Ethernet Configuration. Schneider Electric Modicon M258

Modicon M258 Logic Controller

Ethernet Configuration

EIO0000004135 09/2020

Ethernet Configuration Chapter 11

Ethernet Configuration

Introduction

This chapter describes how to configure the Ethernet network interface of the Modicon M258 Logic

Controller.

What Is in This Chapter?

This chapter contains the following sections:

Section

11.1

11.2

11.3

Ethernet Services

Firewall Configuration

Ethernet Optional Devices

Topic Page

138

174

184

EIO0000004135 09/2020

137

Ethernet Configuration

Ethernet Services Section 11.1

Ethernet Services

What Is in This Section?

This section contains the following topics:

Topic

Presentation

IP Address Configuration

Modbus TCP Client/Server

Web Server

FTP Server

FTP Client

SNMP

149

171

172

173

Page

139

141

147

138

EIO0000004135 09/2020

Ethernet Configuration

Presentation

Ethernet Services

The controller supports the following services:



Modbus TCP Server













Modbus TCP Client

Web Server

FTP Server

SNMP

(

(

(

EtherNet/IP Device (

(

(

see page 173 )

see page 147 see page 147

see page 149

see page 171

Modbus TCP Slave Device

)

)

see page 186

(

)

)

)

see page 209 )

Ethernet Protocols

The controller supports the following protocols:



IP (Internet Protocol)











UDP (User Datagram Protocol)

TCP (Transmission Control Protocol)

ARP (Address Resolution Protocol)

ICMP (Internet Control Messaging Protocol)

IGMP (Internet Group Management Protocol)

Connections

This table shows the maximum number of connections:

Connection Type

Modbus Server

Modbus Client

EtherNet/IP Target

FTP Server

Web Server

Machine Expert Protocol (EcoStruxure Machine

Expert software, trace, Web visualization, HMI devices)

4

10

8

Maximum Number of Connections

8

8

16

EIO0000004135 09/2020

139

Ethernet Configuration

Each connection based on TCP manages its own set of connections as follows:

1. When a client tries to open a connection that exceeds the poll size, the controller closes the oldest connection.

2. If all connections are busy (exchange in progress) when a client tries to open a new one, the new connection is denied.

3. All server connections stay open as long as the controller stays in operational states ( RUNNING ,

STOPPED , HALT ).

4. All server connections are closed when leaving or entering operational states ( RUNNING ,

STOPPED , HALT ), except in case of power outage (because the controller does not have time to close the connections).

Services Available

With an Ethernet communication, the IEC VAR ACCESS service is supported by the controller.

With the IEC VAR ACCESS service, data can be exchanged between the controller and an HMI.

The NetWork variables service is also supported by the controller. With the NetWork variables service, data can be exchanged between controllers.

NOTE: For more information, refer to the EcoStruxure Machine Expert Programming Guide.

140

EIO0000004135 09/2020

Ethernet Configuration

IP Address Configuration

Introduction

There are different ways to assign the IP address to the added Ethernet interface of the controller:



Address assignment by DHCP server







Address assignment by BOOTP server

Fixed IP address

Post configuration file

( see page 235

has priority over the others.

)

. If a post configuration file exists, this assignment method

The IP address can also be changed dynamically through the:



Controller Selection tab in EcoStruxure Machine Expert

 changeIPAddress function block

( see page 265 )

NOTE: If the attempted addressing method is unsuccessful, the link uses a default IP address

( see page 144 )

derived from the MAC address.

Carefully manage the IP addresses because each device on the network requires a unique address. Having multiple devices with the same IP address can cause unintended operation of your network and associated equipment.

WARNING

UNINTENDED EQUIPMENT OPERATION













Verify that there is only one master controller configured on the network or remote link.

Verify that all devices have unique addresses.

Obtain your IP address from your system administrator.

Confirm that the IP address of the device is unique before placing the system into service.

Do not assign the same IP address to any other equipment on the network.

Update the IP address after cloning any application that includes Ethernet communications to a unique address.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: Verify that your system administrator maintains a record of assigned IP addresses on the network and subnetwork, and inform the system administrator of any configuration changes performed.

EIO0000004135 09/2020

141

Ethernet Configuration

Address Management

This diagram shows the different types of address systems for the controller:

142

NOTE: If a device programmed to use the DHCP or BOOTP addressing methods is unable to contact its respective server, the controller uses the default IP address. It repeats its request constantly.

The IP process restarts in the following cases:









Controller reboot

Ethernet cable reconnection

Application download (if IP parameters change)

DHCP or BOOTP server detected after a prior addressing attempt was unsuccessful.

EIO0000004135 09/2020

Ethernet Configuration

In the Devices tree, double-click Ethernet:

Ethernet Configuration

EIO0000004135 09/2020

143

Ethernet Configuration

This table describes the configured parameters:

Configured Parameters

Interface Name

Network Name

IP Address by DHCP

IP Address by BOOTP

Fixed IP Address

Ethernet Protocol

Transfer Rate

Description

Name for the network link.

Used as device name to retrieve IP address through

DHCP, maximum 15 characters.

IP address is obtained by DHCP server.

IP address is obtained by BOOTP server.

IP address, Subnet Mask, and Gateway Address are defined by the user.

Protocol type used (Ethernet 2 or IEEE 802.3)

NOTE: If you change the Ethernet Protocol, a power cycle is required before it will be recognized by the controller.

Speed and Duplex are in auto-negotiation mode.

Default IP Address

The IP address by default is 10.10.x.x.

The last two fields in the default IP address are composed of the decimal equivalent of the last two hexadecimal bytes of the MAC address of the port.

The MAC address of the port can be retrieved on the label placed on the front side of the controller.

The default subnet mask is Default Class A Subnet Mask of 255.0.0.0.

NOTE: A MAC address is written in hexadecimal format and an IP address in decimal format.

Convert the MAC address to decimal format.

Example: If the MAC address is 00.80.F4.01.80.F2, the default IP address is 10.10.128.242.

Address Classes

The IP address is linked:

 to a device (the host)

 to the network to which the device is connected

An IP address is always coded using 4 bytes.

The distribution of these bytes between the network address and the device address may vary.This distribution is defined by the address classes.

144

EIO0000004135 09/2020

Ethernet Configuration

The different IP address classes are defined in this table:

Address Class

Class A

Class B

Class C

Class D

Class E

1

1

1

1

Byte1

0

1

1

Network ID

0 Network ID

1

0

1

1

Network ID

0

1

Multicast Address

0

Byte 2

Host ID

Byte 3

Host ID

Byte 4

Host ID

Address reserved for subsequent use

Subnet Mask

The subnet mask is used to address several physical networks with a single network address. The mask is used to separate the subnetwork and the device address in the host ID.

The subnet address is obtained by retaining the bits of the IP address that correspond to the positions of the mask containing 1, and replacing the others with 0.

Conversely, the subnet address of the host device is obtained by retaining the bits of the IP address that correspond to the positions of the mask containing 0, and replacing the others with 1.

Example of a subnet address:

IP address

Subnet mask

192 (11000000)

255 (11111111)

Subnet address 192 (11000000)

1 (00000001)

255 (11111111)

1 (00000001)

17 (00010001)

240 (11110000)

16 (00010000)

11 (00001011)

0 (00000000)

0 (00000000)

NOTE: The device does not communicate on its subnetwork when there is no gateway.

Gateway Address

The gateway allows a message to be routed to a device that is not on the current network.

If there is no gateway, the gateway address is 0.0.0.0.

The gateway address must be defined on Ethernet_1 interface. The traffic to unknown networks is sent through this interface.

EIO0000004135 09/2020

145

Ethernet Configuration

Security Parameters

This table describes the different security parameters:

Security Parameters

Discovery protocol

FTP Server

Machine Expert protocol

Modbus Server

SNMP protocol

Web Server (HTTP)

WebVisualisation protocol

Description

This parameter deactivates Discovery protocol. When deactivated,

Discovery requests are ignored.

This parameter deactivates the FTP Server of the controller. When deactivated, FTP requests are ignored.

This parameter deactivates the Machine Expert protocol on Ethernet interfaces. When deactivated, every Machine Expert request from every device is rejected, including those from the UDP or TCP connection. Therefore, no connection is possible on Ethernet from a

PC with EcoStruxure Machine Expert, from an HMI target that wants to exchange variables with this controller from Controller Assistant.

This parameter deactivates the Modbus Server of the controller. When deactivated, every Modbus request to the controller is ignored.

This parameter deactivates the SNMP server of the controller. When deactivated, SNMP requests are ignored.

This parameter deactivates the Web Server of the controller. When deactivated, HTTP requests to the controller Web Server are ignored.

This parameter deactivates the Web visualization pages of the controller. When deactivated, HTTP requests to the logic controller

WebVisualisation protocol are ignored.

Default settings

Active

Inactive

Active

Inactive

Inactive

Active

Inactive

146

EIO0000004135 09/2020

Ethernet Configuration

Modbus TCP Client/Server

Introduction

Unlike Modbus serial link, Modbus TCP is not based on a hierarchical structure, but on a client/server model.

The Modicon M258 Logic Controller implements both client and server services so that it can initiate communications to other controllers and I/O devices, and to respond to requests from other controllers, SCADA, HMIs, and other devices. By default, Modbus Server functionality is not active.

