CTI 2572-A Installation And Operation Manual Download Page 62

Page: 62 / 130

CTI 2572-A Installation and Operation Guide

6.4. Modbus Exception Codes

The following Modbus Exception codes may be returned to the Modbus Client in case of an error.

Code

Name

Description

Illegal Function

Unsupported Function code

Illegal Data Address

Requested data address not included in the PLC configuration

Illegal Data Value

Typically indicates a problem in the query structure

Slave Device Failure

Unrecoverable error occurred while processing the request

6.5. Diagnostic Statistics

A full set of diagnostic statistics is maintained for the Modbus/TCP server. These may be accessed by
a web browser by setting the URL to the IP address of the module. From the main menu page, select
Module Diagnostics and the Modbus/TCP Server.

Summary of Contents for 2572-A

Page 1: ...CTI 2572 A ETHERNET TCP IP MODULE INSTALLATION AND OPERATION GUIDE Version 1 3 CTI Part 062 00356 013 062 00356 013 2572AIOG 092205...

Page 2: ...ges resulting from the use of this document This document is provided without express or implied warranty of any kind including but not limited to the warranties of merchantability or fitness for a pa...

Page 3: ...re familiar with the installation and operation of 1 SIMATIC 505 programmable controllers 2 Ethernet local area networks 3 Transmission Control Protocol Internet Protocol Please refer to the appropria...

Page 4: ...otes alert the user to special features or procedures CAUTION Cautions alert the user to procedures that could damage equipment WARNING Warnings alert the user to procedures that could damage equipmen...

Page 5: ...On 16 2 9 Entering the Module into the PLC I O Configuration 17 2 10 Storing Network Parameters in EEPROM 18 2 11 Module Checkout 19 CHAPTER 3 MODULE OPERATION 21 3 1 Front Panel Features 21 3 2 Modul...

Page 6: ...ENDIX B ERROR CODES 77 2572 A System Error Codes 77 General Memory Transfer Error Codes 79 Server Error Codes 82 PLC Client Error Codes 84 APPENDIX C PLC COMMAND INTERFACE 89 General Description 89 WX...

Page 7: ...8 Sample I O Configuration 17 Figure 9 Representing IP Address in Hexadecimal Format 28 Figure 10 V memory Tag Types 56 Figure 11 PLC Command Interface 89 Figure 12 WX WY Map 91 Figure 13 Coupled Mode...

Page 8: ......

Page 9: ...o the PLC and exercise supervisory control over the PLC operation In addition the PLC can use the facilities of the CTI 2572 A to access data in other PLC systems equipped with a CTI 2572 or CTI 2572...

Page 10: ...ingle wide form factor Coupled with a large RAM capacity this vastly increases the number of concurrent protocols and TCP IP connections that can be supported 100Mb Ethernet Port The 2572 A provides a...

Page 11: ...ddition the module maintains an internal log of significant events The log entries are maintained in non volatile RAM allowing the log to survive re cycling of power If desired the log entries may als...

Page 12: ...as a PLC Client As a PLC Client the 2572 A acts as an agent for the PLC sending messages to other nodes and processing the responses under control of the PLC logic Data in the PLC program specifies th...

Page 13: ...etwork WAN including the Internet Although TCP IP provides network delivery services based on a global standard using TCP IP does not guarantee that two workstations can effectively transfer data To a...

Page 14: ...ed successfully Please refer to APPENDIX C PLC COMMAND INTERFACE for a complete description 1 6 Getting Started Before using the 2572 A module you will need to perform the following steps These steps...

Page 15: ...e network parameters These include using EEPROM stored data using PLC logic or using a network DHCP server Checking out the Module You can use both the module indicators and CTI diagnostic software to...

Page 16: ......

Page 17: ...cal work area Copper cable Unshielded Twisted Pair or Shielded Twisted Pair is then run from the local hub or switch to the module Alternately you can procure a fiber optic to twisted pair converter S...

