User Guide Modbus Rev.1.05 For Versions Mpmtel-03 s02.03.05
User Guide Modbus Rev.1.05 For Versions Mpmtel-03 s02.03.05
Technical Report
Title: Recloser Control Cubicle RC/TEL-01E(S). Modicon Modbus Protocol Implementation (Rev 1.02)
Author (s): D. Kosolapov ([email protected])
Approved by: M. Denisenko ([email protected])
Reviewed by: M. Golubov ([email protected])
[Importantly]
New engine. Protocol was rewritten.
[Change] Logic changed for points 10083, 10088-10092, 10094, 10095
[Change] Point 10114 Name and Description changed
[Change] Ia, Ib, Ic, In Measured range changed
[Change] Uab, Ubc, Uca, Urs, Ust, Uta Measured range was changed
[Change] Measured range was changed for all energy’s
[Change] Frequency resolution was changed
[Change] Resolution for Phase sequence was changed
[Change] Resolution for power flow was changed
[Change] MODBUS Exception Code 04 was added (Table 5.1)
[Change] Catchwords were changed
[Change] Iamax, Ibmax, Icmax, Inmax Trip are added
[Change] Reference to MODBUS Application Protocol Specification V1.1 is added (Section Introduction)
[Change] Assignment to RS232 port is added (Section Implementation)
[Change] UVmin, UFmin Trip are added. IO Modules are added to Function 02 Read Input Status
[Change] IO Modules Outputs are added to Function 05 Force Single Coil
[Change] New input coils (Local Control, Group X trip) are added.
[Change] New input coils (AutoABR) are added.
Five points were deleted from Table 1.1 - 1X references, input coils. They are absent in IEC
[Change]
versions of FW.
4 Contents RC/TEL-01E(S) - Modicon Modbus Protocol Implementation
Contents
1 INTRODUCTION ......................................................................................................................................... 5
2 IMPLEMENTATION..................................................................................................................................... 6
3 TRANSMISSION MODE ............................................................................................................................. 7
4 SUPPORTED FUNCTION CODES ............................................................................................................. 8
4.1 Function 01 Read Coil Status ............................................................................................................. 8
4.2 Function 02 Read Input Status ........................................................................................................... 9
4.3 Function 03 Read Holding Registers ................................................................................................ 12
4.4 Function 04 Read Input Registers .................................................................................................... 13
4.5 Function 05 Force Single Coil........................................................................................................... 17
4.6 Function 06 Preset Single Register .................................................................................................. 17
4.7 Function 15 (0F Hex) Force Multiple Coils ....................................................................................... 17
4.8 Function 16 (10 Hex) Preset Multiple Registers ............................................................................... 17
5 MODBUS EXCEPTION RESPONSES...................................................................................................... 18
RC/TEL-01E(S) - Modicon Modbus Protocol Implementation Introduction 5
1 INTRODUCTION
MODBUS Protocol is a messaging structure developed by Modicon in 1979, used to establish master-
slave/client-server communication between intelligent devices. It is a de facto standard, truly open and the
most widely used network protocol in the industrial manufacturing environment.
The purpose of this document is to describe the specific implementation of the Modicon Modbus protocol on
the Recloser Control Cubicle RC/TEL-01E(S) (ModbusTEL).
This document, in conjunction with the Modicon Modbus Protocol Reference Guide (PI-MBUS-300) and
MODBUS Application Protocol Specification V1.1, published by Modicon, Inc., provides complete information
on how to communicate with the RC/TEL-01E(S) via the ModbusTEL.
6 Implementation RC/TEL-01E(S) - Modicon Modbus Protocol Implementation
2 IMPLEMENTATION
The RC/TEL-01E(S) supports ModbusTEL protocol. ModbusTEL can be assigned to RS485 and RS232
ports and supposes transmit/receive data at 300, 600, 1200, 2400, 4800, 9600 and 19200 baud rates. Half-
duplex or full-duplex connections on RS-485 port are used. RC/TEL-01E(S) is always slave and supports
only RTU (binary) mode.
Valid slave device addresses are in the range of 0 – 247 decimal. The individual slave devices are assigned
addresses in the range of 1 – 247. A master addresses a slave by placing the slave address in the address
field of the message. When the slave sends its response, it places its own address in this address field of the
response to let the master know which slave is responding.
ModbusTEL support broadcast message receiving on address 0.
RC/TEL-01E(S) - Modicon Modbus Protocol Implementation Transmission Mode 7
3 TRANSMISSION MODE
ModbusTEL supports communication on a Modbus network using RTU (Remote Terminal Unit) mode, each
8–bit byte in a message contains two 4–bit hexadecimal characters. The main advantage of this mode is that
its greater character density allows better data throughput than ASCII for the same baud rate. Each message
must be transmitted in a continuous stream.
