TIBI68

For that reason I am planning to open my code for all users very soon.

So users have the chance to improve on the code for stability, compatibility and support in fixing bugs.

I would never expect that, but it would be really great.

Thanks

goblin

TIBI68

Dear All,

I would like to take this opportunity and provide you with the fruits of my software development on Modbus RTU Master Communication function blocks over the past years. The function blocks are running on S7-300, S7-400 and S7-400H CPU’s and do not require any additional hardware dongle to be purchased and inserted into the communication processor module. I tried to develop these function blocks from a user perspective in order to make its use as easy as possible for the programmer. Multiple requests to more than one slave connected to the communication processor in a daisy-chain/multi-drop network can be configured within no time.

The following SIMATIC S7 communication processors are supported:

• CP340
• CP341
• CP441-1
• CP441-2

GENERAL INFORMATION & SUPPORT

For installation, connection and interface configuration of your communication processor module kindly follow its respective documentation.

I also advise you to take some time and go through the general information about Modbus provided by our forum member smiffy. Especially if you are a beginner in Modbus, seek for support or just want to learn more about it.

This software driver is running on several plants in the oil and gas industrysince many years without any known issues. In case you face any problem with the provided function blocks place a comment here in the forum and I will try to give you support. Additionally I would appreciate if users who have already successfully implemented the communication driver into their project will support me in that.

I hope tomake your life a bit easier with this development.

With Best Regards

TIBI68

NEW ! LINKFOR MODBUS RTU SLAVE DRIVER

/tf/WW/en/Posts/114471

MODBUS RTU MASTER DRIVER DOWNLOAD (ATTACHMENTS)

The attached program files need to be retrieved within the SIMATIC Manager.

Currently there is only one manualfor theCP340version but the others are all working in the same way just with different function blocks.

MBMA340.PDF - Manual for Modbus RTU Master for CP340

MBMA340.ZIP -Example projectfor Modbus RTU Master driver for CP340

MBMA341.ZIP -Libraryfor the Modbus RTU Master driver for CP341

MBMA441.ZIP -Libraryfor the Modbus RTU Master driver for CP441-X

MANUAL MBMA340

 Sir,

Does this block supports 6 digits register address like I want read 421300 register in energy meter but I am getting the error as start or end address over range status value e002h.Kindly please help for the same.

Thanks in advance.

Regards,

Raj

Hi,

6 digits is not supported,  however if you send me a PM with your email I can send you a block to try. 

Best regards. 

TIBI68

Hi,

6 digits is not supported,  however if you send me a PM with your email I can send you a block to try. 

Best regards. 

Sir, i have pm my email. Am actually eagerly waiting for the solution.Please answer.

Also one confusion I have.Plc can read address upto 65535. So how it can read any 6 digit address????

Regards. 

rajjamdhade

 

Am actually eagerly waiting for the solution.Please answer.

 hello

please write which plc and cp card models that you use and the software version such as tia v13 or step 7 v x.x. also write the device address, function code, the start address of the data that you want to read and the length. then I will help you with a sample project that can do the job for you.

T_Ebrahem

 

rajjamdhade

 

Am actually eagerly waiting for the solution.Please answer.

 hello

please write which plc and cp card models that you use and the software version such as tia v13 or step 7 v x.x. also write the device address, function code, the start address of the data that you want to read and the length. then I will help you with a sample project that can do the job for you.

 hi,

Actually i have used the block introduced by tibi68.It is working fine for me.

Only for one parameter I have to go through this issue.Also I need the solution for no. of devices not for only one device Id.

PLC-6ES7412-5HK06-0AB0

CP CARD-CP 340-RS422/485

SOFTWARE - STEP7 V5.5 SP4

DEVICE ADDRESS-01

F.CODE-3 HOLDING REGISTER

REGISTER ADDRESS-421300 TO 421305 (SLAVE-SCHNEIDER ENERGY METER EM6400NG)

Thanks in advance.

Regards.

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

TIBI68

 

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

 sir....

actually i need the slave id now to be in INT format.....because i will be giving the slave id only now. rest parameters will be same....so it will be easy and reliable to have slave id int..otherwise i have to move in memory bytes all slave id and this consume more memory of plc..

so please help.

Thanks in advance.

Regards..

rajjamdhade

 

TIBI68

 

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

 sir....

actually i need the slave id now to be in INT format.....because i will be giving the slave id only now. rest parameters will be same....so it will be easy and reliable to have slave id int..otherwise i have to move in memory bytes all slave id and this consume more memory of plc..

so please help.

Thanks in advance.

Regards..

 GM!!!!!

I tried this block with settings as already mentioned....

Now the error code i am getting is 16#8300...i have attached the screen shot of the program...

Please help....

Regards.

rajjamdhade

 

rajjamdhade

 

TIBI68

 

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

 sir....

actually i need the slave id now to be in INT format.....because i will be giving the slave id only now. rest parameters will be same....so it will be easy and reliable to have slave id int..otherwise i have to move in memory bytes all slave id and this consume more memory of plc..

so please help.

Thanks in advance.

Regards..

 GM!!!!!

I tried this block with settings as already mentioned....

Now the error code i am getting is 16#8300...i have attached the screen shot of the program...

Please help....

Regards.

Hello sir,

I did a mistake in assigning. Now I have converted from integer to word. So I have assigned as shown in screenshot. Now also I am getting error but this time there is no status word...

Regards.

rajjamdhade

 

rajjamdhade

 

rajjamdhade

 

TIBI68

 

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

 sir....

actually i need the slave id now to be in INT format.....because i will be giving the slave id only now. rest parameters will be same....so it will be easy and reliable to have slave id int..otherwise i have to move in memory bytes all slave id and this consume more memory of plc..

so please help.

Thanks in advance.

Regards..

 GM!!!!!

I tried this block with settings as already mentioned....

Now the error code i am getting is 16#8300...i have attached the screen shot of the program...

Please help....

Regards.

Hello sir,

I did a mistake in assigning. Now I have converted from integer to word. So I have assigned as shown in screenshot. Now also I am getting error but this time there is no status word...

Regards.

 block for the program of 6 digit.

Most probably you have an address issue.

Verify the holding register address.

Sir.basically i need to read 421300 register address. and upto 421305...

So sir tell me how I can do this.

Regards.

The slave address is different when I compare the two pictures you sent.

If you select in ModScan under Setup/Display Options/Show Traffic you should see the following:

HEX: 01 03 53 33 00 0a 24 86

This is the frame sent from ModScan and the same should be sent from the PLC/CP.

Do you have a MB-Slave simulator as well?

Then you can connect the CP to it and see what is being sent from the PLC and received in your PC.

You can also open the instance Data block of the MBMA34x function block and verify the SEND_BUFFER to compare the values with the above HEX frame. They should be the same.

Good Luck.

TIBI68

The slave address is different when I compare the two pictures you sent.

If you select in ModScan under Setup/Display Options/Show Traffic you should see the following:

HEX: 01 03 53 33 00 0a 24 86

This is the frame sent from ModScan and the same should be sent from the PLC/CP.

Do you have a MB-Slave simulator as well?

Then you can connect the CP to it and see what is being sent from the PLC and received in your PC.

You can also open the instance Data block of the MBMA34x function block and verify the SEND_BUFFER to compare the values with the above HEX frame. They should be the same.

Good Luck.

 Sir 01  hex code is for slave id=01...right?????

sir hex code generated for slave id=13 in instance db is

hex 13 03 53 34 00 06 96 30.

rajjamdhade

sir hex code generated for slave id=13 in instance db is

hex 13 03 53 34 00 06 96 30.

PLC/CP::

13h = Slave Address (19)

03h = Function Code (03) Read Holding Registers

53 34h = Modbus Register Start Address (21300) + 1 

00 06h = Number of Registers (6)

96 30h = Checksum CRC16

Your ModScan configuration from picture:

0eh = Slave Address (14)

03h = Function Code (03) Read Holding Registers

53 33h = Modbus Register Start Address (21299)+ 1

00 0ah = Number of Registers (10)

24 79h = Checksum CRC16

I see difference in Slave address, Modbus Start Address and Number of Registers.

Change and lets see.