For more information Contact with details of the application.

Transcription

1 Eaton Corporation Telecommunications Power Solutions Application Note AN0107 SC200 Modbus Server Last updated 20 January 2017 Applicable products SC200 System Controller (Version 5) Audience Eaton DC Product Channel Partners and Integrators Related documents SC200 System Controller Handbook (IPN ) For more information Contact with details of the application. Introduction This application note details how to configure the SC200 system controller (version 5.01 or later) for operation with Modbus and defines the Modbus server functionality implemented on the SC200. It also shows how to demonstrate Modbus functionality using a third party Modbus test application. The SC200 supports Modbus over TCP and Modbus over serial. Definitions Modbus: Modbus Server: Modbus Client: ModbusPoll: An application layer messaging protocol. The device responding to Modbus requests e.g. the SC200. The device requesting information from a Modbus server e.g. Modbus Poll. A Modbus client simulator from ModbusTools ( References Name Location 1 Modbus Application Protocol Specification V1.1b 2 MODBUS over Serial Line Specification and Implementation Guide V Modbus Messaging On TCP/IP Implementation Guide V1.0b Page 1 of 13 Eaton, Powerware, Intergy, SiteSure, CellSure, DCTools and PowerManager are trade names, trademarks, and/or service marks of Eaton Corporation or its subsidiaries and affiliates. Other marks are the property of their respective owners. Eaton Corporation All rights reserved.

2 To enable Modbus operation 1. Connect to the SC200 with DCTools (version or later) or via the web interface. Note: For connection details refer to Communications Options in the SC200 Operation Handbook. 2. Go to Configuration > Communications > Modbus. 3. Set Access to Enabled. Set Address as required. Parameter Default Value Range Notes Access Disabled Disabled, Enabled Address Interface version 1 Set to Enabled to use Modbus comms. For Modbus TCP leave address as 1. For Modbus RTU, set the Modbus address as required. A number indicating the version of the Modbus interface. If any extra registers are added or other changes made, then this number increases. 4. Go to Configuration > Communications > Physical Ports > Port Settings. 5. If using Modbus RTU through the RS232 serial port, then also set these parameters: Parameter Default Value Range Notes Baud Rate The baud rate of the RS232 port. Parity None None Odd Even An error checking method applied to every byte received on the RS232 port. All Modbus devices on the serial line must be configured to use the same parity checking method. Stop Bits One One Two The number of stop bits. Note: These parameters are not available via SNMP. Page 2 of 13

3 Appendix A: Demonstrate Modbus operation using Modbus-TCP Order and download Modbus Poll from Note: The free download version is a 30 day licence that only connects for 10 minutes at a time. 1. Install Modbus Poll. 2. Connect the SC200 to a network or use an Ethernet crossover cable. 3. Check the Ethernet connection by starting a web browser and browsing to the SC Start Modbus Poll. 5. Go to: Menu > Connection > Connect. 6. Set: Connection = Modbus TCP/IP Remote Server IP Address = SC200 IP address Remote Server Port = Click OK. 8. Go to: Menu > Setup > Read / Write Definition 9. Set: Slave ID = 1 Function Address Quantity Display According to type of register = register number (where the number has two registers, the first register number) = number of registers (1 or two for a single value, more to get several values at once) According to data type Page 3 of 13

4 Examples Value Function Address Quantity Display Notes Serial number Bus Voltage Battery, Load and Rectifier Currents AC Voltage Summary Critical / Major / Minor / Warning alarms 04 Input Registers 04 Input Registers 04 Input Registers 04 Input Registers 02 Read Discrete Inputs Long Inverse Float Inverse Float Inverse Displays 3 currents See Note 1 below Float Inverse Signed Displays 3 alarms 1=active 0=inactive See Note 1 below Digital Output 1 state 01 Read Coils 1 1 Signed Double click on the relay value (right hand column) to write to this Digital Output. See screenshot below. To set a digital output: 1. Get the DO state as above. 2. Double click on the state as below. 3. Set the value and click on Send. Note 1: Reading multiple values It is possible to read several values at once, providing they are all of the same type. In this case: Address = address of first register Quantity = total number of registers Page 4 of 13

5 Appendix B: Demonstrate Modbus operation using Modbus-RTU Repeat the above process with the following changes: 1. Connect from the PC to SC200 using an RS232 null modem cable. 2. Select Menu > Connection > Connect. 3. Set the values as follows: Port = port number Other values as shown below. Appendix C: Foxboro C50 operation using Modbus-RTU When using the Foxboro C50 Modbus master configurator using the following values. 1. Set the Reference Address to Set the Scan Function to the appropriate function code as follows. a. For Coils use Scan Function = 1 b. For Discrete Inputs use Scan Function = 2 c. For Input Registers use Scan Function = 4 Page 5 of 13