Supports format for each byte in RTU mode is:
Coding System:
• 8–bit binary, hexadecimal 0–9, A–F
• Two hexadecimal characters contained in each 8–bit field of the message
Bits per Byte:
• 1 start bit
• 8 data bits, least significant bit sent first
• 1 stop bit
Error Check Field:
• Cyclical Redundancy Check (CRC)
Start 1 2 3 4 5 6 7 8 Stop
The listing below shows the function codes supported by ModbusTEL. Codes are listed in decimal. ‘Yes’
indicates that the function is supported. ‘No’ indicates that it is not supported.
Table 4.1 – Supported function codes
4.1.1 Description
Reads the ON/OFF status of discrete outputs (0X references, coils) in the slave.
Broadcast is not supported.
The query message specifies the starting coil and quantity of coils to be read.
Coils are addressed starting at zero: coils 1–16 are addressed as 0–15.
Table 4.2 - 0X references, output coils
Address Settings Description
1)
00001 Trip Trip
00002 Close Close
00003 On (Grp1) Switch Group1 On
00004 On (Grp2) Switch Group2 On
00005 On (Grp3) Switch Group3 On
00006 On (Grp4) Switch Group4 On
00007 On (Prot) Switch protection On
00008 Off (Prot) Switch protection Off
00009 On (EF) Switch earth fault overcurrent element On
00010 Off (EF) Switch earth fault overcurrent element Off
00011 On (SEF) Switch sensitive earth fault element On
00012 Off (SEF) Switch sensitive earth fault element Off
00013 On (AR) Switch autoreclosing element On
00014 Off (AR) Switch autoreclosing element Off
00015 On (LL) Switch live line element On
00016 Off (LL) Switch live line element Off
1)
Trip operation is also possible when control mode is set Local.
RC/TEL-01E(S) - Modicon Modbus Protocol Implementation Supported Function Codes 9
NOTES:
1. Reserved – This coil is always 0. The coil status in the response message is packed as one coil per
bit of the data field. Status is indicated as: 1 = ON; 0 = OFF.
2. The following conditions are necessary to perform control of IO Modules from SCADA:
- IO mode is enabled in I/O settings;
- IO Output# has Type equal to Disable in I/O settings;
- IO faults are absent.
4.2.1 Description
Reads the ON/OFF status of discrete inputs (1X references) in the slave.
Broadcast is not supported.
The query message specifies the starting coil and quantity of coils to be read.
Coils are addressed starting at zero: coils 1–16 are addressed as 0–15.
Table 4.3 - 1X references, input coils
Address Settings Description
GENERAL
10001 Lockout All AR OCEF, AR SEF, AR SEF, ABR elements are set in O1 state
10002 Remote Off Control mode is set Local
Any of AR OCEF, AR SEF, AR UV or ABR elements set in one of O2, O3 or O4
10003 AR initiated
states
10004 Prot initiated Logical OR of AR initiated and Pickup signals
PICKUP
Pickup output of any of OC1+, OC2+, OC3+, OC1-, OC2-, OC3-, EF1+, EF2+,
10005 Pickup EF3+, EF1-, EF2-, EF3-, SEF+, SEF-, EFLL, OCLL, UF, UV1, UV2, UV3
elements activated
10006 P(OC1+) Pickup output of OC1+ activated
10007 P(OC2+) Pickup output of OC2+ activated
10008 P(OC3+) Pickup output of OC3+ activated
10009 P(OC1-) Pickup output of OC1- activated
10010 P(OC2-) Pickup output of OC2- activated
10011 P(OC3-) Pickup output of OC3- activated
10012 P(OCLL) Pickup output of OCLL activated
10013 P(EF1+) Pickup output of EF1+ activated
10014 P(EF2+) Pickup output of EF2+ activated
10015 P(EF3+) Pickup output of EF3+ activated
10016 P(EF1-) Pickup output of EF1- activated
10017 P(EF2-) Pickup output of EF2- activated
10018 P(EF3-) Pickup output of EF3- activated
10 Supported Function Codes RC/TEL-01E(S) - Modicon Modbus Protocol Implementation
4.3.1 Description
Read the binary contents of holding registers (4X references) in the slave.
Broadcast is not supported.
The query message specifies the starting register and quantity of registers to be read. Registers are
addressed starting at zero: registers 1–16 are addressed as 0–15.
NOTE: Date and time are established in the seconds beginning from 1970.
4.4.1 Description
Read the binary contents of input registers (3X references) in the slave.
Broadcast is not supported.
The query message specifies the starting register and quantity of registers to be read. Registers are
addressed starting at zero: registers 1–16 are addressed as 0–15.
