CAL Controls 3300 Communications Manual
Modbus rtu
Hide thumbs
Also See for 3300:
- Operating manual (39 pages) ,
- Manual (36 pages) ,
- Application manual (10 pages)
Related Manuals for CAL Controls 3300
Summary of Contents for CAL Controls 3300
- Page 1 COMMERCIAL IN CONFIDENCE CAL 3300/9300/9400/9500(P) MODBUS RTU COMMUNICATIONS GUIDE September 2000 ISSUE 1.10 Doc:33034 Iss:002...
- Page 2 ,stored in a retrieval system, or copied in any form, without prior written permission from Cal Controls Ltd. Every effort has been taken to ensure the accuracy of this specification. However due to our policy of continuous development to improve our products, this could without notice, result in amendments or omissions to this document.
- Page 3 COMMERCIAL IN CONFIDENCE 1. MEMORY MAP OF PARAMETERS WARNING:- As with any computer system writing to any unauthorised memory address will inevitably cause malfunction and may put the instrument in an indeterminate or dangerous state. It is the users responsibility to ensure correct use. The instruments uses a 8051 type processor.
- Page 4 COMMERCIAL IN CONFIDENCE 1.1 Internal data formats The instrument stores data in a variety of ways to allow a full range of values to be held in the minimum space possible. Most are represented by a multiple of the displayed value - this is given as a scale factor in the table below: for instance, temperatures are stored in 10ths of a degree, so a displayed value of 123.4 degrees is stored as 1234 - this is shown in the tables as temp * 10.
- Page 5 COMMERCIAL IN CONFIDENCE 1.2.1 Initialising the Setpoint The instrument is provided with a safety lock to prevent it from controlling until the setpoint has been set. This lock is automatically released the first time that the setpoint is changed from the instrument front panel.
- Page 6 COMMERCIAL IN CONFIDENCE 1.3 Level C - parameters in address order Parameter Size Address ModBus Internal Storage, Step rate in Comments Name (hex) Function Internal units read/write Addr 03D5 0..255 valid range 1..247 Baud 03D6 0=1200, 1=2400, 2=4800, 3=9600, 4=19200 Data 03D7 0=18n1, 2=18e1, 3=18o1,...
- Page 7 COMMERCIAL IN CONFIDENCE 1.5 Level 2 - parameters in address order Parameter Size Address ModBus Internal Storage, Step rate in Comments Name (hex) Function Internal units, Limits read/write SP1.P not stored must be computed as SP1_ontime/SP1_proptime SP1_ontime 0062 *100% SP1_proptime 0078 Disp 002A...
- Page 8 Us * 10 [LIN] Data (Os 2) 0442 Os2 * 10 [LIN] 04FD 0xFFFF/ 0x01 means ver 391 3300/9300 ver 1 (S/W ver) 0x02 means ver 392 3300/9300 ver2 0x03 means ver 941 9400 ver 1 0x04 means ver 951...
- Page 9 COMMERCIAL IN CONFIDENCE 1.8 Level A – parameters in address order (9500 only) Parameter Size Address ModBus Internal Storage, Step rate in Comments Name (hex) Function Internal units, Limits read/write An.Hi 02D9 AnHi Step=1 min=-1999, max=9999 An.Lo 02DB AnLo Step=1 min=-1999, max=9999 Hi.In 02DD...
-
Page 10: Security Messages
Security Messages To allow communications to safely manipulate the instrument a number of security messages have been implemented. CAL Controls see these as important safety features, which offer a number of advantages, especially when configuring a safety critical application. The messages to enter program mode only have to be sent once to access the Internal parameters of the instrument and then any number of adjustments can be made. - Page 11 COMMERCIAL IN CONFIDENCE 1. Write the security byte with value 5 (9500 — Not Required) 2. Send message number 5 (enter program mode) 3. Send messages as required to change desired parameters 4. Write the security byte with value 6 (9500 — Not Required) 5.
-
Page 12: Read Holding Registers
COMMERCIAL IN CONFIDENCE ModBus Message Construction. The following message function codes are implemented in the instrument. Where a value of xx is shown, substitute the correct value for your installation and the data item required. All CRCs are shown as ?? since must be automatically generated according to the data contained in the message. 2.4.1 Read Coil Status (single bit read) Byte No... -
Page 13: Preset Multiple Registers
COMMERCIAL IN CONFIDENCE 2.4.3 Force Single Coil (write single bit) Byte No Meaning Value (hex) Slave address ModBus Function code (force coil) Starting Address MSB, always 00, all bits are in internal memory Starting Address LSB Force Data MSB (FF sets the bit, 00 clears it) FF or 00 Force Data LSB (always 00) CRC lo byte... - Page 14 COMMERCIAL IN CONFIDENCE Exception Code Responses There are 5 possible responses to received messages: 2.5.1.1 Broadcast message There is never any response to a broadcast message (one with slave address 0). The message will be acted on if possible, any errors will go unreported. 2.5.1.2 Slave receives incomplete or corrupt message No response is returned.
-
Page 15: Crc Calculation
COMMERCIAL IN CONFIDENCE CRC calculation NOTE that the CRC algorithm published in the Modicon ModBus Protocol Guide (PI-MBUS-300 Rev G, Nov 1994) IS WRONG!!!! However, the quick C program using the lookup tables is correct. The correct algorithm is given here 1. - Page 16 COMMERCIAL IN CONFIDENCE Reading the CAL Controllers Setpoint An 8 byte message must be transmitted to the CAL Controller as follows: byte 0 Slave address byte 1 Read Register Function code 03 hex byte 2 High Byte of Register address 00 hex byte 3 Low byte of Register address...
- Page 17 COMMERCIAL IN CONFIDENCE After a short delay (approx. 10ms), the CAL Controller will respond with a 7 byte reply. Assuming the Setpoint to be 200 degrees this would be: byte 0 : Slave address byte 1 : Function code 03 hex byte 2 : Number of data bytes to follow 02 hex...
- Page 18 COMMERCIAL IN CONFIDENCE Writing the Setpoint Writing to the CAL Controller requires a three stage process which prevents simultaneous access from the front panel. To prevent accidental changes caused by unreliable communications, a sequence of messages must be sent in strict order. 1.
- Page 19 COMMERCIAL IN CONFIDENCE 2. Write the Setpoint value The setpoint value must be sent in the same units as are currently displaying on the controller, that is, in Degrees Fahrenheit, if selected, otherwise in Centigrade. The value to be transmitted must be an integer number of 10ths of a degree.
- Page 20 COMMERCIAL IN CONFIDENCE 3.0 VALUE / LIMIT CHECKING The purpose of this section of the document is to lay down the allowable range of adjustment for all functions addressable over the communications link. LEVEL C Function Values / Limits 1 — 247 BAUD 1200 2400...
- Page 21 COMMERCIAL IN CONFIDENCE LEVEL 4 Function Values / Limits LOCK NONE LEV.3 LEV.2 ALL PROG AUTO STAY NO.AL DIS.S 1 - 32 DER.S 0.1 — 1.0 LEVEL A Function Values / Limits AN.HI -1999 - 9999 AN.LO -1999 - 9999 HI.IN 0.1 —...
- Page 22 COMMERCIAL IN CONFIDENCE HISC > INPT = LIN > 1 to 9999 > DECP = Others > UNIT > DISP > sensor full scale min to max LOSC > INPT = LIN > 0 to 9999 > DECP = Others > UNIT >...
- Page 23 COMMERCIAL IN CONFIDENCE The absolute conversion uses the formula- TempF abs = 32 +(TempCabs X 1.8 ) for converting *C to *F TempC abs = TempF abs — 32 / 1.8 for converting *F to *C The relative conversion uses the formula- TempF rel =TempC rel X 1.8 for converting *F to *C TempC rel = TempF rel / 1.8 for converting *C to *F Here is a list of the functions that are effected by a *C to *F conversion, and if a relative or absolute...
- Page 24 COMMERCIAL IN CONFIDENCE TABLE 1 MIN/MAX SENSOR FULL SCALE DEGREE C SENSOR MIN 0.1 MAX 0.1 1800 999.9 600.0 800.0 - 50 1200 - 50.0 999.9 800.0 - 50 1200 - 50.0 999.9 1600 999.9 1600 999.9 - 200 - 199.9 250.0 - 200 - 199.9...
- Page 25 COMMERCIAL IN CONFIDENCE TABLE 3 HI.SC / LO.SC DEFAULT SETTINGS DEGREE C SENSOR DEFAULT LOSC DEFAULT HISC DEFAULT LOSC DEFAULT HISC 1800 999.9 600.0 800.0 1200 999.9 800.0 1200 999.9 1600 999.9 1600 999.9 250.0 400.0 LIN1 400.0 LIN2 400.0 LIN3 3000 999.9...
Need help?
Do you have a question about the 3300 and is the answer not in the manual?
Questions and answers