Dear TIB68

can we use these blocks(MBMA340) for PCS7 . Have you tested them for PCS7.

What further additions to be required if we need to use them in PCS7 enviroment.

Currently i intend to use them for PCS7 V8.1 SP1.

Thanks

Ravi

Hi TIBI68, 

I have tested it using the CP341 and it worked perfect, now is it possible to integrate it using the card 1SI ASCII (32 Byte) 6ES7 138-4DF01-0AB0 for ET200S.?? If not could you please advice what would I have to do to make it work? 

Thanks in advance.

Hi,

I am so badly looking for 6 digit address area solution.

Is it possible to get MBMAREQ source to make my own solution ?

thanks

Marko

Dear TIBI68,

First I would like to thank You for creating this driver.

I have a problem in communicating cp341 with koyo click as a test connection.

I have taken the all steps provided in the manual and still i cannot read or write to dedicated registers.

The parameters for koyo click is setup as the same as the cp 341.

The Tx led is pulsing with ~0.5 Hz but the Rx led does not blink - CP side

On the koyo side both leds are blinking.

I have tried to switch the wires and still i cannot write or read the registers.

the koyo click addressing of the registers are: 400005 for writing and 400003 for reading.

i have called the MBMAREQ with the address of registers with one zero less.

I am hopeful that You can take Your time to look at my problem.

Best regards,

Aleksandar

Hi TIBI68,

I want to use your  MBMA 340 code to read coils and registers from deepsea 5510. I have connected the  cp 340 to that controller and after downloading the program and changing communication parameters in the cp 340, I am able to see TX and RX Blinking .The only challenge i have is how i can read data from the deepsea slave. I have attached part of deepsea registers and i just want you to help me how i could read some thing for example battery voltage which is at register 1029 in the manual. 

Regards,

Willey

TIBI68

Dear All,

I would like to take this opportunity and provide you with the fruits of my software development on Modbus RTU Master Communication function blocks over the past years. The function blocks are running on S7-300, S7-400 and S7-400H CPU’s and do not require any additional hardware dongle to be purchased and inserted into the communication processor module. I tried to develop these function blocks from a user perspective in order to make its use as easy as possible for the programmer. Multiple requests to more than one slave connected to the communication processor in a daisy-chain/multi-drop network can be configured within no time.

The following SIMATIC S7 communication processors are supported:

• CP340
• CP341
• CP441-1
• CP441-2

GENERAL INFORMATION & SUPPORT

For installation, connection and interface configuration of your communication processor module kindly follow its respective documentation.

I also advise you to take some time and go through the general information about Modbus provided by our forum member smiffy. Especially if you are a beginner in Modbus, seek for support or just want to learn more about it.

This software driver is running on several plants in the oil and gas industrysince many years without any known issues. In case you face any problem with the provided function blocks place a comment here in the forum and I will try to give you support. Additionally I would appreciate if users who have already successfully implemented the communication driver into their project will support me in that.

I hope tomake your life a bit easier with this development.

With Best Regards

TIBI68

NEW ! LINKFOR MODBUS RTU SLAVE DRIVER

/tf/WW/en/Posts/114471

MODBUS RTU MASTER DRIVER DOWNLOAD (ATTACHMENTS)

The attached program files need to be retrieved within the SIMATIC Manager.

Currently there is only one manualfor theCP340version but the others are all working in the same way just with different function blocks.

MBMA340.PDF - Manual for Modbus RTU Master for CP340

MBMA340.ZIP -Example projectfor Modbus RTU Master driver for CP340

MBMA341.ZIP -Libraryfor the Modbus RTU Master driver for CP341

MBMA441.ZIP -Libraryfor the Modbus RTU Master driver for CP441-X

MANUAL MBMA340

 Shall i use this sample backup for Estabilishing communication S7 - 315 & EM6430 Energey meter which is supporting Modbus RTU communication using CP 341 card.

Dear Sir,

                      Shall I Use your library blocks  for Estabilishing communication b/w CP 341 (6ES7 341 1CH02 0EA0) RS422/485 and Schneider Energy meter EM6430.

