Jumo Logoscreen NT: Paperless Recorder With TFT Display, Compactflash Card and Usb Interfaces

JUMO LOGOSCREEN nt
Paperless recorder
with TFT display, CompactFlash card
and USB interfaces
B 706581.2.0
Interface Description
V1.00/EN/00504688
Contents
1 Introduction 5
1.1 Preface .......................................................................................................... 5
1.2 Typographical conventions ......................................................................... 6
1.2.1 Warning signs ................................................................................................. 6
1.2.2 Note symbols ................................................................................................. 6
1.2.3 Number types ................................................................................................. 6
2 General information 7
2.1 Target group .................................................................................................. 7
2.2 Interfaces ...................................................................................................... 7
2.3 System prerequisites ................................................................................... 7
3 Connecting the interface 9

3.1 Connection position ..................................................................................... 9
3.2 RS232 .......................................................................................................... 11
3.3 Toggling between RS232 and RS485 ........................................................ 11
3.4 Configuration of the serial interfaces ....................................................... 12
3.5 Configuration of the Ethernet interface ................................................... 13
3.5.1 Parameters ................................................................................................... 13
4 Modbus protocol description 15

4.1 Master-Slave principle ............................................................................... 15
4.2 Transmission mode (RTU) ......................................................................... 15
4.3 Timing of the communication ................................................................... 16
4.4 Structure of a Modbus telegram ............................................................... 17
4.5 Device address ........................................................................................... 18
4.6 Function codes ........................................................................................... 18
4.6.1 Read n bit ..................................................................................................... 19
4.6.2 Read n words ............................................................................................... 20
4.6.3 Write one bit ................................................................................................. 21
4.6.4 Write one word ............................................................................................. 22
4.6.5 Write n words ............................................................................................... 23
4.7 Transmission format (integer, float, double and text values) ................. 24
Contents
4.8 Checksum (CRC16) .................................................................................... 27
4.9 Error messages .......................................................................................... 28
4.9.1 Modbus error codes ..................................................................................... 28
4.9.2 Error messages for invalid values ................................................................ 29
4.9.3 Error codes as integer return values ............................................................ 30
5 Serial protocol types 35

5.1 Modbus slave .............................................................................................. 35
5.2 Modbus master .......................................................................................... 38
5.3 Barcode ....................................................................................................... 39
6 Ethernet protocols 41
6.1 HTTP ............................................................................................................ 41
6.2 Browser connection ................................................................................... 41
6.3 Modbus TCP ............................................................................................... 42
6.4 Email (SMTP and POP3) ............................................................................. 44
7 Address tables 47
7.1 Data types and type of access .................................................................. 47
7.2 Modbus addresses of important device and process data .................... 47
8 Index 65
1 Introduction
1.1 Preface
Please read this interface description before commissioning the interfaces of
the device. Keep the interface description in a place accessible to all users at
all times.
Please assist us in improving this Interface description.
Your comments are highly appreciated.
All information required to operate the interface is described in the

supplied Interface description. Nevertheless, should problems be
encountered during commissioning/start-up, please refrain from
carrying out any inadmissible manipulations. This could jeopardize
your warranty rights!
Please contact the nearest subsidiary or the head office.
When returning controller modules, assemblies or components,

please observe the regulations according to DIN EN 61340-5-1 and
DIN EN 61340-5-2 „Protection of electrostatic sensitive devices“.
For transport, only use ESD packages.
Please note that we cannot accept any liability for damage caused
by ESD.
ESD=Electro Static Discharge
5
1 Introduction
1.2 Typographical conventions
1.2.1 Warning signs

The symbols for Caution and Attention are used in this operating manual
under the following conditions:
Caution This symbol is used when there may be danger to personnel if

the instructions are ignored or not followed correctly!
Attention This symbol is used when there may be damage to equipment

or data if the instructions are ignored or not followed correctly!
Attention This symbol is used where special care is required when

handling components liable to damage through electrostatic
discharge.
1.2.2 Note symbols

Note This symbol is used when your special attention is drawn to a
remark.
abc1 Footnote Footnotes are remarks that refer to specific points in the text.
Footnotes consist of two parts:
A marker in the text and the foot note text itself.
The markers in the text are arranged as continuous superscript
numbers.
1.2.3 Number types

0x0010 Hexadecimal A hexadecimal number is identified by „0x“ preceding the
number actual number (here: 16 decimal).
6
2 General information
2.1 Target group
This operating manual is intended for user, who want to use the paperless
recorder as a Modbus slave and read out data from a Modbus master (e.g.
PLC).
2.2 Interfaces
ex-factory The paperless recorder is equipped with several interfaces as a standard:
• Serial interface RS232 or RS485
• Serial interface RS232 (barcode scanner)
• Ethernet 10/100 MBit/s
• 2 USB host and 2 USB device interfaces
The serial and the ethernet interfaces serves for communication with a bus
system or PC. They can be used, for example, to read out the measured
values and/or instrument and process data from the paperless recorder. In
connection with the ethernet interface and a PC webbrowser, recorders can be
monitored via the internet. Two RS232 interfaces are available. Both interfaces
are to be considered as equal.
The USB interfaces are fitted on the front and the back and intended for the
operation with the setup program or the PCA communication software (PCC)
or for reading out data via the USB memory stick. Only use one USB host or
USB device interface at a time. Instruments with stainless steel fronts are not
equipped with USB interfaces on the front.
Extra code The paperless recorder is equipped with several interfaces as an option:
• PROFIBUS-DP interface
2.3 System prerequisites

The following items are required for interface operation:
• Connection line:
for RS232
Interface cable RS232 (9/9-pin): TN 00367735
Interface cable RS232 (9/25-pin): TN 00367736
for ethernet, e.g.
RJ 45 patch cable, CAT 5 or higher (cross over)
• Setup or evaluation program, e.g.
Setup program: TN 00468991
PC evaluation software PCA3000: TN 00431882
PCA communication software PCC: TN 00431879
JUMO SVS3000 Visualization: Data Sheet
700755
• PC or notebook
7
2 General information
8
3 Connecting the interface
3.1 Connection position
Front view of
the
paperless
recorder
USB host USB device

for the data exchange for communication with the
(measured data, setup program or PCC
configuration data,
user lists) between paperless
recorder and PC
Connection
diagram Use a USB interface either at the front or at the rear! Only use one
host or device interface at a time.
USB host = Plug type A
USB device = Plug type B mini
9
Rear view of the
paperless (1) (2)
recorder
1. 4. L1 N PE
2. 3.
11 12 13 (L+) (L-)
14.
21 22 23 31 32 33 41 42 43 51 52 53 61 62 63 71 72 73
7 8 9 10 11 12
1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4
10. 11.
- -
+
B16
B15
B13
B12
B14
+
B10
B11
B9
Uin Uout
1 2 3 4 5 6
1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4
8. 9.
- -
+
+
B2
B4
B6
B5
B3
B7
B8
B1
Uin Uout
7.
6.
5.
15.
(3) (4) (5) (6)

(1) RS232 interface for (4) Ethernet interface
barcode scanner (serial) (serial)
(2) PROFIBUS-DP interface (5) RS232/485 interface
(optional) (serial)
(3) USB host interface (6) USB device interface
(serial) (serial)
Connection
diagram RS232 (plugs (1) + (5)) RS485 (plug (5))
RS232/RS485
We recommend the use of a twisted connection cable with

shielding!
Only connect the signals specified above, otherwise errors will
occur!
10
3.2 RS232
The RS232 interface does not use the handshake lines (RTS, CTS). The RTS
line (CTS on the paperless recorder) coming from the master (PC or notebook)
is not taken into consideration. The response is immediately transmitted from
the paperless recorder. The CTS line of the master (RTS on the paperless
recorder) remains open.
If the used program evaluates the handshake lines, they must be bridged in
the cable.
PC COM
interface with 9-
pin Sub-D (2) RxD (2) RxD
socket (3) TxD (3) TxD
(5) GND (5) GND
(7) RTS
(8) CTS
Paperless recorder PC/notebook
PC COM
interface with
25-pin Sub-D (2) RxD (2) T x D
socket (3) TxD (3) R x D
(4) R T S
(5) C T S
(5) GND (7) GND
Paperless recorder PC/notebook
3.3 Toggling between RS232 and RS485

