VPGate Manual PROFIBUS to serial

Transcription

1 VPGate Manual PROFIBUS to serial

2 Important information Purpose of the Manual This user manual provides information how to work with the VPGate PROFIBUS to serial. Document Updates You can obtain constantly updated information on PROCENTEC products on the Internet at You can also contact PROCENTEC Customer Support: by phone at +31-(0) by fax at +31-(0) by at VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 2/82

3 Content Important information Technical Specifications General characteristics Electrical characteristics Mechanical characteristics Hardware Setup Connectors pin out Power connector SERIAL Connector Digital input Digital output Front panel indicators DIP switches Selecting the RS-232/RS-485 modes Termination resistance Selection of the PROFIBUS address Software Setup for PROFIBUS DPV Configuration tool for PROFIBUS DP Master DPV Include VPGate into a project Import the VPGate GSD file into the third party configuration tool Insert VPGate into the network configuration VPGate parameters General parameters Setup VPGate in TRANSPARENT mode Setup VPGate as MODBUS Master Generic master mode: PASS-FRAME function Setup VPGate as MODBUS slave Insertion of Input / output modules When VPGate is in TRANSPARENT mode When VPGate is in Master MODBUS mode When VPGate is in MODBUS Slave mode Fail safe mode DPV1 PROFIBUS acyclic functionalities Configuration tools of the PROFIBUS DPV1 master Identification Informations Acyclic communication in «MODBUS master» mode Description of the index 0 «COMMAND» Description of the index 1 «STATUS» Description of the index 2 «ADDRESS» Description of the index 3 «FUNCTION» Description of the index 4 «OFFSET» Description of the index 5 «LENGTH»...36 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 3/82

4 5.3.7 Description of the index 6 «DATA» Example Digital I/O s Digital output Digital input Diagnostic PROFIBUS extended diagnostic Digital output for diagnostic Firmware Update Appendices Appendix A: List of errors sent by VPGate...44 Appendix B: Format of MODBUS messages Other PROCENTEC products Sales offices and distributors About PROCENTEC Notes VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 4/82

5 1. Technical Specifications 1.1 General characteristics PROFIBUS DPV0 and DPV1 Baud Rate 9.6kbps 12 Mbps (Auto Baud) Connector DB9 female Bus Address 7 DIP switches PROFIBUS Versions DP V0, DP V1 (1 connection MS-C1 and 1 connection MS-C2) Diagnostic 27 bytes of extended diagnostic, 6 status indicators Input Bytes Output Bytes Max number of Inputs/Outputs 488 Isolation 1 kv Others Sync, Freeze, Fail-Safe SERIAL LINK Baud Rate 1200, 2400, 4800, 9600, 19200, 38400, 57600, baud Data bits 7 or 8 bits Interface RS-232 or RS-485 Distance Maximum 1200m copper cable without repeater (depending on speed and cable quality) Cable Shielded twisted pair Connector Female open style connector 3 contacts VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 5/82

6 Bus termination resistor 120 Ω configurable by switches TRANSPARANT MODE End of frame delimiter EOF character, known length, on timeout MODBUS MODE Bus Access Master or Slave Protocol MODBUS RTU or ASCII Max number of devices on the network 32 Supported Functions 1, 2, 3, 4, 5, 6, 7, 15, 16; 23 Number of slave accessible by the master. 20 MODBUS Slaves in PROFIBUS DPV0 247 slaves in PROFIBUS DPV1 Range of slave addresses Number of accessible MODBUS registers read registers with PROFIBUS DPV write registers with PROFIBUS DPV read/write registers with PROFIBUS DPV1 Max total number of accessible MODBUS registers 244 with PROFIBUS DPV0 Unlimited with PROFIBUS DPV1 Number of messages 1-20 different MODBUS messages with PROFIBUS DPV0 Unlimited with PROFIBUS DPV1 Message trigger Cyclic, On change, Once with PROFIBUS DPV0 On demand with PROFIBUS DPV1 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 6/82

7 INPUT / OUTPUT 1 digital isolated input 0 24 V 1 relay ouput Switch contact (rated current 1.2A, switching current 0.5A) 1.2 Electrical characteristics POWER SUPPLY Input Voltage 24V DC +/- 10% Consumption 0,5W Connector Open style 3 contacts, female Polarity protection Yes Short circuit protection Yes 1.3 Mechanical characteristics MECHANICAL Housing Plastic box IP20 DIN rail mountable Dimensions 120 x 100 x 23 mm (L x W x H) Weight About 100g Storage Temperature -25 C +70 C Operating Temperature 0 C +55 C VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 7/82

8 2. Hardware Setup 2.1 Connectors pin out Fig. 1 Connector on top of the enclosure Power connector Pin Name Description 1 24 V DC Power supply 24 V ± 10% 2 0 V DC Power supply 0 V 3 Earth Earth SERIAL Connector Pin Name Description 1 Rx Rx RS-232 (VPGate < device) 2 Tx Tx RS-232 (VPgate > device) 3 GND RS-232 grounding 4 Shield Earth 5 Data - Signal Data - RS Data + Signal Data + RS-485 Important: The shield of the SERIAL RS-485 cable must be connected to the earth at each end in order to protect against EMC. Pin 4 of the connector may be used. In this case the earth pin of the power connector must be connected. However, it is better to use a shield clamp, fixed at each end of the serial cable on a grounding rod or a bottom plate of a cabinet. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 8/82

9 Fig. 2 Connectors on bottom of the enclosure Digital input IEC compliant, type 1: 1 IN 2 Pin Name Description 1 IN + Insulated digital input (15-24 V) IN - Insulated digital input, ground return Digital output IEC compliant: OUT 1 2 Pin Name Description 1 OUT Relay contact 2 OUT Relay contact Interrupting capacity 0.5 A Maximum accepted current: 1.2 A VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 9/82

10 2.2 Front panel indicators Name Lit Description Blink Description ON Gateway is powered PFB No established communication on PROFIBUS (BF) diagnostic related to PROFIBUS Serial No reply from a MODBUS slave diagnostic related to the serial line RUN Firmware is running Tx Sending on serial line Rx Receiving on serial line 2.3 DIP switches DIP switches enable: selection of the PROFIBUS address of the device (1 to 126), selection of the physical support of the serial link: RS-232 or RS-485, activation of a termination and line polarisation in RS-485 mode. Fig. 3 DIP switches Selecting the RS-232/RS-485 modes A switch enables specifying the operating mode of the serial link in RS-232 or RS-485 (when delivered, VPGate is preset to RS-485): VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 10/82

11 RS-232 mode: Fig. 4 Serial network in RS-232 This mode can only be used in case of communication between 2 individual devices (point-to-point connection). The maximum distance in RS-232 is 15 m at baud. RS-485 mode: Fig. 5 Serial network RS-485 mode This mode is used more often as it allows connection of several slaves on the bus. It also has other advantages such as immunity to EMC disturbances and a greater inter-device distance than in RS-232. The maximum distance in RS-485 is 1200 m Termination resistance If the communication mode used is RS-485, there must be a termination resistance of 120Ω at both ends of the network. A termination resistance can be added directly in VPGate if it is positioned at the end of a segment. It is connected using 2 DIP switches (when delivered, VPGate is preset without a termination resistance). Note 1: Note 2: To ensure proper operation of the termination, the 2 switches must be in the same position. In RS-232 mode, these 2 DIP switches must be on TERM OFF. Fig. 6 Termination of the RS-485 bus VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 11/82

12 2.4 Selection of the PROFIBUS address Use the switches 1,2,4,8,16,32,64 to select the PROFIBUS address of the VPGate. (VPGate default factory setting is address 3). The label next to each switch corresponds to its weight. PROFIBUS address must be set to a value between 0 and 126. Ex: To set address 3, set the switches 1 and 2 to ON. Fig. 7 PROFIBUS address set to 3 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 12/82

