Notes on Developing TransSECS Devices Applications

Omron FINS Register Addresses

Valid FINS addresses start with “CS”, “TS”, “TK”, “IR”, “CIO”, “DR”, “A”, “C”, “T”, “D”, “H”, or “W”.

A decimal with 0-15 may follow the numeric address for D, E, A, W, H, and CIO for the specific bit.

E's may have the format Exxxxx, Exxxxx.bb, Exx:yyyyy, Exx:yyy.bb

Examples: D1000, D1200.08

Modbus Register Addresses

Modbus address follow the standard Modbus register scheme. If you add a “Modbus Word” the register will be a 4x (or 3x if selected in the properties) register number. Just enter the register - so entering “1” will reference register 40001.

EtherNetIP Register Addresses

EtherNetIP is based on tag names. Enter the tag from your PLC in the tag name field.

Siemens S7 PLCs

There are three primary families of the S7 PLC. S7-1200, S7-300 and S7-1500 (the S7-200 also supported).

To support the different S7 PLCs, the “TSAP dst” property needs to be changed to match the PLC type and configuration. This is an expert property.

S7-1200 The S7-1200 is usually addressed with the TSAP 02 01 (binary).

S7-300 & S7-1500

The S7-1500 uses that same configuration as the S7-300

The S7-300 is usually addressed with the TSAP 03 02 (binary).

Additional information is available here:

https://www.tanindustrie.de/fr/Help/ConfigClient/tsap_s7.htm

S7 Addressing

S7 (and S5) PLCs have the following address structure.

Supported memory types are: I,E,Q,A,M,F,DB,T,C & Z Supported data types are: X,B,W,I,D,R,S - Boolean, Byte, Word, Int (signed word), Double Word, Real and String

Scalar types can have bit numbers added, so, for example, DB8:D80.11 and MW11.1 are valid addresses. For String types, the length is provided. For example, DB8:S20.50 will read a string of 50 byte starting from DB8 offset 20. By defaults, strings are read and written in the Siemens format with the first character being the maximum length and the second character being the current length. Setting the “Null Terminated” flag will cause strings to be read and written as raw characters ending with a nul (\0).

Further register examples:

DB8:S86.50
DB8:D80.11
DB8:I80.11
DB8:R2
DB8:D8
DB8:D8.2
DB8:S20.50
DB8:I0.2
DB8:I80
DB8:W80.11
DB8:W0.2
DB8:W80
DB8:X0.2
DB8:X6.11
DB8:X6.2

MS11.7
FB2
QI21
AI21
AW21
MW11.0
MW11
MX10.7
T0
T0.4  
C1
C1.4

S7 Arrays

An S7 Array is configured with the size (Register Count) and starting register (Start Register), and the data type of the array is taken from the address designation. In the example

The data type is “B” in the starting address DB195:B0, and the number of elements in the array is 6. This means that the S7Array will read 6 byte registers starting at DB195:B0, so DB195:B0,DB195:B1,DB195:B2,DB195:B3,DB195:B4,and DB195:B5. If the Start Register was set to read words, such as DB195:W8, and the array size was set to 3, DB195:W8,DB195:W9,and DB195:W10 would be returned in the array.