Notes on Developing TransSECS Devices Applications
Omron FINS Register Addresses
Valid FINS addresses start with “CS”, “TS”, “TK”, “IR”, “CIO”, “DR”, “A”, “C”, “T”, “D”, “H”, or “W”.
A decimal with 0-15 may follow the numeric address for D, E, A, W, H, and CIO for the specific bit.
E's may have the format Exxxxx, Exxxxx.bb, Exx:yyyyy, Exx:yyy.bb
Examples: D1000, D1200.08
Modbus Register Addresses
Modbus address follow the standard Modbus register scheme. If you add a “Modbus Word” the register will be a 4x (or 3x if selected in the properties) register number. Just enter the register - so entering “1” will reference register 40001.
EtherNetIP Register Addresses
EtherNetIP is based on tag names. Enter the tag from your PLC in the tag name field.
Siemens S7 PLCs
There are three primary families of the S7 PLC. S7-1200, S7-300 and S7-1500 (the S7-200 also supported).
To support the different S7 PLCs, the “TSAP dst” property needs to be changed to match the PLC type and configuration. This is an expert property.
S7-1200 The S7-1200 is usually addressed with the TSAP 02 01 (binary).
S7-300 & S7-1500
The S7-1500 uses that same configuration as the S7-300
The S7-300 is usually addressed with the TSAP 03 02 (binary).
Additional information is available here:
https://www.tanindustrie.de/fr/Help/ConfigClient/tsap_s7.htm
S7 Addressing
S7 (and S5) PLCs have the following address structure.
Supported memory types are: I,E,Q,A,M,F,DB,T,C & Z Supported data types are: X,B,W,I,D,R,S - Boolean, Byte, Word, Int (signed word), Double Word, Real and String
Scalar types can have bit numbers added, so, for example, DB8:D80.11 and MW11.1 are valid addresses. For String types, the length is provided. For example, DB8:S20.50 will read a string of 50 byte starting from DB8 offset 20. By defaults, strings are read and written in the Siemens format with the first character being the maximum length and the second character being the current length. Setting the “Null Terminated” flag will cause strings to be read and written as raw characters ending with a nul (\0).
Further register examples:
DB8:S86.50 DB8:D80.11 DB8:I80.11 DB8:R2 DB8:D8 DB8:D8.2 DB8:S20.50 DB8:I0.2 DB8:I80 DB8:W80.11 DB8:W0.2 DB8:W80 DB8:X0.2 DB8:X6.11 DB8:X6.2 MS11.7 FB2 QI21 AI21 AW21 MW11.0 MW11 MX10.7 T0 T0.4 C1 C1.4
S7 Arrays
An S7 Array is configured with the size (Register Count) and starting register (Start Register), and the data type of the array is taken from the address designation. In the example
The data type is “B” in the starting address DB195:B0, and the number of elements in the array is 6. This means that the S7Array will read 6 byte registers starting at DB195:B0, so DB195:B0,DB195:B1,DB195:B2,DB195:B3,DB195:B4,and DB195:B5. If the Start Register was set to read words, such as DB195:W8, and the array size was set to 3, DB195:W8,DB195:W9,and DB195:W10 would be returned in the array.