Siemens SINAMICS S120 Function Manual page 865

The response returns the corresponding data set:
Table 11- 23 Device response to the read request, example
Value
MBAP header
03 h
04 h
11 h
22 h
33 h
44 h
Table 11- 24 Invalid read request
Read request
Invalid register address
Read a write-only register
Read a reserved register
Controller addresses more than 125 registers
The start address and the number of registers of an
address are located outside of a defined register
block
Structure of a write request via Modbus function code 06 (FC 06)
Start address is the holding register address.
Via FC 06, with one request, only precisely one register can be addressed. The value, which
is written to the addressed register, is contained in bytes 10 and 11 of the write request.
Table 11- 25 Structure of a write request for device number 17, example
Value
MBAP header
06 h
00 h
63 h
55 h
66 h
Drive functions
Function Manual, 11/2017, 6SL3097-4AB00-0BP5
Byte Description
7
8 Number of bytes (4 bytes are returned)
9 Data first register "High"
10 Data first register "Low"
11 Data second register "High"
12 Data second register "Low"
Byte Description
7 Function code
8 Register start address "High" (write register 40100)
9 Register start address "Low"
10 Register data "High"
11 Register data "Low"
11.4 Communication via MODBUS TCP
Inverter response
Exception code 02 (invalid data address)
Telegram in which all values are set to 0.
Exception code 03 (invalid data value)
Exception code 02 (invalid data address)
Communication
865