Register Description
30005 Ua
30006 Ub
Phase to earth voltages 30007 Uc 0÷18kV 1V
30008 Ur
30009 Us
30010 Ut
Register Description
30011 Uab
30012 Ubc
Line to line voltages
30013 Uca 0-30kV 1V
30014 Urs
30015 Ust
30016 Uta
16 Supported Function Codes RC/TEL-01E(S) - Modicon Modbus Protocol Implementation
Measured
Measured value Register and Designation Resolution
range
Register Description
30017 A kVA
30018 B kVA
30019 C kVA
30020 A kW
Single and three phase total, 30021 B kW
active and reactive power 30022 C kW 0÷65535 1
30023 A kVAr
30024 B kVAr
30025 C kVAr
30026 KVA
30027 KVAr
30028 KW
Register Description
30029-30030 A+kVA*h
30031-30032 B+kVA*h
30033-30034 C+kVA*h
30035-30036 A+kVAr*h
30037-30038 B+kVAr*h
Single and three phase total and 30039-30040 C+kVAr*h
reactive energy related to 30041-30042 +kVA*h
forward and reverse power flow 30043-30044 +kVAr*h 0÷999999999 1
directions 30045-30046 A-kVA*h
30047-30048 B-kVA*h
30049-30050 C-kVA*h
30051-30052 A-kVAr*h
30053-30054 B-kVAr*h
30055-30056 C-kVAr*h
30057-30058 -kVA*h
30059-30060 -kVAr*h
Value
Meaning
Phase sequence from ABC and (Hex)
RST sides Phase seq. 0x00 ACB(RTS)
0x01 ABC(RST)
0x02 ?
Value
Meaning
OC, EF, SEF power flow (Hex)
direction 0x00 +
0x01 -
0x02 ?
NOTE 1: In order to obtain the value of frequency in Hz the value obtained from ModbusTEL must be
multiplied by 0.001.
NOTE 2: If appears situation when it is not possible to conduct the calculation of power factor or frequency
the ModbusTEL returns value equal 0x7FFF.
RC/TEL-01E(S) - Modicon Modbus Protocol Implementation Supported Function Codes 17
NOTE 3: In order to obtain the value of power factor the value obtained from ModbusTEL must be multiplied
by 0.001.
4.5.1 Description
Forces a single coil (0X reference) to either ON or OFF. When broadcast, the function forces the same coil
reference in all attached slaves.
If error in the processing of broadcast request, the exception response is not formed.
The setting of coils does not occur with the appearance of exception.
The list of coils is given in Table 4.2.
NOTE 1: The setting of coil in 0 brings not any changes in the RC/TEL-01E(S).
NOTE 2: The setting of "Reserved" coil in 0 or 1 brings not any changes in the RC/TEL-01E(S).
4.6.1 Description
Presets a value into a single holding register (4X reference). When broadcast, the function presets the same
register reference in all attached slaves.
If error in the processing of broadcast request, the exception response is not formed.
The list of coils is given Table 4.4.
4.7.1 Description
Forces each coil (0X reference) in a sequence of coils to either ON or OFF. When broadcast, the function
forces the same coil references in all attached slaves.
If error in the processing of broadcast request, the exception response is not formed.
The setting of coils does not occur with the appearance of exception.
The list of coils is given in Table 4.2.
NOTE 1: The setting of coil in 0 doesn’t affect on protection algorithms in the RC/TEL-01E(S).
NOTE 2: The setting of "Reserved" coil in 0 or 1 brings not any changes in the RC/TEL-01E(S).
4.8.1 Description
Presets values into a sequence of holding registers (4X references). When broadcast, the function presets
the same register references in all attached slaves.
If error in the processing of broadcast request, the exception response is not formed.
The list of coils is given in Table 4.4.
18 MODBUS Exception Responses RC/TEL-01E(S) - Modicon Modbus Protocol Implementation
The exception response message has two fields that differentiate it from a normal response:
Function Code Field: In a normal response, the server echoes the function code of the original request in
the function code field of the response. All function codes have a most–significant bit (MSB) of 0 (their values
are all below 80 hexadecimal). In an exception response, the server sets the MSB of the function code to 1.
This makes the function code value in an exception response exactly 80 hexadecimal higher than the value
would be for a normal response.
With the function code’s MSB set, the client's application program can recognize the exception response and
can examine the data field for the exception code.
Data Field: In a normal response, the server may return data or statistics in the data field (any information
that was requested in the request). In an exception response, the server returns an exception code in the
data field, defining the server condition that caused the exception.
ModbusTEL returns three types of errors; they are given in table 5.1. With the complete list of errors possible
it will become acquainted from the document of PI-MBUS-300.
Table 5.1 - MODBUS Exception Codes
MODBUS Exception Codes
Code Name Meaning
The function code received in the query is not an allowable action
for the slave. If a Poll Program Complete command was issued,
01 ILLEGAL FUNCTION
this code indicates that no program function preceded it.
This error can arise with the demand of the not supported function
The data address received in the query is not an allowable address
ILLEGAL DATA ADDRESS for the slave.
02
This error can arise in such a case when nonexistent data object
address is used in request.
A value contained in the query data field is not an allowable value
ILLEGAL DATA VALUE for the slave.
03
This error can arise during the attempt to set values at the moment
when RC/TEL-01E(S) set in the Remote Off (Local) mode.
SLAVE DEVICE FAILURE An unrecoverable error occurred while the slave was attempting to
04
perform the requested action.