Top Banner
Winsonic MODBUS Remote IO user manual Rev. 1.1 Model: DAU01-MOD2008-4AI+4AO www.ewinsonic.com/automation Model: DAU01-MOD2008-4AI+4AOO
64

modbus usersmanual DAU01-MOD2008-4AI+4AO · 2020. 2. 13. · The DAU01-MOD2008-4AI+4AO is an industrial MODBUS slave I/O module which is built in 4 analog input and 4 analog outputs.

Feb 15, 2021

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
  • Winsonic MODBUS Remote IO user manual Rev. 1.1

    Model: DAU01-MOD2008-4AI+4AO

    www.ewinsonic.com/automation

    Model: DAU01-MOD2008-4AI+4AOO

  • www.ewinsonic.com/automation

    LEGAL NOTICE

    WarrantyAll products manufactured by Winsonic are under warranty regarding defective materials for

    a period of one year, beginning from the date of delivery to the original purchaser.

    WarningWinsonic assumes no liability for any damage resulting from the use of this product.

    Winsonic reserves the right to change this manual at any time without notice. The

    information furnished by Winsonic is believed to be accurate and reliable. However, no

    responsibility is assumed by Winsonic for its use, nor for any infringements of patents or

    other rights of third parties resulting from its use.

    Copyright©Copyright 2016 by Winsonic. All rights are reserved.

    SupportIf you have any question for our products, Please contact us directly or email to

    [email protected]

    Document released :Manual : www.ewinsonic.com

    Model: DAU01-MOD2008-4AI+4AOO

  • www.ewinsonic.com/automation

    Table of Contents

    1.Introduction

    2. Hardware Information

    2.1 DAU01-MOD2008-4AI+4AO General Technical Data

    3. Functional Feature of INIT Mode / Normal Mode

    Table of Contents

    2,1,1 Communication Interface

    2.1.2 Power and SG connector

    2.1.3 DIP Switch

    2.1.4 Reset Bottom

    2.1.5 Power LED

    2,1.6 Status LEDs

    2.1.7 Dimension

    2.1.8 DIN Rail Hook

    2.1.9 Terminal Block

    2.2 DAU01-MOD2008-4AI+4AO IO Technical Data

    2.2.1 Specifications

    2.2.2 I/O connector (Pin Assignment)

    2.2.3 Wire Connection

    2.2.3.1 Analog Input

    2.2.3.2 Analog Output

    2.2.3.3 RS485 Wiring

    2.2.3.4 RS422 Wiring

    7

    8

    8

    16

    9

    9

    9

    9

    9

    10

    10

    11

    12

    13

    13

    14

    14

    14

    14

    15

    15

    Model: DAU01-MOD2008-4AI+4AOO

  • www.ewinsonic.com/automation

    4. Quick Start Guide

    4.1 System Configuration

    4.2 HW connection

    4.2.1 Modbus TCP/IP

    4.2.2 Modbus RTU

    4.2.3 Modbus Gateway (MG)

    7, DAU01-MOD2008-4AI+4AO Command

    7.1 System Command Function Code 70(0x46)

    7.2 System Command List

    7.2.1 SA=0x0000 Read/Write the modbus ID

    7.2.2 SA=0x0001 Read/Write the reboot counter

    7.2.3 SA=0x0002 Read/Write the baud rate

    7.2.4 SA=0x0003 Read/Write the buzzer frequency

    7.2.5 SA=0x0004 Read/Write the Network Configuration

    7.2.6 SA=0x0005 Read/Write web port

    7.2.7 SA=0x0006 Read/Write TCP port

    7.2.8 SA=0x0007 Read/Write UDP port

    5. Test the Modbus Command

    5.1 Modbus TCP

    5.2 Modbus RTU

    6. Web page introduction

    6.1 DAU01-MOD2008-4AI+4AO Analog I/O Status

    17

    17

    22

    22

    22

    23

    29

    29

    30

    25

    25

    26

    27

    27

    31

    32

    33

    34

    35

    36

    37

    38

    Model: DAU01-MOD2008-4AI+4AOO

  • www.ewinsonic.com/automation

    7.2.9 SA=0x0008 Read/Write Ethernet IP port

    7.2.10 SA=0x0009 Read/Write Mask IP port

    7.2.11 SA=0x000A Read/Write Gateway IP port

    7.2.12 SA=0x000B Read/Write DNS1 port

    7.2.13 SA=0x000C Read/Write DNS2 port

    7.2.14 SA=0x000D Gateway Host IP

    7.2.15 SA=0x000E Read/Write password

    7.2.16 SA=0x0100 Read/Write RTC

    7.2.17 SA=0x0200 Read Last boot time

    7.2.18 SA=0x0202 Read mode status is INIT or Normal mode

    7.2.19 SA=0x0203 Read EEPROM status

    7.2.20 SA=0x0204 Read module name

    7.2.21 SA=0x0205 Read Serial number

    7.2.22 SA=0x0206 Read Firmware Version

    7.2.23 SA=0x0207 Read MAC address

    7.2.24 SA=0x0300 Write Save setting

    7.2.25 SA=0x0301 Write Restore value

    7.2.26 SA=0x0302 Write Reboot the module

    7.2.27 SA=0x0303 Write Update network configuration

    7.3 System Command Example

    8.2 Analog Output value and default output value Command Function Code 0x03,0x06

    8.1.1 Analog default output enable list

    8.1.2 Command Format

    8.1.3 Command Example

    8.2.1 Analog Output Vaue and Default Output Value list

    8.2.2 Command Format

    8.2.3 Command Example

    39

    40

    41

    42

    43

    44

    45

    46

    47

    47

    48

    49

    50

    51

    52

    52

    53

    53

    53

    54

    55

    55

    58

    55

    56

    57

    58

    59

    60

    Model: DAU01-MOD2008-4AI+4AOO

    8. DAU01-MOD2008-4AI+4AO Analog Input, Output Command

    8.1 Analog Output Default Output Enable Command Function Code 0x01 and 0x05

  • www.ewinsonic.com/automation

    9. Appendix

    9.1 Ordering Information

    9.2 Technical Support

    8.3 Analog Input Value Command Fuction Code 0x04

    8.3.1 Analog Input value list

    8.3.2 Command Format

    8.3.3 Command Example

    64

    64

    64

    61

    61

    62

    63

    Model: DAU01-MOD2008-4AI+4AOO

  • www.ewinsonic.com/automation

    Model: DAU01-MOD2008-4AI+4AOO

    1. Introduction

    The DAU01-MOD 2XXX series is a family of network data acquisition and control modules,

    providing digital input/output, analog input / output, PWM, counter, relay and other functions. The

    modules can be remotely controlled using a set of commands - Modbus RTU or Modbus TCP Protocol.

    DAU01-MOD2XXX series provides:

    1. 10/100 Mbps Ethernet interfaces supports Modbus/TCP protocol over TCP/IP for data connection.

    2. USB 2.0 interfaces supports Modbus RTU protocol for data connection.

    3. RS485/RS422 interface supports Modbus RTU protocol for data connection.

    4. Modbus gateway function ,when it was set to be the Modbus gateway function then the

    Modbus host can communicate through the Ethernet/USB cable via Modbus gateway to control

    the other Modbus slave device with RS422/RS485 interface.

    The DAU01-MOD2XXX series modules can connect to all communication interfaces simultaneously

    but control to access it by one of them in the meantime.