Without any configuration, the embedded Ethernet port of the controller supports Modbus server.

The Modbus client/server is included in the firmware and does not require any programming action from the user. Due to this feature, it is accessible in RUNNING, STOPPED and EMPTY states.

Modbus TCP Client

The Modbus TCP client supports the following function blocks from the PLCCommunication library without any configuration:





ADDM

READ_VAR









SEND_RECV_MSG

SINGLE_WRITE

WRITE_READ_VAR

WRITE_VAR

For further information, refer to the Function Block Descriptions. See EcoStruxure Machine Expert

Modbus and ASCCII Read/Write Functions PLCCommunication Library Guide.

EIO0000004135 09/2020

147

Ethernet Configuration

Modbus TCP Server

The Modbus server supports the Modbus requests:

Function Function Code

Dec (Hex)

1 (1)

2 (2)

3 (3)

6 (6)

8 (8)

15 (F)

16 (10)

23 (17)

43 (2B)

–

–

–

–

–

–

Subfunction

Dec (Hex)

–

–

14 (E)

Read digital outputs (%Q)

Read digital inputs (%I)

Read holding register (%MW)

Write single register (%MW)

Diagnostic

Write multiple digital outputs (%Q)

Write multiple registers (%MW)

Read/write multiple registers (%MW)

Read device identification

NOTE: The embedded Modbus server only ensures time-consistency for a single word (2 bytes).

If your application requires time-consistency for more than 1 word, add and configure

( see page 209 )

a Modbus TCP Slave Device so that the contents of the %IW and %QW buffers are time-consistent in the associated IEC task (MAST by default).

Diagnostic Request

This table contains the data selection code list:

Data Selection Code (hex)

00

01

02

03

04

05 - 7E

7F

Description

Reserved

Basic Network Diagnostics

Ethernet Port Diagnostic

Modbus TCP/Port 502 Diagnostics

Modbus TCP/Port 502 Connection Table

Reserved for other public codes

Data Structure Offsets

148

EIO0000004135 09/2020

Ethernet Configuration

Web Server

Introduction

As standard equipment, the controller provides an embedded Web server with a predefined, builtin website. You can use the pages of the website for module setup and control as well as application diagnostics and monitoring. These pages are ready to use with a Web browser. No configuration or programming is required.

The Web server can be accessed by the web browsers listed below:



Google Chrome (version 65.0 or greater)





Mozilla Firefox (version 54 or greater)

Microsoft Internet Explorer (version 11 or greater)

The Web server is limited to 10 TCP connections

( see page 139 )

.

The Web server has full access to your application for reading and writing data and controlling the state of the controller. By enabling the Web server, you enable these functions. You can disable the Web server on an interface by deselecting the Web Server active parameter in the Ethernet

Configuration tab ( see page 143 ) .

The Web server is a tool for reading and writing data, and controlling the state of the controller, with full access to all data in your application. However, if there are security concerns over these functions, you must at a minimum assign a secure password to the Web Server or disable the Web server to help prevent unauthorized access to the application. By enabling the Web server, you enable these functions.

EIO0000004135 09/2020

149

Ethernet Configuration

The Web server allows you to monitor a controller and its application remotely, to perform various maintenance activities including modifications to data and configuration parameters, and change the state of the controller. Care must be taken to ensure that the immediate physical environment of the machine and process is in a state that will not present safety risks to people or property before exercising control remotely.

WARNING

UNINTENDED EQUIPMENT OPERATION











Configure and install the RUN/STOP input for the application, if available for your particular controller, so that local control over the starting or stopping of the controller can be maintained regardless of the remote commands sent to the controller.

Define a secure password for the Web Server and do not allow unauthorized or otherwise unqualified personnel to use this feature.

Ensure that there is a local, competent, and qualified observer present when operating on the controller from a remote location.

You must have a complete understanding of the application and the machine/process it is controlling before attempting to adjust data, stopping an application that is operating, or starting the controller remotely.

Take the precautions necessary to assure that you are operating on the intended controller by having clear, identifying documentation within the controller application and its remote connection.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: The Web server must only be used by authorized and qualified personnel. A qualified person is one who has the skills and knowledge related to the construction and operation of the machine and the process controlled by the application and its installation, and has received safety training to recognize and avoid the hazards involved. No responsibility is assumed by Schneider

Electric for any consequences arising out of the use of this feature.

150

EIO0000004135 09/2020

Ethernet Configuration

Web Server Access

Access to the Web server is controlled by User Rights when they are enabled in the controller. For more information, refer to Users and Groups Tab Description

( see page 72 ) .

To access the Web server you must first connect to the controller with EcoStruxure Machine Expert or Controller Assistant and modify the default user password.

WARNING





UNAUTHORIZED DATA ACCESS

Secure access to the FTP/Web server using User Rights.

If you disable User Rights, disable the FTP/Web server to help prevent any unwanted or unauthorized access to data in your application.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

In order to change the password, go to Users and Groups tab of the device editor. For more information, refer to the EcoStruxure Machine Expert Programming Guide (see SoMachine,

Programming Guide) .

NOTE: The only way to gain access to a controller that has user access-rights enabled and for which you do not have the password(s) is by performing an Update Firmware operation. This clearing of User Rights can only be accomplished by using a USB key to update the controller firmware. In addition, you may clear the User Rights in the controller by running a script (for more information, refer to EcoStruxure Machine Expert Programming Guide memory, but restores the ability to access the Controller.

(see SoMachine,

Programming Guide) ) . This effectively removes the existing application from the controller

EIO0000004135 09/2020

151

Ethernet Configuration

Home Page Access

To access to the website home page shown in the following illustration, type in your navigator the

IP address of the controller, or 90.0.0.1 for a USB connection:

This figure shows the Web Server site login page:

This figure shows the home page of the Web Server site once you have logged in:

152

EIO0000004135 09/2020

Ethernet Configuration

NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial

Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.















WARNING

UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE

OPERATION

Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-

Depth, before connecting the automation system to any network.

Limit the number of devices connected to a network to the minimum necessary.

Isolate your industrial network from other networks inside your company.

Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.

Monitor activities within your systems.

Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.

Prepare a recovery plan including backup of your system and process information.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

Generic Menu Bar

The generic menu bar lets you access the main Web server pages.

The Web Server contains the following pages:

Menu

Home

Documentation

Page Description

Home

( see page 154 )

Home page of the controller Web server page.

Provides access to the tabs:



Monitoring







Diagnostics

Maintenance

Setup

References Link to the brand site.

EIO0000004135 09/2020

153

Ethernet Configuration

Home Page Menu Descriptions:

:

Menu

Monitoring

Diagnostics

Maintenance

Setup

Submenu

Controller Viewer

( see page 157 )







Description

Serial Number

Version (firmware, boot...)

Configuration status

Expansion Viewer

( see page 158 )

Shows the status of expansion modules.

IO Viewer ( see page 162 )

Shows the module with module I/O values.

Oscilloscope

( see page 163 )

Data parameters

( see page 159 )

Displays 2 variables in the form of a recorder-type time chart.

Lets you display and modify controller variables.

Controller

( see page 164 )

Controller status

Ethernet ( see page 165 )

Ethernet status

Serial

( see page 166 )

Profibus

( see page 166 )

FTP

( see page 167 )

Serial line status

Profibus status

Link to the file system server ( /Usr , /bd0 and /Sys folders)

User Management

( see page 169 )

Lets you change user password and customize login message.



Users account management: allows you to remove all passwords from the controller and reset user

 accounts to their default state.

Clone management: lets you include or exclude user access rights when cloning a controller.

Lets you set the Ethernet and serial line parameters.

Post configuration setup

( see page 235 )

EthernetIP configurations

files ( see page 169 )

Lets you set the EthernetIP configuration files.

The following submenu is visible in each tab:

Submenu

Info

Control

Description

Current Controller information



Reference





Device name

Running state

Allows you to Start or Stop the controller

154

EIO0000004135 09/2020

Ethernet Configuration

The Web server allows you to remotely monitor a controller and its application, and to perform various maintenance activities including modifications to data and configuration parameters, and change the state of the controller. Ensure that the immediate physical environment of the machine and process is in a state that will not present safety risks to people or property before exercising control remotely.

WARNING

UNINTENDED EQUIPMENT OPERATION











Configure and install the RUN/STOP input for the application, if available for your particular controller, so that local control over the starting or stopping of the controller can be maintained regardless of the remote commands sent to the controller.

Define a secure password for the Web Server and do not allow unauthorized or otherwise unqualified personnel to use this feature.

Ensure that there is a local, competent, and qualified observer present when operating on the controller from a remote location.

You must have a complete understanding of the application and the machine/process it is controlling before attempting to adjust data, stopping an application that is operating, or starting the controller remotely.

Take the precautions necessary to assure that you are operating on the intended controller by having clear, identifying documentation within the controller application and its remote connection.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: The Web server must only be used by authorized and qualified personnel. A qualified person is one who has the skills and knowledge related to the construction and operation of the machine and the process controlled by the application and its installation, and has received safety training to recognize and avoid the hazards involved. No responsibility is assumed by Schneider

Electric for any consequences arising out of the use of this feature.

