TycoCCU3-MXMB 420
TycoCCU3-MXMB 420
TycoCCU3-MXMB 420
20 17 September 2012
CCU3/C-MXMB
TABLE OF CONTENTS
1. GENERAL..............................................................................................................................................5
1.1. INTRODUCTION ..................................................................................................................................5
1.2. ORDERING CONFIGURATIONS:............................................................................................................6
1.3. SYSTEM REQUIREMENTS FOR CCU3/C-MXMB PROGRAMMER ........................................................7
2. INSTALLATION...................................................................................................................................8
2.1. PARTS SUPPLIED ................................................................................................................................8
2.2. YOU WILL NEED .................................................................................................................................8
2.3. POWER REQUIREMENTS .....................................................................................................................8
2.4. BOARD LAYOUT ................................................................................................................................8
2.5. CONNECTING THE CCU3/C-MXMB ..................................................................................................9
2.6. MX NETWORK CONFIGURATION......................................................................................................11
2.6.1. CCU3/C-MXMB to TLI800 / TLI800EN Connection ..............................................................11
2.6.2. TLI800 Configuration..............................................................................................................12
2.6.3. TLI800EN Configuration.........................................................................................................13
2.6.4. TLI800 and TLI800EN Consys Setup ......................................................................................16
2.7. SINGLE PANEL CONFIGURATION ......................................................................................................18
2.7.1. Connecting the CCU3/C-MXMB to FIM COM3 .....................................................................18
2.7.2. Consys Setup for COM3 of the MX FIM..................................................................................18
2.8. SERIAL PORT MODBUS CONNECTIONS ..........................................................................................19
2.9. PROFIBUS CONNECTION ...............................................................................................................20
2.10. HOST PC CONNECTION ..................................................................................................................21
2.11. CCU3/C-MXMB POWER CONNECTION ........................................................................................22
2.12. NORMAL AND FAULT CONDITION INDICATORS ..............................................................................23
2.12.1. Operation of LEDs.................................................................................................................23
2.12.2. Supervision Relay ..................................................................................................................23
2.12.3. CCU3/PB PROFIBUS Card LEDs ........................................................................................23
3. MXMB OPERATION.........................................................................................................................24
3.1. MODBUS TCP ...............................................................................................................................24
3.2. PROFIBUS AND PROFISAFE........................................................................................................24
3.3. AUTRONICA MODE. .....................................................................................................................25
3.4. MIPLOC MODE. .............................................................................................................................25
3.5. MX DOOR / DAMPERS.....................................................................................................................25
3.6. MODBUS MAP OPTIONS ................................................................................................................26
4. STANDARD MODE MODBUS MAP ...............................................................................................27
4.1. MAP OVERVIEW...............................................................................................................................27
4.2. MODBUS MAP REGISTER AND BIT DETAILS ..................................................................................28
4.2.1. Submap Registers ....................................................................................................................28
4.2.2. CCUioNET Register Block ......................................................................................................28
4.2.3. MXNet Address Map Register Block........................................................................................29
4.2.4. MXNet Sector Status Map Register Block ...............................................................................29
4.2.5. Time and Date Registers..........................................................................................................30
4.2.6. MXMB Global Register Block .................................................................................................30
4.2.7. MX Panel Register Blocks – Example Panel Number 1, 2…...................................................31
4.2.8. Panel Status Registers .............................................................................................................31
4.2.9. Command Acknowledge Register (CAR) .................................................................................32
4.2.10. Loop Information...................................................................................................................33
4.2.11. Zone Status Information ........................................................................................................33
4.2.12. Point Status Information........................................................................................................34
4.2.13. Point Isolate / De-isolate Reply Registers .............................................................................34
4.2.14. Point Information Reply Registers.........................................................................................35
4.2.15. Panel Control Register ..........................................................................................................37
4.2.16. Point Isolate / De-isolate Request Registers..........................................................................38
4.2.17. Point Information Request Registers .....................................................................................38
5. CCU2 COMPATIBILITY MODE MAP ...........................................................................................40
5.1. MAP OVERVIEW...............................................................................................................................40
Copyright base2, 2012 2 of 93
All Rights Reserved
Rev: 4.20 17 September 2012
1. General
1.1. Introduction
The CCU3/C-MXMB provides a third party interface to a number of MX panels on an MXNet.
The CCU3/C-MXMB connects to the MXNet via a TLI-800 (TPI) interface card using RS232. For a single MX
panel installation, the CCU3/C-MXMB can be connected directly to COM3 of the MX panel FIM (Field Interface
Module) board and the TLI-800 card not used.
Two serial MODBUS interfaces are available on the CCU3/C-MXMB. They can be configured for RS232, RS485
or RS422 operation.
