background image

Chapter 6. Serial I/O, SNP & RTU Protocols 

GFK-2222AD 

April 2018 

233

 

 

Calculating the CRC-16 

The pseudo code for calculation of the CRC-16 is given below. 

Preset byte count for data to be sent. 
Initialize the 16-bit remainder (CRC) register to all ones. 
XOR the first 8-bit data byte with the high order byte of the 16-bit CRC register. The 
result is the current CRC. 

INIT SHIFT: 

Initialize the shift counter to 0. 

SHIFT:   

Shift the current CRC register 1 bit to the right. 
Increment shift count. 
Is the bit shifted out to the right (flag) a 1 or a 0? 

If it is a 1, XOR the generating polynomial with the current CRC. 
If it is a 0, continue. 

Is shift counter equal to 8? 

If NO, return to SHIFT. 
If YES, increment byte count. 

Is byte count greater than the data length? 

If NO, XOR the next 8-bit data byte with the current CRC and go to INIT SHIFT. 
If YES, add current CRC to end of data message for transmission and exit. 

When the message is transmitted, the receiver performs the same CRC operation on all the data bits 
and the transmitted CRC. If the information is received correctly the resulting remainder (receiver CRC) 
is 0. 

Sample CRC-16 Calculation 

The RTU device transmits the rightmost byte (of registers or discrete data) first. The first bit of the CRC-
16 transmitted is the MSB. Therefore, in the example the MSB of the CRC polynomial is to the extreme 
right.  The  X

16

  term  is  dropped  because  it  affects  only  the  quotient  (which  is  discarded)  and  not  the 

remainder  (the  CRC  characters).  The  generating  polynomial  is  therefore  1010  0000  0000  0001.  The 
remainder is initialized to all 1s. 
In  this  example,  the  CRC-16  is  calculated  for  RTU  message,  Read  Exception  Status 07.  The  message 
format is as follows: 

Address 

Function 

CRC-16 

01 

07 

 

In this example, device number 1 (address 01) is queried. You need to know the amount of data to be 
transmitted and this information can be found for every message type in 

Calculating the Length of Frame

For this message the data length is 2 bytes. 
 

Summary of Contents for PACSystems RX7i

Page 1: ...Automation Controls For Public Disclosure Programmable Control Products RX7i RX3i and RSTi EP CPU Reference Manual GFK 2222AD PACSystems RX7i RX3i and RSTi EP CPU Reference Manual GFK 2222AD April 20...

Page 2: ...warranty as to the accuracy of the information included herein Changes modifications and or improvements to equipment and specifications are made periodically and these changes may or may not be refl...

Page 3: ...please contact us by telephone or email or on the web at www geautomation com support Americas Phone 1 800 433 2682 780 420 2010 if toll free 800 option is unavailable Email digitalsupport ge com Prim...

Page 4: ...s 13 1 7 Documentation 14 Chapter 2 CPU Features Specifications 17 2 1 Common CPU Features 18 2 1 1 Features Shared by All PACSystems CPU Models 18 2 1 2 Features Shared by Certain PACSystems CPU Mode...

Page 5: ...ult Parameters 123 3 2 8 Redundancy Parameters Redundancy CPUs Only 125 3 2 9 Transfer List 125 3 2 10 COM1 and COM2 Parameters 126 3 2 11 Scan Sets Parameters 130 3 2 12 Power Consumption Parameters...

Page 6: ...10 3 I O System Diagnostic Data Collection 172 4 11 Power Up and Power Down Sequences 174 4 11 1 Power Up Sequence 174 4 11 2 Power Down Sequence 175 4 11 3 Power Cycle Operation with an Energy Pack...

Page 7: ...7 Set Up Input Buffer Function 4301 213 6 2 8 Flush Input Buffer Function 4302 214 6 2 9 Read Port Status Function 4303 215 6 2 10 Write Port Control Function 4304 217 6 2 11 Cancel COMMREQ Function...

Page 8: ...Ethernet Global Data Sweep Impact 287 A 3 6 EGD Sweep Impact for Embedded Ethernet Interface on RX3i RSTi EP CPE Models 290 A 3 7 Sweep Impact of Intelligent Option Modules 294 A 3 8 I O Interrupt Per...

Page 9: ...24 External Features of CPE310 ___________________________________________________________ 72 Figure 25 Accessing Real Time Clock Battery CPE302 CPE305 and CPE310 _____________________________ 75 Figu...

Page 10: ...__________ 240 Figure 57 RTU Preset Single Register Message Format _____________________________________________ 241 Figure 58 RTU Read Exception Status Message Format ________________________________...

Page 11: ......

Page 12: ...ure and describes the various languages which may be used their syntax and operation and provides examples CPU Configuration is described in Chapter 3 Configuration using the proprietary Proficy Machi...

Page 13: ...2 for new features of CPE400 Added Section 2 1 9 on CPU Over Temperature behavior AA Sep 2017 Addition of support for Media Redundancy Protocol MRP on CPE100 Z May 2017 Addition of RSTi EP EPSCPE100...

Page 14: ...X7i and RX3i CPU Programmer s Reference Manual GFK 2950 Chapters 2 8 and Chapter 9 respectively U Nov 2014 New Section A 3 6 for EGD Sweep Impact for RX3i CPE302 CPE305 CPE310 and RSTi EP CPE100 CPE11...

Page 15: ...hapter 3 Chapter 9 Instruction executions times measured for RX3i CPU320 CRU320 Appendix A Sweep impact times for new modules IC694MDL758 IC694APU300 CA and later IC695PNS001 IC694ALG442 IC694ALG220 I...

Page 16: ...rm process and discrete automation for various applications The CPU communicates with I O and smart option modules through a rack mounted backplane It communicates with the programmer and or HMI devic...

Page 17: ...695CPU310 300MHz Celeron CPU 10 MB user memory IC695CPU315 1 GHz Celeron M CPU 20 MB user memory IC695CPU320 1 GHz Celeron M CPU 64 MB user memory IC695NIU001 versions AAAA later 1 1 GHz Atom 510 NIU...

Page 18: ...r memory IC698CPE020 700MHz Pentium CPU 10 MB user memory IC698CPE030 600MHz Pentium M CPU 64MB user memory IC698CPE040 1800MHz Pentium M CPU 64MB user memory RX7i Redundancy CPUs with embedded Ethern...

Page 19: ...ude Open communications support includes Ethernet PROFIBUS PROFINET Modbus TCP Ethernet Global Data EGD DNP3 and serial protocols On the CPE400 one of its embedded Ethernet ports is set up as a dedica...

Page 20: ...ules IC200PNS001 IC200PNS002 For details refer to the PACSystems RX3i PROFINET IO Controller Manual GFK 2571F or later and PACSystems RX3i PROFINET Scanner Manual GFK 2737F or later Effective with the...

Page 21: ...sion 9 40 CPE302 and CPE305 each provides one RS 232 serial port CPE330 provides no serial ports Effective with CPE302 firmware version 9 409 CPE305 CPE310 CPE40010 firmware version 9 20 or CPE330 fir...

Page 22: ...Redundancy Memory Xchange RMX modules set up as redundancy links For details on the operation of PACSystems redundancy systems refer to the PACSystems Hot Standby CPU Redundancy User Manual GFK 2308...

Page 23: ...All four ports are located on the front panel of the CPU The Ethernet controller Interface of CPE100 CPE115 provides Transmission Control Protocol and Internet Protocol TCP IP communications with oth...

Page 24: ...ies 90 30 modules expansion racks and remote racks For a list of supported I O Communications Motion and Intelligent modules see the PACSystems RX3i System Manual GFK 2314 The RX7i supports most exist...

Page 25: ...tems RX3i IC695ACC403 Rackless Energy Pack Quick Start Guide GFK 3000 PACSystems RX3i IC695CPE330 1GHz 64MB CPU w Ethernet Quick Start Guide GFK 2941 PACSystems RX3i IC695ACC402 Energy Pack Quick Star...

Page 26: ...255 Series 90 PLC Serial Communications User s Manual GFK 0582 Series 90 70 DLAN DLAN Interface Module User s Manual GFK 0729 Series 90 30 Genius Bus Controller User s Manual GFK 1034 Distributed I O...

Page 27: ......

Page 28: ...ecifications This chapter provides details on the hardware features of the PACSystems CPUs and their specifications Common CPU Features RX3i CPU Features and Specifications RX7i CPU Features and Speci...

Page 29: ...size for a block is 128KB Auto Located Symbolic Variables which allows you to create a variable without specifying a reference address Bulk memory area accessed via reference table W The upper limit...

