User Manual 105G Wireless Gateway ELPRO Technologies, 9/12 Billabong Street, Stafford Q 4053, Australia. Tel: +61 7 33524533 Fax: +61 7 33524577 Email: sales@elprotech.com Web: www.elprotech.
105G Wireless Gateway User Manual Thank you for your selection of the 105G module. We trust it will give you many years of valuable service. ATTENTION! Incorrect termination of supply wires may cause internal damage and will void warranty. To ensure your 105G enjoys a long life, double check ALL your connections with the user’s manual before turning the power on. Elpro_man_105g_1.18.
Limited Lifetime Warranty, Disclaimer and Limitation of Remedies ELPRO products are warranted to be free from manufacturing defects for the “serviceable lifetime” of the product. The “serviceable lifetime” is limited to the availability of electronic components. If the serviceable life is reached in less than three years following the original purchase from ELPRO Technologies, will replace the product with an equivalent product if an equivalent product is available.
105G Wireless Gateway User Manual Important Notice ELPRO products are designed to be used in industrial environments, by experienced industrial engineering personnel with adequate knowledge of safety design considerations. ELPRO radio products are used on unprotected license-free radio bands with radio noise and interference.
How to Use This Manual To receive the maximum benefit from your 105G product, please read the Introduction, Installation and Operation chapters of this manual thoroughly before using the 105G. Chapter Four Configuration explains how to configure the modules using the Configuration Software available. Chapter Six Troubleshooting will help if your system has problems. The foldout sheet 105G Installation Guide is an installation drawing appropriate for most applications.
105G Wireless Gateway User Manual CONTENTS ATTENTION! 2 IMPORTANT NOTICE 4 CONTENTS 6 CHAPTER 1 INTRODUCTION 1.1 OVERVIEW 1.1.1 Modbus / DF1 105G 1.1.2 Profibus 105G 1.1.3 Ethernet 105G 1.1.4 DeviceNet 105G 1.1.5 Modbus Plus 105G 1.2 THE 105G STRUCTURE 1.2.1 On-board I/O 1.2.2 I/O Expansion - 105S & 115S modules 1.3 THE WIRELESS NETWORK 1.3.1 105U to 105G Network 1.3.2 105G to 105G Network 1.3.3 “Data Concentrator” Networks 1.3.4 105G Repeaters CHAPTER 2 OPERATION 2.1 START-UP 2.2 OPERATION 2.
CONTENTS 3.6 3.7 3.8 3.9 PROFIBUS PORT ETHERNET PORT MODBUS PLUS PORT DEVICENET PORT CHAPTER 4 CONFIGURATION 4.1 INTRODUCTION 4.2 CONFIGURATION PROGRAM 4.2.1 Program Operation 4.2.2 Security 4.3 UPLOADING AND DOWNLOADING 4.3.1 Loading from a 105G 4.4 MAPPINGS 105G TO 105U I/O MODULES 4.4.1 Mappings from Inputs at Remote 105U I/O Modules 4.4.2 Mappings from 105G to Outputs at Remote 105U I/O Modules 4.4.3 Don’t Send if in Comm Fail 4.4.4 Startup Polls 4.4.5 Polls to Remote Modules 4.
105G Wireless Gateway 4.13 FIELDBUS CONFIGURATION – DEVICENET 4.13.1 DeviceNet Introduction 4.13.2 DeviceNet Address Setting 4.13.3 EDS File 4.13.4 Protocol and Supported Functions 4.14 FIELDBUS CONFIGURATION – MODBUS PLUS 4.14.1 Modbus Plus Introduction 4.14.2 Modbus Plus Addressing 4.14.3 Protocol & Supported Functions 4.14.4 Configuration 4.15 CONNECTING SERIAL I/O 4.
Chapter 1 Introduction Chapter 1 Introduction 1.1 Overview The Wireless Gateway products provide a wireless interface between various fieldbus protocols used in process and automation applications. The 105U 105U-G can be fitted with different radio boards covering regulated frequency bands in different Direct I/O parts of the world, both license-free and licensed Profibus Ethernet bands.
5G Wireless Gateway User Manual This document assumes the reader is familiar with the operation of the 105U I/O modules - for further information; please refer to the User Manuals for these products. The 105U-G is referred to as the 105G for the rest of this document, to clearly differentiate from normal 105U I/O modules.
Chapter 1 Introduction converter. The Profibus port has automatic baudrate detection (9600 bit/s - 12 Mbit/s). The Profibus Slave 105G (PR1) will connect to a Profibus LAN controlled by an external master device. The Profibus Master 105G (PR2) will control communications on a Profibus LAN, and can connect to up to 125 Profibus slave devices.
105G Wireless Gateway User Manual ♦ Internet functionality. The 105G has 1.4Mbyte of non-volatile “flash” memory for embedded web “pages” (dynamic HTTP), on-board file system, user downloadable web pages through FTP server, and email functionality (SMTP). The Ethernet connection is a transformer isolated RJ45 connector, 10/100 Mbit/sec. The Ethernet 105G I/O database has 4300 registers (each of 16 bit value), however the Ethernet interface only supports 2048 input bytes and maximum 2048 output bytes.
Chapter 1 Introduction An “output” is a value coming into the 105G via the fieldbus. An input is a value going out from the 105G via the fieldbus. So a Modbus Plus 105G can handle up to 4300 I/O total, but analog or pulse inputs are limited to 1024 x 16-bit values. The same limit applies to outputs. The Modbus Plus interface allows global data base transactions with routing for up to six Modbus Plus networks. 1.
105G Wireless Gateway User Manual The 105G I/O database effectively isolates the fieldbus and the radio network. This provides a high level of system performance. The 105U radio protocol is very efficient and reliable for radio communications. It minimizes radio channel usage by "change-of-state" reporting, and allows the use of intermediate repeater addresses. It also allows peer-to-peer (105U to 105U, 105G to 105G) and peer-to-master (105U to 105G) communications.
Chapter 1 Introduction 1.3 The Wireless Network The 105G can communicate with up to 490 other addresses - this could be 490 other 105U modules, or in the case of 505K modules, it could be many thousands of modules (as many 505K modules can share the same address). 105G modules may take up more than one address under some circumstances. Any 105G or 105U module can act as a radio repeater for other modules - that is, radio messages can be passed onto other modules.
105G Wireless Gateway User Manual The 105G also transmits periodic update messages if there has been no change - if an I/O register is mapped to a remote output or another 105G, then that register can be configured with an update time. 105G modules can transmit to 105G modules as well as other 105G modules. There can be multiple 105G modules in a network - as well as 105U I/O. Because the 105U protocol is peerto-peer, there are few constraints on communications between multiple 105U modules.
Chapter 1 Introduction ♦ time period, configurable 1 – 4096 sec (1.1 hour), or ♦ real time clock, or ♦ on demand by the host device, by writing to a “trigger register” in the 105G, or ♦ a change-of-state event occurring within the block of I/O registers. If a block write message has been configured to be transmitted on change-of-state, a “time window” is configured. When a change-of-state occurs in one of the registers in the block, the time window will be activated.
Chapter 2 Chapter 2 OPERATION OPERATION 2.1 Start-up The 105G operating software and the database configuration are stored in non-volatile memory, however the database I/O register values are lost on power failure (in the same way as a PLC). On start-up, the 105G sends "start-up poll" messages to remote modules based on the source address of inputs configured in the database (the start-up messages can be disabled by configuration).
105G Wirless Gateway USer Manual binary/digital read command, the 105G will convert the 16 bit value into a binary (1 bit) value before it responds. The 105G is able to scale the I/O value between the I/O database and the host device - this is a user-configurable function. #14 #1 105U-1 105G DIN1 An example of normal operation - assume that a remote module has address 14 and the 105G is address 1. Module #14 is configured with a mapping DI1 → I/O Reg 76 at #1.
Chapter 2 OPERATION 2.3 Database The 105G database (Radio Interface) has 10 000 registers, each of 16 bit size.
105G Wirless Gateway USer Manual A low battery alarm is available at register 4308. This becomes active when the battery voltage falls below 11.3V, and clears when the battery voltage rises above 11.8V. Supply voltage is also monitored, and an alarm is available at register 4309. This becomes active if the supply voltage falls below 8.0V, and clears when the supply voltage rises above 9.0V.
Chapter 2 OPERATION The full 105G database (4300 registers) can be accessed by the Host Device. 2.4.2 Profibus The Profibus port has auto-detect of baud rate from 9600 bits/sec to 12Mbit/sec - no configuration is required. The Profibus units have internal hardware comprising the Profibus Interface. The Profibus Interface handles all Profibus DP Network communications. The internal Radio Interface is separate to the Profibus Interface, and handles all radio communications.
105G Wirless Gateway USer Manual 2.5 Radio System Design Each wireless I/O system can have up to 95 unit addresses, although up to 255 505K module can share the same unit address (refer to 505K User Manual). Each 105U module can have up to 31 x 105S or 10 x 115S expansion I/O modules connected to it. These modules are addressed 96 - 127.
Chapter 2 OPERATION 2.6 Radio Comms Failure The 105G has an internal "communications failure" (comms fail) status for each I/O point in its database. There is also a comms fail status for each module with direct communications - see 2.5.1 above. For I/O registers which are mapped to a remote output or another 105G, the comms fail status is set if the 105G does not receive an acknowledgment for a message being sent to that remote output. The comms fail status resets when a successful transmission occurs.
105G Wirless Gateway USer Manual For example, to monitor the comms status of I/O register 1045, perform a binary/discrete read on register 6045 (the status register for 1045). A value of “1” will be returned if this I/O point is in comms fail, and a “0” returned if the status is normal.
Chapter 3 Chapter 3 Installation Installation 3.1 General The 105G module is housed in a rugged aluminum case, suitable for DIN-rail mounting. Terminals will accept wires up to 2.5 sqmm in size. All connections to the module must be low voltage (SELV). Normal 110-240V mains supply should not be connected to any terminal of the 105G module. Refer to Section 3.3 Power Supply. Before installing a new system, it is preferable to bench test the complete system.
105G Wireless Gateway User Manual Line-of-sight paths are only necessary to obtain the maximum range. Obstructions will reduce the range, however may not prevent a reliable path. A larger amount of obstruction can be tolerated for shorter distances. For very short distances, it is possible to mount the antennas inside buildings. An obstructed path requires testing to determine if the path will be reliable refer the section 6 of this manual.
Chapter 3 Installation Where antennas are mounted on elevated masts, the masts should be effectively earthed to avoid lightning surges. The 220MHz and 400 – 500MHz radios are fitted with surge protection, however the 868MHz radio does not. For high lightning risk areas, additional surge suppression devices between the module and the antenna are recommended.
105G Wireless Gateway The Yagi gain also acts on the receiver, so adding Yagi antennas at both ends of a link provides a double improvement. User Manual 90o Yagi antennas are directional. That is, they have positive gain Antenna installed to the front of the antenna, but with drain holes down negative gain in other directions.
Chapter 3 Installation For licensed 105U units with RF power above 2W, the unit needs to be powered from the 12V “Battery” terminals with a power supply of at least 2A rating. Alternately, the unit can be powered via the SUP1 / SUP2 terminals, provided a backup battery is connected to the “Battery” terminals to supply the inrush current for the radio transmitter. This is not required for units with radio power less than 2W. 3.3.
105G Wireless Gateway User Manual Upon failure of the normal supply, the module may continue to operate for several hours from a backup battery. The battery charger is designed for sealed or vented lead acid batteries between 5 and 24 amphours - other types of batteries should not be used. Typically, a 5 Ahr battery will supply the 105G for 1 – 2 days, depending on the type of 105G. On return of normal supply, the unit will recharge the battery. The maximum output of the battery charger is 0.
Chapter 3 Installation 3.4 Input / Output The 105G has eight on-board discrete/digital I/O. These act as both discrete inputs and discrete outputs. 3.4.1 Digital Inputs / Outputs All eight of the 105G DIO terminals may be used as discrete inputs. These inputs are suitable for voltage free contacts (such as mechanical switches) or NPN transistor devices (such as electronic proximity switches). PNP transistor devices are not suitable.
105G Wireless Gateway User Manual 3.5 Serial Port 3.5.1 RS232 Serial Port The serial port is a 9 pin DB9 female and provides for connection to a terminal or to a PC for configuration, field testing and for factory testing. It is also used by the Modbus/DF1 version for fieldbus connection. This port is internally shared with the RS485 - ensure that the RS485 is disconnected before attempting to use the RS232 port. Communication is via standard RS232 signals.
Chapter 3 Installation 3.5.2 RS485 Serial Port RS485 should not be used with the DF1 Protocol. The RS485 port provides for communication between the 105G unit and its host device using a multi-drop cable. 105G HOST HOST 120Ω 120Ω INTERNAL EXTERNAL RESISTOR REQUIRED RS232 9 PIN CONNECTOR RS485 DUAL TERMINAL CONNECTOR TERMINATING RESISTOR SWITCH ON = TERMINATED Up to 32 devices may be connected in each multi-drop network.
105G Wireless Gateway User Manual 3.6 Profibus Port The Profibus RS485 connector is a D9 connector in the top end-plate of the module (see below). 105G-PR1 (Profibus Slave) End Plate: PROFIBUS D9 CONNECTOR RS485 TERMINATION SWITCH SELECTOR SWITCHES DIAGNOSTIC LED’s CONFIGURATION ENABLE ANTENNA CONNECTION (869MHz Only) Note: If the “Use Rotary Switch Address” option in configuration software is selected, the two rotary switches are used to specify the Profibus Node Address in the range 0 – 99.
Chapter 3 Installation Pin Description 1 Not connected 2 Not connected 3 +ve RS485 (Positive) 4 RTS (request to send) 5 GND - Isolated GND from RS485 side 6 +5V - Isolated 5V from RS485 side 7 Not connected 8 -ve RS485 (Negative) 9 Not connected 3.7 Ethernet Port For 105G-ET1 modules only. The Ethernet connection uses a standard RJ45 connector on the top end-plate of the module. The selector switches should all be “off” (in the diagram below, “off” is up).
105G Wireless Gateway User Manual 3.8 Modbus Plus Port For 105G-M+1 modules only. Connection to the Modbus Plus Network is via the 9-pin D-SUB connector located at the antenna end of the module. Pin-outs are outlined in the table below. D9 MODBUS PLUS CONNECTION SELECTOR SWITCHES DIAGNOSTIC LED’s CONFIGURATION ENABLE ANTENNA CONNECTION (869MHz Only) See section on configuration for description of selector switches.
Chapter 3 Installation 3.9 DeviceNet Port For 105G-DE1 modules only. Connection to the DeviceNet Network is via the 5-pin pluggable screw terminal connector located at the antenna end of the module. Pin-outs are specified below.
105G Wireless Gateway Chapter 4 User Manual Configuration 4.1 Introduction A Windows program is provided to configure the 105U system. The configuration is done on a system basis - referred to as a “project” in the program. After the system configuration is entered, the configuration file can be loaded into each module via the RS232 port.
Chapter 4 Configuration 4.2 Configuration Program The configuration software is available on a CD, and needs to be installed on your PC before you can use it. The CD contains a setup file called setup.exe. Select the configuration software window on the Product CD and an installation Wizard will guide you through the installation procedure. To upload and download configuration files to a module, you will need a RS-232 serial cable as shown below.
105G Wireless Gateway User Manual Password. You have the option of entering a password to protect the configuration files against unauthorized changes. When you open a new project, you will be asked to enter a password - if you do not enter any text - that is, press “ESC” or “Enter”, then password protection is disabled. If you do enter a password, then you will need to enter this password to access the project.
Chapter 4 Configuration Loading configuration from an existing module To load the configuration from a module, connect the module to the PC via the RS232 cable, put the module into “Configuration Mode” by pressing the configuration button on the top end-plate, and click on “Load Unit”. This will allow you to view the module configuration, change it, or copy it for another module - refer to section 4.3 for full details.
105G Wireless Gateway User Manual Deleting a Unit A module can be deleted from the configuration by highlighting the unit and selecting “Delete Unit”. 4.2.2 Security There are two security features available. You can enter a password to protect the configuration files, and you can enable security encryption of the radio transmissions. The password can be between 6 and 256 characters. The password is case sensitive and any ASCII characters can be used.
Chapter 4 Configuration security key may be entered and you will be prompted to enter the security code a second time to confirm. The security key can be any characters or numbers. Characters are case sensitive. The security key will never be displayed. • If you do not enable security, there will be no data encryption of the radio messages. This is the default setting. • If a security key has been entered, this key is downloaded into each module as part of the configuration download process.
105G Wireless Gateway User Manual The archived configuration files cannot be changed, downloaded or uploaded without the password. If you lose the configuration files, you can regenerate these by uploading the configuration from every module in the system into a new project with a new security key. After uploading each module, download the configuration with the new security key.
Chapter 4 4.3.1 Configuration Loading from a 105G If you load a configuration from a 105G into a “blank” or new project, then the program will not be able to display the mappings from remote modules (as the program does not know what the remote modules are).
105G Wireless Gateway User Manual 4.4 Mappings 105G to 105U I/O Modules To transfer remote input signals to a 105G, or transfer a value to a remote output from a 105G, you set up “I/O mappings”. You enter mappings into the source unit, not the destination unit. That is, you configure a mapping at the “input” module. If you want to transfer an input signal at a 105U module to a 105G register, you enter a mapping at the 105U I/O module.
Chapter 4 Configuration When mapping inputs to a 105G, you will be asked to select an I/O Register. Select the “…” box beside the “At I/O Register” heading - this will allow you to select the I/O register between 0 and 4299. Any I/O registers that have already been selected will have color shading. The update times, analog sensitivities for these mappings can be set as per normal I/O mappings.
105G Wireless Gateway User Manual of the status register will be set to 1. The comms fail time should be more than the corresponding update time at the remote input. To set the comms fail times, select the 105G, and select the “Comms Fail Time” option. Each remote input already mapped to the 105G will automatically be listed, including the remote module containing the mapping. The default value for the comms-fail time is “disabled” or zero. To enter a time, select the I/O register from the list.
Chapter 4 Configuration To map several consecutive I/O registers to several outputs, select the first I/O register in the range and use “Shift”-select or “Ctrl” - select to highlight the multiple outputs. The selected mappings will be entered with consecutive I/O registers. Change Sensitivities Radio messages to remote modules can be change messages (when the value of the I/O register changes) or update messages (when the update time has elapsed). If a change message is sent, the update period restarts.
105G Wireless Gateway User Manual Update Times To change the update times of output mappings, select the Update Times option. Any I/O registers that have already been mapped to remote outputs will automatically be listed. The default update time is 10 minutes. Changing Multiple Settings You can change the Comms Fail Times or Update Times of several I/O points simultaneously by using the Select feature.
Chapter 4 Configuration 4.4.4 Startup Polls You can enter start up polls for remote modules by using the “New Poll Mapping” box. This function is the same as for the 105U I/O modules. A start-up poll is a special message sent when the 105G starts up. When the remote module receives a start-up poll, it will immediately respond with update messages for all its inputs that are mapped to the 105G. This allows the 105G to have correct values on start-up. 4.4.
105G Wireless Gateway User Manual Read/Write Mappings The mappings can be “read” or “write” mappings. A Read mapping is a request sent to another 105G to return a block of values. A Write mapping is a message sending a block of values to another 105G. A Read mapping from 105G#2 to 105G#3 could be the same as a Write mapping from 105G#3 to 105G#2 (that is, in the reverse direction) - except the Read mapping is initiated from #2 and the Write mapping is initiated from #3.
Chapter 4 4.5.1 Configuration Entering a Block Mapping Select the “source” 105G on the left hand menu - select “Block Mappings” and then “New Block Mapping” from the right-hand display. The Block Mapping Configuration display will appear. Select the “Command Type” from the pop-down window in the centre of the display. The red arrow will confirm the direction of the block transfer. Now select the destination module - only the 105G modules already configured will be shown.
105G Wireless Gateway User Manual In the above example, the status register for the block mapping has been automatically assigned to register 9500. The rest of the mapping configuration involves the mapping trigger - or what initiates the mapping message. Firmware versions 1.82 and later. Block write mappings have option to invert the I/O message that will be sent. This can be selected when adding a new Write block mapping.
Chapter 4 Configuration 4.5.2 Host Device Trigger Each block mapping that is configured is allocated a status register in the range 9500 – 9999 (i.e. one status register for a maximum of 500 possible block mappings). The status register for a given block mapping is shown on the right hand side of the Block Mapping display (under the heading “Status Lcn”). Bit 13 of the associated status register is the “Force bit” - if Bit 13 is turned “on”, then the associated mapping is forced, or triggered.
105G Wireless Gateway User Manual Firmware versions prior to 1.85 Note that the time period is after the last transmission - if the block mapping message is triggered by the host device, or by a change-of-state, then the timer is reset and the time period starts again. 4.5.4 Real-Time The block mapping message can be sent at a real-time by setting the “Period” value. In this example, “period” is set to 6 minutes - the message will be sent every 6 minutes starting at the beginning of each hour.
Chapter 4 Configuration If you want the block mapping to be sent only on real-time (and not on change as well), select the “Disable” box in the bottom left hand corner - this disables change messages for this block mapping. Setting the Clock The clock within the 105G can be set by the host device, and read by the host device. The 105G provides four clock registers for days/hours/minutes/seconds - the registers are 4330 – 4333. On power-up, these registers are set to zero.
105G Wireless Gateway User Manual 4.5.5 Change-of-State If a value in the block changes by more than the sensitivity amount, then only the I/O in the block message that has changed will be sent, not the whole block mapping. (This can only occur for Write mappings). The sensitivity values are set under the “Change Sensitivity & I/O Value Scaling” option as per section 4.6. A delay time can be entered to reduce the number of change triggers in active systems.
Chapter 4 Configuration 4.5.6 Block Read Mapping’s A Read mapping is a request sent to another 105G to return a block of values. Like the Block Write mapping it can be triggered by a Real Time clock, Time period or by Host trigger however the main difference is that the COS Delay is now a Response Timeout as shown below. In the above example 105G#3 is performing a Block Read Request to 105G#2.
105G Wireless Gateway User Manual 4.5.7 Mixing Normal Mappings and Block Mappings Block mappings can include I/O Registers already used with normal I/O mappings. For example, a remote 105U I/O module could map a remote input to I/O Reg 743. At the 105G, the host device could read I/O Reg 743, and you could also configure a block mapping including this register to another 105G. You could write a block I/O Reg 700 – 800 to another 105G. 4.5.8 Block Mappings to internal I/O Registers. Firmware version 1.
Chapter 4 Configuration 4.6 Change Sensitivity & I/O Value Scaling 4.6.1 Change Sensitivity “Change” messages for both individual I/O mappings and block mappings use a sensitivity value to trigger the message. Sensitivities are configured for blocks of I/O registers - that is, each I/O register does not have a unique sensitivity. You can configure up to 50 sensitivity values - that is, there can be 50 blocks of registers with different sensitivities.
105G Wireless Gateway User Manual Registers which are not included in any block use the “default” sensitivity which is also userconfigurable. In the above example, the default sensitivity is 1 and is the sensitivity for all I/O registers not included in the three blocks. Important Note. Sensitivity values need to be selected carefully for analogue or counting registers as small values can result in a large number of change messages, which can overload the radio channel.
Chapter 4 Configuration Scaling is configured in the “Sensitivities” section of the configuration software. If you select a new sensitivity/scaling block, you can select/deselect sensitivity or scaling or both. There is no relationship between sensitivity and scaling - we use the same configuration area as it is convenient because both features use blocks of I/O registers. In the first example, a block of I/O registers is configured for both sensitivity and scaling.
105G Wireless Gateway User Manual The second example shows another I/O block (registers 81 to 1080) that has been selected for scaling only - the sensitivity function has been disabled (these registers will use the default sensitivity of 2000 configured on the main Sensitivity configuration screen). In this example, the full 16-bit range (0-65535) is scaled to “signed 16-bit values”. A value greater than 32767 (which will be seen as a negative value) can’t be written to the data bus.
Chapter 4 Configuration 4.6.4 Number of TX only transmissions Under I/O mappings and Block mapping’s is an option for the 105G to send messages as a Transmit only. By default under each section all messages will be acknowledged. Uncheck the Acknowledge Message box to make the transmission TX only. In the unit details section a Configurable number of TX only transmissions are available between 1 – 5. As a Change of State occurs or Timed Update expires each message will be sent this number of times.
105G Wireless Gateway User Manual 4.7 Serial Configuration - MODBUS The 105G-MD1 module provides interface for Modbus Slave, Modbus Master and AllenBradley DF1. This Modbus interface uses the Modbus RTU protocol - also known as the Modbus Binary protocol. This manual assumes that the reader has a good understanding of the Modbus or DF1 protocol. 4.7.1 MODBUS Slave If you use the 105G Modbus Slave interface, then the host device will be a Modbus Master device.
Chapter 4 Configuration Supported Modbus Function Codes: Function Code Meaning 01 Read the state of multiple digital output points 02 Read the state of multiple digital input points 03 Read the value of multiple output registers 04 Read the value of multiple input registers 05 Set a single digital output ON or OFF 06 Set the value of a single output register 07 Read Exception Status - compatibility - returns zero Loopback test - Supported codes 0 return query data 10 clear diagnostic counte
105G Wireless Gateway 4.7.2 User Manual MODBUS Master If you use the 105G as a Modbus Master, then the host device/s will be Modbus Slave device/s. If the RS485 port is used, then multiple Modbus Slave devices can be connected to the 105G. The 105G Modbus Master will generate Modbus read and write commands to the Modbus Slave devices.
Chapter 4 Configuration If the Modbus Slave device does not respond to the Modbus command, the 105G will try another 3 times (“Max Retries” = 3). The Modbus command will be sent to the Modbus Slave every 100msec. The address of the Modbus Slave is 1 (permissible addresses are 1 – 255). Because a digital write command has been selected, the destination register type will be digital outputs, with Modbus tag “0xxxxx”.
105G Wireless Gateway User Manual To complete the Fieldbus Configuration, enter any other Modbus commands that may be required to transfer I/O points between the 105G and the Modbus Slave devices. Digital I/O The value of a digital I/O point is stored in the 105G database as a hexadecimal ‘0000’ (“off”) or hex 'FFFF' (“on”). However the 105G will generate either a ‘0’ (“off”) or ‘1’ (“on”) to a digital output point (Coil) when sending commands to a Modbus slave - these are commands 05 and 15.
Chapter 4 Configuration Modbus Retry Delay The 105G Modbus Master configuration includes a feature to limit the frequency at which slave devices are polled for data. The 105G will poll each Modbus slave in order. If there is no delay time entered, the 105G will poll as quickly as it is able to. If there is a delay time entered, then this delay time will occur between each poll message.
105G Wireless Gateway Command Description User Manual Code Function Code Comment Protected Write 0x00 NONE PLC2 series and SLC / Micrologix Unprotected Read 0x01 NONE PLC2 series and SLC / Micrologix Diagnostic Status 0x06 Diagnostic Commands Echo message Unprotected Write 0x06 0x08 0x00 0x00 NONE PLC2 series and SLC500 / Micrologix Typed logical Read Read Bits 0x0F 0x0F 0xA2 0xA2 Read Integers 0x0F 0xA2 Type SLC500 and Micrologix 0x85 Reads MSB of each 105G I/O register and writes
Chapter 4 Configuration The entry under “I/O Register” (see below) is the first I/O register in the 105G to be transferred the “I/O count” is the number of registers to be transferred. The “Command Type” selected is a file write command (you can select read or write) - which means that the values are sent from the 105G to the host device. The type of write command is an “Integer” write, meaning that the register values will be written as register values.
105G Wireless Gateway User Manual Discrete I/O The value of a digital I/O point is stored in the 105G database as a hexadecimal '0000' (“off”) or hex 'FFFF' (“on”). However the 105G will generate either a ‘0’ (“off”) or ‘1’ (“on”) to a binary file when initiating a “Typed Logical Write” command or responding to a “Typed Logical Read” command.
Chapter 4 Configuration Note: If analog values are read to and written from an integer file in an SLC or Micrologix CPU, integer files contain 16 bit signed values. These represent values in the range -32768 to 32767. The data values from the 105U modules are treated as 16 bit unsigned values. To convert the data from an analog input, move the data from the integer file to a long file (MOV command) then mask out the high 16 bits (MVM with mask value FFFF).
105G Wireless Gateway User Manual network. For I/O transfer between the radio network and the fieldbus network, I/O Registers in the Radio Interface must be linked with registers in the Fieldbus Interface using configuration software. Depending on the fieldbus protocol, the size of the Fieldbus Interface may be limited (for example, the Profibus Slave interface supports only 416 bytes I/O). The Radio Interface supports 10,000 registers, of which 4300 are general-purpose I/O registers.
Chapter 4 4.9.1 Configuration Fieldbus Mappings The Fieldbus Interface is divided into two distinct areas. The IN Area contains input data that is made available to the host device. The OUT Area contains output data from the host device. This is in contrast to the Radio Interface, in which each 16-bit register can be used as input or output. Also note the size of the Fieldbus Interface is variable, depending on the type of fieldbus.
105G Wireless Gateway User Manual Consequently, depending on the fieldbus mapping transfer mode (see above table), Radio Interface registers may or may not be compressed. “Word” transfer mode offers no compression, but rather a direct transfer of 16-bit registers between Radio Interface and Fieldbus Interface. This mode would suit the transfer of registers containing pulse counts or analog values with no loss of resolution.
Chapter 4 Configuration Configuration software allows the Fieldbus Interface IN and OUT areas to be addressed as an array of 8-bit bytes (Byte Address Mode) or an array of 16-bit words (Word Address Mode). The address mode may be required to change depending on the transfer mode, the protocol, or the particular host device. The Address Mode option is included so that the configuration software can be setup to use the same I/O addressing method used by the host device.
105G Wireless Gateway User Manual Three Fieldbus Mappings are illustrated in the example above. Note that “Word Address Mode” is selected, meaning that the Fieldbus Interface IN and OUT Areas will be treated as wordaddressed arrays by configuration software. The parameters for each fieldbus mapping were setup using the mapping configuration screen as described above. Elpro_man_105g_1.18.
Chapter 4 Configuration The first Fieldbus Mapping is a “Write WORD” mapping, writing I/O Registers 10 – 15 from the Radio Interface to word-locations 1 – 5 in the Fieldbus IN Area. Because the transfer mode is “word” complete 16-bit registers are transferred. The second mapping is a “Read BIT” mapping, reading 12 bits from Fieldbus OUT Area wordlocation 1(word address mode is selected) to I/O Registers 30 – 41.
105G Wireless Gateway User Manual The Profibus address can be set in the “Fieldbus Config” screen or via the rotary switch on the end-plate of the module- valid slave addresses are 1 – 126. If the “Enable Rotary Switch” box is not selected, then the address entered in the program will be used and the rotary switch value ignored. If the “Enable Rotary Switch” box is selected, then the address entered in the configuration program will be ignored and the rotary switch read on start-up of the 105G.
Chapter 4 Configuration 4.11 Fieldbus Configuration - Profibus Master The 105G-PR2 implements a complete Profibus-DPV0/DPV1 master. The hardware is optimized for high throughput and can be used in mono or multi master networks up to 12 Mbit/s. Up to 125 slaves with a total max of 2048 byte input and 2048 byte output data can be connected. 4.11.1 GSD File Each device in a Profibus network is associated with a GSD file, containing all necessary information about the device.
105G Wireless Gateway User Manual Adding a Slave to the Network To add a Profibus slave to the network, locate the required slave and simply drag the slave icon onto the visible bus cable on the busview, or right click the required slave and choose add to network.
Chapter 4 Configuration Profibus Address The actual Profibus address of the selected slave is shown in the address selection box. Only available addresses are listed and can be selected as new address. Watchdog According to the Profibus specification, a slave device may be configured with a watchdog function such that the master must poll the slave within a defined interval. If this feature is enabled and the master fails, the slaves watchdog timer will timeout and the slave will reset itself.
105G Wireless Gateway User Manual Parameter Assignment A slaves user-specific parameters can be changed via the parameter assignment page. Userspecific parameters for a slave device are defined in the corresponding GSD file for the device, the definition of which are device-specific and should be found in the documentation for the device. Parameters can be altered via combo boxes or via direct input of hexadecimal values.
Chapter 4 Configuration When an I/O module is added to a slave, configuration software will automatically assign that I/O to the next available space in the fieldbus interface. The input and output addresses that are assigned here will correspond to the locations that must be transferred via fieldbus mappings in order to make the I/O available to the radio network.
105G Wireless Gateway User Manual Depending on the particular slave, Manufacturer Specific Data may also apply to an I/O module. This data is a string of hexadecimal bytes, the meanings of which (if applicable) are device specific and should be detailed in the documentation for the particular device. Master Properties The Profibus master 105G has some configurable properties that affect the entire Profibus network.
Chapter 4 Configuration configuration) may be synchronized using the Message Interface instruction SET_SLAVE_MODE (see section on the Message Interface below). Bus Parameters Tab The bus parameters can be adjusted only when the selected profile is user defined (see Profibus Tab above). These parameters should only be changed if the user is familiar with the individual Profibus parameters according to the Profibus specification.
105G Wireless Gateway User Manual Tset The setup time determines the length of time elapsing in the node between a data frame being received and a response occurring 1 t_bit <= Tset <= 494 t_bit Tqui The quiet time is the time a modulator needs after recognizing a send frame to switch from send to receive. 0 t_bit <= Tqui <= MIN(31 t_bit, Min. Tsdr - 1) Gap Factor The Gap Factor determines how many token rounds occur before a new active node (master) can be added to the token ring.
Chapter 4 Configuration Tid2 = Max. Tsdr Tid1 The idle time 1 determines the minimum length required before a transmitting node can send the next message after sending a message frame that is not acknowledged. Tid1 = 35 + 2*Tset + Tqui Trdy The ready time determines the minimum time for a transmitting node to receive a response message frame. Trdy = Min. Tsdr 4.11.4 Configuration Example The Following example describes a simple configuration of a 105G connected to a simple Profibus Slave I/O device.
105G Wireless Gateway User Manual chosen locations are Fieldbus IN locations 0...1, and Fieldbus OUT location 0. Fieldbus Configuration. The next configuration step is to transfer the I/O in the Fieldbus Interface to the Radio Interface so that the Profibus I/O is available to the radio network. The 8 x digital output to be sent to the Profibus slave are transferred using a fieldbus write mapping.
Chapter 4 Configuration 1) Radio Configuration To complete the configuration, the I/O that has now been transferred to the radio interface must be mapped over the radio network. The analog input from the slave is mapped to an analog output at a remote 105U-1, the 8 x digital output at the Profibus slave will be activated in this example via appropriate mapping from 8 x digital input at a remote 105U-4 (see below). 4.11.
105G Wireless Gateway User Manual interface is by default disabled, but will become enabled by also enabling a “Status Location” via the fieldbus configuration tab in configuration software. The message interface is used to instruct the 105G to perform a specific task, to request data, to indicate certain events (alarms), or to respond to requests.
Chapter 4 Configuration Offset: Register: 0 Message ID 1 Message Information 2 Command Number 3 Data Size 4 Extended Word 1 5 Extended Word 2 6 Extended Word 3 7 Extended Word 4 8 Extended Word 5 9 Extended Word 6 10 Extended Word 7 11 Extended Word 8 12 Message Data ::: (up to 139 256 Bytes) Message ID The Message ID register contains a 16-bit integer identifier for the command.
105G Wireless Gateway Bit/Field Err C/R Error Code User Manual Description Contents This bit indicates if the received message contains any errors 0: Message OK This bit indicates if the message is a command or a response 0: Response Message If the Err bit is set this field contains additional error information 0h: Invalid Message ID 1: Error 1: Command Message 1h: Invalid Message Type 2h: Invalid Command 3h: Invalid Data Size 4h-6h: Message header malformed 8h: Invalid Response 9h: Flash Config
Chapter 4 4900 – 4949 Configuration Spontaneous Alarm ACK IN Area (i.e. ACK to above) For example, a message could be sent to the Profibus Interface by constructing the required message in the “Message IN Area”, either via radio using appropriate block mapping(s) or locally via a host device or configuration tool. This message is activated upon change-of-state of the Message ID field (see “Message Structure” above).
105G Wireless Gateway User Manual Command and response layout Command Response (ID) (ID) Message Information 4002h 0002h Command Number 0003h 0003h Data Size 0000h 0000h Message ID • Extended Word 1 Slave Address Group Select Slave Address Group Select Extended Word 2 Control Command - Control Command - Extended Word 3 - - Extended Word 4 - - Extended Word 5 - - Extended Word 6 - - Extended Word 7 - Extended Fault Info Extended Word 8 - Fault Information Slave A
Chapter 4 • Configuration Control Command This parameter specifies the command to send.
105G Wireless Gateway User Manual Get Slave Diagnostics GET_SLAVE_DIAG: Command Number = 0004h This command reads diagnostic data from a specified slave. Note: The response data size depends on the actual slave implementation. Range 6 -244.
Chapter 4 • Configuration Ident Number Unique ID assigned by the Profibus User Organization • Extended Diagnostic Data Slave user specific diagnostic data. Consult the documentation for the actual slave for further information. • Fault Information &Extended Fault Information If ‘Invalid Other ’is returned in the Message Information word in the header of the response, information about the fault can be found here.
105G Wireless Gateway User Manual Set Slave Address SET_SLAVE_ADDRESS: Command Number = 0006h This command makes it possible to set the node address of a specified slave, provided that the slave supports this feature. Note: The message data size depends on the actual slave implementation; range 0 -240 bytes.
Chapter 4 Configuration 01h-FFh: Change of address only possible after the initial address (i.e. default address = 126) • Error Code [1 ...4 ] If ‘Return Code ’ equals 8030h (‘Negative indication from lower layer ’), status values according to the DP-specification are available in ‘Error Code 1 ’. Error Codes 2 ...3 are reserved. (See "Return Codes" and "Error Codes" in section 4.10.5 below.) • Return Code See "Return Codes" in section 4.10.5 “DP Error Codes”.
105G Wireless Gateway User Manual Get Live List GET_LIVE_LIST: Command Number = 0018h This command returns 127 bytes of information about the nodes on the network.
Chapter 4 Configuration DPV1 Acyclic Read MSAC1_READ: Command Number = 0020h This command initiates a DPV1 Class 1 acyclic read request. Consult EN50170 (DPV1) for more information. Command and response layout: Command Response (ID) (ID) Message Information 4002h 0002h Command Number 0020h 0020h Data Size 0000h (Size of data) Message ID Extended Word 1 Slave Add Slot No. Slave Add Slot No.
105G Wireless Gateway User Manual Returned data • Return Code See "Return Codes" in section “DP Error Codes” below. • Fault Information If ‘Invalid Other ’is returned in the Message Information word in the header of the response, information about the fault can be found here. • 0001h: Address out of range 000Ah: Failed to execute MSAC1_Alarm_Ack request 000Bh: Remote station failure 0010h: Remote Station DPV1 Failure (see ‘Error Decode’ below).
Chapter 4 • Configuration Slave Address Station address of the slave responder • Slot Number & Slot Index Used in the slave to address the desired data block. • Length This parameter specifies the number of bytes that has to be written. If the destination data block size is less than requested, the response will contain an error message. If the data block length is greater than or equal to the requested length, the response contains the number of bytes that has been written.
105G Wireless Gateway User Manual Command and response layout: Command Response (ID) (ID) Message Information 4002h 0002h Command Number 0022h 0022h (request length) 0000h Message ID Data Size Extended Word 1 Slave Add Slot No - Extended Word 2 Seq Number Alarm Spec Ack - Extended Word 3 Alarm Type Ext Diag - Extended Word 4 - - Extended Word 5 - - Extended Word 6 - - Extended Word 7 - - Extended Word 8 Fault Information - Message data byte 1 ::: Message data byte n
Chapter 4 • Configuration Data [1 ...n] Additional manufacturer specific alarm information (Alarm -PDU) • Fault Information If the Message Information word in the header of the message indicates ‘Invalid Other’, additional information is available in this register. 003Eh: Module has received an invalid alarm indication data structure from a DPV1 slave.
