Winsonic MODBUS Remote IO user manual Rev. 1.1 Model: DAU01-MOD2008-4AI+4AO www.ewinsonic.com/automation Model: DAU01-MOD2008-4AI+4AOO
Winsonic MODBUS Remote IO user manual Rev. 1.1
Model: DAU01-MOD2008-4AI+4AO
www.ewinsonic.com/automation
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
LEGAL NOTICE
WarrantyAll products manufactured by Winsonic are under warranty regarding defective materials for
a period of one year, beginning from the date of delivery to the original purchaser.
WarningWinsonic assumes no liability for any damage resulting from the use of this product.
Winsonic reserves the right to change this manual at any time without notice. The
information furnished by Winsonic is believed to be accurate and reliable. However, no
responsibility is assumed by Winsonic for its use, nor for any infringements of patents or
other rights of third parties resulting from its use.
Copyright©Copyright 2016 by Winsonic. All rights are reserved.
SupportIf you have any question for our products, Please contact us directly or email to
Document released :Manual : www.ewinsonic.com
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
Table of Contents
1.Introduction
2. Hardware Information
2.1 DAU01-MOD2008-4AI+4AO General Technical Data
3. Functional Feature of INIT Mode / Normal Mode
Table of Contents
2,1,1 Communication Interface
2.1.2 Power and SG connector
2.1.3 DIP Switch
2.1.4 Reset Bottom
2.1.5 Power LED
2,1.6 Status LEDs
2.1.7 Dimension
2.1.8 DIN Rail Hook
2.1.9 Terminal Block
2.2 DAU01-MOD2008-4AI+4AO IO Technical Data
2.2.1 Specifications
2.2.2 I/O connector (Pin Assignment)
2.2.3 Wire Connection
2.2.3.1 Analog Input
2.2.3.2 Analog Output
2.2.3.3 RS485 Wiring
2.2.3.4 RS422 Wiring
7
8
8
16
9
9
9
9
9
10
10
11
12
13
13
14
14
14
14
15
15
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
4. Quick Start Guide
4.1 System Configuration
4.2 HW connection
4.2.1 Modbus TCP/IP
4.2.2 Modbus RTU
4.2.3 Modbus Gateway (MG)
7, DAU01-MOD2008-4AI+4AO Command
7.1 System Command Function Code 70(0x46)
7.2 System Command List
7.2.1 SA=0x0000 Read/Write the modbus ID
7.2.2 SA=0x0001 Read/Write the reboot counter
7.2.3 SA=0x0002 Read/Write the baud rate
7.2.4 SA=0x0003 Read/Write the buzzer frequency
7.2.5 SA=0x0004 Read/Write the Network Configuration
7.2.6 SA=0x0005 Read/Write web port
7.2.7 SA=0x0006 Read/Write TCP port
7.2.8 SA=0x0007 Read/Write UDP port
5. Test the Modbus Command
5.1 Modbus TCP
5.2 Modbus RTU
6. Web page introduction
6.1 DAU01-MOD2008-4AI+4AO Analog I/O Status
17
17
22
22
22
23
29
29
30
25
25
26
27
27
31
32
33
34
35
36
37
38
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
7.2.9 SA=0x0008 Read/Write Ethernet IP port
7.2.10 SA=0x0009 Read/Write Mask IP port
7.2.11 SA=0x000A Read/Write Gateway IP port
7.2.12 SA=0x000B Read/Write DNS1 port
7.2.13 SA=0x000C Read/Write DNS2 port
7.2.14 SA=0x000D Gateway Host IP
7.2.15 SA=0x000E Read/Write password
7.2.16 SA=0x0100 Read/Write RTC
7.2.17 SA=0x0200 Read Last boot time
7.2.18 SA=0x0202 Read mode status is INIT or Normal mode
7.2.19 SA=0x0203 Read EEPROM status
7.2.20 SA=0x0204 Read module name
7.2.21 SA=0x0205 Read Serial number
7.2.22 SA=0x0206 Read Firmware Version
7.2.23 SA=0x0207 Read MAC address
7.2.24 SA=0x0300 Write Save setting
7.2.25 SA=0x0301 Write Restore value
7.2.26 SA=0x0302 Write Reboot the module
7.2.27 SA=0x0303 Write Update network configuration
7.3 System Command Example
8.2 Analog Output value and default output value Command Function Code 0x03,0x06
8.1.1 Analog default output enable list
8.1.2 Command Format
8.1.3 Command Example
8.2.1 Analog Output Vaue and Default Output Value list
8.2.2 Command Format
8.2.3 Command Example
39
40
41
42
43
44
45
46
47
47
48
49
50
51
52
52
53
53
53
54
55
55
58
55
56
57
58
59
60
Model: DAU01-MOD2008-4AI+4AOO
8. DAU01-MOD2008-4AI+4AO Analog Input, Output Command
8.1 Analog Output Default Output Enable Command Function Code 0x01 and 0x05
www.ewinsonic.com/automation
9. Appendix
9.1 Ordering Information
9.2 Technical Support
8.3 Analog Input Value Command Fuction Code 0x04
8.3.1 Analog Input value list
8.3.2 Command Format
8.3.3 Command Example
64
64
64
61
61
62
63
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
Model: DAU01-MOD2008-4AI+4AOO
1. Introduction
The DAU01-MOD 2XXX series is a family of network data acquisition and control modules,
providing digital input/output, analog input / output, PWM, counter, relay and other functions. The
modules can be remotely controlled using a set of commands - Modbus RTU or Modbus TCP Protocol.
DAU01-MOD2XXX series provides:
1. 10/100 Mbps Ethernet interfaces supports Modbus/TCP protocol over TCP/IP for data connection.
2. USB 2.0 interfaces supports Modbus RTU protocol for data connection.
3. RS485/RS422 interface supports Modbus RTU protocol for data connection.
4. Modbus gateway function ,when it was set to be the Modbus gateway function then the
Modbus host can communicate through the Ethernet/USB cable via Modbus gateway to control
the other Modbus slave device with RS422/RS485 interface.
The DAU01-MOD2XXX series modules can connect to all communication interfaces simultaneously
but control to access it by one of them in the meantime.
Modbus/TCP and RTU Protocol Supported For Open Connectivity
The DAU01-MOD2XXX series modules support the popular industrial standard, Modbus/TCP and
RTU protocol, to connect with Ethernet Controller or HMI/SCADA software built with Modbus/TCP
or RTU driver and can manipulate it simply and implement your various applications easily. Fig 1.1
is shown a typical MODBUS application.
Figure 1.1 Typical Application of DAU01-MOD2XXX
7
www.ewinsonic.com/automation
2. Hardware Information
2.1 DAU01-MOD2008-4AIO+4AO General Technical Data
2.1.1 Communication Interface
Figure 2.1 Appearance of DAU01-MOD2008-4AI+4AO
Power,RS422,RS485,F.G connector
USB port
Ethernet port
I/O connector
Power LED
Status LED
I/O status LED
Reset
Notation
Ethernet
USB
TX-
TX+
RX-
RX+
Description
Ethernet port with MODBUS TCP /Ethernet TCP /IP protocol
Type B USB with MODBUS RTU protocol
RS422 Transmit – with MODBUS RTU protocol
RS422 Transmit + with MODBUS RTU protocol
RS422 Receive - / RS485 Data – with MODBUS RTU protocol
RS422 Receive + / RS485 Data + with MODBUS RTU protocol
DIP switch
Model: DAU01-MOD2008-4AI+4AOO
8
www.ewinsonic.com/automation
2.1.2 Power and SG connector
Notation
V+
V-
SG
Description
Power supply with 12V~48V DC(+- 10%)
Power supply GND
Signal Ground
2.1.3 DIP Switch
Notation
1
2
3
4
Description
OFF : RX without terminal resistor, ON: RX with terminal resistor
OFF : TX without terminal resistor, ON : TX with terminal resistor
ON =RS485 (2 wires) OFF= RS422 (4 wires) Mode
OFF : INIT Mode, ON: Normal Mode
2.1.4 Reset Bottom
2.1.5 Power LED
Note:
INIT mode: ref. Sec. 3 Functional feature of the INIT mode and Normal Mode.
Normal mode : ref. Sec. 3 Function feature of the INIT mode and Normal Mode.
Terminal resistor : 120 ohm .
Notation Color
Red
State
ON
Description
The power on
Notation
Reset
State
Push bottom
Description
Reboot the system.
Model: DAU01-MOD2008-4AI+4AOO
9
2.1.6 Status LED
2.1.7 Dimensions
Notation
S
Color
Green
www.ewinsonic.com/automation
States
Blinking(on 150ms, off 150 ms)
Blinking 4 times
Blinking 2 times
Description
The device is in MODBUS command access
Check Mac address error
I2C write to EEPROM error
Top view
Front viewLeft side view Right side view
Bottom view
DIN Rail screw hole
Model: DAU01-MOD2008-4AI+4AOO
10
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
Rear view
DIN Rail screw hole
Unit:mm
2.1.8 DIN Rail Hook
Provided the din rail hook and dimension as below and screw the hook to the housing then hook
it on the din rail.
Unit:mm
11
www.ewinsonic.com/automation
2.1.9 Terminal Block
Model: DAU01-MOD2008-4AI+4AOO
Provided the 1x 7 pin terminal block plugged to the Power connector and 2 x 10 pin terminal
blocks plugged to the IO connector. See the Figure
1 x7 pin power terminal block wired to the Power.
2 x 10 pin terminal block wired to the Input/Output device.
12
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
The DAU01-MOD2008-4AI+4AO is an industrial MODBUS slave I/O module which is built in 4
analog input and 4 analog outputs.
2.2.1 Specifications
2.2 DAU01-MOD2008-4AI+4AO IO Technical Data
Analog Input
Channels
Type
Resolution
Sampling Rate
Bandwidth
Common Mode Rejection
Normal Mode Rejection
Input Impedance
ESD Protection
Analog Output
Channels
Type
Resolution
Accuracy
Voltage Output Capability
Current Load Resistance
Open Wire for Current Output
Power
Input Voltage Range
Power Consumption
Mechanism
Installation
Dimension
Environment
Operating Temperature
Storage Temperature
Relative Humidity
4
0 to 10VDC, 0 to 20 mA, 4 to 20 mA (burn-out mode)
16-bit
19.86 Samples/Sec
19.79Hz
90 dB Min.
60 dB Min.
100KΩ
4 kV Contact for each terminal and 8 kV Air for random points
4
+0 mA ~ +20 mA, +4 mA ~ +20 mA
12-bit
+/- 1% of PSR
10 V @ 20 mA
500 Ohms
0 mA ~ 20 mA
12V~48V DC(+- 10%)
Max 2.7W(24VDC)
DIN-Rail
115mmx110mmx30mm
-25℃ ~75℃
-30℃~80℃
10~90%, No Condensation
13
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
2.2.2 I/O connector (Pin Assignment)
GND VI1- VI1+ VI2- VI2+ VI3- VI3+ VI4- VI4+ GND
VO1+ GND VO2+ GND IO1- IO1+ GND IO2- IO2+ GND
2.2.3 Wire Connection2.2.3.1 Analog Input
2.2.3.2 Analog Output
IOx+
IOx-
VIx+
VIx-
Voltage output Current output
VOx+
GND
+
-
14
www.ewinsonic.com/automation
2.2.3.3 RS 485 wiring
Model: DAU01-MOD2008-4AI+4AOO
MOD2XXX
MOD2XXXMOD2XXX
2.2.3.4 RS 422 Wiring :
MOD2XXX
MOD2XXX MOD2XXX
15
www.ewinsonic.com/automation
3. Functional Feature of INIT Mode / Normal Mode
When the module set to INIT mode, then repower the module will restore the default value
of the module. Now Master can use the default setting to communicate with the module
to configure the module.
The MODBUS RTU default setting :
MODBUS ID :01
Baud Rate : 9600 bps
Parity : None
Data length: 8 data bits
Stop bit: 1
The MODBUS TCP default setting :
IP:192.168.1.100
Gateway:192.168.1.1
Subnet Mask:255.255.255.0
Primary DNS:192.168.1.1
Secondary DNS:8.8.8.8
Web port : 80
TCP port : 502
UDP port : 502
MBAP : Enable
DHCP: Disable
After configuring the new IP address/ Baud Rate/ Modbus ID, user should switch to the
Normal Mode. then repower the module or press the reset bottom. Then the module will
work under the new configuration.
1.
2.
3.
4.
Model: DAU01-MOD2008-4AI+4AOO
16
www.ewinsonic.com/automation
4. Quick Start Guide
4.1 .System Configuration
Model: DAU01-MOD2008-4AI+4AOO
Setup the DIP Switch bit 4 OFF as “INIT” mode. see the section 2.1.3
Connect the power line ( 12V ~ 48V) to power on the module
Through Ethernet to connect the DAU01-MOD2XXX module and PC. The INIT mode default IP
is 192.168.1.100. The user use the web browser like IE, chrome,… to type the IP to connect to
the DAU01-MOD2XXX module.
Web server can read & write the system configuration and IO status.
When type the default (INIT mode) IP “192.168.1.100” in the browser (Explore, Chrome,..) to
connect to the DAU01-MOD2XXX web server.
You will see the Account and PW entry to type
Account : admin, PW : admin
1.
2.
3.
4.
Note: The webpage used the DAU01-MOD2016-8DI+8DO module as the example.
17
www.ewinsonic.com/automation
After it will show the “Overview” to display the device configuration and IO status.
To click the “ System Configuration “ to set up the configuration.
System Configuration to setup the “Network” and “Modbus” parameter to setup the IP network-
ing and Modbus ID and others parameters.
5.
6.
7.
Modbus TCP/Web : The user can setup what his requirement parameter like IP address, Gateway, Subnet
Mask, Primary DNS, Secondary DNS, Web port, TCP port, UDP port, MBAP , DHCP and Modbus ID.
Modbus RTU : The user can setup what his requirement parameter like Baud rate, Stop bit ,Parity and
Modbus ID.
A.
B.
Model: DAU01-MOD2008-4AI+4AOO
18
www.ewinsonic.com/automation
Note: The “Action”function description.
Restore device : To Restore the default value.
Reboot device : To Reboot the device
Submit : All the parameter modified need click the Submit to save to the RAM.
Save all data : To save the System Configuration all parameter into the EEPROM.
Setup the DIP Switch bit 4 ON as “Normal” mode and.
Power off then Power On or Reset the module to reboot it.
After reboot then login as the new IP like 192.168.1.200 to be the setting system configuration.
You will see the account and PW to login then type both of them with admin to login.
8.
9.
10.
Model: DAU01-MOD2008-4AI+4AOO
19
www.ewinsonic.com/automation
Setup the DIP Switch bit 4 ON as “Normal” mode and.
Power off then Power On or Reset the module to reboot it.
After reboot then login as the new IP like 192.168.1.200 to be the setting system configuration.
You will see the account and PW to login then type both of them with admin to login.
You will see the “Overview” had changed to “Normal mode”
Check the “System Configuration” had changed to what you modified parameters.
11.
12.
Model: DAU01-MOD2008-4AI+4AOO
20
www.ewinsonic.com/automation
Model: DAU01-MOD2008-4AI+4AOO
Ethernet/USB to RS485/RS422 Modbus Gateway function13.
A. In the System configuration to click the MG (Modbus Gateway) to enable it.
B. MG host interface to click and slect the Ethernet or USB
C. MG host IP to set the host PC IP which is provided by Ethernet (DHCP) or the Fixed IP by own setting.
For example to use the ipconfig cmd to check your host PC’s IP , for example the IP is 192.168.1.83
D. Click the Submit to save the setting.
21
www.ewinsonic.com/automation
4.2 HW connection
4.2.1 Modbus TCP/IP :
Connect the module and PC to the ethernet network with router .
Connect the module to the power supply using the V+ and V- terminals.
See Section 2.1.2 for the Power Connector assignment. Note that the voltage supplied to the
module should be in the range of +12 to +48 V DC.
1.
2.
4.2.2 Modbus RTU:
RS485: Connect the module to the RS-485 network using the R+ and R- to connect the com-
munication interface with PC host. The PC connect to the module wiring ,please refer the
Sec.2.2.4.3 .If the PC host is only equipped with an USB/RS-232 interface, then a USB/RS-232
to RS-485 converter will be required.
RS422: Connect the device to the RS-422 network using the R+,R- and T+,T- to connect the
communication interface with PC host. The PC connect to the module wiring ,please refer the
Sec.2.2.4.4 .If the PC host is only equipped with an USB/RS-232 interface, then a USB/RS-232
to RS-422 converter will be required.
USB: Connect the module and PC via USB cable.
1.
2.
3.
4. Connect the module to the power supply using the V+ and V- terminals.
See Section 2.1.2 for the Power Connector assignment. Note that the voltage supplied to the
module should be in the range of +12 to +48 V DC.
Model: DAU01-MOD2008-4AI+4AOO
22
www.ewinsonic.com/automation
Model: DAU01-MOD2008-4AI+4AOO
4.2.3 Modbus Gateway (MG):
Connect the MG host Ethernet port to the ethernet network and host PC also in this ethernet
network. Or it can direct connect to the host PC ethernet port and host PC to setup the fixed IP.
If Connect the MG host RS485 interface to the slave Modbus DAU01-MOD2xxxx RS485
interface ,pin connection is:
1.
2.
If connect the MG host RS422 interface to the slave Modbus DAU01-MOD2xxxx RS422
interface, pin connection is :
Refer the Sec. 5.1 Modbus TCP to setup the connection and test the Modbus command
through the gateway.
3.
4.
MG host interface select the Ethernet
Gateway host
R+
R-
Modbus slave
R+
R-
Gateway host
T+
T-
R+
R-
Modbus slave
R+
R-
T+
T-
23
www.ewinsonic.com/automation
Model: DAU01-MOD2008-4AI+4AOO
Connect the MG host USB port to the host PC USB port.
If Connect the MG host RS485 interface to the slave Modbus DAU01-MOD2xxxx RS485
interface ,pin connection is:
1.
2.
If connect the MG host RS422 interface to the slave Modbus DAU01-MOD2xxxx RS422
interface, pin connection is
Refer the Sec. 5.2 Modbus RTU to setup the connection and test the Modbus command
through the gateway.
3.
4.
MG host interface select the USB
Gateway host
R+
R-
Modbus slave
R+
R-
Gateway host
T+
T-
R+
R-
Modbus slave
R+
R-
T+
T-
24
www.ewinsonic.com/automation
Use the Modbus poll or others Modbus app to install to your PC to set up the connection.
The try version download path : http://www.modbustools.com/download.html
5. Test the MODBUS Command
5.1 Modbus TCP :
5.1.1
Execute Modbus poll then to click the
“Connection” to setup the Connection is
Modbus TCP/IP and IP address which is
your setting IP for ex.192.168.1.200 then
click OK to connect to the
DAU01-MOD2XXX module.
5.1.2
When the connection was established then it can send the MODBUS command to read/write
the command to module. For example to click the “TC”(Test Center) to send command to the
module.
5.1.3
Configure the module by sending the System Configuration Modbus RTU
command and the command set can refer the Section 7 and 8.
5.1.4
Model: DAU01-MOD2008-4AI+4AOO
25
www.ewinsonic.com/automation
Use the MODBUS Poll or others MODBUS app to install to your PC to set up the connection
Model: DAU01-MOD2008-4AI+4AOO
5.2 MODBUS RTU:
5.2.1
5.2.2
5.2.3
5.2.4
Execute modbus poll then to click the
“Connection” to setup the connection” is “Serial
port” and “Serial Settings” which are your setting
in serial parameter for ex. COM port, Baud rate,
data bits, Parity and stop bit to connect to the
DAU01-MOD2XXX module.
When the connection was established then it can send the MODBUS command to
read/write the command to module. For example to click the” TC”
(Test Center) to send command to the module.
Configure the module by sending the System Configuration Modbus RTU
command and the command set can refer the Section 7 and 8.
26
www.ewinsonic.com/automation
6. Web page introduction
6.1 DAU01-MOD2008-4AI+4AO Analog I/O status
Model: DAU01-MOD2008-4AI+4AOO
27
www.ewinsonic.com/automation
Update time : Refresh Analog Input and Output status to update the current status.
Analog I/O setting
2.1 Output: Set the channel 1~2 output Voltage value (0~10V) , Set the channel 3~4
output current value(0~20mA)
2.2 Default Output Enable: Enable/Disable the default output function.
2.3 Default Output Value: Set the channel 1~2 output Voltage value (0~10V) , Set the
channel 3~4 output current value(0~20mA)
2.4 Input : Read the chanel 1~4 analog input value (0~10V)
2.5 Save: Save the Analog output setting
1.
2.
Model: DAU01-MOD2008-4AI+4AOO
28
www.ewinsonic.com/automation
7, DAU01-MOD2008-4AI+4AO Command 7.1 System Command Function Code 70(0x46)
Read Request
Function code
1 Byte
0x46
Starting Address
2 Bytes
0x0000~0xFFFF
Function code
1 Byte
0x46
Starting Address
2 Bytes
0x0000~0xFFFF
Read or Write
1 Byte
0x00
Write Response
Function code
1 Byte
0x46
Starting Address
2 Bytes
0x0000~0xFFFF
Read or Write
1 Byte
0x01
Error
Error code
1 Byte
0x46
Exception code
1 Bytes
Data
Read Response
Read or Write
1 Byte
0x00
Byte count
1 Byte
0x00~0xFF
Registers Value
N x 1 Bytes
0xXX
N=Byte count
Function code
1 Byte
0x46
Starting Address
2 Bytes
0x0000~0xFFFF
Write Request
Read or Write
1 Byte
0x01
Byte count
1 Byte
0x00~0xFF
Registers Value
N x 1 Bytes
0xXX
N=Byte count
Data:
0x01:Illegal function code
0x02:Illegal data read/write request; Illegal data address
0x03:Illegal data value; Illegal register value length; Illegal data quantity or byte count.
Model: DAU01-MOD2008-4AI+4AOO
29
www.ewinsonic.com/automation
7.2 System Command List
Starting Address
0x0000
0x0001
0x0002
0x0003
0x0004
0x0005
0X0006
0X0007
0X0008
0x0009
0x000A
0x000B
0x000C
0x000D
0x000E
0x0100
0x0200
0x0202
0x0203
0x0204
0x0205
0x0206
0x0207
0x0300
0x0301
0x0302
0x0303
Read or Write
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R/W
R
R
R
R
R
R
R
W
W
W
W
Byte count
0x01
0x04
0x01
0x01
0x01
0x02
0x02
0x02
0x04
0x04
0x04
0x04
0x04
0x04
0x10
0x06
0x06
0x01
0x01
0x10
0x10
0x10
0x0C
0x01
0x01
0x01
0x01
Description
Module ID
System Boot counter
Uart setup (Baud rate, Stop bit, Parity Bit)
Buzzer frequency
Network option (MBAP,DHCP,UDP)
Web port
TCP port
UDP port
Ethernet IP
Ethernet Mask
Ethernet Gateway
Ethernet DNS1
Ethernet DNS2
Gateway Host IP
Password
RTC time
Last boot time
Mode Information
EEPROM Information
Module Name
Serial number
Firmware Version
MAC address
Save the changed data into EEPROM.
Restore data to default value
Re-boot device
Update network configuration
Model: DAU01-MOD2008-4AI+4AOO
30
www.ewinsonic.com/automation
7.2.1 SA=0x0000 Read/Write the modbus ID
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0000
R/W
0x01
ID
0x01
FC
0x46
SA
0x0000
R/W
0x01
BC
0x01
Value
Data
Write Request
Write Response
Data: 1Byte 0x01~0xF7 modbus ID
ID
0x01
FC
0x46
SA
0x0000
R/W
0x00
BC
0x01
Read Response
Data: 1Byte 0x01~0xF7 modbus ID
ID
0x01
FC
0x46
SA
0x0000
R/W
0x00
Read Request
Value
Data
Model: DAU01-MOD2008-4AI+4AOO
31
www.ewinsonic.com/automation
When the connection was established then it can send the MODBUS command to
read/write the command to module. For example to click the” TC”
(Test Center) to send command to the module.
Configure the module by sending the System Configuration Modbus RTU
command and the command set can refer the Section 7 and 8.
7.2.2 SA=0x0001 Read/Write the reboot counter
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0001
R/W
0x01
ID
0x01
FC
0x46
SA
0x0001
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000 to reset the counter value be 0
ID
0x01
FC
0x46
SA
0x0000
R/W
0x00
BC
0x04
Read Response
Data: 4 Byte 0x00000000 ~ 0xFFFFFFFF
ID
0x01
FC
0x46
SA
0x0000
R/W
0x00
Read Request
Value
Data
Model: DAU01-MOD2008-4AI+4AOO
32
www.ewinsonic.com/automation
7.2.3 SA=0x0002 Read/Write the baud rate
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0002
R/W
0x01
ID
0x01
FC
0x46
SA
0x0002
R/W
0x01
BC
0x01
Value
Data
Write Request
Write Response
Data: 1 Byte Baud rate Bit 7~4:
ID
0x01
FC
0x46
SA
0x0002
R/W
0x00
BC
0x01
Read Response
ID
0x01
FC
0x46
SA
0x0002
R/W
0x00
Read Request
Value
Data
0000 = 1200, 0001 = 2400, 0010 = 9600, 0011 = 144000100 = 19200, 0101 = 38400, 0110 = 57600, 0111 = 115200
Stop bit Bit 3~2:
Parity Bit 1~0:
00 = 1 stop bit, 01 = 2 stop bit
00 = NONE, 01 = Odd, 10 = Even
Data: 1 Byte Baud rate Bit 7~4: 0000 = 1200, 0001 = 2400, 0010 = 9600, 0011 = 14400
0100 = 19200, 0101 = 38400, 0110 = 57600, 0111 = 115200
Stop bit Bit 3~2:
Parity Bit 1~0:
00 = 1 stop bit, 01 = 2 stop bit
00 = NONE, 01 = Odd, 10 = Even
Model: DAU01-MOD2008-4AI+4AOO
33
www.ewinsonic.com/automation
7.2.4 SA=0x0003 Read/Write the buzzer frequency
modbus ID for 0x01
ID
0x01
FC
0x46
SA
0x0003
R/W
0x01
ID
0x01
FC
0x46
SA
0x0003
R/W
0x01
BC
0x01
Value
Data
Write Request
Write Response
Data: 1 Byte (default:0x00)
ID
0x01
FC
0x46
SA
0x0003
R/W
0x00
BC
0x01
Read Response
ID
0x01
FC
0x46
SA
0x0003
R/W
0x00
Read Request
Value
Data
0x00 = OFF, 0x01 = 10Hz, 0x02 = 1000Hz, 0x03 = 2700Hz
Data: 1 Byte (default:0x00)
0x00 = OFF, 0x01 = 10Hz, 0x02 = 1000Hz, 0x03 = 2700Hz
Model: DAU01-MOD2008-4AI+4AOO
34
www.ewinsonic.com/automation
7.2.5 SA=0x0004 Read/Write the Network Configuration
modbus ID for 0x01
ID
0x01
FC
0x46
SA
0x0004
R/W
0x01
ID
0x01
FC
0x46
SA
0x0004
R/W
0x01
BC
0x02
Value
Data
Write Request
Write Response
Data: 2 Bytes (High byte + Low byte), range (0x0000~0x0707)High byte 8bits: 0000 0MNPP bit : 1 to change the MBAP status, 0 means no change the MBAP statusN bit : 1 to change the DHCP status, 0 means no change the DHCP statusM bit : 1 to change the UDP status, 0 means no change the UDP statusLow byte 8bits: 0000 0RSTT bit : 1 to enable the MBAP , 0 to disable the MBAP.S bit : 1 to enable the DHCP , 0 to disable the DHCP R bit : 1 to enable the UDP , 0 to disable the UDP
ID
0x01
FC
0x46
SA
0x0004
R/W
0x00
BC
0x02
Read Response
ID
0x01
FC
0x46
SA
0x0004
R/W
0x00
Read Request
Value
Data
Data: 2 Bytes (High byte + Low byte), range (0x0000~0x0707)High byte 8bits: 0000 0MNPP bit : 1 to change the MBAP status, 0 means no change the MBAP statusN bit : 1 to change the DHCP status, 0 means no change the DHCP statusM bit : 1 to change the UDP status, 0 means no change the UDP statusLow byte 8bits: 0000 0RSTT bit : 1 to enable the MBAP , 0 to disable the MBAP.S bit : 1 to enable the DHCP , 0 to disable the DHCP R bit : 1 to enable the UDP , 0 to disable the UDP
The read default value is 0x0701 enable MBAP and disable DHCP and UDP
Model: DAU01-MOD2008-4AI+4AOO
35
www.ewinsonic.com/automation
7.2.6 SA=0x0005 Read/Write web port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0005
R/W
0x01
ID
0x01
FC
0x46
SA
0x0005
R/W
0x01
BC
0x02
Value
Data
Write Request
Write Response
Data: 2 Byte 0x0000~0XFFFF (default:0x0050 is 80(Decimal))
ID
0x01
FC
0x46
SA
0x0005
R/W
0x00
BC
0x02
Read Response
ID
0x01
FC
0x46
SA
0x0005
R/W
0x00
Read Request
Value
Data
Data: 2 Byte 0x0000~0XFFFF (default:0x0050 is 80(Decimal))
Model: DAU01-MOD2008-4AI+4AOO
36
www.ewinsonic.com/automation
7.2.7 SA=0x0006 Read/Write TCP port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0006
R/W
0x01
ID
0x01
FC
0x46
SA
0x0006
R/W
0x01
BC
0x02
Value
Data
Write Request
Write Response
Data: 2 Byte 0x0000~0XFFFF (default:0x01F6 is 502(Decimal))
ID
0x01
FC
0x46
SA
0x0006
R/W
0x00
BC
0x02
Read Response
ID
0x01
FC
0x46
SA
0x0006
R/W
0x00
Read Request
Value
Data
Data: 2 Byte 0x0000~0XFFFF default:0x01F6 is 502(Decimal)
Model: DAU01-MOD2008-4AI+4AOO
37
www.ewinsonic.com/automation
7.2.8 SA=0x0007 Read/Write UDP port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0007
R/W
0x01
ID
0x01
FC
0x46
SA
0x0007
R/W
0x01
BC
0x02
Value
Data
Model: DAU01-MOD2008-4AI+4AOO
Write Request
Write Response
Data: 2 Byte 0x0000~0XFFFF (default:0x01F6 is 502(Decimal))
ID
0x01
FC
0x46
SA
0x0007
R/W
0x00
BC
0x02
Read Response
ID
0x01
FC
0x46
SA
0x0007
R/W
0x00
Read Request
Value
Data
Data: 2 Byte 0x0000~0XFFFF default:0x01F6 is 502(Decimal)
38
www.ewinsonic.com/automation
7.2.9 SA=0x0008 Read/Write Ethernet IP port
Model: DAU01-MOD2008-4AI+4AOO
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0008
R/W
0x01
ID
0x01
FC
0x46
SA
0x0008
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000~0XFFFFFFFF
ID
0x01
FC
0x46
SA
0x0008
R/W
0x00
BC
0x04
Read Response
ID
0x01
FC
0x46
SA
0x0008
R/W
0x00
Read Request
Value
Data
The default value is 0x6401A8C0 which
Bit 31~24(64):100(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.100
Data: 4 Byte 0x00000000~0XFFFFFFFF
The default value is 0x6401A8C0 which
Bit 31~24(64):100(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.100
39
www.ewinsonic.com/automation
When the connection was established then it can send the MODBUS command to
read/write the command to module. For example to click the” TC”
(Test Center) to send command to the module.
Configure the module by sending the System Configuration Modbus RTU
command and the command set can refer the Section 7 and 8.
7.2.10 SA=0x0009 Read/Write Mask IP port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0009
R/W
0x01
ID
0x01
FC
0x46
SA
0x0009
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000~0XFFFFFFFF
ID
0x01
FC
0x46
SA
0x0009
R/W
0x00
BC
0x04
Read Response
ID
0x01
FC
0x46
SA
0x0009
R/W
0x00
Read Request
Value
Data
The default value is 0xFFFFFFFF which
Bit 31~24(FF):255(D), Bit 23~16(FF):255(D), Bit 15~8(FF):255(D), Bit 7~0 (FF):255(D).The IP is 255.255.255.255
Data: 4 Byte 0x00000000~0XFFFFFFFF
The default value is 0xFFFFFFFF which
Bit 31~24(FF):255(D), Bit 23~16(FF):255(D), Bit 15~8(FF):255(D), Bit 7~0 (FF):255(D).The IP is 255.255.255.255
Model: DAU01-MOD2008-4AI+4AOO
40
www.ewinsonic.com/automation
7.2.11 SA=0x000A Read/Write Gateway IP port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x000A
R/W
0x01
ID
0x01
FC
0x46
SA
0x000A
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000~0XFFFFFFFF
ID
0x01
FC
0x46
SA
0x000A
R/W
0x00
BC
0x04
Read Response
ID
0x01
FC
0x46
SA
0x000A
R/W
0x00
Read Request
Value
Data
The default value is 0x0101A8C0 which
Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1
Data: 4 Byte 0x00000000~0XFFFFFFFF
The default value is 0x0101A8C0 which
Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1
Model: DAU01-MOD2008-4AI+4AOO
41
www.ewinsonic.com/automation
7.2.12 SA=0x000B Read/Write DNS1 port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x000B
R/W
0x01
ID
0x01
FC
0x46
SA
0x000B
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000~0XFFFFFFFF
ID
0x01
FC
0x46
SA
0x000B
R/W
0x00
BC
0x04
Read Response
ID
0x01
FC
0x46
SA
0x000B
R/W
0x00
Read Request
Value
Data
The default value is 0x0101A8C0 which
Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D)The IP is 192.168.1.1
Data: 4 Byte 0x00000000~0XFFFFFFFF
The default value is 0x0101A8C0 which
Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1
Model: DAU01-MOD2008-4AI+4AOO
42
www.ewinsonic.com/automation
7.2.13 SA=0x000C Read/Write DNS2 port
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x000C
R/W
0x01
ID
0x01
FC
0x46
SA
0x000C
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000~0XFFFFFFFF
ID
0x01
FC
0x46
SA
0x000C
R/W
0x00
BC
0x04
Read Response
ID
0x01
FC
0x46
SA
0x000C
R/W
0x00
Read Request
Value
Data
The default value is 0x08080808 which
Bit 31~24(08):8(D), Bit 23~16(08):8(D), Bit 15~8(08):8(D), Bit 7~0 (08):8(D)The IP is 8.8.8.8
Data: 4 Byte 0x00000000~0XFFFFFFFF
The default value is 0x08080808 which
Bit 31~24(08):8(D), Bit 23~16(08):8(D), Bit 15~8(08):8(D), Bit 7~0 (08):8(D)The IP is 8.8.8.8
Model: DAU01-MOD2008-4AI+4AOO
43
www.ewinsonic.com/automation
Model: DAU01-MOD2008-4AI+4AOO
7.2.14 SA=0x000D Gateway Host IP
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x000D
R/W
0x01
ID
0x01
FC
0x46
SA
0x000D
R/W
0x01
BC
0x04
Value
Data
Write Request
Write Response
Data: 4 Byte 0x00000000~0XFFFFFFFFThe default value is 0x0101A8C0 whichBit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1
ID
0x01
FC
0x46
SA
0x000D
R/W
0x01
BC
0x04
Read Response
ID
0x01
FC
0x46
SA
0x000D
R/W
0x00
Read Request
Value
Data
Data: 4 Byte 0x00000000~0XFFFFFFFFThe default value is 0x0101A8C0 whichBit 31~24(64):100(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1
44
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
7.2.15 SA=0x000E Read/Write password
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x000E
R/W
0x01
ID
0x01
FC
0x46
SA
0x000E
R/W
0x00
BC
0x10
Value
Data
Write Request
Write Response
Data: 16 Byte, Each byte range are
ID
0x01
FC
0x46
SA
0x000E
R/W
0x00
BC
0x10
Read Response
ID
0x01
FC
0x46
SA
0x000E
R/W
0x00
Read Request
Value
Data
0X30(0)~0x39(9), 0x41(A)~0x5A(Z),0x61(a)~0x7A(z)
Data: 16 Byte, Each byte range are
0X30(0)~0x39(9), 0x41(A)~0x5A(Z),0x61(a)~0x7A(z)
The default value is :
1
0x61 0x64 0x6D 0x69 0x6E 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x00
The default value is :
1
0x61 0x64 0x6D 0x69 0x6E 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x00
The ASCII code represent 0x61:a,0x64:d,0x6D:m,0x69:i,0x6E:n
The password is admin
The ASCII code represent 0x61:a,0x64:d,0x6D:m,0x69:i,0x6E:n
The password is admin
45
www.ewinsonic.com/automation
7.2.16 SA=0x0100 Read/Write RTC
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0100
R/W
0x01
ID
0x01
FC
0x46
SA
0x0100
R/W
0x01
BC
0x06
Value
Data
1,sec
0x00~0x3B
2,min
0x00~0x3B
3,hour
0x00~0x17
4,date
0x01~0x1F
5,month
0x01~0x0C
6,year
0x00~0x63
Write Request
Write Response
Data: 6 Byte, Each byte range are:
ID
0x01
FC
0x46
SA
0x0100
R/W
0x00
BC
0x06
Read Response
ID
0x01
FC
0x46
SA
0x0100
R/W
0x00
Read Request
Value
Data
For example the value is 0x28 2D 0A 05 05 10 0x28:40 secs, 0x2D:45 mins, 0x0A:10 hours0x05 :5 dates, 0x05:5 months, 0x10:16 Year(2016)The RTC time is 2016/May/5/10:45:40
1,sec
0x00~0x3B
2,min
0x00~0x3B
3,hour
0x00~0x17
4,date
0x01~0x1F
5,month
0x01~0x0C
6,year
0x00~0x63
Data: 6 Byte, Each byte range are:
For example the value is 0x28 2D 0A 05 05 10 0x28:40 secs, 0x2D:45 mins, 0x0A:10 hours0x05 :5 dates, 0x05:5 months, 0x10:16 Year(2016)The RTC time is 2016/May/5/10:45:40
Model: DAU01-MOD2008-4AI+4AOO
46
www.ewinsonic.com/automation
7.2.17 SA=0x0200 Read Last boot time
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0200
R/W
0x00
BC
0x06
Read Response
ID
0x01
FC
0x46
SA
0x0200
R/W
0x00
Read Request
Value
Data
1,sec
0x00~0x3B
2,min
0x00~0x3B
3,hour
0x00~0x17
4,date
0x01~0x1F
5,month
0x01~0x0C
6,year
0x00~0x63
Data: 6 Byte, Each byte range are:
For example the value is 0x28 2D 0A 05 05 10 0x28:40 secs, 0x2D:45 mins, 0x0A:10 hours0x05 :5 dates, 0x05:5 months, 0x10:16 Year(2016)The Last boot time is 2016/May/5/10:45:40
7.2.18 SA=0x0202 Read mode status is INIT or Normal mode
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0202
R/W
0x00
BC
0x01
Read Response
ID
0x01
FC
0x46
SA
0x0202
R/W
0x00
Read Request
Value
Data
Data: 1 Byte, The value
0x00:INIT mode0x01:Normal mode
Model: DAU01-MOD2008-4AI+4AOO
47
www.ewinsonic.com/automation
7.2.19 SA=0x0203 Read EEPROM status
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0203
R/W
0x00
BC
0x01
Read Response
ID
0x01
FC
0x46
SA
0x0203
R/W
0x00
Read Request
Value
Data
Data: 1 Byte, The value
0x00:Okay0x01:Error
Model: DAU01-MOD2008-4AI+4AOO
48
www.ewinsonic.com/automation
When the connection was established then it can send the MODBUS command to
read/write the command to module. For example to click the” TC”
(Test Center) to send command to the module.
Configure the module by sending the System Configuration Modbus RTU
command and the command set can refer the Section 7 and 8.
7.2.20 SA=0x0204 Read module name
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0204
R/W
0x00
BC
0x20
Read Response
ID
0x01
FC
0x46
SA
0x0204
R/W
0x00
Read Request
Value
Data
Data: 32 Byte, The default module name is :
1
0x44 0x41 0x55 0x30 0x31 0x2D 0x4D 0x4F 0x44 0x32 0x30 0x31 0x36 0x2D 0x38
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x44
17
0x49 0x2B 0x38 0x44 0x4F 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
0x00
0x44:D0x41:A0x55:U0x30:00x31:10x2D:-0x4D:M0x4F:O
The module name is DAU01-MOD2008-4AI+4AO
0x44:D0x32:20X30:00x31:10x36:60x2D:-0x38:8Ox44:D
0x49:I0x2B:+0x38:80x44:D0x4F:O
Model: DAU01-MOD2008-4AI+4AOO
49
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
7.2.21 SA=0x0205 Read Serial number
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0205
R/W
0x00
BC
0x10
Read Response
ID
0x01
FC
0x46
SA
0x0205
R/W
0x00
Read Request
Value
Data
Data: 16 Byte, Each byte range is 0X30(0)~0x39(9)For example is :
1
0x31 0x35 0x30 0x34 0x30 0x30 0x30 0x30 0x30 0x38 0x00 0x00 0x00 0x00 0x00
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x00
The ASCII code represent 0x31:1,0x35:5,0x30:0,0x34:4,0x38:8 So the serial number is 1504000008
50
www.ewinsonic.com/automation
7.2.22 SA=0x0206 Read Firmware Version
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0206
R/W
0x00
BC
0x10
Read Response
ID
0x01
FC
0x46
SA
0x0206
R/W
0x00
Read Request
Value
Data
Data: 16 Byte, Each byte range is 0X30(0)~0x39(9) and 0x2E(.)For example :
1
0x33 0x2E 0x32 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
0x00
0x33:30x2E:.0x32:2The Firmware version is 3.2
Model: DAU01-MOD2008-4AI+4AOO
51
www.ewinsonic.com/automation
7.2.23 SA=0x0207 Read MAC address
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0207
R/W
0x00
BC
0x0C
Read Response
ID
0x01
FC
0x46
SA
0x0207
R/W
0x00
Read Request
Value
Data
Data: 12 Byte, Each byte range are 0X30(0)~0x39(9),0x41(A)~0x5A(Z),0x61(a)~0x7A(z)For example :
LSB
0x43 0x43 0x30 0x34 0x41 0x33 0x43 0x43 0x43 0x43 0x43
MSB
0x43
The ASCII code represent 0x43:C,0x30:0,0x34:4,0x41:A,0x33:3So the MAC address is CC:04:A3:CC:CC:CC
7.2.24 SA=0x0300 Write Save setting
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0300
R/W
0x01
ID
0x01
FC
0x46
SA
0x0300
R/W
0x01
BC
0x01
Value
0x01
Write Request
Write Response
Model: DAU01-MOD2008-4AI+4AOO
52
www.ewinsonic.com/automation
7.2.25 SA=0x0301 Write Restore value
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0301
R/W
0x01
ID
0x01
FC
0x46
SA
0x0301
R/W
0x01
BC
0x01
Value
0x01
Write Request
Write Response
7.2.26 SA=0x0302 Write Reboot the module
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0302
R/W
0x01
ID
0x01
FC
0x46
SA
0x0302
R/W
0x01
BC
0x01
Value
0x01
Write Request
Write Response
7.2.27 SA=0x0303 Write Update network configuration
modbus ID for ex. 0x01
ID
0x01
FC
0x46
SA
0x0303
R/W
0x01
ID
0x01
FC
0x46
SA
0x0303
R/W
0x01
BC
0x01
Value
0x01
Write Request
Write Response
Model: DAU01-MOD2008-4AI+4AOO
53
www.ewinsonic.com/automation
7.3 System Command Example:
Request: 01 46 00 00 01 01 11 95 3A (ID change to 17(Hex 11))
Response: 01 46 00 00 01 CD 48
ID :01
Function code :46
Starting Address : 00 00
Read(00) or Write(01) :01
Byte Count: 01
Value : 11 set ID as 11 (17 decimal)
Check sum : 95 3A
Note: After the System Command setting MUST do the Save Setting Command to the
EEPROM
Request : 01 46 03 00 01 01 01 D0 F6 (Save Setting to the EEPROM)
Response : 01 46 03 00 01 3D 48
ID :01
Function code :46
Starting Address : 03 00
Read(00) or Write(01) :01
Byte Count: 01
Value : 01
Check sum : D0 F6
Model: DAU01-MOD2008-4AI+4AOO
54
www.ewinsonic.com/automation
8. DAU01-MOD2008-4AI+4AO Analog Input, Output Command
8.1 Analog Output Default Output Enable Command Function Code 0x01 and 0x05
8.1.1 Analog default output enable list
Starting Address
0x208
0x209
0x20A
0x20B
Description
AO 1 default output enable
AO 2 default output enable
AO 3 default output enable
AO 4 default output enable
Function Code
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
1,5
Model: DAU01-MOD2008-4AI+4AOO
55
www.ewinsonic.com/automation
8.1.2 Command Format
Read Request
Function code
1 Byte
0x01
Starting Address
2 Bytes
0x0208~0x020B
Quantity of coils
2 Bytes
0x0001
Read Response
Data : 0x01 is default output enable, 0x00 is default output disable
Function code
1 Byte
0x01
Byte count
1 Bytes
0x01
Byte count
1 Bytes
data
Error Response
Function code
1 Byte
0x81
Eception Code
1 Bytes
Data
Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length
Model: DAU01-MOD2008-4AI+4AOO
56
Data : 0xFF00 is default output enable, 0x0000 is default output disable
Function code
1 Byte
0x05
Output Address
2 Bytes
0x0208~0x020B
Output value
2 Byte
Data
Write Response
Data : 0xFF00 is default output enable, 0x0000 is default output disable
Function code
1 Byte
0x05
Output Address
2 Bytes
0x0208~0x020B
Output value
2 Byte
Data
www.ewinsonic.com/automation
8.1.3 Command Example:
Request: 01 01 02 08 00 01 7D B0 (Read AO1 1 default output enable status)
Response: 01 01 01 01 90 48
Request:
ID :01
Function code :01
Starting Address : 02 08
Quantity of coil :00 01
Check sum :7D B0
Write Request
Error Response
Function code
1 Byte
0x85
Eception Code
1 Bytes
Data
Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length
Response :
ID :01
Function code :01
Byte Count: 01
Coil status Value : 01 , read 01 is enable
Check sum : 90 48
Model: DAU01-MOD2008-4AI+4AOO
57
www.ewinsonic.com/automation
8.2 Analog Output value and default output value Command Function Code 0x03,0x06
8.2.1 Analog Output Vaue and Default Output Value list
Starting Address
0x200
0x201
0x202
0x203
0x208
0x209
0x20A
0x20B
0x210
0x211
0x212
0x213
0x218
0x219
0x21A
0x21B
Description
AO 1(Hex value)
AO 2(Hex value)
AO 3(Hex Value)
AO 4(Hex Value)
AO 1 default value (Hex Value)
AO 2 default value (Hex Value)
AO 3 default value (Hex Value)
AO 4 default value (Hex Value)
AO 1 (Decimal value)
AO 2 (Decimal value)
AO 3 (Decimal Value)
AO 4 (Decimal Value)
AO 1 default value (Decimal Value)
AO 2 default value ((Decimal Value)
AO 3 default value (Decimal Value)
AO 4 default value (Decimal Value)
Function Code
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
3,6
Model: DAU01-MOD2008-4AI+4AOO
58
www.ewinsonic.com/automation
8.2.2 Command Format
Read Request
Function code
1 Byte
0x03
Starting Address
2 Bytes
0x0200~0x021B
Quantity of coils
2 Bytes
0x0001
Read Response
Data : 2 byte, 0x0000~0xFFFF
Function code
1 Byte
0x03
Byte count
1 Bytes
0x02
Register Value
2 Byte
data
1V (0x019A=410)
2V (0x0333=819)
3V (0x04CD=1229)
4V (0x0666=1638)
5V (0x0800=2048)
6V (0x0999=2457)
7V (0x0B33=2867)
8V (0x0CCC=3276)
9V (0x0E66=3686)
10V (0x0FFF=4095)
2.503mA (0x019A=410)
5.00mA (0x0333=819)
7.503mA (0x04CD=1229)
10.000mA (0x0666=1638)
12.503mA (0x0800=2048)
15.000mA (0x0999=2457)
17.503mA (0x0B33=2867)
20.000mA (0x0CCC=3276)
22.503mA (0x0E66=3686)
25.000mA (0x0FFF=4095)
(1)Hex value (Address:0x0200~0x020B): Voltage Data: 0x0000(0V) ~0x0FFF(4095 is 10V): Current Data: 0x0000(0mA) ~0x0FFF(4095 is 25mA):
The hex value is liner characteristic from 0mA(0x0000) to 25mA(0x0FFFF)The range is upto 20mA (0x0CCC=3276)
1V (0x03E8=1000)
2V (0X07D0=2000)
3V (0x0BB8=3000)
4V (0x0FA0=4000)
5V (0x1388=5000)
6V (0x1770=6000)
7V (0x1B58=7000)
8V (0x1F40=8000)
9V (0x2328=9000)
10V(0x2710=10000)
2.503mA(0x09C7=2503)
5.000mA(0x1388=5000)
7.503mA(0x1D4F=7503)
10.000mA(0x2710=10000)
12.503mA(0x30D7=12503)
15.000mA(0x3A98=15000)
17.503mA(0x445F=17503)
20.000mA(0x4E20=20000)
22.503mA(0x57E7=22503)
24.000mA(0x5DC0=24000)
25.000mA(0x61A8=25000)
(2) Decimal Value (Address 0x0210~0x021B): Voltage Data: 0x0000(0V) ~0x2710 (10000 is 10V):
The hex value is liner characteristic from
0V(0x0000) to 10V(0x0FFFF)
Current Data: 0x0000(0 is 0mA) ~0x61A8(25000 is 25mA):The decimal value is liner characteristic from 0mA(0x0000) to 25mA(0x61A8)The range is upto 20mA (0x4E20=20000)
Model: DAU01-MOD2008-4AI+4AOO
The decimal value is liner characteristic
from 0V(0x0000) to 10V(0x2710)
59
Model: DAU01-MOD2008-4AI+4AOO
www.ewinsonic.com/automation
Error Response
Function code
1 Byte
0x83
Eception Code
1 Bytes
Data
Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length
Error Response
Function code
1 Byte
0x86
Eception Code
1 Bytes
Data
Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length
Write Request
Function code
1 Byte
0x06
Starting Address
2 Bytes
0x0200~0x021B
Quantity of coils
2 Bytes
0x06
Write Response
Function code
1 Byte
0x06
Regiser Address
2 Bytes
0x0200~0x021B
Register value
2 Byte
Data
8.2.3 Command Example
Request: 01 03 02 10 00 01 84 77 (Read AO1 Decimal value)
Response: 01 03 02 17 71 77 90
Request:
ID :01
Function code :03
Starting Address : 02 10
Quantity of coil :00 01
Check sum :84 77
Response :
ID :01
Function code :03
Byte Count: 02
Register Value : 1771 , read AO1 value 6001(0x1771) is 6.001V
Check sum : 77 90
Data : 2 byte, 0x0000~0xFFFF, The Data format is same as above Function Code 0x03 with Hex and Decimal value.
Data : 2 byte, 0x0000~0xFFFF, The Data format is same as above Function Code 0x03 with Hex and Decimal value.
60
www.ewinsonic.com/automation
8.3.1 Analog Input value list
8.3 Analog Input Value Command Fuction Code 0x04
Model: DAU01-MOD2008-4AI+4AOO
Starting Address
0x200
0x201
0x202
0x203
0x210
0x211
0x212
0x213
Description
AI 1(Hex value)
AI 2(Hex value)
AI 3(Hex Value)
AI 4(Hex Value)
AI 1 (Decimal value)
AI 2 (Decimal value)
AI 3 (Decimal Value)
AI 4 (Decimal Value)
Function Code
4
4
4
4
4
4
4
4
61
www.ewinsonic.com/automation
8.3.2 Command Format
Read Request
Function code
1 Byte
0x04
Starting Address
2 Bytes
0x0200~0x0213
Quantity of input register
2 Bytes
0x0001
Read Response
Data : 2 byte, 0x0000~0xFFFF
Function code
1 Byte
0x04
Byte count
2 Bytes
0x02
Input Register
2 Byte
data
1V (0x019A=410)
2V (0x0333=819)
3V (0x04CD=1229)
4V (0x0666=1638)
5V (0x0800=2048)
6V (0x0999=2457)
7V (0x0B33=2867)
8V (0x0CCC=3276)
9V (0x0E66=3686)
10V (0x0FFF=4095)
(1)Hex value (Address:0x0200~0x0203):
Voltage Data: 0x0000(0V) ~0x0FFF(4095 is 10V):
The hex value is liner characteristic from 0V(0x0000) to 10V(0x0FFFF)
1V (0x03E8=1000)
2V (0X07D0=2000)
3V (0x0BB8=3000)
4V (0x0FA0=4000)
5V (0x1388=5000)
6V (0x1770=6000)
7V (0x1B58=7000)
8V (0x1F40=8000)
9V (0x2328=9000)
10V(0x2710=10000)
(2) Decimal Value (Address 0x0210~0x0213):
Voltage Data: 0x0000(0V) ~0x2710 (10000 is 10V):
The decimal value is liner characteristic from 0V(0x0000) to 10V(0x2710)
Error Response
Function code
1 Byte
0x84
Exception Code
1 Bytes
Data
Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length
Model: DAU01-MOD2008-4AI+4AOO
62
www.ewinsonic.com/automation
8.3.3 Command Example
Request: 01 04 02 10 00 01 31 B7 (Read AI 1 input Voltage Decimal value)
Response: 01 04 02 03 EA 38 4F
Request:
ID :01
Function code :04
Starting Address : 02 10
Quantity of input register :00 01
Check sum :31 B7
Response :
ID :01
Function code :04
Byte Count: 02
Input register : 03 EA , read AI 1 input voltage
value is 0x03EA=1002(D)=1.002V
Check sum : 38 4F
Model: DAU01-MOD2008-4AI+4AOO
63
www.ewinsonic.com/automation
9. Appendix
MODBUS DIO module
DAU01-MOD2008-4AI+4AOO Modbus IO unit with 4 Analog Input, 4 Analog output
Model: DAU01-MOD2008-4AI+4AOO
64