Page 30: ...available on RX3i CPE400 and RSTi EP CPE100 CPE115 RX3i CPE302 CPE305 CPE310 CPE330 CPE400 and RSTi EP CPE100 CPE115 models support OPC UA RX3i CPE302 CPE305 CPE310 CPE330 CPE400 and RSTi EP CPE100 C...

Page 31: ...nt of the module For details see Indicators for each PACSystems family Note The RESET pushbutton is provided to support future features and has no effect on CPU operation in the current version 2 1 5...

Page 32: ...that a PROFINET node exists on the selected LAN For further details refer to the PACSystems RX3i RSTi EP PROFINET IO Controller User Manual GFK 2571G or later Figure 1 Configuring an Embedded PROFINET...

Page 33: ...bedded PROFINET Controllers this feature permits control of up to 32 devices 20 of which may be redundant For rack mounted IC695PNC001 this feature permits control of up to 128 devices all of which ma...

Page 34: ...a complete unmodified application must be placed on the RDSD you can use an options txt file to download selected components of the application to the target CPU Passwords and OEM key if any are encr...

Page 35: ...roject data The RDSD LED should turn solid green indicating that the transfer completed successfully If the RDSD LED turns solid red the transfer has failed There will be a copy of the fault tables as...

Page 36: ...lly Unless the RUN STOP Switch has been disabled in the hardware configuration just stored it can be used to place the RX3i into RUN Mode after the transfer If the RDSD LED turns solid red the transfe...

Page 37: ...the options txt file is not necessary Options txt File Format Option Keyword Default value Description Download_LogicAndCfg Y yes Logic and configuration are copied to the CPE302 CPE305 CPE310 CPE330...

Page 38: ...has faults in its fault tables before it receives a store the fault tables are written to plcfaultbefore dat and iofaultbefore dat on the RDSD If the Controller has faults in its fault tables after it...

Page 39: ...imit the CPU goes into a firmware controlled reset Uniquely the CPE400 turn on its TEMP LED using amber Following reset the CPU continues to monitor the internal temperature If the temperature falls s...

Page 40: ...Vdc 1 25 A 1 0 A 1 0 A 1 0 A 1 0 A 0 A N A RX3i 5 Vdc 1 0 A 1 2 A 1 2 A 1 0 A up to 1 5 A if USB draws 0 5A 1 0 A up to 1 5 A if USB draws 0 5A 0 A N A RX3i 24Vdc Relay with Energy Pack 0 5 A at start...

Page 41: ...ly Type Conversion Y Program Security Secure Boot N Y Trusted Platform Module TPM Y Y Program Storage Battery backed RAM 10 Mbytes24 20 Mbytes24 64 Mbytes24 2 5 Mbytes25 10 Mbytes25 64 Mbytes25 64 Mby...

Page 42: ...up to max user RAM up to max user RAM up to max user RAM up to max user RAM up to max user RAM Managed Memory Symbolic I O Variables 21 27 up to 10 Mbytes up to 20 Mbytes up to 64 Mbytes up to 2 5 Mby...

Page 43: ...inactive Time of Day Clock Time of Day Clock Accuracy 60 C 2 secs day 2 secs day 2 secs day 2 secs day 2 secs day 2 secs day 2 secs day Elapsed Time Clock internal timing accuracy 0 01 max 0 01 max 0...

Page 44: ...t via ETM001 via ETM001 via ETM001 via ETM001 via ETM001 via ETM001 N A 31 CPE400 Serial IO requires firmware version 9 40 or later 32 Sixteen clients are permitted each may be SRTP or Modbus TCP 33 E...

Page 45: ...ltiple bit checking Single bit correcting Multiple bit checking Switchover Time max 38 1 logic scan 1 logic scan 1 logic scan Switchover Time min 31 3 133 ms 3 133ms 10ms Max data in redundancy transf...

Page 46: ...Guide GFK 3002 and are not replicated here The physical features of the CPE400 are shown in Figure 2 and Figure 3 Figure 2 CPE400 Front View and Features The PACSystems RX3i CPE400 part of GE s Indust...

Page 47: ...ge Supports four independent 10 100 1000 Ethernet LANs Three are located on the front panel as shown in Figure 1 LAN1 attaches via the upper dedicated RJ 45 connector LAN2 and LAN3 each attach via a p...

Page 48: ...Optional Energy Pack IC695ACC403 allows CPE400 to instantly save user memory to non volatile storage in the event of loss of power Upon restoration of power with the ACC403 connected the CPE400 PLC f...

Page 49: ...horizontally and 64 dots vertically It interacts with the DISP pushbutton which jogs the cursor from one menu item to the next and with the SEL pushbutton which activates the currently indicated menu...

Page 50: ...Chapter 2 CPU Features Specifications GFK 2222AD April 2018 39 Figure 3 CPE400 Underside Ports Connectors...

Page 51: ...connect cycle power with charged Energy Pack attached and refer to fault tables OK Blinking alternately CPU encountered a Secure Boot Error OE OE On Green Output scan is enabled Off Output scan is di...

Page 52: ...rds up to Version 3 0 Insert the card into to slot oriented as described below Apply pressure it until you feel some resistance The card will latch into place and can then be read by the equipment App...

Page 53: ...rotected with a 1 5A fuse For normal operation do not exceed 0 9 A per connector The USB overcurrent detection does not identify which port created the situation it could be either one Remove the root...

Page 54: ...dent of the controller logic I O scanning and Field Agent activities The EFA port is independently serviced by two of the four microprocessor cores This superior level of servicing is required at the...

Page 55: ...State Operating State Link Status upper On Green The corresponding link has been established Blinking Green Traffic is detected at the corresponding port Off No connection established at corresponding...

Page 56: ...environment obtained via any of these ports can be manipulated by the RX3i PLC and tagged for use in the Field Control application The remote user with an acceptable security profile can then access d...

Page 57: ...s From the Main Menu select the FA Settings menu item From the FA Settings Menus select the Commands menu item From the Commands Menus select the Config Mode menu item Confirm entering Config Mode Con...

Page 58: ...if the chosen password is not sufficiently complex After changing the password log in using the new password 9 Verify that the Log Service page displays which indicates a successful login Figure 8 Log...

Page 59: ...o the WAN refer to the section Configure a Network Proxy 2 From the Web Console navigate to the Technician Console Network Configuration page Figure 9 Technician Console Network Configuration page 3 S...

Page 60: ...the proxy server s address and port in the form proxy port into the Proxy Settings text box and press the Save button Figure 10 Enter Proxy Server Address To verify the Field Agent can successfully us...

Page 61: ...the Save button If the new server was successfully configured a success statement will be displayed and the updated time will be displayed If the time and date was more than 20 minutes out of date pr...

Page 62: ...mplates b Configure the OPC UA Data Source to opc tcp localControllerHost 4840 c Configure the OPC UA tags and subscriptions in the OPCUA Machine Adaptor xml file d Configure the data destination in t...

Page 63: ...tatus and link speed as follows LED LED State Operating State Link Status upper On Green The corresponding link has been established Blinking Green Traffic is detected at the corresponding port Off No...

Page 64: ...o change the Enable Redundancy target property to True Important Set the Background Window Timer to a minimum of 5ms in both the Primary and Backup CPE400 hardware configurations The Background Window...

Page 65: ...uses an extra 8 bits that must be initialized For details on ECC refer to the PACSystems Hot Standby CPU Redundancy User Manual GFK 2308 Note Multiple Recoverable Memory Error faults may be generated...

Page 66: ...0 Figure 3 It provides signals for connecting a suitable monitor or video adapter Pinouts for the Display Port Figure 14 are Pins Signal Name 1 3 TxD0 4 6 TxD1 7 9 TxD2 10 12 TxD3 13 AUXSEL 15 CLK AUX...

Page 67: ...de GFK 3000 for complete wiring and grounding instructions Note that the connector shown in Figure 3 is not supplied with the CPE400 Input Power Connector If no Energy Pack is to be connected refer to...

Page 68: ...icators to monitor RTC battery status The RTC battery has an estimated life of 5 years and must be replaced every 5 years on a preventative maintenance schedule To replace a depleted battery 1 Power d...

Page 69: ...d secure it in place 20 Reconnect all cables to their original connectors 21 Turn power back on 22 If needed set the current date and time via Proficy Machine Edition The replacement battery must be I...

Page 70: ...tilities in Proficy Machine Edition The clock may be set from the Field Agent using the Technician Console or a network time server Regardless of whether the clock is set from the PACSystems Runtime o...

Page 71: ...l Mounting Bracket to the CPE400 chassis 2 Keep the DIN Rail Mounting Bracket and its four screws together in case of future need otherwise discard 3 Install the panel mount bracket as shown in Figure...

