WAGO 750-872/020-000 Manual Download | Manualshive

Page: 171 / 290

background image

Fieldbus Communication

•

163

MODBUS

Functions

WAGO-I/O-SYSTEM 750

ETHERNET TCP/IP

4.2.4 MODBUS Register Mapping

The following tables display the MODBUS addressing and the corresponding
IEC61131 addressing for the process image, the PFC variables, the NOVRAM
data, and the internal variables is represented.
Via the register services the states of the complex and digital I/O modules can
be determined or changed.

Register (Word) Access Reading (with FC3, FC4 and FC23):

Modbus-Address

IEC61131

[dec]

[hex]

Address

Memory Range

0
... 255

0x0000
... 0x00FF

%IW0
... %IW255

Physical Input Area (1)
First 256 Words of physical input data

256
... 511

0x0100
... 0x01FF

%QW256
... %QW511

PFC-OUT-Area
Volatile PFC Output variables

512
... 767

0x0200
... 0x02FF

%QW0
... %QW255

Physical Output Area (1)
First 256 Words of physical output data

768
... 1023

0x0300
... 0x03FF

%IW256
... %IW511

PFC-IN-Area
Volatile PFC Input variables

1024
... 4095

0x0400
... 0x0FFF

-

Modbus Exception:
“Illegal data address”

4096
... 12287

0x1000
... 0x2FFF

-

Configuration Register
(see following Chapter 4.2.5.3 Configuration
Functions)

12288
... 24575

0x3000
... 0x5FFF

%MW0
... %MW12287

NOVRAM
8kB retain memory (max. 24kB)

24576
... 25340

0x6000
... 0x62FC

%IW512
... %IW1275

Physical Input Area (2)
Additional 764 Words physical input data

25341
... 28671

0x62FD
... 0x6FFF

-

Modbus Exception: “
Illegal data address”

28672
... 29436

0x7000
... 0x72FC

%QW512
... %QW1275

Physical Output Area (2)
Additional 764 Words physical output data

29437
... 65535

0x72FD
... 0xFFFF

-

Modbus Exception: “
Illegal data address”

Register (Word) Access Writing (with FC6, FC16, FC22 and FC23):

Modbus-Address

IEC61131

[dec]

[hex]

Address

Memory Range

0
... 255

0x0000
... 0x00FF

%QW0
... %QW255

Physical Output Area (1)
First 256 Words of physical output data

256
... 511

0x0100
... 0x01FF

%IW256
... %IW511

PFC-IN-Area
Volatile PFC Input variables

512
... 767

0x0200
... 0x02FF

%QW0
... %QW255

Physical Output Area (1)
First 256 Words of physical output data

768
... 1023

0x0300
... 0x03FF

%IW256
... %IW511

PFC-IN-Area
Volatile PFC Input variables

1024
... 4095

0x0400
... 0x0FFF

-

Modbus Exception:
“Illegal data address”

4096
... 12287

0x1000
... 0x2FFF

-

Configuration Register
(see following Chapter 4.2.5.3 Configuration
Functions)

«
...
169
170
171
172
173
...
»

Summary of Contents for 750-872/020-000

Page 1: ...Modular I O System Programmable Fieldbus Controller for Telecontrol Applications 750 872 020 000 Manual Technical description installation and configuration Version 1 0 0 ...

Page 2: ...49 0 571 8 87 5 55 Fax 49 0 571 8 87 85 55 E Mail support wago com Every conceivable measure has been taken to ensure the correctness and completeness of this documentation However as errors can never be fully excluded we would appreciate any information or ideas at any time E Mail documentation wago com We wish to point out that the software and hardware terms as well as the trademarks of compani...

Page 3: ...r 14 2 4 Component Update 15 2 5 Storage Assembly and Transport 15 2 6 Mechanical Setup 16 2 6 1 Installation Position 16 2 6 2 Total Expansion 16 2 6 3 Assembly onto Carrier Rail 17 2 6 3 1 Carrier Rail Properties 17 2 6 3 2 WAGO DIN Rail 18 2 6 4 Spacing 18 2 6 5 Plugging and Removal of the Components 19 2 6 6 Assembly Sequence 20 2 6 7 Internal Bus Data Contacts 21 2 6 8 Power Contacts 22 2 6 9...

Page 4: ...ess Input Image 52 3 1 5 3 Example of a Process Output Image 53 3 1 5 4 Process Data Architecture 54 3 1 6 Data Exchange 55 3 1 6 1 Memory Areas 56 3 1 6 2 Addressing 58 3 1 6 2 1 Addressing the I O Modules 58 3 1 6 2 2 Address Range 58 3 1 6 2 3 Absolute Addresses 60 3 1 6 3 Data Exchange between MODBUS TCP Master and I O Modules61 3 1 6 4 Data Exchange between EtherNet IP Master and I O Modules ...

Page 5: ...ssion by the Fieldbus 89 3 1 9 Information on the Web Based Management System 90 3 1 10 Configuration of SNMP 98 3 1 10 1 Description of MIB II 98 3 1 10 1 1 System Group 99 3 1 10 1 2 Interface Group 99 3 1 10 1 3 Address Translation Group 100 3 1 10 1 4 IP Group 101 3 1 10 1 5 IpRoute Table 102 3 1 10 1 6 IpNetToMediaTable 102 3 1 10 1 7 ICMP Group 102 3 1 10 1 8 TCP Group 104 3 1 10 1 9 UDP Gro...

Page 6: ...imple Mail Transfer Protocol 147 4 1 3 5 Application Protocols 147 4 2 MODBUS Functions 148 4 2 1 General 148 4 2 2 Use of the MODBUS Functions 150 4 2 3 Description of the MODBUS Functions 151 4 2 3 1 Function Code FC1 Read Coils 152 4 2 3 2 Function Code FC2 Read Input Discretes 153 4 2 3 3 Function Code FC3 Read multiple registers 154 4 2 3 4 Function code FC4 Read input registers 155 4 2 3 5 F...

Page 7: ...ut Point Extended 1 3 6C hex 70 hex 74 hex 195 4 3 3 2 19 Module configuration 80 hex 195 4 3 3 2 20 Module configuration Extended 81 hex 195 4 3 3 2 21 Input fieldbus variable USINT A0 hex 195 4 3 3 2 22 Input fieldbus variable USINT Extended 1 A1 hex 196 4 3 3 2 23 Input fieldbus variable USINT Extended 2 A2 hex 196 4 3 3 2 24 Output fieldbus variable USINT A3 hex 196 4 3 3 2 25 Output fieldbus ...

Page 8: ...ion Examples 252 6 1 Test of MODBUS protocol and fieldbus nodes 252 6 2 Visualization and control using SCADA software 252 7 Use in Hazardous Environments 255 7 1 Foreword 255 7 2 Protective Measures 255 7 3 Classification Meeting CENELEC and IEC 255 7 3 1 Divisions 255 7 3 2 Explosion Protection Group 257 7 3 3 Unit Categories 258 7 3 4 Temperature Classes 259 7 3 5 Types of Ignition Protection 2...

Page 9: ...t or the legal protection of utility patents are reserved to WAGO Kontakttechnik GmbH Co KG Third party products are always indicated without any notes concerning patent rights Thus the existence of such rights must not be excluded 1 1 2 Personnel Qualification The use of the product described in this manual requires special qualifications as shown in the following table Activity Electrical specia...

Page 10: ...any requirements pertaining to a modified and or new hardware or software configuration directly to WAGO Kontakttechnik GmbH Co KG 1 2 Standards and Regulations for Operating the 750 Series Please observe the standards and regulations that are relevant to your installation The data and power lines must be connected and installed in compliance with the standards to avoid failures on your installati...

Page 11: ... to the device Attention Marginal conditions that must always be observed to ensure smooth and efficient operation ESD Electrostatic Discharge Warning of damage to the components through electrostatic discharge Observe the precautionary measure for handling components at risk of electrostatic discharge Note Make important notes that are to be complied with so that a trouble free and efficient devi...

Page 12: ...d on a long term basis Warning The components are not resistant against materials having seeping and insulating properties Belonging to this group of materials is e g aerosols silicones triglycerides found in some hand creams If it cannot be ruled out that these materials appear in the component environment then the components must be installed in an enclosure that is resistant against the above m...

Page 13: ... between two names characterizes the selection of a menu point from a menu e g File New END Press buttons are marked as bold with small capitals e g ENTER Keys are marked bold within angle brackets e g F5 Courier The print font for program codes is Courier e g END_VAR 1 6 Number Notation Number code Example Note Decimal 100 Normal notation Hexadecimal 0x64 C notation Binary 100 0110 0100 Within in...

Page 14: ...ller RJ 45 Item No Description 750 872 020 000 Telecontrol controller RJ 45 1 8 Important Comments for Starting up Attention For the start up of the controller 750 872 020 000 important notes are to be considered because it strongly differentiates in some points of starting up the WAGO ETHERNET controller 750 842 Read for this the chapter Starting up an ETHERNET TCP IP fieldbus node 1 9 Abbreviati...

Page 15: ...relevant field bus The electronics process the data of the bus modules and make it available for the field bus communication The 24 V system supply and the 24 V field supply are fed in via the integrated power supply terminal The field bus coupler communicates via the relevant field bus The programmable field bus controller PFC enables the implementation of additional PLC functions Programming is ...

Page 16: ...ion type CAGE CLAMP Wire range 0 08 mm 2 5 mm AWG 28 14 Stripped length 8 9 mm 9 10 mm for components with pluggable wiring 753 xxx Contacts Power jumpers contacts blade spring contact self cleaning Current via power contacts max 10 A Voltage drop at I max 1 V 64 modules Data contacts slide contact hard gold plated 1 5 µm self cleaning Climatic environmental conditions Operating temperature 0 C 55...

Page 17: ...0 5 kV line earth 1 B 1 kV line line 2 EN 61000 4 5 surge AC supply 2 kV line earth 3 B EN 61000 4 6 RF disturbances 10 V m 80 AM 0 15 80 MHz 3 A Emission of interference for industrial areas acc to EN 61000 6 4 2001 Test specification Limit values QP Frequency range Distance 79 dB µV 150 kHz 500 kHz EN 55011 AC supply conducted 73 dB µV 500 kHz 30 MHz 40 dB µV m 30 MHz 230 MHz 10 m EN 55011 radia...

Page 18: ...test a Frequency change max 1 octave minute b Vibration direction 3 axes 15 g IEC 60068 2 27 shock Note on shock test a Type of shock half sine b Shock duration 11 ms c Shock direction 3x in positive and 3x in negative direction for each of the three mutually perpendicular axes of the test specimen IEC 60068 2 32 free fall 1 m module in original packing QP Quasi Peak Note If the technical data of ...

Page 19: ...t AF disturbances harmonic waves 3 V 2 W A Type test high voltage 755 V DC 1500 V AC Emission of interference acc to Germanischer Lloyd 2003 Test specification Limit values Frequency range Distance 96 50 dB µV 10 kHz 150 kHz 60 50 dB µV 150 kHz 350 kHz Type test EMC1 conducted allows for ship bridge control applications 50 dB µV 350 kHz 30 MHz 80 52 dB µV m 150 kHz 300 kHz 3 m 52 34 dB µV m 300 kH...

Page 20: ...n residential areas housing commercial and business areas small scale enterprises The special permit can be obtained from an authority or inspection office In Germany the Federal Office for Post and Telecommunications and its branch offices issues the permit It is possible to use other field bus couplers controllers under certain boundary conditions Please contact WAGO Kontakttechnik GmbH Co KG Ma...

Page 21: ... IP Dimensions 51 24V 0V 01 02 C D B A C D B A C D B A C D B A C D B A 100 12 24 64 35 65 Side view Dimensions in mm Fig 2 2 Dimensions g01xx05e Note The illustration shows a standard coupler For detailed dimensions please refer to the technical data of the respective coupler controller ...

Page 22: ... 0 1 0 3 0 0 0 2 0 3 B 0 0 0 0 0 0 Hansastr 27 D 32423 Minden ITEM NO 750 333 PROFIBUS DP 12 MBd DPV1 0 V Power Supply Electronic PATENTS PENDING II 3 GD DEMKO 02ATEX132273 X EEx nA II T4 24V DC AWG 28 14 55 C max ambient LISTED 22ZA AND 22XM 7 2 0 7 2 0 1 0 3 0 0 0 2 0 3 B 0 6 0 6 0 6 1 0 3 0 0 0 2 0 0 3 D S N O S W H W GL F W L Power Supply Field 24 V B 0 6 0 6 0 6 PROFIBUS WAGO I O SYSTEM 750 3...

Page 23: ...ace the current version data are registered into the columns of the matrix Additionally with the update of a field bus coupler or controller also the cover of the configuration and programming interface of the coupler or controller is printed on with the current manufacturing and production order number The original manufacturing data on the housing of the component remain thereby 2 5 Storage Asse...

Page 24: ...connected to the coupler controller is 780 mm When assembled the I O modules have a maximum length of 768 mm Examples 64 I O modules of 12 mm width can be connected to one coupler controller 32 I O modules of 24 mm width can be connected to one coupler controller Exception The number of connected I O modules also depends on which type of coupler controller is used For example the maximum number of...

Page 25: ... electro magnetic disturbances In order to avoid corrosion this tin plated carrier rail contact must not form a galvanic cell with the material of the carrier rail which generates a differential voltage above 0 5 V saline solution of 0 3 at 20 C The carrier rail must optimally support the EMC measures integrated into the system and the shielding of the bus module connections A sufficiently stable ...

Page 26: ...ted unslotted 210 118 35 x 15 2 3 mm steel yellow chromated unslotted 210 198 35 x 15 2 3 mm copper unslotted 210 196 35 x 7 5 1 mm aluminum unslotted 2 6 4 Spacing The spacing between adjacent components cable conduits casing and frame sides must be maintained for the complete field bus node Fig 2 4 Spacing g01xx13x The spacing creates room for heat transfer installation or wiring The spacing to ...

Page 27: ...locking disc using a screwdriver To pull out the field bus coupler controller release the locking disc by pressing on the bottom groove with a screwdriver and then pulling the orange colored unlocking lug Fig 2 5 Coupler Controller and unlocking lug g01xx12e It is also possible to release an individual I O module from the unit by pulling an unlocking lug Fig 2 6 removing bus terminal p0xxx01x Dang...

