Page 1 Automation & Controls Programmable Control Products PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q April 2017...
Page 2 Changes, modifications, and/or improvements to equipment and specifications are made periodically and these changes may or may not be reflected herein. It is understood that GE may make changes, modifications, or improvements to the equipment referenced herein or to the document itself at any time. This document is intended for trained personnel familiar with the GE products referenced herein.
Page 3: Contact Information
Online technical support and GlobalCare www.geautomation.com/support Additional information www.geautomation.com Solution Provider solutionprovider.ip@ge.com Technical Support If you have technical problems that cannot be resolved with the information in this manual, please contact us by telephone , or on the web at www.geautomation.com/support...
Page 4: Table Of Contents
Other PACSystems Manuals........................2 Ethernet Interfaces for PACSystems Controllers ................... 3 Rack-based and RX7i Embedded Interfaces - Features ................3 RX3i Embedded Ethernet Interface - Features ....................4 Ethernet Interface Specifications .......................... 5 Ethernet Interface Ports ............................. 8 Station Manager ................................8 Firmware Upgrades ..............................
Page 5 Initial IP Address Assignment ..........................48 Configuring Ethernet Interface Parameters ....................51 Configuring Ethernet Global Data ........................54 Chapter 5 Ethernet Global Data ........................69 Ethernet Global Data Operation ......................70 EGD Producer ................................70 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 6 Contents EGD Consumers ................................70 EGD Exchanges ............................71 Content of an Ethernet Global Data Exchange................... 71 Data Ranges (Variables) in an Ethernet Global Data Exchange ............71 Valid Memory Types for Ethernet Global Data .................... 72 Planning Exchanges ..............................72 Using Ethernet Global Data in a Redundancy System ................
Page 7 Modbus/TCP Server ..........................135 Modbus/TCP Server Connections ........................135 Modbus Conformance Classes ..........................135 Server Protocol Services............................135 Station Manager Support .............................135 Reference Mapping ..........................135 Modbus Reference Tables ............................136 Address Configuration ............................137 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 8 Contents Modbus Function Codes.......................... 138 Chapter 9 Modbus/TCP Client ........................139 The Communications Request ....................... 139 Structure of the Communications Request ....................140 COMMREQ Function Block ...........................140 COMMREQ Command Block..........................140 Modbus/TCP Channel Commands ........................140 Status Data ..................................141 Operation of the Communications Request ....................142 COMMREQ Function Block and Command Block ................
Page 9 Minor Error Codes for Major Error Codes 05H (at Remote Server PLC) and 85H (at Client PLC) ......................................222 Minor Error Codes for Major Error Code 11H (at Remote Server PLC) ...........224 viii PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 10 Subnet Addressing and Subnet Masks ......................246 Appendix A Configuring Advanced User Parameters ....................251 Format of the Advanced User Parameters File .................. 252 Advanced User Parameter Definitions ....................254 AUPs Supported by RX3i CPE305/CPE310 Embedded Ethernet Interface ........261 GFK-2224Q January 2017...
Page 11: Table Of Figures
Figure 12: Direct Connection to the Embedded Ethernet Ports......................29 Figure 13: Expand CPU Slot to Display Ethernet Node ..........................34 Figure 14: Expand RX3i CPU Node to Configure Embedded Ethernet Interface ................36 Figure 15: Ethernet Settings Tab in Proficy Machine Edition ........................36 Figure 16: CPE330/CPE400 settings tab ................................
Page 12 Figure 79: BuildInfo Subscription ..................................193 Figure 80: OPC UA Address Space - Application Information ......................194 Figure 81: OPC UA Address Space – GE Device Information ........................195 Figure 82: PACSystems Factory Default Web Page ...........................200 Figure 83: Selecting Display Format .................................200 Figure 84: PLC Fault Table Display ..................................202...
Page 13 Contents Figure 90: Decoding the COMMREQ Status Word ............................220 Figure 91: EGD Management Tool Screenshot ............................230 Figure 92: EGD Monitoring Tool Monitoring EGD Network ........................231 Figure 93: EGD Management Tool Displaying EGD Exchange Information ..................232 Figure 94: EGD Management Tool Displaying EGD Statistics ......................233 Figure 95: EGD Management Tool Displaying List of Variables for an Exchange ..............234 Figure 96: IP Address Format for Network Classes A, B, C ........................241 Figure 97: CPE330 Overlapping Local IP Subnet Example ........................243...
Page 14: Chapter 1 Introduction
Ethernet Interfaces in both conventional and redundancy systems. The rest of this manual provides instructions for installing and applying the PACSystems Ethernet Interfaces: Chapter 2, Installation and Startup: RX3i Embedded Interfaces describes user features and basic installation procedures.
Page 15: Revisions In This Manual
Important Product Information (IPI) document provided with the product. This revision of TCP/IP Ethernet Communications for PACSystems RX3i and RX7i includes the following changes: Information about the following new features for the CPE305/CPE310 embedded Ethernet interface:...
Page 16: Ethernet Interfaces For Pacsystems Controllers
▪ Extended controller connectivity via IEEE 802.3 CSMA/CD 10Mbps and 100Mbps Ethernet LAN port connectors. Effective with RX3i CPE305/CPE310 firmware version 8.30, EGD Class 1 is supported on the embedded Ethernet Interface. Earlier versions do not support EGD. GFK-2224Q January 2017...
Page 17: Rx3I Embedded Ethernet Interface - Features
CPE330 supports SRTP Client and Modbus TCP Client beginning with Release 8.50. The CPE330 supports EGD Class 1 beginning with Release 8.60. Refer to the PACSystems RX7i & RX3i CPU Reference Manual, GFK-2222, specifically to the section, RX3i CPU Features and Specifications, for a detailed list of features and specifications.
Page 18: Ethernet Interface Specifications
Chapter 1. Introduction Ethernet Interface Specifications All RX7i Ethernet Interface Modules and RX3i Rack-Based Ethernet Interface Modules Connectors - Two 10BaseT / 100BaseTX Ports: 8-pin female shielded RJ-45, autosensing - Station Manager (RS-232) Port: 9-pin female D-connector IEEE 802.2 Logical Link Control Class I IEEE 802.3 CSMA/CD Medium Access Control 10/100 Mbps...
Page 19 Chapter 1. Introduction RX3i Embedded Interface PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 20 Chapter 1. Introduction Connector CPE305 & CPE310: One RJ45 CPE330: Three RJ45 CPE400: CPE400: Six RJ45, five on front for three LANs (LAN3 future), one EFA underneath. (There is also an unused serial RJ45 underneath.) IEEE 802.2 Logical Link Control Class I IEEE 802.3 CSMA/CD Medium Access Control 10/100 Mbps CPE305 &...
Page 21: Ethernet Interface Ports
The PACSystems Ethernet interface use auto-sensing 10Base T / 100Base TX RJ-45 shielded twisted pair Ethernet ports for connection to either a 10BaseT or 100BaseTX IEEE 802.3 network. The RX3i embedded Ethernet interface provides one such port; all other models provide two.
Page 22: Built-In Web Server
Chapter 1. Introduction Built-In Web Server The embedded RX7i CPU Ethernet Interface provides Web Server capability. Each IC698 Ethernet interface supports Web access via FTP and HTTP to allow Web pages to be stored and maintained on the Ethernet interface and served up via the web to standard Web browsers. A standard API allows you to generate customized web pages that display desired PLC data in a desired format.
Page 23: Srtp Inactivity Timeout
5 seconds. The actual inactivity detection time will never be less than the specified value. Note: The SRTP inactivity timeout applies only to programmer connections over SRTP. It does not affect HMI or SRTP channels. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 24: Ethernet Redundancy Operation
Chapter 1. Introduction Ethernet Redundancy Operation Note: Ethernet Redundancy Operation is not supported on the RX3i CPE305/CPE310 embedded Ethernet Interface. The Redundant IP feature of the Ethernet Interface allows a single IP address called the Redundant IP address to be assigned to two Ethernet modules. The two modules are in two different PLCs that are configured as a redundant system.
Page 25: Non-Hsb Redundancy
Chapter 1. Introduction Non-HSB Redundancy Non-HSB redundancy systems use RX7i or RX3i CPUs that do not have specialized firmware for controlling redundancy operations. (These CPUs have a “CPE” or “CPU” designation.) In these systems, the application logic coordinates between CPUs that act as redundant partners, and determines which CPU is the active unit and which are backup units.
Page 26: Srtp Server Operation In A Redundancy System
Chapter 1. Introduction Role Switching in Non-HSB Redundancy Systems When redundant IP is enabled for an Ethernet module in a non-HSB CPU system, it is the responsibility of application logic to set the redundancy mode of the Ethernet module. The Set Application Redundancy Mode Service Request (SVC_REQ 55) instruction is used to inform the Ethernet module of the current redundancy role of the host CPU.
Page 27: Srtp Client Operation In A Redundancy System
Although not recommend, EGD commands may be issued to the direct IP address. Both the active and backup units will respond to EGD commands received at the direct IP address. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 28: Web Server Operation In A Redundancy System
Chapter 1. Introduction Web Server Operation in a Redundancy System Only the active unit processes Web server requests at the Redundant IP address and responds to Web page requests. The backup unit does not respond to the Redundant IP address. When the active Ethernet interface changes to backup, it takes down all Web server connections and their underlying TCP connections.
Page 29: Chapter 2 Installation And Start-Up: Rx3I Embedded Interface
EGD on both LAN1 and LAN2. All CPE400 releases support this feature. Note: Effective with RX3i CPE310/CPE305 Firmware Release 8.30, the CPU itself also supports Class 1. Prior to that firmware release, EGD was only available in the RX3i via the RX3i Ethernet Interface module (ETM001). Note: For features, installation and startup of the RX3i rack-based Ethernet module (ETM001), see Chapter 3.
Page 30: Module Installation
Corresponding network data speed is 10 Mbps (lower) Module Installation For general information about CPU module and system installation refer to the PACSystems RX3i System Manual, GFK-2314 Chapters 2 & 3. Ethernet Port Connector The RX3i CPE305 and CPE310 CPUs provide a 10BaseT/100BaseTX Ethernet network port connector.
Page 31: Connection To A 10Base-T / 100Base Tx Network
To other network devices Figure 5: Ethernet Cable Routing Pin 1 is at the bottom right of the Station Manager port connector as viewed from the front of the module. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 32: Pinging Tcp/Ip Ethernet Interfaces On The Network
Chapter 2. Installation and Start-up: RX3i Embedded Interface Pinging TCP/IP Ethernet Interfaces on the Network PING (Packet InterNet Grouper) is the name of a program used on TCP/IP networks to test reachability of destinations by sending them an ICMP echo request message and waiting for a reply. Most nodes on TCP/IP networks, including the PACSystems Ethernet Interface, implement a PING command.
Page 33: Chapter 3 Installation And Start-Up: Rack-Based And Rx7I Embedded Interface
Verifying Proper Power-Up of the Ethernet Interface After Configuration ▪ Pinging TCP/IP Ethernet Interfaces on the Network Features of the embedded RX7i CPU Ethernet Interface and the rack-based RX3i/RX7i Ethernet interfaces are the same unless noted otherwise. Note: For features, installation and startup of the RX3i embedded Ethernet interface, see Chapter 2.
Page 34: Ethernet Interface Controls And Indicators