Page 72: ...Chapter 2 CPU Features Specifications GFK 2222AD April 2018 61 2 2 2 CPE330 Figure 18 CPE330 Front View Features...

Page 73: ...orts a unique IP Address LAN1 and LAN2 interfaces should not be configured for the same network By default PME prohibits configuring both LAN interfaces on an overlapping IP subnet Care must also be t...

Page 74: ...as shown in Figure 19 Refer to RUN STOP Switch Operation in Chapter 4 The Reset pushbutton located just above these switches is currently not used RDSD Switch Operation CPE330 RDSD Pushbuttons Functio...

Page 75: ...ating CPU320 CRU320 compatibility status 44 RUN Blinking in unison CPU is updating an internal programmable hardware device OUT EN RUN On Green CPU is in RUN Mode Off CPU is in STOP Mode OUT EN On Gre...

Page 76: ...speed is 100 Mbps or 10 Mbps Error Checking and Correction RX3i Redundancy CPUs provide error checking and correction ECC which results in slightly slower system performance primarily during power up...

Page 77: ...nvironment 5 Place the module on a workbench with the heat sink side down 6 With ESD protection in place remove the four screws holding the upper side sheet metal in place 7 Remove the sheet metal Thi...

Page 78: ...ated Do not recharge disassemble heat above 100 C 212 F or incinerate Caution To avoid damage from electrostatic discharge use proper precautions when performing these procedures Wear a properly funct...

Page 79: ...previously configured IP Addresses or their default IP Addresses if the default IP Addresses were never changed Since CPE330 has no serial ports any serial port activity associated with the previous...

Page 80: ...stored to a CPE330 that is in CRU320 compatibility mode Users of a CPE330 with PME versions 8 60 SIM8 or later do not need to change this compatibility setting PME versions 8 60 SIM8 or later allowfor...

Page 81: ...er 2 CPU Features Specifications 70 PACSystems RX7i RX3i and RSTi EP CPU Reference Manual GFK 2222AD 2 2 3 CPE302 CPE305 and CPE310 Figure 21 IC695CPE302 CPE305 Front View Figure 22 IC695CPE310 Front...

Page 82: ...316 to connect to the serial RJ 25 port on the CPE302 CPE305 This 3m shielded cable provides a 9 pin D connector on the other end Ethernet Port The embedded Ethernet interface connects via one RJ45 Et...

Page 83: ...CPE305 Figure 24 External Features of CPE310 RDSD Switch Operation CPE302 CPE305 CPE310 RDSD Switches Function Start pushbutton Pressing this switch initiates RDSD data transfer The three position sw...

Page 84: ...K CPU OK Blinking in unison CPU is in boot mode and is waiting for a firmware update through a serial port EN OUTPUTS ENABLED RN RUN On Green CPU is in RUN Mode Off CPU is in STOP Mode EN OUTPUTS ENAB...

Page 85: ...correct the following conditions CPU type mismatch with project on RDSD Data transfer error Corrupted or invalid USB file system Insufficient space on RDSD Blinking Red RDSD Controller project name m...

Page 86: ...s different Refer to Figure 20 Figure 25 Accessing Real Time Clock Battery CPE302 CPE305 and CPE310 Replacing the Real Time Clock Battery in CPE302 CPE305 CPE310 The replacement battery must be IC690A...

Page 87: ...attery and pull it the rest of the way out Sample Tool for Battery Removal Figure 26 Sample Tool for Coin Battery Extraction Battery Removal Method 2 1 Power down the rack and remove the CPU from the...

Page 88: ...s 5 5 Service Pack 1 RDSD Port If a CPU310 configuration is stored to a CPE310 the RDSD port is enabled to allow you to transfer CPU310 projects to CPE310 models without using Proficy Machine Edition...

Page 89: ...nd I O module sweep times have changed For details refer to Appendix A The RS 232 port on the CPE310 does not provide 5Vdc power on pin 5 CPU305 Performance Differences vs CPE310 and Legacy RX3i CPUs...

Page 90: ...s CPU315 CPU320 CRU320 Each CPU has two independent on board serial ports accessed by connectors on the front of the module COM1 and COM2 provide serial interfaces to external devices Either port can...

Page 91: ...og timer fault Refer to the fault tables If PME cannot connect cycle power with battery attached and refer to fault tables CPU OK Blinking in unison CPU is in boot mode and is waiting for a firmware u...

Page 92: ...it uses an extra 8 bits that must be initialized For details on ECC refer to the PACSystems Hot Standby CPU Redundancy User Manual GFK 2308 Note Multiple Recoverable Memory Error faults may be generat...

Page 93: ...PU310 Front View Serial PortsCPU310 The CPU has two independent on board serial ports accessed by connectors on the front of the module COM1 and COM2 provide serial interfaces to external devices Eith...

Page 94: ...er fault Refer to the fault tables If PME cannot connect cycle power with battery attached and refer to fault tables CPU OK Blinking in unison CPU is in boot mode and is waiting for a firmware update...

Page 95: ...to 60 C 0 C to 60 C Without fan tray 0 C to 50 C N A 0 C to 50 C N A Power Requirements RX7i 5 Vdc 3 2 A nominal 4 5 A nominal 3 2 A nominal 6 8 A nominal RX7i 12 Vdc 0 042 A nominal 0 042 A nominal...

Page 96: ...Program Block Max Size 128 KB 128 KB 128 KB 128 KB Discrete Reference Memory I Q 26 32 Kbits 32 Kbits 32 Kbits 32 Kbits Analog Reference Memory AI AQ 26 32 Kwords 32 Kwords 32 Kwords 32 Kwords Bulk Re...

Page 97: ...x1 15 pin D conn x1 15 pin D conn x1 Station Manager Port dedicated RS 232 51 9 pin D conn x1 9 pin D conn x1 9 pin D conn x1 9 pin D conn x1 Protocols Modbus RTU Slave Y Y Y Y SNP Slave Y Y Y Y Seri...

Page 98: ...tion ECC Single bit correcting Multiple bit checking Single bit correcting Multiple bit checking Single bit correcting Multiple bit checking Switchover Time max 53 1 logic scan 1 logic scan 1 logic sc...

Page 99: ......

Page 100: ...OK On Green CPU has passed its power up diagnostics and is functioning properly Off CPU problem RUN and OUTPUTS ENABLED LEDs may be blinking in an error code pattern which can be used by technical sup...

Page 101: ...de the firmware on a non redundancy CPU model to support redundancy you must set the ECC jumper to the enabled state as described in the installation instructions provided with the upgrade kit For det...

Page 102: ...us CPU functions Two Comm LEDs indicate activity on COM1 and COM2 LED State On Blinking Off CPU Operating State OK On Green CPU has passed its power up diagnostics and is functioning properly Off CPU...

Page 103: ...rimarily during power up because it uses an extra eight bits that must be initialized If you upgrade the firmware on the non redundancy CPU model IC698CPE020 to support redundancy you must set the ECC...

Page 104: ...ectly to the same device The hub or switch connections in an Ethernet network must form a tree otherwise duplication of packets may result Ethernet Interface Indicators The Ethernet Interface indicato...

Page 105: ...LAN Off STAT Off Hardware Failure EOK Fast Blink LAN Off STAT Off Performing Diagnostics EOK Slow Blink LAN Off STAT Off Waiting for Ethernet configuration from CPU EOK Slow Blink LAN On Traffic Off S...

Page 106: ...k Codes for Ethernet Hardware Failures Blink Code Description 0x12 Undefined or Unexpected Interrupt 0x13 Timer failure during power up diagnostics 0x14 DMA failure during power up diagnostics 0x21 RA...

Page 107: ...rmal operational mode If the STAT LED is off an event has been entered into the exception log and is available for viewing via the Station Manager interface The STAT LED is on during normal operation...

Page 108: ...ithout Ethernet plug in applications 5 to 10 seconds LAN STAT Restart into Firmware Update operation More than 10 seconds STAT Normal Restart When the Ethernet Restart pushbutton is pressed for less t...

Page 109: ...in 9Vdc Input Voltage Max 30Vdc Memory Backup Mechanism56 Internal super capacitor Display LEDs Firmware Upgrade CPU Firmware Upgrade Mechanism Web Interface Ethernet Port Indirect Backplane Module Up...

Page 110: ...shared NIC 10 100 x3 10BaseT 100BaseT RJ45 Y Ethernet Communications Platform Built in Advanced User Parameters AUP file N62 RS 232 x 1 RS 485 x 1 USB USB 2 0 x 1 Disabled Time of Day Clock Time of Da...

