Operating Instructions

MODBUS interface description

Description of

MODBUS Interface
RTU / TCP

for

IS1+ field stations

IS1+ MODBUS V3.00 E - Technical alterations reserved - 1

 Operating Instructions

MODBUS interface description

Content:
Historical development of remote I/O technology at R. STAHL.........................................................................4
1 System overview ........................................................................................................................................ 5
1.1 MODBUS TCP .................................................................................................................................... 5
1.2 MODBUS RTU .................................................................................................................................... 7
2 Commissioning ........................................................................................................................................... 8
2.1 Overview ............................................................................................................................................. 8
2.2 System requirements ........................................................................................................................ 10
2.3 Engineering limits .............................................................................................................................. 10
2.4 Compatibility of new IS1+ IOM .......................................................................................................... 11
2.5 MODBUS TCP Network Topology .................................................................................................... 12
2.6 RS485 MODBUS RTU Bus segments .............................................................................................. 12
2.7 Addressing of 9440 CPM .................................................................................................................. 13
2.8 Addressing of 9441 CPUs ................................................................................................................. 13
2.8.1 BOOTP (Bootstrap Protocol) ..................................................................................................... 13
2.8.2 Address Conflict Detection (ACD).............................................................................................. 14
2.9 Addressing and Protocol selection 9442 CPUs ................................................................................ 15
2.9.1 DP/RS485 + SB Address setting ............................................................................................... 15
2.9.2 Protocol Selection ...................................................................................................................... 15
2.9.3 IP Address setting ...................................................................................................................... 15
2.9.3.1 IS1+ Detect........................................................................................................................ 16
2.9.3.2 IS1+ Web Server ............................................................................................................... 17
2.10 System start-up behavior .................................................................................................................. 18
2.11 MODBUS Functions ......................................................................................................................... 19
2.11.1 MODBUS-FUNCTION 08 - Diagnostics .................................................................................. 20
2.11.2 MODBUS-FUNCTION 43 (0x2B) - Read Device Identification .............................................. 20
2.11.3 MODBUS error codes ................................................................................................................ 21
2.11.4 MODBUS TCP Multi Client operation ........................................................................................ 22
3 Data traffic ................................................................................................................................................ 23
3.1 Signal marshalling ............................................................................................................................. 23
3.1.1 Input and Output Signal blocking ............................................................................................... 24
3.1.1.1 Register allocation of I/O data ........................................................................................... 26
3.1.2 Signal Type blocking (DI, AI, HV, DO, AO) ................................................................................ 28
3.1.3 Configuration example IS1 Fieldstation ..................................................................................... 30
3.1.4 Rules for message processing:.................................................................................................. 31
3.1.5 Extract from the allocation table ................................................................................................ 32
3.2 Status register CPU........................................................................................................................... 33
3.3 Control register .................................................................................................................................. 34
3.4 Module alarms ................................................................................................................................... 35
3.5 Signal status ...................................................................................................................................... 36
3.6 CPU Redundancy.............................................................................................................................. 37
3.6.1 Non redundant Ethernet Network .............................................................................................. 37
3.6.2 Redundant Ethernet Networks ................................................................................................... 38
3.6.3 Ethernet IP- Addresses: ............................................................................................................. 39
3.6.4 Parameterization: ....................................................................................................................... 39
3.6.5 Selection of ´CPU start condition´ .............................................................................................. 39
3.6.6 Download of Configuration and Parameter data to redundant CPUs ........................................ 40
3.6.7 HART ......................................................................................................................................... 40
3.6.8 Diagnosis using IS1 DTMs......................................................................................................... 41
3.6.9 WEB Server der IS1+ CPUs ...................................................................................................... 41
3.6.10 Process data of CPUs during redundancy switch over ............................................................. 41
3.6.11 State of redundant CPUs ........................................................................................................... 42
3.6.12 Prepared / deactivated redundancy of 9441 CPUs ................................................................... 44

2 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7 Setting parameters for the IS1+ field station ..................................................................................... 44

3.7.1 CPU parameters ........................................................................................................................ 45
3.7.2 I/O module parameters .............................................................................................................. 46
3.7.2.1 AIM / AIMH 9461 .............................................................................................................. 46
3.7.2.2 AUMH 9468 ...................................................................................................................... 47
3.7.2.3 UMH 9469 Exn ................................................................................................................ 49
3.7.2.4 TIMR 9480 ........................................................................................................................ 51
3.7.2.5 TIM mV 9481 .................................................................................................................... 52
3.7.2.6 TIM 9482 .......................................................................................................................... 53
3.7.2.7 DIM (9470/3x in compatible mode) ................................................................................ 54
3.7.2.8 DIOM 9470/3x (IS1+) ...................................................................................................... 55
3.7.2.9 AOM / AOMH 9466 .......................................................................................................... 56
3.7.2.10 DOM .................................................................................................................................. 57
3.8 Data word structure of the I/O modules ............................................................................................ 58
3.8.1 Analogue modules ..................................................................................................................... 58
3.8.1.1 AIM, AIMH (9460/..., 9461/..., 9468/…, 9469/..) ............................................................. 58
3.8.1.2 TIM (9480/.. , 9481/.. , 9482/..) ....................................................................................... 61
3.8.1.3 AOM 0 – 20 mA (9465/... , 9466/..., 9468/.., 9469/..) .................................................... 64
3.8.2 DIM, DIM+CF (9470/.. 9471/.. 9472/..) ............................................................................... 66
3.8.3 DOM (9475/.., 9477/.., 9478/..) ................................................................................................. 72
3.9 Signal behavior in case of errors....................................................................................................... 73
3.9.1 Behavior of the input signals in case of errors ........................................................................... 73
3.9.2 Behavior of the output signals in case of errors ......................................................................... 74
3.10 HART variables ................................................................................................................................. 75
3.10.1 Module selection in IS1 DTM ..................................................................................................... 76
3.10.2 Data format ................................................................................................................................ 76
3.10.3 Routed HART Variables ............................................................................................................. 77
3.10.4 Modbus Mapping of the extended HART data ........................................................................... 78
3.10.5 HART Livelist ............................................................................................................................. 81
3.11 IS1 DTMs .......................................................................................................................................... 82
3.12 Webserver ......................................................................................................................................... 83
3.12.1 Webserver 9141 CPU ................................................................................................................ 83
3.12.2 Webserver 9442 CPU ................................................................................................................ 84
3.13 LED and LCD-displays of the CPUs ................................................................................................. 85
3.14 Online behavior of the IS1+ field station. .......................................................................................... 85
3.14.1 Parameter changes. ................................................................................................................... 85
3.14.2 Configuration changes. .............................................................................................................. 85
3.15 Transmission time ............................................................................................................................. 86
3.15.1 MODBUS RTU ........................................................................................................................... 86
3.15.2 MODBUS TCP ........................................................................................................................... 87
4 List of abbreviations.................................................................................................................................. 88
5 Release notes:.......................................................................................................................................... 89
6 Further reading ......................................................................................................................................... 89
7 Support address ....................................................................................................................................... 89

IS1+ MODBUS V3.00 E - Technical alterations reserved - 3

 Operating Instructions

MODBUS interface description

Historical development of remote I/O technology at R. STAHL

As one of the innovators in remote I/O technology, R. STAHL recognized the advantages that remote I/O
technology offers for hazardous areas and has been developing innovative products and solutions for over
30 years since that time. The benefits to users are always the focus here. All communication, power supply
and input/output modules in the system can be connected and disconnected during operation in hazardous
areas. Thanks to an intrinsically safe system design, the installation process is almost identical to this pro-
cess in safe areas. No special Ex d or Ex p enclosures are required. Remote I/O can be used to integrate
conventional and HART-capable field devices into modern, digital network structures easily and affordably.
Comprehensive diagnostics options using a separate ServiceBus or the process bus enable integration in
modern plant asset management systems and increase the availability of systems.

1987 The "ICS MUX fieldbus system" from R. STAHL is the first intrinsically safe bus system for sensors
and actuators in hazardous areas (Zone 1) on the market. A master station installed in the control
room establishes the connection to the automation systems. Intrinsically safe communication with
explosion-protected on-site or field stations (VOS) installed in Zone 1 is carried out using a single
coaxial cable.
1993 The system variant "VOS 200", which is based on ICS MUX, is presented. The "VOS 200" is better
suited to smaller signal quantities or decentralized automation units. A master station is no longer
required. Multi-drop is supported and couplings are also available in redundant designs.
1997 "VOS 200" can now also communicate with the PROFIBUS DP, which was new at the time.
R. STAHL achieved this by being the first to develop an intrinsically safe design which, with a few
modifications, is part of the PNO standard today under the name RS485-IS.
2000 Drawing from experience with the ICS MUX and VOS 200, a completely new Remote I/O – IS1 is
developed. This system is substantially more flexible, easier to use, more powerful and extremely af-
fordable. Over the years, the IS1 has become the market leader in Zone 1 and is still used around
the globe. IS1 supports open bus protocols such as PROFIBUS DP or Modbus RTU and is available
in different versions for Zone 1, Zone 2 and even Division 1 and 2.
2009 A new communication unit for Ethernet is added to IS1. With this, IS1 is the first remote I/O system
that operates at 100 Mbps/Ethernet in Zone 1. A fibre optic cable with the 'op is' type of protection is
used as a communication medium. Modbus TCP, EtherNet/IP and PROFINET are supported proto-
cols.
2013 The I/O level is completely modernised and introduced on the market as IS1+. The new multifunc-
tional I/O modules have configurable inputs/outputs and an innovative diagnostics function that re-
ports potential module failures up to 12 months before they would occur. IS1+ is even better suited
to extreme ambient conditions from -40 to +75 °C. The new IS1+ modules are fully compatible with
their IS1 predecessors.
2018 The new Zone 2 head assembly consists of a CPU, power module and socket makes IS1+ even
more flexible and has expanded its application range. The previously supported protocols PROFI-
BUS DP, Modbus TCP+RTU, EtherNet/IP and PROFINET are now all supported by one CPU and
can be selected by the user. The new assembly has the same predictive diagnostic functions and the
extended temperature range of -40 to 75 °C that are features of the IS1+ modules.

The description below shows the system features of the IS1+ system when connecting to an automation
system via MODBUS TCP or MODBUS RTU

4 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

1 System overview

1.1 MODBUS TCP

IS1
MODBUS .... MODBUS
Engineering FDT Frame HART DTMs
TCP/IP TCP/IP HART
HARTDTM
DTMs
Station
Host (client) Host (client)

HART DTMs
HART DTM
IS1 IOM DTMs

WEB IS1 CPU DTM

Browser

Cyclic I/O
Data + Status
- Configuration
Ethernet
- Parameters
- Diagnostics
- I/O data (slow)
- I&M data
- HART

Switch

Cu Cu

IS1+ Field station IS1+ Field station

MODBUS TCP server
... MODBUS TCP server
....
I/O I/O

Ex HART HART
Zone2

As an off-the-shelf explosion protected unit, the IS1+ field station can be installed directly in the potentially
explosive atmosphere (Zone 1 or Zone 2). It can also be installed in the safe area. The diagram above
shows a Zone 2 solution.

The IS1+ field station comes with an Ethernet connection and operates as a MODBUS TCP server. Optional-
ly a RS 485-IS service bus can be used.

Configuration, parameter setting, diagnostics and HART communication for the IS1+ field station and its I/O
modules are carried out via IS1 DTMs interfaced using FDT technology.

A webserver is integrated in the IS1 CPUs which offers additional diagnostic functions.

List of abbreviations

IS1+ MODBUS V3.00 E - Technical alterations reserved - 5

 Operating Instructions

MODBUS interface description

Separate networks with Routing via DCS/PLC:

IS1
Engineering FDT Frame HART DTMs
HARTDTMs
DTM
Station HART

HART DTMs
HART
IS1 IOM DTM
DTMs

WEB
Browser IS1 CPU DTM

Ethernet Backbone

Routing or
gateway
function in DCS / PLC DCS / PLC - Configuration
DCS / PLC MODBUS
.... MODBUS - Parameters
required! TCP client TCP client - Diagnostics
- I/O data (slow)
- I&M data
- HART
Cyclic I/O
Data + Status

Ethernet / MODBUS TCP

Switch
Cu Cu

IS1+ Field station IS1+ Field station IS1+ Field station

... ... ....
MODBUS TCP server I/O MODBUS TCP server I/O MODBUS TCP server I/O

Ex HART HART HART

Zone2

6 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

1.2 MODBUS RTU

As an off-the-shelf explosion protected mounted

unit, the IS1+ field station can be installed direct-
ly in the hazardous area (Zone 1 or Zone 2). It
can also be installed in the safe area. The adja-
cent diagram shows a Zone 2 solution with 9440
CPM.

The IS1+ field station has two serial interfaces.

One of them is used to connect to an automation
system and the second serial interface can be
used as a bus-capable maintenance interface
for the configuration, error diagnosis and com-
munication with HART field devices.

Several IS1+ field stations can be used in the

hazardous area to form a MODBUS network that
is connected directly - both hierarchically and
topologically - with the MODBUS network in the
non-hazardous area.

The following applies to Zone 1 installations:

From a safety-engineering aspect relating to
explosion protection, the field bus isolating re-
peater for the MODBUS takes on the function of
a “barrier” between the ex area and non-
hazardous area. The field bus isolating repeater
operates as a repeater.

In such a MODBUS network, the IS1+ field station behaves hierarchically as a MODBUS slave where the
configuration of the field station with its I/O modules is performed via the service Bus with the software IS
Wizard.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 7

 Operating Instructions

MODBUS interface description

2 Commissioning
2.1 Overview

Planning of the complete MODBUS network:

- Which masters (clients) are in the network

- Which slaves (servers) are in the network
- Selection of network topology and network physics (switches, repeaters, glass fiber links ...)
- Unique allocation of the Slave- or IP addresses.

Perform the commissioning:

- Mechanical installation of the IS1+ field station.

- Mechanical installation of the Ethernet switches or Fieldbus Isolating Repeaters
- Mechanical installation of all other bus users.

- Set up the bus connections.

MODBUS TCP:
- Set up the voltage supply of the IS1+ field station.
- Set up the voltage supply of the switches and other network components

- Install IS1+ detect tool on PC for support of 9442 CPUs.

- Set up the IP addresses, Subnet Mask, Gateway
- 9441 CPU: on the IS1 Fieldstations using buttons and display
- 9442 CPU: using IS1+ Detect Tool and IS1+ Web-Server

- Set up the addresses of all other users.

- Install a FDT Frame and the IS1 DTMs on the PC.

- Configure the IS1+ field stations with its I/O modules using the FDT software.

- Set parameters for the MODBUS TCP clients (masters):

Configuration of MODBUS messages in MODBUS TCP clients according the I/O modules in the IS1 field
stations.

- Put the MODBUS master into operation. This results in the automatic start-up of the cyclic client <-> server
communication.

- Check Ethernet connection using:

- LED´s on Ethernet Switches
- Link LED´s of CPU on IS1+ Fieldstation
- „Ping“ command. Ping is responding in any IS1+ CPU state.

- Check communication on the MODBUS TCP using the following tools:

- Diagnostics information from the client (master) or from the diagnostic tools for the master.
- LEDs on the CPU of the IS1+ field station and text display using 9441 CPUs
- Webserver in IS1+ CPU

- Check I/O signals using the following tools:

- Information from the client (master) or from the diagnostic tool for the master.
- Use of diagnostics functions for the IS1 DTMs.

8 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

MODBUS RTU:

- Set up the baud rate on the field bus isolating repeaters (9185, 9186, ….).

- Set up the voltage supply of the IS1+ field station.

- Set up the voltage supply of the isolating repeaters.

- Set up the slave addresses on the IS1+ field stations.

- Set up the addresses of all other users.

- Optional use of the service bus:

- Mechanical mounting of the service bus and the associated field bus isolating repeater.
- Install the IS Wizard software on the PC.
- Select extended parameter set of IS1.
- Configure the IS1+ field stations with its I/O-modules with the software IS Wizard.

- Parameterise the Modbus master:

Configuration of Modbus telegrams in MODBUS master according the I/O-modules in the fieldstations.

- Put the master into operation. This results in the automatic start-up of the cyclic master <-> slave
communication.

- Check communication on the MODBUS using the following tools:

- Diagnosis information of the master or of the diagnostic tools belonging to the master.
- LEDs on the 9185, 9186 field bus isolating repeaters
- LEDs on the CPM of the IS1+ field station

- Check I/O signals using the following tools:

- Information of the master or of the diagnostic tool belonging to the master.

- Use of Diagnosis software IS WIZARD on a PC connected via the service bus.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 9

 Operating Instructions

MODBUS interface description

2.2 System requirements

Hardware requirements:

 CPM 9440/12-01-11 (24V Z1 Stahl) from Revision F

 CPM 9440/15-01-11 (24V Z2 Stahl) from Revision F
 CPM 9440/22-01-11 (24V Z1 PNO) all Revisions
 CPM 9440/22-01-21 (230V Z1 PNO) all Revisions

 IS1 field station with CPU 9441/1x-00-00

Single socket 9492/12-11-11 or redundant socket 9492/12-11-12

 IS1+ field station with CPU 9442/35-10-00, socket 9496/.. and Power Module PM 9445/..

Software requirements:

IOM 9440 CPM 9441 CPU 9442 CPU IS1 DTM IS Wizard
IOM
Firmware Firmware Firmware Firmware (TCP) (RTU)

IS1 IOM from 02-00 from V11-06 from V21-08 from V1.0.10 from V3.0.13 from V3.2.11

IS1+ IOM
from 03-01 from V11-11 from V21-16 from V1.0.10 from V3.0.13 from V3.2.11
(94xx/3x….)

2.3 Engineering limits

The general regulations according to the IS1 operating instructions apply to the engineering of an IS1+ field
station.

Possible limitations due to MODBUS TCP clients:

 number of I/O modules or the maximum number of signals
 maximum number of slaves in a network

Thus, the limits on the MODBUS TCP clients used must also be taken into account during the engineering.

10 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

2.4 Compatibility of new IS1+ IOM

New IS1+ IOM can be used in existing plants for compatible replacement of previous IS1 IOM.
No change of GSD File or configuration is required in such case.
The IS1+ IOM switch to a compatible mode in case of detection of an allowed configuration of the previous
IOM.
If new features of the IS1+ IOM shall be used which are not supported by the previous IOM new configura-
tion with the IS1 DTMs according type number of the IS1+ IOM is required.

Overview of compatible IOM:

IS1 IOM compatible IS1+ IOM Remark

9460/12-08-11 AIM 8 -
9461/12-08-11 -
AIMH 8 9468/32-08-11 AUMH Zone 1
9461/12-08-21 9164 additionally required
9468/33-08-10 AUMH Zone 2
9465/12-08-11 AOM 8 -
9466/12-08-11 AOMH 8 -
9461/15-08-12 AIMH 8 Exn -
9469/35-08-xx UMH Exn
9466/15-08-12 AOMH 8 Exn -
9470/12-16-11 5 Byte std. prm supported only
DIM 16 9470/32-16-11 DIOM Zone 1
9470/22-16-11 -
9470/33-16-10 DIOM Zone 2
9475/12-08-41 DOM 8 for low power valves
9470/25-16-12 DIM 16 Nam Exn 9471/35-16-xx DIOM Zone 2 Exn -
9471/15-16-12 DIM 16 24V Exn 9472/35-16-xx DIOM 24V Exn -
9471/10-16-11 DIM 16 24V (from IOM Firmware V03-06) -
9475/12-04-11 9475/32-04-12 DOM Zone 1 -
9475/12-04-21 DOM 4 9475/32-04-22 DOM Zone 1 -
9475/12-04-31 - discontinued
9475/12-08-41 siehe oben 9470/3x DIOM -
9475/32-08-52 DOM Zone 1
9475/12-08-51 DOM 8 -
9475/33-08-50 DOM Zone 2
9475/32-08-62 DOM Zone 1
9475/12-08-61 -
9475/33-08-60 DOM Zone 2
9475/22-04-21 DOM 4 OD 9475/32-04-22 DOM Zone 1 -
9475/22-08-51 9475/32-08-52 DOM Zone 1 -
DOM 8 OD
9475/22-08-61 9475/32-08-62 DOM Zone 1 -
9480/12-08-11 TIM R -
9482/3x-08-xx 8TIM
9481/12-08-11 TIM mV -

IS1+ MODBUS V3.00 E - Technical alterations reserved - 11

 Operating Instructions

MODBUS interface description

2.5 MODBUS TCP Network Topology

The IS1 + 9442 CPU has two Ethernet ports (X2, P1, as well as X2, P2) which are internally connected via
an Ethernet switch. Thus, it is possible to build Ethernet line topologies (daisy chains).
Attention! A ring management is unspecified for MODBUS TCP. Therefore no Ringtopologies may be built
up. This would lead to a broadcast storm and a failure of the Ethernet network. Ethernet Ringtopologies are
supported from 9442 CPU by the use of PROFINET or EtherNet IP.