EIO0000004135 09/2020

155

Ethernet Configuration

Page Access

This table lists the necessary status of the controller to access different pages:

Menu

Home

Documentation

Monitoring

Diagnostics

Maintenance

Setup

Submenu

Home

References

Controller Viewer

Expansion Viewer

IO Viewer

Oscilloscope

Data parameters

Controller diagnostic

Ethernet diagnostic

Serial diagnostic

Profibus diagnostic

/Usr or /bd0

/Sys X

Post configuration setup X

EthernetIP configurations files

X

X

X

-

X

X

X

-

-

-

X

X

X

Controller State

EMPTY STOPPED

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

RUNNING

X

X

X

X

X

X

-

-

-

-

X

X

X

X

X

HALT

X

156

EIO0000004135 09/2020

Monitoring: Controller Viewer Submenu

The Controller Viewer submenu shows the controller status:

Ethernet Configuration

The Configuration status field can change depending on the controller reference visualized (a

TM258LF42DT in the previous screenshot) and can have the following status:

Configuration Status Description

No error No error detected on the corresponding element.

Error An error is detected on the corresponding element.

EIO0000004135 09/2020

157

Ethernet Configuration

Monitoring: Expansion Viewer Submenu

The Expansion Viewer submenu shows the expansion module status:

158

The following table describes each status code:

20

30

100

200

Status Code

0

10

11

201

202

Description

INACTIVE: module inactive

BOOT: boot state

FWDNLD: firmware download in progress

PREOP: basic initialization

OPERATE: register initialization

ACTIVE: module communication active

ERROR: an error has been detected

UNSUP: unsupported module

NOCFG: no configuration available

EIO0000004135 09/2020

Ethernet Configuration

Monitoring: Data Parameters

Monitoring Web Server Variables

To monitor Web server variables, you must add a Web Data Configuration object to your project.

Within this object, you can select all variables you want to monitor.

This table describes how to add a Web Data Configuration object:

Step

1

2

3

Action

Right click the Application node in the Applications tree tab.

Click Add Object → Web Data Configuration....

Result: The Add Web Data Configuration window is displayed.

Click Add.

Result: The Web Data Configuration object is created and the Web Data Configuration editor is open.

NOTE: As a Web Data Configuration object is unique for a controller, its name cannot be changed.

Web Data Configuration Editor

Click the Refresh button to be able to select variables, this action will display all the variables defined in the application.

EIO0000004135 09/2020

159

Ethernet Configuration

Select the variables you want to monitor in the web server:

160

NOTE: The variable selection is possible only in offline mode.

EIO0000004135 09/2020

Ethernet Configuration

Monitoring: Data Parameters Submenu

The Data Parameters submenu allows you to display and modify variable values:

Element

Add

Description

Adds a list description or a variable

Del Deletes a list description or a variable

Refresh period Refreshing period of the variables contained in the list description (in ms)

Refresh Enables I/O refreshing:



Gray button: refreshing disabled



Orange button: refreshing enabled

Load

Save

Loads saved lists from the controller internal Flash to the Web server page

Saves the selected list description in the controller ( /usr/web or /bd0/web directory)

NOTE: IEC objects ( %IW , %M ,...) are not directly accessible. To access IEC objects you must first group their contents in located registers (refer to Relocation Table

( see page 32 ) ).

EIO0000004135 09/2020

161

Ethernet Configuration

Monitoring: IO Viewer Submenu

The IO Viewer submenu allows you to display and modify the current I/O values:

162

Element

Refresh

1000 ms

<<

>>

Description

Enables I/O refreshing:



Gray button: refreshing disabled



Orange button: refreshing enabled

I/O refreshing period in ms

Goes to previous I/O list page

Goes to next I/O list page

EIO0000004135 09/2020

Ethernet Configuration

Monitoring: Oscilloscope Submenu

The oscilloscope submenu can display up to 2 variables in the form of a recorder time chart:

Element

Reset

Refresh

Load

Save

Item0

Item1

Min

Max

Period(ms)

Description

Erases the memorization

Starts/stops refreshing

Loads parameter configuration of Item0 and Item1

Saves parameter configuration of Item0 and Item1 in the controller

Variable to be displayed

Variable to be displayed

Minimum value of the variable axis

Maximum value of the variable axis

Page refresh period in milliseconds

EIO0000004135 09/2020

163

Ethernet Configuration

Diagnostic: Controller Submenu

The Controller submenu displays information of the current status of the controller:

164

EIO0000004135 09/2020

Diagnostic: Ethernet Submenu

The Ethernet submenu displays Ethernet communication information:

Ethernet Configuration

The Reset Statistic button sets the Ethernet statistics to 0.

EIO0000004135 09/2020

165

Ethernet Configuration

Diagnostics: Serial Submenu

The Serial submenu displays the serial line communication information:

The Reset Statistics button sets the statistics of the serial connections to 0.

Diagnostics: Profibus Submenu

The Profibus submenu is available for controllers with PCI module. It displays the Profibus communication information:

166

EIO0000004135 09/2020

Ethernet Configuration

Maintenance Page

The Maintenance page provides access to the /usr , /bd0 and /sys folders of the controller flash

memory ( see page 28 )

:

Index of /usr or /bd0 :

Index of /sys :

WARNING

UNINTENDED WEB SERVER AND CONTROLLER BEHAVIOR

Do not modify any of the files in the /usr and /sys directories.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

EIO0000004135 09/2020

167

Ethernet Configuration

Setup: Post Conf Submenu

The Post Conf page allows you to update the PostConf

( see page 235 )

file saved on the controller:

168

Step

1

2

3

Action

Click Load.

Modify the parameters ( see page 239 )

.

Click Save.

NOTE: The new parameters will be considered at next Post Configuration file reading

( see page 236 )

.

EIO0000004135 09/2020

Ethernet Configuration

Setup: Ethernet IP configurations File Submenu

The file tree only appears when the Ethernet IP service is configured on the controller.

Index of /usr or /bd0 :

File

My Machine Controller.gz

My Machine Controller.ico

My Machine Controller.eds

Description

GZIP file

Icon file

Electronic Data Sheet file

Maintenance: User Management Submenu

The User Management submenu displays a screen that allows you to access two different actions:



User accounts management:

Allows you to manage user accounts management, removing passwords and returning the user accounts on the controller to default settings.

Click Disable to remove passwords on the controller.

Click OK on the window that appears to confirm. As a result:



Users no longer have to set and enter a password to connect to the controller.



FTP and HTTP connections accept anonymous user connections.

NOTE: The Disable button is only active if the current user has administrative privileges.

Click Reset to default to return the user accounts on the controller to their default setting state.

Click OK on the window that appears to confirm.

NOTE: Connections to FTP and HTTP are blocked until a new password is set.

EIO0000004135 09/2020

169

Ethernet Configuration



Clone management: allows you to control whether user rights are copied and applied to the target controller when cloning a controller with a USB key.

Click Exclude users rights to exclude copying user rights to the target controller when cloning a controller.

NOTE: By default, the users rights are excluded.

Click Include users rights to copy user rights to the target controller when cloning a controller. A popup prompts you to confirm copying the user rights. Click OK to continue.

170

EIO0000004135 09/2020

Ethernet Configuration

FTP Server

Introduction

Any FTP client installed on a computer that is connected to the controller (Ethernet or through USB port), without EcoStruxure Machine Expert installed, can be used to transfer files to and from the data storage area of the controller.

NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial

Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.















WARNING

UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE

OPERATION

Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-

Depth, before connecting the automation system to any network.

Limit the number of devices connected to a network to the minimum necessary.

Isolate your industrial network from other networks inside your company.

Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.

Monitor activities within your systems.

Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.

Prepare a recovery plan including backup of your system and process information.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: Make use of the security-related commands which provide a way to add, edit, and remove a user in the online user management of the target device where you are currently logged in.

The FTP server is deactivated by default.

FTP Access

Access to the FTP server is controlled by User Rights when they are enabled in the controller. For more information, refer to Users and Groups Tab Description

( see page 72 ) .

To access the FTP server you must first connect to the controller with EcoStruxure Machine Expert or Controller Assistant and modify the default user password.

Files Access

See File Organization ( see page 28 )

.

EIO0000004135 09/2020

171

Ethernet Configuration

FTP Client

Introduction

The FtpRemoteFileHandling library provides the following FTP client functionalities for remote file handling:





Reading files

Writing files









Deleting files

Listing content of remote directories

Adding directories

Removing directories

NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial

Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.

WARNING

UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE

OPERATION















Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-

Depth, before connecting the automation system to any network.

Limit the number of devices connected to a network to the minimum necessary.

Isolate your industrial network from other networks inside your company.

Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.

Monitor activities within your systems.

Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.

Prepare a recovery plan including backup of your system and process information.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

For further information, refer to FtpRemoteFileHandling Library Guide.

172

EIO0000004135 09/2020

Ethernet Configuration

SNMP

Introduction

The Simple Network Management Protocol (SNMP) is used to provide the data and services required for managing a network.

The data is stored in a Management Information Base (MIB). The SNMP protocol is used to read or write MIB data. Implementation of the Ethernet SNMP services is minimal, as only the compulsory objects are handled.