13 3. Software Setup for PROFIBUS DPV0 3.1 Configuration tool for PROFIBUS DP Master DPV0 The setup of VPGate PROFIBUS to serial is done using the configuration tool of the PROFIBUS network. The configuration is automatically sent to the PROFIBUS slaves (VPGate PROFIBUS) during the network initialisation phase. The detailed configurations hereafter was created as examples using the PROFIBUS configuration tools from third party vendors, "Console" of Woodhead and "HW Config" of SIEMENS. However the principle is the same with other PROFIBUS master configuration tools of the market place. 3.2 Include VPGate into a project Before to continue, it is mandatory to create a project into the third party configuration tool. The project must include a PROFIBUS network and a master port Import the VPGate GSD file into the third party configuration tool. This GSD file allows you to use the VPGate as a PROFIBUS slave device. It is named PROC6980.GSD and it is located on our website under PROCENTEC It is necessary to import this GSD file into the third party configuration PROFIBUS to have the VPGate device appearing in the list of slave devices to be included on the network. HW config. TIA portal Console, Woodhead VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 13/82

14 3.2.2 Insert VPGate into the network configuration The different stages are as follows: From the list of PROFIBUS devices, insert VPGate on the network. Setup the appropriate PROFIBUS address of the VPGate (this value must match with the one configured on the VPGate hardware (DIP switches) HW config. TIA portal Console, Woodhead Note: The communication baudrate of VPGate is automatically defined according to the configuration of the PROFIBUS DP master. 3.3 VPGate parameters General parameters Once VPGate is inserted into the PROFIBUS network configuration, it is necessary to configure the serial line. HW config. TIA portal Console, Woodhead VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 14/82

15 Name Description Possible values Baudrate Baudrate of the serial link (in bits/s) Data bits (*) Number of data bits 7 8 No parity / 1 stop Stop bits and parity bit (**) Number of stop bits and parity bit specification No parity / 2 stops Even parity / 1 stop Odd parity / 1 stop 10 ms Timeout Timeout on serial link in reception 100 ms 500 ms 1000 ms VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 15/82

16 Name Description Possible values MODBUS RTU Protocol selection Mode selection MODBUS ASCII transparant Extended diagnosis Enable or disable PROFIBUS extended diagnosis Enabled Disabled Interframe silence Specifies a time that must be respected between received and transmitted frames in ms ms (*) In MODBUS RTU, data are coded on 8 bits. In MODBUS ASCII, data are coded on 7 bits. In those modes, parameter "data bits" is ignored. (**) In MODBUS ASCII, if there is not parity bit ("No parity"), others MODBUS equipments on the network must be configured with 2 stop bits Setup VPGate in TRANSPARENT mode In this mode, data exchange is full duplex on the serial link, without any master / slave relation. Frames detected over the serial link are immediately transferred to the PROFIBUS inputs, starting at the offset 0. Also, if a serial frame format is detected in the PROFIBUS outputs, it is immediately transferred to the serial link. In order to do so, it is necessary to define how frames are delimited. To setup VPGate in transparent mode: Set the parameter "Protocol selection" on "TRANSPARENT": HW config. TIA portal Console, Woodhead VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 16/82

17 Then setup parameters dedicated to transparent mode: HW config. TIA portal Console, Woodhead Name Description Possible values NULL (0x00) SPACE (0x20) LF (0x0A) CR (0x0D) EOF delimiter (1) Defines how an end of frame will be detected CR LF LF CR User defined Length in 1st byte On timeout (2) Fill-in unused bytes (3) Defines if unused bytes in PROFIBUS inputs frame must be modified in end of frame character Enabled Disabled Add frames counter (4) Defines if a frame counter is added at the beginning of PROFIBUS inputs and outputs frames Enabled Disabled Add and control CRC 16 Defines if a CRC16 must be checked in the data received from the serial equipment, and must be added to the data sent to the serial equipment. Enabled Disabled VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 17/82

18 (1): If this parameter is set on User defined, the end of frame character taken into account is the one specified by parameter "User defined EOF". If it is set as on timeout, the reception timeout taken is the one defined in the serial link configuration. (2): When "EOF delimiter" is set to on timeout, only detection of frames received from serial line is on timeout. On PROFIBUS side, 1st byte must be used to specify the length of received/sent frame (cf ). (3): When "EOF delimiter" is set on length in 1st byte or on timeout, the filled value is 0x00. (4): This counter is used as a trigger: If this parameter is enabled, 1st byte of PROFIBUS outputs must be a counter incremented each time data are available and must be sent. Relevant data begin at 2nd byte. Otherwise, the frame is copied from the 1st byte as soon as a change on PROFIBUS outputs is detected. If this parameter is enabled, 1st byte of PROFIBUS inputs is incremented each time a new frame was received on serial link. Useful data are copied following this counter. Otherwise, received frame is copied from the 1st byte. Note: Each principle in TRANSPARENT mode is detailed in The inter frame silence parameter leads to the following behaviour: If there is no recently detected frame, VPGate sends frames through the serial line without waiting for an inter frame time. But, when there is a detected frame through the RX line, VPGate will wait for the inter frame time before sending the following frame through TX Setup VPGate as MODBUS Master To use VPGATE as MODBUS master, proceed as follows: Adjust first of all parameter "Protocol selection" on "MODBUS RTU" or "MODBUS ASCII" depending on the protocol used. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 18/82

19 Select then the parameter "VPGate Master/Slave" on "Master". HW Config, TIA portal Console, Woodhead Then setup general parameters dedicated to MODBUS master mode: "CRC/LRC" and "Retries" HW Config, TIA portal Console, Woodhead Name Description Possible values CRC / LRC Defines if CRC (MODBUS RTU) or LRC (MODBUS ASCII) must be controlled Enabled Disabled 0 Retries Number of iterations before signalling a timeout Set the parameter inter frame silence to specify the minimum time VPGate can take to send a new MODBUS request to a slave after receiving the last reply (see the figure below). VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 19/82

20 Then setup the different scenarios in order to define the different MODBUS commands to be sent as well as how VPGate is going to send them: HW Config, TIA portal Console, Woodhead VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 20/82

21 The parameters of a scenario are as follows: Name Description Possible values NOP (0x00) Disabled Read coils (0x01) Read coils (0x02) Read registers (0x03) MODBUS Function MODBUS command to be sent (NOP means that the current scenario and the following are disabled) Read registers (0x04) Write coil (0x05) Write register (0x06) Read status (0x07) Write coils (0x0F) Write registers (0x10) Passe-trame (0x7F) Slave address Address of MODBUS slave receiving the command. 1 to 247 included Frame trigger The command can be sent: Cyclically (timer) On change of value of PROFIBUS output registers Once at power up of the VPGate Each cycle On change Only once Cycle time Period of timer to send the command (only if Frame trigger = Each cycle) 100 ms 500 ms 1 s VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 21/82

22 Name Description Possible values 5 s 10 s Cycle time Period of timer to send the command (only if Frame trigger = Each cycle) 30 s 60 s Polling (= no delay) Address of 1st bit or register Address of 1 st MODBUS bit or register 0 to included Qty of bits or registers (*) Number of MODBUS bits or registers to be exchanged 0 to 1952 included (*) : For one scenario, it is possible to set a maximum of 122 registers with functions 3, 4 and 10 or a maximum of 1952 bits with functions 1, 2, 15. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 22/82

23 It is possible to configure up to 20 scenarios. For example: SCENARIO 1 Function Read (0x03) From Modbus slave address 1 Every 1s SCENARIO 2 Function Write (0x10) To Modbus slave address 3 Up on change of value HW Config, TIA portal Console, Woodhead Generic master mode: PASS-FRAME function This mode allows data exchange in transparent mode between PROFIBUS and the serial link. However, VPGate must behave as a master, so it always has to send a request first. Then, the slave can reply. This data exchange mode is possible when VPGate is configured as a MODBUS master. For each scenario, it is possible to choose function 0x7F (pass frame). This function is not a MODBUS function. It is specific to VPGate. It allows VPGate to send on serial link a frame made of some bytes received from the PROFIBUS outputs. If a reply is required, it is possible to specify the number of bytes expected. Received bytes are then copied into PROFIBUS inputs. Example: the following scenario is configured: MODBUS Function = 0x7F Slave Address = x (not taken into account) Frame Trigger = Each cycle Cycle Time = 500ms Address of 1st bit or reg = 0x0008 (number of bytes to send on serial line) Qty of bits or registers = 0x0007 (number of bytes to receive on serial line) VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 23/82