• CCU3/PB – Supports PROFIBUS and PROFISAFE. In PROFIBUS mode the first 76 bytes (608 bits) of
the submap data is mapped as cyclic input data. The first word of the cyclic output data is mapped as a
command register. Transitions from 0 to 1 in this register trigger global commands broadcast to all the
panels in the network. In PROFISAFE mode the first 71 bytes (568 bits) of submap data is mapped as
F-Input data. The first word of the F-Output data is mapped as a command register. Transitions from 0
to 1 in this register trigger global commands broadcast to all the panels in the network.
• CCU3/IO – Provides general-purpose I/O devices. The CCU3/IO has 4 relays that are controlled via
WRITE commands to the MODBUS map. The relay contacts can be used as inputs to an MX panel or
external equipment. There are also 10 supervised inputs whose status can be read from the MODBUS
map.
The MODBUS map of the CCU3/C-MXMB is configured using the CCU3/C-MXMB Programmer. There are 2
types of MODBUS map available.
• Global Map – The bits for every MX loop point and zone are present in the map at a fixed location.
• Submap – A custom map of bits can be configured by the user to reference addresses in the Global
Map. This allows the user to build a custom map consisting only of the data they require. The submap is
also used as the active map for AUTRONICA, PROFIBUS and PROFISAFE operation. The number of
bits in the submap is constant however the number that can be transferred varies depending on the
protocol.
Figure 1:CCU3/C-MXMB
Part Number: CCU3/E-MXMB. This configuration has a CCU3/E expansion card fitted to provide an Ethernet
connection for MODBUS TCP.
Figure 2:CCU3/E-MXMB
Part Number: CCU3/C232PB-MXPB. This configuration has a CCU3/PB expansion card fitted to support
PROFIBUS and PROFISAFE.
• 256MB Ram
• SVGA Monitor
2. Installation
MODBUS
Master MX Net with TLI-800
Com 3
TLI-800
Com 4 Com 1
CCU3/C-MXMB
For a networked MX installation COM1 on the CCU3/C-MXMB connects using an additional TLI-800 network
card. This card should be installed in the same enclosure as the CCU3/C-MXMB.
Earth 0V 24V
TLI-800 Card
PC
Modbus
For a single MX panel installation, the CCU3/C-MXMB can be connected to COM3 of the MX panel FIM (Field
Interface Module) board. A TLI-800 card is not required.
Earth 0V 24V
Single MX Panel
FIM Com3
PC
Modbus
Connect COM1 of the CCU3/C-MXMB to socket PL2 of the TLI800 or TLI800EN card using the
provided cable. (Order Code: CCU3-TLI800-B)
Pinout for TLI 800-B Cable Connection from the CCU3/C-MXMB to the TLI800
Network Interface Board on MX Panel
RJ12 Pin Number CCU3 Com 1 Pin Number
Orange 6pin (3.5 pitch) Weidmuller plug
6 NC
5 NC
4 NC
3 6
2 3
1 4
Table 1 CCU3-TLI800-B Cable
The TLI-800 Interface module is configured using 2 sets of DIP switches SW1 and SW2.
The TLI-800EN Interface module is configured using 3 sets of DIP switches SW1, SW2 and SW3.
In the “General | Network Overview” section select an unused network address and add a MZX
Node for the CCU3-MXMB. The network address DIP switches on the TLI800 card need to be set
to this value.
In the “General | Log Settings” section set the MZX node for the CCU3-MXMB as a Log Client. Set
ALL event priorities to be logged to the Client. Select “Skip No Response Data” if you are using
the “No Response” pointmap feature of Consys.
If you are using either the “No Response” or the “Door/Damper” pointmaps feature of Consys then
enable the broadcast of the respective message. If “Fast No Response Data” is selected ensure
that “Skip No Response Data” has also been selected in the Log Settings for the project.
Pinout for Direct Connection from the CCU3/C-MXMB to FIM Board Com3 on MX
Panel
RJ12 Pin Number CCU3 Com 1 Pin Number
Orange 6pin (3.5 pitch) Weidmuller plug
6 NC
5 NC
4 NC
3 3
2 6
1 4
Table 16
Pinout for Cable Connection from the CCU3/C-MXMB to a MODBUS RS232 Port
RS232 Wiring (DTE) CCU3 Com 4 Pin Number
Shield 1
RTS 2
TX 3
0V 4
CTS 5
RX 6
Table 18 RS232
Pinout for Cable Connection from the CCU3/C-MXMB to a MODBUS RS485 Port
RS485 Wiring CCU3 Com 4 Pin Number
NC 1
+ 2
- 3
0V 4
NC 5
NC 6
Table 19 RS485
# Item
1 Mode Indication LED
2 Status Indication LED
3 PROFIBUS Connector
Two LEDs built in to the module provide information on the state of the PROFIBUS module.
State Indication
Off Not online / No power
Green Online, data exchange
Flashing Green Online, clear
Flashing Red (1 flash) Parametrization error
Flashing Red (2 flashes) PROFIBUS Configuration error
Table 22 Operation Indication (LED1)
State Indication
Off Not online / No power
Green Online, data exchange
Flashing Green Online, Clear
Red Parametrization error
Table 23 Status Indication (LED2)
Pinout for Cable Connection from the CCU3/C-MXMB to the PC COM Port
PC COM Port DB9 Pin Number CCU3 Com 2 Pin Number
NC 1
6 2
2 3
5 4
4 5
3 6
Table 24 CCU3/PROG Cable
Figure 10: Pinout for Cable Connection between CCU3/C-MXMB and PC COM Port.
