I 2 1 R is the first re...

Page 30: ...ing to translate a local Input to remote Output on the BACnet side For each register to be mapped into the custom map enter the server address where this register should appear the format it should be presented in and the source of the data Scale factor is optional The source data will be multiplied by this to produce the data in the mapped server register Offset is optional This value will be add...

Page 31: ...ns products are big endian meaning the most significant bytes are in the first register and least significant bytes are in the second register If remote clients accessing this server at this IP address expect little endian check the swap box Modbus protocol by definition is big endian within each register but the endian order of the registers for 32 bit values is less standardized Normally an atte...

Page 32: ...s that a remote client would see The remote client acts as Modbus master and this server acts as a Modbus slave having the registers shown here Click Update to view the most recent data values Click Prev or Next to scroll through the list of registers You may also enter a number in the Showing box to jump directly to a given register when Update is clicked The diagnostic info shows the connection ...

Page 33: ...the server map and accessible to other BACnet devices via MS TP or BACnet IP The Modbus Devices page is illustrated above Device number simply shows you where you are on the device list Click next and prev to scroll through the list Remote Modbus TCP devices to be accessed by this device are specified here Enter the IP address of the remote device a name to reference in other pages a unit number p...

Page 34: ...cket error Possible errors include 5 Connection failed unable to bind usually means remote device not connected or not reachable 81 Connection in progress means unsuccessful connect attempt still trying 95 Network is unreachable 97 Connection aborted 98 Connection reset by peer 103 Connection timed out 104 Connection refused 107 Host is unreachable Rule number simply tells you where you re at on t...

Page 35: ...play purposes Selecting none for remote type effectively deletes the rule even though it will still appear in the list until deleted Unused rules at the end of the list will always show none as the type Local Object is internally a coded number consisting of BACnet object type multiplied by 1000 then added to the object number starting from 1 These are translated into abbreviations that are easy t...

Page 36: ...hen be multiplied by the scale factor The offset is then added and this final result is written to the local object number given The name is optional and used only for display purposes The periodic poll time determines how often the remote register will be read This number if nonzero will override the default poll time given in the Devices page for the remote device being read The default value wi...

Page 37: ... BACnetEngineeringUnits values This value will simply be read by the BACnet client when the units property is requested from the object this Modbus register maps to The units have no bearing on calculations performed You must select appropriate scale and offset values to make any required translation between Modbus units and BACnet units Units are only valid for Analog objects The number of rules ...

Page 38: ...electing none for remote type effectively deletes the rule even though it will still appear in the list until deleted Unused rules at the end of the list will always show none as the type Local Object is internally a coded number consisting of BACnet object type multiplied by 1000 then added to the object number starting from 1 These are translated into abbreviations that are easy to interpret on ...

Page 39: ...being written to the remote register The local data is first multiplied by the scale factor The offset is then added to it If a bit mask is entered and the remote register type is signed or unsigned 16 bit data the mask will be bit wise logical AND ed with the data The mask is right justified then AND ed with the data The result is then left shifted back to the original position of the mask In oth...

Page 40: ...one as the type If you wish to prevent these from being displayed reduce the number of rules enabled Initial COV increment and period will only apply if a BACnet client subscribes to COV notification from the BACnet object assigned to this Modbus map These properties may be overwritten by the BACnet client s at any time The values shown here are initial values not necessarily the current values No...

Page 41: ...the reset box and click update to reset the counts Click Update to view the most recent data values Error code indications of A B indicate the following errors with the first number 1 Transaction ID out of sync 2 Exception code returned by remote device 3 Function code mismatch bad packet 4 Inusfficient data bad packet 5 No response from remote device timed out 6 CRC error in received packet When ...

Page 42: ... or Modbus network If the application wants to view BACnet data as if it was a Modbus slave configure the BACnet client and then review the Modbus register map for accessing the data objects in the BB2 7030 If the application wants to view Modbus TCP data as if it was a BACnet slave configure the Modbus client and then address the BB2 7030 s internal data objects from BACnet The BB2 7030 can be sl...

Page 43: ... O being accessed from BACnet If you want to make your SNMP manager write to an Output object on another BACnet device use the BACnet client mapping to translate a local Input to remote Output on the BACnet side Rule number simply tells you where you re at on the list of the local SNMP Agent s OID maps Click next and prev to scroll through the list To advance directly to a specific map enter the d...