Page 28: ...r according to the project planning Errors in the planning of the node in terms of the potential groups connection via the power contacts are recognized as the bus modules with power contacts male contacts cannot be linked to bus modules with fewer power contacts Attention Always link the bus modules with the coupler controller and always plug from above Warning Never plug bus modules from the dir...

Page 29: ...ta contacts which are available as self cleaning gold spring contacts Fig 2 7 Data contacts p0xxx07x Warning Do not touch the gold spring contacts on the I O modules in order to avoid soiling or scratching ESD Electrostatic Discharge The modules are equipped with electronic components that may be destroyed by electrostatic discharge When handling the modules ensure that the environment persons wor...

Page 30: ...n the left side Danger The power contacts are sharp edged Handle the module carefully to prevent injury Attention Please take into consideration that some bus modules have no or only a few power jumper contacts The design of some modules does not allow them to be physically assembled in rows as the grooves for the male contacts are closed at the top Fig 2 8 Example for the arrangement of power con...

Page 31: ...to the opening After removing the operating tool the conductor is safely clamped More than one conductor per connection is not permissible If several conductors have to be made at one connection point then they should be made away from the connection point using WAGO Terminal Blocks The terminal blocks may be jumpered together and a single wire brought back to the I O module connection point Atten...

Page 32: ...se see catalog Fig 2 10 Isolation g0xxx01e Attention The ground wire connection must be present in each group In order that all protective conductor functions are maintained under all circumstances it is recommended that a ground wire be connected at the beginning and end of a potential group ring format please see chapter 2 8 3 Thus if a bus module comes loose from a composite during servicing th...

Page 33: ...stem supply modules 750 613 The voltage supply is reverse voltage protected Attention The use of an incorrect supply voltage or frequency can cause severe damage to the component Fig 2 11 System Supply g0xxx02e The direct current supplies all internal system components e g coupler controller electronics field bus interface and bus modules via the internal bus 5 V system voltage The 5 V system volt...

Page 34: ...age 5 V for electronics of the bus modules and coupler controller Residual current for bus terminals Available current for the bus modules Provided by the bus power supply unit See coupler controller and internal system supply module 750 613 cf catalogue W4 Volume 3 manuals or internet Example Coupler 750 301 internal current consumption 350 mA at 5V residual current for bus modules 1650 mA at 5V ...

Page 35: ...ed via the integrated accuracy check The maximum input current of the 24 V system supply is 500 mA The exact electrical consumption I 24 V can be determined with the following formulas Coupler Controller I 5 V total Sum of all the internal current consumption of the connected bus modules internal current consumption coupler controller 750 613 I 5 V total Sum of all the internal current consumption...

Page 36: ...r other potentials e g AC 230 V Likewise with the aid of the power supply modules various potentials can be set up The connections are linked in pairs with a power contact Fig 2 13 Field Supply Sensor Actuator g0xxx03e The supply voltage for the field side is automatically passed to the next module via the power jumper contacts when assembling the bus modules The current load of the power contacts...

Page 37: ...otentials e g the alteration from DC 24 V to AC 230V a spacer module should be used The optical separation of the potentials acts as a warning to heed caution in the case of wiring and maintenance works Thus the results of wiring errors can be prevented 2 7 3 2 Fusing Internal fusing of the field supply is possible for various field voltages via an appropriate power supply module 750 601 24 V DC S...

Page 38: ...ge a fuse or to switch off the voltage in succeeding bus modules the fuse holder may be pulled out In order to do this use a screwdriver for example to reach into one of the slits one on both sides and pull out the holder Fig 2 15 Removing the fuse carrier p0xxx05x Lifting the cover to the side opens the fuse carrier Fig 2 16 Opening the fuse carrier p0xxx03x Fig 2 17 Change fuse p0xxx04x After ch...

Page 39: ...using can be done externally The fuse modules of the WAGO series 281 and 282 are suitable for this purpose Fig 2 18 Fuse modules for automotive fuses series 282 pf66800x Fig 2 19 Fuse modules with pivotable fuse carrier series 281 pe61100x Fig 2 20 Fuse modules series 282 pf12400x ...

Page 40: ... are required for the certified operation of the system Item No Name Description 750 626 Supply filter Filter module for system supply and field supply 24 V 0 V i e for field bus coupler controller and bus power supply 750 613 750 624 Supply filter Filter module for the 24 V field supply 750 602 750 601 750 610 Therefore the following power supply concept must be absolutely complied with Fig 2 21 ...

Page 41: ...01 750 613 750 512 750 512 750 616 750 513 750 610 750 552 750 600 750 612 750 616 1 a b c d 1 2 2 24V 24V 10 A 10 A L1 L2 L3 N PE 230V 230V Main ground bus Shield screen bus System Supply Field Supply Field Supply 1 Separation module recommended 2 Ring feeding recommended a Power Supply on coupler controller via external Supply Module b Internal System Supply Module c Supply Module passive d iagn...

Page 42: ...eld devices and bus modules should be considered The field supply as well influences the bus modules as the inputs and outputs of some bus modules require the voltage of the field supply Note The system supply and the field supply should be isolated from the power supplies in order to ensure bus operation in the event of short circuits on the actuator side WAGO products Item No Description 787 903...

Page 43: ...sulated Assembly Insulated assembly has been achieved when there is constructively no direct conduction connection between the cabinet frame or machine parts and the carrier rail Here the earth must be set up via an electrical conductor The connected grounding conductor should have a cross section of at least 4 mm2 Recommendation The optimal insulated setup is a metallic assembly plate with ground...

Page 44: ...s Some components in the I O system have a carrier rail contact that dissipates electro magnetic disturbances to the carrier rail Fig 2 23 Carrier rail contact g0xxx10e Attention Care must be taken to ensure the direct electrical connection between the carrier rail contact and the carrier rail The carrier rail must be grounded For information on carrier rail properties please see chapter 2 6 3 2 ...

Page 45: ...le Attention Should the ground conductor connection of the power jumper contacts within the node become disrupted e g due to a 4 channel bus terminal the ground connection will need to be re established The ring feeding of the grounding potential will increase the system safety When one bus module is removed from the group the grounding connection will remain intact The ring feeding method has the...

Page 46: ...ncoming disturbances can be easily diverted The shielding should be placed over the entrance of the cabinet or housing in order to already repel disturbances at the entrance 2 9 2 Bus Conductors The shielding of the bus conductor is described in the relevant assembly guidelines and standards of the bus system 2 9 3 Signal Conductors Bus modules for most analog signals along with many of the interf...

Page 47: ...g feet Together these allow many different possibilities See catalog W4 volume 3 chapter 10 Fig 2 25 WAGO Shield Screen Connecting System p0xxx08x p0xxx09x and p0xxx10x Fig 2 26 Application of the WAGO Shield Screen Connecting System p0xxx11x 2 10 Assembly Guidelines Standards DIN 60204 Electrical equipping of machines DIN EN 50178 Equipping of high voltage systems with electronic components repla...

Page 48: ...nto the process image The modules are mapped in the order of their position after the controller The digital modules are grouped after the analog modules in the form of words 16 bits per word When the number of digital I O s exceeds 16 bits the controller automatically starts another word The controller has 512 KB of program memory 128 KB of data memory and 24 KB of retained memory The programmer ...

Page 49: ...ity Compatible Versions Programming tool WAGO I O PRO CAA 759 333 V2 3 7 2 with restriction compatible see the note below V2 3 8 x recommended Controller 750 872 020 000 SW 11 Delivery status SW 11 SW 11 Delivery status SW 11 For programming the fieldbus controller 750 872 020 000 with the Firmware version SW 11 supports the software version V 2 3 8 x of the WAGO I O PRO CAA 759 333 Programming To...

Page 50: ... 24V power jumper contacts mode switch flap open Fig 3 1 1 Fieldbus controller ETHERNET TCP IP g087220e The Fieldbus Controller consists of Device supply with internal system supply module for the system supply as well as power jumper contacts for the field supply via assembled I O modules Fieldbus interface with the bus connection Display Elements LED s for operation status diagnostics and commun...

Page 51: ... the controller and the internal electronics of the connected I O modules 1 2 3 4 5 6 7 8 DC DC 24 V 10 nF 24 V 10 nF 0 V 24 V 0 V 24 V 0 V 0 V 750 872 020 000 FiELDBUS INTERFACE ELECTRONIC ELECTRONIC FiELDBUS INTERFACE I O MODULES Fig 3 1 2 Device supply G087221e The internal electronics of the controller and I O modules are electrically isolated from the field side power connections and field de...

Page 52: ... DC DC converters and optocouplers in the fieldbus interface Contact Signal 1 TD Transmit 2 TD Transmit 3 RD Receive 4 free 5 free 6 RD Receive 7 free 8 free Fig 3 1 3 RJ45 Connector and RJ45 Connector Configuration Attention Only for use in LAN not for connection to telecommunication circuits 3 1 3 4 Display Elements The operating condition of the controller or the node is displayed with the help...

Page 53: ...n Status of the operating voltage power jumper contacts LED position is manufacturing dependent More Information The evaluation of the displayed LED signals is described in Chapter 3 1 11 LED Display 3 1 3 5 Configuration and Programming Interface The Configuration and Programming Interface port is located behind a cover flap This communications port can be use with WAGO I O CHECK and WAGO I O PRO...

Page 54: ...d PFC application are executed Activate program processing RUN From top to middle position Firmware is executed PFC application is stopped Stop program processing STOP Lower position bootstrap Controller starts the operating system loader Push down i e with a screwdriver Hardware reset All outputs and flags are reset variables are set to 0 or to FALSE or to an initial value Retain variables or fla...

Page 55: ...he PLC link on that the function can be accordingly specified If there is a checkmark in the small box behind Enabled all outputs are set to zero otherwise the outputs remain to the last current value 3 1 3 7 Hardware Address MAC ID Each WAGO Telecontrol controller is supplied from the factory with a unique and internationally unambiguous physical ETHERNET address also referred to as MAC ID Media ...

Page 56: ...tch is in the top position or by a start command from the WAGO I O PRO CAA The controller starts a PLC cycle by first reading the fieldbus data I O modules and time data Next the PLC program in RAM is processed scanned After the program is processed the fieldbus data and I O modules are updated with new output data System functions are then preformed i e system diagnostics communications time calc...

Page 57: ...o RAM Determination of the I O modules and the configuration Test o k Yes No Stop Test o k No Determination of the I O modules and the configuration STOP Operating mode Operating mode STOP RUN RUN Fieldbus data data of I O modules Yes Fieldbus start behaviour as a coupler operating mode switch is in the top position or start command in WAGO IO 32 or PRO Online Start Online Stop operating mode swit...

Page 58: ...r modules encoder modules and communication modules are byte based in which the data exchange is made by bytes The process image is divided into an input and an output data area Each I O module is assigned a location in the process image based on the data exchange type i e bit based or byte based and their position after the controller All of the byte based I O modules are filled in the process im...

Page 59: ...hod used by PLC functions to access process data is independent of the fieldbus system This access always takes place via an application related IEC 61131 3 program In contrast to the above access from the fieldbus side is fieldbus specific For the Telecontrol controller either a MODBUS TCP master or an Ethernet IP master is used MODBUS TCP accesses the data via implemented MODBUS functions Here d...

Page 60: ...ernet 750 842 I O W AGO ßI O ßSY STE M DI DI DI DI AI AI AI AI Word2 Word1 Word2 Word2 Word1 Highbyte Lowbyte 0x0003 IW3 0x0002 IW2 0x0001 IW1 0x0000 IW0 0x0005 IW5 0x0004 IW4 0x0007 IW7 0x0006 IW6 0x0008 IW8 0x0001 IX8 1 0x0000 IX8 0 0x0003 IX8 3 0x0002 IX8 2 0x0004 IX8 4 0x0004 IX8 4 0x0008 IX8 8 0x000C IX8 12 0x0005 IX8 5 0x0005 IX8 5 0x0009 IX8 9 0x000D IX8 13 0x0006 IX8 6 0x0006 IX8 6 0x000A ...

Page 61: ...h an offset of 1000hex 0x1000 added onto the MODBUS address Bit 1 Bit 2 Word2 Word1 Word2 Word1 Word2 Word1 Word2 Word1 Word2 Word1 Word2 Word1 0x0003 0x0203 QW3 0x0002 0x0202 QW2 0x0001 0x0201 QW1 0x0000 0x0200 QW0 0x0004 0x0204 QW4 0x0203 QW3 0x0202 QW2 0x0201 QW1 0x0200 QW0 0x0204 QW4 0x0000 0x0200 QX4 0 0x0001 0x0201 QX4 1 0x0200 QX4 0 0x0201 QX4 1 ON LINK TxD RxD ERROR Ethernet 750 842 W AGO ...

Page 62: ...dbus specific In the case of an Ethernet TCP IP coupler controller the process image uses a word structure with word alignment The internal mapping method for data greater than one byte conforms to the Intel format More Information You can find the fieldbus specific process data architecture for all I O Modules of the WAGO I O SYSTEM 750 and 753 in the chapter Process Data Architecture ...

Page 63: ...ns 5 connections via the PFC available for IEC 61131 3 application programs 2 connections for WAGO I O PRO CAA these connections are reserved for debugging the application program via ETHERNET For debugging WAGO I O PRO CAA requires 2 connections at the same time However only one programming tool can have access to the controller 10 connections for FTP 2 connections for SNMP The maximum number of ...

Page 64: ...g data of the input modules is possible from both the controller s CPU and from the fieldbus master See Figure 3 8 2 In the same manner writing data to output modules is possible from both the controller s CPU and from the fieldbus master The controller s process image also contains variables called PFC Variables These variables are allocated based on the fieldbus protocols The MODBUS TCP PFC vari...

Page 65: ...operating mode switch is turned to its upper position or by a start command from WAGO I O PRO CAA NOVRAM Remanent Memory 24 kByte Retain The remanent memory is non volatile memory i e all values are retained following a voltage failure The memory management is automatic This 24 kByte sized memory area word 0 12288 devides on into a 8 kByte sized addressable range for the flags MW0 MW4095 and a 16 ...

