Siemens SIMATIC RF650R, Configuration Manual

Page 1: ...dent RFID systems SIMATIC RF650R RF680R RF685R Configuration Manual 03 2018 C79000 G8976 C386 06 Introduction 1 Security recommendations 2 Description 3 Commissioning 4 Configuration via STEP 7 PROFINET device 5 Configuring with Studio 5000 Logix Designer 6 Configuring with the WBM 7 Programming via SIMATIC controller 8 Programming via Rockwell controller 9 Programming via XML interface 10 Program...

Page 2: ...only by personnel qualified for the specific task in accordance with the relevant documentation in particular its warning notices and safety instructions Qualified personnel are those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the following WARNING Siemens pr...

Page 3: ...STEP 7 project Basic Professional 35 5 3 Overview of the configurable properties 36 6 Configuring with Studio 5000 Logix Designer 39 6 1 Configuring with Studio 5000 Logix Designer 39 6 2 Linking readers into Studio 5000 Logix Designer 39 6 3 Creating a Studio 5000 Logix Designer project 40 7 Configuring with the WBM 41 7 1 Starting WBM 41 7 2 The WBM 43 7 3 The menu items of the WBM 48 7 3 1 The ...

Page 4: ...Upload _Download 123 8 5 2 2 Inventory 125 8 5 2 3 Read_EPC_Mem 129 8 5 2 4 Read_TID 130 8 5 2 5 Set_Param 131 8 5 2 6 Write_EPC_ID 134 8 5 2 7 Write_EPC_Mem 135 8 5 2 8 AdvancedCMD 136 8 6 Programming the Ident profile 137 8 6 1 Structure of the Ident profile 137 8 6 2 Overview of the commands 139 8 6 3 Command structure 140 8 6 4 Commands 142 8 6 5 Chaining 145 8 6 6 Command repetition 148 8 7 D...

Page 5: ...10 1 Functionality of the XML interface 185 10 2 Demo application 187 10 2 1 Structure of the demo application 187 10 2 2 User interface of the demo application 188 10 2 3 Working with the demo application 190 10 3 XML commands 191 10 3 1 Connections 192 10 3 1 1 hostGreetings 193 10 3 1 2 hostGoodbye 194 10 3 1 3 heartBeat 195 10 3 1 4 setIPConfig 196 10 3 1 5 getIPConfig 197 10 3 2 Reader settin...

Page 6: ...e 277 12 Service and maintenance 281 12 1 Diagnostics 281 12 1 1 Diagnostics via the LED displays 282 12 1 2 Diagnostics via LED display elements 284 12 1 3 Diagnostics via SNMP 285 12 1 4 Diagnostics using the WBM 285 12 1 5 Diagnostics using the TIA Portal STEP 7 Basic Professional 286 12 1 6 Diagnostics using Studio 5000 Logix Designer 288 12 2 Error messages 288 12 2 1 How the LED status displ...

Page 7: ...321 A 2 3 Filtering out transponders detected due to overshoot 323 A 2 4 Filtering out transponders using the Black list 325 A 3 Command and acknowledgement frames 327 A 3 1 General structure of the adapted commend frame 327 A 3 2 READER STATUS or DEV STATUS 328 A 3 3 INVENTORY 329 A 3 4 PHYSICAL READ 330 A 3 5 PHYSICAL WRITE 331 A 3 6 WRITE ID 332 A 3 7 KILL TAG 333 A 3 8 LOCK TAG BANK 334 A 3 9 ...

Page 8: ...Table of contents SIMATIC RF650R RF680R RF685R 8 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 9: ...tions and possible applications of the RF650R RF680R and RF685R readers in the SIMATIC RF600 System Manual https support industry siemens com cs ww en view 22437600 You will find more information on operating the readers via communications modules PROFIBUS operation in the manuals of the relevant communications module https support industry siemens com cs ww en ps 15105 man You will find further i...

Page 10: ...rd 10 2015 Revised and expanded edition 01 2016 Revised and expanded edition 10 2016 Revised and expanded edition Expansion of the documentation by the following New functions of the WBM V3 0 Functions for Rockwell controllers OPC UA interface Ethernet IP interface 02 2018 Revised and expanded edition Expansion of the documentation by the following New functions of WBM V3 1 Abbreviations and namin...

Page 11: ... Keep the software up to date Keep yourself informed regularly about safety updates for the product You can find additional information about this at the following link http www siemens com industrialsecurity Activate only protocols that you actually need to use the device Limit access to the device using a firewall or rules in an access control list ACL The configuration files are available in XM...

Page 12: ... If protocols support both certificates and keys you should favor certificates Firmware encryption The firmware itself is signed and encrypted This ensures that only authentic firmware can be downloaded to the device Secure non secure protocols Check whether it is necessary to use SNMPv1 SNMPv1 is classified as non secure Make use of the possibility to prevent write access The product offers corre...

Page 13: ...ble Authentication Encryption SSH OEM only TCP 22 Open Yes Yes XML service TCP 10001 Open No No DHCP UDP 68 Closed No No PROFINET UDP 34964 UDP 49152 65535 Open No No HTTP TCP 80 Open No No HTTPS TCP 443 Closed Yes Yes NTP UDP 123 Closed No No SNMP UDP 161 Closed No No OPC UA TCP 4840 Open Yes simple when config ured No Ethernet IP TCP 44818 UDP 44818 UDP 2222 Open No No Explanation of the table A...

Page 14: ...rise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures e g firewalls and or network segmentation are in place Additionally Siemens guidance on appropriate security measures should be taken into account For additional information on industrial security measures that may be implemented please visit Link http www siemens com indust...

Page 15: ...tions even under difficult radio conditions The RF680R and RF685R readers are either integrated without problems in SIMATIC S7 automation systems via an integrated PROFINET connector or via the RS 422 interface and the ASM 456 communications module via PROFIBUS Suitable programming blocks are available The connection to PC environments and Rockwell controllers is via Ethernet using TCP IP and the ...

Page 16: ...Industrial Ethernet RJ 45 2 x Industrial Ethernet M12 Transmission speed max 100 Mbps 100 Mbps Degree of protection IP30 IP65 Configura tion diagnostics options WBM browser WBM browser STEP 7 S7 Interfaces to PC controller XML interface TCP IP with XML pro tocol XML interface SIMATIC interface TCP IP with XML protocol OPC UA Ethernet IP or PROFINET capability 1 The maximum transmit power is restri...

Page 17: ...t RF680R RF685R certificates https support industry siemens com cs ww en ps 15088 cert Integration The following figures show examples of some of the of the integration options of the readers Note that in all examples the connection of the readers RF680R and RF685R can be via a SIMATIC controller both via Industrial Ethernet PROFINET and via PROFIBUS Figure 3 1 RF650R reader in an IT environment F...

Page 18: ...IT environment without external antenna Figure 3 5 RF680R reader in an automation environment PROFINET with use of third party controller All 3 readers can be integrated in an IT environment XML OPC UA The RF68xR readers can be integrated both in an IT and in an automation environment S7 The RF685R reader can also be operated without external antennas ...

Page 19: ...amming is performed from the point of view of a Rockwell user If you operate the RF650R RF680R and RF685R readers in an XML environment they are configured and programmed from the perspective of an XML user If you operate the RF650R RF680R and RF685R readers in an OPC UA environment they are configured and programmed from the perspective of an OPC UA user If you want to adapt the readers to your r...

Page 20: ...onnect the hardware You will find information on this in the section Connect the hardware Page 25 2 Assign the IP address device name You will find information on this in the section Assigning the IP address device name with the PST Page 29 3 Configure the reader You will find information on this in the section Configuring with the WBM Page 41 4 Program reader commands You will find information on...

Page 21: ... on the reader for at least two days even without a power supply If the reader is disconnected from the power supply for a longer period the time will need to be reset This can be done manually via the WBM using NTP or in a program Later in the document these symbols will help your orientation and will show you whether the section is of interest to you or not Only the sections with user specific c...

Page 22: ...Description 3 2 User specific procedures SIMATIC RF650R RF680R RF685R 22 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 23: ...ing devices or opening the device General notes WARNING Safety extra low voltage The equipment is designed for operation with Safety Extra Low Voltage SELV by a Limited Power Source LPS This does not apply to 100 V 240 V devices This means that only SELV LPS complying with IEC 60950 1 EN 60950 1 VDE 0805 1 must be connected to the power supply terminals The power supply unit for the equipment powe...

Page 24: ...ied via extensive 24 V supply lines or networks interference by strong electromagnetic pulses on the supply lines is possible e g from lightning or the switching of large loads The connector for the 24 VDC external power supply is not protected against strong electromagnetic pulses Make sure that any cables liable to lightning strikes are fitted with suitable overvoltage protection Repairs WARNING...

Page 25: ...he controller using an Ethernet cable For the Ethernet connection to the RF650R reader use a connecting cable with an RJ 45 plug at both ends For the Ethernet connection of the RF680R RF685R reader use a connecting cable with an M12 plug 4 pin 3 If necessary connect the reader to one or more external antennas 4 Connect the reader to the power supply using the connecting cable The reader is ready f...

Page 26: ...ces and antenna connectors of the readers Picture Description Interfaces of the RF680R RF685R readers Digital I O interface M12 12 pin Power supply 24 VDC and RS 422 M12 8 pin Ethernet interface M12 4 pin Ethernet interface M12 4 pin Interfaces of the RF650R reader Digital I O interface M12 12 pin Power supply 24 VDC M12 8 pin Ethernet interface RJ 45 8 pin Antenna connectors of the RF650R RF680R ...

Page 27: ...685R readers can be set up as a star bus or ring topology Figure 4 1 Sample configuration star topology Figure 4 2 Sample configuration bus topology With a bus topology remember that if the communications connection of a reader to the controller is interrupted the communications connection to all downstream readers is also interrupted Figure 4 3 Sample configuration MRP ring topology ...

Page 28: ...ort of option 12 When the address is assigned via DHCP the option 12 hostname is also supported The host name can be taken from the SNMP variable sysName The variable can be written using SNMP tools Setup of an MRP ring topology To set up an MRP ring topology with media redundancy you must join both free ends of a line network topology in the same device The closing of the line topology to form a ...

Page 29: ...communications module an IP address needs to be assigned only for configuration and diagnostics purposes Operating RF680R RF685R readers as a Rockwell user in an automation environment The unique assignment is made using the IP address The RF650R reader ships with the IP address 192 168 0 254 set in the factory In the factory settings the RF680R and RF685R readers are set to DHCP With the aid of t...

Page 30: ...er in the IP address input box 7 Enter the subnet mask of your network in the Subnet mask input box 8 Click on Assign Name to assign a unique device name to the reader 9 Click the Load symbol to transfer the settings to the reader 10 Confirm the next dialog box with Yes Note Waiting time Wait until the IP address the device name has been updated To display the change you need to activate the searc...

Page 31: ... not support PROFINET and can therefore only be assigned a unique IP address using the Primary Setup Tool and the WBM Requirement STEP 7 is installed the RF680R RF685R readers are linked into the TIA Portal and the RF680R RF685R reader is connected and has started up You will find further information on linking the readers into the TIA Portal in the section Linking readers into STEP 7 Basic Profes...

Page 32: ...nnection type in the Online access in the Type of the PG PC interface drop down list 10 In the PG PC interface drop down list in the Online access area select the network adapter via which the reader is connected to the PC 11 Click the Refresh button to display all reachable nodes in the network 12 Select the required node from the list 13 Now click the Assign name button to assign the PROFINET de...

Page 33: ... reader and click the entry Online Diagnostics in the folder of the selected device 3 Select the option Functions Assign name 4 Click the Flash LED button The two LEDs on the selected reader flash 5 Click the Flash LED button again to stop the flashing 4 4 3 Assigning an IP address via DHCP This section is intended for all user type but primarily for Rockwell users RF680R RF685R In Rockwell contro...

Page 34: ... the input box Subnet Mask 4 Enter the gateway of the server in the input box Gateway 5 Confirm your entry with OK 6 Double click on an entry in the Request History area The input screen New Entry opens 7 In the input box IP Address enter a new unique IP address 8 Confirm your entry with OK The entry was assigned the IP address in the Request History area The entry is also displayed in the Relatio...

Page 35: ... the RF680R RF685R readers are only included in the TIA Portal as of STEP 7 Basic Professional version V14 With older versions the readers must later be linked into TIA using an HSP or GSDML file Using the GSDML file you can also link the reader into STEP 7 Classic or third party systems You can find the current GSDML file on the reader and in the Siemens Industry Online Support https support indu...

Page 36: ...tree insert a SIMATIC controller in the project using the Add new device menu command The device view opens and the SIMATIC controller is displayed 5 Drag the required reader type from the hardware catalog to the project Detecting Monitoring Ident systems PROFINET SIMATIC RF600 6 Change to the network view and connect the reader to the SIMATIC controller Note Downloading the project If you have al...

Page 37: ...on between the CPU and reader is established or the reader was assigned the IP address stored in the project This means that the device name has been assigned and the TIA configuration must be loaded on the SIMATIC controller Module parameters Enabling disabling read point related diagnostics messages Configuration management Loading configuration data on the reader from the STEP 7 project Saving ...

Page 38: ...Configuration via STEP 7 PROFINET device 5 3 Overview of the configurable properties SIMATIC RF650R RF680R RF685R 38 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 39: ... 5000 Logix Designer V21 to V28 6 2 Linking readers into Studio 5000 Logix Designer The readers RF680R RF685R must be linked into the Studio 5000 Logix Designer via an EDS file You will find the current EDS file on the reader You will find further information on downloading the EDS file in the section The System menu item Page 106 Procedure Follow the steps below to link the EDS file of the RF680R...

Page 40: ... Studio 5000 Logix Designer was started Procedure Follow the steps below to create a new project 1 Start the Studio 5000 Logix Designer 2 Create a new project Select the controller you are using and configure the project properties 3 Change to the Project view 4 Right click on Ethernet in the Controller Organizer I O Configuration area 5 In the shortcut menu select the menu command New Module The ...

Page 41: ...d ready for operation R S LED is lit or flashing green and the relevant reader has been assigned an IP address To achieve a good workflow with the WBM we recommend that you use a PC that meets the following minimum requirements CPU DualCore with 3 GHz RAM 2 GB You can start the WBM with the following Web browsers Microsoft Internet Explorer V9 or higher Microsoft Edge Mozilla Firefox V48 or higher...

Page 42: ...the following points Make sure that all cables are correctly connected Make sure that the reader has started up R S LED lit flashing green Check the IP addresses of the PC and the reader and the subnet mask Both IP addresses must be in the same subnet you will find more information on this in the section Assign the IP address device name Page 29 Make sure that the connection is not blocked by a fi...

Page 43: ...at you enable the user management and create new user profiles after the first login For further information on logging in to WBM and creating deleting user profiles refer to the section The User management menu item Page 102 NOTICE Access to the reader Remember that simultaneous access to a reader using two browsers is possible but not recommended If changes are made when two browsers are accessi...

Page 44: ... C79000 G8976 C386 06 Layout of the WBM After successful connection establishment to the reader the start window of the WBM appears The start window of the WBM is divided into 4 areas Toolbar Status bar Login and menu tree Main window Message area Information bar Figure 7 2 Start window of the WBM ...

Page 45: ...nfiguration as With this button you can save the configuration data set in the WBM on the PC Key combination Ctrl S Load configuration from PC With this button you can load the configuration data stored on the PC in the WBM Remember that this data is only loaded in the WBM To transfer the data to the read er you also need to click the Transfer configuration to reader button Key combination Ctrl O ...

Page 46: ... disabling categories of log events Read points Defining read points and assigning antennas Specifying antenna parameters Setting algorithms to improve reading quality Assigning tag fields Assigning filters Setting triggers Tag fields Creating and editing tag fields Filters Creating and editing filters Digital outputs Setting the behavior of the digital outputs Communication Making communications ...

Page 47: ...ents of the selected menu items Here you can configure the various menu dependent parameters Note Entering values in text boxes Apart from manual entry of values you can also change values with the following buttons Arrow up down The value is increased or decreased by one increment PgUp PgDn The value is increased or decreased by ten increments Home End The value is set to the minimum or maximum v...

Page 48: ...tart page menu item Device specific information The first area contains device specific information The Device type MLFB Hardware and Serial number boxes are specified in the factory The content of the Firmware and Firmware version boxes depends on the firmware stored on the reader Using the Update firmware link you jump to the System menu item in which you can update firmware The Configuration ID...

Page 49: ...dress you jump to the System menu item inn which you can also reassign the IP address Reader clock With the Synchronize with PC button you can synchronize the reader clock with the time in your operating system Note The reader time always corresponds to UTC time Note that the time of day of the reader clock corresponds to UTC time and cannot be adapted to time zones By clicking the button the loca...

Page 50: ...he reader will use The Channels area is adapted depending on the radio profile selected The radio profiles depend on the country or region To ensure that the reader keeps to the local radio regulations select the country profile belonging to your country You can find information on which country profile applies to you in the List of the country profiles approvals Page 340 Channels The Channels are...

Page 51: ...fied This increases the probability that all transponders will be identified Modulation scheme Specifies the data transfer rate radio profile and coding Tx Data transfer rate from reader to transponder Rx Data transfer rate from transponder to reader Miller FM0 Coding of the transponder signal Miller is used with the Dense Reader Mode The Dense Reader Mode allows the operation of neighboring reade...

Page 52: ...lic antenna test does not work if the cable attenuation is 4 dB Detailed error codes LED Enabling disabling the detailed error codes This area exists only with the RF680R RF685R readers Error messages are indicated by red flashing status LEDs RF680R RF685R and the red flashing ER LED If the Detailed error codes LED check box is enabled a separate LED pattern is assigned to every error in the LED s...

Page 53: ...Commands of the user application EVENTS Recording of all tag events e g glimpsed Additional information Return value Return values for the commands of the user application and for the written or read transponder data Call parameters Call parameters for the commands of the user application Extended acquired values Additional data obtained when the transponder was identified antenna polari zation ch...

Page 54: ...mple of intermissions Note Delay due to intermissions Remember that intermissions delay the other algorithms 7 3 3 The Settings Read points menu item In the Settings Read points menu up to four logical read points can be defined depending on the reader type A logical read point is for example an incoming goods gate in logistics or a machine infeed on a production line A read point on the other han...

Page 55: ...ss to multiple read points leads to delays The length of the delay depends on the time required for the command and the number of commands The index number beside the icon in the Read points tab shows how many antennas are assigned to the particular read point Figure 7 6 The Settings Read points menu item Read point name In the input box you can assign a name to the read point e g incoming goods g...

Page 56: ...ally The actual radiated power emitted may be lower due to other components and or parameters Value range 5 33 36 dBm 3 2000 4000 mW Increment 0 25 dBm Gain The antenna gain affects the actual radiated power The gain of an antenna describes how much of the power fed in can be con verted in the air and depends on the antenna being used Here you can either select an antenna based on its name or ente...

Page 57: ...r This attenuation applies both to transponder responses as well as to signals of neighboring readers Adapting this parameter helps to reduce disruptions caused by neighboring readers and transponder populations Value range 0 31 75 dB Increment 0 25 dB Polarization The polarization indicates the alignment of the waves of the antenna and de pends on the antenna being used Most antennas have an unch...

Page 58: ...th metallic conveyor technology loading doors with metal ramps The objects to be identified are on a metal surface With the algorithms you can optimize the write read settings to ensure reliable communication between reader and transponder If none of these conditions applies the use of algorithms is usually unnecessary Note Algorithms for trained users Note that the following algorithms were desig...

Page 59: ...e 1 the transponder changes to the status observed during the first recognition The Glimpsed event as well as the Observed event are generated in the process Lost Count The value specifies how often a transponder reported as reliably identified observed may no longer identified by cyclic inventories before it is reported as being not identi fied lost The value 0 indicates that the lost event is ge...

Page 60: ...rite access Read access is performed with the basic power without an initial boost If a value is entered only for Boost and not for Boost max only write access with increased power are performed Boost dB The value specifies by how many dB the radiated power is increased in each step Boost Max dB The value specifies by how many dB the radiated power can be increased as maximum Command Retry The eff...

Page 61: ... mode in PROFINET operation With read write commands the algorithm is not start ed The step size of the individual increases is calculated as follows Boost max Inventories Example Boost max 5 dB Inventories 10 Step size 0 5 dB Expected Tags The value specifies the minimum number of transponders that should be identified per read point in every inventory If this value is not reached the radiated po...

Page 62: ...is algorithm is that transponders that have already been pro cessed are hidden This function is particularly useful at read points at which only one individual transponder or a few transponders should be identified but the antenna field is larger than the distance between the neighboring tran sponders With suitable XML or control commands these transponders can be included in the black list and th...

Page 63: ...u items of the WBM SIMATIC RF650R RF680R RF685R Configuration Manual 03 2018 C79000 G8976 C386 06 63 Sequence of the algorithms The following table figure shows an overview of the algorithms over time Figure 7 7 Sequence of the algorithms ...

Page 64: ...he button to remove tag fields already assigned to the read point Edit tag field Click the button to edit existing tag fields The button acts as a link to the Settings Tag fields menu item You will find more information on the tag fields in the section The Settings Tag fields menu item Page 66 Filters In the Filters area you can assign filters to the read point The data required for the comparison...

Page 65: ...ot specify a trigger you can trigger inventories using the corresponding XML commands triggerSource or SIMATIC blocks Inventory Read_xxx or XML commands Scan Note that configuring triggers is unnecessary for operation using S7 Click the button to specify up to two conditions Click the button to remove already specified conditions Table 7 9 Description of the trigger conditions Condition Descriptio...

Page 66: ... assigned to a read point the data of every reliably identified transponder is read out automatically This data is then signaled with each observed TagEventReport via the XML interface to the user application This page is divided into 3 areas Tag fields Tag field properties Transponder memory configuration Figure 7 8 The Settings Tag fields menu item Tag fields The Tag fields area contains a list ...

Page 67: ... or written starting at the start address Value range 1 1024 bytes Transponder memory configuration The Transponder memory configuration area contains a graphic to illustrate the memory configuration and the memory areas of a UHF transponder Example The production date of a product is stored on a transponder in the USER memory area memory bank 3 The production date is located at address 10 and is ...

Page 68: ...tran sponder EPC Contains the EPC ID data the protocol information Protocol Control Word and the CRC data of the transponder You can write to the EPC memory area RESERVED Contains the access and kill password 7 3 5 The Settings Filters menu item In the Settings Filters menu item you can create and edit filters By using filters and depending on the filter criteria you can separate out specific tran...

Page 69: ...ist for selecting the memory bank in which the memory area is located Start address Address starting at which the filter will be checked Value range 0 65535 bytes Length Number of bytes to be checked starting at the start address The value specified here affects the length of the input boxes Mask and Value Value range 1 1024 bytes Criterion Specifies which value the checked positions must contain ...

Page 70: ...nders that will not be processed any further For example in environments with different product types you can use filters to filter out the product types that are unimportant for the application or only identify the relevant product types This is only possible if the information in the memory area of the transponder has been processed accordingly Example scenario A forklift truck takes a pallet wi...

Page 71: ...herefore need to select the 8th byte 5 Length Enter 1 in the input box as the number of bytes Each byte contains two positions of the EPC ID Since only one position is relevant in this example you need to mask out the second position using the mask 6 Criterion Enter 03 in the input box as the criterion Since only the second position is relevant in this example the first position of the criterion c...

Page 72: ...on time of the digital outputs depends on the reader load Table 7 13 Description of the status properties Boxes Description Inactivity Status that the output adopts following device startup Reset time If the reset time is set to a value 0 the output automatically returns to the inactivity status when the reset time has elapsed A value of 0 means that the status of the output is not influenced by t...

Page 73: ... to the status specified here Transponder identified If a transponder is identified the output is changed to the state specified here Input change If the state at the selected digital input changes the output is set to the state specified here Output change If the state at the selected digital output changes the output is set to the state specified here PLC output change If the state at the select...

Page 74: ...rfaces XML OPC UA In the Network interfaces tab you can enable disable the network ports RF680R RF685R SNMP and NTP protocols In the XML tab you can specify which data is sent via the XML interface In the OPC UA tab you can enable and edit the OPC UA server function of the readers The Network interfaces tab The Network interfaces tab contains the following area Network ports SNMP NTP Figure 7 13 T...

Page 75: ...ng mode With port statistics Enable the LLDP check box to activate the communications log LLDP is a protocol for checking the neighborhood SNMP In the SNMP area you can enable the network protocol SNMP is a protocol for monitoring network components When supplied from the factory this setting is disabled and it needs to be enabled here before using SNMP for the first time Table 7 15 Description of...

Page 76: ...e first time Table 7 16 Description of the NTP properties Property Description IP address of the NTP server x Input box for entering the address of the NTP master server from which the various connected readers synchronize their time Up to four NTP servers can be specified to compensate possible server failures Update interval in seconds Input box for specifying the intervals at which the readers ...

Page 77: ... reader by the user application is confirmed with a reply frame If no reply frame is received by the reader within 10 seconds it sends the report to the application again Reports that are not transferred are buffered on the reader With this function you can make sure that no frames from the reader are lost even if the connection is unstable e g WLAN connection aborts occasionally This function als...

Page 78: ...f the XML commands reply frames e g with writeTagID Table 7 17 Description of the event data Tag events Tag commands Data Description event Event type status description of the transponder Glimpsed Observed Lost utcTime Time of the event antennaName Name of the antenna that scanned the transponder rSSI Signal strength of the transponder rSSIMin Minimum signal strength of the transponder rSSIMax Ma...

Page 79: ...the reader to report the RSSI events events that occur to the XML API interface the Enable check box must be selected The following additional data of the RSSI events can be configured Table 7 18 Description of the event data RSSI events Data Description utcTime Time of the event antennaName Name of the antenna that identified the transponder rSSI Signal strength of the transponder power Radiated ...

Page 80: ...F680R RF685R 80 Configuration Manual 03 2018 C79000 G8976 C386 06 The OPC UA tab The OPC UA tab is divided into 4 areas Basic settings Security settings OPC UA client certificates Import OPC UA server certificate Figure 7 15 The Settings Communication menu item OPC UA tab ...

Page 81: ... is used the standard TCP port for the OPC UA binary protocol Minimum sampling interval Minimum sampling interval at which the reader samples the process data The sampling interval is limited to a minimum value of 10 milliseconds to reserve adequate time for other processes Range of values 10 50 ms Default setting 50 ms Minimum supported publishing interval Minimum publishing interval supported by...

Page 82: ...sign and encrypt Depending on the settings on the communications partner client the reader selects the method with the highest possible security Sign The reader only allows communication with signed frames Sign and encrypt The reader only allows communication with signed and encrypted frames Allow anonymous access If the check box is selected the reader allows anonymous users access to the data of...

Page 83: ... the reader must at least have stored a self signed certificate of the partner If the partner certificate was issued by several CAs Certification Authori ties all CAs must be stored in the certificate store of the reader OPC UA client certificates The OPC UA client certificates area contains a list of all existing user certificates To display details of a certificate select the required certificat...

Page 84: ...e topic of certificates Note Recommendations for secure use of OPC UA It is recommended that you use the highest security levels and disable anonymous access 7 3 8 The Settings Adjust antenna menu item In the Settings Adjust antenna menu item you can optimize the antenna alignment This page is divided into 3 areas Basic settings Transponder list RSSI display Figure 7 16 The Settings Adjust antenna...

Page 85: ...tained are displayed Any existing measured values from a previous measurement are deleted By clicking the button the measurement is stopped Transponder list After you have started measuring the RSSI values all the transponders identified by the reader are listed in the table Select the EPC ID in ASCII format check box to display the EPC IDs of the transponders in ASCII code Table 7 21 Displayed pr...

Page 86: ... numeric RSSI value This allows you to read the current RSSI value even from greater distances so that you can find the optimum alignment for the highest RSSI value quickly and simply by varying the antenna position The RSSI value is also displayed by the status LEDs of the RF680R RF685R readers and by the PRE LED of the RF650R reader Low RSSI values are shown in red medium RSSI values in yellow a...

Page 87: ...ation power Note Do not optimize the activation power during operation We recommend that you do not optimize the activation power during operation since this can disturb operation Select the required read point and antenna enter the required measuring range values and start the measurement Select a transponder from the list Transfer the activation power to the Radiated power input box of the Setti...

Page 88: ...an influence the measurement The parameters contained in this area are intended for trained users For untrained users we recommend using the default settings Power from to Specifies the range of values dBm value within which the measurement is made The measurement starts at the from value and ends automatically as soon as the to value is reached Increment Specifies the dB value by which the radiat...

Page 89: ...ith which the transponder was detected Polarization Polarization of the antenna Min power Minimum radiated power dBm of the antenna with which the transponder was identified Power Radiated power dBm of the antenna with which the transponder was last identified RSSI Last measured RSSI value of the transponder RSSI min Minimum RSSI value of the transponder Calculated over all successful inven tories...

Page 90: ...hange RSSI curve types Measured values are joined together either with a direct line or using horizon tal and vertical lines Change over the background color between white and black Make RSSI graph moveable fixed The RSSI graph is either fixed or the zero point of the graph can be moved holding down the left mouse button Highlight RSSI measured values Display measured values with thin or thick poi...

Page 91: ...tem Basic settings In this area you can select the read point and the antenna whose behavior you want to analyze Depending on the reader being used or the connected antenna you can also select the antenna polarization With the Start Stop diagnostics Pause and Delete display buttons you can control the diagnostics By clicking the button a new diagnostics phase is started Any existing measured value...

Page 92: ...vel systems because the continuous triggers are given higher priority Changeover during normal operation Trigger Application To monitor the behavior of the RFID system during operation you can trigger individual reads manually Trigger Application The requirement for this is that the reads are controlled in normal operation by a higher level system e g controller IT system or by a digital input Not...

Page 93: ...ed in the graph Up to 10 transponders can be selected The selected transponders are shown in the RSSI graph as continuous lines Up to 10 further transponders from the list are displayed as dots Filter status of the transponders Transponder was identified and returned to the user application Transponder was identified but filtered out Place the mouse pointer over the symbol to find out which filter...

Page 94: ...aph can be moved holding down the left mouse button Highlight RSSI measured values Display measured values with thin or thick points In the Recording time input box you can specify the duration of the recording shown in the graph With the aid of the gray shift bar you can move the recording time of the draft forwards or backwards The current RSSI value of the last selected transponder or the numbe...

Page 95: ...enu item Settings General in the Log settings area This menu item documents the actions performed by the reader The entries contain the following properties Table 7 26 Displayed properties of the log messages Property Description Date time Time stamp when the entry was made by the reader Note that the time stamp is generated by the reader clock UTC time This time is compared with the time zone set...

Page 96: ...e reader With a large number of log entries in the history it may take several minutes before these are displayed Service support by SIEMENS specialist personnel By changing the address line in the browser and additional menu item for service purposes can be called To do this change the value of the page to 11 http 192 168 0 55 Default mwsl page 11 Apart from displaying internal instructions via t...

Page 97: ...cs Messages menu item All the error messages and warnings displayed in the log bar are automatically entered in the messages list The entries contain the following properties Table 7 27 Displayed properties of the messages Property Description No Chronological numbering of the messages Date time Time stamp of when the warning or error message occurred Menu Menu item that was selected when the mess...

Page 98: ...ntified from the read point that are currently located in the antenna field This page is divided into 7 areas Basic settings Identified transponders Selected transponder Write EPC ID Read write Lock Kill Figure 7 21 The Edit transponder menu item Basic settings In this area you can select the read point with which transponders will be processed Select the EPC ID in ASCII format check box to displa...

Page 99: ...e list to the input box This allows you to change existing IDs both quickly and simply Click the Write button to assign the new EPC ID to the transponder Read write In the Read write area you can read out and overwrite the memory areas You have the option of preassigning the memory area using the tag fields you have already created Using the parameters you can adapt the memory area manually Table ...

Page 100: ...y of the transponder Following a successful kill the transponder can no longer be identified by any RFID reader and is therefore no longer usable To destroy the transponder click the Execute button To destroy the transponder you need to enter the kill password in the Password input box Note that with the default kill password you cannot destroy a transponder To destroy a transponder with the kill ...

Page 101: ...written to in any of the statuses Table 7 30 Memory bank 0 kill access password Read write protection Permanent Description The associated password memory area can be read and written to in both the open and in the protected status The associated password memory area can be permanently read and written to in both the open and in the protected status and must not be protected The associated passwor...

Page 102: ...gure 7 23 The User management menu item User management on off Note First login to WBM via HTTPS The RF650R RF680R and RF685R readers ship with the following user profile pre installed in the factory User name admin Password admin Using the admin user profile you can create new user profiles and delete existing profiles NOTICE Security recommendation Enable user management After starting the WBM t...

Page 103: ... the User input box 2 Enter your password in the Password input box Figure 7 24 Login to WBM 3 Click the Log in button Result You are logged in to the WBM and can now set reader parameters The User management menu item In the User management menu item you can create delete and edit user profiles and change passwords This page is divided into 5 areas User profiles User properties Password Roles Use...

Page 104: ...the User name input box enter the name of the newly created user profile You require the user name and the password to log in to the WBM The user name cannot be edited later In the Name input box you can enter the name of the person or the name of the group that works with the user profile In the Description input box you can enter further information about the user profile Password Enter the pass...

Page 105: ...the changes and to create the new user profile Note Restrictions when transferring the configuration Note that as a user you can only transfer changes when the reader is in the Idle status As an administrator you can also transfer changes when the reader is in the Run status The following table provides you with an overview of the menu items that are restricted for the User role Table 7 31 Restric...

Page 106: ...u item you can update firmware reset the reader to the factory settings change the IP address of the reader load certificates on the reader and transfer control files to the PC This page is divided into 5 areas Firmware update Restore IP address Certificate Device description files Figure 7 26 The System menu item Firmware update In the Firmware update area you can update the firmware of the reade...

Page 107: ...ble sysName The variable can be written using SNMP tools Certificate In the Certificate area you can transfer certificate files pkcs 1 and certificate key files to the reader Remember that you first need to import the data into the reader before you can activate it Using the certificates you can integrate the reader in your specific security infrastructure Certificates are used to check the identi...

Page 108: ...Configuring with the WBM 7 3 The menu items of the WBM SIMATIC RF650R RF680R RF685R 108 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 109: ...can read out and write transponder data via the readers Note Programming and configuring the readers using STEP 7 for PROFIBUS operation You will find information on programming and configuring the communications module you are using for PROFIBUS operation in the manual of the relevant communications module To be able to configure Ident systems using STEP 7 Basic Professional you require suitable ...

Page 110: ..._Param Write_EPC_ID Write_EPC_Mem AdvancedCMD Advanced command set With the Ad vancedCmd block it is possible to access other commands from the Ident command set and to execute chained commands Ident profile Ident_Profile These blocks are available for experts to be able to include complex command structures in their own program sequence It is also pos sible to use repeat commands and chaining PLC...

Page 111: ...the project using the Add new device menu command The device view opens and the SIMATIC controller is displayed 3 Change to the network view 4 Drag the required RFID device from the hardware catalog to the project 5 Connect the RFID device to the SIMATIC controller 6 Open a program block e g Main OB1 7 Open the Instructions Optional packages tab on the right edge of the screen 8 Drag the required ...

Page 112: ...ortal help technology object SIMATIC Ident The method described below is aimed at users of an S7 300 400 controller with STEP 7 Basic Professional TIA Portal or STEP 7 Classic or an S7 1200 1500 controller with Ident library version V5 0 Before you can start parameter assignment of the blocks you first need to create a variable of the PLC data type IID_HW_CONNECT The Ident system or a channel of t...

Page 113: ...ata type Figure 8 2 Creating a data block 6 Specify the address data of the reader HW_ID Hardware identifier of the module with S7 1200 and S7 1500 CM_CHANNEL Selection of read point LADDR I O address of the module You can read out the values of the HW_ID and LADDR parameters in the device configuration in the properties of the reader Enter the parameter values you have read out in the Start value...

Page 114: ...HW_ID Figure 8 3 The Hardware identifier parameter 5 Transfer the values of LADDR and HW_ID to the PLC data type IID_HW_CONNECT of the reader for which you want to set parameters The IID_HW_CONNECT data type has now been created and addressed for a channel Repeat these steps for every other reader channel If you want to use a different channel of the reader set this using the CM_CHANNEL parameter ...

Page 115: ...ng the blocks Note Configuring IID_CMD_STRUCT If you work with the Ident profile or with the AdvancedCmd block you also need to create a further element with the data type IID_CMD_STRUCT Array 1 10 in the data block you have already created 8 4 General structure of the function blocks Structure of the blocks based on the sample block FB The following graphic shows an example of a block with input ...

Page 116: ... the blocks to ad dress the relevant channel reader Output parameters DONE BOOL The job was executed If the result is positive this parameter is set ERROR BOOL The job was ended with an error The error code is indicated in Sta tus BUSY BOOL The job is being executed STATUS DWORD Display of the error message if the ERROR bit was set PRESENCE BOOL This bit indicates the presence of a transponder The...

Page 117: ...E is set for one cycle Case Handling as in Case 1 however with error output As soon as ERROR is set the precise error code is available in the STATUS output ERROR and STATUS retain their values as long as EXECUTE is set or for one cycle if EXECUTE was reset before the block was ended Figure 8 5 General sequence when calling the blocks How the blocks work You can only ever send one command to the r...

Page 118: ...locks tab 2 Drag the required block from the block library tab to the program block 3 Enter the variable you created earlier in the HW_CONNECT input parameter The block is called and connected to the relevant channel Note Working with multiple channels If you work with several channels you must ensure that for each channel the block is called with a separate instance DB Note Working with the Ident...

Page 119: ...D and LEN_ID parameters Figure 8 6 Read block Table 8 3 Explanation of the Read block Parameter Data type Default values Description ADR_TAG DWord DW 16 0 Physical address on the transponder where the read starts LEN_DATA Word W 16 0 Length of the data to be read LEN_ID Byte B 16 0 Length of the EPC ID UID Default value 0x00 unspecified single tag access RF680R RF685R EPCID_UID Array 1 62 of Byte ...

Page 120: ... 7 Write block Table 8 4 Explanation of the Write block Parameter Data type Default values Description ADR_TAG DWord DW 16 0 Physical address on the transponder where the write starts LEN_DATA Word W 16 0 Length of the data to be written LEN_ID Byte B 16 0 Length of the EPC ID UID Default value 0x00 unspecified single tag access RF680R RF685R EPCID_UID Array 1 62 of Byte 0 Buffer for up to 62 byte...

Page 121: ...Reset_Reader block does not have any device specific parameters and is executed using the EXECUTE parameter With the Reset_Reader block you can interrupt any active Ident block at any time The blocks are then ended with DONE true and ERROR false Figure 8 8 Reset_Reader block 8 5 1 4 Reader_Status The Reader_Status block reads status information from the reader For the RF68xR reader there is only t...

Page 122: ...eated For Any other data types UDTs can also be created Results Table 8 6 ATTRIBUTE 0x89 IID_READER_STATUS_89_RF68xR data type Name Type Comment status_info BYTE SLG Status mode Subcommand hardware_version BYTE Version of hardware firmware_version ARRAY 1 4 of CHAR Version of firmware config ID DWORD Unix timestamp inventory_status WORD 0 inventory not active 1 inventory active 2 presence mode act...

Page 123: ... ID with a unique version identifier With the configuration ID when performing a Config_Upload you can check whether the configuration data read matches the configuration data stored on the controller The configuration data has the following structure Table 8 7 Structure of the configuration data Byte Name 0 Structure identifier 2 bytes 2 Length information 4 bytes Length of the version identifier...

Page 124: ...F685R reader we recom mend a memory size of 4 KB If you use advanced reader configurations filtering or want to change the configuration in the future without needing to adapt the memory size of DATA we recommend a memory size of 8 16 KB Note For Variant currently only an Array_of_Byte with a variable length can be created For Any other data types UDTs can also be created CONFIG_ID DWord Version i...

Page 125: ...ngth can be created For Any other data types UDTs can also be created 8 5 2 2 Inventory The Inventory block activates the taking of inventories There are four different modes that you can select with the ATTRIBUTE parameter At the start a certain duration number period of time number of inventories number of observed events or identified transponders is specified A distinction is made between the ...

Page 126: ...start Presence_Mode and 0x87 end Presence_Mode inventories can be taken permanently The presence of a transponder can then always be queried using PRESENCE without needing to start the block with EXECUTE No information about the identified transponders is returned when the command executes To obtain information about the identified transponders use one of the two calls listed above with time numbe...

Page 127: ...or one transponder DUR_UNIT Word W 16 0 Unit for DURATION 0x00 time ms 0x01 inventories 0x02 number of Observed events IDENT_DATA Any Variant 0 Data buffer for inventory data Note For Variant an Array_of_Byte with a variable length and the existing status UDTs can be created For Any other data types UDTs can also be created NUMBER_TAGS Int 0 Number of transponders in the anten na field LEN_DATA Wo...

Page 128: ... ARRAY 1 n of IID IN I 81 TAG_DATA 1 IID_IN_1_81 reserved BYTE ID_LEN BYTE EPC length EPC_ID ARRAY 1 62 of BYTE EPC ID tagPC WORD RSSI BYTE RSSI value MaxRSSI BYTE highest RSSI value 1 MinRSSI BYTE lowest RSSI value 1 channel BYTE channel 1 15_ETSI 1 53 FCC antenna BYTE antenna bit coded Bit 0 antenna 1 Bit 1 antenna 2 polarization BYTE polarizatuin of antenna 0 undefined 1 circular 2 vertical lin...

Page 129: ... 0 Length of the EPC memory to be read out 1 62 bytes LEN_ID Byte B 16 0 Length of the EPC ID UID Default value 0x00 unspecified single tag access RF680R RF685R EPCID_UID Array 1 62 of Byte 0 Buffer for up to 62 bytes EPC ID 8 bytes UID or 4 bytes handle ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID 8 byte UID is entered at the start of the buffer LEN_ID 8 4 byt...

Page 130: ...e Default values Description LEN_ID Byte B 16 0 Length of the EPC ID UID Default value 0x00 unspecified single tag access RF680R RF685R EPCID_UID Array 1 62 of Byte 0 Buffer for up to 62 bytes EPC ID 8 bytes UID or 4 bytes handle ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID 8 byte UID is entered at the start of the buffer LEN_ID 8 4 byte handle ID must be enter...

Page 131: ...85R during runtime e g the antenna power Note Settings saved only temporarily Note that the parameters in the Set_Param block are only stored temporarily If the power for the reader is interrupted the stored values are lost and must be set again Figure 8 15 Set_Param block Table 8 15 Explanation of the Set_Param block Parameter Data type Default values Description PARMID DWORD 0x00 Parameter ident...

Page 132: ...t with out a direct relationship with the radiated power 0x41325452 A2TR Antenna 02 RSSI threshold 0x41335452 A3TR Antenna 03 RSSI threshold 0x41345452 A4TR Antenna 04 RSSI threshold 0x5331444C S1DL Read point 01 RSSI delta Range of values 0 255 Difference for RSSI values Transponders with lower values relative to the transponder with the highest RSSI value are discarded Value without unit without...

Page 133: ...s Rx 62 5 Kbps Miller4 37 Tx 80 Kbps Rx 400 Kbps FM0 65 Tx 40 Kbps Rx 40 Kbps ISO 18000 62 0x57544348 WTCH Date and time Range of values 01 01 2000 00 00 a m 19 01 2038 3 14 a m 01 01 2000 01 00 a m 946684800 Date and time UTC Time in seconds since 01 01 1970 Setting of the internal reader clock the date and time are set 0x57544F44 WTOD Time Range of values 0 00 23 59 p m S7 time TOD UTC Milliseco...

Page 134: ...you execute the block only one transponder is located in the antenna field This ensures that the identification when writing the ID is unique If there is more than one transponder in the antenna field a negative response is returned Figure 8 16 Write_EPC_ID block Table 8 17 Explanation of the Write_EPC_ID block Parameter Data type Default values Description LEN_ID_NEW Byte W 16 0C Length of the cu...

Page 135: ...emory to be overwritten 1 62 bytes LEN_ID Byte B 16 0 Length of the EPC ID UID Default value 0x00 unspecified single tag access RF680R RF685R EPCID_UID Array 1 62 of Byte 0 Buffer for up to 62 bytes EPC ID 8 bytes UID or 4 bytes handle ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID 8 byte UID is entered at the start of the buffer LEN_ID 8 4 byte handle ID must be...

Page 136: ...d bit is not set in the last command in the chain You will find further information on the chained bit in the section Chaining Page 145 The entire command structure must be specified in the CMD input parameter You create the structure for the CMD parameter in a data block Figure 8 18 AdvancedCmd block Table 8 19 Explanation of the AdvancedCmd block Parameter Data type Default values Description CM...

Page 137: ...a simplified interface of the Ident profile If the functionality available with the blocks is not adequate for your application you can use the Ident profile as an alternative Using the Ident profile you can set complex command structures and work with command repetition The following graphic shows the Ident profile including the commands that can be implemented with it Note Ident profile for trai...

Page 138: ...re 8 19 The input parameters of the Ident profile Note Working with multiple channels If you work with several channels you must ensure that for each channel the block is called with a separate instance DB You will find more information on Ident profile in the manual Ident profile and Ident blocks https support industry siemens com cs ww en view 106368029 ...

Page 139: ...TATUS 74 t OFFSETBUFFER ATTRIBUTES Reads out the status of the reader INVENTORY 69 i OFFSETBUFFER ATTRIBUTES DURATION DUR_UNIT Requests a list of all currently accessible tran sponders within the antenna range WRITE ID 67 g OFFSETBUFFER EPCID_UID LEN_ID NEW LEN_ID PSWD RF680R RF685R Writes a new EPC ID to the transponder KILL TAG 6A j EPCID_UID LEN_ID PSWD RF680R RF685R The transponder is permanen...

Page 140: ...pare the table in the section Overview of the commands Page 139 OFFSETBUFFER INT 0 Relative offset within the received data buffer The pa rameter specifies the address within the memory area at which the first byte of the received data must be stored or the first byte of the data to be sent is expected All subsequent bytes must be stored in ascending ad dresses EPCID_UID ARRAY 1 6 2 OF BYTE B 16 0...

Page 141: ... EPC 0x02 TID 0x03 USER PSWD DWORD DW 16 0 Password for transponder access 0x00 no password EDIT_BLACKLIST_MODE BYTE B 16 0 Mode 0x00 add EPC ID 0x01 add all Observed transponders 0x02 delete EPC ID 0x03 delete all INVENTORY_DURATION WORD W 16 0 Duration Period of time or number of inventories or number of Observed events Example 0x00 no inventory 0x01 one inventory INVENTORY_DUR_UNIT WORD W 16 0 ...

Page 142: ...00 no pass pass word Read data Table 8 23 PHYSICAL WRITE CMD OFFSET BUFFER LEN_ DATA ADR_TAG CHAINED EPCID_ UID LEN_ID MEM_ BANK PSWD IDENT_ DATA 0x71 Offset in the TXREF send buffer Length of the data to be writ ten Address on the tran sponder True chained False not chained Buffer for up to 62 bytes EPC ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID Default valu...

Page 143: ... Observed events Example 0x00 no inven tory 0x01 one in ventory Only for 0x80 and 0x81 Unit for DURATION 0x00 time ms 0x01 invento ries 0x02 number of Observed events Only for 0x80 and 0x81 Data received You will find the data structure of the modes in the section Inventory Page 125 Table 8 26 WRITE ID CMD OFFSET BUFFER EPCID_ UID LEN_ID LEN_DATA PSWD IDENT_ DATA 0x67 Offset in the TXREF send buff...

Page 144: ...ion lockTagBank Page 258 or the EPC specification Table 8 29 EDIT BLACKLIST CMD EDIT_ BLACKLIST_MODE EPCID_ UID LEN_ID IDENT_DATA 0x7A 0x00 add EPC ID 0x01 add all OBSERVED transponders 0x02 delete EPC ID 0x03 delete all EPC ID Length of the EPC ID 2 62 bytes In the section Filtering out transponders using the Black list Page 325 you will find a description of how the Black List works based on an ...

Page 145: ...on data from the reader and to store it on the controller When the module is replaced this data can then be loaded on the reader from the controller The command WRITE CONFIG Config 3 is used for the download to the reader and READ CONFIG for the upload from the reader You will find more information on this in the section Backup configuration data Page 300 8 6 5 Chaining With the Ident profile and ...

Page 146: ... transponder by specifying the physi cal start address of the memory bank UHF the length and the password INVENTORY 1 69 i Requests a list of all currently accessible transpond ers within the antenna range DEV STATUS 74 t Reads out the status of a communications module This command must not be the last command within the chain WRITE ID 67 g RF680R RF685R Writes a new EPC ID to the transponder KILL...

Page 147: ...IID_CMD_STRUCT 3 ADDR_TAG 0 IID_CMD_STRUCT 3 OPTIONS CHAINED true Command 3 IID_CMD_STRUCT 4 CMD 0x71 Write 10 bytes to the user bank starting at address 20 IID_CMD_STRUCT 4 EXT_UHF MEM_ BANK 3 IID_CMD_STRUCT 4 LEN_DATA 10 IID_CMD_STRUCT 4 ADDR_TAG 20 IID_CMD_STRUCT 4 OPTIONS CHAINED false In the chaining the entire IID_CMD_STRUCT buffer IID_CMD_STRUCT 1 10 can be used The start of the chain is se...

Page 148: ...ion has a positive effect particularly with extensive bus configurations and slow transmission speeds The reader processes each transponder regardless of the Ident profile This has a particularly advantageous effect on gate applications since all transponders are always identified with the full reader scan speed Total data throughput is increased considerably particularly with controllers that hav...

Page 149: ...using the input parameter EXECUTE while RPTCMD is set at the same time The command is processed and the result transferred to the Ident profile The Repeat command is activated on the reader 3 The reader confirms activation with the output parameter RPTACT to the Ident profile The confirmation is made only after the first command has been executed The reader executes the command automatically as so...

Page 150: ...set the error E7FE0900h is output after a timeout of 10 seconds 3 You can read out the individual results by setting the EXECUTE input parameter several times Figure 8 21 Sequence of the repeat command without command transfer Ending command repetition You have the option of ending command repetition by resetting RPTCMD or using the INIT or SRESET commands The various procedures are described belo...

Page 151: ...arted with EXECUTE and RPTACT is still set although there are no longer any results in the buffer the block is not ended BUSY 1 In this case you can wait until the next transponders are read out As an alternative the block can be ended with INIT or SRESET Figure 8 23 End the Repeat command by resetting RPTCMD the last command remains pending Note End the Repeat command with INIT or SRESET End the ...

Page 152: ...e 8 24 Ending the Repeat command with INIT SRESET Data buffer Permanent command repetition can lead to the data being transferred more slowly to the Ident profile than new transponders are processed In this case the reader buffers the results The reader has a number of buffers for this If the buffers are full acknowledgments are discarded and an error message to this effect is generated Table 8 37...

Page 153: ...ller You can control the addresses of the inputs outputs via a 1 WORD subsegment of the process image of the reader CM You can enter the addresses using STEP 7 or Studio 5000 Logix Designer in the properties of the reader in the parameter Digital inputs outputs You can access the digital inputs outputs via the byte with the lower value address The structure of this byte and the assignment to the d...

Page 154: ...Programming via SIMATIC controller 8 7 Digital inputs outputs SIMATIC RF650R RF680R RF685R 154 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 155: ... on the DVD supplied with the readers Requirement The Studio 5000 Logix Designer was started and a project was created Procedure Follow the steps below to import the add on instructions into the Studio 5000 Logix Designer 1 Copy the installation file l5x locally to your PC You will find the file on the DVD supplied with the product 2 Open the Studio 5000 Logix Designer and change to the project vi...

Page 156: ...ed less often for operating the Ident system Config_Upload Inventory Read_EPC_Mem Set_Param Write_EPC_ID Write_EPC_Mem AdvancedCMD Advanced command set With the Ad vancedCmd block it is possible to access other commands from the Ident command set and to execute chained commands Ident profile Ident_Profile This block is available for experts to be able to include complex command structures in their...

Page 157: ...locks you require the IID_HW_CONNECT data type to address the reader The data type IID_HW_CONNECT relates to a read point channel of the reader and is part of the data type IID_DATA_RF68xR for all 4 channels Setting the command parameters for the Ident profile is handled by the Ident blocks The Ident profile and the AdvancedCMD block also require the IID_CMD_STRUCT data type for the parameter assi...

Page 158: ...ETERIZE parameter 9 3 2 Assigning parameters to the Param_RF68xR block In the next step the Reset_RF68xR block must be linked into the project and have parameters assigned For this block two further message variables must be created and assigned to the parameters MSG_READ and MSG_WRITE These two variables can used with all other application blocks Before the read point is operational the reset com...

Page 159: ...oxes if applicable 8 Create a variable for MSG_WRITE 9 Assign parameters for the variable as follows In the Configuration tab Message Type CIP generic Service Type Custom Service Code 41 Class 80 Instance 1 Source Element RF680R_001_ConfigData Channel1 Static buf 10 Select the reader for which you want to assign parameters in the Communication tab in the input box Path 11 Select the Connected and ...

Page 160: ... in the variables of the type IID_DATA_RF68xR HW_CONNECT must always be transferred to the blocks to ad dress the relevant channel reader MSG_READ Message variable for communication between the controller and reader MSG_WRITE Message variable for communication between the controller and reader STATUS_WORD Cyclic status word which is sent from the reader to the contoller CONTROL_WORD Cyclic control...

Page 161: ...nt system In addition to this the block resets the required start values of the HW_CONNECT variables for the 4 reader channels read points Note that this block always needs to be executed first before other blocks can be executed The block must be executed each time the controller or reader is restarted Figure 9 2 Param_RF68xR block The input parameter LARGE_CONNECTION is supported only by Control...

Page 162: ...e specific parameters and is executed using the EXECUTE parameter With the Reset_RF68xR block you can interrupt any active Ident block at any time The blocks are then ended with DONE true and ERROR false Figure 9 3 Reset_RF68xR block 9 5 1 3 Read The Read block reads the user data from the transponder from memory bank 3 USER area and enters this in the IDENT_DATA buffer The physical address and th...

Page 163: ...685R EPCID_UID SINT 62 0 Buffer for up to 62 bytes EPC ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID IDENT_DATA SINT 10 0 Data buffer in which the read data is stored Note When necessary a byte array of any size can be transferred to this parame ter Note that the array must be 10 bytes long e g SINT 12400 9 5 1 4 Write The Write block writes the user data from t...

Page 164: ...unspecified single tag access RF680R RF685R EPCID_UID SINT 62 0 Buffer for up to 62 bytes EPC ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID IDENT_DATA SINT 10 0 Data buffer with the data to be written Note When necessary a byte array of any size can be transferred to this parame ter Note that the array must be 10 bytes long e g SINT 12400 9 5 1 5 Reader_Status T...

Page 165: ... that the array must be 10 bytes long e g SINT 12400 Results Table 9 6 ATTRIBUTE 0x89 IID_READER_STATUS_89_RF68xR data type Name Type Comment status_info BYTE SLG Status mode Subcommand hardware_version BYTE Version of hardware firmware_version ARRAY 1 4 of CHAR Version of firmware config ID DWORD Unix timestamp inventory_status WORD 0 inventory not active 1 inventory active 2 presence mode active...

Page 166: ...D when performing a Config Upload you can check whether the configuration data read matches the configuration data stored on the controller The configuration data has the following structure Table 9 7 Structure of the configuration data Byte Name 0 Structure identifier 2 bytes 2 Length information 4 bytes Length of the version identifier and parameter block 6 Version identifier 4 bytes Based on th...

Page 167: ...emory size of 8 16 KB Note When necessary a byte array of any size can be transferred to this parameter Note that the array must be 10 bytes long e g SINT 12400 Figure 9 8 Config_Download block Table 9 9 Explanation of the Config_Download block Parameter Data type Description IDENT_DATA SINT 10 Data buffer for configuration data The real length of the data depends on the com plexity of the configu...

Page 168: ...80 and 0x81 Depending on the attribute more or less data is supplied about the identified transponders To be reported a transponder must have had the Observed status at least once at the start of or during the command execution time The transponder is reported even if it returned temporarily to the Lost status With the attributes 0x86 start Presence_Mode and 0x87 end Presence_Mode inventories can ...

Page 169: ...enable Presence mode 0x87 disable Presence mode DURATION DINT W 16 0 Duration dependent on DUR_UNIT Period of time or number of invento ries or number of Observed events Example 0x00 no inventory or 0 ms 0x01 one inventory or 1 ms or one transponder DUR_UNIT DINT W 16 0 Unit for DURATION 0x00 time ms 0x01 inventories 0x02 number of Observed events IDENT_DATA SINT 10 0 Data buffer for inventory dat...

Page 170: ..._DATA data type for the ATTRIBUTES 0x80 and 0x81 Table 9 11 ATTRIBUTE 0x80 Name Type Comment NUM IDS WORD Number of MDS TAG_DATA ARRAY 1 n of IID IN I 80 TAG_DATA 1 IID_IN_I_80 Reserved BYTE ID_Len BYTE Length of EPC ID EPC_ID ARRAY 1 62 of BYTE EPC ID tagPC WORD TAG_DATA 2 IID_IN_I_80 TAG_DATA n IID_IN_I_80 Table 9 12 ATTRIBUTE 0x81 Name Type Comment NUM MDS WORD Number of MDS TAG_DATA ARRAY 1 n ...

Page 171: ...81 TAG_DATA n IID_IN_1_81 1 Indicates whether the filter criteria could be read 2 Indicates how often the transponder was identified via the air interface before it changed to the Observed status 9 5 2 3 Read_EPC_Mem The Read_EPC_Mem block reads data from the EPC memory of the RF600 transponder Access is to bank 1 as of the start address 4 The length of the EPC memory to be read out is specified b...

Page 172: ...le tag access RF680R RF685R EPCID_UID SINT 62 0 Buffer for up to 62 bytes EPC ID 8 bytes UID or 4 bytes handle ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID 8 byte UID is entered at the start of the buffer LEN_ID 8 4 byte handle ID must be entered in the array element 5 8 LEN_ID 8 Default value 0x00 unspecified single tag access RF620R RF630R RF640R IDENT_DATA S...

Page 173: ...R RF685R during runtime e g the antenna power Note Settings saved only temporarily Note that the parameters in the Set_Param block are only stored temporarily If the power for the reader is interrupted the stored values are lost and must be set again Figure 9 11 Set_Param block Table 9 14 Explanation of the Set_Param block Parameter Data type Default values Description PARMID DINT 0x00 Parameter i...

Page 174: ... unit with out a direct relationship with the radiated power 0x41325452 A2TR Antenna 02 RSSI threshold 0x41335452 A3TR Antenna 03 RSSI threshold 0x41345452 A4TR Antenna 04 RSSI threshold 0x5331444C S1DL Read point 01 RSSI delta Range of values 0 255 Difference for RSSI values Transponders with lower values relative to the transponder with the highest RSSI value are discarded Value without unit wit...

Page 175: ... Kbps Rx 62 5 Kbps Miller4 37 Tx 80 Kbps Rx 400 Kbps FM0 65 Tx 40 Kbps Rx 40 Kbps ISO 18000 62 0x57544348 WTCH Date and time Range of values 01 01 2000 00 00 a m 19 01 2038 3 14 a m 01 01 2000 01 00 a m 946684800 Date and time UTC Time in seconds since 01 01 1970 Setting of the internal reader clock the date and time are set 0x57544F44 WTOD Time Range of values 0 00 23 59 p m S7 time TOD UTC Milli...

Page 176: ... that when you execute the block only one transponder is located in the antenna field This ensures that the identification when writing the ID is unique If there is more than one transponder in the antenna field a negative response is returned Figure 9 12 Write_EPC_ID block Table 9 16 Explanation of the Write_EPC_ID block Parameter Data type Default values Description LEN_ID_NEW SINT W 16 0C Lengt...

Page 177: ...y to be overwritten 1 62 bytes LEN_ID DINT B 16 0 Length of the EPC ID UID Default value 0x00 unspecified single tag access RF680R RF685R EPCID_UID SINT 62 0 Buffer for up to 62 bytes EPC ID 8 bytes UID or 4 bytes handle ID 2 62 byte EPC ID is entered at the start of the buffer length is set by LEN_ID 8 byte UID is entered at the start of the buffer LEN_ID 8 4 byte handle ID must be entered in the...

Page 178: ...and the chained bit must also be set in the CMD structure The chained bit is not set in the last command in the chain You will find further information on the chained bit in the section Chaining Page 184 The entire command structure must be specified in the CMD input parameter You create the structure for the CMD parameter in a data block Figure 9 14 AdvancedCmd block Table 9 18 Explanation of the...

Page 179: ...ent a simplified interface of the Ident profile If the functionality available with the blocks is not adequate for your application you can use the Ident profile as an alternative Using the Ident profile you can set complex command structures and work with command repetition The following graphic shows the Ident profile including the commands that can be implemented with it Note Ident profile for ...

Page 180: ...650R RF680R RF685R 180 Configuration Manual 03 2018 C79000 G8976 C386 06 Figure 9 15 The input parameters of the Ident profile Note Working with multiple channels If you work with several channels you must ensure that for each channel the block is called with a separate instance DB ...

Page 181: ... STATUS 74 t OFFSETBUFFER ATTRIBUTES Reads out the status of the reader INVENTORY 69 i OFFSETBUFFER ATTRIBUTES DURATION DUR_UNIT Requests a list of all currently accessible tran sponders within the antenna range WRITE ID 67 g OFFSETBUFFER EPCID_UID LEN_ID LEN_ID_NEW PSWD RF680R RF685R Writes a new EPC ID to the transponder KILL TAG 6A j EPCID_UID LEN_ID PSWD RF680R RF685R The transponder is perman...

Page 182: ... Command code compare the table in the section Overview of the commands Page 181 OFFSETBUFFER INT 0 Relative offset within the received data buffer The pa rameter specifies the address within the memory area at which the first byte of the received data must be stored or the first byte of the data to be sent is expected All subsequent bytes must be stored in ascending ad dresses EPCID_UID BYTE 62 0...

Page 183: ...T_BLACKLIST_MODE SINT 0 Mode 0x00 add EPC ID 0x01 add all Observed transponders 0x02 delete EPC ID 0x03 delete all INVENTORY_DURATION DINT 0 Duration Period of time or number of inventories or number of Observed events Example 0x00 no inventory 0x01 one inventory INVENTORY_DUR_UNIT DINT 0 Unit for DURATION 0x00 time ms 0x01 inventories 0x02 number of Observed events LOCK TAG BANK_ACTION DINT 0 Loc...

Page 184: ...45 9 6 6 Command repetition The Ident profile supports command repetition Repeat command Command repetition with Rockwell controllers functions in exactly the same was as with S7 controllers You will find a description of command repetition in the section Command repetition Page 148 9 7 Digital inputs outputs The structure and the way digital inputs outputs work with Rockwell controllers is identi...

Page 185: ...s IO Receive messages Receive tag events Receive RSSI events Receive IO events Use secure transmission 10 1 Functionality of the XML interface The XML interface is based on command reply frames and the reader can also send asynchronous reports Each command that you send is replied to by the reader with a reply frame regardless of whether the command was executed successfully or not If errors occur...

Page 186: ...ssages An event contains data acquired by the reader itself Alarm messages inform the user application of irregular or incorrect operating conditions of the reader The reports can be transferred reliably or without verification In the non reliable mode all reports are sent to the user application without waiting for confirmation of receipt The report is automatically discarded if the connection to...

Page 187: ...ity for the demo application RFID Reader XML Demo Components of the demo application The demo application consists of the following components Demo API RFReader XmlApi If you want to change the application files you require Microsoft Visual Studio as of version 2012 An Express version is adequate The RFReader XmlApi contains the XML API interface on which the demo application is based You control ...

Page 188: ...ctions of the demo application 10 2 2 User interface of the demo application To be able to work with the demo application NET V3 5 or higher must be installed on your PC and the RFID Reader XML Demo folder needs to be copied to your PC Start the application by double clicking on the file RFReader TestApp exe The XML Demo application is divided into four areas ...

Page 189: ...ecting to the reader disconnecting from the reader and for selecting readers XML commands Connection XML commands with which you can control the connection between the user application and readers Settings XML commands with which you can control the configuration of the reader Tag XML commands with which you can control processing of the tran sponder data Extras XML command for resetting the Log w...

Page 190: ...tream PerfTimer With this check box you can display the execution time of each command The displayed time relates to the period between sending the command and the arrival of the reply 10 2 3 Working with the demo application Requirement The reader is connected and has started up The reader was assigned a unique IP address Procedure Follow the steps below to establish a connection to the reader 1 ...

Page 191: ...t exclusively to this reader You can communicate with several readers at the same time To communicate with other readers repeat the actions described above Once you have established a connection to several readers you can switch from one to the other simply using the Reader Select Reader menu command After you have established the connection to a reader and have executed the command HostGreetings ...

Page 192: ...n Step Description The user application sends the command hostGreetings to the reader The reader returns a positive reply frame After the connection has been established the user application communicates with the reader It sends for example a heartbeat frame at regular intervals For each command the reader sends a reply frame The user application sends the command hostGoodbye to terminate the conn...

Page 193: ...e XML interface you want to work with The reply frame of the reader then contains the version that the XML interface uses The RF650R RF680R RF685R readers use version V2 0 Note that the reply frame of the reader can take up to 20 seconds Command frame cmd id value_id id hostGreetings readerType value readerType readerType opt supportedVersions version value_version version version value_version ve...

Page 194: ...rsion value_configID Alphanumeric text Unique identifier of the transferred configuration The ID can also be read using the getConfigVersion function 10 3 1 2 hostGoodbye This command ends communication with the reader and terminates the TCP IP connection In the default setting the reader continues working with its current settings This allows the reader to work independently The data accumulating...

Page 195: ... break or whether the reader is out of operation e g network failure After executing the command the reader blocks connection requests of new clients for 30 seconds By periodically sending heartBeat commands within a period of 30 seconds you can make sure that no other unwanted user applications access the reader Command frame cmd id value_id id heartBeat cmd frame Reply frame reply id value_id id...

Page 196: ...f the parameters are identical to the previous settings A response frame is sent in reply to this command only if there is an error Command frame cmd id value_id id setIPConfig iPAddress value_iPAddress iPAddress opt subNetMask value_subNetMask subNetMask opt gateway value_gateway gateway opt dHCPEnable value_dHCPEnable dHCPEnable opt setIPConfig cmd frame opt Optional Line can be omitted Reply fr...

Page 197: ...alue_dHCPEnable True value_ subNetMask IP address 1 0 0 1 255 255 255 254 Subnet mask of the reader Parameter is ignored if DHCP is acti vated value_dHCPEnable True value_gateway IP address 1 0 0 1 255 255 255 254 Gateway of the reader Parameter is ignored if DHCP is acti vated value_dHCPEnable True value_ dHCPEnable Fixed values True False Use of DHCP to assign the IP address 10 3 1 5 getIPConfig...

Page 198: ...tion Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_iPAddress IP address 1 0 0 1 255 255 255 254 IP address of the reader Parameter is ignored if DHCP is acti vated value_dHCPEnable True value_ subNetMask IP address 1 0 0 1 255 255 255 254 Subnet mask of the reader Parameter is ignored if DHCP is act...

Page 199: ...e reader To be able to work with the newly created configuration you need to restart the reader As an alternative you can also load a configuration that was created using the WBM Note that the reply frame of the reader can take up to 20 seconds Command frame cmd id value_id id setConfiguration configData CDATA value_configData configData setConfiguration cmd frame Reply frame reply id value_id id ...

Page 200: ...onfiguration The ID can also be read out with the getConfigVersion command 10 3 2 2 getConfiguration This command requests the configuration stored on the reader You can also export the configuration to transfer it to other readers Command frame cmd id value_id id getConfiguration cmd frame Reply frame reply id value_id id resultCode 0 resultCode getConfiguration returnValue configID value_configI...

Page 201: ...umeric text Unique identifier of the transferred configuration The ID can also be read out with the getConfigVersion command 10 3 2 3 getConfigVersion This command requests the version of the configuration stored on the reader Command frame cmd id value_id id getConfigVersion cmd frame Reply frame reply id value_id id resultCode 0 resultCode getConfigVersion returnValue configID value_configID con...

Page 202: ...ers with which the reader is currently working as a configuration file from the reader Note that the values may differ from the stored values Note that the reply frame of the reader can take up to 20 seconds Command frame cmd id value_id id getActiveConfiguration cmd frame Reply frame reply id value_id id resultCode 0 resultCode getActiveConfiguration returnValue configID value_configID configID c...

Page 203: ...ent value_configID Alphanumeric text Unique identifier of the transferred configuration The ID can also be read out with the getConfigVersion command 10 3 2 5 getLogfile This command requests the log from the reader Note that the reply frame of the reader can take up to 20 seconds Command frame cmd id value_id id getLogfile logType value_logType logType getLogfile cmd frame Reply frame reply id va...

Page 204: ...ique command identifier value_logType Fixed values Diagnosis Optional Type of diagnostics file Diagnostics Log file value_logData CDATA Data logged by the reader The parameter must be embedded in a CDATA segment 10 3 2 6 resetLogfile This command deletes all the entries in the log Command frame cmd id value_id id resetLogfile cmd frame Reply frame reply id value_id id resultCode 0 resultCode reset...

Page 205: ...y in the configuration of the WBM As a result the reader works with the value specified with setParameter but does not display this in the WBM Note that the reply frame of the reader can take up to 20 seconds Command frame cmd id value_id id setParameter name value_name name value value_value value objType value_objType objType objName value_objName objName setParameter cmd frame Reply frame reply...

Page 206: ... text See following table Name of the specific parameter group Possible values of the value_name parameter name value objType objName Description Power 0 5 00 33 00 Antenna Antenna01 Antenna02 Antenna03 Antenna04 Radiated power of the antenna in dB Increment 0 25 dB RssiThreshold 0 255 Antenna Antenna01 Antenna02 Antenna03 Antenna04 RSSI threshold value Transponders with lower RSSI values are not ...

Page 207: ...his is a value without a unit and without direct reference to the power strength objName must have the name of the corresponding read point Modula tionScheme 32 33 34 35 37 65 General General Modulation scheme of the read point This also specifies which tran sponder types are identified ISO 18000 62 63 10 3 2 8 getParameter This command requests a specific parameter of the reader The return value ...

Page 208: ...de 0 are described in the section Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_name Alphanumeric text See following table Name of the supported parameter value_value Alphanumeric text See following table Parameter value value_objType Alphanumeric text See following table Specifies the type of the p...

Page 209: ...er strength Polarization Default Circular Linear_vertical Linear_ horizontal All Antenna Antenna01 Antenna02 Antenna03 Antenna04 Polarization of the antenna Currently this parameter can only be set for the internal an tenna of the RF685R RssiDelta 0 255 Source See descrip tion Difference for RSSI values Maximum difference compared with the RSSI value of the tran sponder with the highest RSSI value...

Page 210: ...ply id value_id id resultCode 0 resultCode setTime reply frame The error codes for negative replies resultCode 0 are described in the section Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_utcTime Time UTC time stamp Universal Time Co ordinated in ISO 8601 format yyyy MM ddTHH mm ss fffzzz e g 2009 1...

Page 211: ...reply id value_id id resultCode 0 resultCode getTime returnValue utcTime value_utcTime utcTime returnValue getTime reply frame The error codes for negative replies resultCode 0 are described in the section Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_utcTime Time UTC time stamp Universal Time Co or...

Page 212: ...nse of the outputs such as Inactivity or Reset time specified using the WBM in a base configuration see also section The Settings Digital outputs menu item Page 72 Command frame cmd id value_id id setIO outValue value_outValue outValue setIO cmd frame Reply frame reply id value_id id resultCode 0 resultCode setIO reply frame The error codes for negative replies resultCode 0 are described in the se...

Page 213: ...t right Outport01 2nd position Outport02 3rd position Outport03 4th position Depending on the value of the particu lar position the corresponding output is set to ON 1 or OFF 0 or remains unchanged X Example A value_outValue of 0X11 sets Outport00 to ON sets Outport01 to ON leaves Outport02 unchanged sets Outport03 to OFF This command receives a negative reply ERROR_PARAMETER_OUT_OF_RA NGE if ther...

Page 214: ...rent status of all inputs and outputs of the reader Command frame cmd id value_id id getIO cmd frame Reply frame reply id value_id id resultCode 0 resultCode getIO returnValue inValue value_inValue inValue outValue value_outValue outValue returnValue getIO reply frame The error codes for negative replies resultCode 0 are described in the section Negative XML replies Page 263 ...

Page 215: ... or OFF 0 If the reader does not support I O the value remains empty value_outValue Binary characters 0 1 0000 1111 Each position stands for an output of the reader Outport00 1st position least signif icant bit right Outport01 2nd position Outport02 3rd position Outport03 4th position Depending on the value of the particu lar position the corresponding output is set to ON 1 or OFF 0 If the reader ...

Page 216: ...tReader reply frame The error codes for negative replies resultCode 0 are described in the section Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier resetType Fixed values Reset2Factory Reboot Optional Type of reset Reset2Factory Reset to the factory settings and delete the stored configuration Reboot Hardwar...

Page 217: ...d frame Reply frame reply id value_id id resultCode 0 resultCode getReaderStatus returnValue readerType value_readerType readerType mLFB value_mLFB mLFB hWVersion value_hWVersion hWVersion fWVersion value_fWVersion fWVersion subVersions opt version value_version version subVersion opt returnValue getReaderStatus reply frame opt Optional Line can be omitted The error codes for negative replies resu...

Page 218: ...e number of the reader Example 6GT2811 6AA10 0AA0 value_hWVersion Alphanumeric text Hardware version of the reader Example V1 0 0 0_1 1 0 34 value_fWVersion Alphanumeric text Firmware version of the reader Example V1 0 0 0_1 1 0 34 value_version Alphanumeric text Reader specific version of components Note that the number of sub versions can change In future versions there may be more or less sub v...

Page 219: ...lue getAllSources reply frame opt Optional Line can be omitted The error codes for negative replies resultCode 0 are described in the section Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_ sourceName Text Read point name The name is specified using the WBM refer to the section The Settings Read poin...

Page 220: ... version V2 1 Command frame cmd id value_id id getAllAntennas sourceName value_ sourceName sourceName getAllAntennas cmd frame Reply frame reply id value_id id resultCode 0 resultCode getAllAntennas returnValue antennaName value_antennaName antennaName antennaName value_antennaName antennaName opt returnValue getReaderStatus reply frame opt Optional Line can be omitted The error codes for negative...

Page 221: ... the transponder data There are two ways of querying transponder data Synchronous transponder command Commands that return the transponder data in the reply frame The reader executes the required action once and then sends back the acquired transponder data Algorithms that work with individual transponder commands such as Read WritePowerBoost and Read WriteRetry are active Asynchronous transponder...

Page 222: ...in the black list are occupied the next new entry deletes the oldest entry You specify the size of the black list in the WBM You will find more information on the black list in the section The Settings Read points menu item Page 54 Command frame cmd id value_id id editBlacklist sourceName value_sourceName sourceName blackListCmd value_blackListCmd blackListCmd tagID value_tagID tagID opt tagID val...

Page 223: ...PC IDs will be saved Add_obs all EPC IDs with the observed status are stored in the black list Del all the following EPC IDs will be removed from the black list Del_all All entries in the black list will be removed value_tagID Hexadecimal value 0 9 A F EPC ID in RAW Hex Data Format Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification ...

Page 224: ...Code 0 are described in the section Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_ sourceName Text Read point name The name is specified using the WBM refer to the section The Settings Read points menu item Page 54 In the standard configuration there is only one read point with the name Readpoint_1 ...

Page 225: ...d point such as Smoothing and the definition of the data of each transponder tag fields RSSI value to be sent are taken from the stored configuration You set this parameter in the WBM You will find more information on parameters in the section The Settings Read points menu item Page 54 Command frame cmd id value_id id triggerSource sourceName value_sourceName sourceName triggerMode value_triggerMo...

Page 226: ...e read point Note that this command is only ef fective for previously executed trig ger commands The command has no effect on any configured contin uous triggers 10 3 3 4 readTagIDs With this command the selected read point takes an inventory and returns all identified transponders in the reply frame If no transponder was identified a positive reply without transponder data is returned The command...

Page 227: ...lue_unit unit opt readTagIDs cmd frame opt Optional Line can be omitted Reply frame reply id value_id id resultCode 0 resultCode readTagIDs returnValue tag tagID value_tagID tagID tagPC value_tagPC tagPC opt utcTime value_utcTime utcTime opt antennaName value_antennaName antennaName opt rSSI value_rSSI rSSI opt channel value_channel channel opt power value_power power opt polarization value_polari...

Page 228: ...s only one read point with the name Readpoint_1 value_duration Decimal value 0 9 0 65535 Optional Duration for which the selected read point will read transponders If the value 0 is set or the parameter is empty only one read cycle is exe cuted value_unit Fixed values Time Count Optional Specifies the unit for the duration Time time in milliseconds Count number of inventories If no value is set th...

Page 229: ...ere was no filter set False Data could not be read 10 3 3 5 getObservedTagIDs With this command the selected read point takes an inventory and returns all identified transponders in the reply frame In contrast to the readTagIDs command the smoothing algorithm of the selected read point is also affected here The read point must therefore take enough inventories until a transponder adopts the Observ...

Page 230: ...y frames A reply frame of the reader can be delayed additionally by the set duration of the command Command frame cmd id value_id id getObservedTagIDs sourceName value_sourceName sourceName duration value_duration duration opt unit value_unit unit opt getObservedTagIDs cmd frame opt Optional Line can be omitted Reply frame reply id value_id id resultCode 0 resultCode getObservedTagIDs returnValue ...

Page 231: ...t Read point name The name is specified using the WBM refer to the section The Settings Read points menu item Page 54 In the standard configuration there is only one read point with the name Readpoint_1 value_duration Decimal value 0 9 0 65535 Optional Period of time for which the selected read point should read transponders If a value 0 is set or the parameter is empty the transponders are return...

Page 232: ...11 0100 value_utcTime Time Optional UTC time stamp Universal Time Co ordinated in ISO 8601 format yyyy MM ddTHH mm ss fffzzz e g 2009 12 24T18 34 56 929 00 00 value_ antennaName Fixed values Antenna01 Antenna02 Antenna03 Antenna04 Optional Name of the antenna value_rSSI Decimal value 0 9 0 255 Optional Largest measured RSSI value value_channel Decimal value 0 9 1 50 Optional Channel number on whic...

Page 233: ...teri on was received True All the data was read or there was no filter set False Data could not be read 10 3 3 6 writeTagID This command writes a new EPC ID to the transponder To ensure clear identification when writing the ID there must be only one transponder in the antenna field If there is more than one transponder in the antenna field a negative reply is returned Command frame cmd id value_id...

Page 234: ...ame value_antennaName antennaName opt rSSI value_rSSI rSSI opt channel value_channel channel opt power value_power power opt polarization value_polarization polarization opt commandRetry value_commandRetry commandRetry opt airRetry value_airRetry airRetry opt filterDataAvailable value_filterDataAvailable filterDataAvailable opt tag returnValue writeTagIDs reply frame opt Optional Line can be omitt...

Page 235: ...PC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_newID Hexadecimal value 0 9 A F New EPC ID in RAW Hex Data For mat to be written to the transponder Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_idLength Decimal value 0 9 16 32 48 496 Optional Length of the new EPC ID i...

Page 236: ...l Optional Polarization of the antenna Currently this parameter can only be set for the internal antenna of the RF685R value_ commandRetry Decimal value 0 9 0 65535 Optional Number of times the reader repeated commands attempting to obtain correct data 0 corresponds to no attempt The maximum number of attempts is set using the WBM value_airRetry Decimal value 0 9 0 65535 Optional Number of times t...

Page 237: ...ly the transponders that were not filtered out appear If an EPC ID is specified the data filter has no effect The reply frame contains the IDs of all identified transponders with the information as to whether the requested data for the transponder could be read or not If no transponder was identified a positive reply without transponder data is returned Command frame cmd id value_id id readTagMemo...

Page 238: ...n value_polarization polarization opt commandRetry value_commandRetry commandRetry opt airRetry value_airRetry airRetry opt filterDataAvailable value_filterDataAvailable filterDataAvailable opt tagField opt bank value_bank bank startAddress value_startAddress startAddress dataLength value_dataLength dataLength data value_data data tagField opt tagField opt tagField opt tag tag opt tag opt returnVa...

Page 239: ...nders Nevertheless only one transponder is then permitted in the antenna field Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_tagPC Hexadecimal value 0 9 A F Optional Tag PC Protocol Control 16 bit value represented by four hexa decimal characters Example The value 1234 corresponds to the binary value 0001 0010 0011 0100 v...

Page 240: ...alue 0 9 1 50 Optional Channel number on which the tran sponder was detected value_power Decimal value 0 9 0 5 00 33 00 Optional Used radiated power of the antenna in dB Increment 0 25 dB value_polarization Fixed values Default Circular Linear_vertical Linear_horizontal All Optional Polarization of the antenna Currently this parameter can only be set for the internal antenna of the RF685R value_ c...

Page 241: ...s identified but the data cannot be read e g if the tran sponder has no user memory as re quired this field remains empty value_success is then set to False 10 3 3 8 writeTagMemory This command writes data to the requested transponder If no EPC ID is made available or detected the command is executed with all the transponders recognized from the read point Note If no EPC ID is specified the result...

Page 242: ...d tagField opt tagField opt writeTagMemory cmd frame opt Optional Line can be omitted Reply frame reply id value_id id resultCode 0 resultCode writeTagMemory returnValue tag tagID value_tagID tagID tagPC value_tagPC tagPC opt success value_success success utcTime value_utcTime utcTime opt antennaName value_antennaName antennaName opt rSSI value_rSSI rSSI opt channel value_channel channel opt power...

Page 243: ...ettings Read points menu item Page 54 In the standard configuration there is only one read point with the name Readpoint_1 value_tagID Hexadecimal value 0 9 A F Optional EPC ID in RAW Hex Data Format This function applies to all transpond ers with this ID If this parameter is empty or not even transferred the function applies to all transponders Nevertheless only one transponder is then permitted ...

Page 244: ...o password protec tion activated for the transponder value_data Hexadecimal value 0 9 A F Data that should be written Each byte is represented by two hexadecimal characters Example The byte sequence 0x12 0x34 0xA3 is represented as the character string 1234A3 in the value_data parame ter value_dataLength is 3 in this exam ple value_success Fixed values True False Flag to indicate whether or not th...

Page 245: ...lue_ commandRetry Decimal value 0 9 0 65535 Optional Number of times the reader repeated commands attempting to obtain correct data 0 corresponds to no attempt The maximum number of attempts is set using the WBM value_airRetry Decimal value 0 9 0 65535 Optional Number of times the reader repeated air interface commands attempting to obtain correct data 0 corresponds to no attempt The maximum numbe...

Page 246: ...all the set filter mechanisms refer to the section The Settings Filters menu item Page 68 Then in the reply frame only the tags that were not filtered out appear If an EPC ID is specified the data filter has no effect The reply frame contains the IDs of all identified transponders A flag for each transponder indicates whether or not the command was successful for this transponder If no transponder...

Page 247: ...l channel opt power value_power power opt polarization value_polarization polarization opt commandRetry value_commandRetry commandRetry opt airRetry value_airRetry airRetry opt filterDataAvailable value_filterDataAvailable filterDataAvailable opt tagField opt data value_data data tagField opt tagField opt tagField opt tag tag opt tag opt returnValue readTagField reply frame opt Optional Line can b...

Page 248: ...tenna field Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_tagPC Hexadecimal value 0 9 A F Optional Tag PC Protocol Control 16 bit value represented by four hexa decimal characters Example The value 1234 corresponds to the binary value 0001 0010 0011 0100 value_fieldName Hexadecimal value 0 9 A F Name of tag field Is speci...

Page 249: ...nna in dB Increment 0 25 dB value_polarization Fixed values Default Circular Linear_vertical Linear_horizontal All Optional Polarization of the antenna Currently this parameter can only be set for the internal antenna of the RF685R value_ commandRetry Decimal value 0 9 0 65535 Optional Number of times the reader repeated commands attempting to obtain correct data 0 corresponds to no attempt The ma...

Page 250: ... has no user memory as re quired this field remains empty value_success is then set to False 10 3 3 10 writeTagField This command writes data to the selected transponder The address of the data area is specified by the name of a tag field The tag field and the name of the field are specified using the WBM If no EPC ID is made available or detected the command is executed with all the transponders ...

Page 251: ...d cmd frame opt Optional Line can be omitted Reply frame reply id value_id id resultCode 0 resultCode writeTagField returnValue tag tagID value_tagID tagID tagPC value_tagPC tagPC opt success value_success success utcTime value_utcTime utcTime opt antennaName value_antennaName antennaName opt rSSI value_rSSI rSSI opt channel value_channel channel opt power value_power power opt polarization value_...

Page 252: ... The Settings Read points menu item Page 54 In the standard configuration there is only one read point with the name Readpoint_1 value_tagID Hexadecimal value 0 9 A F Optional EPC ID in RAW Hex Data Format This function applies to all transpond ers with this ID If this parameter is empty or not even transferred the function applies to all transponders Nevertheless only one transponder is then perm...

Page 253: ...d values True False Flag to indicate whether or not the command was successful for this tran sponder True Command successful False Command unsuccessful value_utcTime Time Optional UTC time stamp Universal Time Co ordinated in ISO 8601 format yyyy MM ddTHH mm ss fffzzz e g 2009 12 24T18 34 56 929 00 00 value_ antennaName Fixed values Antenna01 Antenna02 Antenna03 Antenna04 Optional Name of the ante...

Page 254: ...ue False Optional Indicates whether or not a filter criteri on was received True No problem All the data was read or there was no filter set False Data could not be read 10 3 3 11 killTag With this command the selected transponder is deactivated If no EPC ID is made available or detected the command is executed with all the transponders recognized from the read point Note If no EPC ID is specified...

Page 255: ...gID tagPC value_tagPC tagPC opt success value_success success utcTime value_utcTime utcTime opt antennaName value_antennaName antennaName opt rSSI value_rSSI rSSI opt channel value_channel channel opt power value_power power opt polarization value_polarization polarization opt commandRetry value_commandRetry commandRetry opt airRetry value_airRetry airRetry opt filterDataAvailable value_filterData...

Page 256: ...f this parameter is empty or not even transferred the function applies to all transponders Nevertheless only one transponder is then permitted in the antenna field Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_tagPC Hexadecimal value 0 9 A F Optional Tag PC Protocol Control 16 bit value represented by four hexa decimal ch...

Page 257: ...ntal All Optional Polarization of the antenna Currently this parameter can only be set for the internal antenna of the RF685R value_ commandRetry Decimal value 0 9 0 65535 Optional Number of times the reader repeated commands attempting to obtain correct data 0 corresponds to no attempt The maximum number of attempts is set using the WBM value_airRetry Decimal value 0 9 0 65535 Optional Number of ...

Page 258: ...r was identified a negative reply is returned Below there is a brief description of the epcGen2LockAction and epcGen2LockMask parameters The first row of the table Bit indicates the bit positions of the action and the masking values The masking and action values are specified first with the MSB Further information on the parameters can be found in the EPCglobal Specification http www gs1 org Table...

Page 259: ...re status 0 1 Read and write access to the particular password is permanently possible from both the open and the secure status it cannot be locked 1 0 Read and write access to the particular password is possible from the secure status but not from the open status 1 1 No read or write access to the particular memory bank is possible Example Bank Kill PWD Access PWD EPC Memory TID Memory User Memor...

Page 260: ...tted Reply frame reply id value_id id resultCode 0 resultCode lockTagBank returnValue tag tagID value_tagID tagID tagPC value_tagPC tagPC opt success value_success success utcTime value_utcTime utcTime opt antennaName value_antennaName antennaName opt rSSI value_rSSI rSSI opt channel value_channel channel opt power value_power power opt polarization value_polarization polarization opt commandRetry...

Page 261: ...unction applies to all transpond ers with this ID If this parameter is empty or not even transferred the function applies to all transponders Nevertheless only one transponder is then permitted in the antenna field Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_tagPC Hexadecimal value 0 9 A F Optional Tag PC Protocol Contr...

Page 262: ...alue_ antennaName Fixed values Antenna01 Antenna02 Antenna03 Antenna04 Optional Name of the antenna value_rSSI Decimal value 0 9 0 255 Optional RSSI value value_channel Decimal value 0 9 1 50 Optional Channel number on which the tran sponder was detected value_power Decimal value 0 9 0 5 00 33 00 Optional Used radiated power of the antenna in dB Increment 0 25 dB value_polarization Fixed values De...

Page 263: ...rmware and cannot be modified value_ filterDataAvailable Fixed values True False Optional Indicates whether or not a filter criteri on was received True No problem All the data was read or there was no filter set False Data could not be read 10 3 4 Negative XML replies If problems occur during the execution of the command the reader reports this to the user application These error messages always ...

Page 264: ...ant to be written or which should be deactivated is locked 0x91 145 ERROR_NO_ASWER_FROM_TAG The transponder is not responding 0x92 146 ERROR_WRONG_PASSWORD The password you entered is incorrect Access to the transponder was denied 0x93 147 ERROR_VERIFY_TAG_FAILED Verification of the transponder failed 0x94 148 ERROR_TAG_UNSPECIFIED General transponder error 0x95 149 ERROR_TAG_INSUFFICIENT_ POWER T...

Page 265: ...NVALID_ VALUE A parameter has an invalid value 0xE1 225 ERROR_PARAMETER_MISSING A necessary parameter has not been speci fied 0xE2 226 ERROR_PARAMETER_INVALID_ FORMAT A parameter has an incorrect format 0xE3 227 ERROR_PARAMETER_INVALID_ TYPE A parameter has the wrong format or the wrong data type 0xE4 228 ERROR_PARAMETER_NOT_ SUPPORTED A parameter is not supported by this reader 0xE5 229 ERROR_WRO...

Page 266: ...ion of the transponder data tag fields RSSI value to be sent are taken from the stored configuration These parameters cannot only be changed using the WBM The transponder data in every event report is grouped according to the read points A reply frame from the user application is necessary only when secure mode is set A reply frame can however also be sent in non secure mode and this has no negati...

Page 267: ...dataLength value_dataLength dataLength data value_data data tagField opt tagField opt tagField opt tag tag opt tag opt source source opt source opt ter report frame opt Optional The parameter is transferred depending on the configuration settings Settings Communication Reply frame reply id value_id id resultCode 0 resultCode ter reply frame The error codes for negative replies resultCode 0 are des...

Page 268: ...ple The value 1234 corresponds to the binary value 0001 0010 0011 0100 value_event Fixed values New Glimpsed Observed Lost The transponder events are also gen erated by a smoothing algorithm in the read point The algorithms are speci fied in the WBM A report can also contain more than one event for the same transponder Each individual event has its own tran sponder structure If a report contains t...

Page 269: ...rtical Horizontal Unknown Polarization of the antenna With external antennas always un known value_inventoried Decimal value 0 9 0 65535 Optional Indicates how often the transponder was identified via the air interface be fore it changed to the Observed sta tus Value_ filterDataAvailable Fixed values True False Optional Indicates whether or not a filter criteri on was received True No problem All ...

Page 270: ...e read e g if the tran sponder has no user memory as re quired this field remains empty value_success is then set to False 10 4 1 2 rssiEventReport An RSSI event report signals a change in the RSSI values when reading the transponders RSSI events are generated separately for each antenna The data type and amount are specified by the settings in the basic configuration in the WBM Report frame repor...

Page 271: ...id Decimal value 0 9 0 4294967295 Unique command identifier value_tagID Hexadecimal value 0 9 A F EPC ID in RAW Hex Data Format Example of a 96 bit EPC ID 3005FB63AC1F3681EC880468 For additional information refer to the EPC Global Specification value_tagPC Hexadecimal value 0 9 A F Optional Tag PC Protocol Control 16 bit value represented by four hexa decimal characters Example The value 1234 corr...

Page 272: ...0 Optional Used radiated power of the antenna in dB Increment 0 25 dB value_polarization Fixed values Circular Vertical Horizontal Unknown Polarization of the antenna With external antennas always un known 10 4 1 3 ioEventReport An I O event report signals changes at an input or output In the WBM the sending of I O events can be configured You will find more information on events in the section Th...

Page 273: ...ion Negative XML replies Page 263 Parameter Parameter Type Values Description value_id Decimal value 0 9 0 4294967295 Unique command identifier value_ioName Fixed values Inport00 Inport01 Inport02 Inport03 Outport00 Outport01 Outport02 Outport03 Name of IO port value_ioEvent Fixed values High Low Indicates the new status of the in put output value_utcTime Time UTC time stamp Universal Time Co ordi...

Page 274: ...rorNnumber errorNumber errorText value_errorText errorText eventType value eventType eventType opt paramXY value_param_xy paramXY opt error alarm frame opt Optional Depending on the parameter assignment or the amount of data the line can be omitted Reply frame reply id value_id id resultCode 0 resultCode error reply frame The error codes for negative replies resultCode 0 are described in the secti...

Page 275: ...ist of possible alarm messages Error number Description hex dec 0x1511 5393 ERROR_NO_ANSWER_FROM_TAG The transponder is not responding 0x1512 5394 ERROR_WRONG_PASSWORD The password you entered is incorrect Access to the transponder was denied 0x1513 5395 ERROR_VERIFY_TAG_FAILED Verification of the transponder failed 0x1514 5396 ERROR_TAG_UNSPECIFIED General transponder error 0x1515 5397 ERROR_TAG_...

Page 276: ...93 5523 Antenna error at connector ANT 3 0x1594 5524 Antenna error at connector ANT 4 0x7B71 31601 Overflow Alarms Send buffer for Alarms is full Alarm messages can be discarded until the next alarm is received 0x7B73 31603 Overflow TagEventReports Send buffer for TagEventReports is full Data can be lost until the next TagEventReport is received 0x9BFD 39933 ERROR_PARAMETER_INVALID_VALUE A paramet...

Page 277: ...d calls are known as OPC UA clients The standard OPC Unified Architecture for AutoID Companion Specification was defined by the organizations AIM Germany and OPC Foundation This describes the connection of identification devices via OPC UA The identification devices can be subdivided as follows Text recognition devices OCR Optical readers e g barcode RFID readers and Devices for localization RTLS ...

Page 278: ...ed UA Server Profile the Standard Event Subscription Server Facet As an extension of the Embedded UA Server Profile the SecurityPolicy Basic256 As an extension of the Embedded UA Server Profile the SecurityPolicy Basic 256Sha256 As an extension of the Embedded UA Server Profile maximum of 5 OPC UA client connections Full AutoID Server Facet according to the specification OPC Unified Architecture f...

Page 279: ...ut transponder data WriteTag Write transponder data OPC UA events RfidScanEventType Receive TagEvents and RssiEvents OPC UA variables DeviceStatus Device status of the RFID reader LastScanStatus Last seen processed transponder of the RFID reader IO Data DigitalInputs Digital inputs of the reader DigitalOutputs Digital outputs of the reader Runtime parameters RfPower Radiated power of the antenna M...

Page 280: ...Programming via the OPC UA interface SIMATIC RF650R RF680R RF685R 280 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 281: ... 1 Diagnostics You have the following diagnostics options available for the reader via the LED status displays of the reader for RF650R RF680R RF685R using the WBM for RF650R RF680R RF685R using the TIA Portal STEP 7 Basic Professional V13 or higher for RF680R RF685R These alternative methods are described below ...

Page 282: ...operation ERROR ER Indicates whether an error has occurred MAINTENANCE MAINT RF680R RF685R only Shows whether the reader needs maintenance POWER PWR Shows whether the reader is supplied with power PRESENCE PRE RF650R only Among other things indicates whether or not there are multi ple transponders in the antenna field With the RF680R RF685R readers this is displayed with the status display LINK 1 ...

Page 283: ...s several seconds before it is operational This phase is indicated by a status bar flashing yellow During a firmware update the startup takes longer The reader is ready for operation when the R S LED is lit flashes green If the R S LED is flashing the reader is waiting for a connection If the R S LED is lit constantly the reader is connected to the controller or PC Error display If there is an err...

Page 284: ... there is an error The device is ready for operation The connection to the application XML OPC UA controller is established The device is working STEP 7 Ethernet IP The writeconfig command was received XML application The hostGreeting command was received OPC UA Connection to the client is established Flash test for reader identification There is an error You will find more information on error me...

Page 285: ...nostics manual Network management diagnostics and configuration with SNMP https support industry siemens com cs ww en view 103949062 12 1 4 Diagnostics using the WBM Using the WBM you have extensive diagnostics options The various diagnostics options are described below Tag monitor Using Tag monitor you can read out how well which transponder was identified using which antenna on the basis of this...

Page 286: ... Portal for PROFIBUS operation You will find information on diagnostics the communications module you are using for PROFIBUS operation in the manual of the relevant communications module Requirements The reader is connected to the PC via Industrial Ethernet or PROFINET Procedure Follow the steps below to read out the diagnostics status of the reader using the TIA Portal 1 Start the TIA Portal 2 Op...

Page 287: ...interface Figure 12 2 The Diagnostics window Diagnostics with enabled diagnostic interrupt messages If diagnostic interrupt messages are enabled the error messages are stored in the CPU diagnostics buffer in plain text You can further process these messages with the appropriate function blocks e g so that they are forwarded to an HMI Channel diagnostics is also available This displays pending diag...

Page 288: ...ostics using the Studio 5000 Logix Designer in the Studio 5000 Logix Designer manual 12 2 Error messages You have the following options for error analysis of the modules Via the LED status display of the reader for RF680R RF685R Via XML error messages for RF650R RF680R RF685R You will find more information on XML error messages in the section Interrupts Page 274 Via OPC UA error messages for RF680...

Page 289: ...lash with a slow frequency of 2 Hz The detailed LED error display described here is enabled as default If required you can disable this in the Settings General menu item of the WBM If the LED error display is enabled a separate LED pattern is assigned to every error in the LED status display The displayed LED patterns are based on the error code of the hexadecimal error message converted to binary...

Page 290: ...d Read command There is no valid data in IDENT_DATA Write command The transponder that has just left the antenna field contains an incomplete data record Possible causes Operating distance between reader and transponder is not being maintained Configuration error The data record to be processed is too large in dynamic mode 2 Hz 0x13 0xE1FE03 Address error The address area of the transponder has be...

Page 291: ...er reader is in the vicinity and is active There is a reflecting metal surface in the vicinity that is disrupting the antenna field Possible corrective measures Reduce radiated power of antenna Change antenna alignment Avoid parallel alignment of antenna metal Use antenna cable with greater attenuation Install attenuator between antenna and reader Execute init_run after correcting the error 2 Hz 0...

Page 292: ...PROFIBUS DP PROFINET master no longer addressing commu nications module Execute INIT The communications module has detected a frame interruption on the bus The backplane bus PROFIBUS or PROFINET may have been reconfigured e g with HW Config or TIA Portal 2 Hz 0xCD 0xE4FE8D Firmware error Possible cause The firmware update was not run completely Internal communications error of the communications m...

Page 293: ...ader communications module has overflowed Transponder data has been lost 0x59 0xE5FE09 The reader communications module runs a hardware reset INIT_ACTIVE set to 1 The Ident profile expects an INIT bit 15 in the cyclic control word 0x5A 0xE5FE0A The CMD command code and the relevant acknowledgement do not match This can be a software error or synchronization error that cannot occur in normal operat...

Page 294: ...th set with the command e g READ is too high Error when processing the command Possible causes action to be taken The data in AdvancedCmd or IID_CMD_STRUCT is incorrect e g WRITE command with length 0 Check AdvancedCmd or IID_CMD_STRUCT and execute an INIT The hardware of the reader communications module is defective The reader or communications module receives bad data with an INIT The AB byte do...

Page 295: ...01 In this status only the Reset_Reader command WRITE CONFIG is permitted 0x72 0xE7FE02 The CMD command code is not permitted 0x73 0xE7FE03 The LEN_DATA parameter of the command is too long and does not match the global data reserved within the send data buffer TXBUF 0x74 0xE7FE04 The receive data buffer RXBUF or the send data buffer TXBUF is too small the buffer created at TXBUF RXBUF does not ha...

Page 296: ... is write protected 0x1A good 3 PERMISSON_ ERROR The transponder is read write protected 0x91 good 19 RF_COMMUNICATION_ ERROR The transponder is not responding 0x92 good 4 PASSWORD_ ERROR The transponder password is incorrect Access is denied 0x93 good 19 RF_COMMUNICATION_ ERROR The verification of the written transponder data has failed 0x94 good 19 RF_COMMUNICATION_ ERROR General transponder err...

Page 297: ... in PROFIBUS operation The cable between the communications module and reader is wired incorrectly or there is a cable break The 24 V supply voltage is not connected or is turned off or has failed briefly Automatic fuse on the communications module has blown Hardware defective Another reader is in the vicinity and is active There is a reflecting metal surface in the vicinity that is disrupting the...

Page 298: ...ommunications module reader off and on again Start INIT after correcting the error 0x61 good 15 NOT_SUPPORTED_ BY_DEVICE Unknown command An uninterpretable XML command was sent to the reader or the Ident profile sends an uninterpretable command to the reader Possible causes The AdvancedCmd block was supplied with an in correct CMD The CMD input of the AdvancedCmd block was overwritten 0x63 Bad Inv...

Page 299: ...Kill command failed good 17 DEVICE_NOT_ READY The specified read point is inactive because it was not assigned to any antenna Reading out error messages using the WBM All the diagnostics messages of the reader are entered in the Log if a check mark was set for ERRORS in the WBM configuration in Settings General The log helps SIEMENS specialists to analyze errors You will find further information o...

Page 300: ...ackup options Properties Backup on the controller Module replacement possible without PG Automatic sequence possible The automatic sequence needs to be programmed by the user Backup in the STEP 7 project Download to the reader only possible manually in STEP 7 No management of configuration versions Only the last version is ever stored no storage of older ver sions You need to update the configurat...

Page 301: ...onfiguration data in the section Config_Upload _Download Page 123 Backup into a STEP 7 project From the device view of the TIA Portal you can access the Properties tab of the reader When configuring with HSP in the Configuration management entry you can save the configuration of the reader in your project and also load this on the reader again Requirement The PROFINET interface X1 entry contains t...

Page 302: ...ile After loading the configuration file on a new reader you need to enable user management and create new user profiles and passwords 12 3 2 Replacing a module Before replacing a module WARNING Read the manual of the SIMATIC controller you using Prior to installation connecting up and commissioning read the relevant sections in the manual of the SIMATIC controller you are using When installing an...

Page 303: ... power supply using the connecting cable Wait until the reader has started up and is ready for operation R S LED is lit flashes green 8 Assign the reader a unique IP address and a unique device name 9 Load the configuration to the reader Module replacement with automatic device name assignment When you replace a module you have the option of assigning the device names automatically based on the co...

Page 304: ...he reader is in the Idle status 4 Click on the System menu item 5 In the Firmware update area click the Select firmware file icon 6 Select the update file 7 Click the Open button 8 Click the Update button Result The firmware is updated The update process is indicated in the information bar After the update has completed the reader is restarted The reader is ready for operation when the R S LED is ...

Page 305: ...ssword you need to reset the reader via the XML interface 4 Click on the System menu item 5 In the Restore area click the Restore button Result The reader is reset to the original factory settings The restore process is indicated in the information bar Note that if you restore to factory settings the RF650R reader is assigned the factory default IP address 192 168 0 254 In the factory settings the...

Page 306: ...Service and maintenance 12 5 Restore to factory settings SIMATIC RF650R RF680R RF685R 306 Configuration Manual 03 2018 C79000 G8976 C386 06 ...

Page 307: ...Hz This section describes important rules for preparation and implementation of the RFID UHF systems A 1 1 Technical basics General In contrast to inductively coupled HF systems in UHF technology there is full propagation of the radio waves just as in other wireless systems radio TV etc There are both magnetic and electrical field components present The following graphic shows the structure of a U...

Page 308: ...on homogeneous antenna field This means that it is possible that a transponder positioned closer to the RFID antenna has a lower RSSI value than a transponder much further away Propagation of the antenna field The waves do not propagate as a homogeneous field there is superposition of the waves that can cause the following effects Overshoots and field gaps due to obliteration of two waves These ar...

Page 309: ...ey differ in the polarization and antenna gain The direction of the electrical field component of an electromagnetic wave and the alignment of the antenna decide the polarization of the radiation A distinction is made between linear and circular polarization of an antenna With linear polarization you achieve the maximum write read distances when the polarization axes of the antenna and transponder...

Page 310: ... RF685R It has been shown that with a defined transponder alignment the linear antenna normally produces the best results A 1 2 Implementation of UHF RFID installations The use of UHF RFID systems requires careful planning and preparation to avoid problems during commissioning and operation A 1 2 1 Preparation phase Device selection When selecting the suitable RFID hardware remember the following ...

Page 311: ...configuration RF685R with integrated adaptive antenna Dynamic identification Dead spots cannot be excluded To be able to compensate for dead spots we recommend that you give preference to dynamic identification rather than static identification Dynamic identification means that the transponders are read while they are moving e g on the conveyor belt If static identification is necessary the antenn...

Page 312: ...gh the tests an adequate number of times to make sure that any sporadically occurring influences on the antenna fields are also tested The final position of the transponder should only be decided after an adequately intensive test phase so that suitable variations can be tried out if errors occur A 1 2 3 Setting up read points Adjust antennas Follow the steps below to optimize the antenna alignmen...

Page 313: ... reached dark blue RSSI values Note Transponder is not identified If no transponder is identified first increase the radiated power as described in the following section Then repeat the antenna adjustment Also check the polarization of your antenna If the transponder always has the same alignment the antenna polarization should be adapted accordingly If the transponder moves or the alignment of th...

Page 314: ...g and absorbent materials in the vicinity of the antenna Radiated power Using the Settings Read points menu item of the WBM you can set the radiated power Select the radiated power so that the required transponders can be identified reliably but without overreach In this case the following applies as much as necessary as little as possible In the Settings Activation power menu item you can find th...

Page 315: ...to the Accept power box with 2 dB added Note Optimizing the radiated power The value entered automatically in the Accept power box corresponds to the minimum value with which the transponder was identified by the antenna Min power plus a power reserve of 2 dB This value serves as a guideline and you can adapt it To be sure that the antenna reliably detects the transponders regularly we recommend t...

Page 316: ...input attenuation Use of UHF algorithms Changing the antenna position Shielding measures Varying the antenna polarization Use antennas with a lower gain Use antennas with adjustable polarization Lack of separation of transponders Transponders positioned close together are detected together although the application logic requires individual detection for example to determine the positioning order A...

Page 317: ...obile phones can also disturb identification This is the case if a reader of the type FCC or CMIIT is operated in Europe Solution approaches The disturbances can be eliminated by temporarily turning off the suspected source of interference or its shielding Interference can also occur with devices in other frequency bands if these are located in the immediate vicinity of the RFID antenna e g DECT t...

Page 318: ...is causes overload of the radio channels In this case enable the Intermissions function in the Settings General menu item to improve read reliability Varying the antenna polarization By using linear or circular antennas you can reduce field obliteration This improves the reader reliability in difficult radio conditions The RF685R and RF680 readers also provide the option of operating the internal ...

Page 319: ... number of transponders in the antenna field 1 3 transponders The aim is to reliably identify the transponders without the read points influencing each other Algorithms used Inventory Power Ramp Read Write Power Ramp Requirement The read points are mounted equipped and aligned and during reading there are transponders in the antenna field Note that this example is only of practical use when the re...

Page 320: ...r is reached e g 4 Note The higher the number of inventories the higher the likelihood that transponders will be identified with as low a radiated power as possible The more inventories you specify however the longer it may take in an unfavorable situation before there is access to the transponder Figure A 6 Access with minimum radiated power using the algorithms Inventory Power Ramp and Read Writ...

Page 321: ...e ended again Example A The inventories are taken over a specified time of 10 seconds Example B The inventories are taken until the light barrier is no longer interrupted Algorithms used Smoothing Requirement The read points are mounted equipped and aligned Parameter assignment S7 Rockwell user Follow the steps below to activate the Smoothing algorithm 1 In the menu item Settings Read points in th...

Page 322: ...mmand with the following parameters ATTRIBUTE 0x80 DURATION 0x00 DUR_UNIT 0x00 3 End the IF condition using a further Inventory command with the parameter ATTRIBUTE 0x87 Parameter assignment XML OPC UA user Follow the steps below to activate the Smoothing algorithm 1 In the menu item Settings Read points in the Algorithms area activate the Smoothing algorithm and specify the values as follows Obse...

Page 323: ...rSource value_triggerMode Start when the light barrier input 1 is interrupted 2 Program the condition so that as soon as the light barrier is no longer interrupted the transponder data is fetched by the command getObservedTagIDs value_duration 0 value_unit Time As an alternative the transponder data can also be fetched automatically using Events 3 End the If condition or the command with value_tri...

Page 324: ... to overshoot normally have significantly poorer RSSI values than transponders located in the regular antenna field 2 With the antenna parameters RSSI threshold and Input attenuation contained in the menu item Settings Read point and the algorithm Smoothing filter out the transponders identified due to overshoot 3 Check your settings using the menu item Diagnostics Tag monitor The RSSI delta algor...

Page 325: ...described in which a distinction is made between the way in which transponders are added to the Black list Example A All transponders currently in the antenna field of the read point and that have already been identified are added to the Black list This can only take place while inventories are being taken In other words when previously an INVENTORY command with ATTRIBUTE 0x86 was sent Example B I...

Page 326: ...n the Black List 1 Execute the INVENTORY command 0x86 to start identification of the transponders 2 Execute the EDIT BLACKLIST command 0x7A with the parameter EDIT_ BLACKLIST_MODE 0x01 when you are sure that all transponders have been identified E g at the end of passing through a gate 3 Execute the INVENTORY command 0x87 to end identification of the transponders Example B further procedure Follow...

Page 327: ...so find further information in the manual Ident Profile and Ident Blocks Standard Function for RFID systems NOTICE Deviations from the specification Some of the command frames of the specification were adapted and differ from those listed in the specification These adapted command frames as well as the unchanged command frames used are described in the following sections A 3 1 General structure of...

Page 328: ...atus of a reader communications module Table A 3 Command Byte 0 1 2 3 4 5 6 7 8 9 10 11 12 19 20 27 Mean ing DBL SN CC CI TDB DBN_H DBN_L DBL Value 35 t A 1 1 35 0 0 0 Byte 28 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 Mean ing ATT Value 0 0 0 0 0 89 0 0 0 0 Table A 4 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 11 239 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL SLG STATUS Value t xx 1 1 ...

Page 329: ...0 0 0 0 0 0 xx 0 xx xx 0 Table A 6 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 11 239 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL INVENTO RY Value i xx Table A 7 Description of the bytes Byte Description 12 Reserved value 0 38 Attribute 128 0x80 EPC ID without additional information 129 0x81 EPC ID with additional information on the RSSI value and re served bytes 134 0x86 Activate presence mode 136 0x87 D...

Page 330: ...DRESS LENGTH PSWD IDLENGT H EPC ID Value 0 xx xx xx xx 0 0 xx xx Table A 9 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 11 239 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL DATA Value p xx Table A 10 Description of the bytes Byte Description Command 12 Reserved value 0 13 Memory bank on the transponder 0x00 RESERVED 0x01 EPC 0x02 TID 0x03 USER 14 15 Physical start address on the transponder 0 0xFFFF 16 17 Nu...

Page 331: ...n ing BANK ADRESS LENGTH PSWD IDLENG TH EPC ID DATA Value xx xx xx xx 0 0 xx xx Table A 12 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL Value q xx 1 Table A 13 Description of the bytes Byte Description 12 Reserved value 0 13 Memory bank on the transponder 0x00 RESERVED 0x01 EPC 0x02 TID 0x03 USER 14 15 Physical start address on the transponder 0 0xFFFF 16 17 Numb...

Page 332: ... 24 25 26 27 88 89 150 Mean ing NEW IDLENG TH PSWD IDLENG TH EPC ID NEW EPC ID Value 0 0 xx xx 0 0 xx xx xx Table A 15 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL Value 0 g xx 1 1 0 Table A 16 Description of the bytes Byte Description 12 Reserved value 0 16 17 Length of the new EPC ID 2 62 bytes 18 19 Password for transponder access 0x00 no password 26 Length of...

Page 333: ...B DBN_H DBN_L DBL Value 78 j U 1 0 1 0 Byte 12 13 14 15 16 17 18 21 22 23 24 25 26 27 88 Mean ing SOURCE PSWD IDLENGT H EPC ID Value 0 0 0 0 0 0 0 Table A 18 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 Meaning DBL SN CC STATUS TDB DBN_H DBN_L DBL Value 0 j xx 1 1 0 Table A 19 Description of the bytes Byte Description 12 Reserved value 0 18 19 Password for transponder access 0x00 no password 26 Length of the...

Page 334: ...lue 78 y U 1 0 1 0 Byte 12 13 14 15 16 17 18 21 22 23 24 25 26 27 88 Mean ing SOURCE PSWD ACTION MASK IDLENGT H EPC ID Value 0 0 0 0 xx xx xx xx xx Table A 21 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 Meaning DBL SN CC STATUS TDB DBN_H DBN_L DBL Value 0 y xx 1 1 0 Table A 22 Description of the bytes Byte Description 12 Reserved value 0 18 21 Password for transponder access 0x00 no password 22 23 See EPC s...

Page 335: ... 6 7 8 9 10 11 Mean ing DBL SN CC CI TDB DBN_H DBN_L DBL MODE Value 78 z U 1 0 1 xx Byte 12 13 14 15 16 17 18 21 22 23 24 25 26 27 88 Mean ing SOURCE IDLENGT H EPC ID Value 0 0 0 0 0 0 0 xx xx Table A 24 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 Meaning DBL SN CC STATUS TDB DBN_H DBN_L DBL Value 0 z xx 1 1 0 Table A 25 Description of the bytes Byte Description 11 Mode 0x00 add TagID 0x01 add all OBSERVED ...

Page 336: ...k list Table A 26 Command Byte 0 1 2 3 4 5 6 7 8 9 10 11 Mean ing DBL SN CC CI TDB DBN_H DBN_L DBL Value 78 l U 1 0 1 0 Byte 12 13 14 15 16 17 18 21 22 23 24 25 26 27 88 Mean ing SOURCE Value 0 0 0 0 0 0 0 Table A 27 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 11 239 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL DATA Value 0 l xx 1 0 Table A 28 Description of the bytes Byte Description 12 Reserved value 0 ...

Page 337: ...11 12 19 20 27 Mean ing DBL SN CC CI TDB DBN_H DBN_L DBL Value 35 a A 1 0 1 35 0 0 0 Byte 28 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 Mean ing Value 0 0 0 0 0 0 0 0 0 0 Table A 30 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 11 239 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL CONFIG_ DATA Value a xx xx Table A 31 Description of the bytes Byte Description 11 239 Buffer for up to 32 KB configuration data ...

Page 338: ...ons module Table A 32 Command Byte 0 1 2 3 4 5 6 7 8 9 10 11 12 19 20 27 Mean ing DBL SN CC CI TDB DBN_H DBN_L DBL CONFI G Value x A xx 0 0 Byte 28 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 239 Mean ing LENGT H CONFI G_DAT A Value 0 xx 0 0 0 0 0 0 0 0 xx Table A 33 Reply Byte 0 1 2 3 4 5 6 7 8 9 10 11 13 Mean ing DBL SN CC STATUS TDB DBN_H DBN_L DBL MAX_ PACKAG E SIZE Value 2 x xx 1 1 2 xx ...

Page 339: ... configuration data to be sent 0x03 communication reset configuration data to be sent 0x80 no communication reset individual parameters 32 33 Number of bytes to be written 46 239 Buffer for up to 32 KB configuration data Data that exceeds 239 bytes is trans ferred in several blocks Reply 11 13 Configuration data If CONFIG 1 2 or 3 the value 0 If CONFIG 0 the value 240 in bytes 11 and 12 the value ...

Page 340: ...s for the readers RF650R RF680R RF685R Country Approval available Country profile Albania no Algeria no Argentina yes Standard FCC Armenia no Australia yes Australia FCC_AUSTRALIA Austria yes Standard ETSI Azerbaijan no Bahrain no Bangladesh no Belarus no Belgium yes Standard ETSI Bolivia no Bosnia and Herzegovina no Botswana no Brazil yes Brazil FCC_BRAZIL Brunei Darussalam no Bulgaria yes Standa...

Page 341: ...dard ETSI Guatemala no Honduras no Hong Kong China no Hungary yes Standard ETSI Iceland yes Standard ETSI India yes India ETSI_INDIA Indonesia yes Indonesia FCC_INDONESIA Iran Islamic Rep no Ireland yes Standard ETSI Israel yes Israel FCC_ISRAEL Italy yes Standard ETSI Jamaica no Japan yes Japan CMIIT_JAPAN Jordan no Kazakhstan no Kenya no Korea Rep yes South Korea FCC_SOUTHKOREA Korea DPR no Kuwa...

Page 342: ...nds yes Standard ETSI New Zealand no Nicaragua no Nigeria no Norway yes Standard ETSI Oman no Pakistan yes Standard ETSI Panama no Paraguay no Peru no Philippines no Poland yes Standard ETSI Portugal yes Standard ETSI Romania yes Standard ETSI Russian Federation yes Russia ETSI_RUSSIA Saudi Arabia no Senegal no Serbia yes Standard ETSI Singapore no Slovak Republic yes Standard ETSI Slovenia yes St...

Page 343: ...available Country profile Taiwan no Tajikistan no Tanzania no Thailand yes Thailand FCC_THAILAND Trinidad and Tobago no Tunisia no Turkey yes Standard ETSI Turkmenistan no Uganda no Ukraine no United Arab Emirates no United Kingdom yes Standard ETSI United States yes Standard FCC Uruguay no Uzbekistan no Venezuela no Vietnam no Yemen Rep no Zimbabwe no ...

Page 344: ...mentation to commissioning through to maintenance and modernization You will find contact data on the Internet at the following address Link 3 http w3 siemens com aspa_app RFID homepage For general information about our identification systems visit RFID home page http w3 siemens com mcms identification systems Online catalog and ordering system The online catalog and the online ordering system can...