6 Appendix D: Modbus Technical Information Modbus-TCP Implementation The SC200 only accepts one Modbus-TCP connection at a time, on the reserved Modbus-TCP port of 502. Modbus Serial Implementation Modbus-RTU The SC200 Modbus server implementation meets all the mandatory requirements of the MODBUS over Serial Line Specification and Implementation Guide, Section 2, Modbus Data Link Layer (see References on page 1). Modbus/ASCII The SC200 does not implement Modbus/ASCII. Implemented Commands The following Modbus functions are available with the SC200. Format is as described in Reference 1 (see References on page 1). Function Sub-Function Description 0x01 n/a Read Coils 0x02 n/a Read Discrete Inputs 0x04 n/a Read Input Register 0x05 n/a Write Single Coil 0x08 Diagnostics 0x00 Return Query Data 0x01 Restart Communications Option 0x04 Force Listen Only Mode 0x0A Clear Counters 0x0B Return Bus Message Count 0x0C Return Bus Communications Error Count 0x0D Return Bus Exception Count 0x0E Return Slave Message Count 0x0F Return Slave No Response Count 0x12 Return Bus Character Overrun Count Page 6 of 13

7 Modbus Register Mappings The SC200 implementation includes the following the Modbus registers. Note: highlighted registers are only available in SC200 V5 and later versions. Coils (digital outputs) Register Name Type Read Write 1 Digital-Output-1 Bit 1 if the state of digital output 1 is active, 0 otherwise. 0xFF00 to set the state of digital output to manual control. 0x000 to set the state to automatic control. 32 Digital-Output-32 Bit 1 if the state of digital output 1 is active, 0 otherwise. 0xFF00 to set the state of digital output to manual control. 0x000 to set the state to automatic control Illegal Illegal 101 Rectifier-Comms- Lost Bit 1 if the Rectifier-Comms- Lost alarm or the Multiple- Rectifier-Comms-Lost alarm or both are active. 0x000 to clear the Rectifier-Comms-Lost and Multiple-Rectifier-Comms-Lost alarms. 0xFF00 has no effect. 102 Battery-Test-Fail- Alarm Bit 1 if the Battery-Test-Fail- Alarm is active. 0x000 to clear the Battery-Test-Fail-Alarm alarm. 0xFF00 has no effect Illegal Illegal 201 Fast-Charge Bit 202 Battery-Test Bit 203 Equalize Bit 204 Characterize Bit 1 if the Fast Charge control process is running. 1 if the Battery-Test control process is running. 1 if the Equalize control process is running. 1 if Battery Characterization is running. 0x000 to stop Fast Charge. 0xFF00 has no effect. 0x000 to stop Battery-Test. 0xFF00 to start a Battery-Test. 0x000 to stop Equalize. 0xFF00 to start Equalize. 0x000 to stop Characterization. 0xFF00 to start Characterization. 205 Generator control Bit 1 if the generator is running 0xFF00 to manually start the generator. 0x000 to reset the manual generator run. 206 Restart all rectifiers Bit Illegal 0x000 to restart all rectifiers. 207 Reset Energy Meters Bit Illegal 0x000 to reset all energy meters LVD Manual Control 1-16 Bit 1 is the LVD is connected, 0 otherwise. 0x000 to manually disconnect. 0xFF00 to reconnect Illegal Illegal 301 Smart Alarm 1 Bit 1 if Smart Alarm 1 is active. 0x000 to clear this alarm. 0xFF00 has no effect. 332 Smart Alarm 32 Bit 1 if Smart Alarm 32 is active. 0x000 to clear this alarm. 0xFF00 has no effect Illegal 401 Smart Alarm Manual Source 1 Bit 1 if Smart Alarm Manual Source 1 is active. 0xFF00 to activate the Manual Source, 0x0000 to clear the Manual Source. Smart Alarm 1 if Smart Alarm Manual 0xFF00 to activate the Manual Source, 0x0000 to 420 Bit Manual Source 20 Source 20 is active. clear the Manual Source. Note: Type Bit is a 16-bit unsigned or signed word. Each value is one register only. Page 7 of 13