Page 44: ... restart this device Entering zero none for local object effectively deletes the rule even though it will still appear in the list until deleted Unused rules at the end of the list will always show none as the type Local Object is internally a coded number consisting of BACnet object type multiplied by 1000 then added to the object number starting from 1 These are translated into abbreviations tha...

Page 45: ...register is less than the test value by a margin of at least this hysteresis value If a test becomes true if less than it will not return to false until the local register is greater than the test value by a margin of at least this hysteresis value On time and off time if specified determine how long the condition must be true on time or false off time before the true or false response is actually...

Page 46: ... sent to port 162 on each IP address listed above The name location and contact listed above may be retrieved by the remote SNMP client The local community is the name that must be used by the remote SNMP client to write to this device The name public is accepted for reading ...

Page 47: ...llustrated below along with a summary of how to use them Device number simply shows you where you are on the device list Click next and prev to scroll through the list Remote SNMP devices to be accessed by this device are specified here Enter the IP address of the remote device a name to reference in other pages and a default poll rate Then click update This gateway expects to access SNMP devices ...

Page 48: ...hanged here and registered by clicking the Update button To view and or modify the complete set of parameters click on the map number in the left most column For each remote OID to be read enter the full SNMP OID and location device The names in the device list are defined in the Devices page The object name is optional and used only for display purposes but is also returned as the object name to ...

Page 49: ... OID maps Click next and prev to scroll through the list To advance directly to a specific map enter the desired number in the Map box then click Update For each remote OID to be read enter the full OID and location device The names in the device list are defined in the Devices page When the remote OID is read data may be manipulated before being written to the local object The result will be mult...

Page 50: ... always show none as the type If you wish to prevent these from being displayed reduce the number of rules enabled Initial COV increment and period will only apply if a BACnet client subscribes to COV notification from the BACnet object assigned to this SNMP client map These properties may be overwritten by the BACnet client s at any time The values shown here are initial values not necessarily th...

Page 51: ...d used only for display purposes Important note about data type SNMP does not have a universally accepted representation for floating point The most commonly used means of representing real data is scaled integers and this method is supported by BB2 7010 IEEE 754 is not recognized as an SNMP standard and is not used X 690 defines an encoding for real data but it is inefficient and little used A co...

Page 52: ...lls you where you re at on the list of OID maps Click next and prev to scroll through the list To advance directly to a specific map enter the desired number in the Map box then click Update The local object data may be written periodically or when it changes or both To send upon change send on delta check the first box and enter the amount by which the local object must change before being writte...

Page 53: ... write to the remote device Delete will remove the rule number shown in the Map box Insert will insert a new rule before the rule number shown and is used for placing rules between existing rules It is not necessary to use Insert to add rules to the bottom of the list or to define any rule presently having zero none for a source object Selecting none for remote type effectively deletes the rule ev...

Page 54: ...his page Only those maps with errors to report are listed Refer to the code and class lists below for interpretation Common error codes for the SNMP client are as follows 9 No response from remote Agent server 10 Unable to interpret data 11 Reply does not match request Other error codes are possible but improbable Codes in the 80 120 range indicate socket errors however because SNMP uses UDP IP wh...

Page 55: ...P network If the application wants to view BACnet data as if it was an SNMP slave server or agent configure the BACnet client and also configure the SNMP MIB under the SNMP Agent tab If the application wants to view SNMP data as if it was a BACnet slave configure the SNMP client and then address the BB2 7030 s internal data objects from BACnet The BB2 7030 can be slave on both BACnet and SNMP side...

Page 56: ...oxy for enter the applicable information in each column The device instance maximum APDU size vendor ID and segmentation support are all reported in a BACnet I Am message The local physical address of the device should be given so that the BB2 7030 knows where to route traffice for this device when received If you do not know the maximum APDU size for your device a size of 1476 is common for BACne...

Page 57: ...support configuration of the above table nor does the traditional slave proxy support anything other than MS TP The slave proxy represented above can provide the I Am response for either MS TP or BACnet IP devices The BB2 7030 also does not remove non responding slaves from the proxy list as specified for the traditional slave proxy All proxy configuration in the BB2 7030 is manual fixed in the se...

Page 58: ...with us enable BBMD by setting the time to live but leave the BBMD IP address set to 0 0 0 0 Up to 128 foreign devices may register with us while we may register with only 1 other BBMD Broadcast messages received from any of the other BBMD s will be resent to all 128 foreign devices registered with our BBMD Other devices that have registered with us as a foreign device are listed simply for diagno...