Switch Switch Switch

P1 P2 P1 P2 P1 P2 P1 P2 P1 P2 P1 P2 P1 P2 P1 P2 P1 P2

IS1+ CPU IS1+ CPU IS1+ CPU IS1+ CPU IS1+ CPU IS1+ CPU IS1+ CPU IS1+ CPU IS1+ CPU

Star Line (Daisy Chain) Ring

Maintenance Note: The internal switch and the Port P2 of a 9442 CPU are disabled during a software up-
date. Following Network participants connected on port P2 are therefore unavailable in this phase of the
operation.

2.6 RS485 MODBUS RTU Bus segments

A MODBUS network is based on RS485 bus physics with a twisted pair cable as the transmission medium. A
network can consist of several line-type segments that are connected by repeaters or optical transmission
routes.
The 9185 field bus isolating repeater can be seen as a repeater that connects a non-hazardous bus segment
with an I.S. bus segment (RS485IS).

Bus termination
Every RS485 bus segment must be terminated at the first and last device of a segment with a bus termina-
tion resistor.

End of line resistor in Ex i segment see operating instructions:

Project Planning, Installation and Commissioning of the RS 485 Fieldbus System from R. STAHL for
Non- Hazardous and Hazardous Areas.

Baud rate
The setting of Baudrate, Parity .... for the RS485 MODBUS RTU interface on terminal X1 of the CPU can be
done via the IS Wizard software over the service bus.

Attention! The selected baud rate for the 9185 or 9186 field bus isolating repeaters must be set on
DIP switches.

12 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

MODBUS RTU Interface parameters X1, RS485

Parameter Selection Selection by:

Baudrate 9600, 19200, 38400 Baud
IS Wizard (see CPM Parameter )
Parity Odd, Even
Startbit 1 fix
Stopbit 1 fix
Silent interval between request
> 3,5 characters fix
and response

2.7 Addressing of 9440 CPM

The setting of the RS 485 address (Modbus slave address) of an IS1 field station is performed by means of
operating keys on the CPM module.
An address within the range 0 to 127 can be given here. Please note that addresses may only be allocated
once in a MODBUS network.
The address that is set on the CPM is also valid for addressing the IS1 field station on the service bus.
(see also the 9440 CPM operating manual)

2.8 Addressing of 9441 CPUs

The following information is required to address an IS1 field station:
 IP address
 SubNet mask
 optional: Port for the MODBUS server
 optional: Gateway (only necessary for communication via routers)

The addresses for an IS1 field station with 9441 CPU can be set via:
 Buttons and display on IS1 CPU.
 IS1 webserver
 The optional MODBUS server port can be set via the IS1 DTMs as a MODBUS parameter.

Attention! The IP addresses must be unique in the network.

Hint: The ´Unit Identifier´ address also transferred via MODBUS TCP for serial MODBUS devices from the
MBAP header is not used from the IS1 CPU!

2.8.1 BOOTP (Bootstrap Protocol)

The 9441 CPU supports the setting of IP Address via BOOTP Protocol according RFC951.
The IS1 Fieldstation must be configured in a BOOTP server which must be present on the Ethernet network.
The IP-Address for the IS1 CPU must be allocated to its MAC-Address.

After power on the IS1 CPU checks the availability of a BOOTP server on the network and receives its IP
address from this BOOTP server. The IP address is stored non volatile in the socket of the IS1 CPU.

If no BOOTP server is detected or the IS1 CPU is not configured in the BOOTP server then the IS1 CPU use
the previous non volatile stored IP address.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 13

 Operating Instructions

MODBUS interface description

2.8.2 Address Conflict Detection (ACD)

Double IP addresses in one Ethernet Network can lead to unforeseeable behavior. To detect and to handle
such situations ACD according RFC5227 was defined. IS1 is supporting this feature.
Additionally the specification ´IPv4 Address Conflict Detection for EtherNet/IP Devices´ was considered.

Address conflict during startup:

After power on start up the IS1 9441 CPU checks for other devices with the same IP address on the network.
In case of conflict the IS1 CPU stops further standard communication on Ethernet and checks in the back-
ground if the conflict is still present.

Address conflict during operation:

Depending on the behavior of the conflict partner the IS1 CPU or the conflict partner can withdraw from
communication on Ethernet network.

Behavior of IS1 CPU in case of own withdraw from communication

 Error LED(red) at IS1 CPU = On
 LCD Display: IP conflict stop
 Error Message in event memory of IS1 CPU
 PLC, IS1 Webserver and IS1 DTM: no connection to IS1 CPU
About 1 minute after removal of the IP address conflict through changes on the conflict partner the IS1 CPU
will restart its own communication.

Behavior of IS1 CPU in case of withdraw from communication of the communication partner

 No error on Error LED and LCD Display

 IS1 CPU Web-Server: Error message on page ´Protocol´:
Two messages toggle in a slow cycle ( 1 minute):
- Address Conflict: IP address conflict, defending IP address!
- Address Conflict: No address conflict
On each new detection of the address conflict the counter ´ Address Conflict detection count´
is incremented.

14 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

2.9 Addressing and Protocol selection 9442 CPUs

2.9.1 DP/RS485 + SB Address setting
A common station address is used from the 9442 CPU for the
protocols PROFIBUS DP as well as the STAHL service bus
via USB/RS485, which is adjustable via two rotary switches S2, S3
on the first IS1+ socket (Bank 0). The switch is located under the left CPU.
This has the advantage that the switches can not accidentally
be changed during operation. Changed switch settings will be
accepted after CPU boot only.

Address Range (0 – 99)

Address = S2 x 10 + S3

2.9.2 Protocol Selection

The required AS Protocol can be set by a rotary switch S1 on the IS1+ 9442 CPU socket.
In case of CPU exchange this settings keep unchanged.
After changes of the selected Protocol, matching configuration and parameter data must be created and
loaded to the IS1+ field station.
AS-Protocol S1 Switch setting
Reserved 0
PROFIBUS PNO Red. 1
PROFIBUS Stahl Red. Addr. Offs. 1 2
PROFIBUS Stahl Red. Addr. Offs. 0 3
PROFINET 4
Reserved 5
Modbus TCP 6
EtherNet/IP 7
Reserved 8
Reserved 9

2.9.3 IP Address setting

Two separate IP addresses for the Ethernet communication are available for the 9442 IS1 CPU:
 IP-AS: Realtime bus to automation system (MODBUS TCP, PROFINET, EtherNet/IP,)
 IP-SB: Service Bus Functions: Web-Server, IS1 DTM, HART, Standard TCP Traffic, SW-Update

This separation of IP Addresses allowes enhanced independence of the different data streams also if both
data streams are transmitted via the same Ethernet ports. A change of IP addresses is blocked during active
data exchange to the Automation System.

Caution! IP-AS and IP-SB addresses of a CPU must be unique as all IP addresses of an Ethernet network.
The IP address information is stored in the socket backup memory as well. Configuration and address infor-
mation of a IS1+ field station are therefore preserved in case of exchange of CPUs.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 15

 Operating Instructions

MODBUS interface description

2.9.3.1 IS1+ Detect

The ´IS1+ Detect´ tool can scan the Ethernet Network for connected IS1+ field stations with 9442 CPUs
and display the IP addresses of the found CPUs.
This applies also to stations which are outside of the IP-addressable address range of the network.

IP-SB addresses of found IS1+ 9442 CPUs can be changed if necessary and must be inside of the IP-
addressable address range of the network.

Thus the IS1+ CPUs are accessible via the integrated Web server. Diagnostic information can be displayed
here and further adjustments can be made.

16 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

2.9.3.2 IS1+ Web Server

The IP-AS address for the MODBUS TCP interface and the IP-SB Address can be adjusted via the Web
server of 9442 CPU.

The IP-AS, IP-SB addresses and the Device Name of both CPUs (left - and right CPU) of a redundant pair
are displayed in the IS1 Webserver while the Web server is connected with one of the two CPUs (connect-
ed).

The IP-SB as well as IP-AS address can only be changed in the CPU, with which the Web server is currently
connected. A valid user login is required for change.

A manual change is only possible with a valid user login and without DataExchange with an MODBUS TCP
client. DHCP must be disabled. An existing connection to the Web server is closed after a change of IP SB
address and must be reopened to the modified IP SB address.

Further details see: Webserver in IS1+ CPU

IS1+ MODBUS V3.00 E - Technical alterations reserved - 17

 Operating Instructions

MODBUS interface description

2.10 System start-up behavior

Using MODBUS TCP, configuration data and parameter data for CPU and all I/O modules are generated
using the IS1 DTMs, transferred via Ethernet to the IS1+ field station by 'download' and are stored in non-
volatile memory in the socket for the IS1 CPU.
Using MODBUS RTU configuration data and parameter data are generated with the IS Wizard Tool and
transmitted via a RS485 / USB Service Bus.

After power on the entire data range of the output register is initialized with the value 0x8000. All output
signals therefore remain in the safe setting.
The remaining data areas are initialized with 0x0000.

After power on the CPU checks that valid configuration data and parameter data are available.

Configuration data and

CPU state after checking and booting
parameter data
At least one MODBUS Client is in Data
Data Exchange with AS
Exchange (2)
No data available No data exchange (3)
Data invalid (e.g. CRC error) Config or parameter error (4)
Data valid Data exchange with AS quit (5)

If valid data are available, the CPU remains in the state "No data exchange (after power on)", until a cyclic
MODBUS connection is established.

If configuration and parameter data of both CPUs are different, the inactive CPU will go tot he Config Error(4)
state.

CPU Synchronisation

A non-redundant IS1 CPU can be started by establishing of any cyclic MODBUS connection.

Once a valid message is received, the CPU changes to the state "Data exchange with AS" and the I/O data
are exchanged cyclically with the I/O modules configured. The MODBUS register can be accessed from the
automation system (AS).

The output signals remain in safe setting until valid output data is written by the AS or by the IS1 DTMs.

Changing I/O modules during operation is possible. After plugging in a new module, parameters are auto-
matically transferred from CPU to the I/O module, followed by a restart of the I/O module. -> Hot swap I/O
module.

Exception: Module TIM R 9480/.. : The calibration value for 2 wire operation is stored in the I/O module.
After changing of I/O modules a new calibration is required.

18 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

2.11 MODBUS Functions

The IS1+ 9442 CPU acts as a MODBUS TCP server or a MODBUS RTU slave according the following spec-
ifications:
 MODBUS MESSAGING ON TCP/IP IMPLEMENTATION GUIDE V1.0b
 MODBUS APPLICATION PROTOCOL SPECIFICATION V1.1b
For details of protocol, MODBUS Functions, MODBUS-Error codes …. see above documents.

The following MODBUS functions are supported:

PLC
MODBUS Functions Function in IS1+ memory area *2)
01 (0x01) Read Coils  Read Discrete outputs 0xxxxx

02 (0x02) Read Discrete Inputs 1xxxxx

 Read output signals
03 (0x03) Read Holding Registers  Read input signals with 4xxxxx
register offset+1000
04 (0x04) Read Input Registers 3xxxxx

05 (0x05) Write Single Coil *1)

06 (0x06) Write Single Register

Diagnostics  Connection check
08 (0x08) Subfunction 0x00 (Function supported for MOD-
Return-Query Data BUS RTU only)
15 (0x0F) Write Multiple Coils *1)

16 (0x10) Write Multiple Registers

Read Device Identification
43 (0x2B)
Read Device ID code = 01 / 02 / 04

*1) On the usage of the MODBUS function 5 or 15 the following is to be noted:

After power on or after the loss of data exchange with the master, the value 0x8000 is written to the output
registers in the IS1+ CPU and thus the outputs change to their safety position.
On the subsequent first write operation to such output registers, the complete register has to be overwritten
the first time (e.g. by MODBUS functions 6, 15 or 16) to set all output bits to a defined state. From then on
individual bits can be changed using function 5 or 15.

When overwriting a register with valid output data (unequal 0x8000) with the value for the safety position
(value 0x8000) during operation, all previous output data will be frozen until the timeout of the I/O-module
(parameter “timeout for output module TMod (x 100 ms)”). After the timeout, all the outputs change to the
parameterized safety position (default = 0).

IMPORTANT: when e.g. 8 DO signals are updated via Modbus function 5 “write single coil” or function 15
“write multiple coils”, the bit 15 of the data word stays “ON”. If there is at least one DO bit unequal to “0”, the
value of this register is unequal to 0x8000 and the outputs are controlled as expected. If all 8 DO bits are
changed to value “0”, the register will change to the value 0x8000 and as described above, the outputs will
be frozen and in the safety position.
Therefor it is important to clear the highest bit in the register of DO modules. This ensures that when writing
all 8 DO signals of an IO module to the value “0”', all outputs are immediately written and the mechanism for
the safety position is not activated.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 19

 Operating Instructions

MODBUS interface description

*2) Some PLCs / MODBUS TCP clients allocate the Modbus Function indirect via selection of specific
memory areas in the PLC. Details see operating instruction of PLC.

2.11.1 MODBUS-FUNCTION 08 - Diagnostics

For MODBUS RTU the subfunction 0 (Return Query Data / LOOPBACK TEST) is supported.
This function can be used to check the physical connection between master (client) and slave (server) with-
out exchange of I/O data.

For MODBUS TCP this function is not supported according MODBUS specification.

2.11.2 MODBUS-FUNCTION 43 (0x2B) - Read Device Identification

Function Code: 0x2B

MEI Type: 0x0E
Read Device ID code: 0x01
Object Id: 0x00

Object Name /
Object Id Content Type category
Description
0x00 VendorName R. STAHL Schaltgeraete GmbH
0x01 ProductCode 9442/35-10-00 Basic
0x02 MajorMinorRevision Rev xx, V y.y.y *1) ASCII
0x03 VendorUrl *3) www.IS1easy.com String
0x04 ProductName IS1 Remote I/O System Regular
0x05 ModelName *3) IS1 CPU
6 Byte
0x80 Physical address *3) Ethernet MAC address
UINT8 Extended
ASCII *2)
0x81 Serialnumber *3) xxxxxxx-xxxx
String

*1) Actual IS1 CPU revision: xx = Hardware Revision, Vy.y.y = Firmware Revision
*2) Access to Object Id 0x80 and 0x81 only with Device Id Code 4 (individual access) !
*3) Supported by 9441 CPUs only

Max. object length = 27 bytes

20 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

2.11.3 MODBUS error codes

The error codes transmitted from IS1 to the MODBUS TCP clients in case of errors are according the
MODBUS specification.

MODBUS error codes:

Error
Name Possible Reason Trouble shooting
Code
Illegal MODBUS function Change MODBUS client message
0x01
Function not implemented parameters .

Access outside the MODBUS

Illegal Data Change MODBUS client message
0x02 allowed register limits see:
Address parameters.
Rules for message processing:

 Check quality of transmission on the

Illegal Data MODBUS network
0x03 Error in the message structure
Value  Check MODBUS client message
parameters
Slave
Hardware error CPU
0x04 Device Replace CPU
MODBUS memory error
Failure
Hardware error CPU (CPU state 1)
Replace CPU
Other hardware errors
No data exchange (CPU state 3)
Download config- and parameter data
0x05 Acknowledge (after power on without config- and
via IS1 DTM into IS1 CPUs
parameter data)
Check configuration and parameter
Configuration or parameter error
settings and if necessary download the
(CPU state 4)
data via IS1 DTM.
Slave The client (or master) should retransmit
0x06 Device CPU is busy the message later when the server (or
busy slave) is free.
 Server (IS1 CPU) is not receiv-
 Check transmission quality on the
ing a request
No Timeout in MODBUS network
 Server is receiving a request,
Response Client  Check parameter settings and
but has detected a transmission
function of the MODBUS client
error (parity, CRC ….)

For further information on MODBUS TCP error behavior see document “MODBUS Application Protocol
Specification V1.1b ( http://www.modbus.org/ )

IS1+ MODBUS V3.00 E - Technical alterations reserved - 21

 Operating Instructions

MODBUS interface description

2.11.4 MODBUS TCP Multi Client operation

The MODBUS TCP server in IS1 supports multi-client operation with parallel communication with several
MODBUS TCP clients.
IS1 CPU max. TCP Clients
9441 5
9442 10
 Input signals can be read by MODBUS TCP clients as required.
 Output signals are only allowed to written by one client .
 This situation is not controlled by MODBUS mechanisms!

Attention!
It is the responsibility of the engineer planning the MODBUS TCP clients to ensure individual output
signals are not overwritten by several MODBUS TCP clients.
If an output signal is written by several clients with different output values, the related output signal
will toggle randomly between the values written.

Behavior in the case of the failure of cyclic MODBUS TCP connections:

Each of the client connections has a dedicated connection monitoring feature.

The time set as IS1 CPU parameter ´Watchdog time AS interface´ applies globally to all connections.

After establishing a cyclic MODBUS connection, the CPU changes to the state ´Data Exchange´. This one
connection is now monitored for cyclic data traffic for the time set.

Independent of this situation, the start condition can also be met on another connection, as a result the moni-
toring for cyclic data traffic is also started on this connection.

If the data exchange on one of the active connections is interrupted, the value 0x8000 is output on the entire
output image for the IS1+ field station.
The output modules retain the previous output data from this point in time until the ´Output modules timeout´
has elapsed.
If no new output data have arrived by this time, the output signals switch to the safe setting.

If, prior to the elapse of the ´Output modules timeout´ parts of the output signals are overwritten with values
other than 0x8000 via Modus connections that are still established, this data is sent to the related outputs.
Only the data areas not updated change to the safe setting after the elapse of the ´Output modules timeout´.

CPU state

The state of the CPU is displayed in the diagnostics overview CPU in the IS1 DTMs:

CPU state Behavior using MODBUS TCP multi client operation.

2 Data exchange with AS active State if one or more MODBUS clients are in data exchange
Data exchange with AS quit
5 (Exchange with WIZARD/DTM active State if all MODBUS clients have quit data exchange
is possible)

Detailed information on the status of the different client connections is also available via the webserver in IS1
CPU (see Webserver in IS1 CPU).

22 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3 Data traffic
3.1 Signal marshalling
The assignment of the signals of a fieldstation to the MODBUS registers results through an automatic block
function for all signals.
Two different data structures are available in parallel which optionally can be used according AS require-
ments. Read data (Input- and Output data) are available in both structures in parallel. Data written to one of
the structures will be transferred internally to the other structure.

Data structures Signal status IS1+ IOM *1) System Requrements

all IS1 CPM and CPU
Input and Output Signal blocking Yes, supported Revisions
Available for 9442 CPU and
Signal Type blocking (DI, AI, HV, DO, AO) Not mapped CPM 9440 from
firmware V11-13

*1) Signal status via status code in the AI data register and status bits of all DI signals are available in both
data structures.

Hint: A signal list with allocated MODBUS registers for a configured IS1 Fieldstation can be
exported for both data structures as .csv file using the IS Wizard tool from Rev. 3.2.5.
A list of the associated MODBUS register can also be displayed in the Web server of 9442
CPU at ´CPU+PM -> AS Protocol´

Overview MODBUS Registers Areas and Functions:

Input and Output Signal

Signal Type blocking
blocking
F3 F3 READ HOLDING REGS
F2 F4 READ INPUT REGS
F3 F6, F16 F6, F16 PRESET REGS
F4 DI only: F2 READ INPUT STATUS
F1, F15 DO only: F1, F15 R/W Coils
Outp. HV
Input Signals DI AI DO AO
Sign.
REG REG Data REG Data REG REG Data REG Data REG Data REG Data
13 - 1001 2001 3001 1501 2501
Status

DI Signals

AI Signals

DO Signals

AO Signals

Hv1
Info

… … - - 1002 2002 3002 1502 2502

HART Variable

31 - … … 3003 … …
Hv2
32 1032 32 1160 2128 3004 1564 2596
Input Sig.

Signals
Output

33 1033 33 …
+ HV

… … … …
431 1431 431 3254
Hv x
3255

Register Area Extended HART Data

5001 – 6536 HART Variablen + DV Status
6601 – 6616 HART Livelist
6617 – 6744 DEVSTATUS - HART Device Status
6745 – 6872 HART Extended Device Status
Details see HART variables
7001 – 7512 HART UNIT CODE

IS1+ MODBUS V3.00 E - Technical alterations reserved - 23

 Operating Instructions

MODBUS interface description

3.1.1 Input and Output Signal blocking

Separately for the input and the output area the signals of the IO modules are put to data blocks, starting
with the slot 1 on a defined MODBUS Startaddress, according the row of the I/O modules. This process has
the advantage, that all data can be read and/or written in one telegram, where the result is an efficient data
transmission with a minimum of protocol overhead.
The following table shows the data length of the individual I/O module types.

