Lenze I/O system 1000 - Page 576

Lenze · I/O system 1000 · Reference Manual · DMS 5.0 EN · 09/2016 · TD17 576
10 Modbus TCP communication
10.2 Access to the I/O system 1000
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Read n words
0x03: Read n words from the master output range 4x.
0x04: Read n words from the master input range 3x.
Command frame:
Response message:
Write 1 bit
Code 0x05: Write 1 bit in the master output range 0x.
A status is changed under "Status bit" with the following values:
"Status bit" = 0x0000
 bit = 0
"Status bit" = 0xFF00
 bit = 1
Command frame:
Response message:
Write 1 word
Code 0x06: Write 1 word in the master output range 4x.
Command frame:
Response message:
Modbus TCP Header Slave
Address
Function
code
Address
Word
Number
Words
x x 0 0 0 6
6 byte 1 byte 1 byte 1 word 1 word
Modbus TCP Header Slave
Address
Function
code
Number of
read bytes
Data
1st word
Data
2. word
...
x x 0 0 0
6 byte 1 byte 1 byte 1 word 1 word
max. 126 words
Modbus TCP Header Slave
Address
Function
code
Address
Bit
Status
Bit
x x 0 0 0 6
6 byte 1 byte 1 byte 1 word 1 word
Modbus TCP Header Slave
Address
Function
code
Address
Bit
Status
Bit
x x 0 0 0 6
6 byte 1 byte 1 byte 1 word 1 word
Modbus TCP Header Slave
Address
Function
code
Address
Word
Value
Word
x x 0 0 0 6
6 byte 1 byte 1 byte 1 word 1 word
Modbus TCP Header Slave
Address
Function
code
Address
Word
Value
Word
x x 0 0 0 6
6 byte 1 byte 1 byte 1 word 1 word