Chapter 3. Installation and Start-up: Rack-based and RX7i Embedded Interface Ethernet Interface Controls and Indicators Features of the RX7i embedded CPU Ethernet Interface and the RX7i and RX3i rack-based StaMgr Ethernet Interface modules are the same unless noted otherwise. The Ethernet Interface provides: Seven light emitting diode (LED) indicators ▪...
Page 35 LAN LED Operation The LAN LED (LAN OK on the RX3i Ethernet module) indicates access to the Ethernet network. During normal operation and while waiting for an IP address, the LAN LED blinks when data is being sent or received over the network directed to or from the Ethernet interface.
Page 36: Ethernet Restart Pushbutton
Chapter 3. Installation and Start-up: Rack-based and RX7i Embedded Interface or unrecoverable runtime failure occurs, the EOK LED blinks a two-digit error code identifying the failure. For a list of blink codes and their meanings, see Chapter 12. Ethernet Port LEDs Operation (100Mb and Link/Activity) Each of the two Ethernet ports (Ports 1A and 1B) has two LED indicators, 100 and LINK.
Page 37: Module Installation
The label is visible when the battery is removed from its compartment. (The battery does not need to be disconnected to temporarily remove it from the compartment.) For compatible batteries and battery installation procedures for specific CPUs, refer to the PACSystems RX3i and RX7i Controllers Battery Manual, GFK-2741.
Page 38: Installing An Rx3I Ethernet Interface Module
Chapter 3. Installation and Start-up: Rack-based and RX7i Embedded Interface Installing an RX3i Ethernet Interface Module Record the 12-digit hexadecimal MAC Address from the printed label located on the front of the Ethernet Module. PLC rack power may be off or on (“hot insertion”). For hot insertion, be sure that all cables are disconnected from the Ethernet module Slide the module into the slot for which it was configured in the system.
Page 39: Ethernet Port Connectors
Power loss or reset at an Ethernet interface causes loss of communication to any devices downstream from that Ethernet interface in the daisy chain. Restarting the Ethernet interface (via the Ethernet Restart pushbutton, for example) disrupts daisy chain communication. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 40: Connection To A 10Base-T / 100Base Tx Network
Chapter 3. Installation and Start-up: Rack-based and RX7i Embedded Interface Each switch port auto-negotiates (by default) to the correct link speed and duplex mode for the device connected to the other end of the link. Each port operates independently, so devices at two different speeds and/or duplex modes may be attached to the two ports.
Page 41: Figure 11: Connection Using Hub/Switch/Repeater
EGD exchanges may generate PLC Fault Table entries indicating the loss of a consumer when the PLC transitions from STOP to RUN. EGD data will be successfully transferred after an initial delay. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 42: Station Manager Port
Figure 12: Direct Connection to the Embedded Ethernet Ports Station Manager Port The RX7i and rack-based RX3i Ethernet interfaces provide a dedicated RS-232 serial port for local Station Manager use. This nine-pin D connector accepts a standard straight-through nine-pin RS-232 serial cable to connect to a standard AT-style RS-232 port.
Page 43: Verifying Proper Power-Up Of The Ethernet Interface After Configuration
IP address of the remote host as a parameter to the ping command. For example, at the command prompt type: ping 10.0.0.1 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 44: Determining If An Ip Address Is Already Being Used
Chapter 3. Installation and Start-up: Rack-based and RX7i Embedded Interface Determining if an IP Address is Already Being Used Note: This method does not guarantee that an IP address is not duplicated. It will not detect a device that is configured with the same IP address if it is temporarily off the network. It is very important not to duplicate IP addresses.
Page 46: Chapter 4 Configuration
The PACSystems PLC does not support auto-configuration. Generating / Storing / Loading the Configuration The RX3i embedded Ethernet interface is configured as a sub-module of the CPE CPU module. The RX3i embedded Ethernet Interface uses Ethernet Configuration and optional Advanced User Parameter (AUP) Configuration.
Page 47: Initial Ip Address Assignment
Through the embedded Ethernet port, using the factory-loaded default IP address (192.168.0.100). To  set the IP address that PME will use to connect to the RX3i, open the target properties, set Physical Port to ETHERNET, and then enter the factory default IP address value.
Page 48: Configuring The Ethernet Interface Parameters
Chapter 4. Configuration Configuring the Ethernet Interface Parameters First, establish communications between the computer hosting PME and the CPU. Consider the following methods: Default IP Addresses for Initial Ethernet communication with the CPU may be established using CPE305/CPE310/CPE330/CPE400 the default IP addresses programmed at the factory: Embedded Ethernet Note that the IP subnet 192.168.180.x is reserved on the CPE400.
Page 49: Figure 14: Expand Rx3I Cpu Node To Configure Embedded Ethernet Interface
Ethernet Interface may be unable to communicate on the network and/or network operation may be corrupted. It is especially important that each node on the network is assigned a unique IP address. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 50 Chapter 4. Configuration If you have no network administrator and are using a simple isolated network with no gateways, you can use the following range of values for the assignment of local IP addresses: 10.0.0.1 First Ethernet interface 10.0.0.2 Second Ethernet interface 10.0.0.3 Third Ethernet interface 10.0.0.255 Programmer TCP or host...
Page 51 Note: In earlier CPU models these EGD configuration parameters were configured via AUP files. An AUP file is not supported, nor is it needed, by the either CPE330 or CPE400. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 52: Figure 16: Cpe330/Cpe400 Settings Tab
Chapter 4. Configuration Startup Delay Time for Produced Exchanges (ms): Corresponds to the gp_phase AUP parameter. Stale Consumed Exchanges: Corresponds to the gnostale AUP parameter. TTL for Unicast Messages: Corresponds to the gucast_ttl AUP parameter. CPE330/CPE400 Settings Tab Figure 16: CPE330/CPE400 settings tab CPE330 LAN1: TTL for Multicast Messages: Corresponds to the gmcast_ttl AUP parameter.
Page 53: Figure 17: Cpe330 Advanced Ethernet Configuration Lan 1 & 2
Chapter 4. Configuration CPE300 LAN 1 and LAN2 Settings Figure 17: CPE330 Advanced Ethernet Configuration LAN 1 & 2 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 54: Figure 18: Cpe400 Advanced Ethernet Configuration Lan1 & Lan 2
Chapter 4. Configuration Figure 18: CPE400 Advanced Ethernet Configuration LAN1 & LAN 2 GFK-2224Q January 2017...
Page 55: Figure 19: Terminals Tab Settings In Proficy Machine Edition
Instead, you can directly associate variable names with the status bits. For more information, refer to “I/O Variables” in the PACSystems CPU Reference Manual, GFK-2222. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 56: Figure 19: Adding Ethernet Global Data (Egd) To The Configuration
Chapter 4. Configuration Configuring Embedded Ethernet for Ethernet Global Data (EGD) This section describes how to configure the parameters of an RX3i embedded PACSystems Ethernet Interface. See also Configuring Ethernet Global Data (page 54) for a fuller discussion. In the event the CPU will be used to produce or consume Ethernet Global Data (EGD), right click on the device icon and, using the “Add Component”...
Page 57: Figure 21: Defining Egd Consumed Data Exchange
Network ID that allows the user to select LAN1 or LAN2. (Refer to the following figures). The Network ID parameter is only visible on produced Multicast and Broadcast exchanges. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 58: Figure 22: Configuring Multicast & Broadcast Egd On Lan 1
Chapter 4. Configuration Figure 23: Configuring Multicast & Broadcast EGD on LAN 1 LAN 1 will display a Network ID of 0. GFK-2224Q January 2017...
Page 59: Figure 23: Configuring Multicast & Broadcast Egd On Lan 2
Chapter 4. Configuration Figure 24: Configuring Multicast & Broadcast EGD on LAN 2 LAN 2 will display a Network ID of 1. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 60: Rack-Based And Rx7I Embedded Interfaces
Chapter 4. Configuration Rack-based and RX7i Embedded Interfaces The configuration process for the rack-based and RX7i embedded Ethernet interfaces includes: ▪ Assigning a temporary IP address for initial network operation, such as connecting the programmer to download the hardware configuration. ▪...
Page 61: Initial Ip Address Assignment
The target must be located on the same sub-network (subnet) as the computer running the Set Temporary IP Address utility. The sub-network is specified by the computer’s subnet mask and the IP addresses of the computer and the PACSystems Ethernet Interface. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 62: Figure 24: Setting Temporary Ip Address
Chapter 4. Configuration To set the IP address, you need the MAC address of the Ethernet Interface. The MAC address is located on a label on the module, as shown in Chapter 2, “Installation.” Connect the PACSystems Ethernet Interface to the Ethernet network.
Page 63 The IP address assigned over the network remains in effect until the Ethernet interface is restarted, power- cycled or until the configuration is downloaded or cleared. Once connected, the intended IP address should be permanently downloaded to the Ethernet interface via the hardware configuration data. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 64: Configuring Ethernet Interface Parameters
The Module Catalog opens. Click the Communications tab, select the IC698ETM001 module (for RX7) or IC695ETM001 module (for RX3i) and click OK. The Ethernet module is placed in the rack and its parameters are displayed in the Parameter Editor window.
Page 65 The Ethernet Interface will automatically maintain 16 LAN Interface Status (LIS) bits in this location and 64 Channel Status bits in this location for a total of 80 bits. The Status address can be assigned to valid %I, %Q, PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 66 Chapter 4. Configuration %R, %AI, %AQ or %W memory. The default value is the next available %I address. See Chapter 12, “Diagnostics,” for definitions of the LAN Interface Status (LIS) portion of the Ethernet Status data. The meaning of the Channel Status portion of the Ethernet Status depends upon the type of operation for each channel.
Page 67: Configuring Ethernet Global Data
The choice of whether to use the Configuration Server can be made individually for each device. Note: Some items in this discussion do not apply to Ethernet network interface units when using ENIU templates. For configuration of EGD with ENIUs, refer to the PACSystems RX3i Ethernet NIU Manual, GFK-2439. Basic EGD Configuration Whether or not the EGD Configuration Server is used, certain steps will need to be taken to use EGD.
Page 68: Figure 29: Configuring Redundancy For Ethernet Global Data
Chapter 4. Configuration The Secondary Produced Exchange Offset parameter is available in the Ethernet Global Data properties when redundancy is enabled and at least one produced exchange is configured to produce in backup mode. The use of the offset is illustrated below. Non-HSB targets have an additional Ethernet Global Data property, Redundancy Role, which appears when any Ethernet interface in the system is configured for redundant IP operation.
Page 69: Figure 31: Configuring Produce In Backup Mode Parameter
Only the PACSystems RX7i and RX3i support non-zero signatures. All other targets force the signature for both produced and consumed exchanges to be zero.
Page 70: Figure 32: Configuring The Egd Configuration Server
Chapter 4. Configuration Use of signatures is enabled by default for new RX7i or RX3i projects and is disabled for other targets and for existing projects. Using Signatures with Run Mode Stores of EGD If your application will use run mode stores of EGD, the use of signatures is highly recommended. Do not use EGD commands specifying a signature value of 0 because a value of 0 effectively disables the signature checking function.
Page 71 A name assigned for this exchange. Defaults to “ProdExchX” where X is a sequential number. Exchange ID A number that identifies a specific exchange to be sent by the producing device. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 72 Chapter 4. Configuration Adapter Name The specific Ethernet Interface, identified by its rack and slot location within the producing PLC. Destination Type Specifies whether the data’s destination will be: ▪ An IP address (Unicast) ▪ A Group ID (Multicast) ▪ All EGD nodes on the subnet (Broadcast).
