TM SM Maximum Value for OEMs SM From Rockwell Automation NX Protocol Training Feb 27, 2007 ~ Mar 2, 2007 Ki Joon Kim RAK OBB Strategic Marketing Ki Joon Kim RAK OBB Strategic Marketing

2 Simple Demo with PLC + HMI + OPC Server In H/W point, this Simple demo consists of PLC and PC. In S/W point, PC has Serial Port, OPC Server and HMI Software. OPC : OLE for Process Control. HMI : You can use every HMI software such as RSView32, InTouch, iFix, WinCC and etc which support OPC. Through this simple demo, we will show basic concept of communication with NX-Series PLC. Serial Port OPC Server WinOPC or KepServer HMI RSView32 or iFIX or InTouch Windows XP/2K

3 Setup OPC Server - WinOPC WinOPC is a kind of OPC Server for NX-Series PLC but current is Version 1.0. So, it is inconvenient, yet. You can use this one freely after download. To define tag to read or write, user have to modify XML file. In near future, GUI will be changed. Configuration of Device.xml Also, you can use help file to setup.

4 Setup OPC Server - KepServer This is came from KepWare. Also, you can download from freely and you are able to use during 3 hours for each execution. (Ver.4 is able to use 2 hours.)) KepServer has 2 version. One is KepServer Enterprise for RA products such as RSView32, RS-SQL,etc and another is KepServerEX for general customer. Let’s see procedure of setting up. Let’s see procedure of setting up. (Application Note)

5 Simple Demo with PLC + HMI + OPC Server We will show simple demo which are one of real applications. One is an example of “Gas Engine Steam Supply and Power Generator” The other is an example of controlling AC Drive with PLC.

6 PLC Communication Protocol ItemsDescription InterfaceRS-232 / RS Port Baudrate4800 / 9600 / / Synch/AsynchHalf Duplex Asynchronous MethodPolling CodeBinary (HEX) Communication FormatData Bits 8 bits Stop Bits 1 bit Parity Bit None Error CheckCRC-16 Data Transmit. OrderLower Byte First CableTwisted Pair Cable Communication Specification

7 How to Connect SignalPin F.G1 SD (TxD)2 RD (RxD)3 -4 S.G (GND) Vcc9 PinSignal 1F.G 2RD(RxD) 3SD(TxD) 4DTR 5S.G(GND) 6DSR 7RTS 8CTS 9 PLC (9 Pin D-Sub Male)PC (9 Pin D-Sub Female) RS-232C and RS-485 Cable

8 Function Codes Functions Query Function CodeResponse Function Code Remark 2 Step4 Step2 Step4 Step Read Bit$21$01$A1$81 Write Bit$22$02$A2$82 Read Word$23$03$A3$83 Write Word$24$04$A4$84 Read Mixed Bit/Word$25$05$A5$85 Write Mixed Bit/Word$26$06$A6$86 Read Program$27$07$A7$87 Write Program$28$08$A8$88 Read Instruction$29$09$A9$89 Change Instruction$2A$0A$AA$8A Change Operand$2B$0B$AB$8B Insert Instruction$2C$0C$AC$8C Delete Instruction$2D$0D$AD$8D Find Instruction$2E$0E$AE$8E Find Operand$2F$0F$AF$8F Delete All/Partial Program$20$10$A0$90 No Service$00

9 Communication Frame (2-Steps) DASA Function Code LengthDataCRC LCRC H 1~255 Byte (01~FF) 0 : 256 Byte See Function Code Source Address Destination Address CRC-16 Code Error Frame DASA$8x$01Error CodeCRC LCRC H Data Size Error #1 : Invalid Function Error #2 : Overflow Error #3 : Invalid Frame Structure Error #4 : Invalid CPU Operation Error #5 : Too Long Frame Source Address Destination Address CRC-16 Code Function Code

10 Communication Frame (2-Steps) Communication Frame Example Read Bit : Read 5 Bits from K to K Command Answer Write Bit : Write 3 Bits to M to M Command Answer Read Word : Read 3 Words from M0010 to M0012 Command Answer Write Word : Write 3 Word from M0000 to M0002 Command Answer FF FF A105FF 00 FFD4DF FF FF00FF7177 FF A20100A072 FF 2303CA0003A5BC FF A3061B00BE00E60041CE FF 2408C BC9A9F43 FF A

11 Calculate CRC DASA Function Code LengthDataCRC LCRC H CRC Calculation Scope 2 Byte CRC CRC = For i = 0 To PL - 1 CRC = Int(CRC / 256) Xor CRCTable((CRC Xor DATABLOCK(i)) And 255) Next i

12 Protocol (1/4) – Read Bit Request Frame Response Frame Only for R, L, M, K, F, TC Register Example Read Bit : Read 5 Bits from K to K Command Answer DASA$21$03Base LBase HNCRC LCRC H PLC IDPC IDFunction CodeData Size Absolute Register Address The length of bits to read CRC DASA$A1N Base+0 Bit Value Base+1 Bit Value …. Base+N-1 Bit Value CRC LCRC H PC IDPLC IDFunction CodeData Size Data: ON=$FF,OFF=$00 CRC FF FF A105FF 00 FFD4DF $21 OR $80 * * * * *

13 Protocol (2/4) – Write Bit Request Frame Response Frame Only for R, L, M, K, F, TC Register Example Write Bit : Write 3 Bits to M to M Command Answer DASA$22NBase LBase H Base+0 Bit Value Base+1 Bit Value … Base+N-1 Bit Value CRC LCRC H PLC IDPC ID Function Code Absolute Register Address The length of bits to write CRC DASA$A2$01$00CRC LCRC H PC IDPLC IDFunction CodeData Size CRC FF FF00FF7177 FF A20100A072 $22 OR $80 * * * * *

14 Protocol (3/4) – Read Word Request Frame Response Frame All Register Example Read Word : Read 3 Words from M0010 to M0012 Command Answer DASA$23NBase LBase HNCRC LCRC H PLC IDPC IDFunction CodeData Size Absolute Register Address The length of bits to read CRC DASA$A3L Base +0 Low Byte Base +0 High Byte Base +1 Low Byte Base +1 High Byte …. Base +N-1 Low Byte Base +N-1 High Byte CRC L CRC H PC IDPLC ID Function Code Data Size L = N * 2 CRC FF 2303CA0003A5BC FF A3061B00BE00E60041CE $23 OR $80

15 Protocol (4/4) – Write Word Request Frame Response Frame All Register Example Write Word : Write 3 Word from M0000 to M0002 Command Answer DASA$24LBase LBase H Base +0 Low Byte Base +0 High Byte Base +1 Low Byte Base +1 High Byte … Base +1 Low Byte Base+1 HighByte CRC LCRC H PLC ID PC ID Function Code Absolute Register Address CRC Data Size L = N * 2+2 DASA$A4$01$00CRC LCRC H PC IDPLC IDFunction CodeData Size CRC FF 2408C BC9A9F43 FF A $24 OR $80

16 Hand On Lab Materials Hardware : PC, PLC (NX7 / 70), AC Drive or Servo Drive, Motor Software : WinGPC, OPC Server, HMI Software

17 Modbus RTU – Inverter/Servo Control EOI or HMI SW (OPC server) Speed and Status COM1 COM2 Modbus RTU Master Slave NX7 or NX70 or NX700 PLC Inverter (AC Drive) or Servo Speed/Torque Output Reference using Modbus RTU Speed/Torque Input Feedback using 4-20mA Analog Inputs EOI Monitors Feedback and Status Yaskawa Servo OEMax G5 AC Drive

18 Custom Protocol – Inverter/Servo Control EOI or HMI SW (OPC server) Speed and Status COM1 COM2 Modbus RTU Master and CSD* Protocol Modbus RTU SlaveCSD* Slave NX7 or NX70 or NX700 PLC Inverter (AC Drive) or Servo Speed/Torque Output Reference using Modbus RTU Speed/Torque Input Feedback using 4-20mA Analog Inputs EOI Monitors Feedback and Status OEMax CSD* Servo OEMax G5 AC Drive

19 Success Stories

20 Tianjin Sailing OEMax protects China’s Environment! Hengshui Haijiang Filter Press Sludge Filtering under High Pressure NX7-28ADR + NX7-28EDR digital I/O 30 Sets sold to Customer Also E-View EOI Replaced LG Master-K PLC Keys to Win Tianjin Relationship and Experience Offered Low Price similar to LG (but not lower) Tianjin Engineer programmed and integrated PLC Next Targets are expected Wins Shanghai Dazhang Filter Press 2 NX7 sets sold – Verbal commitment to use OEMax Shanghai Coal Mining Application NX70 – Verbal commitment to use OEMax Dezhou Filter Press

21 Shanghai Hands (actually Wuxi Vanpoo Siemens branch) Wuxi BD Flocking (bdflocking.com) Textile – Pattern/Screen Printing on Cloth NX70 Digital I/O and Analog 1-Axis Motion 1 set sold – Machine sold at Guangzhou Textile Exhibition 100 sets projected Also Proface EOI + Siemens AC Microdrives Replaced Siemens S7-200 or S7-300 PLC Keys to Win Vanpoo DI Relationship and Experience Vanpoo DI Makes Higher Margin selling OEMax PLC than Siemens NX70 price is similar to S7-200 but functionally between S7-200 and S Vanpoo Engineers and OEMax Strategic Marketing programmed and integrated PLC

22 Shenzhen Sanding MingSang Industrial (mingsang.com) Assembly – Ornament (Bracelet) Assembly Machines NX7(S) Digital I/O and PTO 2-Axis Motion sets sold so far to DI/SI Also Eview EOI + Low Cost Steppers Replaced Siemens S7-200 Keys to Win Shenzhen DI is Siemens System Integrator Probably higher margin for System Integrator using OEMax PLC over Siemens S7-200 PLC SOBB Engineering (BD Kim + JY Bae) modified NX7(S) FW to provide 32-bit PTO support Shenzhen Engineers programmed and integrated PLC

23 Question ?

24 TM Maximum Value for OEMs SM