For correct installation and protection of the CCU3/C device the CCU3 must
be mounted on an earthed metal plate. This is important for correctly
dissipating any static discharge on the communication lines (as caused by an
electrical storm) and thereby preventing damage to this unit.
If a PROFIBUS/PROFISAFE interface has been configured then the relay will energise when the PROFIBUS
connection is not online and exchanging data.
If no PROFIBUS/PROFISAFE interface has been configured then the relay will energise in the event of a
supervision failure of a MODBUS interface.
• Green LED flashing - The interface is configured but not yet connected.
• Green LED on - The connection is online and in the data exchange state
• Yellow LED flashing – The CCU3/C-MXMB is halted due to a PROFISAFE error condition.
• Yellow LED on – The PROFIBUS module is not responding to the CCU3.
3. MXMB Operation
The CCU3/C-MXMB provides a third party interface to a number of MX panels on an MXNet.
The currently supported protocols are serial MODBUS, MODBUS TCP, PROFIBUS and PROFISAFE.
Serial MODBUS is always available on the CCU3/C-MXMB. The other protocols are automatically enabled when
the appropriate expansion card is configured. Addition of a CCU3/E enables MODBUS TCP; addition of a
CCU3/PB enables PROFIBUS and PROFISAFE.
There is also an option to change the word order in the MODBUS TCP packets.
The CCU3/E card also supports timekeeping. The CCU3/E-MXMB is able to update its time from a network
SNTP Server. If it has been set as a timekeeper this time will be broadcast to the MX Network.
All PROFIBUS/PROFISAFE data is mapped through the submap. While the other areas of the memory map are
still present in the MXMB, they are not accessible to the PROFIBUS/PROFISAFE protocols. The required
PROFIBUS/PROFISAFE map must be manually configured into the submap. The size of the data that can be
mapped is limited by the protocol selected. The Standard memory map should be selected in the MXMB.
In PROFIBUS mode the submap data is mapped as cyclic input data. The data is limited to 76 bytes (608 bits).
The first word of the cyclic output data is mapped as a command register. Transitions from 0 to 1 in this register
trigger global commands broadcast to all the panels in the network.
In PROFISAFE mode the submap data is mapped as F-Input data. The data is limited to 71 bytes (568 bits). The
first word of the F-Output data is mapped as a command register. Transitions from 0 to 1 in this register trigger
global commands broadcast to all the panels in the network. The bit definitions are the same as PROFIBUS.
The MXMB Map Type options change the structure and functioning of the global map and the submap.
• Standard Mode – Operates as a standard CCU3/C-MXMB. The submap is a simple collection of bits
mapped from the fixed map. Each bit in the submap represents the state of one device event. For
example, bit 10 is the alarm state of a point 01-A005. The CCU operates as a MODBUS slave.
• CCU2 Compatibility Mode – In this mode the CCU3/C-MXMB has the same submap and global map
format as the CCU2/C-MXMB, allowing the CCU3 to be a drop-in replacement for a CCU2. When
swapping from “Standard mode” to this option, the program automatically recalculates all of the memory
map positions and bit numbers for the global map and submap, without clearing the submap. The CCU
operates as a MODBUS slave.
• AUTRONICA Mode – Changes the submap to a mode compatible with AUTRONICA panels. The
submap is organised as one word register for each point, each register stores an integer value
representing the current device state. The global map is not accessible in this mode. The CCU operates
as a MODBUS slave.
• MIPLOC Mode – In MIPLOC mode the CCU operates as a MODBUS master updating the registers in
the PLC using the defined submap. The MIPLOC reserved registers are carried across in the CCU
submap, though only some are implemented. These reserved registers cannot be removed from the
submap.
If PROFIBUS or PROFISAFE operation is selected then the Standard map should be used.
The submap contains 320 registers (5120 bits). The submap is configurable. Each bit in the submap can mirror
any bit in the global map.
The MODBUS functions Read Coil Status (1), Read Input Status (2) and Force Multiple Coils (15) address the
memory as individual bits. The maximum address is 65535 so the master can only directly address the map for
2 MX panels. The submap can be used to work around this restriction.
The MODBUS functions Read Input Registers (4) and Set Multiple Registers (16) address the memory as word
registers so the master will be able to directly address the map for all 32 panels.
CCUioNET devices (CCU/I or CCU/IOs) can be connected to the CCU3/C-MXMB to provide supervised inputs
and relay outputs.
Reg Bit Bit Bit Bit Bit Bit Bit 9 Bit 8 Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
No 15 14 13 12 11 10
420 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 -
421 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16
422 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32
423 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48
424 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64
425 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80
426 - - - - - - - - - - - - 99 98 97 96
These are read-only registers. The MXMB is programmed with information about valid MXNet addresses. This
register block provides MXNet address information to the PLC.