Page 73 Exchange ID Identifies a specific data exchange to be received by the consuming device. Exchange ID is defined by the producer; changing it here may make resynchronization with the server impossible. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 74 Chapter 4. Configuration Adapter Name The specific Ethernet Interface, identified by its rack and slot location within the consuming PLC. Consumed Not used. (Always displayed as 200 milliseconds; not editable.) Period Update A value in the range 0 to 3,600,000 milliseconds (1 hour). The Ethernet Interface will Timeout declare a refresh error if the first or subsequent packet of data does not arrive within this time.
Page 75 Installing the EGD Generic Device Editor adds it to the Start – Programs menu of the computer’s Windows system. You will find it under Programs - GE Industrial Systems-EGD Generic Editor. The Windows help for this tool describes its operation.
Page 76 Chapter 4. Configuration Destination Identifies the data’s consuming device, based on the Destination Type selected:  a dotted-decimal IP address if Destination Type is IP Address  the group’s ID (1–32) if Destination Type is Group ID  the value 255.255.255.255 if Broadcast IP is the Destination Type. Produced The scheduled repetition period at which the data is produced on the network.
Page 77 Run mode. You can add exchanges in Run mode regardless of the setting of this parameter. It is recommended that you keep this parameter at its default setting, False, unless your application has a specific need to modify this exchange in Run mode. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 78 Chapter 4. Configuration Double-clicking on the consumed exchange opens a window for this exchange for configuring the variables within the exchange. Each exchange has its own variable list. These variables contain the data that is consumed from the network. Each variable contains the following information Offset The location within the data area for this exchange where the start of this data for this (Byte.Bit)
Page 79 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 80 Chapter 4. Configuration GFK-2224Q January 2017...
Page 82: Chapter 5 Ethernet Global Data
This chapter describes basic Ethernet Global Data (EGD) features, which are supported on all RX7i Ethernet interfaces and by the rack-based RX3i Ethernet interface (ETM001). Effective with RX3i CPE310/CPE305 Firmware Release 8.30, the RX3i CPU itself also supports EGD Class 1 on Embedded Ethernet Interface.
Page 83: Ethernet Global Data Operation
PLC memory. This feature is called Selective Consumption. A Consumed Exchange can be set to ignore the data ranges (variables) that are not needed. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 84: Egd Exchanges
Chapter 5. Ethernet Global Data EGD Exchanges Each exchange in EGD is identified by its Producer ID and Exchange ID. Up to 255 exchanges can be configured for a PACSystems Ethernet Interface. They can be divided into any combination of produced and consumed exchanges.
Page 85: Valid Memory Types For Ethernet Global Data
Increasing the production period (especially if the period is more frequent than double the minimum time in which the data is needed). ▪ Defining fewer exchanges, each with more data. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 86: Using Ethernet Global Data In A Redundancy System
Chapter 5. Ethernet Global Data ▪ Using EGD groups or broadcasting to subnets. Rather than producing a directed exchange to several destinations, a single exchange can contain all the data and each consumer can transfer only the data it needs from the exchange. ▪...
Page 87: Broadcasting Ethernet Global Data
ID, consumption will not be interrupted. However, consumption will be affected if the remote device is not configured to consume any exchanges from the new Group ID. In the latter case, updates to the consumed exchange configuration will be necessary to resume consumption. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 88: Ethernet Global Data Timing
Chapter 5. Ethernet Global Data Unicast Transitioning from a multicast or broadcast exchange to unicast production causes samples to be sent to a single node. Thus the exchange will now only be visible to a single remote node and processed only if that node contains a consumed exchange with matching Producer ID and Exchange ID.
Page 89: Configurable Producer Period For An Egd Exchange
CPU sweep time. Producer Period = 1.5 Times CPU Sweep Producer PLC Output Scan Ethernet Global Data Production Timer Expires Sample on Network Figure 38: EGB Timing Example #1 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 90: Time-Stamping Of Ethernet Global Data Exchanges
Chapter 5. Ethernet Global Data Timing Example 2 More than one sample can be produced per producer period expiration and stale samples are produced to the network. Producer Period = 2/3 Time of CPU Sweep Producer PLC Output Scan Ethernet Global Data Production Timer Expires Sample on Network Stale Data is Produced...
Page 91: Obtaining Timestamps From The Ethernet Interface Clock
Therefore, accurate timing comparisons between exchanged data can be made. If SNTP is used to perform network time synchronization, the timestamp information typically has ±10 millisecond accuracy between PLCs on the same network. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 92: Obtaining Timestamps From The Cpu Tod Clock
Chapter 5. Ethernet Global Data Ethernet interface SNTP Time time SNTP Time Server on clock Network time timestamp clock EGD with timestamp Figure 42: Obtaining Timestamps from the SNTP Server’s Time Clock Obtaining Timestamps from the CPU TOD Clock Synchronizing the CPU TOD clock to an SNTP server allows you to set a consistent time across multiple systems. Once the CPU TOD clock is synchronized with the SNTP time, all produced EGD exchanges will use the CPU’s TOD for the time stamp.
Page 93: Figure 42: Synchronizing Cpu Time-Of-Day Clock To An Sntp Server
Chapter 5. Ethernet Global Data Ethernet interface SNTP Time time SNTP Time Server on clock Network timestamp SNTP Time time clock EGD with timestamp Figure 43: Synchronizing CPU Time-of-Day Clock to an SNTP Server PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 94 Chapter 5. Ethernet Global Data Operating Sequence for CPU Clock Synchronization The following diagram illustrates the sequence of events for setup and operation of a system that uses clock synchronization. Machine Edition Ethernet Module SNTP Time Server HWC + AUP file HWC + AUP file ENET config + AUP - enable SNTP protocol...
Page 95 SYSID: A hexadecimal word value that gives the rack (high byte) and slot (low byte) location of the Ethernet Interface. For the PACSystems CPU embedded Ethernet interface, enter the rack/slot location of the CPU module. Rack Slot Hex Word Value 0004H 0304H 0209H 0402H PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 96 Chapter 5. Ethernet Global Data TASK: For the PACSystems Ethernet module, Task must be set to 98 (62H). For the PACSystems CPU embedded Ethernet interface, Task must be set to the value 65634 (10062H) to address the CPU’s Ethernet daughterboard. Caution Entering an incorrect TASK value may cause the Ethernet Interface to fail.
Page 97 SNTP server on the network. If the Ethernet interface is locked to a timer server when this COMMREQ command is issued, the Ethernet interface immediately updates the TOD clock with the current synchronized clock value. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 98 Chapter 5. Ethernet Global Data Command Block for Enable/Disable PLC Time Update COMMREQ Word Offset Value Description Word 1 Length of command data block. Always 2 Word 2 Always 0 (Wait/No Wait mode request). Word 3 For a list of memory type codes, see Memory type of the COMMREQ status word.
Page 99: Sntp Operation
If SNTP is configured, the default mode of operation is Broadcast and Multicast. For Unicast mode of communication, you will need to configure the necessary parameters as defined in Appendix A, “Configuring Advanced User Parameters.” PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 100 Chapter 5. Ethernet Global Data SNTP Broadcast and Multicast Operation Mode The Ethernet Interface will synchronize to a remote SNTP timeserver after receiving two broadcast clock values within a 150-second period. The Station Manager can be used to view server status information. SNTP Unicast Operation Mode In this mode, the module tries to request the time from a time server to synchronize the clock.
Page 101: Effect Of Plc Modes And Actions On Egd Operations
Production and consumption is controlled by the PLC Mode as described above. Producer ID and exchange definitions are replaced. Producer ID and exchange states depend on the PLC mode and configuration prior to the action. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 102: Run Mode Store Of Egd
Chapter 5. Ethernet Global Data Run Mode Store of EGD Caution Modifying an exchange using an RMS can cause an interruption in the transfer of EGD data or possibly take the exchange offline. This is particularly a concern for exchanges used with remote IO, such as exchanges between the CPU and NIU.
Page 103 If at least one exchange has this setting as TRUE in the prior stop mode store, then this setting can be modified for other exchanges in a run mode store. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 104 Chapter 5. Ethernet Global Data Modifying an Exchange’s Variable Lists When modifying the variable list for an exchange, the operation differs depending on whether EGD signatures are enabled or not. The use of EGD signatures is strongly recommended when doing run mode stores of EGD. Modifying Exchange Variable Lists with EGD Signatures Enabled Modifying the variable list with signatures enabled results in either a major signature change or a minor signature change.
Page 105: Monitoring Ethernet Global Data Exchange Status
Note that when an EGD exchange message received from the network contains an invalid Protocol Version Number, the Ethernet Interface cannot decode the message in order to identify the exchange. In this case, the Exchange Status Word cannot be updated. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 106: Exchange Status Word Error Codes
Chapter 5. Ethernet Global Data Exchange Status Word Error Codes The following table shows the error codes that can be written to the Exchange Status word in the Producer (P) and Consumer. The Exchange Status Word value for each exchange may be displayed via the STAT G Station Manager command.
Page 107: Chapter 6 Programming Egd Commands
Chapter 6 Programming EGD Commands This chapter describes a set of commands that can be used in the application program to read and write data over the Ethernet network: ▪ Read PLC Memory ▪ Write PLC Memory ▪ Read EGD Exchange ▪...
Page 108: Commreq Status For The Egd Commands
Chapter 6. Programming EGD Commands Enable: Control logic for activating the COMMREQ Function Block. IN: The location of the Command Block. The Command Block contains the parameters of the COMMREQ request. It can be located at any valid address within a word-oriented memory area (%R, %AI, %AQ, %P, %L, or %W) in the PACSystems PLC.
Page 109: Read Plc Memory (4000)
Reserved Always 0 Word 4 (COMMREQ status word address) is the only zero-based address in the Command Block. This value alone requires that 1 be subtracted from the intended address. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 110 Chapter 6. Programming EGD Commands (Word 7) EGD Command Number: Word 7 requests that a read PLC memory operation occur. If the command is processed successfully, it will result in PLC reference memory data being retrieved from the server to the client.
Page 111 (Words 18 – 21) Remote PLC - IP Address: Words 18–21 specify the four integers, one integer per word, of the dotted-decimal IP address of the remote PLC to be accessed. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 112: Write Plc Memory (4001)
Chapter 6. Programming EGD Commands Write PLC Memory (4001) The Write PLC Memory command can be used to write memory locations to one remote PACSystems PLC. Use of this command does not require a configured produced / consumed exchange in the PLCs. Write PLC Memory Command Block Word Offset Value...
Page 113 (Words 18 – 21) Remote PLC - IP Address: Words 18–21 specify the four integers, one integer per word, of the dotted-decimal IP address of the remote PLC to be accessed. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 114: Read Egd Exchange (4002)
Chapter 6. Programming EGD Commands Read EGD Exchange (4002) The Read EGD Exchange command can be used to read some or all of a configured Ethernet Global Data exchange from either the producer or the consumer. This command identifies the data to be read using its configured Producer ID and Exchange ID.
