Page 1
W600/W900 Modbus Instruction Manual WALCHEM, Iwaki America Inc. Five Boynton Road Hopping Brook Park Holliston, MA 01746 USA TEL: 508-429-1110 WEB: www.walchem.com...
Page 2
WALCHEM and for the purposes disclosed in writing at the time of purchase, if any. WALCHEM’s liability under this warranty shall be limited to replacement or repair, F.O.B. Holliston, MA U.S.A. of any defective equipment or part which, having been returned to WALCHEM, transportation charges prepaid, has been inspected and determined by WALCHEM to be defective.
1.0 SCOPE This document is a User Interface Specification for the Walchem Modbus/TCP product feature for W600 and W900 Controllers. It contains mapping of the various dynamic variables to their Modbus/TCP address locations. This document supports the Modbus/TCP feature on controller software versions 3.01 and higher.
Modbus Settings Settings relating to the Modbus/TCP feature can be configured in the Remote Communication Configuration Menu. The ‘Verbose Logging’ setting is used to generate an Event log entry for every Modbus message into and out of the controller. The information may be used in conjunction with an HMI log when troubleshooting communications during commissioning.
4.1.2 Protocol Data Unit The Protocol Data Unit (PDU) is made up of between 2 and 256 bytes, depending on the function and number of data addresses requested: Protocol Data Unit (PDU) Name Size Description Function Code identifier. Function Code 1 byte Can be any of the hexadecimal codes listed in the Function Code table.
4.1.3.1 Function Code 1, Read Coils Read Coils Request PDU Name Size Description Function Code 1 Byte Function Code Identifier (0x01). Starting Address 2 Bytes The data address of the first Coil to read. Quantity of Coils 2 Bytes The number of Coils requested, maximum of 2000 per message. Read Coils Response PDU Name Size...
4.1.3.3 Function Code 3, Read Holding Registers Read Holding Registers Request PDU Name Size Description Function Code 1 Byte Function Code Identifier (0x03). Starting Address 2 Bytes The data address of the first Holding Register to read. Quantity of The total number of Holding Registers requested, maximum of 2 Bytes Holding Registers 125 per message.
4.1.3.5 Function Code 5, Write Single Coil Write Single Coil Request PDU Name Size Description Function Code 1 Byte Function Code Identifier (0x05). Coil Address 2 Bytes The data address of the Coil to which to write. Coil Value 2 Bytes The value to write to the Coil (0xFF00 = On, 0x0000 = Off).
4.1.3.7 Function Code 16, Write Multiple Holding Registers Write Multiple Holding Registers Request PDU Name Size Description Function Code 1 Byte Function Code Identifier (0x10). Starting Address 2 Bytes The data address of the first Holding Register to which to write. Quantity of 2 Bytes Number of Holding Registers to write.
TCP/IP Interface The Modbus/TCP interface is attached to the TCP/IP stack that is implemented within the Walchem controller. When the Modbus feature is Enabled, the controller will listen to all communications that come in on the Modbus/TCP registered port 502. This port can be changed in the Remote Communications Menu.
4.4.2.2 16-Bit Word (Bitfield) Holding Registers and Input Registers can be used for Alarm Bitfields. An 8-Bit Alarm bitfield is packed into the least significant byte of a 16-bit register. This is offered as a single-register alternative to accessing alarm states individually. Bitfields can be decoded in section 5.5 Alarm Bitfields.
Input Register (FC4), the address indices 2 and 3 must be requested together: Addresses 30039 and 30040. To read the ‘Low Alarm’ status for Sensor 2-1 in a W600 Controller as a Coil (FC1), the Sensor Input Address Map indicates the starting address is x0865.
5.2.1 W600 Controller – I/O Channel Address Maps The address ranges for each input/output channel in the W600 controller are as follows: W600 Controller – I/O Channel Address Map Starting Ending Type-Specific Address Maps Object Address Address System x0037 x0072 5.3.1 System Address Map...
5.2.3 Alternate Address Maps The Alternate Address Maps provide a more efficient way to access similar data from different objects. Using these address tables, the same field type is accessible using consecutive addresses. For example, the primary values for all sensors installed in the controller can be accessed in a single Modbus FC4 request/response cycle starting at address 39217.
Type-Specific Address Maps 5.3.1 System Address Map System Address Map Address Name Data Encoding Permissions Value Controller Time 32-Bit Integer Read Unix Time Controller Firmware 32-Bit Float Read Version Date of Last Data Log 32-Bit Integer Read Unix Time Controller Processor 32-Bit Float Read °C...