    Modbus/TCP and RTU Protocol Supported For Open Connectivity

    The DAU01-MOD2XXX series modules support the popular industrial standard, Modbus/TCP and

    RTU protocol, to connect with Ethernet Controller or HMI/SCADA software built with Modbus/TCP

    or RTU driver and can manipulate it simply and implement your various applications easily. Fig 1.1

    is shown a typical MODBUS application.

    Figure 1.1 Typical Application of DAU01-MOD2XXX

    7

  • www.ewinsonic.com/automation

    2. Hardware Information

    2.1 DAU01-MOD2008-4AIO+4AO General Technical Data

    2.1.1 Communication Interface

    Figure 2.1 Appearance of DAU01-MOD2008-4AI+4AO

    Power,RS422,RS485,F.G connector

    USB port

    Ethernet port

    I/O connector

    Power LED

    Status LED

    I/O status LED

    Reset

    Notation

    Ethernet

    USB

    TX-

    TX+

    RX-

    RX+

    Description

    Ethernet port with MODBUS TCP /Ethernet TCP /IP protocol

    Type B USB with MODBUS RTU protocol

    RS422 Transmit – with MODBUS RTU protocol

    RS422 Transmit + with MODBUS RTU protocol

    RS422 Receive - / RS485 Data – with MODBUS RTU protocol

    RS422 Receive + / RS485 Data + with MODBUS RTU protocol

    DIP switch

    Model: DAU01-MOD2008-4AI+4AOO

    8

  • www.ewinsonic.com/automation

    2.1.2 Power and SG connector

    Notation

    V+

    V-

    SG

    Description

    Power supply with 12V~48V DC(+- 10%)

    Power supply GND

    Signal Ground

    2.1.3 DIP Switch

    Notation

    1

    2

    3

    4

    Description

    OFF : RX without terminal resistor, ON: RX with terminal resistor

    OFF : TX without terminal resistor, ON : TX with terminal resistor

    ON =RS485 (2 wires) OFF= RS422 (4 wires) Mode

    OFF : INIT Mode, ON: Normal Mode

    2.1.4 Reset Bottom

    2.1.5 Power LED

    Note:

    INIT mode: ref. Sec. 3 Functional feature of the INIT mode and Normal Mode.

    Normal mode : ref. Sec. 3 Function feature of the INIT mode and Normal Mode.

    Terminal resistor : 120 ohm .

    Notation Color

    Red

    State

    ON

    Description

    The power on

    Notation

    Reset

    State

    Push bottom

    Description

    Reboot the system.

    Model: DAU01-MOD2008-4AI+4AOO

    9

  • 2.1.6 Status LED

    2.1.7 Dimensions

    Notation

    S

    Color

    Green

    www.ewinsonic.com/automation

    States

    Blinking(on 150ms, off 150 ms)

    Blinking 4 times

    Blinking 2 times

    Description

    The device is in MODBUS command access

    Check Mac address error

    I2C write to EEPROM error

    Top view

    Front viewLeft side view Right side view

    Bottom view

    DIN Rail screw hole

    Model: DAU01-MOD2008-4AI+4AOO

    10

  • Model: DAU01-MOD2008-4AI+4AOO

    www.ewinsonic.com/automation

    Rear view

    DIN Rail screw hole

    Unit:mm

    2.1.8 DIN Rail Hook

    Provided the din rail hook and dimension as below and screw the hook to the housing then hook

    it on the din rail.

    Unit:mm

    11

  • www.ewinsonic.com/automation

    2.1.9 Terminal Block

    Model: DAU01-MOD2008-4AI+4AOO

    Provided the 1x 7 pin terminal block plugged to the Power connector and 2 x 10 pin terminal

    blocks plugged to the IO connector. See the Figure

    1 x7 pin power terminal block wired to the Power.

    2 x 10 pin terminal block wired to the Input/Output device.

    12

  • Model: DAU01-MOD2008-4AI+4AOO

    www.ewinsonic.com/automation

    The DAU01-MOD2008-4AI+4AO is an industrial MODBUS slave I/O module which is built in 4

    analog input and 4 analog outputs.

    2.2.1 Specifications

    2.2 DAU01-MOD2008-4AI+4AO IO Technical Data

    Analog Input

    Channels

    Type

    Resolution

    Sampling Rate

    Bandwidth

    Common Mode Rejection

    Normal Mode Rejection

    Input Impedance

    ESD Protection

    Analog Output

    Channels

    Type

    Resolution

    Accuracy

    Voltage Output Capability

    Current Load Resistance

    Open Wire for Current Output

    Power

    Input Voltage Range

    Power Consumption

    Mechanism

    Installation

    Dimension

    Environment

    Operating Temperature

    Storage Temperature

    Relative Humidity

    4

    0 to 10VDC, 0 to 20 mA, 4 to 20 mA (burn-out mode)

    16-bit

    19.86 Samples/Sec

    19.79Hz

    90 dB Min.

    60 dB Min.

    100KΩ

    4 kV Contact for each terminal and 8 kV Air for random points

    4

    +0 mA ~ +20 mA, +4 mA ~ +20 mA

    12-bit

    +/- 1% of PSR

    10 V @ 20 mA

    500 Ohms

    0 mA ~ 20 mA

    12V~48V DC(+- 10%)

    Max 2.7W(24VDC)

    DIN-Rail

    115mmx110mmx30mm

    -25℃ ~75℃

    -30℃~80℃

    10~90%, No Condensation

    13

  • Model: DAU01-MOD2008-4AI+4AOO

    www.ewinsonic.com/automation

    2.2.2 I/O connector (Pin Assignment)

    GND VI1- VI1+ VI2- VI2+ VI3- VI3+ VI4- VI4+ GND

    VO1+ GND VO2+ GND IO1- IO1+ GND IO2- IO2+ GND

    2.2.3 Wire Connection2.2.3.1 Analog Input

    2.2.3.2 Analog Output

    IOx+

    IOx-

    VIx+

    VIx-

    Voltage output Current output

    VOx+

    GND

    +

    -

    14

  • www.ewinsonic.com/automation

    2.2.3.3 RS 485 wiring

    Model: DAU01-MOD2008-4AI+4AOO

    MOD2XXX

    MOD2XXXMOD2XXX

    2.2.3.4 RS 422 Wiring :

    MOD2XXX

    MOD2XXX MOD2XXX

    15

  • www.ewinsonic.com/automation

    3. Functional Feature of INIT Mode / Normal Mode

    When the module set to INIT mode, then repower the module will restore the default value

    of the module. Now Master can use the default setting to communicate with the module

    to configure the module.

    The MODBUS RTU default setting :

    MODBUS ID :01

    Baud Rate : 9600 bps

    Parity : None

    Data length: 8 data bits

    Stop bit: 1

    The MODBUS TCP default setting :

    IP:192.168.1.100

    Gateway:192.168.1.1

    Subnet Mask:255.255.255.0

    Primary DNS:192.168.1.1

    Secondary DNS:8.8.8.8

    Web port : 80

    TCP port : 502

    UDP port : 502

    MBAP : Enable

    DHCP: Disable

    After configuring the new IP address/ Baud Rate/ Modbus ID, user should switch to the

    Normal Mode. then repower the module or press the reset bottom. Then the module will

    work under the new configuration.

    1.

    2.

    3.

