Modules/ModBus

Translate this page

Other languages:
Constr.png The translation checking and actualizing
Module Name Version License Source Languages Platforms Type Author Description
ModBus ModBus 1.8 GPL2 daq_ModBus.so en,uk,ru,de x86,x86_64,ARM DAQ Roman Savochenko
Maxim Lysenko (2009) — the page translation
Provides implementation of client service of the protocol ModBus. ModBus/TCP, ModBus/RTU and ModBus/ASCII protocols are supported.
ModBus ModBus 1.0 GPL2 daq_ModBus.so en,uk,ru,de x86,x86_64,ARM Protocol Roman Savochenko
Maxim Lysenko (2009) — the page translation
Provides implementation of protocols ModBus. ModBus/TCP, ModBus/RTU and ModBus/ASCII protocols are supported.

Contents

ModBus — communication protocol based on the client-server architecture. It was developed by Modicon for using in the programmable logic controllers (PLC). It became the de facto standard in the industry and is widely used for the connection of industrial electronic equipment. Used to transfer data via serial line RS-485, RS-422, RS-232, and network TCP/IP. Currently supported non-profit organization ModBus-IDA.

There are three modes of the protocol: ModBus/RTU, ModBus/ASCII and ModBus/TCP. The first two use the serial communication lines (mostly RS-485, less RS-422/RS-232), the last uses TCP/IP network to transfer data.

The module of the data acquisition provides an opportunity to gather the information from various devices by means of the protocol ModBus in all modes. Also, the module implements the functions of the horizontal reservation, namely, working in conjunction with the remote station of the same level. At the same time, the module of the protocol allows you to create and issue data by means of the protocol ModBus in various modes, and through interfaces that are supported by modules of subsystem "Transports".

1 General description of the ModBus protocol

Protocol ModBus/RTU requires one lead(requesting) device in the line(master), which can send commands to one or more driven devices(slave), referring to them by a unique in the line address. Syntax of the commands of the protocol allows to address 247 devices on the one connection line of standard RS-485(less RS-422 or RS-232). In the case of TCP addressing mode is excluded from the protocol, as it is implemented in the TCP/IP stack.

Initiative of exchange always comes from the leading device. Slave devices listen the line. Master request (package, the sequence of bytes) in the line and turns into a listening line. Slave device responds to the request, which came to him.

The end of sending the response is determined by the mode. In RTU mode, the end of massage is determined by time interval between end of receive the previous byte and start receiving following, the time symbol. If this interval exceeds the time required to receiving one and a half bytes on a given rate of transmission then receiving a frame response is considered complete. In ASCII mode, the criterion of end of the massage is the character '\r', and in the mode of TCP — the expected size of the massage, information about which present in the packet header.

1.1 Addressing

All data operations are tied to zero, each type of data (register, bit, register of input or bit of input) addresses begin with 0 and ends 65535.

1.2 Standard codes of functions

In ModBus protocol it can be divided into several subsets of commands(Table 1).

Table 1: The subset of commands of ModBus protocol

Subset Range of codes
Standard 1-21
Reserve for advanced features 22-64
Custom 65-119
Reserve for own needs 120-255

Data acquisition module uses commands 0x03 and 0x06(0x10) for read and write registers, 0x01 and 0x05(0x0F) for read and write bits, 0x02 and 0x04 for read bit and register of input accordingly. For other atypical commands implementation the module provides function of user programming API, which you can call from the template's procedure, sending arbitrary PDU packages and process received.

Protocol module process the requests by the commands 0x03 and 0x06(0x10) for reading and writing registers, 0x01 and 0x05(0x0F) for reading and writing bits.

2 Module of the implementation of the protocol

ModBus protocol module contains the code implementing of the protocol part of ModBus, namely particular variants of protocols ModBus/TCP, ModBus/RTU and ModBus/ASCII. Module of the protocol in conjunction with the selected transport is actively used by the data acquisition module for direct queries implementation. Because of the module of the protocol is independent, by using of it you can create additional modules for data acquisition by non-standard functions of the expansion of ModBus of various automation equipment.