24 If no reply is detected before the configured timeout, or if more bytes or less bytes are received, a diagnostic is triggered. If no reply is required, the parameter "Address of 1st bit or reg" must be set to Setup VPGate as MODBUS slave To use VPGATE as MODBUS slave, please proceed as follows: Select the parameter "VPGate Master/Slave" on "Slave" (by default VPGate is configured as a slave). The MODBUS slave address of VPGate is in the field named "Address in slave mode" HW Config, TIA portal Console, Woodhead Adjust parameter "CRC/LRC" (CRC control enabled in RTU mode or LRC control enabled in ASCII mode: Set the parameter inter frame silence to specify the time VPGate will take to respond to a MODBUS master request (see the figure below) VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 24/82

25 When configured as a MODBUS slave, VPGate supports the MODBUS functions 1, 2, 3, 4, 5, 6, 7, 15, 16 and 23. An exception message is sent when using a function which is not above listed. It is possible to read or write a maximum of 122 registers at once for functions 3, 4, 10 and 23, or a maximum of 1952 bits at once for functions 1, 2 and 15. If there is no PROFIBUS communication, an exception frame is sent in reply to any MODBUS query. 3.4 Insertion of Input / output modules The last stage is the choice of input / output modules to be acceded by the PROFIBUS master. It is possible to insert "INPUT WORDS" modules to size PROFIBUS inputs, and "OUTPUT WORDS" modules to size PROFIBUS outputs (1 WORD = 2 bytes) When VPGate is in TRANSPARENT mode In transparent mode, modules to be inserted depend on the maximum number of bytes that can be received or transmitted. As an example, if a maximum of 150 bytes can be exchanged over serial link, in reception and transmission, a minimum of 75 "OUTPUT WORDS" and 75 "INPUT WORDS" must be inserted. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 25/82

26 Insertion of modules: Console, Woodhead HW Config, TIA portal It is possible to exchange up to 244 PROFIBUS input bytes and up to 244 PROFIBUS output bytes. In following examples, 244 input bytes and 244 output bytes are inserted. Principle: When end of frame is detected with a specific character: In this example, end of frame character is the ASCII code "CR" (0x0D). After reception of the first byte from serial link: If no byte was received after the configured timeout, an error is signalled and no data is sent over PROFIBUS inputs. If the frame length is superior to the number of PROFIBUS input bytes, and the received frame is valid, an error is signalled the frame is sent truncated over PROFIBUS inputs. If a change was detected in PROFIBUS outputs If an end of frame character is detected into the frame, data are sent over serial link from the 1st byte to the end of frame character included. Following bytes are ignored. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 26/82

27 When the frame length is known: The 1st byte must contain the quantity of following bytes. After reception of the first byte from serial link: If expected bytes are not received after the configured timeout, an error is triggered and no data is sent over PROFIBUS inputs. If the frame length is superior to the number of PROFIBUS input bytes, and the received frame is valid, an error is triggered and the frame is sent truncated over PROFIBUS inputs. If a change was detected in PROFIBUS outputs If the 1st byte indicates a length superior to the number of PROFIBUS outputs, an error is signalled the frame is sent truncated over PROFIBUS. When the end of frame is detected on timeout: 1st byte of PROFIBUS inputs indicates the number of received bytes. 1st byte of PROFIBUS outputs must indicates the number of bytes to send. After reception of the first byte from serial link: If no more byte is received after the configured timeout, number of received bytes is set in 1st byte of PROFIBUS inputs and received data is sent over PROFIBUS after this length byte. If the length of received frame plus one byte indicating the length is superior to the number of PROFIBUS input bytes, an error is triggered and the frame is sent truncated over PROFIBUS inputs. If a change was detected in PROFIBUS outputs If the 1st byte indicates a length superior to the number of PROFIBUS outputs, an error is signalled the frame is sent truncated over PROFIBUS. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 27/82

28 Trigger function of the frame counter: The frame counter, when enabled, is added at the beginning of PROFIBUS input and output frames. This counter is incremented each time a new frame is available. It is used to signal that a new frame was received, or to detect a new frame to be sent. In this example, the frame length is known. The byte coding the length into PROFIBUS outputs and inputs is located at the 2 nd byte, afterward the counter When VPGate is in Master MODBUS mode. In case of Master MODBUS mode, the input / output module to be inserted directly depend on the definition of the scenarios. As example: Warning: 1 PROFIBUS module doesn t necessarily correspond to 1 scenario. It is actually possible to cover several scenarios with only 1 single module (ex: 1 module "32 INPUT WORDS" to cover 2 scenarios of reading 16 registers from 2 different MODBUS Slaves). VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 28/82

29 Insertion of the modules: Console, Woodhead HW Config, TIA portal How this Works? It is possible to insert up to 122 read registers and 122 write registers When VPGate is in MODBUS Slave mode In MODBUS Slave mode, the PROFIBUS module to be inserted depends on the number of inputs and outputs to be exchanged. As example: Warning: In MODBUS Slave mode, a "OUTPUT WORD" is read by the MODBUS Master and a "INPUT WORD" is written by the MODBUS Master. The size of PROFIBUS input is 64 bytes. The size of PROFIBUS outputs is 16 bytes. Then VPGate gets 32 write registers, accessible for the MODBUS address 0 to address 31, and 8 read registers from the MODBUS address 0 to address 7. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 29/82

30 It is possible to insert up to 122 read registers and 122 write registers. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 30/82

31 4. Fail safe mode VPGate PROFIBUS supports the PROFIBUS Fail-Safe mode. When the PROFIBUS master asks the gateway to switch to Fail-Safe mode, the behaviour is as follows: In MODBUS master mode: PROFIBUS outputs are no more received so MODBUS write scenarios are no more processed, until the master goes back to a normal working mode. MODBUS read scenarios are still processed and PROFIBUS inputs are refreshed. In MODBUS slave mode: PROFIBUS outputs are no more received so a MODBUS exception frame in sent in reply to any MODBUS read request of outputs, until the master go back to a normal working mode. A normal reply is sent to any MODBUS write request and PROFIBUS inputs are refreshed. In TRANSPARENT mode: PROFIBUS outputs are no more received so no frame is sent on serial link, until the master go back to a normal working mode. However any frame correctly received from serial link is copied in PROFIBUS inputs. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 31/82

32 5. DPV1 PROFIBUS acyclic functionalities 5.1 Configuration tools of the PROFIBUS DPV1 master VPGate PROFIBUS to serial provides acyclic access for advanced features: Identification information (I&M) about the gateway, useful for asset management on demand send / receive of MODBUS frames on the serial line VPGate supports: 1 MS-C1 communication with a DPV0 master (usually a PLC), 1 MS-C2 communication (usually a configuration or asset management tool). There are no DTM nor EDD files available. With the DPV1 functionality, a PLC can trigger a MODBUS request on demand. This is convenient in the following cases: Need to read or write more than 122 MODBUS registers Need to access more than 20 MODBUS slaves Need to reconfigure a MODBUS device that was replaced Need to configure the access to a new MODBUS device, without putting the PLC in STOP mode. Essential when it is impossible to change the hardware configuration in RUN mode. Identification informations, TIA portal 5.2 Identification Informations The VPGate is compliant with I&M0 (Identification & Maintenance) functionality of PROFIBUS. This functionality allows the user to get identification information about the device, using a software like Step 7 or TIA portal. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 32/82

33 These informations are available on slot 0: Manufacturer ID Order ID Serial Number Hardware version Software version Revision counter Profile ID Profile Specific Type I&M Version I&M Supported 5.3 Acyclic communication in «MODBUS master» mode When the VPGate is configured in MODBUS master mode, it is possible to execute acyclic MODBUS scenarios with the DPV1 functionalities. A messaging system using DPV1 slots/indexes can be used for describing a MODBUS frame, sending it on the serial line, and access to the slave reply. Slot # Index # Function 1 0 COMMAND (1 byte) 1 1 STATUS (1 byte) 1 2 ADDRESS (1 byte) 1 3 FUNCTION (1 byte) 1 4 OFFSET (2 bytes) 1 5 LENGTH (1 byte) 1 6 DATA (1 à 240 bytes) VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 33/82

