Modbus

Applications
For PanelView Plus and
PanelView Plus CE Terminals

2711P

User Manual
Important User Information Solid state equipment has operational characteristics differing from those of
electromechanical equipment. Safety Guidelines for the Application,
Installation and Maintenance of Solid State Controls (publication SGI-1.1
available from your local Rockwell Automation sales office or online at
http://literature.rockwellautomation.com) describes some important
differences between solid state equipment and hard-wired electromechanical
devices. Because of this difference, and also because of the wide variety of
uses for solid state equipment, all persons responsible for applying this
equipment must satisfy themselves that each intended application of this
equipment is acceptable.
In no event will Rockwell Automation, Inc. be responsible or liable for
indirect or consequential damages resulting from the use or application of
this equipment.
The examples and diagrams in this manual are included solely for illustrative
purposes. Because of the many variables and requirements associated with
any particular installation, Rockwell Automation, Inc. cannot assume
responsibility or liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to
use of information, circuits, equipment, or software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without
written permission of Rockwell Automation, Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware
of safety considerations.

Identifies information about practices or circumstances that can cause

WARNING
an explosion in a hazardous environment, which may lead to personal
injury or death, property damage, or economic loss.

Identifies information that is critical for successful application and

IMPORTANT
understanding of the product.
Identifies information about practices or circumstances that can lead
ATTENTION
to personal injury or death, property damage, or economic loss.
Attentions help you identify a hazard, avoid a hazard, and recognize
the consequence

SHOCK HAZARD Labels may be on or inside the equipment, for example, a drive or
motor, to alert people that dangerous voltage may be present.

BURN HAZARD Labels may be on or inside the equipment, for example, a drive or
motor, to alert people that surfaces may reach dangerous
temperatures.
 Table of Contents

Preface Topics Covered. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Additional Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Chapter 1
Installing Software Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Install RSView Studio . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Install KEPServer Enterprise. . . . . . . . . . . . . . . . . . . . . . . . . 10
Firmware Upgrade Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . 10

Chapter 2
Modbus KEPServer Drivers Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Modbus Master/Slave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Modbus (RTU) Serial . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Modbus Unsolicited Serial . . . . . . . . . . . . . . . . . . . . . . . 11
Modbus ASCII. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Modbus/TCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Modbus Device Model . . . . . . . . . . . . . . . . . . . . . . . . . . 13
MailBox. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Guidelines for Developing Modbus Applications . . . . . . . . . 14
Create a Modbus Application . . . . . . . . . . . . . . . . . . . . . 14
Compile, Download and Run a Modbus application . . . . 14

Chapter 3
Configuring KEPServer Drivers for Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Modbus Create a Project File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Select the Default Project File (.pfe) . . . . . . . . . . . . . . . . . .. 16
Configure Drivers for Modbus Protocols. . . . . . . . . . . . . . .. 17
Add a Channel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 17
Add A Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 24
Create Tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 32

Chapter 4
Testing KEPServer Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Communications Use the OPC Quick Client . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Chapter 5
Making KEPServer Drivers and Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Tags Available in RSView Studio Create an OPC Data Server . . . . . . . . . . . . . . . . . . . . . . . . . 37
Browse KEPServer Tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

3 Publication 2711P-UM002B-EN-P - March 2007

4 Table of Contents

Chapter 6
Installing KEPServer Drivers on Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Terminal Firmware Upgrade Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . 41
Preparing Terminal for Firmware Upgrade . . . . . . . . . . . 41
Copy FUP Files to Development Computer . . . . . . . . . . . . . 42
Upgrade Firmware using a Compact Flash Card . . . . . . . . . . 42
Upgrade Firmware using a Network (Ethernet) Connection. . 46

Chapter 7
Compiling, Downloading, and Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 53
Running Application Compile a Runtime Application File . . . . . . . . . . . . . . . . . .. 53
Download Application to Terminal . . . . . . . . . . . . . . . . . .. 54
Connect Terminal to Modbus Network. . . . . . . . . . . . . . . .. 56
Modbus Serial Cables . . . . . . . . . . . . . . . . . . . . . . . . . .. 56
Modbus Ethernet Cables. . . . . . . . . . . . . . . . . . . . . . . .. 57
Run Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 58

Chapter 8
Troubleshooting Objectives. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Common Errors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Runtime Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Appendix A
Data Types
Appendix B
Modbus/TCP Address Definitions Output Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 63
Input Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 63
Internal Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 64
Holding Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 65
Mailbox Addressing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 67
Instromet Addressing. . . . . . . . . . . . . . . . . . . . . . . . . . . . .. 68

Appendix C
Modbus ASCII Address Definitions Output Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Input Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Internal Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Holding Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Appendix D
Modbus Unsolicited Serial Output Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Address Definitions Input Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Internal Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Holding Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Publication 2711P-UM002B-EN-P - March 2007

 Table of Contents 5

Appendix E
Modbus (RTU) Serial Address Output Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Definitions Input Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Internal Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Holding Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Magnetek Address Descriptions . . . . . . . . . . . . . . . . . . . . . . 81
Elliott Flow Computer Address Descriptions . . . . . . . . . . . . . 82
Omni Address Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . 83
Daniel S500 Address Descriptions . . . . . . . . . . . . . . . . . . . . 88

Index Rockwell Automation Support . . . . . . . . . . . . . . . . . . . . . . . 93

Installation Assistance . . . . . . . . . . . . . . . . . . . . . . . . . . 93
New Product Satisfaction Return . . . . . . . . . . . . . . . . . . . 93

Publication 2711P-UM002B-EN-P - March 2007

6 Table of Contents

Publication 2711P-UM002B-EN-P - March 2007

 Preface

For communication with controllers, RSView Machine Edition

products are configured with:
• RSLinx Enterprise for most Rockwell Automation networks or
• KEPServer Enterprise for RSView OPC servers.

The KEPServer OPC server expands PLC and device connectivity

options by incorporating 26 communication drivers for the PanelView
Plus and PanelView Plus CE platforms, and over 31 communication
drivers for RSView Machine Edition running on a desktop.

This guide will show you how to configure KEPServer drivers,

specifically Modbus drivers, for RSView ME applications that run on:
• PanelView Plus CE terminals,
• PanelView Plus terminals,
• or the Windows 2000/XP environment.

Using configured KEPServer drivers in your RSView ME application,

the terminals will be able to communicate with devices on a Modbus
network.

Topics Covered • Chapter 1 Installing Software - Covers software installation for

RSView Studio, RSView Enterprise, KEPServer Enterprise and the
Firmware Upgrade Wizard.
• Chapter 2 Overview of Modbus Protocols - Gives an overview of
Modbus Master/Slave Protocol and each of the KEPServer
drivers for Modbus communication protocols.
• Chapter 3 Configuring KEPServer Drivers for Modbus - Shows
how to use KEPServer Enterprise software to configure
KEPServer drivers for Modbus protocols. For each driver, you
will create a channel, add a device, and create tags. The driver is
saved to a .pfe project file that you will set as the default project.
• Chapter 4 Testing KEPServer Communications - Shows how to
use the OPC Quick Client to test KEPServer communications for
the driver and tags created in Chapter 3.
• Chapter 5 Making KEPServer Driver and Tags Available in
RSView Studio - Shows how to create an OPC data server in
RSView Enterprise or RSView Studio. This server will allow you
to access the KEPServer driver and tags from your RSView ME
application.
• Chapter 6 Installing KEPServer Drivers on Terminal - Shows how
to use the Firmware Upgrade Wizard to install KEPServer drivers
on PanelView Plus/PanelView Plus CE terminals.

7 Publication 2711P-UM002B-EN-P - March 2007

8

• Chapter 7 Compiling, Downloading, and Running Application -

Shows how to compile a runtime .mer file, connect your
PanelView Plus/PanelView Plus CE terminal to a Modbus
network, download the .mer file to the terminal, and run the
application.
• Chapter 8 Troubleshooting - Covers common error types that
occur during runtime and how you can correct these errors.

Software Requirements The following software must be installed on the development

desktop:
• RSView Studio 3.0, or later
• KEPServer Enterprise software
• Firmware Upgrade Wizard

Additional Resources You might want to consult the following sources for additional
information:
• KEPServer Enterprise Software online help
• RSView Enterprise or RSView Studio online help
• PanelView Plus User Manual, publication no. 2711P-UM001

An electronic version of the PanelView Plus user manual is

available at:
http://literature.rockwellautomation.com

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 1

Installing Software

Objectives To develop RSView ME applications, configure KEPServer drivers, and

use these drivers with applications that run on PanelView
Plus/PanelView Plus CE terminals, the following software must be
loaded on your development computer:
• RSView Studio for ME or RSView Enterprise
• KEPServer Enterprise
• Firmware Upgrade Wizard

Refer to the installation information provided with RSView Studio and

KEPServer Enterprise for the latest details on installation requirements.

Install RSView Studio RSView Studio Enterprise or RSView Studio for Machine Edition
software is installed from:
• a CD or
• downloaded from the Rockwell Software website at
www.software.rockwell.com.

IMPORTANT A current registered serial number is required to download

software from the Rockwell Software website.

The installation menu with instructions will appear when inserting the
CD into a computer or you can run setup.exe from the root directory.

9 Publication 2711P-UM002B-EN-P - March 2007

10 Installing Software

Install KEPServer KEPServer Enterprise is used to:

Enterprise • configure the KEPServer driver
• create tags
• test communications on the desktop.

KEPServer Enterprise is included with RSView Studio and can be

installed from:
• a CD or
• downloaded from the Rockwell Software web site at
www.software.rockwell.com.

KEPServer runs as a service and an icon will display in the toolbar.

IMPORTANT A current registered serial number is required to download

software from the Rockwell Software website.

The software can be installed by running the setup.exe file from the
CD or downloaded version.

IMPORTANT When installing KEPServer Enterprise, be sure to select the

Modbus drivers if you are not doing a full install.

Firmware Upgrade Wizard The Firmware Upgrade Wizard is used to install KEPServer drivers and
upgrade firmware in the following devices:
• PanelView Plus
• PanelView Plus CE

The Firmware Upgrade Wizard is installed automatically with RSView

Studio.

The Firmware Upgrade (FUP) files with the KEPServer drivers is

available at http://support.rockwellautomation.com under
Downloads.

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 2

Modbus KEPServer Drivers

Objectives This chapter provides an overview of MODBUS KEPServer drivers

available in the RSView Enterprise software.
• Modbus Master/Slave
– Modbus (RTU) Serial
– Modbus Unsolicited Serial
• Modbus ASCII
• Modbus/TCP

Modbus Master/Slave A Modbus master/slave network provides a protocol for data transfer
and programming with a single RTU master and up to 247 slave
devices. A Modbus network links distributed devices with a central
computer terminal or controller for supervisory control and data
acquisition. Up to 247 nodes can be connected at data rates of up to
19,200 baud using media such as twisted pair cable, common carrier
phone lines, or microwave transmission. This network is commonly
used in SCADA application over large areas such as the water/waste
water and oil & gas industries.

Modbus (RTU) Serial

Modbus (RTU) Serial is the protocol for a master and includes RTS
support for radio modems. Supported devices include:
• Modbus compatible devices
• Elliott Flow Computer
• Magnetek GPD 515 Drive
• Omni Flow Computer
• Daniel S500 Flow Computer
• Dynamic Fluid Meter (DFM) SFC3
• Instromet

Modbus Unsolicited Serial

Modbus Unsolicited Serial simulates up to 247 Modbus slave devices.

Supported devices include Modbus compatible devices.

11 Publication 2711P-UM002B-EN-P - March 2007

12 Modbus KEPServer Drivers

Modbus Master/Slave Networks

See Chapter 7 for cable information.

Direct Connection

PanelView Plus
(Modbus Serial or
Unsolicited Serial Driver) Controller (Master or Slave)
RS-232/RS-485 Converter(1)

(1)
1761-NET-AIC or Comparable Device

Master/Slave Network (Multiple Slave Terminals Connect to one Master Controller)

(3) PanelView Plus Slave Devices
Each uses Modbus Unsolicited Serial Driver

PanelView Plus PanelView Plus PanelView Plus

Master Controller

RS-232/RS-485 RS-232/RS-485
Converters Converters

(1) PanelView Plus Master Device

Uses the Modbus Serial Driver
PanelView Plus
Modbus Device Modbus Device Modbus Device

RS-232/RS-485 RS-232/RS-485 RS-232/RS-485

Converters Converters Converters

Modem Connection
(2) PanelView Plus Slave Devices Modbus
Each uses the Modbus Unsolicited Serial Driver
PanelView Plus Master Controller

Modems
PanelView Plus

Publication 2711P-UM002B-EN-P - March 2007

 Modbus KEPServer Drivers 13

Modbus ASCII Modbus ASCII protocol is typically used to connect to other ASCII
devices that support the Modbus ASCII protocol. KEPServer support
includes:
• Modbus ASCII compatible devices
• Flow Computers using Daniels/Omni/Elliott register addressing

Modbus/TCP Modbus/TCP is a Modbus messaging protocol over Ethernet TCP/IP

and is intended for supervision and control of automation equipment.
The most common use of this protocol is for Ethernet attachment of
PLCs, I/O modules, and gateways to other simple field buses or I/O
networks.

The Modbus/TCP KEPServer driver supports Modbus and Mailbox

device models.

Modbus Device Model

The most common Modbus device model is where the driver connects
to physical devices (e.g. Modicon TSX Quantum, other Modbus Open
Ethernet compatible devices) and acts as a device on the network
with a device ID equivalent to the machine's IP address. The driver
accepts any unsolicited commands it receives and attempts to process
them as if it were another PLC.

MailBox

The Mailbox model determines the manner unsolicited requests are

handled. By defining a mailbox device, the driver does not act like a
PLC on the network (as described above). Instead, it acts as a storage
area for each and every mailbox device defined. When the driver
receives an unsolicited command, the driver detects the IP address the
message came from and places the data in the storage area allocated
for the device. If the message comes from a device with an IP address
that has not been defined as a mailbox device, the message is not
processed. Any client application that reads/writes to this type of
device, reads/writes to the storage area contained in the driver, not
the physical device.

Publication 2711P-UM002B-EN-P - March 2007

14 Modbus KEPServer Drivers

Refer to the MSTR instruction in your Modicon documentation for

details on sending unsolicited requests to the Modbus Ethernet driver.
PanelView Plus PanelView Plus

Ethernet Ethernet
Switch Switch

Master Controller
PanelView Plus

Guidelines for Developing The section provides general guidelines for creating and running
Modbus applications on PanelView Plus/PanelView Plus CE terminals.
Modbus Applications
Create a Modbus Application

General Steps Description Reference

Step 1 Create a .pfe project file in KEPServer Chapter 3
Enterprise.
Step 2 Configure a KEPServer Modbus Driver. Add a Chapter 3
channel and device to the project file.
Step 3 Enter application tags. Chapter 3
Step 4 Set your .pfe file as the default project file. Chapter 3
Step 5 Test KEPServer communications to verify your Chapter 4
project file and tags.
Step 6 Create an OPC Data Server to make your tags Chapter 5
available in RSView Studio.

Compile, Download and Run a Modbus application

General Steps Description Reference

Step 1 Create a firmware upgrade card that contains Chapter 6
the KEPWare driver and upgrade the terminal.
Step 2 Compile the RSView .mer application. Chapter 7
Step 3 Download the .mer runtime file to terminal. Chapter 7
Step 4 Connect the terminal to the Modbus network. Chapter 7
Step 5 Run the application. Chapter 7

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 3

Configuring KEPServer Drivers for Modbus

Objectives This chapter shows how to use KEPServer Enterprise software to

configure KEPServer drivers for Modbus protocols including Ethernet
TCP/IP, RTU Serial, Unsolicited Serial, and ASCII Serial. You will:
• create a project (.pfe) for the drivers
• set the project file as the default project

For each Modbus driver in your project file, you will:

• add a channel
• add a device (or controller)
• create tags

Create a Project File The first thing you need to do is create a project file.

1. Double-click the KEPServer Enterprise icon in the Systray to

open the default project window below.

15 Publication 2711P-UM002B-EN-P - March 2007

16 Configuring KEPServer Drivers for Modbus

2. Create a new KEPServer project (.pfe) file. From the menu,

select File>Save As and save the project as a .pfe file.

Select the Default Project The steps in this section ensure that the correct project file is used in
your RSView Studio application.
File (.pfe)
When RSView Studio creates a runtime application and the application
contains the KEPware OPC server, RSView Studio will merge the
KEPware project file (.pfe) into the runtime file (.mer). The project file
that RSView Studio uses is defined by the Default project field in the
General tab of the Tools>Options menu in KEPware Server
Enterprise.

TIP This may not be the current configuration running in

KEPware Server Enterprise. If you are testing the
application on a PC, make sure the project name in
the title bar of KEPware Server Enterprise matches
the Project default field.

1. From the Menu bar, select Tools>Options…

2. On the General tab, click the button next to the Default

project textbox.

3. Select the desired .pfe file and click the button.

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 17

You should now see the following:

4. Click the button and OK to accept the new project as

the default.

TIP The KEPServer configuration is not archived with the

RSView Studio application backup (.apa) file. If you
need to reuse the project configuration file on
another computer, copy the .pfe file.

Configure Drivers for This section shows how to configure KEPServer drivers that will allow
a PanelView Plus/PanelView Plus CE terminal to communicate on a
Modbus Protocols Modbus network.

Add a Channel

The first step in communicating to any device using the KEPServer

software is to create a channel. A channel describes the protocol and
driver properties used for communication. While a single channel can
be used to communicate to multiple devices, separate channels must
be defined for each unique driver to be used. Only one project
configuration file can run at a time, but it may contain multiple
channels and devices.

Step 1 - Add a New Channel

Click on the New Channel icon or right-click anywhere in the left

pane. This will bring up the new channel wizard.

Step 2 - Enter a Channel Name

Enter a unique name for the channel.

Publication 2711P-UM002B-EN-P - March 2007

18 Configuring KEPServer Drivers for Modbus

Step 3 -Select a Device Driver

Select a driver from the drop down list. The table below lists the
correct driver for each Modbus protocol.

For this Protocol: Select this Driver:

Modbus/TCP Modbus Ethernet
Modbus RTU Serial (Master) Modbus Serial
Modbus Unsolicited Serial (Slave) Modbus Unsolicited Serial
Modbus ASCII Modbus ASCII Serial

Step 4 - Select a Network Adapter (for Modbus/TCP only)

The Network Adapter selection left allows you to select a specific NIC
card based on either the NIC name or its currently assigned IP
address. The list of available NICs will include either unique NIC cards
or NICs that have multiple IP addresses assigned to them.
Additionally, the selection will display any WAN connections you may
have active such as a dialup connection.

For PanelView Plus/PanelView Plus CE, select Default and click Next.

Step 5 - Enter Communication Settings (doesn’t apply to Modbus/TCP)

In the New Channel - Communications dialog, make sure the Modicon

controller configuration settings match those in slave controllers or
devices.

Parameter Selections Recommended

Data Bits 5, 6, 7, 8 8
Stop Bits 1, 2 1
Parity None, Even, Odd Even
Baud 300 to 256000 9600 or 19200

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 19

Modbus RTU Serial

Modbus Unsolicited Serial

Publication 2711P-UM002B-EN-P - March 2007

20 Configuring KEPServer Drivers for Modbus

Modbus ASCII

Step 6 - Set the Optimization Method for Data Requests

The New Channel - Write Optimization dialog sets the optimization

method for data requests. Select the best optimization for your
application and click Next.

For more information on KEPServer read and write optimization

options refer to the online Driver help.

Applies to all Modbus protocols

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 21

Step 7 -Select Socket Usage (Applies to Modbus/TCP only)

The New Channel - Socket Usage dialog controls how the Modbus
Ethernet driver will utilize Windows sockets when establishing a
connection to the target device. For a normal Modbus Ethernet
enabled device, the default Use Multiple Sockets for device
connection (checked) mode of operation is designed to give the best
performance from the driver.

Normally, the Modbus Ethernet driver will use a Windows socket for
each device on the network. When using a new socket connection for
each device, the Modbus Ethernet driver maintains that socket as an
active connection. Normally this provides a very high level of
performance since the driver does not need to reestablish a
connection each time it needs to read or write data to a given device.

For more information on using Sockets in a Modbus RTU bridge

application, refer to the online help.

Click Next.

Publication 2711P-UM002B-EN-P - March 2007

22 Configuring KEPServer Drivers for Modbus

Step 8 - View and Verify Channel Summary

The New Channel - Summary dialog provides a summary of the new

channel settings. Verify the settings below and click Finish.

Modbus/TCP

Modbus RTU Serial

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 23

Modbus Unsolicited Serial

Modbus ASCII Serial

TIP The red X next to the channel name will disappear

when a destination device is added under this driver.

Step 9 - Save Project File

From the Menu bar, select File>Save or click the Save button.

Publication 2711P-UM002B-EN-P - March 2007

24 Configuring KEPServer Drivers for Modbus

Add A Device

Now that a new channel is defined, you need to add a new device to
the channel. In most cases, selecting the default settings will allow
you to quickly configure and connect to a device.

Step 1 - Add a Device

Add a device by clicking on the Click to add a device hypertext or the

New Device icon. This will bring up the new device wizard. Here
you’ll add the information pertinent to the controller that you are
going to communicate with.

Step 2 - Enter a Device Name

In the New Device - Name dialog, enter a device name that will help
you identify the device later and click Next. In most cases, the device
will be a logic controller.

Step 3 - Select a Device Model

If the device you are defining supports more than one model, select a
model that best describes the device.

For this Protocol: Most Common Model:

MODBIS/TCP Modbus
Modbus RTU Serial Modbus
Modbus Unsolicited Serial N/A
Modbus ASCII Modbus ASCII

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 25

Step 4 - Select a Device ID

The device you are defining may be multidropped as part of a

network of devices. To communicate with the device, it must be
assigned a unique ID.

In the New Device - ID dialog, enter a unique Device ID (decimal

address) to identify the controller on the network. Enter the Device ID
and click Next.

For this Protocol: Device ID Range Data Format

Modbus/TCP (1) xxx.xxx.xxx.xxx IP Address
ModbusModbus RTU Serial 0 - 255 Decimal
Modbus Unsolicited Serial 1 - 247 Decimal
Modbus ASCII 1 - 247 Decimal
(1) For master/slave communications, add a fifth octet to the IP address. Refer to your KEPWare
documentation for more details on Modbus/TCP master/slave communications.

Step 5 - Enter Device Communication Parameters

(Doesn’t apply to Modbus Unsolicited Serial Protocol)

In the New Device - Communication Parameters dialog, accept the

default communication parameters by clicking Next.

Publication 2711P-UM002B-EN-P - March 2007

26 Configuring KEPServer Drivers for Modbus

Step 6 - Configure Tag Database Options

(Doesn’t apply to Unsolicited Serial or ASCII Protocols)

In the New Device - Database Creation dialog, click Next to accept

the default tag database configuration options.

The automatic OPC tag database generation features of the server

have been designed to make the setup of your OPC application a Plug
and Play operation. For communication drivers that support this
feature, you can configure them to automatically build a list of OPC
tags within the server that correspond to device specific data. The
automatically generated OPC tags can then be browsed from your
OPC client.

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 27

Step 7 - Enter Device Settings

In the New Device - Settings dialog, accept the default settings by

clicking Next

Modbus/TCP

Modbus RTU Serial

Publication 2711P-UM002B-EN-P - March 2007

28 Configuring KEPServer Drivers for Modbus

Modbus Unsolicited Serial and Modbus ASCII

Step 8 - Set the Block Size for Reading Data from Device
(Doesn’t apply to Unsolicited Serial Protocol)

The New Device - Block Sizes dialog sets the largest block size for
reading I/O (coils) and data tables (Registers). Click Next.

Modbus/TCP, Modbus RTU Serial, Modbus ASCII

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 29

Reasons to Change the Default Block Sizes include:

• The device may not support block read/write operations of
the default size. Smaller Modicon PLCs and non-Modicon
devices may not support the maximum data transfer lengths
supported by the Modbus Ethernet network.
• The device may contain non-contiguous addresses. If this is
the case and the driver attempts to read a block of data that
encompasses undefined memory, the device will probably
reject the request.

Step 9 - Set Location of the Variable Import File

The New Device - Variable Import Settings dialog sets the location of
the Concept or ProWORX variable import file the driver will use when
the automatic tag database generation feature is enabled for this
device. Refer to the KEPServer Enterprise online help for details on
how to use this feature.

Publication 2711P-UM002B-EN-P - March 2007

30 Configuring KEPServer Drivers for Modbus

Step 10 - View and Verify the Device Summary Information

The New Device - Summary dialog provides a summary of the new

device settings. Verify the information and click Finish.

Modbus/TCP

Modbus RTU Serial

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 31

Modbus Unsolicited Serial

Modbus ASCII

Step 11 - Save Project File

From the Menu bar, select File>Save or click the Save button.

Publication 2711P-UM002B-EN-P - March 2007

32 Configuring KEPServer Drivers for Modbus

Create Tags With a channel and device defined, you are ready to create tags
within the KEPServer software. These tags are used to link to the
controller addresses. The procedure is similar to creating an HMI tag
database. For details on valid data types and addressing, see
Appendices A - E.

1. In the right hand pane, click on the Click to add a static tag text.
Or right-click on a device (such as the Momentum_IEC) in the
left hand pane and select New Tag…

The Tag Properties dialog opens.

2. Enter the tag name and address along with a description as

shown in the following dialogs.

TIP Clickon ? next to the Address field for a list of

valid addresses.

Publication 2711P-UM002B-EN-P - March 2007

 Configuring KEPServer Drivers for Modbus 33

Replace the ’xx with your table number.

For example, the Address for table #1
would be 40101.

KEPServer allows you to validate the address based on the device you
will be talking to. Your project configuration should now list the tags
in the right pane.

3. From the Menu bar, select File>Save or click the Save

button.

Publication 2711P-UM002B-EN-P - March 2007

34 Configuring KEPServer Drivers for Modbus

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 4

Testing KEPServer Communications

Objectives This chapter shows how to test KEPServer communications on a

development computer to verify your project configuration and tags.

Use the OPC Quick Client Included with the KEPServer server installation is a simple tool for
testing OPC tags called the OPC Quick Client. When you create a
new KEPServer configuration, there are several system and
communications tags that are also created. In this section, you'll verify
communication with the tags you’ve created before incorporating
them into an HMI project.

1. Select Tools>Launch OPC Quick Client from the main menu. Or

click on the OPC Quick Client icon.

2. Highlight the name of the device that you plan to test in the left
pane. This will display the tags that you have created in the right
pane.

3. Right-click the tag in the right pane that you plan to test, and
select Synchronous Write.

35 Publication 2711P-UM002B-EN-P - March 2007

36 Testing KEPServer Communications

The resulting window not only allows you to write new data to
the controller, but it also displays the current value of the tag.

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 5

Making KEPServer Drivers and Tags

Available in RSView Studio

Objectives Now that you’ve configured and tested KEPServer communications,

you are ready to make the KEPServer driver and tags available in
RSView Studio. This chapter will show you how to add an OPC data
server to the RSView Studio project.

Create an OPC Data Server KEPServer is an OPC data server. You need to add this server to the
RSView Studio project.

1. Open RSView Enterprise or RSView Studio for Machine Edition

from the development computer.

2. Open your application.

3. In the Application Explorer pane (left), right-click on the

application name at the root of the tree view and select New
Data Server>OPC…

4. Click the button next to the OPC Server Name

textbox.

37 Publication 2711P-UM002B-EN-P - March 2007

38 Making KEPServer Drivers and Tags Available in RSView Studio

5. Select KEPServerEnterprise and click OK.

6. Enter a name for the KEPServer driver and click OK.

Informational messages appear at the bottom of your RSView

Studio window indicating that the Server has started and is
available on the computer.

Any tags created earlier in the KEPServer software are now available
for the HMI using the standard RSView Studio tag browser.

TIP Remove all serial drivers from the RSLinx Enterprise

Communication Setup that would conflict with the port
configured for Modbus.

Publication 2711P-UM002B-EN-P - March 2007

 Making KEPServer Drivers and Tags Available in RSView Studio 39

Browse KEPServer Tags

TIP For additional information on working with tags, see Chapter 6
of the RSView Machine Edition User’s Guide (ViewME-UM003)
available under the RSView Studio help menu.

1. Double click or right-click on an object to open its Properties

dialog.

2. On the Connections tab, click the Value's button to open

the FactoryTalk Tag Browser.

3. Right-click on the heading in the left pane and select Refresh All
Folders to obtain the list of tags in the KEPServer data server.

4. Drill down and select the tags from the folder you created.

This is the Channel name

created in KEPServer.

This is the Device name

created in KEPServer.

5. Click OK to close the window.

Publication 2711P-UM002B-EN-P - March 2007

40 Making KEPServer Drivers and Tags Available in RSView Studio

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 6

Installing KEPServer Drivers on Terminal

Objectives If you plan to run the Machine Edition project on a PanelView Plus or
PanelView Plus CE terminal, the corresponding CE-based KEPServer
components must be installed. This chapter will show you how to use
the Firmware Upgrade Wizard (FUW) utility to install the KEPServer
drivers on the terminals.

Firmware Upgrade Wizard The Firmware Upgrade Wizard (FUW) will add the necessary
KEPServer components to the terminal firmware. You can:
• create a firmware upgrade card (compact flash card) which you
then load in the card slot of terminal to upgrade firmware.
• upgrade firmware in a terminal that is connected to your
desktop computer using a Serial, Ethernet, or Network
connection via RSLinx Enterprise (for supported protocols).
The Firmware Upgrade Wizard is available in RSView Studio. Refer to
the FUW Help for additional information.

Preparing Terminal for Firmware Upgrade

Before starting the Firmware Upgrade Wizard, follow the steps below
to prepare the terminal for a successful upgrade.
1. Backup all .MER files on the terminal to an external storage card
or network.
2. Delete all applications on the terminal.
3. Record any Ethernet communication settings, such as IP address,
subnet masks, and gateways by selecting Terminal
Settings>Network and Communications>Network
Connections>Network Adapters>IP Address.
4. Disable the Auto-start feature on the terminal by selecting
Startup Options>RSView ME Station Startup and select Go to
Configuration Mode.
5. Reset the terminal.

41 Publication 2711P-UM002B-EN-P - March 2007

42 Installing KEPServer Drivers on Terminal

Copy FUP Files to Download the Firmware Upgrade (FUP) files with the KEPServer
drivers to your development computer before using the FUW.
Development Computer
The FUP files are available on the Firmware Upgrade Media Kit (Cat.
No. 2711P-RU31O) which you can order through your local
Allen-Bradley distributor. Run the *.exe file to unzip the files. Unzip
the files to this directory:
Documents and Settings\All User Documents\RSView Enterprise\ME\Firmware Upgrade

TIP The Firmware Upgrade Wizard is available at

http://.support.rockwellautomation.com under Downloads.

Upgrade Firmware using a This section shows how to upgrade firmware in a PanelView Plus
terminal using a Compact Flash Card. This is a two step-process. First,
Compact Flash Card you create a firmware upgrade card with the necessary firmware files.
Second, you load this card in the terminal to upgrade the firmware.

1. Creating Firmware Upgrade Card

1. Start the Firmware Upgrade Wizard. Select Start>Rockwell
Software>RSView Enterprise>Firmware Upgrade Wizard.

2. Select Create firmware upgrade card.

• In the Firmware card location text box, select the destination for
the compact flash files (folder on the hard drive or physical
location of the compact flash card, e.g., E:\).
• From the Existing terminal list, select the type of PanelView Plus
terminal you are upgrading, then press Next.

TIP To add a KEPWare driver to a PanelView Plus 400/600

terminal, use a compact flash card.

Publication 2711P-UM002B-EN-P - March 2007

 Installing KEPServer Drivers on Terminal 43

3. From the Firmware source folder list, select the location of the
firmware files. The default location is C:\Program
Files\Rockwell Software\RSView Enterprise\FUPs.
From the Upgrade firmware version list, select the version of the
firmware you want to upgrade to, then press Next.

4. Select the appropriate KEPServer drivers and press Next. If the

selected FUP file does not support the KEPServer drivers, this
dialog will not appear.

IMPORTANT Each driver consumes 150Kbytes to 250Kbytes of disk-on-chip

memory space. Only install drivers to be used on the Windows
CE terminals. You can always add others drivers later if needed.

Publication 2711P-UM002B-EN-P - March 2007

44 Installing KEPServer Drivers on Terminal

5. Select Finish to copy the firmware source files to the location

specified in step 2.

TIP If the files were created in a separate folder on a local

hard drive, copy the files to the root directory of the
compact flash card.

2. Upgrade Firmware in Terminal using Firmware Upgrade Card

1. Insert the compact flash card into the card slot of a powered
PanelView Plus terminal. A dialog appears indicating the
firmware upgrade is about to occur.

2. Press Upgrade to begin the firmware upgrade.

IMPORTANT Do NOT remove the compact flash card while the upgrade is in
process.

Publication 2711P-UM002B-EN-P - March 2007

 Installing KEPServer Drivers on Terminal 45

3. If other PanelView Plus terminals exist on the same Ethernet

network, the following error may display:
Error registering name on network (may be duplicate). Change
in system Control Panel and try again.
Ignore this error. It will be corrected during the upgrade. Press
OK to acknowledge error and wait for terminal to reset.

TIP If a USB mouse is available you can acknowledge this

error by selecting OK.

4. On touch or touch/screen terminals, you must calibrate the

touch screen by selecting pointers in all four corners of the
screen and pressing the middle of the screen when prompted.
5. Ignore the following message if it appears. It means RSView ME
is being installed. Do not touch the two buttons that appear
with this message.
Machine edition may be corrupted. Do you want to download
firmware?
6. When the upgrade is complete, a dialog appears requesting you
to remove the compact flash card from the card slot. Remove the
card and press F8 or Exit to reset the terminal.

7. Communication settings are cleared when the terminal is

upgraded. If Ethernet communications is used, reconfigure the
Ethernet communication settings using the values recorded
when preparing the terminal.

TIP Kepware drivers were installed on terminal. On

PanelView Plus CE terminals, you can go to the Storage
Card/KEPServer/Drivers folder to verify that the driver dll
exists.

8. Replace the .MER files that you backed up before starting the
upgrade or download a new .MER file to the terminal.
9. Load the .MER file and run the project.

TIP You can configure your application to start automatically

on power cycle under Startup Options.

Publication 2711P-UM002B-EN-P - March 2007

46 Installing KEPServer Drivers on Terminal

Upgrade Firmware using a You can upgrade the firmware in a terminal that is connected to a
desktop computer using a Serial, Ethernet or Network (using RSLinx
Network (Ethernet) Enterprise) connection.
Connection • Network connection requires RSLinx Enterprise where you
select the terminal on an existing network.
• Serial connection requires a RAS connection to be set up on
computer. During the RAS setup, you select the COM port.
• Ethernet connection requires that you enter the terminal’s IP
Address.
Both the Serial and Ethernet connection requires the PanelView Plus
File Transfer Utility running on the terminal and should only be used
when other methods fail.

This section shows how to upgrade firmware in a PanelView Plus

terminal using a Network connection via Ethernet communications.

1. Start the Firmware Upgrade Wizard. Select Start>Rockwell

Software>RSView Enterprise>Firmware Upgrade Wizard.

Publication 2711P-UM002B-EN-P - March 2007

 Installing KEPServer Drivers on Terminal 47

2. Select Upgrade firmware on terminal and press OK.

3. Select Network connection and press Next.

Use the Ethernet and Serial connections only if the firmware
upgrade is unsuccessful.

4. Locate the PanelView Plus terminal on your Ethernet network

via its IP address.
Skip to Step 6 if you found the terminal. If you do not see the
terminal, right click on the Ethernet driver and add the device to
the browse tree.

Publication 2711P-UM002B-EN-P - March 2007

48 Installing KEPServer Drivers on Terminal

5. Double-click on EthernetIP Devices. Select the appropriate

terminal and press OK.

PanelView Plus CE 700

PanelView Plus CE 1000

PanelView Plus CE 1250

6. Enter the IP address for the terminal and press OK.

7. Select the terminal to be upgraded and press OK.

Publication 2711P-UM002B-EN-P - March 2007

 Installing KEPServer Drivers on Terminal 49

8. From the Firmware source folder text box, select the location of
the firmware files. The default location is C:\Program
Files\Rockwell Software\RSView Enterprise\FUPs.

From the Upgrade firmware version list, select the version of the
firmware you want to upgrade to, then select Next.

PanelView Plus 700

9. Select the appropriate KEPServer drivers and select Next. If the

selected FUP file does not support the KEPServer drivers, this
dialog will not appear.

IMPORTANT Each driver consumes 150Kbytes to 250Kbytes of disk-on-chip

memory space. Only install drivers to be used on the Windows
CE terminals. You can always add others drivers later if needed.

Publication 2711P-UM002B-EN-P - March 2007

50 Installing KEPServer Drivers on Terminal

10. Press Finish to start the upgrade.

11. Press Yes to continue the upgrade process. If the terminal was
properly prepared for the upgrade, no applications should be
running.

12. Firmware files are downloaded to the terminal. This may take
several minutes to 15 minutes. When the download is complete,
press OK to reset the terminal.

If other PanelView Plus terminals exist on the same Ethernet

network, the following error may display:
Error registering name on network (may be duplicate). Change
in system Control Panel and try again.
Ignore this error. It will be corrected during the upgrade. Press
OK to acknowledge error and wait for terminal to reset.

TIP If a USB mouse is available you can acknowledge the

error by selecting OK.

Publication 2711P-UM002B-EN-P - March 2007

 Installing KEPServer Drivers on Terminal 51

13. On touch or touch/screen terminals, you must calibrate the

touch screen by selecting pointers in all four corners of the
screen and pressing the middle of the screen when prompted.
14. Ignore the following message if it appears. It means RSView ME
is being installed. Do not touch the two buttons that appear with
the message.
Machine edition may be corrupted. Do you want to download
firmware?
15. Communication settings are cleared when the terminal is
upgraded. If Ethernet communications is used, reconfigure the
Ethernet communication settings using the values recorded
when preparing the terminal.
16. Replace the .MER files that you backed up before starting the
upgrade or download the new .MER files to the terminal.
17. Load the .MER file and run the project.

TIP You can configure your application to start automatically

on power cycle under Startup Options.

Publication 2711P-UM002B-EN-P - March 2007

52 Installing KEPServer Drivers on Terminal

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 7

Compiling, Downloading, and Running

Application

Objectives This chapter shows how to:

• compile a runtime RSView ME application file
• download and load application on terminal.
• connect terminal to a Modbus network
• run application.

Compile a Runtime You are now ready to build the Machine Edition runtime (.mer) file to
be downloaded to a PanelView Plus/PanelView Plus CE terminal.
Application File
TIP Before compiling the .mer file, verify that the correct .pfe
B
project file is selected. See page 16.

1. From the menu bar, select Application>Create Runtime

Application…

2. Save the project to the default Runtime folder location on the

hard drive. Enter the filename and click
After a few minutes, you should have an .mer project ready to
download to the terminal. The KEPServer .pfe project file
created in Chapter 3 is merged into the .mer file.

53 Publication 2711P-UM002B-EN-P - March 2007

54 Compiling, Downloading, and Running Application

Download Application to Typically, downloading an application to a terminal is accomplished

using the RSLinx Enterprise File Transfer Utility. You can download an
Terminal application using a Compact Flash card, a serial connection, or an
Ethernet connection. Refer to the RSView Machine Edition User
Manual (ViewME-UM003).

1. From the menu bar, select Tools>Transfer Utility…

2. On the Download tab, click the button.

3. Select the .mer file and click

You should see the following dialog.

4. Select the target PanelView Plus using the Ethernet browsing

capability of RSLinx Enterprise. Right-click on the Ethernet,
AB_ETH-1 driver and select Start Browsing.

5. Highlight your PanelView Plus or PanelView Plus CE terminal

and click

Publication 2711P-UM002B-EN-P - March 2007

 Compiling, Downloading, and Running Application 55

6. When the download is complete, click and turn

your attention to the terminal.

Load Application
[F1] button

7. Click the Load Application [F1] Button.

8. Select the .mer file and click the Load [F2] button.

9. Click Yes [F7] to replace the terminal's current RSLinx Enterprise

communication configuration with the one stored in the
application file.

Publication 2711P-UM002B-EN-P - March 2007

56 Compiling, Downloading, and Running Application

Connect Terminal to Before running your application, you need to connect the PanelView
Plus/PanelView Plus CE terminal to a Modbus network using either:
Modbus Network • Modbus serial cables or
• Modbus Ethernet cables

Modbus Serial Cables

The serial port on a PanelView Plus/PanelView Plus CE terminal is

different than a desktop computer. Typically, you just need to add a
null modem adapter to a cable that works with a desktop computer.
To create a cable specifically for the PanelView Plus/PanelView Plus
CE, use the cable descriptions in this section for Modbus Serial
KEPServer drivers (RTU Serial, Unsolicited Serial, ASCII Serial).

Terminal to Controller 9-pin/25-pin/8-pin Port

Modbus Controller or
PanelView Plus RS-232 Port Desktop PC MicroLogix/ DNI
9-pin DCE 9-pin(1) 25-pin 8-pin DIN(2)
1
2 RXD 2 3 4
3 TXD 3 2 7
4 DTR 4 20
5 COM 5 7 2
6 DSR 6 6
7 RTS 7 4
8 CTS 8 5
9
Connector Shell Chassis Gnd

(1)
The 2711-NC13, 2711-NC14, or 2706-NC13 cables have a 9-pin D-Shell connector.
(2)
The 2711-NC21 or 2711-NC22 have an 8-pin Mini DIN connector.

Terminal to Controller with an RJ45 Port

Terminal RJ-45 Connector

DB-9 (male) (male)
1
2
2 RD 3
3 TD 4
5 SG 5
7
6
Shield
Hood 8

Publication 2711P-UM002B-EN-P - March 2007

 Compiling, Downloading, and Running Application 57

Null Modem Cable

To construct a null modem cable, refer to the following pinout:

Terminal Controller
9-pin 25-pin 9-pin
3 3 3
2 2 2
5 7 5
1 8 1
4 20 4
6 6 6
8 5 8
7 4 7

Modbus Ethernet Cables

The RJ45 connector pinout for the PanelView Plus or VersaView

Terminal is shown below.

Connector Pin Pin Name

RJ45 1 TD+
Connector
2 TD-
8
3 RD+
1
4 NC
5 NC
6 RD-
7 NC
8 NC
Shield Connection Chassis Gnd

Use point-to-point, 10/100Base-T cables with cross over pin-outs

(such as 2711P-CBL-EX04) when connecting the Ethernet port on the
PanelView Plus directly to a logic controller’s Ethernet port or a
computer 10/100Base-T port. Use standard Ethernet cables when
connecting to a switch or hub.

Publication 2711P-UM002B-EN-P - March 2007

58 Compiling, Downloading, and Running Application

Run Application Now that your PanelView Plus/PanelView Plus CE terminal contains
the loaded application and is connected to a Modbus network, you
can run the application.

1. Click the Run Application [F2] button to launch application.

Load Application
[F2] button

Publication 2711P-UM002B-EN-P - March 2007

 Chapter 8

Troubleshooting

Objectives This chapter lists common errors that occur during application
development as well as errors that occur during runtime.

To diagnose error messages that are generated while developing the

KEPServer driver, refer to the KEPServer online help for the
appropriate driver and refer to the error description.

Common Errors Some of the most common errors made during application
development are listed below:
• The .mer file was compiled with the wrong .pfe file. See page 16
for details on setting the default project file.
• The KEPServer driver was not downloaded to the terminal. On
PanelView Plus CE terminals, you can verify that the driver is in
the Storage card/KEPServer/drivers folder.
• The wrong serial cable is connected to the PanelView Plus or
PanelView Plus CE terminal. Refer to Chapter 7.

Runtime Errors The table below lists errors that may occur during runtime. Possible
causes and solutions are provided for each error.

Error Error Type Possible Cause Solution

Device ’<device name> is not Serious 1. The connection between the device and the 1. Verify the cabling between the terminal and
responding terminal is broken. the device. The serial pinout for the
PanelView Plus/PanelView Plus CE terminal
2. The communication parameters for the is different than a computer.
connection are incorrect.
2. Verify that the specified communi- cation
parameters match those of the device.
3. The named device may have been assigned
an incorrect network ID. 3. Verify that the network ID given to the
named device matches that of the actual
device.
Unable to write to ’<address>’ Serious 1. The named device may not be connected to 1. Check the PLC network connections.
on device ’<device name>’ the network.

2. The named device may have been assigned 2. Verify that the network ID given to the
an incorrect Network ID. named device matches that of the actual
device.
3. The named device is not responding to write
requests.

4. The address does not exist in the PLC.

59 Publication 2711P-UM002B-EN-P - March 2007

60 Troubleshooting

Error Error Type Possible Cause Solution

Bad address in block [x to y] on Fatal This error is reported when the driver attempts Modify the client application to request
device ’<device name>’ addresses to read a location in a PLC that does not exist. addresses within the range of the device.
failing in this For example, in a PLC that only has holding
block registers 40001 to 41400, requesting address
41405 would generate this error. Once this error
is generated, the driver will not request the
specified block of data from the PLC again. Any
other addresses being requested that are in the
same block will also be invalid.
Bad received length [x to y] on Fatal The driver attempted to read a block of memory Ensure that the range of memory exists for the
’<device name>’ addresses in the PLC. The PLC responded with no error, but PLC.
failing in this did not provide the driver with the requested
block block size of data.

Publication 2711P-UM002B-EN-P - March 2007

 Appendix A

Data Types
This appendix describes valid data types for creating tags. This
information is also available in the Modbus driver online help in
KEPServer Enterprise.

Data Types Description(2)

Boolean Single bit
Word Unsigned16 bit value
bit 0 is the low bit
bit 15 is the high bit
Short Signed16 bit value
bit 0 is the low bit
bit 14 is the high bit
bit 15 is the sign bit
Dword Unsigned 32 bit value
bit 0 is the low bit
bit 31 is the high bit
Long Signed 32 bit value
bit 0 is the low bit
bit 30 is the high bit
bit 31 is the sign bit
BCD Two byte packed BCD
Value range is 0 - 9999.
Behavior is undefined for values beyond this range.
LBCD Four byte packed BCD
Value range is 0 - 99999999.
Behavior is undefined for values beyond this range.
Float 32-bit floating point value.
The driver interprets two consecutive registers as a
floating-point value by making the second register the high
word and the first register the low word.
Float Example: If register 40001 is specified as float, bit 0 of
register 40001 would be bit 0 of the 32-bit word, and bit 15 of
register 40002 would be bit 31 of the 32-bit word.
String(1) Null terminated ASCII string
Supported on Modbus Model, includes HILo LoHi byte order
selection.
Modbus Serial
8 byte and 16 byte Omni Flow Computer string data
(1)
The descriptions assume first word low data handling of 32-bit data types.
(2) Not available for Modbus ASCII protocol.

61 Publication 2711P-UM002B-EN-P - March 2007

62 Data Types

Publication 2711P-UM002B-EN-P - March 2007

 Appendix B

Modbus/TCP Address Definitions

This appendix describes valid tag addressing for Modbus/TCP

communications. This information is also available in the Modbus/TCP
driver online help in KEPServer Enterprise. KEPServer drivers use
decimal addressing.

Output Coils
Output Coils
Decimal Addressing Hexadecimal Addressing
Type Boolean
Format 0xxxxx H0yyyyy
Security Read/Write
Range 000001 - 065536 H000001 - H01000

Example:
The 255th output coil would be addressed as ’0255’ using decimal
addressing or ’H0FF’ using hexadecimal addressing.

Input Coils
Input Coils
Decimal Addressing Hexadecimal Addressing
Type Boolean
Format 1xxxxx H1yyyyy
Security Read(1)
Range 100001 - 165536 H100001 - H11000
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Example:
The 127th input coil would be addressed as ’1127’ using decimal
addressing or ’H17F’ using hexadecimal addressing.

63 Publication 2711P-UM002B-EN-P - March 2007

64 Modbus/TCP Address Definitions

Internal Registers Defaults are shown in bold.

Internal Registers
Decimal Addressing Hexadecimal Addressing
Type Word, Short, BCD
Format 3xxxxx H3yyyyy
Security Read only (1)
Range 300001 - 365536 H300001 - H31000

Type Boolean
Format 3xxxxx.bb H3yyyyy.c
Security Read only (1)
Range 3xxxxx.0 - 3xxxxx.15 3yyyyy.0 - 3yyyyy.F

Type Float, DWord, Long, LBCD

Format 3xxxxx H3yyyyy
Security Read only (1)
Range 300001 - 365535 H3000D1 - H3FFFF
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Arrays

Arrays are also supported for the internal register addresses. The
syntax for declaring an array (using decimal addressing) is 3xxxx[cols]
with assumed row count of 1 and 3xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the internal register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus/TCP Address Definitions 65

Holding Registers Default types are shown in bold.

Holding Registers
Decimal Addressing Hexadecimal Addressing
Type Word, Short, BCD
Format 4xxxxx H4yyyyy
Security Read/Write
Range 400001 - 465536 H400001 - H410000

Type Boolean
Format 4xxxxx.bb H4yyyyy.c
Security Read/Write
Range 4xxxxx.0 - 4xxxxx.15 4yyyyy.0 - 4yyyyy.F

Type Float, DWord, Long, LBCD

Format 4xxxxx H4yyyyy
Security Read/Write
Range 400001 - 465535 H400001 - H4FFFF

Type String HiLo Byte Order

Format 400001.2H - 465536.240H H400001.2H - H4FFFF.240H
.Bit is string length, .Bit is string length,
Range 2 - 240 bytes Range 2 - 240 bytes
Security Read/Write
Range 400001 - 465536 H400001 - H4FFFF
Length 2-240 Bytes Length 2 - 240 Bytes

Type String LoHi Byte Order

Format 400001.2L - 465536.240L H400001.2L - H4FFFF.240L
.Bit is string length, .Bit is string length,
Range 2 - 240 bytes Range 2 - 240 bytes
Security Read/Write
Range 400001 - 465536, H400001 - H4FFFF,
Length 2-240 Bytes Length 2 - 240 Bytes

Publication 2711P-UM002B-EN-P - March 2007

66 Modbus/TCP Address Definitions

String Support

The Modbus model supports reading and writing holding register

memory as an ASCII string. When using holding registers for string
data, each register will contain two bytes of ASCII data. The order of
the ASCII data within a given register can be selected when the string
is defined. The length of the string can be 2 to 240 bytes and is
entered in place of a bit number. The length must be entered as an
even number. The byte order is specified by appending either an H or
L to the address.

String Example:
To address a string starting at 40200 with a length of 100 bytes and
HiLo byte order enter:
40200.100H

Arrays

Arrays are also supported for the holding register addresses. The
syntax for declaring an array (using decimal addressing) is 4xxxx[cols]
with assumed row count of 1 and 4xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the holding register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus/TCP Address Definitions 67

Mailbox Addressing Default types are shown in bold.

Mailbox Addressing
Decimal Addressing Hexadecimal Addressing
Type Word, Short, BCD
Format 4xxxxx H4yyyyy
Security Read/Write
Range 1 - 65536 1 - 10000

Type Boolean
Format 4xxxxx.bb H4yyyyy.c
Security Read/Write
Range xxxxx.0 - xxxxx.15 yyyyy.0 - yyyyy.F

Type Float, DWord, Long, LBCD

Format 4xxxxx H4yyyy
Security Read/Write
Range 1 - 65535 1 - FFFF

Arrays

Arrays are also supported for the holding register addresses. The
syntax for declaring an array (using decimal addressing) is 4xxxx[cols]
with assumed row count of 1 and 4xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the holding register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

68 Modbus/TCP Address Definitions

Instromet Addressing
Decimal Addressing
Area Short Word Registers (16 Bit)
Type Word, Short
Range 400000 - 400199
Security Read only

Area Short Word Registers (32 Bit)

Type DWord, Long
Range 400200 - 400399
Security Read only

Area Floating Point Registers (32 Bit)

Type Float
Range 400400 - 400599
Security Read only

TIP The normal Instromet addressing does not include the 40xxx. It
is included here to keep the addresses in a normal Modbus
compatible mode.

Publication 2711P-UM002B-EN-P - March 2007

 Appendix C

Modbus ASCII Address Definitions

This appendix describes valid tag addressing for Modbus ASCII

communications. This information is also available in the Modbus
driver online help in KEPServer Enterprise. KEPServer drivers use
decimal addressing.

Output Coils
Output Coils
Decimal Addressing
Type Boolean
Format 0xxxxx
Security Read/Write
Range 000001 - 065535

Example:
The 255th output coil would be addressed as ’0255’ using decimal
addressing or ’H0FF’ using hexadecimal addressing.

Input Coils
Input Coils
Decimal Addressing
Type Boolean
Format 1xxxxx
Security Read(1)
Range 100001 - 165535
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Example:
The 127th input coil would be addressed as ’1127’ using decimal
addressing or ’H17F’ using hexadecimal addressing.

69 Publication 2711P-UM002B-EN-P - March 2007

70 Modbus ASCII Address Definitions

Internal Registers Defaults are shown in bold.

Internal Registers
Decimal Addressing
Type Word, Short, BCD
Format 3xxxxx
Security Read only (1)
Range 300001 - 365535

Type Boolean
Format 3xxxxx.bb
Security Read only (1)
Range 3xxxxx.0 - 3xxxxx.15

Type Float, DWord, Long, LBCD

Format 3xxxxx
Security Read only
Range 300001 - 365534
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Arrays

Arrays are also supported for the internal and holding register
addresses. The syntax for declaring an array (using decimal
addressing) is 3xxxx[cols] with assumed row count of 1 and
3xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the internal register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus ASCII Address Definitions 71

Holding Registers Default types are shown in bold.

Holding Registers
Decimal Addressing
Type Word, Short, BCD
Format 4xxxxx
Security Read/Write
Range 400001 - 465535

Type Boolean
Format 4xxxxx.bb
Security Read/Write
Range 4xxxxx.0 - 4xxxxx.15

Type Float, DWord, Long, LBCD

Format 4xxxxx
Security Read/Write
Range 400001 - 465534

Publication 2711P-UM002B-EN-P - March 2007

72 Modbus ASCII Address Definitions

Publication 2711P-UM002B-EN-P - March 2007

 Appendix D

Modbus Unsolicited Serial Address

Definitions

This appendix describes valid tag addressing for Modbus Unsolicited

ASCII communications. This information is also available in the
Modbus driver online help in KEPServer Enterprise. KEPServer drivers
use decimal addressing.

Output Coils
Output Coils
Decimal Addressing
Type Boolean
Format 0xxxxx
Security Read/Write
Range 000001 - 009999

Input Coils
Input Coils
Decimal Addressing
Type Boolean
Format 1xxxxx
Security Read
Range 100001 - 109999

73 Publication 2711P-UM002B-EN-P - March 2007

74 Modbus Unsolicited Serial Address Definitions

Internal Registers Defaults are shown in bold.

Internal Registers
Decimal Addressing
Type Word, Short, BCD
Format 3xxxxx
Security Read only (1)
Range 300000 - 309999

Type Boolean
Format 3xxxxx.bb
Security Read only (1)
Range 3xxxxx.0 - 3xxxxx.15

Type Float, DWord, Long, LBCD

Format 3xxxxx
Security Read only (1)
Range 300001 - 309998
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Arrays

Arrays are also supported for the internal and holding register
addresses. The syntax for declaring an array (using decimal
addressing) is 3xxxx[cols] with assumed row count of 1 and
3xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the internal register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus Unsolicited Serial Address Definitions 75

Holding Registers Default types are shown in bold.

Holding Registers
Decimal Addressing
Type Word, Short, BCD
Format 4xxxxx
Security Read/Write
Range 400001 - 409999

Type Boolean
Format 4xxxxx.bb
Security Read/Write
Range 4xxxxx.0 - xxxxx.15

Type Float, DWord, Long, LBCD

Format 4xxxxx
Security Read/Write
Range 400001 - 409998

Type String HiLo or LoHiByte Order

Format 400001.2H - 409999.240H
.Bit is string length,
Range 2 - 240 bytes
Security Read/Write
Range 400001 - 409999
Length 2 - 240 bytes

Publication 2711P-UM002B-EN-P - March 2007

76 Modbus Unsolicited Serial Address Definitions

String Support

The Modbus model supports reading and writing holding register

memory as an ASCII string. When using holding registers for string
data, each register will contain two bytes of ASCII data. The order of
the ASCII data within a given register can be selected when the string
is defined. The length of the string can be 2 to 240 bytes and is
entered in place of a bit number. The length must be entered as an
even number. The byte order is specified by appending either an H or
L to the address.

String Example:
To address a string starting at 40200 with a length of 100 bytes and
HiLo byte order enter:

40200.100H

Publication 2711P-UM002B-EN-P - March 2007

 Appendix E

Modbus (RTU) Serial Address Definitions

This appendix describes valid tag addressing for Modbus (RTU) Serial
communications. This information is also available in the Modbus
driver online help in KEPServer Enterprise. KEPServer drivers use
decimal addressing.

Output Coils
Output Coils (Function Codes: 01, 05, 15)
Decimal Addressing Hexadecimal Addressing
Type Boolean
Format 0xxxxx H0yyyyy
Security Read/Write
Range 000001 - 065536 H000001 - H0FFFF

Example:
The 255th output coil would be addressed as ’0255’ using decimal
addressing or ’H0FF’ using hexadecimal addressing.

Input Coils
Input Coils (Function Code 02)
Decimal Addressing Hexadecimal Addressing
Type Boolean
Format 1xxxxx H1yyyyy
Security Read(1)
Range 100001 - 165536 H100001 - H1FFFF
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Example:
The 127th input coil would be addressed as ’1127’ using decimal
addressing or ’H17F’ using hexadecimal addressing.

77 Publication 2711P-UM002B-EN-P - March 2007

78 Modbus (RTU) Serial Address Definitions

Internal Registers Defaults are shown in bold.

Internal Registers (Function Code 04)

Decimal Addressing Hexadecimal Addressing
Type Word, Short, BCD
Format 3xxxxx H3yyyyy
Security Read only (1)
Range 300001 - 365536 H300001 - H310000

Type Boolean
Format 3xxxxx.bb H3yyyyy.c
Security Read only (1)
Range 3xxxxx.0 - 3xxxxx.15 H3yyyyy.0 - H3yyyyy.F

Type Float, DWord, Long, LBCD

Format 3xxxxx H3yyyy
Security Read only (1)
Range 300001 - 365535 H300001 - H3FFFF
(1)
For unsolicited device 127.0.0.1.0, these locations are Read/Write.

Arrays

Arrays are also supported for the internal register addresses. The
syntax for declaring an array (using decimal addressing) is 3xxxx[cols]
with assumed row count of 1 and 3xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the internal register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus (RTU) Serial Address Definitions 79

Holding Registers Default types are shown in bold.

Holding Registers (Function Codes: 03, 06(1), 16)

Decimal Addressing Hexadecimal Addressing
Type Word, Short, BCD
Format 4xxxxx H4yyyyy
Security Read/Write
Range 400001 - 465536 H400001 - H41000

Type Boolean
Format 4xxxxx.bb H4yyyyy.c
Security Read/Write
Range 4xxxxx.0 - 4xxxxx.15 H4yyyyy.0 - H4yyyyy.F

Type Float, DWord, Long, LBCD

Format 4xxxxx H4yyyyy
Security Read/Write
Range 400001 - 465535 H400001 - H4FFFF

Type String HiLo Byte Order

Format 400001.2H - 465536.240H H400001.2H - H4FFFF.240H
.Bit is string length, .Bit is string length,
Range 2 - 240 bytes Range 2 - 240 bytes
Security Read/Write
Range 400001 - 465536 H400001 - H4FFFF
Length 2-240 Bytes Length 2 - 240 Bytes

Type String LoHi Byte Order

Format 400001.2L - 465536.240L H400001.2L - H4FFFF.240L
.Bit is string length, .Bit is string length,
Range 2 - 240 bytes Range 2 - 240 bytes
Security Read/Write
Range 400001 - 465536, H400001 - H4FFFF,
Length 2-240 Bytes Length 2 - 240 Bytes
(1)
Function Code 06 cannot be used with string types.

Publication 2711P-UM002B-EN-P - March 2007

80 Modbus (RTU) Serial Address Definitions

String Support

The Modbus model supports reading and writing holding register

memory as an ASCII string. When using holding registers for string
data, each register will contain two bytes of ASCII data. The order of
the ASCII data within a given register can be selected when the string
is defined. The length of the string can be 2 to 240 bytes and is
entered in place of a bit number. The length must be entered as an
even number. The byte order is specified by appending either an H or
L to the address.

String Example 1:
To address a string starting at 40200 with a length of 100 bytes and
HiLo byte order, enter:
40200.100H

String Example 2:
To address a string starting at 40500 with a length of 78 bytes and
LoHi byte order, enter:
40500.78L

Arrays

Arrays are also supported for the holding register addresses. The
syntax for declaring an array (using decimal addressing) is 4xxxx[cols]
with assumed row count of 1 and 4xxxx[rows][cols].

For Word, Short and BCD arrays, the base address + (rows * cols)
cannot exceed 65536.

For Float, DWord, Long and Long BCD arrays, the base address +
(rows * cols * 2) cannot exceed 65535.

For all arrays, the total number of registers being requested cannot
exceed the holding register block size that was specified for this
device.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus (RTU) Serial Address Definitions 81

Magnetek Address The following table provides the general ranges of data available for a
Magnetek GPD 515 Drive. Consult the Magnetek Modbus RTU
Descriptions Technical Manual, part number TM4025, for information on how
specific drive parameters can be accessed using Modbus RTU
addressing. In all cases, the letter H (used to signify Hex addressing)
should precede the desired address.

Default data types for dynamically defined tags are shown in bold
where appropriate.

Magnetek GPD 515 Addressing - Hexadecimal Format

Address Range Data Type Access
Command Registers H40001 - H4000F Word, Short, Boolean Read-Write
Bit Level Access H4xxxx.0 - H4xxxx.F
Monitor Registers H40010 - H4001A Word, Short, Boolean Read Only
Bit Level Access H4xxxx.0 - H4xxxx.F
Driver Parameter Registers H40020 - H40097 Word, Short, Boolean Read Only
(Monitor Only)
Bit Level Access H4xxxx.0 - H4xxxx.F
Driver Parameter Registers H401000 - H4050D Word, Short, Boolean Read/Write
Bit Level Access H4xxxx.0 - H4xxxx.F
Special Registers H44FFDD ACCEPT Word, Short Write Only
H44FFDD ENTER

Addressing Example
To access the drive’s Operation Status (address 02BH), enter the
following address in you client application.

H4002B

Important Notes
• When adding a Magnetek device to your OPC Server project,
make sure the setting Use Zero Based Addressing is not checked
(page 27). If this parameter is not set correctly, the Modbus RTU
driver will offset all of your Magnetek addresses by 1.
• Arrays are supported for holding register locations for all data
types except boolean. There are two methods of addressing an
array. Examples are given using holding register locations.
4xxx [rows] [cols]
4xxx [cols] - assumes rows is equal to 1
• Rows multiplied by cols cannot exceed the block size that has
been assigned to the device for the register type.

Publication 2711P-UM002B-EN-P - March 2007

82 Modbus (RTU) Serial Address Definitions

Elliott Flow Computer Default data types for dynamically defined tags are shown in bold
where appropriate.
Address Descriptions
Elliott Flow Computer Addressing
Address Range Data Type Access
Output Coils 000001 - 065536 Boolean Read-Write
Input Coils 100001 - 165536 Boolean Read Only
Internal Registers 300001 - 365536 Word, Short, Boolean Read Only
300001 - 365535 Float, DWord, Long, LBCD
3xxxxx.0 - 3xxxxx.15 Boolean
Holding Registers 400001 - 465536 Word, Short, BCD (1) Read-Write
400001 - 465535 Float, DWord, Long, LBCD,
4xxxxx.0 - 4xxxxx.15 Boolean

Important Notes
• Address ranges 405001 to 405315 and 407001 to 407315 are 32
bit registers. Addresses in the range of 405001 to 405315 use a
default data type of Long. Addresses in the range of 407001 to
407315 use a default data type of Float. Since these address
registers are 32 bit, only Float, DWord, Long or LBCD data types
are allowed. Arrays are not allowed for these special address
ranges.
• Arrays are supported for internal and holding register locations
(see note 1 above for exceptions) for all data types except
Boolean. There are two methods of addressing an array.
Examples are given using holding register locations.
4xxxx [rows] [cols]
4xxxx [cols] (this method assumes rows is equal to one)

• Rows multiplied by cols cannot exceed the block size that has
been assigned to the device for the register type. For arrays of 32
bit data types, rows multiplied by cols multiplied by 2 cannot
exceed the block size.

Publication 2711P-UM002B-EN-P - March 2007

 Modbus (RTU) Serial Address Definitions 83

Omni Address Descriptions Default data types for dynamically defined tags are shown in bold
where appropriate.

OMNI Addressing
Address Range Data Type Access
Digital I/O Point 1001 - 1024 Boolean Read-Write
Programmable Boolean 1025 - 1088 Boolean Read-Write
Point
Meter Run Status and 1n01 - 001n59 Boolean Read-Write
Alarm Points 1n76 - 1n99
n = Number of Meter Run
Micro Motion 1n60 - 1n75 Boolean Read-Write
Alarm Status Points n=Number of Meter Run
User Scratch Pad 1501 - 1599 Boolean Read-Write
Boolean Points 1601 - 1649
User Scratch Pad One 1650 - 1699 Boolean Read/Write
Shot Points
Command Boolean 1700 - 1798 Boolean Read/Write
Points/Variables
Meter Station Alarm and 1801 - 1899 Boolean Read/Write
Status Points
Prover Alarm and 1901 - 1967 Boolean Read/Write
Status Points
Meter Totalizer 2n01 - 2n37 Boolean Read/Write
Roll-over Flags n = Number of Meter Run
Misc. Meter Station 2601 - 2623 Boolean Read/Write
Alarm and Status
Station Totalizer 2801 - 2851 Boolean Read/Write
Roll-over Flats
Station Totalizer 2852 - 2862 Boolean Read/Write
Decimal Resolution 2865 - 2999

Publication 2711P-UM002B-EN-P - March 2007

84 Modbus (RTU) Serial Address Definitions

OMNI Addressing - 16 Bit Integer Data Addresses

Address Range Data Type Access
Custom Data 3001 - 3040 Short, Word, BCD Read-Write
Packet #1
Custom Data 3041 - 3056 Short, Word, BCD Read-Write
Packet #2
Custom Data 3057 - 3096 Short, Word, BCD Read/Write
Packet #3
Misc. 16-Bit Integer Data 3097 - 3099 Short, Word, BCD Read/Write
3737 - 3799
3875 - 3899
Meter Run 16-Bit 3n01 - 3n52 Short, Word, BCD Read/Write
Integer Data n=Number of Meter
Scratchpad 16-Bit 3501 - 3599 Short, Word, BCD Read/Write
Integer Data
User Display #1 3601 - 3608 Short, Word, BCD Read/Write
User Display #2 3609 - 3616 Short, Word, BCD Read/Write
User Display #3 3617 - 3624 Short, Word, BCD Read/Write
User Display #4 3625 - 3632 Short, Word, BCD Read/Write
User Display #5 3633 - 3640 Short, Word, BCD Read/Write
User Display #6 3641 - 3648 Short, Word, BCD Read/Write
User Display #7 3649 - 3656 Short, Word, BCD Read/Write
User Display #8 3657 - 3664 Short, Word, BCD Read/Write
Access Raw Data 3701 - 3736 Short, Word, BCD Read/Write
Archive Records
Meter Station 16-Bit 3800 - 3842 Short, Word, BCD Read/Write
Integer Data
Meter #1 Batch Sequence 3843 - 3848 Short, Word, BCD Read/Write
Meter #2 Batch Sequence 3849 - 3854 Short, Word, BCD Read/Write
Meter #3 Batch Sequence 3855 - 3860 Short, Word, BCD Read/Write
Meter #4 Batch Sequence 3861 - 3866 Short, Word, BCD Read/Write

Flow Computer Time/Date 3867 - 3874 Short, Word, BCD Read/Write

Prover 16-Bit Integer Data 3901 - 3999 Short, Word, BCD Read/Write

Publication 2711P-UM002B-EN-P - March 2007

 Modbus (RTU) Serial Address Definitions 85

OMNI Addressing - 8 Character ASCII String Data

Address Range Data Type Access
Meter Run ASCII Data 4n01 - 4n39 String Read-Write
n=Number of Meter Run
Scratch Pad ASCII Data 4501 - 4599 String Read-Write

User Display Definition 4601 - 4640 String Read/Write

Variables
Station Auxiliary 4707 - 4710 String Read/Write
Input Variables
Meter Station 4801 - 4851 String Read/Write
ASCII Data
Meter Run 16-Bit 4707 - 4710 String Read/Write
Integer Data
Meter #1 Batch ID 4852 - 4863 String Read/Write
Meter #2 Batch ID 4864 - 4875 String Read/Write
Meter #3 Batch ID 4876 - 4887 String Read/Write
Meter #4 Batch ID 4888 - 4899 String Read/Write

Prover ASCII String Data 4901 - 4942 String Read/Write

OMNI Addressing - 32 Bit Integer Data

Address Range Data Type Access
Meter Run 32-Bit 5n01 - 5n99 Long, DWord, LBCD, Float Read-Write
Integer Data n=Number of Meter Run
Scratch Pad 32-Bit 5501 - 5599 Long, DWord, LBCD, Float Read-Write
Integer Data

Station 32-Bit Integer Data 5801 - 5818 Long, DWord, LBCD, Float Read-Write

Meter #1 Batch Size 5819 - 5824 Long, DWord, LBCD, Float Read-Write

Meter #2 Batch Size 5825 - 5830 Long, DWord, LBCD, Float Read-Write

Meter #3 Batch Size 5831 - 5836 Long, DWord, LBCD, Float Read-Write

Meter #4 Batch Size 5837 - 5842 Long, DWord, LBCD, Float Read-Write

Additional 32-Bit 5843 - 5899 Long, DWord, LBCD, Float Read-Write

Meter Run Data
Prover 32-Bit Integer Data 5901 - 5973 Long, DWord, LBCD, Float Read-Write

Compact Prover 5974 - 5999 Long, DWord, LBCD, Float Read-Write

TDVOL/TDFMP Pulses

Publication 2711P-UM002B-EN-P - March 2007

86 Modbus (RTU) Serial Address Definitions

OMNI Addressing - 32 Bit IEEE Floating Point Data

Address Range Data Type Access
Reserved Data 6001 - 7000 Float, Long, DWord, LBCD Read-Write
Digital to Analog Outputs 7001 - 7024 Float, Long, DWord, LBCD Read-Write
User Variables 7025 - 7088 Float, Long, DWord, LBCD Read-Write
Programmable 7089 - 7099 Float, Long, DWord, LBCD Read-Write
Accumulator
Meter Run Data 7n01 - 7n99 Float, Long, DWord, LBCD Read-Write
n=Number of Meter Run
Scratch Pad Data 7501 - 7599 Float, Long, DWord, LBCD Read-Write
PID Control Data 7601 - 7623 Float, Long, DWord, LBCD Read-Write
Miscellaneous 7624 - 7699 Float, Long, DWord, LBCD Read-Write
Meter Run Data
Miscellaneous Variables 7701 - 7799 Float, Long, DWord, LBCD Read-Write
Meter Station Data 7801 - 7899 Float, Long, DWord, LBCD Read-Write
Prover Data 7901 - 7918 Float, Long, DWord, LBCD Read-Write
Configuration Data 7919 - 7958 Float, Long, DWord, LBCD Read-Write
for Prover
Last Prove Data 7959 - 7966 Float, Long, DWord, LBCD Read-Write
Data Rejected During 7967 - 7990 Float, Long, DWord, LBCD Read-Write
Prove
Prove Run Data 7991 - 8050 Float, Long, DWord, LBCD Read-Write
Prove Average Data 8051 - 8079 Float, Long, DWord, LBCD Read-Write
Prove Run - Master Meter 8080 - 8199 Float, Long, DWord, LBCD Read-Write
Data
Proving Series Data 8200 - 8223 Float, Long, DWord, LBCD Read-Write
Data of Meter Being 8224 - 8230 Float, Long, DWord, LBCD Read-Write
Proved
Mass Prove Data 8231 - 8500 Float, Long, DWord, LBCD Read-Write
Miscellaneous 8501 - 8599 Float, Long, DWord, LBCD Read-Write
Meter Run #1
Miscellaneous 8601 - 8699 Float, Long, DWord, LBCD Read-Write
Meter Run #2
Miscellaneous 8701 - 8799 Float, Long, DWord, LBCD Read-Write
Meter Run #3
Miscellaneous 8801 - 8899 Float, Long, DWord, LBCD Read-Write
Meter Run #4
Station Previous Batch 8901 - 8999 Float, Long, DWord, LBCD Read-Write
Average Data

Publication 2711P-UM002B-EN-P - March 2007

 Modbus (RTU) Serial Address Definitions 87

OMNI Addressing - 16 Bit Integer Configuration Data

Address Range Data Type Access
Meter Run #1 13001 - 13013 Short, Word, BCD Read-Write
Meter Run #2 13014 - 13026 Short, Word, BCD Read-Write
Meter Run #3 13027 - 13039 Short, Word, BCD Read-Write
Meter Run #4 13040 - 13052 Short, Word, BCD Read-Write
Prover Configuration 13053 - 13073 Short, Word, BCD Read-Write
General Flow Configuration 13074 - 13084 Short, Word, BCD Read-Write
Serial Port Configuration 13085 - 13128 Short, Word, BCD Read-Write
PID Configuration 13129 - 13160 Short, Word, BCD Read-Write
PLC Data 13161 - 13299 Short, Word, BCD Read-Write
Peer to Peer Setup 13300 - 13499 Short, Word, BCD Read-Write

Raw Data Archive 13500 - 13999 Short, Word, BCD Read-Write

OMNI Addressing - 16 Character ASCII String Data

Address Range Data Type Access
Flow Computer 14001 - 14499 String Read-Write
Configuration

OMNI Addressing - 32-Bit Integer Data

Address Range Data Type Access
Flow Computer 15001 - 16999 Long, DWord, LBCD, Float Read-Write
Configuration

OMNI Addressing - 32-Bit IEEE Floating Point Data

Address Range Data Type Access
Flow Computer 17001 - 18999 Float, Long, DWord, LBCD Read-Write
Configuration

Publication 2711P-UM002B-EN-P - March 2007

88 Modbus (RTU) Serial Address Definitions

Daniel S500 Address Default data types are dynamically defined tags are shown in bold
where appropriate.
Descriptions

Daniel S500 Addressing

Address Hex Range Decimal Range Data Type Function Codes Access
Totals 000 - 0FF 4096 - 4351 Double 03 Read Only
Calculated/Measured 100 - 24F 4352 - 4687 Float 03, 16 Read/Write
Variables
Calculation Consultants 250 - 28F 4688 - 4751 Float 03, 16 Read/Write
Keypad Default Values 290 - 2AF 4752 - 4783 Float 03, 16 Read/Write
Alarm and Scaling 2B0 - 5FF 4784 - 5631 Float 03, 16 Read/Write
Constants
Status / Control 700 - 7FF 5888 - 6143 Boolean 02, 5 Read/Write
Alarms 800 - 8FF 6144 - 8191 Boolean 02 Read/Write

Publication 2711P-UM002B-EN-P - March 2007

 Index

Symbols I
.mer file 53 Instromet addressing 68
.pfe file 15
K
A KEPServer communications, testing 35
address definitions KEPServer drivers
MODBUS (RTU) Serial 77 Firmware Upgrade Wizard 41
MODBUS ASCII 69 installing on terminal 41
MODBUS Unsolicited ASCII 73 KEPServer drivers and tags
MODBUS/TCP 63 making available to RSView Studio 37
application KEPServer Enterprise 10
compiling 53
downloading 54
guidelines for creating 14 M
loading 55 Magnatek address definitions 81
running 58 MODBUS (RTU) Serial
application guidelines 13 address definitions 77
Danieles S500 address definitions 88
holding registers 79
C input coils 77
cables internal registers 78
Ethernet cables 57 OMNI address definitions 83
null modem cable 57 output coils 77
serial cables 56 MODBUS ASCII 11
channel 17 address definitions 69
compiling application 53 holding registers 71
input coils 69
internal registers 70
D output coils 69
Daniles S500 address definitions 88 MODBUS drivers
data types 61 adding a channel 17
downloading adding a device 24
application 54 configuring 17
Firmware Upgrade Wizard 42 MODBUS master/slave protocol
MODBUS (RTU) Serial 11
MODBUS Unsolicited Serial 11
E network illustrations 12
Elliott address definitions 82 MODBUS protocols
Ethernet cable 57 master/slave 11
MODBUS (RTU) Serial 11
F MODBUS ASCII 13
MODBUS Unsolicited Serial 11
firmware upgrade MODBUS/TCP 13
creating a firmware upgrade card 42 MODBUS Unsolicited ASCII
firmware upgrade wizard 41 address definitions 73
upgrading via network connection 46 holding registers 75
using a firmware upgrade card 44 input coils 73
Firmware Upgrade Wizard 10 internal registers 74
using a compact flash card 42 output coils 73
using network connection 46

Publication 2711P-UM002B-EN-P - March 2007

90 Index

MODBUS/TCP 13 R
address definitions 63 RSView Studio 9
holding registers 65 available KEPServer drivers 37
input coils 63 running application 58
Instromet addressing 65
runtime errors 59
internal registers 64
mailbox addressing 65
output coils 63 S
serial cables
N MODBUS cables 56
network connections 56 null modem cable 57
software, required
Firmware Upgrade Wizard 10
O KEPServer Enterprise 10
OMNI address definitions 83 RSView Studio 9
OPC Data Server 37
OPC Quick Client 35 T
tags
P browsing 37
project .pfe file creating 32
creating 15 terminal
saving 31, 33 connecting to MODBUS network 56
setting default project 16 troubleshooting
common operating errors 59
runtime errors 59

Publication 2711P-UM002B-EN-P - March 2007

Rockwell Automation Rockwell Automation provides technical information on the web to assist you
in using its products. At http://support.rockwellautomation.com, you can find
Support technical manuals, a knowledge base of FAQs, technical and application
notes, sample code and links to software service packs, and a MySupport
feature that you can customize to make the best use of these tools.

For an additional level of technical phone support for installation,

configuration and troubleshooting, we offer TechConnect Support programs.
For more information, contact your local distributor or Rockwell Automation
representative, or visit http://support.rockwellautomation.com.

Installation Assistance

If you experience a problem with a hardware module within the first 24

hours of installation, please review the information that's contained in this
manual. You can also contact a special Customer Support number for initial
help in getting your module up and running:

United States 1.440.646.3223

Monday – Friday, 8am – 5pm EST
Outside United Please contact your local Rockwell Automation representative for any
States technical support issues.

New Product Satisfaction Return

Rockwell tests all of its products to ensure that they are fully operational
when shipped from the manufacturing facility. However, if your product is
not functioning and needs to be returned:

United States Contact your distributor. You must provide a Customer Support case
number (see phone number above to obtain one) to your distributor in
order to complete the return process.
Outside United Please contact your local Rockwell Automation representative for
States return procedure.

PanelView Plus, VersaView, ControlLogix, Tech Connect, RSView Studio, RSView Machine Edition, RSNetWorx
for DeviceNet, RSLogix 5000, RSView, PLC-5, SLC, RSLinx, RSLinx Enterprise, RSNetWorx, Allen-Bradley, and
Rockwell Automation are trademarks of Rockwell Automation, Inc.

Trademarks not belonging to Rockwell Automation are property of their respective companies.

Publication 2711P-UM002B-EN-P - March 2007 76

Supersedes Publication 2711P-UM002A-EN-P - August 2004 Copyright © 2007 Rockwell Automation, Inc. All rights reserved. Printed in the U.S.A.