5.3.2 Network Address Map Network Address Map Data Address Name Permissions Value Encoding VTouch Last Data Time 32-Bit Integer Read Unix Time VTouch Last 32-Bit Integer Read Unix Time Configuration Time VTouch Refresh Rate 32-Bit Float Read/Write 1 – 1440 Minutes Alarm Bitfield 16-Bit Bitfield Read...
5.3.3.2 Analog Input Flowmeter Address Map Analog Input Flowmeter Address Map (W900 Controller Only) Address Name Data Encoding Permissions Value Flow Units Primary Value 32-Bit Float Read Rate Units Primary Raw Value 32-Bit Float Read Last Calibration Date 32-Bit Integer Read Unix Time Flow Total...
5.3.4 Digital Input Address Maps 5.3.4.1 Digital Input / DI State Type Address Map Digital Input / DI State Type Address Map Address Name Data Encoding Permissions Value Last Reset Date 32-Bit Integer Read Unix Time Total Time 32-Bit Integer Read Seconds Cycle Time...
5.3.4.2 Digital Input / Contacting Flow Meter Type Address Map Digital Input / Contacting Flow Meter Address Map Data Address Name Permissions Value Encoding Last Reset Date 32-Bit Integer Read Unix Time Total Flow 32-Bit Float Read Flow Units Total Flow Alarm 0 –...
5.3.4.3 Digital Input / Paddlewheel Flow Meter Type Address Map Digital Input / Paddlewheel Flow Meter Address Map Data Address Name Permissions Value Encoding Last Reset Date 32-Bit Integer Read Unix Time Total Flow 32-Bit Float Read Flow Units Flow Units Current Flowrate 32-Bit Float Read...
5.3.4.4 Digital Input / DI Counter Type Address Map Digital Input / DI Counter Address Map (W900 Controller Only) Data Address Name Permissions Value Encoding Last Reset Date 32-Bit Integer Read Unix Time Total Count 32-Bit Float Read Units Units Current Rate 32-Bit Float Read...
5.3.4.5 Digital Input / Flow Monitor Type Address Map Digital Input / Flow Monitor Address Map Addres Name Data Encoding Permissions Value Last Reset Date 32-Bit Integer Read Unix Time Total Feed 32-Bit Float Read Flow Units Flow Units Current Flowrate 32-Bit Float Read Rate Units...
5.3.5 Virtual Input Address Maps 5.3.5.1 Virtual Input / Calculation & Raw Value Type Address Map Virtual Input / Calculation & Raw Value Type Address Map Address Name Data Encoding Permissions Value Primary Value 32-Bit Float Read Virtual Input Units Deadband 32-Bit Float Read/Write...
5.3.5.3 Virtual Input / Disturbance Type Address Map Virtual Input / Disturbance Type Address Map (W900 Controller Only) Address Name Data Encoding Permissions Value Primary Value 32-Bit Float Read Unitless Minimum Value 32-Bit Float Read/Write Unitless Maximum Value 32-Bit Float Read/Write Unitless Smoothing Factor...
5.3.6 Relay Output Address Maps 5.3.6.1 Relay Output / Manual Control Mode Address Map Relay Output / Manual Control Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds On Time Delay 32-Bit Integer Read/Write 0 –...
5.3.6.2 Relay Output / On/Off & On/Off Disturbance Control Mode Address Map Relay Output / On/Off & On/Off Disturbance Control Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Setpoint 32-Bit Float Read/Write...
5.3.6.3 Relay Output / Dual Setpoint Control Mode Address Map Relay Output / Dual Setpoint Control Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Setpoint 1 32-Bit Float Read/Write Input Sensor Units Setpoint 2...
5.3.6.4 Relay Output / Time Proportional Control Mode Address Map Relay Output / Time Proportional Control Address Map Data Address Name Permissions Value Encoding 32-Bit Time On Read Seconds Integer 32-Bit Total Time Read Seconds Integer 32-Bit Cycle Time Read Seconds Integer Setpoint...
5.3.6.5 Relay Output / Intermittent Sampling Control Mode Address Map Relay Output / Intermittent Sampling Control Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Cycle Time 32-Bit Integer Read Seconds Setpoint...
5.3.6.6 Relay Output / Bleed And Feed Control Mode Address Map Relay Output / Bleed And Feed Control Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Feed Time Limit 32-Bit Integer Read/Write 0 –...
5.3.6.7 Relay Output / Bleed Then Feed Control Mode Address Map Relay Output / Bleed Then Feed Control Mode Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Remaining Feed Time 32-Bit Integer Read Seconds...
5.3.6.8 Relay Output / Flow Timer Control Mode Address Map Relay Output / Flow Timer Control Mode Address Map Data Address Name Permissions Value Encoding 32-Bit Time On Read Seconds Integer 32-Bit Total Time Read Seconds Integer 32-Bit Remaining Feed Time Read Seconds Integer...
5.3.6.9 Relay Output / Counter Timer Control Mode Address Map Relay Output / Counter Timer Control Mode Address Map (W900 Controller Only) Data Address Name Permissions Value Encoding 32-Bit Time On Read Seconds Integer 32-Bit Total Time Read Seconds Integer 32-Bit Remaining Feed Time Read...
5.3.6.10 Relay Output / Target PPM Control Mode Address Map Relay Output / Target PPM Control Mode Address Map (W900 Controller Only) Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Remaining Feed Time 32-Bit Integer Read...
5.3.6.11 Relay Output / PPM By Volume Control Mode Address Map Relay Output / PPM By Volume Control Mode Address Map (W900 Controller Only) Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Remaining Feed...
5.3.6.12 Relay Output / Flow Meter Ratio Control Mode Address Map Relay Output / Flow Meter Ratio Control Mode Address Map (W900 Controller Only) Data Address Name Permissions Value Encoding 32-Bit Time On Read Seconds Integer 32-Bit Total Time Read Seconds Integer Remaining Volume...
5.3.6.13 Relay Output / Volumetric Blend Control Mode Address Map Relay Output / Volumetric Blend Control Mode Address Map (W900 Controller Only) Data Address Name Permissions Value Encoding 32-Bit Time On Read Seconds Integer 32-Bit Total Time Read Seconds Integer Remaining Volume 32-Bit Float Read...
5.3.6.14 Relay Output / Percent Timer Control Mode Address Map Relay Output / Percent Timer Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Cycle Time 32-Bit Integer Read Seconds Feed Percentage...
5.3.6.15 Relay Output / Event Timer Control Mode Address Map Relay Output / Event Timer Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Cycle Time 32-Bit Integer Read Seconds 0 –...
5.3.6.16 Relay Output / Biocide Timer Control Mode Address Map Relay Output / Biocide Timer Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Cycle Time 32-Bit Integer Read Seconds Bleed Lockout...
5.3.6.17 Relay Output / Spike Control Mode Address Map Relay Output / Spike Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Spike Event Time 32-Bit Integer Read Seconds Setpoint...
5.3.6.18 Relay Output / Probe Wash Control Mode Address Map Relay Output / Probe Wash Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Cycle Time 32-Bit Integer Read Seconds Hold Time Limit...
5.3.6.19 Relay Output / Plating Control Mode Address Map Relay Output / Plating Control Address Map (W600 Controller Only) Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Total Feed Volume...
5.3.6.20 Relay Output / Plating Follow Control Mode Address Map Relay Output / Plating Follow Control Address Map (W600 Controller Only) Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Total Feed Volume...
5.3.6.21 Relay Output / Lag Output Control Mode Address Map Relay Output / Lag Output Address Map Address Field Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Setpoint 1 ‡ 32-Bit Float Read/Write Input Sensor Units Setpoint 2 ‡...
5.3.6.22 Relay Output / Alarm Control Mode Address Map Relay Output / Alarm Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Hand Time Limit 32-Bit Integer Read/Write 0 –...
5.3.7 Pulse Relay Output Address Maps 5.3.7.1 Pulse Relay Output / Manual Control Mode Address Map Pulse Relay Output / Manual Control Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output...
5.3.7.2 Pulse Relay Output / Pulse Proportional Control Mode Address Map Pulse Relay Output / Pulse Proportional Control Mode Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent...
5.3.7.3 Pulse Relay Output / Flow Proportional Control Mode Address Map Pulse Relay Output / Flow Proportional Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent...
5.3.7.4 Pulse Relay Output / Pulse PID Control Mode Address Map Pulse Relay Output / Pulse PID Control Mode Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent...
5.3.7.5 Pulse Relay Output / Pulse Disturbance Control Mode Address Map Pulse Relay Output / Pulse Disturbance Control Mode Address Map (W900 Controller Only) Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output...
Page 58
5.3.7.6 Pulse Relay Output / Lag Output Control Mode Address Map Pulse Relay Output / Lag Output Control Mode Address Map Address Field Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Percent Output 32-Bit Float Read Percent...
5.3.8 Analog Output Address Maps 5.3.8.1 Analog Output / Manual Control Mode Address Map Analog Output / Manual Control Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent...
5.3.8.2 Analog Output / Retransmit Mode Address Map Analog Output / Retransmit Mode Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent Hand Output 32-Bit Float Read/Write 0 –...
5.3.8.3 Analog Output / Proportional Control Mode Address Map Analog Output / Proportional Control Mode Address Map Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent Setpoint 32-Bit Float Read/Write...
5.3.8.4 Analog Output / Flow Proportional Control Mode Address Map Analog Output / Flow Proportional Control Mode Address Map Address Name Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent Target PPM...
5.3.8.5 Analog Output / PID Control Mode Address Map Analog Output / PID Control Mode Address Map Data Address Name Permissions Value Encoding 32-Bit Time On Read Seconds Integer 32-Bit Total Time Read Seconds Integer Output 32-Bit Float Read Percent Setpoint 32-Bit Float Read/Write...
5.3.8.6 Analog Output / Disturbance Control Mode Address Map Analog Output / Disturbance Control Mode Address Map (W900 Controller Only) Data Address Name Permissions Value Encoding Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent Minimum Output...
5.3.8.7 Analog Output / Lag Output Control Mode Address Map Analog Output / Lag Output Control Mode Address Map Address Field Data Encoding Permissions Value Time On 32-Bit Integer Read Seconds Total Time 32-Bit Integer Read Seconds Output 32-Bit Float Read Percent Setpoint 1 ‡...
5.3.9.2 Alternate Digital Input Address Map Object DI State Interlock State Total Time Flowrate Flow Total Alarm Bitfield Data Encoding Boolean Boolean 32-Bit Integer 32-Bit Float 32-Bit Float 16-Bit Bitfield Permissions Read Read Read Read Read Read Contacting FM Paddlewheel FM Control Modes DI State DI State...
5.3.9.4 Alternate Relay Output Address Map Object Relay State Pulse Output Time On Status Alarm Bitfield Data Encoding Boolean 32-Bit Float 32-Bit Integer 16-Bit Status 16-Bit Bitfield Permissions Read Read Read Read Read Control Modes All except Pulse Outputs Only Pulse Outputs 0 = Off 5.4 Status Register 5.5.6 Relay Alarm...
5.3.9.5 Alternate Analog Output Address Map Object Analog Output Time On Status Alarm Bitfield Data Encoding 32-Bit Float 32-Bit Integer 16-Bit Status 16-Bit Bitfield Permissions Read Read Read Read 5.5.7 Analog Output Value Seconds 5.4 Status Register Codes Alarm Bitfield Analog Output Number Address Address...
Status Register Codes Status Name Description Code Error Generic Error. None No status to report. Sensor Auto Cal Sensor Circuit Auto-Calibration in progress. Sensor User Cal Sensor User-Calibration in progress. DI State: Open DI State is open. DI State: Closed DI State is closed.
Page 72
Status Name Description Code Unused Sensor Input Failure Sensor input failure or sensor board alarm. Sensor Fault Error Sensor value outside of fault limits. Sensor Range Alarm Sensor value outside of range limits. Relay Cycle Delay Relay state change delayed by minimum cycle time setting. Sensor Normal Sensor is running in normal operation.
Alarm Bitfields Alarm bitfields are comprised of an 8-bit field encapsulated in a 16-bit word. Bit 1 is the least significant bit, bit 8 is the most significant bit. See 4.4.2.2 16-Bit Word (Bitfield) for details. Some alarms have multiple causes, consult the Controller Instruction Manual for a comprehensive list of possible alarm causes.
5.5.3 Sensor Input Alarm Bitfield Sensor Input Alarm Bitfield Bit Name Bit No. Description SI Types The sensor reading drops below the Low Alarm setpoint. All sensor types High The sensor reading rises above the High Alarm setpoint. All sensor types Low Low The sensor reading drops below the Low Low Alarm setpoint.
5.5.5 Virtual Input Alarm Bitfield Virtual Input Alarm Bitfield Bit Name Bit No. Description VI Types Calculation & The value drops below the Low Alarm setpoint. Raw Value only Calculation & High The value rises above the High Alarm setpoint. Raw Value only Calculation &...
5.5.7 Analog Output Alarm Bitfield Analog Output Alarm Bitfield Bit Name Bit No. Description Control Modes The output has been activated for longer than the All modes with Output Output Time configured time limit. Control is stopped while the Timeout Limit setting alarm is active.
Need help?
Do you have a question about the W600 and is the answer not in the manual?
Questions and answers