Page 18: ...this function is described in CHAPTER 4 CAMP SERVER COMMANDS AutoStart Using DHCP Using this method the module obtains its IP address and other network parameters from a Dynamic Host Configuration Pr...

Page 19: ...LC Using a Special Function module such as the 2572 A in a Remote I O rack imposes significant additional communications overhead and noticeably increases the scan time of the PLC This effect is espec...

Page 20: ...rmware download Switches on the board can be used to disable these functions 2 2 Power Requirements The CTI 2572 A module consumes 2 5 watts of 5 VDC power from the backplane 2 3 Unpacking the Module...

Page 21: ...location of the switchblock The remainder of this section describes the function of the individual switches SW1 SW2 Serial Port Baud Rate For most applications as setting of 9600 baud provides a good...

Page 22: ...ation Lock is designed to prevent changes to the module configuration via the web server interface This does not prevent EEPROM from being automatically updated when using DHCP or PLC start options Co...

Page 23: ...server interface Diagnostic Start Position SW12 Enabled Closed Disabled Open The module will be shipped with all dipswitches in the Open position This corresponds to Baud Rate 9600 Startup Option PLC...

Page 24: ...il the plug clicks into place Attach the other end of the cable to an Ethernet hub or switch hub 2 8 Initial Power On Turn on the base power supply The module should perform a startup sequence during...

Page 25: ...Special Function module with 2 WX and 6 WY words In the example below the 2572 A module is installed into slot 1 on I O base 0 and will be logged in starting at address 1 Your configuration may differ...

Page 26: ...dule selection see Section 2 4 Setting the 2572 A Option Switches Set the remaining port parameters as follows Parity Odd Data Bits 7 and Stop Bits 1 Under the Commands menu item select SET NETWORK PA...

Page 27: ...ined from a DHCP server using DHCP startup option 2 11 Module Checkout If functioning properly the 2572 A will respond to an ICMP Echo Request message known as a ping Using a PC on the local network o...

Page 28: ......

Page 29: ...collision is detected Some collisions are normal when sharing an Ethernet segment with other stations Excessive collision activity typically indicates an overloaded network or faulty cabling FDX Full...

Page 30: ...artup They are ignored if you are using the PLC start option Serial Port The Serial port can be used to set network parameters such as the IP address when no other method is acceptable It provides a s...

Page 31: ...data see note Ethernet RCV Will illuminate flash if the Ethernet port detects a packet being received see note below NOTE The Ethernet XMT LED may blink periodically even though no command requiring a...

Page 32: ......

Page 33: ...the PLC when the Start Network Server command block is executed This block is shown on the following page In the illustration a bold entry is a required value A non bold entry is a recommended value...

Page 34: ...you do not want to receive multicast set this value to 0 0000 0 15 IP Multicast Receive Address Low 16 bits If you do not want to receive multicast set this value to 0 0000 0 Offset 0 Error Word Set...

Page 35: ...mum number of concurrent TCP connections to the PLC server that will be allowed Once the maximum number has been attained the 2572 A will reject further attempts to connect until a connection is relin...

Page 36: ...en you are setting up the various IP addresses and subnet mask you should set up your PLC programming software to display the words in hexadecimal Then you can enter each byte of the dotted notation i...

Page 37: ...d in the high and low byte of offset 7 Offset Description Hex Decimal 0 Error Word 0000 0 1 Command Start Network Server 0004 4 2 Connection Number 19291 19298 4B62 19298 3 Protocol Manager Number 002...

Page 38: ...nd COMMAND MODE WY4 2 when the NET CFG bit WX1 3 is on and the COMMAND BUSY bit WX2 3 is off When the logic sees the 2572 A raise COMMAND BUSY WX2 3 it lowers the COMMAND MODE WX4 2 and COMMAND TRIGGE...

Page 39: ...message is passed to the CAMP server which processes the command Unlike the typical unicast address multiple modules can have the same multicast address thus a single packet can be used to update mul...

Page 40: ...ber as the default remote socket but no connection attempt is made Once the CREATE SOCKET command completes successfully your logic can use the Connection Number to refer to the remote socket You can...