    4.

    Model: DAU01-MOD2008-4AI+4AOO

    16

  • www.ewinsonic.com/automation

    4. Quick Start Guide

    4.1 .System Configuration

    Model: DAU01-MOD2008-4AI+4AOO

    Setup the DIP Switch bit 4 OFF as “INIT” mode. see the section 2.1.3

    Connect the power line ( 12V ~ 48V) to power on the module

    Through Ethernet to connect the DAU01-MOD2XXX module and PC. The INIT mode default IP

    is 192.168.1.100. The user use the web browser like IE, chrome,… to type the IP to connect to

    the DAU01-MOD2XXX module.

    Web server can read & write the system configuration and IO status.

    When type the default (INIT mode) IP “192.168.1.100” in the browser (Explore, Chrome,..) to

    connect to the DAU01-MOD2XXX web server.

    You will see the Account and PW entry to type

    Account : admin, PW : admin

    1.

    2.

    3.

    4.

    Note: The webpage used the DAU01-MOD2016-8DI+8DO module as the example.

    17

  • www.ewinsonic.com/automation

    After it will show the “Overview” to display the device configuration and IO status.

    To click the “ System Configuration “ to set up the configuration.

    System Configuration to setup the “Network” and “Modbus” parameter to setup the IP network-

    ing and Modbus ID and others parameters.

    5.

    6.

    7.

    Modbus TCP/Web : The user can setup what his requirement parameter like IP address, Gateway, Subnet

    Mask, Primary DNS, Secondary DNS, Web port, TCP port, UDP port, MBAP , DHCP and Modbus ID.

    Modbus RTU : The user can setup what his requirement parameter like Baud rate, Stop bit ,Parity and

    Modbus ID.

    A.

    B.

    Model: DAU01-MOD2008-4AI+4AOO

    18

  • www.ewinsonic.com/automation

    Note: The “Action”function description.

    Restore device : To Restore the default value.

    Reboot device : To Reboot the device

    Submit : All the parameter modified need click the Submit to save to the RAM.

    Save all data : To save the System Configuration all parameter into the EEPROM.

    Setup the DIP Switch bit 4 ON as “Normal” mode and.

    Power off then Power On or Reset the module to reboot it.

    After reboot then login as the new IP like 192.168.1.200 to be the setting system configuration.

    You will see the account and PW to login then type both of them with admin to login.

    8.

    9.

    10.

    Model: DAU01-MOD2008-4AI+4AOO

    19

  • www.ewinsonic.com/automation

    Setup the DIP Switch bit 4 ON as “Normal” mode and.

    Power off then Power On or Reset the module to reboot it.

    After reboot then login as the new IP like 192.168.1.200 to be the setting system configuration.

    You will see the account and PW to login then type both of them with admin to login.

    You will see the “Overview” had changed to “Normal mode”

    Check the “System Configuration” had changed to what you modified parameters.

    11.

    12.

    Model: DAU01-MOD2008-4AI+4AOO

    20

  • www.ewinsonic.com/automation

    Model: DAU01-MOD2008-4AI+4AOO

    Ethernet/USB to RS485/RS422 Modbus Gateway function13.

    A. In the System configuration to click the MG (Modbus Gateway) to enable it.

    B. MG host interface to click and slect the Ethernet or USB

    C. MG host IP to set the host PC IP which is provided by Ethernet (DHCP) or the Fixed IP by own setting.

    For example to use the ipconfig cmd to check your host PC’s IP , for example the IP is 192.168.1.83

    D. Click the Submit to save the setting.

    21

  • www.ewinsonic.com/automation

    4.2 HW connection

    4.2.1 Modbus TCP/IP :

    Connect the module and PC to the ethernet network with router .

    Connect the module to the power supply using the V+ and V- terminals.

    See Section 2.1.2 for the Power Connector assignment. Note that the voltage supplied to the

    module should be in the range of +12 to +48 V DC.

    1.

    2.

    4.2.2 Modbus RTU:

    RS485: Connect the module to the RS-485 network using the R+ and R- to connect the com-

    munication interface with PC host. The PC connect to the module wiring ,please refer the

    Sec.2.2.4.3 .If the PC host is only equipped with an USB/RS-232 interface, then a USB/RS-232

    to RS-485 converter will be required.

    RS422: Connect the device to the RS-422 network using the R+,R- and T+,T- to connect the

    communication interface with PC host. The PC connect to the module wiring ,please refer the

    Sec.2.2.4.4 .If the PC host is only equipped with an USB/RS-232 interface, then a USB/RS-232

    to RS-422 converter will be required.

    USB: Connect the module and PC via USB cable.

    1.

    2.

    3.

    4. Connect the module to the power supply using the V+ and V- terminals.

    See Section 2.1.2 for the Power Connector assignment. Note that the voltage supplied to the

    module should be in the range of +12 to +48 V DC.

    Model: DAU01-MOD2008-4AI+4AOO

    22

  • www.ewinsonic.com/automation

    Model: DAU01-MOD2008-4AI+4AOO

    4.2.3 Modbus Gateway (MG):

    Connect the MG host Ethernet port to the ethernet network and host PC also in this ethernet

    network. Or it can direct connect to the host PC ethernet port and host PC to setup the fixed IP.

    If Connect the MG host RS485 interface to the slave Modbus DAU01-MOD2xxxx RS485

    interface ,pin connection is:

    1.

    2.

    If connect the MG host RS422 interface to the slave Modbus DAU01-MOD2xxxx RS422

    interface, pin connection is :

    Refer the Sec. 5.1 Modbus TCP to setup the connection and test the Modbus command

    through the gateway.

    3.

    4.

    MG host interface select the Ethernet

    Gateway host

    R+

    R-

    Modbus slave

    R+

    R-

    Gateway host

    T+

    T-

    R+

    R-

    Modbus slave

    R+

    R-

    T+

    T-

    23

  • www.ewinsonic.com/automation

    Model: DAU01-MOD2008-4AI+4AOO

    Connect the MG host USB port to the host PC USB port.

    If Connect the MG host RS485 interface to the slave Modbus DAU01-MOD2xxxx RS485

    interface ,pin connection is:

    1.

    2.

    If connect the MG host RS422 interface to the slave Modbus DAU01-MOD2xxxx RS422

    interface, pin connection is

    Refer the Sec. 5.2 Modbus RTU to setup the connection and test the Modbus command

    through the gateway.

    3.

    4.

    MG host interface select the USB

    Gateway host

    R+

    R-

    Modbus slave

    R+

    R-

    Gateway host

    T+

    T-

    R+

    R-

    Modbus slave

    R+

    R-

    T+

    T-

    24

  • www.ewinsonic.com/automation

    Use the Modbus poll or others Modbus app to install to your PC to set up the connection.

    The try version download path : http://www.modbustools.com/download.html

    5. Test the MODBUS Command

    5.1 Modbus TCP :

    5.1.1

    Execute Modbus poll then to click the

    “Connection” to setup the Connection is

    Modbus TCP/IP and IP address which is

    your setting IP for ex.192.168.1.200 then

    click OK to connect to the

    DAU01-MOD2XXX module.

    5.1.2

    When the connection was established then it can send the MODBUS command to read/write

    the command to module. For example to click the “TC”(Test Center) to send command to the

    module.

    5.1.3

    Configure the module by sending the System Configuration Modbus RTU

    command and the command set can refer the Section 7 and 8.