8 Discrete Inputs Register Read Type Value 1001 Summary-Alarm-Critical Bit 1 if any system alarm with a severity of Critical is active Summary-Alarm-Major Bit 1 if any system alarm with a severity of Major is active Summary-Alarm-Minor Bit 1 if any system alarm with a severity of Minor is active Summary-Alarm-Warning Bit 1 if any system alarm with a severity of Warning is active Illegal 1101 Fan-Fail Bit 1 if the Fan Fail digital input is Failed. 0 if it is OK or Unavailable Mains-Fail Bit 1 if the Mains Fail digital input is Failed. 0 if it is OK or Unavailable MOV-Fail Bit 1 if the MOV Fail digital input is Failed. 0 if it is OK or Unavailable Load-Fuse-Fail Bit 1105 Battery-Fuse-Fail Bit 1106 Cabinet-Fan-Fail Bit 1107 Phase-Fail Bit Illegal 1201 Low-Float Bit 1202 Low-Load Bit 1203 High-Float Bit 1204 High-Load Bit 1205 Rectifier-Fail Bit 1206 Multiple-Rectifier-Fail Bit 1207 Rectifier-Comms-Lost Bit 1208 Multiple-Rectifier-Comms-Lost Bit 1209 Partial-AC-Fail Bit 1210 AC-Fail Bit 1211 System-Overload Bit 1212 Load-Fuse-Fail Bit 1213 Battery-Fuse-Fail Bit 1214 Battery-Test-Fail Bit 1215 MOV-Fail Bit 1216 ACD-Fan-Fail Bit 1217 LVD1-Disconnected Bit 1218 LVD1-Fail Bit 1219 LVD1-Manual Bit 1220 LVD2-Disconnected Bit 1221 LVD2-Fail Bit 1222 LVD2-Manual Bit 1223 Battery-Temperature-Low Bit 1224 Battery-Temperature-High Bit 1225 Sensor-Fail Bit 1226 Equalize Bit 1 if the Load-Fuse-Fail digital input is Failed. 0 if it is OK or Unavailable. 1 if the Battery-Fuse-Fail digital input is Failed. 0 if it is OK or Unavailable. 1 if the Cabinet-Fan-Fail digital input is Failed. 0 if it is OK or Unavailable. 1 if the Phase-Fail digital input is Failed. 0 if it is OK or Unavailable. 1 if this alarm's active state is Active-Warning, or Active-Minor, or Active-Major, or Active-Critical. Page 8 of 13

9 Register Read Type Value 1227 Fast-Charge Bit 1228 Battery-Test Bit 1229 Auxiliary-Sensor-Fail Bit 1230 In-Discharge Bit 1231 Battery-Current-Limit Bit 1232 Rectifier-No-Load Bit 1233 Rectifier-Current-Limit Bit 1234 Rectifier-Over-Temperature Bit 1235 AC-Phase1-Fail Bit 1236 AC-Phase1-Voltage Bit 1237 AC-Phase2-Fail Bit 1238 AC-Phase2-Voltage Bit 1239 AC-Phase3-Fail Bit 1240 AC-Phase3-Voltage Bit 1241 AC-Frequency Bit 1242 Generator-Enable Bit 1243 Cabinet-Fan-Fail Bit 1244 New-Hardware Bit 1245 Unknown-Hardware Bit 1246 Missing-Hardware Bit 1247 Standby-Mode Bit 1248 LVD1-Characterization-Error Bit 1249 LVD2-Characterization-Error Bit 1250 String-Fail Bit 1251 Generator-Fail Bit 1252 LVD-Disconnected Bit 1253 LVD-Fail Bit 1254 LVD-Manual Bit 1255 LVD-Characterization-Error Bit 1256 Configuration-Error Bit 1257 Wrong-Battery-Polarity Bit 1258 Characterizing-Battery Bit 1259 DO-Manual Bit 1260 Normal Charge Bit 1261 Peak Load Reduction Bit 1262 Site Backup Time Remaining Bit 1263 DC Input fail Bit 1264 Solar Fail Bit Illegal 1301 Digital-Input-Alarm-1 Bit 1 if digital input 1 has an alarm mapped and it is active Digital-Input-Alarm-108 Bit 1 if digital input 108 has an alarm mapped and it is active Illegal 1501 Analog-Input-1-High-Alarm Bit 1 if analog input 1 has an high alarm mapped and it is active. Page 9 of 13

10 Register Read Type Value 1548 Analog-Input-48-High-Alarm Bit 1 if analog input 48 has an high alarm mapped and it is active Illegal 1601 Analog-Input-1-Low-Alarm Bit 1 if analog input 1 has an low alarm mapped and it is active Analog-Input-48-Low-Alarm Bit 1 if analog input 48 has an low alarm mapped and it is active Illegal 1701 Smart-Alarm-1 Bit 1 if Smart Alarm 1 is active Smart-Alarm-32 Bit 1 if Smart Alarm 32 is active Illegal 1801 Digital-Input-1 Bit 1 if this digital input 1 is closed. 0 if open or unknown Digital-Input-108 Bit 1 if this digital input 108 is closed. 0 if open or unknown. Note: Type Bit is a 16 bit unsigned or signed word. Each value is one register only. Input Registers Note: 32 bit float IEEE encoded registers will return a floating point NAN if the number is not available for instance, if no input is connected. Register Read Type No. Registers 3001 Major-Software-Version 16 bit unsigned integer Minor-Software-Version 16 bit unsigned integer Modbus-Interface-Version 16 bit unsigned integer Illegal 3101 Number of Registered Rectifiers 16 bit unsigned integer Number of Registered Solar Chargers 16 bit unsigned integer Illegal 6001 Serial Number - high word 32 bit unsigned integer Serial Number - low word Illegal 7001 Bus-Voltage - high word 32 bit float IEEE encoded Bus-Voltage - low word 7003 Battery-Current - high word 32 bit float IEEE encoded Battery-Current - low word 7005 Load-Current - high word 32 bit float IEEE encoded Load-Current - low word 7007 Rectifier-Current - high word 32 bit float IEEE encoded Rectifier-Current - low word 7009 Load-Power - high word 32 bit float IEEE encoded Load-Power - low word 7011 Battery-Temperature - high word 32 bit float IEEE encoded Battery-Temperature - low word 7013 System-Power - high word 32 bit float IEEE encoded System-Power - low word 7015 Sum-Of-Reported-Rectifier-Currents - high word 32 bit float IEEE encoded 2 Page 10 of 13