Page 111: ...ager over Serial Comm Port N A Redundancy Features N A Memory Error Checking and Correction ECC N A Switchover Time max 65 N A Switchover Time min 65 N A Max data in redundancy transfer list66 N A Red...

Page 112: ...e physical features of the CPE100 CPE115 are shown in the Figure 31 Top View Bottom View Front View Figure 31 CPE100 CPE115 Front Top and Bottom Views and Features The PACSystems RSTi EP EPSCPE100 CPE...

Page 113: ...nnections b SRTP server cannot exceed more than 16 simultaneous connections o 8 Clients are permitted each may be SRTP or Modbus TCP or a Combination of both o up to 8 simultaneous Class 1 Ethernet Gl...

Page 114: ...192 168 0 100 It also erases the stored hardware configuration logic and contents of the backup RAM During normal operation briefly pressing the membrane pushbutton changes the state of the CPU from...

Page 115: ...ED indicates the status of PLC during powering up It starts blinking 6 seconds after applying power to the PLC and remains in this state for up to 15 seconds After this all LEDs turn off and will rema...

Page 116: ...ming software and the CPE100 CPE115 you first need to set a valid IP address EPSCPE100 CPE115 LAN1 LAN2 Default IP Address 192 168 0 100 0 0 0 0 Subnet Mask 255 255 255 0 0 0 0 0 Gateway 0 0 0 0 0 0 0...

Page 117: ...ayers The switched LAN2 will be used to communicate with devices over PROFINET within the manufacturing cell or process Figure 34 Typical Multi Tier LAN Application Star Bus Topology Whenever CPE100 C...

Page 118: ...formation about the state of internal super capacitor during power up Life Expectancy The super capacitor s life is computed based on unit s ambient temperature and is given by the below estimates Sur...

Page 119: ......

Page 120: ...U alarm processor for configured fault response Refer to the Machine Edition Logic Developer PLC Getting Started Manual GFK 1918 and the online help for a description of configuration functions Note A...

Page 121: ...talled in any pair of slots in Rack 0 except the two highest numbered lots in the rack The single wide CPE302 CPE305 RX3i CPU requires one slot and can be installed in any slot in RX3i Rack 0 except t...

Page 122: ...the program sweep time The software watchdog timer is designed to detect failure to complete sweep conditions The CPU restarts the watchdog timer at the beginning of each sweep The watchdog timer acc...

Page 123: ...gram memory and configuration and forcing or overriding discrete data Disabled Memory Protect is disabled Default Disabled Power up Mode Selects the CPU mode to be in effect immediately after power up...

Page 124: ...both LAN3 ports are used for Redundancy and Mode indicates Redundancy The configuration is grayed out and is not editable These ports may only be used as the high speed data synchronization link betw...

Page 125: ...address space Ethernet modules and daughterboards in the PACSystems controller use Modbus to PLC address mapping based on this map Modbus Register The Modbus protocol uses five reference table design...

Page 126: ...able when SNTP Mode is set to Unicast Valid Range 16 to 1024 even values only Default 32 Primary IP Address IP address of the primary time server in dotted decimal format Valid Range Any valid unicast...

Page 127: ...to December Default January DST Start Day The day when DST starts Valid Range Sunday to Saturday Default Sunday DST Start Week The week of the month when DST starts Valid Range 1 to 5 Default 0 DST St...

Page 128: ...lternates among three windows for a time equal to the value set for the window timer parameter The overall PLC sweep time is equal to the time required to execute the logic program plus the value of t...

Page 129: ...Available only when Sweep Mode is set to Normal Read only if the Backplane Communications Window Mode is set to Complete The maximum execution time for the Backplane Communications Window per scan Th...

Page 130: ...for the watchdog timer Valid range 3 through 255 in increments of 1 Default 10 Number of Last Scans Available only for CPUs with firmware version 1 5 and greater The number of scans to execute after...

Page 131: ...ere might be a small logic program but a larger amount of memory needed for registers and analog inputs and outputs Note that the content of reference memory is cleared any time the size of reference...

Page 132: ...Discrete Bits The configured number of bits reserved for symbolic discrete variables Valid range 0 through 83 886 080 in increments of 32768 bits Default 32 768 Symbolic Non Discrete Words The configu...

Page 133: ...he logic to the PLC the download routine checks if there are fault contacts in the logic and if there are it checks if the HWC to download has the Point Fault References parameter set to Enabled If th...

Page 134: ...U or a configured option module is missing system variable LOS_SIO SA15 turns ON To turn it OFF replace the module and cycle power on the rack containing the module Default Diagnostic System Bus Error...

Page 135: ...n example of an Option module This approach has a couple of disadvantages First it applies to all modules of that category which may include modules that are not critical to the process Second it reli...

Page 136: ...Us where the optional redundancy features have been activated For details on configuring CPU for redundancy refer to the PACSystems Hot Standby CPU Redundancy User Manual GFK 2308 3 2 9 Transfer List...

Page 137: ...bled without first making sure that there is a way to stop the CPU or take control of the CPU through another device such as the Ethernet module The Serial I O protocol is only active when the CPU is...

Page 138: ...ce that this protocol is communicating over Choices 2 wire There is only a single path for receive and transmit communications The receiver is disabled while transmitting 4 wire There is a separate pa...

Page 139: ...for the exclusive use of the SNP slave RTU Slave Reserved for the exclusive use of the Modbus RTU Slave protocol If the STOP Mode protocol is different from the Port mode protocol you can set paramete...

Page 140: ...for SNP communications In SNP multi drop communications this ID is used to identify the intended receiver of a message This parameter can be left blank if communication is point to point To change the...

Page 141: ...r the scan set is enabled as a fixed scan or is disabled Choices Disabled Fixed Scan Default Disabled Number of Sweeps Editable only when the Scan Type is set to Fixed Scan The scan rate of the scan s...

Page 142: ...ded to the fault table to help you understand a failed read write After addressing the fault you must clear the fault in order to try again Access Control List Settings Memory Area The memory area in...

Page 143: ...A Parameters These parameters enable or disable the OPC UA Server OPC UA Parameters Server Enabled Specify whether the CPU s OPC UA Server is enabled or not Valid Range True or False Default True UTC...

Page 144: ...r by using the Set Temporary IP Address utility refer to Setting a Temporary IP Address or by downloading a hardware configuration through a serial connection 1 In the programmer software go to the Pr...

Page 145: ...refer to Setting a Temporary IP Address or by downloading a hardware configuration through a serial connection Configuring the characteristics of the Ethernet interface Configuring Ethernet Global Dat...

Page 146: ...ess to the embedded Ethernet interface by downloading a hardware configuration Connect to the CPE302 CPE305 CPE310 with PME using an IC695ETM001 module with a known IP address and located in the same...

Page 147: ...es are not known The default IP address 192 168 0 100 of CPE100 CPE115 can be restored by powering up the module with the pushbutton pressed and waiting until the OK LED flashes twice Note Setting a T...

Page 148: ...the IP address you will need the MAC address of the Ethernet Interface to which PME will be connected 1 Connect the PACSystems CPU LAN to the Ethernet network on which PME is communicating 2 In the P...

Page 149: ...et a permanent IP Address you must set the IP Address property of the target and download store HWC to the PACSystems The Set Temporary IP Address utility can assign a temporary IP Address even if the...

Page 150: ...rries out during these modes The following topics are discussed CPU Sweep Program Scheduling Modes Window Modes Data Coherency in Communications Windows Run Stop Operations Flash Memory Operation Logi...

Page 151: ...o execute in Limited or Run to Completion mode Constant Sweep In this mode each sweep begins at a user specified Constant Sweep time after the previous sweep began The Logic Window is executed in its...

Page 152: ...igure Prog window scheduled no yes Communications Controller Window Comm window scheduled yes no Backplane Communications Window Start next sweep SWEEP Background task scheduled Background task Window...

Page 153: ...program It ends when the last instruction is executed Solving the logic creates a new set of output data For details on controlling the execution of programs refer to PACSystems RX7i RX3i and RSTi EP...

Page 154: ...plane Communications window During this part of the sweep the CPU communicates with intelligent modules such as the Genius Bus Controller and TCP IP Ethernet modules In this window the CPU completes a...

Page 155: ...t common sweep mode used for control system applications The following figure illustrates three successive CPU sweeps in Normal Sweep mode Note that the total sweep times may vary due to sweep to swee...

Page 156: ...Sweep mode is enabled The Ethernet Global Data71 page configured for either consumption or production can add up to 1 ms to the sweep time This sweep impact should be considered when configuring the...

Page 157: ...ant Window timer can be configured to be any value from 3 to 255 ms The Constant Window timer value may also be set by the programming software or by the user program using Service Request functions 3...

