Toshiba TOSDIC-CIE DS User manual

PLC Connection Function
MODBUS/TCP Connection
Instruction Manual
6F8C1574
Toshiba Integrated Control System

First Edition 28th April, 2015
The contents of this manual may be revised without notice.
Copyright 2015 by Toshiba Corporation. All rights reserved.
No part of this manual may be reproduced in any form without permission.

Safety Precautions
i
Safety Precautions
The instruction manual and the labels affixed to the products or equipment give important
information for using products safely. It helps prevent damage to properties and hazard to people
who use them or work with them.
Make yourself familiar with the signal words and signs in this page, then read the safety
precautions that follow and always follow the instructions to avoid hazards.
Explanation of signal words
Signal word is a word that designates a degree or level of hazard seriousness.
The words WARNING and CAUTION are used for the products.
WARNING Indicates a potentially hazardous situation which could
result in death or serious injury, if you do not follow the
instructions.
CAUTION Indicates a potentially hazardous situation which may result
in minor or moderate injury and/or property damage, if you
do not follow the instructions.
Hazard alert shapes and symbols
Following shapes and symbols are used in the safety precaution labels affixed to the products and
in other places including operation manuals for giving safety instructions.
Filled circle means "Mandatory Action" or "Do as indicated."
Required action is shown in the circle or described near the circle.
Circle band with a diagonal slash means "Prohibition" or " You must not do."
Prohibited action is shown in the circle or described near the circle.
Triangle means "Hazard Alerting" or "Be alert against hazard."
The kind of hazard is shown in the triangle or described near the triangle.
Exclamation point with a triangle is a safety alert symbol which indicates a
potential hazard. It is used with a Signal Word.
Square or rectangle means "Information Messages" or "Notice."
Important precautions for system operation
System fault or data loss may occur in the event of power outage whether it is external or
internal of the system. Take precautions in advance to protect the system in order to prevent such
event to take place. Also back up your data regularly to minimize the possible damage by loss of
data as a result of such event.

Safety Precautions
ii
Caution
Power shutdown prohibited
while system is operating
•Do not shut off power, or insert or extract connectors while
the system is operating or data is being written.
This can cause an erroneous system operation or damage to data.
Resetting prohibited while
system is operating
•Do not press the reset switch while the system is operating
or data is being written.
This can cause an erroneous system operation or damage to data.
The reset switch is used to initialize the system.

Safety Precautions
iii
Program and data protection
Observe the following to prevent damage and loss of program or data:
•Backup the content of hard disk regularly.
•Do not turn off power switch while OS is booted.
•Do not press the reset switch while the system is operating or data is being written.
•Do not apply shock to hard disk drive.
•Use the key switch on the main unit front panel to stop the operation.
•For a system with a report function, you should avoid start/stop operation on the hour.
•Use the key switch on the main unit front panel to stop the operation.
•In a system where a report function is used, start/stop operation should be executed avoiding
every hour on the hour
•To switch between stop/redundant operations when the system is a redundant system, it should
be done after equalization is performed.
Limitation of use
•This product is not developed and manufactured for use in a system where equipment such as
the one directly involved in human life (Note 1) is included. Please do not use this system for
those applications.
•To use this product in a system where equipment such as the one human safety is involved and
affecting the maintenance of public function(Note 2), special consideration (Note 3) regarding the
system’s operation, maintenance and control is required. Contact Toshiba’s sales department.
Note 1 Example of equipment directly involved in human life is as follows:
Medical equipment such as a medical control system for sustaining life or equipment
used for medical operations
Note 2 System including equipment where human safety is involved and affecting the
maintenance of public function is a system such as shown below:
Main control system of an atomic power generating plant, safety protection system for
nuclear facilities and other critical safety systems
Operation control system and air traffic control system of mass transformational
system
Note 3 Special consideration is to build a safety system (foolproof design, failsafe design,
redundant system design etc.) by discussing thoroughly with Toshiba’s engineers.