If no panels are configured bit 0 of register 420 will be set to one.
These are read-only registers. This map provides the PLC with indications of the total network sector alarm
status. If any device in any of the 240 available sectors is in the alarm, fault or isolated status a bit will be set in
this map.
Bit15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Bit 0
Bit15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Bit 0
The isolate/de-isolate reply packet confirms that the panel has carried out the request. PLCs can check the
isolate status by reading the appropriate isolate bit.
The reply to the point data request will contain all the relevant information required by the PLC for the
appropriate point.
If Target Type
= Zone or
Sector
17 Area Number 0-240, 254
Table 43: Point Isolate / De-isolate Reply
The tables below list the data as it appears in this area for MX Speak V2,3,4 and 5. The message format is
slightly different to that for MX Speak 1 (Appendix B). Bytes 21 and 22 have been changed to reserved and byte
55 has been introduced for the device type.
If Target Type
= Zone or
Sector
13 Area Number 0-240, 254
Table 46: Point Isolate / De-isolate Request
The submap contains 320 registers (5120 bits). The submap is configurable. Each bit in the submap can mirror
any bit in the global map.
The MODBUS functions Read Coil Status (1), Read Input Status (2) and Force Multiple Coils (15) address the
memory as individual bits. The maximum address is 65535 so the master can only directly address the map for
6 MX panels. The submap can be used to work around this restriction.
The MODBUS functions Read Input Registers (4) and Set Multiple Registers (16) address the memory as word
registers so the master will be able to directly address the map for all 32 panels.
CCUioNET devices (CCU/I or CCU/IOs) can be connected to the CCU3/C-MXMB to provide supervised inputs
and relay outputs.
Reg Bit Bit Bit Bit Bit Bit Bit 9 Bit 8 Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
No 15 14 13 12 11 10
420 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 -
421 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16
422 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32
423 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48
424 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64
425 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80
426 - - - - - - - - - - - - 99 98 97 96
These are read-only registers. The MXMB is programmed with information about valid MXNet addresses. This
register block provides MXNet address information to the PLC.
If no panels are configured bit 0 of register 420 will be set to one.
These are read-only registers. This map provides the PLC with indications of the total network sector alarm
status. If any device in any of the 240 available sectors is in the alarm, fault or isolated status a bit will be set in
this map.
Date Register
If the TLI800 node is set as the time and date keeper then this register shall hold the date, to be transmitted to
the MXNet.
Register 489 is used for network date information; the value for each bit is as below:
Bit 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Bit 0
64 32 16 8 4 2 1 8 4 2 1 16 8 4 2 1
Year Month Day
Register 489
Time Register
If the TLI800 node is set as the time and date keeper then this register shall hold the time, to be transmitted to
the MXNet.
Register 490 and 491 are used for network time information, the value for each bit is as below:
Bit15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Bit 0
- - - - 32 16 8 4 2 1 32 16 8 4 2 1
Not Used Minutes Seconds
Register 490
Bit15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 Bit 0
- - - - - - - - - - - 16 8 4 2 1
Hours
Register 491
The isolate/de-isolate reply packet confirms that the panel has carried out the request. PLCs can check the
isolate status by reading the appropriate isolate bit.
The reply to the point data request will contain all the relevant information required by the PLC for the
appropriate point.
The Panel Resetting bit is active for 20 seconds after the panel is reset.
The tables below list the data as it appears in this area for MX Speak V2,3,4 and 5. The message format is
slightly different to that for MX Speak 1 (Appendix B). Bytes 21 and 22 have been changed to reserved and byte
55 has been introduced for the device type.
If Target Type
= Zone or
Sector
13 Area Number 0-240, 254
Table 65: Point Isolate / De-isolate Request
If Target Type
= Zone or
Sector
17 Area Number 0-240, 254
Table 66: Point Isolate / De-isolate Reply
6. MIPLOC Mode.
Bit Num
0 WDog Watchdog toggling every 20 seconds
1 MFlt MX OFF-line is set on a PTP Interface Error
2 SysFlt System Fault is not implemented
3 ComDne Set after a command has completed
4 IldIns Illegal Instruction is not implemented
5 KypMde Keypad Mode is not implemented
6 NewEvt Set after a bit has changed in the MIPLOC map (MXMB submap)
7 Unused Unused
Bit Num
0 Cmd0
1 Cmd1
2 Cmd2
3 Cmd3
4 Reserved Reserved
5 Reserved Reserved
6 Reserved Reserved
7 Reserved Reserved
8 Spare Spare
9 Spare Spare
10 Spare Spare
11 Spare Spare
12 Spare Spare
13 Spare Spare
14 ComReq Command Request Valid
15 EnbKpad Enable Minerva Keypad
Cmd Command
1 Panel Reset
2 Panel Silence
3 Reset New Event Bit
4 Reset Illegal Instruction
5 Reset System Fault
6 Not defined
7 Fire Alarm
1. The PLC will examine the ComDne bit in the MIPLOC Status word and wait until it is cleared by
MIPLOC.
