Siemens SINAMICS S120 - Write and Read Access Using Function Codes

Communication
11.4 Communication via MODBUS TCP
Drive functions
864 Function Manual, 11/2017, 6SL3097-4AB00-0BP5
11.4.5
Write and read access using function codes
Function codes used
For data exchange between the controller and device, predefined function codes are used
for communication via Modbus.
The Control Unit uses the following Modbus function codes:
● FC 03: Holding register to read data from the inverter
● FC 06: Write single register to write to individual register
● FC 16: Write to multiple registers to write to several registers
Structure of a Modbus TCP message
Figure 11-50 Individual components, including Modbus Application Header (MBAP) and function code
Structure of a read request via Modbus function code 03 (FC 03)
Any valid register address is permitted as the start address.
Via FC 03, the control can address more than one register with one request. The number of
addressed registers is contained in bytes 10 and 11 of the read request.
Table 11- 22 Structure of a read request for device number 17, example
Value
Byte
Description
MBAP header
03 h
00 h
6D h
00 h
02 h
7
8
9
10
11
Register start address "High" (register 40110)
Register start address "Low"
Number of registers "High" (2 registers: 40110; 40111)
number of registers "Low"