Toggling between RS232 and RS485 interface is carried out by means of the
paperless recorder parameter
Configuration  Interface  RS232/RS485  General  Type
or via the setup program
Edit  Serial interface  RS232/RS485  Type
11
3.4 Configuration of the serial interfaces
Configuration ✱ Select Configuration  Interface  RS232/RS485  General on the
on the paperless recorder.
paperless Now the parameters required to configure the interface are available.
recorder
Configuration The Edit ➔ Serial interface  RS232/RS485 menu point is used for the
via the setup configuration by means of the setup software.
program
Parameters Value/Selection Description
Device address ➔ Device address 1 ... 254 see Chapter 4.5 Device
address, Page 18.
Interface type ➔ Type RS232, Can only be edited for
RS485 RS232/RS485.
See Chapter 3.3 Toggling
between RS232 and
RS485, Page 11.
Protocol ➔ Protocol Modbus slave, see Chapter 5 Serial
Modbus master, protocol types, Page 35.
Barcode
Baud rate ➔ Baud rate 9600 baud, see Chapter 4.3 Timing of
19200 baud, the communication, Page
38400 baud 16.
Transmission mode ➔ Data format 8 - 1 - no Parity, see Chapter 4.2
(RTU) 8 -1 - odd Parity, Transmission mode (RTU),
8 -1 - even Parity Page 15.
Min. response time ➔ Min. response time 0 ... 500ms see Chapter 4.3 Timing of
the communication, Page
16.
For communication via the RS232 interfaces, the device address

has to be taken into account although it is not a bus interface.
The serial interfaces as well as the USB and Ethernet interface can
be operated simultaneously. Only on the protocol level, some
inhibits are present (e.g. only one setup may be written at a time).
12
3.5 Configuration of the Ethernet interface
Configuration is carried out using the Configuration ➔ Interface ➔ Ethernet menu point.
on the
paperless
recorder
Configuration is carried out using the Extras ➔ Ethernet interface menu point.
via the setup
program
3.5.1 Parameters
DHCP DHCP (Dynamic Host Configuration Protocol) is used to ensure that the
paperless recorder is automatically assigned an IP address and further
communication parameters by a DHCP server.
On DHCP is switched on, the paperless recorder obtains its
IP address by the DHCP server
The further communication parameters usually assigned to the paperless

recorder by the DHCP server include, among others, the subnet mask, the
standard gateway address and the so-called lease time.
After the lease time (period of use) has elapsed, the validity of the IP address
expires. To ensure that the paperless recorder always has a valid IP address,
after 50% of the lease time it transmits a query to the known DHCP server
asking whether or not the address is still valid. If the DHCP server cannot be
accessed, the paperless recorder repeats its query until 87.5% of the lease
time has elapsed. Then the paperless recorder transmits its query not only to
the DHCP server but also to the entire network. When the lease time has
elapsed and the IP address is still not acknowledged, the paperless recorder
declares the address as invalid and is no longer accessible via the net.
13
The DHCP server can change an assigned address. If, for

example, automatic data download with the PCA communication
software is used, the address must be changed within the
software.
The automatically assigned IP address query can be inquired in the Device

manager  Device info  Ethernet info menu.
IP address If automatic IP address assignment is not used ("DHCP = OFF"), the IP

address of the paperless recorder is set here.
Subnet mask If automatic IP address assignment is not used ("DHCP = OFF"), the subnet
mask is set here.
The subnet mask is used to group devices (PC, paperless recorder, etc.) into
subnets. All devices, the IP address of which is linked with AND identical to
the subnet mask, belong to one subnet and can communicate with each other.
If devices are to be accessed outside the subnet, communication must be
carried out via a gateway (standard gateway).
Standard If automatic IP address assignment is not used ("DHCP = OFF"), the address
Gateway of the standard gateway is set here.
The standard gateway is used for communication by devices which are not
part in a subnet.
Port Modbus The port address must be set when the paperless recorder is accessed by a
TCP visualization software and the Modbus TCP protocol (Modbus tunneling:
external frame Ethernet, internal frame Modbus) is used.
Changes to this parameter will become effective after the

paperless recorder has been restarted.
DNS The DNS device name is entered here. This ensures that the device can be
Device name accessed not only via its IP address but also via its name.
DNS server Here the IP address of a DNS server installed in the network is set. The DNS
server is required to convert the name for Email transmittion via Ethernet.
Changes to this parameter will become effective after the

paperless recorder has been restarted.
Transfer rate The transfer rate used by the paperless recorder to communicate with the
DHCP server and other PCs is configured here.
14
4 Modbus protocol description
4.1 Master-Slave principle
Communication between a master (PC or notebook) and a slave (paperless
recorder) using the Modbus/J-bus takes place according to the master-slave
principle, in the form of data request/instruction - response.
Master
Slave 1 Slave 2 Slave n
The master controls the data exchange, the slaves only have a response
function. They are identified by their device address.
The paperless recorder can be operated either as a Modbus slave,

see Chapter 5.1 Modbus slave, Page 35, or as a Modbus master,
see Chapter 5.2 Modbus master, Page 38.
In a Modbus network, only one device can be assigned with the
master function.
4.2 Transmission mode (RTU)

The transmission mode used is the RTU mode (Remote Terminal Unit). The
data is transmitted in the binary format (hexadecimal) with 8 or 16 bits for
integer values and 32 bits for float values.
Data format The data format describes the structure of a byte transmitted.
Data word Parity bit Stop bit Number of bits

8 bits no 1 9
8 bits even 1 10
8 bits odd 1 10
The data format to be used can be set, see Chapter 3.4

Configuration of the serial interfaces, Page 12.
15
4.3 Timing of the communication
Character Start and end of a data block are marked by transmission pauses. The
transmission character transmission time (time required to transmit one single character)
time depends on the baud rate and the data format used.
For a data format of 8 data bits, no parity bit and one stop bit, this is:
Character transmission time [ms] = 1000 * 9 bit ÷ baud rate
For the other data formats, this is:
Character transmission time [ms] = 1000 * 10 bit ÷ baud rate
Example character transmission

Baud rate [baud] Data format [bit]
time [ms]
10 0,260
38400
9 0,234
10 0,521
19200
9 0,469
10 1,042
9600
9 0,938
Timing scheme A data request runs according to the following timing scheme:
Data request Data request

Master
Response
Slave
t1 t2
t
t1 Internal waiting time of the paperless recorder prior to checking

the data request and the internal processing time.
min.: 5 ms
typical: 5 ... 45 ms
max.: 60 ms or set "minimum response time"
16
A minimum response time can be set in the controller under the

menu point Configuration ➔ Interface. This preset time is the
minimum waiting time before an answer is transmitted (0…500
ms). If a smaller value is set, then the response time may be longer
than the preset value (internal processing takes longer), the
controller answers as soon as internal processing is completed.
The preset time of 0 msec means that the controller responds at
the maximum possible speed.
The minimum response time, which can be set is required by the
RS485 interface in the master, to be able to switch over the
interface drivers from transmit to receive. This parameter is not
required for the RS232 interface.
t2 The master has to observe this waiting time before starting a new
data request.
for RS232 min. 3.5 times the transmission time
required for 1 character (the time
depends on the baud rate)
for RS485 60ms
No data requests from the master are permitted during t1 and t2 , because the
paperless recorder will either ignore the request or declare it to be invalid.
4.4 Structure of a Modbus telegram

Data structure All telegrams have the same structure:
Slave address Function code Data field Checksum

CRC16
1 byte 1 byte x byte 2 byte
Each telegram contains four fields:

Slave address device address of a specific paperless recorder
Function code function selection (read, write words)
Data field Contains information (according to the function code):
• Word address/bit address
• Number of words/bits
• word/bit values
Checksum detection of transmission errors
17
4.5 Device address
The device address of the paperless recorder can be set between 1 and 254
(decimal), see Chapter 3.4 Configuration of the serial interfaces, Page 12.
A maximum of 31 paperless recorders can be addressed via the

RS 485 interface.
The device address 0 is reserved as the Modbus broadcast
address.
An instruction of the master to address 0 is carried out by all
slaves, but no response is transmitted by them (because this would
result in a data collision).
If only one paperless recorder is connected to the PC or notebook,
it can also be addressed via device address 255 (even if a different
device address is configured). The paperless recorder always
responds to instructions using device address 255.
In the transmission protocol, the address is specified in the
binary format (hexadecimal).
4.6 Function codes

Function The functions described as follows can be used to read out the measured
overview values and further device and process data from the paperless recorder.
Function Function Limitation

number
0x01 or 0x02 Read n bit max. 256 bits (16 bytes)
0x03 or 0x04 Read n words max. 127 words (254 bytes)
0x05 Write one bit max. 1 bit
0x06 Write one word max. 1 word (2 bytes)
0x10 Write n words max. 127 words (254 bytes)
Please refer to Chapter 4.9 Error messages, Page 28, if the paperless
recorder does not react to these functions or emits an error code.
18
4.6.1 Read n bit
This function is used to read n bits starting from a specific address.
Data request Slave Function Address Number Checksum

address 0x01 or 0x02 first bit of bits CRC16
1 byte 1 byte 2 byte 2 byte 2 byte
Response Slave Function Number of Bit Checksum

address 0x01 or 0x02 byte read value(s) CRC16
1 byte 1 byte 1 byte x byte 2 byte
The response always comes in full bytes of 8 bits each.