SNMP Server

This table presents the supported server objects:

Object sysDescr

Description

Text description of the device

Access

Read

Value

SCHNEIDER M258 Fast Ethernet

TCP/IP

1.3.6.1.4.1.3833.1.7.36

sysObjectID Points to the product reference in the private MIB sysUpTime Time elapsed since the controller was last turned on sysContact Data item used to contact the manager of this node sysName Node administrative name sysLocation Physical location of the product sysService Indicates the type of service provided by this product

Read

Read

Read/Write -

-

Read/Write TM258LF42DT

Read/Write -

Read 79

The size of these character strings is limited to 50 characters.

The values written are saved to the controller via SNMP client tool software. The Schneider Electric software for this is ConneXview. ConneXview is not supplied with the controller or bus coupler. For more details, refer to www.schneider-electric.com.

EIO0000004135 09/2020

173

Ethernet Configuration

Firewall Configuration Section 11.2

Firewall Configuration

Introduction

This section describes how to configure the firewall of the Modicon M258 Logic Controller.

What Is in This Section?

This section contains the following topics:

Topic

Introduction

Dynamic Changes Procedure

Firewall Behavior

Firewall Script Commands

Page

175

177

178

180

174

EIO0000004135 09/2020

Ethernet Configuration

Introduction

Firewall Presentation

In general, firewalls help protect network security zone perimeters by blocking unauthorized access and permitting authorized access. A firewall is a device or set of devices configured to permit, deny, encrypt, decrypt, or proxy traffic between different security zones based upon a set of rules and other criteria.

Process control devices and high-speed manufacturing machines require fast data throughput and often cannot tolerate the latency introduced by an aggressive security strategy inside the control network. Firewalls, therefore, play a significant role in a security strategy by providing levels of protection at the perimeters of the network. Firewalls are an important part of an overall, system level strategy.

NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial

Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.















WARNING

UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE

OPERATION

Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-

Depth, before connecting the automation system to any network.

Limit the number of devices connected to a network to the minimum necessary.

Isolate your industrial network from other networks inside your company.

Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.

Monitor activities within your systems.

Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.

Prepare a recovery plan including backup of your system and process information.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

Firewall Configuration

There are three ways to manage the controller firewall configuration:



Static configuration





Dynamic changes

Application settings

Script files are used in the static configuration and for dynamic changes.

EIO0000004135 09/2020

175

Ethernet Configuration

Static Configuration

The static configuration is loaded at the controller boot.

The controller firewall can be statically configured by managing a default script file located in the controller. The path to this file is /usr/Cfg/FirewallDefault.cmd

.

Dynamic Changes

After the controller boot, the controller firewall configuration can be changed by the use of script files.

There are two ways to load these dynamic changes using:



A physical USB memory key.



A function block

( see page 177 )

in the application.

176

EIO0000004135 09/2020

Ethernet Configuration

Dynamic Changes Procedure

Using a USB Memory Key

This table describes the procedure to execute a script file from a USB memory key:

Step

1

2

3

Action

Create a valid script file

( see page 180

For example, name the script file

) .

FirewallMaintenance.cmd

.

Load the script file on the USB memory key.

For example, load the script file in the usr/Cfg folder.

In the file Sys/Cmd/Script.cmd

, add a code line with the command

Firewall_install "/pathname/FileName"

For example, the code line is

Firewall_install "/bd0/usr/cfg/FirewallMaintenance.cmd"

4 Insert the USB memory key on the controller.

Using a Function Block in the Application

This table describes the procedure to execute a script file from an application:

Step

1

2

3

Action

Create a valid script file

( see page 180

For example, name the script file

) .

FirewallMaintenance.cmd

.

Load the script file in the controller memory.

For example, load the script file in the usr/Syslog folder with FTP.

Use an ExecuteScript function block.

For example, the [SCmd] input is 'Firewall_install

"/usr/Syslog/FirewallMaintenance.cmd"'

EIO0000004135 09/2020

177

Ethernet Configuration

Firewall Behavior

Introduction

The firewall configuration depends on the action done on the controller and the initial configuration state. There are five possible initial states:





There is no default script file in the controller.

A correct script file is present.







An incorrect script file is present.

There is no default script file and the application has configured the firewall.

A dynamic script file configuration has already been executed.

No Default Script File

If...

Boot of the controller

Execute dynamic script file

Execute dynamic incorrect script file

Download application

Then ...

Firewall is not configured. No protection is activated.

Firewall is configured according to the dynamic script file.

Firewall is not configured. No protection is activated.

Firewall is configured according to the application settings.

Default Script File Present

If...

Boot of the controller

Execute dynamic script file

Execute dynamic incorrect script file

Download application

Then ...

Firewall is configured according to the default script file.

The whole configuration of the default script file is deleted.

Firewall is configured according to the dynamic script file.

Firewall is configured according to the default script file.

The dynamic script file is not taken into account.

The whole configuration of the application is ignored.

Firewall is configured according to the default script file.

Incorrect Default Script File Present

If...

Boot of the controller

Execute dynamic script file

Execute dynamic incorrect script file

Download application

Then ...

Firewall is not configured. No protection is activated

Firewall is configured according to the dynamic script file.

Firewall is not configured. No protection is activated.

Firewall is configured according to the application settings.

178

EIO0000004135 09/2020

Ethernet Configuration

Application Settings with No Default Script File

If...

Boot of the controller

Execute dynamic script file

Execute dynamic incorrect script file

Download application

Then ...

Firewall is configured according to the application settings.

The whole configuration of the application settings is deleted.

Firewall is configured according to the dynamic script file.

Firewall is configured according to the application settings. The dynamic script file is not taken into account.

The whole configuration of the previous application is deleted.

Firewall is configured according to the new application settings.

Execute Dynamic Script File Already Executed

If...

Boot of the controller

Execute dynamic script file

Execute dynamic incorrect script file

Download application

Then ...

Firewall is configured according to the dynamic script file configuration (see note).

The whole configuration of the previous dynamic script file is deleted.

Firewall is configured according to the new dynamic script file.

Firewall is configured according to the previous dynamic script file configuration. The dynamic incorrect script file is not taken into account.

The whole configuration of the application is ignored

Firewall is configured according to the dynamic script file.

NOTE: If a USB memory key containing a cybersecurity script is plugged into the controller, booting is blocked. First remove the USB key to correctly boot the controller.

EIO0000004135 09/2020

179

Ethernet Configuration

Firewall Script Commands

Overview

This section describes how script files (default script files or dynamic script files) are written so that they can be executed during the booting of the controller or during a specific command triggered.

NOTE: The MAC layer rules are managed separately and have more priority over other packet filter rules.

Script File Syntax

The syntax of script files is described in Script Syntax Guidelines.

General Firewall Commands

The following commands are available to manage the Ethernet firewall of the M258 Logic

Controller:

Command

Firewall Enable

Firewall Disable

FireWall Eth1 Default Allow

FireWall Eth1 Default Reject

Description

Blocks the frames from the Ethernet interfaces. If no specific

IP address is authorized, it is not possible to communicate on the Ethernet interfaces.

NOTE: By default, when the firewall is enabled, the frames are rejected.

IP addresses can access the controller on the Ethernet interfaces.

Frames are accepted by the controller.

Frames are rejected by the controller.

NOTE: By default, if this line is not present, it corresponds to the command FireWall Eth1 Default Reject .

Specific Firewall Commands

The following commands are available to configure firewall rules for specific ports and addresses:

Command

Firewall Ethx

Allow IP •.•.•.•

Firewall Ethx

Reject IP •.•.•.•

Firewall Ethx

Allow IPs •.•.•.• to •.•.•.•

Range

• = 0...255

• = 0...255

• = 0...255

Description

Frames from the specified IP address are allowed on all port numbers and port types.

Frames from the specified IP address are rejected on all port numbers and port types.

Frames from the IP addresses in the specified range are allowed for all port numbers and port types.

180

EIO0000004135 09/2020

Ethernet Configuration

Command

Firewall Eth1

Reject IPs •.•.•.• to •.•.•.•

Range

• = 0...255

Firewall Eth1

Allow port_type port Y

Y = (destination port

numbers ( see page 183 )

)

Firewall Eth1

Reject port_type port Y

Y = (destination port

numbers ( see page 183 )

)

Description

Frames from the IP addresses in the specified range are rejected for all port numbers and port types.

Frames with the specified destination port number are allowed.

Frames with the specified destination port number are rejected.

NOTE: When IP forwarding is activated, rules with reject port only filter frames with current controller as destination. They are not applied for the frames routed by the current controller.

Frames with a destination port number in the specified range are allowed.

Firewall Eth1

Allow port_type ports Y1 to Y2

Y = (destination port

numbers ( see page 183 )

Firewall Eth1

Reject port_type ports Y1 to Y2

Y = (destination port

numbers ( see page 183 )

Firewall Eth1

Allow IP •.•.•.• on port_type port

Y

• = 0...255

Y = (destination port

numbers ( see page 183 )

Firewall Ethx

Reject IP •.•.•.• on port_type port

Y

• = 0...255

Y = (destination port

numbers ( see page 183 )

Firewall Ethx

Allow IP •.•.•.• on port_type ports

Y1 to Y2

• = 0...255

Y = (destination port

numbers ( see page 183 )

)

)

)

)

Firewall Ethx

Reject IP •.•.•.• on port_type ports

Y1 to Y2

• = 0...255

Y = (destination port

numbers ( see page 183 )

)

Firewall Ethx

Allow IPs

•1.•1.•1.•1 to

•2.•2.•2.•2 on port_type port Y

• = 0...255

Y = (destination port

numbers ( see page 183 )

)

Firewall Ethx

Reject IPs

•1.•1.•1.•1 to

•2.•2.•2.•2 on port_type port Y

• = 0...255

Y = (destination port

numbers ( see page 183 )

)

)

Frames with a destination port number in the specified range are rejected.

Frames from the specified IP address and with the specified destination port number are allowed.

Frames from the specified IP address and with the specified destination port number are rejected.

Frames from the specified IP address and with a destination port number in the specified range are allowed.

Frames from the specified IP address and with a destination port number in the specified range are rejected.

Frames from an IP address in the specified range and with the specified destination port number are allowed.

Frames from an IP address in the specified range and with the specified destination port number are rejected.

EIO0000004135 09/2020

181

Ethernet Configuration

Command

Firewall Ethx

Allow IPs

•1.•1.•1.•1 to

•2.•2.•2.•2 on port_type ports Y1 to Y2

Range

• = 0...255

Y = (destination port

numbers ( see page 183 )

)

Firewall Ethx

Reject IPs

•1.•1.•1.•1 to

•2.•2.•2.•2 on port_type ports Y1 to Y2

• = 0...255

Y = (destination port

numbers ( see page 183 )

)

Firewall Ethx

Allow MAC

••:••:••:••:••:••

• = 0...F

Firewall Ethx

Reject MAC

••:••:••:••:••:••

• = 0...F

Description

Frames from an IP address in the specified range and with a destination port number in the specified range are allowed.

Frames from an IP address in the specified range and with a destination port number in the specified range are rejected.

Frames from the specified MAC address ••:••:••:••:•• are allowed.

NOTE: When the rules to allow the MAC address are applied, only the listed MAC addresses can communicate with the controller, even if other rules are allowed.

Frames with the specified MAC address ••:••:••:••:•• are rejected.

Script Example

; Enable FireWall. All frames are rejected;

FireWall Enable;

; Allow frames on Eth1

FireWall Eth1 Default Allow;

; Block all Modbus Requests on all IP address

Firewall Eth1 Reject tcp port 502;

; Reject frames on Eth2

FireWall Eth2 Default Reject;

; Allow FTP active connection for IP address 85.16.0.17

FireWall Eth2 Allow IP 85.16.0.17 on tcp ports 20 to 21;

NOTE: Characters are limited to 200 per line, including comments.

182

EIO0000004135 09/2020

Ports Used

Protocol

EcoStruxure Machine Expert

FTP

HTTP

Modbus TCP

SNMP

NVL

EtherNet/IP

Destination Port Numbers

UDP 1740, 1741, 1742, 1743

TCP 1105

TCP 21, 20

TCP 80

TCP 502

UDP 161, 162

UDP Default value: 1202

UDP 2222

TCP 44818

Ethernet Configuration

EIO0000004135 09/2020

183

Ethernet Configuration

Ethernet Optional Devices Section 11.3

Ethernet Optional Devices

What Is in This Section?

This section contains the following topics:

Topic

Ethernet Manager

EtherNet/IP Device

Modbus TCP Slave Device

Page

185

186

209

184

EIO0000004135 09/2020

Ethernet Configuration

Ethernet Manager

Adding an Ethernet Manager

The controller supports the following Ethernet managers:



EthernetIP (for CIP Device)



ModbusTCP Slave Device

To add an Ethernet manager to your controller, select in the Hardware Catalog:



For an EthernetIP: EthernetIP



For a ModbusTCP: ModbusTCP Slave Device

Drag it to the Devices tree and drop it on one of the highlighted nodes.

For more information on adding a device to your project, refer to:

• Using the Drag-and-drop Method

• Using the Contextual Menu or Plus Button

EIO0000004135 09/2020

185

Ethernet Configuration

EtherNet/IP Device

Introduction

This section describes the configuration of the EtherNet/IP Device (CIP) to the controller.

For further information about EtherNet/IP (CIP), refer to the www.odva.org website.

Adding an EtherNet/IP Device

See Adding an EtherNet Manager

( see page 185 ) .

EtherNet/IP Device Configuration

To configure the EtherNet/IP device parameters, double-click Ethernet → EthernetIP in the

Devices tree.

The following dialog box is displayed:

186

The EtherNet/IP configuration parameters are defined as:



Instance:



Number referencing the input or output Assembly.

Size:

Number of channels of an input or output Assembly.

The memory size of each channel is 2 bytes that stores the value of an %IWx or %QWx object, where x is the channel number.

EIO0000004135 09/2020

Ethernet Configuration

For example, if the Size of the Output Assembly is 20, it represents that there are 20 input channels (IW0...IW19) addressing %IWy...%IW(y+20-1), where y is the first available channel for the Assembly.

Element

Output Assembly

Input Assembly

Instance

Size

Instance

Size

Admissible Controller

Range

150...189

2...40

100...149

2...40

EcoStruxure Machine Expert

Default Value

150

20

100

20

EDS File Generation

You can generate an EDS file to facilitate configuring EtherNet/IP cyclic data exchanges.

To generate the EDS file:

Step

1

2

3

Action

In the Devices tree, right-click the EthernetIP node and choose the Export as EDS command from the context menu.

Modify the default file name and location as required.

Click Save.

NOTE: The Major Revision and Minor Revision objects in the EDS file are used to ensure uniqueness of the EDS file. The values of these objects do not reflect the actual controller revision level.

The EDS file is generated automatically in the "/usr/Eip" directory within the controller when an application is downloaded, or at start-up when a boot application exists, according to the parameters above.

NOTE: The EDS file is generated when the control network is working correctly on the controller

(cable connected and the IP address is acquired).

EIO0000004135 09/2020

187

Ethernet Configuration

EthernetIP Slave I/O Mapping Tab

Variables can be defined and named in the EthernetIP Slave I/O Mapping tab. Additional information such as topological addressing is also provided in this tab.

188

For further generic descriptions, refer to I/O Mapping Tab Description

( see page 107 )

.

EIO0000004135 09/2020

Ethernet Configuration

The table below describes the EthernetIP Slave I/O Mapping configuration:

Channel Type

WORD -

Default

Value

Description

Command word of controller outputs (%QW) Input IW0

IWxxx

Output QW0

QWxxx

WORD State of controller inputs (%IW)

The number of words depends on the size parameter configured in EtherNet/IP Device

Configuration

( see page 186 )

.

Output means OUTPUT from Originator controller (= %IW for the controller).

Input means INPUT from Originator controller (= %QW for the controller).

Connections on EtherNet/IP

To access a target device, open a connection (global name used by EtherNet/IP protocol level) which can include several sessions that send requests.

One explicit connection uses one session (a session is a TCP or UDP connection.

One I/O connection uses 2 sessions.

The following table shows the EtherNet/IP connections limitations:

Characteristic

Explicit connections

I/O connections

Connections

Sessions

Simultaneous requests

Maximum

8 (Class 3)

1 (Class 1)

8

16

32

EIO0000004135 09/2020

189

Ethernet Configuration

Profile

The controller supports the following objects:

Object class Class ID

1

1

Cat.

Number of

Instances

1

1

Identity Object

( see page 190 )

01 hex

Message Router Object

( see page 193 )

02 hex

Assembly Object

( see page 196 )

Connection Manager Object

( see page 198 )

04 hex

06 hex

File Object

( see page 201 )

37 hex

Modbus Object

( see page 203 )

44 hex

TCP/IP Interface Object

( see page 204 )

Ethernet Link Object

( see page 207 )

F5 hex

F6 hex

2

1

1

2

1

2

1

1

1

Effect on Interface Behavior

Supports the reset service

Explicit message connection

-

Defines I/O data format

-

Allows to exchange EDS file

TCP/IP configuration

Counter and status information

Identity Object (Class ID = 01 hex)

The following table describes the class attributes of the Identity Object:

2

3

Attribute ID

1

4

6

7

Access

Get

Get

Get

Get

Get

Get

Name

Revision

Data Type

UINT

Max Instances UINT

Number of

Instances

UINT

Optional

Instance

Attribute List

01h

01h

UINT, UINT [ ] 00h

UINT

Value Details

01h Implementation revision of the

Identity Object

The largest instance number

The number of object instances

07h

The first 2 bytes contain the number of optional instance attributes. Each following pair of bytes represents the number of other optional instance attributes.

The largest class attributes value Max Class

Attribute

Max Instance

Attribute

UINT 07h The largest instance attributes value

190

EIO0000004135 09/2020

Ethernet Configuration

The following table describes the Class Services:

Service Code (hex) Name

01 Get Attribute All

0E Get Attribute Single

Description

Returns the value of all class attributes

Returns the value of the specified attribute

The following table describes the Instance Services:

Service Code (hex) Name

01 Get Attribute All

05

0E

Reset (1)

Get Attribute Single

Description

Returns the value of all class attributes

Initializes EtherNet/IP component (controller reboot)

Returns the value of the specified attribute

(1) Reset Service description:

When the Identity Object receives a Reset request, it:

 determines whether it can provide the type of reset requested



 responds to the request attempts to perform the type of reset requested

The Reset common service has one specific parameter, Type of Reset (USINT), with the following values:

Value

0

Type of Reset

Reboots the controller.

NOTE: This value is the default value if this parameter is omitted.

Reset Warm.

1

2 Not supported.

3...99

Reserved

100...199

Vendor specific

200...255

Reserved

The following table describes the Instance attributes:

2

3

Attribute ID

1

4

Access

Get

Get

Get

Get

Name

Vendor ID

Device type UINT

Product code UINT

Revision

Data Type Value

UINT 243h

Struct of

USINT,

USINT

-

0Eh

805h

Details

Schneider Automation ID

Controller

Controller product code

Product revision of the controller

Equivalent to the 2 low bytes of controller version

(1)

EIO0000004135 09/2020

191

Ethernet Configuration

Attribute ID

5

6

Access

Get

Get

Name

Status

Data Type Value

WORD (1) -

Serial number UDINT -

Details

See definition in the table below

Serial number of the controller

XX + 3 LSB of MAC address

Example: TM258LD42DT.

7 Get Product name Struct of

USINT,

STRING

-

1

2

Bit

0

3

4...7

(1) Mapped in a WORD:





MSB: minor revision (second USINT)

LSB: major revision (first USINT)

Example: 0205h means revision V5.2.

Status Description (Attribute 5):

8

9

10

Name

Owned

Reserved

Configured

Reserved

Extended Device

Status

Minor

Recoverable

Error

Minor

Unrecoverable

Error

Major

Recoverable

Error





















-

Description

Unused

-

TRUE indicates the device application has been reconfigured.

0: self-testing or undetermined

1: firmware update in progress

2: at least one invalid I/O connection error detected

3: no I/O connections established

4: non-volatile configuration invalid

5: non recoverable error detected

6: at least one I/O connection in RUNNING state

7: at least one I/O connection established, all in idle mode

8: reserved

9...15: unused

TRUE indicates the device detected an error, which, under most circumstances, is recoverable.

This type of event does not lead to a change in the device state.

TRUE indicates the device detected an error, which, under most circumstances, is not recoverable.

This type of event does not lead to a change in the device state.

TRUE indicates the device detected an error, which requires the device to report an exception and enter into the HALT state.

This type of event leads to a change in the device state, but, under most circumstances, is recoverable.

192

EIO0000004135 09/2020

Ethernet Configuration

Bit

11

Name

Major

Unrecoverable

Error

12...15 Reserved -

Description

TRUE indicates the device detected an error, which requires the device to report an exception and enter into the HALT state.

This type of event leads to a change in the device state, but, under most circumstances, is not recoverable.

Message Router Object (Class ID = 02 hex)

The following table describes the class attributes of the Message Router Object:

Attribute ID

1

2

3

4

5

6

7

Access

Get

Get

Get

Get

Get

Get

Get

Name

Revision

Optional

Service

List

Max Class

Attribute

Max

Instance

Attribute

Data Type

UINT

Max

Instances

Number of

Instance

Optional

Instance

Attribute

List

UINT

UINT

Struct of UINT,

UINT [ ]

01h

20

UINT

UINT

UINT

Value Details

01h Implementation revision of the Message

Router Object

01h The largest instance number

00h

07h

119

The number of object instances

The first 2 bytes contain the number of optional instance attributes. Each following pair of bytes represents the number of other optional instance attributes (from 100 to 119).

The number and list of any implemented optional services attribute (0: no optional services implemented)

The largest class attributes value

The largest instance attributes value

The following table describes the Class Services:

Service Code (hex) Name

01 Get Attribute All

0E Get Attribute Single

Description

Returns the value of all class attributes

Returns the value of the specified attribute

The following table describes the Instance Services:

Service Code (hex) Name

01 Get Attribute All

0E Get Attribute Single

Description

Returns the value of all class attributes

Returns the value of the specified attribute

EIO0000004135 09/2020

193

Ethernet Configuration

The following table describes the Instance attributes:

Attribute ID

1

2

100

101

102

103

104

Access Name

Get

Get

Get

Get

Get

Get

Get

Implemented Object

List

Number available

Total incoming Class1 packets received during the last second

Total outgoing Class1 packets sent during the last second

Total incoming Class3 packets received during the last second

Total outgoing Class3 packets sent during the last second

Total incoming unconnected packets received during the last second

Data Type

Struct of

UINT, UINT [ ]

UINT

UINT

UINT

UINT

UDINT

UINT

-

-

-

-

-

-

Value Description

Implemented Object list. The first 2 bytes contain the number of implemented objects. Each two bytes that follow represent another implemented class number.

This list contains the following objects:





















Identity

Message Router

Assembly

Connection Manager

Parameter

File Object

Modbus

Port

TCP/IP

Ethernet Link

20h Maximum number of concurrent CIP (Class1 or

Class 3) connections supported

Total number of incoming packets received for all implicit (Class1) connections during the last second

Total number of outgoing packets sent for all implicit

(Class1) connections during the last second

Total number of incoming packets received for all explicit (Class 3) connections during the last second

Total number of outgoing packets sent for all explicit

(Class 3) connections during the last second

Total number of incoming unconnected packets received during the last second

194

EIO0000004135 09/2020

Attribute ID

105

106

107

108

109

110

111

112

113

114

EIO0000004135 09/2020

Access Name

Get Total outgoing unconnected packets sent during the last second

Get

Get

Get

Total incoming

EtherNet/IP packets received during the last second

Total outgoing

EtherNet/IP packets sent during the last second

Total incoming Class1 packets received

Data Type

UINT

UINT

UINT

UINT

Get Total outgoing Class1 packets sent

UINT

Get Total incoming Class3 packets received

UINT

Get

Get

Get

Get

Total incoming Class3 packets Invalid

Parameter Value

Total incoming Class3 packets Invalid Format

Total outgoing Class3 packets sent

Total incoming unconnected packets received

UINT

UINT

UINT

UINT

Ethernet Configuration

-

-

-

-

-

-

-

-

-

-

Value Description

Total number of outgoing unconnected packets sent during the last second

Total unconnected Class1 or

Class 3 packets received during the last second

Total unconnected Class1 or

Class 3 packets sent during the last second

Total number of incoming packets received for all implicit (Class1) connections

Total number of outgoing packets sent for all implicit

(Class1) connections

Total number of incoming packets received for all explicit (Class 3) connections. This number includes the packets that would be returned if an error had been detected (listed in the next two rows).

Total number of incoming

Class 3 packets that targeted a non-supported service/class/instance/attribu te/member

Total number of incoming

Class 3 packets that had an invalid format

Total number of packets sent for all explicit (Class 3) connections

Total number of incoming unconnected packets. This number includes the packets that would be returned if an error had been detected

(listed in the next two rows).

195

Ethernet Configuration

Attribute ID

115

116

117

118

119

Access Name

Get Total incoming unconnected packets

Invalid Parameter

Value

Data Type

UINT

Get

Get

Get

Get

Total incoming unconnected packets

Invalid Format

Total outgoing unconnected packets sent

Total incoming

EtherNet/IP packets

Total outgoing

EtherNet/IP packets

UINT

UINT

UINT

UINT -

-

-

-

-

Value Description

Total number of incoming unconnected packets that targeted a non-supported service/class/instance/attribu te/member

Total number of incoming unconnected packets that had an invalid format

Total number of all unconnected packets sent

Total unconnected, Class 1, or Class 3 packets received

Total unconnected, Class 1, or Class 3 packets sent

Assembly Object (Class ID = 04 hex)

The following table describes the class attributes of the Assembly Object:

2

3

4

Attribute ID

1

5

6

7

Access Name

Get Revision

Get

Get

Get

Get

Get

Get

Data Type

UINT

Max Instances UINT

Number of Instances UINT

Optional Instance

Attribute List

Struct of:

UINT

UINT [ ]

Optional Service List UINT

Max Class Attribute UINT

Max Instance Attribute UINT

1

4

Value Details

2 Implementation revision of the

Assembly Object

189

2

00h

The largest instance number

The number of object instances

The first 2 bytes contain the number of optional instance attributes. Each following pair of bytes represents the number of other optional instance attributes.

The number and list of any implemented optional services attribute (0: no optional services implemented)

07h

04h

The largest class attributes value

The largest instance attributes value

196

EIO0000004135 09/2020

Ethernet Configuration

The following table describes the Class Services:

Service Code (hex) Name

0E Get Attribute Single

Description

Returns the value of the specified attribute

The following table describes the Instance Services:

Service Code (hex) Name

0E Get Attribute Single

10

18

19

Set Attribute Single

Get Member

Set Member

Description

Returns the value of the specified attribute

Modifies the value of the specified attribute

Reads a member of an Assembly object instance

Modifies a member of an Assembly object instance

Instances Supported

Output means OUTPUT from Originator controller (= %IW for the controller).

Input means INPUT from Originator controller (= %QW for the controller).

The controller supports 2 Assemblies:

Name

Controller Output (%IW)

Controller Input (%QW)

Instance Data Size

Configurable: must be between 100 and 149 2...40 words

Configurable: must be between 150 and 189 2...40 words

NOTE: The Assembly object binds together the attributes of multiple objects so that information to or from each object can be communicated over a single connection. Assembly objects are static.

The Assemblies in use can be modified through the parameter access of the network configuration tool (RSNetWorx). The controller needs to recycle power to register a new Assembly assignment.

The following table describes the Instance attributes:

Attribute ID

1

2

3

4

Access

Get

Get

Get/Set

Get

Name

Number of Member

Object List

Member List

Instance Data

Instance Data Size

Data Type

UINT

ARRAY of

Struct

ARRAY of

Byte

UINT

-

-

Value Description

2...40

Always 1 member for the controller

4...80

Array of 1 structure where each structure represents one member

Data Set service only available for Controller output

Size of data in byte

EIO0000004135 09/2020

197

Ethernet Configuration

Member list content:

Name

Member data size

Member path size

Member path

EPATH is:

Word

0

1

Value

2004 hex

24xx hex

2 30 hex

Data Type

UINT

UINT

EPATH -

6

Value

4...40

Type of Reset

Member data size in bits

Size of the EPATH (see table below)

EPATH to the Member

Semantic

Class 4

Instance xx where xx is the instance value (example: 2464 hex = instance

100).

Attribute 3

Connection Manager Object (Class ID = 06 hex)

The following table describes the class attributes of the Assembly Object:

Attribute ID

1

2

Access Name

Get Revision

Get

Data Type Value Details

UINT 2 Implementation revision of the

Connection Manager Object

UINT 189 The largest instance number

3 Get

Max

Instances

Number of

Instances

UINT 2 The number of object instances

198

EIO0000004135 09/2020

Ethernet Configuration

Attribute ID

4

6

7

Access Name

Get Optional

Instance

Attribute List

Get

Data Type Value Details

Struct of:

UINT

UINT [ ]

The number and list of the optional attributes. The first word contains the number of attributes to follow and each following word contains another attribute code.

Following optional attributes include:

 total number of incoming connection open requests













 the number of requests rejected because of the non-conforming format of the Forward Open the number of requests rejected because of insufficient resources the number of requests rejected because of the parameter value sent with the Forward Open the number of Forward Close requests received the number of Forward Close requests that had an invalid format the number of Forward Close requests that could not be matched to an active connection the number of connections that have timed out because the other side stopped producing, or a network disconnection occurred

UINT 07h The largest class attributes value

Get

Max Class

Attribute

Max

Instance

Attribute

UINT 08h The largest instance attributes value

The following table describes the Class Services:

Service Code (hex)

01

0E

Name

Get Attribute All

Get Attribute Single

Description

Returns the value of all class attributes

Returns the value of the specified attribute

EIO0000004135 09/2020

199

Ethernet Configuration

The following table describes the Instance Services:

Service Code (hex)

01

0E

4E

52

54

Name

Get Attribute All

Get Attribute Single

Forward Close

Unconnected Send

Forward Open

Description

Returns the value of all instance attributes

Returns the value of the specified attribute

Closes an existing connection

Sends a multi-hop unconnected request

Opens a new connection

The following table describes the Instance attributes:

Attribute ID

1

2

3

4

5

6

7

8

Access

Get

Get

Name

Open Requests

Data Type Value Description

UINT Number of Forward Open service requests received

Open Format Rejects UINT -

Get Open Resource

Rejects

ARRAY of

Byte

-

Number of Forward Open service requests which were rejected due to invalid format

Number of Forward Open service requests which were rejected due to lack of resources

Get Open Other Rejects UINT -

Get

Get

Get

Get

Close Requests

Close Format

Requests

Close Other

Requests

UINT

UINT

UINT

Connection Timeouts UINT -

-

-

-

Number of Forward Open service requests which were rejected for reasons other than invalid format or lack of resources

Number of Forward Close service requests received

Number of Forward Close service requests which were rejected due to invalid format

Number of Forward Close service requests which were rejected for reasons other than invalid format

Total number of connection timeouts that have occurred in connections controlled by this

Connection Manager

200

EIO0000004135 09/2020

Ethernet Configuration

File Object (Class ID = 37 hex)

The following table describes the class attributes of the File Object:

2

3

6

Attribute ID

1

7

32

Access

Get

Get

Get

Get

Get

Name

Revision

Max Instances

Number of Instances

Max Class Attribute

Data Type Value Details

UINT 1 Implementation revision of the

File Object

UINT

UINT

UINT

C9h

2

20h

The largest instance number

The number of object instances

Max Instance Attribute UINT 0Bh

The largest class attributes value

The largest instance attributes value

Get Instance List Returns information on all configured instances including

Instance Number, Instance

Name and Instance File Name

The following table describes the Class Services:

Service Code (hex) Name

0E Get Attribute Single

Description

Returns the value of the specified attribute

Instance Code

The File object provides download functionality for the EDS and EDS Icon files. The following instances of the File object are implemented:



Instance C8 hex returns an uncompressed version of the EDS text file. The instance name attribute is returned as "EDS and Icon Files". The file name attribute returns "M258xxx.eds"

 where M258xxx is the exact reference of the controller. The contents of the EDS file are adjusted dynamically by the controller. The connection data sizes in the EDS file are adjusted to reflect the actual standard Assembly instance sizes.

Instance C9 hex returns a compressed version of the device EDS icon file. The instance name is returned as "Related EDS and Icon Files". The file name attribute returns "M258xxx.gz" where

M258xxx is the exact reference of the controller. This is zip encoded file containing only one file:

M258xxx.ico. The file is encoded with the ZLIB compression file format. ZLIB is a free, general purpose, legally unencumbered, loss-less compression library. The specifications are available from the Internet Engineering Task Force (http://www.ietf.org).

EIO0000004135 09/2020

201

Ethernet Configuration

The following table describes the Instance Services:

Service Code

(hex)

0E

4B

4F

Name Description

Get Attribute Single Returns the value of the specified instance attribute

Initiate Upload Start uploading process. Request contains the Maximum File Size the Client can accept on Upload. Response contains the actual File

Size, which will never be more than the Maximum File Size and the

Transfer Size, which is the number of bytes transferred with each

Upload Transfer request.

Upload Transfer Upload another section of file data. Request contains the Transfer

Number, which is incremented with each subsequent transfer.

Response contains the matching Transfer Number, Transfer Type,

File Data, and for the last transfer, the Checksum word. Transfer

Type indicates if this is the first, intermediate or last packet, if it is the only packet, or if the transfer should be aborted.

The following table describes the Instance Attributes:

Attribute ID

1

2

Access

Get

Get

Name

State

Data Type Value Description

USINT

Instance Name STRING -

One of the following:

















0: non existent

1: file empty - file should not have any content until it is downloaded from the remote client. When set, File name,

Revision, Checksum and File Save

Flag values have no meaning, and

File Size is 0.

2: file loaded - file contents are preloaded by the application (file size >

0) or file data has been downloaded and stored into the non-volatile memory area

3: upload initiated

4: download initiated

5: upload in progress

6: download in progress

7: storing to non-volatile area is in progress

Unique Name assigned to the File Object

Instance. For the C8 hex instance, it is

"EDS and Icon Files". For the C9 hex instance, it is "Related EDS and Icon

Files".

202

EIO0000004135 09/2020

Ethernet Configuration

6

7

4

5

8

10

11

Attribute ID

3

9

Access

Get

Get

Get

Get

Get

Name

Instance

Format

Revision

File Name

File Revision

File Size

Data Type Value Description

UINT Revision number assigned for this instance by the application, to differentiate between different file formats.

STRING

USINT

UDINT

File Checksum UINT

-

-

-

Major

Minor

Unique name for File Storage

File Revision is updated every time file content is changed.

File Size in bytes

Get Invocation

Method

USINT -

Two’s complement of the 16 bit sum of all bytes

Defines what should happen after the file is downloaded. Possible options include:





0: No Action

2: Power Cycle, etc.

Get File Save

Parameters

BYTE -

Get

Get

File Type

File Encoding

Format

USINT

UINT -

-









If bit 1 is set, the file should be explicitly saved to non-volatile storage after download is complete.

0: Read/Write access

1: Read Only access

0: no encoding

1: encoded using ZLIB

Modbus Object (Class ID = 44 hex)

The Modbus object provides an additional method to access the Modbus table data. A single explicit request will either read or write 1 or more contiguous registers. An additional Pass-through service allows the user to specify an actual Modbus message data.

The following table describes the class attributes of the Modbus Object:

Attribute ID

1

Access

Get

Name

Revision

Data Type

UINT

Value Details

1 Implementation revision of the

Modbus Object

The following table describes the Class Services:

Service Code (hex) Name

0E Get Attribute Single

Description

Returns the value of the specified attribute

EIO0000004135 09/2020

203

Ethernet Configuration

Instance Codes

Only instance 1 is supported.

The following table describes the Instance Services:

Service Code

(hex)

4B

Name Description

4C

4E

4F

50

Read Digital Inputs

Read Coils

Returns the value of one or several contiguous Digital Input registers

Returns the value of one or several contiguous Coils

Read Holding Registers Returns the value of one or several contiguous Holding

Registers

Write Coils Updates the value of one or several contiguous Coils

Write Holding Registers Updates the value of one or several contiguous Holding

Registers

NOTE: The Read Register service requires 4 bytes of data: the first word contains the starting register address and the second word contains the number of registers to read. The Write service request requires the same 4 bytes, followed by the actual data.

The Modbus Pass-through service indicates a specific Modbus function. The translation function will not perform any Indian conversion on the request or response data. Both request and response contain 1 byte of the Modbus Function code followed by the Modbus message data, including a sub-function code if present.

TCP/IP Interface Object (Class ID = F5 hex)

This object maintains link specific counters and status information for an Ethernet 802.3 communications interface.

The following table describes the class attributes of the TCP/IP Interface Object:

2

3

Attribute ID

1

6

7

Access

Get

Get

Get

Get

Get

Name

Revision

Max Instances

Number of Instance

Max Class Attribute

Data Type

UINT

UINT

UINT

UINT

Max Instance Attribute UINT

1

1

Value Details

1 Implementation revision of the

TCP/IP Interface Object

The largest instance number

The number of object instances

07h

06h

The largest class attributes value

The largest instance attributes value

204

EIO0000004135 09/2020

Ethernet Configuration

The following table describes the Class Services:

Service Code (hex)

01

0E

Name

Get Attribute All

Get Attribute Single

Description

Returns the value of all class attributes

Returns the value of the specified attribute

Instance Codes

Only instance 1 is supported.

The following table describes the Instance Services:

Service Code (hex)

01

0E

Name

Get Attribute All

Get Attribute Single

Description

Returns the value of all instance attributes

Returns the value of the specified instance attribute

The following table describes the Instance Attributes:

Attribute ID

1

Access Name

Get Status

Data Type Value

DWORD Bit level

2

3

Get

Get

Configuration

Capability

Configuration

DWORD Bit level

DWORD Bit level











Description







0: The interface configuration attribute has not been configured.

1: The interface configuration contains a valid configuration.

2...15: Reserved.

0: BOOTP Client

1: DNS Client

2: DHCP Client

3: DHCP-DNS capable

4: interface configuration set table





All other bits are reserved and set to

0.







0: The interface configuration is valid.

1: The interface configuration is obtained with BOOTP.

2: The interface configuration is obtained with DHCP.

3: reserved

4: DNS Enable

All other bits are reserved and set to

0.

EIO0000004135 09/2020

205

Ethernet Configuration

Attribute ID

4

Access Name

Get Physical Link

5

6

Get

Get

Interface configuration

Host Name

Data Type Value

UINT

Padded

EPATH

UDINT

UDINT

UDINT

UDINT

UDINT

Path size

Path

IP Address -

Network

Mask

-

-

Logical segments identifying the physical link object. The path is restricted to one logical class segment and one logical instance segment. The maximum size is 12 bytes.

Gateway

Address

Primary

Name

-

Secondary

Name

Description

Number of 16 bits word in the element Path

STRING

STRING -

Default

Domain

Name

0: no secondary name server address has been configured.

Otherwise, the name server address shall be set to a valid Class A, B, or C address.

ASCII characters. Maximum length is

48 characters. Padded to an even number of characters (pad not included in length).

0: no Domain Name is configured

ASCII characters. Maximum length is

64 characters. Shall be padded to an even number of characters (pad not included in length).

0: no Host Name is configured

206

EIO0000004135 09/2020

Ethernet Configuration

Ethernet Link Object (Class ID = F6 hex)

This object provides the mechanism to configure a TCP/IP network interface device.

The following table describes the class attributes of the Ethernet Link Object:

2

3

Attribute ID

1

6

7

Access

Get

Get

Get

Get

Get

Name

Revision

Max Instances

Number of Instances

Max Class Attribute

Data Type

UINT

UINT

UINT

UINT

Max Instance Attribute UINT

1

1

Value Details

2 Implementation revision of the

Ethernet Link Object

The largest instance number

The number of object instances

07h

03h

The largest class attributes value

The largest instance attribute value

The following table describes the Class Services:

Service Code (hex) Name

01 Get Attribute All

0E Get Attribute Single

Description

Returns the value of all class attributes

Returns the value of the specified attribute

Instance Codes

Only instance 1 is supported.

The following table describes the Instance Services:

Service Code (hex) Name

01 Get Attribute All

10

0E

Set Attribute Single

Get Attribute Single

Description

Returns the value of all instance attributes

Modifies the value of the specified attribute

Returns the value of the specified instance attribute

EIO0000004135 09/2020

207

Ethernet Configuration

The following table describes the Instance Attributes:

Attribute ID

1

2

Access Name

Get

Data Type Value

Interface Speed UDINT -

Get Interface Flags DWORD Bit level

3 Get Physical

Address

ARRAY of

6 USINT

-









Description

Speed in Mbps (10 or 100)



0: link status

1: half/full duplex

2...4: negotiation status

5: manual setting / requires reset

6: local hardware error detected

All other bits are reserved and set to 0.

This array contains the MAC address of the product.

Format: XX-XX-XX-XX-XX-XX

208

EIO0000004135 09/2020

Ethernet Configuration

Modbus TCP Slave Device

Overview

This section describes the configuration of Modbus TCP Slave Device to the controller.

The Modbus TCP Slave Device is a privileged Modbus device on the network. It serves as a gateway for an external I/O scanner configured as the Modbus master, and allows this scanner to exchange data with the controller without interfering with the operation of the Modbus server on the controller. Essentially, the Modbus TCP Slave allows two Modbus masters to coexist and exchange data.

While the Modbus TCP Slave Device uses standard Modbus commands (3 h, 6 h, and so on), these commands do not have their standard meaning. As this device is acting as a gateway for an external I/O scanner (Modbus master), the schema where %IW registers are associated with inputs (read-only) and %QW registers are associated with outputs (read-write) is reversed when considered from the perspective of the external Modbus master.

For further information about Modbus TCP, refer to the www.odva.org

website.

Adding a Modbus TCP Slave Device

See Adding an Ethernet Manager

( see page 185 )

.

Modbus TCP Configuration

To configure the Modbus TCP Slave Device, double-click Modbus → Modbus TCP in the Devices tree.

This dialog box appears:

EIO0000004135 09/2020

209

Ethernet Configuration

Element

IP Master Address

TimeOut

Slave Port

Unit ID

Holding Registers (%IW)

Input Registers (%QW)

Description

IP address of the Modbus master

The connections are not closed on this address.

Timeout in 500 ms increments

NOTE: The timeout applies to the IP master Address unless the address is

0.0.0.0.

Modbus communication port (502)

Sends the requests to the Modbus TCP slave device (1...247), instead of to the embedded Modbus server (255).

Size of the %IW registers in bytes (2...40 bytes)

Size of the %QW registers in bytes (2...40 bytes)

Modbus TCP Slave Device I/O Mapping Tab

The I/Os are mapped to Modbus registers from the master perspective as follows:



%IWs are mapped from register 0 to n-1 and are R/W (n = Holding register quantity, each %IW

 register is 2 bytes).

%QWs are mapped from register n to n+m -1 and are read only (m = Input registers quantity, each %QW register is 2 bytes).

Once a Modbus TCP Slave Device has been configured, Modbus commands sent to its Unit ID

(Modbus address) are handled differently than the same command would be when addressed to any other Modbus device on the network. For example, when the Modbus command 3 (3 hex) is sent to a standard Modbus device, it reads and returns the value of one or more registers. When this same command is sent to the Modbus TCP by the external I/O scanner.

( see page 147 )

Slave, it facilitates a read operation

The Modbus TCP Slave Device responds to a subset of the Modbus commands, but does so in a way that differs from Modbus standards, and with the purpose of exchanging data with the external

I/O scanner. The following Modbus commands are supported by the Modbus TCP slave device:

Function Code

Dec (Hex)

3 (3)

6 (6)

16 (10)

23 (17)

Other

Function Comment

Read holding register

Write single register

Allows the master to read %IW and %QW objects of the device

Allows the master to write %IW objects of the device

Write multiple registers Allows the master to write %IW objects of the device

Read/write multiple registers

Not supported

Allows the master to read %IW and %QW objects of the device and write %IW objects of the device

–

NOTE: Modbus requests that attempt to access registers above n+m-1 are answered by the 02 -

ILLEGAL DATA ADDRESS exception code.

210

EIO0000004135 09/2020

Ethernet Configuration

To link I/O objects to variables, select the Modbus TCP Slave Device I/O Mapping tab:

EIO0000004135 09/2020

211

Ethernet Configuration

Channel

Input

Output

IW0

...

IWx

QW0

...

QWy

Type

WORD

...

WORD

WORD

...

WORD

Description

Holding register 0

...

Holding register x

Input register 0

...

Input register y

The number of words depends on the Holding Registers (%IW) and Input Registers (%QW) parameters of the Modbus TCP tab.

NOTE: Output means OUTPUT from Originator controller (= %IW for the controller). Input means

INPUT from Originator controller (= %QW for the controller).

Bus Cycle Options

In the Modbus TCP Slave Device I/O Mapping tab, select the Bus cycle task to use:



Use parent bus cycle setting (the default),





MAST

An existing task of the project: you can select an existing task and associate it to the scanner.

For more information about the application tasks, refer to the EcoStruxure Machine Expert

Programming Guide.

NOTE: There is a corresponding Bus cycle task parameter in the I/O mapping editor of the device that contains the Modbus TCP Slave Device. This parameter defines the task responsible for refreshing the %IW and %QW registers.

212

EIO0000004135 09/2020