Page 41: ...mand Error will be generated when you execute the CREATE SOCKET command Offset 5Type of Service Selects TCP or UDP Multicast service Using TCP a connection is established with the other node If the TC...

Page 42: ...Once the connection has been successfully closed you can re use the connection number in a subsequent CREATE SOCKET command block Offset Description Hex Value Decimal Value 0 Error Word 0000 0 1 Comm...

Page 43: ...de in the command block and raises the applicable error bit The following command block is used for the WRITE command Offset Description Hex Decimal 0 Error Word 0000 0 1 Command Code Write 0201 513 2...

Page 44: ...s Location bit is set to 0 this word is ignored and the port number contained in the CREATE SOCKET command block is used Offset 13 15 Unused Set to 0 Word Transfer Read This function reads the content...

Page 45: ...et 10 11 IP Address UDP Only If you set the IP Address Location bit to 1 see offset 4 of the CREATE SOCKET command block you must specify the IP address of the remote device Since the IP address consi...

Page 46: ...d will be returned If an error is encountered reading data an error message indicating the read failed will be returned In either case the module will set the applicable error bit and write the error...

Page 47: ...t 9Destination Starting V Memory Enter the beginning address of the V memory block in the local PLC to which you want to write this data NOTE The memory exchange command must contain at least one word...

Page 48: ...LC 6 9 Unused Set to 0 0000 0 10 IP Address of Remote Device High 16 bits UDP Multicast Only IP Address Location bit in the Create Socket command must be set to 1 11 IP Address of Remote Device Low 16...

Page 49: ...e UDP port number of the remote device If you are accessing another 2572 you will typically set this value to 1505 the recommended value for the 2572 A PLC server If the IP Address Location bit is set...

Page 50: ...ager Number 0024 36 4 Startup Option Bits 0000 0 5 Type of Service 1 TCP 2 UDP 0001 1 6 Remote Device High 16 bits of IP Address C0A8 49320 7 Remote Device Low 16 bits of IP Address B101 45313 8 Unuse...

Page 51: ...the CMD ERR bit and place the applicable error code in the Error Word See Appendix D for additional information UDP Client Example This example creates a UDP Socket with the address location bit set t...

Page 52: ...ddress Location bit in the Create Socket command must be set to 1 C0A8 49320 11 IP Address of Remote Device Low 16 bits UDP Only IP Address Location bit in the Create Socket command must be set to 1 B...

Page 53: ...tarting at V200 in all PLCs that have a 2572 A module listening at IP multicast address 225 1 1 1 The Unacknowledged Write command is used to prevent multiple replies Offset Description Hex Decimal 0...

Page 54: ...Obviously there is no single right way to accomplish this application This example is not necessarily the most elegant or efficient alternative but it is known to work The logic includes error detecti...

Page 55: ...not lower the command busy bit until the PLC sets the error acknowledge bit When the command busy bit is lowered the command cycle is complete and the 2572 A can accept another command in the command...

Page 56: ...ns error recovery specific to TCP If the connection to the remote device is lost due to network or remote device problems the logic must re establish the connection This is accomplished by comparing t...

Page 57: ...ndicate that Network Server has not been started reset the control relays used to indicate logic state and set the command trigger C19 Rung 2 When WX1 3 is on turn on C2 This will keep the rung above...

Page 58: ...he trigger bit C19 to execute the new command If the TCP Connection is lost as indicated by error code 166 in V140 the Create Socket command will be re triggered to attempt to create the connection ag...

Page 59: ...ger WY 4 3 bits are turned on These are held high by WY4 3 until command busy goes high C19 is reset and must be explicitly set again before another command will execute The LDC boxes clear the error...

Page 60: ......

Page 61: ...to 1 Thus the first Modbus Holding Register is Register 0 while the first 505 V memory location is V1 NOTE Some Modbus TCP client software may start with holding register 0 To be sure how your client...

Page 62: ...a address not included in the PLC configuration 03 Illegal Data Value Typically indicates a problem in the query structure 04 Slave Device Failure Unrecoverable error occurred while processing the req...