    5.1.4

    Model: DAU01-MOD2008-4AI+4AOO

    25

  • www.ewinsonic.com/automation

    Use the MODBUS Poll or others MODBUS app to install to your PC to set up the connection

    Model: DAU01-MOD2008-4AI+4AOO

    5.2 MODBUS RTU:

    5.2.1

    5.2.2

    5.2.3

    5.2.4

    Execute modbus poll then to click the

    “Connection” to setup the connection” is “Serial

    port” and “Serial Settings” which are your setting

    in serial parameter for ex. COM port, Baud rate,

    data bits, Parity and stop bit to connect to the

    DAU01-MOD2XXX module.

    When the connection was established then it can send the MODBUS command to

    read/write the command to module. For example to click the” TC”

    (Test Center) to send command to the module.

    Configure the module by sending the System Configuration Modbus RTU

    command and the command set can refer the Section 7 and 8.

    26

  • www.ewinsonic.com/automation

    6. Web page introduction

    6.1 DAU01-MOD2008-4AI+4AO Analog I/O status

    Model: DAU01-MOD2008-4AI+4AOO

    27

  • www.ewinsonic.com/automation

    Update time : Refresh Analog Input and Output status to update the current status.

    Analog I/O setting

    2.1 Output: Set the channel 1~2 output Voltage value (0~10V) , Set the channel 3~4

    output current value(0~20mA)

    2.2 Default Output Enable: Enable/Disable the default output function.

    2.3 Default Output Value: Set the channel 1~2 output Voltage value (0~10V) , Set the

    channel 3~4 output current value(0~20mA)

    2.4 Input : Read the chanel 1~4 analog input value (0~10V)

    2.5 Save: Save the Analog output setting

    1.

    2.

    Model: DAU01-MOD2008-4AI+4AOO

    28

  • www.ewinsonic.com/automation

    7, DAU01-MOD2008-4AI+4AO Command 7.1 System Command Function Code 70(0x46)

    Read Request

    Function code

    1 Byte

    0x46

    Starting Address

    2 Bytes

    0x0000~0xFFFF

    Function code

    1 Byte

    0x46

    Starting Address

    2 Bytes

    0x0000~0xFFFF

    Read or Write

    1 Byte

    0x00

    Write Response

    Function code

    1 Byte

    0x46

    Starting Address

    2 Bytes

    0x0000~0xFFFF

    Read or Write

    1 Byte

    0x01

    Error

    Error code

    1 Byte

    0x46

    Exception code

    1 Bytes

    Data

    Read Response

    Read or Write

    1 Byte

    0x00

    Byte count

    1 Byte

    0x00~0xFF

    Registers Value

    N x 1 Bytes

    0xXX

    N=Byte count

    Function code

    1 Byte

    0x46

    Starting Address

    2 Bytes

    0x0000~0xFFFF

    Write Request

    Read or Write

    1 Byte

    0x01

    Byte count

    1 Byte

    0x00~0xFF

    Registers Value

    N x 1 Bytes

    0xXX

    N=Byte count

    Data:

    0x01:Illegal function code

    0x02:Illegal data read/write request; Illegal data address

    0x03:Illegal data value; Illegal register value length; Illegal data quantity or byte count.

    Model: DAU01-MOD2008-4AI+4AOO

    29

  • www.ewinsonic.com/automation

    7.2 System Command List

    Starting Address

    0x0000

    0x0001

    0x0002

    0x0003

    0x0004

    0x0005

    0X0006

    0X0007

    0X0008

    0x0009

    0x000A

    0x000B

    0x000C

    0x000D

    0x000E

    0x0100

    0x0200

    0x0202

    0x0203

    0x0204

    0x0205

    0x0206

    0x0207

    0x0300

    0x0301

    0x0302

    0x0303

    Read or Write

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R/W

    R

    R

    R

    R

    R

    R

    R

    W

    W

    W

    W

    Byte count

    0x01

    0x04

    0x01

    0x01

    0x01

    0x02

    0x02

    0x02

    0x04

    0x04

    0x04

    0x04

    0x04

    0x04

    0x10

    0x06

    0x06

    0x01

    0x01

    0x10

    0x10

    0x10

    0x0C

    0x01

    0x01

    0x01

    0x01

    Description

    Module ID

    System Boot counter

    Uart setup (Baud rate, Stop bit, Parity Bit)

    Buzzer frequency

    Network option (MBAP,DHCP,UDP)

    Web port

    TCP port

    UDP port

    Ethernet IP

    Ethernet Mask

    Ethernet Gateway

    Ethernet DNS1

    Ethernet DNS2

    Gateway Host IP

    Password

    RTC time

    Last boot time

    Mode Information

    EEPROM Information

    Module Name

    Serial number

    Firmware Version

    MAC address

    Save the changed data into EEPROM.

    Restore data to default value

    Re-boot device

    Update network configuration

    Model: DAU01-MOD2008-4AI+4AOO

    30

  • www.ewinsonic.com/automation

    7.2.1 SA=0x0000 Read/Write the modbus ID

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0000

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0000

    R/W

    0x01

    BC

    0x01

    Value

    Data

    Write Request

    Write Response

    Data: 1Byte 0x01~0xF7 modbus ID

    ID

    0x01

    FC

    0x46

    SA

    0x0000

    R/W

    0x00

    BC

    0x01

    Read Response

    Data: 1Byte 0x01~0xF7 modbus ID

    ID

    0x01

    FC

    0x46

    SA

    0x0000

    R/W

    0x00

    Read Request

    Value

    Data

    Model: DAU01-MOD2008-4AI+4AOO

    31

  • www.ewinsonic.com/automation

    When the connection was established then it can send the MODBUS command to

    read/write the command to module. For example to click the” TC”

    (Test Center) to send command to the module.

    Configure the module by sending the System Configuration Modbus RTU

    command and the command set can refer the Section 7 and 8.

    7.2.2 SA=0x0001 Read/Write the reboot counter

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0001

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0001

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000 to reset the counter value be 0

    ID

    0x01

    FC

    0x46

    SA

    0x0000

    R/W

    0x00

    BC

    0x04

    Read Response

    Data: 4 Byte 0x00000000 ~ 0xFFFFFFFF

    ID

    0x01

    FC

    0x46

    SA

    0x0000

    R/W

    0x00

    Read Request

    Value

    Data

    Model: DAU01-MOD2008-4AI+4AOO

    32

  • www.ewinsonic.com/automation

    7.2.3 SA=0x0002 Read/Write the baud rate

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0002

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0002

    R/W

    0x01

    BC

    0x01

    Value

    Data

    Write Request

    Write Response

    Data: 1 Byte Baud rate Bit 7~4:

    ID

    0x01

    FC

    0x46

    SA

    0x0002

    R/W

    0x00

    BC

    0x01

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0002

    R/W

    0x00

    Read Request

    Value

    Data

    0000 = 1200, 0001 = 2400, 0010 = 9600, 0011 = 144000100 = 19200, 0101 = 38400, 0110 = 57600, 0111 = 115200

    Stop bit Bit 3~2:

    Parity Bit 1~0:

    00 = 1 stop bit, 01 = 2 stop bit

    00 = NONE, 01 = Odd, 10 = Even

    Data: 1 Byte Baud rate Bit 7~4: 0000 = 1200, 0001 = 2400, 0010 = 9600, 0011 = 14400

    0100 = 19200, 0101 = 38400, 0110 = 57600, 0111 = 115200

    Stop bit Bit 3~2:

    Parity Bit 1~0:

    00 = 1 stop bit, 01 = 2 stop bit

    00 = NONE, 01 = Odd, 10 = Even

    Model: DAU01-MOD2008-4AI+4AOO

    33

  • www.ewinsonic.com/automation

    7.2.4 SA=0x0003 Read/Write the buzzer frequency

    modbus ID for 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0003

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0003

    R/W

    0x01

    BC

    0x01

    Value

    Data

    Write Request

    Write Response

    Data: 1 Byte (default:0x00)

    ID

    0x01

    FC

    0x46

    SA

    0x0003

    R/W

    0x00

    BC

    0x01

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0003

    R/W

    0x00

    Read Request

    Value

    Data

    0x00 = OFF, 0x01 = 10Hz, 0x02 = 1000Hz, 0x03 = 2700Hz

    Data: 1 Byte (default:0x00)

    0x00 = OFF, 0x01 = 10Hz, 0x02 = 1000Hz, 0x03 = 2700Hz

    Model: DAU01-MOD2008-4AI+4AOO

    34

  • www.ewinsonic.com/automation

    7.2.5 SA=0x0004 Read/Write the Network Configuration

    modbus ID for 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0004

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0004

    R/W

    0x01

    BC

    0x02

    Value

    Data

    Write Request

    Write Response

    Data: 2 Bytes (High byte + Low byte), range (0x0000~0x0707)High byte 8bits: 0000 0MNPP bit : 1 to change the MBAP status, 0 means no change the MBAP statusN bit : 1 to change the DHCP status, 0 means no change the DHCP statusM bit : 1 to change the UDP status, 0 means no change the UDP statusLow byte 8bits: 0000 0RSTT bit : 1 to enable the MBAP , 0 to disable the MBAP.S bit : 1 to enable the DHCP , 0 to disable the DHCP R bit : 1 to enable the UDP , 0 to disable the UDP

    ID

    0x01

    FC

    0x46

    SA

    0x0004

    R/W

    0x00

    BC

    0x02

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0004

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 2 Bytes (High byte + Low byte), range (0x0000~0x0707)High byte 8bits: 0000 0MNPP bit : 1 to change the MBAP status, 0 means no change the MBAP statusN bit : 1 to change the DHCP status, 0 means no change the DHCP statusM bit : 1 to change the UDP status, 0 means no change the UDP statusLow byte 8bits: 0000 0RSTT bit : 1 to enable the MBAP , 0 to disable the MBAP.S bit : 1 to enable the DHCP , 0 to disable the DHCP R bit : 1 to enable the UDP , 0 to disable the UDP

    The read default value is 0x0701 enable MBAP and disable DHCP and UDP

    Model: DAU01-MOD2008-4AI+4AOO

    35

  • www.ewinsonic.com/automation

    7.2.6 SA=0x0005 Read/Write web port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0005

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0005

    R/W

    0x01

    BC

    0x02

    Value

    Data

    Write Request

    Write Response

    Data: 2 Byte 0x0000~0XFFFF (default:0x0050 is 80(Decimal))

    ID

    0x01

    FC

    0x46

    SA

    0x0005

    R/W

    0x00

    BC

    0x02

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0005

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 2 Byte 0x0000~0XFFFF (default:0x0050 is 80(Decimal))

    Model: DAU01-MOD2008-4AI+4AOO

    36

  • www.ewinsonic.com/automation

    7.2.7 SA=0x0006 Read/Write TCP port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0006

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0006

    R/W

    0x01

    BC

    0x02

    Value

    Data

    Write Request

    Write Response

    Data: 2 Byte 0x0000~0XFFFF (default:0x01F6 is 502(Decimal))

    ID

    0x01

    FC

    0x46

    SA

    0x0006

    R/W

    0x00

    BC

    0x02

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0006

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 2 Byte 0x0000~0XFFFF default:0x01F6 is 502(Decimal)

    Model: DAU01-MOD2008-4AI+4AOO

    37

  • www.ewinsonic.com/automation

    7.2.8 SA=0x0007 Read/Write UDP port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0007

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0007

    R/W

    0x01

    BC

    0x02

    Value

    Data

    Model: DAU01-MOD2008-4AI+4AOO

    Write Request

    Write Response

    Data: 2 Byte 0x0000~0XFFFF (default:0x01F6 is 502(Decimal))

    ID

    0x01

    FC

    0x46

    SA

    0x0007

    R/W

    0x00

    BC

    0x02

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0007

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 2 Byte 0x0000~0XFFFF default:0x01F6 is 502(Decimal)

    38

  • www.ewinsonic.com/automation

    7.2.9 SA=0x0008 Read/Write Ethernet IP port

    Model: DAU01-MOD2008-4AI+4AOO

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0008

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0008

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    ID

    0x01

    FC

    0x46

    SA

    0x0008

    R/W

    0x00

    BC

    0x04

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0008

    R/W

    0x00

    Read Request

    Value

    Data

    The default value is 0x6401A8C0 which

    Bit 31~24(64):100(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.100

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    The default value is 0x6401A8C0 which

    Bit 31~24(64):100(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.100

    39

  • www.ewinsonic.com/automation

    When the connection was established then it can send the MODBUS command to

    read/write the command to module. For example to click the” TC”

    (Test Center) to send command to the module.

    Configure the module by sending the System Configuration Modbus RTU

    command and the command set can refer the Section 7 and 8.

    7.2.10 SA=0x0009 Read/Write Mask IP port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0009

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0009

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    ID

    0x01

    FC

    0x46

    SA

    0x0009

    R/W

    0x00

    BC

    0x04

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0009

    R/W

    0x00

    Read Request

    Value

    Data

    The default value is 0xFFFFFFFF which

    Bit 31~24(FF):255(D), Bit 23~16(FF):255(D), Bit 15~8(FF):255(D), Bit 7~0 (FF):255(D).The IP is 255.255.255.255

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    The default value is 0xFFFFFFFF which

    Bit 31~24(FF):255(D), Bit 23~16(FF):255(D), Bit 15~8(FF):255(D), Bit 7~0 (FF):255(D).The IP is 255.255.255.255

    Model: DAU01-MOD2008-4AI+4AOO

    40

  • www.ewinsonic.com/automation

    7.2.11 SA=0x000A Read/Write Gateway IP port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000A

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000A

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    ID

    0x01

    FC

    0x46

    SA

    0x000A

    R/W

    0x00

    BC

    0x04

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x000A

    R/W

    0x00

    Read Request

    Value

    Data

    The default value is 0x0101A8C0 which

    Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    The default value is 0x0101A8C0 which

    Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1

    Model: DAU01-MOD2008-4AI+4AOO

    41

  • www.ewinsonic.com/automation

    7.2.12 SA=0x000B Read/Write DNS1 port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000B

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000B

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    ID

    0x01

    FC

    0x46

    SA

    0x000B

    R/W

    0x00

    BC

    0x04

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x000B

    R/W

    0x00

    Read Request

    Value

    Data

    The default value is 0x0101A8C0 which

    Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D)The IP is 192.168.1.1

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    The default value is 0x0101A8C0 which