Module selection in Data length [Registers] IOM

IS1 DTM or in IS Wizard Input Output Type
9460/12-08-11 AIM 4/8 Exi 8 -
9461/12-08-11 AIMH8 2w Exi 8 -
9461/12-08-11 AIMH8+4HV 2w Exi 16 -
9461/12-08-11 AIMH8+8HV 2w Exi 24 -
9461/12-08-21 AIMH 8 Exi 8 -
9461/12-08-21 AIMH 8 +4HV Exi 16 -
9461/12-08-21 AIMH 8 +8HV Exi 24 -
9461/15-08-12 AIMH8 2w Exn 8 -
9461/15-08-12 AIMH8+4HV 2w Exn 16 -
IS1
9461/15-08-12 AIMH8+8HV 2w Exn 24 -
9462/... SAIMH Usable with PROFIBUS and PROFIsafe only
9465/12-08-11 AOM 8 Exi - 8
9466/12-08-11 AOMH 8 Exi - 8
9466/12-08-11 AOMH 8 +4HV Exi 8 8
9466/12-08-11 AOMH 8 +8HV Exi 16 8
9466/15-08-12 AOMH 8 Exn - 8
9466/15-08-12 AOMH 8+4HV Exn 8 8
9466/15-08-12 AOMH 8+8HV Exn 16 8
9468/3x-08-xx 8AIH 9 0
9468/3x-08-xx 8AOH 1 8
9468/3x-08-xx 6AIH+2AOH 7 2
9468/3x-08-xx 8AIH/8AOH 9 8
9468/3x-08-xx 8AIH +4HV 17 0
9468/3x-08-xx 8AOH +4HV 9 8
9468/3x-08-xx 8AIH/8AOH +4HV 17 8
9468/3x-08-xx 8AIH +8HV 25 0
9468/3x-08-xx 8AOH +8HV 17 8
9468/3x-08-xx 8AIH/8AOH +8HV 25 8
IS1+
9469/35-08-xx 8IH Exn 9 0
9469/35-08-xx 8OH Exn 1 8
9469/35-08-xx 6IH+2OH Exn 7 2
9469/35-08-xx 8IH/8OH Exn 9 8
9469/35-08-xx 8IH +4HV Exn 17 0
9469/35-08-xx 8OH +4HV Exn 9 8
9469/35-08-xx 8IH/8OH +4HV Exn 17 8
9469/35-08-xx 8IH +8HV Exn 25 0
9469/35-08-xx 8OH +8HV Exn 17 8
9469/35-08-xx 8IH/8OH +8HV Exn 25 8
9470/22-16-11 DIM 16 NamExi 2 -
9470/22-16-11 DIM 16+CF NamExi 4 1
IS1
9470/25-16-12 DIM16 Nam Exn 2 -
9470/25-16-12 DIM16+CF Nam Exn 4 1

24 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Module selection in Data length [Registers] IOM

IS1 DTM or in IS Wizard Input Output Type
9470/3x-16-xx DIM 16 2 0
9470/3x-16-xx DI/DO 16 2 2
9470/3x-16-xx DI/DO 16+2CF 4 4 IS1+
9470/3x-16-xx DI/DO 16+6CF 8 4
9470/3x-16-xx DI/DO 16+8CF 10 4
9471/10-16-11 DIM 16 24V 2 -
9471/10-16-11 DIM 16+CF 24V 4 1
IS1
9471/15-16-12 DIM 16 24V Exn 2 -
9471/15-16-12 DIM 16+CF24V Exn 4 1
9471/35-16-xx DIM 16 Exn 2 0
9471/35-16-xx DI/DO 16 Exn 2 1
9471/35-16-xx DI/DO 16+2CF Exn 4 2
9471/35-16-xx DI/DO 16+6CF Exn 8 2
9471/35-16-xx DI/DO 16+8CF Exn 10 2
IS1+
9472/35-16-xx DIM 16 24V Exn 2 0
9472/35-16-xx DI/DO 24V Exn 2 1
9472/35-16-xx DI/DO 24V+2CF Exn 4 2
9472/35-16-xx DI/DO 24V+6CF Exn 8 2
9472/35-16-xx DI/DO 24V+8CF Exn 10 2
9475/12-04-11 DOM 4 Exi1 - 1
9475/12-04-21 DOM 4 Exi2 - 1
9475/12-04-31 DOM 4 Exi3 - 1
9475/12-08-41 DOM 8 Exi1 - 1
9475/12-08-51 DOM 8 Exi2 - 1
IS1
9475/12-08-61 DOM 8 Exi3 - 1
9475/12-07-71 DOM 7 Exi4 - 1
9475/22-04-21 DOM 4 OD Exi2 - 1
9475/22-08-51 DOM 8 OD Exi2 - 1
9475/22-08-61 DOM 8 OD Exi3 - 1
9475/3x-04-xx DOM 4 1 1
IS1+
9475/3x-08-xx DOM 8 1 1
9477/10-08-12 DOM 8 Rel - 1
9477/12-08-12 DOM 8 60V Rel Z1 - 1
9477/12-06-12 DOM 6 250VRel Z1 - 1
9477/15-08-12 DOM 8 Rel Z2 - 1 IS1
9478/22-08-51 DOMV8 OD Exi1 - 1
9480/12-08-11 TIM 8 R Exi 8 -
9481/12-08-11 TIM 8 mV Exi 8 -
9482/3x-08-xx 8TIM 9 0 IS1+
AIM 4/8 (9460/.., 9461/..) 8 -
AOM 8 (9465/.., 9466/..) - 8
-
DIM 16 (9470/.., 9471/..) 1 -
DOM 4/8 (9475/..) - 1

IS1+ MODBUS V3.00 E - Technical alterations reserved - 25

 Operating Instructions

MODBUS interface description

3.1.1.1 Register allocation of I/O data

Two separate memory areas are available for input and output data.
The read access to this memory areas can be selected via the different MODBUS functions.

Input signals (DI / AI):

MODBUS address MODBUS address

Allowed
on interface *2) in AS and IS1 DTM
Content MODBUS
Register Bit (Coil) Register Bit (Coil) functions
Address Address Address Address *1)

0x000c (12) 0x00c0 (192) 0x000d (13) 0x00c1 (193) Signal statuses
1 register per read:
module
02 (input coil)
Input data

0x001b (27) 0x01b0 (432) 0x001c (28) 0x01b1 (433) 1 bit per signal
or
Module alarms 04
0x001c (28) 0x01c0 (448) 0x001d (29) 0x01c1 (449)
slot 0 to 15 (input register)
Module alarms
0x001d (29) 0x01d0 (464) 0x001e (30) 0x01d1 (465) optional:
slot 16
Status register 03 (holding
0x001e (30) 0x01e0 (480) 0x001f (31) 0x01e1 (481)
CPU register) with
0x001f (31) 0x01f0 (496) 0x0020 (32) 0x01f1 (497) Register offset
. . . . Data block +1000
. . . . input signals
0x01ae (430) 0x1aef (6895) 0x01af (431) 0x1af0 (6896)

Output signals (DO / AO):

MODBUS Address MODBUS Address

on interface *2) in AS and IS1 DTM Allowed
Content MODBUS
Register Bit (Coil) Register Bit (Coil) functions
Output data

Address Address Address Address *1)

read:
Control register 01 (output coil)
0x001e (30) 0x01e0 (480) 0x001f (31) 0x01e1 (481)
CPU 03 (holding
register)
0x001f (31) 0x01f0 (496) 0x0020 (32) 0x01f1 (497)
. . . . Data block write:
. . . . output signals 05, 15 (coil)
0x01ae (430) 0x1aef (6895) 0x01af (431) 0x1af0 (6896) 06, 16 (register)

*1): The MODBUS functions 01, 02, 05 and 15 use coil addresses.
The MODBUS functions 03, 04, 06 and 16 use register addresses.

Rule for the least significant bit of a register: Coil address = (Register address – 1) * 16 + 1

*2): Attention!

In the data telegrams on the interfaces a Register/Coil address decremented by ´1´ is

transmitted from IS1 according MODBUS specification.
Some automation systems show the same addresses in the software as they are on the
interfaces. In this case the Register- and Coil addresses of the IS1 system must be
decremented by one for use in the automation system.

26 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Example:

An IS1+ field station is used with the following modules:

Module type: CPU DIM16 DIM 16 + CF DOM 8 AIM 8 AOM 8

Slot: 0 1 2 3 4 5

With this configuration the register address allocations to the signals are as follows:

Input signals MODBUS address

Read Register Read Register Read Coil
Slot Module type Signals
M. Function 4 M. Function 3 M. Function 2
DI 0 ... DI 15 32 1032 497 – 512
1 DIM 16
Status 0 ... 15 33 1033 513 – 528
DI 0 ... DI 15 34 1034 529 – 544
Status 0 ... 15 35 1035 545 – 560
2 DIM 16 + CF
Counter / freq. input 14 36 1036 561 – 576
Counter / freq. input 15 37 1037 577 – 592
AI 0 38 1038
AI 1 39 1039
AI 2 40 1040
AI 3 41 1041
4 AIM
AI 4 42 1042
AI 5 43 1043
AI 6 44 1044
AI 7 45 1045

MODBUS address
Output signals (read with MODBUS functions 1 or 3,
write with MODBUS functions 6, 15 or 16)

Slot Module type Signals Register read / write Coil

2 DIM16 + CF Control register for counter 32 497 – 512

3 DOM 8 DO 0 ... DO 7 33 513 – 528

AO 0 34
AO 1 35
AO 2 36
AO 3 37
5 AOM
AO 4 38
AO 5 39
AO 6 40
AO 7 41

IS1+ MODBUS V3.00 E - Technical alterations reserved - 27

 Operating Instructions

MODBUS interface description

3.1.2 Signal Type blocking (DI, AI, HV, DO, AO)

Separately for the signal types DI, AI, HV (HART Variable), DO and AO the signals of the IO modules are
grouped to data blocks, starting with the slot 1 on a defined MODBUS Startaddress, according the row of the
I/O modules. This process has the advantage, that all data of the same signal type can be read and/or writ-
ten in one telegram, where the result is an efficient data transmission with a minimum of protocol overhead.
The following table shows the data length and allocation to the different signal types of the individual I/O
module types.
F3 READ HOLDING REGISTERS
F4 READ INPUT REGISTERS F6, F16 PRESET MULTIBLE REGS
DI only: F2 READ INPUT STATUS
DO only: F1, F15 R/W Coils
Module Type from Reg. from Reg. from Reg. from Reg. from Reg.
and Description 1001 (1000) 2001 (2000) 3001 (3000) 1501 (1500) 2501 (2500)
Num. Num. Num. Num. Num.
DI Reg. AI Reg. HV Reg. DO Reg. AO Reg.
9460/12-08-11 AIM 4/8 Exi . . 8AI 8 . . . . . .
9460/12-08-12 AIM 4/8 . . 8AI 8 . . . . . .
9461/12-08-11 AIMH8 2w Exi . . 8AI 8 . . . . . .
9461/12-08-11 AIMH8+4HV 2w Exi . . 8AI 8 4HV 8 . . . .
9461/12-08-11 AIMH8+8HV 2w Exi . . 8AI 8 8HV 16 . . . .
9461/15-08-12 AIMH8 2w Exn . . 8AI 8 . . . . . .
9461/15-08-12 AIMH8+4HV 2w Exn . . 8AI 8 4HV 8 . . . .
9461/15-08-12 AIMH8+8HV 2w Exn . . 8AI 8 8HV 16 . . . .
9461/12-08-21 AIMH 8 Exi . . 8AI 8 . . . . . .
9461/12-08-21 AIMH 8+4HV Exi . . 8AI 8 4HV 8 . . . .
9461/12-08-21 AIMH 8+8HV Exi . . 8AI 8 8HV 16 . . . .
9461/15-08-22 AIMH 8 Z2 . . 8AI 8 . . . . . .
9465/12-08-11 AOM 8 Exi . . . . . . . . 8AO 8
9465/15-08-12 AOM 8 Z2 . . . . . . . . 8AO 8
9466/12-08-11 AOMH 8 Exi . . . . . . . . 8AO 8
9466/12-08-11 AOMH 8+4HV Exi . . . . 4HV 8 . . 8AO 8
9466/12-08-11 AOMH 8+8HV Exi . . . . 8HV 16 . . 8AO 8
9466/15-08-12 AOMH 8 Exn . . . . . . . . 8AO 8
9466/15-08-12 AOMH 8+4HV Exn . . . . 4HV 8 . . 8AO 8
9466/15-08-12 AOMH 8+8HV Exn . . . . 8HV 16 . . 8AO 8
9468(69)/3x-08-xx 8AIH . . 8AI 8 . . . . . .
9468(69)/3x-08-xx 8AOH . . . . . . . . 8AO 8
9468(69)/3x-08-xx 6AIH+2AOH . . 6AI 6 . . . . 2AO 2
9468(69)/3x-08-xx 8AIH/8AOH . . 8AI 8 . . . . 8AO 8
9468(69)/3x-08-xx 8AIH +4HV . . 8AI 8 4HV 8 . . . .
9468(69)/3x-08-xx 8AOH +4HV . . . . 4HV 8 . . 8AO 8
9468(69)/3x-08-xx 8AIH/8AOH +4HV . . 8AI 8 4HV 8 . . . .
9468(69)/3x-08-xx 8AIH +8HV . . 8AI 8 8HV 16 . . . .
9468(69)/3x-08-xx 8AOH +8HV . . . . 8HV 16 . . 8AO 8
9468(69)/3x-08-xx 8AIH/8AOH +8HV . . 8AI 8 8HV 16 . . 8AO 8
9470/12-16-11 DIM 16 NamExi DI ST 2 . . . . . . . .
9470/22-16-11 DIM 16 NamExi DI ST 2 . . . . . . . .
9470/22-16-11 DIM 16+CF NamExi DI ST 2CF 4 . . . . DO CR 1 . .
9470/25-16-12 DIM16 Nam Exn DI ST 2 . . . . . . . .
9470/25-16-12 DIM16+CF Nam Exn DI ST 2CF 4 . . . . DO CR 1 . .

AI Analog Input DO Digital Output

AO Analog Output CR Counter Reset, Start, Stop
DI ST 2CF Digital Input, Status, Counter Frequency HV HART Variable

28 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

F3 READ HOLDING REGS.

F4 READ INPUT REGISTERS
DI only: F2 READ INPUT STATUS F6, F16 PRESET MULTIBLE REGS
DO only: F1, F15 R/W Coils
Module Type from Reg. from Reg. from Reg. from Reg. from Reg.
and Description 1001 (1000) 2001 (2000) 3001 (3000) 1501 (1500) 2501 (2500)
Num. Num. Num. Num. Num.
DI Reg. AI Reg. HV Reg. DO Reg. AO Reg.
9470/3x-16-xx DIM 16 DI ST 2 . . . . . . . .
9470/3x-16-xx DI/DO 16 DI ST 2 . . . . 16DO 2 . .
9470/3x-16-xx DI/DO 16+2CF DI ST 2CF 4 . . . . 16DO CR 4 . .
9470/3x-16-xx DI/DO 16+2CF DI ST 2CF 4 . . . . 16DO CR 4 . .
9470/3x-16-xx DI/DO 16+6CF DI ST 6CF 8 . . . . 16DO CR 4 . .
9470/3x-16-xx DI/DO 16+8CF DI ST 8CF 10 . . . . 16DO CR 4 . .
9471/10-16-11 DIM 16 24V DI ST 2 . . . . . . . .
9471/10-16-11 DIM 16+CF 24V DI ST 2CF 4 . . . . DO CR 1 . .
9471/15-16-12 DIM16 24V Exn DI ST 2 . . . . . . . .
9471/15-16-12 DIM16+CF 24V Exn DI ST 2CF 4 . . . . DO CR 1 . .
9471/12-16-11 DIM 16 24VExi DI ST 2 . . . . . . . .
9471/12-16-11 DIM 16+CF 24VExi DI ST 2CF 4 . . . . DO CR 1 . .
9471/35-16-xx DIM 16 Exn DI ST 2 . . . . . . . .
9471/35-16-xx DI/DO 16 Exn DI ST 2 . . . . 16DO 2 . .
9471/35-16-xx DI/DO 16+2CF Exn DI ST 2CF 4 . . . . 16DO CR 4 . .
9471/35-16-xx DI/DO 16+6CF Exn DI ST 6CF 8 . . . . 16DO CR 4 . .
9471/35-16-xx DI/DO 16+8CF Exn DI ST 8CF 10 . . . . 16DO CR 4 . .
9472/35-16-xx DIM 16 Exn DI ST 2 . . . . . . . .
9472/35-16-xx DI/DO 24V Exn DI ST 2 . . . . 16DO 2 . .
9472/35-16-xx DI/DO 24V+2CF Exn DI ST 2CF 4 . . . . 16DO CR 4 . .
9472/35-16-xx DI/DO 24V+6CF Exn DI ST 6CF 8 . . . . 16DO CR 4 . .
9472/35-16-xx DI/DO 24V+8CF Exn DI ST 8CF 10 . . . . 16DO CR 4 . .
9475/12-04-11 DOM 4 Exi1 . . . . . . 4DO 1 . .
9475/12-04-21 DOM 4 Exi2 . . . . . . 4DO 1 . .
9475/12-04-31 DOM 4 Exi3 . . . . . . 4DO 1 . .
9475/15-04-22 DOM 4 Z2 . . . . . . 4DO 1 . .
9475/12-08-41 DOM 8 Exi1 . . . . . . 8DO 1 . .
9475/12-08-51 DOM 8 Exi2 . . . . . . 8DO 1 . .
9475/12-08-61 DOM 8 Exi3 . . . . . . 8DO 1 . .
9475/22-04-21 DOM 4 OD Exi2 . . . . . . 4DO 1 . .
9475/22-08-51 DOM 8 OD Exi2 . . . . . . 8DO 1 . .
9475/22-08-61 DOM 8 OD Exi3 . . . . . . 8DO 1 . .
9475/3x-04-xx DOM 4 . . . . . . 4DO 1 . .
9475/3x-08-xx DOM 8 . . . . . . 8DO 1 . .
9477/10-08-12 DOM 8 Rel . . . . . . 8DO 1 . .
9477/12-08-12 DOM 8 60V Rel Z1 . . . . . . 8DO 1 . .
9477/12-06-12 DOM 6 250VRel Z1 . . . . . . 6DO 1 . .
9477/15-08-12 DOM 8 Rel Z2 . . . . . . 8DO 1 . .
9478/22-08-51 DOMV8 OD Exi1 . . . . . . 8DO 1 . .
9480/12-08-11 TIM 8 R Exi . . 8AI 8 . . . . . .
9480/15-08-12 TIM 8 R Z2 . . 8AI 8 . . . . . .
9481/12-08-11 TIM 8 mV Exi . . 8AI 8 . . . . . .
9481/15-08-12 TIM 8 mV Z2 . . 8AI 8 . . . . . .
9482/3x-08-xx 8TIM . . 8AI 8 . . . . . .