Page 115 (Word 19) Remote Server – Network Address Type: Word 19 specifies the format of the remote PLC address. Word 19 must contain the value 1. This indicates a dotted-decimal IP address expressed using a separate register for each decimal digit. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 116 Chapter 6. Programming EGD Commands (Word 20) Remote Server – Network Address Length: Word 20 specifies the length in words of the remote PLC IP address in this COMMREQ Command Block. Word 20 must contain 4. (Words 21 – 24) Remote Server – IP Address: Words 21–24 specify the four integers, one integer per word, of the dotted-decimal IP address of the remote PLC to be accessed.
Page 117: Write Egd Exchange (4003)
Four integers, specified as one integer per word of the dotted- Word 24 decimal IP address of the remote PLC. May not be a group IP address. Word 25 Reserved Always 0 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 118 Chapter 6. Programming EGD Commands Word Offset Value Description (Word 7) EGD Command Number: Word 7 requests that a write EGD exchange operation occur. If the command is processed successfully, it will result in data for a specified EGD exchange being written from the client to the server.
Page 119: Masked Write To Egd Exchange (4004)
Four integers, specified as one integer per word of the Word 22 dotted-decimal IP address of the remote PLC. May not be a group IP address. Word 23 Reserved Always 0. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 120 Chapter 6. Programming EGD Commands (Word 7) EGD Command Number: Word 7 requests that a masked write EGD exchange operation occur. If the command is processed successfully, it will result in a data bit for a specified EGD exchange being written from the client to the server.
Page 121 Most Significant Byte Word 9 (mask) Most Significant Byte Word 10 (data) State to set the masked bit Figure 47: Example: Masked Write to EGD Exchange Bit Mask and Data Bits PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 122 Chapter 6. Programming EGD Commands GFK-2224Q January 2017...
Page 123: Chapter 7 Programming Srtp Channel Commands
Chapter 7 Programming SRTP Channel Commands This chapter describes how to implement PLC to PLC communications over the Ethernet network using SRTP Channel commands: ▪ SRTP Channel Commands Channel Operations Aborting and Re-tasking a Channel SRTP Channel Commands in a Redundant System Executing a Channel Command ▪...
Page 124: Channel Operations
SRTP Client connections to the new active unit while the previous connections to the old active unit are being taken down. The RX3i Embedded Ethernet interface supports a maximum of 16 channels. GFK-2224Q January 2017...
Page 125: Executing A Channel Command
After the channel is successfully set up to the server PLC, the Ethernet Interface performs the periodic reads as specified in the Command Block. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 126: Commreq Format For Programming Channel Commands
Chapter 7. Programming SRTP Channel Commands COMMREQ Format for Programming Channel Commands The Channel commands described in this chapter are sent using the Communications Request (COMMREQ) function. The Communications Request is triggered when the logic program passes power to the COMMREQ Function Block.
Page 127: The Commreq Command Block: General Description
65535, signifying %W65536.) (Word 5): Reserved. Set to zero. (Word 6): Reserved. Set to zero. (Words 7 and up) Data Block: The Data Block defines the Channel command to be performed. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 128 Chapter 7. Programming SRTP Channel Commands Using COMMREQs for Channel Commands ▪ Be sure to use unique COMMREQ Status (CRS) memory locations for each COMMREQ. ▪ Always initialize the COMMREQ Status Word to zero before initiating a Channel command COMMREQ to a given channel.
Page 129: Establish Read Channel (2003)
1–32. If the channel number is out of range, a command error indication will be placed in the COMMREQ Status word. If the channel number is the same as a channel already in use, the channel will be re- tasked to perform this new command. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 130 Chapter 7. Programming SRTP Channel Commands (Word 9) Number of Read Repetitions: Word 9 specifies the number of reads to be performed before automatically completing the communications request and closing the channel. If this value is set to 1, only a single read will be issued.
Page 131 %I65). Valid ranges of values depend on the remote PLC’s memory ranges. Can only be accessed in the Remote PLC %W memory is supported by PACSystems clients and servers only. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 132 Chapter 7. Programming SRTP Channel Commands (Word 17) Remote PLC - Number of Memory Units: Word 17 specifies the amount of data to be transferred. The value entered is the number of memory units to be transferred, where the size of a memory unit is a bit, byte, or word as specified in Word 15.
Page 133: Establish Write Channel (2004)
1–32. If the channel number is out of range, a command error indication will be placed in the COMMREQ Status word. If the channel number is the same as a channel already in use, the channel will be re- tasked to perform this new command. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 134 Chapter 7. Programming SRTP Channel Commands (Word 9) Number of Write Repetitions: Word 9 specifies the number of writes to be performed before automatically completing the communications request and closing the channel. If this value is set to 1, only a single write will be issued.
Page 135 PLC memory. For example, the name “MARY” (“M” = 4DH, “A” = 41H, “R” = 52H, “Y” = 59H) would have 414DH in the first word and 5952H in the second word. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 136: Send Information Report (2010)
Chapter 7. Programming SRTP Channel Commands Send Information Report (2010) The Send Information Report COMMREQ requests that a particular block of memory within the PLC CPU reference tables be transferred periodically from an Ethernet Interface to a host application SRTP server. The Command Block specifies the repetition period, the number of transfers to the server to perform, and the timeout allowed in waiting for each transfer to complete.
Page 137 A maximum of 16384 bits, 2048 bytes, or 1024 words of data can be specified. (Word 16) Reserved: Word 16 is reserved and should contain the value zero. (Word 17) Reserved: Word 17 is reserved and should contain the value zero. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 138: Abort Channel (2001)
Chapter 7. Programming SRTP Channel Commands (Word 18) Remote Host - Network Address Type: Word 18 specifies the format of the remote host’s address. Word 18 must contain the value 1, which indicates a dotted-decimal IP address expressed using a separate register for each decimal digit.
Page 139: Retrieve Detailed Channel Status (2002)
Channel Status bytes report status and errors in the same format as the COMMREQ Status word. See the list of error codes in Chapter 12. The second word of the DCS words indicates when the channel is active. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 140: Programming For Channel Commands
Chapter 7. Programming SRTP Channel Commands If a channel error is indicated (by the Channel Error bit) after the channel is established, the first word of the DCS words contains an error code indicating the cause of the error. The second word of the DCS words indicates whether the channel is active or idle.
Page 141: Commreq Sample Logic
Nicknames are used in this example to make the ladder program easier to follow. LANIFOK is bit 16 of the LAN Interface Status bits. All other nicknames can be assigned as needed. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 142 Chapter 7. Programming SRTP Channel Commands Figure 51: Sample Ladder Logic for COMMREQ GFK-2224Q January 2017...
Page 143: Sequencing Communications Requests
Interface may be totally consumed. A “snapshot” of the state of the TCP connections would show some of them being created, some being terminated, and some active, but none available. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 144: Use "Channel Re-Tasking" To Avoid Using Up Tcp Connections
Chapter 7. Programming SRTP Channel Commands Caution In Certain Conditions TCP Connections Can Be Totally Consumed If the logic for issuing COMMREQs is constructed so it does the following, all available TCP connections can quickly be used up: ▪ The number of repetitions (Word 9 in an Establish Read or Write Channel COMMREQ) is set to 1, and ▪...
Page 145: Srtp Application Timeouts
If after executing a COMMREQ function, the COMMREQ status word is zero (0) and the FT Output is OFF, the Command Block has been sent to the Ethernet Interface, but no status has been returned. If this condition persists, check the PLC Fault Table for information. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 146 48 Server TCP connections for Rack-based and RX7i Embedded maximum of 32 Client Channel TCP connections CPE330 Embedded Ethernet Interface supports 48 SRTP server connections and 32 client channels. 32 SRTP server connections for RX3i Embedded Ethernet interface 16 Client Channel connections for RX3i Embedded Ethernet interface GFK-2224Q...
Page 148: Chapter 8 Modbus/Tcp Server
Modbus Conformance Classes PACSystems Modbus/TCP Server supports Modbus Conformance classes 0, 1, and 2. The RX3i Ethernet module has been certified by the Modbus/TCP Conformance Test Laboratory to be in conformance with Conformance Test Policy Version 2.1. Server Protocol Services The Modbus/TCP Server responds to incoming Request Connection, Terminate Connection and Request Service messages.
Page 149: Modbus Reference Tables
If you use the Modbus function Write File Record, and specify multiple record sections, the first N-1 sections will be written to the server’s PLC reference memory, even if an error prevents the writing of the last section. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 150: Address Configuration
Chapter 8. Modbus/TCP Server Modbus Holding Register Table The Modbus Holding Register table is mapped exclusively to the CPU Register (%R) table. Applicable Functions ▪ Read Multiple Registers ▪ Write Multiple Registers ▪ Write Single Register ▪ Mask Write Register ▪...
Page 151: Modbus Function Codes
Write Multiple Registers 4xxxx 1024 %R00001 1024 Mask Write Register Read/Write Multiple Registers Read Input Registers 3xxxx %AI00001 Read Exception Status Diagnostics Read File Record 6yxxxx %W00001 Write File Record PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 152: Chapter 9 Modbus/Tcp Client
Chapter 9 Modbus/TCP Client This chapter explains how to program communications over the Ethernet network using Modbus/TCP Channel commands. This chapter applies only to PLCs being used as client PLCs to initiate Modbus/TCP communications. ▪ The Communications Request ▪ The COMMREQ Function Block and Command Block ▪...
Page 153: Structure Of The Communications Request
Client protocols. For example, if 16 Client connections are used for SRTP Channels, there are 16 Client connections available for Modbus/TCP Channels. Any given channel can be assigned to only one protocol at a time. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 154: Status Data
Chapter 9. Modbus/TCP Client Status Data There are several types of status available to the client application program. LAN Interface Status Bits (LIS Bits): The LIS bits comprise bits 1–16 of the 80-bit status area. The location of this 80-bit status area is assigned using the configuration software. The LIS bits contain information on the status of the Local Area Network (LAN) and the Ethernet interface.
Page 155: Operation Of The Communications Request
The COMMREQ Status word (CRS word) is returned immediately if the Command Block is invalid. If the syntax is correct, then the CRS word is returned after the transfer of data. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 156: Commreq Function Block And Command Block
16#0004 16#0304 16#020A 16#0402 TASK: For the RX3i and Rx7i ETM001 Ethernet interfaces TASK must always be set to zero. For PACSystems CPU embedded Ethernet interface, TASK must be set to 65536 (0x10000) to address the CPU’s Ethernet daughterboard. Caution Caution notices are used where equipment might be damaged if care is not taken.
Page 157: The Commreq Command Block
(Word 4) COMMREQ Status Word Address Offset: This word contains the offset within the memory type selected. The status word address offset is a zero-based number. For example, if you want %R1 as the PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 158: Modbus/Tcp Channel Commands
Chapter 9. Modbus/TCP Client location of the CRS word, you must specify a zero for the offset. The offset for %R100 would be 99 decimal. Note that this is the only zero-based field in the Channel commands. (Word 5): Reserved. Set to zero. (Word 6): Reserved.
Page 159 (Word 13) IP Address 3rd Octet: Word 12 specifies the value of the third octet of the IP Address. (Word 14) IP Address 4th Octet: Word 13 specifies the value of the fourth octet of the IP Address. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 160: Close A Modbus/Tcp Client Connection (3001)
Chapter 9. Modbus/TCP Client Close a Modbus/TCP Client Connection (3001) The application program closes a Modbus/TCP Client Connection by issuing the Close Modbus/TCP Client Connection COMMREQ. The Close COMMREQ closes the underlying TCP connection and frees the channel for other communication tasks. An error response is returned if the channel number in the COMMREQ identifies a non-Modbus/TCP Client connection or an inactive channel.
Page 161: Read Data From A Modbus/Tcp Device (3003)
The COMMREQ Status Word (CRS) indicates the success or failure of the Read Data COMMREQ. If the COMMREQ requests an invalid channel number or any other field is invalid the COMMREQ fails and the CRS is set to a non- PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 162 Chapter 9. Modbus/TCP Client zero value to identify the failure. See the section “Status Data” later in this chapter for detailed CRS failure codes. Command 3003, Example 1 Read four Input Registers from Input Registers in the remote Modbus/TCP device. Store the registers at location %R20.
Page 163 (Word 14) Unit Identifier: This field is typically used by Ethernet to Serial bridges to specify the address of a Modbus Slave on a multi-drop link. The Modbus/TCP Unit Identifier is a special control code used in a Modbus/TCP message block. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 164 Chapter 9. Modbus/TCP Client Command 3003, Example 2 Read nine (9) Input Discretes starting from Discrete input address 5 in the remote Modbus/TCP server. Store the registers at location %T3(bit mode). Return the COMMREQ Status word to %R10. (Hex) Word 1 00008 (0008) Length of Channel command Data Block (8–14 words) Word 2...
Page 165 (Word 14) Unit Identifier: This field is typically used by Ethernet to Serial bridges to specify the address of a Modbus Slave on a multi-drop link. The Modbus/TCP Unit Identifier is a special control code used in a Modbus/TCP message block. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 166 Chapter 9. Modbus/TCP Client Command 3003, Example 4 – Read FIFO Queue Read the FIFO Queue from the remote Modbus/TCP server. Store the FIFO Queue Data at location %W1. Return the COMMREQ Status word to %R10. (Hex) Word 1 00008 (0008) Length of Channel command Data Block Word 2 00000 (0000)
Page 167: Write Data To A Modbus/Tcp Device (3004)
COMMREQ fails and the CRS is set to a non- zero value to identify the failure. See the section “Status Data” later in this document for detailed CRS failure codes. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 168 Chapter 9. Modbus/TCP Client Command 3004, Example 1 – Set Single Register Write one register from %AI10 to register address 200 in the remote Modbus/TCP server. Return the COMMREQ Status word to %R10. Use channel 6, a channel previously opened with the Open Modbus/TCP Client Connection COMMREQ.
Page 169 (Word 14) Unit Identifier: This field is typically used by Ethernet to Serial bridges to specify the address of a Modbus Slave on a multi-drop link. The Modbus/TCP Unit Identifier is a special control code used in a Modbus/TCP message block. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 170 Chapter 9. Modbus/TCP Client Command 3004, Example 3 – Set Multiple Registers Write the four registers from Discrete Input Memory (%I40 to) address 200 in the remote Modbus/TCP server. Return the COMMREQ Status word to %R10. Use channel 6, a channel previously opened with the Open Modbus/TCP Client Connection COMMREQ.
Page 171: Mask Write Register Request To A Modbus Server Device (3009)
(Word 13) Unit Identifier: This field is typically used by Ethernet to Serial bridges to specify the address of a Modbus Slave on a multi-drop link. The Modbus/TCP Unit Identifier is a special control code used in a Modbus/TCP message block. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 172: Read/Write Multiple Registers To/From A Modbus Server Device (3005)
Chapter 9. Modbus/TCP Client Read/Write Multiple Registers to/from a Modbus Server Device (3005) The Read/Write Multiple Registers to/from a Modbus Server Device COMMREQ is used to read and write data between the remote server and the PLC with one COMMREQ operation. Note, the write operation occurs first and the data exchange does not occur coherently (i.e.
Page 173 (Word 20) Unit Identifier: This field is typically used by Ethernet to Serial bridges to specify the address of a Modbus Slave on a multi-drop link. The Modbus/TCP Unit Identifier is a special control code used in a Modbus/TCP message block. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 174: Status Data
Chapter 9. Modbus/TCP Client Status Data This section describes all the status data that is available to the ladder program to determine the state of the Ethernet interface and its Modbus/TCP channels. Types of Status Data There are three main types of status data available to the application program: ▪...
Page 175: Controlling Communications In The Ladder Program
COMMREQ Status Word indicates completion of the command. The example ladder program segment starting on the next page illustrates how to incorporate these important points in your program. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 176: Commreq Ladder Logic Example
Chapter 9. Modbus/TCP Client COMMREQ Ladder Logic Example The input values for the Block Move Functions in the example below are taken from the Open Modbus/TCP Connection (3000), Modbus/TCP Read (3003), and Close Modbus/TCP Connection (3001) Examples in this chapter. Named variables are used in this example to make the ladder program easier to follow.
Page 177: Figure 59: Commreq Ladder Logic Segment (Continued)
The TASK field of the COMMREQ Function Block indicates which mailbox task ID to use for the specified rack and slot. For the RX3i and Rx7i ETM001 Ethernet interfaces TASK must always be set to zero. For PACSystems CPU embedded Ethernet interface, TASK must be set to 65536 (0x10000) to address the CPU’s Ethernet daughterboard.
Page 178: Figure 60: Commreq Ladder Logic Segment (Continued)
Chapter 9. Modbus/TCP Client Figure 60: COMMREQ Ladder Logic Segment (continued) Rung # 7: When OPEN_SUCCESS is set it triggers READ_REQ, which enables execution of the BLKMOV, MOVE and COMMREQ functions for the Modbus/TCP Read COMMREQ. READ_REQ is a one-shot (Positive Transition) coil, activating once when OPEN_SUCCESS transitions from OFF to ON.
Page 179: Figure 61: Commreq Ladder Logic Segment (Continued)
The TASK field of the COMMREQ Function Block indicates which mailbox task ID to use for the specified rack and slot. For the RX3i and Rx7i ETM001 Ethernet interfaces TASK must always be set to zero. For PACSystems CPU embedded Ethernet interface, TASK must be set to 65536 (0x10000) to address the CPU’s Ethernet daughterboard.
Page 180: Figure 62: Commreq Ladder Logic Segment (Continued)
Chapter 9. Modbus/TCP Client Figure 62: COMMREQ Ladder Logic Segment (continued) Rung # 12: When READ_SUCCESS is set it triggers CLOSE_REQ, which enables execution of the BLKMOV, MOVE and COMMREQ functions for the Close Modbus/TCP Connection COMMREQ. CLOSE_REQ is a one-shot (Positive Transition) coil, activating once when READ_SUCCESS transitions from OFF to ON.
Page 181 The TASK field of the COMMREQ Function Block indicates which mailbox task ID to use for the specified rack and slot. For the RX3i and Rx7i ETM001 Ethernet interfaces TASK must always be set to zero. For PACSystems CPU embedded Ethernet interface, TASK must be set to 65536 (0x10000) to address the CPU’s Ethernet daughterboard.
Page 182: Troubleshooting A Ladder Program
Invalid rack/slot specified. The module at this rack/slot is unable to receive a COMMREQ Command Block. ▪ Invalid Task ID. For the RX3i and Rx7i ETM001 Ethernet interfaces TASK must always be set to zero. For PACSystems CPU embedded Ethernet interface, TASK must be set to 65536 (0x10000) to address the CPU’s Ethernet daughterboard.
Page 183: Monitoring The Communications Channel
Only one COMMREQ function per channel can be pending at one time. A COMMREQ function is pending from the time it is initiated in the ladder program until its CRS word has been updated to a non-zero value by the Ethernet interface. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 184: Differences Between Series 90 And Pacsystems Modbus/Tcp Channels
Chapter 9. Modbus/TCP Client Differences between Series 90 and PACSystems Modbus/TCP Channels This section lists the known differences between the Series 90 implementation of Modbus/TCP Channels and the PACSystems implementation. On the 90-30 CMM321 if a Modbus error response is received for a Modbus/TCP channel, the Ethernet interface closes the TCP connection and updates the CRSW with an appropriate error code.
Page 185 0x4321 End-to-end bytes Client Word %R1 = 0x4321 Server Bit %M16-%M1 = 0x4321  un-swapped Server End-to-end bytes %R1 = 0x4321 Client Bit %M16-%M1 = 0x4321  Word un-swapped PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 186: Chapter 10 Opc Ua Server
Chapter 10 OPC UA Server OPC Unified Architecture, or OPC UA, is a communication standard published by the OPC Foundation to provide data communications interoperability for industrial automation. This standard specifies client-server communications with a service-oriented architecture. It is typically used to allow automation controller servers (such as the PACSystems Controllers) to share process data for the purposes of monitoring, control, supervision, and logging with Human-Machine Interface (HMI), workstation, alarm system, condition monitoring, and historian clients.
Page 187: 10.1 Application Logic To Control The Opc Ua Server
SERVICE_REQUEST 130, protocol 1, sub-functions: Sub-function Code START 16#0000 STOP 16#0001 CLEAR 16#0002 SERVER_STATUS 16#0003 CONFIG_STATUS 16#0004 RESTART 16#0005 Note: All other sub-functions are reserved; if used, the SVC_REQ function does not pass power. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 188 Chapter 10. OPC UA Server OPC UA Server – Service Request – START This function starts the OPC UA Server. If the OPC UA server configuration files and certificates have been cleared or have not yet been generated, they are generated when the server starts. If previous configuration files and server certificates exist, they are used without change.
Page 189 The use of the STOP sub-function code in a ladder diagram is illustrated in the following example. If the SVC_REQ does not pass power, the operation did not complete. Example: PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 190 Chapter 10. OPC UA Server OPC UA Server – Service Request – CLEAR This function clears the configuration files and certificates used by the OPC UA Server on the controller. Note: This request can only be successfully performed when the server is stopped. Parameters for the CLEAR function service request are: Data Direction (LD Parameter...
Page 191 UTC time. Example: Note: In this example a Time Zone Offset of -300 was used, meaning local time is UTC minus 300 minutes (5 hours). PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 192 Chapter 10. OPC UA Server OPC UA Server – Service Request – SERVER_STATUS The SERVER_STATUS sub-function code can be used to obtain info about the server status. The sub-function uses the following bitmask OPC_UA_SERVER_STAT_READY_TO_START_BITMASK 0x0001 OPC_UA_SERVER_STAT_RUNNING_BITMASK 0x0002 OPC_UA_SERVER_STAT_RESTARTS_PENDING_BITMASK 0x0004 OPC_UA_SERVER_STARTING_BITMASK 0x0010 Parameters for the SERVER_STATUS function service request are: Data Direction...
Page 193 Chapter 10. OPC UA Server Example: PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 194 Chapter 10. OPC UA Server OPC UA Server – Service Request – CONFIG_STATUS The CONFIG_STATUS sub-function code can be used to obtain info about the server status. The sub-function uses the following bitmask: OPC_UA_SERVER_CONFIG_STAT_CONFIG_CLEAR 0x0001 OPC_UA_SERVER_CONFIG_STAT_CONFIG_EXISTS 0x0002 Parameters for the SERVER_STATUS function service request are: Data Direction Parameter Summary...
Page 195: Opc Ua Server Subroutine
An application note entitled OPC-UA Server: Application Logic Quick Start Guide that includes an example subroutine is available at the GE Automation and Controls support site, www.geautomation.com/support. An example subroutine call, per the application note, is displayed below for reference.
Page 196 Chapter 10. OPC UA Server Figure 67: OPC UA Example Subroutine Inputs Parameter Description Data Type StartSvr Rising edge starts the OPC UA server. Only allowed if the server Bool is stopped. StopSvr Rising edge stops the OPC UA server. Only allowed is the server Bool is running.
