Wireless mesh networking i/o and gateway (2 pages)
Summary of Contents for ELPRO 105U
Page 1
User Manual 105U-G Wireless Gateway AUDIN Composants & systèmes d'automatisme 8, avenue de la malle 51370 Saint Brice Courcelles - France Tel. +33(0)326042021 • Fax +33(0)326042820 http://www.audin.fr • e-mail info@audin.fr...
Page 2
Important Notices Thank you for your selection of the 105G module. We trust it will give you many years of valuable service. ATTENTION! Incorrect termination of supply wires may cause internal damage and will void warranty. To ensure your 105G enjoys a long life, double check ALL your connections with the user’s manual before turning the power on.
Page 3
ELPRO products are designed to be used in industrial environments, by experienced industrial engineering personnel with adequate knowledge of safety design considerations. ELPRO radio products are used on unprotected licence-free radio bands with radio noise and interference. The products are designed to operate in the presence of noise and interference, however in an extreme case, radio noise and interference could cause product operation delays or operation failure.
Page 4
Contents Limited Warranty, Disclaimer and Limitation of Remedies ELPRO products are warranted to be free from manufacturing defects for a period of 2 years from the effective date of purchase. The effective date of purchase is decided solely by ELPRO Technologies.
Page 6
Contents 4.3.2 Mappings from 105G to Outputs at Remote 105U I/O Modules 4.3.3 Don’t Send if in Comm Fail 4.3.4 Startup Polls 4.3.5 Polls to Remote Modules 105G 105G M APPINGS FROM TO OTHER ODULES 4.4.1 Entering a Block Mapping 4.4.2 Host Device Trigger...
(PLC, DCS etc) or be transmitted by radio to other 105U units. The output signals can be driven by a host device, or linked to inputs on remote 105U units. This document assumes the reader is familiar with the operation of the 105U I/O modules - for further information, please refer to the User Manuals for these products.
Chapter One Introduction The 105U-G is referred to as the 105G for the rest of this document, to clearly differentiate from normal 105U I/O modules. Ordering information: 105U-G-MD1 Modbus Master & Slave / DF1 interface 105U-G-PR1 Profibus-DP Slave interface 105U-G-ET1 Ethernet interface - Modbus TCP, Ethernet IP, FTP, HTML, Email 1.1.1 Modbus / DF1 105G...
105U-G Wireless Gateway User Manual An “input” is a value coming into the 105G via the data bus (that is, a value written to the 105G from the Profibus master). An output is a value going out from the 105G via the data bus (a value read by the Profibus master).
The 105G database effectively isolates the data-bus and the radio network. This provides a high level of system performance. The 105U radio protocol is very efficient and reliable for radio communications. It minimises radio channel usage by "change-of-state" reporting, and allows the use of intermediate repeater addresses.
105K modules can share the same address). 105G modules may take up more than one address under some circumstances. Any 105G or 105U module can act as a radio repeater for other modules - that is, radio messages can be passed onto other modules. Up to five repeater addresses can be configured for messages transmitted to a 105G module.
105G modules can transmit to 105G modules as well as other 105G modules. There can be multiple 105G and 105C modules in a network - as well as 105U I/O. Because the 105U protocol is peer-to-peer, there are few constraints on communications between multiple 105U modules.
0 – 255 seconds. 1.3.3 “Data Concentrator” Networks 105G units can act as “data concentrator” units to collect I/O from a local network of 105U wireless I/O modules and pass the I/O on to another 105G as a block.
Chapter Two Operation Chapter 2 OPERATION 2.1 Start-up The 105G operating software and the database configuration are stored in non-volatile memory, however the database I/O register values are lost on power failure (in the same way as a PLC). On start-up, the 105G sends "start-up poll" messages to remote modules based on the source address of inputs configured in the database (the start-up messages can be disabled by configuration).
Page 15
I/O register 76 to the host device. I/O registers that receive values from other 105U or G modules via radio are configured with a “Communications fail time”. If the 105G does not receive a message for this I/O register within the comms-fail time, then the I/O register is given a “comms fail”...
Outputs may be written to by either the host device or by a remote 105U via the radio port. Input values can be sent to the host device or to a remote module via the radio port.
105U-G Wireless Gateway User Manual I/O Register Description 4300 Input value DIO 1 4301 Input value DIO 2 4302 Input value DIO 3 4303 Input value DIO 4 4304 Input value DIO 5 4305 Input value DIO 6 4306 Input value DIO 7...
Operation 2.4.1 Modbus / DF1 The user selects whether the 105U-G-MD1 should act as a Modbus Master or Modbus Slave or DF1 device. The data type and baud rate of the serial communications must be configured at the 105G to match the host.
96 - 127. More than one 105S module can have the same address, provided they are not connected to the same 105U module - that is, #100 via #16 is identified as a different module to #100 via #65.
("on" or 1). If it is desired to use this function with a remote 105U module, but there are no inputs from this module being used, then it is easy to configure an unused input or an internal input (mains fail or low battery voltage etc).
(this means that the corresponding update time for the input at the 105U will need to be short). If the point is an output, then the update time for the output should be made short.
The foldout sheet 105U-G Installation Guide provides an installation drawing appropriate to most applications. Further information is detailed below. Each 105G module should be effectively earthed/grounded via the "GND" terminal on the 105U module - this is to ensure that the surge protection circuits inside the module are effective. Antenna Installation The 105 module will operate reliably over large distances.
105U-G Wireless Gateway User Manual An antenna should be connected to the module via 50 ohm coaxial cable (eg RG58 or RG213) terminated with a male coaxial connector. The higher the antenna is mounted, the greater the transmission range will be, however as the length of coaxial cable increases so do cable losses.
Chapter Three Installation Dipole antennas should be mounted vertically, at least 1 metre away from a wall or mast for maximum performance. 3.2.2 Yagi antenna. Yagi antennas are directional. That is, they have positive gain to the front of the antenna, but negative gain in other directions.
105U-G Wireless Gateway User Manual Antenna installed with drain holes down Coax feed looped at connection 105U 3.2.3 Collinear antenna. A collinear antenna may be used in the same way as a 3 element Yagi to compensate for the losses in long lengths of coaxial cable. This type of antenna is generally used at a central site with more than one remote site or at a repeater site.
Installation 3.3.1 AC Supply The AC supply is connected to the "SUP1" and "SUP2" terminals as shown below. 105U The AC supply should be "floating" relative to earth. 3.3.2 DC Supply For DC supplies, the positive lead is connected to "SUP1" and the negative to "GND". The positive side of the supply must not be connected to earth.
105U-G Wireless Gateway User Manual 3.3.3 Solar Supply A 12V solar panel (up to 30W) can be connected directly to the 105G as a DC power supply and the 105G will charge a battery. The 105G will charge the battery at 1.5A maximum.
Chapter Three Installation DIO 1 The output circuit is connected to the appropriate "DIO" terminal. Each digital output circuit includes a LED indicator which is lit when the digital output is active. Serial Port 3.5.1 RS232 Serial Port The serial port is a 9 pin DB9 female and provides for connection to a terminal or to a PC for configuration, field testing and for factory testing.
B is negative. Profibus Port For 105U-G-PR1 modules only. The Profibus RS485 connector is a D9 connector in the top end-plate of the module. The Profibus RS485 connection should be made to pins 3 and 8 of the D9 connector. The...
If it is set to a non-zero position, the user-configured Profibus Slave address will be over-written by the selection. Ethernet Port For 105U-G-ET1 modules only. RJ45 ETHERNET SELECTOR DIAGNOSTIC The Ethernet connection uses...
A valid unit address for a 105G is 1 to 95. A network may have up to 95 addresses communicating directly via radio (unit addresses 1 to 95). 105U I/O modules can have up to 31 modules communicating via RS485 (unit addresses 96 to 127).
Chapter 4 Configuration Configuration Program The configuration software is available on a CD, and needs to be installed on your PC before you can use it. The CD contains a setup file called setup.exe. Select the configuration software window on the Product CD and an installation Wizard will guide you through the installation procedure.
Page 33
105U-G Wireless Gateway User Manual When you have selected the project, a screen will appear where you may enter the system address. If you are editing an existing project, the system address will already have been entered. Do not change the system address...
Page 34
Select the type of module from the list. For 105G modules, you will be asked to select the bus protocol. This must match the 105U-G module type you have installed. You have the option of selecting a unit address for the module, or allowing the program to select one automatically.
Chapter 4 Configuration 4.2.2 Security There are two security features available. You can enter a password to protect the configuration files, and you can enable security encryption of the radio transmissions. The password can be between 6 and 256 characters. The password is case sensitive and any ASCII characters can be used.
Page 37
These security options provide a high level of security, but no data-security system can provide “100% protection”. But it does make it very difficult for someone to interfere with the 105U system - difficult to the point where there would be many easier alternate ways to cause malicious damage.
That is, you configure a mapping at the “input” module. If you want to transfer an input signal at a 105U module to a 105G register, you enter a mapping at the 105U I/O module. If you want to transfer a 105G register to an output signal at a 105U module, you enter a mapping at the 105G module.
Page 39
105U-G Wireless Gateway User Manual Any I/O registers that have already been selected will have a colour shading. The update times, analogue sensitivities for these mappings can be set as per normal I/O mappings. To map several inputs to consecutive I/O registers, use “Shift”-select or “Ctrl” - select to highlight the inputs, and select the first I/O register in the range.
I/O register from the list. The comms-fail time should be greater than the update time of the remote input. 4.3.2 Mappings from 105G to Outputs at Remote 105U I/O Modules Mappings can be entered in the 105G to remote outputs. Select the “Mappings” option under the 105G.
Page 41
105U-G Wireless Gateway User Manual Change Sensitivities Radio messages to remote modules can be change messages (when the value of the I/O register changes) or update messages (when the update time has elapsed). If a change message is sent, the update period restarts.
Chapter 4 Configuration Update Times To change the update times of output mappings, select the Update Times option. Any I/O registers that have already been mapped to remote outputs will automatically be listed. The default update time is 10 minutes. Changing Multiple Settings You can change the Comms Fail Times or Update Times of several I/O points simultaneously by using the <Shift>...
You can enter start up polls for remote modules by using the “New Poll Mapping” box. This function is the same as for the 105U I/O modules. A start-up poll is a special message sent when the 105G starts up. When the remote module receives a start-up poll, it will immediately respond with update messages for all its inputs that are mapped to the 105G.
Page 44
Chapter 4 Configuration Read/Write Mappings The mappings can be “read” or “write” mappings. A Read mapping is a request sent to another 105G to return a block of values. A Write mapping is a message sending a block of values to another 105G. A Read mapping from 105G#2 to 105G#3 could be the same as a Write mapping from 105G#3 to 105G#2 (that is, in the reverse direction) - except the Read mapping is initiated from #2 and the Write mapping is initiated from #3.
105U-G Wireless Gateway User Manual 4.4.1 Entering a Block Mapping Select the “source” 105G on the left hand menu - select “Block Mappings” and then “New Block Mapping” from the right-hand display. The Block Mapping Configuration display will appear. Select the “Command Type” from the pop-down window in the centre of the display. The red arrow will confirm the direction of the block transfer.
Chapter 4 Configuration In the above example, the status register for the block mapping has been automatically assigned to register 9500. The rest of the mapping configuration involves the mapping trigger - or what initiates the mapping message. Mapping “Triggers” A block mapping can be “triggered”...
105U-G Wireless Gateway User Manual the register. In the above example, if a value of hex 2000 is written to register 9500, the block mapping would be triggered. 4.4.3 Time Period On the Block Mapping display, there are two configuration windows - “Period” and “Offset”...
Page 48
Chapter 4 Configuration The block mapping message can be sent at a real-time by setting the “Period” value. In this example, “period” is set to 6 minutes - the message will be sent every 6 minutes starting at the beginning of each hour. That is, the message will be sent at XX:00, XX:06, XX:12, XX:18, XX:24 ….
105U-G Wireless Gateway User Manual These clock registers are used by the 105G for the real-time clock trigger. The host device can read these registers. Item Read Location Set Location Days 4330 4340 Hours 4331 4341 Minutes 4332 4342 Seconds...
Block mappings can include I/O Registers already used with normal I/O mappings. For example, a remote 105U I/O module could map a remote input to I/O Reg 743. At the 105G, the host device could read I/O Reg 743, and you could also configure a block mapping including this register to another 105G.
4.6 Data Bus Configuration - MODBUS The 105U-G-MD1 module provides interface for Modbus Slave, Modbus Master and Allen- Bradley DF1. This Modbus interface uses the Modbus RTU protocol - also known as the Modbus Binary protocol. This manual assumes that the reader has a good understanding of the Modbus or DF1 protocol.
Page 52
Chapter 4 Configuration • If the Modbus Master sends the 105G a “write” command for Modbus output 02650, then the 105G will write the value to I/O register 2650. • If the Modbus Master sends the 105G a “read” command for Modbus input 30142, then the 105G will respond with the value in I/O register 142.
105U-G Wireless Gateway User Manual Modbus Errors Four Modbus error messages are reported to the Modbus Master. An error response is indicated by the address of the return message being 128 plus the original slave address. CODE MEANING Illegal Function. The message received was not an allowable function for the slave.
Page 54
Chapter 4 Configuration To enter a Modbus command, select “New Serial Mapping”. The following example is a digital write command which writes 105G I/O registers 20 – 25 (6 registers) to Modbus outputs 00012 – 00017, at Modbus Slave address 1. The entry under “I/O Register”...
Page 55
‘0000’ or ‘FFFF’ in the database location - these commands are 01 and 02. Analogue I/O Analogue I/O from the remote 105U modules are 16 bit register value. A value of 8192 (hex 2000) represents 0mA. A value of 49152 (hex C000) represents 20mA. Each mA has value of 2048 (hex 0800) - a change of 4096 (hex 1000) is equivalent to a change of 2mA.
Chapter 4 Configuration When updated values are received from the 105U radio network, the current polling sequence is interrupted, and the new values are written immediately to the appropriate slaves. Re-tries on the Serial Port When communicating with Modbus slaves, the 105G may be configured to re-try (or re-send) a message zero or more times if no response is received from a slave.
Page 57
I/O register sensitivity. If the response from a data request contains a changed data value, the new value will be transmitted to the remote 105U on the radio network. Similarly, if the 105G receives a command to change a data value, the new value will be transmitted to the remote 105U module.
Page 58
Chapter 4 Configuration The entry under “I/O Register” is the first I/O register in the 105G to be transferred - the “I/O count” is the number of registers to be transferred. The “Command Type” selected is a file write command (you can select read or write) - which means that the values are sent from the 105G to the host device.
Page 59
16 consecutive I/O registers in the 105G. Analogue I/O Analogue I/O from the remote 105U modules are 16 bit register value. A value of 8192 (hex 2000) represents 0mA. A value of 49152 (hex C000) represents 20mA. Each mA has value of 2048 (hex 0800) - a change of 4096 (hex 1000) is equivalent to a change of 2mA.
The Profibus 105U-G-PF1 acts as a Profibus DP Slave - the host device is a Profibus Master. If you use the 105U-G with a PLC, the PLC will require a GSD file so it can recognise the Profibus interface in the 105U-G. This file loads into the PLC. The file is available on the same CD as the configuration software.
Page 61
105U-G Wireless Gateway User Manual There are six types of links that can be configured: Read Links Write Links The 105G reads single bits as digital The 105G writes I/O registers to Single Bit values and stores in I/O registers as single bits of a Profibus byte, hex FFFF or 0000.
Page 62
Chapter 4 Configuration The second link is a “single bit read” link - bits 5 to 7 (3 bits) of Profibus byte 34 are read and stored in I/O registers 140 – 142. For single bit transfers, the offset is counted from the least significant bit (LSB) of the byte (with bit 0 being the LSB).
- this manual only provides basic instructions on how to use the Ethernet functions of the 105G. For full details, refer to the Anybus manual “ABS-EIP-2 - Modbus/TCP, EtherNet/IP & IT Functionality” - this manual is available from the Elpro Configuration CD and web-page.
Chapter 4 Configuration 2. Ethernet/IP. EtherNet/IP is based on the Allen-Bradley Control and Information protocol, CIP, which is also the framework for both DeviceNet and ControlNet, to carry and exchange data between nodes. Refer to section 4.9.4 below for configuration details. 3.
105U-G Wireless Gateway User Manual 4.9.2 Setting IP Address The Ethernet IP address can be set from the configuration software or via the Ethernet port or via the selector switches in the top end-plate of the module. If the “Enable Switch Address”...
Page 66
Chapter 4 Configuration Special case IP addresses Devices on an Ethernet network are not allowed to be configured to the following IP addresses; therefore do not configure the module to use any of them. 0.x.x.x - IP address where the first byte is zero 127.x.x.x - IP address where the first byte is x.x.x.0 - IP address where the last byte is zero x.x.x.255 - IP address where the...
105U-G Wireless Gateway User Manual 4.9.3 Modbus TCP To use Modbus TCP, select the Enable Modbus Server box. The Modbus TCP Server will accept Modbus TCP connections on TCP/IP port 502. Supported Commands Function Function Class Affects Area Addressing method...
Ethernet/IP. If you use the 105U-G with a PLC, the PLC will require an EDS file so it can recognise the Ethernet/IP interface in the 105U-G. This file loads into the PLC. The file is available on the same CD as the configuration software.
Page 69
105U-G Wireless Gateway User Manual Modbus/TCP sections. An “I/O Instance” for each databus link must also be specified so that the configured I/O data is made available to one of the six possible Ethernet connections. In this example, 40 I/O Registers (80 bytes) are transferred to I/O Input Instance 1 (i.e.
Page 70
Chapter 4 Configuration Assembly Object, Class 04h The Assembly Object binds all mapped I/O data. This data is used for I/O connections. This object is set-up dynamically via databus links through configuration software. Class Attributes Def, Name Service Description Semantics Min, Type Revision...
Page 71
105U-G Wireless Gateway User Manual I/O Data Input Mapping Object, Class A0h This object is setup dynamically via fieldbus write mappings through configuration software. This data is also available as vendor specific Instance Attributes (64h to 69h) in the Assembly Object.
Page 72
Chapter 4 Configuration I/O Data Output Mapping Object, Class A1h This object is setup dynamically via fieldbus write mappings through configuration software. This data is also available as vendor specific Instance Attributes (96h to 9Bh) in the Assembly Object. Def, Name Service Description...
105U-G Wireless Gateway User Manual 4.10 Uploading and Downloading To upload or download a configuration file, the 105G must be connected to the PC via a RS232 cable. For Modbus/DF1 units, the host device must be disconnected, even if it is connected to the RS485 port.
Page 74
Chapter 4 Configuration If you are unable to load into the archived project, then mappings to remote modules will be displayed, but mappings from remote inputs will be shown as “Unknown Mappings”. If you also load the configurations from the other remote modules in the system, then these unknown mappings will disappear as the program can determine where the remote inputs are.
105U-G Wireless Gateway User Manual Chapter 6 DIAGNOSTICS Before installing a new system, it is always best to set up the system on a bench to test the system configuration. It is always easier to detect problems when the modules are together.
Chapter 6 Diagnostics 6.2 Diagnostics Menu The 105G provides both offline and online diagnostic features to assist with troubleshooting. These features may be selected from the Configuration software using the “Diagnostics” feature. For the Modbus/DF1 module, all diagnostics features are effectively off-line as the data bus needs to be disconnected from the data bus to view the diagnostics.
105U-G Wireless Gateway User Manual 6.2.1 Radio signal strength measurements There are two ways of displaying radio signal strength: • Using the off-line diagnostics menu, or • Using the on-line “debug” features (still off-line for Modbus/DF1 version) - for more information on this feature, refer to the next section, 6.2.2...
-100 and -130 dBm. At the other site, the transmitter may be turned on (select “e” at the other 105G, or “Tone Reversals” if the other module is a 105U). The display will now show the received radio signal from the other transmitter. For reliable operation, the average signal strength should be better than –95dBm (that is, -90dBm, not –...
Page 81
105U-G Wireless Gateway User Manual The Debug Menu allows the I/O Database to be viewed and modified to confirm the operation of the radio network. These options may be used to check operation of outputs at remote sites, and to check the values of inputs reported from remote sites.
Page 82
Chapter 6 Diagnostics Option b) Write Image Array This option allows you to write a value to a I/O register. To change the value of a register, select option b) write image array. Enter location, then the value to be written to the register – for example Location: 12 New Value: 0xFFFF Register values should always be written in hexidecimal format.
Page 83
105U-G Wireless Gateway User Manual If you select any message line with the mouse, information about the message will be displayed at the bottom of the screen - the system address, RSSI and CRC (error-check) status. The “text box” at the bottom middle of the screen decodes the message - that is, it decodes the message to display I/O channel and value.
Chapter 6 Diagnostics 6.3 Ethernet Diagnostics Read and Write image array can also be done via the Ethernet port by selecting ‘Debug I/O Registers’ from within the Ethernet Settings window in the configuration software. The IP address of the module must Ethernet have previously diagnostics...
105U-G Wireless Gateway User Manual To write to a register double click with mouse on the register and a pop up box will appear as shown below. Enter value and press ‘OK’. You can disable the links between the I/O registers and the Ethernet interface by selecting “Disable Read...
Chapter 6 Diagnostics Green The Link led indicates that the module is connected to an Ethernet network. Green No power applied to module. Green Steady Device operating correctly. Green Flashing Module has not been configured. Flashing Minor recoverable fault has been detected. Steady Major internal error has been detected.
We are pleased that you have purchased this product. ELPRO products are warranted to be free from manufacturing defects for a period of 2 years from the effective date of purchase. The effective date of purchase is decided solely by ELPRO Technologies.
Appendix 1 Appendix 1 I/O Status Registers 5000 - 9399 Information Meaning Communications For inputs, this bit is set (“on”) if no message has been received failure from the remote address within the timeout period configured for this input. The bit is reset ("off") when a message is received. For outputs, this bit is set (“on”) if transmission to the remote was unsuccessful after five attempts.
Page 89
105U-G Wireless Gateway User Manual Block Message Status Registers 9500 - 9999 Information Meaning Communications For read commands – Read Bits and Read Words – This bit is set failure if no response is received to the read command after a timeout, or if a communication fail response is received to a read.
Need help?
Do you have a question about the 105U and is the answer not in the manual?
Questions and answers