34 5.3.1 Description of the index 0 «COMMAND» The index 0 «COMMAND» can be used for start a MODBUS request. Command Bit Definition Send = 1 No action = Bit 7: This bit is used to start the command. The PROFIBUS master must set this bit to 1 when all the indexes are filled-in. This bit resets automatically after the end of the command. The acyclic requests are transmitted between two MODBUS cyclic scenarios. Note: Only one acyclic command is allowed at the time. The VPGate will reply with the DPV1 error message «Ressource busy», if a command is already started when the bit 7 is set Description of the index 1 «STATUS» The index 1 «STATUS» is to check the state of the last transmitted command. Status Bit Definition Data available Error timeout Error command MODBUS exception MODBUS exception code (returned by the slave) Bits 0-3: Exception code returned by MODBUS slave. See end of appendix B for exception code details Bit 4: This bit is set to 1 if the slave has returned an exception code. Bit 5: This bit is set to 1 if settings in indexes 2, 3 or 5 are not correct. Bit 6: This bit is set to 1 if there is a Timeout (no reply from the MODBUS slave). Bit 7: 0: Indicates that no data is available (default value at startup) or the requested command is not completed (busy status). 1: Indicates that data is available. This bit remains to 1 as long as a new Start is not received. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 34/82

35 5.3.3 Description of the index 2 «ADDRESS» The index 2 «ADDRESS» is to set the offset of the first MODBUS register to read or write. Command Bit Definition Address of the MODBUS slave Bit 0-7: Address of the destination MODBUS slave. The value must be between 0 and 247. Otherwise, a command error will be reported in the STATUS index when the command is started. Note: When a message is sent with the broadcast address (0), only these functions are allowed: 0x06 Preset single register 0x10 Preset multiples registers Otherwise, an error command will be reported in the STATUS index when the command is started Description of the index 3 «FUNCTION» The index 3 «FUNCTION» is to set the MODBUS function code of the request. Function Bit Definition MODBUS function mode Bit 0-7: MODBUS function code of the request. List of available function codes: 0x03 Read holding registers 0x04 Read input registers 0x06 Preset single register 0x10 Preset multiples registers Note: When another MODBUS function code is used, the error command will be reported in the STATUS index when the command is started. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 35/82

36 5.3.5 Description of the index 4 «OFFSET» The index 4 «OFFSET» is to set the offset of the first MODBUS register to read or write. Offset Bit Definition Offset of the first MODBUS register Bit 0-15: Offset of the first MODBUS register to read or write. The value must be between 0 and Description of the index 5 «LENGTH» Length Bit Definition Number of MODBUS registers Bit 0-7: Number of MODBUS registers to read or write. For the MODBUS function 0x03, 0x04 and 0x10, the value must be between 1 and 120 registers For the MODBUS function 0x06, the value must be 1. If not, a command error will be reported in the STATUS index when the command is started Description of the index 6 «DATA» The index 6 «DATA» is to write the data to send, or to read the received data. It is possible to read/write up to 120 registers (240 bytes). 5.4 Example Slave address : 1 (0x01) Function code: «Write Multiple Registers» (Function code 16) Offset : 0 (0x00) Length : 2 (0x02) Data to write : 0x11, 0x22, 0x33, 0x44 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 36/82

37 A PLC program example is provided in appendix C. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 37/82

38 6. Digital I/O s 6.1 Digital output 2 working behaviors are possible: The module "1 digital output byte" is not inserted in the configuration: the relay is triggered if an extended diagnostic message is sent on PROFIBUS (see chapter 7.2). The module "1 digital output byte" is inserted in the configuration: the relay is triggered if the 1 st bit of the module "1 digital output byte" is set to 1. Otherwise the relay is not triggered. IMPORTANT: If the module "1 digital output byte" is used, it must be the last output module of the configuration. Digital Output module is the last output module of the configuration 6.2 Digital input If the module "1 digital input byte" is inserted: If the input is set, the 1 st bit of the module "1 digital input byte" is 1. If the input is reset, the 1 st bit of the module "1 digital input byte" is 0. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 38/82

39 According to the IEC , the digital input state table is defined as below: from 0V to 5V: input is set to 0 from 5V to 15V: input state is undefined from 15V to 30V: input is set to 1 IMPORTANT: If the module "1 digital input byte" is used, it must be the last input module of the configuration. Digital Input module is the last input module of the configuration VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 39/82

40 7. Diagnostic 7.1 PROFIBUS extended diagnostic In addition to the 6 bytes of standard diagnostic, VPGate manages 27 bytes for extended diagnostic. This allows the gateway to inform the PROFIBUS master about problems in the communication with the serial line equipment. To activate the PROFIBUS extended diagnostic (activated by default), it is necessary to select the parameter named "Extended diagnosis" on "Enabled". HW Config, TIA portal Console, Woodhead The extended diagnostic is sent after the PROFIBUS standard diagnostic. It is structured as follows: Bytes 8-14: 56 bits for general errors Parameter errors Configuration errors Reception error on serial line Time out on serial line Bytes 15-34: 1 byte per scenario to inform about the error. Bytes 1 6 Bytes 7 Bytes 8 14 Bytes Standard diagnostic Length of extended diag. General errors Error scenario1 Error scenario20 x x x x 0x 08 0x 34 0x1C 56 bits x x x x The explanation of each error is given in the appendix A. All the extended diagnostic bytes are null when the system works properly. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 40/82

41 Example: The MODBUS Slaves are not connected. Errors are then shown in the PROFIBUS extended diagnostic: Length extended diag: Byte 7 = 0x1C = 28 bytes General Errors: Byte 10 / bit 4 = 1: Error on Scenario 2: Byte 16 = 0x76 = 118 Error on scenario 1: Byte 15 = 0x76 = 118 Woodhead PROFIBUS Diagnostics Length extended diag: Byte 7 = 0x1C = 28 bytes General Errors: Byte 10 / bit 4 = 1 : Error on scenario 1: Byte 15 = 0x76 = 118 Error on scenario 2: Byte 16 = 0x76 = 118 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 41/82

42 7.2 Digital output for diagnostic If the module "1 digital output byte" is not inserted in the configuration, the digital output is used to indicate a diagnostic on PROFIBUS (see appendix A). The relay used by the output is a Normally Opened (NO) type. It is opened if no extended diagnostic occurs. It closes when diagnostic happens. It remains closed until the diagnostic disappears. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 42/82

43 8. Firmware Update A firmware update is possible by the serial line. The procedure can be delivered by PROCENTEC on demand. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 43/82

44 9. Appendices Appendix A: List of errors sent by VPGate Description of general errors: The general errors are located in the bytes 8 à 14 of the extended diagnostic (1 bit per error). Byte Byte 8 Byte 9 Byte 10 Byte 11 Byte 12 Byte 13 Byte 14 Bit Error # err Error Message Explanation 2 Baud rate impossible Error on parameter message. The value of the parameter "Baud rate" is wrong. 3 Timeout impossible Error on parameter message. The value of the parameter "Timeout" is wrong. 4 Stop bit impossible Error on parameter message. The values of the parameter "Stop bit" is²wrong. 5 Parity bit impossible Error on parameter message. The value of the parameter "Parity bit" is wrong. 8 Protocol impossible Error on parameter message. The value of the parameter "Protocol" is wrong. 13 Slave address = 0 Error on parameter message. The value of the parameter "Address in slave mode" is wrong. The address of a MODBUS slave can t be 0 (reserved for broadcast). 14 Slave address > 247 Error on parameter message. The value of the parameter "Address in slave mode" is wrong. The address of a MODBUS slave can t be higher than Module cfg error Error on configuration message. One or several modules are unknown. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 44/82