Page 158: ...t In Constant Window mode the total amount of time that the Controller Communications window Backplane Communications window and Background window run is fixed If the time expires while in the middle...

Page 159: ...will complete during the next sweep however part of the data will have resulted from one sweep and the remainder will be from the following sweep When the CPU is in Normal Sweep mode and the Communica...

Page 160: ...tes to physical outputs including Genius and Field Control are not performed Physical outputs are held in their configured default state in this mode The Controller and Backplane Communications Window...

Page 161: ...ns and Backplane Communications windows run in Run to Completion mode and the Background window runs in Limited mode with a 10 ms limit The number of last scans can be configured in the hardware confi...

Page 162: ...w geautomation com If backplane communications have been suspended the PACS Analyzer must be directly connected to a serial or Ethernet port on the CPU If backplane communications are operational the...

Page 163: ...n RUN I O or RUN I O Enable The CPU runs with I O sweep enabled User program memory is read only RUN or RUN Output Disable The CPU runs with outputs disabled User program memory is read only STOP The...

Page 164: ...no flash operation will occur If logic configuration and or reference tables are configured to always power up from flash these items are restored from flash to user memory regardless of the state of...

Page 165: ...sh Conditional Flash Flash Always Flash Always RAM Flash Conditional Flash Memory not preserved i e no battery Energy Pack or memory corrupted Flash See CPU Mode when Memory Not Preserved Power up Sou...

Page 166: ...tch Position CPU Mode Power up Mode RUN STOP Switch Run Enabled Stop Stop Disabled Run Enabled Run Disabled Run Disabled Run Enabled Run Enabled Run Enabled Run Disabled N A Run Disabled Stop N A N A...

Page 167: ...abled Enabled Stop Run Enabled Stop Enabled Last Enabled Disabled Stop N A Stop Disabled Last Enabled N A Run Disabled Stop Disabled Stop Disabled Last Enabled Enabled Run Disabled Stop Enabled Stop E...

Page 168: ...Time Clock The elapsed time clock tracks the time elapsed since the CPU powered on The clock is not retentive across a power failure it restarts oneach power up This seconds count rolls over seconds...

Page 169: ...hardware RTC is read and the saved delta added to the value read When the SNTP Time Transfer feature is implemented all SNTP time updates received at the CPU will cause the high resolution software TO...

Page 170: ...he OK LED blinks and the CPU goes to STOP Halt mode73 Certain functions however are still possible A fault is placed in the CPU fault table and outputs go to their default state The CPU will only comm...

Page 171: ...aults logged before the timeout See below for distinctions between CPU and CPE behavior The PACS Analyzer software is a tool that is embedded in PME It can also be downloaded from GE s Automation and...

Page 172: ...s This provides a more secure mechanism for setting and authenticating passwords and OEM keys versus the Legacy Security Mode Refer to the Important Product Information document for the CPU model and...

Page 173: ...n may only be written in STOP Mode logic may be written in STOP Mode or RUN Mode Set or delete passwords for any level Note This is the default privilege for a connection to the CPU if no passwords ar...

Page 174: ...power cycles the controller must either Store to RAM and use an Energy Pack or battery to maintain memory Store to User Flash with configuration set up to load from Flash at power up Disabling Passwo...

Page 175: ...the user program to RAM and User Flash before enabling the OEM protection For example the following steps can be used to set up OEM protection 1 Set OEM Key password Must be at Access Level 4 to set O...

Page 176: ...y and a different PME target with Enhanced Security could connect and authenticate with the same controller Passwords set with one password mechanism Legacy or Enhanced Security can be authenticated a...

Page 177: ...urity mode in PME will not allow it to be cleared back to a blank password To revert to a blank password the CPU memory must be cleared and power cycled Passwords 7 characters set with either mode Pas...

Page 178: ...nual GFK 2737 o A mini drop consisting of one or two I O modules and supervised by the IC695CEP001 Refer to PACSystems RX3i CEP PROFINET Scanner User Manual GFK 2883 o A Genius Bus supervised by a Gen...

Page 179: ...s with both reference memory inputs and reference memory outputs will experience invalid I O transfer if incorrect configuration is stored from a similar mixed I O module No fault or error condition w...

Page 180: ...lt For details on the power up and STOP Mode behavior of other modules refer to the documentation for that module Multiple I O Scan Sets Up to 32 I O scan sets can be defined for a PACSystems CPU A sc...

Page 181: ...Genius Bus Controller User s Manual GFK 2017 and the Series 90 30 Genius Bus Controller User s Manual GFK 1034 Genius I O Data Mapping Genius I O discrete inputs and outputs are stored as bits in the...

Page 182: ...ramming is required to use global data since it is integrated into the I O scan Controllers that have Genius I O capability can send global data to an RX7i and can receive data from an RX7i The progra...

Page 183: ...s diagnostic information for each discrete I O point Two memory blocks are allocated in application RAM for discrete diagnostic data one for I memory and one for Q memory One bit of diagnostic memory...

Page 184: ...ice is configured for HOLD LAST STATE the data is left alone If the device is configured for OFF the input data is set to 0 If a redundant GBC is operational the input data is not affected Application...

Page 185: ...ed Next if a ladder diagram program exists a checksum is calculated across the _MAIN ladder block If no ladder diagram program exists a checksum is calculated across the smallest standalone C program...

Page 186: ...s verify the interrupt and semaphore capabilities needed by the communications protocol After dual port interface tests are complete the communications messaging system is initialized I O System Initi...

Page 187: ...power event The Energy Pack charges continuously during normal operation The RX3i and RX7i product lines encompass several different Energy Packs so it is important to use compatible products CPU IC6...

Page 188: ...Both the CPE330 and ACC402 contain intelligence allowing each to determine the status of the other This permits the CPU to report various conditions to the user via the status bits discussed in Energy...

Page 189: ...emoved or failed Not present removed or failed Detects missing ACC403 and boots up immediately but does not use any stored memory when resuming operations Issues fail battery fault Not present bad bas...

Page 190: ...data retention Application program Fault tables and other diagnostic data Checksums on programs and blocks Override data Data in register R local register L and program register P memory Data in anal...

Page 191: ......

Page 192: ...PACSystems RX7i RX3i TCP IP Ethernet Communications User Manual GFK 2224 Serial communications may be handled by the embedded CPU Serial port s or by an IC695CMM002 or IC695CMM004 module installed in...

Page 193: ...nfiguration software and supports communications with certain control systems and supervisory computer layers in the factory Modbus TCP which supports the Modbus messaging structure over the Internet...

Page 194: ...0 LAN1 and LAN2 on the CPE330 are initially configured with following problematic IP parameters LAN1 LAN2 IP 10 10 0 1 192 168 0 1 Subnet Mask 255 255 255 0 255 255 255 0 Gateway 10 10 0 249 0 0 0 0 T...

Page 195: ...Chapter 5 Communications 184 PACSystems RX7i RX3i and RSTi EP CPU Reference Manual GFK 2222AD Figure 46 Expected Response Path Figure 47 Actual Response Path...

Page 196: ...sense the data rate on the attached LAN 100 Mbps or 10 Mbps as well as the corresponding communication mode half duplex or full duplex and the corresponding cabling arrangement straight through or cro...

Page 197: ...signments are the same for the RX3i and RX7i embedded Ethernet ports Pin Number Signal Description 1 TD Transmit Data 2 TD Transmit Data 3 RD Receive Data 4 NC No connection 5 NC No connection 6 RD Re...

Page 198: ...pport rack based Ethernet Interface modules These modules are not interchangeable For details about the capabilities installation and operation of these modules refer to PACSystems RX7i RX3i TCP IP Et...

Page 199: ...an each be configured for one of the following modes For details on CPU configuration refer to Chapter 3 RTU Slave The port can be used for the Modbus RTU slave protocol This mode also permits connect...

Page 200: ...irmware Upgrade WinLoader utility PLC in STOP No IO mode No No Message Mode used only with C blocks C Runtime Library Functions serial read serial write sscanf sprintf Yes Yes No Station Manager RX7i...

Page 201: ...d in STOP Mode based upon the configured serial port RUN Mode protocol The Run Stop protocol switching is independently configured for each serial port The RUN Mode protocol setting determines which c...

Page 202: ...tion 1 DCD Data Carrier Detect 2 TXD Transmit Data 2 TXD Transmit Data 3 RXD Receive Data 3 RXD Receive Data 4 DSR Data Set Ready 4 DSR Data Set Ready 5 0V Signal Ground 5 COM Signal Ground 6 DTR Data...