2. PLC Sets ComCde in PLC Status word to the desired command code.
3. The PLC set the ComReq bit in the PLC Status word to initiate the processing command.
4. MIPLOC polls the PLC by reading the PLC Status word.
5. MIPLOC will detect that the ComReq bit is set and will read and action the command code in ComCde.
6. When complete MIPLOC will set ComDne in its status word and this will be transferred to the PLC.
7. The PLC will detect that the ComDne bit has been set showing that the command has been completed.
8. The PLC will clear the ComReq bit in the status word.
9. MIPLOC will detect the change in ComReq and clear the ComDne bit.
A useful feature is the ability to make a submap of up to 5120 bits from the bits in the global map. This allows the
user to mirror bits from the global map in the submap. For instance, bit 8345 in the global map may be mapped
to bit 0 in the submap. This gives the user flexibility in the layout of the MODBUS map.
To remove a panel select the panel in the MX Network then press the Remove Panel button.
Timekeeper – Send time to Network: CCU is the timekeeper of the MX panel network. Modbus Mater should
write a timestamp to CCU3 Time and Date registers.
Always reply to Supervision Requests: If ticked, the CCU replies to Supervision requests sent from any panels
that are not in the Fire Panel list.
To remove a zone mapping select the zone mapping in the Sector Map then press the
RemoveFromSectormap button.
The user selects which bits to add to the submap from the global map and the order in which they are arranged.
The submap may include any bits from the global map including CCU3/IO bits.
To add bits to a submap go to the Submap page, by clicking on the Submap tab at the top of the window (see
figure 30). To add a bit to a submap find the bit that you wish to add in the Global map on the left hand side of
the screen. Remember you can expand and collapse branches by clicking the ‘+’ and ‘-‘ signs. Select the bit then
the click Add button. The bit should appear in the submap on the right-hand side of the screen. If the Add button
is ‘greyed out’ then a valid bit has not been selected.
Blank bits or unused addresses may be added to the submap by adding the Unused Entry in the Global Map
Tree to the submap or clicking the Unused button.
To remove a bit from the submap select the bit from the submap on the right-hand side of the screen and then
press the Remove button. The bit should disappear from the submap.
It is possible to add the same bit to the submap more than once. Change the position of entries in the submap
by dragging them to the desired location.
ATTN: These parameters must be identical for all nodes on the MXNet. Also the Network Peer Limit value
must be set to equal or exceed the number of nodes on the network.
The reply delay is the time between the master’s MODBUS request and the answer from the CCU3/C-
MXMBMB. This delay gives the master time to turn off its transmitter when RS485 is being used.
The baud rate and parity of the MODBUS communications is also specified here.
MODBUS Interface 0
Is the configuration page for CCU3 Comport 4.
MODBUS Interface 1
Is the configuration page for CCU3 Comport 3. You can disable this port if you wish.
SNTP – A CCU3/E-MXMB is able to update its time from a network SNTP Server. A CCU3/E plug-in board and
an Ethernet connection are required. If the CCU3/E-MXMB has been set as a timekeeper this time will be
broadcast to the MX Network.
MODBUS TCP – Sets the word order in MODBUS packets sent over TCP when an Ethernet connection is used.
MXMB Options: Map Type – This option changes the structure and functioning of the submap. Changing this
option causes a short delay while the map is rebuilt.
• Standard Mode – Operates as a standard CCU3/C-MXMB. The submap is a simple collection of bits
mapped from the fixed map. Each bit in the submap represents the state of one device event. For
example, bit 10 is the alarm state of a point 01-A005.
• AUTRONICA Mode – Changes the submap to a mode compatible with AUTRONICA panels. The
submap is organised as one word register for each point, each register stores an integer value
representing the current device state.
• MIPLOC Mode – The CCU emulates a Minerva MIPLOC interface. This allows for a Minerva / MIPLOC
site to be upgraded to MX / CCU3 without requiring reprogramming of the PLC. In MIPLOC mode the
CCU operates as a MODBUS master updating the registers in the PLC using the defined submap. Use
of the submap will allow any differences between the MX and Minerva loops to be catered for. The
MIPLOC had some reserved registers for doing panel commands, MIPLOC status, panel time/date,etc.
These are carried across in the CCU submap, though only some are implemented. The reserved
registers cannot be removed from the submap. See the MIPLOC chapter of this document for more
information.
• CCU2 Compatibility Mode - Setting this option changes the CCU3/C-MXMB to have a similar submap
and global map format to the CCU2/C-MXMB, allowing the CCU3 to be a drop-in replacement for a
CCU2. When swapping from “Standard mode” to this option, the program automatically recalculates all
of the memory map positions and bit numbers for the global map and submap, without clearing the
submap.
MXMB Options: Latch Points in Alarm – Select this option to latch point alarms into the CCU3/C-MXMB. The
alarm bit will only clear when the panel is reset, not when the point clears.
MXMB Options: Pointmap Status Bit Use – This defines the use of the status bit in the MX panel pointmap. The
options are:
MXMB Options: Zonemap Status Bit Use – This defines the use of the status bit in the MX panel zonemap. The
options are:
MIPLOC Options – These settings only apply when the CCU is in MIPLOC mode.
• PLC Base Register Address - the address in the PLC where the MIPLOC table starts.
• TCP Connection to PLC - Check to use a TCP connection to the PLC from the CCU. Edit boxes appear
when this box is checked to allow entry of the IP addresses of up to four PLC hosts.
• MIPLOC Map Type - There are 4 default MIPLOC submap formats and a fifth option of “Custom” for a
user defined map. Note that these options require a MX fire panel to be added before they can generate
the submap. If multiple MX panels have been added, the default MIPLOC submaps all use the first MX
panel. Changing this option causes a delay while the map is rebuilt.
To plug the computer into the CCU3/C-MXMB, please use the CCU3-PROG cable provided. ( refer to the
section 2.8.4 listing the pinout descriptions if you need to make a cable ). Connect this cable from the desired
COM port of the computer to Com 2 on the CCU3/C-MXMB.
Before programming is commenced the PC’s comport must be set in the CCU3/C-MXMB Programmer to the
port that the CCU3/C-MXMB is connected to. To do this select Update | Programming Options from the Main
Menu.
To program:
The CCU is powered and working before programming.
Press the Update | Firmware and Data or select Update | Data only from the Main Menu. Programming should
commence and a success message will be displayed when finished.
8. Communication
Code Description
1 Read Coil Status
2 Read Input Status
4 Read Input Registers
15 Force Multiple Coils
16 Preset Multiple Registers
Field Example
MODBUS Address 5
MODBUS Function 1
Starting Address Hi 0
Starting Address Low 18
Number of Points Hi 0
Number of Points Low 37
CRC16 (Low) ???
CRC16 (High) ???
An example of reply message for Read Coil Status command is shown below. 1 indicates ON, 0 indicates OFF.
Field Example
MODBUS Address 5
MODBUS Function 1
Number of bytes returned 5
Data (Coils 23-16) CD 1100 1101
Data (Coils 31-24) 6B 0110 1011
Data (Coils 39-32) B2 1011 0010
Data (Coils 47-40) 1E 0001 1110
Data (Coils 52-48) 1B 0001 1011
CRC16 (Low) ???
CRC16 (High) ???
If returned coils are not a multiple of 8, the remaining bits are padded with zeros. The status of coils 23 to 16 is
1100 1101, which means Coil 16 is ON, Coil 17 is OFF, … Coil 23 is ON.
Coil 53, 54 and 55 are not requested but zero padded to fill 8 bit data.
Request:
1. MODBUS Address
2. MODBUS Function
3. Starting bit address (High byte)
4. Starting bit address (Low byte)
5. Number of bits (High byte)
6. Number of bits (Low byte)
7. CRC16 (Low byte)
8. CRC16 (High byte)
Reply:
1. MODBUS Address
2. MODBUS Function
3. Number of bytes returned
4. Data (number of data bytes is ‘number of bytes returned’)
5. CRC16 (Low byte)
6. CRC16 (High byte)
The ‘Starting MODBUS bit address’ is always rounded down to its byte boundary and so the number of bytes
returned will encompass the number of bits requested. Hence the bits are returned on their byte boundary (i.e.
bit positions within the bytes are as their appear in the MODBUS map).
The status of the returned bits is indicated as: 1 = ON; 0 = OFF.
Note: If the number of bits returned does not divide evenly into eight then the remaining bits, front and back
padding, will reflect the status of those bits with the same remaining valid addresses in the Global MODBUS
map.
Example
Request:
Field Example
MODBUS Address 5
MODBUS Function 2
Starting Bit Address (High) 1
Starting Bit Address (Low) BF
Number of Bits (High) 0
Number of Bits (Low) 12
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 must be calculated using the appropriate formula by the MODBUS master and added in
the last word position (it takes up 2 bytes).
This command will read 0012hex (18 decimal) bits from MODBUS device 5 starting at MODBUS address
01BFhex (447 decimal).
The CCU3/C-MXMB will return the bits from address 01BFhex to 01D1hex. Address 01BF is eighth bit in the
56th byte hence the starting byte returned is the 56th byte therefore the address of the first bit returned is
01B8hex. The bits are packed into bytes in the reply message. The first data byte of the reply contains the bits of
the lowest 8 addresses, with the lowest or first address being represented by the LSB (Least Significant Bit).
Reply:
Notice the start address in this example is rounded down to the byte boundary and the number of bytes returned
is rounded to include the top bit address.
Field Example
MODBUS Address 5
MODBUS Function 2
Number of Bytes Returned 4
Data (Address 01B8 – 01BF) E5
Data (Address 01C0 – 01C7) 4D
Data (Address 01C8 – 01CF) 02
Data (Address 01D0 – 01D7) 78
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 is calculated by the CCU3/C-MXMB and takes up 2 bytes.
Request:
1. MODBUS Address
2. MODBUS Function
3. Starting register/word address (High byte)
4. Starting register/word address (Low byte)
5. Number of registers/words (High byte)
6. Number of registers/words (Low byte)
7. CRC16 (Low byte)
8. CRC16 (High byte)
Reply:
1. MODBUS Address
2. MODBUS Function
3. Number of bytes returned
4. Data (number of data bytes is ‘number of bytes returned’, low byte followed by high byte)
5. CRC16 (Low byte)
6. CRC16 (High byte)
Example
Request:
Field Example
MODBUS Address 5
MODBUS Function 4
Starting Register (High) 0
Starting Register (Low) 2
Number of Registers (High) 0
Number of Registers (Low) 1
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 must be calculated using the appropriate formula by the MODBUS master and added in
the last word position ( it takes up 2 bytes ).
This command will read register 0002hex from MODBUS device 5. This register is part of the SUBMAP. The
number of registers to be returned is 0001hex. The CCU3/C-MXMB will return 16 bits from the SUBMAP.
Reply:
Field Example
MODBUS Address 5
MODBUS Function 4
Number of Bytes Returned 2
Data (Register 2 (Low)) C0
Data (Register 2 (High)) 4E
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 is calculated by the CCU3/C-MXMB and takes up 2 bytes.
Request:
1. MODBUS Address
2. MODBUS Function
3. Starting bit address (High byte)
4. Starting bit address (Low byte)
5. Number of bits (High byte)
6. Number of bits (Low byte)
7. Number of bytes
8. Data (number of bytes needed to write the appropriate data)
9. CRC16 (Low byte)
10. CRC16 (High byte)
Reply:
1. MODBUS Address
2. MODBUS Function
3. Starting bit address (High byte)
4. Starting bit address (Low byte)
5. Number of bits (High byte)
6. Number of bits (Low byte)
7. CRC16 (Low byte)
8. CRC16 (High byte)
The ‘Starting MODBUS bit address’ is always rounded down to its byte boundary and so the number of bytes
returned will encompass the number of bits requested. Hence the bits are written on their byte boundary (i.e. bit
positions within the bytes are as their appear in the MODBUS Global map).
The status of the written bits is expected as: 1 = ON; 0 = OFF.
Note: If the number of bits to be written does not divide evenly into eight then the remaining bits, front and back
padding bits, will reflect the status of those bits with the same remaining valid addresses in the Global MODBUS
map.
Example
Request:
Field Example
MODBUS Address 5
MODBUS Function 0F
Starting MODBUS Address (High) 1
Starting MODBUS Address (Low) 51
Number of Bits (High) 0
Number of Bits (Low) 9
Number of Bytes 02
Data (Address 0150 – 0157) C2
Data (Address 0158 – 015F) 01
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 must be calculated using the appropriate formula by the MODBUS master and added in
the last word position (it takes up 2 bytes).
The data to be written is expected as byte-aligned bits as they would be read in the Global MODBUS map.
The first data byte contains the bits of the lowest 8 addresses, with the lowest or first address being represented
by the LSB (Least Significant Bit). Bits of no interest should reflect the status that they should appear in the
Global MODBUS map.
The CCU3/C-MXMB returns the start address and the number of coils successfully set.
Reply:
Field Example
MODBUS Address 5
MODBUS Function 0F
Starting Bit Address (High) 1
Starting Bit Address (Low) 51
Number of Bits (High) 0
Number of Bits (Low) 9
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 is calculated by the CCU3/C-MXMB and takes up 2 bytes.
Request:
1. MODBUS Address
2. MODBUS Function
3. Starting register address (High byte)
4. Starting register address (Low byte)
5. Number of registers/words (High byte)
6. Number of registers/words (Low byte)
7. Number of bytes
8. Data (number of bytes needed to write the appropriate data)
9. CRC16 (Low byte)
10. CRC16 (High byte)
Reply:
1. MODBUS Address
2. MODBUS Function
3. Starting register address (High byte)
4. Starting register address (Low byte)
5. Number of registers/words (High byte)
6. Number of registers/words (Low byte)
7. CRC16 (Low byte)
8. CRC16 (High byte)
Example
Request:
Field Example
MODBUS Address 5
MODBUS Function 10(hex)
Starting register (High) 0
Starting register (Low) 3
Number of Registers (High) 0
Number of Registers (Low) 2
Byte Count 2
Data (Register 3 (High)) 1D
Data (Register 3 (Low) F0
Data (Register 4 (High)) 12
Data (Register 4 (Low)) 69
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 must be calculated using the appropriate formula by the MODBUS master and added in
the last word position (it takes up 2 bytes).