45 # err Error Message Explanation 17 PFB message < Required Error on configuration message. The received configuration doesn t allow to map all MODBUS registers into the PROFIBUS memory map. You must add modules with the PROFIBUS configuration tool. 18 CFG message is too long Error on configuration message. The number of configuration bytes is greater than 16. You must delete modules with the PROFIBUS configuration tool. 19 Error MODBUS reception Error on receipt of the last MODBUS message. This general error is detailed in the byte of the scenario on which the error occurred (cf. error ). 20 MODBUS Timeout Timeout on the MODBUS network. One slave didn t reply after the number of retires ("n Retries"). 22 Parity error One character was received on the MODBUS link but the parity bit is wrong. VPGate is set up to check parity. 23 Received message non ASCII VPGate is in ASCII but the received message doesn t start with the character ':'. 24 Too many chars received More than 255 characters received in the same message on the serial link. This can show a crash of the remote device. 25 "pass frame" reception err The number of bytes received in reply to a scenario "pass frame" is not the one expected. This general error is detailed in the byte of the scenario on which the error occurred (cf. error ). 28 Exception message A MODBUS exception message was received. 29 EOF delimiter impossible In transparent mode : parameter EOF Delimiter is incorrect 30 Transparent output error: length impossible In transparent mode: length of the message to transmit is too high. Message was not sent. 31 Transparent input error : message truncated In transparent mode: the received message from serial link is too long to be stored into PROFIBUS inputs. The message was truncated. 32 Transparent input error: invalid frame In transparent mode: the message received from serial link is not valid. The message was not stored. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 45/82

46 Description of errors specific to the scenarios: The error specific to the scenarios are located in the bytes 15 to 34 of the extended diagnostic (1 byte per scenario). # err Error Message Explanation 100 (0x64) # READ regs < 1 Error on scenario parameter message. The number of MODBUS registers to be red must be >= (0x65) # READ regs > 122 Error on scenario parameter message. The number of MODBUS registers to be read must be <= 122 with functions 3 and 4. With functions 1 and 2, number of bits to read must not exceed 1952 (122 x 16 bits) 102 (0x66) Frame period error Error on scenario parameter message. The MODBUS functions 1, 2, 3, 4 et 7 can t be sent on change. The field "On Change" is only allowed with the writing functions 5, 6 15 and (0x67) # WRITE regs < 1 Error on scenario parameter message. The number of MODBUS registers to be written must be >= (0x68) # WRITE regs > 122 Error on scenario parameter message. The number of MODBUS registers to be written must be <= 122 with function 10. With function 15, number of bits to write must not exceed 1952 (122 x 16 bits). 105 (0x69) MODBUS Function error Error on scenario parameter message. The value of the parameter "MODBUS Function" is wrong. 106 (0x6A) Slave address error Error on scenario parameter message. The value of the parameter "Slave address" is wrong. 107 (0x6B) Frame periodicity error Error on scenario parameter message. The value of the parameter "Frame periodicity" is wrong. 108 (0x6C) Cycle time error Error on scenario parameter message. The value of the parameter "Cycle time" is wrong. 109 (0x6D) #WRITE regs > DoutBufLen Error on scenario parameter message. The total number of MODBUS registers to be written must be <= total number of "OUTPUT WORDS" insert. You must delete this scenario as well as the following or you must write less registers in the previous scenarios. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 46/82

47 # err Error Message Explanation 110 (0x6E) # READ regs > DinBufLen Error on scenario parameter message. The number of MODBUS registers to be read must be <= total number of MODBUS "INPUT WORDS ". You must delete this scenario as well as the followings or read less registers in the previous scenarios. 111 (0x6F) CRC error Error when receiving the last MODBUS message. The received CRC in the message doesn t match the calculated CRC. The message is corrupted and then not taken into account. 112 (0x70) MODBUS address error Error when receiving the last MODBUS message. The received message was send by an unexpected slave. 113 (0x71) MODBUS function error Error when receiving the last MODBUS message. The receive message doesn t match the expected function MODBUS. 114 (0x72) Bytes number error Error when receiving the last MODBUS message. The message received doesn t have the appropriated number of data bytes. 115 (0x73) Response length error Error when receiving the last MODBUS message. The message received doesn t have the appropriate number of bytes. 116 (0x74) Register value error Error when receiving the last MODBUS message. The message received doesn t have the expected register value. 118 (0x76) Timeout after retries The slave didn t respond to the MODBUS command even after several consecutive sendings of the same message (parameter "retries"). This error is acknowledged as soon as the slave has replied. 119 (0x77) Broadcast impossible Broadcast is not available with the read functions of MODBUS. It is possible with the write functions. 120 (0x78) "Pass frame" input byte number >100 Error on scenario parameter message. The function "pass frame" allows to send up to 100 bytes on the serial link. 121 (0x79) "Pass frame" output byte number >100 Error on scenario parameter message. The function "pass frame" allows to receive up to 100 bytes on the serial link. 122 (0x7A) "Pass frame" input byte number = 0 Error on scenario parameter message. The function "pass frame" must send at least 1 byte on the serial link. 123 (0x7B) Too many bytes received on "pass frame" reply A number of bytes greater than expected according to the parameters were received on the serial link. The parameter may be wrong or the slave didn t send the expected reply. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 47/82

48 # err Error Message Explanation 124 (0x7C) Not enough bytes received on "pass frame" reply A number of bytes less important than expected according to the parameters were received on the serial link. The parameter may be wrong or the slave didn t send the expected reply. 125 (0x7D) Illegal data value A MODBUS exception message was received. An impossible value was received by the slave. 126 (0x7E) Illegal address A MODBUS exception message was received. A command was done addressing a MODBUS register which doesn t exist. 127 (0x7F) Illegal function A MODBUS exception message was received. A non-supported MODBUS function was sent. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 48/82

49 Appendix B: Format of MODBUS messages The MODBUS functions 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x0F, 0x10, 0x17 are supported by VPGate. The format of each function is detailed using an example for MODBUS RTU and ASCII. The bytes for CRC error check (MODBUS RTU) or LRC (MODBUS ASCII) are mandatory. However, they are not treated if the parameter "CRC/LRC" is disabled (set to "No CRC/LRC").. In MODBUS RTU, data are 8 bit coded. In MODBUS ASCII, data are 7 bit coded. Remind : It is important to differentiate the address of the MODBUS register and the MODBUS register # (number). Actually, the register 1 is at MODBUS physical address 0x0000. In a MODBUS message, it is the address of the register sent. When setting up a scenario, it is also the MODBUS register address that must be configured. Function 1 (0x01) This function allows to read multiple booleans (coils or Discrete outputs). The broadcast mode is not supported. The number of booleans to be read in a same message is limited to 1952 (16bits x 122 registers). Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x01 0x01 "01" 0x30, 0x31 MSB address 1 er bit 0x00 0x00 "00" 0x30, 0x30 LSB address 1 er bit 0x22 0x22 "22" 0x32, 0x32 MSB number of bits 0x00 0x00 "00" 0x30, 0x30 LSB number of bits 0x12 0x12 "12" 0x31, 0x32 Error check (CRC / LRC) - 0x18 0xB5 "92" 0x39, 0x32 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 49/82

50 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x01 0x01 "01" 0x30, 0x31 Number of data bytes 0x03 0x03 "03" 0x30, 0x33 State of bits 0x29 to 0x22 0x59 0x59 "59" 0x35, 0x39 State of bits 0x32 to 0x2A 0xC4 0xC4 "C4" 0x43, 0x34 State of bits 0x34 to 0x33 0x01 0x01 "01" 0x30, 0x31 Error check ( CRC / LRC ) - 0x7B 0xE5 "A5" 0x41, 0x35 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 50/82

51 Function 2 (0x02) This function allows to read multiple booleans (Discrete inputs). The broadcast mode is not supported. The number of booleans to be read in a same message is limited to 1952 (16bits x 122 registers). Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x02 0x02 "02" 0x30, 0x32 MSB address 1 er bit 0x00 0x00 "00" 0x30, 0x30 LSB address 1 er bit 0x22 0x22 "22" 0x32, 0x32 MSB number of bits 0x00 0x00 "00" 0x30, 0x30 LSB number of bits 0x12 0x12 "12" 0x31, 0x32 Error check ( CRC / LRC ) - 0x5C 0xB5 "91" 0x39, 0x31 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 51/82