Page 203: ...ght through cable to connect with a standard AT style RS 232 port COM2 RS 485 Signals Pin No Signal Name Description 1 Shield Cable Shield Located at the bottom right of the connector as viewed from t...

Page 204: ...connector as viewed from the front of the module 2 NC No Connection 3 NC No Connection 4 NC No Connection 5 5Vdc Logic Power Provides isolated 5Vdc power 300mA maximum for powering external options 6...

Page 205: ...ect with a standard AT style RS 232 port This port contains full use of the standard RS 232 signals for future use with point to point protocol PPP Station Manager RS 232 Signals Pin No 78 Signal Name...

Page 206: ...n Isolated N A CPU320 CRU320 Non Isolated Non Isolated N A CPE302 CPE305 Non Isolated N A N A CPE310 Non Isolated Non Isolated N A CPE330 N A N A N A CPE400 Non Isolated N A N A RX7i CPE010 Optocouple...

Page 207: ...st device attached to the serial cable are Port Maximum Cable Length Cable Type COM1 RS 232 15 m 50 ft Shielded cable required for RX3i Shielded cable optional for RX7i COM2 RS 485 1200 m 4000 ft Shie...

Page 208: ...Firmware Upgrade via WinLoader 1200 2400 4800 9600 19 2K 38 4K 57 6K 115 2K Not supported not supported Message Mode 1200 2400 4800 9600 19 2K 38 4K 57 6K 115 2K 1200 2400 4800 9600 19 2K 38 4K 57 6K...

Page 209: ...ng restrictions apply when using the IC697CMM711 with PACSystems Access to W references is partially supported Only offsets 0 65535 of W can be accessed via the CMM The Program Name is currently alway...

Page 210: ...y when using the IC697PCM711 with PACSystems Access to W references is partially supported Only offsets 0 65535 of W can be accessed via the PCM The Program Name is currently always LDPROG1 for PACSys...

Page 211: ...s firmware version The module s firmware version can be found on a label attached to the EEPROM If your RX7i application program needs to access the DLAN s dual port memory use the BUS READ and WRITE...

Page 212: ...ing topics related to communications on CPU serial ports COM1 and COM2 Configuring Serial Ports Using COMMREQ Function 65520 Serial I O Protocol RTU Slave Protocol SNP Slave Protocol Details of the RT...

Page 213: ...mmer s Reference Manual GFK 2950 Chapter 4 The COMMREQ uses the following TASKs to specify the port for which the operation is intended task 19 for COM1 task 20 for COM2 Note Because address offsets a...

Page 214: ...does not have an embedded Ethernet module if a rack based Ethernet is not present a serial connection is required for programmer communications For CPE302 CPE305 CPE310 CPUs which have an embedded Eth...

Page 215: ...r Values Protocol Selector 1 SNP 3 RTU 5 Serial I O 7 Message Mode Data Rate 0 300 1 600 2 1200 3 2400 4 4800 5 9600 6 19200 7 38400 8 57600 9 115200 Parity 0 None 1 Odd 2 Even Flow Control 0 Hardware...

Page 216: ...ot used Maximum Communication Time Address 6 FFF0H Command Word serial port setup Address 7 1 SNP Protocol Address 8 0 Slave Port Mode Address 9 See COMMREQ Command Block Parameter Values Data Rate Ad...

Page 217: ...8 0 Slave Port Mode Address 9 See COMMREQ Command Block Parameter Values Data Rate Address 10 0 None 1 Odd 2 Even Parity Address 11 0 Hardware 1 None Flow Control Address 12 not used Turnaround delay...

Page 218: ...word Status Word Pointer Offset Address 4 not used Idle Timeout Value Address 5 not used Maximum Communication Time Address 6 FFF0H Command Word serial port setup Address 7 5 Serial I O Protocol Addre...

Page 219: ...remote device be initiated within 5ms of receiving the message this method may not be successful if the sweep time is 5ms or longer since timely response is not guaranteed 6 2 2 Compatibility The COMM...

Page 220: ...todial Error An error occurred while attempting to send a command string to an attached external modem The minor error code identifies the specific error 2 02h The modem command string length exceeds...

Page 221: ...sed to implement Serial I O Local COMMREQs do not receive or transmit data through the serial port Initialize Port 4300 Set Up Input Buffer 4301 Flush Input buffer 4302 Read port status 4303 Write por...

Page 222: ...ial Port Setup FFF0 COMMREQs that can be Pending While Others Execute The table below shows whether Write Bytes Read Bytes and Read String COMMREQs can be pending when other COMMREQs are executed NEW...

Page 223: ...IT mode Address 2 0008 0008 Status word memory type R Address 3 0000 0000 Status word address minus 1 R0001 Address 4 0000 0000 Not used Address 5 0000 0000 Not used Address 6 4300 10CC Initialize por...

Page 224: ...onal data received from the serial port is discarded and the Overflow Error bit in the Port Status word See Read Port Status Function is set Retrieving Data from the Buffer Data can be retrieved from...

Page 225: ...t not yet retrieved using a read command All such characters are lost Example Command Block for the Flush Input Buffer Function VALUE decimal VALUE hexadecimal MEANING Address 0001 0001 Data block len...

Page 226: ...if both a read and a write were initiated previously Example Command Block for the Read Port Status Function VALUE decimal VALUE hexadecimal MEANING Address 0003 0003 Data block length Address 1 0000...

Page 227: ...uffer Cleared No unread characters in the buffer 8 OF Overflow error Set Overflow error occurred on the serial port or internal buffer Cleared Read Port Status invoked 7 FE Framing Error Set Framing e...

Page 228: ...r reference see the tables under Serial Port Pin Assignments in Chapter 5 Support for the DTR output signal is provided for COM1 only on all RX7i and RX3i models except CPE302 CPE305 CPE330 and CPE400...

Page 229: ...ode Address 2 0008 0008 Status word memory type R Address 3 0000 0000 Status word address minus 1 R0001 Address 4 0000 0000 Not used Address 5 0000 0000 Not used Address 6 4399 112F Cancel operation c...

Page 230: ...bytes in length to send from the serial port Autodial 04400 1130h It is the responsibility of the application program to hang up the phone connection This is accomplished by reissuing the autodial co...

Page 231: ...STOM data block length includes command string 2 0000h NOWAIT mode 3 0008h Status word memory type R 4 0000h Status word address minus 1 Register 1 5 0000h not used 6 0000h not used 7 04400 1130h Auto...

Page 232: ...memory type R Address 3 0000 0000 Status word address minus 1 R0001 Address 4 0000 0000 Not used Address 5 0000 0000 Not used Address 6 4401 1131 Write bytes command Address 7 0030 001E Transmit time...

Page 233: ...dicates the reason for completion of the read operation The status word is not updated until the read operation is complete either due to timeout or when all the data has been received If the time out...

Page 234: ...irst character is in the low byte Address 3 third and fourth characters third character is in the low byte Address n subsequent characters Operating Notes for Read Bytes If the input data memory type...

Page 235: ...port status indicates the reason for completion of the read operation If the time out interval is set to zero the COMMREQ remains pending until it has received the requested string terminated by the s...

Page 236: ...irst character is in the low byte Address 3 third and fourth characters third character is in the low byte Address n subsequent characters Operating Notes for Read String If the input data memory type...

Page 237: ...cy Check is included as the final field of each query and response to ensure accurate transmission of data Note You should avoid using station address 1 for any other Modbus slave in a PACSystems cont...

Page 238: ...in the Controller Communications Window In Normal sweep mode the Controller Communications Window occurs once per sweep Because the sweep time on PACSystems can be up to 2 5 seconds the time to proces...

Page 239: ...or that function This indicates that the request was successful Error Response The slave receives the query but cannot perform the requested function The slave sends back an error response that indica...

Page 240: ...247 selects a slave station with that station address Function Code The Function Code identifies the command being issued to the station It is one byte in length and is defined for the values 0 to 25...

Page 241: ...onse Byte Count Figure 50 RTU Read Output Table Example Some information fields include entries for the range of data to be accessed in the RTU slave Note Data addresses are 0 based This means you wil...

Page 242: ...ter Timeout Usage Timeouts are used on the serial link for error detection error recovery and to prevent the missing of the end of messages and message sequences Note that although the module allows u...

Page 243: ...lgebraically as a string of terms in powers of X such as X3 X2 X0 or 1 which in turn can be expressed as the binary number 1101 A generating polynomial could be any length and contain any pattern of 1...

Page 244: ...nsmission and exit When the message is transmitted the receiver performs the same CRC operation on all the data bits and the transmitted CRC If the information is received correctly the resulting rema...