105G Wireless Gateway • User Manual Seq Number Unique identification number of the alarm Range 0 –31 • Alarm Spec Ack Gives additional information about the Alarm, such as an error appears, or disappears. It also indicates whether the slave needs additional acknowledge from the Master (Example:Writing to a certain memory area with an Acyclic Write request) Range 0 -7 • Alarm Type Identifies the alarm type, such as Process Alarm, Plug Alarm etc.
Chapter 4 Configuration 4.11.6 DP Return Codes Possible DP error codes in Message Data word ‘Return Code ’ Return Name Code Meaning 8010h DPMC_ERR_V1C_CLOSED Internal DPMC instance no longer exists.
105G Wireless Gateway User Manual Error Codes If return code indicates ‘DPMC_ERR_V1C_REQ_NEG ’, the status values according to the DPstandard may be available in ‘Error Code 1 ’ (See below). Consult the Profibus DP specification for information on how to interpret these status values. Error Code Name 01h L2_STATUS_UE 02h L2_STATUS_RR 03h L2_STATUS_RS 0Ch L2_STATUS_RDL 0Dh L2_STATUS_RDH 0Fh L2_STATUS_NA Meaning Consult Profibus DP Specification Elpro_man_105g_1.18.
Chapter 4 Configuration DPV1 Return Codes Possible DPV1 related Error Codes in Message Data word ‘Return Code’ Return Name Code Meaning 0003h DPMC_ERR_M_MEM_ALLOC Internal memory allocation error 0004h DPMC_ERR_M_L2_REQ Unknown opcode in the confirmation 0005h DPMC_ERR_M_INVALID_PAR Invalid parameter in user request 0007h DPMC_ERR_M_NOT_IN_DATA Slave is not in DataExchange (thus no DPV1 requestcan exist) 0012h DPMC_ERR_M_REQ_ACTIVE A request is already active 0018h DPMC_ERR_M_NOT_ALLOWED
105G Wireless Gateway 4.12 User Manual Fieldbus Configuration - Ethernet The 105G provides the following Ethernet functionality: 1. Modbus/TCP. The module supports the Modbus/TCP protocol and conforms to the Modbus/TCP specification 1.0 (full information on this protocol can be obtained from http://www.modicon.com/openmbus/index.html). Refer to section 4.12.2 below for configuration details. 2. EtherNet/IP.
Chapter 4 Configuration 255) separated by periods, where each integer represents the binary value of one byte in the IP address. This is called dotted-decimal notation. Example: 169.254.100.175 Subnet Mask An IP Address is divided into two main parts subnet ID and host ID. All devices on the same local network must have the same subnet ID, but a unique host ID. To separate these two parts a subnet mask is used.
105G Wireless Gateway User Manual 2 Read Input discretes 1 IN/OUT Bit 3 Read multiple registers 0 IN/OUT Word 4 Read input registers 1 IN/OUT Word 5 Write coil 1 OUT Bit 6 Write single register 1 OUT Word 7 Read exception status 1 - - 15 Force multiple coils 2 OUT Bit 16 Force multiple registers 0 OUT Word 22 Mask write register 2 OUT Word 23 Read/Write registers 2 IN/OUT Word Supported Exception Codes: Exception Name Code Description 01 Illegal functio
Chapter 4 Configuration OUT Area Modbus TCP Addresses (Fieldbus READ Locations 0 – 1023*) OUT Modbus Modbus Bit Address Area Word Location Address Bit 15 Bit 14 Bit 13 --Bit 2 Bit 1 Bit 0 0 1025 16385 16386 16387 --- 16398 16399 16400 1 1026 16401 16402 16403 --- 16414 16415 16416 --- --- --- --- --- --- --- --- --- 1022 2047 32737 32738 32739 --- 32750 32751 32752 1023 2048 32753 32754 32755 --- 32766 32767 32768 * Assumes Word Mode Addressing is selected in
105G Wireless Gateway Elpro_man_105g_1.18.
Chapter 4 Configuration Appropriate Modbus prefixes may need to be added to the Modbus Address depending on the host device. For example, a “word write” fieldbus mapping in the 105G to Modbus location 10, can be read by a host device as 30010 (30000 for an input register + 10 as the address). Alternatively, a “word read” fieldbus mapping in the 105G from Modbus Location 1025, can be written to by a host device as 41025 (40000 for an output register + 1025 as the address).
105G Wireless Gateway User Manual To make I/O data available via Ethernet/IP, ensure that the Enable Ethernet/IP checkbox on the Ethernet Settings page is checked. Appropriate Fieldbus Mappings need to be configured to link the required I/O registers to the Fieldbus Interface, as described above in the Profibus and Modbus/TCP sections. An “I/O Instance” for each fieldbus link must also be specified so that the configured I/O data is made available to one of the six possible Ethernet connections.
Chapter 4 Configuration Assembly Object, Class 04h The Assembly Object binds all mapped I/O data. This data is used for I/O connections. This object is set-up dynamically via fieldbus mappings through configuration software.
105G Wireless Gateway User Manual I/O Data Input Mapping Object, Class A0h This object is setup dynamically via fieldbus read mappings through configuration software. This data is also available as vendor specific Instance Attributes (64h to 69h) in the Assembly Object.
Chapter 4 Configuration 4.13 Fieldbus Configuration – DeviceNet 4.13.1 DeviceNet Introduction DeviceNet is a broadcast-oriented communications protocol based on the Controller Area Network (CAN). The physical fieldbus is a shielded copper cable composed of one twisted pair and two cables for the external power supply. The baud rate can be changed between 125k, 250k, and 500kbit/s via Configuration Software or DIP-switch.
105G Wireless Gateway User Manual 4.13.3 EDS File Each device in a DeviceNet network is associated with an EDS file, containing all necessary information about the device. This file is used by the network configuration tool during network configuration. The EDS file can either be downloaded from the ELPRO Technologies website (www.elprotech.com), or found on the Product CD supplied with the module. 4.13.
Chapter 4 Configuration 4.14.2 Modbus Plus Addressing Modbus Plus node addressing can be set using switches or via configuration software. To use the switch address settings, the “Enable Switch Address” option in configuration software must be selected, otherwise switch settings are ignored. NOTE – software address configuration is the recommended option if use of the GDB Offset and Count parameters is required (see section 4.11.4).
105G Wireless Gateway User Manual - (0x01) Illegal function for the addressed slave - (0x02) Illegal data address within the information field for the addressed slave - (0x03) Illegal data value in the information field for the addressed slave The 105G Modbus Plus supports up to 1024 words of output data and 1024 words of input data. Converting this to 40000 registers, the possible output registers (Data to Network) range is 40001 – 41024 of which the first 32 words (i.e.
Chapter 4 Configuration When adding mappings, software will automatically adjust the available 40000 register address range depending on the command type (i.e. read or write fieldbus mapping), see below. The I/O Register selection below for the fieldbus read mapping illustrates the allowable 40000 register address range base upon the chosen command type. The fieldbus write mapping links the 48 I/O registers 0 – 47 to the fieldbus interface 4X registers 40001 – 40048.
105G Wireless Gateway User Manual Finally, it must be taken into consideration that the 105G Modbus Plus module dynamically adjusts the 4X register range available to the network depending on the fieldbus mappings configured. The 105G will terminate the available 4X register range at the last mapped 4X register for both the read and write area. In the example above this means that the only 4X registers that are available to the Modbus Plus network are 40001 – 40048 and 41025 – 41072.
Chapter 4 Configuration 4.15 Connecting Serial I/O NOTE – Serial I/O Expansion are only possible for 105G Firmware versions 1.50 onwards. Serial expansion modules can be connected to the RS485 port of all 105G units except for the 105G-MD1 unit. If Serial Expansion modules are required to connect to an MD1 then it can only be done under the following circumstances. • If the 105G is configured as a “Repeater-only” under the Protocol selection.
105G Wireless Gateway User Manual Mappings are configured as per normal radio modules however the serial module is attached to its corresponding radio. Select ‘Serial Units’ under the radio module and configure as normal (see below). Notes: Each 115S module has an address between 96 and 127 (modules can use up to 3 addresses). The 105G acts as a repeater for any mapping from the 115S, also any mappings from other remote modules to the 115S will need to have the 105G configured as a repeater.
Chapter 4 Configuration 4.16 Access to Message Buffer Count The number of messages in buffers is stored in I/O registers for access from the data bus. This provides a powerful diagnostics feature for troubleshooting busy systems. The number of “free” messages is also provided - this is the amount of space available in the message buffers. I/O Reg Description 4350 – Number of Free COS (change-of-state) messages (max.
Chapter 6 Diagnostics Chapter 5 Specifications General EMC approval EN55022, EN 50082-1, ETS 300 683, AS 3548 IEC60950 Radio standards MPT 1329 UK EN-300-220 AS 4268.2 AUST RFS29 NZ EN 300 113, FCC Part 90 458 MHz, 500 mW EIRP 405 - 490 MHz, 10 - 500 mW 869 MHz, 500mW 472 MHz, 100 mW EIRP 458 MHz, 500 mW EIRP 380 – 520 MHz, 0.5 – 5W Housing 130 x 185 x 60mm DIN rail mount Powder-coated, extruded aluminium Terminal blocks Removable Suitable for 2.
105G Wirless Gateway User Manual Radio transmitter inrush 105G 450mA @ 13.8VDC (0.5W) 600mA @ 13.8VDC (1W) 800mA @ 13.8VDC (2W) 1.25A @ 13.8VDC (5W) Power fail status Monitored Can be transmitted to remote modules Battery voltage Monitored Analog value can be transmitted Low voltage status can be transmitted synthesised 405 - 490 MHz 220 – 235MHz 869.4 – 869.65 MHz 380 – 520 MHz Direct frequency modulation 12.5 KHz, 10 - 500 mW 25 KHz, 4W 250KHz, 500mW 12.5 / 25 KHz, 0.
Chapter 6 Diagnostics Chapter 6 Diagnostics Before installing a new system, it is always best to set up the system on a bench to test the system configuration. It is always easier to detect problems when the modules are together. After installation, test the radio paths, using the radio strength testing function described later in this section. Record the radio strength and background noise measurements for later reference (refer section 6.2.2 for this feature).
105G Wirless Gateway User Manual 6.2 Diagnostics Menu The 105G provides both offline and online diagnostic features to assist with troubleshooting. The offline diagnostics disable both the radio and fieldbus interface drivers, and are only used for simple radio tests such as “RSSI Measurement” or “Tone Reversals”. The online diagnostics provide more powerful debugging features such as access to the internal I/O Registers and Radio Communications Monitoring while the module is running (i.e. online).
Chapter 6 6.2.1 Diagnostics Offline Diagnostics: The offline diagnostics menu disables the radio protocol driver and the fieldbus protocol driver. Before displaying the offline debug menu open and start the “terminal” window in configuration software (see below), or use any third party terminal package. To display the offline diagnostics menu: • Put the 105G into configuration mode by pressing the small pushbutton switch in the end plate of the module for 5 seconds (as per section 4.
105G Wirless Gateway User Manual (c) Show Signal Strength This option allows measurement of radio path between two locations. This is done by the display of the received radio signal strength at the connected 105G. With no transmitted signal from the other site, the display will show the strength of the background noise, which is normally between -100 and -130 dBm. At the other site, the transmitter may be turned on (select “e” at the other 105G, or “Tone Reversals” if the other module is a 105U).
Chapter 6 Diagnostics To access the online diagnostics menu, first connect to the “terminal” in configuration software (see above) or use any third party terminal package. Once the terminal is connected, display the menu using the following procedure: • If the configured protocol driver uses the shared RS232/485 port (i.e. Modbus, DF1, or ELPRO Serial Driver), first enter the offline diagnostics menu (see 6.2.1 “Offline Diagnostics” above).
105G Wirless Gateway User Manual radio network. These options may be used to check operation of outputs at remote sites, and to check the values of inputs reported from remote sites. When the protocol driver does not use the shared RS232/485 port (Ethernet, Profibus, DeviceNet, and Modbus Plus) data is also exchanged with the fieldbus and the I/O Registers according to the configured fieldbus mappings.
Chapter 6 Diagnostics • To decode the radio traffic using configuration software, first start communications logging by selecting option “c) Enable Comms Logging” from the debug menu. Next, in the diagnostics screen select ‘Stop Terminal’ and then ‘Start Comms’. Configuration software now expects the 105G to be in monitor comms mode, and will decode all radio communications. The display will show radio messages transmitted and received.
105G Wirless Gateway User Manual To stop the decoding of “comms logging”, select the “Stop Comms” button. You should then also stop the 105G from outputting radio comms by pulling up the terminal menu (i.e. press “terminal” and then hit enter in the terminal screen) and selecting “d) Disable Comms Logging”. Option e) Add Time Stamps This option in the debug menu will add a timestamp to each displayed radio message. The timestamp is based on the 105G internal real time clock.
Chapter 6 Diagnostics 6.3 Ethernet Diagnostics Read and Write image array can also be done via the Ethernet port by selecting ‘Debug I/O Registers’ from within the Ethernet Settings window in the configuration software. The IP address of the module must have previously been configured in the module - refer to section 4.8.2 for setting IP address. Debug over Ethernet To debug the registers you will need to select ‘Connect’ under Debug Options.
105G Wirless Gateway User Manual To write to a register double click with mouse on the register and a “Modify I/O Registers” pop up box will appear. Enter value and press ‘OK’. You can disable the links between the I/O registers and the Ethernet interface by selecting “Disable Read Area” and “Disable Write Area” - if you do this, remember to reenable before you leave the diagnostics screen. Settings You can change your TCP Connection setting i.e. IP address and port.
Chapter 6 Diagnostics 6.4 Fieldbus Indicating LEDs All 105G modules (except MD1) are equipped with four fieldbus indication LED's located in the module end plate, used for diagnostics purposes. The meaning of the LED’s for each fieldbus is described below. 6.4.1 Ethernet Indicating LED’s The 105G-ET1 module can communicate Modbus TCP or EtherNet IP based protocols. The LED sequence will vary depending on Protocol being used and Ethernet Board firmware.
105G Wirless Gateway 6.4.2 User Manual Profibus Slave Indicating LED’s LED No Indication Description 1 - 2 Green 2 Off Module is not On-Line 3 Red Module is Off-Line and no data exchange is possible. 3 Off Module is not Off-Line 4 Flashing Red 1 Hz Error in configuration: IN and/or OUT length set during initialization of the module is not equal to the length set during configuration of the network.
Chapter 6 6.4.3 Diagnostics Profibus Master Indicating LED’s LED No Indication 1. Master Status Green Operate mode Green, flashing Clear mode Red Stop mode Off Offline 2. Database Status Green Green, flashing 3. Communication Status Description Database invalid Off No database downloaded Green, flashing All Elpro_man_105g_1.18.doc Database download in progress Red Green 4.
105G Wirless Gateway 6.4.4 User Manual Modbus Indicating LED’s LED No Indication 1 - 2 Active Red 3 Green 4 Active Green Page 149 Description Not Used ERROR; This led indicates that communication is not OK. MBP Active; This led flashes in different patterns depending on the module’s health (see below). Flash every 160 ms; on 80ms, then off 80 ms. Normal operation, the node is receiving and passing token. Flash every 1 s: This node is in MONITOR_OFFLINE state.
Chapter 6 6.4.5 Diagnostics DeviceNet Indicating LED’s Led No Colour State Description 1 - - 2 - Off 2 Green Steady 2 Green Flashing On line, Not connected 2 Red Flashing Connection timeout 2 Red Steady Critical link failure 2 Green/Red Flashing Power on self-test.
105G Wirless Gateway User Manual two radio transmissions, turning off DO2. Each time the switch is changed should be two radio messages (two sets of TX/RX flashes) at the mobile unit. Note that when the modules are within a couple of metres, they may not work well with antennas connected - in this case, test without antennas. Set up the fixed module in one of the test positions - this is normally at a control centre or repeater site. Fix the antenna in a temporary fashion.
Chapter 6 Diagnostics 4. If a reliable radio path is not possible because of distance or path obstructions, you will need to consider using a repeater module. The ideal repeater is another module in the system, in a good location to act as a repeater. If this is not the case, you need to consider installing a module to act specifically as a repeater. 6.6 Comms Logging The procedure differs depending on the firmware versions of the module, Post V1.70 or later. & Pre V1.70 6.6.
105G Wirless Gateway User Manual 11. Tick the “Time stamps” option and then select “Log to File” and type in the name of the log file. 12. From now on everything that is received will be logged to this file with a time stamp. 13. The data frames can be decoded by selecting a message and then viewing the panel below the Check Time Stamps Terminal windows. (See Below).
Chapter 6 Diagnostics 5. From this menu type the letter corresponding to “Initialize and Enter Debug Menu” on the menu. (It may be different for some versions). This will then display a “Debug Menu” 6. From this menu type the letter corresponding to “Enable Comms Logging”. (Again it may be different on some versions). 7. Now click on “Stop Terminal” and then “Start Comms” and select whether you wish to filter current system address. “Yes” for current system address only or “No” for all System addresses.
105G Wirless Gateway User Manual 1. Start E-Series Configuration Utility and open up the appropriate project. 2. Select from the module you wish to monitor comms at. 3. Press the “Diagnostic” button on the right hand side of the configuration screen and a new window will open headed “Communications Log”. 4. Hold down the indented black button (on the end of the module) until the ACT LED flashes (about 5 seconds), release button and you should now see “Type ‘m’ for menu......
Chapter 6 Chapter 7 Diagnostics WARRANTY We are pleased that you have purchased this product. ELPRO products are warranted to be free from manufacturing defects for the “serviceable lifetime” of the product. The “serviceable lifetime” is limited to the availability of electronic components. If the serviceable life is reached in less than three years following the original purchase from ELPRO, ELPRO will replace the product with an equivalent product if an equivalent product is available.
105G Wireless Gateway User Manual Appendix 1 Status Registers I/O Status Registers 5000 - 9499 Bit Information Meaning 15 Communications failure For inputs, this bit is set (“on”) if no message has been received from the remote address within the timeout period configured for this input. The bit is reset ("off") when a message is received. For outputs, this bit is set (“on”) if transmission to the remote was unsuccessful after five attempts.
Appendix 1 Status Registers Block Message Status Registers 9500 - 9999 Bit Information Meaning 15 Communications failure For read commands – Read Bits and Read Words – This bit is set if no response is received to the read command after a timeout, or if a communication fail response is received to a read. For Write Commands this bit is set if a communication failure response is received to the write command. For a Poll command, this bit should not be set.
105G Wireless Gateway User Manual Appendix 2 IT Functionality 105G-ET1 Ethernet module only File system The file system is a fixed-size storage area with a hierarchical directory structure. Any user- or application data can be stored in files within the file system. Files can be grouped in directories for increased readability. The file system features two security levels. Depending on security level, different users can have access to different files and directories.
Appendix 2 • IT Functionality Admin Mode Admin users have full access to the filesystem through FTP and Telnet. This enables the user to access areas of the file system that are restricted or inaccessible in Normal mode. The Admin user accounts are defined in the file ‘ad_pswd.cfg’. If no admin password file (See “System Files”) is found or Admin Mode is set by configuration software, the module will run in Admin Mode; i.e. all users will have Admin access rights.
105G Wireless Gateway User Manual web_accs.cfg To protect a directory from web access, a file called ‘web_accs.cfg’ must be placed in the directory to protect. This file shall contain a list of users that are allowed to browse the protected directory and its subdirectories. Multiple of these password files may be present in the system, allowing different users to access different files and directories. The file format is the same as for the ‘ad_pswd.cfg’ and ‘sys_pswd.
Appendix 2 IT Functionality The above example will allow all IP addresses beginning with 10.10.12 to access all protocols in the module. Addresses beginning with 10.10.13 will be able to access the web server, but not the FTP and Telnet servers. The Modbus/TCP and Ethernet/IP servers will accept connections from any IP address. The contents of this file can be redirected by placing the line ‘[File path]’ on the first row, and a file path on the second.
105G Wireless Gateway User Manual The contents of this file can be redirected by placing the line ‘[File path]’ on the first row, and a file path on the second. This procedure is exactly the same as with the system file “ip_accs.cfg” (see above). For example, redirecting the contents of this file to the “\user” directory would allow “Normal Mode” users to have access to this file.
Appendix 2 IT Functionality until it is removed. The entire virtual file system can be disabled using configuration software on the Ethernet Settings page. Replacing the virtual files makes it possible to for example replace the default logo by uploading a new logo named ‘\logo.jpg’. It is also possible to make links from a web page to the virtual configuration page. In that case the link shall point to ‘\config.htm’. The virtual file system contains the following files: \index.
105G Wireless Gateway User Manual DisplayGateway Syntax: This function returns the currently used Gateway address DisplayDNS1 Syntax: This function returns the address of the primary DNS server. DisplayDNS2 Syntax: This function returns the address of the secondary DNS server DisplayHostName Syntax: This function returns the hostname.
Appendix 2 IT Functionality Syntax: This SSI function gets the text from an object and stores it in the OUT area. ObjName - Name of object. offset - Specifies the offset from the beginning of the OUT area (i.e. Fieldbus Location). n - Specifies maximum number of characters to read (Optional) printf Syntax:
105G Wireless Gateway User Manual The conversion characters and their meanings are shown below. If the character after the % is not a conversion character, the behavior is undefined. Character Argument type Converted to d, i byte, word decimal notation (For signed representation. Use signed argument) o byte, word octal notation (without a leading zero). x, X byte, word hexadecimal notation (without a leading 0x or 0X), using abcdef for 0x or ABCDEF for 0X. u byte, word decimal notation.
Appendix 2 IT Functionality The arguments that can be passed to the SSI function printf are: Argument Description InReadSByte(offset) Reads a signed byte from position offset in the IN area InReadUByte(offset) Reads an unsigned byte from position offset in the IN area InReadSWord(offset) Reads a signed word (short) from position offset in the IN area InReadUWord(offset) Reads an unsigned word (short) from position offset in the IN area InReadSLong(offset) Reads a signed longword (long) from pos
105G Wireless Gateway User Manual Character Input data, Argument Type d Decimal number; byte, short i Number, byte, short. The number may be in octal (leading 0(zero)) or hexadecimal (leading 0x or 0X) o Octal number (with or without leading zero); byte, short u Unsigned decimal number; unsigned byte, unsigned short x Hexadecimal number (with or without leading 0x or 0X); byte, short c Characters; char*. The next input characters (default 1) are placed at the indicated spot.
Appendix 2 IT Functionality This SSI function saves the contents of a passed form to a file. The passed name/value pair will be written to the file "File name" separated by the "Separator" string. The contents can either be Appended to the file or overwrite the current content of the file. Default output: Success - Form saved to file Failure - Failed to save form Web Server The module features a complete web server with SSI functionality.
105G Wireless Gateway User Manual Parameter Description Area Source Fieldbus Interface Area. Possible values are ‘IN’ or ‘OUT’ Offset Source offset in Fieldbus Area, shall be written in decimal or hexadecimal. Type Source data type. Possible values are ‘byte’, ‘word’, and ‘long’ Match Value Value to compare with the source data. Shall be written in decimal or hexadecimal. Mask The module performs a logical ‘and’ on the source data and this Mask before the value is compared with the Match Value.
Appendix 2 IT Functionality Note: If the [Register] or [Register match] information is changed, a reset is required for changes to take effect. Other changes will take effect directly without a reset. Note: Hexadecimal values must be written in the format 0xN where ‘N’ is the hexadecimal value. SSI in Email Messages For predefined emails it is possible to include data in the mails. This is done in a similar way as data is added to web pages with SSI includes.
105G Wireless Gateway User Manual General Commands help Syntax: help [general|diagnostic|filesystem] version This command will display version information, serial number and MAC ID exit This command closes the Telnet session.
Appendix 2 IT Functionality Syntax: cd [path] Changes current directory. format Formats the filesystem. This is a privileged command and can only be called in administration mode. del Syntax: del [[path][filename]] Deletes a file. ren Syntax: ren [[path][old name]] [[path][new name]] Renames a file or directory. move Syntax: move [[source path][source file]] [[destination path]] This command moves a file or directory from the source location to a specified destination.