Page 197: Connect Opc Ua Client To Opc Ua Server
Navigator window. From the Inspector window, scroll down to the IP Address Entry (see the screenshot below). From the figure, we can see the current IP address is 10.10.1.102. For this example, the client’s connection string for the controller is the following: opc.tcp://10.10.1.102:4840 PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 198 Chapter 10. OPC UA Server Figure 68: Project Inspector/Ethernet Config Window Note: In the figure above, Force Compact PVT is set to true. This is the required setting for the OPC UA Server. GFK-2224Q January 2017...
Page 199 Figure 70: OPC UA Client Connection Dialog Note: The RXi’s OPC UA server supports 5 clients. If 5 clients are connected, additional connection requests will be rejected by the OPC UA server. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 200: Opc Ua Client Authentication Settings
Chapter 10. OPC UA Server OPC UA Client Authentication Settings OPC UA provides three authentication methods to logon to a server: Anonymous,  Username/Password, and  Certificate-based.  The OPC UA server supports Anonymous and Username/Password Authentication methods. Machine Edition controller project settings determine the Authentication method used by the OPC UA server.
Page 201: Username/Password Authentication
The OPC UA Client would use the following username/password to establish a connection. Username = OpcUserLevel2 Password = MyLevel2Password Please reference the Machine Edition documentation for additional details regarding setting passwords and the privileges assigned to different levels. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 202 Chapter 10. OPC UA Server Figure 73: Machine Edition Online Command to Set Passwords GFK-2224Q January 2017...
Page 203: Opc Ua Security Settings
An example client address space view is displayed below. Figure 75: Example OPC UA Address Space PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 204: Publish Application Variables To Opc Ua Address Space
Chapter 10. OPC UA Server Publish Application Variables to OPC UA Address Space Machine Edition allows you to select application variables to include in the OPC UA address space. This is done by means of the variable’s publish attribute. The publish attribute is accessed using the variable Inspector within Machine Edition.
Page 205: Opc Ua Server Information In Address Space
OPC Foundation website and in its publications. General Server information is contained under the Server node in the address space (see the following). Figure 78: OPC UA Address Space - Server Node PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 206 Chapter 10. OPC UA Server The Server node can then be used to access server-specific information. For example, the node Server  ServerStatus  Buildinfo (see below) contains information specific to the OPC UA server. Figure 79: Server Specific Address Space The address space entries under BuildInfo can be accessed to learn more information for a specific controller.
Page 207: Opc Ua Server - Application Information
12,500 application elements. Published Elements = 58 Published Elements is a count of how many application elements are currently being published. In the example above, the number is 58 application elements. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 208: Opc Ua Server - Ge Device Information
34 element array. OPC UA Server – GE Device Information The OPC UA server publishes controller specific information under the GE Device Information node. Figure 82: OPC UA Address Space – GE Device Information The tree structure allows you to drill down into both the Controller and Energy Pack nodes to get information on these devices.
Page 209: Opc Ua Automatic Restart Function
To assist with checking the status of and clearing certificates, the OPC UA subroutine previously discussed offers a ClrSvr input that might be used to clear the server certificates any time the server is stopped. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 210: Opc Ua Performance Considerations
Chapter 10. OPC UA Server OPC UA Performance Considerations As mentioned in preceding notes, the OPC UA Server supports 5 concurrent clients and 12,500 addressable elements. Care is suggested both approaching and operating at the max-max condition: 5 clients accessing the full complement of 12,500 elements simultaneously.
Page 212: Chapter 11 Rx7I Plc Monitoring Via The Web
Chapter 11 RX7i PLC Monitoring Via the Web The PACSystems RX7i embedded CPU Ethernet Interface provides PLC data monitoring using a standard Web browser. Rack-based Ethernet modules and the RX3i embedded Ethernet interface do not support web server operation. You can use the Web server to monitor the following PLC data: ▪...
Page 213: Rx7I Home Page
To format a row, click the Format button for the entire row. Use the drop down box to select the data format for the selected reference address or row. With Internet Explorer, pressing the “OK” button changes the format immediately. With Netscape, the format changes after you refresh the screen. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 214 Chapter 11. RX7i PLC Monitoring Via the Web Saving Reference Table Settings You can save up to 10 previously formatted reference table views on the computer being used to view the data. To save the current reference table settings, go to the section at the bottom of the page labeled ‘Save Current Table Settings To:’.
Page 215: Plc Fault Table Viewer Page
These selections affect the display of all fault extra data. If an error code does not have a string associated with it, the “Fault Description” field is blank. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 216 Chapter 11. RX7i PLC Monitoring Via the Web To view the fault extra data for all faults, select the “Show All” checkbox as shown below: Figure 86: Fault Extra Data Display For Netscape, first check the “Show All” checkbox and press the “Refresh PLC Fault Table” button. This will show the fault extra data for all faults.
Page 217: I/O Fault Table Viewer Page
‘anon’ or ‘user’ logins). Once successfully logged on, your can execute any of the FTP commands described below; this login is required in order to store web page files to the Ethernet Interface. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 218: Changing The Password
Chapter 11. RX7i PLC Monitoring Via the Web Changing the Password The default FTP password is “system”. You can change the FTP password via a parameter in the AUP file, which is stored to the PLC via the programmer, or by using the Station Manager. Changing the Password from the Advanced User Parameters File The following line should be added to the AUP file to change the FTP password (for example, to “my_ftp_pw”): tpassword = my_ftp_pw...
Page 219: Viewing The Rx7I Plc Web
16 connections. For example: = CHSOSW web_max_conn 6 = CHSOSW ftp_max_conn 4 Note: The CHSOSW commands are not available if the PLC has received a valid configuration from the Programmer. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 220: Chapter 12 Diagnostics
Chapter 12 Diagnostics This chapter describes diagnostic techniques for a PACSystems Ethernet Interface. ▪ What to do if You Cannot Solve the Problem ▪ Diagnostic Tools Available for Troubleshooting ▪ States of the Ethernet Interface ▪ EOK Blink Codes for Hardware Failures ▪...
Page 221: 12.2 Diagnostic Tools Available For Troubleshooting
The XCHANGE command displays detailed information about a specified Ethernet Global Data exchange. Refer to GFK-2225, TCP/IP Ethernet Communications for PACSystems Station Manager Manual, for information on how to access and use the Station Manager software. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 222: States Of The Ethernet Interface (Rack-Based And Rx7I Embedded Interfaces)
Chapter 12. Diagnostics 12.3 States of the Ethernet Interface (Rack-based and RX7i Embedded Interfaces) The Ethernet Interface is initialized by  Powering up the PLC   Ethernet Interface Storing a new configuration to the PLC with changes for the Ethernet Interface ...
Page 223 Examine Controller Fault Table to may be network Operational find out why the STAT LED is OFF. STAT (ON/OFF) cable not connected If the STAT LED is OFF, an exception condition has occurred. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 224: Eok Led Blink Codes For Hardware Failures (Rack-Based And Rx7I Embedded Interfaces)
Chapter 12. Diagnostics On the RX7i interfaces, the Ethernet LEDs are labeled EOK, LAN, and STAT. On the RX3i rack-based Ethernet interfaces, the Ethernet LEDs are labeled ETHERNET OK, LAN OK, and LOG EMPTY, respectively. 12.4 EOK LED Blink Codes for Hardware Failures (Rack-based and RX7i Embedded Interfaces) The EOK LED indicates whether the module is able to perform normal operation.
Page 225: 12.5 Controller Fault Table
Error reported when message received where IP/MAC address cannot be discarded request resolved. Error may indicate that remote host is not operational on the network. Check that remote host is operational on network and its addresses are correct. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 226 Chapter 12. Diagnostics Controller Fault User Action Comm_req - Bad task ID Message from PLC for unknown Ethernet Interface task. Check COMMREQ programmed function block. Comm_req - Wait mode not Check COMMREQ to make sure sent in no-wait mode. allowed Configured gateway address Error in configuration.
Page 227: 12.6 Monitoring The Ethernet Interface Status Bits
CPE310. This port negotiates up to 1 Gbps. LAN2 is the LAN (NIC) that contains the switched ports in the CPE330. There are 2 ports in this LAN. These ports negotiate up to 1 Gbps. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 228 1 port. LAN OK LAN OK LAN OK LAN 1 has only 1 port. Resource problem Resource problem Resource problem Module Overtemp (RX3i Reserved Reserved rack-based only) LAN Interface OK LAN Interface OK LAN Interface OK Channel 1 Status...
Page 229 SRTP Client - Channel Error SRTP Client - Channel Error The original information is located in GFK-2224L, TCP/IP Ethernet Communications for PACSystems RX3i and RX7i from June 2013 For CPE330: LAN1 is the LAN (NIC) that contains the unswitched port in the CPE330. This is the port similar to the CPE310.
Page 230: Lan Interface Status (Lis) Bits
This bit is set if the Ethernet interface hardware has detected that the internal temperature has exceeded normal limits. The bit is cleared when the internal temperature has not exceeded normal limits, or has recovered from an over-temperature condition. (Overtemperature indication is available only in the RX3i rack- based Ethernet interface.) Bit 16, LAN Interface OK Bit (All models) This bit is set to 1 by the Ethernet Interface each PLC scan.
Page 231: Channel Status Bits
Bits 17, 19, 21 ... 79, Data Transfer Bit (Rack-based and RX7i Embedded) Bits 17, 19, 21 ... 47, Data Transfer Bit (RX3i Embedded)Typically, a channel is used to perform repetitive reads or writes. The Data Transfer bit pulses (0 1 0) each time there is a successful read or write. This can be an indicator to the ladder program to move the most recent data to another location.
Page 232: 12.7 Monitoring The Ft Output Of The Commreq Function Block
Chapter 12. Diagnostics 12.7 Monitoring the FT Output of the COMMREQ Function Block. The COMMREQ function block indicates its status through its FT output: (Enable ) ------------- COMM - CommReq Delivered - Function Faulted (logic) (Command Block address) (Rack/Slot Location of SYSID the Ethernet Interface) TASK...
Page 233: Format Of The Commreq Status Word
The following tables list the error codes that are reported in the COMMREQ Status word after the execution of a COMMREQ function. Note: The COMMREQ Status words for SNTP Time Transfer commands are listed in “Chapter 5, Ethernet Global Data,” following the COMMREQ command descriptions. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 234: Major Error Codes In The Commreq Status Word
Chapter 12. Diagnostics Major Error Codes in the COMMREQ Status Word Success or a Major Error Code appears in the low byte of the COMMREQ Status Word. Hexadecimal values for the low byte are listed below. For many Major Error Codes, additional information appears as a Minor Error Code in the high byte of the COMMREQ Status Word.
Page 235: Minor Error Codes For Major Error Codes 05H (At Remote Server Plc) And 85H (At Client Plc)
Chapter 12. Diagnostics Minor Error Codes for Major Error Codes 05H (at Remote Server PLC) and 85H (at Client PLC) PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 236 Chapter 12. Diagnostics Error Status (Hexadecimal) Minor Error Code Description Remote Client Server 8F05H 8F85H Session already exists. 8E05H 8E85H Memory write is prohibited. 9005H 9085H Invalid PLC memory reference range. 9305H 9385H Text buffer length/count does not agree with request parameters. C105H C185H Invalid block state transition.
Page 237: Minor Error Codes For Major Error Code 11H (At Remote Server Plc)
Connection ID or block transfer ID is not valid. 3211H Timed out waiting for PLC CPU response. 3311H The PLC CPU aborted the request. 3411H An invalid message type was specified. 3511H The specified task is not registered. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 238 Chapter 12. Diagnostics Error Status (Hex) SRTP Error Code Description 3611H The mailbox offset specified is invalid. 3711H The backplane task could not be registered because the message response handler was not specified. 3811H The backplane task could not be registered because the unsolicited mailbox message handler was not specified.
Page 239: Minor Error Codes For Major Error Code 90H (At Client Plc)
Data response had unexpected size. 9E90H Unrecognized COMMREQ command code. A190H Invalid CRS word memory type. A290H Failed an attempt to update the CRS word. A390H Reserved. A490H Reserved. A590H Reserved. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 240 Chapter 12. Diagnostics Error Status (Hex) Error Description A690H Invalid bit mask. A790H Unable to connect to remote device. A890H Channel Resources in Use. Try the command again; a resource will become available. A990H “Establish Read/Write/Send Info Report Channel” COMMREQ was received while an Abort was in progress.
Page 241: Minor Error Codes For Major Error Code 91H (At Remote Modbus/Tcp Server)
Gateway Target No Response. No response was obtained from target device. Usually means that the device is not present on the network. (Modbus exception code 11 GATEWAY TARGET NO RESPONSE) PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 242: Minor Error Codes For Major Error Code A0H (At Client Plc)
Chapter 12. Diagnostics Minor Error Codes for Major Error Code A0H (at Client PLC) Error Status (Hex) Error Description 01A0H Remote exchange is not healthy. 02A0H Remote exchange is not defined. 03A0H Remote exchange signature does not match. 04A0H Request data length is invalid. 05A0H Response data length is invalid.
Page 243: Using The Egd Management Tool (Rack-Based And Rx7I Embedded)
In addition to the online operations described below, the EGD Management Tool has a number of offline capabilities (such as View/Reports) for doing analysis of the Ethernet Global Data configuration. See the EGD Management Tool help for more information. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 244: Monitoring Egd Devices
Chapter 12. Diagnostics Monitoring EGD Devices The EGD Management Tool monitors the devices on the Ethernet Global Data network provided it has access to that network. To have access to the EGD network, the computer running the EGD Management Tool must have a Network Interface Card that connects to the EGD network.
Page 245: Monitoring Status Of Ethernet Global Data For A Device
Length –the byte size of the exchange as it is stored in the EGD configuration server. Period –the production period for a produced exchange or the consume timeout for a consumed exchange as it is stored in the EGD configuration server. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 246 Chapter 12. Diagnostics Online EGD Statistics Selecting the “Online Statistics” tab displays a list of the exchanges in the device and statistics information about each exchange. The statistics are updated periodically based on a rate in the Options menu. Figure 95: EGD Management Tool Displaying EGD Statistics The statistics data for each exchange has the following information: Exchange –the name of the exchange as it is stored in the EGD configuration server.
Page 247: 12.10 Troubleshooting Common Ethernet Difficulties
CPU to STOP mode, which ceases COMMREQ delivery in order to resume normal Ethernet operation. Then modify the PLC logic application to reduce the COMMREQ traffic to a manageable level. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 248: Plc Timeout Errors
Chapter 12. Diagnostics PLC Timeout Errors PLC timeout errors may occur when the SRTP traffic to the Ethernet Interface exceeds the PLC’s ability to process the requests, or when the PLC is unable to deliver mail to the Ethernet Interface. PLC Timeout errors will take down an SRTP Server connection;...
Page 249: Application Timeout Errors
If the consumer wishes to ignore certain portions of a consumed exchange, be sure that the length of the ignored portions is correct. The ignored portion is specified as a byte count. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 250: Station Manager Lockout Under Heavy Load
Chapter 12. Diagnostics Station Manager Lockout under Heavy Load Sustained heavy EGD and/or SRTP Server load can utilize all processing resources within the Ethernet interface, effectively locking out the Station Manager function. The Station Manager appears inoperative under either local or remote operation. The Ethernet interface always gives higher priority to data communication functions than to the Station Manager.
Page 251: Sluggish Programmer Response After Network Disruption
COMMREQ every logic sweep, can prevent normal SRTP, Modbus, EGD, and Station Manager operation. During such loading, the Ethernet LAN LED may be frozen. Under extreme COMMREQ loading, the Ethernet interface may automatically restart. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 252: Accelerated Egd Consumption Can Interfere With Egd Production
Chapter 12. Diagnostics Accelerated EGD Consumption Can Interfere with EGD Production Consumed EGD exchanges received from the network normally receive accelerated processing for increased overall EGD performance. This accelerated processing can preempt EGD production activity, possibly delaying transmission of produced exchanges to the network. Such delay varies with network loading and the volume of consumed exchanges.
Page 253 Chapter 12. Diagnostics PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 254: Chapter 13 Network Administration
Chapter 13 Network Administration This chapter discusses how devices are identified on the network and how data is routed among devices. The main topics covered are: ▪ IP Addressing ▪ Gateways ▪ Subnets and Supernets 13.1 IP Addressing Each TCP/IP node on a network must have a unique IP address. The TCP/IP Ethernet Interface is such a node, as is a PC running TCP/IP.
Page 255: Ip Addresses Reserved For Private Networks
IP subnets already in use, both on the local networks and on any of its routed subnets connected with a gateway. Never assign a conflicting IP Address or configure duplicate IP subnets. The following examples would be problematic: PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 256 Avoid this by assigning non-overlapping Subnets. Problem example #2: A user wishes to communicate through a routed network to an RX3i CPU with multiple network interfaces (CPE330, in this example). This remote IP device is configured with the following IP parameters: 192.168.0.5...
Page 257 Chapter 13. Network Administration Figure 99: Expected Response Path Figure 100: Actual Response Path PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 258: 13.2 Gateways
Chapter 13. Network Administration 13.2 Gateways Gateways (also known as routers) connect individual physical networks into a system of networks. When a node needs to communicate with a node on another physical network, a gateway transfers the data between the two networks. Networks Connected by a Gateway The following example shows Gateway G connecting Network 1 with Network 2.
Page 259: Subnet Addressing And Subnet Masks
In effect, two bits of the Class B hostid have been used to extend the netid, creating an extended netid, or subnetid. Each unique combination of bits in the part of the hostid where subnet mask bits are 1 specifies a different physical network. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 260 Chapter 13. Network Administration Example: Network Divided into Two Subnets The new network configuration dividing Network 2 into Subnets 2.1 and 2.2 is shown below. 172.16.0.1 Network 1 172.16.0.2 Gateway 172.17.64.3 172.17.64.1 172.17.64.2 (Sub)Network 2.1 172.17.64.4 Gateway 172.17.128.3 172.17.128.2 172.17.128.1 (Sub)Network 2.2 Figure 104: Network 2 Divided into Subnets 2.1 and 2.2 Here, a second network with Hosts D and E has been added.
Page 261 (dotted decimal) (binary) Figure 105: Subnet Mask Used to Effect a Supernet 10.0.116.1 Network 1 10.0.116.2 Gateway 10.0.117.3 10.0.117.1 10.0.117.2 Network 2 Figure 106: Resulting Supernet PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 262 Chapter 13. Network Administration GFK-2224Q January 2017...
Page 264: Appendix A Configuring Advanced User Parameters
Advanced User Parameters (AUPs) are internal operating parameters used by the Ethernet interface. For most applications, the default AUPs should not be changed. Note The RX3i CPE330 (Release 8.60) and CPE400 (Release 9.15) adds support for the following EGD AUP parameters via the Embedded Ethernet interface’s hardware configuration: gp_phase –...
Page 265: A-1 Format Of The Advanced User Parameters File
All parameter names are lowercase. The equal sign (=) is required between the parameter name and parameter value. ▪ Spaces are allowed, but not required, between the parameter name and the equal symbol (=) and between the equal symbol and the parameter value. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 266 Appendix A. Configuring Advanced User Parameters ▪ Character string values are case-sensitive; as with Station Manager commands, uppercase parameter values must be enclosed within a pair of double quotes. ▪ Numeric parameters are entered in decimal or hexadecimal format; hexadecimal values must be terminated with an 'h' or 'H' character.
Page 267: A-2 Advanced User Parameter Definitions
A-2 Advanced User Parameter Definitions Note: The RX3i CPE305/CPE310 embedded Ethernet interface does not support all AUPs listed. AUPs that can be used with CPE305/CPE310 are indicated by a footnote. Other PACSystems Ethernet interfaces support the use of all AUPs listed in the following table.
Page 268 2 = EGD commands have higher priority. gc_accel Enable consumed exchange acceleration. 1 (1H) 0, 1 0= Acceleration disabled; 1= Acceleration enabled. Effective with RX3i CPE310/CPE305 Firmware Release 8.30, all EGD commands are supported except gcmd_pri and gc_accel. GFK-2224Q January 2017...
Page 269 IP header default time–to–live (hop count) 64 (0040H) 0 – 255 (00ffH) ifrag_tmr IP fragment timeout interval in seconds 3 (0003H) 0 – 65535 (ffffH) ICMP/IGMP Parameters (task j) None None PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 270 Appendix A. Configuring Advanced User Parameters Network Interface Parameters (task l) Default Range lduplex0 Ethernet duplex for Controller 0,1,2 0=auto-detect, 1 = half, 2= full) lduplex1a Ethernet duplex for Port 1A 0,1,2 (0=auto-detect, 1=half, 2=full) lduplex1b Ethernet duplex for Port 1B 0,1,2 (0=auto-detect, 1=half, 2=full) lspeed0...
Page 271 This parameter is optional. npoll_timeout The time, in seconds, that the module will wait for a response 1 – 100. from the server. This parameter is optional. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 272 Appendix A. Configuring Advanced User Parameters SNTP Local Time Corrections (LTC) and Daylight Savings Time (DST) Default Range Parameters (task n) – RX7i and Rack mounted ETM support only nltc_offset This signed value indicates the hours and minutes of the offset 0:00 -12:45 to +14:45 of local time from UTC.
Page 273 AUP parameter. Inactivity timeouts established by an SRTP Client on an individual connection will override any AUP specified inactivity timeout on that connection. 0 = SRTP Inactivity Timeout disabled. PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 274: Aups Supported By Rx3I Cpe305/Cpe310 Embedded Ethernet Interface
Advanced User Parameters (AUP), do not request a store to flash as a part of the download when communicating over the CPE305/CPE310 embedded Ethernet port. In this situation you first must store to the RX3i and then initiate a separate request to write to flash.
Page 275 Appendix A. Configuring Advanced User Parameters Network Interface Parameters (task l) lduplex1a lspeed1a SRTP Server Parameters (task v) vconn_tout TCP Parameters (task w) wnodelay wkal_idle wkal_cnt wkal_intvl wsnd_buf wrcv_buf PACSystems* RX7i & RX3i TCP/IP Ethernet Communications User Manual GFK-2224Q...
Page 276 GE Automation and Controls Additional Resources Information Centers For more information, please visit the our web site: Headquarters: 1-800-433-2682 or 1-434-978-5100 www.geautomation.com Global regional phone numbers are available on our web site www.geautomation.com Copyright ©2002-2017 General Electric Company. All Rights Reserved *Trademark of General Electric Company.

This manual is also suitable for:

Rx7i

GE RX3i User Manual

Contact Information

Table of Figures

Chapter 1 Introduction

Revisions in this Manual

Other Pacsystems Manuals

Ethernet Interfaces for Pacsystems Controllers

Ethernet Redundancy Operation

Chapter 2 Installation and Start-Up: Rx3I Embedded Interface

Rx3I Embedded Ethernet Interface Indicators

Ethernet Port Connector

Pinging TCP/IP Ethernet Interfaces on the Network

Chapter 3 Installation and Start-Up: Rack-Based and Rx7I Embedded Interface

Ethernet Interface Controls and Indicators

Module Installation

Ethernet Port Connectors

Station Manager Port

Verifying Proper Power-Up of the Ethernet Interface after Configuration

Pinging TCP/IP Ethernet Interfaces on the Network

Ethernet Plug-In Applications

Chapter 4 Configuration

Rx3I Embedded Ethernet Interfaces

Rack-Based and Rx7I Embedded Interfaces

Chapter 5 Ethernet Global Data

Ethernet Global Data Operation

EGD Exchanges

Sending an Ethernet Global Data Exchange to Multiple Consumers

Ethernet Global Data Timing

Time-Stamping of Ethernet Global Data Exchanges

Effect of PLC Modes and Actions on EGD Operations

Monitoring Ethernet Global Data Exchange Status

Chapter 6 Programming EGD Commands

General Use of EGD Commands

Using EGD Commands in a Redundancy System

COMMREQ Format for Programming EGD Commands

COMMREQ Status for the EGD Commands

Read PLC Memory (4000)

Write PLC Memory (4001)

Read EGD Exchange (4002)

Write EGD Exchange (4003)

Masked Write to EGD Exchange (4004)

Chapter 7 Programming SRTP Channel Commands

SRTP Channel Commands

COMMREQ Format for Programming Channel Commands

Programming for Channel Commands

Monitoring Channel Status

Chapter 8 Modbus/Tcp Server

Reference Mapping

Modbus Function Codes

Chapter 9 Modbus/Tcp Client

The Communications Request

COMMREQ Function Block and Command Block

Modbus/Tcp Channel Commands

Status Data

Controlling Communications in the Ladder Program

Differences between Series 90 and Pacsystems Modbus/Tcp Channels

Chapter 10 OPC UA Server

10.1 Application Logic to Control the OPC UA Server

Chapter 11 Rx7I PLC Monitoring Via the Web

11.1 System Requirements

11.2 Disabling Pop-Up Blocking

11.3 Web Server Operation in a Redundant System

Standard Web

Downloading PLC Web

Viewing the Rx7I PLC Web

Chapter 12 Diagnostics

12.1 What to Do if You Cannot Solve the Problem

12.2 Diagnostic Tools Available for Troubleshooting

States of the Ethernet Interface (Rack-Based and Rx7I Embedded Interfaces)

EOK LED Blink Codes for Hardware Failures (Rack-Based and Rx7I Embedded Interfaces)

12.5 Controller Fault Table

12.6 Monitoring the Ethernet Interface Status Bits

12.7 Monitoring the FT Output of the COMMREQ Function Block

12.8 Monitoring the COMMREQ Status Word

Using the EGD Management Tool (Rack-Based and Rx7I Embedded)

12.10 Troubleshooting Common Ethernet Difficulties

Chapter 13 Network Administration

13.1 IP Addressing

13.2 Gateways

13.3 Subnets and Supernets