Page 245: ...010 0000 0111 1111 1 XOR Gen Polynomial 1010 0000 0000 0001 Current CRC 1000 0000 0111 1110 XOR 2nd data byte 0000 0000 0000 0111 Current CRC 1000 0000 0111 1001 Shift 1 0100 0000 0011 1100 1 XOR Gen...

Page 246: ...3rd byte 86 3 Read Registers 6 3 3rd byte 86 4 Read Analog Input 6 3 3rd byte 86 5 Force Single Output 6 6 6 Preset Single Register 6 6 7 Read Exception Status 2 3 8 Loopback Maintenance 6 6 9 14 Not...

Page 247: ...s returned in the normal response The sum of the starting point value and the number of points value must be less than or equal to the highest output point number available in the attached CPU The hig...

Page 248: ...the number of points value must be less than or equal to the highest input point number available in the attached CPU The high order byte of the Starting Point Number and Number Of Bytes fields is sen...

Page 249: ...ng register value and the number of registers value must be less than or equal to the highest register number available in the attached CPU The high order byte of the Starting Register Number and Numb...

Page 250: ...e Number of Analog Inputs value must be less than or equal to the highest analog input number available in the at attached CPU The high order byte of the Starting Analog Input Number and Number of Ana...

Page 251: ...ue less than the highest output point number available in the attached CPU It is equal to one less than the number of the output point to be forced on or off The first byte of the Data field is equal...

Page 252: ...e is sent The function code is equal to 06 The Register Number field is two bytes in length It may be any value less than the highest register available in the attached CPU It is equal to one less tha...

Page 253: ...s query is a short form of request for the purpose of reading the first eight output points An Address of zero is not allowed as this cannot be a broadcast request The function code is equal to 07 Res...

Page 254: ...back Maintenance Message Format Query The Function code is equal to 8 The Diagnostic Code is two bytes in length The high order byte of the Diagnostic Code is the first byte sent in the Diagnostic Cod...

Page 255: ...rst byte of the Data field DATA1 must be 0 or FF Any other value will cause an error response to be sent The value of the second byte of the Data field DATA2 is always equal to 0 The normal response t...

Page 256: ...ach of these fields The low order byte is the second byte in each of these fields The Byte Count is a binary number from 1 to 256 0 256 It is the number of bytes in the Data field of the force multipl...

Page 257: ...lusive The sum of the Starting Register Number and the Number of Registers value must be less than or equal to the highest register number available in the attached CPU The high order byte of the Star...

Page 258: ...and is equal to 5 The Device Type field is one byte in length and is equal to 43 hexadecimal for PACSystems The Slave Run Light field is one byte in length The Slave Run Light byte is equal to OFFH if...

Page 259: ...0 And_Mask F2 1111 0010 Or_Mask 25 0010 0101 And_Mask 0D 0000 1101 Result 17 0001 0111 Note If the Or_Mask value is zero the result is simply the logical ANDing of the current contents and And_Mask If...

Page 260: ...ters and data for the group to be written The Byte Count field specifies the quantity of bytes to follow in the Write Data field Here is an example of a query to read six registers starting at registe...

Page 261: ...d specifies the quantity of bytes to follow in the Read Data field Here is an example of a response to the query Field Name Example Hex Slave Address 11 Function 17 Byte Count 0C Read Data 1 Hi 00 Rea...

Page 262: ...d memory locations bytes returned in the normal response The sum of the Starting Byte Number and the Number of Bytes values must be less than two plus the highest scratch pad memory address available...

Page 263: ...Identifier PACSystems 43 hexadecimal 13 15 Reserved 00h 16 RTU Station Address 1 247 decimal 17 Reserved 00h 18 33 91 Sizes of Memory Types 18 1B Register Memory R size words 1C 1F Analog Input Table...

Page 264: ...c Error Subcode Error Check Figure 64 RTU Error Response Format The address reflects the address provided on the original request The exception function code is equal to the sum of the function code o...

Page 265: ...input number not available in the at attached CPU returned for function code 3 7 The Diagnostic Code is not equal to 0 1 or 4 returned for function code 8 8 The starting Byte Number and Number of Byte...

Page 266: ...ve did not respond to the request Slave turnaround time is affected by the Controller Communications Window time and the CPU sweep time as described in RTU Slave Turnaround Time Invalid Transactions I...

Page 267: ...urnaround time is set to 0ms The idle timeout is set to 10 seconds After the programmer is removed there is a slight delay equal to the idle timeout before the CPU recognizes its absence During this t...

Page 268: ...ls on SNP protocol refer to the Series 90 PLC Serial Communications User s Manual GFK 0582 CPE400 does not support this protocol 6 4 1 Permanent Datagrams Permanent datagrams survive after the SNP ses...

Page 269: ......

Page 270: ...ntains instruction and overhead timing collected for each PACSystems CPU module This timing information can be used to predict CPU sweep times The information in this appendix is organized as follows...

Page 271: ...indexed by a constant such as BoolArray 3 Complex address Boolean with a complex address that requires run time computation to resolve For example a Boolean from an array that is indexed by a variabl...

Page 272: ...s for single length units of word oriented memory COMMREQ time was measured between CPU and Ethernet module with NOWAIT option DOIO time was measured using a discrete output module Timers are updated...

Page 273: ...0 IC695CPU310 CPU315 6 0 IC695CPU320 IC695CRU32093 7 18 IC698CPE010 CPE020 6 0 IC698CRE020 6 0 with ECC enabled IC698CPE030 CPE040 6 0 IC698CRE030 CRE040 6 0 with ECC enabled MOVE_UINT CPE010 020 3 5...

Page 274: ...UINT DINT types Floating point math covers all math operations which are not fixed point REAL and LREAL types Execution Times for LD Instructions Type of Operation CPE100 CPE115 CPE310 CPE305 CPE302...

Page 275: ...70 1 46 0 84 1 07 0 59 0 36 0 20 ROR_WORD 2 93 1 52 1 25 0 66 1 45 0 82 1 11 0 57 0 39 0 19 ROR_DWORD 2 92 1 58 0 68 0 68 1 41 0 81 1 20 0 57 0 40 0 19 BTST_WORD 3 23 1 45 0 58 0 50 1 49 0 75 1 16 0...

Page 276: ...29 0 43 0 43 0 14 LT_UINT 2 48 1 15 1 03 0 49 1 02 0 60 1 04 0 00 0 35 0 13 LE_INT 2 48 1 14 1 07 0 49 1 03 0 60 1 08 0 40 0 36 0 13 LE_DINT 2 46 1 15 1 05 0 50 1 04 0 59 1 05 0 40 0 35 0 13 LE_UINT 2...

Page 277: ...1 10 0 77 0 81 0 41 0 26 0 14 MOVE_LREAL 2 74 1 43 1 15 0 61 1 56 0 77 0 95 0 42 0 31 0 14 MOVE_REAL 2 18 1 39 0 91 0 57 1 07 0 74 0 78 0 40 0 26 0 14 MOVE_UINT 2 30 1 20 1 00 0 50 MOVE_WORD 2 25 1 4...

Page 278: ...1 35 0 63 1 43 0 72 1 25 0 51 0 42 0 17 LIFOWRT_DINT 3 08 1 42 1 33 0 61 1 41 0 72 1 33 0 68 0 42 0 18 LIFOWRT_DWORD 3 15 1 47 1 35 0 63 1 43 0 72 1 25 0 53 0 41 0 18 Array ARRAY_MOVE_BIT 4 10 2 16 1...

Page 279: ...63 0 93 0 60 0 84 0 38 0 29 0 13 ABS_DINT 2 44 1 17 1 05 0 50 0 96 0 60 0 84 0 37 0 28 0 12 ABS_REAL 2 45 1 14 1 05 0 49 0 87 0 59 0 90 0 35 0 30 0 12 ABS_LREAL 2 58 1 07 1 11 0 46 0 97 0 53 0 98 0 3...

Page 280: ...0 NA NA 3 90 2 00 1 30 0 60 TP 9 80 4 80 4 20 2 10 NA NA 3 90 2 00 1 30 0 60 Counters UPCTR 4 13 4 17 1 74 1 76 1 85 1 86 1 59 1 53 0 53 0 51 DNCTR 4 16 4 18 1 73 1 75 1 84 1 86 1 54 1 53 0 52 0 51 Co...

Page 281: ...7 0 74 1 46 0 13 0 55 0 11 7 8 81 1 17 3 67 0 51 3 72 0 78 3 30 0 34 1 05 0 10 8 7 08 1 07 3 82 0 46 4 00 0 66 3 92 0 34 2 53 0 12 9 4 12 1 06 1 76 0 46 1 95 0 66 1 83 0 32 0 60 0 11 10 6 81 1 10 3 02...