52 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x02 0x02 "02" 0x30, 0x32 Number of data bytes 0x03 0x03 "03" 0x30, 0x33 State of bits 0x29 to 0x22 0x59 0x59 "59" 0x35, 0x39 State of bits 0x32 to 0x2A 0xC4 0xC4 "C4" 0x43, 0x34 State of bits 0x34 to 0x33 0x01 0x01 "01" 0x30, 0x31 Error check ( CRC / LRC ) - 0x3F 0xE5 "A4" 0x41, 0x34 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 52/82

53 Function 3 (0x03) This function allows to read MODBUS registers (Holding Registers). The broadcast mode is not supported. The number of registers to be read in a same message is limited to 122. Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x03 0x03 "03" 0x30, 0x33 Most significant byte for address 1 st register 0x00 0x00 "00" 0x30, 0x30 Less significant byte for address 1st register 0x22 0x22 "22" 0x32, 0x32 Most significant byte for number of registers 0x00 0x00 "00" 0x30, 0x30 Less significant byte for number of registers 0x02 0x02 "02" 0x30, 0x32 Error check ( CRC / LRC ) - 0x60 0xB9 "A0" 0x41, 0x30 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 53/82

54 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x03 0x03 "03" 0x30, 0x33 Number of data bytes 0x04 0x04 "04" 0x30, 0x34 MSB of the value 1st register 0x68 0x68 "68" 0x36, 0x38 LSB of the value 1st register 0x31 0x31 "31" 0x36, 0x38 MSB for the value 2 nd register 0x47 0x47 "47" 0x36, 0x38 LSB for the value 2 nd register 0x59 0x59 "59" 0x36, 0x38 Error check ( CRC / LRC ) - 0xFD 0x95 "87" 0x38, 0x37 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 54/82

55 Function 4 (0x04) This function allows to read the MODBUS registers (Input Registers). The broadcast is not supported. The number of registers to be read in the same message is limited to 122. Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x04 0x04 "04" 0x30, 0x34 MSB for address 1st r register 0x00 0x00 "00" 0x30, 0x30 LSB for address 1 er register 0x22 0x22 "22" 0x32, 0x32 MSB for the number of registers 0x00 0x00 "00" 0x30, 0x30 LSB for the number of registers 0x03 0x03 "03" 0x30, 0x33 Error check ( CRC / LRC ) - 0x14 0xB9 "9E" 0x39, 0x45 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 55/82

56 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Frame header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x04 0x04 "04" 0x30, 0x34 Number of data bytes 0x06 0x06 "06" 0x30, 0x36 MSB of value 1 st register 0x68 0x68 "68" 0x36, 0x38 LSB of value 1 st register 0x31 0x31 "31" 0x33, 0x31 MSB of value 2 nd register 0x47 0x47 "47" 0x34, 0x37 LSB of value 2 nd register 0x59 0x59 "59" 0x35, 0x39 MSB of value 32 nd register 0x00 0x00 "00" 0x30, 0x30 MSB of value 32 nd register 0x00 0x00 "00" 0x30, 0x30 Error check ( CRC / LRC ) - 0xD9 0xE2 "84" 0x38, 0x34 End of Message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 56/82

57 Function 5 (0x05) This function allows to write a Boolean (coil) having ON or OFF status. The broadcast is supported. This boolean can have the value 0x0000 (OFF) or 0xFF00 (ON). Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x01 0x01 "01" 0x30, 0x31 Function code 0x05 0x05 "05" 0x30, 0x35 MSB for address of the register 0x00 0x00 "00" 0x30, 0x30 LSB for address of the register 0x22 0x22 "22" 0x32, 0x32 MSB for value of the register 0xFF 0xFF "FF" 0x46, 0x46 LSB for value of the register 0x00 0x00 "00" 0x30, 0x30 Error check ( CRC / LRC ) - 0x2C 0x30 "D9" 0x44,0x39 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 57/82

58 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x01 0x01 "01" 0x30, 0x31 Function code 0x05 0x05 "05" 0x30, 0x35 MSB for the address of the register 0x00 0x00 "00" 0x30, 0x30 MSB for the address of the register 0x22 0x22 "22" 0x32, 0x32 MSB for value of the register 0xFF 0xFF "FF" 0x46, 0x46 LSB for value of the register 0x00 0x00 "00" 0x30, 0x30 Error check ( CRC / LRC ) - 0x2C 0x30 "D9" 0x44, 0x39 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 58/82

59 Function 6 (0x06) This function allows to write one MODBUS register (Holding Registers). The broadcast is supported. Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x06 0x06 "06" 0x30, 0x36 MSB for the address of the register 0x00 0x00 "00" 0x30, 0x30 LSB for the address of the register 0x22 0x22 "22" 0x32, 0x32 MSB for value of the register 0x00 0x00 "00" 0x30, 0x30 LSB for value of the register 0x56 0x56 "56" 0x35, 0x36 Error check ( CRC / LRC ) - 0xAD 0x46 "49" 0x34, 0x39 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 59/82

60 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x03 "39" 0x33, 0x39 Function code 0x06 0x06 "06" 0x30, 0x36 MSB for the address of the register 0x0 0x00 0x00 "00" 0x30, 0x30 LSB for the address of the register 0x0 0x22 0x22 "22" 0x32, 0x32 MSB for value of the register 0x00 0x00 "00" 0x30, 0x30 LSB for value of the register 0x56 0x56 "56" 0x35, 0x36 Error check ( CRC / LRC ) - 0xAD 0x46 "49" 0x34, 0x39 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 60/82

61 Function 7 (0x07) This function allows to read a Status byte (Read Exception Status). This register is not located at a particular address as it is unique. The broadcast is not supported. Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x07 0x07 "07" 0x30, 0x37 Error check ( CRC / LRC ) - 0x52 0x22 "C0" 0x43, 0x30 End of message - - CR LF 0xD, 0xA Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x07 0x07 "07" 0x30, 0x37 Value of the status 0x14 0x14 "14" 0x31, 0x34 Error check ( CRC / LRC ) - 0xA3 0xF2 "AC" 0x41, 0x43 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 61/82

62 Function 15 (0x0F) This function allows to write several booleans (coils or Discrete outputs) to ON or OFF. Broadcast is supported. Number of booleans to write simultaneously with VPGate is limited to 1952 (16bits x 122 registers). Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x0F 0x0F "0F" 0x30, 0x46 MSB of 1 st bit address 0x00 0x00 "00" 0x30, 0x30 LSB of 1 st bit address 0x22 0x22 "22" 0x32, 0x32 MSB of number of bits to write 0x00 0x00 "00" 0x30, 0x30 LSB of number of bits to write 0x12 0x12 "12" 0x31, 0x32 Number of data bytes 0x03 0x03 "03" 0x30, 0x33 Value for bits 0x29 to 0x22 0x2B 0x2B "2B" 0x32, 0x42 Value for bits 0x32 to 0x2A 0x06 0x06 "06" 0x30, 0x36 Value for bits 0x34 to 0x33 0x03 0x03 "03" 0x30, 0x33 Error check ( CRC / LRC ) - 0x68 0xCB "4D" 0x34,0x44 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 62/82

63 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x0F 0x0F "0F" 0x30, 0x46 MSB of 1 st bit address 0x00 0x00 "00" 0x30, 0x30 LSB of 1 st bit address 0x22 0x22 "22" 0x32, 0x32 MSB of number of bits to write 0x00 0x00 "00" 0x30, 0x30 LSB of number of bits to write 0x12 0x12 "12" 0x31, 0x32 Error check ( CRC / LRC ) - 0x71 0x74 "84" 0x38, 0x34 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 63/82

64 Function 16 (0x10) This function allows to write MODBUS registers (Holding Registers). The broadcast is supported. The number of registers to be written in the same command is limited to 122. Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x10 0x10 "10" 0x31, 0x30 MSB for address of the 1 st register 0x00 0x00 "00" 0x30, 0x30 LSB for address of the 1 st register 0x22 0x22 "22" 0x32, 0x32 MSB for number of registers 0x00 0x00 "00" 0x30, 0x30 LSB for number of registers 0x02 0x02 "02" 0x30, 0x32 Number of data bytes 0x04 0x04 "04" 0x30, 0x34 MSB for value of register 0x52 0x00 0x00 "00" 0x30, 0x30 LSB for value of register 0x52 0x56 0x56 "56" 0x35, 0x36 MSB for value of register 0x53 0x00 0x00 "00" 0x30, 0x30 LSB for value of register 0x53 0x57 0x57 "57" 0x35, 0x37 Error check ( CRC / LRC ) - 0x04 0xE0 "E2" 0x45, 0x32 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 64/82

65 Field name Value to transmit Bytes sent if RTU Bytes sent if ASCII Character ASCII characters End of message - - CR LF 0xD, 0xA Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x10 0x10 "10" 0x31, 0x30 MSB for address of the 1 st register 0x00 0x00 "00" 0x30, 0x30 LSB for address of the 1 st register 0x22 0x22 "22" 0x32, 0x32 MSB for number of registers 0x00 0x00 "00" 0x30, 0x30 LSB for number of registers 0x02 0x02 "02" 0x30, 0x32 Error check ( CRC / LRC ) - 0xE5, 0x7A "93" 0x39, 0x33 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 65/82

66 Function 23 (0x17) in slave mode This function allows to read and write with a single command the MODBUS registers (Holding Registers). The broadcast is not supported. The number of registers to be read is limited to 122. The number of registers to be written is limited to 122. This function is only available in Slave mode. Command format: Field name Value to transmit Bytes sent if RTU Character Bytes sent if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x17 0x17 "17" 0x31, 0x37 MSB for address of the 1 st register in reading 0x00 0x00 "00" 0x30, 0x30 LSB for address of the 1 st register in read 0x22 0x22 "22" 0x32, 0x32 MSB for number of registers in read 0x00 0x00 "00" 0x30, 0x30 LSB for number of registers in read 0x02 0x02 "02" 0x30, 0x32 MSB for address of the 1 st register in write 0x00 0x00 "00" 0x30, 0x30 LSB for address of the 1 st register in write 0x56 0x56 "56" 0x35, 0x36 MSB for number of registers in write 0x00 0x00 "00" 0x30, 0x30 LSB for number of registers in write 0x57 0x57 "57" 0x35, 0x37 Number of data bytes 0x04 0x04 "04" 0x30, 0x34 MSB for value of register 0x52 0x00 0x00 "00" 0x30, 0x30 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 66/82

67 Field name Value to transmit Bytes sent if RTU Bytes sent if ASCII Character ASCII characters LSB for value of register 0x52 0x56 0x56 "56" 0x35, 0x36 MSB for value of register 0x53 0x00 0x00 "00" 0x30, 0x30 LSB for value of register 0x53 0x57 0x57 "57" 0x35, 0x37 Error check ( CRC / LRC ) - 0x04 0xE0 "E2" 0x45, 0x32 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 67/82

68 Reply format: Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x39 0x39 "39" 0x33, 0x39 Function code 0x17 0x17 "17" 0x31, 0x37 Number of data bytes 0x04 0x04 "04" 0x30, 0x34 MSB for value of the 1 st register 0x68 0x68 "68" 0x36, 0x38 LSB for value of the 1 st register 0x31 0x31 "31" 0x33, 0x31 MSB for value of the 2 nd register 0x47 0x47 "47" 0x34, 0x37 LSB for value of the 2 nd register 0x59 0x59 "59" 0x35, 0x39 Error check ( CRC / LRC ) - 0xFD 0x95 "87" 0x38, 0x37 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 68/82

69 Exception Message An exception message is built by the MODBUS slave each time the master asks to perform a non-authorized action/command. VPGate PROFIBUS MODBUS manages the following exceptions : Exception code Name Description 01 ILLEGAL FUNCTION Sent by the slave each time the master sends an unknown command. VPGate MODBUS only support the functions (commands) 1, 2, 3, 4, 5, 6, 7, 15, 16, ILLEGAL DATA ADDRESS Sent by the slave each time the master tries to access to a nonaccessible register. For example, VPGate has got a configuration with 10 read registers (address 0 to 9), and 10 write registers (address 0 to 9). An error is returned when the master tries to access to register 20. This error also appears with the function 3 when for example the master tries to read 20 registers from register 1 (address 0). 03 ILLEGAL DATA VALUE This exception is sent if the master tries to write a data which is non acceptable for the slave. For example, with the function 5, the 2 only possible values are either 0x0000 or 0xFF00. For any other value, the exception code 3 is returned. 06 SLAVE BUSY This exception is sent by a MODBUS slave when it is already working on a task that doesn't allow it to respond. 0A GATEWAY PATH UNAVAILABLE This exception is sent, in slave mode, in reply to any MODBUS query when PROFIBUS communication is not established. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 69/82

70 Format of the exception message: This exception message is an example received in reply to the function 6. The exception happened because the master tried to access to a non-authorized register. The MODBUS function codes are coded on 7 bits (code 1 to 127). The 8 th bit is reserved, it is used to signal an exception message when it is set to 1. Field name Value to be received Bytes received if RTU Character Bytes received if ASCII ASCII characters Message header - - ":" 0x3A Slave address 0x03 0x03 "03" 0x30, 0x33 Function code + 0x80 0x86 0x86 "86" 0x38, 0x36 Exception code 0x02 0x02 "02" 0x30, 0x32 Error check ( CRC / LRC ) - 0x31 0x62 "75" 0x37, 0x35 End of message - - CR LF 0xD, 0xA VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 70/82

71 10. Other PROCENTEC products PROFINET Cable Tester Suitable for 4- and 8-wire PROFINET and regular Ethernet cables Suitable for straight and 90, metal or plastic PROFINET plugs Tests cable shielding Detects short circuits, wire breaks, swaps, miswiring and split pairs Large LCD clearly indicates the test results 150 hours on one 9 V battery Operating temperature: 0 to 50 C Just 1-key-press to start continuous testing It can also test telephone and coax cable Compact PROFIBUS Repeater Single channel PROFIBUS repeater Transparent Increased signal strength 12 Mbps Auto baudrate detection Redundant power supply Digital glitch filtering No limit in cascading Integrated switchable termination Diagnostic LEDs DB9 connector for measurements IP 20 with DIN-rail mounting VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 71/82

72 ProfiHub B5 5 Isolated channels Transparent Increased signal strength 31 devices per channel 12 Mbps 1200 m spur line length No address required Integrated switchable termination LEDs to indicate termination is ON Screw terminals and DB9 connectors IP 20 with DIN-rail mounting ProfiHub A5 5 Isolated channels Transparent Increased signal strength 31 devices per channel 12 Mbps 1200 m spur line length No address required Integrated switchable termination IP 65 classification VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 72/82

73 11. Sales offices and distributors HEADQUARTERS PROCENTEC T: +31 (0) Klopperman 16 F: +31 (0) JD WATERINGEN E: Netherlands W: ARGENTINA efalcom T: Alcorta 2411 F: B Moreno E: santiago.falcomer@efalcom.com Buenos Aires W: Argentina AUSTRIA RELISTE T: Enzersdorfer Straße 8-10 F: A-2345 Brunn am Gebirge E: office@reliste.at Austria W: AUSTRALIA IS Systems Pty Limited T: Laverick Ave., F: Tomago E: fritz.woller@issystems.com.au NSW, Australia, 2322 W: Pentair Flow Control Pacific T: Percival Road F: Smithfield E: sharee.hazell@pentair.com.au NSW, Australia, 2164 W: BELGIUM and LUXEMBOURG Bintz Technics N.V. T: Brixtonlaan 23 F: B-1930 Zaventem E: bloemen@bintz.be Belgium W: BRAZIL Westcon Instrument. Indl Ltda T: Rual Alvaro Rodrigues, 257 F: São Paulo SP E: paolo@wii.com.br Brazil - CEP W: CANADA Streamline Process Management Inc. T: #3, Ave SE F: Calgary, Alberta T2C 5C6 E: admin@streamlinepm.com Canada W: CHILE RP Ingenieria Limitada T: Tucapel 92 oficina 52 F: Concepción E: rodrigopinto@rpingenieria.cl Chile W: CHINA PROCENTEC Beijing T: +86 (10) / +86 (10) Room E-1115 WangJingYuan YouLeHui F: +86 (10) ChaoYang E: info@procentec.net Beijing W: China CZECH REPUBLIC FOXON s.r.o. T: Polní 367 F: Liberec 12 E: foxon@foxon.cz Czech Republic W: VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 73/82