Reply:
Field Example
MODBUS Address 5
MODBUS Function 10(hex)
Starting register (High) 0
Starting register (Low) 3
Number of registers (High) 0
Number of registers (Low) 2
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 is calculated by the CCU3/C-MXMB and takes up 2 bytes.
Error Response:
1. MODBUS Address
2. MODBUS Function
3. Error Code
4. CRC16 (Low Byte)
5. CRC16 (High byte)
For example the reply to the invalid MODBUS function 7 would be:
Field Example
MODBUS Address 5
MODBUS Function 87(hex)
Error Code 1
CRC16 (Low) ???
CRC16 (High) ???
NB. CRC16 is calculated by the CCU3/C-MXMB and takes up 2 bytes.
Step 2 - Exclusive OR the first eight-bit byte of the message with the low byte of the CRC16 register, putting the
result in the CRC16 register.
Step 3 - Shift the CRC16 register one bit to the right, shifting in a zero for the MSB.
Step 4 - If the LSB in the CRC16 register is 0, repeat Step 3. If the LSB is 1, Exclusive OR the CRC16 register
with A001 hex (1010 0000 0000 0001).
Step 5 - Repeat Steps 3 and 4 until eight shifts have been performed. When this is done, a complete eight-bit
byte will have been processed.
Step 6 - Repeat Steps 2 ... 5 for the every byte in the message.
The MODBUS map that we will require for this example project will list all of the zone alarms (excluding zone 0,
the system zone) of the three MX panels in the start of the address map. Leave some blank addresses and then
have all of the active bits from CCU/IO ‘D’. Next we will have 8 more blank addresses then active bits from
CCU/IO from CCU/IO ‘E’.
Address
0
Panel ‘A’ Zone Alarms 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
16
Panel ‘B’ Zone Alarms 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
32
Panel ‘C’ Zone Alarms 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48
49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64
65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80
112
BLANK
128
CCU/IO ‘D’ Active bits BLANK
1 2 3 4 5 6 7 8
134
CCU/IO ‘E’ Active bits BLANK
1 2 3 4 5 6 7 8
To add the Active bits to the example project expand the Global Map Tree to be able to see the Input Active
Node 1 Device. It should come under Global Map – CCUioNET Nodes – Node 1 (Device ‘D’) – Node 1 Device 1
– Input Active Node 1 Device. Select Input Active Node 1 Device by clicking on it. The Add button should
change so it is no longer ‘greyed out’. Click the Add button, the bit should appear in the submap on the right-
hand side of the screen. Repeat this for all of the Active bits on the CCU/IO, making sure that they stay in order
in the submap.
It is recommended that the default settings displayed when the program is first run should be used. These are
the default settings used in MXConsys.
For further information and help with these settings refer to publication number 19700344 Network Interface
Module and to MXSpeak Reference Guide for Advanced Third Party Interface Applications.
9.7.1. Saving
To save all of the information that has been entered so far press the Save button or select File | Save from the
Main Menu. To restore it at a later date press the Load button or select File | Load from the Main Menu.
9.7.2. Programming
Connect the CCU3/C-MXMB to the computer using a CCU3 Prog cable provided from the desired com port of
the computer to Port 1 on the CCU3/C-MXMB.
Before programming is commenced the comport must be set in the CCU3-MXMB Programmer program to the
port that the CCU3/C-MXMB is connected to. To do this select Update | Programming Options from the Main
Menu.
Select Update | Data only from the Main Menu. Programming should commence and once all of the lines have
been sent a success message should be displayed.
The File | Open menu allows the MXMB file that was saved in the CCU3-MXMB Programmer program to be opened. Locate the MXMB file and open it.
When the communication is set, press Enable. Then you can go to Communications page to see packets transmitting and receiving. Each of the tab sheets
display the bits in the map that are being polled at present.
The different sections of the map have been separated into different pages in the window. To identify a bit which is activated in the map move your mouse over the
bit and the name will be displayed in the status bar on the bottom of the window. This will work with all of the bits in each of the tab windows.
To send commands to the panel, select the function to be sent to the panel by clicking on the radio buttons in the ‘Commands’ tab in Fire Panels page. Then click
the ‘Send Panel Command’ button.
To send a Point
Information
Request use the
Point Info Request
tab to enter in the
packet data to be
sent to the panel.
Enter the values in
the text edit boxes
on the left of the
window and click
the Send Point
Information
Request button.
This will write those
values to the
appropriate area in
the MODBUS map
and send the
packet to the panel.
The reply will be
updated
automatically.
To send an MX
panel an
Isolate/Deisolate
Request refer to the
previous description
of how to send a
Point Information
Request and use
the same process
for the
Isolate/Deisolate
Reply.
RS232 Operation
RS485 Operation
Pin Number Function
6 Not Connected
5 Not Connected
4 0V
3 -VE
2 +VE
1 SHIELD/GND
Table 68
RS422 Operation
Copyright base2, 2012 89 of 93
All Rights Reserved
Rev: 4.20 17 September 2012