IS1+ MODBUS V3.00 E - Technical alterations reserved - 29

 Operating Instructions

MODBUS interface description

3.1.3 Configuration example IS1 Fieldstation

In- and Out Signal blocking Signal type blocking
F3 F3 READ HOLDING REGS
F2 F4 READ INPUT REGS
F3 F6, F16 F6, F16 PRESET REGS
F4 DI only: F2 READ INPUT STATUS
F1, F15 DO only: F1, F15 R/W Coils

IN Regs. OUT Regs DI AI HV DO AO

REG REG IOM REG IOM REG IOM REG IOM REG IOM REG IOM REG IOM
32 1032 DI 32 2 1001 DI 2001 AI_0 3001 1501 2 2501
1 1 Hv1
33 1033 St 33 1002 St 2002 AI_1 3002 1502 2502
34 1034 DI 34 1003 DI 2003 AI_2 3003 1503 2503
3 Hv2 3
35 1035 St 35 1004 St 2004 AI_3 3004 1504 2504
2 2 5 7 6
36 1036 CF1 36 1005 CF1 2005 AI_4 3005 1505 2505
Hv3
37 1037 CF2 37 4 1006 CF2 2006 AI_5 3006 1506 4 2506
38 1038 DI 38 1007 DI 2007 AI_6 3007 1507 - 2507
Hv4
39 1039 St 39 1008 St 2008 AI_7 3008 1508 - 2508
3 3
40 1040 CF1 40 1009 CF1 2009 AI_0 3009 1509 - 2509
Hv1
41 1041 CF2 41 1010 CF2 2010 AI_1 3010 1510 - 2510
6
42 1042 St 4 42 1011 - - 2011 AI_2 3011 1511 - 2511
Hv2
43 1043 AI_0 43 1012 - - 2012 AI_3 3012 1512 - 2512
7 8 8
44 1044 AI_1 44 1013 - - 2013 AI_4 3013 1513 - 2513
Hv3
45 1045 AI_2 45 1014 - - 2014 AI_5 3014 1514 - 2514
46 1046 AI_3 46 1015 - - 2015 AI_6 3015 1515 - 2515
Hv4
47 1047 AI_4 5 47 1016 - - 2016 AI_7 3016 1516 - 2516
48 1048 AI_5 48 1017 - - 2017 AI_0 3017 - - 1517 - 2517 -
49 1049 AI_6 49 1018 - - 2018 AI_1 3018 - - 1518 - 2518 -
8
50 1050 AI_7 50 1019 - - 2019 AI_2 3019 - - 1519 - 2519 -
51 1051 St 51 1020 - - 2020 AI_3 3020 - - 1520 - 2520 -
9
52 1052 St 6 52 1021 - - 2021 AI_4 3021 - - 1521 - 2521 -
53 1053 AI_0 53 1022 - - 2022 AI_5 3022 - - 1522 - 2522 -
54 1054 AI_1 54 - 1023 - - 2023 AI_6 3023 - - 1523 - 2523 -
55 1055 AI_2 55 - 1024 - - 2024 AI_7 3024 - - 1524 - 2524 -
56 1056 AI_3 56 - 1025 - - 2025 - - 3025 - - 1525 - 2525 -
57 1057 AI_4 57 - 1026 - - 2026 - - 3026 - - 1526 - 2526 -
58 1058 AI_5 58 - 1027 - - 2027 - - 3027 - - 1527 - 2527 -
59 1059 AI_6 ... - ... - - ... - - ... - - ... - ... -
60 1060 AI_7
61 1061 St 7
62 1062
Hv1
63 1063
64 1064
Hv2
65 1065
66 1066
Sample configuration IS1 Fieldstation:
Hv3
67 1067
68 1068
Hv4 IOM Num. Register
69 1069 Modultype
70 1070 St slot INP OUT
71 1071
Hv1 1 DIM 16 2 0
72 1072
73 1073 2 DIM 16 CF 4 1
Hv2
74 1074 8
75 1075 3 DIOM DI/DO 16+2CF 4 4
Hv3
76 1076
77 1077
4 DOM 8 with Status 1 1
Hv4
78 1078 5 AUMH 8 AIH with Status 9 0
79 1079 AI_0
80 1080 AI_1 6 AUMH 8 AOH with Status 1 8
81 1081 AI_2 7 AUMH 8 AIH + 4HV with Status 17 0
82 1082 AI_3
83 1083 AI_4 9 8 AUMH 8AO + 4HV with Status 9 8
84 1084 AI_5
9 8TIM with Status 9 0
85 1085 AI_6
86 1086 AI_7
87 1087 St

30 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.1.4 Rules for message processing:

MODBUS register limits
Input Data Output Data
Read with Read with F1 or F3
F2 or F4 Write with F6, F15, F16
[Reg. Addr.] [Reg. Address] [Coil Address]
Status Info 13 – 31 - 193 – 496
32– 431 - 497 – 6896
Input Signals + HV
1032 – 1431 -
Ouput Signals - 32 – 431 497 – 6896
DI Signal Typ blocked 1001 – 1160
AI Signal Typ blocked 2001 – 2128
HV Signal Typ blocked 3001 – 3255
DO Signal Typ blocked 1501 – 1564
AO Signal Typ blocked 2501 – 2596
-
HART Variables + DV Status 5001 – 6536
HART Livelist 6601 – 6616
HART Device Status 6617 – 6744
HART Extended Device Status 6745 – 6872
HART UNIT CODE 7001 – 7512
Accesses outside the a. m. MODBUS register limits are acknowledged with the error message 0x02 ´Illegal
Data Address´.
 Register areas not configured:
Write messages to register areas not configured are accepted and these data transferred to the register.
These data can also be read back. The data are not allocated to the I/O signals on the modules.

 Read and write messages are only processed in CPM state 2 (Data exchange with AS (config + parame-
ters from IS1 DTMs)) and CPM state 5 (left data exchange with AS).
In all other CPM states the error code 0x05 ´Acknowledge´ is returned.
See also ´MODBUS error codes´

Exception: Read access to the status register (reg. 31 input) and write-read access to the control
register (reg. 31 output) are always possible.

 For bit-access functions write and read access is possible without consideration of the register limits.
However, it is to be noted:
After power on or after the loss of the data exchange due to a client in the data exchange, the value
0x8000 is written to the output registers in the IS1 CPU and thus all outputs on the module placed in the
safe setting. On writing to such an output register next time, the entire register is to be overwritten the
first time (e.g. using the MODBUS functions 6, 15 or 16) to place all output bits is a defined state. From
then on changes to the individual bits can be updated using function 5 or 15.
Details see MODBUS Functions

 A redundant CPU can also be started using start condition 'Write message' by a write message to the
control register or an output area that is not configured.

 Address on interface = address in the AS - 1

(This is a generally valid MODBUS rule for coil and register addresses)

see Register allocation of I/O data hint 2 !

 Maximum telegram length = 125 Register according MODBUS TCP Spec.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 31

 Operating Instructions

MODBUS interface description

3.1.5 Extract from the allocation table

No. Address No. Address No. Address No. Address

Reg. Coil Reg. Coil Reg. Coil Reg. Coil
1 32 497 - 512 65 96 1521 - 1536 129 160 2545 - 2560 193 224 3569 - 3584
2 33 513 - 528 66 97 1537 - 1552 130 161 2561 - 2576 194 225 3585 - 3600
3 34 529 - 544 67 98 1553 - 1568 131 162 2577 - 2592 195 226 3601 - 3616
4 35 545 - 560 68 99 1569 - 1584 132 163 2593 - 2608 196 227 3617 - 3632
5 36 561 - 576 69 100 1585 - 1600 133 164 2609 - 2624 197 228 3633 - 3648
6 37 577 - 592 70 101 1601 - 1616 134 165 2625 - 2640 198 229 3649 - 3664
7 38 593 - 608 71 102 1617 - 1632 135 166 2641 - 2656 199 230 3665 - 3680
8 39 609 - 624 72 103 1633 - 1648 136 167 2657 - 2672 200 231 3681 - 3696
9 40 625 - 640 73 104 1649 - 1664 137 168 2673 - 2688 201 232 3697 - 3712
10 41 641 - 656 74 105 1665 - 1680 138 169 2689 - 2704 202 233 3713 - 3728
11 42 657 - 672 75 106 1681 - 1696 139 170 2705 - 2720 203 234 3729 - 3744
12 43 673 - 688 76 107 1697 - 1712 140 171 2721 - 2736 204 235 3745 - 3760
13 44 689 - 704 77 108 1713 - 1728 141 172 2737 - 2752 205 236 3761 - 3776
14 45 705 - 720 78 109 1729 - 1744 142 173 2753 - 2768 206 237 3777 - 3792
15 46 721 - 736 79 110 1745 - 1760 143 174 2769 - 2784 207 238 3793 - 3808
16 47 737 - 752 80 111 1761 - 1776 144 175 2785 - 2800 208 239 3809 - 3824
17 48 753 - 768 81 112 1777 - 1792 145 176 2801 - 2816 209 240 3825 - 3840
18 49 769 - 784 82 113 1793 - 1808 146 177 2817 - 2832 210 241 3841 - 3856
19 50 785 - 800 83 114 1809 - 1824 147 178 2833 - 2848 211 242 3857 - 3872
20 51 801 - 816 84 115 1825 - 1840 148 179 2849 - 2864 212 243 3873 - 3888
21 52 817 - 832 85 116 1841 - 1856 149 180 2865 - 2880 213 244 3889 - 3904
22 53 833 - 848 86 117 1857 - 1872 150 181 2881 - 2896 214 245 3905 - 3920
23 54 849 - 864 87 118 1873 - 1888 151 182 2897 - 2912 215 246 3921 - 3936
24 55 865 - 880 88 119 1889 - 1904 152 183 2913 - 2928 216 247 3937 - 3952
25 56 881 - 896 89 120 1905 - 1920 153 184 2929 - 2944 217 248 3953 - 3968
26 57 897 - 912 90 121 1921 - 1936 154 185 2945 - 2960 218 249 3969 - 3984
27 58 913 - 928 91 122 1937 - 1952 155 186 2961 - 2976 219 250 3985 - 4000
28 59 929 - 944 92 123 1953 - 1968 156 187 2977 - 2992 220 251 4001 - 4016
29 60 945 - 960 93 124 1969 - 1984 157 188 2993 - 3008 221 252 4017 - 4032
30 61 961 - 976 94 125 1985 - 2000 158 189 3009 - 3024 222 253 4033 - 4048
31 62 977 - 992 95 126 2001 - 2016 159 190 3025 - 3040 223 254 4049 - 4064
32 63 993 - 1008 96 127 2017 - 2032 160 191 3041 - 3056 224 255 4065 - 4080
33 64 1009 - 1024 97 128 2033 - 2048 161 192 3057 - 3072 225 256 4081 - 4096
34 65 1025 - 1040 98 129 2049 - 2064 162 193 3073 - 3088 226 257 4097 - 4112
35 66 1041 - 1056 99 130 2065 - 2080 163 194 3089 - 3104 227 258 4113 - 4128
36 67 1057 - 1072 100 131 2081 - 2096 164 195 3105 - 3120 228 259 4129 - 4144
37 68 1073 - 1088 101 132 2097 - 2112 165 196 3121 - 3136 229 260 4145 - 4160
38 69 1089 - 1104 102 133 2113 - 2128 166 197 3137 - 3152 230 261 4161 - 4176
39 70 1105 - 1120 103 134 2129 - 2144 167 198 3153 - 3168 231 262 4177 - 4192
40 71 1121 - 1136 104 135 2145 - 2160 168 199 3169 - 3184 232 263 4193 - 4208
41 72 1137 - 1152 105 136 2161 - 2176 169 200 3185 - 3200 233 264 4209 - 4224
42 73 1153 - 1168 106 137 2177 - 2192 170 201 3201 - 3216 234 265 4225 - 4240
43 74 1169 - 1184 107 138 2193 - 2208 171 202 3217 - 3232 235 266 4241 - 4256
44 75 1185 - 1200 108 139 2209 - 2224 172 203 3233 - 3248 236 267 4257 - 4272
45 76 1201 - 1216 109 140 2225 - 2240 173 204 3249 - 3264 237 268 4273 - 4288
46 77 1217 - 1232 110 141 2241 - 2256 174 205 3265 - 3280 238 269 4289 - 4304
47 78 1233 - 1248 111 142 2257 - 2272 175 206 3281 - 3296 239 270 4305 - 4320
48 79 1249 - 1264 112 143 2273 - 2288 176 207 3297 - 3312 240 271 4321 - 4336
49 80 1265 - 1280 113 144 2289 - 2304 177 208 3313 - 3328 241 272 4337 - 4352
50 81 1281 - 1296 114 145 2305 - 2320 178 209 3329 - 3344 242 273 4353 - 4368
51 82 1297 - 1312 115 146 2321 - 2336 179 210 3345 - 3360 243 274 4369 - 4384
52 83 1313 - 1328 116 147 2337 - 2352 180 211 3361 - 3376 244 275 4385 - 4400
53 84 1329 - 1344 117 148 2353 - 2368 181 212 3377 - 3392 245 276 4401 - 4416
54 85 1345 - 1360 118 149 2369 - 2384 182 213 3393 - 3408 246 277 4417 - 4432
55 86 1361 - 1376 119 150 2385 - 2400 183 214 3409 - 3424 247 278 4433 - 4448
56 87 1377 - 1392 120 151 2401 - 2416 184 215 3425 - 3440 248 279 4449 - 4464
57 88 1393 - 1408 121 152 2417 - 2432 185 216 3441 - 3456 249 280 4465 - 4480
58 89 1409 - 1424 122 153 2433 - 2448 186 217 3457 - 3472 250 281 4481 - 4496
59 90 1425 - 1440 123 154 2449 - 2464 187 218 3473 - 3488 251 282 4497 - 4512
60 91 1441 - 1456 124 155 2465 - 2480 188 219 3489 - 3504 252 283 4513 - 4528
61 92 1457 - 1472 125 156 2481 - 2496 189 220 3505 - 3520 253 284 4529 - 4544
62 93 1473 - 1488 126 157 2497 - 2512 190 221 3521 - 3536 254 285 4545 - 4560
63 94 1489 - 1504 127 158 2513 - 2528 191 222 3537 - 3552 255 286 4561 - 4576
64 95 1505 - 1520 128 159 2529 - 2544 192 223 3553 - 3568 256 287 4577 - 4592

Rule for the least significant bit of a register: Coil address = (Register address – 1) * 16 + 1

32 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.2 Status register CPU

Through the status register the actual status of the CPU (both CPUs in redundant operation) can be read:
Low Byte:
Discrete input 488 481
(Function 2)
Input register 31 7 0 Bit no.
(Function 4)
0 1 1 0 1 1 0 0

0 = No CPU is active
1 = CPU Right is primary (active)
2 = CPU Left is primary (active)

Status CPU Right (slot 1 9442 CPU, slot 0-0 9441 CPU)
Status CPU Left (slot 0 9442 CPU, slot 0-1 9441 CPU)
Left and Right CPM are exchanged using 9440 CPM !

Status CPU:
Value Function Measure / Remedy
value 0 (000) Reserved - -
value 1 (001) Hardware error CPM Exchange CPM
Data Exchange with AS
value 2 (010) Check status information for monitoring
(Config + Parameter from IS1 DTM)
No data exchange
Download config. and parameter data to IS1
value 3 (011) (after power on without config- and
CPU. Start up data exchange from master.
parameter data)
value 4 (100) Configuration- or Parameter failure Check config. and parameter data in IS1 DTM
Data exchange with AS quit
Check bus connection to AS.
value 5 (101) (as well after PowerOn, if config-
Start up data exchange from master
and parameter data are valid)
value 6 Reserved - -
No response from backup CPU on
value 7 (111) Check backup CPU and set into operation.
IS1 internal Link

High Byte:
Discrete Input (Function 2): 496 489 Coil

Input Register 31 (Function 4): 15 8 Bit No.

x x x 0 0 0 0 0

reserved
reserved
reserved
reserved
reserved
1 = common alarm IOM (Signal or module alarms are present)
1 = common alarm primary (active) CPU (Overtemp., Maint. Alarm, ..)
1 = Backup CPU not available, defect or no data exchange with AS

IS1+ MODBUS V3.00 E - Technical alterations reserved - 33

 Operating Instructions

MODBUS interface description

3.3 Control register

One of two redundant CPUs in an IS1+ field station can be started by writing from the automation system to
the control registers in the CPUs.

Data can be written to the control register using the MODBUS functions 06, 15 and 16.

Control register CPU:

Read/write coil 488 481
(Functions 1 / 5, 15)
Read/write register 31 7 0 Bit Nr.
(Functions 3 / 6, 16)
x x x x x x 0 0 (High byte is not used)

1 = Activate Right CPU

2 = Activate Left CPU
0 or 3 = No change of CPU state

Left and Right CPM are exchanged using 9440 CPM !

The following parameters must be set if the control register is to be used:

Parameter name Parameter value

IS1 CPU redundant - Yes (note ´start condition´)
CPU start condition - Control register

The control register for starting one of two redundant CPUs must be written with identical content to both
CPUs (CPU left and right).

The CPU selected as primary (active) by the automation system must be continuously controlled with the
respective control code (value 1 or 2). This facilitates automatic restart of the CPUs after malfunctions.

34 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.4 Module alarms

With the MODBUS functions 02 and 04, 2 registers (register address 29 and 30) with module alarms can be
read. These registers contain one bit per I/O module with the following allocation:

Alarm bit = 0 -> No alarms in module. All inputs or outputs on the module are without errors.
Alarm bit = 1 -> At least one signal alarm (short circuit, open circuit....) or a module alarm (Overtempera-
ture, Maintenance Request …) is present.

With these alarm bits, alarm messages can be generated in the automation system. For input signals addi-
tional status information is available in the cyclic data area (see chapter 3.9 Signal behavior in case of er-
rors).
Details of the alarms can be displayed via the IS1 DTMs.

Allocation of the module alarm bits to the registers:

464 457 456 449

Discrete input
(Function 2)
15 High Byte 8 7 Low Byte 0
Input register 29
(Function 4)
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Module alarms:

Slot 0 (Reserved)
I/O module slot 1
.
I/O module slot 7

I/O module slot 8

.
.
I/O module slot 15

480 473 472 465

Discrete input
(Function 2)
15 High Byte 8 7 Low Byte 0
Input register 30
(Function 4)
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Module alarms:

I/O module slot 16

(all other bits in the

register = 0 (reserved))

IS1+ MODBUS V3.00 E - Technical alterations reserved - 35

 Operating Instructions

MODBUS interface description

3.5 Signal status

16 registers with signal status information can be read via the MODBUS functions 02 and 04 (register ad-
dress 13 to 28).

One status bit is provided per signal with the following allocation:

Status bit = 1 -> No signal malfunction or signal not available. No signal or module alarms present.
Status bit = 0 -> Signal malfunction (short circuit, open circuit, module error....)

One Register can contain 16 signal status bits. Not used bits are set to ´0´.
Details of the alarms can be displayed via the IS1 DTMs.

Register allocation:

Input register Discrete inputs 208 201 200 193 Discrete inputs in reg 13
(Function 4) (Function 2) 15 High Byte 8 7 Low Byte 0 Bit No.
13 193 -208 S15 . . . . . . S8 S7 . . . . . . S0 Slot 1
14 209 - 224 S15 . . . . . . S8 S7 . . . . . . S0 Slot 2
15 225 - 240 S15 . . . . . . S8 S7 . . . . . . S0 Slot 3
16 241 - 256 S15 . . . . . . S8 S7 . . . . . . S0 Slot 4
17 257 - 272 S15 . . . . . . S8 S7 . . . . . . S0 Slot 5
18 273 - 288 S15 . . . . . . S8 S7 . . . . . . S0 Slot 6
19 289 - 304 S15 . . . . . . S8 S7 . . . . . . S0 Slot 7
20 305 - 320 S15 . . . . . . S8 S7 . . . . . . S0 Slot 8
21 321 - 336 S15 . . . . . . S8 S7 . . . . . . S0 Slot 9
22 337 - 352 S15 . . . . . . S8 S7 . . . . . . S0 Slot 10
23 353 - 368 S15 . . . . . . S8 S7 . . . . . . S0 Slot 11
24 369 - 384 S15 . . . . . . S8 S7 . . . . . . S0 Slot 12
25 385 - 400 S15 . . . . . . S8 S7 . . . . . . S0 Slot 13
26 401 - 416 S15 . . . . . . S8 S7 . . . . . . S0 Slot 14
27 417 - 432 S15 . . . . . . S8 S7 . . . . . . S0 Slot 15
28 433 - 448 S15 . . . . . . S8 S7 . . . . . . S0 Slot 16

Status signal 0
Status signal 7
Status signal 15

36 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.6 CPU Redundancy

3.6.1 Non redundant Ethernet Network

Redundant IS1 CPUs can be connected to a not redundant Ethernet Network.

The IP-Addresses of both CPUs must be different.
The control of the redundancy must be handled in the DCS/PLC application.
Input Data can be read from both CPUs.
One of the two CPUs can be switched to the primary state via the control register or other write telegrams.
Valid output data must be written to the primary CPU. ( see Control register and CPU parameters ).

IS1
DCS / PLC (MODBUS TCP client) Engineering FDT Frame HARTDTM
HART DTMs
Station HART DTMs

Ethernet
interface HART DTMs
HART DTM
IS1 IOM DTMs

WEB
Browser IS1 CPU DTM

Cyclic I/O Data +

Status
- configuration
- parameter
- diagnosis
Ethernet - I/O-data (slow)
- I&M data
( not redundant ) - HART

Cu Cu
Switch Switch

Optical Optical
fiber fiber

CPU L CPU R I/O CPU L CPU R I/O

....
IS1+ field station IS1+ field station

Ex HART HART
Zone1

Connection of the IS1 Engineering Station:

The IS1 Engineering Station is connected to one of the two CPUs. Communication and diagnosis data oft he
other CPU can be accessed via a link between both CPUs.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 37

 Operating Instructions

MODBUS interface description

3.6.2 Redundant Ethernet Networks

If redundant Ethernet networks shall be used, the MODBUS TCP client must support redundant Ethernet
interfaces.

Network structure:

IS1
DCS / PLC (MODBUS TCP client) Engineering FDT Frame HARTDTM
HART DTMs
Station HART DTMs
interface L interface R
HART DTMs
HART DTM
IS1 IOM DTMs

WEB
Browser IS1 CPU DTM
Cyclic I/O Data
+ Status

- configuration
- parameter
- diagnosis
Ethernet Ethernet - I/O-data (slow)
network 0 network 1 - I&M data
re - HART

Switch Switch

CPU L CPU R I/O CPU L CPU R I/O

....
IS1+ field station IS1+ field station

Ex HART HART
Zone2

Connection of the IS1 Engineering Station:

The IS1 Engineering Station must be connected to one of the two networks and has only access to one oft
he two CPUs. Configuration-, parameter and diagnosis data oft both CPUs as well as input- and output data
are synchronized between both CPUs and are available for the DTM.

With the Event History Tool (available for 9441 CPU) only data from the connected CPU can be accessed.
If data from both CPUs are requested, the IS1 engineering PC must be connected alternately to each of the
two networks to read the data.

A connection of both networks to one single network is not allowed!

38 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.6.3 Ethernet IP- Addresses:

Depending on the requirements and the planning for the AS (MODBUS TCP clients) the IP addresses for the
two redundant IS CPUs can be set the same (only on usage of redundant networks) or may be different (e.g.
if both IS1 CPUs are connected to one network).