2.1 API functions of outgoing requests

API functions for outgoing queries (messIO()) operate with the exchange of blocks PDU, XML-wrapped in packages with the following structure:

Where:
  • prt — name of the tag with the name of the used variant of the protocol (TCP, RTU or ASCII).
  • sId — identifier of the source of the query. Used for placing to the report of the output protocol.
  • reqTm — time of the request, namely the time during which the answer is expected, in milliseconds.
  • node — number of the destination node or the identifier of the unit ModBus/TCP.
  • reqTry — number of attempts of repeating the request with the error in the answer. Only for ModBus/RTU and ModBus/ASCII.
  • pdu — directly block of the unit of the protocol data (PDU) ModBus.

The resulting pdu replaces the request pdu in the XML-package, and set the attribute "err" to the code and text of the errors, if it is took place.

2.2 Servicing of the requests for ModBus protocol

Input part of servicing of the requests to the module of the protocol realizes verification and processing of the requests through objects of the nodes, provided by the module(Fig. 1). Actually, the mechanism is implemented, that allow OpenSCADA to perform the role of the ModBus/TCP server or the slave device of ModBus/RTU and ModBus/ASCII. Thus the system OpenSCADA gets an opportunity to serve the role of any participant of the ModBus networks.

Fig.1. Tab of the list of the nodes of servicing incoming requests of the protocol.

The node of the protocol is equivalent to the physical node of the device of ModBus network. Node of the protocol can operate in three modes:

Since the protocol nodes can be created a great number, it turns out that on the one interface, ie in the one network, one station on the basis of OpenSCADA can clear provide multiple nodes of ModBus network with different data.

Lets consider particular configuration of the node of the protocol in various modes.

2.2.1 The mode of the node of the protocol "Data"

The mode is used to reflect the data of OpenSCADA on arrays of registers and bits of ModBus. The overall configuration of the node is made in the tab "Node"(Fig. 2) by the parameters:

Node in this mode process the following standars commands of the ModBus protocol:

Fig.2. Tab "Node" of the configuration page of a node of the protocol in the "Data" mode.

To form the table of the reflection of the data of ModBus network, namely, registers and bits the tab "Data" is provided(Fig.3). The tab "Data" contains a table of parameters and program for processing of the parameters with the specified programming language, which is available in OpenSCADA. Table contains the parameters with the properties:

  • R{N}[w], RI{N}[w] — specific register (and input) form, can expanded by suffixes: "i"—Int32, "f"—Float, "d"—Double, "s"—String (size by default is 10 and up to 100 registers);
  • R:{N}:[w], RI:{N}:[w] — classic register (and input) form, can expanded by suffixes: "i4"—Int32, "i8"—Int64, "f"—Float, "d"—Double, "s"—String
  • C{N}[w], CI{N}[w], C:{N}:[w], CI:{N}:[w] — coil (and input).
Where:
  • {N} — ModBus device's data address (decimal, hexadecimal or octal) [0...65535];
  • w — optional symbol for writing allow indicate.
Examples:
"R0x300w" — register access;
"C100w" — coin access, allow for write;
"R_f200" — get float from registers 200 and 201;
"R_i400,300" — get int32 from registers 400 and 300;
"R_s15,20" — get string, registers block, from register 15 and size 20.
"R_i8:0x10:w" — get and set int64 into registers [0x10-0x13];
"R_d:0x20,0x30" — get double float point (8 byte) from registers [0x20,0x30-0x32].
All other parameters are internal and are used for a variety of intermediate calculations, processing, conversion and their values can be operative control and changed from the table into execution mode.

The table by default identifies several parameters of special appointment:

At.png By into sets registers of expanded types can be used inaccessible symbol ',' then access to its from the procedure you can take only alternatively method, by object "arguments":

arguments["R_s10,5w"] = "9876543210";
Fig.3. Tab "Data" of the configuration page of a node of the protocol in the "Data" mode.

For the parameter which are signed as links above it can be set the links only to switched off node of the protocol in the tab "Connections"(Figure 4).

Fig.4. Tab "Links" of the configuration page of a node of the protocol in the "Data" mode.

2.2.2 Mode "Gateway of the node" of a node of the protocol

Mode is used to carryover the requests to a separate device in the other ModBus network from the ModBus network, in which this node is configured. The overall configuration of the node is made in the tab "Node"(Fig. 5) by the parameters:

Fig.5. Tab "Node" of the configuration page of a node of the protocol in the "Gateway of the node" mode.