11 7016 Sum-Of-Reported-Rectifier-Currents - low word 7017 AC-Voltage - high word 32 bit float IEEE encoded AC-Voltage- low word 7019 Battery Time Remaining - high word 32 bit float IEEE encoded Battery Time Remaining - low word 7021 Ampere-hours Discharged high word 32 bit float IEEE encoded Ampere-hours Discharged low word 7023 Battery State of Health high word 32 bit float IEEE encoded Battery State of Health low word 7025 Site Backup Time high word 32 bit float IEEE encoded Site Backup Time high word Illegal 7101 Analog-Input-1- high word 32 bit float IEEE encoded Analog-Input-1 - low word Analog-Input-48- high word 32 bit float IEEE encoded Analog-Input-48 - low word Alternative Energy Source Current (Amps) high word Alternative Energy Source Current (Amps) 1 low word Generator Fuel Level (Arbitrary Units)Error! Bookmark not defined. high word Generator Fuel Level (Arbitrary Units)Error! Bookmark not defined. 32 bit float IEEE encoded 2 32 bit float IEEE encoded Generator Backup Time (Minutes) high word 32 bit float IEEE encoded Generator Backup Time (Minutes) Tank Empty Estimate (Year) Error! Bookmark not defined. high word Tank Empty Estimate (Year) Error! Bookmark not defined. low word Tank Empty Estimate (Month) Error! Bookmark not defined. high word Tank Empty Estimate (Month) Error! Bookmark not defined. - low word Tank Empty Estimate (Day) Error! Bookmark not defined. high word Tank Empty Estimate (Day) Error! Bookmark not defined. - low word Tank Empty Estimate (Hour) Error! Bookmark not defined. high word 7314 Tank Empty Estimate (Hour) - low word 32 bit float IEEE encoded 2 32 bit float IEEE encoded 2 32 bit float IEEE encoded 2 32 bit float IEEE encoded Solar Current (amps) high word 32 bit float IEEE encoded Solar Current (amps) - low word 7317 Solar Power (kw) high word 32 bit float IEEE encoded Solar Power (kw) - low word Page 11 of 13

12 7319 DC Input Voltage (high word) high word 32 bit float IEEE encoded DC Input Voltage (high word) - low word 7321 Fan controller temperature 1 ( C) high word 32 bit float IEEE encoded 7322 Fan controller temperature 1 ( C) - low word 7323 Fan controller temperature 2 ( C) high word 32 bit float IEEE encoded Fan controller temperature 2 ( C) - low word Fan controller voltage 1 (V) high word 32 bit float IEEE encoded 7326 Fan controller voltage 1 (V) - low word 7327 Fan controller voltage 2 (V) high word 32 bit float IEEE encoded Fan controller voltage 2 (V) - low word 7329 Reserved 7330 Reserved 7331 Reserved 7332 Reserved 7333 to 7400 Illegal 7401 Smart Analog-1- high word 32 bit float IEEE encoded Smart Analog -1 - low word Smart Analog -8- high word 32 bit float IEEE encoded Smart Analog -8 - low word 7501 Energy Meter-1- high word (Energy in kwh) 32 bit float IEEE encoded Energy Meter-1 - low word Energy -Meter-20 - high word (Energy in kwh) 32 bit float IEEE encoded Energy- Meter-20 - low word 7541 Power - Meter-1- high word (Power in kw) 32 bit float IEEE encoded Power- Meter-1 - low word Power - Meter-20 - high word (Power in kw) 32 bit float IEEE encoded Power - Meter-20 - low word Page 12 of 13

13 Note: Modbus Poll display type names. Type Modbus Poll calls it: 32 bit unsigned integer Long Inverse 16 bit unsigned integer Unsigned 32 bit float IEEE encoded Float Inverse Page 13 of 13