Page 66: ...of input and output bits bytes of a specific module please refer to the modules manual Note Changing the physical layout of a node will result in a new structure of the process image Also the addresses of the process data will change When adding or removing modules the process data must be verified Data width 1 Word channel Data width 1 Bit channel Analog input modules Digital input modules Analog...

Page 67: ...e I O module data Data Address Bit 512 0 512 7 512 8 512 15 513 0 513 7 513 8 513 15 1274 0 1274 7 1274 8 1274 15 1275 0 1275 7 1275 8 1275 15 Byte 1024 1025 1026 1027 2548 2549 2550 2551 Word 512 513 1274 1275 Dword 256 637 Table 3 1 4 Second Address Range for the I O Module Data Word 1276 1531 Address range for Ethernet IP fieldbus data Data Address Bit 1276 0 1276 7 1276 8 1276 15 1277 0 1277 7...

Page 68: ... Volatile SPS Output variables QW1276 QW1531 Configuration register read write see Chapter Ethernet Firmware register read see Chapter Ethernet Flags RETAIN variables read write read write Remanent memory MW0 MW12288 Table 3 1 7 Overview IEC 61131 3 Address ranges 3 1 6 2 3 Absolute Addresses Accessing individual memory cells absolute addresses in accordance with IEC 61131 3 is made using special ...

Page 69: ...ange between the MODBUS TCP Master and the I O modules is made via the Ethernet Fieldbus port using MODBUS TCP read and write commands The controller handles four different types of process data with MODBUS TCP Input words Output words Input bits Output bits The relationship between bits and words are defined in the table below Digital inputs outputs 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Process ...

Page 70: ...0x72FC PII Process Input Image PIO Process Output Image MODBUS master PII PIO I O modules Inputs Outputs Programmable Fieldbus Controller Fig 3 1 9 Data exchange between MODBUS TCP master and I O modules g015045e Starting from address 0x1000 there are the register functions The register functions made available in the coupler can be addressed by the MODBUS master along with the implemented MODBUS ...

Page 71: ... Input and output assemblies have different functions An input assembly reads data from the application over the network or produces data on the network Where as an output assembly writes data to the application or consumes data from the network Various assembly instances are permanently pre programmed in the fieldbus controller static assembly After switching on the power supply the assembly obje...

Page 72: ...ocess Input Image PIO Process Output Image Inputs Outputs I O modules 750 4xx 6xx PII PIO PLC functionality CPU Inputs Outputs Programmable Fieldbus Controller Fig 3 1 10 Data exchange between PLC functionality CPU and I O modules15043e 3 1 6 6 Data Exchange between Master and PLC Functionality CPU The fieldbus master and the PLC functionality of the controller regard the data in a different manne...

Page 73: ...mory address conventions should be understood A 16 bit IEC 61131 3 variable uses the same addressing as the MODBUS word format An IEC 61131 3 boolean variable 1 bit uses a WORD BIT notation for addressing which is different from MODBUS s bit notation The WORD BIT notation is composed of the boolean s word address and bit number in the word separated by a dot The Word and Bit values are zero based ...

Page 74: ...ses MODBUS PFC MODBUS PFC Adresses MODBUS PFC 0x0200 QX2 0 0x0201 QX2 1 Bit 1 Bit 2 Bit 3 Bit 4 Bit 1 Bit 2 Bit 1 Bit 2 0x3560 MW86 0x34B6 MX75 6 Adressen MODBUS PFC AO DO Word1 Bit 1 Adressen USR 0x0201 QW1 0x0200 QW0 0x0001 IW1 0x0000 IW0 0x0002 IW2 0x2002 QW2 0x0000 0x0200 QX2 0 0x0001 0x0201 QX2 1 MODBUS PFC I O Modules 750 402 472 501 550 600 Process input image Word Addresses Process output ...

Page 75: ...thernet Settings This procedure contains the following steps 1 Connecting the PC and fieldbus node 2 Allocation of the IP address to the fieldbus node 3 Function of the fieldbus tests 3 1 7 1 1 Connecting PC and Fieldbus Node Connect the assembled Telecontrol fieldbus node on your PC with the communication cable Item No 750 920 between the controller s configuration and programming interface and a...

Page 76: ...default the address is assigned automaticly with the BootP Server Activate now the option Using following address by clicking on the radio button before this option 7 Enter the desired IP address and if necessary the address for the Subnet Mask and for the Gateway 8 Click on the button Write to write the address down on the controller 3 1 7 1 3 Testing the Function of the Fieldbus Node 1 To test t...

Page 77: ...ffers significantly in certain respects from the 750 842 ETHERNET controller 3 1 7 2 1 Note the MAC ID and establish the Fieldbus Node Before establishing your fieldbus node please note the hardware address MAC ID of your ETHERNET fieldbus controller This is located on the rear of the fieldbus controller and on a self adhesive tear off label on the side of the fieldbus controller MAC ID of the fie...

Page 78: ...T Select the tab Protocols and highlight the listbox item TCP IP protocol Under Windows 9x Select the tab Configuration and highlight the listbox item TCP IP network card Attention If the entry is missing please install the respective TCP IP component and restart your PC The Windows NT installation CD or the installations CD for Windows 9x is required for the installation 4 Then click the Properti...

Page 79: ...th any other BootP servers Attention The IP address can be allocated in a direct connection via a crossover cable or via a parallel cable and a hub An allocation over a switch is not possible BootP table Note A prerequisite for the following steps is the correct installation of the WAGO BootP server 1 To start the BootP server click on the Start menu item Programs WAGO Software WAGO BootP Server 2...

Page 80: ...h your PFC s MAC ID 4 If you want to give your fieldbus node a different name replace the name node1 with your new name 5 To assign the controller an IP address replace the IP address specified in the example which is entered immediately after ip with the IP address you have selected Make sure you separate the 3 digit numbers with a decimal point 6 Because the second example is not necessary in th...

Page 81: ...n accepted no errors The IP address is now temporarily stored in the controller Do not cycle power on the controller until the BootP protocol has been disabled in the PFC 11 Click on the Stop button and then on the Exit button to close the BootP Server 3 1 7 2 5 Testing the Function of the Fieldbus Node 1 To test the controller s newly assigned I P address start a DOS window by clicking on the Sta...

Page 82: ...erate the controller with the IP configuration stored in the EEPROM the BootP protocol must be deactivated Note If the BootP protocol is disabled after the IP address assignment the stored IP address is retained even after power is removed from your controller 1 Disabling of the BootP protocol is done via the built in web pages stored in the controller Open a web browser on your PC e g Microsoft I...

Page 83: ...otocol is activated by default To disable the protocol click on the check box after BootP to remove the check mark 7 You can disable other protocols you do not need in a similar way or enable protocols you wish to use It is possible to enable several protocols at the same time since each protocol uses a different port 8 To store the protocol selection click the SUBMIT button and then perform a har...

Page 84: ...ode must be set to match the link partner the Ethernet link can be used to access a web page on which the transmission rate and the bandwidth limit can be adjusted for the Ethernet transmission These values should only be modified in exceptional circumstances Note A faulty configuration of the transmission mode may result in a link loss condition a poor network performance or a faulty behavior of ...

Page 85: ... I O PRO CAA programming Instead it highlights important programming and configuration notes of the IEC 61131 3 program when it is used with the 750 872 020 000 PFC More information For a detailed description of how to use the software please refer to the WAGO I O PRO CAA manual An electronic copy of this manual can be found on WAGO s web site www wago com 1 To start the WAGO I O PRO CAA click the...

Page 86: ... use the command Insert Element to select the desired I O module and insert it into the structure above the selected position The command Append Subelement is inactive in this case 6 The corresponding commands are also accessible via the menu Insert in the menubar of the main window 7 Both commands open the dialog box I O configuration 8 In this dialog box you can select a desired I O module from ...

Page 87: ...dual module from where the write access on the I O Module data should take place For this in the Value column your options include PLC The PFC controls its I O locally fieldbus 1 A MODBUS TCP Fieldbus Master controls the I O module fieldbus 2 An Ethernet IP Fieldbus Master controls the I O module 12 When you have completed the assignments you can start programming with the IEC 61131 3 program tool...

Page 88: ...and open it with a text editor e g NotePad The following syntax is already prepared in the file 4 The fourth line contains the necessary information for the first module The entry MAP PLC assigns control rights to the IEC 61131 3 program for the first module If you want to change the control setting replace PLC with FB1 for control rights from MODBUS TCP or with FB2 for control from Ethernet IP 5 ...

Page 89: ...04 lib provides function blocks for the data exchange with several Modbus TCP UDP Slaves and in addition one function block which makes a Modbus server available and illustrates the Modbus services on an word array SysLibSockets lib allows the access on sockets for communication over TCP IP and UDP WagoLibSockets lib allows the access on sockets for communication over TCP IP and UDP and provides a...

Page 90: ... into the file system The PLC browser returns the free memory available with the command fds FreeDiscSpace Process Data Buffer 16 kB The WebVisu uses its own protocol for exchanging process data between applet and control system In doing so the process data is transmitted with ASCII coding The pipe character is used as a separator between two process values The space required for a process data va...

Page 91: ...ork traffic Ethernet communication demands that every telegram received is processed regardless of whether it is intended for the 750 872 020 000 or not A significant reduction in network loading can be achieved by using switches instead of hubs However broadcast telegrams can only be suppressed by the sender or by means of configurable switches which feature broadcast limiting A network monitor s...

Page 92: ...s compiled The watchdog of this task is deactivated This task named DefaultTask is internaly identified with this name so don t use this name for your own tasks Only for cyclic tasks the sensitivity value is used Sensitivity values of 0 and 1 are synonymic A value of 0 or 1 means that the watchdog triggers on a single cycle time overrun With a sensitivity value of 2 for example the watchdog trigge...

Page 93: ...tasks Therefore if the watchdog is used before selecting the sampling rate consider the number of I O modules in the node and the communication activity via the fieldbus PLC Comm Task Internal The PLC Comm Task is only active when you are logged in with CoDeSys This task manages the communication with the CoDeSys Gateway Background Task IEC Tasks 11 31 All internal tasks have a higher priority tha...

Page 94: ...ific events Possible events are for instance Stop Start Online Change The complete list of all system events is specified in WAGO I O PRO CAA register Resources Task configuration System events If you actually want the POU to be called by the event activate the entry in the assignment table Activating deactivating is done by a mouse click on the control box More Information The assignment of the s...

Page 95: ...m Online and then Communication parameters 1 If you choose the RS232 driver verify that the Communication parameters dialog window contains the following setup data Baudrate 19200 Parity Even Stop bits 1 Motorola byteorder No 2 If you choose the TCP IP driver verify that the Communication parameters dialog window contains the following setup data Port 2455 Motorola byteorder No Additionally verify...

Page 96: ...unication Parameters New Channel dialog window you can enter a channel description in the Name field then single click on Serial RS232 Click the OK button to close the dialog window and the Communication Parameters dialog window will regain focus 4 In the center window of the dialog the following parameters appear Baud rate 19200 Parity Even Stop bits 1 Motorola byteorder No If necessary change th...

Page 97: ...le click on Tcp Ip Click the OK button to close the dialog window and the Communication Parameters dialog window will regain focus 4 In the center window of the dialog the following parameters appear Address localHost Port 2455 Motorola byteorder No Replace the Address localHost with the IP address of your controller assigned via the BootP server If necessary change the other entries accordingly A...

Page 98: ...ur controller and provide information and configuration options After opening the default page of your controller you can access these pages via the hyperlinks in the left navigation bar of the browser window Information Under the link Information you can get the status information about the controller and the network TCP IP Under the TCP IP link you can view and change settings for the TCP IP pro...

Page 99: ...te wished protocols FTP HTTP WebVisu MODBUS TCP MODBUS UDP CoDeSys and BOOTP are activated by default Snmp Under the Snmp link you can view and change settings for the Simple Network Management Protocol which is responsible for the transport of control data More information For detailed information to the settings and the configuration of SNMP please refer the following chapter Configuration of SN...

Page 100: ...lient the syncronization of the time of day is made The following parameters must be set Parameter Meaning Address of the Time server The address assignment can be made either over a IP address or a host name Time zone The time zone relative to GMT Greenwich Mean time A range of 12 to 12 hours is acceptable Update Time The update time indicates the interval in seconds in which the synchronization ...

Page 101: ...against configuration changes The following groups are provided for this User Pass word Rights admin wago Read Write data and the access on the security settings user user Read Write data and the release of a Software reset but not the change of the security settings guest guest only Read Attention For the password the following restrictions must be considered max 16 signs only letters and numbers...

Page 102: ...ion using the Telecontrol controller which means they must operate either in default autonegotiation mode or full or half duplex mode with 10 100Mbit static transmission rate Further Information Please find detailed information on how to cofigure the transmission mode in the Fieldbus Communication ETHERNET Network Architecture Principles and Regulations Transmission Mode The bandwidth limitation c...

Page 103: ...ficulty accessible ranges e g within the offshore range The automatic reset releases as soon as the controller is in an error status which requires a reset On delivery this function is deactivated default then with the arising of an error the diagnosis is signalled by the blink code of the I O LED After the evaluation of the blink code and the error removal then a manual reset is to be accomplishe...

Page 104: ... place In this case always fieldbus 1 that means Modbus_TCP Default has the r write access rigths on the outputs More Information Please find detailed information about the WAGO I O PRO CAA I O Configurator in chapter 3 1 7 Starting up a Fieldbus Node In the right window of this web page is displayed the physical node configuration and the current process values if the file genIOconf xml was gener...

Page 105: ...TEM 750 ETHERNET TCP IP Samples Under the Samples link a sample HTML page is provided which you can use as a starting point to create your own web page You can then store this or any other web page you have created into the file system of the controller using FTP download ...

Page 106: ...uently referred to as MIB objects In the ETHERNET coupler controller SNMP embraces the common MIB as described in RFC1213 MIB II The configuration of SNMP is done via the web based management system under the Snmp link or directly via SNMP On the web page stored in the coupler controller the name of the device sysName the description of the device sysDescription the location sysLocation and the co...