Safety Precautions
iv
Regarding computer virus
This software does not have a function to check whether the computer is infected or not with a
computer virus.
Safety design with application programs
The PLCS standard software offers the following functions for use in applications to build a safe
system:
Signboard label and operation lock to tag faceplates
Running operation level setting
Operation grouping with signal monitoring areas
Operation level grouping with tag mode
Furthermore, depending on the system’s required safety design level, system design to secure
safety in the system’s operation, maintenance and control other than the functions described above
is necessary.
Disclaimer
Toshiba is not liable for any damage caused by fire, earthquake, a third party act, other accident,
user’s intentional or mistaken error, misuse or other use under abnormal condition.
Toshiba is not liable for any incidental damage from use or non use of this product (loss of
business profit, discontinuation of business, change or loss of the memorized content and so
on).
Toshiba is not liable for any damage occurred while the user is not observing the contents
described in the Instruction Manual.
Toshiba is not liable for any damage caused by erroneous operations by combining with other
connecting devices.
The operation of this software cannot be guaranteed on every computer. The operation check of
this software must be performed by the customer.
Toshiba is not liable for damage caused by a failure of personal computer to perform this
software.

Introduction
v
Introduction
The PLC connection function realizes a monitor and control system in which the industry
standard PLC is added to the TOSDIC-CIE DS system.
This manual describes mainly the PLC connection function software. Before using the system,
users should be advised to understand the PLC connection function by reading this manual.
And please read "Safety Precautions" before anything else to make sure that the system is
used safely and correctly.
Related Manuals
nv series type1 light Controller Unit User’s Manual -Basic Hardware- 6F8C1497
SMART PLC Connection Function Operation Manul 6F8C1039
PLC Connection Function Operation Manual for Windows7 6F8C1453
nv series / V series Programming Instructions (LD/FBD/SFC/ST) 6F8C1226
Notational Convention
Other than the safety precautions, this manual uses the following symbols to indicate items you
need to be careful about when you use this product.
INSTRUCTION:
Describes items you need to perform to use this product properly.
REFERENCE:
Indicates s
ome information that is helpful for you to understand the text.
REFERENCE DOCUMENTS:
Reports you should read to understand the text.
---> Indicates references in this manual or other manuals.

Introduction
vi

Contents
vii
Contents
Safety Precautions·············································································i
Introduction ······················································································v
Contents··························································································vii
1. Outline································································1
1.1. Overview ·················································································1
1.2. Basic specification·····································································3
1.3. Tag Type·················································································3
2. Write data structure···············································5
2.1. Writing data structure ·································································5
2.1.1 Digital Tag···········································································5
2.1.2 Momentary Set·····································································6
2.1.3 Analog Tag··········································································7
3. Registering MODBUS/TCP Server····························9
3.1. Registration by PLCS Engineering tool ··········································9
3.1.1 Overview ············································································9
3.1.2 Flow of registration ·······························································11
3.1.3 Registering PLC configuration·················································12
3.1.4 Registering MODBUS/TCP Server configuration·························14
3.1.5 Registering Digital Register Address·········································18
3.1.6 Registering Analog Register Address ·······································20
3.1.7 Registering System Alarm Register Address······························22
3.1.8 Registering PLCS Tags ·························································25

Contents
viii
3.1.9 Diagnose data ·····································································28
3.1.10 Download data···································································28
3.2. Confirming the contents of errors··················································29
3.2.1 Confirming the application log in the Event Viewer. ·····················29
3.2.2 Confirming the transmission time·············································31
4. Sample program for MODBUS/TCP Server application 33
4.1. Control processing ····································································33
4.1. Ladder Program········································································35

1.Outline
1
1.Outline
1.1.Overview
MODBUS/TCP server communicates with OIS-DS/SMART or PLCS (PLC connection
function) by using MODBUS/TCP protocol.
MODBUS/TCP data are Coils, Input Discrete, Holding Registers and Input Registers.
The figure 1.1 shows the overview when MODBUS/TCP server is connected.
Figure1.1. Overview when MODBUS/TCP server is connected
Data Collection
Write from PLC
Connection
：
proccess or data flow
(8)
(5)
(1)
MODBUS/TCP Server
MODBUS
Data
Coils
Input Discrete
Holding Registers
Input Registers
PLC Connection
(MODBUS/TCP Client)
Input
Registers(PLCS)
990W
Tag Pattern
Station Status
Remote Operation
OIS
(6)
(9)
(*1)
(10)
Digital Registers
Analog Registers
System Alarm
Registers
(7)
(2)
(3)
(4)
(*1) When this is the request to write SV or RFO data,
an application in MODBUS/TCP server will carry out this request.