                      EM6430 Supports Modbus RTU Communication.

EM 6430 Output registers  starting address is 3900 (For Siemens) in your example output register address start from 40001, If i can use  your library tell me what is the starting address to read the output register from Slave.

With Regards,

Dhinagaran. V

dhinagaran.v

Dear Sir,

                      Shall I Use your library blocks  for Estabilishing communication b/w CP 341 (6ES7 341 1CH02 0EA0) RS422/485 and Schneider Energy meter EM6430.

                      EM6430 Supports Modbus RTU Communication.

EM 6430 Output registers  starting address is 3900 (For Siemens) in your example output register address start from 40001, If i can use  your library tell me what is the starting address to read the output register from Slave.

With Regards,

Dhinagaran. V

I don't know anything about your slave device but as long its supporting the same protocol it should work.

In Modbus output registers start with 4xxxx. The first digit (4) specifies the output registers memory area. So you need to enter 43900 as start register.

Best Regards.

 Dear TIBI68,

TIBI68

Dear All,

I would like to take this opportunity and provide you with the fruits of my software development on Modbus RTU Master Communication function blocks over the past years. The function blocks are running on S7-300, S7-400 and S7-400H CPU’s and do not require any additional hardware dongle to be purchased and inserted into the communication processor module. I tried to develop these function blocks from a user perspective in order to make its use as easy as possible for the programmer. Multiple requests to more than one slave connected to the communication processor in a daisy-chain/multi-drop network can be configured within no time.

The following SIMATIC S7 communication processors are supported:

• CP340
• CP341
• CP441-1
• CP441-2

GENERAL INFORMATION & SUPPORT

For installation, connection and interface configuration of your communication processor module kindly follow its respective documentation.

I also advise you to take some time and go through the general information about Modbus provided by our forum member smiffy. Especially if you are a beginner in Modbus, seek for support or just want to learn more about it.

This software driver is running on several plants in the oil and gas industrysince many years without any known issues. In case you face any problem with the provided function blocks place a comment here in the forum and I will try to give you support. Additionally I would appreciate if users who have already successfully implemented the communication driver into their project will support me in that.

I hope tomake your life a bit easier with this development.

With Best Regards

TIBI68

NEW ! LINKFOR MODBUS RTU SLAVE DRIVER

/tf/WW/en/Posts/114471

MODBUS RTU MASTER DRIVER DOWNLOAD (ATTACHMENTS)

The attached program files need to be retrieved within the SIMATIC Manager.

Currently there is only one manualfor theCP340version but the others are all working in the same way just with different function blocks.

MBMA340.PDF - Manual for Modbus RTU Master for CP340

MBMA340.ZIP -Example projectfor Modbus RTU Master driver for CP340

MBMA341.ZIP -Libraryfor the Modbus RTU Master driver for CP341

MBMA441.ZIP -Libraryfor the Modbus RTU Master driver for CP441-X

MANUAL MBMA340

I didn't check the sample project with the hardware. But i would like to say "THANK YOU" for your effort and attention to the feedback. Also for sharing your "hard-work" for free . Really Gr8 Job .. You deserve more than 5* 

Greetings,

Any chance of an update to this package so it can access the full 64k address space for holding registers?

Thanks!

Dear TIBI68,

          Is possible to use library MBMA341 even if the CP341 is in ET200M rack connected to the CPU by Profibus?

Also

Because of the FB MBMAREQ uses as input parameters "LINK" provided by the FB MBMA341, It's not better to call MBMA341 before MBMAREQ?

I'm asking those things because using ibrary MBMA341 the CPU goes in STOP.

I'm using blocks FB10, FB35 and FB7, FB8 from your library. I followed manual but every time I use FB10 and FB35 the CPU (S7318 2AJ00-0AB0) goes in STOP.

Have you any idea?

Thanks!

We have the library running in plants with CP in ET200M without any issues. 

The MBMAREQ and MBMA341 are communicating over the LINK data block with each other. Calling the MBMA341 first does not make any sense because it does not know what to do. The request need to be given to the block first.

Regarding the CPU stop, try to adapt the example project to your system and check if it's working. I believe you should start there first. 

Good luck.

There is only the example for CP340, correct?

I'm using CP341. So I have to use the example but with FB 10, 35, 7 and 8 of CP341 library, correct?

Thanks!

Correct.

If you have any problems let me know. 

You can also send me your email in PM if you want, I do not visit this forum all time. 

Best regards. 

Hi

How this function can be used in TIA portal v13?

I can not migrate into tia!

Sorry my friend but TIA is not supported because I don't use it and have no way to test it.

Best Regards.

TIBI68

Sorry my friend but TIA is not supported because I don't use it and have no way to test it.

Best Regards.

 thanks for your answer

If you can the source code send to me, maybe I can create this fb for tia and share in this froum

Good day!

First, I want to thank you for developing a Modbus driver for CP341, which does not need h/w dongle. I'm going to use it in my project.

I have a one quesetion about that FBs - can I somehowrecognize a lost of connection to slaves? For example, I want to know, that slave device does not answer my requests (wire break or power problems).

I've read a manual, but I havent seen any info about connection faults.

You can simply use the DONE output from the MBMAREQ function block in combination with an on delay timer to detect a communication loss.

The DONE output should be triggered every time the request has been successfully executed (reply from the slave received).

So you just need to program an on delay timer and trigger that timer with the negation of the DONE output.

The timer will elapse and detects the error if the DONE output stops getting triggered due to any reason (wire broken...).

Best Regards.

TIBI68

Hi TIBI68.

First, I'd like to thank you for all your hard work on this. I've sent you a PM asking for your help with my case if you don't mind having a look at that. Thanks in advance.

 Dear TIBI68,

Thank you for the great blocks! I was able to implement it in two of our machines.

TIBI68

I try to avoid working with TIA whenever I can

Are you able to migrate the MBMA340.ZIP project into your TIA?

I was able to integrate it in projects made, both, in Step7 and TIA Portal 13. After migrating and copying your blocks, I only had to select the library version for P_SEND and everything worked like a charm.

Thanks again and have a good day!

Cheers, Wojtek

The Moderator moved your post here while it was absolutely right were it was.

Sorry to hear about your problem and I will try to help you.

I have currently some issues opening your program, STEP7 message about the polish project language, but I am working to solve it.

In the meantime I would try to change the LINK parameter on all the blocks to another, 100% unused address.

The LINK parameter is the interface between the MBMAxxx and the MBMAREQ block and, if you see the value online, should show the instance data block number of the MBMAxxx block.

In case that number changes due to any reason the MBMAREQ block will try to open a wrong or non existing data block and your CPU goes to STOP.

I changed my windows regional settings to polish but cannot open your project.

Best Regards.

Kindly change the LINK parameter on both blocks to an unused address.

I also have screens from stacks when PLC has stoppe, maybe it is also helps.

Best regards

goblin

I've change the LINK address (MW10->MW100) and I'll see if that helps but it take a couple of days.

I also attach corrected project, TIBI68 - can you try to reopen it?

Thanks 

goblin

 Hi Goblin

goblin

I've change the LINK address (MW10->MW100)

 Did you make sure if there is no other data stored in ranges as: 

M100.0 to M101.7

MB100 to MB101

MW99 to MW100

MD97 to MD100

It might seem like overkill to check so many ranges but I had similar problems where it turned out that my MWnn was used by Mnn.x. Better safe than sorry.

Good luck with your project.

Cheers,

Wojtek

Wojtek, I've checked all addresses if there are no conflict witth another (MW10 before I changed when TIBI68 gave me suggestion, and MW100 now).

I don't know what is inside MBMAREQ block, but just in case I've changed LINK address and I will see what's happen. But it takes a couple of weeks to ensure that problem was with wrong LINK address.

goblin

Today it happened again.

Still the same diagnostics errors:

When I went to HW CFG/PLC/Operating Mode and perform "Warm Restart" program has run again.

I attach files from Stack dumps when CP was in STOP mode.

TIBI68 can you take a look at it? I'll be gratefull for your help.

thanks

goblin

Dear Goblin,

download the MBMA341 blocks from here:

https://support.industry.siemens.com/tf/ww/en/posts/modbus-rtu-master-for-cp340-341-441-x-no-dongle-required/111091/?page=0&pageSize=10

These ones should work 

If you use the format function of the block you don't need to swap the words manually.

Best Regards.

TIBI68

download the MBMA341 blocks from here:

https://support.industry.siemens.com/tf/ww/en/posts/modbus-rtu-master-for-cp340-341-441-x-no-dongle-required/111091/?page=0&pageSize=10

These ones should work 

 TIBI68 do you suggest me to use MBMA341 block (from MBMA341.zip) instead of MBMA340 (from MBMA340.zip as I've used)? I have CP340 module, not CP341.

goblin 

Sorry Gobln, my mistake.

Try to make the following change in the Interface Parameter

Receiving Data

Deselect / remove the tick from "PREVENT OVERWRITING"

Good Luck.

TIBI68

Sorry Gobln, my mistake.

Try to make the following change in the Interface Parameter

Receiving Data

Deselect / remove the tick from "PREVENT OVERWRITING"

Good Luck.

 When I try to do this I get message "'Prevent Overwriting' cannot be deselected if the number of receive message frames is greater than 1" (I have default 250)

Should I change Buffered Reveive Message Frames to 1 and then deselect "Prevent Overwriting"?

Thanks

goblin

Yes please, change the buffer size to 1 and then deselect.

I hope this helps because I could not find any error in your program.

Good luck.

TIBI68

Yes please, change the buffer size to 1 and then deselect.

I hope this helps because I could not find any error in your program.

 Done.

I also hope this helps :) If not I'll try with Moxa Profibus/Modbus gateway.

Thanks

goblin

Good day Goblin,

I hope its working now.

MOXA has good solutions and Hilscher https://www.hilscher.com/ too.

Best Regards.

TIBI68

Sorry Gobln, my mistake.

Try to make the following change in the Interface Parameter

Receiving Data

Deselect / remove the tick from "PREVENT OVERWRITING"

Good Luck.

Hello again

TIBI68, unfortunately just now it has happened again. The same errors in diagnostics - trying to open 16385 DB number (4001 in HEX)...

Performing warm restart wasn't enough to launch the PLC, I had to clear memory first.

goblin

I am very sad to hear that .

It is not easy to troubleshoot on that issue remotely and for you due to the missing source code.

For that reason I am planning to open my code for all users very soon.

So users have the chance to improve on the code for stability, compatibility and support in fixing bugs.

Best Regards.

TIBI68

For that reason I am planning to open my code for all users very soon.

So users have the chance to improve on the code for stability, compatibility and support in fixing bugs.

I would never expect that, but it would be really great.

Thanks

goblin

TIBI68

Dear All,

I would like to take this opportunity and provide you with the fruits of my software development on Modbus RTU Master Communication function blocks over the past years. The function blocks are running on S7-300, S7-400 and S7-400H CPU’s and do not require any additional hardware dongle to be purchased and inserted into the communication processor module. I tried to develop these function blocks from a user perspective in order to make its use as easy as possible for the programmer. Multiple requests to more than one slave connected to the communication processor in a daisy-chain/multi-drop network can be configured within no time.

The following SIMATIC S7 communication processors are supported:

• CP340
• CP341
• CP441-1
• CP441-2

GENERAL INFORMATION & SUPPORT

For installation, connection and interface configuration of your communication processor module kindly follow its respective documentation.

I also advise you to take some time and go through the general information about Modbus provided by our forum member smiffy. Especially if you are a beginner in Modbus, seek for support or just want to learn more about it.

This software driver is running on several plants in the oil and gas industrysince many years without any known issues. In case you face any problem with the provided function blocks place a comment here in the forum and I will try to give you support. Additionally I would appreciate if users who have already successfully implemented the communication driver into their project will support me in that.

I hope tomake your life a bit easier with this development.

With Best Regards

TIBI68

NEW ! LINKFOR MODBUS RTU SLAVE DRIVER

/tf/WW/en/Posts/114471

MODBUS RTU MASTER DRIVER DOWNLOAD (ATTACHMENTS)

The attached program files need to be retrieved within the SIMATIC Manager.