Non-requested bit values will be complemented with the 0 value.
Example Reading a bit starting from bit address 0x0340 (this is word address 0x0034).
For the addresses please refer to Chapter 7.2 Modbus addresses of important
device and process data, Page 47.
Data request:
01 02 0340 0001 B85A
Response:
01 02 01 01 6048
Bit value
19
4.6.2 Read n words
This function is used to read n words starting from a specific address.
Data request Slave Function Address Number Checksum

address 0x03 or 0x04 first word of CRC16
words
Response Slave Function Number of Word Checksum

address 0x03 or 0x04 byte read value(s) CRC16
1 byte 1 byte 1 byte x byte 2 byte
Example Reading the first 3 analog inputs (these are the first 6 words starting from
Modbus address 0x1257).
For the analog input address please refer to Chapter 7.2 Modbus addresses of
important device and process data, Page 47.
Data request:
01 03 1257 0006 7160
Response:
01 03 0C 1999 4348 4CCC 4348 2666 4396 8548

Measured Measured Measured
value 1 value 2 value 3
200,1 200,3 300,3
20
4.6.3 Write one bit
In the write bit function, the data blocks for instruction and response are
identical.
Instruction Slave Function Bit address Bit value Checksum

address 0x05 xx00 CRC16
xx = 00  Bit is
set to 0
xx = FF  Bit is
set to 1
Response Slave Function Bit address Bit value Checksum

address 0x05 CRC16
Example Writing a bit starting from bit address 0x0340 (this is bit 0 of the word address
0x0034).
Instruction:
01 05 0340 FF00 8DAA
Response (as instruction):

01 05 0340 FF00 8DAA
21
4.6.4 Write one word
In the write word function, the data blocks for instruction and response
are identical.
Instruction Slave Function Word address Word value Checksum

address 0x06 CRC16
Response Slave Function Word address Word value Checksum

address 0x06 CRC16
Example Set the variable "External Binary In 1" (Modbus address 0x1638) to 1.
Instruction:
01 06 1638 0001 CD8F
Response (as instruction):

01 06 1638 0001 CD8F
22
4.6.5 Write n words
instruction Slave Fun- Address Number Number Number Check

Address ction first of of of sum
0x10 word words words value(s) CRC16
1 byte 1 byte 2 byte 2 byte 1 byte x byte 2 byte
Response Slave Function Address Number of Checksum

address 0x10 first word words CRC16
Example Writing the word "Test" (ASCII coding: 0x54 0x65 0x73 0x74 0x00) to address
0x148A ff to ensure that this text is entered in the event list of group 1:
Instruction:
01 10 148A 0003 06 54 65 73 74 00 00 9BFA
Response:
01 10 148A 0003 A412
23
4.7 Transmission format (integer, float, double and text values)
Integer values Integer values are transmitted via the Modbus in the following format:
The high byte first, followed by the low byte.
Example Request of the integer value of address 0x1017, if value "4" (word value
0x0004) is written under this address.
Request: 01031017000130CE (CRC16 = CE30)
Response: 0103020004B987 (CRC16 = 87B9)
Float values In the case of float values, the Modbus operates with the IEEE-754 standard
format (32bits), the only difference being that byte 1 and 2 are changed over
with byte 3 and 4.
Single-float format (32bit) as per IEEE 754standard
SEEEEEEE EMMMMMMM MMMMMMMM MMMMMMMM
Byte 1 Byte 2 Byte 3 Byte 4
S - sign bit
E - exponent (two's complement)
M - 23bits normalized mantissa
Modbus float format
Modbus address x Modbus address x+1
MMMMMMMM MMMMMMMM SEEEEEEE EMMMMMMM

Example Request of the float value of address 0x0035, if value "550.0" (0x44098000 in
IEEE-754 format) is written under this address.
Request: 140300350002D6C0 (CRC16 = C0D6)
Response: 140304800044096434 (CRC16 = 3464)
Once transmission from the device is completed, the bytes of the float value
need to be changed over accordingly.
A large number of compilers (e.g. Microsoft Visual C++) file the float values in
the following order:
Float value
Address x Address x+1 Address x+2 Address x+3
MMMMMMMM MMMMMMMM EMMMMMMM SEEEEEEE

Please find out the way float values are saved in your application. After the
request from the paperless recorder, it might be necessary to change the
bytes over in the interface program you are using.
24
Double values The double values are also processed in the Modbus in the IEEE-754 standard
format (32bit). Unlike float values, bytes are not changed over for double
values.
Doupble-float format (32bit) as per IEEE 754standard
SEEEEEEE EEEEMMMM MMMMMMMM MMMMMMMM
MMMMMMMM MMMMMMMM MMMMMMMM MMMMMMMM

S - sign bit
E - exponent (two's complement)
M - 52bits normalized mantissa
Modbus double format
Modbus address x Modbus address x+1
SEEEEEEE EEEEMMMM MMMMMMMM MMMMMMMM

Modbus address x+2 Modbus address x+3
MMMMMMMM MMMMMMMM MMMMMMMM MMMMMMMM

Example Request of the double value of address 0x0066, if value 1234567.89

(0x4132D687E3D70A3D in the IEEE-754 format) is written under this address.
Request: 140300660004A6D3 (CRC16 = D3A6)
Response: 1403084132D687E3D70A3DE1C1 (CRC16 = C1E1)
Please find out the way double values are saved in your application. After the
request from the paperless recorder, it might be necessary to change the
bytes over in the program you are using.
25
Strings (texts) Character strings are transmitted in the ASCII format.
To mark the end, the last character to be transmitted can be a "\0"

(ASCII code 0x00). Characters after this mark are without
significance.
Knowing that the transmission of texts takes place word by word (16
bits), 0x00 is additionally appended where an odd number of
characters is used (incl. "\0").
The maximum length specified in the address tables (see “Address
tables” on page 47. ff) for strings also includes the terminating "/0".
This means, in the case of "char 11", the text can consist of max. 10
readable characters.
Example Text inquiry from address 0x1000, if the

character string "LS NT"
(ASCII code: 0x4C, 0x53, 0x20, 0x4E, 0x54, 0x00) is entered under this
address.
Request: 01031000000440C9
Response: 0103084C53204E540000AA0D96
Instead of "AA" in front of the CRC sum, there could be any value,
because it is behind "/0" and will be ignored.
26
4.8 Checksum (CRC16)
Calculation The checksum (CRC16) serves to recognize transmission errors. If an error is
scheme identified during evaluation, the device concerned does not respond.
CRC = 0xFFFF
CRC = CRC XOR ByteOfMessage
For (1 to 8)
CRC = SHR(CRC)
if (flag shifted right = 1)
then else
CRC = CRC XOR 0xA001
while (not all ByteOfMessage processed);
The low byte of the check sum is the first to be transmitted!
Example 1 Requesting the status of relay output 1.

Instruction: Read a word from the address 0x1631
01 03 1631 0001 D18D
Response (CRC = 0x8479):

01 03 02 0001 7984
Word 1
Word 1 = 1 indicates that relay 1 is active.
27
4.9 Error messages
4.9.1 Modbus error codes
No response by In the event of the following errors, the slave will not respond:
the paperless
• Baud rate and/or data format of Master (PC or notebook) and Slave
recorder
(paperless recorder) are not compatible.
• The device address of the paperless recorder does not comply with that
contained in the protocol.
• The checksum (CRC16) is not correct.
• The instruction from the Master is incomplete or over-defined.
• The number of words to be read is zero.
In these cases the data request should be transmitted again once the timeout
time (2s)
has elapsed.
Error codes If the data request of the master has been received by the paperless recorder
without transmission errors but could not be processed, the paperless
recorder will respond with an error code.
The following error codes can be occur:
• 01 Invalid error code
• 02 Invalid address or number of words or bits to be read or written is too
large
• 03 Value not within the admissible range
• 08 Value wirte-protected
Response in the Slave Function Error code Checksum

event of an address XX OR 80h CRC16
error
1 byte 1 byte 1 byte 2 byte
0x80 is used to set the function code to its OR status, i.e. the MSB (most
significant bit) is set to 1.
Example Data request:
01 06 1257 0001 FCA2
Response:
01 86 08 43A6
Respons is error code 08 because address 0x1257 is write-protected.
28
4.9.2 Error messages for invalid values
For measured values in the float format, the error number appears directly in
the value, i.e. the error number is entered instead of the measured value.
Error code Error

for float values
1.0 x 1037 Underrange
2.0 x 1037 Overrange
3.0 x 1037 No valid input value
4.0 x 1037 Division by zero
5.0 x 1037 Math error
6.0 x 1037 Invalid terminal temperature of thermocouple
7.0 x 1037 Invalid float value
8.0 x 1037 Integrator or statistics destroyed
Example Data request:
01 03 1259 0002 1160
Response:
01 03 04 8E52 7DB4 51ED
The measured value 0x7DB48E52 (=3.0 x 1037) supplied by analog input 2

(Modbus address 0x1259) indicates that the input value is invalid.
29
4.9.3 Error codes as integer return values
For some lengthy sequences (e.g. email transfer) an error code is entered at
the end into an event field or the event list.
Error codes
Error code Description
Error list: Program memory management
1 Program cannot be created
2 Program does not exist
3 Program cannot be deleted
4 Segment cannot be deleted
5 Checksum cannot be saved
6 Checksum cannot be read
7 Program cannot be copied
8 Segment cannot be copied
9 Program checksum error
10 Program pointer tab. checksum error
11 Program memory end
12 Segment does not exist
13 Repeat jump marks cannot be corrected
Error list: General inputs and outputs
14 Please acknowledge with ENTER
15 Invalid number of places
16 The entry contains invalid characters
17 Value not within the limits
18 Segment incorrectly programmed
19 Password error
Error list: Profibus job processing
20 Busy flag not reset by the master
21 Inadmissible job
22 Error on data acceptance
23 No cyclical data existing
24 Inadmissible structure length
25 Inadmissible header ID
30
Error list: Keyboard and program lock
26 Keyboard locked
27 Programming locked
28 Write error in the ser. EEprom (Calib)
29 Hardware error: MANUAL + AUTO locked
30 Edit is inadmissible when the program is active
31 Copy is inadmissible when the program is active
32 MANUAL is inadmissible during AUTO lead time
33 Segment change Image update required
34 No DB number, image update by PLC
35 No DB number for process values of PLC
36 Printer loaded or not operational
37 Set point value 1 was not programmed
38 Configure printer (config./interface)
39 Only possible, when the device is in MANUAL mode
40 Self-optimization already running
41 Tme axis elapsed or not programmed
42 Time axis cannot be copied
43 Time axis not existing
44 Program change is locked
45 MANUAL mode locked
46 Program start locked
Error list: Interface processing
47 Incorrect response length
48 Timeout error (no response)
49 Error reported in telegram protocol
50 Checksum error
51 Parity error
52 Framing error
53 Interface buffer full
54 Address error (e.g. address does not exist)
31
55 Incorrect or unexpected command
Error list: Event processing
60 event could not be created
61 event setting failed
62 event clear failed
63 event wait failed
64 event close failed
65 event open failed
66 Sync error between group and data manager
Error list: message processing
70 Queue memory does not exist
71 Message queue cannot be opened
72 Message pool cannot be generated
73 Memory from message pool cannot be inquired
74 Message cannot be transmitted
Error list: Processing of MQX functions
80 Task creation failed
81 Hardware-Timer not created
Error list: Flash processing
90 Data flash write error
Error list: Other errors
100 Undefined error
101 Division by zero
102 RAM cannot be detected
103 RTC run-time overrun
104 ID does not exist
105 Index too large (overflow)
106 Invalid data
107 Invalid pointer
109 String without 0 characters
110 Timeout during initialization
32
111 Value must not be written to
112 Log entry with error bits initiating debug mode
Error list: Email transfer via modem and Ethernet
120 Step error in the status automatic
121 Invalid response length
122 No CONNECT from the modem
123 FCS checksum incorrect
124 Unexpected value or response
125 Conf-Request not accepted
126 No Conf-Request from the other end
127 No Chap-Request from the other end
128 Response timeout
129 Unknown modem response
130 Unexpected OK by the modem
131 Unexpected CONNECT from the modem
132 Unknown frame received
133 Unexpected PROTOCOL by the modem
134 Unexpected COMPRESS from the modem
135 Invalid PPP package received
136 Unexpected BUSY from the modem
137 Unknown authentification protocol
138 Ignored LCP option
139 Unexpected DELAYED from the modem
140 Unexpected NODIALTONE
141 Unknown PPP protocol
142 Unknown PAP code
143 Ignored IPCP option
144 Ignored IPCP code
145 Unknown CHAP code
146 IP checksum incorrect
147 Unknown IP protocol
33
148 Unknown ICMP type
149 Unknown LCP type
150 As a client DNS request received
151 Unknown DNS error
152 DNS response is divided
153 No IP received via DNS
154 Unknown Udp port
155 TCP checksum incorrect
156 TCP port incorrect
157 Unknown TCP-SYN option
158 Unused TCP port
159 Unknown POP3 response
160 Unknown SMTP response
161 Unknown DNS name
162 No MD5 requested from CHAP
163 Authentification error
164 Cancel from other end
165 Error when creating TCP socket
166 Error when binding TCP socket
167 Error on TCP connect
168 Error when transmitting TCP telegram
169 Error when closing TCP socket
170 Error on TCP listing
171 Reset on TCP accept
172 Error on TCP accept
173 SMTP server indicates syntax error
Error list: File system processing
200 Error when installing the partition manager
201 Error when installing the MFS file system
202 Error when deinstalling the partition manager
203 Error when deinstalling the MFS file system
34
5 Serial protocol types
5.1 Modbus slave
If the paperless recorder is configured as a slave,
see Chapter 3.4 Configuration of the serial interfaces, Page 12,
in the network it responds to Modbus requests of the master.
The master controls the data exchange, the slaves only have a response
function. They are identified by their device address.
The master usually is a PC with a setup or visualization program installed. The
master can inquire all instrument variables of the paperless recorder (see
Chapter 7 Address tables, Page 47).
Slave Slave Slave
Modbus
Slave
Modem Modem
Telephone
PC
(Master)
In a Modbus network, only one instrument may be assigned with

the master function.
Modem • A paperless recorder in the slave mode can be controlled by the master via
operation a telephone connection using a modem, see above illustration.
• The paperless recorder can initialize a modem (also cyclically, if the modem
is switched on after the instrument has been activated).
• The paperless recorder can use the Init string (entry per setup program in
the "RS232/RS485: Modem" mask) to configure the modem so that an
incoming call is automatically answered. Then a remote inquiry for the
paperless recorder can be carried out by the master using Modbus
commands or the recorder can send a signal (e.g. an alarm) or an email
after the active dial-in.
• The paperless recorder (slave) can use a dial-in/hang-up string to alarm a
PC (master) with the suitable Modbus master software (which recognizes
incoming modem calls).
• The paperless recorder can use a dial-in/hang-up string to call an internet
provider and send an email.
When the modem operation is active, the following parameters (by setup
program only) can be edited:
35
Modem
parameters
The following Init string is required for the operation as a Modbus

slave via modem:
AT&FE0X3Q1&K0S0=1&D0&W0&Y0
AT&F = Load the current manufacturer profile
E0 = Switch off character echo
X3 = Switch off fixed dial tone selection,
Switch on busy tone selection
Q1 = Switch off command responses
&K0 = Switch off data flow control
S0=1 = Automatic pick-up after first ring
&D0 = Ignore DTR signal
&W0 = Save current configuration as profile 0
&Y0 = Use profile 0 after switch-on
The dial-in and hang-up string are only required for one of the
active modem alarms.
Internet
dial-in
36
For the active internet dial-in for alarms by email, the instrument
modem must be switched to a different mode using another INIT
string.
Telephone number, user name and password must be entered
according to the specifications of the selected internet provider.
Once the internet dial-in has been completed, the modem is
automatically reset to its initial state using the Init string entered
under modem parameters.
Email
parameters
37
5.2 Modbus master
If the paperless recorder is configured as a master,
(see Chapter 3.4 Configuration of the serial interfaces, Page 12),
it can send Modbus inquiries in the network to slaves (e.g. other paperless
recorders). The requested values are written into external instrument variables
of the paperless recorder:
• external analog values 1 to 24 in the analog selector
• external binary values 1 to 24 in the binary selector
• external texts 1 to 9 (e.g. to link batch texts in the instrument)
Slave Slave Slave
Modbus
Master
Modbus master
These parameters can be edited in the setpu program and on the

paperless recorder.
38
For each target variable, it is possible to enter the instrument address and
Modbus address used to request the value.
Each programmed inquiry can be deactivated by entering the instrument
address 0 (if, for example, the "external analog value 2" is no longer to be
written to by the Modbus master but by the Profibus).
Double writing of a target variable will lead to undefined states and
must be avoided.
For analog and binary values, the entry of a "Number of measured values" or
"Number of bits" larger than 1 allows reading consecutively several variables
using one command. The following target variables are automatically assigned
during saving.
Timeout defines the maximum time-out time used for each sent command to wait for
response before the next command is carried out.
Inquiry cycle defines the time interval used to read in variables.
5.3 Barcode
In the "Barcode mode" (see Chapter 3.4 Configuration of the serial interfaces,
Page 12), the paperless recorder appears as a slave. It waits for the ASCII
strings sent by the barcode scanner (master).
This interface mode only requires the setting of the "Baud rate" and "Data
format" configuration parameters, see Chapter 3.4 Configuration of the serial
interfaces, Page 12, further parameters are not required here.
The paperless recorder can use these strings for the incremental control of a
batch sequence (see operating manual of the paperless recorder).
Barcode Scanner
(Master)
Ascii Barcode Protocol
Slave
39
40
6 Ethernet protocols
The advantage of the Ethernet connection compared with a serial connection
lies in the higher transmission rate the company-wide accessibility.
6.1 HTTP
In this case, the paperless recorder is configured as a slave and handles
incoming requests as a server via port 80. These requests can come, for
example, from a PC with setup software, PC evaluation software (PCA) or PCA
communication software (PCC).
6.2 Browser connection

The paperless recorder can also be accessed by a browser using the HTTP
protocol. The URL required for this purpose is the IP address of the paperless
recorder.
The HTML start page "index.htm" is accessed and can be used to branch to
further HTML pages.
The start page "index.htm" and other HTML pages can be loaded into the
paperless recorder using the setup program Edit  Web server  Web import.
For this purpose, a memory space of 512 kB is available.
The online visualization as well as three HTML pages and three HTML batch
pages are factory-saved as templates.
In the HTML pages, special tags can be used to access device variables.
Support is provided in a help window which can be used to select the device
variable in the setup program and copy the corresponding HTML tag into the
clipboard.
41
6.3 Modbus TCP
In this case, the paperless recorder is configured as a slave and handles
incoming requests as a server via port 502. The port can also be changed, see
Chapter 3.5 Configuration of the Ethernet interface, Page 13.
Modbus TCP is a standardized process, in which a Modbus telegram is
packed into a TCP frame (tunnelled) and transmitted via Ethernet.
The Modbus telegram (without CRC) is transmitted with an additional "MBAP
header" of 6 or 7 byte. The seventh byte is identical to the first serial byte, but
has a different designation.
Structure of a
Modbus TCP
telegram
MBAP header Modbus

telegram
2 byte 2 byte 2 byte 1 byte Further bytes
Trans- Protocol ID Length Unit ID as specified below,
action ID however, without CRC
Identical in Must be 0 Length of Corresponds to
request and for Modbus question the controller
response and address. For
response in TCP must be
byte 0xFF or 0
from (incl.) (0=broadcast)
"Unit ID"
For comparison: the "normal" Modbus telegram, see Chapter 4.4 Structure of
a Modbus telegram, Page 17:
Slave Function Data field CRC16

address code
1 byte 1 byte x byte 2 byte
This protocol can be used, e.g. by a suitable process data visualization

program to read and write values of the paperless recorder via a company-
wide Ethernet network. All device variables from the Modbus address tables
(see Chapter 7 Address tables, Page 47) can be accessed.
Only one Modbus master (client) can access a paperless recorder via
Modbus TCP at a time.
A connection opened by a client is cancelled by the paperless
recorder after 30 seconds of inactivity.
If a Modbus TCP port is closed (by the paperless recorder or the other
end), it can be reopened after 10 seconds.
42
Example: Reading the measured value from the first analog input (these are the first 2
reading n words words starting from Modbus address 0x1257).
See also the Modbus example in Chapter 4.6.2 Read n words, Page 20.
Query:
MBAP header Modbus telegram

(without slave address and CRC)
00 01 00 00 00 06 FF 03 12 57 00 02
2 bytes 2 bytes 2 bytes 1 byte 1 byte 2 bytes 2 bytes
Transaction Protocol ID Length Unit ID Function Address of Number of
ID code first word words
Assignment For Mod- Length of With TCP Function First word 2 words
of response bus always the request always code for of analog should be
to request 0x00 in bytes 0xFF (ex- "Reading n inputs to read
(consecu- starting with cept for words" be read
tive num- (incl.) "Unit broadcast)
bering) ID"; 6 bytes
here (0x06)
Response:
MBAP header Modbus telegram

(without slave address and CRC)
00 01 00 00 00 07 FF 03 04 19 99 43 48
2 bytes 2 bytes 2 bytes 1 byte 1 byte 1 byte 4 bytes
Transaction Protocol ID Length Unit ID Function Number of Data read
ID code bytes read
Assignment For Mod- Length of With TCP Function 4 bytes Measured value
of response bus always the re- always code for were read 200.1
to request 0x00 sponse in 0xFF (ex- "Reading n
(consecu- bytes start- cept for words"
tive num- ing with (in- broadcast)
bering) cl.) "Unit
ID"; 7 bytes
here (0x07)
43
6.4 Email (SMTP and POP3)
The paperless recorder can transmit Emails (e.g. alarms). In this case, it is the
master (client) and can access SMTP servers at the standard port (25) as well
as POP3 servers at the standard port (110)
Typical
networking in
Setup PC PC
the IP=x.x.x.x IP=x.x.x.x
company
Internet
network (worldwide)
local additional
subnet Gateway subnets Proxy
IP=x.x.x.x IP=x.x.x.x
Recorder DHCP DNS POP3 SMTP

IP=x.x.x.x server server server server
IP=x.x.x.x IP=x.x.x.x IP=x.x.x.x IP=x.x.x.x
Port 110 Port 25
Function of the Gateway:

individual separates local sub-nets from each other and thus filters the packets. Not all
stations packets are received in every sub-net. Packets from outside the local sub-net
must be addressed to the gateway.
DHCP server:
can automatically assign IP address, sub-net mask and gateway address to
other stations when switching on. These parameters can also be entered
manually, then a DHCP server is not required.
DNS server:
converts symbolic names to IP addresses, e.g. question: "www.name.de" will
generate the "www.name.de has IP=10.12.32.45" response.
POP3 server:
serves to read out received Emails of a mail account. The POP3 mail account
can be accessed after log-in entering user name and password. A successful
log-in process often releases the transmission authorization of a connected
SMTP server.
SMTP server:
serves to transmit Emails. The authorization to transmit Emails via a mail
account must be released in several networks by previously logging in at the
corresponding POP3 server.
Proxy:
serves as a gateway between the local company network and the worldwide
internet. It is also used for the conversion of "local" IP addresses (used in the
company network) to "once-only" IP addresses (used in the internet).
The device software cannot address a proxy!
44
Parameters for These parameters can only be edited via the setup program.
mail server and  Ethernet Email parameters
Edit
Email
parameters
A mail server within the company network (not the internet) must be
entered here. This mail server should be able to also transmit Emails
to the internet.
45
Transmission of Here, serveral steps depend on configured device parameters. An error code
an Email via of the event entry (see Chapter 4.9.3 Error codes as integer return values,
internet Page 30 (particularly the error codes 120 to 173)) can suggest an incorrectly
set parameter. An incorrectly entered DNS server IP, for example, generates
the error code 153 = "no IP received via DNS".
Conditions
fulfilled for e-mail
transmission? Yes
No Load own present

IP address
POP3
configured before
SMTP? Yes
Request POP3 server

name from DNS server
No
Make TCP connection

to POP3 server
Log in to mail account

with user name + password
Close TCP connection

without reading e-mail
Request SMTP server name

from DNS server
Make TCP connection

to SMTP server
Format and send

e-mail text
Close TCP connection
Repeat attempts with the

Enter e-mail OK / same mail every 15 min.
error code
in event list Error
OK
46
7 Address tables
7.1 Data types and type of access
The Chapter 7.2 contain descriptions of all process values (variables) including
their addresses, data type and type of access.
Meaning:
R Read only access

W Write access
R/W Read and write access
char xx Character string consisting of ASCII characters (8 bits) with the
length xx;
xx = Length including the "\0" character string end character
2 characters are read and written in a word.
word Unsigned Integer 16 bit (1 word)
int Signed Integer 16 bit (1 word)
long Signed Integer 32 bit (2 words)
float Float value (4 byte = 2 words) as per IEEE 754
bool Bool can be read and written as word,
its value range is 0 … 1
byte Byte (8 bit) can be read and written as word,
its value range is 0 … 255
Bit x Bit No. x (bit 0 is always the bit with the lowest value)
7.2 Modbus addresses of important device and process data
Address Access Data type Signal designation

0x0009 R char 12 Software version
0x0103 R word Status binary inputs/outputs 1...16
0x0104 R word Status binary inputs/outputs 17...24
0x0105 R word Status ext. binary inputs/outputs 1...16
(via PROFIBUS-DP also R/W)
0x0106 R word Status ext. binary inputs/outputs 17...24
Available as of firmware 187.04.xx:

Status ext. binary inputs/outputs 17...32
See also address: 0x0128 and 0x0129

0x0107 R word Status Relay 1…7
0x0108 R word Math bool 1…16
0x0109 R word Math bool 17…18
0x010A R word Logic result 1…16
47
7 Address tables
0x010B R word Logic result 17…18
0x010C R word Limit value monitoring Status 1...9
0x010D R word Analog alarms 1 channel 1...16
0x010E R word Analog alarms 1 channel 17...18
0x010F R word Analog alarms 2 channel 1...16
0x0110 R word Analog alarms 2 channel 17...18
0x0111 R word External analog alarms 1 channel 1...16

External analog alarms 1 channel 17...32
See also address: 0x012A and 0x012B


See also address: 0x012C and 0x012D
0x0115 R word Binary inputs/outputs alarm 1...16
0x0116 R word Binary inputs/outputs alarm 17...24
0x0117 R word External binary inputs alarm 1...16
0x0118 R word External binary inputs alarm 17...24

External binary inputs alarm 17...32
See also address: 0x012E and 0x012F

0x0119 R word Math alarm 1 1…16
0x011A R word Math alarm 1 17…18
0x011B R word Math alarm 2 1…16
0x011C R word Math alarm 2 17…18
0x011D R word Logic alarm 1…16
0x011E R word Logic alarm 17…18
0x011F R word Limit value monitoring alarm 1...9
0x0120 R word Counter Alarm 1 1…16
0x0124 R word Group alarms 1...9
0x0125 R word Alarm pos. tolerance band group 1...9
0x0126 R word Alarm neg. tolerance band group 1...9
0x0127 R word Multi-input alarms
0x0128 R word Available as of firmware 187.04.xx:
0x0129 R word Available as of firmware 187.04.xx:
48
7 Address tables
0x012A R word Available as of firmware 187.04.xx:
0x012B R word Available as of firmware 187.04.xx:
0x012C R word Available as of firmware 187.04.xx:
0x012D R word Available as of firmware 187.04.xx:
0x012E R word Available as of firmware 187.04.xx:
0x012F R word Available as of firmware 187.04.xx:
0x1000 R char 46 Device name
0x1017 R/W byte Brightness of the display
0x120F R long Highspeed counter B1 (HW counter B1)
The normal counters 1 … 27 cannot be
read out via Modbus but only via the
highspeed counters.
0x1211 R long Highspeed counter B2 (HW counter B2)
0x121B R char 11 Software version card 1
0x1221 R char 11 Software version card 2
0x1227 R char 11 Software version card 3
0x122D R char 11 Software version Profibus

0x1257 R float Analog process value 1 (filtered)
0x125B R float Analog process value 3 (filtered)
0x125D R float Analog process value 4 (filtered)
0x125F R float Analog process value 5 (filtered)
0x126B R float Analog process value 11 (filtered)
0x126D R float Analog process value 12 (filtered)
0x126F R float Analog process value 13 (filtered)
49
7 Address tables
0x127B R bool Analog alarms 1, channel 1
0x127C R bool Analog alarms 1, channel 2
0x127D R bool Analog alarms 1, channel 3
0x127E R bool Analog alarms 1, channel 4
0x127F R bool Analog alarms 1, channel 5
0x1280 R bool Analog alarms 1, channel 6
0x128A R bool Analog alarms 1, channel 16
0x128F R bool Analog alarms 2, channel 3
0x129A R bool Analog alarms 2, channel 14
0x12AA R float External analog process value 1
(limit-checked)
0x12AC R float External analog process value 2
(limit-checked)
0x12AE R float External analog process value 3
(limit-checked)
0x12B0 R float External analog process value 4
(limit-checked)
(limit-checked)
50
7 Address tables
(limit-checked)
(limit-checked)
(limit-checked)
0x12BA R float External analog process value 9
(limit-checked)
0x12BC R float External analog process value 10
(limit-checked)
0x12BE R float External analog process value 11
(limit-checked)
0x12C0 R float External analog process value 12
(limit-checked)
(limit-checked)
(limit-checked)
(limit-checked)
(limit-checked)
0x12CA R float External analog process value 17
(limit-checked)
0x12CC R float External analog process value 18
(limit-checked)
0x12CE R float External analog process value 19
(limit-checked)
0x12D0 R float External analog process value 20
(limit-checked)
(limit-checked)
(limit-checked)
(limit-checked)
(limit-checked)
See also address: 0x1BE3 to 0x1C1D

0x12DA R/W float External analog process value 1 (interface)
0x12DC R/W float External analog process value 2 (interface)
0x12DE R/W float External analog process value 3 (interface)
0x12E0 R/W float External analog process value 4 (interface)
0x12EA R/W float External analog process value 9 (interface)
51
7 Address tables
0x12EC R/W float External analog process value 10 (interface)
0x12EE R/W float External analog process value 11 (interface)
0x12F0 R/W float External analog process value 12 (interface)
0x12FA R/W float External analog process value 17 (interface)
0x12FC R/W float External analog process value 18 (interface)
0x12FE R/W float External analog process value 19 (interface)
0x1300 R/W float External analog process value 20 (interface)
See also address: 0x1C1F to 0x1C59

0x130A R bool External analog alarms 1, channel 1
0x130B R bool External analog alarms 1, channel 2
0x130C R bool External analog alarms 1, channel 3
0x130D R bool External analog alarms 1, channel 4
0x130E R bool External analog alarms 1, channel 5
0x130F R bool External analog alarms 1, channel 6
0x1310 R bool External analog alarms 1, channel 7
See also address: 0x1C5B to 0x1C78

52
7 Address tables
See also address: 0x1C79 to 0x1C96

0x133A R bool Binary input/output status 1
0x133B R bool Binary input/output status 2
0x133C R bool Binary input/output status 3
0x133D R bool Binary input/output status 4
0x133E R bool Binary input/output status 5
0x133F R bool Binary input/output status 6
0x1340 R bool Binary input/output status 7
0x134A R bool Binary input/output status 17
0x134B R bool Binary input/output status 18
0x134C R bool Binary input/output status 19
0x134D R bool Binary input/output status 20
0x134E R bool Binary input/output status 21
0x134F R bool Binary input/output status 22
0x1352 R bool Binary input/output alarm 1
53
7 Address tables
0x135A R bool Binary input/output alarm 9
0x135B R bool Binary input/output alarm 10
0x135C R bool Binary input/output alarm 11
0x135D R bool Binary input/output alarm 12
0x135E R bool Binary input/output alarm 13
0x135F R bool Binary input/output alarm 14
0x136A R/W char 64 External batch text 1
0x13AA R/W char 64 External batch text 3
0x13CA R/W char 64 External batch text 4
0x13EA R/W char 64 External batch text 5
See also address: 0x1CD3 to 0x1EF3

0x148A R/W char 94 External event text group 1
0x14B9 R/W char 94 External event text group 2
0x14E8 R/W char 94 External event text group 3
0x1517 R/W char 94 External event text group 4
0x15A4 R/W char 94 External event text group 7
0x15D3 R/W char 94 External event text group 8
0x1631 R bool Relay output 1
54
7 Address tables
0x1638 R/W bool External binary input, status 1
0x163A R/W bool External binary input, status 3
0x163B R/W bool External binary input, status 4
0x163C R/W bool External binary input, status 5
0x163D R/W bool External binary input, status 6
0x163E R/W bool External binary input, status 7
0x163F R/W bool External binary input, status 8
0x164A R/W bool External binary input, status 19
0x164B R/W bool External binary input, status 20
0x164C R/W bool External binary input, status 21
0x164D R/W bool External binary input, status 22
0x164E R/W bool External binary input, status 23
0x164F R/W bool External binary input, status 24
See also address: 0x1C97 to 0x1CB4

0x1650 R bool External binary input, alarm 1
0x165A R bool External binary input, alarm 11
0x165B R bool External binary input, alarm 12
0x165C R bool External binary input, alarm 13
0x165D R bool External binary input, alarm 14
0x165E R bool External binary input, alarm 15
0x165F R bool External binary input, alarm 16
55
7 Address tables
See also address: 0x1CB5 to 0x1CD2

0x1668 R float Math result 1
0x166A R float Math result 2
0x166C R float Math result 3
0x166E R float Math result 4
0x167A R bool Math alarm 1, 1
0x167B R bool Math alarm 1, 2
0x167C R bool Math alarm 1, 3
0x167D R bool Math alarm 1, 4
0x167E R bool Math alarm 1, 5
0x167F R bool Math alarm 1, 6
0x1680 R bool Math alarm 1, 7
0x168A R bool Math alarm 2, 8
0x168B R bool Math alarm 2, 9
0x168C R bool Logic result 1
0x168D R bool Logic result 2
0x168E R bool Logic result 3
0x168F R bool Logic result 4
0x1690 R bool Logic result 5
0x1695 R bool Logic alarm 1
56
7 Address tables
0x169A R bool Logic alarm 6
0x169B R bool Logic alarm 7
0x169C R bool Logic alarm 8
0x169D R bool Logic alarm 9
0x169E R bool Limit value monitoring status 1
0x169F R bool Limit value monitoring status 2
0x16A0 R bool Limit value monitoring status 3
0x16A7 R bool Limit value monitoring alarm 1
0x16AA R bool Limit value monitoring alarm 4
0x16AB R bool Limit value monitoring alarm 5
0x16AC R bool Limit value monitoring alarm 6
0x16AD R bool Limit value monitoring alarm 7
0x16AE R bool Limit value monitoring alarm 8
0x16AF R bool Limit value monitoring alarm 9
0x16B0 R bool Counter alarm 1, 1
0x16BA R bool Counter alarm 1, 11
0x16BB R bool Counter alarm 1, 12
0x16BC R bool Counter alarm 1, 13
0x16BD R bool Counter alarm 1, 14
0x16BE R bool Counter alarm 1, 15
0x16BF R bool Counter alarm 1, 16
0x16C0 R bool Counter alarm 1, 17
57
7 Address tables
0x16CA R bool Counter alarm 1, 27
0x16CB R bool Counter alarm 2, 1
0x16CC R bool Counter alarm 2, 2
0x16CD R bool Counter alarm 2, 3
0x16CE R bool Counter alarm 2, 4
0x16CF R bool Counter alarm 2, 5
0x16D0 R bool Counter alarm 2, 6
0x16DA R bool Counter alarm 2, 16
0x16DB R bool Counter alarm 2, 17
0x16DC R bool Counter alarm 2, 18
0x16DD R bool Counter alarm 2, 19
0x16DE R bool Counter alarm 2, 20
0x16DF R bool Counter alarm 2, 21
0x16E0 R bool Counter alarm 2, 22
0x17B0 R bool Device alarm
0x17B1 R byte Ethernet IP address 1st byte
0x17B2 R byte Ethernet IP address 2nd byte
0x17B3 R byte Ethernet IP address 3rd byte
0x17B4 R byte Ethernet IP address 4th byte
0x17B5 R/W bool Profibus commissioning/start-up
0x17B6 R char 64 current batch text 1 - machine 1
0x17D6 R char 64 current batch text 2 - machine 1
0x17F6 R char 64 current batch text 3 - machine 1
0x1816 R char 64 current batch text 4 - machine 1
58
7 Address tables
0x1A16 R char 64 current batch text 10 - machine 2
0x1AB6 R char 64 current batch text 5 - machine 3
0x1AD6 R char 64 current batch text 6 - machine 3
0x1AF6 R char 64 current batch text 7 - machine 3
0x1B76 R float Math result 10
0x1B7A R float Math result 12
0x1B7C R float Math result 13
0x1B7E R float Math result 14
0x1B88 R bool Math alarm 1, 10
0x1B8A R bool Math alarm 1, 12
0x1B8B R bool Math alarm 1, 13
0x1B8C R bool Math alarm 1, 14
0x1B8D R bool Math alarm 1, 15
0x1B8E R bool Math alarm 1, 16
0x1B8F R bool Math alarm 1, 17
59
7 Address tables
0x1B9A R bool Logic result 10
0x1B9B R bool Logic result 11
0x1B9C R bool Logic result 12
0x1B9D R bool Logic result 13
0x1B9E R bool Logic result 14
0x1B9F R bool Logic result 15
0x1BA0 R bool Logic result 16
0x1BA3 R bool Logic alarm 10
0x1BAA R bool Logic alarm 17
0x1BAB R bool Logic alarm 18
0x1BAC R bool Math bool result 1
0x1BAD R bool Math bool result 2
0x1BAE R bool Math bool result 3
0x1BAF R bool Math bool result 4
0x1BB0 R bool Math bool result 5
0x1BBA R bool Math bool result 15
0x1BBB R bool Math bool result 16
0x1BBC R bool Math bool result 17
0x1BBD R bool Math bool result 18
0x1BBE R bool Group alarm, group 1
0x1BBF R bool Group alarm, group 2
0x1BC0 R bool Group alarm, group 3
60
7 Address tables
0x1BC7 R bool Alarm positive tolerance band, group 1
0x1BCA R bool Alarm positive tolerance band, group 4
0x1BCB R bool Alarm positive tolerance band, group 5
0x1BCC R bool Alarm positive tolerance band, group 6
0x1BCD R bool Alarm positive tolerance band, group 7
0x1BCE R bool Alarm positive tolerance band, group 8
0x1BCF R bool Alarm positive tolerance band, group 9
0x1BD0 R bool Alarm negative tolerance band, group 1
0x1BD9 R bool Read out memory alarm CF
0x1BDA R bool Alarm, CF card full
0x1BDB R bool Memory alarm, interface
0x1BDC R bool Login
0x1BDD R bool Malfunction
0x1BDE R bool Reserve 1
0x1BDF R bool Fieldbus error
0x1BE0 R bool Reserve 2
0x1BE1 R bool CF card inserted
0x1BE2 R bool CF card removed
0x1BE3 R float Available as of firmware 187.04.xx:
External analog process value 25
(limit-checked)
0x1BE5 R float Available as of firmware 187.04.xx:
(limit-checked)
... ... ... ...
... ... ... ...
... ... ... ...
0x1C1B R float Available as of firmware 187.04.xx:
(limit-checked)
61
7 Address tables
0x1C1D R float Available as of firmware 187.04.xx:
(limit-checked)
0x1C1F R/W float Available as of firmware 187.04.xx:
External analog process value 25 (interface)
0x1C21 R/W float Available as of firmware 187.04.xx:
... ... ... ...
... ... ... ...
... ... ... ...
0x1C5B R bool Available as of firmware 187.04.xx:
External analog alarms 1, channel 25
0x1C5C R bool Available as of firmware 187.04.xx:
... ... ... ...
... ... ... ...
... ... ... ...
0x1C77 R bool Available as of firmware 187.04.xx:
0x1C7A R bool Available as of firmware 187.04.xx:
... ... ... ...
... ... ... ...
... ... ... ...
0x1C97 R/W bool Available as of firmware 187.04.xx:
External binary input, status 25
0x1C98 R/W bool Available as of firmware 187.04.xx:
... ... ... ...
... ... ... ...
... ... ... ...
0x1CB3 R/W bool Available as of firmware 187.04.xx:
0x1CB4 R/W bool Available as of firmware 187.04.xx:
62
7 Address tables
0x1CB5 R bool Available as of firmware 187.04.xx:
External binary input, alarm 25
0x1CB6 R bool Available as of firmware 187.04.xx:
... ... ... ...
... ... ... ...
... ... ... ...
0x1CD1 R bool Available as of firmware 187.04.xx:
0x1CD2 R bool Available as of firmware 187.04.xx:
0x1CD3 R/W char 64 Available as of firmware 187.04.xx:
External batch text 10
0x1CF3 R/W char 64 Available as of firmware 187.04.xx:
... ... ... ...
... ... ... ...
... ... ... ...
0x1ED3 R/W char 64 Available as of firmware 187.04.xx:
0x1EF3 R/W char 64 Available as of firmware 187.04.xx:
0x1F13 R bool Available as of firmware 187.04.xx:
Batch 1 active
Batch 2 active
Batch 3 active
0x1F16 R word Available as of firmware 187.04.xx:
Date: Year as of 1970
Date: Month
Date: Day
Time: Hours
0x1F1A R word Available as of firmware 187.04.xx:
Time: Minutes
0x1F1B R word Available as of firmware 187.04.xx:
Time: Seconds
0x1F1C R bool Available as of firmware 187.04.xx:
Slave timeout COM1
0x1F1D R bool Available as of firmware 187.04.xx:
Slave timeout COM1 inverse
0x1F1E R bool Available as of firmware 187.04.xx:
Slave timeout COM2
63
7 Address tables
0x1F1F R bool Available as of firmware 187.04.xx:
Slave timeout COM2 inverse
Slave timeout TCP
Slave timeout TCP inverse
0x2000 - - Acyclical writing of 4 byte
(special function, for Profibus only)
0x2002 - - Acyclical writing of 22 byte
0x2010 - - Acyclical reading of 4 byte
0x2012 - - Acyclical reading of 22 byte
0x9000 R/W char 1204 Recipe of the active machine/batch 0
64
8 Index
A
Address table 47
B
Barcode 10, 12, 39
Baud rate 12, 16
Browser 41
C
Checksum (CRC16) 27
Configuration via keyboard 12
Connection cables 11
Connection diagram 9–10
D
Data format 15
Data structure 17
Device address 12, 18
Device data 47
DNS 14
Double values 25
E
ElectroStatic Discharge (ESD) 5
Email 35, 37, 44, 46
Email transfer via modem and Ethernet 33
Error 28
Ethernet 10, 13–14
F
Float values 24
Function overview 18
H
HTTP 41
I
Integer values 24
Interface type 12
M
Min. response time 12, 17
Modbus 15
Modbus broadcast address 18
Modbus double format 25
65
8 Index
Modbus error codes 28
Modbus float format 24
Modbus master 12
Modbus slave 12
Modbus TCP 42
Modbus telegram 17
Modem operation 35
O
Overrange 29
P
Parity bit 15
Plug assignment 11
POP3 44
Protocol 12
R
Read command 19–20
Relay outputs 27
Returning 5
RS232 10–11
RS485 10–11
RTU 12, 15
S
SMTP 34, 44
Stop bit 15
System prerequisites 7
T
Telegram 42
Timing scheme 16
Troubleshooting 28
U
Underrange 29
W
Write command 21–23
66
JUMO GmbH & Co. KG JUMO Instrument Co. Ltd. JUMO Process Control, Inc.
Street address: JUMO House 6733 Myers Road
Moritz-Juchheim-Straße 1 Temple Bank, Riverway East Syracuse, NY 13057, USA
36039 Fulda, Germany Harlow, Essex CM 20 2DY, UK Phone: +1 315 437 5866
Delivery address: Phone: +44 1279 63 55 33 Fax: +1 315 437 5860
Mackenrodtstraße 14 Fax: +44 1279 62 50 29 Email: info.us@jumo.net
36039 Fulda, Germany Email: sales@jumo.co.uk Internet: www.jumousa.com
Postal address: Internet: www.jumo.co.uk
36035 Fulda, Germany
Phone: +49 661 6003-0
Fax: +49 661 6003-607
Email: mail@jumo.net
Internet: www.jumo.net

Jumo Logoscreen NT: Paperless Recorder With TFT Display, Compactflash Card and Usb Interfaces

Uploaded by

Copyright:

Available Formats

Jumo Logoscreen NT: Paperless Recorder With TFT Display, Compactflash Card and Usb Interfaces

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Jumo Logoscreen NT: Paperless Recorder With TFT Display, Compactflash Card and Usb Interfaces

Uploaded by

Copyright:

Available Formats

JUMO LOGOSCREEN nt

3 Connecting the interface 9

4 Modbus protocol description 15

5 Serial protocol types 35

Your comments are highly appreciated.

All information required to operate the interface is described in the

When returning controller modules, assemblies or components,

1.2.1 Warning signs

Caution This symbol is used when there may be danger to personnel if

Attention This symbol is used when there may be damage to equipment

Attention This symbol is used where special care is required when

1.2.2 Note symbols

1.2.3 Number types

2.3 System prerequisites

USB host USB device

(3) (4) (5) (6)

We recommend the use of a twisted connection cable with

Paperless recorder PC/notebook

Paperless recorder PC/notebook

3.3 Toggling between RS232 and RS485

For communication via the RS232 interfaces, the device address

The further communication parameters usually assigned to the paperless

The DHCP server can change an assigned address. If, for

The automatically assigned IP address query can be inquired in the Device

IP address If automatic IP address assignment is not used ("DHCP = OFF"), the IP

Changes to this parameter will become effective after the

Changes to this parameter will become effective after the

Slave 1 Slave 2 Slave n

The paperless recorder can be operated either as a Modbus slave,

4.2 Transmission mode (RTU)

Data word Parity bit Stop bit Number of bits

The data format to be used can be set, see Chapter 3.4

Example character transmission

Data request Data request

t1 Internal waiting time of the paperless recorder prior to checking

A minimum response time can be set in the controller under the

4.4 Structure of a Modbus telegram

Slave address Function code Data field Checksum

Each telegram contains four fields:

A maximum of 31 paperless recorders can be addressed via the

4.6 Function codes

Function Function Limitation

Data request Slave Function Address Number Checksum

Response Slave Function Number of Bit Checksum

The response always comes in full bytes of 8 bits each.

01 02 0340 0001 B85A

Data request Slave Function Address Number Checksum

Response Slave Function Number of Word Checksum

01 03 1257 0006 7160

01 03 0C 1999 4348 4CCC 4348 2666 4396 8548

Instruction Slave Function Bit address Bit value Checksum

Response Slave Function Bit address Bit value Checksum

01 05 0340 FF00 8DAA

Response (as instruction):

Instruction Slave Function Word address Word value Checksum

Response Slave Function Word address Word value Checksum

01 06 1638 0001 CD8F

Response (as instruction):

instruction Slave Fun- Address Number Number Number Check