/*MBDemo03: Communicate with a Modbus/RTU slave device (PLC) Compiler: BC++ 3.1 Compile mode: large Project: user.c v7000.c ..\LIB\7188EL.Lib ..\LIB\TCPIPL.Lib ..\LIB\VCOM_NNNN.Lib, with NNNN being the lib file's version. ..\LIB\MBTCPNNN.Lib, with NNN being the lib file's version. Communication: Modbus Master <= Modbus/TCP => Ethernet port of 7188EX <==> [Converter Kernel] <==> COM2 of 7188EX <==> Modbus/RTU slave device (PLC) Hardware: 7188EX + Modbus/RTU slave device (PLC) Memory mapping iMemory_DI[00]~[49] <====> PLC DI register [100]~[149] iMemory_DO[00]~[49] <====> PLC DO register [100]~[149] iMemory_AI[00]~[49] <====> PLC AI register [100]~[149] iMemory_AO[00]~[49] <====> PLC AO register [100]~[149] Refer 7188e\TCP\Doc\[Big5|Eng|Gb2312]\Vxcomm.htm 7188e\TCP\Xserver\Xserver.htm 7188e\TCP\Xserver\Function.htm to get more information. [25,Oct,2002] by Kevin [24,May,2004] by Kevin Correct comments of ScanUserProcess [13,Mar,2005] by Kevin Update Xserver library from 3.0.9 to 3.2.1 Needs to add two functions: PortUserStart(in user.c), Port9999Start(in V7000.c). [2006,Feb,17] by Kevin Use new I/O memory mapping method. */ #include #include "..\lib\7188e.h" #include "..\lib\vxcomm.h" #include "..\Lib\MBTCP.h" // Modbus/TCP Head file for I-7188E int iScanCOMPort=1; // of Modbus Kernel int iScanUserProcess=0; int ScanUserProcess(int iProcess); //The I/O memory mapping unsigned char far iMemory_DI[100]; unsigned char far iMemory_DO[100]; int far iMemory_AI[100]; int far iMemory_AO[100]; void UserCount(void) { // user's timer trigger function // // In this function cannot use any function that will use the hardware signal "clock", // Such as: // 1. ClockHigh(),ClockLow(), ClockHighLow(), // 2. Any EEPROM functions. // 3. Any 5DigitLed functions. // 4. Any NVRAM function. // 5. Any RTC function.(GetTime(),SetTime(),GetDate(),SetDate()) // // refer to demo9 for example code } void UserInit(void) { /* In this function, user CAN: 1. initialize user's program. 2. set time interval for calling UserCount(). 3. set initial value of I/O or variables for UserLoopFun(). 4. set initial value of I/O or variables for another functions. 5. change the default TCP PORT 10000/9999/502 to others value. [after vcom3004.lib] Syntax: Port10000=newport_10000; for calling UserCmd (user.c) Port9999=newport_9999; for calling VcomCmd7000 (v7000.c) Port502=newport_502; for calling VcomCmdModbus (vModbus.c) [after vcom3002.lib] PortUser=newport_User; for calling VcomCmdUser (user.c) [after vcom3005.lib] Default port value: Port10000=10000; Port9999=9999; Port502=502; PortUser=0; If the port value is 0, Xserver will not listen that port. That means the port will be disable. */ int iRet; //======= Begin of Modbus Kernel ======= iRet=InitModbus(iMemory_DI,iMemory_DO,iMemory_AI,iMemory_AO); if(iRet==0) { // Initial Modbus configuration success. } else { // Initial Modbus configuration failure. } //======= End of Modbus Kernel ======= //Configure the COM port that links to the PLC. SetBaudrate(2,115200L); SetDataFormat(2,8,0,1); Set_COMEnableMode(2, _Programming); Port9999=0; //Disable listening TCP port 9999 to speed up 7188E. } void UserLoopFun(void) { //======= Begin of Modbus Kernel ======= if(mtModbusPort[iScanCOMPort].EnableMode==_ModbusRTU_Slave) CheckModbusRTURequest(iScanCOMPort); // Is any request from Modbus/RTU Master ? if(mtModbusPort[iScanCOMPort].EnableMode==_ModbusASCII_Slave) CheckModbusASCIIRequest(iScanCOMPort); // Is any request from Modbus/ASCII Master ? if(mtModbusPort[iScanCOMPort].EnableMode==_ModbusRTU_Gateway) { SendModbusRequest(iScanCOMPort); // Passes request to modbus slave device. CheckResponseTimeout(iScanCOMPort); // If response timeout, sets iModbusAction // to IDLE status. CheckModbusResponse(iScanCOMPort); // Is