2.2.3 Mode "Gateway of the network" of the node of the protocol

Mode is used to carryover the requests of the network at whole to the other ModBus network from the ModBus network, in which this node is configured. Ie request to the device with any address will be sent to another network, without diverting. The overall configuration of the node is made in the tab "Node"(Fig. 6) by the parameters:

Fig.6. Tab "Node" of the configuration page of a node of the protocol in the "Gateway of the network" mode.

2.3 Report of the ModBus requests

To be able to monitor and to diagnosing the correct implementation of requests to the various components the a module provides an opportunity to incorporate the report of the requests that pass through the protocol module. The report included by indication of non zero number of entries in the tab "Report" of the page of the module of the protocol(Fig.7).

Fig.7. Tab "Report" of the page of the module of the protocol.

3 Data acquisition module

The data acquisition module provides an opportunity to interrogate and write registers and bits of devices through protocol modes TCP, RTU, ASCII and commands of request 0x01 — 0x06, 0x0F, 0x10.

3.1 Controller of data

For addition of a ModBus data source the controller is created and configured in OpenSCADA. Example of the configuration tab of the controller is depicted in Fig.8.

Fig.8. Configuration tab of a controller.

Using this tab you can set:

At.png The installing of this parameter must be approached with caution, since not all devices support access to registers between fragments.

3.2 Parameters

Data acquisition module provides two types of parameter: "Standard"(std) and "logical"(logic). Additional configuration fields, the parameters of this module are:

3.2.1 Standard parameter type(std)

Main page of configuration parameters of the standard type is shown in Figure 9.

Fig.9. Configuration tab of the standard parameter type.

Structure of the attribute in the parameter list of attributes can be written as follows: "{dt}:{numb}:{rw}:{id}:{name}".
Where:

"R" and "RI" can be expanded by suffixes: "i2"—Int16, "i4"—Int32, "i8"—Int64, "u2"—UInt16, "u4"—UInt32, "f"—Float, "d"—Double, "b5"—Bit5, "s"—String (size by default is 10 and up to 100 registers);

Examples:

"R:0x300:rw:var:Variable" — register access;
"C:100:rw:var1:Variable 1" — coin access;
"R_f:200:r:float:Float" — get float from registers 200 and 201;
"R_i4:400,300:r:int32:Int32" — get int32 from registers 400 and 300;
"R_b10:25:r:rBit:Reg bit" — get bit 10 from register 25;
"R_s:15,20:r:str:Reg blk" — get string, registers block, from register 15 and size 20."

Line which start at symbol '#' is commentary and processing for it pass.

In accordance with a specified list of attributes interrogation and the creation of the attributes of the parameter is carried out(Figure 10).

Fig.10. Tab of the attributes of the standard parameter type.

3.2.2 Logical parameter type(logic)

Main page of configuration parameters of the logical type is shown in Figure 11.

Рис.11. Configuration tab of the logical parameter type.

When forming a template for the logical type of the parameter of the controller, do not take into account the reference format template, since it is not used and can be omitted. Same reference value, when configuring the the template (Fig. 12), written in the format: "{dt}:{numb}:{rw}".
Where:

"R" and "RI" can be expanded by suffixes: "i2"—Int16, "i4"—Int32, "i8"—Int64, "u2"—UInt16, "u4"—UInt32, "f"—Float, "d"—Double, "b5"—Bit5, "s"—String (size by default is 10 and up to 100 registers);

Examples:

"R:0x300:rw" — register access;
"C:100:rw" — coin access;
"R_f:200:r" — get float from registers 200 and 201;
"R_i4:400,300:r" — get int32 from registers 400 and 300;
"R_b10:25:r" — get bit 10 from register 25;
"R_s:15,20:r" — get string, registers block, from register 15 and size 20.
Рис.12. Tab "Template configuration" of the logical parameter type.

This module provides a special treatment of a number of attributes of the template:

In accordance with the pattern underlying parameter, we get a set of attributes of the parameter Fig.13.

Fig.13. Tab of the attributes of the logical parameter type.

3.3 User programming API

In view of the module support logical type parameters make sense to provide a number of functions the user API to call from a template of logical parameter.

The object "Controller" [this.cntr()]

The object "Parameter" [this]