3.6.4 Parameterization:
When setting the parameters for the CPU, the parameter ´CPU Redundant = Yes´ is to be selected in the
IS1 DTMs for redundant operation.
In this case the parameter ´CPU start condition´ is effective.
If the parameter ´CPU Redundant = No´ has been selected, one CPU will start for all write and read mes-
sages except MODBUS function 8 (loopback).
For correct redundancy switching in case of a malfunction on the active interface, the parameter ´Output
modules timeout´ is to be set larger than the maximum switching time from the active IS1 CPU to the inac-
tive IS1 CPU. This switching time is dependent on the behavior of the master (MODBUS TCP client) as well
as on the Ethernet networks.
If the parameter ´Output modules timeout´ is set too low, output signals will briefly change to the safe setting
during switching.

3.6.5 Selection of ´CPU start condition´

The automation system (AS) selects one of the redundant interfaces for active (primary) and the other inter-
face for backup operation. I/O Data is transferred only via the active interface. The selection of the active
interface in the AS must be synchronized with the redundant IS1 CPUs.
The IS1 CPUs monitor different behavior of the two redundant interfaces of the AS as ´CPU start condition´
After detection of a valid start condition on its interface each IS1 CPU changes to active operation.
This synchronization of the active IS1 CPU with the active interface of the AS must be ensured in all cases,
even if e.g. only Input data are read.

The ´CPU start condition´ must only be fulfilled on the active interface of the MODBUS Masters.
Depending on the behavior of the MODBUS Master on the inactive interface and the data telegrams on the
active interface the parameter ´CPU start condition´ has to be selected:

Data traffic on the primary Data traffic on the backup Select parameter
(active) interface (inactive/standby) interface ´CPU start condition´
Read telegram or
R/W Loopback
Write telegram

R Loopback Read telegram

W Loopback Write telegram

R/W R Write telegram

W R Write telegram

R R Control register

R/W R/W Control register

R = Read (MODBUS functions 1, 2, 3 or 4) W = Write (MODBUS functions 6, 15 or 16)

Attention! If the CPU start condition is fulfilled on both CPUs at the same time, so both CPUs try to start.
Both CPU must not be primary (active) at the same time. Via interacted interlocking at the MODBUS traffic of
the already started CPU will be stopped for 5 seconds by a new started CPU. In such a case both CPU
toggle after app. 5 Sec. between primary and backup state.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 39

 Operating Instructions

MODBUS interface description

Startup:
After power on the CPU started first becomes the primary (active). The other CPU becomes the backup
(inactive).
All output modules remain in the safe setting.
All input modules supply cyclic input signals if valid configuration and parameter data are available.

After establishing of a cyclic MODBUS connection the CPU will change to the state ´data exchange´ and
monitors the cyclic data exchange of I/O data.
With a ´Write message´ start condition a redundant CPU can also be started by a write message to an output
area that is not configured.

3.6.6 Download of Configuration and Parameter data to redundant CPUs

Independent of the state of the two CPUs (primary / backup) the access from the IS1 Engineering Station to
the connected CPU is possible.

The configuration and parameter data generated with the IS1 DTMs are transmitted via Ethernet with the
function ´download´ to both CPUs of a redundant IS1 fieldstation and are stored permanent in the socket of
the CPU. If parameters are changed online with the IS1 DTMs, the changed data are also stored in both
CPUs.

So that the replacement of a CPU does not result in the loss of the configuration, and in the event of a con-
figuration error, a download is required; it will not be possible to rectify the error by replacing a CPU.

9441 CPU:
If only one CPU is in operation, newly loaded data can only be saved in the socket for this one CPU. If the
second CPU is placed in operation later, without shutting down the first CPU after the download, the newly
loaded data will be automatically copied to the socket for the new CPU.

If both CPUs are running after power on, the CPU that starts first uses the data available to it and starts to
operate. The CPU starting later compares the data available to it with the data for the CPU already running.
In the case of identical data, this CPU goes into operation and the backup state.

If there are discrepancies in the data, this CPU does not go into operation and signals a config/parameter
error:
- Green LED flashes, red LED on
- LCD: Config/Param. Error
- DTM diagnostics overview indicates CPU state 4
In this case it is necessary to download from IS1 DTM again.

9442 CPU:
Both redundant 9442 CPUs of an IS1 + field station have access to the shared backup storage in the socket.
All Flash memories in the socket and the two CPUs are updated when data changes. When replacing a
CPU, these refreshes memory with the data from the socket.

3.6.7 HART
The HART communication between the IS1 DTMs and HART field devices is possible via any of the two
CPUs.
HART communication is possible immediately after power on without the operation of the MODBUS.
During a redundancy switch over between the two CPUs pending HART Telegrams may be interrupted.

40 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.6.8 Diagnosis using IS1 DTMs

Diagnostics data, input- and output signals as well as I&M data are available in both IS1 CPUs (primary and
backup) and can be read by the IS1 DTMs from both CPUs.
It is only possible to read output data from the primary CPU.

In the case of the operation of an IS1+ field station without AS, it possible to write output data from the IS1
DTMs to any of the two IS1 CPUs.

3.6.9 WEB Server der IS1+ CPUs

Redundant IS1 + CPUs have separate Web servers.
Current configuration and diagnosis information can be displayed.
IP addresses can be displayed and changed. See IP Address setting

Access via Web Browser with: http://xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx = IP-SB Address IS1+ CPU)

3.6.10 Process data of CPUs during redundancy switch over

During standard operation of two redundant CPUs the in- and output signals in the memory of the backup
CPU are cyclically updated by the primary CPU.
During a redundancy switch over all output registers in both CPUs are initialized with 0x8000 and output
signals are frozen. If this output registzers are not overwritten from the AS with valid output data the output
signals will go to safe position after expiring of the timeout (parameter ´ Timeout for output modules TMod´).

IS1+ MODBUS V3.00 E - Technical alterations reserved - 41

 Operating Instructions

MODBUS interface description

3.6.11 State of redundant CPUs

9442 CPU:
9442 CPU has no built-in display. Here the LEDs on the CPUs, as well as the Web server, IS1 DTM or
I.S.Wizard can be used to show the state of the redundant CPUs.

9441 CPU:
There is an LC display in a redundant socket of the 9441 CPU. Data from both 9441 CPUs can be displayed.
The CPU to be displayed is to be selected on the menu. For detailed information on the LCD menu as well
as the LED indications for the CPUs, see the operating instructions for the IS1 9441 CPU.

On the LC display the address of the primary CPU can be seen at the top left of the main menu:
CPU 0-0 Right CPU is primary
CPU 0-1 Left CPU is primary

Examples for states displayed on the 9441 CPU:

CPU primary backup Function -> Action

Data exchange with Primary CPU OK. No error.
State -- CPU cyclically updates I/O data using the I/O
AS (2)
modules as well as via MODBUS TCP.
LCD DataExch -- The connection to the AS is monitored for all read
RUN: on and write messages as per parameter
LED --
ERR: off ´Watchdogtime AS interface´.
Data exchange with Backup CPU communicating with cyclic messag-
State -- es (read or loopback)
AS (2)
The connection to the AS is monitored:
- For read messages as per parameter
LCD -- DataExch
´Watchdogtime AS interface´.
RUN: on In case of loss of connection -> data exchange
LED -- with AS quit (5)
ERR: off
No data exchange present!
Data exchange with After power on, if valid configuration data are
State --
AS quit (5) available or if ´Watchdogtime AS interface´ has
elapsed.
Outputs are in the safe setting.
LCD QuitDataExch -- -> Check:
- LINK LED (OK if on or flashing)
- Ethernet hardware connection (e.g. PING)
- MODBUS TCP master (client) active?
RUN: flashing - Parameters set in AS and IS1+ field station:
LED --
ERR: flashing inverted - IP address, subnet mask, gateway, port
- Monitoring time too short?
Data exchange with There are module errors! CPU is OK.
State --
AS (2) (incorrect module, I/O module not responding …).
LCD DataExch -- I/O alarms are displayed on the LEDs for the I/O
RUN: on module.
LED -- -> Rectify module error!
ERR: flashing
State No data exchange(3) No data exchange (3)
No configuration data or parameter data saved
LCD NoDataExch NoDataExch in the two CPUs.
RUN: flashing RUN: flashing -> Perform download using the IS1 DTMs.
LED
ERR: off ERR: off

42 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

CPU primary Backup Function -> Action

Configuration or
State --
parameter error (4) Configuration or parameter error.
No valid configuration data or parameter data
LCD Config error -- saved in the CPU.
RUN: flashing -> Perform download using the IS1 DTMs.
LED --
ERR: on
State -- Hardware Error CPU hardware error.
If a hardware error occurs in a CPU, the other CPU
LCD -- Hardware Error automatically becomes the primary CPU. This can
RUN: off indicate the state of the faulty backup CPU.
LED -- -> Replace faulty CPU.
ERR: on

Data exchange with

State
AS (2)
The system parameters are set for redundancy.
The backup CPU has failed or is not fitted.
LCD DataExch „—„ The primary CPU continues to work normally.
-> Replace backup CPU or fit and place in op-
eration
RUN: on
LED
ERR: flashing

Data exchange with -- The system parameters are not set for redun-
State dancy. However two CPUs have been fitted:
AS (2)
The primary CPU continues to work normally.
1. Continued operation without redundant CPUs:
LCD DataExch noBackup -> Remove backup CPU
or:
2. Change to operation with redundant CPUs:
-> Configure system with redundant CPUs and
RUN: on
LED -- download from DTM while both CPUs are fitted
ERR: flashing
and in operation.

-- Any state

IS1+ MODBUS V3.00 E - Technical alterations reserved - 43

 Operating Instructions

MODBUS interface description

3.6.12 Prepared / deactivated redundancy of 9441 CPUs

To prepare for future CPU redundancy or to deactivate redundancy, a redundant socket can be installed and
only one 9441 CPU fitted in one of the two sockets.

CPU parameter setting: ´IS1 CPU redundant ´ = No

The mutual checking and provision of alarms in case of an error performed by redundantly operated 9441
CPUs is deactivated in this case.

Attention!
If two redundant CPUs are fitted and the parameter ´IS1 CPU redundant ´ = No is selected, then in the high
byte of the status register the bit ´ Backup CPU not available, defect or no connection´ is set.
The LEDs for the CPUs indicate the state DataExchange ´Module alarm´.

3.7 Setting parameters for the IS1+ field station

Configuration, parameter setting, diagnostics and HART communication for the IS1+ field stations is handled
via the IS1 DTMs using FDT technology.

Configuration, parameterisation, diagnosis and hard communication of IS1+ field station is performed using
MODBUS TCP over the IS1 DTMs with FDT technology or using MODBUS RTU via the tool IS Wizard.
Using 9442 CPU with MODBUS TCP, I.S.Wizard via USB can be used alternatively.

Example:

For further information on the use of the IS1 DTMs see operating instructions ´DTM IS1 Mod´.

44 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.1 CPU parameters

Available with
Parameter name Parameter value (bold = default)
TCP RTU
- 9600 Baud
Baudrate MODBUS RTU
Interface X1, RS485
- 19,2 kBaud - 
- 38,4 kBaud
Parity MODBUS RTU - Odd
Interface X1 - Even
- 

Watchdogtime AS interface Unsigned8 (0 - 255) Default: 20

TWD (x 100 ms) *1) (0 = Watchdog Off)
 

Timeout for output modules

TMod (x 100 ms) *4)
Unsigned8 (1 - 255) Default: 10  
- No (Parameter ´Start condition´ not used.)
CPU redundant
- Yes (note ´start condition´)
 
- No CPU 9442 with PM
PM redundant 9445 only
- Yes
- MODBUS read message (01, 02, 03, 04)
CPU start condition *2) - MODBUS write message (06, 15, 16)  
- Control register

Alternative MODBUS port *3) Unsigned16 (502 - 65535) Default: 502 9441 only -

- Swapped
Float Format HART Var. (HV) *5)
- Nonswapped
 

*1) Attention: A change to the parameter Watchdogtime AS interface in operation will result in a brief inter-
ruption and re-initialization of all existing MODBUS connections.

*2) This parameter is active only in case of redundant operation with 2 CPU´s in one field station.
In non-redundant operation (only one CPU in a field station) the CPU starts with every MODBUS read or
write message except MODBUS function 8 (loopback).

*3) Communication via the MODBUS default port 502 is always possible. Additionally communication via the
alternative MODBUS port is possible using 9441 CPUs.

*4) See Application Hint in chapter 3.10.2

*5) The IS1+ 9442 CPU supports both word swap format variants ´float´ (default) and ´swapped float´ for all
HART data. 9440 and 9441 CPUs support format switching for HART Variable registers from address of
3001 only.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 45

 Operating Instructions

MODBUS interface description

3.7.2 I/O module parameters

3.7.2.1 AIM / AIMH 9461
Parameter Default value Value range / selection
Off
Diagnostic messages of the module On On
Small
Medium Default
Input Filter Medium Big ( 50 Hz) values
Big (60 Hz)
Signal in case of error I 0 Status code in
Signal in case of error I 1 Status code -10 % (4 mA only) ´bold´
Signal in case of error I 2 Status code 0% letters
Signal in case of error I 3 Status code 100 %
Signal in case of error I 4 Status code Status code
Signal in case of error I 5 Status code freeze (initial value 0%)
Signal in case of error I 6 Status code freeze (initial value 100%)
Signal in case of error I 7 Status code
Error detection I 0 On
Error detection I 1 On
Error detection I 2 On
Error detection I 3 On Off
Error detection I 4 On On
Error detection I 5 On
Error detection I 6 On
Error detection I 7 On
Input range I 0 4…20 mA
Input range I 1 4…20 mA
Input range I 2 4…20 mA
Input range I 3 4…20 mA 0…20 mA
Input range I 4 4…20 mA 4…20 mA
Input range I 5 4…20 mA
Input range I 6 4…20 mA
Input range I 7 4…20 mA
Measurement range ac. NAMUR I0 No
Measurement range ac. NAMUR I1 No
Measurement range ac. NAMUR I2 No
Measurement range ac. NAMUR I3 No No
Measurement range ac. NAMUR I4 No Yes
Measurement range ac. NAMUR I5 No
Measurement range ac. NAMUR I6 No
Measurement range ac. NAMUR I7 No
Off
Scan HART livelist On
On
Input No. HART device for pos. 1 Not used
Input No. HART device for pos. 2 Not used
Input No. HART device for pos. 3 Not used
Input No. HART device for pos. 4 Not used
Input No. HART device for pos. 5 Not used 0…7
Input No. HART device for pos. 6 Not used ´Not used´
Input No. HART device for pos. 7 Not used Available only on
Input No. HART device for pos. 8 Not used HART modules
No. HART variable for pos. 1 HART variable No. 2 (AIMH) !
No. HART variable for pos. 2 HART variable No. 2
No. HART variable for pos. 3 HART variable No. 2 HART variable No. 1
No. HART variable for pos. 4 HART variable No. 2 HART variable No. 2
No. HART variable for pos. 5 HART variable No. 2 HART variable No. 3
No. HART variable for pos. 6 HART variable No. 2 HART variable No. 4
No. HART variable for pos. 7 HART variable No. 2
No. HART variable for pos. 8 HART variable No. 2

46 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.2.2 AUMH 9468

Parameter Default value Value range / selection
Off
Diagnostic messages of the module On On
Small
Medium Default
Input Filter Medium Big ( 50 Hz) values
Big (60 Hz)
Signal in case of error I 0 AI Status Code / AO 0% in
Signal in case of error I 1 AI Status Code / AO 0% -10 % (4 mA only) ´bold´
Signal in case of error I 2 AI Status Code / AO 0% 0% letters
Signal in case of error I 3 AI Status Code / AO 0% 100 %
Signal in case of error I 4 AI Status Code / AO 0% AI Status Code / AO 0%
Signal in case of error I 5 AI Status Code / AO 0% freeze (initial value 0%)
Signal in case of error I 6 AI Status Code / AO 0% freeze (initial value 100%)
Signal in case of error I 7 AI Status Code / AO 0%
Error detection I 0 On
Error detection I 1 On
Error detection I 2 On
Error detection I 3 On Off
Error detection I 4 On On
Error detection I 5 On
Error detection I 6 On
Error detection I 7 On
Input range I 0 4…20 mA
Input range I 1 4…20 mA
Input range I 2 4…20 mA
Input range I 3 4…20 mA 0…20 mA
Input range I 4 4…20 mA 4…20 mA
Input range I 5 4…20 mA
Input range I 6 4…20 mA
Input range I 7 4…20 mA
Measurement range ac. NAMUR I0 No
Measurement range ac. NAMUR I1 No
Measurement range ac. NAMUR I2 No
Measurement range ac. NAMUR I3 No No *1)
Measurement range ac. NAMUR I4 No Yes
Measurement range ac. NAMUR I5 No
Measurement range ac. NAMUR I6 No
Measurement range ac. NAMUR I7 No

*1) The parameters ´ Measurement range ac. NAMUR ´ are valid only for Input Signals !
The parameters are visible for all switchable AI/AO Signals but are without effect for the AO signals.

Signal type S0 Analog Input

Signal type S1 Analog Input
Signal type S2 Analog Input
Signal type S3 Analog Input Analog Input *2)
Signal type S4 Analog Input Analog Output
Signal type S5 Analog Input
Signal type S6 Analog Input
Signal type S7 Analog Input

*2) The parameters ´Signal type Sx´ are available only for AI/AO switchable channels in the operating
modes 9468/3x-08-xx 8AIH/8AOH (+4HV / +8HV)

IS1+ MODBUS V3.00 E - Technical alterations reserved - 47

 Operating Instructions

MODBUS interface description

Off
Scan HART livelist On
On
Input No. HART device for pos. 1 Not used
Input No. HART device for pos. 2 Not used
Input No. HART device for pos. 3 Not used
Input No. HART device for pos. 4 Not used
Input No. HART device for pos. 5 Not used 0…7
Input No. HART device for pos. 6 Not used ´Not used´
Input No. HART device for pos. 7 Not used
Input No. HART device for pos. 8 Not used Available only on
HART modules
No. HART variable for pos. 1 HART variable No. 2
(AIMH) !
No. HART variable for pos. 2 HART variable No. 2
No. HART variable for pos. 3 HART variable No. 2 HART variable No. 1
No. HART variable for pos. 4 HART variable No. 2 HART variable No. 2
No. HART variable for pos. 5 HART variable No. 2 HART variable No. 3
No. HART variable for pos. 6 HART variable No. 2 HART variable No. 4
No. HART variable for pos. 7 HART variable No. 2
No. HART variable for pos. 8 HART variable No. 2

48 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.2.3 UMH 9469 Exn

Parameter Default value Value range/selection

Off
Diagnostic messages of the module On On
Small
Medium
Signal Filter Medium Big ( 50 Hz)
Big (60 Hz)
Off
DI Pulse extension 1,2 s Off On
No *1)
Measurement range ac. NAMUR No
Yes
0-20 mA
Signal range 4-20 mA
4-20 mA
Signal in case of error I0 AI Status Code / AO 0% /0
Signal in case of error I1 AI Status Code / AO 0% /0 -10 % (4 mA only) /0
Signal in case of error I2 AI Status Code / AO 0% /0 0% /0
100 % /1
Signal in case of error I3 AI Status Code / AO 0% /0
AI Status Code / AO110 % / 1
Signal in case of error I4 AI Status Code / AO 0% /0
AI Status Code / AO 0% / 0
Signal in case of error I5 AI Status Code / AO 0% /0 freeze (initial value 0% / 0)
Signal in case of error I6 AI Status Code / AO 0% /0 freeze (initial value 100% / 1)
Signal in case of error I7 AI Status Code / AO 0% /0
Error detection I 0 On
Error detection I 1 On
Error detection I 2 On
Error detection I 3 On Off
Error detection I 4 On On
Error detection I 5 On
Error detection I 6 On
Error detection I 7 On
Connection S 0 2 wire analog
Connection S 1 2 wire analog
2 wire analog
Connection S 2 2 wire analog
Connection S 3 2 wire analog
Connection S 4 2 wire analog
2 wire analog
Connection S 5 2 wire analog
3/4 wire analog (Input only)
Connection S 6 2 wire analog
digital
Connection S 7 2 wire analog
Signal type S0
Signal type S1
Signal type S2
Signal type S3 Input *2)
Input
Signal type S4 Output
Signal type S5
Signal type S6
Signal type S7

Off
Scan HART Livelist On
On
Input No. HART device for pos. 1 Not used
0…7 Available if
... ... HART varia-
´Not used´
Input No. HART device for pos. 8 Not used bles (HV) are
configured
No. HART variable for pos. 1 HART variable No. 2 HART variable No. 1
only.
HART variable No. 2
... ... HART variable No. 3
No. HART variable for pos. 8 HART variable No. 2 HART variable No. 4

IS1+ MODBUS V3.00 E - Technical alterations reserved - 49

 Operating Instructions

MODBUS interface description

Parameter dependency / impact

Parameter

Signal Measurement
Signal Signal Error Signal in Input
connection range ac.
type range detection case of error Filter
NAMUR
2 wire
2 wire 0/4-20 mA Input Input analog
0-20 / 4-20 Yes / No
Small
2/3 wire
2/3 wire Initiator Input Input digital
- - Medium
-10 % (nur 4 mA) /0 Big ( 50 Hz)
0% /0
3/4 wire 100 % /1
Big (60 Hz)
3/4 wire 0/4-20 mA Input Input analog 0-20 / 4-20 On / Off Yes / No AI Status Code / AO110 % / 1
(Input only) AI Status Code / AO 0% / 0
freeze (initial value 0% / 0)
freeze (initial value 100% / 1)
2 wire
2 wire 0/4-20 mA Output Output analog
0-20 / 4-20 - -
2/3 wire
Digital Output Output digital
- - -

*1) The parameter ´Measurement range ac. NAMUR ´ are effective for analog input signals only!