1.Outline
2
Data collection
(1) PLC connection function reads Coils data by sending the request of reading them
to a MODBUS/TCP server
(2) PLC connection function reads Input Discrete data by sending the request to read
them to a MODBUS/TCP server
(3) PLC connection function reads Holding Registers data by sending the request to
read them to a MODBUS/TCP server
(4) PLC connection function reads Input Registers data by sending the request to
read them to a MODBUS/TCP server
(5)The data that is read from a MODBSU/TCP server is stored in Input Registers
(PLCS).
(6)The values of the Input Registers (PLCS) are converted according to the data type
of tags and the byte order specified in ‘MODBUS/TCP Server Configuration’ of
PLCS engineering tool.
(7)When the Input Registers (PLCS) are set for the System Alarm Registers, they are
converted into the system tag data.
Data writing
(8)OIS function sends the request of writing data to the PLC connection function.
(9)PLC connection function converts the tag data of the request into the data for
Holding Registers according to the data type of the tag and the byte order
specified in ‘MODBUS/TCP Server Configuration’ of PLCS engineering tool.
Then PLC connection function sends it to a MODBUS/TCP Server.
(10)In MODBUS/TCP Server, an application should analyze the request sent from
PLC connection function and carry out it.
When the request is to write a SV value, an application should put it into FBSV also
after writing it into the specified register.
When the request is to write a RFO value, an application should perform ON/OFF
of the digital signal corresponding to the change bits and set the result into FIFO.
(It is necessary to make the rules for designing the layout of tags.
For example,
when the RFO value is written in the address ‘1000’ of Holding Registers, you will
write FIFO value into address ‘0’ – ‘16’ of Coils.)

1.Outline
3
1.2.Basic specification
The basic specification of MODBUS/TCP Server connection is described in Table 1.1
Table 1.1 MODBUS/TCP Server connection
Item
Specifications
Supported Model
Devices for MODBUS/TCP
Communication System
MODBUS/TCP protocol
Default port : 502
This port No. can be set by the parameter in MODBUS/TCP Server
Configuration of PLCS engineering tool.
Collection (input) Data
Max.990 words
(use Coils, Input Discrete, Holding Registers and/or Input Registers)
Top of Input Registers : DW00000 (fixed)
It sets up by PLC configuration registration
, MODBUS/TCP Server
configuration, Digital Register Address,
Analog Register Address and
System Alarm Register Address of PLCS engineering tool.
Write(output) Data
Use any area in Holding Registers
It sets up by tag registration of PLCS engineering tool.
Set Data
Not used.
Collection(input) Parameter
Not used.
Byte Order
Select the byte order for the 4 bytes-data on the MODBUS transmission
text in ‘MODBUS/TCP Server Config.’ S
creen of PLCS Engineering
Tool.
Little-Endian with Byte Swapped
Big-Endian
Big-Endian with Byte Swapped
Little-Endian
1.3.Tag Type
The tag types that MODBUS/TCP Server can use are described in Table 1.2
Table 1.2 PLCS Tag and MODBUS/TCP Data Type
Tag Type
Atom
MODBUS Data Type
PB2p/PB4p/PB8p FI/FO Coils/Input Discrete/Holding Registers/Input Registers
RFO Holding Registers
INDp/PFIp/SETp PV Input Reregisters / Holding Registers
SV Holding Registers
FBSV Input Reregisters / Holding Registers
DB1p/DB8p W/D/R Holding Registers

1.Outline
4

1.Outline
5
2.Write data structure
2.1.Writing data structure
2.1.1 Digital Tag
FI/FO for PB2p/PB4p/PB8p is 1 word-data (16 bits).
The high-order eight bits are FO1 to FO8 and the low-order eight bits are FI1 to FI8.
And RFO for PB2p/PB4p/PB8p is 1 word-data (16 bits).
When you push a push button, 1 word-data that includes the changed items and
operation status is put into the Holding Registers which is specified in the RFO register
address.
In FO/FI/RFO, the data bits indicate the status.
Figure 2.1 Data Bits of FO/FI/RFO
The application in the MODBUS/TCP Server performs the operations (latch,
momentary, etc.) for the Push Button Instruction (RFO).
FO/FI
Operation Status
(Lower Order Byte)
Items to be Changed
(Higher Order Byte)
RFO
BIT1
BIT2
BIT3
BIT4
BIT5
BIT6
BIT7
BIT8
PB2
p
: BIT1
∼
BIT2=FI1
∼
FI2, FO1
∼
FO2, RFO1
∼
RFO2
PB4
p
: BIT1
∼
BIT4=FI1
∼
FI4, FO1
∼
FO4, RFO1
∼
RFO4
PB8
p
: BIT1
∼
BIT8=FI1
∼
FI8, FO1
∼
FO8, RFO1
∼
RFO8
FI(Lower Order Byte)
FO(Higher Order Byte)

2.Writing data structure
6
2.1.2 Momentary Set
The action when the button is released/pushed changes according to ‘Not Used’/’Used’
for the ‘Momentary Set’ in PB2p/PB4p/PB8p.
The following table shows the status of the bits for changed items and the bits of
operation status.
Table 2.1 Momentary Set
Momentary Set
Operation
Bit of changed items
Bit of operation status
Not Used Push a button - -
Not Used Release a button ON(1) ON(1)
Used Push a button ON(1) ON(1)
Used Release a button ON(1) OFF(0)
When the ‘Momentary Set’ is ‘Not Used’, an application in MODBUS/TCP Server will
process for FRO and set OFF(0) in RFO and FO after it completes.
When the ‘Momentary Set’ is ‘Used’, an application in MODBUS/TCP Server processes
network disconnection etc.
During momentary, a timer should be used to prevent the buttons from staying in a
pushed state.

2.Writing data structure
7
2.1.3 Analog Tag
SV/FBSV for PB2p/PB4p/PB8p is 1 word-data or 2 words-data.
This data size is according to the registration of SV register data type.
The relations between SV values and Feedback SV values are as follows.
Figure 2.2 Remote operation in SETp tag
A SV value is written by the remote operation.
PLC connection function writes the SV value into MODBUS/TCP Server.
MODBUS/TCP Server detects that the SV value was written, and updates the FBSV value.
PLC connection function collects the FBSV value from PLC and puts it into a tag.
In the Point screen, it reads the SV value (written in ) and the FBSV value, and displays
them.
OIS function
PLC Connection function
MODBUS/TCP Server

Tag Pattern Display (SV Value,
FBSV Value)

Remote Operation
(SV Value)

FBSV Value

SV Value


2.Writing data structure
8

3. Registering MODBUS/TCP Server
9
3.Registering MODBUS/TCP Server
3.1. Registration by PLCS Engineering tool
This section describes how to register a MODBUS/TCP Server and assign the data into
PLCS tags or the system tags by PLCS engineering tool
3.1.1 Overview
It needs PLC configuration, MODBUS/TCP Server configuration, Digital Register
Address, Analog Register Address and System Alarm Register Address to assign the
data of MODBUS/TCP Server into the PLCS tags. The relationship between these
registrations and the tag assignment is indicated below.
PLC connection function collects the MODBUS data from MODBUS/TCP Server in the
fixed period, and stores them in the internal memory. The collected MODBUS data are
assigned into Input Registers (PLCS) (DW00000 to DW00989), and these Input
Registers (PLCS) are set in PLCS tags.
The System alarm Registers are only set in System Alarm Register Address.
They are assigned into system tags automatically.
Figure3.1 PLCS engineering tool and PLCS tags assignment
ﾃﾞ ｼﾞ ﾀﾙﾚｼﾞ ｽﾀ
ｱﾅﾛｸﾞﾚｼﾞｽﾀ
ｼｽﾃﾑｱﾗ ﾑﾚｼﾞ ｽﾀ
Input Registers
990W
Digital Registers
Analog Registers
System Alarm
Registers
MODBUS
Data
Coils
Input Discrete
Holding Registers
Input Registers
PLC Connection
(MODBUS/TCP Client)
）
Tag Pattern
Station Status
Display
OIS
MODBUS
Data
Coils
Input Discrete
Holding Registers
Input Registers
Data Collection
(1)PLC Configuration
(2)MODBUS/TCP Server Configuration
MODBUS/TCP Server
Assign the size for Input Registers
(1)
(2)
(3)
(4)
(5)
(2)
(6)
(2)
(2)
(2)
(5)
(3)Digital Register Address
(4)Analog Register Address
(5)System Alarm Register Address
(6)PLCS tag

3. Registering MODBUS/TCP Server
10
Table 3.1 Momentary Set
Item
Description
(1)PLC Configuration Assign the size for Input Registers (PLCS)
(2)MODBUS/TCP Server Configuration Set the range of MODBUS data to be collected.
Set the byte order for 4 bytes-data.
(3)Digital Register Address Assign the collected MODBUS data into digital register of
Input Registers (PLCS).
(4)Analog Register Address Assign the collected MODBUS data into analog register of
Input Registers (PLCS).
(5)System Alarm Register Address
Assign the collected MODBUS data into system alarm
register of Input Registers (PLCS). When these are
assigned here, PLC connection function assigns them in the
system tags automatically.
(6)PLCS tag Assign the values of Input Registers (PLCS) into PLCS
tags.