    Bit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1

    Model: DAU01-MOD2008-4AI+4AOO

    42

  • www.ewinsonic.com/automation

    7.2.13 SA=0x000C Read/Write DNS2 port

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000C

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000C

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    ID

    0x01

    FC

    0x46

    SA

    0x000C

    R/W

    0x00

    BC

    0x04

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x000C

    R/W

    0x00

    Read Request

    Value

    Data

    The default value is 0x08080808 which

    Bit 31~24(08):8(D), Bit 23~16(08):8(D), Bit 15~8(08):8(D), Bit 7~0 (08):8(D)The IP is 8.8.8.8

    Data: 4 Byte 0x00000000~0XFFFFFFFF

    The default value is 0x08080808 which

    Bit 31~24(08):8(D), Bit 23~16(08):8(D), Bit 15~8(08):8(D), Bit 7~0 (08):8(D)The IP is 8.8.8.8

    Model: DAU01-MOD2008-4AI+4AOO

    43

  • www.ewinsonic.com/automation

    Model: DAU01-MOD2008-4AI+4AOO

    7.2.14 SA=0x000D Gateway Host IP

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000D

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000D

    R/W

    0x01

    BC

    0x04

    Value

    Data

    Write Request

    Write Response

    Data: 4 Byte 0x00000000~0XFFFFFFFFThe default value is 0x0101A8C0 whichBit 31~24(01):1(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1

    ID

    0x01

    FC

    0x46

    SA

    0x000D

    R/W

    0x01

    BC

    0x04

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x000D

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 4 Byte 0x00000000~0XFFFFFFFFThe default value is 0x0101A8C0 whichBit 31~24(64):100(D), Bit 23~16(01):1(D), Bit 15~8( A8):168(D), Bit 7~0 (C0):192(D).The IP is 192.168.1.1

    44

  • Model: DAU01-MOD2008-4AI+4AOO

    www.ewinsonic.com/automation

    7.2.15 SA=0x000E Read/Write password

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000E

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x000E

    R/W

    0x00

    BC

    0x10

    Value

    Data

    Write Request

    Write Response

    Data: 16 Byte, Each byte range are

    ID

    0x01

    FC

    0x46

    SA

    0x000E

    R/W

    0x00

    BC

    0x10

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x000E

    R/W

    0x00

    Read Request

    Value

    Data

    0X30(0)~0x39(9), 0x41(A)~0x5A(Z),0x61(a)~0x7A(z)

    Data: 16 Byte, Each byte range are

    0X30(0)~0x39(9), 0x41(A)~0x5A(Z),0x61(a)~0x7A(z)

    The default value is :

    1

    0x61 0x64 0x6D 0x69 0x6E 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

    0x00

    The default value is :

    1

    0x61 0x64 0x6D 0x69 0x6E 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

    0x00

    The ASCII code represent 0x61:a,0x64:d,0x6D:m,0x69:i,0x6E:n

    The password is admin

    The ASCII code represent 0x61:a,0x64:d,0x6D:m,0x69:i,0x6E:n

    The password is admin

    45

  • www.ewinsonic.com/automation

    7.2.16 SA=0x0100 Read/Write RTC

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0100

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0100

    R/W

    0x01

    BC

    0x06

    Value

    Data

    1,sec

    0x00~0x3B

    2,min

    0x00~0x3B

    3,hour

    0x00~0x17

    4,date

    0x01~0x1F

    5,month

    0x01~0x0C

    6,year

    0x00~0x63

    Write Request

    Write Response

    Data: 6 Byte, Each byte range are:

    ID

    0x01

    FC

    0x46

    SA

    0x0100

    R/W

    0x00

    BC

    0x06

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0100

    R/W

    0x00

    Read Request

    Value

    Data

    For example the value is 0x28 2D 0A 05 05 10 0x28:40 secs, 0x2D:45 mins, 0x0A:10 hours0x05 :5 dates, 0x05:5 months, 0x10:16 Year(2016)The RTC time is 2016/May/5/10:45:40

    1,sec

    0x00~0x3B

    2,min

    0x00~0x3B

    3,hour

    0x00~0x17

    4,date

    0x01~0x1F

    5,month

    0x01~0x0C

    6,year

    0x00~0x63

    Data: 6 Byte, Each byte range are:

    For example the value is 0x28 2D 0A 05 05 10 0x28:40 secs, 0x2D:45 mins, 0x0A:10 hours0x05 :5 dates, 0x05:5 months, 0x10:16 Year(2016)The RTC time is 2016/May/5/10:45:40

    Model: DAU01-MOD2008-4AI+4AOO

    46

  • www.ewinsonic.com/automation

    7.2.17 SA=0x0200 Read Last boot time

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0200

    R/W

    0x00

    BC

    0x06

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0200

    R/W

    0x00

    Read Request

    Value

    Data

    1,sec

    0x00~0x3B

    2,min

    0x00~0x3B

    3,hour

    0x00~0x17

    4,date

    0x01~0x1F

    5,month

    0x01~0x0C

    6,year

    0x00~0x63

    Data: 6 Byte, Each byte range are:

    For example the value is 0x28 2D 0A 05 05 10 0x28:40 secs, 0x2D:45 mins, 0x0A:10 hours0x05 :5 dates, 0x05:5 months, 0x10:16 Year(2016)The Last boot time is 2016/May/5/10:45:40

    7.2.18 SA=0x0202 Read mode status is INIT or Normal mode

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0202

    R/W

    0x00

    BC

    0x01

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0202

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 1 Byte, The value

    0x00:INIT mode0x01:Normal mode

    Model: DAU01-MOD2008-4AI+4AOO

    47

  • www.ewinsonic.com/automation

    7.2.19 SA=0x0203 Read EEPROM status

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0203

    R/W

    0x00

    BC

    0x01

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0203

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 1 Byte, The value

    0x00:Okay0x01:Error

    Model: DAU01-MOD2008-4AI+4AOO

    48

  • www.ewinsonic.com/automation

    When the connection was established then it can send the MODBUS command to

    read/write the command to module. For example to click the” TC”

    (Test Center) to send command to the module.

    Configure the module by sending the System Configuration Modbus RTU

    command and the command set can refer the Section 7 and 8.

    7.2.20 SA=0x0204 Read module name

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0204

    R/W

    0x00

    BC

    0x20

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0204

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 32 Byte, The default module name is :

    1

    0x44 0x41 0x55 0x30 0x31 0x2D 0x4D 0x4F 0x44 0x32 0x30 0x31 0x36 0x2D 0x38

    2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

    0x44

    17

    0x49 0x2B 0x38 0x44 0x4F 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    18 19 20 21 22 23 24 25 26 27 28 29 30 31 32

    0x00

    0x44:D0x41:A0x55:U0x30:00x31:10x2D:-0x4D:M0x4F:O

    The module name is DAU01-MOD2008-4AI+4AO

    0x44:D0x32:20X30:00x31:10x36:60x2D:-0x38:8Ox44:D

    0x49:I0x2B:+0x38:80x44:D0x4F:O

    Model: DAU01-MOD2008-4AI+4AOO

    49

  • Model: DAU01-MOD2008-4AI+4AOO

    www.ewinsonic.com/automation

    7.2.21 SA=0x0205 Read Serial number

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0205

    R/W

    0x00

    BC

    0x10

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0205

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 16 Byte, Each byte range is 0X30(0)~0x39(9)For example is :

    1

    0x31 0x35 0x30 0x34 0x30 0x30 0x30 0x30 0x30 0x38 0x00 0x00 0x00 0x00 0x00

    2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

    0x00

    The ASCII code represent 0x31:1,0x35:5,0x30:0,0x34:4,0x38:8 So the serial number is 1504000008

    50

  • www.ewinsonic.com/automation

    7.2.22 SA=0x0206 Read Firmware Version

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0206

    R/W

    0x00

    BC

    0x10

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0206

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 16 Byte, Each byte range is 0X30(0)~0x39(9) and 0x2E(.)For example :

    1

    0x33 0x2E 0x32 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

    0x00

    0x33:30x2E:.0x32:2The Firmware version is 3.2

    Model: DAU01-MOD2008-4AI+4AOO

    51

  • www.ewinsonic.com/automation

    7.2.23 SA=0x0207 Read MAC address

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0207

    R/W

    0x00

    BC

    0x0C

    Read Response

    ID

    0x01

    FC

    0x46

    SA

    0x0207

    R/W

    0x00

    Read Request

    Value

    Data

    Data: 12 Byte, Each byte range are 0X30(0)~0x39(9),0x41(A)~0x5A(Z),0x61(a)~0x7A(z)For example :

    LSB

    0x43 0x43 0x30 0x34 0x41 0x33 0x43 0x43 0x43 0x43 0x43

    MSB

    0x43

    The ASCII code represent 0x43:C,0x30:0,0x34:4,0x41:A,0x33:3So the MAC address is CC:04:A3:CC:CC:CC

    7.2.24 SA=0x0300 Write Save setting

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0300

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0300

    R/W

    0x01

    BC

    0x01

    Value

    0x01

    Write Request

    Write Response

    Model: DAU01-MOD2008-4AI+4AOO

    52

  • www.ewinsonic.com/automation

    7.2.25 SA=0x0301 Write Restore value

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0301

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0301

    R/W

    0x01

    BC

    0x01

    Value

    0x01

    Write Request

    Write Response

    7.2.26 SA=0x0302 Write Reboot the module

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0302

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0302

    R/W

    0x01

    BC

    0x01

    Value

    0x01

    Write Request

    Write Response

    7.2.27 SA=0x0303 Write Update network configuration

    modbus ID for ex. 0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0303

    R/W

    0x01

    ID

    0x01

    FC

    0x46

    SA

    0x0303

    R/W

    0x01

    BC

    0x01

    Value

    0x01

    Write Request

    Write Response

    Model: DAU01-MOD2008-4AI+4AOO

    53

  • www.ewinsonic.com/automation

    7.3 System Command Example:

    Request: 01 46 00 00 01 01 11 95 3A (ID change to 17(Hex 11))

    Response: 01 46 00 00 01 CD 48

    ID :01

    Function code :46

    Starting Address : 00 00

    Read(00) or Write(01) :01

    Byte Count: 01

    Value : 11 set ID as 11 (17 decimal)

    Check sum : 95 3A

    Note: After the System Command setting MUST do the Save Setting Command to the

    EEPROM

    Request : 01 46 03 00 01 01 01 D0 F6 (Save Setting to the EEPROM)

    Response : 01 46 03 00 01 3D 48

    ID :01

    Function code :46

    Starting Address : 03 00

    Read(00) or Write(01) :01

    Byte Count: 01

    Value : 01

    Check sum : D0 F6

    Model: DAU01-MOD2008-4AI+4AOO

    54

  • www.ewinsonic.com/automation

    8. DAU01-MOD2008-4AI+4AO Analog Input, Output Command

    8.1 Analog Output Default Output Enable Command Function Code 0x01 and 0x05

    8.1.1 Analog default output enable list

    Starting Address

    0x208

    0x209

    0x20A

    0x20B

    Description

    AO 1 default output enable

    AO 2 default output enable

    AO 3 default output enable

    AO 4 default output enable

    Function Code

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    1,5

    Model: DAU01-MOD2008-4AI+4AOO

    55

  • www.ewinsonic.com/automation

    8.1.2 Command Format

    Read Request

    Function code

    1 Byte

    0x01

    Starting Address

    2 Bytes

    0x0208~0x020B

    Quantity of coils

    2 Bytes

    0x0001

    Read Response

    Data : 0x01 is default output enable, 0x00 is default output disable

    Function code

    1 Byte

    0x01

    Byte count

    1 Bytes

    0x01

    Byte count

    1 Bytes

    data

    Error Response

    Function code

    1 Byte

    0x81

    Eception Code

    1 Bytes

    Data

    Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length

    Model: DAU01-MOD2008-4AI+4AOO

    56

  • Data : 0xFF00 is default output enable, 0x0000 is default output disable

    Function code

    1 Byte

    0x05

    Output Address

    2 Bytes

    0x0208~0x020B

    Output value

    2 Byte

    Data

    Write Response

    Data : 0xFF00 is default output enable, 0x0000 is default output disable

    Function code

    1 Byte

    0x05

    Output Address

    2 Bytes

    0x0208~0x020B

    Output value

    2 Byte

    Data

    www.ewinsonic.com/automation

    8.1.3 Command Example:

    Request: 01 01 02 08 00 01 7D B0 (Read AO1 1 default output enable status)

    Response: 01 01 01 01 90 48

    Request:

    ID :01

    Function code :01

    Starting Address : 02 08

    Quantity of coil :00 01

    Check sum :7D B0

    Write Request

    Error Response

    Function code

    1 Byte

    0x85

    Eception Code

    1 Bytes

    Data

    Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length

    Response :

    ID :01

    Function code :01

    Byte Count: 01

    Coil status Value : 01 , read 01 is enable

    Check sum : 90 48

    Model: DAU01-MOD2008-4AI+4AOO

    57

  • www.ewinsonic.com/automation

    8.2 Analog Output value and default output value Command Function Code 0x03,0x06

    8.2.1 Analog Output Vaue and Default Output Value list

    Starting Address

    0x200

    0x201

    0x202

    0x203

    0x208

    0x209

    0x20A

    0x20B

    0x210

    0x211

    0x212

    0x213

    0x218

    0x219

    0x21A

    0x21B

    Description

    AO 1(Hex value)

    AO 2(Hex value)

    AO 3(Hex Value)

    AO 4(Hex Value)

    AO 1 default value (Hex Value)

    AO 2 default value (Hex Value)

    AO 3 default value (Hex Value)

    AO 4 default value (Hex Value)

    AO 1 (Decimal value)

    AO 2 (Decimal value)

    AO 3 (Decimal Value)

    AO 4 (Decimal Value)

    AO 1 default value (Decimal Value)

    AO 2 default value ((Decimal Value)

    AO 3 default value (Decimal Value)

    AO 4 default value (Decimal Value)

    Function Code

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    3,6

    Model: DAU01-MOD2008-4AI+4AOO

    58

  • www.ewinsonic.com/automation

    8.2.2 Command Format

    Read Request

    Function code

    1 Byte

    0x03

    Starting Address

    2 Bytes

    0x0200~0x021B

    Quantity of coils

    2 Bytes

    0x0001

    Read Response

    Data : 2 byte, 0x0000~0xFFFF

    Function code

    1 Byte

    0x03

    Byte count

    1 Bytes

    0x02

    Register Value

    2 Byte

    data

    1V (0x019A=410)

    2V (0x0333=819)