74 DENMARK ProSaiCon T: Jernbanegade 23B F: DK 4000 Roskilde E: Denmark W: EGYPT Mas Trading T: , 105 Street F: Al-Etihad Square E: Egypt W: ESTONIA Saksa Automaatika OU T: Peterburi Tee 49 F: Tailinn E: EE Estonia W: FINLAND Hantekno Oy T: Kalliotie 2 E: info@hantekno.com Tuusula W: Finland FRANCE PROCENTEC T: Bâtiment B F: , rue de la Briaudière E: jy.bois@procentec.fr Z.A. La Châtaigneraie W: BALLAN-MIRE France GERMANY PROCENTEC GmbH T: Benzstrasse 15 F: D Karlsruhe E: info@procentec.de Germany W: INDIA UL Engineering Services & Software Pvt Ltd T: Nirman Classic, F: Katraj-Kondhwa Road, E: dileep.miskin@ulepl.com Katraj, Pune W: India Automation Combine T: / B.R. House 4 th Floor, F: / Hennur Main Road E: info@automationcombine.com Bangalore W: India IRELAND PROFIBUS Ireland T: or Automation Research Centre F: University of Limerick E: info@profibus.ie National Technology Park, Plassey W: Limerick Ireland ISRAEL Instrumetrics Industrial Control T: Hamlacha St. F: New Industrial Zone E: info@instrumetrics-ic.co.il Netanya, W: Israel ITALY PROCENTEC Italy T: Via Branze n. 43/45 F: Brescia E: Italy W: VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 74/82

75 JAPAN TJ Group T: C/O Japanese PROFIBUS Organisation F: West World Building 4F E: info@profibus.jp Higashi-Gotanda, Shinagawa-ku, Tokyo, Japan KOREA Hi-PRO Tech. Co., Ltd. T: #2802, U-Tower, 1029 F: Youngduk-dong, Giheung-gu E: chays@hiprotech.co.kr Yongin-Si, Kyunggi-do, W: Korea LEBANON Industrial Technologies S.A.L. (ITEC) T: Point Center, Boulevard Fouad Chehab F: Sin El Fil E: sales@iteclb.com Beirut W: Lebanon MEXICO Grid Connect Inc. T: (Spanish) E: tomf@gridconnect.com W: NETHERLANDS PROCENTEC B.V. T: +31 (0) Klopperman 16 F: +31 (0) JD Wateringen E: info@procentec.com Netherlands W: NORWAY AD Elektronikk AS T: Boks 641 F: N-1401 SKI E: kai@ade.no Norway W: PERU ControlWare T: Jr. Los Silicios 5409 F: Los Olivos - L39 E: info@controlware.com.pe Peru W: POLAND INTEX Sp. z o.o. T: ul. Portowa 4 F: Gliwice E: intex@intex.com.pl Poland W: PORTUGAL IndustrialSys T: Rua Alexandre Herculano 25 E: info@industrialsys.pt Mangualde, W: Portugal ROMANIA S.C. SVT Electronics S.R.L. T: Brǎila 7 F: Tg-Mure E: sajgo.tibor@svt.ro Romania W: SAUDI ARABIA ASM Process Automation T: Al-Zahra Dist. Attas st. F: cross section with helmy Kutby St. E: info@asmestablishment.com Villa no.25 W: Jeddah Saudi Arabia VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 75/82

76 SINGAPORE / SOUTH EAST ASIA Allegro Electronics T: Serangoon Avenue E: sales@allegro.com.sg Singapore W: Gissmatic Automatisierung Pte Ltd T: Tanglin Road E: sales@gissmatic.com Singapore I: SLOVAKIA ControlSystem s.r.o. T: Stúrova 4 F: BREZNO E: jan.snopko@controlsystem.sk Slovakia W: SOUTH AFRICA IDX ONLINE CC T: +27 (11) Weaver Street F: +27 (11) Fourways E: sales@idxonline.com Johannesburg W: South Africa SPAIN LOGITEK, S.A T: Ctra. de Sant Cugat, 63 Esc. B Planta 1ª E: xavier.cardena@logitek.es Rubí (BARCELONA), W: Spain SWEDEN P&L Nordic AB T: Box 252 E: hans.maunsbach@pol.se S Hässleholm W: Sweden SWITZERLAND Berner Fachhochschule T: +41 (0) PROFIBUS Kompetenzzentrum F: +41 (0) Jlcoweg 1 E: max.felser@bfh.ch CH-3400 Burgdorf W: Switzerland TAIWAN Full Data Technology T: / F., No.200, Gangqian Rd. F: Neihu District, Taipei City E: sales@fulldata.com.tw 114, Taiwan W: TURKEY Emikon Otomasyon T: DES Sanayi sitesi 103 sokak F: B-7 blok No:16 Yukari Dudullu / Umraniye E: tolgaturunz@emikonotomasyon.com Istanbul W: Turkey UNITED ARAB EMIRATES Synergy Controls T: , IT Plaza Silicon Oasis : F: DubaiI E: sales@synergycontrols.ae United Arab Emirates UNITED KINGDOM and N. Ireland Verwer Training & Consultancy T: +44 (0) Barclay Road E: andy@verwertraining.com Poynton, Stockport I: Cheshire SK12 1YY United Kingdom VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 76/82

77 Hi-Port Controls T: +44 (0) The Hub 2 Martin Close F: +44 (0) Lee-on-Solent E: sales@hiport.co.uk Hampshire PO13 8LG W: United Kingdom itech T: +44 (0) Unit 1 F: +44 (0) Dukes Road E: sales@itech-troon.co.uk Troon W: Ayrshire KA10 6QR United Kingdom Parkelect Ltd. T: Dargan Road F: Belfast E: jgillan@parkelect.co.uk BT3 9JU W: N. Ireland UNITED STATES Grid Connect Inc. T: W. Diehl Road F: Naperville, Illinois E: sales@gridconnect.com USA W: VIETNAM Bavitech Corporation T: Truong Son Street F: Ward 2, Tan Binh District E: hai.hoang@bavitech.com Ho Chi Minh City W: Vietnam For the complete list of our Sales Offices and Distributors see If your country or region is not listed, please contact us. We are still searching for distributors who can cover complete areas or countries. VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 77/82

78 12. About PROCENTEC PROCENTEC is a specialist in PROFIBUS and PROFINET technology and develops products to optimize the production processes of end users. Our innovative solutions ensure that our customers successfully operate in the world of industrial automation and enjoy maximum results from their process. PROCENTEC globally supplies all the components required to install a measurable and steerable network. We develop and produce all products in the Netherlands and they are exported through our worldwide distribution network. At PROCENTEC, we have a professional team of qualified support engineers who provide technical support on-site and online. Our professionals have more than 20 years of experience with PROFIBUS and PROFINET technology. They provide the necessary support to end users during implementation procedures, certification processes, audits and malfunctions. PROCENTEC also is the international accredited Competence and Training centre for PROFIBUS and PROFINET. We provide training courses that help employees using those techniques optimally for their business objectives. Products Services Training ProfiTrace On-site & Online Support PROFIBUS training courses ComBricks Network Audit PROFINET training courses ProfiHub Network Certfication Product training courses PROFINET tools Consultancy Cables & Connectors Testlab & Democenter Competence Center VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 78/82

79 13. Notes VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 79/82

80 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 80/82

81 VPGate PROFIBUS to serial manual 30 juni 2017 PROCENTEC 81/82

82 PROCENTEC BV Klopperman JD Wateringen The Netherlands T: +31 (0) F: +31 (0) E: W: