Académique Documents
Professionnel Documents
Culture Documents
1. Introduction
MODBUS RTU protocol
2. Physical Layer
Communication port : RS-485, Fiber optic
Asynchronous format : One character consists of 10 or 11bit. (1 start bit + 8 data bits + (1 parity bit) +1 stop bit)
Baud rate : 9600, 19200, 38400 bps
Parity : Even, Odd, No parity
It has the communication method of Master-Slave, Master only can carry out a request action,
and Slave sends the requested data received from Master or responses to the requested performance.
DESCRIPTION SIZE
SLAVE ADDRESS 1 byte
FUNCTION CODE 1 byte
DATA N byte
CRC 2 byte
DEAD TIME 3.5 bytes transmission time
SLAVE ADDRESS
Valid slave device address range : 0~247 decimal
Actually used slave device address range : 1~247 decimal
In case the slave device address of frame where Master requests to Slave is in the range of zero,
it means that Master device is broadcasting to all slaves.
When Master requests to Slave, transmit address field after filling it out with corresponding address.
When Slave responses to Master, transmit address field after filling it out with Slave address.
FUNCTION CODE
Valid range : 1~255
Normal : 1~127, error : 129 ~ 255(normal + 0x80)
It defines the action that Master can request to Slave.
Slave inputs the following information.
In case of normal response : Echo the function code value of request as it is.
In case of exception response : Fill out the function code value of request after setting MSB as 1.
DATA
Register address
The amount of item to handle
Byte quantity of actual data
CRC
It is used for Error checking method.
CRC-16
DEAD TIME
Frame is finished when it has a silent interval more than 3.5 charter time after receiving the final character.
code Name
01h ILLEGAL FUNCTION
02h ILLEGAL DATA ADDRESS
03h ILLEGAL DATA VALUE
04h SLAVE DEVICE FAILURE
10h No Data of Event/Fault record
11h SBO TIME OUT
12h ILLEGAL ADU LENGTH
13h LOCAL MODE
MODBUS Examples
(1) 03(0x03) Read Holding Registers
Example of a Request/response to read registers 40001 … 40002 from slave device 1
Request Response
Field Name (Hex) Field Name (Hex)
Slave Address 01 Slave Address 01
Function 03 Function 03
Starting Address Hi 00 Byte Count 04
Starting Address Lo 00 Register value Hi (40001) 42
Quantity of Inputs Hi 00 Register value Lo (40001) DC
Quantity of Inputs Lo 02 Register value Hi (40002) 00
CRC Lo - Register value Lo (40002) 00
CRC Hi - CRC Lo -
CRC Hi -
<Important Facts>
* MAX register read count : 56
(03h, 04h) : Register can be read from one to several
If reading the several registers, it can be read up to 56 ones.
Standard : DI Status Hi ~ Total inactive electric power (In case of G2200 IG)
Response
Field Name (Hex)
Slave Address 01
Function 0x80 + Function Code
Starting Address Hi Corresponding Exception Code
CRC Lo -
CRC Hi -
Ex) If Master tries to READ the 30501Register under the condition where 301501Register is not defined
at the register map, Slave device responses to it with ILLEGAL DATA ADDRESS(02).
Request Response
Field Name (Hex) Field Name (Hex)
Slave Address 01 Slave Address 01
Function 04 Function 84
Starting Address Hi 01 Exception Code 02
Starting Address Lo F4 CRC Lo -
Quantity of Inputs Hi 00 CRC Hi -
Quantity of Inputs Lo 01
CRC Lo -
CRC Hi -
DPR1000 Address Map V1.1
2006. 07. 25
REGISTER ADDRESS REGISTER NAME RANGE UNIT STEP FORMAT ATTRIBUTES
1 0 CB ON select - - - F001 W
2 1 CB ON op - - - F001 W
3 2 CB OFF select - - - F001 W
4 3 CB OFF op - - - F001 W
5 4 DO1 ON select - - - F001 W
6 5 DO1 ON op - - - F001 W
7 6 DO1 OFF select - - - F001 W
8 7 DO1 OFF op - - - F001 W
9 8 DO2 ON select - - - F001 W
10 9 DO2 ON op - - - F001 W
11 10 DO2 OFF select - - - F001 W
12 11 DO2 OFF op - - - F001 W
13 12 DO3 ON select - - - F001 W
14 13 DO3 ON op - - - F001 W
15 14 DO3 OFF select - - - F001 W
16 15 DO3 OFF op - - - F001 W
42031 2030 whether to use OCGR - - - F066 RW It shall be set when it is set as OCGR board.(06h, 10h)
42032 2031 instantaneous current of OCGR 10 ~800 In 2 F068 RW
42033 2032 instantaneous operating time of OCGR s
3(instantaneous), 5 ~ 6000 1 F007 RW
42034 2033 -
whether to use OCGR and choice of time delay curve - 1 F067 RW
42035 2034 time delay current of OCGR 5~120(inverse time) In
2~200 1 F007 RW
5~6000(definite
time delay lever of OCGR
42036 2035 time) - 1 F007 RW
42041 2040 whether to use SGR or DGR - - - F066 RW SGR shall be set when it is set as SGR board.(06h, 10h)
90 ~ 600(SGR) mA 10
SGR/DGR zero-sequence current
42042 2041 2 ~ 200(DGR) Ion 1 F007 RW DGR shall be set when it is set as DGR board.(06h, 10h)
42043 2042 SGR/DGR zero-sequence voltage 1100 ~ 8000 V 100 F007 RW
42044 2043 SGR/DGR RCA 0 ~ 9000 ˚ 100 F007 RW
42045 2044 SGR/DGR operating time 5 ~ 1000 s 1 F007 RW
42111 2110 TPR1_use - - - F066 RW shall be set as "use" after setting AI CH1 for protection element
42112 2111 TPR1_high_temp 2000 ~ 18000 ˚C 100 F007 RW
42113 2112 TPR1_low_temp 2000 ~ 18000 ˚C 100 F007 RW
42121 2120 TPR2_use - - - F066 RW shall be set as "use" after setting AI CH2 for protection element
42122 2121 TPR2_high_temp 2000 ~ 18000 ˚C 100 F007 RW
42123 2122 TPR2_low_temp 2000 ~ 18000 ˚C 100 F007 RW
0xAAAA:relay
42136 2135 Sets use of AI CH1 - - F038 RW When using THR and another to measure,
0x5555:
0xAAAA:relay
42137 2136 Sets use of AI CH2
0x5555:measureme - - F038 RW it shall be set ch1 as THR, ch2 as measurement
F004
IEEE754 32bit short float form
F005
Write 0.0(F004) when reset ( Function code: 10h)
F006
F022 form
Writes 0 when Reset. ( Function code: 10h)
Read value is basis of SEC.
F007
F038 form
Real value * 100 is displayed when Read
Real value *100 is written when writing
F009
F038 form
wirte 0 when Reset.
F012
Set [Y][M][D][H][M][S][mS] as 7word(F038 form) BCD
1st word 2nd word 3rd word 4th word 5th word 6th word 7th word
Year Month Day Hour Minute Second milisecond
F022
32bit Unsigned Long type
F029
F038 form
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
RESERVED
F038
16Bit Unsigned Integer type
F066
F038 form
0xaaaa : used
0x5555 : not used
F067
F038 form
Curve DT, SI, VI, EI, LI = 1, 2, 3, 4, 5
not used = 0
F068
F038 form
0xFFFF : Not used
When Read, Real value *100 will be displayed
When Write Real value *100 is to be written
F090
F038 form
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
- - - T/L Pick-up Sync DiagErr - R/L - DI03 DI02 DI01
T/L : Trip Logic exist(1), not existed(0)
Pick-up : pick up state(1),
Sync: state of Time sync(1)
DiagErr: error of relay itself(1)
R/L : remote(1), local(0)
DI01 : CB ON(1), CB OFF(0)
F091
F038 form
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
Reserved DO03 DO02 DO01 -
F092
F038 form
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0 a,b,c : classifies phases
Reserved CBF - 50H-c50H-b50H-a 50L-c 50L-b 50L-a 51-c 51-b 51-a
F093
F038 form
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
Reserved 46/51 46/50 37-c 37-b 37-a 67G 67N 50N 51N
F094
F038 form
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
Reserved 38/2-L 38/2-H 38/1-L 38/1-H 66 49L 49H 51LR 48
F095
If there is no record corresponded to "Record", "Exception code = 0x10" is responded.
Following frame shall be required.
01 03 0F A0 00 04 47 3F
2. Pickup 2
15 14 13 12 11 10 9 8
0x1 46/51
7 6 5 4 3 2 1 0
46/50 37-c 37-b 37-a 67G 67N 50N 51N
3. Pickup 3
15 14 13 12 11 10 9 8
0x2 38/2-L
7 6 5 4 3 2 1 0
38/2-H 38/1-L 38/1-H 66 49L 49H 51LR 48
4. Operation 1
15 14 13 12 11 10 9 8
0x3 CBF 50H-c
7 6 5 4 3 2 1 0
50H-b50H-a 50L-c 50L-b 50L-a 51-c 51-b 51-a
5. Operation 2
15 14 13 12 11 10 9 8
0x4 46/51
7 6 5 4 3 2 1 0
46/50 37-c 37-b 37-a 67G 67N 50N 51N
6. Operation 3
15 14 13 12 11 10 9 8
0x5 38/2-L
7 6 5 4 3 2 1 0
38/2-H 38/1-L 38/1-H 66 49L 49H 51LR 48
7. Fault 1
15 14 13 12 11 10 9 8
0x6
7 6 5 4 3 2 1 0
NSOCR UCR-c UCR-b UCR-a GR OCR-c OCR-b OCR-a
8. Fault 2
15 14 13 12 11 10 9 8
0x7
7 6 5 4 3 2 1 0
38/2 38/1 - THR LOCK STALL
16. Control2
15 14 13 12 11 10 9 8 CB Run T clr: CB Runtime clear
38/1 and 38/2 are divided by Al input as ''Bearing temperature protection method" in Relay setting changed event.
DGR/SGR processes it togheter without distinguishing SGR and DGR each, but distinguishes with OCGR which is non-directional
in Relay setting changed event of Class C.
bit 11(R/L) means main subject of the control or correction/change in Change Setting and Control event of Class C,D,E,F. ※ R = 1, L = 0.
bit 9(R-->L) and bit 10(L-->R) are the contents of remote/local switch event in System setting changed event of Class D. In here bit 9 means permission
for control and correction/change has been changed from remote state to local, and bit 10 means the permission has been changed from local state to remote.
MOT His CLR of bit 1 means cleared motor operating history(FLC, THERMAL CAPACITY, START CURRENT, START TIME etc.) in Control event of Class E
RUN T CLR of bit 2 means cleared operating time of relay in Control event of Class E
CNT CLR of bit 3 means that count which is the operation of DO was cleared in Eontrol event of Class E
E/R CLR of bit 4 and bit 5 mean Event Record Clear and Fault Record Clear each in Control event of Class E
CC1 ~ CC4 of bit2~bit5 means Control Contact in Control event of Class F
FAULT RST of bit 6 means that FAULT was reset in Control event of Class F
PWR On of bit 7 means that power gets ON from OFF in Control event of Class F
F096
Response with "Exception code = 0x10" in case record corresponded with "Record" does not exist.
Following frame shall be required.
01 03 13 88 00 16 40 AA