Page 59: ...ter s port forwarding table should open port 0xBAC0 47808 for UDP The internal IP address will be the LAN address of the BB2 7030 In the screen image below the BB2 7030 is configured for an IP address of 192 168 1 100 Externally it is referred to as 173 11 33 51 in the network diagram that follows IMPORTANT The broadband port forwarding example shown below is a non secured connection While functio...

Page 60: ...AN are required simply follow manufacturer s instructions The following screen shot shows the VPN setup page in a DIR 130 DLink VPN router The local and remote domains must be different even though they are local at each respective end In addition to the VPN setup shown here the LAN and WAN must be configured simply follow manufacturer s instructions using IP address information provided by your I...

Page 61: ...BB2 7030 User Guide Rev 1 0 Page 58 ...

Page 62: ... 0 Page 59 The following is an illustration of a BACnet network distributed over a wide area via standard Internet connection It uses WAN routers either with or without secure VPN and BBMD enabled on one device at each location ...

Page 63: ... 7030 to default to using that configuration at power up IMPORTANT Configuration changes will be lost the next time you cycle power if you did not click the save button to place those changes in non volatile memory Flash file Click Save to store the present configuration to a Flash file The configuration will overwrite the selected file in the local file directory unless you check create new file ...

Page 64: ... is updated by any of the above actions Note Your browser will normally cache files If you view a file make configuration changes save the file then view the file again you may see the old file cached by the browser To see the updated file go to Internet Options in your browser s Tools menu and delete temporary Internet files or delete cache files Where you find the delete cached files or delete h...

Page 65: ...l devices are operating at close to the same ground potential Proper grounding of equipment should ensure proper operation without the third conductor however proper grounding often cannot be relied upon If large common mode voltages are present you may even need to insert optically isolated repeaters between EIA 485 devices Use standard CAT5 cables for Ethernet connections Use control wire as app...

Page 66: ...ernet link is present This indicator will light if a link is present regardless of processor or network activity If not lit check network wiring Status Blue LED internal on any time power is present and internal power supply is functioning A green LED internal near the blue LED will be blinking at a slow rate indicating the communications coprocessor is running It should be blinking any time power...

Page 67: ...the TCP devices page may provide further information Routing problems are the most difficult to trouble shoot and there is no easy recommendation for fixing routing problems Using Wireshark to see what is on the network is highly recommended MS TP does not tolerate any errors in configuration If adding the BB2 7030 to an MS TP network appears to bring down the MS TP network first of all wait a sho...

Page 68: ..._Description 28 W Character String Same as Object_Name is only alias for Object_Name Object_Type 79 BACnetObjectType ENUMERATED analog input 0 analog output 1 analog value 2 binary input 3 binary output 4 binary value 5 device 8 multi state input 13 multi state output 14 multi state value 19 Present_Value 85 W REAL analog objects ENUMERATED binary objects Unsigned multi state objets no index prior...

Page 69: ...andable objects only SEQUENCE SIZE 16 OF BACnetPriorityValue REAL each element analog output objects ENUMERATED each element binary output objects Unsigned each element multi state output objects Relinquish_Default 104 W REAL analog objects ENUMERATED binary objects Unsigned multi state objets Polarity 84 BACnetPolarity binary objects only ENUMERATED normal 0 Number_Of_States 74 Unsigned multi sta...

Page 70: ...tion_Software_Version 12 CharacterString Protocol_Version 98 Unsigned Protocol_Revision 139 Unsigned Protocol_Services_Supported 97 BACnetServicesSupported Protocol_Object_Types_Supported 96 BACnetObjectTypesSupported Object_List 76 BACnetARRAY N of BACnetObjectIdentifier Max_APDU_Length_Accepted 62 Unsigned Segmentation_Supported 107 BACnetSegmentation APDU_Timeout 11 Unsigned Number_Of_APDU_Retr...

Page 71: ...must be read as a register pair is R T 1000 I 2 1 R is the first register number in the pair Register numbers start at 1 To create a raw address subtract 1 from the register number Analog objects should be read as input registers or holding registers and can only be written as holding registers Binary and multi state objects can be read as any register type coil discrete input register holding reg...

Page 72: ...dbus Function Codes Recognized by BB2 7030 The following function codes are used by BB2 7030 as Modbus TCP master and are also recognized by BB2 7030 when functioning as a slave 1 Read Coil 5 Write Single Coil 2 Read Discrete Input 6 Write Single Holding Register 3 Read Holding Registers 15 Write Multiple Coils 4 Read Input Registers 16 Write Multiple Holding Registers ...

Reviews: