WAGO 750-8207, Manual

Page 1: ...Manual WAGO I O SYSTEM 750 750 8207 xxx xxx PFC200 CS 2ETH RS 3G PLC Controller PFC200 Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 ...

Page 2: ...7 5 55 Fax 49 0 571 8 87 85 55 E Mail support wago com Every conceivable measure has been taken to ensure the accuracy and completeness of this documentation However as errors can never be fully excluded we always appreciate any information or suggestions for improving the documentation E Mail documentation wago com We wish to point out that the software and hardware terms as well as the trademark...

Page 3: ...Description 24 3 1 View 27 3 2 Labeling 29 3 2 1 Manufacturing Number 29 3 3 Connectors 30 3 3 1 Data Contacts Internal Bus 30 3 3 2 Power Jumper Contacts Field Supply 31 3 3 3 CAGE CLAMP Connectors 32 3 3 4 Service Interface 33 3 3 5 Network Connections X1 X2 34 3 3 6 RS 232 RS 485 X3 Communication Connection 35 3 3 6 1 Operating as an RS 232 Interface 36 3 3 6 2 Operating as an RS 485 Interface ...

Page 4: ...d Passwords 56 4 1 2 1 1 Services and Users 56 4 1 2 1 2 WBM User Group 57 4 1 2 1 3 Linux User Group 57 4 1 2 1 4 SNMP User Group 57 4 1 2 2 Web Protocols for WBM Access 58 4 1 2 2 1 TLS Encryption 58 4 1 3 Network Configuration 60 4 1 3 1 Host Name Domain Name 60 4 1 3 2 Default Gateways 60 4 1 4 Network Services 62 4 1 4 1 DHCP Client 62 4 1 4 2 DHCP Server 62 4 1 4 3 DNS Server 64 4 2 Memory C...

Page 5: ... 6 Shutdown Restart 94 7 7 Initiating Reset Functions 95 7 7 1 Warm Start Reset 95 7 7 1 1 CODESYS 2 Runtime System 95 7 7 1 2 e RUNTIME Runtime System 95 7 7 2 Cold Start Reset 95 7 7 2 1 CODESYS 2 Runtime System 95 7 7 2 2 e RUNTIME Runtime System 95 7 7 3 Software Reset 96 7 8 Configuration 97 7 8 1 Configuration via Web Based Management WBM 98 7 8 1 1 WBM User Administration 99 7 8 1 2 General...

Page 6: ...eb based Management Page126 7 8 1 14 1 Change Password for Selected User Group 126 7 8 1 15 Create Bootable Image Page 127 7 8 1 15 1 Create Bootable Image from Active Partition Active Partition Group 127 7 8 1 16 Configuration of Serial Interface RS232 Page 129 7 8 1 16 1 Serial Interface Assigned to Group 129 7 8 1 16 2 Assign Owner of Serial Interface Active after Next Controller Reboot Group 1...

Page 7: ...eneral SNMP Configuration Group 149 7 8 1 33 Configuration of SNMP v1 v2c Parameters Page 150 7 8 1 33 1 SNMP v1 v2c Manager Configuration Group 150 7 8 1 33 2 Actually Configured Trap Receivers Group s 150 7 8 1 33 3 Trap Receiver n Group s 151 7 8 1 33 4 Add New Trap Receiver Group 151 7 8 1 34 Configuration of SNMP v3 Users Page 152 7 8 1 34 1 Actually Configured v3 Users Group s 152 7 8 1 34 2...

Page 8: ...CP IP Submenu 176 7 8 4 4 5 TCP IP IP Address Submenu 177 7 8 4 4 6 IP Address Xn Submenu 177 7 8 4 4 7 TCP IP Default Gateway Submenu 178 7 8 4 4 8 Default Gateway Default Gateway n Submenu 178 7 8 4 4 9 TCP IP DNS Server Submenu 179 7 8 4 4 10 Networking Ethernet Submenu 179 7 8 4 4 11 Ethernet Switch Configuration Submenu 180 7 8 4 4 12 Ethernet Ethernet Ports Submenu 180 7 8 4 4 13 Ethernet Po...

Page 9: ...s Submenu 207 7 8 4 11 16 PLC Runtime Services CODESYS 2 Submenu 208 7 8 4 11 17 PLC Runtime Services e RUNTIME Submenu 209 7 8 4 11 18 Firewall Status Submenu 210 7 8 4 12 SNMP Menu 211 7 8 4 12 1 SNMP General SNMP Configuration Submenu 211 7 8 4 12 2 SNMP SNMP v1 v2c Manager Configuration Submenu 212 7 8 4 12 3 SNMP SNMP v1 v2c Trap Receiver Configuration Submenu 212 7 8 4 12 4 SNMP SNMP v3 Conf...

Page 10: ...ation 260 8 9 5 1 Effect of Update Mode on CODESYS Tasks 261 8 9 5 1 1 Asynchronous Update Mode 261 8 9 5 1 2 Synchronous Update Mode 262 8 10 Memory Settings in CODESYS 262 8 10 1 Program Memory 262 8 10 2 Data Memory and Function Block Limitation 264 8 10 3 Remanent Memory 265 8 11 General Target System Settings 266 8 12 CODESYS Visualization 266 8 12 1 Limits of CODESYS Visualization 269 8 12 2...

Page 11: ...s for ETHERNET Interface 1 eth0 294 10 5 2 5 Register 0x1037 MODBUS TCP Response Delay 294 10 5 3 PLC Status Register 295 10 5 4 MODBUS Watchdog 295 10 5 4 1 Register 0x1100 Watchdog Command 297 10 5 4 2 Register 0x1101 Watchdog Status 299 10 5 4 3 Register 0x1102 Watchdog Timeout 299 10 5 4 4 Register 0x1103 Watchdog Config 299 10 5 5 Register 0x1104 Watchdog Operation Mode 300 10 5 6 MODBUS Cons...

Page 12: ...Message Indicated by a Flashing Sequence 329 12 2 3 Meaning of Blink Codes and Procedures for Troubleshooting 330 12 2 4 Meaning of Blink Codes and Procedures for Troubleshooting 335 13 Service 336 13 1 Inserting and Removing the Memory Card 336 13 1 1 Inserting the Memory Card 336 13 1 2 Removing the Memory Card 336 13 2 Inserting and Removing the SIM Card 338 13 2 1 Inserting the SIM Card 338 13...

Page 13: ... Analog Input Modules 353 15 1 3 3 4 Channel Analog Input Modules 354 15 1 3 4 3 Phase Power Measurement Module 355 15 1 3 5 8 Channel Analog Input Modules 355 15 1 4 Analog Output Modules 356 15 1 4 1 2 Channel Analog Output Modules 356 15 1 4 2 4 Channel Analog Output Modules 356 15 1 5 Specialty Modules 357 15 1 5 1 Counter Modules 357 15 1 5 2 Pulse Width Modules 359 15 1 5 3 Serial Interface ...

Page 14: ...le lib 375 15 2 1 4 SysLibFileAsync lib 376 15 2 1 5 SysLibRtc lib 377 15 2 1 6 BusDiag lib 378 15 2 1 7 mod_com lib 378 15 2 1 8 SerComm lib 378 15 2 1 9 WagoConfigToolLIB lib 379 15 2 1 10 WagoLibCpuUsage lib 395 15 2 1 11 WagoLibDiagnosticIDs lib 395 15 2 1 12 WagoLibLed lib 396 15 2 1 13 WagoLibNetSnmp lib 396 15 2 1 14 WagoLibNetSnmpManager lib 396 15 2 1 15 WagoLibSSL lib 397 15 2 1 16 WagoL...

Page 15: ...nd the variants listed in the table below Table 1 Variants Item Number Variant Designation 750 8207 PFC200 CS 2ETH RS 3G 750 8207 025 000 PFC200 CS 2ETH RS 3G T Documentation Validity for Variants Unless otherwise indicated the information given in this documentation applies to listed variants This documentation is only applicable from FW Version 02 06 20 09 1 2 Copyright This Manual including all...

Page 16: ...ury Personal Injury Indicates a moderate risk potentially hazardous situation which if not avoided could result in death or serious injury Personal Injury Indicates a low risk potentially hazardous situation which if not avoided may result in minor or moderate injury Damage to Property Indicates a potentially hazardous situation which if not avoided may result in damage to property Damage to Prope...

Page 17: ...entation 17 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Additional Information Refers to additional information which is not an integral part of this documentation e g the Internet ...

Page 18: ...lic Names of paths and data files are marked in italic type e g C Program Files WAGO Software Menu Menu items are marked in bold letters e g Save A greater than sign between two names means the selection of a menu item from a menu e g File New Input Designation of input or optional fields are marked in bold letters e g Start of measurement range Value Input or selective values are marked in invert...

Page 19: ...ronments All changes to the coupler or controller should always be carried out by qualified personnel with sufficient skills in PLC programming 2 1 3 Use of the WAGO I O SYSTEM 750 in Compliance with Underlying Provisions Fieldbus couplers fieldbus controllers and I O modules found in the modular WAGO I O SYSTEM 750 receive digital and analog signals from sensors and transmit them to actuators or ...

Page 20: ...4 Technical Condition of Specified Devices The devices to be supplied ex works are equipped with hardware and software configurations which meet the individual application requirements WAGO Kontakttechnik GmbH Co KG will be exempted from any liability in case of changes in hardware or software as well as to non compliant usage of devices Please send your request for modified and new hardware or so...

Page 21: ...uch equipment and fixtures to authorized qualified staff only by means of specific keys or tools Do not use in telecommunication circuits Only use devices equipped with ETHERNET or RJ 45 connectors in LANs Never connect these devices with telecommunication networks Replace defective or damaged devices Replace defective or damaged device module e g in the event of deformed contacts since the long t...

Page 22: ...rge The devices are equipped with electronic components that may be destroyed by electrostatic discharge when touched Please observe the safety precautions against electrostatic discharge per DIN EN 61340 5 1 3 When handling the devices please ensure that environmental factors personnel work space and packaging are properly grounded 2 3 Disclaimer The PFC200 CS 2ETH RS 3G controller 750 8207 also ...

Page 23: ... intended for use on local networks Please note the following when using ETHERNET devices in your system Do not connect control components and control networks to an open network such as the Internet or an office network WAGO recommends putting control components and control networks behind a firewall Limit physical and electronic access to all automation components to authorized personnel only Ch...

Page 24: ... on the runtime system set CODESYS 2 or e RUNTIME The implementation of the task processing in the runtime system for Linux has been optimized with real time extensions in order to provide maximum performance for automation tasks Web visualization is also provided as visualization in addition to the development environment For IEC 61131 3 programming in CODESYS applications the controller provides...

Page 25: ...or e RUNTIME A Web based management system WBM is also available as a configuration aid This system includes various dynamic HTML pages from which among other things information about configuration and the status of the controller can be called up The WBM is already stored in the device and is presented and operated using an Internet browser You can also save your own HTML pages in the implemented...

Page 26: ...le from WAGO item No 758 879 000 001 as it is suitable for industrial applications subjected to environmental extremes and was developed for use in the controller Compatibility with other commercially available storage media cannot be guaranteed SIM card not included Please note that an SIM card is required to use the mobile communications function with the controller The SIM card may be obtained ...

Page 27: ...t power supply 3 Data contacts Connections Data contacts Internal data bus 4 CAGE CLAMP Connections for Power Supply Connections CAGE CLAMP connections 5 Slot for memory card Memory card slot 6 Slot for SIM card SIM card slot 7 Releasing strap Mounting Inserting and Removing Device 8 Power contacts for power supply of down circuit I O modules Connections Power contacts Field side supply 9 Mobile r...

Page 28: ...onnections Connections Network connections ETHERNET X1 X2 13 Safe Locking Feature Mounting Inserting and Removing Device 14 Serial interface Connections Communication port RS 232 RS 485 X3 15 LED Indicators System Indicating elements Indicating elements Fieldbus System 16 Reset button in hole Operating elements Reset button 17 LED indicators Mobile radio network status Indicating elements Indicati...

Page 29: ...r indicates the delivery status directly after production Figure 2 Marking Area for Serial Numbers There are two serial numbers in two rows in the side marking They are left of the release tab The first 10 positions in the longer row of the serial numbers contain version and date identifications Example structure of the rows 0114010101 01 14 01 01 01 additional positions WW YY FW HW FL Calendar we...

Page 30: ...ing Ensure that the environment is well grounded The devices are equipped with electronic components that may be destroyed by electrostatic discharge When handling the devices ensure that the environment persons workplace and packing is well grounded Avoid touching conductive components e g data contacts Communication between the controller and the I O modules and system power supply for the I O m...

Page 31: ...to down circuit I O modules These contacts are designed as spring contacts Figure 4 Power Jumper Contacts Table 5 Legend for Figure Power Jumper Contacts Contact Type Function 1 Spring contact Potential transmission UV for field supply 2 Spring contact Potential transmission 0 V for field supply 3 Spring contact Potential transmission ground for field supply Do not exceed maximum current via power...

Page 32: ...tage 24 V 2 Field side power supply voltage UV 3 Field side power supply voltage 0 V 4 Ground Field side power supply voltage ground 5 0 V System power supply voltage 0 V 6 Field side power supply voltage UV 7 Field side power supply voltage 0 V 8 Ground Field side power supply voltage ground dg_ Observe supplementary power supply regulations for use in shipbuilding Observe supplementary power sup...

Page 33: ...RNET Settings and for firmware download Figure 6 Service Interface Closed and Open Flap Table 7 Service Interface Number Description 1 Open flap 2 Service interface Device must be de energized To prevent damage to the device unplug and plug in the communication cable only when the device is de energized The connection to the 4 pin header under the cover flap can be realized via the communication c...

Page 34: ...d from FW Version 02 06 20 09 3 3 5 Network Connections X1 X2 Figure 7 Network Connections X1 X2 Table 8 Legend for Figure Network Connections X1 X2 Contact Signal Description 1 TD Transmit Data 2 TD Transmit Data 3 RD Receive Data 4 NC Not assigned 5 NC Not assigned 6 RD Receive Data 7 NC Not assigned 8 NC Not assigned ...

Page 35: ... FB_GND Ground 6 NC Not assigned FB_5V Power Supply 7 RTS Request to send NC Not assigned 8 CTS Clear to send RxD TxD N Receive transmit data 9 NC Not assigned NC Not assigned Enclosure Shield Shielding Shield Shielding Incorrect parameterization can damage the communication partners The voltage levels are 12 V and 12 V for RS 232 and 5 V and 5 V for RS 485 If the controller interfaces differ from...

Page 36: ...e RS 232 signals have different data directions Table 10 Function of RS 232 Signals for DTE DCE Contact Signal Data Direction DTE DCE 2 RxD Input Output 3 TxD Output Input 5 FB_GND 7 RTS Output Input 8 CTS Input Output For a DTE to DCE connection the signals are connected directly 1 1 Figure 9 Termination with DTE DCE Connection 1 1 For a DTE to DTE connection the signal connections are crossed Fi...

Page 37: ...ation If required one pull up or pull down resistor may be used These resistors ensure a defined level on the bus when no subscriber is active i e when all subscribers are in Tri state Attention bus termination The RS 485 bus segment must be terminated at both ends No more than two terminations per bus segment may be used Terminations may not be used in stub and branch lines Operation without prop...

Page 38: ...0 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 3 7 Mobile Radio Antenna The screw connector SMA jack for the mobile radio antenna is located at the front of the housing Figure 12 Mobile Radio Antenna Connection ...

Page 39: ...rom FW Version 02 06 20 09 3 4 Display Elements 3 4 1 Power Supply Indicating Elements Figure 13 Power Supply Indicating Elements Table 11 Legend for Figure Power Supply Indicating Elements Description Color Description A Green off Status of system power supply voltage B Green off Status of field side power supply voltage ...

Page 40: ...n Orange Off System status RUN Red Green Orange Off PLC program status I O Red Green Orange Off Internal data bus status MS Red Green Orange Off Module status NS Red Green Orange Off Without function USR Red Green Orange Off User LED programmable using function blocks from the WAGO libraries to control the LEDs Red Green Orange Off Signal quality S5 Red Green Orange Off Signal quality S4 Red Green...

Page 41: ...Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 4 3 Memory Card Indicating Elements Figure 15 Indicating Elements Memory Card Slot Table 13 Legend for Figure Indicating Elements Memory Card Slot Description Color Description SD Yellow Off Memory card status ...

Page 42: ...2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 4 4 Network Indicating Elements Figure 16 Indicating Elements RJ 45 Jacks Table 14 Legend for Figure Indicating Elements RJ 45 Jacks Description Color Description LNK Green Off ETHERNET connection status ACT Yellow Off ETHERNET data exchange ...

Page 43: ...n 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 4 5 Mobile Radio Network Status Indicators Figure 17 Mobile Radio Network Status Indicators Table 15 Legend for the Mobile Radio Network Status Indicators Figure Description Color Description CON Green off Mobile radio network status ...

Page 44: ...uns STOP Latching Stop CODESYS 2 application stopped RESET Spring return Reset warm start or Reset cold start based on the duration of activation see Section Starting Initiating Reset Functions dg_ Other functions can also be initiated using the reset button 3 5 1 2 e RUNTIME Runtime System dg_ Table 17 Mode Selector Switch Position Actuation Function RUN Latching Normal operation e RUNTIME applic...

Page 45: ... errors It is a shortstroke button with a low actuating force of 1 1 N 2 1 N 110 gf 210 gf The button can be actuated using a suitable object e g pen You can initiate different functions using the Reset button depending on the position of the mode selector Temporarily set a fixed IP address Perform a software reset restart Restore factory setting factory reset Please refer to the same sections in ...

Page 46: ...y Card The memory card is protected by a cover flap The cover cap is sealable Memory card is not included in the scope of delivery Note the controller is delivered without memory card To use a memory card you must order one separately The controller can also be operated without memory card expansion the use of a memory card is optional dg_ Only use recommended memory cards Use only the SD memory c...

Page 47: ...is locked in the housing with a SIM card holder Inserting and removing the SIM card is described in the section Service Inserting and Removing the SIM Card SIM card not included Please note that an SIM card is required to use the mobile communications function with the controller The SIM card may be obtained from typical service providers such as T Mobile VODAFONE or O2 Select a suitable mobile co...

Page 48: ...48 Device Description WAGO I O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 8 Schematic Diagram Figure 22 Schematic diagram ...

Page 49: ... up to 32 Gbytes All guaranteed properties are valid only in connection with the WAGO 758 879 000 001 memory card 3 9 3 Power supply Table 21 Technical Data Power Supply Power supply 24 VDC 25 30 Max input current 24 V 550 mA Power failure time acc IEC 61131 2 Depending on external buffering Total current for I O modules 5V 1700 mA Isolation 500 V system supply Buffer for system power supply The s...

Page 50: ... e COCKPIT IEC 61131 3 IL LD FBD ST FC CODESYS 2 memory configuration Program memory Flash 16 MByte Data memory RAM 64 MByte Non volatile memory NVRAM Retain Flags 128 kByte e RUNTIME memory configuration Program and data memory 60 MByte dynamically distributed Non volatile memory NVRAM Retain Flags 128 kByte Retain variables max CODESYS 2 10 000 e RUNTIME Not specified 3 9 6 Internal data bus Tab...

Page 51: ...rom fieldbus to the process image for I O modules Any data that is required from the I O module process image must be explicitly mapped in the CODESYS program to the data in the fieldbus process image and vice versa Direct access is not possible 3 9 8 Serial interface Table 26 Technical Data Serial Interface Interface 1 x serial interface per TIA EIA 232 and TIA EIA 485 switchable 9 pole D sub fem...

Page 52: ...s Operating temperature range 0 C 55 C Operating temperature range for components with extended temperature range 750 xxx 025 xxx 20 C 60 C Storage temperature range 25 C 85 C Storage temperature range for components with extended temperature range 750 xxx 025 xxx 40 C 85 C Relative humidity Max 5 95 without condensation Resistance to harmful substances Acc to IEC 60068 2 42 and IEC 60068 2 43 Max...

Page 53: ...d can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense Modifications not expressly approved by this company could ...

Page 54: ...54 Device Description WAGO I O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 EMC CE Emission of interference EN 61000 6 3 ...

Page 55: ... previously set 4 1 1 1 Operation in Switch Mode For operation in Switch mode the TCP IP settings such as the IP address or subnet mask apply to both X1 and X2 When switching to Switch mode the X1 settings are applied as a new common configuration for X1 and X2 The device is then no longer accessible via the IP address previously set for X2 This must be taken into account for CODESYS applications ...

Page 56: ...rongly recommend changing these passwords on startup Change passwords Default passwords are documented in these instructions and therefore do not offer adequate protection Change the passwords to meet your particular needs 4 1 2 1 1 Services and Users All password protected services and their associated users are listed in the following table Users Service WBM Linux SNMP admin user root admin user...

Page 57: ... instructions and therefore do not offer adequate protection Change the passwords to meet your particular needs 4 1 2 1 3 Linux User Group The Linux users group include the actual users of the operating system which is likewise used by most services The passwords for these users must be configured through a terminal connection via SSH RS 232 Table 33 Linux Users User Special Feature Home Directory...

Page 58: ...sed on x509 To allow secure authentication you must replace the generic security certificate with a security certificate specific for the individual device 4 1 2 2 1 TLS Encryption When an HTTPS connection is established the Web browser and Webserver negotiate what TLS version and what cryptographic method are to be used The TLS Configuration group of the WBM page Security can be used to switch th...

Page 59: ...on 02 06 20 09 BSI Guidelines on Migration to TLS 1 2 The German Federal Office for Information Security guidelines on migration to TLS 1 2 contain compatibility matrices that show what software is comparable with TLS 1 2 You can find the guidelines on the Internet at https www bsi bund de Topics Standards and Criteria Minimum Standards ...

Page 60: ...ed or supplied by DHCP the domain name is empty 4 1 3 2 Default Gateways In the TCP IP configuration the controller allows the setting of two default gateways A network station transmits to a default gateway all network data packets for systems outside of its local network This gateway is responsible for the appropriate routing of the data packets so that they reach the target system The default g...

Page 61: ...dress pool is entered in the Destination Address field all data is sent to the IP address or the address pool via the entered gateway address The gateway metric here has an important function This determines the costs of the connection For example if two identical address pools are defined 192 168 1 0 24 IP 192 168 1 1 192 168 1 254 one with a metric of 20 and the second with 192 168 1 2 and a met...

Page 62: ...ciple Last In First Out The settings from the last DHCP offer received are always used The DNS and NTP Server parameters are stored centrally for global use All transmitted parameters are saved 4 1 4 2 DHCP Server The controller provides the DHCP server service for the automatic configuration of IP addresses of network stations on the same subnet Generally only one DHCP server can be active on a s...

Page 63: ...e can also be specified instead of the MAC address for identifying the requesting network subscriber Subnet mask The subnet mask configured in the network settings of the DHCP server for the local network concerned is passed The subnet mask and IP address determine the range of valid IP addresses on the local network Broadcast address IP address with which an IP packet can be sent to all network s...

Page 64: ...s over the names and IP addresses of local network stations from the DHCP server This DNS server routes requests for non local names such as from the Internet to higher level DNS servers if configured and accessible The following settings are possible for the DNS server The service itself enabled disabled Access type to the assignments The requests are buffered in Proxy mode throughput optimized I...

Page 65: ...and programs can be copied to one or more controllers Deactivate write protection In order to be able to write data to the memory card you must deactivate the small push switch for the write protection setting This switch is on one of the long sides of the memory card If the memory card is inserted this is incorporated under media sd in the directory structure of the file system inside the control...

Page 66: ... with FAT16 FAT32 or NTFS If the CODESYS user admin see the section Network Network Security Users and Passwords Services and Users is supposed to be able to access files created on the memory card the memory card must be formatted with FAT16 FAT32 or NTFS If the Linux file system formats EXT2 or EXT3 are used root rights are required for data access Therefore access via CODESYS is not possible ...

Page 67: ... firmware versions at the backup and restore times are identical If necessary skip restoring the controller operating system or match the firmware version of the controller to the firmware version of the backup time beforehand 4 2 2 1 Backup Function The backup function enables the data of the internal memory and device settings to be saved on the memory card during operation The backup function c...

Page 68: ...d to the internal memory during operation The restore function can be called via the WBM page Firmware Restore or the CBM menu Firmware Restore The network or if it is inserted the memory card can be selected as the source medium If the memory card is selected as the source medium the LED above the memory card slot flashes yellow orange during the load operation When loading the data the files are...

Page 69: ...of the internal drive Restoration only possible from internal memory If the device was booted from the memory card the firmware cannot be restored Reset by restore A reset is performed when the system or settings are restored by CODESYS Connection loss through restore If the restore changes the parameters of the ETHERNET connection the WBM may then no longer be able to open a connection to the dev...

Page 70: ...omatic copy procedures are triggered The LED above the memory card flashes yellow orange during the access The memory card is then ready for operation and available under media sd 4 2 4 Removing the Memory Card during Operation The fieldbus node and the PLC program are in operation and the memory card is plugged in Remove the memory card during ongoing operation Data can be lost during writing Not...

Page 71: ...memory card insert a memory card formatted to support file system Only the first partition of a memory card can be accessed at media sd and can be used as the home directory Only when the two conditions are met can the Home directory on memory card enabled checkbox be selected from the WBM on the PLC Runtime page Press the Submit button to apply the settings which take effect after the next restar...

Page 72: ...ding end module The width of the end module is 12 mm When assembled the I O modules have a maximum length of 768 mm Examples 64 I O modules with a 12 mm width can be connected to a fieldbus coupler controller 32 I O modules with a 24 mm width can be connected to a fieldbus coupler controller Exception The number of connected I O modules also depends on the type of fieldbus coupler controller is us...

Page 73: ... For such a configuration attach a 750 627 I O Module end module for internal data bus extension after the last I O module of a module assembly Use an RJ 45 patch cable to connect the I O module to the coupler module for internal data bus extension of another module block This allows you to segment a fieldbus node into a maximum of 11 blocks with maximum of 10 I O modules for internal data bus ext...

Page 74: ...agnetic disturbances In order to avoid corrosion this tin plated carrier rail contact must not form a galvanic cell with the material of the carrier rail which generates a differential voltage above 0 5 V saline solution of 0 3 at 20 C The carrier rail must optimally support the EMC measures integrated into the system and the shielding of the I O module connections A sufficiently stable carrier ra...

Page 75: ... mm steel bluish tinned chromed unslotted 210 118 35 15 2 3 mm steel bluish tinned chromed unslotted 210 198 35 15 2 3 mm copper unslotted 210 196 35 8 2 1 6 mm aluminum unslotted Observe the mounting distance of the DIN rail when the load is increased With increased vibration and shock load mount the DIN rail at a mounting distance of max 60 mm 5 4 Spacing The spacing between adjacent components ...

Page 76: ...ecognized as the I O modules with power contacts blade contacts cannot be linked to I O modules with fewer power contacts Risk of injury due to sharp edged blade contacts The blade contacts are sharp edged Handle the I O module carefully to prevent injury Insert I O modules only from the proper direction All I O modules feature grooves for power jumper contacts on the right side For some I O modul...

Page 77: ...or an already available controller position the new controller so that the tongue and groove joints to the subsequent I O module are engaged 2 Snap the controller onto the carrier rail 3 Use a screwdriver blade to turn the locking disc until the nose of the locking disc engages behind the carrier rail see the following figure This prevents the controller from canting on the carrier rail With the c...

Page 78: ...ler or to the previous or possibly subsequent I O module are engaged Figure 25 Insert I O Module Example 2 Press the I O module into the assembly until the I O module snaps into the carrier rail Figure 26 Snap the I O Module into Place Example With the I O module snapped in place the electrical connections for the data contacts and power jumper contacts if any to the fieldbus coupler controller or...

Page 79: ... for all of the I O modules to be supplied with power Only connect one conductor to each CAGE CLAMP connection Only one conductor may be connected to each CAGE CLAMP connection Do not connect more than one conductor at one single connection If more than one conductor must be routed to one connection these must be connected in an up circuit wiring assembly for example using WAGO feed through termin...

Page 80: ... 2 1 Fuse Protection of the Electronic Circuit Power Supply Only implement the electronic circuit power supply with a suitable fuse The electronic power supply of the controller must only be connected via a slow blow 2A fuse as shown in the following figure The electronics may be damaged with higher currents Figure 28 Fuse Protection of the Electronic Circuit Power Supply ...

Page 81: ...ified operation of the system Table 36 Filter Modules for 24 V Supply Order No Name Description 750 626 Supply Filter Filter module for system supply and field supply 24 V 0 V i e for fieldbus coupler controller and bus power supply 750 613 750 624 Supply Filter Filter module for the 24 V field supply 750 602 750 601 750 610 Therefore the following power supply concept must be absolutely complied ...

Page 82: ...n at your machine system see System Description for 750 xxx and have performed shielding properly see System Description for 750 xxx To switch on both the controller and the connected I O modules switch on your power supply unit Starting of the controller is indicated by a brief green flashing of all LEDs After a few seconds the SYS LED will signal successful boot up of the controller The CODESYS ...

Page 83: ...me subnet To determine the IP address of the host PC with the Microsoft Windows operating system using the MS DOS prompt proceed as follows 1 Open the MS DOS prompt window To do this enter the command cmd in the input field under Start Execute Open Windows XP or Start Search programs files Windows 7 and then click OK or press Enter 2 In the MS DOS prompt enter the command ipconfig and then press E...

Page 84: ...r your specific system structure to ensure that the PC and the controller can communicate with one another using one of the available configuration tools WBM WAGO Ethernet Settings CBM see section Configuration Example for incorporating the controller 192 168 2 17 into an existing network If the IP address of your host PC is 192 168 1 2 for example then the controller must be on the same subnet Th...

Page 85: ...ddress has been assigned by means of DHCP default setting it can be determined through the settings and the output of the specific DHCP server In the example figure shown here the corresponding output of Open DHCP is presented Figure 30 Open DHCP Example Figure In conjunction with the DNS server associated with DHCP the device can be reached using its host name This name consists of the prefix PFC...

Page 86: ... interfaces X1 and X2 using the CBM configuration tool provided on the Linux console More information about CBM is given in the Section Configuration 1 Link a PC to the X3 serial interface using a terminal program 2 Log in to the Linux system as a super user The user name and the password are provided in the Section Users and Passwords Linux User Group 3 Start the configuration tool by entering th...

Page 87: ...6 20 09 4 In the Main menu use the keyboard arrow keys or numeric keypad to move to and select Networking and then press Enter Figure 32 CBM Selecting Networking 5 In the Networking menu select TCP IP and press Enter Figure 33 CBM Selecting TCP IP 6 In the menu TCP IP select IP Address and press Enter Figure 34 CBM Selecting IP address ...

Page 88: ...Version 02 06 20 09 7 In the menu TCP IP Configuration select IP Address and press Enter Figure 35 CBM Selecting the IP Address 8 In the menu Change IP Address enter the new IP address and confirm by clicking OK If you want to return to the main menu without making changes click Abort Figure 36 CBM Entering a New IP Address ...

Page 89: ...e software version To configure the controller use at least Version 6 4 1 1 dated 2015 06 29 of WAGO Ethernet Settings You can use WAGO communication cables or WAGO radio adapters or even the IP network for data communication 1 Switch off the power supply to the controller 2 Connect the 750 920 communication cable to the Service interface on the controller and to a serial interface of your PC 3 Sw...

Page 90: ... on the Source line under Input DHCP is normally activated as the default setting 8 In the column Input enter the required IP address and if applicable the address of the subnet mask and of the gateway 9 Click on Write to accept the address in the controller If necessary WAGO Ethernet Settings will restart your controller This action may require about 30 seconds 10 You can now close WAGO Ethernet ...

Page 91: ...68 1 17 When the switch is enabled the fixed address is also used for interface X2 When the switch is disabled the original address setting for interface X2 is not changed No reset is performed To make this setting set the mode selector switch to STOP and press and hold the Reset button RST for longer than 8 seconds Execution of the setting is signaled by the SYS LED flashing orange To cancel this...

Page 92: ...indow enter the command ping and the IP address of the controller for example ping 192 168 1 17 and then press Enter Host entries in the ARP table It may also be useful to delete the current host entries in the ARP table with the command arp d before executing the ping command as administrator in Windows 7 This ensures that older entries will not impair the success of the ping command 3 Your PC se...

Page 93: ...able in the Section Function Description Users and Passwords WBM Users Group shows the standard passwords for the WBM users Proceed as follows to change these passwords 1 Connect the controller to a PC via one of the network interfaces X1 X2 2 Start a web browser program on the PC and call up the WBM of the controller 3 Log in on the controller as admin user with the standard password 4 Change the...

Page 94: ...ions Software Reset Restart Alternatively you can switch off the controller and switch it back on again Do not power cycle the controller after changing any parameters Some parameter changes require a controller restart for the changes to apply Saving changes takes time Do not power cycle the controller to perform a restart i e changes may be lost by shutting down the controller too soon Only rest...

Page 95: ... applications are reset with a warm start reset All global data is set to its initialization values This corresponds to the e COCKPIT IDE Reset warm command dg_ To perform a warm start reset set the mode selector switch to Reset and hold it there for two to seven seconds Execution of the reset is signaled by the red RUN LED briefly going out when the mode selector switch is released 7 7 2 Cold Sta...

Page 96: ...d dg_ To perform a cold start reset set the mode selector switch to Reset and hold it there for more than seven seconds Execution of the reset is signaled after seven seconds by the RUN LED going out for an extended period You can then release the mode selector switch dg_ 7 7 3 Software Reset The controller is restarted on a software reset To perform a software reset set the mode selector switch t...

Page 97: ...THERNET and or RS 232 interface Configuration Using a Terminal Program Access via the CODESYS PLC program using the WagoConfigToolLIB lib library Appendix WagoConfigToolLIB lib Access via the PC using WAGO Ethernet Settings Configuration Using WAGO Ethernet Settings The CBM is basically for the initial configuration and startup of the controller Therefore it only provides a subset of the WBM param...

Page 98: ...witch the controller to the pre set address 192 168 1 17 using the Fixed IP address function see Section Initiate Reset Functions Set Fixed IP Address If you have installed a DHCP server on your PC and would like to access WBM through DHCP use the other interface You can find detailed information about this in the section Assigning an IP Address Using DHCP Displaying the Controller Start Page If t...

Page 99: ... in you are granted Guest access rights You must be logged into the WBM in order to have write or read access to most parameters This is checked with every access to the device If you have disabled cookies in your browser you can continue to use the WBM as long as you move directly inside it However if you fully reload the website e g with F5 you must log in again since the browser is then not abl...

Page 100: ...est PLC Runtime Information PLC Runtime Information guest General Configuration General PLC Runtime Configuration user WebVisu PLC WebVisu guest Networking Host Domain Name Configuration of Host and Domain Name user TCP IP TCP IP Configuration user Ethernet Ethernet Configuration user Firewall General Configuration General Firewall Configuration user MAC Address Filter Configuration of MAC Address...

Page 101: ...r NTP Client Configuration of NTP Client user PLC Runtime Services Configuration of PLC Runtime Services user SSH SSH Server Settings user TFTP TFTP Server user DHCP DHCP Configuration user DNS Configuration of DNS Service user MODBUS MODBUS Services Configuration user SNMP General Configuration Configuration of general SNMP parameters admin SNMP v1 v2c Configuration of SNMP v1 v2c parameters admi...

Page 102: ... button is displayed on the right in the header line when logged in a Logout button is displayed The navigation tree is shown on the left of the browser window You can use this navigation tree to go to the individual pages and where provided subpages included in these pages Some pages can only be called after a successful login To log in click the Login button and enter the user name and password ...

Page 103: ...ented and are labeled with their particular designation e g SYS RUN The following colors are possible gray LED is off full color green red yellow orange The LED is activated in the particular color half color The LED is flashing in the corresponding color The other half of the surface is then either gray or also colored The latter case indicates that the LED is flashing sequentially in different c...

Page 104: ...hanging any parameters Some parameter changes require a controller restart for the changes to apply Saving changes takes time Do not power cycle the controller to perform a restart i e changes may be lost by shutting down the controller too soon Only restart the controller using the software reboot function This ensures that all memory operations are completed correctly and completely ...

Page 105: ... the CODESYS runtime system is available Firmware Revision Firmware status 7 8 1 3 2 Network Details Xn Group s This group displays the network and interface properties of the controller If the switch is enabled one group Network Details X1 X2 is shown for both connections If the switch is disabled a separate group Network Details X1 Network Details X2 is shown for each connection Table 42 WBM Sta...

Page 106: ...the home directory for the runtime system should be moved to the memory card Disabled The home directory is stored in the internal memory Enabled The home directory is moved to the memory card All data is deleted when switching the runtime system The runtime system s home directory is completely deleted when switching the runtime system Insert a memory card before switching the home directory When...

Page 107: ... CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 The home directory change only takes effect after restarting the controller For this purpose use the WBM reboot function Do not shut down the controller too early ...

Page 108: ...rver This field is only visible when CODESYS 2 is enabled as the runtime system State The PLC operating state is shown This field is only visible when CODESYS 2 is enabled as the runtime system STOP PLC program is not executed RUN PLC program is executed Number of Tasks The number of tasks in the PLC program is shown This field is only visible when CODESYS 2 is enabled as the runtime system 7 8 1 ...

Page 109: ...the group and display the following information Table 46 WBM PLC Runtime Information Page Task n Group s Parameters Explanation Cycle count Number of task cycles since the system start Cycle time µsec Currently measured task cycle time for the task Cycle time min µsec Minimum task cycle time for the task since the system start Cycle time max µsec Maximum task cycle time for the task since the syst...

Page 110: ...ayed Web Visu The web visualization of the runtime system is displayed Click Submit to apply change The change is effective immediately In its default setting the WBM is called up when only entering the IP address To update the display after switching enter the IP address again in the address line of the web browser To display the web visualization the web server must be enabled in WBM under Ports...

Page 111: ...abled in the system If there are several network interfaces with DHCP always the last received hostname is valid If only the hostname configured here is to be valid the configuration of the DHCP server must be adapted so that no hostnames are transferred in the DHCP response 7 8 1 7 2 Domain Name Group Table 49 WBM Configuration of Host and Domain Name Page Domain Name Group Parameters Explanation...

Page 112: ...isabled a separate group IP Configuration X1 IP Configuration X2 is shown for each connection Table 50 WBM TCP IP Configuration Page IP Configuration Xn Group s Parameters Explanation Configuration Type Select a static or dynamic IP address Static IP Static IP addressing DHCP Dynamic IP addressing BootP Dynamic IP addressing IP Address Enter here a static IP address This is enabled if Static IP is...

Page 113: ...hether the selected default gateway is to be used Disabled The default gateway is not used Enabled The default gateway is used Destination Address Enter here if any network devices or only a specific network device or device pool is to be accessed default Any network devices can be reached Network address Only a specific network device or device from the set address pool can be reached Destination...

Page 114: ...the defined DNS servers are displayed If no server has been defined Configured None is displayed New Server IP Add additional DNS addresses You can enter 10 addresses Additionally used assigned by DHCP The DNS servers assigned if necessary by DHCP or BootP are displayed If no DNS server has been assigned by DHCP or BootP none is displayed Click Delete to remove the selected DNS server The change i...

Page 115: ...re data traffic between X2 and the PFC system is mirrored at port X1 Fast Aging enabled Set here the aging time of unused entries in the list of MAC addresses with a port assignment to external network stations Disabled An unused address entry becomes obsolete after 200 seconds Enabled An unused address entry becomes obsolete after 800 microseconds Broadcast Protection Set here the broadcast limit...

Page 116: ...isable the interface Autonegotiation on When Autonegotiation is enabled the connection modalities are negotiated automatically with the peer devices Speed Duplex Select the transmission speed and the duplex method 10 Mbit half duplex Information can only be sent or received 100 Mbit half duplex 10 Mbit full duplex Information can be sent and received simultaneously 100 Mbit full duplex Click Submi...

Page 117: ...he firewall This setting has the highest priority If the firewall is disabled all other settings have no direct effect The configuration of the other parameters is possible nevertheless so that you can set the firewall parameters correctly before you enable the firewall ICMP echo broadcast protection Enable or disable the ICMP echo broadcast protection Max UDP connections per second You can specif...

Page 118: ...interface ICMP echo protection Enable or disable the ICMP echo protection for the respective interface ICMP echo limit per second You can specify the maximum number of ICMP echo bursts per second ICMP burst limit 0 disabled You can specify the maximum number of ICMP echo bursts per second 0 Disabled Service enabled Telnet Enable or disable the firewall for the respective service The services thems...

Page 119: ...he device via the ETHERNET This also applies to other services that are used by your device e g the IP configuration via DHCP If the MAC Address Filter Whitelist does not contain the MAC address of your DHCP server your device will lose its IP settings after the next refresh cycle and is then no longer accessible If the MAC Address Filter Whitelist does not contain an entry the activation of the f...

Page 120: ...Page MAC Address Filter Whitelist Group Parameters Explanation MAC address Displays the MAC address of the relevant list entry MAC mask This displays the MAC mask of the relevant list entry Filter enabled Enable or disable the filter for the relevant list entry here MAC address Enter here the MAC address for a new list entry You can enter 10 filters MAC mask Enter the MAC mask for the new list ent...

Page 121: ...s displays the source network for the corresponding filter entry Source port The source port number for the respective filter entry is displayed Destination IP address The destination IP address for the respective filter entry is displayed Destination subnet mask The destination network mask for the respective filter entry is displayed Destination port The designation port number for the respectiv...

Page 122: ...ss Enter here the source IP address for the new filter entry Source netmask Enter here the source network mask for the new filter entry Source port Enter here the source port address for the new filter entry Destination IP address Enter here the destination IP address for the new filter entry Destination subnet mask Enter here the destination network mask for the new filter entry Destination port ...

Page 123: ...nd Date Page Date on Device Group Parameters Explanation Local Set date Click Change date to apply change The change is effective immediately 7 8 1 13 2 Time on Device Group Table 64 WBM Configuration of Time and Date Page Time on Device Group Parameters Explanation Local Set local time UTC Set GMT time 12 h format For switching between 12 hour and 24 hour time display Click Change time to apply c...

Page 124: ...with the TZ String parameter Table 65 WBM Configuration of Time and Date Page Time Zone Group Parameters Explanation Time zone Specify the appropriate time zone for your location AST ADT Atlantic Standard Time Halifax EST EDT Eastern Standard Time New York Toronto CST CDT Central Standard Time Chicago Winnipeg MST MDT Mountain Standard Time Denver Edmonton PST PDT Pacific Standard Time Los Angeles...

Page 125: ... the Time Zone selection this time zone is then also added to the Time Zone list You can find information on time zones and the corresponding TZ strings on the Internet For example to indicate the pure UTC time enter the TZ string UTC0 If no unique association is possible the text Unknown is displayed for the Time Zone selection Table 66 WBM Configuration of Time and Date Page TZ String Group Para...

Page 126: ...word for Selected User Group Parameters Explanation Select User Select the user user or admin for new password assignment New Password Enter the new password for the user selected under Select User The following ASCII characters for passwords are valid a z A Z 0 9 and spaces These special characters are also valid _ Confirm password Enter the new password again for confirmation Click Change Passwo...

Page 127: ...ory card This field is only visible when Memory Card is set as the target Reduced to content The storage space of the copied image is kept as small as possible Full card size The image is created so that the entire memory card is filled Once the destination has been determined and output it is then checked and the results of this check are displayed below the settings Free space on target device I...

Page 128: ...l Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Remove the memory card write protection Because write access to the memory card is possible during the boot process the memory card cannot be write protected when creating the image and during operation ...

Page 129: ...xt controller reboot Table 69 WBM Configuration of Serial Interface RS232 Page Assign Owner of Serial Interface Group Parameters Explanation Linux Console Specify that the serial interface is assigned to the Linux console Unassigned usage by applications libraries CODESYS Specify that the serial interface is not to be assigned to any particular application and is available so that the CODESYS prog...

Page 130: ...ned after the next controller reboot Table 70 WBM Configuration of Serial Interface RS 232 page Assign Owner of Service Interface Group Parameters Explanation WAGO Service Communication Specify that the service interface is used for the WAGO Service communication or runtime system communication Linux Console Specify that the service interface is assigned to the Linux console Unassigned usage by ap...

Page 131: ...FW Version 02 06 20 09 dg_ 7 8 1 18 Reboot Controller Page The settings for the system reboot are shown on the Reboot Controller page 7 8 1 18 1 Reboot Controller Group Click the Reboot button to reboot the system Account for boot up time The boot process takes time You cannot access the controller while this is occurring ...

Page 132: ...he storage location for the backup here Memory card The data is written to the memory card This selection only appears if a memory card without system data is inserted Network The data are stored on the file system and can then be downloaded to the PC Activate auto update feature To start the automatic update when a memory card with system data is inserted select this button Note the firmware vers...

Page 133: ...06 20 09 No backup of the memory card Backup from the memory card to the internal flash memory is not possible Account for backup time Generation of backup files can take several minutes Stop the CODESYS program before you start the backup procedure to help shorten the time required To begin the backup procedure click the Submit button ...

Page 134: ... do this select the corresponding entries All All data is restored This selection only appears if the memory card is selected as the data source PLC runtime project The PLC runtime project is restored Settings The controller settings are restored System The controller operating system is loaded The current controller settings are retained CODESYS backup file Enter the name of the backup file for t...

Page 135: ...up time beforehand Restoration only possible from internal memory If the device was booted from the memory card the firmware cannot be restored Reset by restore A reset is performed when the system or settings are restored by CODESYS Connection loss through restore If the restore changes the parameters of the ETHERNET connection the WBM may then no longer be able to open a connection to the device...

Page 136: ...rtition that the system will be started from are shown on the System Partition page 7 8 1 21 1 Current Active Partition Group The partition currently in use is displayed here 7 8 1 21 2 Set Inactive Partition Active Group Click Activate Partition to start the system from a different partition at the next controller reboot Ensure bootable partition A functional firmware backup must be present in th...

Page 137: ... storage volume is also the active partition the text Active Partition 7 8 1 22 1 Device Name Group s Table 73 WBM Mass Storage Page Device Name Group Parameters Explanation Device The name of the storage volume in the operating system file system is displayed here Volume name The name of the storage volume is displayed here 7 8 1 22 2 Device Name FAT Format Group s Table 74 WBM Mass Storage Page ...

Page 138: ...Group Table 76 WBM Software Uploads Page Activate New Software Group Parameter Explanation Software File This shows the file name of the transferred software package If no new uploaded software package is present on the controller the message No upload file exists is displayed Action Select here the action required Activate The transferred software package is activated Force Manual reboot afterwar...

Page 139: ... service here Click the Submit button to apply the changes The change is effective immediately 7 8 1 24 2 FTP Group Table 78 WBM Configuration of Network Services Page FTP Group Parameters Explanation Service active Enable disable the FTP service here Click the Submit button to apply the changes The change is effective immediately 7 8 1 24 3 FTPS Group Table 79 WBM Configuration of Network Service...

Page 140: ...S Group Parameters Explanation Service active Enable disable the HTTPS service here Click the Submit button to apply the changes The change is effective immediately Disconnection abort on disabling If the HTTPS service is disabled the connection to the controller can be closed Then call up the WBM page again 7 8 1 24 6 I O CHECK Group Table 82 WBM Configuration of Network Services Page I O CHECK G...

Page 141: ...he NTP service enabled Time server not available until now The time data was not yet updated Time server available The time data was updated Time Server n Enter here the IP addresses of up to 4 time servers Time server No 1 is requested first of all If no data is accessible via this server time server No 2 is requested etc Update interval sec Specify here the update interval of the time server Add...

Page 142: ...the CODESYS 2 web server for the CODESYS web visualization here Communication enabled Enable or disable the communication between the CODESYS 2 runtime system and the CODESYS 2 programming system Communication Port Number Enter here the port number for communication with the CODESYS 2 programming system Default value is 2455 Port authentication enabled Define here whether port authentication is en...

Page 143: ...WAGO I O SYSTEM 750 Commissioning 143 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 ...

Page 144: ...erver Settings page 7 8 1 27 1 SSH Server Group Table 87 WBM SSH Server Settings Page SSH Server Group Parameter Explanation Service active You can enable disable the SSH server here Port Number Specify the port number here Allow root login You can enable or inhibit root access Allow password login Activate or deactivate the password query function here Click on Submit to accept the changes The ch...

Page 145: ...he settings for the TFTP service are shown on the TFTP Server page 7 8 1 28 1 TFTP Server Group Table 88 WBM TFTP Server Page TFTP Server Group Parameter Explanation Service active Activate or deactivate the TFTP server Download directory Specify here the path for downloading the server directory Click on Submit to accept the changes The changes will be effective immediately ...

Page 146: ...e a range of available IP addresses Lease time sec Specify the lease time here in seconds 120 seconds are entered by default Static hosts Static host n This displays the static assignments of MAC IDs to IP addresses If no assignment was defined No static hosts configured is displayed New static host Enter here a new static assignment e g 01 02 03 04 05 06 192 168 1 20 or hostname 192 168 1 20 You ...

Page 147: ...rvice here Mode Select here the operating mode of the DNS server Proxy Requests are buffered to optimize throughput Relay All requests are routed directly Static hosts This displays the static assignments of IP addresses to names If no assignment was defined No static hosts configured is displayed New static host Enter here a new static assignment e g 192 168 1 20 hostname You can enter 10 assignm...

Page 148: ...erwise an information text is displayed 7 8 1 31 1 MODBUS TCP Group Table 91 WBM MODBUS Services Configuration Page MODBUS TCP Group Parameter Explanation Service active Disable or enable the MODBUS TCP service here Click the Submit button to apply the changes The change is effective immediately 7 8 1 31 2 MODBUS UDP Group Table 92 WBM MODBUS Configuration Services Page MODBUS UDP Group Parameter ...

Page 149: ...of General SNMP Parameters Page General SNMP Configuration Group Parameter Explanation Service active Activate deactivate the SNMP service Name of device Enter here the device name sysName Description Enter here the device description sysDescription Physical location Enter here the location of the device sysLocation Contact Enter here the email contact address sysContact Click the Submit button to...

Page 150: ...e the community name for the SNMP manager configuration The community name can establish relationships between SNMP managers and agents who are respectively referred to as Community and who control identification and access between SNMP participants The community name can be up to 32 characters long and must not include spaces To use the SNMP protocol a valid community name must always be specifie...

Page 151: ...trap receiver The changes only take effect after restarting the controller For this purpose use the WBM reboot function Do not shut down the controller too early 7 8 1 33 4 Add New Trap Receiver Group You can enter 10 trap receivers Table 97 WBM Configuration of SNMP v1 v2c Parameters Page Add New Trap Receiver Group Parameter Explanation IP Address Specify the IP address for the new trap receiver...

Page 152: ...ayed Authentication Type The authentication type for the SNMP v3 packets is displayed here Possible values Use no authentication None Message Digest 5 MD5 Secure Hash Algorithm SHA Authentication Key min eight char The authentication key is displayed Privacy The encryption algorithm for the SNMP message is displayed here Possible values No encryption None Data Encryption Standard DES Advanced Encr...

Page 153: ...HA Authentication Key min eight char Specify the authentication key here This authentication key must have between eight and 32 characters without any spaces Privacy Specify the encryption algorithm for the SNMP message here Possible values No encryption None Data Encryption Standard DES Advanced Encryption Standard AES Privacy Key min eight char Enter the key for encryption of the SNMP message he...

Page 154: ... to enable cyclic refresh Enter the cycle time in seconds in which a cyclic refresh is performed The label of the button Refresh Start Stop changes depending on status To refresh the display or to enable cyclic refresh click the Refresh button This button is only visible if the cyclic refresh is not enabled or stopped To enable cyclic refresh click the Start button The button is only visible if cy...

Page 155: ...odem Page SIM Authentication Group Parameters Explanation State The status of the SIM authentication is displayed Ready Authentication was successful PIN requested The PIN must be entered The number of remaining attempts is displayed PUK requested The PIN was not entered correctly the PUK must be specified along with a new PIN PIN Enter the PIN The field is only displayed if PIN entry is required ...

Page 156: ...tic but the GSM network is preferred Automatic UMTS only Like Automatic but restricted to the UMTS network Automatic GSM only Like Automatic but restricted to the GSM network Manual Manual network selection from the Provider selection list if you set the Manual mode the provider list is then refreshed This may take some time see section Provider List Group Provider Select the provider The field is...

Page 157: ...vider Mobile Network Configuration Group can only be filled in when the provider list has been refreshed In normal operation the provider list changes only rarely i e continuous refreshing is not required Click Refresh to refresh the list 7 8 1 36 4 Network Package Service Group Table 105 WBM Configuration of internal 3G Modem Page Network Package Service Group Parameters Explanation State The reg...

Page 158: ...le 106 WBM Configuration of internal 3G Modem Page Upload and activate new Modem Software Group Parameters Explanation Currently used The current modem firmware version is displayed New Software Enter the firmware version to be installed To select a firmware file in Explorer click the Browse button To install and enable the firmware click the Start Upload button The changes will be effective immed...

Page 159: ...owse button To transfer the selected file from the PC to the controller click Start Upload button To transfer the selected file from the controller to the PC click Start Download button The changes only take effect after restarting the controller For this purpose use the WBM reboot function Do not shut down the controller too early 7 8 1 37 2 IPsec Group Table 108 WBM Configuration of OpenVPN and ...

Page 160: ...PC click the Browse button To transfer the selected file to the controller click Start Upload button The changes will be effective immediately The certificates are saved in the directory etc certificates and the keys in the directory etc certificates keys 7 8 1 37 4 Certificate List Group Table 110 WBM Configuration of OpenVPN and IPsec Page Certificate List Group Parameters Explanation certificat...

Page 161: ...thods are allowed for HTTPS Standard The Webserver allows TLS 1 0 TLS 1 1 and TLS 1 2 as well as cryptographic methods that are no longer considered secure Strong The Webserver only allows TLS Version 1 2 and strong algorithms Older software and older operating systems may not support TLS 1 2 Click on Submit to accept the changes The changes will be effective immediately BSI Technical Guidelines T...

Page 162: ...ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 7 8 2 Open Source Licenses Page The licence conditions for the open source software used for the controller are listed in alphabetical order on the Open Source Licenses page ...

Page 163: ...3 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 7 8 3 WAGO Licenses Page The licence conditions for the WAGO software used in the controller are listed on the WAGO Licenses page ...

Page 164: ...ish a connection via the serial interface set the baud rate to 115200 baud in the terminal program The settings for data bits stop bits and parity do not need to be adjusted To launch the CBM log in to the Linux console and enter the command cbm case sensitive Figure 44 CBM main menu example 7 8 4 1 CBM Menu Structure Overview Table 113 CBM Menu Structure Menu Hierarchy 0 Quit 1 Information 0 Back...

Page 165: ...ernet Menu 1 Interface X1 2 Interface X2 4 Firewall 0 Back to Main Menu 1 General Configuration 2 MAC Address Filter 3 User Filter 5 Clock 0 Back to Main Menu 1 Date on device local 2 Time on device local 3 Time on device UTC 4 Clock Display Mode 5 Timezone 6 TZ String 6 Administration 0 Back to Main Menu 1 Users 2 Create Image 3 Owner of Serial Interface 4 Reboot Controller 7 Package Server 0 Bac...

Page 166: ... Menu 1 General SNMP Configuration 2 SNMP v1 v2c Manager Configuration 3 SNMP v1 v2c Trap Receiver Configuration 4 SNMP v3 Configuration 5 SNMP firewalling 6 Secure SNMP firewalling Do not power cycle the controller after changing any parameters Some parameter changes require a controller restart for the changes to apply Saving changes takes time Do not power cycle the controller to perform a rest...

Page 167: ...Network Details Opens a submenu with controller network and interface properties To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 2 1 Information Controller Details Submenu In this submenu the controller properties are displayed Table 115 Information Controller Details Submenu Parameters Explanation Product Description Controller identification ...

Page 168: ...X1 X2 is displayed for both connections If the EHERNET interfaces are operated in Separated mode an individual table X1 X2 is displayed for each connection Table 116 Information Network Details Submenu Parameters Explanation State Status of the ETHERNET interface enabled disabled Mac Address MAC address identifies and addresses the controller IP Address Current IP address of the controller and in ...

Page 169: ...el menu press Q 7 8 4 3 1 PLC Runtime Information Submenu This submenu contains other submenus with information on the runtime system and PLC program Menu items 2 6 only appear if CODESYS 2 is set as the runtime system Table 118 PLC Runtime Information Submenu Menu Item Explanation 0 Back to Back to the higher level menu 1 Runtime Version Opens a submenu to display the runtime version 2 Webserver ...

Page 170: ...n Webserver Version Submenu In this submenu the Webserver version is displayed The submenu only appears when CODESYS 2 is enabled as the runtime system Table 120 PLC Runtime Information Webserver Version Submenu Parameters Explanation Version The Webserver version is displayed To return to the higher level menu press Q or Return 7 8 4 3 4 Information State Submenu In this submenu the PLC operating...

Page 171: ...he runtime system and the program is executed Table 123 PLC Runtime Information Project Details Submenu Parameters Explanation Date Display of project information that the programmer entered in the PLC program in the programming software under Project Project Information Descriptive text with up to 1024 characters is displayed under Description Title Version Author Description To return to the hig...

Page 172: ...µsec Maximum task cycle time for the task since the system start Cycle time avg µsec Average task cycle time since the system start Status Task status e g RUN STOP Mode Task execution mode e g in cycles Priority Set task priority Interval msec Set task interval To return to the higher level menu press Q or Return 7 8 4 3 9 PLC Runtime General Configuration Submenu This submenu contains other subme...

Page 173: ... Configuration Home Dir On SD Card Submenu In this submenu define if the home directory for the runtime system should be moved to the memory card Table 128 PLC Runtime General Configuration Home Dir On SD Card Submenu Menu Item Explanation 0 Back to Back to the higher level menu 1 Enable The home directory is moved to the memory card 2 Disable The home directory is stored in the internal memory In...

Page 174: ...er State The status of the CODESYS 2 Webserver is displayed 2 e RUNTIME Webserver State The status of the e RUNTIME Webserver is displayed 3 Default Webserver Choose here whether the Web based Management or web visualization of the runtime system should be displayed when only entering the IP address of the controller 0 Back to Back to the higher level menu 1 Web based Managem ent The Web based Man...

Page 175: ...e ETHERNET configuration To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 4 1 Networking Host Domain Name Submenu This submenu contains the Hostname and Domain Name submenu with setting options for the general TCP IP parameters Table 131 Networking Host Domain Name Submenu Parameters Explanation 0 Back to Back to the higher level menu 1 Hostname...

Page 176: ...n this submenu you can set the domain name of the controller Table 133 Networking Host Domain Name Domain Name Submenu Parameters Explanation Enter new Domain Name Enter the domain name The default entry is localdomain lan Click OK to apply the entry Click Abort to discard the entry 7 8 4 4 4 Networking TCP IP Submenu This submenu contains other submenus with the TCP IP settings for the ETHERNET i...

Page 177: ...face To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 4 6 IP Address Xn Submenu This submenu contains the settings for the selected interface Table 136 Networking TCP IP IP Address Submenu Xn Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 Type of IP Address Configuration Select a static or dynamic IP address 0 Back ...

Page 178: ...ion choose the appropriate menu item To return to the higher level menu press Q 7 8 4 4 8 Default Gateway Default Gateway n Submenu This submenu contains the settings for the selected gateway Table 138 Networking TCP IP Default Gateway Default Gateway n Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 State Set here whether the selected default gateway is to be ...

Page 179: ...ress 2 Delete You can delete the selected DNS server address n 1 Add new DNS Server Add additional DNS server addresses You can enter 10 addresses To make a selection choose the appropriate menu item To return to the higher level menu press Q Click OK to apply the entry Click Abort to discard the entry 7 8 4 4 10 Networking Ethernet Submenu This submenu contains other submenus with settings for th...

Page 180: ... Separated Each interface is operated with its own IP address 2 Switched Both interfaces are operated with one IP address To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 4 12 Ethernet Ethernet Ports Submenu This submenu contains other submenus with settings for the ETHERNET interfaces Table 142 Networking Ethernet Ethernet Ports Submenu Menu It...

Page 181: ...menu Submenu Item Explanation 0 Back to Back to the higher level menu 1 Port Set here whether the selected port is to be used 0 Back to Back to the higher level menu 1 Disabled The port is not used 2 Enabled The port is used 2 Autonegotiation Set here whether the Autonegotiation function is enabled for the selected port 0 Back to Back to the higher level menu 1 Disabled Autonegotiation is disabled...

Page 182: ...firewall functionality settings Table 144 Firewall Menu Menu Item Explanation 0 Back to Back to the higher level menu 1 General Configuration Opens a submenu with general firewall settings 2 MAC Address Filter Opens a submenu with MAC address filter settings 3 User Filter Opens a submenu with user filter settings To make a selection choose the appropriate menu item To return to the higher level me...

Page 183: ... disabled 2 ICMP echo broadcast protection Enable or disable the ICMP echo broadcast protection 0 Back to Back to the higher level menu 1 Enable ICMP echo broadcast protection is enabled 2 Disable ICMP echo broadcast protection is disabled 3 Max UDP connections per second You can specify the maximum number of UDP connections per second 0 Disabled 4 Max TCP connections per second You can specify th...

Page 184: ...cted interface is enabled 2 ICMP Policy Enable or disable the ICMP echo protection for the respective interface 0 Back to Back to the higher level menu 1 Accept The ICMP echo protection is disabled 2 Drop The ICMP echo protection is enabled 3 ICMP Limit You can specify the maximum number of ICMP pings per second 0 Disabled 4 ICMP Burst You can specify the maximum number of ICMP echo bursts per sec...

Page 185: ...GO I O SYSTEM 750 Commissioning 185 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Click OK to apply the entry Click Abort to discard the entry ...

Page 186: ...ltered The firewall for the VPN interface is enabled 3 MAC address filter state WAN Enable or disable the firewall for the WAN interface 0 Back to Back to the higher level menu 1 Open The firewall for the WAN interface is disabled 2 Filtered The firewall for the WAN interface is enabled 4 MAC address filter state X1 Enable or disable the firewall for the X1 interface 0 Back to Back to the higher l...

Page 187: ...try To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 5 5 MAC address filter whitelist Add new No n Submenu In this submenu you can create change or delete filter entries Table 149 Firewall MAC Address Filter MAC address filter whitelist Add new No n Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 MAC address ...

Page 188: ... User Filter Submenu Menu Item Explanation 0 Back to Back to the higher level menu 1 Add new Opens a submenu to add a new filter entry 2 Previous page Displays the previous page of the list if more than one page is filled 3 Next Page Displays the next page of the list if more than one page is filled n 3 No n Opens a submenu to edit an existing filter entry To make a selection choose the appropriat...

Page 189: ...tocol Select the permitted protocols 0 Back to Back to the higher level menu 1 tcp The TCP protocol is permitted 2 udp The UDP protocol is permitted 3 tcp udp Both protocols are permitted 8 interface Select the permitted interfaces 0 Back to Back to the higher level menu 1 all All interfaces are permitted 2 VPN The VPN interface is permitted 3 WAN The WAN interface is permitted 4 X1 The X1 interfa...

Page 190: ... Specify the appropriate time zone for your location Basic setting 0 Back to Back to the higher level menu 1 AST ADT Atlantic Standard Time Halifax 2 EST EDT Eastern Standard Time New York Toronto 3 CST CDT Central Standard Time Chicago Winnipeg 4 MST MDT Mountain Standard Time Denver Edmonton 5 PST PDT Pacific Standard Time Los Angeles Whitehouse 6 GMT BST Greenwich Mean Time GB P IRL IS 7 CET CE...

Page 191: ... passwords 2 Create Image Opens a submenu for creating a bootable image 3 Owner of Serial Interface Select the serial interface assignment 0 Back to Back to the higher level menu 1 Linux Console The serial interface is assigned to the Linux console 2 Un assigned The serial interface is not assigned and is available for applications or CODESYS 4 Reboot Controller Restart the controller following a ...

Page 192: ... another step This menu item only appears if the memory card is inserted 2 Internal Flash To create an image on the internal memory select this menu item To make a selection choose the appropriate menu item To return to the higher level menu press Q Click OK to apply the entry Click Abort to discard the entry 7 8 4 7 2 Administration Users Submenu This submenu contains settings for the user passwo...

Page 193: ...etting options for the current system partition To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 8 1 Package Server Firmware Backup Submenu This submenu contains a selection option for the data to be saved The submenu only appears if a memory card is inserted that does not contain a bootable system Otherwise a message is displayed Table 157 Pack...

Page 194: ...s OFF for the selected data 2 Yes The Auto Update function is ON for the selected data To make a selection choose the appropriate menu item To return to the higher level menu press Q You are taken to the following submenu after making the selection 7 8 4 8 3 Firmware Backup Destination Submenu This submenu contains a selection option for the backup destination drive Table 159 Package Server Firmwa...

Page 195: ...the appropriate menu item To return to the higher level menu press Q You are taken to the following submenu after making the selection 7 8 4 8 5 Firmware Restore Select Package Submenu This submenu contains a selection option for the data to be restored Table 161 Package Server Firmware Restore Select Package Menu Menu Item Explanation 0 Back to Back to the higher level menu 1 PLC Runtime project ...

Page 196: ...s for the current system partition Table 162 Package Server System Partition Submenu Menu Item Explanation 0 Back to Back to the higher level menu 1 Current active partition The partition currently in use is displayed 2 Set inactive NAND partition active Select this menu item to start the system from a different partition at the next controller reboot To make a selection choose the appropriate men...

Page 197: ...oller 2 Internal Flash Opens a submenu with information on the internal flash memory To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 9 1 Mass Storage SD Card Submenu This submenu contains information on the external memory card and its formatting This submenu only appears if a memory card is inserted in the controller Table 164 Mass Storage SD ...

Page 198: ...id from FW Version 02 06 20 09 7 8 4 10 Software Uploads Menu This menu contains choices and settings for the device update You can select fieldbus software program licenses and update scripts for example for transfer from a PC to the controller You can also enable transmitted packages or delete from the controller ...

Page 199: ...for the HTTP service 5 HTTPS Opens a submenu with settings for the HTTPS service 6 NTP Opens a submenu with settings for the NTP service 7 SSH Opens a submenu with settings for the SSH server 8 TFTP Opens a submenu with settings for the TFTP server 9 DHCPD Opens a submenu with settings for the DHCPD service 10 DNS Opens a submenu with settings for the DNS service 11 IOCHECK PORT Opens a submenu wi...

Page 200: ... status Opens a submenu with firewall settings for the this service for the interfaces To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 11 2 Ports and Services FTP Submenu This submenu contains the settings for the FTP service Table 167 Ports and Services FTP Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 St...

Page 201: ...pens a submenu with firewall settings for the this service for the interfaces To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 11 4 Ports and Services HTTP Submenu This submenu contains the settings for the HTTP service Table 169 Ports and Services HTTP Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 State En...

Page 202: ...Submenu This submenu contains the settings for the NTP service Table 171 Ports and Services NTP Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 State Enable disable the NTP service 0 Back to Back to the higher level menu 1 Enable The NTP service is enabled 2 Disable The NTP service is disabled 2 Port Enter the port number of the NTP server 3 Time Server 1 Enter...

Page 203: ...the higher level menu 1 Enable Password query is enabled 2 Disable Password query is disabled 5 Status of firewalling Opens a submenu with firewall settings for the this service for the interfaces To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 11 8 Ports and Services TFTP Submenu This submenu contains the settings for the TFTP service Table 17...

Page 204: ...5 Ports and Services DHCPD Xn Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher level menu 1 State Enable disable the DHCPD service for the Xn interface 0 Back to Back to the higher level menu 1 Enable The DHCPD service is enabled 2 Disable The DHCPD service is disabled 2 Range Enter a range of available IP addresses 3 Lease Time min Specify the lease time here in seconds 120...

Page 205: ... mode of the DNS server 0 Back to Back to the higher level menu 1 Proxy The requests are buffered to optimize throughput 2 Relay All requests are routed directly 3 Firewall status Opens a submenu with firewall settings for the this service for the interfaces 4 Add static hostname Enter a new static assignment of IP address to hostname e g 192 168 1 20 hostname You can enter 10 assignments 5 n Stat...

Page 206: ...pens a submenu with firewall settings for the this service for the interfaces To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 11 13 Ports and Services Modbus TCP Submenu This submenu contains the settings for the MODBUS TCP service Table 178 Ports and Services Modbus TCP Submenu Menu Item Submenu Item Explanation 0 Back to Back to the higher le...

Page 207: ...item To return to the higher level menu press Q 7 8 4 11 15 Ports and Services PLC Runtime Services Submenu This submenu contains the settings for the PLC runtime system services Table 180 Ports and Services PLC Runtime Services Submenu Menu Item Explanation 0 Back to Back to the higher level menu 1 General Configuration Enter the password for port authentication 2 CODESYS 2 Opens a submenu with s...

Page 208: ...r is disabled 2 Communication enable disable Enable or disable the communication between the CODESYS 2 runtime system and the CODESYS 2 programming system 0 Back to Back to the higher level menu 1 Enable Communication is enabled 2 Disable Communication is disabled 3 Communication Port Number Enter here the port number for communication with the CODESYS 2 programming system The default value is 245...

Page 209: ...k to Back to the higher level menu 1 Webserver enable disable Enable or disable the Webserver for the e RUNTIME web visualization 0 Back to Back to the higher level menu 1 Enable The Webserver is enabled 2 Disable The Webserver is disabled 2 Port Authentication enable disable Enter here whether a login is required for connecting to the device 0 Back to Back to the higher level menu 1 Enable Authen...

Page 210: ...mitted 2 WAN Enable or disable the firewall for the WAN interface and respective service 0 Back to Back to the higher level menu 1 open Data traffic via the WAN interface is permitted 2 close Data traffic via the WAN interface is not permitted 3 X1 Enable or disable the firewall for the X1 interface and respective service 0 Back to Back to the higher level menu 1 open Data traffic via the X1 inter...

Page 211: ...for SNMP 6 Secure SNMP firewalling To make a selection choose the appropriate menu item To return to the higher level menu press Q 7 8 4 12 1 SNMP General SNMP Configuration Submenu This submenu contains the general SNMP settings Table 185 SNMP General SNMP Configuration Submenu Parameters Submenu Item Explanation 0 Back to Back to the higher level menu 1 SNMP status Enable or disable the SNMP ser...

Page 212: ...the higher level menu press Q Click OK to apply the entry Click Abort to discard the entry 7 8 4 12 3 SNMP SNMP v1 v2c Trap Receiver Configuration Submenu This submenu contains settings for the v1 v2c trap receivers Table 187 SNMP SNMP v1 v2c Trap Receiver Configuration Submenu Parameters Explanation 0 Back to Back to the higher level menu n Trap Receiver n Opens a submenu with information on the ...

Page 213: ...d v3 user and to delete the user n 1 Add new v3 User Opens a series of submenus to create a new v3 user You can enter 10 users The following entries selections are possible Authentication name max 32 characters no spaces Authentication type None MD5 SHA Authentication key min 8 characters max 32 characters no spaces Privacy type None DES AES Privacy key min 8 characters max 32 characters no spaces...

Page 214: ...ed 2 WAN Enable or disable the firewall for the WAN interface and respective service 0 Back to Back to the higher level menu 1 open Data traffic via the WAN interface is permitted 2 close Data traffic via the WAN interface is not permitted 3 X1 Enable or disable the firewall for the X1 interface and respective service 0 Back to Back to the higher level menu 1 open Data traffic via the X1 interface...

Page 215: ...n about your controller make network settings and enable disable the Web server Observe the software version To configure the controller use at least Version 6 4 1 1 dated 2015 06 29 or newer of WAGO ETHERNET Settings You must select the correct COM port after starting WAGO ETHERNET Settings Figure 45 WAGO ETHERNET Settings Start Screen For this click Settings and then Communication In the Communi...

Page 216: ...2 06 20 09 Figure 46 WAGO ETHERNET Settings Communication Link Once you have configured WAGO ETHERNET Settings and have clicked OK connection to the controller is established automatically If WAGO ETHERNET Settings has already been started with the correct parameters you can establish connection to the controller by clicking Identify ...

Page 217: ...d from FW Version 02 06 20 09 7 8 5 1 Identification Tab An overview of the connected device is given here Besides some fixed values e g item No MAC address and firmware version the currently used IP address and the configuration method are also shown here Figure 47 WAGO ETHERNET Settings Identification Tab Example ...

Page 218: ...IP address Static via DHCP or via BootP IP address subnet mask gateway Specify the specific network parameters for static configuration Restricted setting for default gateways Only the default gateway 1 can be set via WAGO Ethernet Settings The default gateway 2 can only be set in the WBM Preferred DNS server alternative DNS server Enter the IP address when required for an accessible DNS server wh...

Page 219: ...sion 02 06 20 09 this name is composed of the string PFCx00 and the last three bytes of the MAC address This standard value is also used whenever the chosen name in the Input column is deleted Domain name The current domain name is displayed here This setting can be automatically overwritten with dynamic configurations e g DHCP ...

Page 220: ...O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 7 8 5 3 Protocol Tab Figure 49 WAGO ETHERNET Settings Protocol Tab You can enable or disable the Web server ...

Page 221: ... 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 7 8 5 4 Status Tab Figure 50 WAGO ETHERNET Settings Status Tab General information about the controller status is displayed here The Bus extension check box has no function for the controller PFCx00 i e the bus extension is always active ...

Page 222: ...d for the creation of a CODESYS project It is intended as a set of quick start instructions and does not address the full functional range of CODESYS 2 3 Additional information For a detailed description of the full range of functions refer to the Manual for PLC Programming using CODESYS 2 3 manual available on the WAGO I O PRO 759 911 CD 8 2 1 Start the CODESYS Programming System Start CODESYS by...

Page 223: ...1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 Click on OK The Target system settings configuration window then opens Figure 51 Target System Settings 1 4 To accept the default configuration for the fieldbus controller click OK The New component window opens Figure 52 Target System Settings 2 ...

Page 224: ...tion Block Figure 54 Programming Interface with the PLC_PRG Program Module 8 2 3 Creating the PLC Configuration Procedure for Creating the PLC Configuration The procedure explained in this section describes the PLC configuration for the I O modules connected to the controller Information about the controller function for any fieldbuses connected to the system is given in the section on the specifi...

Page 225: ...YS 2 3 225 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Figure 55 Resources Tab 2 In the left window double click on PLC configuration The PLC configuration for the controller opens ...

Page 226: ...dit 4 There are three options for accepting the topology for the I O modules connected to the fieldbus controller The simplest way is to scan in the topology using WAGO I O CHECK To do this click on the Start WAGO I O CHECK and scan button Figure 57 Start WAGO I O CHECK and Scan Button Ensure proper installation of WAGO I O CHECK This function requires that the latest version of WAGO I O CHECK be ...

Page 227: ...l Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 5 WAGO I O CHECK is started Figure 58 WAGO I O CHECK Starting Screen 6 To connect to the controller and read in the module configuration click Identify 7 If this action is successful click Save and exit WAGO I O CHECK ...

Page 228: ...d I O modules then appear in the configuration window Passive I O Modules Remember that passive I O modules such as a power supply module 750 602 or end module 750 600 will not be shown in the I O configurator Figure 59 I O Configurator Empty 9 You can use the Add button to add new I O modules to manually define or change the configuration Figure 60 Add I O Modules Button ...

Page 229: ...n the new Module selection window that then appears Figure 61 Module Selection Window 11 You can change the position of an I O module by marking it and then using the arrow buttons at the right edge of the window to move it up or down Figure 62 I O Configurator with Defined I O Modules 12 Use Import configuration from file to add a configuration imported previously using WAGO I O CHECK ...

Page 230: ...e are displayed in the right half of the configuration window Here you can declare a dedicated variable in the Name column for each input and output e g Output_1 Output_2 Input_1 Input_2 Figure 63 Variable declaration 15 The added I O modules appear in the control configuration under K Bus FIX with their associated fixed addresses and where applicable their previously set variable name Figure 64 C...

Page 231: ...ck on the PLC_PRG program module Figure 65 Program Function Block The following example illustrates the editing of the program function block To do this an input is assigned to an output 1 Press F2 to open the Input assistant or right click and select Input assistant from the contextual menu Figure 66 Input Assistant for Selecting Variables 2 Under Global variables select the previously declared v...

Page 232: ...EM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 4 Repeat Step 2 for the Input_1 variable Figure 67 Example of an Allocation 5 To compile click on Project Compile all in the menu bar ...

Page 233: ...eactivated Online Simulation The PC is linked to the controller via ETHERNET Refer to Section Device Description ETHERNET X1 X2 Network Connection Proceed as follows 1 In the menu bar click on Online and select Communication parameters The Communication Parameters window opens 2 To select a communication link click on New in the Communication Parameters window A window opens in which you can defin...

Page 234: ...2 4 In the Communication Parameters window enter the IP address of your fieldbus controller in the Address field and then press Enter To close the window click on OK To select an already created controller select it in the left window and then click on OK Figure 70 Creating a Communication Link Step 3 5 Transfer the PLC program by clicking on Online in the menu bar and select Login 6 Ensure that t...

Page 235: ...set to Stop If a PLC program is running in the fieldbus controller a PLC task starts with the reading of the fieldbus data only with fieldbus controllers and fieldbus connection the integrated input and output data and the I O modules The output data changed in the PLC program is updated after the PLC task is processed A change in operating mode Stop Run is only carried out at the end of a PLC tas...

Page 236: ...sks Set the time response and the priority of individual tasks in the task configuration Watchdog In an application program without task configuration there is no watchdog that monitors the cycle time of the application program PLC_PRG Create a task as follows 1 Open the task configuration by double clicking on the Task configuration module in the Resources tab Figure 71 Task Configuration 2 To cr...

Page 237: ...2 1 from 2017 09 13 valid from FW Version 02 06 20 09 3 To assign a new name to the task e g PLC_Prog click on New Task Then select the type of task In this example this is the cyclic type Observe the cycle time The minimum cycle time for I O based tasks is 2 milliseconds ms Figure 72 Changing Task Names 1 ...

Page 238: ... 4 Add the program module PLC_PRG that you have just created see Section Editing the Program Modules To do this right clock on the Clock symbol and in the contextual menu select Attach program call up Then click the button and OK Figure 73 Call up to Add to the Program Module 5 Compile the example program by selecting Project Rebuild all in the context menu ...

Page 239: ...h the highest priorities 0 5 These tasks are processed fully according to priority and correspond to Linux RT priorities 79 through 74 Priority 6 20 Real time access such as access to ETHERNET and the file system to fieldbus data and to the RS 232 interface when available are to be carried out as tasks with average priorities 6 20 These tasks are processed fully according to priority and correspon...

Page 240: ...hout a function These tasks are handled as tasks with priority 21 31 Figure 75 Freewheeling Task PLC PRG as Freewheeling Task without Task Configuration If you do not perform any task configuration the program PLC_PRG is carried out with the lowest priority at an interval of 10 ms The runtime of freewheeling tasks is not monitored by a CODESYS watchdog 8 4 3 Debugging an IEC Program If the IEC pro...

Page 241: ...I O SYSTEM 750 Run time System CODESYS 2 3 241 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Figure 76 Debugging Case 1 Figure 77 Debugging Case 2 ...

Page 242: ... Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 If the mode selector switch and the STOP function of the user interface are used simultaneously the mode selector switch has priority case 3 and case 4 Figure 78 Debugging Case 3 Figure 79 Debugging Case 4 ...

Page 243: ... from 2017 09 13 valid from FW Version 02 06 20 09 As soon as a task is located at a breakpoint only all other tasks can be controlled with the mode selector switch Exception If the mode selector switch is on STOP the debug task is also no longer processed Figure 80 Debugging Case 5 Figure 81 Debugging Case 6 ...

Page 244: ... the current position until the next time the mode selector switch is switched from STOP to RUN In this case the task continues to run from the current position case 7 Figure 82 Debugging Case 7 8 5 System Events Event tasks can be used in the CODESYS task configuration in addition to cyclical tasks Event tasks call up certain events in the device To activate events and define a program to be call...

Page 245: ...200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Figure 83 CODESYS System Events Do not set debug points in the event handlers Debug points in event handlers can lead to unforeseeable errors and must therefore not be set ...

Page 246: ...ror to an invalid memory area is recognized incorrect pointer invalid array index invalid data descriptor excpt_dividebyzero The event is called if a division by zero is recognized after_reading_inputs The event is triggered after reading all of the inputs independent of the user program before_writing_outputs The event is triggered before writing all of the outputs independent of the user program...

Page 247: ... example First a program is generated in the PLC_PRG module which provokes division by 0 Figure 84 CODESYS Program Provokes Division by 0 After this the system event excpt_dividebyzero is activated in the Task Configurator and the name of the event handler to be generated is entered in the column Called POU Figure 85 CODESYS Creating and Activating an Event Handler To generate the event handler cl...

Page 248: ...ing for the event that has occurred is now programmed in this new function In the example here the event is documented in a global variable Figure 87 CODESYS Enter the Event in a Global Variable The newly created project is now supported and can be loaded to the controller After startup the value of the Events variable changes only when counter i reaches the value 0 meaning that division by 0 has ...

Page 249: ... Version 02 06 20 09 Figure 88 CODESYS Variable Contents Prior to Division by 0 Figure 89 CODESYS Variable Contents After Division by 0 and Call up of the Event Handler 8 6 Process Images A process image is a memory area in which the process data is stored in a defined sequence and consists of the I O modules attached to the internal bus ...

Page 250: ...AGO I O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 the PFC variables the bit memory address area and the slaves attached to the fieldbus Figure 90 Process Image ...

Page 251: ...odules Connected to the Controller After starting the fieldbus controller it automatically detects all connected I O modules The analog input and output data is stored first word by word in the process image Subsequent to this come the digital input and output data bits combined to form words The size and structure of the process image for the I O modules connected to the system are described in t...

Page 252: ...the I O module process image must be explicitly mapped in the CODESYS program to the data in the fieldbus process image and vice versa Direct access is not possible 8 7 Access to Process Images of the Input and Output Data via CODESYS 2 3 The following tables describe the possibilities with which you can access the address ranges of the process image for the inputs and outputs connected to the int...

Page 253: ...999 MODBUS output variables addressed by bit via MODBUS Read Write Bit QX1000 0 QX1000 15 to QX1384 0 QX1384 15 Table 194 Access to the Process Images of the Input and Output Data CANopen Memory area Description Access via PLC Logical Address Space CANopen input process image CANopen master or CANopen slave input variables Read Word IW3000 to IW4999 Byte IB6000 to IB9999 CANopen output process ima...

Page 254: ... oriented addressing remember that the basic address is word based The bits are addressed from 0 to 15 8 8 Addressing Example The following addressing example clarifies the access to the process image Table 197 Arrangement of the I O Modules for the Addressing Example Fieldbus controller 750 400 1 750 554 2 750 402 3 750 504 4 750 454 5 750 650 6 750 468 7 750 600 8 Table 198 Addressing Example I ...

Page 255: ...hind the others 2 IW5 3 IW6 4 IW7 750 600 End module The passive 750 600 end module does not transmit any data Analog input and output modules Digital input and output modules C Number of the input output 8 9 Internal Data Bus Synchronization The internal data bus cycle and the CODESYS task cycle are optimally automatically synchronized This depends on the number of I O modules connected and the f...

Page 256: ... output values are also set at the module after each CODESYS task Figure 92 Internal Data Bus Synchronization 01 CTI CODESYS Task Interval CT CODESYS Task that accesses the I O module of the internal data bus KBZ Internal Data Bus Cycle Example CODESYS task interval CTI 100 µs I O module cycle KBZ 2000 µs Result Matching of the CODESYS task interval to the I O module cycle of 2000 µs ...

Page 257: ... bus cycle starts which is processed synchronously with the fastest CODESYS task This ensures that when starting each CODESYS Task current input data are available from the internal data bus and the output values of each CODESYS task are also output to the I O modules Figure 93 I O Module Synchronization 02 CTI CODESYS Task Interval CT CODESYS Task that accesses the I O module of the internal data...

Page 258: ...ta bus cycle is started which provides the output data to the I O modules This ensures that at the start of every CODESYS task current input data are available from the internal data bus and the output data from each CODESYS task are quickly output to the I O modules This prevents processing of internal data bus cycles that would unnecessarily use a great deal of computing time on the CPU Figure 9...

Page 259: ...after at least every 10 ms The I O data from the internal data bus are refreshed once before the CODESYS task and once after the CODESYS task and an additional internal data bus cycle is also executed every 10 ms Figure 95 Internal Data Bus Synchronization 04 CTI CODESYS Task Interval CT CODESYS task that accesses the I O module of the internal data bus KBZ Internal data bus cycle Example CODESYS ...

Page 260: ...tem CODESYS 2 3 WAGO I O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 8 9 5 Internal Data Bus Configuration Figure 96 Internal Data Bus Settings ...

Page 261: ...ds Internal Data Bus Thread Priority This value indicates the priority for the internal data bus thread This setting is effective only in the asynchronous mode This priority is equivalent to the priority of the cyclic CODESYS tasks see Section Cyclic Tasks This setting is effective only in the asynchronous mode 0 Highest priority 15 Lowest priority PLC stop response Specifies the response of the i...

Page 262: ...nal data bus error the CODESYS tasks are blocked until the error is rectified i e when an internal data bus cycle has been successfully executed again No call up of internal data bus status when internal data bus errors are present If an internal data bus error has occurred it is not possible to call up the internal data bus status using KBUS_ERROR_INFORMATION mod_com lib while in the synchronous ...

Page 263: ...WAGO I O SYSTEM 750 Run time System CODESYS 2 3 263 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Figure 97 Program Memory Example ...

Page 264: ...am download and can be fully utilized Together with the data memory to be used by the application memory is required for the individual program function blocks in the system The size of the administration space is calculated from the function block limitation 12 i e normally 4096 12 The actual size of the main memory required in the system for data is the sum of global data memory and function blo...

Page 265: ...able for the IEC 61131 application The remanent section is subdivided into the flag area memory and the retain area Figure 99 Remanent Main Memory Example The breakdown of the flag and retain variables can be customized as required Observe general conditions The sum of Memory Retain must not exceed the maximum value of 128 kbytes 0x20000 A maximum of 10 000 retain variables can be created Figure 1...

Page 266: ... browser An applet is stored in the file system of a Web server and is accessible to browsers via an HTML page You create all visualization types HMI and Web visualization with the same CODESYS graphic editor Select the visualization type in the Target system settings window A description file in XML format is generated from the information for each of these pages You can find these files in the s...

Page 267: ...0 Run time System CODESYS 2 3 267 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Figure 102 Selecting the Visualization Technique in the Target System Settings ...

Page 268: ...DESYS Web server in the WBM on the Ports and Services CODESYS Services page in the CODESYS Webserver group 5 Activate the http service in the WBM on the Ports and Services Network Services page in the HTTP group If you transfer the PLC program to the controller Online Login and start the program Online Start enter one of the following lines in the address line of the Web browser for online visuali...

Page 269: ...s log files configuration files etc must fit into the file system Process Data Memory Web visualization uses its own protocol for exchanging process data between applet and control The controller transfers process data with ASCII coding The pipe symbol is used to separate two process values Therefore the space requirement for a process data variable in the process data memory is dependent not only...

Page 270: ... traffic ETHERNET communication demands that each received telegram is processed regardless of whether it is intended for the controller or not A significant reduction of the network load can be achieved by using switches instead of hubs There is no measure against broadcast telegrams that can be used on the controller however These can only be curtailed by the sender or blocked with configurable ...

Page 271: ...troller which is executed with a low priority does not receive sufficient computer time if any at all If no explicit task configuration has been provided the PLC_PRG is implicitly executed as a free running task with Priority 1 This significantly limits the Web server s computing time Always provide a task configuration when using Web visualization In doing so the call up interval should not excee...

Page 272: ...ion Version 1 5 0 J2SE1 5 0_06 or higher is recommended This is available free of charge at www oracle com Microsoft s MSJVM3810 was also tested For PDAs there are runtime environments available from other manufacturers JamaicaVM CrEme etc Please consider that for the Web visualization these solutions can behave differently within their scope of services e g stability than those mentioned above Sh...

Page 273: ...e for visualization projects since it is not possible to configure the maximum size quota of the trend files trd Uncontrolled expansion of trend files can lead to unpredictable controller behavior In most cases the use of the HISTOGRAM visualization element is the better choice as this gives full control over the time and number of measurements and thus the amount of memory required What needs to ...

Page 274: ...rsion 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 9 e RUNTIME Runtime Environment 9 1 General Notes Additional Information Information on the installation and startup of e COCKPIT is provided in the corresponding manual Information on programming is provided in the CODESYS 3 documentation ...

Page 275: ...e selector switch and changes the state of the PLC application start stop reset warm cold CODESYS watchdog 83 Execution of the watchdog functions Cyclic and event controlled IEC task 55 53 1 3 For real time tasks which must not be influenced in execution by external interfaces e g fieldbus Local or fieldbus MID 52 43 CAN 52 51 Profibus 49 45 MODBUS slave master 43 Cyclic and event controlled IEC t...

Page 276: ...stem after a successful program download and can be fully utilized The memory space is dynamically divided up into program and data space 9 3 2 Function Block Limitation Together with the data memory to be used by the application memory is required for the individual program function blocks in the system The size of the administration space is calculated from the function block limitation 12 i e 4...

Page 277: ...taneously 10 2 Features The MODBUS slave implemented in the PFC200 has the following features 3 modes MODBUS TCP MODBUS UDP and MODBUS RTU which can be run independently of one another simultaneously Each mode can be configured 10 supported MODBUS services Function Codes FC1 to FC6 FC15 FC16 FC22 FC23 Data exchange via 1000 registers in each of the local MODBUS process images 768 byte sector that ...

Page 278: ...l of the MODBUS operating modes are configured using the CODESYS PLC configuration Figure 105 CODESYS PLC Configuration MODBUS Settings The MODBUS slave configuration is composed of four basic parameter groups MODBUS settings MODBUS TCP settings MODBUS UDP settings MODBUS RTU settings A detailed description of all the parameter groups is given in the following sections ...

Page 279: ... these on to the controller Hold last value Data exchange possible The last frozen values are provided for MODBUS read requests and the values accepted unchanged in the MODBUS process image for write requests without passing these on to the controller Fieldbus error response Response of the MODBUS slave to detected fieldbus errors interruption of communication No data exchange No data exchange pos...

Page 280: ...port 65535 Maximum port number TCP Timeout Time out for a TCP link 1 100 ms 1 100 ms 600 60 seconds 600 100ms 65535 1 h 49 min 13 s 500 ms 65535 100 ms Default setting 10 3 3 MODBUS UDP Settings The MODBUS UDP Settings group contains the following configuration parameters for the MODBUS UDP mode Table 204 MODBUS UDP Settings Parameters Explanation UDP mode Enable for the MODBUS UDP mode Off Operat...

Page 281: ...seconds 5000 Default 5 seconds 4294967295 max response time 71 hours Interface Device name dev Name of the tty in the string dev ttyO0 Standard tty Baud rate Communication baud rate 1200 baud 1200 baud min transmission speed 2400 baud 2400 baud 4800 baud 4800 baud 9600 baud 9600 baud 19200 baud 19200 baud 38400 baud 38400 baud 57600 baud 57600 baud 115200 baud 115200 baud max transmission speed St...

Page 282: ... MODBUS RTU Settings Parameters Explanation Flow control Data flow control Supported only for the setting RS 232 for the physical interface None No data flow control RTS CTS Hardware flow control Physical interface Mode for the physical interface RS 232 RS 232 is used as the physical interface RS 485 RS 485 is used as the physical interface Default setting ...

Page 283: ...s image MODBUS Input is an area in the PIO PIO Output Process Image in which data from the PLC is provided in cycles exclusively for MODBUS Read services MODBUS output process image MODBUS Output is an area in the PII PII Input Process Image in which MODBUS Write services provide data for cyclic reading by the PLC MODBUS Read services are also acceptable in this area MODBUS flag area is an area in...

Page 284: ... MODBUS output process image MODBUS Output in the PII Data memory blocks of 2 kB 1000 registers word are available for each local MODBUS input and output process image The first 768 bytes of each of these data blocks are also provided for executing bit services Figure 106 MODBUS Process Image As no direct access to the I O modules is provided by the fieldbus data can be exchanged via this interfac...

Page 285: ...Caution is urged however when using data and or variables in this area that is accessed by both MODBUS and the PLC This conflicting access is not protected from either side and could result in data inconsistency Figure 107 Flag Area The figure shows the maximum addressable flag area with a size of 104 kB The actual addressable flag area depends on the current memory arrangement in the target syste...

Page 286: ...S Registers 10 4 4 MODBUS Mapping 10 4 4 1 MODBUS Mapping for Write Bit Services FC1 FC2 The table below outlines the mapping for the MODBUS reading bit oriented services FC1 Read Single Coil FC2 Read Discrete Inputs Table 206 MODBUS Mapping for Read Bit Services FC1 FC2 MODBUS Address hexadecimal values in parentheses IEC 61131 Address Description 0 6143 0x0000 0x17FF IX1000 0 IX1383 15 MODBUS Ou...

Page 287: ...theses IEC 61131 Address Description 0 6143 0x0000 0x17FF IX1000 0 IX1383 15 MODBUS Output 6144 PFC input bit variables in the first 384 registers words 768 bytes of the 2kB MODBUS output process image in the PII 6144 12287 0x1800 0x2FFF QX1000 0 QX1383 15 MODBUS Output MODBUS only area for bit oriented write access Bit based write services for this area are acknowledged by the MODBUS slave with t...

Page 288: ...ices return the content from the PII 1000 1999 0x03E8 0x07CF QW1000 QW1999 MODBUS Input 1000 PFC output registers words in the 2 kB MODBUS input process image in the PIO Note on FC23 Only the Read portion of this service can be executed 2000 4095 0x07D0 0x0FFF Inhibited to MODBUS only area for register oriented read access Register based read services for this area are acknowledged by the MODBUS s...

Page 289: ... 06 20 09 Table 208 MODBUS Mapping for Read Register Services FC3 FC4 FC23 MODBUS Address hexadecimal values in parentheses IEC 61131 Address Description 12288 65535 0x3000 0xFFFF MW0 MW53247 Maximum addressable flag area 53248 register word flags 104 kB the actual addressable flag area depends on the current memory arrangement in CODESYS ...

Page 290: ...S output process image in the PII 1000 1999 0x03E8 0x07CF No access to QW1000 QW1999 MODBUS Output Inhibited MODBUS area for register oriented write access Register oriented write services in this area are acknowledged by the MODBUS slave with the MODBUS exception code ILLEGAL DATA ADDRESS 0x02 2000 4095 0x07D0 0x0FFF Inhibited MODBUS area for register oriented write access Register oriented write...

Page 291: ...20 09 Table 209 MODBUS Mapping for Write Register Services FC6 FC16 FC22 FC23 MODBUS Address hexadecimal values in parentheses IEC 61131 Address Description 12288 65535 0x3000 0xFFFF MW0 MW53247 Maximum addressable flag area 53248 register word flags 104 kB the actual addressable flag area depends on the current memory arrangement in CODESYS ...

Page 292: ... process image in the PAA 4133 0x1025 1 ro Number of bits in the MODBUS output process image in the PAE 4136 0x1028 1 ro IP configuration BootP 1 DHCP 2 or permanently coded IP address 4 4138 0x102A 1 ro Number of established TCP connections 4144 0x1030 1 r w MODBUS TCP Timeout Changes apply only to new connections 4145 0x1031 3 ro MAC ID of the ETHERNET interface eth0 4151 0x1037 1 r w MODBUS TCP...

Page 293: ...rs are described in more details in the following sections 10 5 1 Process Image Properties 10 5 1 1 Register 0x1022 Number of Registers in the MODBUS Input Process Image This register contains the number of registers available in the MODBUS input process image MODBUS input 10 5 1 2 Register 0x1023 Number of Registers in the MODBUS Output Process Image This register contains the number of registers...

Page 294: ...e to operate using the previously set timeout value 10 5 2 4 Register 0x1031 MAC Address for ETHERNET Interface 1 eth0 This register provides the MAC address for the first ETHERNET interface eth0 MAC may also provide a partial result 10 5 2 5 Register 0x1037 MODBUS TCP Response Delay This register saves the value of the MODBUS response delay This value is specified in ms units The maximum delay is...

Page 295: ...S Mapping This does not apply to the Explicit Trigger mode and the access to the register 0x1101 Watchdog Status which can be configured via the 0x1103 Watchdog Config register If no trigger occurs during the watchdog within the timeout time set in the 0x1102 register Watchdog Timeout the Watchdog Timeout response is initiated The closing of all MODBUS TCP connections can be configured as a respon...

Page 296: ...ime 0 is set in the register 0x1102 Watchdog Timeout The writing of commands in the register 0x1100 Watchdog Command is limited in this operation mode Only the WATCHDOG_START command is permitted as a possible trigger The only possibilities to deactivate or stop the watchdog in ALTERNATIVE_WATCHDOG mode are the setting of the timeout register to 0 after the timeout has elapsed and the switching ba...

Page 297: ... from FW Version 02 06 20 09 Figure 110 State Diagram Switchover Operation Mode 10 5 4 1 Register 0x1100 Watchdog Command This register receives commands for the MODBUS watchdog It cannot be read i e it is not possible to read out the last command written The following commands are accepted depending on watchdog status ...

Page 298: ...AL_DATA_ VALUE 0x03 exception if no timeout time is set In the WATCHDOG_EXPIRED state and the STANDARD_WATCHDOG operation mode the response is an ILLEGAL_FUNCTION 0x01 exception In this case the watchdog must first be reset with the WATCHDOG_ RESET command to the WATCHDOG_ STOPPED state In operation mode ALTERNATIVE_WATCHDOG the response is an ILLEGAL_DATA_ VALUE 0x03 exception The command is not ...

Page 299: ...nfigured and started The set timeout has not yet expired 0x0002 WATCHDOG_ EXPIRED The timeout set in register 0x1102 Watchdog Timeout has expired In the STANDARD_WATCHDOG operation mode the watchdog in this state must be reset to the WATCHDOG_STOPPED state with the WATCHDOG_RESET command In the ALTERNATIVE_WATCHDOG operation mode the watchdog is automatically restarted with the next trigger 10 5 4...

Page 300: ...e 0x5555 WATCHDOG_START is considered as a watchdog trigger The access to the register 0x1101 Watchdog Status is also an exception here 1 TRIGGER_ON_ STATUS_REG Activates the watchdog trigger by read access to register 0x1101 Watchdog Status 0 The reading of the watchdog status is not considered as a watchdog trigger 1 The reading of the watchdog status triggers the watchdog 2 CLOSE_ALL_TCP_ CONNE...

Page 301: ...dog operation mode is retained with the same configuration as before and is therefore immediately active again when the timeout is set 10 5 6 MODBUS Constants Registers Registers 0x2000 0x2008 provide constants based on the table WAGO MODBUS Registers It is possible to read all of the constants or a consecutive portion of them at once 10 5 6 1 Electronic Nameplate Registers 0x2010 to 0x2015 contai...

Page 302: ...provides the major part for the firmware version 10 5 6 6 Register 0x2014 Minor Firmware Version This register provides the minor part for the firmware version 10 5 6 7 Register 0x2015 MBS Version This register provides the version of the MODBUS slave library The high byte contains the major version number and the low byte the minor version number Example 0x010A Major version number 1 Minor versio...

Page 303: ...red function block DiagGetBusState indicates the status of the fieldbus here MODBUS and is located in this library Details about this function block are provided both in this document and in the online Help function for CODESYS 10 6 3 Diagnostics for the Error Server The MODBUS slave also supports the error service implemented in the PFC and generates diagnostic messages which are stored permanent...

Page 304: ...lave data exchange stopped by PLC Temporary MODBUS slave data exchange stopped 0x0009000F Modbus Slave PLC watchdog timer expired Permanent Monitoring time for controller PLC expired 0x00090100 Modbus Slave common configuration failed Permanent MODBUS slave configuration failed 0x00090101 Modbus Slave TCP configured successfully Temporary MODBUS slave TCP configuration completed successfully 0x000...

Page 305: ...hdog activated Temporary MODBUS watchdog activated 0x00090201 Modbus Slave Watchdog deactivated Temporary MODBUS watchdog deactivated 0x00090202 Modbus Slave Watchdog Timer expired Permanent MODBUS watchdog monitoring time expired 0x00090203 Modbus Slave has terminated all established TCP connections Permanent All MODBUS TCP connections terminated due to timeout 0x00090300 Modbus Slave obtaining s...

Page 306: ...NTIME WAGO I O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 11 MODBUS e RUNTIME 11 1 MODBUS Address Overview Figure 111 MODBUS Address Overview ...

Page 307: ... O LED sequence 2 of 3 64 012 0xFA0C 1 ro LED flash code I O LED sequence 3 of 3 64 013 0xFA0D 1 ro PLC State 1 Stop 2 Run Electronic Type Label 64 016 0xFA10 4 ro Order number e g 0750810100400001 64 020 0xFA14 1 ro Firmware status 64 021 0xFA15 1 ro Hardware version 64 022 0xFA16 1 ro Firmware loader Process Image Version 64 023 0xFA17 1 ro Version of the MODBUS process image Network Configurati...

Page 308: ...egisters MODBUS Address Data Length in Words Access Description Dec Hex 64 069 0xFA45 1 ro Number of output registers digital 0x8000 Constants Registers 64 160 0xFAA0 1 ro Constant 0x1234 64 161 0xFAA1 1 ro Constant 0xAAAA 64 162 0xFAA2 1 ro Constant 0x5555 64 250 0xFAFA 1 ro Live register The WAGO MODBUS registers are described in more details in the following sections ...

Page 309: ...tchdog Status which can be configured via the register 0xFA03 Watchdog Config The Watchdog Timeout response is initiated if no trigger occurs within the timeout set in the register 0xFA01 Watchdog Timeout with the watchdog running The closing of all MODBUS TCP connections can be configured as a response see register 0xFA03 Watchdog Config The MODBUS watchdog supports two different operation modes ...

Page 310: ...meout 0 is set in the register 0xFA01 Watchdog Timeout The writing of commands in the register 0xFA00 Watchdog Command is restricted in this operation mode Only the WATCHDOG_START command is permitted as a possible trigger The only possibility to deactivate and stop the watchdog in operation mode SIMPLE_WATCHDOG is the switching back to the operation mode ADVANCED_WATCHDOG The following diagram sh...

Page 311: ..._RUNNING state is set 0x55AA WATCHDOG_ STOP Stops the running watchdog in the WATCHDOG_UNCONFIGURED state the response is an ILLEGAL_DATA_ VALUE 0x03 exception if no timeout time is set The same exception is returned even if the watchdog has expired WATCHDOG_EXPIRED in the ADVANCED_ WATCHDOG operation mode The watchdog must in this case be reset first with the command WATCHDOG_RESET to the WATCHDO...

Page 312: ...ollowing states are possible Table 218 Watchdog Status Value Name Explanation 0xFFFF WATCHDOG_ UNCONFIGURED The MODBUS watchdog is not configured i e register 0xFA01 Watchdog Timeout contains the value 0 Only the setting of a timeout 0 s can close this state 0x0000 WATCHDOG_ STOPPED The MODBUS watchdog is configured the register 0xFA01 Watchdog Timeout contains a value 0 In the ADVANCED_WATCHDOG o...

Page 313: ...o register 0xFA02 Watchdog Status is the only exception 1 Only the writing of register 0xFA00 Watchdog Command with the value 0x5555 WATCHDOG_START is considered as the watchdog trigger The exception is also here the access to the register 0xFA02 Watchdog Status 1 TRIGGER_ON_ STATUS_REG Activates the watchdog trigger by read access to register 0xFA02 Watchdog Status 0 The reading of the watchdog s...

Page 314: ...Watchdog Register The 0xFA04 register contains the time for the MODBUS TCP connection watchdog Time base is 10 ms This enables the time to be set up to 655350 ms If the register contains a value 0 s when a new TCP connection from a MODBUS master is accepted the watchdog for this connection is started Later changes to the register have no effect on the monitoring of existing connections If the watc...

Page 315: ...umber The registers 0xFA10 0xFA13 contain the WAGO order number of the controller Example 0750 8202 0025 0001 0xFA10 0750 0xFA11 8202 0xFA12 0025 0xFA13 0001 11 2 3 2 Firmware Version The register 0xFA14 contains the firmware version of the controller 11 2 3 3 Hardware Version The register 0xFA15 contains the hardware version of the controller 11 2 3 4 Firmware Loader Boot Loader The register 0xFA...

Page 316: ...A2 provide constants based on the WAGO MODBUS Registers table It is possible to read all of the constants or a consecutive portion of them at once 0xFAA0 0x1234 0xFAA1 0xAAAA 0xFAA2 0x5555 11 2 7 Live Register The register 0xFAFA can only be read and contains a counter that is incremented with each cycle of a task of the runtime environment with read and write access to the MODBUS process data ...

Page 317: ...f a function code a CPU time of approx 800 µs can be assumed The CPU load cpu_load in percent can be estimated from the cycle time t_z for a query with the following rule of thumb cpu_load 800 µs t_z 100 A cycle time of 100 ms thus results in a CPU load of 0 8 A maximum load of approx 20 can be generated per connection as this is limited by the network protocol To minimize the CPU load The cycle t...

Page 318: ...20 Legend for Figure Power Supply Indicating Elements Description Color Description A Green off Status of system power supply voltage B Green off Status of field side power supply voltage Table 221 Field Side Supply Diagnostics Status Explanation Solution Green 24V field side supply voltage present Off No 24V field side supply voltage present Switch on the power supply Check the supply voltage Tab...

Page 319: ...stics via CON LED Status Explanation Remedy Green flashing 1800 ms ON 200 ms OFF 2G or 3G network Green flashing 200 ms ON 1800 ms OFF No network Check the SIM status via WBM Enter the PIN or PUK if necessary If the SIM status is ready and the error persists check the antenna and its connection to the device If necessary connect the antenna correctly or use another compatible antenna If possible u...

Page 320: ...ystem Table 225 Diagnostics via SYS LED Status Explanation Remedy Green Ready to operate System start completed without errors Yellow Device is in startup boot process and the RST button is not pressed Yellow flashing Fix IP Address mode temporary setting until the next reboot Connect to the device via the standard address 192 168 1 17 or restart the device to restore the original value set Green ...

Page 321: ... status Run Green flashing PLC program at a debug point Resume the program in the linked IDE Integrated Development Environment using Single step or Start If the connection has been interrupted set the Run Stop switch to Stop and then back to Run to enable the program to continue Green red flashing PLC is at a debug point and the Run Stop switch has been set to Stop Set the Run Stop switch to Run ...

Page 322: ...g At least one application after in the STOP status after exception e g memory access error Start the application with a reset via the mode selector switch or in the connected IDE If the application cannot be started restart the controller Contact WAGO Support if the error occurs again Orange green flashing Load above threshold value 1 Try to reduce the load on the system Change the CODESYS progra...

Page 323: ...completed Red A hardware fault is present Contact WAGO Support Red flashing 2 Hz An error which may be able to be eliminated is present First try to eliminate the error by switching the device power supply off and then back on Check the entire node structure for any errors If you cannot eliminate the error contact WAGO Support Red flashing flashing sequence An internal data bus error is present An...

Page 324: ...on 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Table 229 MS LED Diagnostics Status Explanation Remedy Off No error Red flashing flashing sequence A configuration error exists An explanation of the flashing sequence is given in the section Diagnostics via Flashing Sequences ...

Page 325: ...mobile phone or comparable device to check the signal quality of the mobile network locally Red flashing blink code 1 1 No SIM card inserted Switch off the device Insert a SIM card Switch the device on again Red flashing blink code 1 2 Invalid locked SIM card Switch off the device Insert a different SIM card that is valid Switch the device on again Red flashing blink code 2 1 Modem not connected A...

Page 326: ...lity Meaning Signal quality Explanation UMTS GSM Level 1 Only UMTS probable connection failure Only GSM probable connection failure Level 2 HDSPA possible instable connection GPRS very slow data connection Level 3 HDSPA possible no weather reserve GPRS stabile data connection maximum data rate 54 kbit s Level 4 HDSPA stabile connection EDGE stabile very slow data connection possible Level 5 HDSPA ...

Page 327: ...anner 1 The first flashing sequence flickering initiates reporting of the fault error 2 After a short break approx 1 second the second flashing sequence starts The number of blink pulses indicates the error code which describes the type of error involved 3 After a further break the third flashing sequence is initiated The number of blink pulses indicates the error argument which provides an additi...

Page 328: ...328 Diagnostics WAGO I O SYSTEM 750 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 Figure 118 Flashing Sequence Process Diagram ...

Page 329: ...the 6th position of the bus node Initiation of the Start Phase 1 The I O LED flashes for 1 cycle at about 10 Hz 10 flashes second 2 This is followed by a pause of about one second Error Code 4 Data Error in the Internal Data Bus 3 The I O LED flashes for 4 cycles of about 1Hz 4 This is followed by a pause of about 1 second Error Argument 5 I O Module at the 6th Slot 5 The I O LED flashes for 5 cyc...

Page 330: ...nostics cannot be cleared by the measured specified for them contact WAGO support Be ready to explain to them the blink code that is displayed Phone 49 571 887 555 Fax 49 571 887 8555 E mail support wago com Table 233 Overview of Error Codes I O LED Error code Explanation 1 Hardware and configuration error 2 Configuration error 3 Internal data bus protocol error 4 Physical error on the internal da...

Page 331: ... system Switch the power back on If the I O flashes red switch off the power supply again and place the end module in the middle of the first half of the I O modules toward the controller If the LED is no longer flashing switch off the power supply and place the end module in the middle of the second half of the I O modules away from the controller Switch the power back on Repeat this procedure un...

Page 332: ... supply to the controller and reduce the number of I O modules Then switch the power back on 12 Time to access the serial EEPROM exceeded Switch off the power to the controller and replace it Then switch the power back on 14 Maximum number of gateway or mailbox modules exceeded Switch off the power to the controller Reduce the number of gateway or mailbox modules Then switch the power back on 16 M...

Page 333: ...odule as follows Switch off the power supply Place the end module in the middle of the I O modules connected to the system Switch the power back on If the I O LED continues to flash red switch off the power supply again and place the end module in the middle of the first half of the I O modules toward the controller If only one I O module is left and the LED continues to flash either this module o...

Page 334: ... module without diagnostics Table 238 Error Code 5 Explanation of Blink Codes and Procedures for Troubleshooting Error Argument Cause Solution n Register communication error during internal data bus initialization Switch off the power to the controller Replace the n 1 th process data module Switch the power back on I O modules that do not provide any data are ignored e g supply module without diag...

Page 335: ... to them the blink code that is displayed Phone 49 571 887 555 Fax 49 571 887 8555 E mail support wago com Table 240 Overview of MS LED Error Codes Error Code Explanation 1 Configuration error Table 241 Error Code 1 Explanation of Blink Codes and Procedures for Troubleshooting Error Argument Cause Remedy 5 Error when synchronizing the controller configuration with the internal data bus Check the i...

Page 336: ...ll the way in When you let go the memory card will move back a little and then snap in place push push mechanism 5 Close the cover flap by flipping it down and pushing it in until it snaps into place 6 You can seal the closed flap through the hole in the enclosure next to the flap Figure 119 Inserting the Memory Card dg_ 13 1 2 Removing the Memory Card 1 First remove any seal that may be in place ...

Page 337: ...TEM 750 Service 337 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 6 Close the cover flap by flipping it down and pushing it in until it snaps into place ...

Page 338: ...n such a way that the shape of the recess lines up with the shape of the SIM card and the contacts of the SIM card are visible 5 Reinsert the SIM card holder into the SIM card slot with the SIM card contacts visible oriented towards the memory card slot until the SIM card holder latches Figure 120 Inserting the SIM Card 13 2 2 Removing the SIM Card 1 Press the release button of the SIM card slot w...

Page 339: ...t 13 3 1 Perform Firmware Upgrade Do not switch the controller off The controller can be damaged by interrupting the upgrade process Do not switch the controller off during the upgrade process and do not disconnect the power supply Proceed as follows if you want to upgrade the controller to a later firmware version 1 Save your application and the controller settings 2 Switch off the controller 3 I...

Page 340: ... not possible Use a special downgrade image Proceed as follows if you want to downgrade the controller to an earlier firmware version 1 Save your application and the controller settings 2 Switch off the controller 3 Insert the memory card with the new firmware image into the memory card slot Use a special downgrade image if necessary 4 Switch on the controller 5 After booting the controller launch...

Page 341: ...tten by a factory reset Any subsequently installed firmware functions are not overwritten If you have any questions contact WAGO Support The controller is restarted after the factory reset Proceed as follows to factory reset the controller 1 Press the Reset button RST 2 Set the mode selector switch to the RESET position 3 Press and hold both buttons until the SYS LED alternately flashes red green ...

Page 342: ...ff the power supply before working on the devices 14 1 1 Removing the Controller 1 Use a screwdriver blade to turn the locking disc until the nose of the locking disc no longer engages behind the carrier rail 2 Remove the controller from the assembly by pulling the release tab Electrical connections for data or power contacts to adjacent I O modules are disconnected when removing the controller Fi...

Page 343: ... module from the assembly by pulling the release tab Figure 122 Removing the I O Module Example Electrical connections for data or power jumper contacts are disconnected when removing the I O module Do not take the controller enclosure apart The enclosure sections are firmly joined The feed in section with the CAGE CLAMP connections cannot be separated from the other enclosure section ...

Page 344: ...entation for WAGO I O SYSTEM 750 750 and 753 Series I O modules in the process image as well as the configuration of the process values Equipment damage due to incorrect address To prevent any damage to the device in the field you must always take the process data for all previous byte or bit oriented I O modules into account when addressing an I O module at any position in the fieldbus node No di...

Page 345: ...ge grouped into bytes 15 1 1 1 1 Channel Digital Input Module with Diagnostics 750 435 Table 242 1 Channel Digital Input Module with Diagnostics Input Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Diagnostic bit S 1 Data bit DI 1 15 1 1 2 2 Channel Digital Input Modules 750 400 401 405 406 410 411 412 427 438 and all variations 753 400 401 405 406 410 411 412 427 Table 243 2 Channe...

Page 346: ... 2 Diagnostic bit S 1 Channel 1 Data bit DI 2 Channel 2 Data bit DI 1 Channel 1 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Acknowledge ment bit Q 2 Channel 2 Acknowledge ment bit Q 1 Channel 1 0 0 15 1 1 5 4 Channel Digital Input Modules 750 402 403 408 409 414 415 422 423 428 432 433 1420 1421 1422 1423 753 402 403 408 409 415 422 423 428 432 433 440 Table 246 4 Channel ...

Page 347: ... Chan nel 6 Wire break short circuit DB KS 5 Chan nel 5 Wire break short circuit DB KS 4 Chan nel 4 Wire break short circuit DB KS 3 Chan nel 3 Wire break short circuit DB KS 2 Chan nel 2 Wire break short circuit DB KS 1 Chan nel 1 Output Process Image Output Byte D0 Output Byte D1 Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 0 0 0 0 0 0 0 0 DI Of...

Page 348: ...appended after the analog data in the Output Process Image grouped into bytes 15 1 2 1 1 Channel Digital Output Module with Input Process Data 750 523 The digital output modules deliver 1 bit via a process value Bit in the output process image which is illustrated in the input process image This status image shows manual mode Table 250 1 Channel Digital Output Module with Input Process Data Input ...

Page 349: ...trols DO 2 Channel 2 controls DO 1 Channel 1 750 506 753 506 The digital output module has 2 bits of diagnostic information for each output channel The 2 bit diagnostic information can then be decoded to determine the exact fault condition of the module i e overload a short circuit or a broken wire The 4 bits of diagnostic data are mapped into the Input Process Image while the output control bits ...

Page 350: ... while the output control bits are in the Output Process Image Table 255 4 Channel Digital Output Modules with Diagnostics and Input Process Data Input Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Diagnostic bit S 4 Channel 4 Diagnostic bit S 3 Channel 3 Diagnostic bit S 2 Channel 2 Diagnostic bit S 1 Channel 1 Diagnostic bit S 0 no Error Diagnostic bit S 1 overload short circuit ...

Page 351: ... 3 Diagnostic bit S 2 Channel 2 Diagnostic bit S 1 Channel 1 Diagnostic bit S 0 no Error Diagnostic bit S 1 overload short circuit or broken wire Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 controls DO 8 Channel 8 controls DO 7 Channel 7 controls DO 6 Channel 6 controls DO 5 Channel 5 controls DO 4 Channel 4 controls DO 3 Channel 3 controls DO 2 Channel 2 controls DO 1 Cha...

Page 352: ...t 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Data bit DI 8 Channel 8 Data bit DI 7 Channel 7 Data bit DI 6 Channel 6 Data bit DI 5 Channel 5 Data bit DI 4 Channel 4 Data bit DI 3 Channel 3 Data bit DI 2 Channel 2 Data bit DI 1 Channel 1 Output Process Image Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 controls DO 8 Channel 8 controls DO 7 Channel 7 controls DO 6 Channel 6 controls DO 5 Channel 5 controls ...

Page 353: ...n the structure of control and status bytes For detailed information on the structure of a particular I O module s control status bytes please refer to that module s manual Manuals for each module can be found on the Internet at www wago com 15 1 3 1 1 Channel Analog Input Modules 750 491 and all variations Table 260 1 Channel Analog Input Modules Input Process Image Offset Byte Destination Descri...

Page 354: ... 4 Channel Analog Input Modules 750 450 453 455 457 459 460 468 and all variations 753 453 455 457 459 Table 262 4 Channel Analog Input Modules Input Process Image Offset Byte Destination Description High Byte Low Byte 0 D1 D0 Measured Value Channel 1 1 D3 D2 Measured Value Channel 2 2 D5 D4 Measured Value Channel 3 3 D7 D6 Measured Value Channel 4 ...

Page 355: ...yte Low Byte 0 S0 Status byte 0 1 D1 D0 Input data word 1 2 S1 Status byte 1 3 D3 D2 Input data word 2 4 S2 Status byte 2 5 D5 D4 Input data word 3 Output Process Image Offset Byte Destination Description High Byte Low Byte 0 C0 Control byte 0 1 D1 D0 Output data word 1 2 C1 Control byte 1 3 D3 D2 Output data word 2 4 C2 Control byte 2 5 D5 D4 Output data word 3 15 1 3 5 8 Channel Analog Input Mod...

Page 356: ...tal data Information on the structure of control and status bytes For detailed information on the structure of a particular I O module s control status bytes please refer to that module s manual Manuals for each module can be found on the Internet at www wago com 15 1 4 1 2 Channel Analog Output Modules 750 550 552 554 556 560 562 563 585 and all variations 753 550 552 554 556 Table 265 2 Channel ...

Page 357: ... structure of the Control Status byte For detailed information about the structure of a particular module s control status byte please refer to that module s manual Manuals for each module can be found on the Internet under www wago com 15 1 5 1 Counter Modules 750 404 and all variations except of 000 005 753 404 and variation 000 003 The above Counter Modules have a total of 5 bytes of user data ...

Page 358: ...High Byte Low Byte 0 C Control byte 1 D1 D0 Counter Setting Value of Counter 1 2 D3 D2 Counter Setting Value of Counter 2 750 638 753 638 The above Counter Modules have a total of 6 bytes of user data in both the Input and Output Process Image 4 bytes of counter data and 2 bytes of control status The two counter values are supplied as 16 bits The following tables illustrate the Input and Output Pr...

Page 359: ...15 1 5 3 Serial Interface Modules with alternative Data Format 750 650 and the variations 000 002 004 006 009 010 011 012 013 750 651 and the variations 000 001 002 003 750 653 and the variations 000 002 007 753 650 653 The process image of the 003 000 variants depends on the parameterized operating mode With the freely parameterizable variations 003 000 of the serial interface modules the desired...

Page 360: ...escription High Byte Low Byte 0 D0 C S Data byte Control status byte 1 D2 D1 Data bytes 2 D4 D3 15 1 5 5 Data Exchange Module 750 654 and the variation 000 001 The Data Exchange modules have a total of 4 bytes of user data in both the Input and Output Process Image The following tables illustrate the Input and Output Process Image which has a total of 2 words mapped into each image Word alignment ...

Page 361: ...3 bytes of output data The following tables illustrate the Input and Output Process Image which have 4 words into each image Word alignment is applied Table 275 Incremental Encoder Interface Modules 750 631 000 004 010 011 Input Process Image Offset Byte Destination Description High Byte Low Byte 0 S not used Status byte 1 D1 D0 Counter word 2 not used 3 D4 D3 Latch word Output Process Image Offse...

Page 362: ...ge Offset Byte Destination Description High Byte Low Byte 0 C not used Control byte 1 D1 D0 Counter setting word 2 not used 3 750 637 The above Incremental Encoder Interface Module has a total of 6 bytes of user data in both the Input and Output Process Image 4 bytes of encoder data and 2 bytes of control status The following table illustrates the Input and Output Process Image which have 4 words ...

Page 363: ...ent and received are stored in up to 4 input and output bytes D0 D3 Two control bytes C0 C1 and two status bytes S0 S1 are used to control the I O module and the drive In addition to the position data in the input process image D0 D3 it is possible to display extended status information S2 S5 Then the three control bytes C1 C3 and status bytes S1 S3 are used to control the data flow Bit 3 of contr...

Page 364: ...input bytes D0 D6 depending on the operating mode Output byte D0 and input byte D0 are reserved and have no function assigned One I O module control and status byte C0 S0 and 3 application control and status bytes C1 C3 S1 S3 provide the control of the data flow Switching between the two process images is conducted through bit 5 in the control byte C0 C0 5 Activation of the mailbox is acknowledged...

Page 365: ...nd The following table illustrates the Input and Output Process Image which have 3 words mapped into each image Word alignment is applied Table 281 RTC Module 750 640 Input and Output Process Image Offset Byte Destination Description High Byte Low Byte 0 ID C S Command byte Control status byte 1 D1 D0 Data bytes 2 D3 D2 15 1 5 11 DALI DSI Master Module 750 641 The DALI DSI Master module has a tota...

Page 366: ...ALI Multi Master module can be operated in Easy mode default and Full mode Easy mode is used to transmit simply binary signals for lighting control Configuration or programming via DALI master module is unnecessary in Easy mode Changes to individual bits of the process image are converted directly into DALI commands for a pre configured DALI network 22 bytes of the 24 byte process image can be use...

Page 367: ...it set ON Bit not set OFF 10 GA12 GA15 GA8 GA11 Bit 2 Bit set Error Bit not set No error Bit pairs GA1 GA15 similar to GA0 11 Not in use DA DALI address GA Group address Table 284 Overview of the Output Process Image in the Easy Mode Output process image Offset Byte designation Note High byte Low byte 0 S res Broadcast ON OFF and activate Bit 0 Broadcast ON Bit 1 Broadcast OFF Bit 2 Broadcast ON O...

Page 368: ...r has a total of 4 bytes of user data in both the Input and Output Process Image 3 bytes of module data and 1 byte of control status The following tables illustrate the Input and Output Process Image which have 2 words mapped into each image Word alignment is applied Table 285 EnOcean Radio Receiver 750 642 Input Process Image Offset Byte Destination Description High Byte Low Byte 0 D0 S Data byte...

Page 369: ... 12 and 48 bytes in the process image The sizes of the input and output process images are always the same The first byte contains the control status byte the second contains an empty byte Process data attach to this directly when the mailbox is hidden When the mailbox is visible the first 6 12 or 18 bytes of process data are overlaid by the mailbox data depending on their size Bytes in the area b...

Page 370: ...t 2 3 D3 D2 Data bytes log Channel 2 Sensor input 2 4 C2 S2 not used Control status byte log Channel 3 Sensor input 1 5 D5 D4 Data bytes log Channel 3 Sensor input 3 6 C3 S3 not used Control status byte log Channel 4 Sensor input 2 7 D7 D6 Data bytes log Channel 4 Sensor input 2 15 1 5 18 KNX EIB TP1 Module 753 646 The KNX TP1 module appears in router and device mode with a total of 24 byte user d...

Page 371: ... Data byte 0 3 D3 D2 Data byte 3 Data byte 2 4 D5 D4 Data byte 5 Data byte 4 5 D7 D6 Data byte 7 Data byte 6 6 D9 D8 Data byte 9 Data byte 8 7 D11 D10 Data byte 11 Data byte 10 8 D13 D12 Data byte 13 Data byte 12 9 D15 D14 Data byte 15 Data byte 14 10 D17 D16 Data byte 17 Data byte 16 11 D19 D18 Data byte 19 Data byte 18 15 1 5 19 AS interface Master Module 750 655 The length of the process image ...

Page 372: ...process data are mapped next The following words contain the remaining process dat The mailbox and the process image sizes are set with the startup tool WAGO I O CHECK Table 290 AS interface Master Module 750 655 Input and Output Process Image Offset Byte Destination Description High Byte Low Byte 0 C0 S0 not used Control status byte 1 D1 D0 Mailbox 0 3 5 6 or 9 words Process data 0 16 words 2 D3 ...

Page 373: ...Bit 0 Diagnostic bit S 2 Fuse Diagnostic bit S 1 Fuse 15 1 6 2 Binary Space Module 750 622 The Binary Space Modules behave alternatively like 2 channel digital input modules or output modules and seize depending upon the selected settings 1 2 3 or 4 bits per channel According to this 2 4 6 or 8 bits are occupied then either in the process input or the process output image Table 292 Binary Space Mo...

Page 374: ...ables IEC 61131 Standard LIB Offers various standard functions C SysLibAlarmTrend lib Supports alarm and trend tasks IEC 61131 SysLibCallback lib For installing call back handlers and event handlers C SysLibDir lib For accessing directories C SysLibDirect lib Access to variables using indices C SysLibEvent lib Handling of events in the system C SysLibFileStream lib File handling using ANSI C funct...

Page 375: ...2 SysLibCom lib The controller 750 8207supports the following function blocks of the SysLibCom lib library SysComClose SysComGetVersion2300 SysComOpen SysComRead SysComSetSettings SysComSetSettingsEx SysComWrite Observe restrictions on the settings for stop bits The setting 1 5 stop bits is not supported by controller750 8207 Additional information about this is given in the online Help function f...

Page 376: ...file system supports Absolute paths e g media sd test txt Relative paths e g testpath test txt Macros e g HOME CARD TMP Table 294 Possible Macros for File Access Macro Booting from Internal Memory Booting from Memory Card HOME home codesys internal NAND memory home codesys memory card CARD media sd nemory card home codesys memory card TMP tmp codesys internal RAM memory tmp codesys internal RAM me...

Page 377: ...T TXT Test txt The separator for directories is The file system supports Absolute paths e g media sd test txt Relative paths e g testpath test txt Macros e g HOME CARD TMP Table 295 Possible Macros for File Access Macro Booting from Internal Memory Booting from Memory Card HOME home codesys internal NAND memory home codesys memory card CARD media sd nemory card home codesys memory card TMP tmp cod...

Page 378: ...7 Table 296 Input Variable DEVICENUMBER Bus System Value Internal data bus 0 MODBUS 1 15 2 1 7 mod_com lib The controller 750 8207supports the following function blocks of the mod_com lib library ADD_PI_INFORMATION CRC16 FBUS_ERROR_INFORMATION GET_DIGITAL_INPUT_OFFSET GET_DIGITAL_OUTPUT_OFFSET KBUS_ERROR_INFORMATION MOD_COM_VERSION PI_INFORMATION SET_DIGITAL_INPUT_OFFSET SET_DIGITAL_OUTPUT_OFFSET ...

Page 379: ...on Immediately Order Number read get_coupler_details order number Item number of the controller Immediately Firmware Revision read get_coupler_details firmware revision Firmware version of the controller Immediately Licence Information read get_coupler_details license information CODESYS license details Immediately Network Details X1 Identifies the parameters currently used for the ETHERNET interf...

Page 380: ...edia tely Version read get_rts_info project version Immedia tely Author read get_rts_info project author Immedia tely Description read get_rts_info project description Immedia tely CODESYS State State read get_rts_info state Display of the CODESYS status RUN or STOP Immedia tely Home Directory Boot Project Location Home Directory Boot Project Location read get_runtime_config homedir on sdcard Stor...

Page 381: ...ters of the ETHERNET interfaces X1 X2 in switched mode and the ETHERNET interface X1 in separated mode Type of IP address configuration read get_eth_config X1 config type Path via which the interface receives its IP address Possible return values are static set statically dhcp per DHC bootp per BootP Immedia tely write config_interfaces interface X1 config type Value state enabled Enable process v...

Page 382: ...teway_ config number 1 metric Current metric cost factor of the default gateway 1 The default value is 20 Immedia tely write config_default_gateway number 1 metric n Enter the metric of the default gateway 1 here n is a number between 0 and 4 294 967 295 Default Gateway 2 See Default Gateway 1 When calling the gateway number replace 1 with 2 DNS Server 1 DNS Server 1 read get_dns_server 1 DNS serv...

Page 383: ...ate disabled Deactivate port disabled Autonegotiation read get_eth_config X1 autoneg Query the status of the autonegotiation function Possible return values on off Immediately write config_ethernet port X1 autoneg on Activate the autonegotiation function on config_ethernet port X1 autoneg off speed value duplex value Deactivate the autonegotiation function off Note You must also indicate the speed...

Page 384: ...ort read get_ntp_config port Port number of the NTP server Immedia tely write config_sntp port Value Enter the port number for Value Time Server read get_ntp_config time server N Query the IP address of the time server N 1 4 for querying one of 4 time servers Immedia tely write config_sntp time server N Value Enter the IP address of 4 time servers N can be a value from 1 to 4 Value is an IP addres...

Page 385: ...mm ss xx 12 Hour Format read get_clock_data display mode Presentation format either as 12 or 24 hour format Possible return values 12 hour format 24 hour format Immediately write config_clock _ display_mode display mode value Set the presentation format for the time Possible entries for Value 12 hour format 24 hour format Time Zone TZ String read get_clock_data tz string Currently set time zone or...

Page 386: ...e controller immedia tely dg_ Table 305 Description of Configuration Scripts for Package Server Parameters Status Call Up Output Input Valid Firmware Update Medium for active partition read get_filesystem_data active partition medium Specifies the medium for the active partition memory card internal flash Right away Create firmware backup write firmware_backup package settings Value1 package codes...

Page 387: ...disabled Right away write config_port port ftp state Value Possible entries for Value enabled disabled FTPS FTPS Port read config_ssl ftps status Read the status of the FTPS port Possible return values enabled disabled Right away write config_port port ftps state Value Activate Deactivate FTPS Possible entries for Value enabled disabled HTTP HTTP Port read config_ssl http status Read the status of...

Page 388: ... 2 enable CODESYS2 3 enable e RUNTIME Boot project location read get_runtime_config boot project Memory location for a boot project of the runtime application Possible return values HOME saving on internal memory CARD saving on the memory card Immedia tely write config_runtime boot project value Possible entries for value HOME saving on internal memory CARD saving on the memory card Default web pa...

Page 389: ...me_config cfg version 2 authentication Read status of the port authentication for communication between the CODESYS 2 PC software and the controller Possible return values enabled disabled Immedia tely write config_runtime cfg version 2 authentication value Possible entries for value enabled disabled CODESYS2 Service State read get_runtime_config service state Read status of the port for communica...

Page 390: ...tatus of the runtime specific Webserver Possible return values enabled disabled Immedia tely write config_runtime cfg version 3 Webserver state value Enable disable runtime specific Webserver Possible entries for value enabled disabled e RUNTIME Port Authentication read get_runtime_config cfg version 3 authentication Read status of the port authentication for communication between the e COCKPIT PC...

Page 391: ...alues enabled disabled read get_ssh_config port number Specifies the SSH port write config_ssh state Value Activate Deactivate SSH service Possible entries for Value enabled disabled write config_ssh port number Value Set the SSH port write config_ssh root access state value Value Permit Prohibit logon as root Possible entries for Value enabled disabled write config_ssh password request state valu...

Page 392: ...ct read get_snmp_data contact Specifies the SNMP sysContact parameter Right away write config_snmp contact Value Change the SNMP parameter sysContact Value string After restart When entering values the blank characters must be filled by either or 20 If this is not done the input is not recognized as a coherent string SNMP Manager configuration for v1 and v2c Protocol status read get_snmp_data v1 v...

Page 393: ... read get_snmp_data v1 v2c trap receiver community name Nummer Specifies the community name that the SNMP agent of the controller sends in the Trap Header Parameter number see section IP Address of a Trap Receiver Right away Trap version read get_snmp_data v1 v2c trap receiver version Nummer Specifies the SNMP version v1 or v2c via which the SNMP agent sends the traps to the associated trap receiv...

Page 394: ...read Right away Authentication encryption type read get_snmp_data v3 auth type Number Specifies the type of encryption that the v3 user uses none MD5 or SHA Parameter number see Authentication Name Right away Authentication key read get_snmp_data v3 auth key Nummer Specifies the key string for authentication Parameter number see Authentication Name Right away Privacy encryption type read get_snmp_...

Page 395: ...a maximum of 32 characters can also be blank in this case the authentication key will be used The IP address of a trap receiver is transmitted as the notification receiver Value6 number number number number This parameter is not required if no v3 traps are to be sent After restart Delete v3 user write config_snmp v3 edit delete v3 auth name Value Deleting a v3 user that has been set up Because the...

Page 396: ...load on the Internet at www wago com 15 2 1 13 WagoLibNetSnmp lib The controller 750 8207supports the following function blocks of the WagoLibNetSnmp lib library snmpGetValueCustomOID_INT32 snmpGetValueCustomOID_STRING snmpGetValueCustomOID_UINT32 snmpRegisterCustomOID_INT32 snmpRegisterCustomOID_STRING snmpRegisterCustomOID_UINT32 snmpSetValueCustomOID_INT32 snmpSetValueCustomOID_STRING snmpSetVa...

Page 397: ...set_cache_size SSL_CTX_set_client_CA_list SSL_CTX_set_method SSL_CTX_use_certificate_file SSL_CTX_use_PrivateKey_file SSL_free SSL_get_error SSL_Hndshk_Accept SSL_Hndshk_Connect SSL_load_client_CA_file SSL_read SSL_shutdown SSL_write The document containing a description of this library and the function blocks it includes is available for download on the Internet at www wago com 15 2 1 16 WagoLibT...

Page 398: ...igure 20 Slot for SD Memory Card 46 Figure 21 SIM Card Slot 47 Figure 22 Schematic diagram 48 Figure 23 Spacing 75 Figure 24 Release Tab of Controller 77 Figure 25 Insert I O Module Example 78 Figure 26 Snap the I O Module into Place Example 78 Figure 27 Connecting a Conductor to a CAGE CLAMP 79 Figure 28 Fuse Protection of the Electronic Circuit Power Supply 80 Figure 29 Power Supply Concept 81 F...

Page 399: ...xample of an Allocation 232 Figure 68 Creating a Communication Link Step 1 233 Figure 69 Creating a Communication Link Step 2 234 Figure 70 Creating a Communication Link Step 3 234 Figure 71 Task Configuration 236 Figure 72 Changing Task Names 1 237 Figure 73 Call up to Add to the Program Module 238 Figure 74 Cyclic Task 239 Figure 75 Freewheeling Task 240 Figure 76 Debugging Case 1 241 Figure 77 ...

Page 400: ...ess Image 284 Figure 107 Flag Area 285 Figure 108 State Diagram STANDARD_WATCHDOG Operation Mode 295 Figure 109 State Diagram ALTERNATIVE_WATCHDOG Operation Mode 296 Figure 110 State Diagram Switchover Operation Mode 297 Figure 111 MODBUS Address Overview 306 Figure 112 State Diagram ADVANCED_WATCHDOG Operation Mode 309 Figure 113 State Diagram SIMPLE_WATCHDOG Operation Mode 310 Figure 114 State D...

Page 401: ...ical Data System Data 49 Table 21 Technical Data Power Supply 49 Table 22 Technical Data Clock 50 Table 23 Technical Data Programming 50 Table 24 Technical Data Internal Data Bus 50 Table 25 Technical Data ETHERNET 51 Table 26 Technical Data Serial Interface 51 Table 27 Technical Data Mobile Radio Modem 51 Table 28 Technical Data Field Wiring 51 Table 29 Technical Data Power Jumper Contacts 52 Tab...

Page 402: ...le 61 WBM Configuration of User Filter Page User Filter n Group 121 Table 62 WBM Configuration of User Filter Page Add New User Filter Group 122 Table 63 WBM Configuration of Time and Date Page Date on Device Group 123 Table 64 WBM Configuration of Time and Date Page Time on Device Group 123 Table 65 WBM Configuration of Time and Date Page Time Zone Group 124 Table 66 WBM Configuration of Time and...

Page 403: ...SNMP Configuration Group 149 Table 94 WBM Configuration of SNMP v1 v2c Parameters Page SNMP v1 v2c Manager Configuration Group 150 Table 95 WBM Configuration of SNMP v1 v2c Parameters Page Actually Configured Trap Receivers Group 150 Table 96 WBM Configuration of SNMP v1 v2c Parameters Page Trap Receiver n Group s 151 Table 97 WBM Configuration of SNMP v1 v2c Parameters Page Add New Trap Receiver ...

Page 404: ...me General Configuration Submenu 172 Table 127 PLC Runtime General Configuration PLC Runtime Version Submenu 173 Table 128 PLC Runtime General Configuration Home Dir On SD Card Submenu 173 Table 129 PLC Runtime WebVisu Submenu 174 Table 130 Networking Menu 175 Table 131 Networking Host Domain Name Submenu 175 Table 132 Networking Hostname Submenu 176 Table 133 Networking Host Domain Name Domain Na...

Page 405: ...01 Table 170 Ports and Services HTTPS Submenu 202 Table 171 Ports and Services NTP Submenu 202 Table 172 Ports and Services SSH Submenu 203 Table 173 Ports and Services TFTP Submenu 203 Table 174 Ports and Services DHCPD Submenu 204 Table 175 Ports and Services DHCPD Xn Submenu 204 Table 176 Ports and Services DNS Submenu 205 Table 177 Ports and Services IOCHECK PORT Submenu 206 Table 178 Ports an...

Page 406: ...Registers 292 Table 211 Watchdog Commands 298 Table 212 Watchdog Status 299 Table 213 Watchdog Configuration 300 Table 214 Watchdog Operation Modes 301 Table 215 Diagnostics for the Error Server 303 Table 216 WAGO MODBUS Registers 307 Table 217 Watchdog Commands 311 Table 218 Watchdog Status 312 Table 219 Watchdog Configuration 313 Table 220 Legend for Figure Power Supply Indicating Elements 318 T...

Page 407: ...odules 348 Table 252 2 Channel Digital Input Modules with Diagnostics and Input Process Data 349 Table 253 2 Channel Digital Input Modules with Diagnostics and Input Process Data 75x 506 349 Table 254 4 Channel Digital Output Modules 350 Table 255 4 Channel Digital Output Modules with Diagnostics and Input Process Data 350 Table 256 8 Channel Digital Output Module 350 Table 257 8 Channel Digital O...

Page 408: ...50 610 611 373 Table 292 Binary Space Module 750 622 with Behavior Like 2 Channel Digital Input 373 Table 293 CODESYS System Libraries 374 Table 294 Possible Macros for File Access 376 Table 295 Possible Macros for File Access 377 Table 296 Input Variable DEVICENUMBER 378 Table 297 Description of the Configuration Scripts for Information 379 Table 298 Description of the Configuration Scripts for C...

Page 409: ...WAGO I O SYSTEM 750 409 750 8207 PFC200 CS 2ETH RS 3G Manual Draft version 1 2 1 from 2017 09 13 valid from FW Version 02 06 20 09 ...

Page 410: ...WAGO Kontakttechnik GmbH Co KG Postfach 2880 32385 Minden Hansastraße 27 32423 Minden Phone 0571 887 0 Fax 0571 887 169 E Mail info wago com Internet http www wago com ...