any response from modbus slave device? SendModbusResponse(iScanCOMPort); // Passes response to Modbus/RTU Master. } iScanCOMPort++; if(iScanCOMPort>iTotalCOMPort) iScanCOMPort=1; //======= End of Modbus Kernel ======= iScanUserProcess=ScanUserProcess(iScanUserProcess); } int UserCmd(unsigned char *Cmd,unsigned char *Response) { sprintf(Response,"%s",Cmd); return 1; // return ok } int VcomUserBinaryCmd(TCPREADDATA *p) { /* VXCOMM.EXE 2.6.12(09/04/2001) or later will support this function. TCP PORT 10000, command 23 will call this function. user can get the following message: p->ReadUartChar : the buffer store the command data(include "23") p->Length : the command data length(include the two byte "23") p->Socket : the socket number that receive the command, that is when the user function want return message to the client, just use the socket to send data. use: VcomSendSocket(p->Socket,pdata,datalength); */ VcomSendSocket(p->Socket,"User-defined command(23)",24); // return 24 bytes. return 1; /* any value will be accept */ } void PortUserStart(int skt) { /* XS8_3200.Lib Version 3.2.00 (20,Apr,2004) or later version supports this function. When a TCP/IP client connects to the 7188E/8000E via the user's defined port(PortUser), the Xserver calls the function once. You can use function VcomSendSocket to send a message to the client when a connection is established. For example: VcomSendSocket(skt,"Connection is established.",26); //return 26 bytes. skt: socket number assigned to the TCP/IP client. */ skt=skt; //do nothing } int VcomCmdUser(TCPREADDATA *p) { /* VCOM3005 (Feb,22,2002) or later will call this function for PortUser. When packets received by TCP PORT PortUser(user defined) of 7188E/8000E, Xserver will call this function. user can get the following message: p->ReadUartChar : the buffer store the command data. Maximum length of p->ReadUartChar is 32767 bytes. p->Length : the command data length. p->Socket : the socket number that receive the command, that is when the user function wants return message to the client, just use the socket to send data. usage: VcomSendSocket(p->Socket,pdata,datalength); */ /* here just send back the command to the client. */ VcomSendSocket(p->Socket,p->ReadUartChar,p->Length); return 1; /* any value will be accept */ } //===========================================================// // Functions about Modbus // //===========================================================// /*******************************/ /* [ScanUserProcess] */ /* for 7188E/7188XA/7188XB */ /* 8000 */ /* version 1.3.0 */ /* date: 29,Sep,2005 */ /*******************************/ int ScanUserProcess(int iProcess) { /* iProcess: executes which process? return: executes which process next time? In MBDemo03, following code can map DO, DI, AO, AI registers of the Modbus/RTU (or Modbus/ASCII) slave device (PLC) to iMemory_DO, iMemory_DI,iMemory_AO, iMemory_AI continuously. If the register on the PLC is changed, 7188/8000 can get latest status after 4 scan processes. */ int iPort,iRet,i; int iNextProcess; switch(iProcess) { case 0: // Add user's process here // For example, sends modbus request to modbus/slave device // to read DI iPort=2; if(mtModbusPort[iPort].EnableMode==_Programming) { // Read PLC DI[100]~[149] iRet=ModbusRTU_Master(iPort,1,2,0,100,50,500,1); // COM port, NetID, FC=2 to read DI, iMemory_DI base address, // device memory base address, I/O count. // Timeout = 500 ms //Print the DI data (only first 10 data) if(iRet==0) { printCom1("Modbus RTU read DI success"); for(i=0;i<10;i++) printCom1("DI[%02d]=%d ",i,iMemory_DI[i]); printCom1("\n\r"); } else if(iRet>0 && iRet<256) printCom1("DI error code return by Modbus/RTU device is %d\n\r", iRet); else if(iRet<0) printCom1("Modbus RTU read