*2) The Parameter ´Signal type´ is available for switchable signals in the operating modes with 8I + 8O only.

50 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.2.4 TIMR 9480

Parameter Default value Value range / selection

Off
Diagnostic messages of the module On
On
50 Hz
Input Filter 50 Hz 60 Hz
Off (not recommended)
8 inputs
Operation mode 8 inputs
2 inputs
Signal in case of error I0 Status code
Signal in case of error I1 Status code
Signal in case of error I2 Status code
Signal in case of error I3 Status code Status code
Signal in case of error I4 Status code freeze (initialization value 0%)
Signal in case of error I5 Status code
Signal in case of error I6 Status code
Signal in case of error I7 Status code
Error detection I 0 On
Error detection I 1 On
Error detection I 2 On
Error detection I 3 On Off
Error detection I 4 On On
Error detection I 5 On
Error detection I 6 On
Error detection I 7 On

Type I 0 Pt 100 Pt100

Pt500
Type I 1 Pt 100 Pt1000
Ni100
Type I 2 Pt 100 Ni500
Ni1000
Type I 3 Pt 100 Resistance 10k
Resistance 5k
Resistance 2k5
Type I 4 Pt 100 Resistance 500R
Pt100 GOST
Type I 5 Pt 100 M50 GOST from Fw. V02-04
M100 GOST
Type I 6 Pt 100 Cu53 GOST
Pt46 GOST from Fw. V02-05
Type I 7 Pt 100 Pt50 GOST

Connection I0 4 wire
Connection I1 4 wire
Connection I2 4 wire
Connection I3 4 wire 2 wire
3 wire
Connection I4 4 wire
4 wire
Connection I5 4 wire
Connection I6 4 wire
Connection I7 4 wire

IS1+ MODBUS V3.00 E - Technical alterations reserved - 51

 Operating Instructions

MODBUS interface description

3.7.2.5 TIM mV 9481

Parameter Default value Value range / selection

Off
Diagnostic messages of the module On
On
50 Hz
Input Filter 50 Hz
60 Hz
Signal in case of error I0 Status code
Signal in case of error I1 Status code
Signal in case of error I2 Status code
Signal in case of error I3 Status code Status code
Signal in case of error I4 Status code freeze (initialization value 0%)
Signal in case of error I5 Status code
Signal in case of error I6 Status code
Signal in case of error I7 Status code
Error detection I 0 On
Error detection I 1 On
Error detection I 2 On
Error detection I 3 On Off
Error detection I 4 On On
Error detection I 5 On
Error detection I 6 On
Error detection I 7 On
Type I 0 THC Type K 0…100 mV
THC Type B
Type I 1 THC Type K THC Type E
Type I 2 THC Type K THC Type J
THC Type K
Type I 3 THC Type K THC Type N
Type I 4 THC Type K THC Type R
THC Type S
Type I 5 THC Type K THC Type T
Type I 6 THC Type K THC Type L
THC Type U
Type I 7 THC Type K THC Type XK (L)
Input signal I 0 Balanced
Input signal I 1 Balanced
Input signal I 2 Balanced
Input signal I 3 Balanced Balanced
Input signal I 4 Balanced Unbalanced
Input signal I 5 Balanced
Input signal I 6 Balanced
Input signal I 7 Balanced

52 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.2.6 TIM 9482

Parameter Default value Value range / selection
Off
Diagnostic messages of the module On
On
8 channel precise
Module operation mode 8 channel precise
4 channel fast
Signal in case of error I 0 Status code
Signal in case of error I 1 Status code
... ...
Status code
freeze (initialization value 0%)
Signal in case of error I 6 Status code
Signal in case of error I 7 Status code
Error detection I 0 On
Error detection I 1 On
... ...
Off
On
Error detection I 6 On
Error detection I 7 On
Internal
Selection TC cold junction Internal
External 3 wire
PT100
Type TC ext. cold junction I6-I7 PT100 PT1000
PT100 GOST
Pt100
Type I 0 PT100 Pt500
Pt1000
Ni100
Ni500
Type I 1 PT100 Ni1000
Resistance (Pot) 10k
Resistance (Pot) 5k
Type I 2 PT100 Resistance (Pot) 2k5
Resistance (Pot) 500R
Pt100 GOST
M50 GOST
Type I 3 PT100 M100 GOST
Cu53 GOST
Pt46 GOST
Type I 4 PT100 Pt50 GOST
0…100 mV
THC Type B
THC Type E
Type I 5 PT100 THC Type J
THC Type K
THC Type N
THC Type R
Type I 6 PT100
THC Type S
THC Type T
THC Type L
Type I 7 PT100 THC Type U
THC Type XK (L)
Connection (R) I 0 *1) 4 wire measure (R in Ohm)
Connection (R) I 1 4 wire measure (R in Ohm) 2 wire measure (Pot in Ohm)
... ...
3 wire measure (Pot in %)
4 wire measure (Pot in Ohm)
Connection (R) I 6 4 wire measure (R in Ohm) 4 wire measure (Pot in %)
Connection (R) I 7 4 wire measure (R in Ohm)

*1) Parameter ´Connection´ using THC not functioning. 2 wire measurement is used for TCH

IS1+ MODBUS V3.00 E - Technical alterations reserved - 53

 Operating Instructions

MODBUS interface description

3.7.2.7 DIM (9470/3x in compatible mode)

Parameter Default value Value range / selection

Off
Diagnostic messages of the module On
On
Signal in case of error I 0
Signal in case of error I 1 0
1
.... 0
freeze (initial value 0)
Signal in case of error I 14 freeze (initial value 1)
Signal in case of error I 15
Parameter not
Error detection I 0
available for
Error detection I 1 DIM 24 V !
Off (9471/...)
.... On
On
Error detection I 14
Error detection I 15
Invert I 0
Invert I 1
No
.... No
Yes
Invert I 14
Invert I 15
Pulse extension I 0
Pulse extension I 1 0s
0.6 s
.... 0 Sec.
1.2 s
Pulse extension I 14 2.4 s
Pulse extension I 15
Counter
Freq. 0-1 kHz / DI
Operation mode I 14 Freq. 0-1 kHz / DI Freq. 0-20 kHz gate 50 ms / DI
Freq. 0-20 kHz gate 200 ms / DI
Freq. 0-20 kHz gate 1 s / DI Parameters
available only in
Positive edge the case of
Counter event I 14 Positive edge
Negative edge operating mode
DIM16 + CF!
Operation mode I 15 Freq. 0-1 kHz / DI s. a.

Counter event I 15 Positive edge s. a.

54 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.2.8 DIOM 9470/3x (IS1+)

Parameter Default value Value range / selection

Off
Diagnostic messages of the module On
On
Signal in case of error S 0
Signal in case of error S 1 0
Signal in case of error S 2 1
0
.... freeze (initial value 0)
Signal in case of error S 14 freeze (initial value 1)
Signal in case of error S 15
Error detection S 0
Error detection S 1
Error detection S 2 Off
On
.... On
Error detection S 14
Error detection S 15
Invert DI S0, S1
Invert DI S2, S3
Invert DI S4, S5 No
Invert DI S6, S7 Yes
No
Invert DI S8, S9
Invert DI S10, S11 (affects DI signals only)
Invert DI S12, S13
Invert DI S14, S15
Pulse extension / Filter S0, S1
Pulse extension / Filter S2, S3
Pulse extension / Filter S4, S5 0 s / Off
Pulse extension / Filter S6, S7 0,6 s / Small
0 Sec. 1,2 s / Medium
Pulse extension / Filter S8, S9
2,4 s / Large
Pulse extension / Filter S10, S11
Pulse extension / Filter S12, S13
Pulse extension / Filter S14, S15
Signal type S0, S1
Signal type S2, S3 Parameters availa-
Signal type S4, S5 9470/3x 9471/35, 9472/35 ble only in the case
Signal type S6, S7 of operating mode
Input Input NAMUR Ini/ contact with DI/DO
Signal type S8, S9 Output 3-wire Initiator PNP
Signal type S10, S11 Output
Signal type S12, S13
Signal type S14, S15
Operation mode S8, S9 0 = Counter 16 Bit
1 = Freq. 0,1 - 600 Hz (0,01Hz/Bit)
Operation mode S10, S11 2 = Freq. 1 Hz - 3 kHz (0,05Hz/Bit)
Freq. 1Hz - 3kHz
3 = Freq. 1 Hz - 20 kHz (0,5Hz/Bit)
(0,05Hz/Bit)
Operation mode S12, S13 4 = Up/Down Counter 16 Bit
5 = Up/Down Counter 32 Bit Parameters availa-
Operation mode S14, S15 6 = Freq. 1 Hz - 20 kHz with direction ble only in the case
of operating mode
Counter event S8, S9 with CF (coun-
ter/frequency)
Counter event S10, S11 Positive edge
Positive edge
Counter event S12, S13 Negative edge

Counter event S14, S15

IS1+ MODBUS V3.00 E - Technical alterations reserved - 55

 Operating Instructions

MODBUS interface description

3.7.2.9 AOM / AOMH 9466

Parameter Default value Value range / selection

Off
Diagnostic messages of the module On
On
Signal in case of error O0 0%
Signal in case of error O1 0%
Signal in case of error O2 0% -10 % (4 mA only)
0%
Signal in case of error O3 0%
100 %
Signal in case of error O4 0%
110 %
Signal in case of error O5 0% freeze
Signal in case of error O6 0%
Signal in case of error O7 0%
Error detection O 0 On
Error detection O 1 On
Error detection O 2 On
Error detection O 3 On Off
Error detection O 4 On On
Error detection O 5 On
Error detection O 6 On
Error detection O 7 On
Output range O 0 4…20 mA
Output range O 1 4…20 mA
Output range O 2 4…20 mA
Output range O 3 4…20 mA 0…20 mA
Output range O 4 4…20 mA 4…20 mA
Output range O 5 4…20 mA
Output range O 6 4…20 mA
Output range O 7 4…20 mA
Off
Scan HART livelist On
On
Output No. HART device for pos. 1 Not used
Output No. HART device for pos. 2 Not used
Output No. HART device for pos. 3 Not used
0…7
Output No. HART device for pos. 4 Not used
Not used
Output No. HART device for pos. 5 Not used
Output No. HART device for pos. 6 Not used Available only
Output No. HART device for pos. 7 Not used on HART
Output No. HART device for pos. 8 Not used modules
(AOMH) !
No. HART variable for pos. 1 HART variable No. 2
No. HART variable for pos. 2 HART variable No. 2
No. HART variable for pos. 3 HART variable No. 2 HART variable No. 1
No. HART variable for pos. 4 HART variable No. 2 HART variable No. 2
No. HART variable for pos. 5 HART variable No. 2 HART variable No. 3
No. HART variable for pos. 6 HART variable No. 2 HART variable No. 4
No. HART variable for pos. 7 HART variable No. 2
No. HART variable for pos. 8 HART variable No. 2

56 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.7.2.10 DOM

Value range / selec- Parameter available

Parameter Default value
tion DOM DOMR DOMV
Off
Diagnostic messages of the module On
On
  
Signal in case of error O 0 0
Signal in case of error O 1 0
Signal in case of error O 2 0
Signal in case of error O 3 0 0
1   
Signal in case of error O 4 0 Freeze
Signal in case of error O 5 0
Signal in case of error O 6 0
Signal in case of error O 7 0
Error detection O 0 On
Error detection O 1 On
Error detection O 2 On
Error detection O 3 On Off
On without test current  - -
Error detection O 4 On On
Error detection O 5 On
Error detection O 6 On
Error detection O 7 On
Output 0 and 1 parallel Outputs separate
Output 2 and 3 parallel Outputs separate Outputs separate
  -
Output 4 and 5 parallel Outputs separate Outputs parallel
Output 6 and 7 parallel Outputs separate

IS1+ MODBUS V3.00 E - Technical alterations reserved - 57

 Operating Instructions

MODBUS interface description

3.8 Data word structure of the I/O modules

3.8.1 Analogue modules
Analogue signals are exchanged between the IS1+ field station and an automation system in 16-bit two’s
complement format (signed integer, high byte first if using Register functions). Converting to and from float-
ing point variables (physical values) must be performed in the automation system if required.

3.8.1.1 AIM, AIMH (9460/..., 9461/..., 9468/…, 9469/..)

Measuring range Units Parameter: Diagnosis

% Measurement range limits Range
0 – 20 mA Decimal Hex according NAMUR messages
>23.518 mA No
*1) *1) Short circuit
>21 mA Yes
23.518 mA 32511 7EFF 117.6% No
21 mA 29030 7166 105 % Yes Over range -
. . .

20 mA 27648 6C00 100%

. . .

10 mA 13824 3600 50% Nominal range -

. . .

0 mA 0 0 0%
< 0 mA 0 0 0%

Measuring range Units Parameter: Diagnosis

% Measurement range limits Range
4 – 20 mA Decimal Hex according NAMUR messages
>22.814 mA No
*1) *1) Short circuit
>21 mA Yes
22.814 mA 32511 7EFF 117.6% No
21 mA 29376 72C0 106,25 % Yes Over range -

20 mA 27648 6C00 100%

. . .
Nominal
12 mA 13824 3600 50% -
. . . range
4 mA 0 0 0%
3.999 mA -1 FFFF
3,6 mA -691 FD4D -2,5% Yes Under range -
2.4 mA -2765 F533 -10% No
< 3,6 mA Yes
*1) *1) Line break
< 2.4 mA No

*1) Transmitted value depends on parameterized behavior if an error occurs:

Value transmitted
Parameterized behavior if an error occurs Type of error if an error occurs
freeze All IOM errors Last valid value
-10% All IOM errors -2765 0xF533
0% All IOM errors 0 0x0000
100% All IOM errors 27648 0x6C00
Short circuit 32767 0x7FFF
Status code Open circuit -32762 0x8006
2 wire calibration failed -32749 0x8013
General rule to generate
status information in AS for all AI signals: Parametrization error -32748 0x8014
Plant Stop -32747 0x8015
Signal is disturbed if IOM does not respond -32736 0x8020
Value >= 32512 or Value<= -32512 Config. unequal from module -32735 0x8021
see Behavior of the input signals in case of errors Data not available -32734 0x8022
IOM hardware error -32733 0x8023

58 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Measurement range limits according NAMUR:

The limits of the measurement range to the short circuit and open circuit area can be modified by the param-
eter ´Measurement range limits according NAMUR´ according the above table.
For 9468 AUMH the parameters ´ Measurement range ac. NAMUR ´ are valid for Input Signals only!
The parameters are visible for all switchable AI/AO Signals but are without effect for the AO signals.

Data word structure cyclic analog data AIM 9460/…, AIMH 9461/… without Signal Status

Operation mode Var.

Data Register Signals
8AI 8AI+4HV 8AI+8HV Type

1 AI0
2 AI1
3 AI2
4 AI3 Analog Input signals
INT16
5 AI4 AI0 – AI7
6 AI5
7 AI6
Input

8 AI7
9 - 10 HV-P1
11 – 12 HV-P2
13 – 14 HV-P3
15 – 16 HV-P4 HART Variables
Float
- transmitted on
17 – 18 HV-P5 32
positions P1 - P8
19 – 20 HV-P6
-
21 – 22 HV-P7
23 – 24 HV-P8

IS1+ MODBUS V3.00 E - Technical alterations reserved - 59

 Operating Instructions

MODBUS interface description

Data word structure cyclic data AUMH 9468/… and UMH 9469/.. with Signal Status

8AI 8AO 8AI/8AO 8AI 8AO 8AI/8AO

9468: 8AI 8AO 6AI+2AO 8AI/8AO
+4HV +4HV +4HV +8HV +8HV +8HV

8I 8O 8I/8O 8I 8O 8I/8O
9469: 8I 8O 6I+2O 8I/8O
+4HV +4HV +4HV +8HV +8HV +8HV
Data Reg. Operation mode
S0 - S7 S0 - S7 S0 - S7
1 I0 I0 I0 I0 I0 I0 I0
0 0 0
2 I1 I1 I1 I1 I1 I1 I1
HV-P1 HV-P1
3 I2 I2 I2 I2 I2 I2 I2

4 I3 I3 I3 I3 I3 I3 I3
HV-P2 HV-P2
5 I4 I4 I4 I4 I4 I4 I4

6 I5 I5 I5 I5 I5 I5 I5
HV-P3 HV-P3
Input

S0-S7
7 I6 I6 I6 I6 I6 I6
0
-
8 I7 I7 I7 I7 I7 I7
HV-P4 HV-P4
S0 - S7 S0 - S7 S0 - S7 S0 - S7 S0 - S0 - S7
9 S7
0 0 0 0 0 0
10 – 11 HV-P1 HV-P1 HV-P1 HV-P5 HV-P1
12 – 13 HV-P2 HV-P2 HV-P2 HV-P6 HV-P2
-
14 – 15 HV-P3 HV-P3 HV-P3 HV-P7 HV-P3
16 – 17 HV-P4 HV-P4 HV-P4 HV-P8 HV-P4
- - -
18 – 19 HV-P5 HV-P5
20 – 21 HV-P6 HV-P6
- - -
22 – 23 HV-P7 HV-P7
24 – 25 HV-P8 HV-P8
1 O0 O6 O0 O0 O0 O0 O0
2 O1 O7 O1 O1 O1 O1 O1
3 O2 O2 O2 O2 O2 O2
Output

4 O3 O3 O3 O3 O3 O3
- - -
5 O4 O4 O4 O4 O4 O4
-
6 O5 O5 O5 O5 O5 O5
7 O6 O6 O6 O6 O6 O6
8 O7 O7 O7 O7 O7 O7

Readback: In all 8AI/8AO operation modes using channel parameterization as AO the written output value
can be read via the associated AI signal (Readback). Using channel parameterization as AI,written dedicat-
ed AO signals have no effect.

Variable Type Hint

AI/AO I0-I7 / O0-O7 INT16 scaling see above
DI/DO I0-I7 / O0-O7 (9469/..) INT16 DI: 0 = Off, 1 = On DO: <=0 = Off, >0 = On
Status Bit Signal Status

Status S0 – S7 UINT16 0 disturbed

1 OK
HART variables HV Float 32 HART Variables (HV-Px) are transmitted on positions P1 to P8

60 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.8.1.2 TIM (9480/.. , 9481/.. , 9482/..)

Temperature measurement (1 Digit = 0,1 °C)
Units
Temperature Range Diagnosis messages
Decimal hexadecimal
Line break /
*1) *1)
Upper limit exceeded
*2) *2) *2)
. . .
1000 °C 10000 2710
. . .
1 °C 10 000A
. . .
0 °C 0 0 Temperature measurement range
-0,1 °C -1 FFFF
. . .
-100 °C -1000 FC18
. . .
*2) *2) *2)
Lower limit exceeded
*1) *1)
/ short circuit
*2) The limits of the measurement range are pending on the parameterized input type (see Operating instructions IS1)

2 wire and 4 wire Resistance Measurement Pot in Ohm 500 R ...10K (module 9480 /.. , 9482/..)

Range Units Diagnosis

% Range
500 R 2K5 5K 10 K decimal hexadecimal messages
>588 R >2,94 K > 5,88K >11,76 K *1) *1) Line break
588 R 2,94 K 5,88 K 11,76 K 32511 7EFF 117,6%
. . . Over range -
500 R 2K5 5K 10 K 27648 6C00 100%
. . .
Nominal
250 R 1K250 2K5 5K 13824 3600 50% -
. . . range
0K 0K 0K 0K 0 0 0%

3 wire and 4 wire Resistance Position Measurement Pot in % 500 R...10K (module 9480/.. , 9482/..)

Range Units Diagnosis

% Range
500R 2K5 5K 10 K decimal hexadecimal messages
>588 R >2,94 K >5,88 K >11,76K *1) *1) Line break
position 100 % 27648 6C00 100%
. . .
Nominal
position 50 % 13824 3600 50% -
. . . range
position 0 % 0 0 0%

< 50 R < 250 R < 500 R <1K *1) *1) short circuit

0,02 R 0,1 R 0,2 R 0,4 R Resolution per Digit

Hint: 9480 supports no 4 wire Resistance Position Measurement in %.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 61

 Operating Instructions

MODBUS interface description

0 ... 100 mV measurement ( 9481/.., 9482/.. )

Range Units
% Range Diagnosis messages
0 ... 100 mV decimal hexadecimal
>117,6 mV *1) *1) Upper limit exceeded
117,6 mV 32511 7EFF 117,6 %
Over range -

100 mV 27648 6C00 100 %

. . .
50 mV 13824 3600 50 % Nominal range -
. . .
0 mV 0 0 0%
-0,0036 mV -1 FFFF
Under range
-
-10 mV -2765 F533 -10 % (9481/..)
-117,6 mV -32511 8101 -117,6% (9482/..)
< *1) *1) Lower limit exceeded

Short circuit alarm cannot be detected at Resistance and Voltage measurement !

