Page 2 - Revision T – February 2013; Honeywell Process Solutions
ii Modbus® RTU Serial Communications User Manual 02/13 Copyright, Notices, and Trademarks Printed in U.S.A. – © Copyright 2010 by Honeywell Revision T – February 2013 Warranty/Remedy Honeywell warrants goods of its manufacture as being free of defective materials and faulty workmanship. Contact your...
Page 3 - About This Document; Abstract; World Wide Web; Telephone; Contact us by telephone at the numbers listed below.; Revision Information
02/13 Modbus® RTU Serial Communications User Manual iii About This Document Abstract This document provides generic information for Honeywell instruments implementing the Modbus RTU Serial Communications protocol. Configuration information relating to specific devices is supplied in separate user ma...
Page 4 - Contents
iv Modbus® RTU Serial Communications User Manual 02/13 Contents 1. INTRODUCTION ................................................................................................... 1 1.1 Modbus RTU Implementation ...........................................................................................
Page 6 - Tables
vi Modbus® RTU Serial Communications User Manual 02/13 Tables Table 1-1 Communication and Configuration User Manuals __________________________________ 1 Table 2-1 Modbus RTU Message Formats ________________________________________________ 2 Table 2-2 IEEE Floating Point Number Examples in FP B Form...
Page 7 - Modbus RTU Implementation; Table 1-1 Communication and Configuration User Manuals; eZtrend V5
Introduction 02/13 Modbus® RTU Serial Communications User Manual 1 1. Introduction 1.1 Modbus RTU Implementation This implementation is designed to provide a popular data exchange format connecting these instruments to both Honeywell and foreign master devices. The Modbus RTU allows the instrument t...
Page 8 - Modbus RTU Message Format; bit binary; Modbus RTU Link Layer; The link layer includes the following properties/behaviors:
Modbus RTU Message Format 2 Modbus® RTU Serial Communications User Manual 02/13 2. Modbus RTU Message Format Table 2-1 Modbus RTU Message Formats Coding system 8 bit binary Number of data bits per character 10 Bits start bits - 1 data bits - 8 parity bits - 0 stop bits - 1 Parity Not used Bit transf...
Page 9 - General Modbus RTU message format; Modbus RTU Data Layer; The data layer includes:
Modbus RTU Message Format 02/13 Modbus® RTU Serial Communications User Manual 3 General Modbus RTU message format Query message format [Slave Address, Function Code, Function code dependent data, CRC 16] Response message format [Slave Address, Function Code*, Function code dependent data, CRC 16] * ...
Page 10 - IEEE Floating-Point Data Format; The formula for calculating the floating-point number is:; mantissa x 2; exponent (8 bit unsigned value); Figure 2-1 IEEE Floating-Point Data format; Add an “implied” value of one to the left of the binary point:; Using positioned notation, this binary number is equal to:
Modbus RTU Message Format 4 Modbus® RTU Serial Communications User Manual 02/13 2.3 IEEE 32-bit Floating-Point Register Information The Modbus applications support IEEE 32-bit floating-point information for several of the function codes. IEEE Floating-Point Data Format The formula for calculating th...
Page 11 - Exponent; removing the sign and mantissa bits, the exponent becomes:; Mantissa and Exponent Combination; Below is a list of sample float values in IEEE format:
Modbus RTU Message Format 02/13 Modbus® RTU Serial Communications User Manual 5 Exponent The exponent is defined by an unsigned 8-bit binary value (bits 23 through 30). The value of the exponent is derived by performing a signed subtraction of 127 (decimal) from the 8-bit exponent value. DECIMAL HEX...
Page 12 - See IEEE Formats starting on next page.
Modbus RTU Message Format 6 Modbus® RTU Serial Communications User Manual 02/13 Reserved Operands Per the Standard certain exceptional forms of floating-point operands are excluded from the numbering system. These are as follows: EXCEPTION EXPONENT MANTISSA +/- Infinity All 1’s All 0’s Not-a-Number ...
Page 13 - IEEE Floating Point Formats; High; continued next page
Modbus RTU Message Format 02/13 Modbus® RTU Serial Communications User Manual 7 IEEE Floating Point Formats S E7 E6 E5 E4 E3 E2 E1 E0 M22 M21M20 M19 M18 M17 M16 REGISTER N (High) REGISTER N+1 (Low) M15 M14 M13 M12 M11 M10 M9 M8 M7 M6 M5 M4 M3 M2 M1 M0 High Low High Low Bit 0 Bit 31 FP B - Floating P...
Page 15 - Modbus RTU Function Codes; Repolling of data is not supported by these instruments.; Table 3-1 Modbus RTU Function Codes Definitions; Configuration Interface
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 9 3. Modbus RTU Function Codes The Honeywell Universal Modbus RTU protocol uses a subset of the standard Modbus RTU function codes to provide access to process-related information. Several MODICON function codes are employ...
Page 16 - Part 1
Modbus RTU Function Codes 10 Modbus® RTU Serial Communications User Manual 02/13 Table 3-2 Maximum Number of Object Addresses for Each Instrument Type Part 1 Object Name RSX VRX100 VRX150 VPR100 VRX180 DR 4300 DR 4500 DPR 100 DPR 180 DPR 250 Herculine Smart Actuators See Sub section Alarms Status 12...
Page 17 - Object Name; Discrete; ATTENTION
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 11 Object Name QX Minitrend SX Multitrend Minitrend V5 Multirend Plus V5 UDC 2300 UDC 2500 UDC 3200 UDC 3300 UDC 3500 UDC 5300 See Sub section Comm. or Constant Values 32 32 32 32 0 0 0 0 0 9 A.7 Discrete Input 16 48 16 32...
Page 18 - Table 3-3 Maximum Number of Registers Allowable per Request
Modbus RTU Function Codes 12 Modbus® RTU Serial Communications User Manual 02/13 Table 3-3 Maximum Number of Registers Allowable per Request Function Code X Series Recorders QX and SX Minitrend V5, Multitrend Plus V5 RSX, VPR, VRX, UDC5300 DPR100, DPR180, DPR250 DR4300, DR4500 UDC3300, UDC2300, UDC2...
Page 19 - Function Code 01 – Read Digital Output Status; Description
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 13 3.1 Function Code 01 – Read Digital Output Status Description Function code 01 (0X references) is used to read a Digital Output’s (DO) ON/OFF status of the slave device in a binary data format. All binary data transferr...
Page 21 - Function Code 02 – Read Digital Input Status
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 15 3.2 Function Code 02 – Read Digital Input Status Description Function code 02 (1X references) is used to read a Digital Input’s (DI) ON/OFF status of the slave device in a binary data format. All binary data transferred...
Page 22 - Function Codes 03/04 – Read Input Registers
Modbus RTU Function Codes 16 Modbus® RTU Serial Communications User Manual 02/13 3.3 Function Codes 03/04 – Read Input Registers Description Function code 03 (4X references) or Function code 04 (3X references) is used to read the binary contents of input registers in the slave referenced in Appendix...
Page 23 - Response
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 17 Response The register data in the response message are packed as two bytes per register. For each register, the first byte contains the high order bits and the second contains the low order bits. The floating point valu...
Page 24 - Function Code 05 – Force Single Digital Output; Query; Query message format for function code 05
Modbus RTU Function Codes 18 Modbus® RTU Serial Communications User Manual 02/13 3.4 Function Code 05 – Force Single Digital Output Description Force a single Digital Output (DO) (0X reference) to either ON or OFF. These are the same Dos used in Function Code 01. When broadcast, the same function fo...
Page 25 - Function Codes 06 – Preset Single Register
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 19 3.5 Function Codes 06 – Preset Single Register Description Presets an integer value into a single register (4X references). When broadcasted, the function presets the same register references in all attached slaves. The...
Page 26 - Function Code 08 – Loopback Message
Modbus RTU Function Codes 20 Modbus® RTU Serial Communications User Manual 02/13 3.6 Function Code 08 – Loopback Message Description Echoes received query message. Query Message can be any length up to half the length of the data buffer minus 8 bytes. Query message format for function code 08 Slave ...
Page 29 - Device Type
Modbus RTU Function Codes 02/13 Modbus® RTU Serial Communications User Manual 23 +Device Specific Data: Device Description Model ID Device Class ID Device Mapping Device Description: 16 Character ASCII Message (zero filled) (bytes 5-20). Device Specific. Usually contains Device Tag + Version Number ...
Page 31 - Modbus RTU Exception Codes; Introduction; It returns a normal response.
Modbus RTU Exception Codes 02/13 Modbus® RTU Serial Communications User Manual 25 4. Modbus RTU Exception Codes Introduction When a master device sends a query to a slave device it expects a normal response. One of four possible events can occur from the master’s query: • Slave device receives the q...
Page 32 - Table 4-1 Modbus RTU Data Layer Status Exception Codes; Function Code 20 only
Modbus RTU Exception Codes 26 Modbus® RTU Serial Communications User Manual 02/13 Table 4-1 Modbus RTU Data Layer Status Exception Codes Exception Code Definition Description 01 Illegal Function The message received is not an allowable action for the addressed device. 02 Illegal Data Address The add...
Page 33 - What’s in this appendix?; A.1 Register Map Overview; Table A-1 Global Register Map; Miscellaneous Parameters or Loop #1 Integer
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 27 A. Appendix: Register Map What’s in this appendix? This appendix describes all paramters accessible by Function Code 03, 04, 06 and 10h. Section A.1 gives a global overview of each function and its addresses/regist...
Page 35 - A.2 Miscellaneous Register Map; Address
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 29 A.2 Miscellaneous Register Map A.2.1 RSX, VPR, VRX, UDC5300 Miscellaneous Register Map Address (hex) Register (decimal) Parameter Name Access Notes 0000 40001 Instrument Mode R/W Bit Packed Indicators: Bit 0: 1:Dia...
Page 37 - A.3 Loop Value Integer Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 31 A.3 Loop Value Integer Register Map The following table applies to the following instruments: UDC2300, UDC2500, UDC3200, UDC3300, UDC3500, DR4300 and DR4500. This table applies to Loops 1-24 except Loops 2-24 use t...
Page 38 - Note 3
Appendix B: CRC-16 Calculation 32 Modbus® RTU Serial Communications User Manual 02/13 Address (hex) Register (decimal) Parameter Name Access Notes 001C 40029 Working Set Point R/W Signed 16 bit integer Prescale * 10 Note 5 On a write to this register the instrument will update the proper set point a...
Page 39 - Note 12
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 33 Address (hex) Register (decimal) Parameter Name Access Notes 003C 40061 Remote/Local Set Point State R/W Bit Packed Bit 0: 0:LSP; 1:RSP Bit 1-15: Unused Note 12 003D 40062 Tune Set State R/W Unsigned 16 bit integer...
Page 41 - A.4 Loop 2 and Extended Value Integer Register Map – UDC3500
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 35 A.4 Loop 2 and Extended Value Integer Register Map – UDC3500 The following table applies to the following instrument: UDC3500 – Loop2 and Exended range . Address (hex) Register (decimal) Parameter Name Access Notes...
Page 43 - Set Point State
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 37 Address (hex) Register (decimal) Parameter Name Access Notes 013A 40315 Auto/Manual State R/W Bit Packed Bit 0: 0:Manual; 1:Auto Bit 1-15: Unused Note 12 013B 40316 Set Point State R/W Unsigned 16 bit integer 0=SP1...
Page 44 - A.5 Loop Value Register Map; if active
Appendix B: CRC-16 Calculation 38 Modbus® RTU Serial Communications User Manual 02/13 A.5 Loop Value Register Map This table contains addresses of Loop #1; see Table A-1 on page 27 for addresses of other loops. Address (hex) Register (decimal) Parameter Name Access Notes 0040 40065 PV R Floating Poi...
Page 49 - A.6 Analog Input Value Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 43 A.6 Analog Input Value Register Map Address (hex) Register (decimal) Channel Number Access Notes 1800 46145 Analog Input #1 R Floating Point in Engineering Units. Number of Inputs vary according to model numbers 18...
Page 50 - A.7 Communication or Constant Value Register Map
Appendix B: CRC-16 Calculation 44 Modbus® RTU Serial Communications User Manual 02/13 A.7 Communication or Constant Value Register Map Address (hex) Register (decimal) Channel Number Access Notes 1880 46273 Communication Value #1 R/W Floating Point in Engineering Units. DR4500: Input 1 Bias 1882 462...
Page 51 - A.7.1 Extended Comms for X Series recorders
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 45 A.7.1 Extended Comms for X Series recorders Address (hex) Register (decimal) Channel Number Access Notes 2440 49281 Communication Value #33 R/W Floating Point in Engineering Units. 2442 49283 Communication Value #3...
Page 53 - A.9 Math or Calculated Value Status Register Map; Bit Packed
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 47 A.9 Math or Calculated Value Status Register Map Address (hex) Register (decimal) Channel Number Access Notes 1AC0 46849 Math Status #1-#16 R Bit Packed: Bit 0: Math #1 Status : Bit 15: Math #16 Status 0: Math OFF ...
Page 54 - A.10 Totalizer Value Register Map; Floating Point in Engineering Units.
Appendix B: CRC-16 Calculation 48 Modbus® RTU Serial Communications User Manual 02/13 A.10 Totalizer Value Register Map Address (hex) Register (decimal) Channel Number Access Notes 1B00 46913 Totalizer Value #1 R Floating Point in Engineering Units. 1B02 46915 Totalizer Value #2 R : 1B04 46917 Total...
Page 55 - A.11 Totalizer Status Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 49 A.11 Totalizer Status Register Map Address (hex) Register (decimal) Channel Number Access Notes 1B80 47041 Totalizer Status #1 - #16 R Bit Packed Bit 0: Totalizer #1 Status Bit 1: Totalizer #2 Status : Bit 15: Tota...
Page 56 - A.12 Shed Timer Reset Register; Reset Shed Timer Loop 1
Appendix B: CRC-16 Calculation 50 Modbus® RTU Serial Communications User Manual 02/13 A.12 Shed Timer Reset Register Address (hex) Register (decimal) Channel Number Access Notes 1B90 47057 Reset Shed Timer Loop 1 W Signed 16 bit integer Write this address to clear an infinite shed condition. (Shedti...
Page 59 - A.14 Time Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 53 A.14 Time Register Map Address (hex) Register (decimal) Channel Number Access Notes 1BE0 47137 Hours R/W 0 to 23 1BE1 47138 Minutes R/W 0 to 60 1BE2 47139 Seconds R/W 0 to 60 1BE3 47140 Month R/W 1 to 12 1BE4 47141...
Page 60 - A.15 Alarm Status Register Map
Appendix B: CRC-16 Calculation 54 Modbus® RTU Serial Communications User Manual 02/13 A.15 Alarm Status Register Map Address (hex) Register (decimal) Channel Number Access Notes 1BF0 47153 Alarm Status #1 - #16 R Bit Packed Bit 0: Alarm #1 Status Bit 1: Alarm #2 Status Bit 2: UDC3500 Alarm #3 Status...
Page 61 - A.16 Alarm Set Point Value Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 55 A.16 Alarm Set Point Value Register Map Address (hex) Register (decimal) Channel Number Acces s Notes 1C00 47169 Alarm Set Point Value #1 R/W Floating Point in Engineering Units. DR4300, DR4500, UDC2300, UDC2500, U...
Page 62 - Alarm Status, Pen 10
Appendix B: CRC-16 Calculation 56 Modbus® RTU Serial Communications User Manual 02/13 A.16.1 Alarm Status Address (hex) Register (decimal) Channel Number Access Notes 1980 6529 Alarm Status, Pen 1 (start address) R 1981 6530 Alarm Status, Pen 2 R 1982 6531 Alarm Status, Pen 3 R 1983 6532 Alarm Statu...
Page 63 - A.17 Set Point Programmer Value Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 57 A.17 Set Point Programmer Value Register Map Address (hex) Register (decimal) Channel Number Access Notes 1E00 47681 Set Point Programmer Output R Floating Point in Engineering Units. 1E02 47683 Current Segment Num...
Page 64 - Hold
Appendix B: CRC-16 Calculation 58 Modbus® RTU Serial Communications User Manual 02/13 Address (hex) Register (decimal) Channel Number Access Notes 1E0D 47694 Hold W Signed 16 bit integer Write to location Holds Profile; Data ignored Note 4 1E0E 47695 Advance W Signed 16 bit integer Write to location...
Page 65 - A.18 Set Point Programmer Additional Values Register Map; Note 1
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 59 A.18 Set Point Programmer Additional Values Register Map Address (hex) Register (decimal) Channel Number Access Notes 1F3A 47995 Time Units R/W Bit Packed Bit 0: seconds 1: minutes 2: hours 3-15: Unused Notes 2, 4 ...
Page 67 - Only
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 61 Address (hex) Register (decimal) Channel Number Access Notes 1F44 48005 Program End Segment UDC3500 Only for Program Number 1 - 4 R W Unsigned 16-bit Integer End segment 1 to End segment 20 Bit Packed 2 = Soak Segm...
Page 68 - A.19 Set Point Programmer Segment Map; Start Address; Set Point Programmer #1 Segment 1
Appendix B: CRC-16 Calculation 62 Modbus® RTU Serial Communications User Manual 02/13 A.19 Set Point Programmer Segment Map A profile can contain up to 64 segments depending on the instrument. Each segment is made up of 8 registers. The segment mapping for setpoint programmer #1 is shown below. Star...
Page 70 - A.19.2 Example For Determining a Segment Register; Segment #8 offset address
Appendix B: CRC-16 Calculation 64 Modbus® RTU Serial Communications User Manual 02/13 A.19.2 Example For Determining a Segment Register To change the ramp value in segment #8 of setpoint programmer #2, the register address is determined as follows. Step 1: Use Table A-1 to determine the start addres...
Page 71 - A.20 Herculine Smart Actuator Value Register Map; Parameter Name
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 65 A.20 Herculine Smart Actuator Value Register Map Address(hex) Register (decimal) Parameter Name Access Notes 1AD0 46865 Position R FP 0-100% or 0-90 Degrees of Travel 1AD2 46867 Input R Floating Point 0-100% 1AD4 4...
Page 72 - System Status
Appendix B: CRC-16 Calculation 66 Modbus® RTU Serial Communications User Manual 02/13 1AFE 46911 System Status R Bit Packed System Status Failures Bit 0 : FailSafe Bit 1 : RamTest Bit 2 : Config Checksum Bit 3 : Working Calibration Checksum Bit 4 : SeeTest Bit 5 : EE Fail 0 = OK; 1 = Failure 1AFF 46...
Page 73 - A.21 Herculine Smart Actuator Factory Data Register Map
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 67 A.21 Herculine Smart Actuator Factory Data Register Map Address(hex) Register (decimal) Parameter Name Access Notes 27D0 50193 Tag Name R ASCII string (3 Registers) 27D3 50196 Date of Manufacture R ASCII string (3R...
Page 74 - A.22 Herculine Smart Actuator Maintenance Data Register Map
Appendix B: CRC-16 Calculation 68 Modbus® RTU Serial Communications User Manual 02/13 A.22 Herculine Smart Actuator Maintenance Data Register Map Address(hex) Register (decimal) Parameter Name Access Notes 1E40 47745 Temperature R Temperature in degrees F 1E42 47747 Temperature Hi R Temperature in d...
Page 75 - See following function:
Appendix B: CRC-16 Calculation 02/13 Modbus® RTU Serial Communications User Manual 69 B. Appendix: CRC-16 Calculation See following function: extern void calculate_CRC(unsigned char *message, int length, unsigned char *CRC) { unsigned char CRCHi, CRCLo, TempHi, TempLo; static const unsigned char tab...
Page 76 - Sales and Service; EMEA; NORTH AMERICA; SOUTH AMERICA
Honeywell Process Solutions 1860 West Rose Garden Lane 51-52-25-66 Rev.T Phoenix, Arizona 85027 February 2013 www.honeywellprocess.com 2013 Honeywell International Inc. Sales and Service For application assistance, current specifications, pricing, or name of the nearest Authorized Distributor, con...