DI error code=%d\n\r", iRet); } iNextProcess=1; break; case 1: // Add user's process here // For example, sends modbus request to modbus/slave device // to write DO iPort=2; if(mtModbusPort[iPort].EnableMode==_Programming) { iMemory_DO[0]=0; iMemory_DO[1]=1; iMemory_DO[2]=0; iMemory_DO[3]=1; iMemory_DO[4]=0; // Write to PLC DO[100]~[149] iRet=ModbusRTU_Master(iPort,1,15,0,100,50,500,1); // COM port, NetID, FC=15 to write DO, iMemory_DO base address, // device memory base address, I/O count. // Timeout = 500 ms if(iRet==0) { printCom1("Modbus RTU write DO success\n\r"); } else if(iRet>0 && iRet<256) printCom1("DO error code return by Modbus/RTU device is %d\n\r", iRet); else if(iRet<0) printCom1("Modbus RTU write DO error code=%d\n\r", iRet); } iNextProcess=2; break; case 2: // Add user's process here // For example, sends modbus request to modbus/slave device // to read AI iPort=2; if(mtModbusPort[iPort].EnableMode==_Programming) { // Read PLC AI[100]~[107] iRet=ModbusRTU_Master(iPort,1,4,0,100,8,500,1); // COM port, NetID, FC=4 to read AI, iMemory_AI base address, // device memory base address, I/O count. // Timeout = 500 ms if(iRet==0) { printCom1("Modbus RTU read AI success"); for(i=0;i<8;i++) printCom1("AI[%02d]=%04X ",i,iMemory_AI[i]); printCom1("\n\r"); } else if(iRet>0 && iRet<256) printCom1("AI error code return by Modbus/RTU device is %d\n\r", iRet); else if(iRet<0) printCom1("Modbus RTU read AI error code=%d\n\r", iRet); } iNextProcess=3; break; case 3: // Add user's process here // For example, sends modbus request to modbus/slave device // to read AO iPort=2; if(mtModbusPort[iPort].EnableMode==_Programming) { iMemory_AO[0]=0x0000; iMemory_AO[1]=0x1111; iMemory_AO[2]=0x2222; iMemory_AO[3]=0x3333; iMemory_AO[4]=0x4444; iMemory_AO[5]=0x5555; iMemory_AO[6]=0x6666; iMemory_AO[7]=0x7777; //Write PLC AO[100]~[107] iRet=ModbusRTU_Master(iPort,1,16,0,100,8,500,1); // // COM port, NetID, FC=16 to write AO, iMemory_AO base address, // device memory base address, I/O count. // Timeout = 500 ms if(iRet==0) { printCom1("Modbus RTU write AO success\n\r"); } else if(iRet>0 && iRet<256) printCom1("AO error code return by Modbus/RTU device is %d\n\r", iRet); else if(iRet<0) printCom1("Modbus RTU write AO error code=%d\n\r", iRet); } iNextProcess=0; break; default: iNextProcess=0; break; } return iNextProcess; } void Modbus_Request_Event(char* CommandData,int* CommandLength) { /* Modbus_Request_Event is supported since version 1.6.8 [2007,03,13]. char* CommandData: For Modbus/TCP, it includes 6 leading bytes. (needful) For Modbus/RTU, it includes 6 leading bytes. (needless) int* CommandLength: For Modbus/TCP, it includes 6 leading bytes. For Modbus/RTU, it includes 6 leading bytes. */ /* Example code */ //int i; //printCom1("FC:%2d StartAddress:%3d IOCount:%4d\n\r",iModbusRequest_Fun, iModbusRequest_Addr,iModbusRequest_IOCount); //printCom1("Modbus Request\n\r In==>"); //for(i=0;i<*CommandLength;i++) // printCom1("[%02X] ",CommandData[i]&0xFF); } void Modbus_Response_Event(char* ResponseData,int* ResponseLength) { /* char* ResponseData: For Modbus/TCP, it includes 6 leading bytes. For Modbus/RTU, it doesn't include 6 leading bytes int* CommandLength: For Modbus/TCP, it includes 6 leading bytes. For Modbus/RTU, it doesn't include 6 leading bytes */ //If you want to change the content of the ResponseData, //you have to do 2 steps for Modbus/TCP or Modbus/RTU. //Step1: Change content (Note:you must know the modbus protocol well) //ResponseData[6]=0x19; //ResponseData[7]=0x75; //ResponseData[8]=0x04; //ResponseData[9]=0x01; //Step2: Update data length //*ResponseLength=10; //int i; //printCom1("\n\r Out==>"); //for(i=0;i<*ResponseLength;i++) // printCom1("[%02X] ",ResponseData[i]&0xFF); //printCom1("\n\r"); }