Page 282: ...Disabled s Enabled s Disabled s Enabled s Disabled s Enabled s Disabled s Enabled s Disabled s 50 4 48 1 18 1 90 0 51 1 92 0 63 1 76 0 33 0 59 0 11 51 4 60 1 13 1 98 0 49 1 90 0 64 2 27 0 80 0 59 0 10...

Page 283: ...83 0 05022 0 04613 0 01532 XOR_DWORD 0 15568 0 06691 0 06669 0 05623 0 01870 NOT_WORD 0 07498 0 03249 0 03248 0 03343 0 01117 NOT_DWORD 0 11946 0 05130 0 05011 0 04666 0 01556 MCMP_WORD 0 26347 0 1127...

Page 284: ..._LREAL 0 08051 0 03457 0 03434 0 02621 0 00902 DATA_INIT_WORD 0 02071 0 00888 0 01718 0 01343 0 00250 DATA_INIT_UINT 0 01971 0 00844 0 00849 0 00732 0 00226 SWAP_WORD 0 18858 0 08076 0 08082 0 07672 0...

Page 285: ...02021 0 01640 0 00547 ARRAY_MOVE_WORD 0 02063 0 00883 0 00878 0 00643 0 00211 ARRAY_MOVE_DWORD 0 04489 0 01922 0 01913 0 01529 0 00511 ARRAY_MOVE_UINT 0 02014 0 00863 0 00922 0 00687 0 00231 SRCH_BYT...

Page 286: ...s sweep impact times for each of the CPU models The predicted sweep time is computed by adding the sweep impact time s the base sweep and the estimated logic execution time See sample calculation for...

Page 287: ...roseconds s for each CPU model Family Model Run I O enabled s Run outputs disabled s RX3i CPU31096 1086 1076 CPU315 CPU32096 180 176 CRU32096 198 194 CPE302 CPE305 CPE310 426 424 CPE330 196 192 CPE400...

Page 288: ...check for configuration and then end The presence of a configuration with no I O modules or intelligent I O modules GBC has the same effect The logic execution time is not zero in the base sweep The...

Page 289: ...sts are all processed within one of the two windows in the sweep the Controller Communications Window and the Backplane Communications Window Sweep impact times for the various service requests are al...

Page 290: ...rammer window The time required to open the Programmer Window but not process any requests The programmer is attached through an Ethernet connection no reference values are being monitored Reference t...

Page 291: ...than for those in expansion racks The byte transfer time differences will be accounted for by using different times for I O modules in the main rack versus expansion racks In addition analog input exp...

Page 292: ...4 7 19 2 11 7 40 3 35 3 16 3 11 9 38 34 9 9 8 7 31 3 30 6 Analog Exp Type 2 80 1 15 2 133 9 58 6 33 5 12 6 96 8 56 4 30 1 13 7 94 9 57 22 4 12 6 87 0 55 4 Analog Out 49 9 25 1 63 2 39 6 16 6 11 2 29 3...

Page 293: ...DL340 IC694MDL341 IC694MDL740 IC694MDL741 Discrete Output Smart Digital Output 16 point IC695MDL765 Discrete Output 32 point IC694MDL350 IC694MDL340 IC694MDL742 IC694MDL752 IC694MDL753 IC694MDL940 Dis...

Page 294: ...3 74 9 35 6 34 7 64 5 65 5 Discrete Output 16 point 61 5 38 9 87 0 74 4 35 4 34 5 65 2 64 9 Discrete Output 16 point Smart Digital Output IC695MDL765 24 8 21 4 NA NA NA NA Discrete Output 32 point 79...

Page 295: ...base and output modules main rack Sweep impact per analog input base and output module main rack ______ x ______ ______ Number of analog input expander modules same segment main rack Sweep impact per...

Page 296: ...starting input or output reference address The time to process a single scan segment is higher for an input scan segment than it is for an output scan segment The scan segment processing is the same f...

Page 297: ...e expansion rack ______ x ______ ________ Input block scan segments number of I O block scan segments sweep impact ______ x ______ ______ Output block scan segments number of I O block scan segments s...

Page 298: ...head and byte transfer time Scan Time Exchange Overhead Byte Transfer Time Exchange Overhead Exchange overhead includes the setup time for each exchange that will be transferred during the sweep When...

Page 299: ...me READ NA 6 2 100 Consume READ NA 49 5 200 Consume READ NA 96 4 256 Consume READ NA 122 8 1 Produce WRITE NA 3 4 100 Produce WRITE NA 9 9 200 Produce WRITE NA 14 9 256 Produce WRITE NA 16 5 CPE010 1...

Page 300: ...00 Produce WRITE 1 8 11 8 200 Produce WRITE 3 6 16 8 256 Produce WRITE 4 8 19 8 Worksheet C Ethernet Global Data Sweep Time Number of consumed exchanges __________________ Sweep impact per exchange x...

Page 301: ...ep impact time rather per execution of that exchange time and depending on sweep time length and production period it may occur more than one time per sweep Users configuring systems with EGD on an em...

Page 302: ...CPE310 with a no sweep load and no network traffic The table is a compilation of results based on testing with two RX3i CPE310 Systems in which one is acting as the EGD Producer and the other is acti...

Page 303: ...he EGD Consumer SN Production Period 50 Consumption Timeout ms Data size per Exchange Bytes Maximum Number of EGD Exchanges Recommended A 500 1400 8 B 300 1400 8 C 200 1400 8 D 100 1400 8 E 50 1400 8...

Page 304: ...EGD load on Embedded Ethernet Interface of the RX3i CPE302 CPE305 CPE310 RSTi EP CPE100 CPE115 and use higher periods while defining the system and configuration and consider the sweep load for minimi...

Page 305: ...57 148 116 IC697BEM731 GBC See Sweep Impact Time of Genius I O and GBCs Fixed Sweep Impact Times of RX3i Intelligent Option Modules Sweep Impact Item CPU310 s CPU315 CPU320 s NIU001 s Main Exp Main Ex...

Page 306: ...0 Analog Input 27 45 29 14 10 ALG390 Analog Output 24 33 12 13 10 MDL645 Discrete Input 23 36 18 15 10 MDL740 Discrete Output 22 31 9 14 9 VersaMax Devices PROFINET Scanner PNS IC200PNS001 40 80 38 15...

Page 307: ...s RX7i RX3i and RSTi EP CPU Reference Manual GFK 2222AD DSM314 Sweep Impact No of Axes Configured Rx3i CPU310 Rack s Rx3i NIU001 Rack s Main Exp Main Exp 1 1535 2160 1830 2360 2 2018 2906 2304 3160 3...

Page 308: ...m interrupt latency of 2 0 ms This interrupt latency time is valid except when one of the following operations occurs The programmer is attached A store of logic RUN Mode Store or word for word change...

Page 309: ...ilter time Dropped Interrupts When multiple interrupts are triggered during the interrupt latency period it is possible that interrupt blocks will only be executed one time even though the interrupt t...

Page 310: ...r to the following tables Programmer Sweep Impact Times RX7i Module Sweep Impact Times or RX3i I O Module Sweep Impact Times Sweep Impact Time of Genius I O and GBCs Programmer sweep impact ______ IOM...

Page 311: ...k The minimum average and maximum interrupt period reflect the time from when the first line of ladder logic is executed in the timed interrupt block Timed Interrupt Performance and Sweep Impact Times...

Page 312: ...he example Sample RX7i System Configuration PS CPE010 BTM 32PT Input 32PT Input 32PT Output 32PT Output 8CHN Analog Input 4CHN Analog Output ETM 0 1 2 3 4 5 6 7 8 9 MAIN RACK Sweep Calculations in S P...

Page 313: ......

Page 314: ...cations Model User Memory Size MB IC695CPE302 2MB IC695CPE305 5MB IC695CPU310 IC695CPE310 IC698CPE010 IC698CPE020 IC698CRE020 10MB IC695CPU315 20MB IC695CPE400 IC695CPE330 IC695CPU320 IC695CRU320 64MB...

Page 315: ...ults enabled Bytes 3072 Managed Memory Symbolic Variable and I O Variable Storage The total number of bytes required for symbolic and I O variables Calculated as follows number of symbolic discrete bi...

Page 316: ...L table exceed the maximum size of 8 192 words In such a case a smaller buffer is used You can add change or delete L and or P variables in your application and RUN Mode Store the application if thes...

Page 317: ...re available on our web site www geautomation com Additional Resources For more information please visit our web site www geautomation com Copyright 2003 2018 General Electric Company All Rights Reser...

Reviews: