Basic Operation 23
Doc: HMSI-27-309, Rev. 3.11Anybus Communicator PROFINET User Manual
2.5 Modbus-TCP (Read-Only)
2.5.1 General
The Modbus-TCP protocol is an implementation of the standard Modbus protocol running on top of
TCP/IP. The same function codes and addressing model are used. The built in Modbus-TCP server pro-
vides read-only access to the input and output data areas via a subset of the functions defined in the
Modbus-TCP specification.
All Modbus-TCP messages are received/transmitted on TCP port no. 502. For detailed information re-
garding the Modbus-TCP protocol, consult the Open Modbus Specification.
2.5.2 Data Representation (Modbus-TCP Register Map)
The following function codes are implemented:
The Input & Output Data areas are mapped to Modbus registers as follows:.
Note: If enabled, the control and status registers occupies input register 0x0000 and output register
0x0000.
2.5.3 Supported Exception codes
Modbus Function Function Code Associated with No. of I/O:s or data points per command
Read Input Registers 4 Input Data area
(0x000....0x1FF)
1 - 125 registers
Read Multiple Registers 3 Output Data area
(0x200...0x3FF)
1 - 125 registers
Register Type Register # Memory Location Area Comments
Input Registers
(3xxxx)
0x0000 0x000...0x001 Input Data area (Status Register)
0x0001 0x002...0x003 -
0x0002 0x004...0x005 -
0x0003 0x006...0x007 -
... ... -
0x00FF 0x1FE...0x1FF -
Output Registers
(4xxxx)
0x0000 0x200...0x201 Output Data area (Control Register)
0x0001 0x202...0x203 -
0x0002 0x204...0x205 -
0x0003 0x206...0x207 -
... ... -
0x00FF 0x3FE...0x3FF -
Code Name Description
0x01 Illegal function The function code in the query is not supported
0x02 Illegal data address The data address received in the query is outside the initialized memory area
0x03 Illegal data value The data in the request is illegal