Page 107: ...information and statistics to the device interface Identifier Entry Ac cess Description 1 3 6 1 2 1 2 1 ifNumber R Number of network interfaces in the system 1 3 6 1 2 1 2 2 ifTable Number of network interfaces 1 3 6 1 2 1 2 2 1 ifEntry Entry network interface 1 3 6 1 2 1 2 2 1 1 ifIndex R This entry contains an unique assignment number for each interface 1 3 6 1 2 1 2 2 1 2 ifDescr R This entry c...

Page 108: ... 2 1 2 2 1 1 6 ifOutOctets R This entry indicates the number of all data in bytes which are transmitted so far via the interface 1 3 6 1 2 1 2 2 1 1 7 ifOutUcastPkts R This entry indicates the number of all transmitted Unicast packets which were passed on a higher layer 1 3 6 1 2 1 2 2 1 1 8 ifOutNUcastPkts R This entry indicates the number of all transmitted Broadcast and Unicast packets which we...

Page 109: ... IP Frames that should have been sent 1 3 6 1 2 1 4 12 ipOutNoRoutes R Number of sent IP Frames that were rejected because of incorrect routing information 1 3 6 1 2 1 4 13 ipReasmTime out R Minimum time duration to a IP Frame is building up 1 3 6 1 2 1 4 14 ipReasmReqds R Minimum number of the IP fragments for building up and pass on 1 3 6 1 2 1 4 15 ipReasmOKs R Number successfully IP Frames re ...

Page 110: ...1 1 8 ipRouteType R W The kind of route 1 3 6 1 2 1 4 21 1 9 ipRouteProto R Routing mechanism via which the route is developed 1 3 6 1 2 1 4 21 1 10 ipRouteAge R W Number of seconds since then the route was renewed or examined the latest time 1 3 6 1 2 1 4 21 1 11 ipRouteMask R W This entry contents the subnet mask to this entry 1 3 6 1 2 1 4 21 1 12 ipRouteMetric5 R W An alternative route to the ...

Page 111: ...essages 1 3 6 1 2 1 5 13 icmpInAddrMaskReps R Number of received ICMP address mask reply messages 1 3 6 1 2 1 5 14 icmpOutMsgs R Number of sent ICMP messages 1 3 6 1 2 1 5 15 icmpOutErrors R Number of sent ICMP messages that could not to be sent because of problems 1 3 6 1 2 1 5 16 icmpOutDestUnreachs R Number of sent ICMP destination unreachable messages 1 3 6 1 2 1 5 17 icmpOutTimeExcds R Number...

Page 112: ...P frames with data 1 3 6 1 2 1 6 12 tcpRetransSegs R Number of sent TCP frames that were repeated because of errors 1 3 6 1 2 1 6 13 tcpConnTable For each existing connection a table entry is produced 1 3 6 1 2 1 6 13 1 tcpConnEntry Table entry for connection 1 3 6 1 2 1 6 13 1 1 tcpConnState R The entry indicates the status of the TCP connection 1 3 6 1 2 1 6 13 1 2 tcpConnLocal Address R The ent...

Page 113: ... actions that it tried to accomplished 1 3 6 1 2 1 11 6 snmpInASNParseErrs R Number of received SNMP frames which had a wrong structure 1 3 6 1 2 1 11 8 snmpInTooBigs R Number of received SNMP frames that acknowledged the result too Big 1 3 6 1 2 1 11 9 snmpInNoSuchNames R Number of received SNMP frames that acknowledged the result noSuchName 1 3 6 1 2 1 11 10 snmpInBadValues R Number of received ...

Page 114: ...OutSetRequests R Number of sent SET requests 1 3 6 1 2 1 11 28 snmpOutGetResponses R Number of sent GET responses 1 3 6 1 2 1 11 29 snmpOutTraps R Number of sent Traps 1 3 6 1 2 1 11 30 snmpEnableAuthen Traps R W Authentification failure Traps 1 on 2 off 3 1 10 1 11 EGP Group This group contains information of the EGP Exterior Gateway Protocol protocol layer This protocol is used mainly when routi...

Page 115: ...play elements 750 872 020 000 g084102x The LEDs can be divided into three groups The first group of LEDs display the status of the Ethernet fieldbus It contains both solid and two color LEDs They are labelled as LINK green MS red green NS red green and TxD RxD green The second group of LEDs are three color LEDs red green orange One of the LED is labelled I O and displays the status of the internal...

Page 116: ...ease contact the I O Support green flashing The system is not yet configures green Normal operation OFF No system supply voltage Check the supply voltage 24V and 0V NS red green flashing Self test red The system indicates a double IP address in the network Use an IP address that is not used yet red flashing At least one connection MODBUS TCP or Ethernet IP announced a Timeout where the CONTROLLER ...

Page 117: ...ich occur are indicated by three conse cutive flashing sequences There is a short pause between each sequential flash Evaluate the fault message fault code and fault argument The controller starts up after switching on the supply voltage The I O LED blinks The I O LED has a steady light following a fault free run up In the case of a fault the I O LED continues blinking The fault is cyclically disp...

Page 118: ...hing on the power supply Fig 3 1 16 Signalling of the LED for indication of the node status g012111e After clearing a fault restart the controller by cycling the power Fault message of the I O LED 1st blink sequence Start of the Fault message 2nd blink sequence Fault code 3rd blink sequence Fault argument Fault code 1 Hardware and configuration fault Fault argument Fault description Trouble shooti...

Page 119: ...ber of I O modules and turn the power supply on again 4 Error occurred when writing to serial EEPROM Turn off the power supply of the node exchange fieldbus coupler and turn the power supply on again 5 Error occurred with read access to serial EEPROM Turn off the power supply of the node exchange fieldbus coupler and turn the power supply on again 6 Changed I O module configuration determined afte...

Page 120: ...lock and keep upright the supply voltage of the bus coupler for at least 15 minutes for loading of the Goldcaps 13 Error Clock Interrupt Adjust the clock and keep upright the supply voltage of the bus coupler for at least 15 minutes for loading of the Goldcaps 14 Maximum number of Gateway or Mailbox I O modules exceeded Turn off the power supply of the node reduce number of Gateway or Mailbox I O ...

Page 121: ...ules you can detect the faulty I O module as follows turn off the power supply of the node Place the end module in the middle of the fieldbus node Turn the power supply on again If the LED is still blinking turn off the power supply and place the end module in the middle of the first half of the node towards the coupler If the LED doesn t blink turn off the power supply and place the end module in...

Page 122: ...module in the middle of the first half of the node towards the coupler If the LED doesn t blink turn off the power supply and place the end module in the middle of the second half of the node away from the coupler Turn the power supply on again Repeat this procedure until the faulty I O module is detected Replace the faulty I O module If there is only one I O module left but the LED is still blink...

Page 123: ...k Use another IP adresse which is not yet present in network 8 Error when building the process image Reduce number of I O modules Fault code 9 not used Fault argument Fault description Trouble shooting not used Fault code 10 PLC program fault Fault argument Fault description Trouble shooting 1 Error when implementing the PFC run time system Restart the fieldbus coupler by turning the power supply ...

Page 124: ...ule I O modules without data are not counted e g supply module without diagnosis Example The 13th I O module has been removed 1 The I O LED starts the fault display with the first blink sequence approx 10 Hz 2 The second blink phase approx 1 Hz follows the first pause The I O LED blinks four times and thus signals the fault code 4 internal bus data fault 3 The third blink sequence follows the seco...

Page 125: ...ilure occurs e g the Ethernet cable is removed or broke the outputs that are controlled by the fieldbus port remain in their current state by default If this behavior is undesirable a fieldbus watchdog timer can be programmed to monitor Fieldbus communications The watchdog monitors the data transfer between the master controls and the PFC In the event of a watchdog timeout i e there is a Fieldbus ...

Page 126: ... 3 1 12 2 Internal bus fault When an internal bus fault occurs e g an I O module is removed all output modules turn off Additionally the I O LED blinks red and generates a fault message This message is decoded from the blink code in the form of a fault code and fault argument Once the internal bus fault is fixed the controller is restarted by cycling its power At this point the transfer of the pro...

Page 127: ...n possibility via PC Program memory 512 kByte Data memory 256 kByte Non valatile memory 24 kByte 16 k retain 8 k flags File system 1 MB Max no of socket connections 3 HTTP 15 MODBUS TCP 10 FTP 2 SNMP 5 for IEC 61131 3 programs 2 for WAGO I O PRO CAA 128 for EtherNet IP IEC60870 5 101 and 104 libraries Conformity document Number of control stations Number of information objects see www wago com 4 5...

Page 128: ...120 Fieldbus Controller Fieldbus Controller 750 872 020 000 WAGO I O SYSTEM 750 ETHERNET TCP IP EMC CE Emission of interference acc to EN 50081 2 94 Approvals cf Chapter 2 2 Conformity Marking ...

Page 129: ...y for the transmission of information In the ETHERNET based programmable fieldbus couplers and controllers developed by WAGO usually various application protocols have been implemented on the basis of the TCP IP stack These protocols allow the user to create applications master applications with standardized interfaces and transmit process data via an ETHERNET interface In addition to a series of ...

Page 130: ...maintenance and control of processes possible 4 1 2 Network Architecture Principles and Regulations A simple ETHERNET network is designed on the basis of one PC with a network interface card NI one crossover connection cable if necessary one ETHERNET fieldbus node and one 24 V DC power supply for the coupler controller voltage source Each fieldbus node consists of a programmable fieldbus coupler o...

Page 131: ... a 24 AWG UTP or STP UTP twisted pair cable for a 10Mbps baseband signal for distances up to 100 m in a physical star topology 10Broad36 Uses a 75 Ohm coaxial cable for a 10Mbps baseband signal for distances of up to 1800 m or 3600 m with double cables in a physical bus topology 100BaseTX Specifies a 100 Mbps transmission with a twisted pair cable of Category 5 and RJ45 connectors A maximum segmen...

Page 132: ...shield surrounding all twisted unshielded conductor pairs and an impedance of 100 ohm STP cable shielded twisted pair is cable of Category 5 with stranded and individually shielded conductor pairs no overall shield is provided Wiring of the fieldbus nodes Maybe a crossover cable is required for direct connection of a fieldbus node to the network card of the PC Fig 4 2 Direct Connection of a Node w...

Page 133: ...are described in the ETHERNET standard for networks covering larger distances 4 1 2 2 Network Topologies In the case of 10Base T or 100BaseTX several stations nodes are connected using a star topology according to the 10Base T ETHERNET Standard Therefore this manual only deals with the star topology and the tree topology for larger networks in more detail Star Topology A star topology consists of ...

Page 134: ...ines characteristics of linear bus and star topologies It consists of groups of star configured workstations connected to a linear bus backbone cable Tree topologies allow for the expansion of an existing network and enables schools etc to configure a network to meet their needs Fig 4 5 Tree Topology G012904e ...

Page 135: ...k protocols or ETHERNET networks where all fiber optic cabling or a combination of a backbone with UTP cabling is used If there is a combination of fiber optic backbone and UTP cabling the rule is simply translated to 7 6 5 rule Cabling guidelines Structured Cabling specifies general guidelines for network architecture of a LAN establishing maximum cable lengths for the grounds area building and f...

Page 136: ...star topologies supports various transmission media does not prevent any network collisions 2 Router Links two or more data networks Matches topology changes and incompatible packet sizes e g used in industrial and office areas 3 Gateway Links two manufacturer specific networks which use different software and hardware i e ETHERNET and Interbus Loop 4 7 Tab 4 2 Comparison of Coupler Modules for Ne...

Page 137: ...e for the autonegotiation of both communication partners must be supported and activated 4 1 2 4 3 Errors Occurring when Configuring the Transmission Mode Invalid configurations are listed below Problem Cause Symptoms Mismatch of the transmission rate Occurs when configuring one link partner with 10 Mbit s and the other one with 100 Mbit s Link failure Duplex mode mismatch Occurs when one link par...

Page 138: ... be relatively long 0 1 10 seconds However real time behavior within the fieldbus system level is required for ETHERNET in industry In ETHERNET it is possible to meet the real time requirements by restricting the bus traffic 10 by using a master slave principle or also by implementing a switch instead of a hub MODBUS TCP is a master slave protocol in which the slaves only respond to commands from ...

Page 139: ...the subscriber is limited Therefore the delay time of a message is predictable Switched ETHERNET In the case of Switched Ethernet several fieldbus nodes are connected by a switch When data from a network segment reaches the switch it saves the data and checks for the segment and the node to which this data is to be sent The message is then only sent to the node with the correct target address This...

Page 140: ...ernet physical interface CSMA CD 2 IP For the communication the Internet Protocol IP is positioned above the Ethernet hardware This bundles the data to be transmitted in packets along with sender and receiver address and passes these packets down to the Ethernet layer for physical transmission At the receiver end IP accepts the packets from the Ethernet layer and unpacks them 2 IP 1 Ethernet physi...

Page 141: ...t Transport Protocol for www browsers and some others In this example the protocols MODBUS TCP UDP and EtherNet IP are implemented for use in industrial data communication Here the MODBUS protocol is also positioned directly above TCP UDP IP EtherNet IP on the other hand basically consists of the protocol layers Ethernet TCP and IP with an encapsulation protocol positioned above it This serves as ...

Page 142: ...lers and controllers IP Version 4 Raw IP and IP Multicast TCP UDP ARP The following diagram is intended to explain the data structure of these protocols and how the data packets of the communication protocols Ethernet TCP and IP with the adapted application protocol MODBUS nested in each other for transmission A detailed description of the tasks and addressing schemes of these protocols is contain...

Page 143: ...ransmission is connectionless i e the sender does not receive any feedback from the receiver The data used is packed in an address information frame The following figure shows the structure of such a packet Preamble ETHERNET Header ETHERNET_Data Check sum 8 Byte 14 Byte 46 1500 Byte 4 Byte Fig 4 9 ETHERNET Packet The preamble serves as a synchronization between the transmitting station and the rec...

Page 144: ... sequence of the data packets to be incorrect Therefore it is necessary to use a higher level protocol for example TCP to guarantee correct transmission IP addresses To allow communication over the network each fieldbus node requires a 32 bit Internet address IP address Attention Internet addresses have to be unique throughout the entire interconnected networks As shown below there are various add...