Currently there is only one manualfor theCP340version but the others are all working in the same way just with different function blocks.

MBMA340.PDF - Manual for Modbus RTU Master for CP340

MBMA340.ZIP -Example projectfor Modbus RTU Master driver for CP340

MBMA341.ZIP -Libraryfor the Modbus RTU Master driver for CP341

MBMA441.ZIP -Libraryfor the Modbus RTU Master driver for CP441-X

MANUAL MBMA340

 Sir,

Does this block supports 6 digits register address like I want read 421300 register in energy meter but I am getting the error as start or end address over range status value e002h.Kindly please help for the same.

Thanks in advance.

Regards,

Raj

Hi,

6 digits is not supported,  however if you send me a PM with your email I can send you a block to try. 

Best regards. 

TIBI68

Hi,

6 digits is not supported,  however if you send me a PM with your email I can send you a block to try. 

Best regards. 

Sir, i have pm my email. Am actually eagerly waiting for the solution.Please answer.

Also one confusion I have.Plc can read address upto 65535. So how it can read any 6 digit address????

Regards. 

rajjamdhade

 

Am actually eagerly waiting for the solution.Please answer.

 hello

please write which plc and cp card models that you use and the software version such as tia v13 or step 7 v x.x. also write the device address, function code, the start address of the data that you want to read and the length. then I will help you with a sample project that can do the job for you.

T_Ebrahem

 

rajjamdhade

 

Am actually eagerly waiting for the solution.Please answer.

 hello

please write which plc and cp card models that you use and the software version such as tia v13 or step 7 v x.x. also write the device address, function code, the start address of the data that you want to read and the length. then I will help you with a sample project that can do the job for you.

 hi,

Actually i have used the block introduced by tibi68.It is working fine for me.

Only for one parameter I have to go through this issue.Also I need the solution for no. of devices not for only one device Id.

PLC-6ES7412-5HK06-0AB0

CP CARD-CP 340-RS422/485

SOFTWARE - STEP7 V5.5 SP4

DEVICE ADDRESS-01

F.CODE-3 HOLDING REGISTER

REGISTER ADDRESS-421300 TO 421305 (SLAVE-SCHNEIDER ENERGY METER EM6400NG)

Thanks in advance.

Regards.

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

TIBI68

 

rajjamdhade

 

TIBI68

Sorry my friend but I don't visit the forum on regular basis.

Anyhow, kindly find attached MBMAREQ block for 6 digit registers.

Also one confusion I have. Plc can read address up to 65535. So how it can read any 6 digit address?

That's quite simple, just the old fashion way.

You must provide the function code by yourself.

Good Luck.

 ok, sir...

I will try this block in the morning.Also is there any pdf for the status and the error codes in case I face any problem. 

CALL  FB    11 , DB17

LINK  :=DB1.DBW6

SLAVE :=

FCODE :=

START :=

LENGTH:=

S7ADDR:=DB2576.DBB0

FORMAT:=0

DONE  :=DB1.DBX10.1

ERROR :=DB1.DBX10.0

STATUS:=DB1.DBW8

Can u please show how to assign the slave id,f.code,start address and length to this block????

I know only for the previous fb10 block.

Parameters that i require are-

SLAVE=01 to 32

FCODE=3

START=421300

LENGTH=8 (upto 421305 register basically i need)

Thanks in advance.

Regards.

SLAVE is the Modbus slave address of the connected device (same as configured in slave).

FCODE is the Modbus function code (i.e. 3 = READ HOLDING REGISTERS)

START is the START ADDRESS (i.e. HOLDING REGISTER 421300  START = 21300)

LENGTH is the number of registers (421305 - 421300 + 1 = 6)   

This block requires a bit more attention of the programmer because parameters will not be checked.

Good Luck! 

 sir....

actually i need the slave id now to be in INT format.....because i will be giving the slave id only now. rest parameters will be same....so it will be easy and reliable to have slave id int..otherwise i have to move in memory bytes all slave id and this consume more memory of plc..

so please help.

Thanks in advance.

Regards..