*1) Transmitted value depends on parameterized behavior if an error occurs:

Value transmitted if
Parameterized behavior if an error occurs Type of error
an error occurs
freeze All IOM errors Last valid value
Short circuit *2) + / - 32767 7FFF / 8001
Open circuit *2) + / - 32762 7FFA / 8006
Status code Upper limit exceeded 32761 7FF9
General rule to generate status Lower limit exceeded -32760 8008
information in AS for all AI signals: Cold Junction error -32752 8010
Signal is disturbed if 2 wire calibration failed -32749 8013
value >= 32512 or value<= -32512 IOM does not respond -32736 8020
see Behavior of the input signals in case of errors
Config. unequal from module -32735 8021
Data not available -32734 8022
IOM hardware error -32733 8023

*2) depending of the direction of signal change at the respective error type a positive or negative Status
code is used:

TIM R 9480/.. TIM mV 9481/..

error type
TIM 9482/.. (R measurement) TIM 9482/.. (mV measurement)
short circuit -32767 (8001) not detectable
open circuit +32762 (7FFA) -32762 (8006)

An automatic 2 wire calibration function of the TIM 9482 /... can be used optionally, see operating instruc-
tions 9482.

62 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Data word structure cyclic data TIM 9482/.. with Signal Status

Data / Var.
Type Byte Usage
channel Type
1
I0
2
3
I1
4
5
I2
6
7
I3
8
INT 16 Analog input data
Input

9
I4
10
11
I5
12
13
I6
14
15
I7
16
17 S0 - S7 Signal Stati 0-7
INT 16
18 0 0=Signal disturbed, 1=Signal OK

IS1+ MODBUS V3.00 E - Technical alterations reserved - 63

 Operating Instructions

MODBUS interface description

3.8.1.3 AOM 0 – 20 mA (9465/... , 9466/..., 9468/.., 9469/..)

Measuring Units
range % Range
Decimal Hexadecimal
0 – 20 mA
*1) >30137 >75B9
21,8 mA 30137 75B9 109%
. . . Over range

20 mA 27648 6C00 100%

. . .
10 mA 13824 3600 50% Nominal range
. . .
0 mA 0 0 0%
0 mA <0 <0

AOM 4 – 20 mA

Measuring Units
range % Range
Decimal Hexadecimal
4 – 20 mA
*1) >30759 >7827
21,8 mA 30759 7827 111,25%
. . . Over range

20 mA 27648 6C00 100%

. . .
12 mA 13824 3600 50% Nominal range
. . .
4 mA 0 0 0%
3,999 mA -1 FFFF
Under range
0 mA -6912 E500 -25%
0 mA < -6912 < E500

*1) : The AOM attempts to increase the current further according to the control value. However, depend-
ing on the burden effective resistance, the maximum output voltage of the AOM may be reached
whereby the current can no longer be increased.

Safety position after Power On:

After Power On of the CPM the data area of the outputs is initialized with the value -32768 (0x8000) as sig-
nal for the safety position.
The outputs remain in the save position as long as the allocated register is overwritten with a valid output
value ( <> -32768 (0x8000)) from AS or from IS Wizard.

64 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Data word structure cyclic analog data AOM 9460/…, AOMH 9461/…

Operation mode Var.

Register Signals
8AO 8AO+4HV 8AO+8HV Type

1–2 HV-P1
3–4 HV-P2
5–6 HV-P3
7–8 HV-P4 Float HART Variables transmitted
Input -
9 – 10 HV-P5 32 on positions P1 - P8
11 – 12 HV-P6
-
13 – 14 HV-P7
15 – 16 HV-P8
1 AO 0
2 AO 1
3 AO 2
4 AO 3 Analog output signals
Output INT16
5 AO 4 AO 0 – AO 7
6 AO 5
7 AO 6
8 AO 7

IS1+ MODBUS V3.00 E - Technical alterations reserved - 65

 Operating Instructions

MODBUS interface description

3.8.2 DIM, DIM+CF (9470/.. 9471/.. 9472/..)

On the modules 9470, 9471 and 9472 the inputs 14 und 15 can optionally be used as digital- (DI), counter-
(C) or frequency input (F).
Through selection of different module descriptions the transmitted data area on MODBUS can be chosen.

Input data Output data CF Chan-

module selection text nels
available signal types
[Register] [Register]

DIM 16 (9470/.. , 9471/..) 1 - - DI without status

(16 Bit DI)

9470 / . . -16-1. DIM 16 ... 2

(16 Bit DI - - DI with status
9471 / . . -16-1. DIM 16 ... + 16 Bit status)
4 1
9470 / . . -16-1. DIM 16+CF … (16 Bit DI DI and CF (Counter or Frequency)
(control register 14 – 15
9471 / . . -16-1. DIM 16+CF ... + 16 Bit status
for counter) with status
+ 2 words CF)
DIM 16 2 0 - DI with Status
DI/DO 16 2 2 - DI or DO with status
9470/3x-16-xx
9471/35-16-xx DI/DO 16+2CF 4 4 14 - 15
9472/35-16-xx DI and CF or DO
DI/DO 16+6CF 8 4 10 - 15
with status
DI/DO 16+8CF 10 4 8 - 15

Signal definition with Parameter ´Invert all inputs of the module = No´:

9470/ ... 9471/ ...

I < 0,05 mA - open circuit alarm
I < 1,2 mA U<5V Signal = 0
I > 2,1 mA U > 13 V Signal = 1
RL < 100 Ohm - short circuit alarm

Even if DIM 16+CF (with counter / frequency) is selected the inputs 14 und 15 are mapped to the standard
DI data area (byte 2) and therefore can be used as standard DI inputs.

Status allocation:

Status Bit Signal

0 disturbed

1 OK

Signals and states are generated and transmitted synchronized and consistent
if parameter ´Error detection´ = On

66 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Data
all DIM DIOM 9470/3x, 9471/35, 9472/35 (IS1+)
(947x/3x in compatible mode)
Data Register Type
DIM DIM DI/DO DI/DO DI/DO
DIM DIM DI/DO
+Stat +2CF +2CF +6CF +8CF
1 DI signals 0 – 15 *1)
BitStr
2 Signal Status 0 – 15
3 C/F I14 C/F S15 C/F S15 C/F S15
4 C/F I15 C/F S14 C/F S14 C/F S14
5 C/F S13 C/F S13
Input
6 C/F S12 C/F S12 UINT16
- - - - - -
7 C/F S11 C/F S11 (UINT32)
8 C/F S10 C/F S10
9 C/F S9
-
10 C/F S8
*2) DO 0 - 7 DO 0 - 7 DO 0 - 7 DO 0 - 7
1
0 0 0 0 0
DO 8 - 15 DO 8 - 15 DO 8 - 15 DO 8 - 15
2
0 0 0 0
Output - - - Reset Reset Reset BitStr
3 C14-15 C10-15 C8-15
-
0 0 0
-
Start/Stop Start/Stop Start/Stop
4 C14-15 C10-15 C8-15
0 0 0

*1) In operation mode DI/DO and parametrization as DO written output values can be read back via the
dedicated DI signals.
In operation mode DI/DO and parametrization as DI the dedicated DO signals have no effect.

Output Data DI/DO+xCF

Byte Bit DO Reset Counter Start/Stop Counter
0 DO 0/8 Reset C8 Start/Stop C8
0 = output high
1 DO 1/9 Reset C9 0 = Run, Start/Stop C9
impedance 0 = Counter Run
Low .. ... (actuator = Off) ... ...
1 = Reset
6 DO 6/14 1 = output powered Reset C14 (Counter = 0) Start/Stop C14
1 = Counter Stop
( actuator = On )
7 DO 7/15 Reset C15 Start/Stop C15
High 0-7 0 (Reserved)

*2) Output Data DIM+2CF:

Byte Bit Function
0 Reset Counter S14 0 = Run,
1 Reset Counter S15 1 = Reset ( Counter = 0)
Low 2 Start/Stop S14 0 = Counter Run,
3 Start/Stop S15 1 = Counter Stop
4-7 0 (Reserved)
-
High 0-7 0 (Reserved)

IS1+ MODBUS V3.00 E - Technical alterations reserved - 67

 Operating Instructions

MODBUS interface description

Operation mode ´counter´

Count mode: Incremental / decremental with overflow / underflow

Count event: Positive / Negative edge selectable.
Signal in case of error: freeze last value (Initial value 0)
Alarming: Status and channel diagnosis
Reset: Reset counter register to ´0´
Start/Stop: in ´Stop´ mode input pulses are ignored (not counted)

all DIM with counter

DIOM 9470/3x (IS1+) count range count event
(9470/3x in comp. mode)

Counter 16 Bit UINT16 Increment on edge

- Up/Down Counter 16 Bit 0 – 65535

Increment / Decrement depending
UINT32 on rotation direction
- Up/Down Counter 32 Bit
0 – 4.294.967.295

Counting and rotation direction detection:

For counting and frequency measurement with direction detection two DI Inputs
are used as a functional pair. The phase shift of the two signals is measured.
The mechanical positioning of the two sensors must be chosen
to ensure the overlapping of associated pulses.

Operation mode Application

Up- or down counting of incoming puls-

Up/Down Counter
es depending on direction

Frequency with direc- Rotation frequency and direction detec-

tion tion for rotating machines

Signal allocation in cyclic Input data in operation mode

Up/Down Counter or Frequency with direction:

Input data Usage

first DI bit of a input pair DI digital value of first input
Rotation direction
second DI bit of a input pair 0 = Right / forward (Pulse on first input comes first)
1 = Left / backward (Pulse on second input comes first)

68 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Signal and status in operation mode ´counter´:

Counters are set to 0 during IOM startup.

The status bit is initialized with ´0´ = signal disturbed.
With the Reset bit in the control register the counter register is set to ´0´ and the status bit is set
to ´1´= signal OK.
In case of errors (short circuit, open circuit, bus failure ...) the status bit is set to ´0´ and will be held at ´0´
until the next Reset. Therefore disturbances during the count procedure are recognizable via the status bit.
In case of lost Data Exchange with the AS and recover within the parameterized output holt time or in case of
CPU redundancy switch over the count procedure will not be disturbed.
Using an input pair in operation mode Up/Down counter or frequency with direction the status bits of both
channels are set to 0 = bad in case of a signal error of one of the two channels.

For summation of 16 Bit counters in the AS the count difference of two consecutive read cycles must be
added from the AS. Counter overflow / underflow must be detected and considered. Maximum one overflow
/ underflow within one AS cycle shall occur.

32 Bit counter with direction input

For counting without direction detection only the first input of a 32 Bit Up/Down Counter channel pair shall be
used. The direction bit must not be used by PLC in this case. Error detection of the second not used input
channel shall be set to Off. Pulses on the first input will increment the counter if the second input is open.
Pulses on the first input will decrement the counter if the second input is shorted.

Operation mode ´Frequency´

Max. number
Measurement Scaling Resolution
Module signals Operation mode
method [Hz / Bit] [Hz]
per module
Pulse time meas-
all DIM with Frequency 1 Hz - 1 kHz 0,05 +/- 0,05
urement
Frequency-
Frequency 20 Hz - 20 kHz Gate time 50 ms 1 +/- 20
measurement 2
(9470/3x in Frequency 5 Hz - 20 kHz Gate time 200 ms 1 +/- 5
comp. Mode)
Frequency 1 Hz - 20 kHz Gate time 1 s 1 +/- 1
Frequency 0,1 - 600 Hz 0,01 +/- 0,01
DIOM 9470/3x, 8 Frequency 1 Hz - 3 kHz 0,05 +/- 0,05
9471/35, Pulse time meas-
9472/35 Frequency 1 Hz - 20 kHz urement 0,5 +/- 0,5
(IS1+) Frequency 1 Hz - 20 kHz
4 pairs 0,5 +/- 0,5
with direction

IS1+ MODBUS V3.00 E - Technical alterations reserved - 69

 Operating Instructions

MODBUS interface description

Signal scaling:

all DIM with Frequency measurement (9470/3x in compatible mode):

Measuring range Units
% *1) Range
1 Hz – 1 kHz x – 20 kHz decimal hex
1,3 kHz - 26000 6590 130 %
1,1 kHz 22 kHz 22000 55F0 110 % Over range

1 kHz 20 kHz 20000 4E20 100 %

. . . .
500 Hz 10 kHz 10000 2710 50 % Nominal range
. . . .

0 Hz 0 kHz 0 0 0%

DIOM 9470/3x, 9471/35, 9472/35 (IS1+)

Measuring range Units
% *1) Range
0,1 Hz – 600 Hz 1 Hz – 3 kHz 1 Hz - 20 kHz Dec. Hex
> 655,34 Hz > 3,276 kHz - 65535 0xFFFF Overflow
655,34 Hz 3,276 kHz - 65534 0xFFFE 164 % Over range
600 Hz 3 kHz - 60000 0xEA60 150 %
440 Hz 2,2 kHz 22 kHz 44000 0xABE0 110 %
400 Hz 2 kHz 20 kHz 40000 0x9C40 100 %
. . . . .
500 Hz 1 kHz 10 kHz 20000 0x4E20 50 % Nominal range
. . . . .

0 Hz 0 kHz 0 kHz 0 0x0000 0%

*1) Scaling of frequency measurements in IS1 DTM und IS Wizard:

.

all DIM with Frequency (9470/3x in comp. mode) Phys. 0 – 100% correlate digital 0 – 20000
DIOM 9470/3x (IS1+) Phys. 0 – 100% correlate digital 0 – 40000

Signal in case of error: freeze (Initial value 0)

Diagnosis: status und channel diagnosis

Behavior in case of too high input frequencies:

If the input frequency is higher than the maximum of the selected measurement range, input pulses can be
lost. In this case the measured value is smaller as the existing frequency at the input. No alarm is generated.

Signal Filter:
The measured frequency signal can be filtered by the DIOM 9470/3x to reduce jitter.
Additionally a pulse extension function is executed for the DI signals.

Pulse extension Filter / smoothing

Parameter Selection
for DI signals for frequency measurement
0 s / off 0s off
Pulse extension / 0,6 s / small 0,6 s small
Frequency Filter 1,2 s / medium 1,2 s medium
2,4 s / large 2,4 s large

70 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

Pulse extension:

This function can be used to increase the length of short pulses. With this e.g. a short activity of a manual
sensor (term approx. 10 .. 50 ms) can be extended to a time selectable by parameterization (T = 0,6 sec.,
1.2 sec., 2.4 sec.).
Short pulses can be recognized surely from the AS also with slower cycle times of the application software

Pulse extension with not inverted operation:

(Parameter ´Invert all inputs of the module´ = No)

T = 0,6 sec., 1,2 sec., 2,4

Input signal
sec.
(parametrisable)
Signal to AS
T

Pulses which are longer than the parameterized time T, are not extended.
Short pulses during time T are suppressed.

Input signal

Signal to AS
T

Pulse extension with inverted operation:

(Parameter ´Invert all inputs of the module´ = Yes)

Input signal

Signal to AS
T

Signal LEDs:
DIOM with signal LEDs display the extended ´Signal to AS.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 71

 Operating Instructions

MODBUS interface description

3.8.3 DOM (9475/.., 9477/.., 9478/..)

Signal allocation

DOM 8 + DOM 4 +
DOM 8 DOM 6 DOM 4
Data Register Byte Bit Status Status
9475/3x 9475/3x 9477/12-06-12

0 Status_S0 Status_S0 -
1 Status_S1 Status_S1 -
2 Status_S2 Status_S2 -
3 Status_S3 Status_S3 -
1
Input 1 4 Status_S4 0 -
5 Status_S5 0 -
6 Status_S6 0 -
7 Status_S7 0 -
2 0–7 0 0 -
0 DO 0 DO 0 DO 0 DO 0 DO 0
1 DO 1 DO 1 DO 1 DO 1 DO 1
2 DO 2 DO 2 DO 2 DO 2 DO 2
3 DO 3 DO 3 DO 3 DO 3 DO 3
1
Output 1 4 DO 4 0 DO 4 DO 4 0
5 DO 5 0 DO 5 DO 5 0
6 DO 6 0 DO 6 0 0
7 DO 7 0 DO 7 0 0
2 0-7 0 0 0 0 0

signal bit = 0 signal bit = 1 Type

output is powered according
output high impedance
type specification DOM
( actuator = Off )
( actuator = On )

relay contact = open relay contact = closed DOMR

Valve closed Valve open DOMV

status bit signal

0 disturbed

1 OK

72 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.9 Signal behavior in case of errors

3.9.1 Behavior of the input signals in case of errors

If no valid signal value can be formed as a result of a malfunction (short circuit, open circuit, defective subas-
sembly...), an item of diagnostics information is created which can be read via the IS1 DTMs or IS Wizard.
Despite the outstanding malfunction, cyclic data including signal status information continues to be transmit-
ted to the AS.

The behavior of the signal values transmitted if a malfunction has occurred can be selected separately for
every module by setting parameters (see I/O module parameters).

Application hint:

If the behavior of input signals in case of errors is realized through the IS1 system, this behavior seen from
the application software in the automation system can only be guaranteed with correct communication on
MODBUS.

In the event of the failure of the MODBUS additional project specific reactions must be realized in
the application software.

To guarantee the same behavior of all input signals in the event of an error, we recommend the following
procedure:

Generate a status bit for each input signal in the automation system:

- Signal Status information for all signal types of IS1 IOM can be read via register 13 to 28.
( see Signal status )

- for DI signals and for all signals of IS1+ IOMs (FW 03-xx) the signal status bits available optionally from
IS1 may be used in the input data area.
(see Data word structure of the I/O modules )

- for AI signals optionally the behavior in case of error = ´Status Code´ may to be chosen in the parame-
ters of all AI signals (default). In the application software of the automation system the following function
has to be used for each AI signal:

If SignalValue >= 32512 Or SignalValue <= -32512 then

SignalStatusBit = disturbed
Else
SignalStatusBit = OK
End IF

The signal behavior in case of an error (freeze, substitute value ...) can now be realized in the automation
system controlled by the related status bit.
In this case the event ´Slave failure on MODBUS´ can be logical linked to the signal status whereby the
signal behavior in case of an error is always the same under all error conditions.

To generate alarm messages for output modules, in the automation system one bit per module (module
alarm bit) can be read from the IS1 CPU to generate messages (see Module alarms ). The details on the
diagnostics information should be read and displayed via the IS1 DTMs or IS Wizard.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 73

 Operating Instructions

MODBUS interface description

3.9.2 Behavior of the output signals in case of errors

Communication error between the master and IS1+ field station:

The cyclic data traffic between the MODBUS TCP client and IS1 is checked using response monitoring in the
IS1+ CPU.
Response monitoring in the CPU makes sure that if the master suffers a failure or there is some other com-
munication loss to the master after expiry of the time (TWD), all output registers are set to 0x8000H and the
outputs adopt the safe state. The allocated Ethernet connection will be closed and is then enabled for use for
other MODBUS clients.

The TWD (Watchdogtime AS interface) time parameter can be set in the range 100 ms to 25.5 seconds
,(default = 2 sec.).
The response monitoring of the slaves can also be deactivated (T WD=0). In this case, a loss of communica-
tion to the master cannot be recognized. The output signals from the field stations are frozen if updating from
the master cannot be performed.

Communication error between the CPU and output module:

There are watchdog circuits on the output modules that monitor the data transmission between the CPU and
the output modules. If an output module does not receive any valid data for more than T Mod, the subassembly
adopts the safe setting.
TMod (timeout for output modules) parameter can be set in the range 100 ms to 25.5 sec. (default value: 1 s).

Consequently, the safe setting for the output modules follows at a delay of T S after failure of the communica-
tion to the master where:

TS = TWD + TMod

Application Hint:
In unstable Ethernet Networks short interruptions of Modbus connections with automatic restart of the con-
nections may occur with the result, that IS1 output signals go to save position during such disturbances of
communication. Network wiring and communication quality shall be checked and improved in such cases.

To improve robustness of the output signals against such short communication interruptions the parameter
´communication timeout for output modules´ T Mod should be set:

TMod > Max. AS Update cycle for writing output data + 10%

Output signals will be frozen during the disturbances with this setting.

The safe setting parameter for the output signals can be set separately for each module (see IOM Parame-
ter).

74 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.10 HART variables

In addition to the analogue process value, HART field devices offer the option of digitally reading up to four
process variables (HART variables HV) from the transmitter.

Routed HART Variables

IS1 offers the option of mapping routed HART variables to the cyclic input data area of MODBUS.
Optionally, no HART variables, four or eight HART variables of an IS1 HART module (AIMH, AUMH, AOMH)
can be routed and transmitted in addition to the cyclic data.
This can be selected optionally when configuring a field station.