Page 145: ...nge of Class C networks in the first byte is always between 192 and 223 Additional network classes D E are only used for special tasks Key data Address range of the Possible number of subnetwork networks Subscribers per network Class A 1 XXX XXX XXX 126 XXX XXX XXX 127 27 Ca 16 Million 224 Class B 128 000 XXX XXX 191 255 XXX XXX Ca 16 thousand 214 Ca 65 thousand 216 Class C 192 000 000 XXX 223 255...

Page 146: ...ize and position of the subnetwork ID are not defined however the size is dependent upon the number of subnets to be addressed and the number of subscribers per subnet 1 8 16 24 32 1 0 Net ID Subnet ID Host ID Fig 4 10 Class B address with Field for Subnet ID Subnet mask A subnet mask was introduced to encode the subnets in the Internet This involves a bit mask which is used to mask out or select ...

Page 147: ...ork mask defined by the administrator in the same way as the IP address when installing the network protocol Gateway The subnets of the Internet are normally connected via gateways The function of these gateways is to forward packets to other networks or subnets This means that in addition to the IP address and network mask for each network card it is necessary to specify the correct IP address of...

Page 148: ...lticast address in order to send the packet to several recipients with a single send operation Here the common medium enables packets to be sent simultaneously to several recipients The stations do not have to inform each other on who belongs to a specific multicast address every station physically receives every packet The resolution of IP address to Ethernet address is solved by the use of algor...

Page 149: ...least 20 bytes and contains among others the application port number of the transmitter and the receiver the sequence number and the acknowledgement number The resulting TCP packet is used in the data unit area of an IP packet to create a TCP IP packet 4 1 3 3 3 UDP The UDP protocol like the TCP protocol is responsible for the transport of data Unlike the TCP protocol UDP is not connection orienta...

Page 150: ...er waits for BootP requests and generates the response from a configuration database The dynamic configuration of the IP address via a BootP server offers the user a flexible and simple design of his network The WAGO BootP server allows any IP address to be easily assigned for the WAGO programmable fieldbus coupler or controller You can download a free copy of the WAGO BootP server over the Intern...

Page 151: ... HTML page saved in the programmable fieldbus coupler or controller which is accessed via the Port link If the BootP protocol is deactivated the programmable fieldbus coupler or controller uses the parameters stored in the EEPROM at the next boot cycle If there is an error in the stored parameters a blink code is output via the IO LED and configuration via BootP is automatically switched on 4 1 3 ...

Page 152: ...how long the coupler controller keeps the assigned IP address The maximum lease time is 24 8 days This results from the internal resolution of timer Renewing time The Renewing time indicates starting from when the coupler controller must worry about the renewal of the leasing time Rebinding time The Rebinding time indicates after which time the coupler controller must have gotten its new address I...

Page 153: ...Clock link The following parameters must be set Parameter Meaning Address of the Time server The address assignment can be made either over a IP address or a host name Time zone The time zone relative to GMT Greenwich Mean time A range of 12 to 12 hours is acceptable Update Time The update time indicates the interval in seconds in which the synchronization with the time server is to take place Ena...

Page 154: ... Determines the structure for the transferred file MODE Determines the kind of file transmission RETR Reads file from server STOR Saves file on server APPE Saves file on server Append mode ALLO Reservation of the necessary storage location for the file RNFR Renames file from with RNTO RNTO Renames file in with RNFR ABOR Stops current function DELE Deletes file CWD Changes directory LIST Gives the ...

Page 155: ...op computers are switched off at the end of the day it is impractical to send SMTP mail there For that reason in many networks special SMTP hosts are installed in many networks which are permanently switched on to enable distribution of received mail to the desktop computers 4 1 3 5 Application Protocols If fieldbus specific application protocols are implemented then the appropriate fieldbus speci...

Page 156: ...entifier entered by receiver Protocol identifier is always 0 Length field High byte Low byte Unit identifier Slave address MODBUS function code Data Fig 4 12 MODBUS TCP Header More information The structure of a datagram is specific for the individual function Refer to the descriptions of the MODBUS Function Codes For the MODBUS protocol 15 connections are made available over TCP Thus it allows di...

Page 157: ...r Writing of an individual output register W Process image PFC variables internal variables NOVRAM FC 11 0x0B Get Comm Event Counters Communication event counter R None FC 15 0x0F Force Multiple Coils Writing of several output bits W Process image PFC variables FC 16 0x0010 Write Multiple Registers Writing of several output registers W Process image PFC variables internal variables NOVRAM FC 22 0x...

Page 158: ...3 AO DO AO 750 342 ON LINK TxD RxD I O ERROR Ethernet W AGO ßI O ßSY STE M DI DI DI DI AI AI AI AI Highbyte Lowbyte Highbyte Lowbyte 0x0001 0x0009 0x000D 0x0005 0x0000 0x0008 0x000C 0x0004 0x0003 0x000B 0x000F 0x0007 0x0002 0x000A 0x000E 0x0006 Input modules 750 402 402 472 472 402 476 402 476 Output modules 750 501 550 550 MODBUS addresses MODBUS addresses MODBUS addresses MODBUS addresses MODBUS...

Page 159: ...ter The exception code contained in the exception has the following meaning Exception Code Meaning 0x01 Illegal Function 0x02 Illegal Data Address 0x03 Illegal Data Value 0x04 Slave Device Failure 0x05 Acknowledge 0x06 Server Busy 0x08 Memory Parity Error 0x0A Gateway Path Unavailable 0x0B Gateway Target Device Failed To Respond The following chapters describe the datagram architecture of request ...

Page 160: ...its are packed in the data field A binary 1 corresponds to the ON status and a 0 to the OFF status The lowest value bit of the first data byte contains the first bit of the request The others follow in ascending order If the number of inputs is not a multiple of 8 the remaining bits of the last data byte are filled with zeroes truncated Byte Field name Example Byte 7 MODBUS function code 0x01 Byte...

Page 161: ...cked into the data field A binary 1 corresponds to the ON status and a 0 the OFF status The lowest value bit of the first data byte contains the first bit of the inquiry The others follow in an ascending order If the number of inputs is not a multiple of 8 the remaining bits of the last data byte are filled with zeroes truncated Byte Field name Example Byte 7 MODBUS function code 0x02 Byte 8 Byte ...

Page 162: ...nsaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x0006 Byte 6 unit identifier 0x01 not used Byte 7 MODBUS function code 0x03 Byte 8 9 reference number 0x0000 Byte 10 11 Word count 0x0002 Response The reply register data is packed as 2 bytes per register The first byte contains the higher value bits the second the lower values Byte Field name Example Byte 7 MODB...

Page 163: ...ion identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x0006 Byte 6 unit identifier 0x01 not used Byte 7 MODBUS function code 0x04 Byte 8 9 reference number 0x0000 Byte 10 11 Word count 0x0002 Response The register data of the response is packed as 2 bytes per register The first byte has the higher value bits the second the lower values Byte Field name Example Byte 7 MODB...

Page 164: ...address 0 Example Turn ON the second output bit address 1 Byte Field name Example Byte 0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x0006 Byte 6 unit identifier 0x01 not used Byte 7 MODBUS function code 0x05 Byte 8 9 reference number 0x0001 Byte 10 ON OFF 0xFF Byte 11 0x00 Response Byte Field name Example Byte 7 MODBUS function code 0x05 Byte 8 9 Ref...

Page 165: ... therefore the first register starts at address 0 Example Write a value of 0x1234 to the second output register Byte Field name Example Byte 0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x0006 Byte 6 Unit identifier 0x01 not used Byte 7 MODBUS function code 0x06 Byte 8 9 reference number 0x0001 Byte 10 11 Register Value 0x1234 Response The reply is an...

Page 166: ...s not performed in the case of exception replies poll commands or counter inquiries Request Byte Field name Example Byte 0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x0002 Byte 6 unit identifier 0x01 not used Byte 7 MODBUS function code 0x0B Response The reply contains a 2 byte status word and a 2 byte event counter The status word only contains zero...

Page 167: ...11 0000 in binary format The first data byte transmits the value of 0xA5 to the addresses 7 to 0 whereby 0 is the lowest value bit The next byte transmits 0xF0 to the addresses 15 to 8 whereby the lowest value bit is 8 Byte Field name Example Byte 0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 Length field 0x0009 Byte 6 unit identifier 0x01 not used Byte 7 MODBUS fu...

Page 168: ...ut is at address 0 Example Set data in registers 0 and 1 Byte Field name Example Byte 0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x000B Byte 6 Unit identifier 0x01 not used Byte 7 MODBUS function code 0x10 Byte 8 9 reference number 0x0000 Byte 10 11 Word count 0x0002 Byte 12 Byte Count 0x04 Byte 13 14 Register Value 1 0x1234 Byte 15 16 Register Valu...

Page 169: ...0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x0002 Byte 6 Unit identifier 0x01 not used Byte 7 MODBUS function code 0x16 Byte 8 9 Reference Number 0x0000 Byte 10 11 AND Mask 0x0000 Byte 12 13 OR Mask 0xAAAA Response Byte Field name Example Byte 7 MODBUS function code 0x10 Byte 8 9 Reference Number 0x0000 Byte 10 11 AND Mask 0x0000 Byte 12 13 OR Mask ...

Page 170: ... are read out of the two registers 0 and 1 Byte Field name Example Byte 0 1 Transaction identifier 0x0000 Byte 2 3 protocol identifier 0x0000 Byte 4 5 length field 0x000F Byte 6 Unit identifier 0x01 not used Byte 7 MODBUS function code 0x17 Byte 8 9 reference number for read 0x0000 Byte 10 11 Word count for read 1 125 0x0002 Byte 12 13 reference number for write 0x0003 Byte 14 15 Word count for wr...

Page 171: ... 12287 0x1000 0x2FFF Configuration Register see following Chapter 4 2 5 3 Configuration Functions 12288 24575 0x3000 0x5FFF MW0 MW12287 NOVRAM 8kB retain memory max 24kB 24576 25340 0x6000 0x62FC IW512 IW1275 Physical Input Area 2 Additional 764 Words physical input data 25341 28671 0x62FD 0x6FFF Modbus Exception Illegal data address 28672 29436 0x7000 0x72FC QW512 QW1275 Physical Output Area 2 Ad...

Page 172: ...s 46 Bit Access Reading with FC1 and FC2 Modbus Address dec hex Memory Range Description 0 511 0x0000 0x01FF Physical Input Area 1 First 512 digital inputs 512 1023 0x0200 0x03FF Physical Output Area 1 First 512 digital outputs 1024 4095 0x0400 0x0FFF Modbus Exception Illegal data address 4096 8191 0x1000 0x1FFF QX256 0 QX511 15 PFC OUT Area Volatile PFC Output variables 8192 12287 0x2000 0x2FFF I...

Page 173: ...R W 1 Watchdog Coding mask 1 16 0x1002 R W 1 Watchdog Coding mask 17 32 0x1003 R W 1 Watchdog Trigger 0x1004 R 1 Minimum Trigger time 0x1005 R W 1 Watchdog stop Write sequence 0xAAAA 0x5555 0x1006 R 1 Watchdog Status 0x1007 R W 1 Restart Watchdog Write sequence 0x1 0x1008 RW 1 Stop Watchdog Write sequence 0x55AA or 0xAA55 0x1009 R W 1 MODBUS and HTTP close at Watchdog Timeout 0x100A R W 1 Watchdog...

Page 174: ...modules module 129 192 0x2033 R 63 Description of the connected busmodules module 193 255 0x2040 W 1 Software reset Write sequence 0x55AA or 0xAA55 0x2041 W 1 Format Flash Disk 0x2042 W 1 Extract HTML sides from the firmware 0x2043 W 1 Factory Settings 4 2 5 1 Description of the internal variables 4 2 5 1 1 Watchdog Fieldbus failure The watchdog monitors the data transfer between the fieldbus mast...

Page 175: ...the MODBUS read and write function codes Specify the respective register address in place of the reference number Register address 0x1000 MODBUS Address 404097 Designation Watchdog time WS_TIME Access read write Default 0x0000 Description This register stores the watchdog timeout value as an unsigned 16 bit value The default value is 0 Setting this value will not trigger the watchdog However a non...

Page 176: ...chdog cannot be triggered if the watchdog timer register is set to 0 Register address 0x1004 MODBUS Address 404101 Designation Minimum current trigger time WD_AC_TRG_TIME Access read write Default 0xFFFF Description This register stores the time value for the shortest remaining watchdog duration The default value is 0xFFFF When the watchdog timer is triggered this register is continuously compared...

Page 177: ...gister address 0x100A MODBUS Address 404107 Designation Alternative watchdog Access read write Default 0x0000 Description This register provides an alternate way to activate the watchdog timer Proceedure Write a time value in register 0x1000 then write a 0x0001 into register 0x100A With the first MODBUS request the watchdog is started The watchdog timer is reset with each Modbus TCP instruction If...

Page 178: ...g Mask register 0x1001 3 Modify the value of the Watchdog Trigger register 0x0003 to start the watchdog 4 At this point the fieldbus master must continuously use function code 3 Force Single Coil within the specified time to reset the watchdog timer If time between requests exceeds 10 minutes a watchdog timeout error occurs To stop the watchdog after it is started write the value 0x0AA55 or 0X55AA...

Page 179: ...figuration information of the connected modules Register address 0x1022 MODBUS Address 404131 Designation CnfLen AnalogOut Access read Description Number of word based outputs registers in the process image in bits divide by 16 to get the total number of analog words Register address 0x1023 MODBUS Address 404132 Designation CnfLen AnalogInp Access read Description Number of word based inputs regis...

Page 180: ...umber of the coils which can be worked on is too large Read Write 2000 800 2 words ModTcpMessageCounter Number of received MODBUS TCP requests With Writing 0xAA55 or 0x55AA in the register will reset this data area Register address 0x102A MODBUS Address 404139 with a word count of 1 Designation Modbus TCP Connections Access read Description Number of TCP connections Register address 0x1030 MODBUS ...

Page 181: ...ition 0 Input module Bit position 1 Output module Bit position 2 7 not used Bit position 8 14 module size in bits Bit position 15 Designation digital module Examples 4 Channel Digital Input Module 0x8401 bit 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 code 1 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 hex 8 4 0 1 2 Channel Digital Output Module 0x8202 bit 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 code 1 0 0 0 0 0 1 0 0 0...

Page 182: ...odules present modules 193 to 255 Each module is represented in a word Because item numbers cannot be read out of digital modules a code is displayed for them as defined below Bit position 0 Input module Bit position 1 Output module Bit position 2 7 not used Bit position 8 14 module size in bits Bit position 15 Designation digital module Register address 0x2040 MODBUS Address 408257 Designation Im...

Page 183: ...a word count of 1 Value Item number INFO_ITEM Access Read Description WAGO item number e g 841 for the controller Register address 0x2013 MODBUS Address 408212 with a word count of 1 Value Major sub item code INFO_MAJOR Access read Description Firmware version Major Revision Register address 0x2014 MODBUS Address 408213 with a word count of 1 Value Minor sub item code INFO_MINOR Access read Descri...

Page 184: ...408193 Value Zero GP_ZERO Access Read Description Constant with zeros Register address 0x2001 MODBUS Address 408194 Value Ones GP_ONES Access Read Description Constant with ones Is 1 if this is declared as signed int or MAXVALUE if it is declared as unsigned int Register address 0x2002 MODBUS Address 408195 Value 1 2 3 4 GP_1234 Access Read Description This constant value is used to test the Intel...

Page 185: ...arithmetic Register address 0x2006 MODBUS Address 408199 Value Maximum negativ number GP_MAX_NEG Access Read Description Constant in order to control arithmetic Register address 0x2007 MODBUS Address 408200 Value Maximum half positiv number GP_HALF_POS Access Read Description Constant in order to control arithmetic Register address 0x2008 MODBUS Address 408201 Value Maximum half negativ number GP_...

Page 186: ...t IP is based on the TCP IP protocol family and consequently uses the bottom 4 layers of the OSI layer model in unaltered form so that all standard Ethernet communication modules such as PC interface cards cables connectors hubs and switches can also be used with EtherNet IP Positioned above the transport layer is the encapsulation protocol which enables use of the Control Information Protocol CIP...

Page 187: ...nagement CIP 4 Transport layer Encapsulation protocol TCP UDP 3 Network layer DeviceNet or ControlNet transport transmission control addressing IP 2 Data Link layer CAN CSMA NBA or ControlNet CTDMA Ethernet CSMA CD 1 Physical layer DeviceNet or ControlNet physical interface Ethernet physical interface ETHERNET IP 4 3 2 Characteristics of the EtherNet IP Protocol Software Level 1 Level 1 Explicit M...

Page 188: ...n instances Instance An instance consists of different variables attributes that describe the properties of this instance Different instances of a class have the same services the same behaviour and the same variables attributes They can however have different variable values Variable attribute The variables attributes represent the data a device provides over EtherNet IP These include the current...

Page 189: ...int 67 hex Analog Input Point 68 hex Analog Output Point 69 hex Discrete Input Point Extended 1 6A hex Discrete Output Point Extended 1 6B hex Analog Input Point Extended 1 6C hex Analog Output Point Extended 1 6D hex Discrete Input Point Extended 2 6E hex Discrete Output Point Extended 2 6F hex Analog Input Point Extended 2 70 hex Analog Output Point Extended 2 71 hex Discrete Input Point Extende...

Page 190: ...riable UDINT Offset UINT 4 3 3 2 3 Explanations of the Object Description Attribute ID Integer value which is assigned to the corresponded attribute Access Set The attribute can be accessed by means of Set_Attribute services Important All the set attributes can also be accessed by means of Get_Attribute services Get The attribute can be accessed by means of Get_Attribute services NV NV non volatil...

Page 191: ...28 2 Get Device Type UINT General type designation of the product 12 0x000C 3 Get Product Code UINT Designation of the controller e g 841 0x0349 for the controller 750 841 Revision STRUCT of Major Revision USINT 4 Get Minor Revision USINT Revision of the Identity Objects Depending on the firmware 5 Get Status WORD Current status of the device Bit 0 Assignment to a master Bit 1 0 reserved Bit 2 Con...

Page 192: ...umber of Attributes UINT Number of attributes 0 0x0000 3 Get Number of Services UINT Number of services 0 0x0000 4 Get Max ID Number of Class Attributes UINT Maximum number of class attributes 0 0x0000 5 Get Max ID Number of Instance Attributes UINT Maximum number of instance attributes 0 0x0000 Instance 1 Attribute ID Access Name Data type Description Default value ObjectList STRUCT of Number UIN...

Page 193: ...ance 102 66 hex Attribute ID Access Name Data type Description Default value 3 Set Data ARRAY of BYTE Reference on the process image only digital output data Instance 103 67 hex Attribute ID Access Name Data type Description Default value 3 Set Data ARRAY of BYTE Reference of the process image only analog output data Instance 104 68 hex Attribute ID Access Name Data type Description Default value ...

Page 194: ... 108 6C hex Attribute ID Access Name Data type Description Default value 3 Get Data ARRAY of BYTE Reference of the process image only digital input data Instance 109 6D hex Attribute ID Access Name Data type Description Default value 3 Get Data ARRAY of BYTE Reference of the process image only analog input data Instance 110 6E hex Attribute ID Access Name Data type Description Default value 3 Get ...

Page 195: ... hex This instance is used to establish a connection based on an existing exclusive owner connection The new connection also has the same transmission parameters as the exclusive owner connection When the exclusive owner connection is cleared this connection too is automatically cleared The data length of this instance is always zero This instance can only be used in the consumed path from the poi...

Page 196: ...utes 1 and 2 of all instances 0x0000 0x0000 0x0004 0x0002 Instance 1 Attribute ID Access NV Name Data type Description Default value 1 Get V Port Type UINT 0x0004 2 Get V Port Number UINT Cip Port number 0x0002 EtherNet IP UINT Number of 16 bit words in the following path 0x0002 3 Get V Port Object Padded EPATH Object which manages this port 0x20 0xF5 0x24 0x01 4 Get V Port Name Short String Portn...

Page 197: ...11 Physical Link Object STRUCT of Path size UINT Size of the path 0x0004 UINT Number of 16 Bit words in the following path 0x0002 4 Get V Path Padded EPATH Logical path which points to the physical Link object 0x20 0xF6 0x24 0x01 Interface Configurat ion STRUCT of IP Address UDINT IP address 0 Network Mask UDINT Net work mask 0 Gateway Address UDINT IP address of default gateway 0 Name Server UDIN...

Page 198: ...plex 3 Get Physical Address ARRAY of 6 UINTs MAC layer address MAC ID of the device Common Services Service available Service code Class Instanc e Service Name Description 01 hex yes yes Get_Attribute_All Supplies contents of all attributes 0E hex yes yes Get_Attribute_Single Supplies contents of the appropriate attribute 4 3 3 2 10 Controller Configuration 64 hex Class Attribute ID Access Name Da...

Page 199: ...Bk_Led_Err _Arg UINT I O LED Error Argument 0 100 0x64 Set NV Bk_FbInp_V ar_Cnt UINT Determines the number of bytes for the PFC input fieldbus variables which are added to the Assembly object This number is added to the consuming path Assembly Instances 101 103 0 101 0x65 Set NV Bk_FbOut_ Var_Cnt UINT Determines the number of bytes for the PFC output fieldbus variables which are added to the Assem...

Page 200: ...ice Name Description 0E hex yes yes Get_Attribute_ Single Supplies contents of the appropriate attribute 10 hex no yes Set_Attribute_ Single Modifies an attribute value 4 3 3 2 11 Discrete Input Point 65 hex Class Attribute ID Access Name Data type Description Default value 1 Get Revision UINT Revision of this object 1 0x0001 2 Get Max Instance UINT Max number of instances Instance 1 255 1 to 255 ...

Page 201: ...iption 0E hex yes yes Get_Attribute_ Single Supplies contents of the appropriate attribute 10 hex no yes Set_Attribute_ Single Modifies an attribute value 4 3 3 2 13 Analog Input Point 67 hex Class Attribute ID Access Name Data type Description Default value 1 Get Revision UINT Revision of this object 1 0x0001 2 Get Max Instance UINT Max number of instances Instance 1 255 1 to 255 Analog input val...

Page 202: ..._ Single Supplies contents of the appropriate attribute 10 hex no yes Set_Attribute_ Single Modifies an attribute value 4 3 3 2 15 Discrete Input Point Extended 1 3 69 hex 6D hex 71 hex Same as the Discret Input Point 65 hex however it contains the extended digital inputs 69 hex Digital Input 256 510 6D hex Digital Input 511 765 71 hex Digital Input 766 1020 4 3 3 2 16 Discrete Output Point Extend...

Page 203: ...et ModulDescription WORD Description of the connected modules module 0 controller Bit 0 Module has inputs Bit 1 Module has outputs Bit 8 14 Internal data width in bit Bit 15 0 1 Analog digital module At analog modules designate bits 0 14 the type of the module displayed e g 401 for the module 750 401 Common Services Service available Service code Class Instance Service Name Description 0E hex yes ...

Page 204: ...riables 256 510 This instance corresponds to the PFC s input variables located at address IB2808 IB3061 in a WAGO I O PRO application 4 3 3 2 23 Input fieldbus variable USINT Extended 2 A2 hex Same as the Input Fieldbus Variable USINT Class A0 hex however this contains the PLC input variables 511 512 This instance corresponds to the PFC s input variables located at address IB3062 IB3063 in a WAGO ...

Page 205: ... the Output Fieldbus Variable USINT Class A3 hex however this contains the PLC output variables 256 510 This instance corresponds to the PFC s output variables located at address QB2808 QB3062 in a WAGO I O PRO application 4 3 3 2 26 Output fieldbus variable USINT Extended 2 A5 hex Same as the Output Fieldbus Variable USINT Class A3 hex however this contains the PLC output variables 511 512 This i...

Page 206: ...RO application Common Services Service available Service code Class Instance Service Name Description 0E hex yes yes Get_Attribute_Single Supplies contents of the appropriate attribute 10 hex no yes Set_Attribute_Single Modifies an attribute value 4 3 3 2 28 Input fieldbus variable USINT Extended 1 A7 hex Same as the Input Fieldbus Variable UINT Class A6 hex however this contains only the PLC inpu...

Page 207: ...variable 256 This instance corresponds to the PFC s output variable located at address QW1531 in a WAGO I O PRO application Class attribute max Instance 1 4 3 3 2 31 Input fieldbus variable UDINT AA hex Class Attribute ID Access Name Data type Description Default value 1 Get Revision UINT Revision of this object 1 0x0001 2 Get Max Instance UINT Max number of instances 128 0x080 Instance 1 128 1 to...

Page 208: ...er of instances 128 0x080 Instance 1 128 1 to 128 Output variable Attribute ID Access Name Data type Description Default value 1 Get Fb_Out_Var UDINT Fieldbus output variable of the PLC 0 Common Services Service available Service code Class Instance Service Name Description 0E hex yes yes Get_Attribute_Single Supplies contents of the appropriate attribute 4 3 3 2 34 Output fieldbus variable UDINT ...

Page 209: ...high side switching DI DC 5 12 V 753 434 8 Channel DC 5 12 V 0 2 ms 1 conductor connection high side switching DI DC 24 V 750 400 753 400 2 Channel DC 24 V 3 0 ms 2 to 4 conductor connection high side switching 750 401 753 401 2 Channel DC 24 V 0 2 ms 2 to 4 conductor connection high side switching 750 410 753 410 2 Channel DC 24 V 3 0 ms 2 to 4 conductor connection high side switching 750 411 753...

Page 210: ... DC 24 V 0 2 ms 1 conductor connection high side switching 750 436 8 Channel DC 24 V 3 0 ms 1 conductor connection low side switching 750 437 8 Channel DC 24 V 0 2 ms 1 conductor connection low side switching DI AC DC 24 V 750 415 753 415 4 Channel AC DC 24 V 2 conductor connection 750 423 753 423 4 Channel AC DC 24 V 2 to 3 conductor connection with power jumper contacts DI AC DC 42 V 750 428 753...

Page 211: ...ide switching diagnostics 750 507 753 507 2 Channel DC 24 V 2 0 A short circuit protected high side switching diagnostics no longer available replaced by 750 508 750 508 2 Channel DC 24 V 2 0 A short circuit protected high side switching diagnostics replacement for 750 507 750 535 2 Channel DC 24 V EEx i short circuit protected high side switching 750 504 753 504 4 Channel DC 24 V 0 5 A short circ...

Page 212: ...l free 2 make contacts 5 1 3 Analog Input Modules Tab 5 3 Analog input modules AI 0 20 mA 750 452 753 452 2 Channel 0 20 mA differential input 750 465 753 465 2 Channel 0 20 mA single ended 750 472 753 472 2 Channel 0 20 mA 16 bit single ended 750 480 2 Channel 0 20 mA differential input 750 453 753 453 4 Channel 0 20 mA single ended AI 4 20 mA 750 454 753 454 2 Channel 4 20 mA differential input ...

Page 213: ...asurement input 750 476 753 476 2 Channel DC 10 V single ended 750 457 753 457 4 Channel DC 10 V single ended AI DC 0 30 V 750 483 753 483 2 Channel DC 0 30 V differential measurement input AI Resistance Sensors 750 461 753 461 2 Channel resistance sensors PT100 RTD 750 481 003 000 2 Channel resistance sensors PT100 RTD EEx i 750 460 4 Channel resistance sensors PT100 RTD AI Thermocouples 750 462 ...

Page 214: ...l 0 20 mA 750 585 2 Channel 0 20 mA EEx i 750 553 753 553 4 Channel 0 20 mA AO 4 20 mA 750 554 753 554 2 Channel 4 20 mA 750 554 753 554 4 Channel 4 20 mA AO DC 0 10 V 750 550 753 550 2 Channel DC 0 10 V 750 560 2 Channel DC 0 10 V 10 bit 100 mW 24 V 750 559 753 559 4 Channel DC 0 10 V AO DC 10 V 750 556 753 556 2 Channel DC 10 V 750 557 753 557 4 Channel DC 10 V ...

Page 215: ...ncor interface differential inputs 750 634 Incremental encor interface DC 24 V 750 637 Incremental encor interface RS 422 cam outputs 750 635 753 635 Digital pulse interface for magnetostrictive distance sensors Serial Interfaces 750 650 753 Serial interface RS 232 C 750 653 753 Serial interface RS 485 750 651 TTY Serial interface 20 mA Current Loop 750 654 Data exchange module DALI DSI Master Mod...

Page 216: ...ROFIsafe 8 channel digital input module 750 665 000 001 4FDO 0 5A 4FDI 24V DC PROFIsafe PROFIsafe 4 channel digital input and output module 750 666 000 001 1FDO 10A 2FDO 0 5A 2FDI 24V PROFIsafe PROFIsafe power switch module RTC Module 750 640 RTC module KNX EIB TP1 Module 750 646 KNX EIB TP1 module device mode router mode ...

Page 217: ... max 6 3 A without diagnostics with fuse holder AC 230 V Power Supply Modules 750 612 AC DC 230 V without diagnostics passive 750 609 AC 230 V max 6 3 A without diagnostics with fuse holder 750 611 AC 230 V max 6 3 A with diagnostics with fuse holder Filter Modules 750 624 Filter module field side power supply 750 626 Filter module system and field side power supply Field Side Connection Module 75...

Page 218: ...odules must be taken into account to determine its location in the process data map For the PFC process image of the programmable fieldbus controller is the the structure of the process data mapping identical 5 2 1 Digital Input Modules Digital input modules supply one bit of data per channel to specify the signal state for the corresponding channel These bits are mapped into the Input Process Ima...

Page 219: ...ital Input Module with Diagnostics and Output Process Data 750 418 753 418 The 750 418 753 418 digital input module supplies a diagnostic and acknowledge bit for each input channel If a fault condition occurs the diagnostic bit is set After the fault condition is cleared an acknowledge bit must be set to re activate the input The diagnostic data and input data bit is mapped in the Input Process Im...

Page 220: ...ta bit DI 5 Channel 5 Data bit DI 4 Channel 4 Data bit DI 3 Channel 3 Data bit DI 2 Channel 2 Data bit DI 1 Channel 1 5 2 2 Digital Output Modules Digital output modules use one bit of data per channel to control the output of the corresponding channel These bits are mapped into the Output Process Image When analog output modules are also present in the node the digital image data is always append...

Page 221: ...ostic bit is set The diagnostic data is mapped into the Input Process Image while the output control bits are in the Output Process Image Input Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Diagnostic bit S 2 Channel 2 Diagnostic bit S 1 Channel 1 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 controls DO 2 Channel 2 controls DO 1 Channel 1 750 506 753 506 The...

Page 222: ...Bit 0 controls DO 4 Channel 4 controls DO 3 Channel 3 controls DO 2 Channel 2 controls DO 1 Channel 1 4 Channel Digital Output Modules with Diagnostics and Input Process Data 750 532 The 750 532 digital output modules have a diagnostic bit for each output channel When an output fault condition occurs i e overload short circuit or broken wire a diagnostic bit is set The diagnostic data is mapped in...

Page 223: ...c bit for each output channel When an output fault condition occurs i e overload short circuit or broken wire a diagnostic bit is set The diagnostic data is mapped into the Input Process Image while the output control bits are in the Output Process Image Input Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Diagnost ic bit S 7 Channel 8 Diagnost ic bit S 6 Channel 7 Diagnost ic bit S...

Page 224: ... Process Image When digital input modules are also present in the node the analog input data is always mapped into the Input Process Image in front of the digital data 1 Channel Analog Input Module 750 491 and all variations Input Process Image Byte Destination Offset High Byte Low Byte Remark 0 D1 D0 Measured Value UD 1 D3 D2 Measured Value Uref 2 Channel Analog Input Modules 750 452 454 456 461 ...

Page 225: ...annel and 8 bits of control status However the coupler controller with MODBUS TCP does not have access to the 8 control status bits Therefore the coupler controller with MODBUS TCP can only access the 16 bits of analog data per channel which are grouped as words and mapped in Intel format in the Output Process Image When digital output modules are also present in the node the analog output data is...

Page 226: ...transmitted from the control system to the module and the status byte from the module to the control system This allows for example setting of a counter with the control byte or displaying of overshooting or undershooting of the range with the status byte Further information For detailed information about the structure of a particular module s control status byte please refer to that module s manu...

Page 227: ...n both the Input and Output Process Image 4 bytes of counter data and 1 byte of control status The two counter values are supplied as 16 bits The following tables illustrate the Input and Output Process Image which has a total of 3 words mapped into each image Word alignment is applied Input Process Image Byte Destination Offset High Byte Low Byte Remark 0 S Status byte 1 D1 D0 Counter Value of Co...

Page 228: ... 1 D1 D0 Counter Value of Counter 1 2 S1 Status byte of Counter 2 3 D3 D2 Counter Value of Counter 2 Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 C0 Control byte of Counter 1 1 D1 D0 Counter Setting Value of Counter 1 2 C1 Control byte of Counter 2 3 D3 D2 Counter Setting Value of Counter 2 Pulse Width Modules 750 511 and all variations The above Pulse Width modules hav...

Page 229: ... 007 Note With the freely parametrizable variations 003 000 of the serial interface modules the desired operation mode can be set Dependent on it the process image of these modules is then the same as from the appropriate variation The above Serial Interface Modules with alternative data format have a total of 4 bytes of user data in both the Input and Output Process Image 3 bytes of serial data a...

Page 230: ...put Process Image which have a total of 3 words mapped into each image Word alignment is applied Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 D0 C S Data byte Control Status byte 1 D2 D1 2 D4 D3 Data bytes Data Exchange Module 750 654 and the variation 000 001 The Data Exchange modules have a total of 4 bytes of user data in both the Input and Output Process I...

Page 231: ...k 0 D1 D0 1 D3 D2 Data bytes Incremental Encoder Interface Modules 750 631 The above Incremental Encoder Interface modules have 5 bytes of input data and 3 bytes of output data The following tables illustrate the Input and Output Process Image which have 4 words into each image Word alignment is applied Input Process Image Byte Destination Offset High Byte Low Byte Remark 0 S not used Status byte ...

Page 232: ...in the control byte the cycle duration is given as a 24 bit value that is stored in D2 together with D3 D4 Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 C not used Control byte 1 D1 D0 Counter Setting word 2 3 not used 750 637 The above Incremental Encoder Interface Module has a total of 6 bytes of user data in both the Input and Output Process Image 4 bytes of encoder d...

Page 233: ...TC Module module has a total of 6 bytes of user data in both the Input and Output Process Image 4 bytes of module data and 1 byte of control status and 1 byte ID for command The following table illustrates the Input and Output Process Image which have 3 words mapped into each image Word alignment is applied Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 ID C S C...

Page 234: ...2 DALI Address 3 D4 D3 Command Extension Parameter 1 EnOcean Radio Receiver 750 642 The EnOcean radio receiver has a total of 4 bytes of user data in both the Input and Output Process Image 3 bytes of module data and 1 byte of control status The following tables illustrate the Input and Output Process Image which have 2 words mapped into each image Word alignment is applied Input Process Image Byt...

Page 235: ...Input and Output Process Image 6 bytes of module data and 2 bytes of control status The following table illustrates the Input and Output Process Image which have 4 words mapped into each image Word alignment is applied Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 C1 S1 C0 S0 extended Control Status byte Control Status byte 1 D1 D0 2 D3 D2 3 D5 D4 Data bytes ...

Page 236: ...ess Image which have 8 words mapped into each image Word alignment is applied Input and Output Process Image byte Destination Offset High Byte Low Byte Remark 0 C0 S0 Not used Control Status byte log Channel 1 Sensor input 1 1 D1 D0 Data bytes log Channel 1 Sensor input 1 2 C1 S1 Not used Control Status byte log Channel 2 Sensor input 2 3 D3 D2 Data bytes log Channel 2 Sensor input 2 4 C2 S2 Not u...

Page 237: ...data in both the Input and Output Process Image Word alignment is applied The first Input and output word which is assigned to an AS interface master module contains the status control byte and one empty byte Subsequently the mailbox data are mapped when the mailbox is permanently superimposed Mode 1 In the operating mode with suppressable mailbox Mode 2 the mailbox and the cyclical process data a...

Page 238: ...it 0 Diagnostic bit S 2 Fuse Diagnostic bit S 1 Voltage Binary Space Module 750 622 The Binary Space Modules 750 622 behave alternatively like 2 channel digital input modules or output modules and seize depending upon the selected settings 1 2 3 or 4 bits per channel According to this 2 4 6 or 8 bits are occupied then either in the process input or the process output image Input or Output Process ...

Page 239: ...cess data map For the PFC process image of the programmable fieldbus controller is the the structure of the process data mapping identical 5 3 1 Digital Input Modules Digital input modules supply one bit of data per channel to specify the signal state for the corresponding channel These bits are mapped into the Input Process Image When analog input modules are also present in the node the digital ...

Page 240: ...1 Data bit DI 2 Channel 2 Data bit DI 1 Channel 1 The input modules seize 4 Instances in Class 0x65 2 Channel Digital Input Module with Diagnostics and Output Process Data 750 418 753 418 The 750 418 753 418 digital input module supplies a diagnostic and acknowledge bit for each input channel If a fault condition occurs the diagnostic bit is set After the fault condition is cleared an acknowledge ...

Page 241: ...ss 0x65 8 Channel Digital Input Modules 750 430 431 436 437 753 430 431 434 Input Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Data bit DI 8 Channel 8 Data bit DI 7 Channel 7 Data bit DI 6 Channel 6 Data bit DI 5 Channel 5 Data bit DI 4 Channel 4 Data bit DI 3 Channel 3 Data bit DI 2 Channel 2 Data bit DI 1 Channel 1 The input modules seize 8 Instances in Class 0x65 5 3 2 Digital ...

Page 242: ... 513 514 517 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 controls DO 2 Channel 2 controls DO 1 Channel 1 The output modules seize 2 Instances in Class 0x66 2 Channel Digital Input Modules with Diagnostics and Input Process Data 750 507 508 522 753 507 The 750 507 508 522 and 753 507 digital output modules have a diagnostic bit for each output channel When an output fault c...

Page 243: ...ut Process Image while the output control bits are in the Output Process Image Input Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Diagnostic bit S 3 Channel 2 Diagnostic bit S 2 Channel 2 Diagnostic bit S 1 Channel 1 Diagnostic bit S 0 Channel 1 The output modules seize 4 Instances in Class 0x65 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 not used not used...

Page 244: ...s in Class 0x65 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 controls DO 4 Channel 4 controls DO 3 Channel 3 controls DO 2 Channel 2 controls DO 1 Channel 1 And the output modules seize 4 Instances in Class 0x66 8 Channel Digital Output Module 750 530 536 753 530 434 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 controls DO 8 Channel 8 controls DO 7 C...

Page 245: ...O 1 Channel 1 And the output modules seize 8 Instances in Class 0x66 5 3 3 Analog Input Modules The hardware of an analog input module has 16 bits of measured analog data per channel and 8 bits of control status However the coupler controller with EtherNet IP does not have access to the 8 control status bits Therefore the coupler controller with EtherNet IP can only access the 16 bits of analog da...

Page 246: ...ination Offset High Byte Low Byte Remark 0 D1 D0 Measured Value Channel 1 1 D3 D2 Measured Value Channel 2 The input modules represent 2x2 bytes and seize 2 Instances in Class 0x67 4 Channel Analog Input Modules 750 453 455 457 459 460 468 and all variations 753 453 455 457 459 Input Process Image Byte Destination Offset High Byte Low Byte Remark 0 D1 D0 Measured Value Channel 1 1 D3 D2 Measured V...

Page 247: ... always mapped into the Output Process Image in front of the digital data Each output channel seizes one Instance in the Analog Output Point Object Class 0x68 2 Channel Analog Output Modules 750 550 552 554 556 560 585 and all variations 753 550 552 554 556 Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 D1 D0 Output Value Channel 1 1 D3 D2 Output Value Channel 2 The outpu...

Page 248: ...or each module can be found on the Internet under http www wago com The Specialty Modules represent as analog modules For this the process input data of the Specialty Modules seize one Instance per channel in the Analog Input Point Object Class 0x67 and the process output data seize one Instance seize one Instance in the Analog Input Point Object Class 0x67 per channel in the Analog Output Point O...

Page 249: ...d Input Process Image Byte Destination Offset High Byte Low Byte Remark 0 S Status byte 1 D1 D0 Counter Value of Counter 1 2 D3 D2 Counter Value of Counter 2 The specialty modules represent 1x6 bytes input data and seize 1 Instance in Class 0x67 Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 C Control byte 1 D1 D0 Counter Setting Value of Counter 1 2 D3 D2 Counter Setting...

Page 250: ...utput data and seize 2 Instances in Class 0x68 Pulse Width Modules 750 511 and all variations The above Pulse Width modules have a total of 6 bytes of user data in both the Input and Output Process Image 4 bytes of channel data and 2 bytes of control status The two channel values are supplied as 16 bits Each channel has its own control status byte The following table illustrates the Input and Outp...

Page 251: ...byte of control status The following table illustrates the Input and Output Process Image which have a total of 2 words mapped into each image Word alignment is applied Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 D0 C S Data byte Control Status byte 1 D2 D1 Data bytes The specialty modules represent 2x2 bytes input and output data and seize 2 Instances in Cla...

Page 252: ...Input and Output Process Image which has a total of 2 words mapped into each image Word alignment is applied Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 D1 D0 1 D3 D2 Data bytes The specialty modules represent 2x2 bytes input and output data and seize 2 Instances in Class 0x67 and 2 Instances in Class 0x68 SSI Transmitter Interface Modules 750 630 and all var...

Page 253: ...e Remark 0 C not used Control byte 1 D1 D0 Counter Setting word 2 not used 3 not used And the specialty modules represent 1x6 bytes output data and seize 1 Instance in Class 0x68 750 634 The above Incremental Encoder Interface module has 5 bytes of input data 6 bytes in cycle duration measurement mode and 3 bytes of output data The following tables illustrate the Input and Output Process Image whi...

