REXROTH EFC 3600 - Page 206

Function 0x10: Write N register words, range 1 ~ 16
Example: To modify 2 continuous registers start from 0114H with words 0032H
and 0032H with slave frequency converter address 01H. The frame structure is
described in the tables below:
Message start Transmission time for 3.5 bytes
Slave address 01H
ModBus function code 10H
Higher byte of write register start address 01H
Lower byte of write register start address 14H
Higher byte of register number 00H
Lower byte of register number 02H
Bytes of data 04H
Higher byte of data in register 0109H 00H
Lower byte of data in register 0109H 32H
Higher byte of data in register 010AH 00H
Lower byte of data in register 010AH 32H
CRC lower byte DEH
CRC higher byte DAH
Message end Transmission time for 3.5 bytes
Tab. 13-19: Function 0x10_Request from RTU master
Message start Transmission time for 3.5 bytes
Slave address 01H
ModBus function code 10H
Higher byte of write register start address 01H
Lower byte of write register start address 14H
Higher byte of register number 00H
Lower byte of register number 02H
CRC lower byte 00H
CRC higher byte 30H
Message end Transmission time for 3.5 bytes
Tab. 13-20: Function 0x10_Response from RTU slave
Function 0x17: Read/Write N register words, range 1 ~ 16
Example: To read data in 2 continuous registers starting from address 0114H,
write 00C8H and 00C8H to 2 continuous registers starting from address 0117H.
The frame structure is described in the tables below:
Bosch Rexroth AG
Communication Protocols
EFC 3600
192/259
DOK-RCON03-EFC-3600***-IT03-EN-P