Modbus Mapping of the extended HART data

With IS1+ 9442 CPUs or IS1 9441 CPUs, firmware from V21-19 together with 9468 AUMH from Rev. V03-06
or 9469 UMH, all 32 HV from the max. 8 HFD of one IS1 IOMH and additional variable- und HART device
stati can be read via separate Modbus register areas. This additional HART data is available in parallel to the
above mentioned routed option.

Supply of HART devices using Analog Universal Module AUMH 9468/3x or 9469 UMH
Each channel of an AUMH or UMH can be parametrised as analog input for HART sensors or as analog
output for HART actuators. The supply of HART sensors and HART actuators is different and will be
switched too.
For communication with a HART sensor the channel shall be parameterized as ´Input´.
For communication with a HART actuator the channel shall be parameterized as ´Output´.
In a non parameterized state the channels are in the position ´Output´ and HART communication is possible
with HART actuators only.

Availability of HART Vartiables and acyclic HART communication:

routed not routed polling HV from
Configuration Parameter acycl. HART
+4/ +8 HV 32 HV AUMH/UMH
Yes, HART Yes, HART
no config no parameter - Yes
actuators only actuators only
9468/9469 Livelist = OFF - - Yes No
no HV Livelist = ON - Yes Yes
Yes
9468/9469 + HV HV mapping Yes Yes Yes

IS1+ MODBUS V3.00 E - Technical alterations reserved - 75

 Operating Instructions

MODBUS interface description

3.10.1 Module selection in IS1 DTM

Length cyclic data [bytes] Number of HART variables (HVs)

Module selection text
Input Output transmitted via routing
9461/12-08-11 AIMH8 2w Exi 16 0 None
9461/12-08-11 AIMH8+4HV 2w Exi 32 0 4 HV
9461/12-08-11 AIMH8+8HV 2w Exi 48 0 8 HV
9461/12-08-21 AIMH8 Exi 16 0 None
9461/12-08-21 AIMH8+4HV Exi 32 0 4 HV
9461/12-08-21 AIMH8+8HV Exi 48 0 8 HV
9466/12-08-11 AOMH8 Exi 0 16 None
9466/12-08-11 AOMH8+4HV Exi 16 16 4 HV
9466/12-08-11 AOMH8+8HV Exi 32 16 8 HV
9468/3x-08-xx 8AIH +4HV 34 0
9468/3x-08-xx 8AOH +4HV 18 16 4 HV
9468/3x-08-xx 8AIH/8AOH +4HV 34 16
9468/3x-08-xx 8AIH +8HV 50 0
9468/3x-08-xx 8AOH +8HV 34 16 8 HV
9468/3x-08-xx 8AIH/8AOH +8HV 50 16
9469/35-08-xx 8IH Exn 9 0
9469/35-08-xx 8OH Exn 1 8
None
9469/35-08-xx 6IH+2OH Exn 7 2
9469/35-08-xx 8IH/8OH Exn 9 8
9469/35-08-xx 8IH +4HV Exn 17 0
9469/35-08-xx 8OH +4HV Exn 9 8 4 HV
9469/35-08-xx 8IH/8OH +4HV Exn 17 8
9469/35-08-xx 8IH +8HV Exn 25 0
9469/35-08-xx 8OH +8HV Exn 17 8 8 HV
9469/35-08-xx 8IH/8OH +8HV Exn 25 8

3.10.2 Data format

HART variables are transmitted as IEEE floating-point numbers (4 bytes).
If a HART variable cannot be read (e.g. HART device undergoing startup, not connected, defective or HART
variable not found, ... ), value 7F A0 00 00 (Not a Number) is transmitted. This may be evaluated in the AS
for generation of a signal status of the HART variables. Detailed status and diagnostic information on the
HART field devices can be evaluated via HART Management Systems.

The sequence of the two registers of one HART variable is used different in AS systems.

The IS1+ 9442 CPU supports both format variants ´float´ (default) and ´swapped float´ for all HART data.
9440 and 9441 CPUs support format switching for HART Variable registers from address of 3001 only.

Selection of Float Format see CPU parameters.

76 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.10.3 Routed HART Variables

Up to 8 HART field devices can be connected to one HART module of IS1. Since each HART field device
may have up to 4 variables, this mean that a maximum of 32 HART variables are possible per IS1+ HART
module.
The assignment (routing) of 4 or 8 out of these 32 variables to the positions P1 to P8 in the cyclic transmis-
sion area can be selected by parameter assignment:

Value
Parameter name Function
range
Selection of the channel No. (input / output No.) of the HART module
to which the HART field device is connected which is to be transmitted
Input No. HART device for pos. 1 at pos. 1.
If ´Not Used´ is selected, value ´Not a Number´ (7F A0 00 00) is
transmitted.
0 ... 7,
Input No. HART device for pos. 2 Not used Selection for pos. 2

..... .....

Input No. HART device for pos. 4 (8) Selection for pos. 4 (8)

Selection of the variables of the HART field device which is to be

HART variable for pos. 1
transmitted at pos. 1.

HART variable for pos. 2 Selection for pos. 2

1…4
..... .....

HART variable for pos. 4 (8) Selection for pos. 4 (8)

IS1+ MODBUS V3.00 E - Technical alterations reserved - 77

 Operating Instructions

MODBUS interface description

3.10.4 Modbus Mapping of the extended HART data

Reg Data Slot Channel Dyn. HV
4 HART Variables (PV, SV, TV, QV) from HART field devices
5001
5002
HV [Float] 1 (PV) are mapped in sequence from Modbus Input Register 5001
5003 followed by Device Variable Stati (DV Status) of the 4 HV in
HV [Float] 2 ( SV) separate Modbus Registers each.
5004
5005
HV [Float] 3 (TV)
This structure is avaliable for all HART field devices on all chan-
5006 nels of IS1+ 9468 or 9469 HART modules.
0
5007 See example left.
HV [Float] 4 (QV)
5008
5009 DV Status 1 (PV)
5010 DV Status 2 (SV) HART Data from Reg. 5001 can be read via Modbus functions
5011 DV Status 3 (TV) 03 (holding register) or 4 (input register) optionally.
5012 DV Status 4 (QV)
5013 The address of the first register of each HV can be calculated:
HV [Float] 1 (PV)
5014
5015
REG_ADR_HV = 4999 + (Slot-1) *96 + Channel*12 + HV*2
HV [Float] 2 (SV)
5016
5017 HART Device Status
HV [Float] 3 (TV)
5018
1 Reg. Slot Kanal
5019
HV [Float] 4 (QV)
5020 6617 0 DEVSTATUS
5021 DV Status 1 (PV) 6618 1 DEVSTATUS
5022 DV Status 2 ( SV)
5023 DV Status 3 (TV) 6619 2 DEVSTATUS
5024 DV Status 4 (QV) 6620 3 DEVSTATUS
5025 1 1
HV [Float] 1 (PV) 6621 4 DEVSTATUS
5026
5027 6622 5 DEVSTATUS
HV [Float] 2 (SV)
5028 6623 6 DEVSTATUS
5029
HV [Float] 3 (TV) 6624 7 DEVSTATUS
5030
2 6625 0 DEVSTATUS
5031
HV [Float] 4 (QV)
5032 6626 1 DEVSTATUS
5033 DV Status 1 (PV) 2
6627 2 DEVSTATUS
5034 DV Status 2 (SV)
5035 DV Status 3 (TV) …. …. ….
5036 DV Status 4 (QV) …. …. …. ….
... ... ... ... 6744 16 7 DEVSTATUS
5085
HV [Float] 1 (PV) (128 Register)
5086
5087
HV [Float] 2 (SV)
5088 HART Extended Device Status
5089
HV [Float] 3 (TV) Reg. Slot Kanal
5090
7
5091 6745 0 EXTDEVSTATUS
HV [Float] 4 (QV)
5092
6746 1 EXTDEVSTATUS
5093 DV Status 1 (PV)
5094 DV Status 2 (SV) 6747 2 EXTDEVSTATUS
5095 DV Status 3 (TV) 6748 3 EXTDEVSTATUS
5096 DV Status 4 (QV) 1
5097
6749 4 EXTDEVSTATUS
HV [Float] 1 (PV) 6750 5 EXTDEVSTATUS
5098
5099 6751 6 EXTDEVSTATUS
HV [Float] 2 (SV)
5100
5101
6752 7 EXTDEVSTATUS
HV [Float] 3 (TV) 6753 0 EXTDEVSTATUS
5102
2 0
5103 6754 1 EXTDEVSTATUS
HV [Float] 4 (QV) 2
5104
5105 DV Status 1 (PV)
6755 2 EXTDEVSTATUS
5106 DV Status 2 (SV) …. …. ….
5107 DV Status 3 (TV) …. …. …. ….
5108 DV Status 4 (QV) 6872 16 7 EXTDEVSTATUS
… … … … …
6536 DV Status 16 7 4 (QV) (128 Register)

78 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

HART Unit Code

Reg. Slot Channel Dyn. HV Unit
Extract from HCF / FCG
7001 1 (PV) Unit code
Spec-183 Tab. 5.2:
7002 2 (SV) Unit code
0
7003 3 (TV) Unit code Unit Unit
7004 4 (QV) Unit code Code
[dec]
7005 1 (PV) Unit code
7006 2 (SV) Unit code
7 bar
1
7007 3 (TV) Unit code 8 mbar
1
7008 4 (QV) Unit code 32 °C
7009 1 (PV) Unit code 36 mV
7010 2 (SV) Unit code 37 Ohm
2 39 mA
7011 3 (TV) Unit code
41 Liter
…. 4 (QV) ….
45 Meter
…. …. …. 49 mMeter
7032 7 4 (QV) Unit code 58 V
… … … … … 59 pH
7512 16 7 4 (QV) Unit code 127 kW
128 kWh
(512 Registers 163 kOhm
HART Engineering Unit Codes see HCF / FCG SPEC-183 Tab. 5.2

Reaction in IOMH in case of no or disturbed communication to the HART Field Device (HFD):
 HV = Not a number (0x7F A0 00 00)
 HART Live List (Device Bit) = 0 (No Response)
 DV Status = 0x00 (Bad)
 DEVSTATUS = 0x00 (no errors)
 EXTDEVSTATUS = 0x08 (Failure)
 UNIT = 0x00 (No Unit specified)

DV Status:
DV Status = good (0xc0) if HV Variable is readable.
DV Status = Bad (0x00) if HV Variable is not readable.

DEVSTATUS: see HCF / FCG SPEC-183 ANNEX A

EXTDEVSTATUS:
Contains NAMUR NE107-compatible Condensed Status information.
EXTDEVSTATUS -> Can be read only from device with HART7+.
From HART6 only Bits 0 and 1 are supported.
Delievers information from a responding HFD.
If HFD is not responding or EXTDEVSTATUS is not supported by HFD the IOMH will set:
 EXTDEVSTATUS = Good (0x00) if HV Variable is readable.
 EXTDEVSTATUS = Failure (0x08) if HV Variable is not readable.

HART Condition Monitoring

For easy Condition Monitoring of HART field devices the EXTDEVSTATUS of all HFD can be read by the AS
in a slow cycle. Operator warnings may be generated in the AS if required.
In case of error the maintenance personal can check the affected HFD e. g. via FDT for details and perform
maintenanc actions if required.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 79

 Operating Instructions

MODBUS interface description

HCF / FCG SPEC-183 Tab. 17 EXTDEVSTATUS

(Contains NAMUR NE107-compatible Condensed Status):

80 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.10.5 HART Livelist

View in IS1 DTM:

Overview of the status of all HART
field devices (HFD) connected to one
IS1+ Field station for simplified com-
missioning and maintenance.

For further information for use of the

IS1 DTMs see operating instructions
´DTM IS1 Mod´.

Read via MODBUS TCP:

HART Live List
Modbus
Slot Livelist
Register
6601 1
6602 2
6603 3
6604 4
6605 5
6606 6
One Bit per HART field device connected to
6607 7 channel 0-7 in the Bits 0-7 in the Low Byte of a
6608 8 Register for each IS1 module IOMH.
6609 9
6610 10 0 = No Response
6611 11 1 = HFD responding
6612 12
6613 13
6614 14
6615 15
6616 16

Function available with IS1 9441 CPU firmware from V21-19 and with all 9442 CPUs.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 81

 Operating Instructions

MODBUS interface description

3.11 IS1 DTMs

Configuration, parameter setting, diagnostics and HART communication for the IS1+ field stations is handled
via the IS1 DTMs using FDT technology.

Example: Signals / Diagnostics

For further information on the use of the IS1 DTMs see operating instructions ´DTM IS1 Mod´.

82 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.12 Webserver

Webserver are integrated in the IS1+ 9441 and 9442 CPUs which offer additional diagnostic functions for
commissioning, maintenance and OEM service support.
Access via standard WEB browsers with: http://xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx = IP-SB Address IS1+ CPU)

3.12.1 Webserver 9141 CPU

Example 9441 CPU: MODBUS

Status Description
Connection is in cyclic data exchange and is monitored for timeout.
Data Exchange
(see Parameter ´ Watchdogtime AS Interface TWD ´)
Timeout TWD for connection elapsed. Connection not actually in use.
Disconnected
The IP address and port no. of the last connected client is displayed.
not used Connection has not been used since CPU power on.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 83

 Operating Instructions

MODBUS interface description

3.12.2 Webserver 9442 CPU

Password and Access concept:

The various menu items of the IS1 + Web server are divided into three groups
Group Page Function
Diagnostic Overview
Plugged Modules
Configured Modules
Backplanes
HART Live List
IS1+ Web Module Diagnostic Standard Diagnosis Information
Diagnostic System Diagnostic – Read Only
AS- Protocol
CPU Parameter
License
Event History
Company
User LogIn/Out Network Settings and Software Update CPU
User Fieldstation Without User Passwort: Read Only
Access Network With User Passwort: Read- und Write of important User Data like
CPU Software Update IP-Address, Device Name, ….
Service
Service LogIn/Out Service Information
Access

User LogIn/Out
The user password by default is set to: R.STAHL
The user shall to change it after a successful user login.
In case of forgotten password the function ´store encrypted passwords´ can be used to save a file from which
the R.STAHL Service can read the used password. So that a login is possible and the used password is to
change again by the user afterwords.

84 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.13 LED and LCD-displays of the CPUs

The operational state and the communication on the MODBUS can be assessed on site using the LEDs on
the CPUs of IS1+ fieldstations.
Additionally the signal values, the signal and module alarms can be displayed on the LCD display on the
9440 CPM and on the socket of 9441 CPUs.

For details, see the operating instructions for 9440 CPM, 9441 or 9442 CPUs.

3.14 Online behavior of the IS1+ field station.

3.14.1 Parameter changes.

If an IS1+ field station is exchanging data with the MODBUS client or master, parameters can be modified in
operation (online) via the IS1 DTMs or IS Wizard.
Exception: CPU parameter ´Watchdogtime AS Interface TWD´
See CPU parameters

3.14.2 Configuration changes.

New or modified configuration data can be loaded to the IS1+ CPU using the IS1 DTMs or IS Wizard during
data exchange with the MODBUS client or master.

The mapping of the I/O signals to the MODBUS registers is according the new configuration.
It is therefore to be checked, whether, due to the configuration changes, adjustments in the signal mapping
in the automation system are necessary.

The restarted CPU checks the real existing modules (actual state) against the configuration data (target
state). All modules of the field station where the configured modules agree with the existing module type in
the field station are updated cyclically after start-up.
For modules, which do not agree with the configuration data, alarms are generated. The signals for these
modules are not updated and react according the behavior set in the parameters in case of error.

Due to the behavior described above, a field station can be expanded online by adding new modules to the
existing modules. In this case the assignment of the signals for the existing modules in the field station to
the MODBUS registers is not changed.
Newly added modules are appended to the end of the register area used previously.

Process for online expansion:

- Add new modules (expansions to an existing field station) in free slots on the rail after the existing I/O
modules.
- Add new modules to configuration offline in FDT frame.
- Online download of the configuration to the CPU while MODBUS is running.
- Expansion of the current messages in the MODBUS TCP client or master with the signals for the newly
added modules.

Attention!
An online change is not possible if existing modules are changed for other module types and as a result
the number of input and output registers at the module slot to be processed changes.
In this case the mapping in the MODBUS Client or Master must be modified which is usually not possible
without effects on the running process.

IS1+ MODBUS V3.00 E - Technical alterations reserved - 85

 Operating Instructions

MODBUS interface description

3.15 Transmission time

3.15.1 MODBUS RTU

Transmission time for read telegrams (Functions 01, 02, 03, 04):

t [s] = ( 16 + account DW * 2 ) * 11 / Baudrate *1)

Transmission time for write telegrams (Functions 15, 16):

t [s] = ( 20 + account DW * 2 ) * 11 / Baudrate *1)

*1) The above formulas consider the response delay times of the CPM, but not the telegram
delay times of the automation system. They are used for calculating the attainable minimum
transmission time. Dependent on the telegram delay times of the automation system the
actually attainable values are subject to increase.

DW = data words (Registers)

Easy rule of thumb:

Transmission capacity on
Baudrate [Baud]
MODBUS
9600 250 Registers / Second
19200 500 Registers / Second
38400 1000 Registers / Second

86 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

3.15.2 MODBUS TCP

Total delay of input signals (worst case):

t I/O-module t CPU+Rail t MODBUS t AS

Total delay of output signals (worst case):

t AS t MODBUS t CPU+Rail t I/O-module

t I/O-module max. signal delay see operation manual of the different IS1 I/O modules.

t CPU+Rail ca. 4ms + number IOM * 1 ms (9441 CPU from Firmware V21-09)

t MODBUS TCP
Data Length 1 Register 100 Register 200 Register 16 Coils 800 Coils 1600 Coils

Delay *1) 1,5 ms 2 ms 2,5 ms 1,7 ms 2,6 ms 3,5 ms

*1) typical delay between Request and Response telegram inside of a switched Ethernet
network. Using access via Routers or Internet the value will increase.

t AS AS cycle + further delays in automation system (AS)

IS1+ MODBUS V3.00 E - Technical alterations reserved - 87

 Operating Instructions

MODBUS interface description

4 List of abbreviations

AS Automation System
AIM Analogue Input Module
AIMH Analogue Input Module + HART
AUMH Analog Universal Module AI/AO with HART
SAIMH Safety Analogue Input Module + HART (PROFIsafe)
AOM Analogue Output Module
AOMH Analogue Output Module +HART
CPM CPU + PM = CPM
Central unit consisting of communication processor with power pack
DIM Digital Input Module
DIOM Digital Input Output Module
DOM Digital Output Module
DOMR Digital Output Module Relays
DOMV Digital Output Module Valves
HW Hardware
IOP I/O Processor of the central unit
IOM General description of I/O Module
PM Power Module (power pack)
SW Software
SIL Safety Integrity Level
TIM Temperature Input Module

FCG FieldComm Group (former HART Communication Foundation HCF)

HART Highway Addressable Remote Transducer
PV Primary Variable
SV Secondary Variable
TV Tertiary Variable
QV Quaternary Variable

88 IS1+ MODBUS V3.00 E - Technical alterations reserved -

 Operating Instructions

MODBUS interface description

5 Release notes:

Version
Interface description Extensions / Changes
MODBUS
V 1.00 First official release
V1.05 IS1 CPU Redundancy with redundant MODBUS TCP Networks supported.
V1.06 DOMV 9478/22-08-51 supported.
From firmware rev. 21-09:
 Read Input Data optional via MODBUS function 3 with register offset +1000
V1.07  Railcommunication timing optimized
 Support of read output data from backup CPU with DTM.
 Status display of backup CPU in DTM – bug fix.
V1.08  9480 TIMR Parameters added for CU53 GOST, Pt46 GOST, Pt50 GOST
From Firmware 21-11:
V1.09 - BootP – IP address setting via BootP Server
- ACD Address Conflict Detection
V1.10 Description extended for start condition in case of redundant CPUs
V1.11 Application Hint added in chapter 3.10.2
V1.12 Value for signal status revised
V2.00 IS1+ extension with new IOM 9468, 9470/3x and 9475/3x
V2.01 new IS1+ IOM 9482 TIM added
Extended HART Support. Fast transmission of 4 HART variables with stati per HART
V2.02
Fielddevice
New IS1+ modules added.
- 9469/35 UMH Z2 Ex n
V2.03
- 9471/35 DIOM Z2 Ex n
- 9472/35 DIOM-24V Z2 Ex n
New 9442 Z2 CPU with CPU redundancy added.
V3.00_b5
MODBUS RTU and TCP combined in one document.

6 Further reading
 MODBUS MESSAGING ON TCP/IP IMPLEMENTATION GUIDE V1.0b
 MODBUS APPLICATION PROTOCOL SPECIFICATION V1.1b

Available at: http://www.MODBUS.org/ -> Technical Resources -> MODBUS Specifications

7 Support address
R. STAHL Schaltgeraete GmbH
Business Unit Automation Interface and Solutions
eMail: [email protected]
Support information: www.r-stahl.com
Service hotline IS1: +49 (7942) 943-4123
Fax : +49 (7942) 943-40 4123

IS1+ MODBUS V3.00 E - Technical alterations reserved - 89