Eaton IZM6 Series, Operating Instruction

Page: 43 / 76

43
EATON www.eaton.com
3. Function descriptions of application layer
This section is aimed to define a general format of specific valid commands for KT system programmers. Each data query format
description is available, followed by explanations and examples of the function performed by the data query.
The protocol described in this section uses the format shown in Table 3.1 as much as possible (in hexadecimal numbers).
Device address Function code
Variable start
address
High byte Variable start
address
Low byte Variable
number
High byte Variable
number
Low byte
Check code
Low byte Check code
High byte
03H 03H 00H 01H 00H 03H 55H E9H
Table 3.1 Protocol example
3.1. Read data register (03H)
Function Code 03 enables users to obtain any data and system parameters collected and recorded by the device.
The following example is to read from Slave Device #3 three basic parameters collected – Phase A voltage, Phase B voltage and Phase
C voltage - (each address in the data frame occupies 2 bytes); and in the controller, Phase A voltage address is 0100H, Phase B voltage
address 0101H, and Phase C voltage address 0102H.
Downstream message (from host to slave):
Device address Function code
Variable start
address
High byte Variable start
address
Low byte Variable
number
High byte Variable
number
Low byte
Check code
Low byte Check code
High byte
03H 03H 01H 00H 00H 03H 05H D5H
Table 3.2 Function Code 03 downstream message example
Upstream message (from slave to host):
The response includes the slave address, function code, number of data and CRC error check.
Address
Function
code
Variable
total byte
number Variable
value
High byte Variable
value
Low byte Variable
value
High byte Variable
value
Low byte Variable
value
High byte Variable
value
Low byte Check
code
Low byte Check
code
High byte
03H 03H 06H 00H 00H 00H 00H 00H 00H 38H 15H
Table 3.3 Function Code 03 upstream message example
3.2. DO output control (05H)
The controller has multiple output relays, which can be forced to act and reset through Function Code 05. When the DO function is set
to "General DO", only the communication command can control it; when set to other functions, in addition to the forced operation by
the communication command, the DO can be operated based on the functions set by itself.
Function Code 05 can force an independent DO to be set as "Action" or "Reset". The DO address in the controller starts from 0000H
(DO1 = 0000H, DO2 = 0001H, DO3 = 0002H, DO4 = 0003H).
When the variable value is FF00H, DO will be set to the "Action" state; when 0000H, the DO will be set to the "Reset" state; all the oth-
ers are wrong values and do not affect the DO state. The following example is to request Slave # 17 slave to set DO1 to the "Action"
state.
Downstream message (from host to slave):
Device
address Function
code Variable address
High byte Variable address
Low byte Variable number
High byte Variable number
Low byte Check code
Low byte Check code
High byte
11H 05H 00H 00H FFH 00H 8EH AAH
Table 3.4 Function Code 05 downstream message example
Upstream message (from slave to host):
Device
address Function
code Variable address
High byte Variable address
Low byte Variable number
High byte Variable number
Low byte Check code
Low byte Check code
High byte
11H 05H 00H 00H FFH 00H 8EH AAH
Table 3.5 Function Code 05 downstream message example
Note:
1. The controller’s DO execution mode can be set to NO level, NC level, NO pulse, and NC pulse;
2. The corresponding DO must be set to the "Reset" state before the communication enforces "action"
Instruction Leafl et
Effective September 2022
IZM6 Series Air Circuit Breaker
Operating Instruction Leafl et