Page 63: ...isters can be interpreted as a field of 16 bits an unsigned 16 bit decimal number a signed 16 bit decimal number or a set of ASCII characters In addition two consecutive registers can be combined and...

Page 64: ...V memory Tag Types V Extended VE VE is a special Tag Type created for controllers that do not support the 16 bit unsigned integer data type For Data Table Read operations it converts unsigned integers...

Page 65: ...ach Message Block This includes the path to the target 2572 A module Defining the Control Logix Data Tags First we will need to define some Control Logix tags We will define two tags one to hold the d...

Page 66: ...e blocks NOTE Your logic should use a timer or similar means to initiate the message block Allowing the message to execute every scan could create excessive loading on the 2572 A modules Configuring t...

Page 67: ...eturned will be stored in array element 0 Additional values will be stored in subsequent array elements Communication Tab The Communication Tab is used to specify the message routing and destination I...

Page 68: ...ay element 0 Subsequent elements will be written up to the value specified in the Number of Elements box Since we want to write a block of 50 registers the NUMBER OF ELEMENTS will be set to 50 The DES...

Page 69: ...st recent event is listed last NOTE The timestamp is based on the module time of day clock which is set to the PLC time of day clock each time the module starts up If the PLC clock is inaccurate the e...

Page 70: ...roltechnology com Network Analysis Software Network analysis software captures Ethernet traffic on a network segment Once the packets have been captured the software decodes the packet information all...

Page 71: ...orrupted The module was unable to download new software because of one of the following conditions 1 the TFTP server could not be contacted 2 A valid software file could not be found 3 An unrecoverabl...

Page 72: ...artup switch to the PLC Start position and use the PLC interface to set the IP parameters see Section 4 2 Start Network Server Command Block MS LED is Steady Green NS LED is Off The module is waiting...

Page 73: ...he physical connection is OK The Link Status LS LED is on Ethernet Receive RCV LED does not flash If you are using a switch the switch may be blocking the port for the particular IP address NOTE This...

Page 74: ...ble IP data is being obtained from EEPROM which contains the wrong value NOTE If backup IP parameters are being used the NS LED will briefly alternate between Green and Red Using CTIDiag set the IP pa...

Page 75: ...found you must reduce the broadcast traffic by reconfiguring the offending station s removing the station s or separating them from the local area network via a router NOTE Using a simple switch will...

Page 76: ...n be a valuable aid in troubleshooting these errors See the table below SYMPTOM PROBABLE CAUSE CORRECTIVE ACTION RCV Indicator does not flash when attempting to send data from a device attached to the...

Page 77: ...e there is no valid location in which to write one NOTE A command block is considered invalid if offset 2 Connection Number does not contain hex 4B is the high byte of the word This signature byte pla...

Page 78: ...l bits one set for each command slot Any command slot can be used in any order Bits 1 4 Bits 5 7 Bits 8 11 Bits 12 16 WY4 Command Control Bits Slot 1 Command Control Bits Slot 2 Command Control Bits S...

Page 79: ...s an example chart LOCATION STATUS LOCATION STATUS LOCATION STATUS WX1 HEX V100 HEX V300 HEX WX2 HEX V101 INTEGER V301 INTEGER WY3 HEX V102 INTEGER V302 INTEGER WY4 HEX V103 INTEGER V303 INTEGER WY5 I...

Page 80: ...to hex 0000 clears the trigger If WX2 eventually transitions from hex 2000 to hex 0000 the command was executed successfully 5 If WX2 changes to hex A000 a command error was encountered Acknowledge t...

Page 81: ...e TCP IP network The MS LED and NS LEDs are used together to provide more specific status information MS NS Condition Comments SG SG Module OK Network Server Started This is the normal operational sta...

Page 82: ...to obtain the necessary data to download new software This state will be held until the module is reset You may correct the problem by configuring a DHCP server to provide the necessary data SR SR Mod...

Page 83: ...f Module is not physically connected to the network On The Ethernet link is operating qt 100Mb 100 Ethernet Speed Off The Ethernet Link is operating at 10Mb On The Ethernet link is operating in Full D...

Page 84: ......

Page 85: ...INVALID SYSTEM COMMAND Connection number 19200 system was specified in the command block but the command is not a valid system command Change the logical port to a valid connection number or the comm...

Page 86: ...lid physical port number in the command block Valid physical port number for the 2572 A serial port is 1 Correct the command block and retry the command 00AE 174 NETWORK NOT INITIALIZED You attempted...

Page 87: ...You should retry the command If the receiving node is a computer simulating a 2572 A PLC server ensure that the software is correctly processing the message If the error persists contact CTI 0274 628...

Page 88: ...TI 0283 643 INVALID ADDRESS The command contained a memory address of 0 The minimum CAMP address is 1 Enter the correct value for the memory address 0284 644 INCOMPLETE WRITE The actual number of word...

Page 89: ...t obtain the data from the local PLC V memory If this occurs on a READ REMOTE command block it indicates that the memory in the remote device could not be read When this error occurs it is usually due...

Page 90: ...code If this does not correct the problem the cause may be a module firmware error Contact CTI if the error persists Server Error Codes The following error codes may be returned by the PLC server when...

Page 91: ...ew command prior to completing the previous command You can cause this error by using two command slots to send concurrent commands to the same connection number Don t do this 239F 9119 INVALID CONNEC...

Page 92: ...RK IS UNREACHABLE The network you are attempting to use is unreachable You have specified a network address for a network that cannot be found This probably occurred because you specified an incorrect...

Page 93: ...rror may occur due to communications error line noise etc on serial lines It may also result from an improperly programmed remote device Retry the operation If the error persists check out the remote...

Page 94: ...he response contained an unknown error character This error is caused by an improperly programmed server node If the server is a PLC emulating a 2572 A server review the code and correct as required I...

Page 95: ...n faulty cable loose connector etc Check all cabling carefully If the error persists and you have explicitly set the timeout value it is possible that you have set the timeout value too small Try incr...

Page 96: ......

Page 97: ...nd Interface The control structures consist of the module WX WY words and the Command Blocks Words WY5 WY8 contain the V memory addresses of the command blocks Using this command interface the PLC can...

Page 98: ...be triggered again Coupled mode is useful for initiating transfers that must be done exactly one time per PLC event such as Starting the Network Server Uncoupled Mode Processing Uncoupled Mode does no...

Page 99: ...WY4 correspond to the four command slots Command Status Word 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 Module Status Word CMD 1 Status Bits WX1 WX2 WY3 WY4 WY5 WY6 WY7 WY8 Command Slot 1 V Memory Address...

Page 100: ...o a value of 0 Bit 4 and 5 RSVD Reserved These bit positions are reserved for future use Bit 6 LS Link Status This bit indicates the status of the Ethernet Link It is set to a value of 1 when the Ethe...

Page 101: ...ame time The command slots can be triggered at different times or some or all may be triggered concurrently Command Control Word The Command Control Word contains bits that are set by the PLC logic Th...

Page 102: ...Slot which is not a valid V memory location such as 0 or which points to V memory that does not contain a Command Block CMD Busy Indicates the module is in the process of executing a command ABORT Bu...

Page 103: ...CK When the module sees ERR ACK go high it aborts the command clears the error bits and is ready to accept another command trigger for this slot Command Processing Bits The PLC sets the CMD MODE bit t...

Page 104: ...CTI 2572 A Installation and Operation Guide 96 WX WY Quick Reference...

Page 105: ...s executed During this process a specific protocol manager is loaded and associated with a particular physical port or a network socket If the connection is created using PLC logic the programmer can...

Page 106: ...it asserts CMD BUSY Time D and samples the CMD MODE bit to determine the command mode It then retrieves the command block and starts processing the command Any time after the PLC sees CMD BUSY go high...

Page 107: ...ll remain on during the processing of the Command Block When the processing is complete the module will lower CMD BUSY Time C Note that in Coupled Mode the module would wait for the PLC to lower the t...