Page 254: ...Image Byte Destination Offset High Byte Low Byte Remark 0 C0 S0 Control Status byte 1 1 D1 D0 Data Value 2 C1 S1 Control Status byte 2 3 D3 D2 Data Value The specialty modules represent 2x3 bytes input and output data and seize 2 Instances in Class 0x67 and 2 Instances in Class 0x68 750 635 753 635 The above Digital Pulse Interface module has a total of 4 bytes of user data in both the Input and O...

Page 255: ...ol Status byte D1 D0 n D3 D2 Data bytes The specialty modules represent 1x6 bytes input data and seize 1 Instance in Class 0x67 and seize 1 Instance in Class 0x68 DALI DSI Master Module 750 641 The DALI DSI Master module has a total of 6 bytes of user data in both the Input and Output Process Image 5 bytes of module data and 1 byte of control status The following tables illustrate the Input and Ou...

Page 256: ... illustrate the Input and Output Process Image which have 2 words mapped into each image Word alignment is applied Input Process Image Byte Destination Offset High Byte Low Byte Remark 0 D0 S Data byte Status byte 1 D2 D1 Data bytes Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 C not used Control byte 1 not used The specialty modules represent 2x2 bytes input and output ...

Page 257: ...and 4 bytes of control status The following table illustrates the Input and Output Process Image which have 8 words mapped into each image Word alignment is applied Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark C0 S0 Not used Control Status byte log channel 1 Sensor input 1 n D1 D0 Data bytes log channel 1 Sensor input 1 C1 S1 Not used Control Status byte log cha...

Page 258: ...n the mailbox is permanently superimposed Mode 1 In the operating mode with suppressable mailbox Mode 2 the mailbox and the cyclical process data are mapped next The following words contain the remaining process data Input and Output Process Image Byte Destination Offset High Byte Low Byte Remark 0 C0 S0 not used Control Status byte 1 D1 D0 2 D3 D2 3 D5 D4 max 23 D45 D44 Mailbox 0 3 5 6 or 9 words...

Page 259: ...epending upon the selected settings 1 2 3 or 4 bits per channel According to this 2 4 6 or 8 bits are occupied then either in the process input or the process output image Input or Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Data bit DI 8 Data bit DI 7 Data bit DI 6 Data bit DI 5 Data bit DI 4 Data bit DI 3 Data bit DI 2 Data bit DI 1 The Binary Space Modules seize 2 4 6 o...

Page 260: ...sired changes More information For a description example relating to the software operation please refer to http www win tech com html modscan32 htm 6 2 Visualization and control using SCADA software This chapter is intended to give insight into how the WAGO ETHERNET fieldbus coupler controller can be used for process visualization and control using standard user software There is a wide range of ...

Page 261: ...site is that the MODBUS ETHERNET driver has been loaded and MODBUS ETHERNET has been selected Subsequently the user is requested to enter the IP address for addressing the fieldbus node At this point some programs allow the user to give the node an alias name i e to call the node Measuring data The node can then be addressed with this name Then a graphic object can be created such as a switch digi...

Page 262: ...ead multiple registers Reading of several input registers 4 FC4 Ù read input registers Reading of an individual input register The following five digits specify the channel number of the consecutively numbered digital or analog input and or output channels Examples Read the first digital input i e 0 0000 1 Read the second analog input i e 3 0000 2 Application example Thus the digital input channel...

Page 263: ...he secondary explosion protection comes into play Following is a detailed description of such secondary measures 7 3 Classification Meeting CENELEC and IEC The specifications outlined here are valid for use in Europe and are based on the following standards EN50 of CENELEC European Committee for Electrotechnical Standardization On an international scale these are reflected by the IEC 60079 standar...

Page 264: ...onal occurrence of an explosive atmosphere 10 h 1000 h year Zone 2 areas can expect the rare or short term occurrence of an explosive atmosphere 0 h 10 h year Explosive areas subject to air borne dust Zone 20 areas are subject to an explosive atmosphere 1000 h year continuously or for extended periods Zone 21 areas can expect the occasional occurrence of an explosive atmosphere 10 h 1000 h year Zo...

Page 265: ...by pertinent combustible gases in the environment Subdivision IIA IIB and IIC takes into account that different materials substances gases have various ignition energy characteristic values For this reason the three sub groups are assigned representative types of gases IIA Propane IIB Ethylene IIC Hydrogen Tab 7 1 Minimal ignition energy of representative types of gases Minimal Ignition Energy of ...

Page 266: ... electrical operating means Tab 7 2 Unit categories Unit category Explosion group Area of use M1 I Fire damp protection M2 I Fire damp protection 1G II Zone 0 Explosive environment by gas fumes or mist 2G II Zone 1 Explosive environment by gas fumes or mist 3G II Zone 2 Explosive environment by gas fumes or mist 1D II Zone 20 Explosive environment by dust 2D II Zone 21 Explosive environment by dus...

Page 267: ...ng temperature of 40 C for operation and testing of the electrical components The lowest ignition temperature of the existing explosive atmosphere must be higher than the maximum surface temperature Tab 7 3 Temperature classes Temperature Classes Maximum Surface Temperature Ignition Temperature of the Combustible Materials T1 450 C 450 C T2 300 C 300 C to 450 C T3 200 C 200 C to 300 C T4 135 C 135...

Page 268: ...021 IEC 79 15 Electrical components for zone 2 see below Zone 2 Ignition protection n describes exclusively the use of explosion protected electrical components in zone 2 This zone encompasses areas where explosive atmospheres can only be expected to occur rarely or short term It represents the transition between the area of zone 1 which requires an explosion protection and safe area in which for ...

Page 269: ...following assignments apply Explosion endangered areas due to combustible gases fumes mist and dust Division 1 Encompasses areas in which explosive atmospheres are to be expected occasionally 10 h 1000 h year as well as continuously and long term 1000 h year Division 2 Encompasses areas in which explosive atmospheres can be expected rarely and short term 0 h 10 h year 7 4 2 Explosion Protection Gr...

Page 270: ...ature classes Maximum surface temperature Ignition temperature of the combustible materials T1 450 C 450 C T2 300 C 300 C to 450 C T2A 280 C 280 C to 300 C T2B 260 C 260 C to 280 C T2C 230 C 230 C to 260 C T2D 215 C 215 C to 230 C T3 200 C 200 C to 215 C T3A 180 C 180 C to 200 C T3B 165 C 165 C to 180 C T3C 160 C 160 C to 165 C T4 135 C 135 C to 160 C T4A 120 C 120 C to 135 C T5 100 C 100 C to 120...

Page 271: ...AWG 28 14 55 C max ambient LISTED 22ZA AND 22XM 2 4 2 4 6 2 1 0 1 0 2 0 3 II 3 G KEMA 01ATEX1024 X EEx nA II T4 Explosion protection group Unit category Community symbol for explosion protected electrical components Approval body and or number of the examination certificate E conforming with European standards Ex explosion protected component n Type of ignition Extended identification Explosion pr...

Page 272: ... II 3 G KEMA 01ATEX1024 X EEx nA II T4 CL I DIV 2 Grp A B C D op temp code T4A 24V DC AWG 28 14 55 C max ambient 2 4 2 4 6 4 1 0 0 0 2 0 3 LISTED 22ZA AND 22XM CL I DIV 2 Grp ABCD optemp code T4A Explosion group gas group Explosion protection group condition of use category Area of application zone Temperature class Fig 7 5 2 1 Example for lateral labeling of bus modules 750 400 2 channel digital ...

Page 273: ...cerpts from additional VDE regulations DIN VDE 0100 Installation in power plants with rated voltages up to 1000 V DIN VDE 0101 Installation in power plants with rated voltages above 1 kV DIN VDE 0800 Installation and operation in telecommunication plants including information processing equipment DIN VDE 0185 lightning protection systems The USA and Canada have their own regulations The following ...

Page 274: ...or in non hazardous areas Installation connection addition removal or replacement of modules field bus connectors or fuses may only take place when the system supply and the field supply are switched off or when the area is known to be non hazardous Ensure that only approved modules of the electrical operating type will be used The Substitution or Replacement of modules can jeopardize the suitabil...

Page 275: ...within a time unit BNC Bayonet Navy Connector Socket for coaxial cable BootP the bootstrap protocol is a protocol which specifies how system and network information is to be transmitted from a server to work stations Bridge Connects two separate networks Broadcast A message that is sent to all station connected to the network Bus A structure used to transmit data There are two types serial and par...

Page 276: ...all subscribers back off After waiting a random delay time the subscribers attempt to re transmit the data D Data bus see Bus Deterministic ETHERNET The ETHERNET data is transferred at a defined time constant The ETHERNET network can be defined and calculated A Switched ETHERNET architecture makes this possible Driver Software code which communicates with a hardware device This communication is no...

Page 277: ...s They are also able to control and regulate the traffic from the LAN into the Internet The crucial part of firewalls are static routers which have an access control list used to decide which data packets can pass from which subscriber Frame Unit of data transferred at the Data Link layer It contains the header and addressing information FTP File Transfer Protocol A standard application for TCP IP...

Page 278: ... means of local and remote request Today this term is also used to refer to simple computers which provide particular central Services i e UNIX Subscribers on the Internet HTML Abbreviation of hypertext markup language HTML is the description language for documents on the World Wide Web It contains language elements for the design of hypertext documents HTTP Hyper Text Transfer Protocol client ser...

Page 279: ... standard published in 1993 for morn systems with PLC functionality Based on a structured software model it defines a number of high performance programming languages that can be used for various automation tasks IEEE Institute of Electrical and Electronic Engineers IEEE 802 3 IEEE 802 3 is a IEEE standard ETHERNET only supports the yellow cable as a medium IEEE 802 3 also supports S UTP and wideb...

Page 280: ...erence model of the ISO OSI for networks with the objective of creating open communication It defines the interface standards of the respective software and hardware requirements between computer manufacturers The model treats communication removed from specific implementations using seven layers L LAN Local Area Network Library Compilation of modules available to the programmer in the programming...

Page 281: ... O Open MODBUS TCP Specification Specification which establishes the specific structure of a MODBUS TCP data packet This is dependant upon the selected function code Operating system Software which links the application programs to the hardware P Ping command When a ping command ping IP address is entered the ping program ICMP generates echo request packets It is used to test whether a node is ava...

Page 282: ...e the proxy gateway apart from the single configuration in the web browser Most web browsers can be configured so that they use different or no proxy gateways per access method FTP HTTP R Repeater Repeaters are physical amplifiers without their own processing function They refresh data without detecting damaged data and forward all signals Repeaters are used for longer transmission distances or wh...

Page 283: ... Supervisory Control and Data Acquisition SCADA software is a program for the control and visualization of processes Segment Typically a network is divided up into different physical network segments by way of routers or repeaters Server Device providing services within a client server system The service is requested by the Client Service An operation targeted at an object read write SMTP Short fo...

Page 284: ...twork shielding additionally to the single shielding of the conductors still another These cables are called S STP cables Screened Shielded twisted pair Structured cabling This specifies the maximum permissible cable lengths EIA TIA 568 IS 11801 and gives recommendations for the different types topology for ground area building and floor cabling Subnet A portion of a network that shares the same n...

Page 285: ...tch and not have to send it back to the main server Switched ETHERNET The segments of this type of ETHERNET are connected by switches There are many applications for switching technologies ETHERNET switching is becoming increasingly popular in local networks as it allows the realization of a deterministic ETHERNET T TCP Transport Control Protocol TCP IP Protocol Stack Network protocols which allow...

Page 286: ...trical not protected cable with twisted colored wires in pairs This type of cable which there is in execution two in pairs and four in pairs is the dominating type of cable in the floor wiring and the terminal wiring W WAGO I O PRO CAA Uniform programming environment programming tool from WAGO Kontakttechnik GmbH for the creation of a control program according to IEC 61131 3 for all programmable f...

Page 287: ...printmed html Local Area Networks An introduction to the technology John E McNamara Digital Press 1985 ISBN 0 932376 79 7 Digital Press Teil Nummer EY 00051 DP Network Troubleshooting Guide von Digital Equipment Corporation August 1990 Digital Press Teil Nummer EK 339AB GD 002 Zu RFC Request for Comments http members xoom com spielchen2k archiv public exploits rfcs rfcs ...

Page 288: ...rk architecture 123 Predictable 133 Shared 132 Standard 124 137 Switched 133 Ethernet standard 124 127 Exception 153 154 155 156 157 158 159 160 161 162 163 164 F Fault on the fieldbus 45 Fieldbus failure 119 168 Fieldbus interface 48 Fieldbus node Architecture 123 Fieldbus start 48 Firewall 132 Firmware Information 177 Flag 46 48 Flash memory 48 function code FC6 159 function code 150 169 256 App...

Page 289: ...ur 132 Realtime requirements 133 Repeater 123 130 131 277 Request 153 154 155 156 157 158 159 160 161 162 163 164 277 Request error 153 Reset Hardware 73 Response 153 154 155 156 157 158 159 160 161 162 164 277 Router 130 132 137 138 272 278 RUN 48 S SCADA 255 257 278 Segment length 124 Sequence number 142 Shared Ethernet 132 Socket 279 Standard Cabling 129 EN 50173 ISO 11801 TIA 568 A 129 Standar...

Page 290: ...WAGO Kontakttechnik GmbH Co KG Postfach 2880 D 32385 Minden Hansastraße 27 D 32423 Minden Phone 05 71 8 87 0 Fax 05 71 8 87 1 69 E Mail info wago com Web http www wago com ...

Reviews:

No comments

Related manuals for 750-872/020-000

Brand: MAJORITY Pages: 32

Brand: R&M Pages: 53

Brand: WAREMA Pages: 112

WAGO-I/O-SYSTEM 750 XTR Series

Brand: WAGO Pages: 272

Brand: WAGO Pages: 450

STRONG-BAC 20TB

Brand: Caldwell Pages: 11

Brand: Grundfos Pages: 27

Brand: Yabang Pages: 6

Brand: Globe Pages: 4

Box Design BT Box S2

Brand: Pro-Ject Audio Systems Pages: 6

Brand: The Fisher Pages: 20

Brand: CAME Pages: 16

Brand: Logic Pages: 3

Brand: M-system Pages: 3

Brand: GST Pages: 3

Brand: YATO Pages: 36

Brand: NIFTYLIFT Pages: 46

Brand: Relaxa Mobility Pages: 8

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands