FB_MBReadRegs (Modbus function 3)
This function is used for reading 1 to 128 output registers (16 bit). The first byte contains the lower eight bits and the second byte the upper eight bits.
VAR_INPUT
VAR_INPUT
sIPAddr : STRING(15);
nTCPPort : UINT:= MODBUS_TCP_PORT;
nUnitID : BYTE:=16#FF;
nQuantity : WORD;
nMBAddr : WORD;
cbLength : UDINT;
pDestAddr : POINTER OF BYTE;
bExecute : BOOL;
tTimeout : TIME;
END_VAR
sIPAddr: Is a string containing the IP address of the target device.
nTCPPort: Port number of the target device.
nUnitID: Identification number of a serial sub-network device. If a device is addressed directly via TCP/IP, this value must be 16#FF.
nQuantity: Number of output registers (data words) to be read. The value of nQuantity must be > 0.
nMBAddr: Start address of the output registers to be read (word offset).
cbLength: Contains the max. byte size of the destination buffer. The minimum buffer byte size must be: nQuantity * 2.
pDestAddr: Contains the address of the destination buffer into which the data are to be read. The buffer can be a single variable, an array or a structure, whose address can be found with the ADR operator.
bExecute: The function block is activated by a rising edge at this input.
tTimeout: States the length of the timeout that may not be exceeded by execution of the ADS command.
VAR_OUTPUT
VAR_OUTPUT
bBUSY : BOOL;
bError : BOOL;
nErrId : UDINT;
cbRead : UDINT;
END_VAR
bBusy : When the function block is activated this output is set. It remains set until an acknowledgement is received.
bError : If an ADS error should occur during the transfer of the command, then this output is set once the bBusy output is reset.
nErrId : Supplies the ADS error number when the bError output is set.
cbRead: Contains the number of bytes currently read.
Function specific ADS error code | Possible reason |
---|---|
0x8001 | Modbus function not implemented |
0x8002 | Invalid address or length |
0x8003 | Invalid parameters: - wrong number of registers |
0x8004 | Modbus server error |
Example of calling the block in FBD:
PROGRAM Test
VAR
fbReadRegs : FB_MBReadRegs;
bReadRegs : BOOL;
bReadRegsBusy : BOOL;
bReadRegsError : BOOL;
nReadRegsErrorId : UDINT;
nReadRegsCount : UDINT;
nQuantity : WORD:=2;
nMBAddr : WORD:=24;
arrData : ARRAY [1..2] OF WORD;
END_VAR
After a rising edge of "bExecute" and successful execution of the ReadRegs command, the content of registers 25 and 26 is located in the arrData array:
Register | Array offset | Status |
---|---|---|
25 | 1 | 0x1234 ( as byte 0x34 0x12) |
26 | 2 | 0x5563 ( as byte 0x63 0x55) |
Requirements
Development environment |
Target system type |
PLC libraries to be linked |
---|---|---|
TwinCAT v3.0.0 |
PC or CX (x86) |
Tc2_ModbusSrv |