    3V (0x04CD=1229)

    4V (0x0666=1638)

    5V (0x0800=2048)

    6V (0x0999=2457)

    7V (0x0B33=2867)

    8V (0x0CCC=3276)

    9V (0x0E66=3686)

    10V (0x0FFF=4095)

    2.503mA (0x019A=410)

    5.00mA (0x0333=819)

    7.503mA (0x04CD=1229)

    10.000mA (0x0666=1638)

    12.503mA (0x0800=2048)

    15.000mA (0x0999=2457)

    17.503mA (0x0B33=2867)

    20.000mA (0x0CCC=3276)

    22.503mA (0x0E66=3686)

    25.000mA (0x0FFF=4095)

    (1)Hex value (Address:0x0200~0x020B): Voltage Data: 0x0000(0V) ~0x0FFF(4095 is 10V): Current Data: 0x0000(0mA) ~0x0FFF(4095 is 25mA):

    The hex value is liner characteristic from 0mA(0x0000) to 25mA(0x0FFFF)The range is upto 20mA (0x0CCC=3276)

    1V (0x03E8=1000)

    2V (0X07D0=2000)

    3V (0x0BB8=3000)

    4V (0x0FA0=4000)

    5V (0x1388=5000)

    6V (0x1770=6000)

    7V (0x1B58=7000)

    8V (0x1F40=8000)

    9V (0x2328=9000)

    10V(0x2710=10000)

    2.503mA(0x09C7=2503)

    5.000mA(0x1388=5000)

    7.503mA(0x1D4F=7503)

    10.000mA(0x2710=10000)

    12.503mA(0x30D7=12503)

    15.000mA(0x3A98=15000)

    17.503mA(0x445F=17503)

    20.000mA(0x4E20=20000)

    22.503mA(0x57E7=22503)

    24.000mA(0x5DC0=24000)

    25.000mA(0x61A8=25000)

    (2) Decimal Value (Address 0x0210~0x021B): Voltage Data: 0x0000(0V) ~0x2710 (10000 is 10V):

    The hex value is liner characteristic from

    0V(0x0000) to 10V(0x0FFFF)

    Current Data: 0x0000(0 is 0mA) ~0x61A8(25000 is 25mA):The decimal value is liner characteristic from 0mA(0x0000) to 25mA(0x61A8)The range is upto 20mA (0x4E20=20000)

    Model: DAU01-MOD2008-4AI+4AOO

    The decimal value is liner characteristic

    from 0V(0x0000) to 10V(0x2710)

    59

  • Model: DAU01-MOD2008-4AI+4AOO

    www.ewinsonic.com/automation

    Error Response

    Function code

    1 Byte

    0x83

    Eception Code

    1 Bytes

    Data

    Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length

    Error Response

    Function code

    1 Byte

    0x86

    Eception Code

    1 Bytes

    Data

    Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length

    Write Request

    Function code

    1 Byte

    0x06

    Starting Address

    2 Bytes

    0x0200~0x021B

    Quantity of coils

    2 Bytes

    0x06

    Write Response

    Function code

    1 Byte

    0x06

    Regiser Address

    2 Bytes

    0x0200~0x021B

    Register value

    2 Byte

    Data

    8.2.3 Command Example

    Request: 01 03 02 10 00 01 84 77 (Read AO1 Decimal value)

    Response: 01 03 02 17 71 77 90

    Request:

    ID :01

    Function code :03

    Starting Address : 02 10

    Quantity of coil :00 01

    Check sum :84 77

    Response :

    ID :01

    Function code :03

    Byte Count: 02

    Register Value : 1771 , read AO1 value 6001(0x1771) is 6.001V

    Check sum : 77 90

    Data : 2 byte, 0x0000~0xFFFF, The Data format is same as above Function Code 0x03 with Hex and Decimal value.

    Data : 2 byte, 0x0000~0xFFFF, The Data format is same as above Function Code 0x03 with Hex and Decimal value.

    60

  • www.ewinsonic.com/automation

    8.3.1 Analog Input value list

    8.3 Analog Input Value Command Fuction Code 0x04

    Model: DAU01-MOD2008-4AI+4AOO

    Starting Address

    0x200

    0x201

    0x202

    0x203

    0x210

    0x211

    0x212

    0x213

    Description

    AI 1(Hex value)

    AI 2(Hex value)

    AI 3(Hex Value)

    AI 4(Hex Value)

    AI 1 (Decimal value)

    AI 2 (Decimal value)

    AI 3 (Decimal Value)

    AI 4 (Decimal Value)

    Function Code

    4

    4

    4

    4

    4

    4

    4

    4

    61

  • www.ewinsonic.com/automation

    8.3.2 Command Format

    Read Request

    Function code

    1 Byte

    0x04

    Starting Address

    2 Bytes

    0x0200~0x0213

    Quantity of input register

    2 Bytes

    0x0001

    Read Response

    Data : 2 byte, 0x0000~0xFFFF

    Function code

    1 Byte

    0x04

    Byte count

    2 Bytes

    0x02

    Input Register

    2 Byte

    data

    1V (0x019A=410)

    2V (0x0333=819)

    3V (0x04CD=1229)

    4V (0x0666=1638)

    5V (0x0800=2048)

    6V (0x0999=2457)

    7V (0x0B33=2867)

    8V (0x0CCC=3276)

    9V (0x0E66=3686)

    10V (0x0FFF=4095)

    (1)Hex value (Address:0x0200~0x0203):

    Voltage Data: 0x0000(0V) ~0x0FFF(4095 is 10V):

    The hex value is liner characteristic from 0V(0x0000) to 10V(0x0FFFF)

    1V (0x03E8=1000)

    2V (0X07D0=2000)

    3V (0x0BB8=3000)

    4V (0x0FA0=4000)

    5V (0x1388=5000)

    6V (0x1770=6000)

    7V (0x1B58=7000)

    8V (0x1F40=8000)

    9V (0x2328=9000)

    10V(0x2710=10000)

    (2) Decimal Value (Address 0x0210~0x0213):

    Voltage Data: 0x0000(0V) ~0x2710 (10000 is 10V):

    The decimal value is liner characteristic from 0V(0x0000) to 10V(0x2710)

    Error Response

    Function code

    1 Byte

    0x84

    Exception Code

    1 Bytes

    Data

    Data : 0x01 is illegal function , 0x02 is illegal data address, 0x03 is illegal data value or length

    Model: DAU01-MOD2008-4AI+4AOO

    62

  • www.ewinsonic.com/automation

    8.3.3 Command Example

    Request: 01 04 02 10 00 01 31 B7 (Read AI 1 input Voltage Decimal value)

    Response: 01 04 02 03 EA 38 4F

    Request:

    ID :01

    Function code :04

    Starting Address : 02 10

    Quantity of input register :00 01

    Check sum :31 B7

    Response :

    ID :01

    Function code :04

    Byte Count: 02

    Input register : 03 EA , read AI 1 input voltage

    value is 0x03EA=1002(D)=1.002V

    Check sum : 38 4F

    Model: DAU01-MOD2008-4AI+4AOO

    63

  • www.ewinsonic.com/automation

    9. Appendix

    MODBUS DIO module

    DAU01-MOD2008-4AI+4AOO Modbus IO unit with 4 Analog Input, 4 Analog output

    Model: DAU01-MOD2008-4AI+4AOO

    64