Page 108: ...bit see the following section The error word is valid only when CMD error is asserted and PLC ERR is clear At the end of each PLC I O scan the module samples the state of ERROR ACK Error Acknowledge...

Page 109: ...mand At time C the module samples the ERROR ACK bit and determines that it is asserted indicating that the PLC has acknowledged the error Some time later the module clears the CMD ERR and PLC ERR bits...

Page 110: ...ABORT BUSY Time C After detecting ABORT BUSY the PLC should clear ABORT TRIG Time D When the Module has completed abort processing it clears ABORT BUSY Time E After ABORT BUSY is cleared the module wi...

Page 111: ...go low in between command cycles After you lower the trigger the module may execute the command additional times If ERR ACK is set and left high the associated CMD ERR bit may be set and cleared with...

Page 112: ......

Page 113: ...net community has defined address classes to accommodate networks of varying sizes Each network class can be discerned from the first octet of its IP address The following table summarizes the relatio...

Page 114: ...elong to the network ID and 0 s to the bits that belong to the host ID Once the bits are in place the 32 bit value is converted to dotted decimal notation See the example below Bits for Subnet Mask Su...

Page 115: ...st Some services such as echo server are provided via standard well known port numbers For the 2572 A PLC Network Server facility you can configure the TCP UDP port number NOTE The examples in CTI doc...

Page 116: ......

Page 117: ...e When the lease time expires the lease may be renewed or a new IP address may be assigned to the device If not renewed an IP address with an expired lease goes back into the pool of IP addresses avai...

Page 118: ...t the Module ID switches to a value of 56 the generated client ID would be 002025257256 Once you configure the DHCP server to associate this Client ID with a fixed IP address and set the Client ID swi...

Page 119: ...A that uses DHCP should have a unique reserved IP address Figure 20 shows an example of creating a reservation In the IP address box enter the IP address which you want to assign to the module In the...

Page 120: ...most common DHCP Option is the Default Router option A default router is required if you wish to allow access to the module from other networks Figure 16illustrates the dialog box used to add a defau...

Page 121: ...72 A hardware you are using Update Preparation Obtain TFTP Server Software The 2572 A module uses the Trivial File Transfer Protocol TFTP to copy the firmware files from a hard drive to the module The...

Page 122: ...following web page will be displayed If you are downloading new application firmware go to the DOWNLOAD APPLICATION FIRMWARE section enter the IP address of the computer running the TFTP server softwa...

Page 123: ...be restarted To alert you of this condition the MS LED will flash green and red You should access the event log to determine the cause of the problem make corrections and the reinitiate the download...

Page 124: ...ile The IP address that you entered is not the PC containing the TFTP server Change the IP address to the correct one The file is not present Ensure that the file is in the root directory of the TFTP...

Page 125: ...download or the file itself contains erroneous data Retry the download operation If the problem persists replace all the 2572 A firmware files in your TFTP Server root directory with a new set of fil...

Page 126: ......

Page 127: ...y 1500 VDC isolation channel to PLC Data Rate 1200 2400 9600 19200 Baud switch selectable Data Bits 7 Parity Odd Stop Bits 1 LED Indicators 1 ea Module Status MS Bicolor Red Green 1 ea Network Status...

Page 128: ...ifications or damage caused by an accident disaster acts of God neglect abuse misuse transportation alterations attachments accessories supplies non CTI parts non CTI repairs or activities or to any d...

Page 129: ...ent s shipping documentation Additionally if the product is under warranty proof of purchase date and serial number must accompany the returned equipment The current repair and or exchange rates can b...

Page 130: ...CTI 2572 A Installation and Operation Guide 122 WX WY Quick Reference...

Search results

Summary of Contents for 2572-A

Reviews:

Related manuals for 2572-A

Brands by name

Popular brands

CTI 2572-A, Installation And Operation Manual

Search results

Summary of Contents for 2572-A

Reviews:

Related manuals for 2572-A

Brands by name

Popular brands