MODBUS PROTOCOL ADDRESS MAP
Holding Register
addresses
Decimal (Hex)
Parameter
Number
Parameter
Number
Parameter
Number
Input Register
addresses
Decimal (Hex)
Data
Type
Data
Type
Data Content
Data Content
Parameter
Name
Default
Parameters
Default
Parameters
Read/Write
Permission
D.PNT.
PrSt.
U.C.SC.
o.C.SC.
P.oN.C.
o.E.ty.
r.ti.
D.ti.
P.idt.
o.tyP.
L.SCL.
Lo.Li.
Hi.Li.
H.SCL.
D.adr.
Baud.
10000
1000
0
0
9999
0
2000
1
3
0
0
0
30
30
1
0
1
1
0
De
cimal point
User
security parameter configuration menu
(0 = Me
nu invisible
,
1= Men
u programmable,
2
or
3 = Men
u only traceable
).
Output security parameter configuration menu
(0 = Men
u invisible
,
1= Men
u programmable,
2
or
3 = Men
u only traceable
).
Function control parameter
(23040d (5A00h) value is entered,any function executed.
(
23041d (5A01h) value is entered,the default values will be restored.
The first opening the control parameter
0=
off
, 1=
on
, 2 =
S.Str
Output upper arrow button to fetch the value of the preset selection
0=
dsab.
,1=
Enb.
, 2 =
S.on.
Output lower arrow button to fetch the value of the lower limit selection
0=
dsab.
,1=
Enb.
, 2 =
S.off.
Time to increase the output voltage
Time to decrease the output voltage
Preset
the value of the increament and decrement rate or cancel the setting
0 = cancel, 1=1,2=10,3=100,4=1000
.
Output type selection parameter
0 = 0-10V output, 1 = 4-20mA output ,2 = 0-20mA output
The lower value of the scale
The upper value of the scale
The lower limit of the preset value
The upper limit of the preset value
Preset
value
Device address for Rs485 network connection
(
Adjustable between 1-247.
)
If set to “0”,the control potentiometer mode is entered.
Baud rate se
lection
( 0= None;1=
24
00bps ; 2=
48
00bps ; 3=
96
00bps ;
4=
192
00bps; 5=
384
00bps)
Instant set value
% of value the analog output (%0.00-%100.00 sensitivity)
Percentage of the external control.Adjustable between %0.00 and %100.0
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
Word
0017d (0011h)
0016d (0010h)
0014d (000Eh)
0015d (000Fh)
0013d (000Dh)
0012d (000Ch)
0011d (000Bh)
0010d (000Ah)
0009d (0009h)
0008d (0008h)
0007d (0007h)
0006d (0006h)
0005d (0005h)
0004d (0004h)
0003d (0003h)
0002d (0002h)
0001d (0001h)
0001d (0001h)
0000d (0000h)
H0
H1
H2
H3
H4
H5
H6
H7
H8
H9
H10
H11
H12
H13
H14
H15
H16
H17
H18
I0
D0
D1
I1
0000d (0000h)
0018d (0012h)
ENDA EDP2041 DIGITAL POTENTIOMETER
o.d.ty.
1.3 Memory map for Discrete Input
1.2 Memory map for Coils
Discrete input
addresses
Data
Type
Data Content
Parameter
Name
Parameter
Name
Read/Write
Permission
--
--
--
--
--
--
--
--
Only readable
Only readable
State of the external up button (0 = OFF ,1 = ON)
State of the external down button (0 = OFF ,1 = ON)
Bit
Bit
(0000)h
(0001)h
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Readable / Writable
Default
Parameters
Only readable
Only readable
E.E.t.y.
E.d.t.y.
Returning method of the output to preset value with the external "Up" input.
0 =
dSAb.
,
1 =
Enb.
, 2 =
S.on.
Returning method of the output to preset value with the external "Down" input.
0 =
dsab .
1=
Enb.
, 2 =
S.off.
Word
Word
0020d (0011h)
0019d (0010h)
H19
H20
Readable / Writable
Readable / Writable
0
0
1.1 Memory map for Holding Registers
2. MODBUS ERROR MESSAGES
Modbus protocol has two types error, communication error and operating error. Reason of the communication error is data corruption in transmission. Parity and CRC
control should be done to prevent communication error. Receiver side checks parity and CRC of the data. If they are wrong, the message will be ignored. If format of
the data is true but function doesn’t perform for any reason, operating error occurs. Slave realizes error and sends error message. Most significant bit of function is
changed '1' to indicate error in error message by slave. Error code is sent in data section. Master realizes error type via this message.
Error Code
Meaning
Name
ILLEGAL
FUNCTION
ILLEGAL DATA ADDRESS
ILLEGAL DATA VALUE
The function code received in the query is not an allowable action for the slave. If a Poll Program
Complete command was issued, this code indicates that no program function preceded it.
The data address received in the query is not an allowable address for the slave.
A value contained in the query data field is not an allowable value for the slave.
ModBus Error Codes
{01}
{02}
{03}
Message example;
Device Address
Function Code
Beginning address
of coils.
Number of coils (N)
CRC DATA
MSB
LSB
MSB
LSB
LSB
MSB
Structure of command message (Byte Format)
(0A)h
(01)h
(04)h
(A1)h
(00)h
(01)h
(AC)h
(63)h
Device Address
Function Code
CRC DATA
LSB
MSB
Structure of response message (Byte Format)
(0A)h
(81)h
(02)h
(B0)h
(53)h
Error Code
Read/Write
Permission
As you see in command message, coil information of (4A1)h =
1185 is required but there isn’t any coil with 1185 address.
Therefore error code with number (02) (Illegal Data Address)
sends.
E-mail : [email protected]
Internet : www.suran-elektronik.de
Tel.: +49 (0)7451 / 625 617
Fax: +49 (0)7451 / 625 0650
SURAN
Industrieelektronik
Dettinger Str. 9 / D-72160 Horb a.N
4
. /
4
EDP2041-E
N
-
15092021
